diff --git a/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf index cba5bceac24..f08210f51e6 100644 --- a/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf +++ b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf @@ -3,25 +3,25 @@ 1 0 obj << /Type /Pages -/Kids [ 6 0 R 8 0 R 38 0 R 76 0 R 114 0 R 152 0 R 186 0 R 222 0 R 258 0 R 292 0 R 304 0 R 309 0 R 313 0 R 315 0 R 318 0 R 321 0 R 345 0 R 370 0 R 403 0 R 436 0 R 460 0 R 499 0 R 505 0 R 508 0 R 511 0 R 514 0 R 516 0 R 519 0 R 521 0 R 524 0 R 527 0 R 529 0 R 532 0 R 534 0 R 537 0 R 540 0 R 542 0 R 545 0 R 547 0 R 550 0 R 553 0 R 555 0 R 559 0 R 562 0 R 565 0 R 567 0 R 570 0 R 572 0 R 575 0 R 577 0 R 580 0 R 583 0 R 585 0 R 588 0 R 591 0 R 593 0 R 596 0 R 598 0 R 601 0 R 604 0 R 606 0 R 609 0 R 611 0 R 614 0 R 617 0 R 619 0 R 622 0 R 624 0 R 627 0 R 630 0 R 632 0 R 635 0 R 637 0 R 640 0 R 643 0 R 645 0 R 667 0 R 676 0 R 679 0 R 683 0 R 686 0 R 689 0 R 692 0 R 694 0 R 698 0 R 700 0 R 703 0 R 705 0 R 708 0 R 710 0 R 713 0 R 715 0 R 718 0 R 720 0 R 722 0 R 725 0 R 727 0 R 730 0 R 732 0 R 735 0 R 737 0 R 739 0 R 741 0 R 744 0 R 746 0 R 749 0 R 753 0 R 762 0 R 770 0 R 772 0 R 777 0 R 782 0 R 788 0 R 792 0 R 796 0 R 802 0 R 806 0 R 810 0 R 813 0 R 815 0 R 840 0 R 851 0 R 854 0 R 858 0 R 861 0 R 878 0 R 885 0 R 887 0 R 889 0 R 891 0 R ] -/Count 130 +/Kids [ 6 0 R 8 0 R 38 0 R 76 0 R 114 0 R 152 0 R 186 0 R 222 0 R 258 0 R 292 0 R 304 0 R 309 0 R 313 0 R 315 0 R 318 0 R 323 0 R 325 0 R 349 0 R 374 0 R 407 0 R 440 0 R 464 0 R 503 0 R 508 0 R 511 0 R 514 0 R 516 0 R 519 0 R 521 0 R 524 0 R 527 0 R 529 0 R 532 0 R 534 0 R 537 0 R 540 0 R 542 0 R 545 0 R 548 0 R 550 0 R 553 0 R 555 0 R 559 0 R 562 0 R 565 0 R 567 0 R 570 0 R 572 0 R 575 0 R 578 0 R 580 0 R 583 0 R 586 0 R 588 0 R 591 0 R 593 0 R 596 0 R 599 0 R 601 0 R 604 0 R 607 0 R 609 0 R 612 0 R 614 0 R 617 0 R 620 0 R 622 0 R 625 0 R 627 0 R 630 0 R 633 0 R 635 0 R 638 0 R 641 0 R 643 0 R 660 0 R 674 0 R 677 0 R 680 0 R 683 0 R 686 0 R 689 0 R 692 0 R 694 0 R 698 0 R 700 0 R 703 0 R 705 0 R 708 0 R 710 0 R 713 0 R 715 0 R 717 0 R 720 0 R 722 0 R 725 0 R 727 0 R 730 0 R 732 0 R 734 0 R 737 0 R 739 0 R 741 0 R 743 0 R 746 0 R 748 0 R 751 0 R 755 0 R 764 0 R 772 0 R 774 0 R 779 0 R 784 0 R 790 0 R 794 0 R 798 0 R 804 0 R 808 0 R 812 0 R 815 0 R 817 0 R 842 0 R 853 0 R 856 0 R 860 0 R 863 0 R 880 0 R 887 0 R 889 0 R 891 0 R 893 0 R ] +/Count 131 >> endobj 2 0 obj << /Title (CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6) /Creator (pandoc) -/Producer (WeasyPrint 54.1) +/Producer (WeasyPrint 54.2) >> endobj 3 0 obj << /Type /Catalog /Pages 1 0 R -/Outlines 1053 0 R +/Outlines 1055 0 R /Names << /Dests << -/Names [ (TOC) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (api-server) [ 508 0 R /XYZ 41.740157 784.430079 0 ] (apply-security-context-to-your-pods-and-containers-manual) [ 889 0 R /XYZ 84.259843 324.051496 0 ] (authentication-and-authorization) [ 739 0 R /XYZ 41.740157 784.430079 0 ] (cb1) [ 315 0 R /XYZ 84.259843 207.170079 0 ] (cb1-1) [ 315 0 R /XYZ 101.433071 205.473057 0 ] (cb101) [ 624 0 R /XYZ 84.259843 715.370079 0 ] (cb101-1) [ 624 0 R /XYZ 101.433071 713.673057 0 ] (cb104) [ 627 0 R /XYZ 84.259843 241.820079 0 ] (cb104-1) [ 627 0 R /XYZ 101.433071 240.123057 0 ] (cb107) [ 632 0 R /XYZ 84.259843 463.070079 0 ] (cb107-1) [ 632 0 R /XYZ 101.433071 461.373057 0 ] (cb11) [ 436 0 R /XYZ 84.259843 543.320079 0 ] (cb11-1) [ 436 0 R /XYZ 101.433071 541.623057 0 ] (cb11-10) [ 436 0 R /XYZ 99.933071 333.205821 0 ] (cb11-11) [ 436 0 R /XYZ 99.933071 314.258799 0 ] (cb11-12) [ 436 0 R /XYZ 99.933071 295.311778 0 ] (cb11-13) [ 436 0 R /XYZ 99.933071 276.364756 0 ] (cb11-14) [ 436 0 R /XYZ 99.933071 257.417735 0 ] (cb11-15) [ 436 0 R /XYZ 99.933071 238.470714 0 ] (cb11-16) [ 436 0 R /XYZ 99.933071 219.523692 0 ] (cb11-17) [ 436 0 R /XYZ 99.933071 200.576671 0 ] (cb11-18) [ 436 0 R /XYZ 99.933071 181.629649 0 ] (cb11-19) [ 436 0 R /XYZ 99.933071 162.682628 0 ] (cb11-2) [ 436 0 R /XYZ 99.933071 522.676036 0 ] (cb11-20) [ 436 0 R /XYZ 99.933071 143.735606 0 ] (cb11-21) [ 436 0 R /XYZ 99.933071 124.788585 0 ] (cb11-22) [ 436 0 R /XYZ 99.933071 105.841563 0 ] (cb11-23) [ 460 0 R /XYZ 99.933071 799.173057 0 ] (cb11-24) [ 460 0 R /XYZ 99.933071 780.226036 0 ] (cb11-25) [ 460 0 R /XYZ 99.933071 761.279014 0 ] (cb11-26) [ 460 0 R /XYZ 99.933071 742.331993 0 ] (cb11-27) [ 460 0 R /XYZ 99.933071 723.384971 0 ] (cb11-28) [ 460 0 R /XYZ 99.933071 704.437950 0 ] (cb11-29) [ 460 0 R /XYZ 99.933071 685.490928 0 ] (cb11-3) [ 436 0 R /XYZ 99.933071 503.729014 0 ] (cb11-30) [ 460 0 R /XYZ 99.933071 666.543907 0 ] (cb11-31) [ 460 0 R /XYZ 99.933071 647.596885 0 ] (cb11-32) [ 460 0 R /XYZ 99.933071 628.649864 0 ] (cb11-33) [ 460 0 R /XYZ 99.933071 609.702842 0 ] (cb11-34) [ 460 0 R /XYZ 99.933071 590.755821 0 ] (cb11-35) [ 460 0 R /XYZ 99.933071 571.808799 0 ] (cb11-36) [ 460 0 R /XYZ 99.933071 552.861778 0 ] (cb11-37) [ 460 0 R /XYZ 99.933071 533.914756 0 ] (cb11-38) [ 460 0 R /XYZ 99.933071 514.967735 0 ] (cb11-39) [ 460 0 R /XYZ 99.933071 496.020714 0 ] (cb11-4) [ 436 0 R /XYZ 99.933071 465.834971 0 ] (cb11-40) [ 460 0 R /XYZ 99.933071 477.073692 0 ] (cb11-41) [ 460 0 R /XYZ 99.933071 458.126671 0 ] (cb11-42) [ 460 0 R /XYZ 99.933071 439.179649 0 ] (cb11-43) [ 460 0 R /XYZ 99.933071 420.232628 0 ] (cb11-44) [ 460 0 R /XYZ 99.933071 401.285606 0 ] (cb11-45) [ 460 0 R /XYZ 99.933071 382.338585 0 ] (cb11-46) [ 460 0 R /XYZ 99.933071 363.391563 0 ] (cb11-47) [ 460 0 R /XYZ 99.933071 344.444542 0 ] (cb11-48) [ 460 0 R /XYZ 99.933071 325.497520 0 ] (cb11-49) [ 460 0 R /XYZ 99.933071 306.550499 0 ] (cb11-5) [ 436 0 R /XYZ 99.933071 427.940928 0 ] (cb11-50) [ 460 0 R /XYZ 99.933071 287.603477 0 ] (cb11-51) [ 460 0 R /XYZ 99.933071 268.656456 0 ] (cb11-52) [ 460 0 R /XYZ 99.933071 249.709434 0 ] (cb11-53) [ 460 0 R /XYZ 99.933071 211.815391 0 ] (cb11-54) [ 460 0 R /XYZ 99.933071 192.868370 0 ] (cb11-55) [ 460 0 R /XYZ 99.933071 173.921348 0 ] (cb11-56) [ 460 0 R /XYZ 99.933071 154.974327 0 ] (cb11-57) [ 460 0 R /XYZ 99.933071 136.027305 0 ] (cb11-58) [ 460 0 R /XYZ 99.933071 117.080284 0 ] (cb11-59) [ 460 0 R /XYZ 99.933071 98.133262 0 ] (cb11-6) [ 436 0 R /XYZ 99.933071 408.993907 0 ] (cb11-60) [ 499 0 R /XYZ 99.933071 799.173057 0 ] (cb11-61) [ 499 0 R /XYZ 99.933071 780.226036 0 ] (cb11-7) [ 436 0 R /XYZ 99.933071 390.046885 0 ] (cb11-8) [ 436 0 R /XYZ 99.933071 371.099864 0 ] (cb11-9) [ 436 0 R /XYZ 99.933071 352.152842 0 ] (cb110) [ 637 0 R /XYZ 84.259843 715.370079 0 ] (cb110-1) [ 637 0 R /XYZ 101.433071 713.673057 0 ] (cb113) [ 640 0 R /XYZ 84.259843 241.820079 0 ] (cb113-1) [ 640 0 R /XYZ 101.433071 240.123057 0 ] (cb116) [ 645 0 R /XYZ 84.259843 511.820079 0 ] (cb116-1) [ 645 0 R /XYZ 101.433071 510.123057 0 ] (cb116-10) [ 645 0 R /XYZ 99.933071 282.758799 0 ] (cb116-11) [ 645 0 R /XYZ 99.933071 263.811778 0 ] (cb116-12) [ 645 0 R /XYZ 99.933071 244.864756 0 ] (cb116-13) [ 645 0 R /XYZ 99.933071 225.917735 0 ] (cb116-14) [ 645 0 R /XYZ 99.933071 206.970714 0 ] (cb116-15) [ 645 0 R /XYZ 99.933071 188.023692 0 ] (cb116-16) [ 645 0 R /XYZ 99.933071 169.076671 0 ] (cb116-17) [ 645 0 R /XYZ 99.933071 150.129649 0 ] (cb116-18) [ 645 0 R /XYZ 99.933071 131.182628 0 ] (cb116-19) [ 645 0 R /XYZ 99.933071 112.235606 0 ] (cb116-2) [ 645 0 R /XYZ 99.933071 491.176036 0 ] (cb116-20) [ 645 0 R /XYZ 99.933071 93.288585 0 ] (cb116-21) [ 667 0 R /XYZ 99.933071 799.173057 0 ] (cb116-22) [ 667 0 R /XYZ 99.933071 780.226036 0 ] (cb116-23) [ 667 0 R /XYZ 99.933071 761.279014 0 ] (cb116-24) [ 667 0 R /XYZ 99.933071 742.331993 0 ] (cb116-25) [ 667 0 R /XYZ 99.933071 723.384971 0 ] (cb116-3) [ 645 0 R /XYZ 99.933071 472.229014 0 ] (cb116-4) [ 645 0 R /XYZ 99.933071 434.334971 0 ] (cb116-5) [ 645 0 R /XYZ 99.933071 415.387950 0 ] (cb116-6) [ 645 0 R /XYZ 99.933071 396.440928 0 ] (cb116-7) [ 645 0 R /XYZ 99.933071 377.493907 0 ] (cb116-8) [ 645 0 R /XYZ 99.933071 358.546885 0 ] (cb116-9) [ 645 0 R /XYZ 99.933071 320.652842 0 ] (cb117) [ 667 0 R /XYZ 84.259843 664.134971 0 ] (cb117-1) [ 667 0 R /XYZ 101.433071 662.437950 0 ] (cb12) [ 499 0 R /XYZ 84.259843 720.976036 0 ] (cb12-1) [ 499 0 R /XYZ 101.433071 719.279014 0 ] (cb120) [ 667 0 R /XYZ 84.259843 290.887950 0 ] (cb120-1) [ 667 0 R /XYZ 101.433071 289.190928 0 ] (cb121) [ 676 0 R /XYZ 84.259843 550.251496 0 ] (cb121-1) [ 676 0 R /XYZ 101.433071 548.554475 0 ] (cb124) [ 679 0 R /XYZ 84.259843 715.370079 0 ] (cb124-1) [ 679 0 R /XYZ 101.433071 713.673057 0 ] (cb127) [ 679 0 R /XYZ 84.259843 162.123057 0 ] (cb127-1) [ 679 0 R /XYZ 101.433071 160.426036 0 ] (cb130) [ 683 0 R /XYZ 84.259843 325.820079 0 ] (cb130-1) [ 683 0 R /XYZ 101.433071 324.123057 0 ] (cb133) [ 686 0 R /XYZ 84.259843 500.570079 0 ] (cb133-1) [ 686 0 R /XYZ 101.433071 498.873057 0 ] (cb136) [ 689 0 R /XYZ 84.259843 441.170079 0 ] (cb136-1) [ 689 0 R /XYZ 101.433071 439.473057 0 ] (cb139) [ 694 0 R /XYZ 84.259843 565.251496 0 ] (cb139-1) [ 694 0 R /XYZ 101.433071 563.554475 0 ] (cb142) [ 694 0 R /XYZ 84.259843 214.504475 0 ] (cb142-1) [ 694 0 R /XYZ 101.433071 212.807453 0 ] (cb145) [ 700 0 R /XYZ 84.259843 514.251496 0 ] (cb145-1) [ 700 0 R /XYZ 101.433071 512.554475 0 ] (cb148) [ 705 0 R /XYZ 84.259843 403.070079 0 ] (cb148-1) [ 705 0 R /XYZ 101.433071 401.373057 0 ] (cb15) [ 499 0 R /XYZ 84.259843 392.729014 0 ] (cb15-1) [ 499 0 R /XYZ 101.433071 391.031993 0 ] (cb151) [ 710 0 R /XYZ 84.259843 290.570079 0 ] (cb151-1) [ 710 0 R /XYZ 101.433071 288.873057 0 ] (cb154) [ 715 0 R /XYZ 84.259843 148.070079 0 ] (cb154-1) [ 715 0 R /XYZ 101.433071 146.373057 0 ] (cb157) [ 722 0 R /XYZ 84.259843 715.370079 0 ] (cb157-1) [ 722 0 R /XYZ 101.433071 713.673057 0 ] (cb160) [ 727 0 R /XYZ 84.259843 571.820079 0 ] (cb160-1) [ 727 0 R /XYZ 101.433071 570.123057 0 ] (cb163) [ 732 0 R /XYZ 84.259843 425.570079 0 ] (cb163-1) [ 732 0 R /XYZ 101.433071 423.873057 0 ] (cb166) [ 741 0 R /XYZ 84.259843 595.251496 0 ] (cb166-1) [ 741 0 R /XYZ 101.433071 593.554475 0 ] (cb169) [ 746 0 R /XYZ 84.259843 267.651496 0 ] (cb169-1) [ 746 0 R /XYZ 101.433071 265.954475 0 ] (cb172) [ 749 0 R /XYZ 84.259843 607.820079 0 ] (cb172-1) [ 749 0 R /XYZ 101.433071 606.123057 0 ] (cb174) [ 749 0 R /XYZ 84.259843 298.679014 0 ] (cb174-1) [ 749 0 R /XYZ 101.433071 296.981993 0 ] (cb176) [ 753 0 R /XYZ 84.259843 715.370079 0 ] (cb176-1) [ 753 0 R /XYZ 101.433071 713.673057 0 ] (cb179) [ 753 0 R /XYZ 84.259843 375.479014 0 ] (cb179-1) [ 753 0 R /XYZ 101.433071 373.781993 0 ] (cb179-2) [ 753 0 R /XYZ 99.933071 354.834971 0 ] (cb179-3) [ 753 0 R /XYZ 99.933071 335.887950 0 ] (cb179-4) [ 753 0 R /XYZ 99.933071 279.046885 0 ] (cb179-5) [ 753 0 R /XYZ 99.933071 260.099864 0 ] (cb18) [ 505 0 R /XYZ 84.259843 715.370079 0 ] (cb18-1) [ 505 0 R /XYZ 101.433071 713.673057 0 ] (cb180) [ 753 0 R /XYZ 84.259843 200.849864 0 ] (cb180-1) [ 753 0 R /XYZ 101.433071 199.152842 0 ] (cb182) [ 762 0 R /XYZ 84.259843 655.220079 0 ] (cb182-1) [ 762 0 R /XYZ 101.433071 653.523057 0 ] (cb182-2) [ 762 0 R /XYZ 99.933071 634.576036 0 ] (cb182-3) [ 762 0 R /XYZ 99.933071 615.629014 0 ] (cb182-4) [ 762 0 R /XYZ 99.933071 558.787950 0 ] (cb182-5) [ 762 0 R /XYZ 99.933071 539.840928 0 ] (cb183) [ 762 0 R /XYZ 84.259843 480.590928 0 ] (cb183-1) [ 762 0 R /XYZ 101.433071 478.893907 0 ] (cb185) [ 772 0 R /XYZ 84.259843 490.251496 0 ] (cb185-1) [ 772 0 R /XYZ 101.433071 488.554475 0 ] (cb186) [ 772 0 R /XYZ 84.259843 429.304475 0 ] (cb186-1) [ 772 0 R /XYZ 101.433071 427.607453 0 ] (cb188) [ 772 0 R /XYZ 84.259843 116.807453 0 ] (cb188-1) [ 772 0 R /XYZ 101.433071 115.110432 0 ] (cb189) [ 777 0 R /XYZ 84.259843 772.370079 0 ] (cb189-1) [ 777 0 R /XYZ 101.433071 770.673057 0 ] (cb191) [ 777 0 R /XYZ 84.259843 459.873057 0 ] (cb191-1) [ 777 0 R /XYZ 101.433071 458.176036 0 ] (cb192) [ 777 0 R /XYZ 84.259843 398.926036 0 ] (cb192-1) [ 777 0 R /XYZ 101.433071 397.229014 0 ] (cb194) [ 782 0 R /XYZ 84.259843 799.370079 0 ] (cb194-1) [ 782 0 R /XYZ 101.433071 797.673057 0 ] (cb195) [ 782 0 R /XYZ 84.259843 738.423057 0 ] (cb195-1) [ 782 0 R /XYZ 101.433071 736.726036 0 ] (cb197) [ 782 0 R /XYZ 84.259843 410.926036 0 ] (cb197-1) [ 782 0 R /XYZ 101.433071 409.229014 0 ] (cb198) [ 782 0 R /XYZ 84.259843 349.979014 0 ] (cb198-1) [ 782 0 R /XYZ 101.433071 348.281993 0 ] (cb2) [ 318 0 R /XYZ 84.259843 730.370079 0 ] (cb2-1) [ 318 0 R /XYZ 101.433071 728.673057 0 ] (cb201) [ 788 0 R /XYZ 84.259843 230.570079 0 ] (cb201-1) [ 788 0 R /XYZ 101.433071 228.873057 0 ] (cb202) [ 788 0 R /XYZ 84.259843 169.623057 0 ] (cb202-1) [ 788 0 R /XYZ 101.433071 167.926036 0 ] (cb204) [ 792 0 R /XYZ 84.259843 583.970079 0 ] (cb204-1) [ 792 0 R /XYZ 101.433071 582.273057 0 ] (cb205) [ 792 0 R /XYZ 84.259843 523.023057 0 ] (cb205-1) [ 792 0 R /XYZ 101.433071 521.326036 0 ] (cb207) [ 796 0 R /XYZ 84.259843 700.370079 0 ] (cb207-1) [ 796 0 R /XYZ 101.433071 698.673057 0 ] (cb208) [ 796 0 R /XYZ 84.259843 639.423057 0 ] (cb208-1) [ 796 0 R /XYZ 101.433071 637.726036 0 ] (cb21) [ 508 0 R /XYZ 84.259843 565.251496 0 ] (cb21-1) [ 508 0 R /XYZ 101.433071 563.554475 0 ] (cb210) [ 796 0 R /XYZ 84.259843 296.926036 0 ] (cb210-1) [ 796 0 R /XYZ 101.433071 295.229014 0 ] (cb211) [ 796 0 R /XYZ 84.259843 235.979014 0 ] (cb211-1) [ 796 0 R /XYZ 101.433071 234.281993 0 ] (cb213) [ 802 0 R /XYZ 84.259843 640.370079 0 ] (cb213-1) [ 802 0 R /XYZ 101.433071 638.673057 0 ] (cb214) [ 802 0 R /XYZ 84.259843 579.423057 0 ] (cb214-1) [ 802 0 R /XYZ 101.433071 577.726036 0 ] (cb217) [ 806 0 R /XYZ 84.259843 428.570079 0 ] (cb217-1) [ 806 0 R /XYZ 101.433071 426.873057 0 ] (cb218) [ 806 0 R /XYZ 84.259843 131.823057 0 ] (cb218-1) [ 806 0 R /XYZ 101.433071 130.126036 0 ] (cb219) [ 810 0 R /XYZ 84.259843 799.370079 0 ] (cb219-1) [ 810 0 R /XYZ 101.433071 797.673057 0 ] (cb221) [ 815 0 R /XYZ 84.259843 768.620079 0 ] (cb221-1) [ 815 0 R /XYZ 101.433071 766.923057 0 ] (cb221-10) [ 815 0 R /XYZ 99.933071 596.399864 0 ] (cb221-11) [ 815 0 R /XYZ 99.933071 577.452842 0 ] (cb221-12) [ 815 0 R /XYZ 99.933071 482.717735 0 ] (cb221-13) [ 815 0 R /XYZ 99.933071 463.770714 0 ] (cb221-14) [ 815 0 R /XYZ 99.933071 444.823692 0 ] (cb221-15) [ 815 0 R /XYZ 99.933071 425.876671 0 ] (cb221-16) [ 815 0 R /XYZ 99.933071 406.929649 0 ] (cb221-17) [ 815 0 R /XYZ 99.933071 387.982628 0 ] (cb221-18) [ 815 0 R /XYZ 99.933071 350.088585 0 ] (cb221-19) [ 815 0 R /XYZ 99.933071 331.141563 0 ] (cb221-2) [ 815 0 R /XYZ 99.933071 747.976036 0 ] (cb221-20) [ 815 0 R /XYZ 99.933071 198.512413 0 ] (cb221-21) [ 815 0 R /XYZ 99.933071 179.565391 0 ] (cb221-22) [ 815 0 R /XYZ 99.933071 160.618370 0 ] (cb221-23) [ 815 0 R /XYZ 99.933071 103.777305 0 ] (cb221-24) [ 840 0 R /XYZ 99.933071 799.173057 0 ] (cb221-25) [ 840 0 R /XYZ 99.933071 780.226036 0 ] (cb221-26) [ 840 0 R /XYZ 99.933071 761.279014 0 ] (cb221-27) [ 840 0 R /XYZ 99.933071 742.331993 0 ] (cb221-28) [ 840 0 R /XYZ 99.933071 723.384971 0 ] (cb221-29) [ 840 0 R /XYZ 99.933071 704.437950 0 ] (cb221-3) [ 815 0 R /XYZ 99.933071 729.029014 0 ] (cb221-30) [ 840 0 R /XYZ 99.933071 685.490928 0 ] (cb221-31) [ 840 0 R /XYZ 99.933071 666.543907 0 ] (cb221-4) [ 815 0 R /XYZ 99.933071 710.081993 0 ] (cb221-5) [ 815 0 R /XYZ 99.933071 691.134971 0 ] (cb221-6) [ 815 0 R /XYZ 99.933071 672.187950 0 ] (cb221-7) [ 815 0 R /XYZ 99.933071 653.240928 0 ] (cb221-8) [ 815 0 R /XYZ 99.933071 634.293907 0 ] (cb221-9) [ 815 0 R /XYZ 99.933071 615.346885 0 ] (cb222) [ 840 0 R /XYZ 84.259843 607.293907 0 ] (cb222-1) [ 840 0 R /XYZ 101.433071 605.596885 0 ] (cb225) [ 851 0 R /XYZ 84.259843 434.451496 0 ] (cb225-1) [ 851 0 R /XYZ 101.433071 432.754475 0 ] (cb228) [ 854 0 R /XYZ 84.259843 799.370079 0 ] (cb228-1) [ 854 0 R /XYZ 101.433071 797.673057 0 ] (cb231) [ 854 0 R /XYZ 84.259843 448.229014 0 ] (cb231-1) [ 854 0 R /XYZ 101.433071 446.531993 0 ] (cb234) [ 858 0 R /XYZ 84.259843 799.370079 0 ] (cb234-1) [ 858 0 R /XYZ 101.433071 797.673057 0 ] (cb237) [ 861 0 R /XYZ 84.259843 394.701496 0 ] (cb237-1) [ 861 0 R /XYZ 101.433071 393.004475 0 ] (cb237-10) [ 861 0 R /XYZ 99.933071 222.481281 0 ] (cb237-11) [ 861 0 R /XYZ 99.933071 203.534260 0 ] (cb237-12) [ 861 0 R /XYZ 99.933071 165.640217 0 ] (cb237-13) [ 861 0 R /XYZ 99.933071 127.746174 0 ] (cb237-14) [ 861 0 R /XYZ 99.933071 108.799152 0 ] (cb237-15) [ 861 0 R /XYZ 99.933071 89.852131 0 ] (cb237-16) [ 878 0 R /XYZ 99.933071 799.173057 0 ] (cb237-17) [ 878 0 R /XYZ 99.933071 780.226036 0 ] (cb237-18) [ 878 0 R /XYZ 99.933071 761.279014 0 ] (cb237-19) [ 878 0 R /XYZ 99.933071 742.331993 0 ] (cb237-2) [ 861 0 R /XYZ 99.933071 374.057453 0 ] (cb237-3) [ 861 0 R /XYZ 99.933071 355.110432 0 ] (cb237-4) [ 861 0 R /XYZ 99.933071 336.163410 0 ] (cb237-5) [ 861 0 R /XYZ 99.933071 317.216389 0 ] (cb237-6) [ 861 0 R /XYZ 99.933071 298.269367 0 ] (cb237-7) [ 861 0 R /XYZ 99.933071 279.322346 0 ] (cb237-8) [ 861 0 R /XYZ 99.933071 260.375324 0 ] (cb237-9) [ 861 0 R /XYZ 99.933071 241.428303 0 ] (cb238) [ 878 0 R /XYZ 84.259843 683.081993 0 ] (cb238-1) [ 878 0 R /XYZ 101.433071 681.384971 0 ] (cb24) [ 511 0 R /XYZ 84.259843 106.820079 0 ] (cb24-1) [ 511 0 R /XYZ 101.433071 105.123057 0 ] (cb241) [ 891 0 R /XYZ 84.259843 768.620079 0 ] (cb241-1) [ 891 0 R /XYZ 101.433071 766.923057 0 ] (cb241-10) [ 891 0 R /XYZ 99.933071 596.399864 0 ] (cb241-11) [ 891 0 R /XYZ 99.933071 577.452842 0 ] (cb241-12) [ 891 0 R /XYZ 99.933071 520.611778 0 ] (cb241-13) [ 891 0 R /XYZ 99.933071 501.664756 0 ] (cb241-14) [ 891 0 R /XYZ 99.933071 482.717735 0 ] (cb241-15) [ 891 0 R /XYZ 99.933071 463.770714 0 ] (cb241-16) [ 891 0 R /XYZ 99.933071 444.823692 0 ] (cb241-17) [ 891 0 R /XYZ 99.933071 425.876671 0 ] (cb241-18) [ 891 0 R /XYZ 99.933071 406.929649 0 ] (cb241-2) [ 891 0 R /XYZ 99.933071 747.976036 0 ] (cb241-3) [ 891 0 R /XYZ 99.933071 729.029014 0 ] (cb241-4) [ 891 0 R /XYZ 99.933071 710.081993 0 ] (cb241-5) [ 891 0 R /XYZ 99.933071 691.134971 0 ] (cb241-6) [ 891 0 R /XYZ 99.933071 672.187950 0 ] (cb241-7) [ 891 0 R /XYZ 99.933071 653.240928 0 ] (cb241-8) [ 891 0 R /XYZ 99.933071 634.293907 0 ] (cb241-9) [ 891 0 R /XYZ 99.933071 615.346885 0 ] (cb242) [ 891 0 R /XYZ 84.259843 347.679649 0 ] (cb242-1) [ 891 0 R /XYZ 101.433071 345.982628 0 ] (cb27) [ 516 0 R /XYZ 84.259843 388.070079 0 ] (cb27-1) [ 516 0 R /XYZ 101.433071 386.373057 0 ] (cb3) [ 321 0 R /XYZ 84.259843 509.420079 0 ] (cb3-1) [ 321 0 R /XYZ 101.433071 507.723057 0 ] (cb3-10) [ 321 0 R /XYZ 99.933071 318.252842 0 ] (cb3-11) [ 321 0 R /XYZ 99.933071 299.305821 0 ] (cb3-12) [ 321 0 R /XYZ 99.933071 280.358799 0 ] (cb3-13) [ 321 0 R /XYZ 99.933071 261.411778 0 ] (cb3-14) [ 321 0 R /XYZ 99.933071 242.464756 0 ] (cb3-15) [ 321 0 R /XYZ 99.933071 223.517735 0 ] (cb3-16) [ 321 0 R /XYZ 99.933071 204.570714 0 ] (cb3-17) [ 321 0 R /XYZ 99.933071 185.623692 0 ] (cb3-18) [ 321 0 R /XYZ 99.933071 166.676671 0 ] (cb3-19) [ 321 0 R /XYZ 99.933071 147.729649 0 ] (cb3-2) [ 321 0 R /XYZ 99.933071 488.776036 0 ] (cb3-20) [ 321 0 R /XYZ 99.933071 128.782628 0 ] (cb3-21) [ 321 0 R /XYZ 99.933071 109.835606 0 ] (cb3-22) [ 321 0 R /XYZ 99.933071 90.888585 0 ] (cb3-23) [ 345 0 R /XYZ 99.933071 799.173057 0 ] (cb3-24) [ 345 0 R /XYZ 99.933071 780.226036 0 ] (cb3-25) [ 345 0 R /XYZ 99.933071 761.279014 0 ] (cb3-26) [ 345 0 R /XYZ 99.933071 742.331993 0 ] (cb3-27) [ 345 0 R /XYZ 99.933071 723.384971 0 ] (cb3-28) [ 345 0 R /XYZ 99.933071 704.437950 0 ] (cb3-29) [ 345 0 R /XYZ 99.933071 685.490928 0 ] (cb3-3) [ 321 0 R /XYZ 99.933071 469.829014 0 ] (cb3-30) [ 345 0 R /XYZ 99.933071 666.543907 0 ] (cb3-31) [ 345 0 R /XYZ 99.933071 647.596885 0 ] (cb3-32) [ 345 0 R /XYZ 99.933071 628.649864 0 ] (cb3-33) [ 345 0 R /XYZ 99.933071 609.702842 0 ] (cb3-34) [ 345 0 R /XYZ 99.933071 590.755821 0 ] (cb3-35) [ 345 0 R /XYZ 99.933071 571.808799 0 ] (cb3-36) [ 345 0 R /XYZ 99.933071 552.861778 0 ] (cb3-37) [ 345 0 R /XYZ 99.933071 533.914756 0 ] (cb3-38) [ 345 0 R /XYZ 99.933071 514.967735 0 ] (cb3-39) [ 345 0 R /XYZ 99.933071 496.020714 0 ] (cb3-4) [ 321 0 R /XYZ 99.933071 431.934971 0 ] (cb3-40) [ 345 0 R /XYZ 99.933071 477.073692 0 ] (cb3-41) [ 345 0 R /XYZ 99.933071 458.126671 0 ] (cb3-42) [ 345 0 R /XYZ 99.933071 439.179649 0 ] (cb3-43) [ 345 0 R /XYZ 99.933071 420.232628 0 ] (cb3-44) [ 345 0 R /XYZ 99.933071 401.285606 0 ] (cb3-5) [ 321 0 R /XYZ 99.933071 412.987950 0 ] (cb3-6) [ 321 0 R /XYZ 99.933071 394.040928 0 ] (cb3-7) [ 321 0 R /XYZ 99.933071 375.093907 0 ] (cb3-8) [ 321 0 R /XYZ 99.933071 356.146885 0 ] (cb3-9) [ 321 0 R /XYZ 99.933071 337.199864 0 ] (cb30) [ 521 0 R /XYZ 84.259843 643.970079 0 ] (cb30-1) [ 521 0 R /XYZ 101.433071 642.273057 0 ] (cb33) [ 524 0 R /XYZ 84.259843 136.820079 0 ] (cb33-1) [ 524 0 R /XYZ 101.433071 135.123057 0 ] (cb36) [ 529 0 R /XYZ 84.259843 358.070079 0 ] (cb36-1) [ 529 0 R /XYZ 101.433071 356.373057 0 ] (cb39) [ 534 0 R /XYZ 84.259843 628.970079 0 ] (cb39-1) [ 534 0 R /XYZ 101.433071 627.273057 0 ] (cb4) [ 345 0 R /XYZ 84.259843 342.035606 0 ] (cb4-1) [ 345 0 R /XYZ 101.433071 340.338585 0 ] (cb42) [ 537 0 R /XYZ 84.259843 181.820079 0 ] (cb42-1) [ 537 0 R /XYZ 101.433071 180.123057 0 ] (cb45) [ 542 0 R /XYZ 84.259843 463.070079 0 ] (cb45-1) [ 542 0 R /XYZ 101.433071 461.373057 0 ] (cb48) [ 547 0 R /XYZ 84.259843 715.370079 0 ] (cb48-1) [ 547 0 R /XYZ 101.433071 713.673057 0 ] (cb51) [ 550 0 R /XYZ 84.259843 181.820079 0 ] (cb51-1) [ 550 0 R /XYZ 101.433071 180.123057 0 ] (cb54) [ 555 0 R /XYZ 84.259843 350.570079 0 ] (cb54-1) [ 555 0 R /XYZ 101.433071 348.873057 0 ] (cb55) [ 555 0 R /XYZ 84.259843 113.823057 0 ] (cb55-1) [ 555 0 R /XYZ 101.433071 112.126036 0 ] (cb56) [ 559 0 R /XYZ 84.259843 613.970079 0 ] (cb56-1) [ 559 0 R /XYZ 101.433071 612.273057 0 ] (cb59) [ 562 0 R /XYZ 84.259843 144.320079 0 ] (cb59-1) [ 562 0 R /XYZ 101.433071 142.623057 0 ] (cb62) [ 567 0 R /XYZ 84.259843 358.070079 0 ] (cb62-1) [ 567 0 R /XYZ 101.433071 356.373057 0 ] (cb65) [ 572 0 R /XYZ 84.259843 508.070079 0 ] (cb65-1) [ 572 0 R /XYZ 101.433071 506.373057 0 ] (cb68) [ 577 0 R /XYZ 84.259843 715.370079 0 ] (cb68-1) [ 577 0 R /XYZ 101.433071 713.673057 0 ] (cb7) [ 370 0 R /XYZ 84.259843 711.620079 0 ] (cb7-1) [ 370 0 R /XYZ 101.433071 709.923057 0 ] (cb7-10) [ 370 0 R /XYZ 99.933071 501.505821 0 ] (cb7-11) [ 370 0 R /XYZ 99.933071 482.558799 0 ] (cb7-12) [ 370 0 R /XYZ 99.933071 463.611778 0 ] (cb7-13) [ 370 0 R /XYZ 99.933071 444.664756 0 ] (cb7-14) [ 370 0 R /XYZ 99.933071 425.717735 0 ] (cb7-15) [ 370 0 R /XYZ 99.933071 406.770714 0 ] (cb7-16) [ 370 0 R /XYZ 99.933071 387.823692 0 ] (cb7-17) [ 370 0 R /XYZ 99.933071 368.876671 0 ] (cb7-18) [ 370 0 R /XYZ 99.933071 349.929649 0 ] (cb7-19) [ 370 0 R /XYZ 99.933071 330.982628 0 ] (cb7-2) [ 370 0 R /XYZ 99.933071 690.976036 0 ] (cb7-20) [ 370 0 R /XYZ 99.933071 312.035606 0 ] (cb7-21) [ 370 0 R /XYZ 99.933071 293.088585 0 ] (cb7-22) [ 370 0 R /XYZ 99.933071 274.141563 0 ] (cb7-23) [ 370 0 R /XYZ 99.933071 255.194542 0 ] (cb7-24) [ 370 0 R /XYZ 99.933071 236.247520 0 ] (cb7-25) [ 370 0 R /XYZ 99.933071 217.300499 0 ] (cb7-26) [ 370 0 R /XYZ 99.933071 198.353477 0 ] (cb7-27) [ 370 0 R /XYZ 99.933071 179.406456 0 ] (cb7-28) [ 370 0 R /XYZ 99.933071 160.459434 0 ] (cb7-29) [ 370 0 R /XYZ 99.933071 141.512413 0 ] (cb7-3) [ 370 0 R /XYZ 99.933071 672.029014 0 ] (cb7-30) [ 370 0 R /XYZ 99.933071 122.565391 0 ] (cb7-31) [ 370 0 R /XYZ 99.933071 103.618370 0 ] (cb7-32) [ 403 0 R /XYZ 99.933071 799.173057 0 ] (cb7-33) [ 403 0 R /XYZ 99.933071 780.226036 0 ] (cb7-34) [ 403 0 R /XYZ 99.933071 761.279014 0 ] (cb7-35) [ 403 0 R /XYZ 99.933071 742.331993 0 ] (cb7-36) [ 403 0 R /XYZ 99.933071 723.384971 0 ] (cb7-37) [ 403 0 R /XYZ 99.933071 704.437950 0 ] (cb7-38) [ 403 0 R /XYZ 99.933071 685.490928 0 ] (cb7-39) [ 403 0 R /XYZ 99.933071 666.543907 0 ] (cb7-4) [ 370 0 R /XYZ 99.933071 634.134971 0 ] (cb7-40) [ 403 0 R /XYZ 99.933071 647.596885 0 ] (cb7-41) [ 403 0 R /XYZ 99.933071 628.649864 0 ] (cb7-42) [ 403 0 R /XYZ 99.933071 609.702842 0 ] (cb7-43) [ 403 0 R /XYZ 99.933071 590.755821 0 ] (cb7-44) [ 403 0 R /XYZ 99.933071 571.808799 0 ] (cb7-45) [ 403 0 R /XYZ 99.933071 552.861778 0 ] (cb7-46) [ 403 0 R /XYZ 99.933071 533.914756 0 ] (cb7-47) [ 403 0 R /XYZ 99.933071 514.967735 0 ] (cb7-48) [ 403 0 R /XYZ 99.933071 496.020714 0 ] (cb7-49) [ 403 0 R /XYZ 99.933071 477.073692 0 ] (cb7-5) [ 370 0 R /XYZ 99.933071 596.240928 0 ] (cb7-50) [ 403 0 R /XYZ 99.933071 458.126671 0 ] (cb7-51) [ 403 0 R /XYZ 99.933071 439.179649 0 ] (cb7-52) [ 403 0 R /XYZ 99.933071 420.232628 0 ] (cb7-53) [ 403 0 R /XYZ 99.933071 382.338585 0 ] (cb7-54) [ 403 0 R /XYZ 99.933071 363.391563 0 ] (cb7-55) [ 403 0 R /XYZ 99.933071 344.444542 0 ] (cb7-56) [ 403 0 R /XYZ 99.933071 325.497520 0 ] (cb7-57) [ 403 0 R /XYZ 99.933071 306.550499 0 ] (cb7-58) [ 403 0 R /XYZ 99.933071 287.603477 0 ] (cb7-59) [ 403 0 R /XYZ 99.933071 268.656456 0 ] (cb7-6) [ 370 0 R /XYZ 99.933071 577.293907 0 ] (cb7-60) [ 403 0 R /XYZ 99.933071 249.709434 0 ] (cb7-61) [ 403 0 R /XYZ 99.933071 230.762413 0 ] (cb7-7) [ 370 0 R /XYZ 99.933071 558.346885 0 ] (cb7-8) [ 370 0 R /XYZ 99.933071 539.399864 0 ] (cb7-9) [ 370 0 R /XYZ 99.933071 520.452842 0 ] (cb71) [ 580 0 R /XYZ 84.259843 271.820079 0 ] (cb71-1) [ 580 0 R /XYZ 101.433071 270.123057 0 ] (cb74) [ 585 0 R /XYZ 84.259843 538.070079 0 ] (cb74-1) [ 585 0 R /XYZ 101.433071 536.373057 0 ] (cb77) [ 588 0 R /XYZ 84.259843 103.070079 0 ] (cb77-1) [ 588 0 R /XYZ 101.433071 101.373057 0 ] (cb8) [ 403 0 R /XYZ 84.259843 171.512413 0 ] (cb8-1) [ 403 0 R /XYZ 101.433071 169.815391 0 ] (cb80) [ 593 0 R /XYZ 84.259843 373.070079 0 ] (cb80-1) [ 593 0 R /XYZ 101.433071 371.373057 0 ] (cb83) [ 598 0 R /XYZ 84.259843 628.970079 0 ] (cb83-1) [ 598 0 R /XYZ 101.433071 627.273057 0 ] (cb86) [ 601 0 R /XYZ 84.259843 181.820079 0 ] (cb86-1) [ 601 0 R /XYZ 101.433071 180.123057 0 ] (cb89) [ 606 0 R /XYZ 84.259843 463.070079 0 ] (cb89-1) [ 606 0 R /XYZ 101.433071 461.373057 0 ] (cb92) [ 611 0 R /XYZ 84.259843 715.370079 0 ] (cb92-1) [ 611 0 R /XYZ 101.433071 713.673057 0 ] (cb95) [ 614 0 R /XYZ 84.259843 223.070079 0 ] (cb95-1) [ 614 0 R /XYZ 101.433071 221.373057 0 ] (cb98) [ 619 0 R /XYZ 84.259843 463.070079 0 ] (cb98-1) [ 619 0 R /XYZ 101.433071 461.373057 0 ] (cis-v1.6-kubernetes-benchmark---rancher-v2.6-with-kubernetes-v1.18-to-v1.21) [ 304 0 R /XYZ 84.259843 784.970079 0 ] (client-certificate-authentication-should-not-be-used-for-users-manual) [ 739 0 R /XYZ 84.259843 684.651496 0 ] (configure-image-provenance-using-imagepolicywebhook-admission-controller-manual) [ 887 0 R /XYZ 84.259843 684.651496 0 ] (consider-external-secret-storage-manual) [ 885 0 R /XYZ 84.259843 568.851496 0 ] (contentsbox) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (controller-manager) [ 676 0 R /XYZ 41.740157 784.430079 0 ] (controls) [ 309 0 R /XYZ 84.259843 608.631496 0 ] (create-administrative-boundaries-between-resources-using-namespaces-manual) [ 889 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-a-minimal-audit-policy-is-created-automated) [ 741 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-a-unique-certificate-authority-is-used-for-etcd-automated) [ 732 0 R /XYZ 84.259843 595.970079 0 ] (ensure-that-all-namespaces-have-network-policies-defined-automated) [ 861 0 R /XYZ 84.259843 538.851496 0 ] (ensure-that-default-service-accounts-are-not-actively-used.-automated) [ 813 0 R /XYZ 84.259843 206.451496 0 ] (ensure-that-encryption-providers-are-appropriately-configured-automated) [ 645 0 R /XYZ 84.259843 670.970079 0 ] (ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual) [ 840 0 R /XYZ 84.259843 449.446885 0 ] (ensure-that-the---anonymous-auth-argument-is-set-to-false-automated) [ 508 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated) [ 598 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated) [ 601 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated) [ 606 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---audit-log-path-argument-is-set-automated) [ 593 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---authorization-mode-argument-includes-node-automated) [ 537 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the---authorization-mode-argument-includes-rbac-automated) [ 542 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated) [ 534 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated-1) [ 772 0 R /XYZ 84.259843 332.207453 0 ] (ensure-that-the---auto-tls-argument-is-not-set-to-true-automated) [ 710 0 R /XYZ 84.259843 445.970079 0 ] (ensure-that-the---basic-auth-file-argument-is-not-set-automated) [ 511 0 R /XYZ 84.259843 277.220079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated) [ 689 0 R /XYZ 84.259843 596.570079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated-1) [ 694 0 R /XYZ 84.259843 369.904475 0 ] (ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated) [ 700 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated) [ 632 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated-1) [ 777 0 R /XYZ 84.259843 675.273057 0 ] (ensure-that-the---client-cert-auth-argument-is-set-to-true-automated) [ 705 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-automated) [ 640 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated) [ 635 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated) [ 622 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-automated) [ 792 0 R /XYZ 84.259843 208.126036 0 ] (ensure-that-the---hostname-override-argument-is-not-set-manual) [ 792 0 R /XYZ 84.259843 425.926036 0 ] (ensure-that-the---insecure-bind-address-argument-is-not-set-automated) [ 575 0 R /XYZ 84.259843 145.970079 0 ] (ensure-that-the---insecure-port-argument-is-set-to-0-automated) [ 580 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-ownership-is-set-to-rootroot-automated) [ 749 0 R /XYZ 84.259843 163.687950 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 749 0 R /XYZ 84.259843 454.079014 0 ] (ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated) [ 529 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated) [ 524 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the---kubelet-https-argument-is-set-to-true-automated) [ 521 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated) [ 792 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated) [ 727 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated) [ 715 0 R /XYZ 84.259843 333.470079 0 ] (ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated) [ 720 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated) [ 588 0 R /XYZ 84.259843 258.470079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-1) [ 676 0 R /XYZ 84.259843 167.404475 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-2) [ 694 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated) [ 788 0 R /XYZ 84.259843 445.970079 0 ] (ensure-that-the---read-only-port-argument-is-set-to-0-automated) [ 777 0 R /XYZ 84.259843 301.829014 0 ] (ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated) [ 609 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated) [ 686 0 R /XYZ 84.259843 670.970079 0 ] (ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated) [ 796 0 R /XYZ 84.259843 138.881993 0 ] (ensure-that-the---secure-port-argument-is-not-set-to-0-automated) [ 585 0 R /XYZ 84.259843 708.470079 0 ] (ensure-that-the---service-account-key-file-argument-is-set-as-appropriate-automated) [ 619 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---service-account-lookup-argument-is-set-to-true-automated) [ 614 0 R /XYZ 84.259843 408.470079 0 ] (ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated) [ 683 0 R /XYZ 84.259843 511.220079 0 ] (ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-automated) [ 782 0 R /XYZ 84.259843 641.326036 0 ] (ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-automated) [ 676 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated) [ 627 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated-1) [ 796 0 R /XYZ 84.259843 542.326036 0 ] (ensure-that-the---token-auth-file-parameter-is-not-set-automated) [ 516 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated) [ 679 0 R /XYZ 84.259843 332.523057 0 ] (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) [ 318 0 R /XYZ 84.259843 578.223057 0 ] (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 694.023057 0 ] (ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated) [ 550 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual) [ 555 0 R /XYZ 84.259843 520.970079 0 ] (ensure-that-the-admission-control-plugin-eventratelimit-is-set-automated) [ 545 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated) [ 562 0 R /XYZ 84.259843 314.720079 0 ] (ensure-that-the-admission-control-plugin-noderestriction-is-set-automated) [ 572 0 R /XYZ 84.259843 708.470079 0 ] (ensure-that-the-admission-control-plugin-podsecuritypolicy-is-set-automated) [ 567 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual) [ 555 0 R /XYZ 84.259843 314.223057 0 ] (ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated) [ 559 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-anonymous-auth-argument-is-set-to-false-automated) [ 772 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 667 0 R /XYZ 84.259843 506.287950 0 ] (ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 313 0 R /XYZ 84.259843 553.851496 0 ] (ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-audit-policy-covers-key-security-concerns-manual) [ 744 0 R /XYZ 84.259843 314.720079 0 ] (ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 753 0 R /XYZ 84.259843 519.629014 0 ] (ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-automated) [ 762 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-cluster-admin-role-is-only-used-where-required-manual) [ 813 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-cni-in-use-supports-network-policies-manual) [ 861 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual) [ 315 0 R /XYZ 84.259843 170.823057 0 ] (ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual) [ 315 0 R /XYZ 84.259843 347.570079 0 ] (ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 313 0 R /XYZ 84.259843 277.251496 0 ] (ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 423.051496 0 ] (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) [ 321 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 200.823057 0 ] (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) [ 499 0 R /XYZ 84.259843 234.881993 0 ] (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) [ 499 0 R /XYZ 84.259843 563.129014 0 ] (ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 478.370079 0 ] (ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 315 0 R /XYZ 84.259843 609.170079 0 ] (ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated) [ 762 0 R /XYZ 84.259843 383.493907 0 ] (ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated) [ 762 0 R /XYZ 84.259843 195.693907 0 ] (ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 806 0 R /XYZ 84.259843 392.223057 0 ] (ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated) [ 746 0 R /XYZ 84.259843 553.851496 0 ] (ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 746 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 345 0 R /XYZ 84.259843 184.188585 0 ] (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) [ 321 0 R /XYZ 84.259843 668.570079 0 ] (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) [ 436 0 R /XYZ 84.259843 702.470079 0 ] (ensure-that-the-proxy-kubeconfig-file-ownership-is-set-to-rootroot-automated) [ 749 0 R /XYZ 84.259843 763.220079 0 ] (ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 689 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 739.970079 0 ] (ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 146.451496 0 ] (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) [ 318 0 R /XYZ 84.259843 331.623057 0 ] (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 462.423057 0 ] (ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual) [ 889 0 R /XYZ 84.259843 604.851496 0 ] (etcd-node-configuration-files) [ 700 0 R /XYZ 41.740157 784.430079 0 ] (extensible-admission-control) [ 887 0 R /XYZ 41.740157 784.430079 0 ] (general-policies) [ 889 0 R /XYZ 41.740157 784.430079 0 ] (header_bottom_text) [ 6 0 R /XYZ 85.009843 392.718898 0 ] (if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-automated) [ 746 0 R /XYZ 84.259843 423.051496 0 ] (kubelet) [ 772 0 R /XYZ 41.740157 784.430079 0 ] (logging) [ 741 0 R /XYZ 41.740157 784.430079 0 ] (master-node-configuration-files) [ 313 0 R /XYZ 41.740157 784.430079 0 ] (minimize-access-to-create-pods-manual) [ 813 0 R /XYZ 84.259843 307.251496 0 ] (minimize-access-to-secrets-manual) [ 813 0 R /XYZ 84.259843 523.851496 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated) [ 851 0 R /XYZ 84.259843 238.710432 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated) [ 854 0 R /XYZ 84.259843 603.629014 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated) [ 851 0 R /XYZ 84.259843 589.851496 0 ] (minimize-the-admission-of-containers-with-added-capabilities-manual) [ 858 0 R /XYZ 84.259843 323.081993 0 ] (minimize-the-admission-of-containers-with-allowprivilegeescalation-automated) [ 854 0 R /XYZ 84.259843 252.487950 0 ] (minimize-the-admission-of-containers-with-capabilities-assigned-manual) [ 858 0 R /XYZ 84.259843 207.281993 0 ] (minimize-the-admission-of-containers-with-the-net_raw-capability-manual) [ 858 0 R /XYZ 84.259843 453.881993 0 ] (minimize-the-admission-of-privileged-containers-manual) [ 851 0 R /XYZ 84.259843 720.651496 0 ] (minimize-the-admission-of-root-containers-manual) [ 858 0 R /XYZ 84.259843 584.681993 0 ] (minimize-wildcard-use-in-roles-and-clusterroles-manual) [ 813 0 R /XYZ 84.259843 423.051496 0 ] (network-policies-and-cni) [ 861 0 R /XYZ 41.740157 784.430079 0 ] (overview) [ 304 0 R /XYZ 84.259843 704.822079 0 ] (pod-security-policies) [ 851 0 R /XYZ 41.740157 784.430079 0 ] (prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual) [ 885 0 R /XYZ 84.259843 684.651496 0 ] (rbac-and-service-accounts) [ 813 0 R /XYZ 41.740157 784.430079 0 ] (scheduler) [ 694 0 R /XYZ 41.740157 784.430079 0 ] (secrets-management) [ 885 0 R /XYZ 41.740157 784.430079 0 ] (testing-controls-methodology) [ 304 0 R /XYZ 84.259843 166.076079 0 ] (the-default-namespace-should-not-be-used-automated) [ 889 0 R /XYZ 84.259843 193.251496 0 ] (title-block-header) [ 6 0 R /XYZ 84.259843 502.818898 0 ] (verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 806 0 R /XYZ 84.259843 670.970079 0 ] (worker-node-configuration-files) [ 746 0 R /XYZ 41.740157 784.430079 0 ] ] +/Names [ (TOC) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (api-server) [ 508 0 R /XYZ 41.740157 784.430079 0 ] (apply-security-context-to-your-pods-and-containers-manual) [ 891 0 R /XYZ 84.259843 324.051496 0 ] (authentication-and-authorization) [ 741 0 R /XYZ 41.740157 784.430079 0 ] (cb1) [ 315 0 R /XYZ 84.259843 207.170079 0 ] (cb1-1) [ 315 0 R /XYZ 101.433071 205.473057 0 ] (cb10) [ 349 0 R /XYZ 84.259843 342.035606 0 ] (cb10-1) [ 349 0 R /XYZ 101.433071 340.338585 0 ] (cb101) [ 622 0 R /XYZ 84.259843 504.320079 0 ] (cb101-1) [ 622 0 R /XYZ 101.433071 502.623057 0 ] (cb104) [ 627 0 R /XYZ 84.259843 772.370079 0 ] (cb104-1) [ 627 0 R /XYZ 101.433071 770.673057 0 ] (cb107) [ 630 0 R /XYZ 84.259843 313.070079 0 ] (cb107-1) [ 630 0 R /XYZ 101.433071 311.373057 0 ] (cb110) [ 635 0 R /XYZ 84.259843 560.570079 0 ] (cb110-1) [ 635 0 R /XYZ 101.433071 558.873057 0 ] (cb113) [ 638 0 R /XYZ 84.259843 110.570079 0 ] (cb113-1) [ 638 0 R /XYZ 101.433071 108.873057 0 ] (cb116) [ 643 0 R /XYZ 84.259843 418.070079 0 ] (cb116-1) [ 643 0 R /XYZ 101.433071 416.373057 0 ] (cb116-10) [ 643 0 R /XYZ 99.933071 189.008799 0 ] (cb116-11) [ 643 0 R /XYZ 99.933071 170.061778 0 ] (cb116-12) [ 643 0 R /XYZ 99.933071 151.114756 0 ] (cb116-13) [ 643 0 R /XYZ 99.933071 132.167735 0 ] (cb116-14) [ 643 0 R /XYZ 99.933071 113.220714 0 ] (cb116-15) [ 643 0 R /XYZ 99.933071 94.273692 0 ] (cb116-16) [ 660 0 R /XYZ 99.933071 799.173057 0 ] (cb116-17) [ 660 0 R /XYZ 99.933071 780.226036 0 ] (cb116-18) [ 660 0 R /XYZ 99.933071 761.279014 0 ] (cb116-19) [ 660 0 R /XYZ 99.933071 742.331993 0 ] (cb116-2) [ 643 0 R /XYZ 99.933071 397.426036 0 ] (cb116-20) [ 660 0 R /XYZ 99.933071 723.384971 0 ] (cb116-21) [ 660 0 R /XYZ 99.933071 704.437950 0 ] (cb116-22) [ 660 0 R /XYZ 99.933071 685.490928 0 ] (cb116-23) [ 660 0 R /XYZ 99.933071 666.543907 0 ] (cb116-24) [ 660 0 R /XYZ 99.933071 647.596885 0 ] (cb116-25) [ 660 0 R /XYZ 99.933071 628.649864 0 ] (cb116-3) [ 643 0 R /XYZ 99.933071 378.479014 0 ] (cb116-4) [ 643 0 R /XYZ 99.933071 340.584971 0 ] (cb116-5) [ 643 0 R /XYZ 99.933071 321.637950 0 ] (cb116-6) [ 643 0 R /XYZ 99.933071 302.690928 0 ] (cb116-7) [ 643 0 R /XYZ 99.933071 283.743907 0 ] (cb116-8) [ 643 0 R /XYZ 99.933071 264.796885 0 ] (cb116-9) [ 643 0 R /XYZ 99.933071 226.902842 0 ] (cb117) [ 660 0 R /XYZ 84.259843 569.399864 0 ] (cb117-1) [ 660 0 R /XYZ 101.433071 567.702842 0 ] (cb120) [ 660 0 R /XYZ 84.259843 196.152842 0 ] (cb120-1) [ 660 0 R /XYZ 101.433071 194.455821 0 ] (cb121) [ 674 0 R /XYZ 84.259843 550.251496 0 ] (cb121-1) [ 674 0 R /XYZ 101.433071 548.554475 0 ] (cb124) [ 677 0 R /XYZ 84.259843 571.820079 0 ] (cb124-1) [ 677 0 R /XYZ 101.433071 570.123057 0 ] (cb127) [ 680 0 R /XYZ 84.259843 575.570079 0 ] (cb127-1) [ 680 0 R /XYZ 101.433071 573.873057 0 ] (cb13) [ 374 0 R /XYZ 84.259843 711.620079 0 ] (cb13-1) [ 374 0 R /XYZ 101.433071 709.923057 0 ] (cb13-10) [ 374 0 R /XYZ 99.933071 501.505821 0 ] (cb13-11) [ 374 0 R /XYZ 99.933071 482.558799 0 ] (cb13-12) [ 374 0 R /XYZ 99.933071 463.611778 0 ] (cb13-13) [ 374 0 R /XYZ 99.933071 444.664756 0 ] (cb13-14) [ 374 0 R /XYZ 99.933071 425.717735 0 ] (cb13-15) [ 374 0 R /XYZ 99.933071 406.770714 0 ] (cb13-16) [ 374 0 R /XYZ 99.933071 387.823692 0 ] (cb13-17) [ 374 0 R /XYZ 99.933071 368.876671 0 ] (cb13-18) [ 374 0 R /XYZ 99.933071 349.929649 0 ] (cb13-19) [ 374 0 R /XYZ 99.933071 330.982628 0 ] (cb13-2) [ 374 0 R /XYZ 99.933071 690.976036 0 ] (cb13-20) [ 374 0 R /XYZ 99.933071 312.035606 0 ] (cb13-21) [ 374 0 R /XYZ 99.933071 293.088585 0 ] (cb13-22) [ 374 0 R /XYZ 99.933071 274.141563 0 ] (cb13-23) [ 374 0 R /XYZ 99.933071 255.194542 0 ] (cb13-24) [ 374 0 R /XYZ 99.933071 236.247520 0 ] (cb13-25) [ 374 0 R /XYZ 99.933071 217.300499 0 ] (cb13-26) [ 374 0 R /XYZ 99.933071 198.353477 0 ] (cb13-27) [ 374 0 R /XYZ 99.933071 179.406456 0 ] (cb13-28) [ 374 0 R /XYZ 99.933071 160.459434 0 ] (cb13-29) [ 374 0 R /XYZ 99.933071 141.512413 0 ] (cb13-3) [ 374 0 R /XYZ 99.933071 672.029014 0 ] (cb13-30) [ 374 0 R /XYZ 99.933071 122.565391 0 ] (cb13-31) [ 374 0 R /XYZ 99.933071 103.618370 0 ] (cb13-32) [ 407 0 R /XYZ 99.933071 799.173057 0 ] (cb13-33) [ 407 0 R /XYZ 99.933071 780.226036 0 ] (cb13-34) [ 407 0 R /XYZ 99.933071 761.279014 0 ] (cb13-35) [ 407 0 R /XYZ 99.933071 742.331993 0 ] (cb13-36) [ 407 0 R /XYZ 99.933071 723.384971 0 ] (cb13-37) [ 407 0 R /XYZ 99.933071 704.437950 0 ] (cb13-38) [ 407 0 R /XYZ 99.933071 685.490928 0 ] (cb13-39) [ 407 0 R /XYZ 99.933071 666.543907 0 ] (cb13-4) [ 374 0 R /XYZ 99.933071 634.134971 0 ] (cb13-40) [ 407 0 R /XYZ 99.933071 647.596885 0 ] (cb13-41) [ 407 0 R /XYZ 99.933071 628.649864 0 ] (cb13-42) [ 407 0 R /XYZ 99.933071 609.702842 0 ] (cb13-43) [ 407 0 R /XYZ 99.933071 590.755821 0 ] (cb13-44) [ 407 0 R /XYZ 99.933071 571.808799 0 ] (cb13-45) [ 407 0 R /XYZ 99.933071 552.861778 0 ] (cb13-46) [ 407 0 R /XYZ 99.933071 533.914756 0 ] (cb13-47) [ 407 0 R /XYZ 99.933071 514.967735 0 ] (cb13-48) [ 407 0 R /XYZ 99.933071 496.020714 0 ] (cb13-49) [ 407 0 R /XYZ 99.933071 477.073692 0 ] (cb13-5) [ 374 0 R /XYZ 99.933071 596.240928 0 ] (cb13-50) [ 407 0 R /XYZ 99.933071 458.126671 0 ] (cb13-51) [ 407 0 R /XYZ 99.933071 439.179649 0 ] (cb13-52) [ 407 0 R /XYZ 99.933071 420.232628 0 ] (cb13-53) [ 407 0 R /XYZ 99.933071 382.338585 0 ] (cb13-54) [ 407 0 R /XYZ 99.933071 363.391563 0 ] (cb13-55) [ 407 0 R /XYZ 99.933071 344.444542 0 ] (cb13-56) [ 407 0 R /XYZ 99.933071 325.497520 0 ] (cb13-57) [ 407 0 R /XYZ 99.933071 306.550499 0 ] (cb13-58) [ 407 0 R /XYZ 99.933071 287.603477 0 ] (cb13-59) [ 407 0 R /XYZ 99.933071 268.656456 0 ] (cb13-6) [ 374 0 R /XYZ 99.933071 577.293907 0 ] (cb13-60) [ 407 0 R /XYZ 99.933071 249.709434 0 ] (cb13-61) [ 407 0 R /XYZ 99.933071 230.762413 0 ] (cb13-7) [ 374 0 R /XYZ 99.933071 558.346885 0 ] (cb13-8) [ 374 0 R /XYZ 99.933071 539.399864 0 ] (cb13-9) [ 374 0 R /XYZ 99.933071 520.452842 0 ] (cb130) [ 683 0 R /XYZ 84.259843 560.570079 0 ] (cb130-1) [ 683 0 R /XYZ 101.433071 558.873057 0 ] (cb133) [ 686 0 R /XYZ 84.259843 556.820079 0 ] (cb133-1) [ 686 0 R /XYZ 101.433071 555.123057 0 ] (cb136) [ 689 0 R /XYZ 84.259843 369.020079 0 ] (cb136-1) [ 689 0 R /XYZ 101.433071 367.323057 0 ] (cb139) [ 694 0 R /XYZ 84.259843 565.251496 0 ] (cb139-1) [ 694 0 R /XYZ 101.433071 563.554475 0 ] (cb14) [ 407 0 R /XYZ 84.259843 171.512413 0 ] (cb14-1) [ 407 0 R /XYZ 101.433071 169.815391 0 ] (cb142) [ 694 0 R /XYZ 84.259843 102.004475 0 ] (cb142-1) [ 694 0 R /XYZ 101.433071 100.307453 0 ] (cb145) [ 700 0 R /XYZ 84.259843 514.251496 0 ] (cb145-1) [ 700 0 R /XYZ 101.433071 512.554475 0 ] (cb148) [ 705 0 R /XYZ 84.259843 309.320079 0 ] (cb148-1) [ 705 0 R /XYZ 101.433071 307.623057 0 ] (cb151) [ 710 0 R /XYZ 84.259843 103.070079 0 ] (cb151-1) [ 710 0 R /XYZ 101.433071 101.373057 0 ] (cb154) [ 717 0 R /XYZ 84.259843 613.970079 0 ] (cb154-1) [ 717 0 R /XYZ 101.433071 612.273057 0 ] (cb157) [ 722 0 R /XYZ 84.259843 403.070079 0 ] (cb157-1) [ 722 0 R /XYZ 101.433071 401.373057 0 ] (cb160) [ 727 0 R /XYZ 84.259843 178.070079 0 ] (cb160-1) [ 727 0 R /XYZ 101.433071 176.373057 0 ] (cb163) [ 734 0 R /XYZ 84.259843 628.970079 0 ] (cb163-1) [ 734 0 R /XYZ 101.433071 627.273057 0 ] (cb166) [ 743 0 R /XYZ 84.259843 595.251496 0 ] (cb166-1) [ 743 0 R /XYZ 101.433071 593.554475 0 ] (cb169) [ 748 0 R /XYZ 84.259843 267.651496 0 ] (cb169-1) [ 748 0 R /XYZ 101.433071 265.954475 0 ] (cb17) [ 440 0 R /XYZ 84.259843 543.320079 0 ] (cb17-1) [ 440 0 R /XYZ 101.433071 541.623057 0 ] (cb17-10) [ 440 0 R /XYZ 99.933071 333.205821 0 ] (cb17-11) [ 440 0 R /XYZ 99.933071 314.258799 0 ] (cb17-12) [ 440 0 R /XYZ 99.933071 295.311778 0 ] (cb17-13) [ 440 0 R /XYZ 99.933071 276.364756 0 ] (cb17-14) [ 440 0 R /XYZ 99.933071 257.417735 0 ] (cb17-15) [ 440 0 R /XYZ 99.933071 238.470714 0 ] (cb17-16) [ 440 0 R /XYZ 99.933071 219.523692 0 ] (cb17-17) [ 440 0 R /XYZ 99.933071 200.576671 0 ] (cb17-18) [ 440 0 R /XYZ 99.933071 181.629649 0 ] (cb17-19) [ 440 0 R /XYZ 99.933071 162.682628 0 ] (cb17-2) [ 440 0 R /XYZ 99.933071 522.676036 0 ] (cb17-20) [ 440 0 R /XYZ 99.933071 143.735606 0 ] (cb17-21) [ 440 0 R /XYZ 99.933071 124.788585 0 ] (cb17-22) [ 440 0 R /XYZ 99.933071 105.841563 0 ] (cb17-23) [ 464 0 R /XYZ 99.933071 799.173057 0 ] (cb17-24) [ 464 0 R /XYZ 99.933071 780.226036 0 ] (cb17-25) [ 464 0 R /XYZ 99.933071 761.279014 0 ] (cb17-26) [ 464 0 R /XYZ 99.933071 742.331993 0 ] (cb17-27) [ 464 0 R /XYZ 99.933071 723.384971 0 ] (cb17-28) [ 464 0 R /XYZ 99.933071 704.437950 0 ] (cb17-29) [ 464 0 R /XYZ 99.933071 685.490928 0 ] (cb17-3) [ 440 0 R /XYZ 99.933071 503.729014 0 ] (cb17-30) [ 464 0 R /XYZ 99.933071 666.543907 0 ] (cb17-31) [ 464 0 R /XYZ 99.933071 647.596885 0 ] (cb17-32) [ 464 0 R /XYZ 99.933071 628.649864 0 ] (cb17-33) [ 464 0 R /XYZ 99.933071 609.702842 0 ] (cb17-34) [ 464 0 R /XYZ 99.933071 590.755821 0 ] (cb17-35) [ 464 0 R /XYZ 99.933071 571.808799 0 ] (cb17-36) [ 464 0 R /XYZ 99.933071 552.861778 0 ] (cb17-37) [ 464 0 R /XYZ 99.933071 533.914756 0 ] (cb17-38) [ 464 0 R /XYZ 99.933071 514.967735 0 ] (cb17-39) [ 464 0 R /XYZ 99.933071 496.020714 0 ] (cb17-4) [ 440 0 R /XYZ 99.933071 465.834971 0 ] (cb17-40) [ 464 0 R /XYZ 99.933071 477.073692 0 ] (cb17-41) [ 464 0 R /XYZ 99.933071 458.126671 0 ] (cb17-42) [ 464 0 R /XYZ 99.933071 439.179649 0 ] (cb17-43) [ 464 0 R /XYZ 99.933071 420.232628 0 ] (cb17-44) [ 464 0 R /XYZ 99.933071 401.285606 0 ] (cb17-45) [ 464 0 R /XYZ 99.933071 382.338585 0 ] (cb17-46) [ 464 0 R /XYZ 99.933071 363.391563 0 ] (cb17-47) [ 464 0 R /XYZ 99.933071 344.444542 0 ] (cb17-48) [ 464 0 R /XYZ 99.933071 325.497520 0 ] (cb17-49) [ 464 0 R /XYZ 99.933071 306.550499 0 ] (cb17-5) [ 440 0 R /XYZ 99.933071 427.940928 0 ] (cb17-50) [ 464 0 R /XYZ 99.933071 287.603477 0 ] (cb17-51) [ 464 0 R /XYZ 99.933071 268.656456 0 ] (cb17-52) [ 464 0 R /XYZ 99.933071 249.709434 0 ] (cb17-53) [ 464 0 R /XYZ 99.933071 211.815391 0 ] (cb17-54) [ 464 0 R /XYZ 99.933071 192.868370 0 ] (cb17-55) [ 464 0 R /XYZ 99.933071 173.921348 0 ] (cb17-56) [ 464 0 R /XYZ 99.933071 154.974327 0 ] (cb17-57) [ 464 0 R /XYZ 99.933071 136.027305 0 ] (cb17-58) [ 464 0 R /XYZ 99.933071 117.080284 0 ] (cb17-59) [ 464 0 R /XYZ 99.933071 98.133262 0 ] (cb17-6) [ 440 0 R /XYZ 99.933071 408.993907 0 ] (cb17-60) [ 503 0 R /XYZ 99.933071 799.173057 0 ] (cb17-61) [ 503 0 R /XYZ 99.933071 780.226036 0 ] (cb17-7) [ 440 0 R /XYZ 99.933071 390.046885 0 ] (cb17-8) [ 440 0 R /XYZ 99.933071 371.099864 0 ] (cb17-9) [ 440 0 R /XYZ 99.933071 352.152842 0 ] (cb172) [ 751 0 R /XYZ 84.259843 607.820079 0 ] (cb172-1) [ 751 0 R /XYZ 101.433071 606.123057 0 ] (cb174) [ 751 0 R /XYZ 84.259843 298.679014 0 ] (cb174-1) [ 751 0 R /XYZ 101.433071 296.981993 0 ] (cb176) [ 755 0 R /XYZ 84.259843 715.370079 0 ] (cb176-1) [ 755 0 R /XYZ 101.433071 713.673057 0 ] (cb179) [ 755 0 R /XYZ 84.259843 375.479014 0 ] (cb179-1) [ 755 0 R /XYZ 101.433071 373.781993 0 ] (cb179-2) [ 755 0 R /XYZ 99.933071 354.834971 0 ] (cb179-3) [ 755 0 R /XYZ 99.933071 335.887950 0 ] (cb179-4) [ 755 0 R /XYZ 99.933071 279.046885 0 ] (cb179-5) [ 755 0 R /XYZ 99.933071 260.099864 0 ] (cb18) [ 503 0 R /XYZ 84.259843 720.976036 0 ] (cb18-1) [ 503 0 R /XYZ 101.433071 719.279014 0 ] (cb180) [ 755 0 R /XYZ 84.259843 200.849864 0 ] (cb180-1) [ 755 0 R /XYZ 101.433071 199.152842 0 ] (cb182) [ 764 0 R /XYZ 84.259843 655.220079 0 ] (cb182-1) [ 764 0 R /XYZ 101.433071 653.523057 0 ] (cb182-2) [ 764 0 R /XYZ 99.933071 634.576036 0 ] (cb182-3) [ 764 0 R /XYZ 99.933071 615.629014 0 ] (cb182-4) [ 764 0 R /XYZ 99.933071 558.787950 0 ] (cb182-5) [ 764 0 R /XYZ 99.933071 539.840928 0 ] (cb183) [ 764 0 R /XYZ 84.259843 480.590928 0 ] (cb183-1) [ 764 0 R /XYZ 101.433071 478.893907 0 ] (cb185) [ 774 0 R /XYZ 84.259843 490.251496 0 ] (cb185-1) [ 774 0 R /XYZ 101.433071 488.554475 0 ] (cb186) [ 774 0 R /XYZ 84.259843 429.304475 0 ] (cb186-1) [ 774 0 R /XYZ 101.433071 427.607453 0 ] (cb188) [ 774 0 R /XYZ 84.259843 116.807453 0 ] (cb188-1) [ 774 0 R /XYZ 101.433071 115.110432 0 ] (cb189) [ 779 0 R /XYZ 84.259843 772.370079 0 ] (cb189-1) [ 779 0 R /XYZ 101.433071 770.673057 0 ] (cb191) [ 779 0 R /XYZ 84.259843 459.873057 0 ] (cb191-1) [ 779 0 R /XYZ 101.433071 458.176036 0 ] (cb192) [ 779 0 R /XYZ 84.259843 398.926036 0 ] (cb192-1) [ 779 0 R /XYZ 101.433071 397.229014 0 ] (cb194) [ 784 0 R /XYZ 84.259843 799.370079 0 ] (cb194-1) [ 784 0 R /XYZ 101.433071 797.673057 0 ] (cb195) [ 784 0 R /XYZ 84.259843 738.423057 0 ] (cb195-1) [ 784 0 R /XYZ 101.433071 736.726036 0 ] (cb197) [ 784 0 R /XYZ 84.259843 410.926036 0 ] (cb197-1) [ 784 0 R /XYZ 101.433071 409.229014 0 ] (cb198) [ 784 0 R /XYZ 84.259843 349.979014 0 ] (cb198-1) [ 784 0 R /XYZ 101.433071 348.281993 0 ] (cb2) [ 318 0 R /XYZ 84.259843 730.370079 0 ] (cb2-1) [ 318 0 R /XYZ 101.433071 728.673057 0 ] (cb201) [ 790 0 R /XYZ 84.259843 230.570079 0 ] (cb201-1) [ 790 0 R /XYZ 101.433071 228.873057 0 ] (cb202) [ 790 0 R /XYZ 84.259843 169.623057 0 ] (cb202-1) [ 790 0 R /XYZ 101.433071 167.926036 0 ] (cb204) [ 794 0 R /XYZ 84.259843 583.970079 0 ] (cb204-1) [ 794 0 R /XYZ 101.433071 582.273057 0 ] (cb205) [ 794 0 R /XYZ 84.259843 523.023057 0 ] (cb205-1) [ 794 0 R /XYZ 101.433071 521.326036 0 ] (cb207) [ 798 0 R /XYZ 84.259843 700.370079 0 ] (cb207-1) [ 798 0 R /XYZ 101.433071 698.673057 0 ] (cb208) [ 798 0 R /XYZ 84.259843 639.423057 0 ] (cb208-1) [ 798 0 R /XYZ 101.433071 637.726036 0 ] (cb21) [ 508 0 R /XYZ 84.259843 565.251496 0 ] (cb21-1) [ 508 0 R /XYZ 101.433071 563.554475 0 ] (cb210) [ 798 0 R /XYZ 84.259843 296.926036 0 ] (cb210-1) [ 798 0 R /XYZ 101.433071 295.229014 0 ] (cb211) [ 798 0 R /XYZ 84.259843 235.979014 0 ] (cb211-1) [ 798 0 R /XYZ 101.433071 234.281993 0 ] (cb213) [ 804 0 R /XYZ 84.259843 640.370079 0 ] (cb213-1) [ 804 0 R /XYZ 101.433071 638.673057 0 ] (cb214) [ 804 0 R /XYZ 84.259843 579.423057 0 ] (cb214-1) [ 804 0 R /XYZ 101.433071 577.726036 0 ] (cb217) [ 808 0 R /XYZ 84.259843 428.570079 0 ] (cb217-1) [ 808 0 R /XYZ 101.433071 426.873057 0 ] (cb218) [ 808 0 R /XYZ 84.259843 131.823057 0 ] (cb218-1) [ 808 0 R /XYZ 101.433071 130.126036 0 ] (cb219) [ 812 0 R /XYZ 84.259843 799.370079 0 ] (cb219-1) [ 812 0 R /XYZ 101.433071 797.673057 0 ] (cb221) [ 817 0 R /XYZ 84.259843 768.620079 0 ] (cb221-1) [ 817 0 R /XYZ 101.433071 766.923057 0 ] (cb221-10) [ 817 0 R /XYZ 99.933071 596.399864 0 ] (cb221-11) [ 817 0 R /XYZ 99.933071 577.452842 0 ] (cb221-12) [ 817 0 R /XYZ 99.933071 482.717735 0 ] (cb221-13) [ 817 0 R /XYZ 99.933071 463.770714 0 ] (cb221-14) [ 817 0 R /XYZ 99.933071 444.823692 0 ] (cb221-15) [ 817 0 R /XYZ 99.933071 425.876671 0 ] (cb221-16) [ 817 0 R /XYZ 99.933071 406.929649 0 ] (cb221-17) [ 817 0 R /XYZ 99.933071 387.982628 0 ] (cb221-18) [ 817 0 R /XYZ 99.933071 350.088585 0 ] (cb221-19) [ 817 0 R /XYZ 99.933071 331.141563 0 ] (cb221-2) [ 817 0 R /XYZ 99.933071 747.976036 0 ] (cb221-20) [ 817 0 R /XYZ 99.933071 198.512413 0 ] (cb221-21) [ 817 0 R /XYZ 99.933071 179.565391 0 ] (cb221-22) [ 817 0 R /XYZ 99.933071 160.618370 0 ] (cb221-23) [ 817 0 R /XYZ 99.933071 103.777305 0 ] (cb221-24) [ 842 0 R /XYZ 99.933071 799.173057 0 ] (cb221-25) [ 842 0 R /XYZ 99.933071 780.226036 0 ] (cb221-26) [ 842 0 R /XYZ 99.933071 761.279014 0 ] (cb221-27) [ 842 0 R /XYZ 99.933071 742.331993 0 ] (cb221-28) [ 842 0 R /XYZ 99.933071 723.384971 0 ] (cb221-29) [ 842 0 R /XYZ 99.933071 704.437950 0 ] (cb221-3) [ 817 0 R /XYZ 99.933071 729.029014 0 ] (cb221-30) [ 842 0 R /XYZ 99.933071 685.490928 0 ] (cb221-31) [ 842 0 R /XYZ 99.933071 666.543907 0 ] (cb221-4) [ 817 0 R /XYZ 99.933071 710.081993 0 ] (cb221-5) [ 817 0 R /XYZ 99.933071 691.134971 0 ] (cb221-6) [ 817 0 R /XYZ 99.933071 672.187950 0 ] (cb221-7) [ 817 0 R /XYZ 99.933071 653.240928 0 ] (cb221-8) [ 817 0 R /XYZ 99.933071 634.293907 0 ] (cb221-9) [ 817 0 R /XYZ 99.933071 615.346885 0 ] (cb222) [ 842 0 R /XYZ 84.259843 607.293907 0 ] (cb222-1) [ 842 0 R /XYZ 101.433071 605.596885 0 ] (cb225) [ 853 0 R /XYZ 84.259843 434.451496 0 ] (cb225-1) [ 853 0 R /XYZ 101.433071 432.754475 0 ] (cb228) [ 856 0 R /XYZ 84.259843 799.370079 0 ] (cb228-1) [ 856 0 R /XYZ 101.433071 797.673057 0 ] (cb231) [ 856 0 R /XYZ 84.259843 448.229014 0 ] (cb231-1) [ 856 0 R /XYZ 101.433071 446.531993 0 ] (cb234) [ 860 0 R /XYZ 84.259843 799.370079 0 ] (cb234-1) [ 860 0 R /XYZ 101.433071 797.673057 0 ] (cb237) [ 863 0 R /XYZ 84.259843 394.701496 0 ] (cb237-1) [ 863 0 R /XYZ 101.433071 393.004475 0 ] (cb237-10) [ 863 0 R /XYZ 99.933071 222.481281 0 ] (cb237-11) [ 863 0 R /XYZ 99.933071 203.534260 0 ] (cb237-12) [ 863 0 R /XYZ 99.933071 165.640217 0 ] (cb237-13) [ 863 0 R /XYZ 99.933071 127.746174 0 ] (cb237-14) [ 863 0 R /XYZ 99.933071 108.799152 0 ] (cb237-15) [ 863 0 R /XYZ 99.933071 89.852131 0 ] (cb237-16) [ 880 0 R /XYZ 99.933071 799.173057 0 ] (cb237-17) [ 880 0 R /XYZ 99.933071 780.226036 0 ] (cb237-18) [ 880 0 R /XYZ 99.933071 761.279014 0 ] (cb237-19) [ 880 0 R /XYZ 99.933071 742.331993 0 ] (cb237-2) [ 863 0 R /XYZ 99.933071 374.057453 0 ] (cb237-3) [ 863 0 R /XYZ 99.933071 355.110432 0 ] (cb237-4) [ 863 0 R /XYZ 99.933071 336.163410 0 ] (cb237-5) [ 863 0 R /XYZ 99.933071 317.216389 0 ] (cb237-6) [ 863 0 R /XYZ 99.933071 298.269367 0 ] (cb237-7) [ 863 0 R /XYZ 99.933071 279.322346 0 ] (cb237-8) [ 863 0 R /XYZ 99.933071 260.375324 0 ] (cb237-9) [ 863 0 R /XYZ 99.933071 241.428303 0 ] (cb238) [ 880 0 R /XYZ 84.259843 683.081993 0 ] (cb238-1) [ 880 0 R /XYZ 101.433071 681.384971 0 ] (cb24) [ 511 0 R /XYZ 84.259843 125.570079 0 ] (cb24-1) [ 511 0 R /XYZ 101.433071 123.873057 0 ] (cb241) [ 893 0 R /XYZ 84.259843 768.620079 0 ] (cb241-1) [ 893 0 R /XYZ 101.433071 766.923057 0 ] (cb241-10) [ 893 0 R /XYZ 99.933071 596.399864 0 ] (cb241-11) [ 893 0 R /XYZ 99.933071 577.452842 0 ] (cb241-12) [ 893 0 R /XYZ 99.933071 520.611778 0 ] (cb241-13) [ 893 0 R /XYZ 99.933071 501.664756 0 ] (cb241-14) [ 893 0 R /XYZ 99.933071 482.717735 0 ] (cb241-15) [ 893 0 R /XYZ 99.933071 463.770714 0 ] (cb241-16) [ 893 0 R /XYZ 99.933071 444.823692 0 ] (cb241-17) [ 893 0 R /XYZ 99.933071 425.876671 0 ] (cb241-18) [ 893 0 R /XYZ 99.933071 406.929649 0 ] (cb241-2) [ 893 0 R /XYZ 99.933071 747.976036 0 ] (cb241-3) [ 893 0 R /XYZ 99.933071 729.029014 0 ] (cb241-4) [ 893 0 R /XYZ 99.933071 710.081993 0 ] (cb241-5) [ 893 0 R /XYZ 99.933071 691.134971 0 ] (cb241-6) [ 893 0 R /XYZ 99.933071 672.187950 0 ] (cb241-7) [ 893 0 R /XYZ 99.933071 653.240928 0 ] (cb241-8) [ 893 0 R /XYZ 99.933071 634.293907 0 ] (cb241-9) [ 893 0 R /XYZ 99.933071 615.346885 0 ] (cb242) [ 893 0 R /XYZ 84.259843 347.679649 0 ] (cb242-1) [ 893 0 R /XYZ 101.433071 345.982628 0 ] (cb27) [ 516 0 R /XYZ 84.259843 425.570079 0 ] (cb27-1) [ 516 0 R /XYZ 101.433071 423.873057 0 ] (cb3) [ 318 0 R /XYZ 84.259843 523.623057 0 ] (cb3-1) [ 318 0 R /XYZ 101.433071 521.926036 0 ] (cb30) [ 521 0 R /XYZ 84.259843 715.370079 0 ] (cb30-1) [ 521 0 R /XYZ 101.433071 713.673057 0 ] (cb33) [ 524 0 R /XYZ 84.259843 211.820079 0 ] (cb33-1) [ 524 0 R /XYZ 101.433071 210.123057 0 ] (cb36) [ 529 0 R /XYZ 84.259843 451.820079 0 ] (cb36-1) [ 529 0 R /XYZ 101.433071 450.123057 0 ] (cb39) [ 534 0 R /XYZ 84.259843 730.370079 0 ] (cb39-1) [ 534 0 R /XYZ 101.433071 728.673057 0 ] (cb42) [ 537 0 R /XYZ 84.259843 294.320079 0 ] (cb42-1) [ 537 0 R /XYZ 101.433071 292.623057 0 ] (cb45) [ 542 0 R /XYZ 84.259843 575.570079 0 ] (cb45-1) [ 542 0 R /XYZ 101.433071 573.873057 0 ] (cb48) [ 545 0 R /XYZ 84.259843 129.320079 0 ] (cb48-1) [ 545 0 R /XYZ 101.433071 127.623057 0 ] (cb51) [ 550 0 R /XYZ 84.259843 350.570079 0 ] (cb51-1) [ 550 0 R /XYZ 101.433071 348.873057 0 ] (cb54) [ 555 0 R /XYZ 84.259843 538.070079 0 ] (cb54-1) [ 555 0 R /XYZ 101.433071 536.373057 0 ] (cb55) [ 555 0 R /XYZ 84.259843 301.323057 0 ] (cb55-1) [ 555 0 R /XYZ 101.433071 299.626036 0 ] (cb56) [ 559 0 R /XYZ 84.259843 799.370079 0 ] (cb56-1) [ 559 0 R /XYZ 101.433071 797.673057 0 ] (cb59) [ 562 0 R /XYZ 84.259843 350.570079 0 ] (cb59-1) [ 562 0 R /XYZ 101.433071 348.873057 0 ] (cb6) [ 318 0 R /XYZ 84.259843 138.376036 0 ] (cb6-1) [ 318 0 R /XYZ 101.433071 136.679014 0 ] (cb62) [ 567 0 R /XYZ 84.259843 598.970079 0 ] (cb62-1) [ 567 0 R /XYZ 101.433071 597.273057 0 ] (cb65) [ 572 0 R /XYZ 84.259843 772.370079 0 ] (cb65-1) [ 572 0 R /XYZ 101.433071 770.673057 0 ] (cb68) [ 575 0 R /XYZ 84.259843 271.820079 0 ] (cb68-1) [ 575 0 R /XYZ 101.433071 270.123057 0 ] (cb71) [ 580 0 R /XYZ 84.259843 571.820079 0 ] (cb71-1) [ 580 0 R /XYZ 101.433071 570.123057 0 ] (cb74) [ 583 0 R /XYZ 84.259843 144.320079 0 ] (cb74-1) [ 583 0 R /XYZ 101.433071 142.623057 0 ] (cb77) [ 588 0 R /XYZ 84.259843 440.570079 0 ] (cb77-1) [ 588 0 R /XYZ 101.433071 438.873057 0 ] (cb80) [ 593 0 R /XYZ 84.259843 715.370079 0 ] (cb80-1) [ 593 0 R /XYZ 101.433071 713.673057 0 ] (cb83) [ 596 0 R /XYZ 84.259843 275.570079 0 ] (cb83-1) [ 596 0 R /XYZ 101.433071 273.873057 0 ] (cb86) [ 601 0 R /XYZ 84.259843 556.820079 0 ] (cb86-1) [ 601 0 R /XYZ 101.433071 555.123057 0 ] (cb89) [ 604 0 R /XYZ 84.259843 125.570079 0 ] (cb89-1) [ 604 0 R /XYZ 101.433071 123.873057 0 ] (cb9) [ 325 0 R /XYZ 84.259843 509.420079 0 ] (cb9-1) [ 325 0 R /XYZ 101.433071 507.723057 0 ] (cb9-10) [ 325 0 R /XYZ 99.933071 318.252842 0 ] (cb9-11) [ 325 0 R /XYZ 99.933071 299.305821 0 ] (cb9-12) [ 325 0 R /XYZ 99.933071 280.358799 0 ] (cb9-13) [ 325 0 R /XYZ 99.933071 261.411778 0 ] (cb9-14) [ 325 0 R /XYZ 99.933071 242.464756 0 ] (cb9-15) [ 325 0 R /XYZ 99.933071 223.517735 0 ] (cb9-16) [ 325 0 R /XYZ 99.933071 204.570714 0 ] (cb9-17) [ 325 0 R /XYZ 99.933071 185.623692 0 ] (cb9-18) [ 325 0 R /XYZ 99.933071 166.676671 0 ] (cb9-19) [ 325 0 R /XYZ 99.933071 147.729649 0 ] (cb9-2) [ 325 0 R /XYZ 99.933071 488.776036 0 ] (cb9-20) [ 325 0 R /XYZ 99.933071 128.782628 0 ] (cb9-21) [ 325 0 R /XYZ 99.933071 109.835606 0 ] (cb9-22) [ 325 0 R /XYZ 99.933071 90.888585 0 ] (cb9-23) [ 349 0 R /XYZ 99.933071 799.173057 0 ] (cb9-24) [ 349 0 R /XYZ 99.933071 780.226036 0 ] (cb9-25) [ 349 0 R /XYZ 99.933071 761.279014 0 ] (cb9-26) [ 349 0 R /XYZ 99.933071 742.331993 0 ] (cb9-27) [ 349 0 R /XYZ 99.933071 723.384971 0 ] (cb9-28) [ 349 0 R /XYZ 99.933071 704.437950 0 ] (cb9-29) [ 349 0 R /XYZ 99.933071 685.490928 0 ] (cb9-3) [ 325 0 R /XYZ 99.933071 469.829014 0 ] (cb9-30) [ 349 0 R /XYZ 99.933071 666.543907 0 ] (cb9-31) [ 349 0 R /XYZ 99.933071 647.596885 0 ] (cb9-32) [ 349 0 R /XYZ 99.933071 628.649864 0 ] (cb9-33) [ 349 0 R /XYZ 99.933071 609.702842 0 ] (cb9-34) [ 349 0 R /XYZ 99.933071 590.755821 0 ] (cb9-35) [ 349 0 R /XYZ 99.933071 571.808799 0 ] (cb9-36) [ 349 0 R /XYZ 99.933071 552.861778 0 ] (cb9-37) [ 349 0 R /XYZ 99.933071 533.914756 0 ] (cb9-38) [ 349 0 R /XYZ 99.933071 514.967735 0 ] (cb9-39) [ 349 0 R /XYZ 99.933071 496.020714 0 ] (cb9-4) [ 325 0 R /XYZ 99.933071 431.934971 0 ] (cb9-40) [ 349 0 R /XYZ 99.933071 477.073692 0 ] (cb9-41) [ 349 0 R /XYZ 99.933071 458.126671 0 ] (cb9-42) [ 349 0 R /XYZ 99.933071 439.179649 0 ] (cb9-43) [ 349 0 R /XYZ 99.933071 420.232628 0 ] (cb9-44) [ 349 0 R /XYZ 99.933071 401.285606 0 ] (cb9-5) [ 325 0 R /XYZ 99.933071 412.987950 0 ] (cb9-6) [ 325 0 R /XYZ 99.933071 394.040928 0 ] (cb9-7) [ 325 0 R /XYZ 99.933071 375.093907 0 ] (cb9-8) [ 325 0 R /XYZ 99.933071 356.146885 0 ] (cb9-9) [ 325 0 R /XYZ 99.933071 337.199864 0 ] (cb92) [ 609 0 R /XYZ 84.259843 440.570079 0 ] (cb92-1) [ 609 0 R /XYZ 101.433071 438.873057 0 ] (cb95) [ 614 0 R /XYZ 84.259843 685.370079 0 ] (cb95-1) [ 614 0 R /XYZ 101.433071 683.673057 0 ] (cb98) [ 617 0 R /XYZ 84.259843 238.070079 0 ] (cb98-1) [ 617 0 R /XYZ 101.433071 236.373057 0 ] (cis-v1.6-kubernetes-benchmark---rancher-v2.6-with-kubernetes-v1.18-to-v1.21) [ 304 0 R /XYZ 84.259843 784.970079 0 ] (client-certificate-authentication-should-not-be-used-for-users-manual) [ 741 0 R /XYZ 84.259843 684.651496 0 ] (configure-image-provenance-using-imagepolicywebhook-admission-controller-manual) [ 889 0 R /XYZ 84.259843 684.651496 0 ] (consider-external-secret-storage-manual) [ 887 0 R /XYZ 84.259843 568.851496 0 ] (contentsbox) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (controller-manager) [ 674 0 R /XYZ 41.740157 784.430079 0 ] (controls) [ 309 0 R /XYZ 84.259843 612.381496 0 ] (create-administrative-boundaries-between-resources-using-namespaces-manual) [ 891 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-a-minimal-audit-policy-is-created-automated) [ 743 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-a-unique-certificate-authority-is-used-for-etcd-automated) [ 734 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-all-namespaces-have-network-policies-defined-automated) [ 863 0 R /XYZ 84.259843 538.851496 0 ] (ensure-that-default-service-accounts-are-not-actively-used.-automated) [ 815 0 R /XYZ 84.259843 206.451496 0 ] (ensure-that-encryption-providers-are-appropriately-configured-automated) [ 643 0 R /XYZ 84.259843 577.220079 0 ] (ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual) [ 842 0 R /XYZ 84.259843 449.446885 0 ] (ensure-that-the---anonymous-auth-argument-is-set-to-false-automated) [ 508 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated) [ 596 0 R /XYZ 84.259843 445.970079 0 ] (ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated) [ 601 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated) [ 604 0 R /XYZ 84.259843 295.970079 0 ] (ensure-that-the---audit-log-path-argument-is-set-automated) [ 591 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---authorization-mode-argument-includes-node-automated) [ 537 0 R /XYZ 84.259843 464.720079 0 ] (ensure-that-the---authorization-mode-argument-includes-rbac-automated) [ 542 0 R /XYZ 84.259843 745.970079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated) [ 532 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated-1) [ 774 0 R /XYZ 84.259843 332.207453 0 ] (ensure-that-the---auto-tls-argument-is-not-set-to-true-automated) [ 710 0 R /XYZ 84.259843 258.470079 0 ] (ensure-that-the---basic-auth-file-argument-is-not-set-automated) [ 511 0 R /XYZ 84.259843 295.970079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated) [ 689 0 R /XYZ 84.259843 524.420079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated-1) [ 694 0 R /XYZ 84.259843 257.404475 0 ] (ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated) [ 700 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated) [ 630 0 R /XYZ 84.259843 483.470079 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated-1) [ 779 0 R /XYZ 84.259843 675.273057 0 ] (ensure-that-the---client-cert-auth-argument-is-set-to-true-automated) [ 705 0 R /XYZ 84.259843 464.720079 0 ] (ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-automated) [ 638 0 R /XYZ 84.259843 295.970079 0 ] (ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated) [ 635 0 R /XYZ 84.259843 745.970079 0 ] (ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated) [ 622 0 R /XYZ 84.259843 689.720079 0 ] (ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-automated) [ 794 0 R /XYZ 84.259843 208.126036 0 ] (ensure-that-the---hostname-override-argument-is-not-set-manual) [ 794 0 R /XYZ 84.259843 425.926036 0 ] (ensure-that-the---insecure-bind-address-argument-is-not-set-automated) [ 575 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---insecure-port-argument-is-set-to-0-automated) [ 580 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-ownership-is-set-to-rootroot-automated) [ 751 0 R /XYZ 84.259843 163.687950 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 751 0 R /XYZ 84.259843 454.079014 0 ] (ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated) [ 529 0 R /XYZ 84.259843 652.220079 0 ] (ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated) [ 524 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---kubelet-https-argument-is-set-to-true-automated) [ 519 0 R /XYZ 84.259843 164.720079 0 ] (ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated) [ 794 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated) [ 727 0 R /XYZ 84.259843 333.470079 0 ] (ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated) [ 717 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated) [ 722 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated) [ 588 0 R /XYZ 84.259843 595.970079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-1) [ 677 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-2) [ 694 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated) [ 790 0 R /XYZ 84.259843 445.970079 0 ] (ensure-that-the---read-only-port-argument-is-set-to-0-automated) [ 779 0 R /XYZ 84.259843 301.829014 0 ] (ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated) [ 609 0 R /XYZ 84.259843 595.970079 0 ] (ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated) [ 686 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated) [ 798 0 R /XYZ 84.259843 138.881993 0 ] (ensure-that-the---secure-port-argument-is-not-set-to-0-automated) [ 583 0 R /XYZ 84.259843 314.720079 0 ] (ensure-that-the---service-account-key-file-argument-is-set-as-appropriate-automated) [ 617 0 R /XYZ 84.259843 408.470079 0 ] (ensure-that-the---service-account-lookup-argument-is-set-to-true-automated) [ 612 0 R /XYZ 84.259843 164.720079 0 ] (ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated) [ 683 0 R /XYZ 84.259843 745.970079 0 ] (ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-automated) [ 784 0 R /XYZ 84.259843 641.326036 0 ] (ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-automated) [ 674 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated) [ 625 0 R /XYZ 84.259843 239.720079 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated-1) [ 798 0 R /XYZ 84.259843 542.326036 0 ] (ensure-that-the---token-auth-file-parameter-is-not-set-automated) [ 516 0 R /XYZ 84.259843 595.970079 0 ] (ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated) [ 680 0 R /XYZ 84.259843 745.970079 0 ] (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) [ 323 0 R /XYZ 84.259843 586.670079 0 ] (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 323 0 R /XYZ 84.259843 702.470079 0 ] (ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated) [ 550 0 R /XYZ 84.259843 520.970079 0 ] (ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual) [ 555 0 R /XYZ 84.259843 708.470079 0 ] (ensure-that-the-admission-control-plugin-eventratelimit-is-set-automated) [ 545 0 R /XYZ 84.259843 314.720079 0 ] (ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated) [ 562 0 R /XYZ 84.259843 520.970079 0 ] (ensure-that-the-admission-control-plugin-noderestriction-is-set-automated) [ 570 0 R /XYZ 84.259843 258.470079 0 ] (ensure-that-the-admission-control-plugin-podsecuritypolicy-is-set-automated) [ 567 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual) [ 555 0 R /XYZ 84.259843 501.723057 0 ] (ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated) [ 555 0 R /XYZ 84.259843 264.976036 0 ] (ensure-that-the-anonymous-auth-argument-is-set-to-false-automated) [ 774 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 660 0 R /XYZ 84.259843 411.552842 0 ] (ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 313 0 R /XYZ 84.259843 553.851496 0 ] (ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-audit-policy-covers-key-security-concerns-manual) [ 746 0 R /XYZ 84.259843 333.470079 0 ] (ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 755 0 R /XYZ 84.259843 519.629014 0 ] (ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-automated) [ 764 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-cluster-admin-role-is-only-used-where-required-manual) [ 815 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-cni-in-use-supports-network-policies-manual) [ 863 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual) [ 315 0 R /XYZ 84.259843 170.823057 0 ] (ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual) [ 315 0 R /XYZ 84.259843 347.570079 0 ] (ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 313 0 R /XYZ 84.259843 277.251496 0 ] (ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 423.051496 0 ] (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) [ 325 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 323 0 R /XYZ 84.259843 209.270079 0 ] (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) [ 318 0 R /XYZ 84.259843 365.776036 0 ] (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 694.023057 0 ] (ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 478.370079 0 ] (ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 315 0 R /XYZ 84.259843 609.170079 0 ] (ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated) [ 764 0 R /XYZ 84.259843 383.493907 0 ] (ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated) [ 764 0 R /XYZ 84.259843 195.693907 0 ] (ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 808 0 R /XYZ 84.259843 392.223057 0 ] (ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated) [ 748 0 R /XYZ 84.259843 553.851496 0 ] (ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 748 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 349 0 R /XYZ 84.259843 184.188585 0 ] (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) [ 325 0 R /XYZ 84.259843 668.570079 0 ] (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) [ 440 0 R /XYZ 84.259843 702.470079 0 ] (ensure-that-the-proxy-kubeconfig-file-ownership-is-set-to-rootroot-automated) [ 751 0 R /XYZ 84.259843 763.220079 0 ] (ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 689 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 739.970079 0 ] (ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 146.451496 0 ] (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) [ 323 0 R /XYZ 84.259843 340.070079 0 ] (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 323 0 R /XYZ 84.259843 470.870079 0 ] (ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual) [ 891 0 R /XYZ 84.259843 604.851496 0 ] (etcd-node-configuration-files) [ 700 0 R /XYZ 41.740157 784.430079 0 ] (extensible-admission-control) [ 889 0 R /XYZ 41.740157 784.430079 0 ] (general-policies) [ 891 0 R /XYZ 41.740157 784.430079 0 ] (header_bottom_text) [ 6 0 R /XYZ 85.009843 392.718898 0 ] (if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-automated) [ 748 0 R /XYZ 84.259843 423.051496 0 ] (kubelet) [ 774 0 R /XYZ 41.740157 784.430079 0 ] (logging) [ 743 0 R /XYZ 41.740157 784.430079 0 ] (master-node-configuration-files) [ 313 0 R /XYZ 41.740157 784.430079 0 ] (minimize-access-to-create-pods-manual) [ 815 0 R /XYZ 84.259843 307.251496 0 ] (minimize-access-to-secrets-manual) [ 815 0 R /XYZ 84.259843 523.851496 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated) [ 853 0 R /XYZ 84.259843 238.710432 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated) [ 856 0 R /XYZ 84.259843 603.629014 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated) [ 853 0 R /XYZ 84.259843 589.851496 0 ] (minimize-the-admission-of-containers-with-added-capabilities-manual) [ 860 0 R /XYZ 84.259843 323.081993 0 ] (minimize-the-admission-of-containers-with-allowprivilegeescalation-automated) [ 856 0 R /XYZ 84.259843 252.487950 0 ] (minimize-the-admission-of-containers-with-capabilities-assigned-manual) [ 860 0 R /XYZ 84.259843 207.281993 0 ] (minimize-the-admission-of-containers-with-the-net_raw-capability-manual) [ 860 0 R /XYZ 84.259843 453.881993 0 ] (minimize-the-admission-of-privileged-containers-manual) [ 853 0 R /XYZ 84.259843 720.651496 0 ] (minimize-the-admission-of-root-containers-manual) [ 860 0 R /XYZ 84.259843 584.681993 0 ] (minimize-wildcard-use-in-roles-and-clusterroles-manual) [ 815 0 R /XYZ 84.259843 423.051496 0 ] (network-policies-and-cni) [ 863 0 R /XYZ 41.740157 784.430079 0 ] (overview) [ 304 0 R /XYZ 84.259843 704.822079 0 ] (pod-security-policies) [ 853 0 R /XYZ 41.740157 784.430079 0 ] (prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual) [ 887 0 R /XYZ 84.259843 684.651496 0 ] (rbac-and-service-accounts) [ 815 0 R /XYZ 41.740157 784.430079 0 ] (scheduler) [ 694 0 R /XYZ 41.740157 784.430079 0 ] (secrets-management) [ 887 0 R /XYZ 41.740157 784.430079 0 ] (testing-controls-methodology) [ 304 0 R /XYZ 84.259843 166.076079 0 ] (the-default-namespace-should-not-be-used-automated) [ 891 0 R /XYZ 84.259843 193.251496 0 ] (title-block-header) [ 6 0 R /XYZ 84.259843 502.818898 0 ] (verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 808 0 R /XYZ 84.259843 670.970079 0 ] (worker-node-configuration-files) [ 748 0 R /XYZ 41.740157 784.430079 0 ] ] >> >> >> @@ -42,7 +42,7 @@ endobj >> /Shading << >> -/Font 1074 0 R +/Font 1076 0 R >> endobj 5 0 obj @@ -51,18 +51,20 @@ endobj /Length 2619 >> stream -x[ Wu+H @(^8A./f!vŮG>D=$ς?ZΗ7' 5 =jȱo\5ԞS-~xX3XP;lQa,@( --!3g[d3 Ӆ.FƂ` AƂ"Ш%Lgufc,hV8&4AJ-cNjX&-fc,h $IM7+cA؂K &3Љ0Po&c,z1tԛ(ȹZެ`KFBuIS'LB :1]-cA/X4&2zz%мެdb:pia,@&2[V +3l^q6zc @oFlW"ZUzg Hfl B^|p}گ -ܡ"f/q, 9V7}G?O8nW/r71!6F?FSn4 _=?~xxݫ]/|PwD&Cݑ|aq5پ:Hf j=#){mz̗c}|-z#YPEٜ|#|oW(f;&@|~Nnwoo%oUlmYT#U'Ta~- $}grYw4I5}׀&̏B٦[dÞ\}ovOx9aZ}.}RECE1dէ4sCl]NDBІ͜m׼ -p$GDw-ϝW[˔ٱF7i_mgDt|߁H ߤ儼O\IX!y.m)neI?ߖ -GsWlB;tgbwm6y<Ԅǽ8NbGX](LyӝxٙQ2'+qs<]2w^fmLIf[me OxI'uO#%ͩ{F:e;|d?ǓLZ;#{!f&۰ıyxÌ)m,q4N.k 7qn+#<[ř|ެ}mx9L^_ͶtBy-B:Es/t'K۾sm-.0=d[l]O!F}\ pD>b.R=9c1Z9ngOgJ-쮱&m[OjCv7ɐ방rqTgN?+]])}}f3ʻ;vz\YٟR[=uG=oaː2SY凞ĿO9;‰_MHl2tﳤZۮF~3+yw%L؎`R7 a6+w +DMt_C#?%oUͩGk@׃GMMɆ=럹te mGT|r´\D~6,ct3Oi='" 9ۮy-rH6я.'6Z;Ugc)յͅ'cn꿠Έx/.c.I y=NyBp]۸Sd˒"-y&?S9>y5Zk?S|HL[huݖ+:}v_؄wsےmڇy {q^7Ŏ>Pnt;3ϣeNVyei׹Kiw!ۘ͞dh&ۄ0@aF8Nq2q/_OGKSu$*=ˊ7dFirI&-dxd{b=c m_VuoV6uQ/jUh쯃f[:]! w]!ZKۃh샢MؗewfC̥wm +ƖFxSV݇-.Huo['w?x}L.t}Jv|1Nqrߜ1GwK3YGcv}tحC'!t duTne9޸U3X_E>x3[ҙݝz;Y=g.وOO:ds#ڞװeHYCϏǜzz&$u@}\YJCVmW#wߕ<ވ}&lG0UҎEbj }?o׃S ]fRJ=m *^ E:9 H endstream endobj 6 0 obj @@ -79,27 +81,19 @@ endobj 7 0 obj << /Filter /FlateDecode -/Length 3648 +/Length 3661 >> stream -x\[ܶ~_C/@Q 4H[}v8Ӈ~Dr]ǖ>77R=}aOvJ)w3E63K '#)2磍v21Eoָ9JnMLJv/ 7Y&NCM:rBl7 Bۃ_:| -C)fKG8hy`$$2pGG7Qț:@.;htxm !D+ۃ+!GB^EKKB݄C Q83[Bxн-Do!dCc(fگ߄hJb6-n!RXx;!ྭ֣\~\CC -\q@YML=4`8ڡLS؆h`vu;ttCLJpiv ^hgjGͻ {9o-Do! E;#-Do!L!^ -[BO6av| EUT!|iqSLJ .w"M\!##kttt!qIS'B& - aK^ ߦklnk3ev![ @sM&L+2&.ɤ_6\sValA*Td ɐ"h9r!L|J"c6F0#Ľa -1Ud2t@fV8dx:l![LΓ!0,+2Ag ++2ex!|gpȾld(2؅!3MG>;q7k7h%jPR[-8,)PNJN'.a0ffL( -D3)$c9kU k>5K|^i>>ydk}D k}LLsOtմih~i/dCj͍oWq - 1JOWw\Ij2.  %u$67ѡc^:2]9̿1.an5,r,;^ GӇG}dNk߯0L&d7Ž?=zܿfرF5\4s[yWg~V|PY̱Nq~﫲o+ϫ޴)/OևXcMw9v0T=>R78Vk->_QӹNN-Xdݫ7.)BG'3|XV'm;κO4KgnǬclc6Y)t Ęs79UD6szRNe#Og$xz[}$׽95?ŞΞ, OcO$ӖD*k$r@ySt'>sqZ#|QVwz{c͢sNq _ld1uV}"8NO;WEp@NG^ BMNqGN]t?(oO3R;>v |?:/9œ]k-Z\s.Pm2GWv/00%>!"e\1u|٪j&9$xKԲc}V˓.a5Ny Ixny}>Mb#e#Oʗ3^~U5 ̬=^ukΖ'f? Xv0:sfΓ߁}mapC -6t(/+~%|_:qg[|0B g¡ 7loxu1,l.U0֝w(نQeLÜP*7d3ovځ$Mua5 -H*rkk,T|WKlhE&iyL& x:w -$D NKGYa -nh<ͥwRb#I-=]Vecl>+ȗۤc*(xUZaۼ%U~ZJsszr ղzέ;$mm<͟ͅSdZ +FfFkN6v؃l?2G)Qݼ]N??:ƼiقZn`YɈ\5U(7ɋa,WohuHko7=WI2mW%ȝCSs]N0 -x:cMdk^SWnnɦNpp5KQ4"K:z7D6Sa j4^•ĉFSׯ^feG!D7{;44(zWC;%}ͧa,=X;- -w0hj6m~\&`?DƲT䜼+^y\^ϛ^+ +x\[ܶ~_C/@Q  $Ѥ-`oq(p6-}onD{4?)?,1̗ǏK'Ȝ69=X&(7~n8Ll'5t0Lٺ㯯C: +i3't%t?Û桇HS6̖Dqp"HtIe:[;_o;7u0ho]w &xqJK:zB!qXI4ȶi7cgjQoiqCs\ 41E;;ߏQ1Br(,,q [Bt\!*5GvFt [BBt??ѽ-Dl~lC(f⦎!*p\>^C4G G[C2x Pm.=vF;Ԁ2yMف.AH#f1Dx]8;Xiڄ`jDŽh {9o-Do! чEeJMчB}Ot/-Do!z GMt8A򗌏%FoMpP fB" L%VdM] +FI;9(2lf"T@g!E&sBe4(:E&la2G{ c de3&ͬpt,$CЙ'CaYV8dVV8d8DCsA}Q8d 19Cf'&}vF0@go8,oJ8: :["qXRO]$`D#40QdgR8 HxĘ(>ptv:CxAJA0xl3"U CgcMT9hrBD M^uFGI0oaBDOqX{ZM :;.È%H*Fm Y0ZVSj5%VS@1dLjJD4:DAA +upBM:{d2CAxh5%1)9!X)#i5%fLRZMLSjJ2n!pL!$ dp:{!fC7 +AgrV)AgCgVSy2*!3?lO N$)u"y*_i5%%XLX c0Ed3Yj +<xjJPjJak5~1VS2ZM#O1`p__VS2G Cg8dLrζD"3fZM:ÊݲVSryəa)DguB""kU^홌B#,P+O(s^W{kWƄbNC6.ŋ}ߝ5K_8`|X0*TFd#te- _ ś}?/>e::W:uGxD͠vޯ-"ڀtLQw囿tsqgl3g|ͣjb|͇2|c+G4,{ʹh>awʹii|.as:ɩ+2{z=%eFDf-`ҙqYfImqָum̦>k0s3fNOީl> D|d:Zu/D9&?ٓeݞidڒVx~;9@3~b-E(oJ3g#4NRT#NOcybYt'$eg!˹?O>Hۑ| NMgxo3ksW,f߷Ϊ9OdG`Oʝ>W^(IQk{[)n5ى\ƒyY}"Aqvާ?Ў]O{ֶ}9 ۯ[sۗV^VL\/ň Eٖ atteGS /#R_їhbC ˛zX-=<.Vapԏv ta/6/R_6w.{| >WC[ILlٝoq/olS1@ٔe'^3>`<ؗp=4-o`N,Ka9̭qaMz[BYqwg1 #Iz*{^Way ]R;:+_e) +sjn9zmUv4 rCJ6f|c?71A.FSZT7\vaWnmbJ\tWw(ĝ8-/A¡X$7Ow6݁4\ahthR!4+V6T -g>T(NJl6x$Ieǀ +lg%_6ttcl@eWTK#l5O˕4U tan|7]OnZV`ݹr睄c ׁ |s~tLv3vŐ: hm{U\1򍪛7i=2__n[8-U^r[HrVljDv{-vU905%33D汶{9uuplZD_s$E8+'q#Nd8٠fqHI)\KiD9ueV6]yB[qCNώG}U9(hK hXA[G|Vsܱ =&9=4'GmN}ņNkh|Sb:J> -/Dest (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) >> endobj 36 0 obj @@ -419,23 +413,27 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) >> endobj 37 0 obj << /Filter /FlateDecode -/Length 3692 +/Length 3681 >> stream -x\[ܶ~_pf8C0Р@A@g$($}P/J86֖F|s!u׿rp?z.?b3F_ٔ~Kr2TnVN~SpFލ$N$y'1E@" - cx՗=PF5&2fQTg¨ދat=[8I01L> ߁($ՙ@RgU@.^u&3f11:#lj20T}l?HBt!0ɅdPTgNlb?U$ՙ"f4![Ug%Ws6쵐XP=df9G9G)r2|C2(9 &4;9 6Fuf19 !-D1D>&64l 12?ZՇ?ZH6F>b Z5:c4'hDF1s`j`cTg1"D13x Zc1A :^hNSbc8Z`cTg$A-(AQ){1A1C1nXGƨ^3?:i+2Y&ᒺea2ienvD>z^鋷~lZֈ=YuE*Ebmg%GO;Nژ"\;:Di+:F9 ֣PqP]zYˋqtp%I4tq%m5 F?8Xjޗ5ryW.\[bfy&&,2_aiKy 5ϳΆȱΩѠCAq> d'v–}v2POWPaN F8s/oNy~f*ZF_dsě/W_}Cy_Ao>6Ey-4Z?^:h>?H7}FA=o|L&?4h^nOhdyQ&5yD۷_~M6Ov`̊oYXˇ7,ygKZȒ+w{\'1}C:]N3sl&Ye'˒q>Ɗ /+ق)ǂ2U=uXtǡrY.zL헶h2˧sdvm^Y?le}mXF,v.K?8{=lW #݇>e7۝* $@dL]I9(t@3Nm~Hekg\/xw:މhmJ'>$M &흲`eU~RkUGvp6 [CގY.&r"kWKVi:GK:rnu|qƭm_nCfs;-z?ne8gyM4w+)w|k'^c9\i6M֦ݫf&Cq1U]΂Ex**oyKE[Ҝ+q(ha{wz(4y-{T)O/7ao0`?B.m37 `b1tZIaWdX[SM QyJM%XCa.W܎r-qc*6TjJwuJ;FTð Z,ʵOr*yJp⸃+34B~P}}]ë t'hс9ȓϱ/\_Kƞ^ o*<|i!=or@LWn,KEΩy,eoDN +x\[~?< AI&`ȕ%-}41 g LL S! LA@#ɢ3g ,:/&΁7\ L1yЋX1PĠ3ǐDgP A.ML@rc&J61ѻ90Μ$љ!0!ɢ3%,H CB!/:byK!0 :{HrJ6&:ʉcD(?DQ&G1b6G#.`cDgF (:P?$%(e#5ȧlƑ!r6| lA!0A lR9 R1QIHD.)"c1s`Nb`cDgJ1"$13x Rc1A :^dLSD'dKVhKR:(s 13 a@Pl,0Re7EXGd<d%0˔geqKe2ienvD>z^ӗo?}ziYEY>O;~TgL/2z^/jO_~e(ߝ 7h>>y&Ih^n]ȬK;|/?a^d\0Wge|Y7NaGuii2˧sbף?levê-aU͋.fy.GNYIܖ1qb޼wC4'_IQ?(.l2nmYc|L#߇>&nr;+ &d6s%F­1D.oNq{uDݟ0X*bM+>:Vmgզ!qkW"0cAC q8gy-y$n+O$n|kgo_?a.hMԁM֦O_ + VɍKabx4TiUHB*whنl7.C,^pbr/8e,%qVW!^{&ڳeF_yN|ɆpaYmx+tՆUUۑG[5S򧲥>MrӕoוMre8uO |KXag?w8D)ڊRߖ_>8 +M +PMv9[${fi룤>3z1uO~xG(gFYӗhًM}R {a7@~u`XlqNUMi^N-mR&j]OoP4)Wd#$4vD͕ _Bf;>./\)4\崋[ZTjO-]ꔛwda<͵8*k+yJpⴃ+TMggd60N46xmQ[ {:v0|v,vtYl%L6Sijc-uM)ڧQ]ss凕-Tkgwnǖ;Fqj zWe*la+Vϵ.Fߪ]lv$)tqOFkNn,=*TjZk)PI~o[n]JH›b҄-l!!w1 #:}O -B;: +pcs],Æb<^]nH?qTq81%<4){ +%É36*CkRSr줙^#} ;4Bw ̎MW4`89ceώ^}Q9PiKM0JT޾ݸm5κS[ECQS}t~PeNkhBŮb:jiyJ)ydGVVۭ͖MxtG;%,g7iHúZm0BW$߇{ե׏B"sNQr DV!F|}HX2~{Txm%!=o^@LWnҥ"o,A^ ;wW endstream endobj 38 0 obj @@ -458,7 +456,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) >> endobj 40 0 obj @@ -469,7 +467,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) >> endobj 41 0 obj @@ -480,7 +478,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 42 0 obj @@ -491,7 +489,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 43 0 obj @@ -502,7 +500,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) >> endobj 44 0 obj @@ -513,7 +511,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) >> endobj 45 0 obj @@ -524,7 +522,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 46 0 obj @@ -535,7 +533,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 47 0 obj @@ -546,7 +544,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) >> endobj 48 0 obj @@ -557,7 +555,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) >> endobj 49 0 obj @@ -568,7 +566,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 50 0 obj @@ -579,7 +577,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) +/Dest (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 51 0 obj @@ -590,7 +588,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) >> endobj 52 0 obj @@ -601,7 +599,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) +/Dest (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) >> endobj 53 0 obj @@ -612,7 +610,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) +/Dest (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) >> endobj 54 0 obj @@ -623,7 +621,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) +/Dest (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) >> endobj 55 0 obj @@ -634,7 +632,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) +/Dest (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 56 0 obj @@ -645,7 +643,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) +/Dest (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) >> endobj 57 0 obj @@ -656,7 +654,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) +/Dest (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) >> endobj 58 0 obj @@ -667,7 +665,7 @@ endobj /BS << /W 0 >> -/Dest (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) +/Dest (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) >> endobj 59 0 obj @@ -849,22 +847,20 @@ endobj 75 0 obj << /Filter /FlateDecode -/Length 3494 +/Length 3492 >> stream -x\M$d1r0p9̶=6YvyTݭM.fW*J{d#%M{<9aλ,]=>X\s$5jyg_c=95%!\w)\}~E)QKqpK슧 ޕ8\!-Q ]-P_ YYAC`S,#DN P10- sv>g Â- :|*"0zYa1 D)Ơa|40Q\Ȟϑ d10EdrW", Spx mV LB&oqv "=Y\hp#fyr:I ☥!9R̎Kb`HDiQ'XPN$8$If m֘ERBda%nqQKK0,٥0\ % -Z~ . 2 -!2!26`r$!y!GY!e =,2c r%s I3*:?OvHtI-.PAO --.PU1 ٝbp!8 %(P=J哜B(ZZU,*.0eKxROB]lUIhbULS^E.tD,apҫ(.f CHFhuE-P{ҫ Z5#[z5ASB)0qna .: ^ESEVg*0"AC$$K&h- -qyҫ)''HT^EJuiU'TX*;b=2&'Hҫ9D0cJ^mV-C(U̧[z\eHCt ̨5[z3nL*& S7\B0L/C٨E|Xz5g̗E5Z\̗$,m֔, ҫuPQ-ZPU f,ZPQ -ҫZXz@cR-ZQҫSWAo@{dULP0BVǮjVT &_Z=8,vzZ=Jr{G#WZY^-9u$KB},ҫ -QA^ŜZW1%WZZ1,ꘇDK*:bUVWK*:&K*:tvBK 1a}Z3fH–S9`/[r4s 5荅kA-B+ Us1v޲}\_M{l]icmR[n9Ȣs Mjm=Gs+o9Ub\Lnl 9.}ӏ~;6JYgey6@6G`0'.?O18:Ge?Yϫ>s>1εK3͏GKG#g=鞖6>\w{gL&^;l>݇ziiaN1__MV׸4a0mS>*3.q=clfiׂ_ ݇ȥγŸ/v2*Iko~/'x~6^G7!Zy^pD^{m^:/V yn:F*?,vlF~95>>^kk]ծ^F[y0ЧGst`:^[-> Hx k>L?Oi=N}=O$!D'a/⨾1$y>y8:2}yyWͅo(h{E Y2F؎ԘK[hq̑n:Bl_xtOj99O-}pĨixX -k/"}vbq4 IaG}ZmTd[eH3CtȬ|?vK{Xǣ"zb+Y(jQyJzq^,\i%@&TzjcϜ~^}mGO?Pu(Zv`k>l },7 +x\ێ}gIV1"m`ր~⥻53ӽ 6JR:: {S8R4'>~yq~!dWϦ>b fhsb Yz̩2|ձ-Zf@V&s|Vf`ŞQhb`UVGWK*aNҫСfK*:FBcTWg1lUL 0`UV'<0Vg.K*:!ҫ +XzUաҫ +΅ҫ +,>{Lk߰njY20e)KVFⴜ"&9u zcZPmU\|l{ar?[W/}n{&[4dwv_|q#wU]=Ow_~_>a{%Pœ S>_=,`^nɤ~oQ{kx#>=PJ7D*CXb16- edQ[n9&嶌̕7*1Q{CAM&z27ccz|GHyHLS%CƲڼy<7x|u^ "^yf#XwlG{j̥-4t8Hjo{~th6L=DV~suFn5}T~;V$CmwϏiG5̵Z-W.g(p4 Z%\SvY%洼%.Ʋˋ>P3/W/&i*!sرm}v}3ֵǺL/cx'8[_ײGsúڷ&z,hjO[;?R_GH L,uX\^Ui}ε Ϝ|sZ?N(hig?>` ˻z@ +n\_5?7?fo_z2s5 zIŴ0Ÿq8~c۫x #L\޻eֽԛ"h;&\tavaM 7Nxtn}ڴm}(Vi] twG:A6ٳ$Փǩ9^55|z5f]<)}0uwq94sgbv7a)l|n] sڍM0$aii1ڳSPcmUR" =7Jt"_?cgsyd1R9F>l&c)s(WZou<)_8ݏ[yxR]^Oݪ~  ICq\x)eluJ_(2Ek; :k2{rI-WSkS=s[z~=9Z+B}7שhA!6tO3 endstream endobj 76 0 obj @@ -1278,19 +1274,18 @@ endobj 113 0 obj << /Filter /FlateDecode -/Length 3623 +/Length 3624 >> stream -x\K,X$c1rXxrif sOQɒZ*Lkf=#>$)l[? #dM d? rOeNH~dr! .|s}ə0o%$IPL!i 1@!"mX7XbFl0,'P1EvڤaXfFYfbe1Z0,b3!`I&$BChBޢ1Yw @$9$k2ULf',hqevT aVq^8&seY`FbL4L2sR1bVǑ5H?X搂,s̊2#zXf]VC1?efhoYf9+-lh`-Ĥg93!S I1c,&OGa'rINƇ :e&<̈9)z轍I֍d:e -I1e?\هA.Bj\Jc1`?uE?u9.A.81,3AA1,C]T:cXf6*\uY$92Fx C;? sA2X:ȥґ? @ǰ>[R'pYǰ\ IuO#)xt l9),`!4-%39[q2ǯ.`}3LkE6WEjS MNI 2щb3=7q荈q, ݼ3T$>pm=v.Ee::SBhT@k S?.tn`-B̑mF噡"sdE*2GVv$Q9:4 &&k4 u0a\d=&SRs -59!57;̑mB)9%k2g0>@̜LmM-9oc ; ;qbډ䢉;7q'v; I;ߝIN$Qv'vع݉9 -vb'qIN$Qn'vXwb's;9GNdQ;<݉\NE;Ŵp^݉ĝyu'v2q^݉\1;9GٝɜNdQ;sXNRn'x^7s,߇ b]#uy ͅ+ML{Y%Tm:߼?}7?3wͻӿ7ȥ<{tA5>T^A5> U^>s E#"Hre-_hGֽXwOJgᾸͤÝ:=n [#mс]_/VoK<`Z cix΋,O[mçp3ӈNwhL<9h.'qOښ LuZvv=Z.J~)\Uiw>SU'=L40 tỉ|;]خCiǃO6v+GO<v[mt`űcl8ݷXV] vvv6O{f6~}gQv~ygng*c5NlފΆ< qTc1P?(K~;MzۮGuNO1k.3a3Rg"q m\'7(Z8362,;ce^x)zj4N[FUo~Ac 阸*҉_VRqDޏfopedüFgZǫ'۱/B !vcN`bnn_Iz]S%9^ա #N[DZQj\8h:Mp3˛ijg^>瘕ߟ߆m-_A~KysW{hH>}xO3˸9뫶8I]RFHy>Fnuœn<ȴAO ݜUxkr([RGގ-Jhc~u{v3\7n%7)fvij&" {N 7qإT<إ4^6q݁YL^3@e -۾~"C5pȥ:]̦YLo7|8%!eҕ~Ѱt\ ƭ>4(o_o%N&7|#&w,ɏl\b>#c7qBmPv=/_X }[ 7 7Poc!TnP B*_K!~k+kdcjΤ#a[!]O[h j]ݧڠiQB[ T,PmmwCJ޹!?B\A+l'^mdtjLUUV֕cZ2pP@e z#%6y$IupMc R_ىQAM dXiFkh·o˄1VheqZRlcNMj:H4%iђo 9َlcɴB#ywbGJmmj{.sbguSj-afRs.ÝD9|2DLbm%K"uDI6Dx y`5}}lW4l~cm+ÊP;erA!ڍf!aj +x\݋6¬QTRUIAA}rn1Wr[R.Lf703]TOIV^~\%1O%3!'w|DΗP i:ggYqybX"( zaffaT!LH!̔$?!̈d9P PbO &z " ,bA1bN 1c6'bE "1"3 ,2#lOc&Fj`>eD7.JcQʠxfE RC BB`cX0?(u0X?(uP9JJ@mȌD:(D#2G1:(9:$P`6Fd?(u0PlLvP('Ǥ8)#Tv)JA6Fdf1:(2?$uP@`cDX<CR!B1"C6ibHꠌGƈ^2?2Βa>fLxpYܲZ43YhZG'3t?/i Hœx*rxRLZmkV ΜܳqdшIх"\@钪>4=[[XZwjPO % zU #-.yU+jQij]ߧx%}2^!lAѳ0ȵ\aPv/ʥU aEu}ޕXv޼P\xKK^(ןt>xBj KG +P|@w+t_B%D_B j[rjƼA׌Vs]ӧM XR`0098Ă,L xzH(:70QTȐ9͸>34dN>zC$N02.2Y2G2°+PPg o y"bl`Z 08%4%s.ђ9I9QR%ss&ddS4l}ySNr;9HbډK;cti'v;$w'v2I߉,9Ď8;%GNdQ;YrT؉,9*ĎHNQq'v(܉"9 +wbԇ;SCܝ)x'v=ɫ;S]ډ’Wwb՝)u;Er߉"9N;S$GN쀗$vG@ezu=Wc%_]pZo.̿_C9ob*2ޫz%~tÿ<7>W|b 糯7e@inL4mCL>94me_>=EGu=?oE7fv`>ځpg?z}[`سXo>ؑua۠yL:oTFCЈSDtd΋"L[mȭӧGx3?]俟F0t9u}?8hnk>fc~L͇L=dB2ص>o TiޜںOY ps߆ڰjSkڰ }㵰ȏO3_Yz.v:s9򚍍[%/)(}+ίq}j].9yi~ ?fXcBQ߃-0\N7'f@8_׹o1P|lˇjlR&՝;cj<;~eW5xަ8l[۝!c|I7ӽ[yEh6G]އ~LSR? z!`-,0ft )f*.oMЮ['S۫:Bv~5mҙ/7Yus+D\{_Is&:8q,5v07%("]jn%KÆ~XckՁ2ÆiOi6^RW:-4֗4PS!AiTrE7(וՂ317GŽ+ B:Vq37Jǭi~2\=ڤ*iQB\-lpE<j޹"?(i +O41*AMֺ*Sk^h hf'/ܳi0 R}VK&+t;klAU*Sivc=y,нk +kR}Bd 98{kA;u=w>jroku7i*lxI[#|v1EIRF'r֞~8l?2"RZ_p'Ҷx}~uA֕,LKtbE CXjx*_ݏސ3(HCJ3dOZ[m3 +4I3I%';rǵ8JQ +%Սrʩj bVԍtWQ"ֶԉF8(uMPu3‚1n,YugE@ީ;V=St^sⱞ꼢9#4'G5fFBEߖ15xeq^RcAYkUI[ox};;?},WhThmVm8126B>+='vV7K!o&C<:̒C))aVk#O^,^i%%1LڣO !£\(+ڥ)`k_.ViSE*y7fedb9 endstream endobj 114 0 obj @@ -1540,7 +1535,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 482.305843 386.420079 496.429134 371.420079 ] +/Rect [ 483.326107 386.420079 496.429134 371.420079 ] /BS << /W 0 >> @@ -1704,27 +1699,16 @@ endobj 151 0 obj << /Filter /FlateDecode -/Length 3784 +/Length 3789 >> stream -x]K|T> f sOQYEvzz ,fXEVW(\5_1E~&`:?>X4WO6w}MZI~"88E'6 0LVf `z` Vʲb'VRc@or(^7ViؠA=Jذjsg_غ -)Blv4T/挱]ָ`aQM ס {줮ouן._5J_g1/ՑL>LЇȇȇ>v}1H:ט?M;!HiJϛ"e͛+YF|b3. -C 4Pƥ_b Hn&u)O-nY [$ vo&yBXlP-uۮX [dO[ioR&-ANͬc#v;q6, plA88w~FuxQDIѓ޹yPy3zIѓ'E?ET|Bw'EO}BW\z ;ޭkRpg"qmaum *'eQf$2Ωi$T@π*jL83R0739/ީwsF}\<G2TTIyKc  @&92ڑWW}c )A03X*i4 -cD?3R:ALx{uWA*pe$N=)蝛 E4=)zRQOŗ/t{RIW-t5muߢٔyg=My(_R;3}x;2APг F@#])uoe -Qx"|]5li5LEOKTn0E>1ڰUMw¢DMlgȞ22ز*`=nTTUNCTaa)-,JىeNb{@yTIѓ'E7s{h3f3'EO~"uO=)MhE =_0Bv{@4}.+}1$ň*1Ș"]֏_Lfʿ";!>arxЇ B߇-x-~k:b]T;gdi_+߾H᫿_|{>Пfi~%ZBN'7|[ -4a ̟l/-Z޾[:}uYv҃dK/3j[~9/l]Ҭ/)r7 E~8VF_ՙ]c( S",z';Ƈ|.sa/׋%JA!,)l2Ql뗎%ny(:wc]-L#g8P ]1Nm}eK۠ 6YY7NV<9f(~WF'JjGsŔ>uYߣ.g~ZYFOW}f3]>[JaL}?C{mkȷUo?F=2Ƙ7d1Qgo~#HAF$'Q&P#:Z;ofew |6]fML3I )E}?rc')!y?soIaƔxVa%l~`2E"Q bP;muEUsSX$k@Ʃ>6纨 -f=/fU\X \*rv-ڰF*TMSGz:~`H# -Zç- -GhUD͂T`Es>/7EIwi''cp㯞>tlҌwFs$IȇO{W{4=xWO{ƄZ-ȸq^#\)*3Ws]#VAD\p2*a¨2(Mv$h29[#"Di Ad20CZʪ#ZJ#Z^ F\c4p +=o}6otf7ϸ( g,X64B~it& allԥ/c7#<$p8qNmN#G}TQcQ„ѸQyhG}N336q>Z?bL[L 2 Aܗ ֎d43\H1 ଆAR`ͨN+QW#Qz b +۫2*pV;੺p*;w 1w Q:@:jwj=RAQ;H5pFwjpj<;H5pFz w(-(WĹ+pSR;j>eFP*+{O5pSrTw<(8=bAl{8ş)CRs"mvBonzPwoo2.2|+g1\򕸷)Z@omoUܼ4Hݶa̞ ,- -3<5G~s݉㖮6*nNlA..[h#7S}bS^u((#qRI E_)PO3zIѓ'E?ETGݓ'EOj+iCͦ|/Fϗ̻8nʋF\\l!xۑ @_& 0iJ?g{ Խ):F-nuՌZQs0z5?E,QqQ.J8h hV7US 5Uqd"{`˪$-kX[QaS5Wq;q2qS5#nN\ \(6f'u:N1;ݧe$N=) 6iF;#:)zRGh/t{RIW-t%mB#(x$yzkv18^!)L>\o?F"廨灁wRɤ7.w_H޼swW߾!iV[Q,d({o[ +4FAKMML~5z0_ڬgc30nENh{nm ogIǓ- ̰_l弰vKle\S,,2X}93}TgvWX0?Osϭ_wǡKՂ BXSdf/1K݄PtrS"[Gp._3?Dgc&F1T۾ϗAAm2n:/eyrx͖Q:E(M~SEgd}TiyheoAߧ>]u/RTcRY"kLW/^{Fްj|cޔ8B1GC#e4ͱo_WXU m*]4βZs6?K V;\>f|W eL@:e2^3JH35uȯ=A/>@f32GL=NsP&58cs˲ܡ\jz?fQ,-:vcMх =G _ccZk\Pm6uru2}lו]\4NŐ@\]P!wΧ[K#RZ|((jwn-732;ˆG}.sa&W$_YDsx1퓔 Mr^򹷤rcJ Q<~0Z̒\Jm6s`2E"Q bP;m> @@ -1996,7 +1980,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 478.154476 324.620079 496.429134 309.620079 ] +/Rect [ 477.986019 324.620079 496.429134 309.620079 ] /BS << /W 0 >> @@ -2040,7 +2024,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 477.986019 234.320079 496.429134 219.320079 ] +/Rect [ 477.506282 234.320079 496.429134 219.320079 ] /BS << /W 0 >> @@ -2094,18 +2078,25 @@ endobj 185 0 obj << /Filter /FlateDecode -/Length 3763 +/Length 3766 >> stream -x\ˮ#+66_"ËbY8,,9ntI|gu!|ZG[R`&&?3bs1/7!A'!8V1.k'R&1wI'6=G{;Kay:5<ޱISghMHOr(B^@\nkq#eٷYVmFyYW?mL,BsnvL&4uCm8tk~;6 }HC;ٗ?7|N>sc6$M;i?t|M?|:򇏗olFyMׄ|Mț$8[Kt|M?|:>fj-N.>tM. 9o?m0%J:&Mb(cfr[a8X`m13Y$pѪ .4 8; y1lMT0*a˞ i8n &JdU 3%cqd|2J90r?b8;?.%b28c Y8j29S&qOpN*9`g%~K?ރ3%R1ɆďW1Ξan جďQ1XP &%`6S'9DSRb A - ILSfU vI9FgV8p&̊JarR'xpTLgo8)8cP1Θc d*0 iMɪIgV'dRIPrQfV⇰uK䢊XSP1ypvK[Vpư?ٸb&Lh'D<?8'U ́X~))< K1Qg=#6j9|{R‰:X\n!bhL -&s 3(EcƙB4gh8##Lg9wɀ3 A 8;K#gQ8RK^ .S2ƹrNI301sRALlk'dGc#L,eCG.ilh(*.eCKt?¤R6}&qUx_<}]E~T֏" w?G*{>C͇*"-qU^ľ/)\BfEO{'sU_OW{t=ʋ6*Sy5͒"1^varx1'~g{yq/dNx>v "]ž[ue|^/cVpmsw=1O^n[#54ZxFU6FOS|8P%nCO.M<ˏ䪟lY{i:뇆ZLmbŊ_>]~9LI;b(s=ܜ7m70˃E5`+NgymnC-~T%e]*A(2Kq}B"IUlT(V{ëbBHB#u1r0Wkosw4R[ztZ.Jm2WLyA*7)UdsHh~M /o~qŝ6'Jm$Iv~to>c7HXV#򖐷JBﱻխ4-:!']n}#\SrؙA9R0_ޭ0tL'.F VÀs`F \0^ǀ3ygIU1]6&ipv@6! c0`,8Uô}0AɦH*ƻr4Lq!ď LV1'ĘC +#7(]*&sq m*&I.+1X&ɨ2Y{&NsR18+]L 1+=8T sD^p skpf%~|g獊blYlRR1 f3%~|Š)짜8$%JJ`˜2{bK1"5 8lUYQ1X)'%~ȃb8cP11%%(35)Cd*%`0xU1 ?gVrRIÄ +Y[ +. +,8D*Ɓ aI0xk٪gk +*& ob%B"Y8'U XyȤb8Gc&˳gV@̈́P5Q3{4gGi2G%~g TgCT'rtY6Bg2['W c#1.k ]&DdGEʀэι]3t(f (+1X [/M#dOϺB: + J5N^ɹҋ Rc{ +?嫐S8+9mI?ijed|U.hWҕ^V~db46Rw;WV-Eo)zOl+n)zK[PSݭԽ-Eo)<!^ƥ(3\vthu<|}R‰[yd)%H?\BG8Jјqfpƙ`sg<2d[Jy6k3zN 8B +d^a,8}r_ +gp >jKi(4>8S(%LPʆXxbN}46R6t% 3 M +KІVaR)F>zb<IB/-1l4U8cS8g S8ge{yqQ8czyqlbggc}8c iCyiC"&8c8c83893=i8D9sp gcXYi X2y(X>VAg"ڳ (a ߬=8~#ƃGg"oݿocy~/aq㕿7߿EG>ȳJ~o9NX -?^WC. Hnr/*"EU9*$=o X4gط<T!g*GmX&0̯r=SEr*rWxl/'sUW^qR rŜ]4{k@X+}_͝]D&{C-S\s~~F tݨ +>uP|Sp'&䪟lYh:džZ~LSߊ 4G$ p*sJLOWb9zo'K9US!5\W~e!0T->δµu%+s<[-mБئ 5:77}bHfPJa6bBY/,Ċm#\xƗ++\2{/{% +/KN4ąBaV4K@J%?IWK\mDeVv]e(hLv1Y4 H?9rPmjo{)m+6፥~˶}-"|[ Z]ԛ- RօM*k=rf,J]t^iF + [+^- +2tdK,MJ\7uv/AH;Sӛ3濧jU +0 jߗ2)F!T~ސ)ȣŒH-HMpްEmPǍ|jFlCz64~O~\j\!2ٲ| endstream endobj 186 0 obj @@ -2135,7 +2126,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 477.518001 782.420079 496.429134 767.420079 ] +/Rect [ 477.434505 782.420079 496.429134 767.420079 ] /BS << /W 0 >> @@ -2377,7 +2368,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 481.214534 335.720079 496.429134 320.720079 ] +/Rect [ 484.911067 335.720079 496.429134 320.720079 ] /BS << /W 0 >> @@ -2497,28 +2488,30 @@ endobj 221 0 obj << /Filter /FlateDecode -/Length 4004 +/Length 4001 >> stream -x\K sU$X @ E$@lE0䐿ZV3=^zT(GRΖ}ΤcɚHr!̐?L^ ^Oh@29xVhrne]XĘ8RPt)O rVug)8k$o/x4L3{E@JhLY+<Vl|*9` -QGdU0cLQ0PGM"C-`8⨈ - !T04Lc6ML8QrDt9$So='LR>fΘ@}S&`ʖ᜙r`!2-ԚgĢ4 .[MskN~O!rYbXme{ S[zйXdW0G?~lCȪ8܎Bܜ`&.rt<]In%'-ԋ l%uWWt?zqp85,ˎptP%rhLqp׷pi!QR8cǡJ˼y͗=EiE#D!]Wj<чɈ!G~ ݣ}#D!zW+oPG~u;h~.8zy&Lm{rX6Ü'LmTx_ٷ-9O^ҭsٺf&u6+:u(dE60@Vt.uʊ$̚ΜT4=3e41]jS*[} vΔ'qMIȅ>hOжĦ<LQ9oGLy8RN6h:g<D[bAPtcA9B#=>eϱcHKDȱ#⫑j;CC ;>*8QB%b,×4SIzMgQ9<)SMWBr`WbZPtN8ZpX.Ξc'tȱu&9m}u,&: e'i~ˆr$I儠Td)o+N;A_ق.*ٍ!xUggv(Q; -ztBwGeeы5]vRܙabvy1E\xxO&DSՇ<E'- .i< <{ēiy'[5}?8Amc"P L1ڤX1Sy*f %b?&B۽ i}ur7O -J>϶v3x?~9|e̮?xGZ3 ""2o+Wy>MҾVd-S/] ݋~v-o5[Z?T[.(^d^~Z~w=3FUGbK/tbPֱގY>/U B[t1 ;.YU|83\=}'tPm}E߿:_ipiY}_ZLv [;⁽V텿XX'v[AؼO'8n1&j> ]]җ5=vsEΗSX9{eiuR[[FmjZ}@^Ԁߊ?>}p%F~m;1gr5 je}%|O7ԬݾiظǺAظP]>q|7dՎqkŧ._qYѳZU0%&]vuvlѢKff *;ƓvxYeEfn2!!::P|(*lkK*.>n_Kf-j?H&m>[m'F$s}Pqx=>~pN'ˊ(-fVMɿm}n$ݰaVʿ,mﴙDJ$P"w^sٴ,kh|k窟ô|1LqRC#&0ڒlpB7 WyglC/gm8}yz{羿|S25<8U-ۓ|W2@z*L/H{c07^臹cĮ47^Nx9X>O: uvJNӄTpS.Pru&iW{T\i4CcbJ4,NpMuy_B0Bw/wv 7\a$zo'';ePcjlJ*SKY W:gCHN^IC:8@^QJ{q)3/IswdsS$~nם<u۳ܺ"˙ 7_$Na#"K7y@kH UIaCA2/+B^lƄ}=mp|qiϢK>+cJ!NTC!n?J(|%NDQNc]72 -N4FWL~sxݍ{U9(Ԟ;YR -'9/a}|Pˋ1J \H4UBVBDlc)f,ˈJ4ITIv6j;1:;8{-& [w*Nh{ٸf۳E¨LhF;7忷j+ĥa']Ϲ;Cg_>]Myu}d%6K$Fv3_/_]le; pYUo|}h꧱,)%{l.ڃ}w^?Q +x\K$ sE @FX֝];PzTYҳ*%RHR=/Йr x|>$)7c +:jlISGET0e0 O!a h0Md$Ɖ%0D&)z9arR6sƤ +샜2!$S <)pFTxSV0>lGYVxq$ξO .h6 2sf` i)q,“s&2!DWY>LFG>B3<?= +G>BwuW37.袟 hY7kk +hbԶ'AZ,>@rlM"oU ^B[t1 ;.YU|qp#g{f?W1O6^ˡn+0 _ugabi11lZor"bamWc:VX r[o~`ꘔ)/,Gw[^ym?WYlq^*Nar#!/jw矋?޿q%F~m;1g31j_ ;ʷj]xO3]7 X5>~[=*]ԽKwu\5ߍ9YcqWxa~kV`}VK  + V4jҌĜT(+e? OjFj=T͠*ҽ F͐,`_V[nqh[gΎ9Zv{lDsxnOxxjwYQ $}o|=6~ +(>J-sļ[=lג'mj5$OTzW#WGy9^m:Ey(8pIji8_UelJd+Yɿm}n$ݰaV i qk;mf ]\6m>.m@3Q2b٩}[&lˀe -0w6U[{Bw%btVBh "h7y6՞P?@yq02O7ͫpSn,v,O-͓LѪgsL{+p"fk9jL}/nrġ,IB2q).$h8Ų|t/~ӚƄ2Ix>P~ ]hK~b S?<\;c|y~nם<Nxs{:zn]L7{"H }Gs;{t=~UiPn~ )Ɗ1a_O}-_>w*'r8|5? +*h'S>lfqH) +_dQFS?fe׍Bѭ:F'>_^w^U- +N}>B oNiX9/n;,"|/rFhW'G5fPl6Qt4ht +Y324R5Š$-MnDoxZ"q^K -֝7^6e,C0*S;юE%3}qƵ +qoa a=s.NٗOWS$F>Yi%Rvoc;P/DW5fNi8|b7}XSM=6>mi endstream endobj 222 0 obj @@ -2724,7 +2717,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 481.191097 465.620079 496.429134 450.620079 ] +/Rect [ 478.154476 465.620079 496.429134 450.620079 ] /BS << /W 0 >> @@ -2878,7 +2871,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 478.790950 177.320079 496.429134 162.320079 ] +/Rect [ 478.622493 177.320079 496.429134 162.320079 ] /BS << /W 0 >> @@ -2910,22 +2903,25 @@ endobj 257 0 obj << /Filter /FlateDecode -/Length 3763 +/Length 3764 >> stream -x]K$ E> 0ٵX琿JZupU_HOI]ScΚ? -!zI+Od~*]m]T!{~ ʭ#\O똕9[%Iʛ' <,)OA͊㄄GIF(cf ~FT&4*ZG0R*F(Lh8fWlj; 7񧡨t f8R(ƉG7i7q)IpFX7i$X;QOYe qOhUى>`.:=))5 -zcBAO| -hzħQ:!RdْqVOٙ8Rq] -fScOdYB|MjD#WLr0) LpaS gu8k qSkFYH\32\3sf6tDO\3[hFfZhvO\3 `Bk&7iPkʌq ^O|f"$A3}f6k~Sk&j郠>)bLhfLfruSㆭOTk0=#5Y\<2#JjS~>}S9bN:Mj#W,]ڊ "J]ù6>_G&/&33s;!Tj.0 -NlW4.U"qB?^x|ōF]%Jxn*QXjlKBf\` DNp\(fFbC(,5yѦ .dγUw{?> pBbv~0;~x(,5+XhvRw?;+ -OSJnt)iލ FtO{S8?K{Sʻ, A5E=mJ-q̷<tKl=)~X'[,r[,>c;l>a(;a00vE8-[,!ݻ8<:L@h(IG9o?/(sF/c:R<껗̮/B/tKiEMh0cNhu_S&M恣i.iPm;f![n5`hje/"Jg- _8>_y^Vϵqj@^rϳg:,;*N(ˍl,0\Z,B]zK ԓSl}6fXkg]6l!)u]x_kUqMnƚ3DQwv'VU5/-_V~$G}d -fPd dn6y#4̉B&kEkf y.JS -t]ZrpBcY|: ӷjÉ &ahqy2L^v.@Y,k;.OPJx^-N2%ukP1h ?X>u]NƦ{16M&V C2t=욮PRЯ _5FnYave󙫪+:3m ۅZt j!B=tFЂ[q낮JŊRԅ53kPB6bQn]NC̍| -X,TinC5[lQ.h[{8qQ}/Tw5Z[[4ԇb*N͂Z*,.Sȳ&$f{#Iժ# 'қ+yG ө}*ZC{PXZVJP%X\c7=*{w|j|7 Zp" xYni006Ÿ(4.Z$utMY__>jm`lq! +XF7؄FK%jBij5S Rn 24/+։k}zjtPDOC̶|,,Ο" D2S!06:5S@J!II8ӈtjgڬd]eM;}J8^+Z+(:ւ7Frs0J6 U^V䞭mj݉QvY& ) - t*G_trbeah%_ EZWIz]&ْ ts0(mec/t۳6E\v]Q$wNx t'85$q ȳo\o)vxQ?Vˢyؽ9}|U6#TO}Z*R OI;^?l> +x]m$>b>,K*1Đl6y%&>k8C~J=z)uճwg~ZUGU%iz{Y'Q!D|y:?iI"ѝ,/1^m8 +#DcOwA+p8E+|vyܔ9[%_~"71/[5ƉSޣ1n_$ + lj +*Y31 ~&T&2*ZG0R*F(LdxXi=A4: 7PT:3{)Qb}M(.)üۙ=*idfFR{@!pʶ(kDX搝&*NH蜟p +(qf +I=*> Q:!RdٓNE~)G*V1`f3fR˳$Ɖ%qlMpjYjbՑ3&9pcS&0=93Y8#NdiCpjmT8csfz"Cs&qxΙ`̇0z9ӱf2sL? hg93&29g"/Zs4\Uf2sfz)IO8EI`grLl"c5LSs&jك +>1p \Z&23 pfӜ39N8ETaij gĪ4 A/3¾Y)Mc$O_<N>[DK)$buyC[;L^MIw8wt}88zE/XB:lt4ehAxWa ɡו9jJH4EHnPU$mZ+U_]g Z0(;a00zEK'-]Tw& 4\$_WCO] ] ^~/ZiH. <5ChP'ۆ;\V橱{%!wC&*<+`|nTq |ף\FF2YG~v_E{9 y>~ΑmE/dõ:>Ƙq=z]kuEo{h"6vm~';r51=j92lXu^`g&ۢ\kh\hYl{X_$3tnxve?6/ڗ21};wFmi's>nުpI6^p6/S_/? G6=FgQu9*5gyb?H+/>X v-1Z}h:I>~|9'(Iщ2For>XGGu[m)_}83&.m 1eR{Pmql8604n[m=r~ehje/bZ+:l~e,|y9zq[>orvRy0۫jꁶd9c~50ʎ6 + e%KET:{IczbM: Yrc uAgJd[h#꺹M[߶Q[&~٭D4钒D-7N:6H݌N,(jRUG6B\" +Ӽ.W{9j{O)<|e<*Hhx5u"r=kd(G]-Ȟ2Vj^2( [<|HꇏV4A.Y{Lvȗ_ 0&Z6\KZˆX47j4@Wu]{ANRC;%NX&}Z ӷDS0;FG3Z\ A?Wl Px2gyT~Vקq,db5Pt=b~dX>um wMb$-M3JoT.prU+©֝+$PP6j +b3Av!l mA-5c0Yrn.]gEs^N֮! +bP bV+JEـ42s|Tb@P.F)_B47SP:~->(Gqj-=\ l) x"?+4'A+ڭpm4ԇ*͂5UPESY7]4 Ϛ$qWZ)M, }b:f e%C VEo Mhu@kl؋O%H͇:t_(h xYyNd^M+S[:48Ndw4l+g$%VSq!FT(Ͳ4 d?J*l%N4"2+. !F\kT;{F8^{6ٕHhM}hXBkv9ui9vs%xj[VĞmj݉ ,@R)SZ +EM}ˊ[|S4'iT'dmdSْ ٷ&Ya9yuEIڂmucT۳6C\vm$_^;[FRV u C?R`{i8y bo7K["eDjb:xn7*`>-)'ut " endstream endobj 258 0 obj @@ -3131,7 +3127,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 478.154476 465.620079 496.429134 450.620079 ] +/Rect [ 478.070980 465.620079 496.429134 450.620079 ] /BS << /W 0 >> @@ -3197,7 +3193,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 479.138851 335.720079 496.429134 320.720079 ] +/Rect [ 478.118587 335.720079 496.429134 320.720079 ] /BS << /W 0 >> @@ -3263,7 +3259,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 478.118587 205.820079 496.429134 190.820079 ] +/Rect [ 478.131038 205.820079 496.429134 190.820079 ] /BS << /W 0 >> @@ -3295,21 +3291,11 @@ endobj 291 0 obj << /Filter /FlateDecode -/Length 2228 +/Length 2232 >> stream -xZMDWDQv}K==P/*eIwv̨SO\_TfKL%E?/5)XiA>7&4ņ8lbn~7%e_ '73M) jʀS@؃{Pd.&`"n -]R^Ik, -AG0 "o1\*Dv;pc~a5֋8<4?0?nW$jtk~86eJ0ҡϼ`_Zbn$+yw7NO9?ytܬex|NG8ڭJt|N|:>]HaKNǁj'!3o64(hq Mѳs'4 &33}(ڼMPIx MLbyMH9b>q3]3}Pz*h.tS V ghbr9\r6M6Nc&݉yyYc&݉yQ<;1r;1OK2N;bw'uU@5ڔδvvK<s/&/%JlԅUM_|_ kӇ| _羚H‰($!@jP$W[ SEogE R/W駊-5:ӇR^S9k=a7w Bؿ+m\ufՃrS»d2'{PH]ؕȫ"!^Sܺ*єqcۜ57 i^РmʳT~M. 8OעS%mj6<Õ,~5zXe#3$Z-w}mm՞iMw]wRc^A[]˩]n2޼b6`{աt]*ye_ѱ9*w]-)~/3x.}__z+LQᖗ^(%#7xKק۬f]wbCWqبŽpOs\_v !]n0QkT3ڝ[CTLjMݛz㎦K-!lrR%6TZ]Yzhq GezJW+&-ޮx3sT_a͵ ޺>^]~ ->(ҦK0OjiR# i?&bF4|cj{'^kbzrPՠӯ=S#X+3`ksq -?` -L}zY9<ͭyT~|{ޭ09!d(*@X  Ļ087`´(RAQ]rL$]CA0d))!^tce֞)y ]ah: JB–PgfR!XǗ[8VmVq;pj)0j ztَxhl*JM׿k.Q"0=Bjn -5ƣTdi*sՇÉw -Xl*)<V))[$%#R qʗ < ,, - |v^4,bQ|ĴhZ w2D. %m^CAqDUnGagJ - -rWaP(KO2\(̧flHYrh=7YQ%[:&@3Xf5k@j!b׮pU6ݸ6Y3VH<6=heρ^r vA/UT -10n縹8yS1Z Uh:AB=cQH 2&46K[q>RbiK1b^;ʗw<閜4@AsRz|E=[P?(c{~+wY-ELvU>&wOЏ6G!F!9tsNj-}Vg#Os~X?-A&x…n7ƴb4|u0GP) ${펾^,L +xZ݋$7q,r $w= G&#,YU]y_ɒ/\ρd&璢ӻɚ,4͠>7&4ņ8lbn~;%e_ '73OMSbԔd \1\&McDS+(Zœ8X!q&,a>cI Yf`5 I8ڭJt|Nǿ}:>]HaKNǁj'!3o74(hq Mѳs'4 &33}(ڼMPIx MLbyMH9b>q3]3}Pz*h.tS V ghbr9\r6M6Nc&݉yyYc&݉yQ<;1r;1OK2N;bw'uU@5ڔδvvK<s&/%*w22Vq`~x;}|?_N Wa-\@j ܝoBMA#;V{>o0:7vv]SmK{oQv?,jtx؀Uuͫžj|EԦڦu]8/ }- |$>2 Fsgx<[^xΏuq}Ƀ.vIvl0QkT3ڝ[C{TLjMݛz㎦K-!lrR%6TZ]Yzhq GezJW+&-ެx3sT_a͵ ޺>^u r}PM`,58G>~LŌ'hNPd!A_{!zҧF&Wg9?n'\~i&lc+JWs%^Mx[K *p]}=[arBQU聰8zM;wapVaZ%niQ.٥6(3-&3pHF/(`E+SJASCb;sˬ=9S+d3t2unA<*-?T^6ncF2qQC/p`_۬w2պ/SHa +84_2ДTóR]ԣD`z4xk$G:ӠU nlkjU&Sx*^-RR<0H \KGj-+A$/x$U)YXA8Jh8!zYyk~f!^B)p(FEa^* JˑdG;2:m]R_9=7iJ@Xd]x: J(*]PQ)^4* cԵaeqsp /rI3Rc~31> @@ -3437,23 +3423,23 @@ endobj 303 0 obj << /Filter /FlateDecode -/Length 4728 +/Length 4723 >> stream -x\ێȍ}ϯg 0; czS6j3'$EC:RfVۅJ!A2RAR]o/?]¿yp0oW\!Bqٛ9_/}5Shrv)F +%,)XPGgܞ3p$JPú힕1G +x\ێH}g"!E$ B<ۻB=H >'mgf}.rD:y"2첾*|/9=cpˏ5Eo1oU+'sHlb&mrx)`rv)F +%,)XPGgܞ3p$JPú힕1G zhA5`xFO!e)/aStVƳƔj5eu[e5ybLt]|&@q LK.10)O.F`d?#4xF3 xX ]V.Ak 0,gXC0,[fX`NpbX`6ǰrJaZ`' r ,P`Xu)0,]bXLʃ.`@d8*2,p],#ð^abe2))kr pDʋ֠eXc ,swWagQB`jxஶԌ&+3,@8LI+.Ix.`0,@TP^HaxRC.{fX[˰ wCCy&ðu xXdMXR0pWixJ̰ wKdXb!İ N Âܔc BV䣼03, ȢsF9;;FG~v\fv\{g'ⵔ츰\-D|\=x+Y.qaqޠX3;.$sK}=x9Yfqaqޠ#X3;.$K}<>xo~~\{\7hū{<̎ ;{&ؿ|<՞ tڤϗ~~?\O_+e~oJr -z>ïo^hG2y&+e:s?,3&-r܏x֯vvz[?{s0r:AOmyY{jWC׹_giQ -oVfr׻#67_~Y2V^i9eXm🿽|u 0Vc*mEC {S}qϪ*W[Qe&9Gitf~?2ߣ ?AhrWTz"qkFζ*bv1B|vnb#{zݝwV٧xC]1l)㋽jgrɆbTbYg~{N5ĝ_mr^'>VZd[ܛ}N:;QAڨד:?ё^ko<KWgVcݻZ;և3S.ɚknKq^hV-/νw>y|[<)Ë -pI]Ǐvm~wdd\g[Xw`zޝlVyjkM7Wh v{}ony`gV;˗:+rnNZdYM4Pp@yuS"Yi->v߅_QC m\YUD(D&iIb`WULLq;kTxѺ2?)®j/AkNOlgrקʭ-nk̈JʉNxrڽbkhӹƉIúmUy{ڤUb[ӛkmjwvsjlnEVyՐfFmO"ze1"kl*LyCNMP6hf]Ƕ*?6`[WNJ2k -^AoMn!w;T{Y^O"l7Wϟ43Gތ5_SjvP{vGC綟.a*_gS);oC'enҳa-q?QTyLyV9q_섚\*ӳd|M9ʗ„3ޓդWryQZz*>TAUD%.U}tyF3]Ħ4cM<#.R_)ESiV(ב!nBhg6ekrGH JSJ\-UnS3<ijQeǑUqcvۥ<#^|$} -kIr9/S5fWZg] ~/Rf#FP1 hXa.cYi/_@ndsUT[5rj\'ʯRE׋-7vJrl-M&W|%^jٮ_LbN0:jmTCY?E2˜ܑ VW*Kcow-%4l2Vؖ '`uc}Ǎx{ƕDm(ȦVXƟo+B潾 {9ur-oKZomp:|"qT3DH8]A"E']a˵ā(#ʡ<Ӭ]i,VHNˋA׻ -(*mbS "q9l9^A]BMk϶"/^Z@ƨ~:ˋJ.ZE T5ӪY'jjN^iF+a7ȭUK@^sS}d%yv>VnvͶW1  2U4&{ڡT6̝[* qݍ%y^ɾ#R{%JpUQWs^BT};?-+: p-kCƲU,춥MMQ4]\om?  +؋li@|6 &v)Ю*ZѶs;LXOE932ɌePݷ=Gf-|^^~2w {={|8. tAą>M(>yJHdYƃuy r(qb[Kn_X:<9qa7.9-Fe~ߩuy r޼y~\ɠG-w]S9,뎉dsA.s|:.zXh?̇ ;.1~0<qa_\5ay!ox3. ދ凑VE__0;{nyGKҥ_xqa_\5ayš`zg>\Y>b{{t!5 w7iœQoёe x-%3;.$W _.W;J ~~\{\7h+{<̎ ;{_,s;FN~~\{\7h{<̎ ;{_,~󀾟> Zr;N{ 'd\Vt՟~~|JߛR6i{KW7/4i<~VW2ulo9eV_W9^ZVʹ~C6+f;q-o9[~hVuàWSȶx2'nyX9;sm rױvM]w]}7`JQ<0Y/}~z_UPn|W-zΦ OW. r>SԷx=zϸ|͔$IznRܞgK+8yxv}lUEb뽺:,l" 1?ڋ?4yr^5伵r[o㓈ǦjlYL* +Sއm%PvVKbVK'Em0\+ c$u\ ڧa$.ɾ@zTbApMn'uygKӷ1_9-~dZĮ@;Z:P֏}{pӜޔ;2 +2Yei7][qZYf ۲DwN}1]?]u`#uCPݸ ٴ5 +mcVȼ7=a/Nm)U  SٞB$ОuF)₹k6YR^+l8eD9z+m)iy;GZ2Zg7#mkl{p]+SOo¿Ke ѩ% +h_RW]9;"W"wLZuy;W|!D׻ӲSz6a,[n[T4A#o endstream endobj 304 0 obj @@ -3516,23 +3502,24 @@ endobj 308 0 obj << /Filter /FlateDecode -/Length 3515 +/Length 3498 >> stream -x[K$ ׯ˒H@b NnzsǪbϬ2i*ȏT.ߟ\d\-JZ{++t K.@ŕbɗۂ_wM|3]k9t񭰘\dX>JɕS6X98,51RgVjXcB j# b +x[Kϯ$2p 6Q9|n35|!ZԬXV8{|Wjm%]IzCoI๸Z^T\i)|MSw|vqL8GZ!y',&Wj)>dRrĔ V[lbAT8=@ n5Y,1VU!q tj# b rɃ e(=[\-6W %Z<" ,^s9T-C|x -daeBɃ,xDh -Y`]A}x\j5|-̋>T %&!Kl!\Y! :XX@Y"eXe߂eRlaraJ݋ԥ%oawɃ,0` B% K  7`W0[X[qVoawclawcA0yƄ%X0p7rPǛpt`-,@/E%$nhO\-[XbL^s@B.,,H]* w`CD$n Dj y pyC \0]לoZXhaHb! # wޛiɃ,Tk>dx]}id஄M rB@@,8ZX+VJ 7R>‚AH,YH]V-,(PY2XX, Ŭ SHjcz Zx9Z&C(rNoaIda/AEFd/@$ / j,-,DhԒPc/ufrv*ZX7A 4y0aaGda(sLdܬ -Y6,4YYX|v&[X{ Z7#[XzZXȣDgm,f1dIHQLdA &:Y Ybc ZRoV fDFo T7y\M dLhDfk -3Y扁&V{yfR#e*|O># s("܂ݏcvݶ_>{{'IYuM 6)ߥ%(.r,U{3SvNFW3[ɧWEH:Hg1Nd8uNz5Ҕ qeMv#HeE^lois~)4@`0@L=|F2gSPty>le -)) ǻT%cnj)(XQi.+qI;zAQdq(eDG8xn?_?- -7oSOi3ҿFO;F_ ׽Oy; c6ZIh{˰.f?ls#抠Ss}헷dUNEɞ6uy}6OQPWSmhr纵X2|-"풱Ze(9Fl}aS9xCGxN-񨗾UN5#5iwzw}w汎]ϻ.,qϽۇg~?gG'g;_gwX>F>Zĺbקrar|w9RV:v}}. }-?tϷ{uw{k]~caLr!mnv>&UU?-A0B;vOS}U`|͛]c+{}wW;þO\L5lwxys9JnHa^yDŽ  xlrK=\=fB9}ͬ=yk8OB-h͹ly!w(nLU  w;>[qMO)WM)wgezkr 3*7y3q -F@QK@bqj"~i(i~,VM)۰`Ur}߃$&hR9B~]ɶ˰!z=e\ݵm~:շB@4L0 غ_zo Qޏd lʵ qVņ˃'׷ -ߏ^^={-Do .w]_ -+ޘ"/AfYG?0ܩӮKŶ%hT꫑SLُWoD<Ù,Gb]u%.3s@}Ɂ"3ѫ&9rGj=BUAiz3:OkR j=dž't] ⧾W&vCѯ~麘ة2zh뚟LS:oЮ*.ySXHβ}}UvOxx$ߖTibO4Ը\I- -ir$7H*ȳ~_ _H8@8@֑L^pH;q"FV?ɡξ[È1*{ap51M*rBi&=Ciq$2tofޚijH^uh-:C:ՃhAT)AL1H=Pz+HR FH&gCwں -)01hu@4u,Ll*|lCitc=ItZmTQ|liI{p1b2uR9Ť5 %&+WodK4͹sՠeIvsh{Q)HSϏ¿տדP[E -EZQל!,hg?YD虰| /70 5Tw@%<<|=˾bq fRQŋ$fzz 'j +Y]A}x\j5|-}ryKM2y()!K<ȒGGcJFFn,^,16yƷ fK , 8n-W +B ĖV, %qdaDɃ,,, ,2ܲo޲BLoaqfpfas iatRlawDi PR"f +.-,`n-,`n,H&8 YXݘ+swcF8xB]@E‚ ψi e p7T5 +4n-B‚E" pY-,;dhaABx wQ7$ .5yV X ;_$&88R`YXQ/˫+-VS3ʿ Fy槝h/'=x~;{z;oöX?b:5w{'w9'{|oi} +Z2l ȿ%xC==Ēy䙒'M4EV撹ZǼe_(5G]nɡ#<y4V!GJ{ߡN00rzLwnO<~-p\ūSs esC n\(ZA4B|b){_)xvfE;;`9SM9[vcY+-Pr]:?L&X8`gGZ)4ʝ.9,WL/šZǼ0)io91M sߥP,6RP0H*c-7 >A78R93:Jdy}^c?|:,u |i,)p6ڥ>7^(w{e{嗏mF$&r%=Ӵ4{#Lqrީ](2^KH̖?)NY6NF6ֹ!u +T\(9p,ܻQ*ܙIA׎ڜMk +إ 󀴵l!wVIX6$W7e_ݟ է$&y("O^b[4?4~a?^n=*u)(.pTC{lNՅ(߸3;FC'L+6_~|? / UcM(B<\;XI>b̼G?0i.m=As؍Oc\_9o D,d8:[y5!k5Er ry#ئ8Dת o,ʜ/(}~jR哜1.砑Mj=Ax ]Ns?fsFÑxkA~liZ^u mCKT E"_4,UM#^Ng$.;-i&w_U!4M^ TIKɫZHlNQI'갥eU +L +tg况ULK HM8IX~!Г+_%g\,iλybU˴xS9AƷdq:Yg[) Fl︚Z*XԟTbVw}eޑfDJڝڝ_=g-Y Z֣'WOȶg ^U5,$1/ޭ^߄ BP(R^ a^pUW#yw%7"Ds8&%۳E^f鳇5on)'VkוBh6iU./~kү>3]B endstream endobj 309 0 obj @@ -3583,18 +3570,21 @@ endobj /Length 3610 >> stream -x\M$ s% l drXwm9籺$88ǽ(|j*=~^S9Z[|?}8yWK" >%Rh{R,|=ݡn~=}ӿst"br!j@(%WJL0,H#EjpA  +x\ߋ$~b 'K/0C&Z\1[\GqoV]PHH3QX\!1 rlqA3eͅq +s w}V 5Z\-x7-.H]  (,.@~suMYsjqAW0)+,.;: EzodODdg= P ak4U#’w} [2Y\6-.EX-.Up WvlqAn2|,;' @Y pa PXFZ\P"t-.(dkշ=.ps`2W%e`UKtm*dX\P -;`qR"-.;),.4PՈܒ"T`qAՠ5V2{Iڒ}frvR*Z\0NLiʠ hl`m).Zl7BMo .,.h>;)-.C-T7#[\f~[<#neo CŔAM͈[p`'KKllqAYo7/ Torx750%2MTރxSA}f 8yzry{y|ed^4Yl^5@Z0x'ܮ>KTP3kI6{ٌhv>/ +eG|#Iڱaߟ`lQf_WT;@ӽ-5^N -ƶc[j8ԵM5_O,`GSmpL -CMXB}LkT -Қ ~q"kY\^D qİ]k,,^"WeG=_eu /.Xl*" eЄ>qTM[pAC|NyiPP6}hssi˾U"WJu|b:c퀼36vS ̂/| -kCl<%^%|f=# _%>{xy͖jc˟E.i_?}͟w|}`|2>r.E` ?ϯcLSvjBkːv2dm߭۰ }A!ʎ8 1f;nڵГՓWKuOѥ7k}׶rߗMr3|ڦlZ[&ﭷ+>‚`bޯ#,-lцwVQ}qJr~𛛬ja6Vn%yeeh^M76mp0bN7U~2%y؏nEՓVi]9_#f9mBs{966NZquێ;ւnLkĉD*++g(sum.;[[z譎o~yo~"O';ˤlj0Sӷ߭=Uu#:n쨸߶e>زLi߾V]zNdZ /sβ,Ϻ?OɄ/+ƽGo~iZ=$G8j+~[ ̯ y|(ͱ;ߤKyjIto$$&?ozwٲd_9XYvz氷֧̓9V[E˒x>ȄnHa“F ܣuAfeӒ"e -~ -]e[|u ˷<`8uL&o3FaȊ'l7<kIe TiPqn ,/;+Bcf&!aGiV8a2)đ4)RDNqlSzazџRT!4e<Ӭc,Ttm}U9tP@tr#YzN H"g,-xs}Tu6HzPfО(]=S^OfYf\M+QSL'mWe1UɇoxZQ%eϖْ:vcl{VHC'Sb| j+!W Qs(iy+9CX^SK#>둰| ~O[+O)=w|h#,/x[X."[Ey#I[5TG\>Y~1g +;`qR"-.;),.4PՈܒ"T`qAՠ5V2{Iڒ}frvR*Z\0NLiʠ hl`m).Zl7BMo .,.h>;)-.C-T7#[\f~[<#neo CŔAM͈[p`'KKllqAYo7/ Torx750%2MTރxSA}f 8yzry{y|ed^4Yl^5@Z0x'ܮ>KTP3kI6{ٌhv>/ ˕#$HAXذO0k+*Lrb/'c[ +v-`]p5ZЋ'l#)Ͷc8 ws&WIϡu,^Na?>5A*iM`8N,mu@vY]8bخ5Z[/ZekUs,Q²}mn|h[8-c yjPU>Tz<ێ4}(>499ԴeK*+w>~1Xvc1v@d)ۿK}fr>~yDiՌ!6|/| >3Wr/xY=r.E` ?ϯcLSvjBkːv2dm߭۰ }A!ʎ8 1f;nڵГՓW+uOѥ7k}׶rߗMr3|ڦlZ[&ﭷ+>‚`bޯ#,-lцwVQ}qJr~𛛬ja6Vn%yeeh^M76mp0bN7U~2%y؏nEՓVi]9_#f9mBs{966NZquێ;ւnLkĉD*++g(sum.;[[z譎o~yoHOvLo9 ݗI`o-[X]ױڎtw븱~ۖ`3]Zu49si3(1Bx8˲=<&;Vَ2fg[}tjuu8sGn٧72~|sy lC'cߟwIao|&|W6]e˒}7V8bgKkՊ^Z6$w?=yW ّC;˳ULa1l8q +V/CfWe߃W$&|= ؀',Տ8 vH4ٵuR 5>9?-Ϧ6@{VXޢQGyru<@^z5܄#w}u ~\M9 C(m +z:8SF3%U83CQ)ՀmjQSR2L/^ +ԁ*#䐦g]wljm1z*jUcb³QZp:AiأQИo*I Š `cui,ˌi2j- #&*VoTK4 +ݹrԒ>{<[Rǎcvmj<ɳ2thQ1c>`?˕P+9ל!,/)\եG둰| ~O[+O)=w|h#,/x[X."[Ey#I[5TG\>Y~r endstream endobj 313 0 obj @@ -3611,18 +3601,22 @@ endobj 314 0 obj << /Filter /FlateDecode -/Length 3665 +/Length 3664 >> stream -x\ێ}gY 0#@\B ȃ4VX\ !Y\Gqof]PH`Z\x]` И HK,.]ƚ[9*5Y\T0}:ʰnaeG)U "x-.]gQKHm w7D X\uM]ubqA0DGjqA"W xGf x S,\kò54Uҁw=a-x\-.H] P,.@,8X\s UR>S!,S,$֮r-,9 R JȾ] 2E dT rL؏.W2([\8b{)W-.;M,. H,.XT,.@(r% 3t,H-.@ % A J(e&oq"40bqA4U;M0ЄlG fS,Rn7K7 2> ONd @yoqAf .uY,.X7U%"E1u&%` U,.)~X\4Md@f6 ,xi7Z{{,,扁FV{yfAG2 ;˒SU(ɛ|Lp=}!#fX9F5|NB=gIY!8?Kҍr2_=v1(\H-n -ᶞBbLHfɦ_ls| G r=LɂXdl7zW~6_ޜ#x/{=SO8 ~{2b_=IGFzG7\Hk=^ߗ.]v`i}Ѻw෬|FZ_ֿ~\,}E&\jҟ1!i:Ty&_iuoTmkzk07Y7k[ŵNUƥ^ZS13~MV mZs?m/m8>VXþ x13ь) bY(_/3M>;"z}#[ݵ' ?.eVex^V{+_m{in#\zݲdD}feuz}][}v4[,}oftNcm_qI Y'ĶoE>9u-Ol `O$p[^=olixB3c~ՍYvD󔯿~~ qح۬k>n;I#Dc;uxumu|ˉ0{#ǽL[&#pQc5aoOgQ#Dc;)~x)m#E=~#Eѕ#yDHGFߎ~ڍQtvs7kۗ];~zcθR[I/v~ ީf z?dfW>B9հc{qz'Ǔcۍkku,~i㴙Yܼ}̿vƒ-iiϱUaV\^sɍWfGn}L1Ga%ĝ-BͶrGH0FY @*4Hi<.z}<u\>N]x9є4H;ޔ&_np}LDo8Sv%!n(׍w0އn erj'*+qjyj/gxWΦpq -Aag$,7;F* gr͕'˱1oR)O٬m-5'h3=-m9sWf}'G4(A 㹞VyOGjδ{eJ4,kf}hZxQĪq_gom/ e;7WVymo- "EoYՄgih0mNiyؒ}*F9czz}q*-+]\jk{y /ZaoObAU~-7MvA]D$AJ9\"J.ŷJ< wDG;Z*_qRS hP溣qbb? Q8HCw7]}6M׾L~)J_C|{٨W\on?eHsil2}URERe Iw)}}F'6xkY:ewf [z1VQ k[]Wc9>Y~k_ +x\Mϯ,V 0 @A4VݵҮ[XͰM> EȕRsɻ=-56E~s<"T +8\c|\/N^CjM7v죡PybC9d9 VK1K*-`HP`GUI,`PP +ޛ:" E`dTj.CG9X:fP$KW]J)K''K%t"\K‰P2[ ,֩ :`ɓb-"BK.G]-M6uXQ ]c5uK"tȹc],]:`[ , + +rK  NBNrfBNR'YDX$ ErMp 8 *X\ ,A +݊dqoSA-.`0.$0(T-.`p.;-.`.{SA,%Y\]xW:`[\vtL-..x(X\Yudq|ŅR ŋ !e5x7D }@AB?h1X\T5 rTj w`L]uaqcʎRD.[\bq8! "xҁw)ToqA"o!͑뚺|-- /`S,.;<Ex$$=X @eki$0z [:Z\6-.HYX\Yp q5dqA:|.9CAYX$H]Z,.X8 r  #p}`d\"䘰U-] +dе+Q gqdqR`[\w.Y\БX\+`X\PJ@fnXd[\L:" JdPLDh%ajK'^"ihq v`JS, 0?َ`&9X8n JMof d|TơJ `]~X\Pc-n+'of KDbIS5-8 MKX\PSfi#lwc3Y:.2dq +o"33[YtYꍈ摁"Ze|ud&v%P7 <8z4Q%CF,YY,}sj@?|{?/Cp~kd rK{&HSQZ\$B1m=/ Ċ,#M*抓Xf r=LɂXdl7zͷ3|ywWzLA?4^.;ˈy~~(&ykmMr"MxG~_kwimE^zx߲i}Zڧ_Ytrų}p :Kr0d7iHPjh[|սPUaewܴd߭m=:Umzi2Ode68S۴4 ~L۸_\\q}X}bgQS( 93P~A_igZ?|vJE*Gk;WO7;\am;ˬiV쭿FGF|">:PekGg~:,N6:iXrkftNcm_qI Y'ĶﶳE>;m=Ol `$pߎ->mlixB3c;-=dcoD󔯿~~ qح۬k>n;I#Dc;&>;mG=>eͯ'LoFL[&`(1o?"űO)~x)m#E=~O#EѕۑiDHGFߎ~ڍQtvs7kۗ];~zSθR[Yv~+ީf zw2+!Yj1M>v~=y2pˆ#@8mC7}󯩝m~1sZZslեvy{CrƕzmhS~hun٢Eh1v?\Hr#(THT)Mw1?'\o^ak)/;zcǛäP 7/2npj43L9ruҖz̷Qn̖^7 +´wz%|CYXD9^';)rar.R,r7՛#6Wž,ļ]~Hu?sOy*fn=?mI_=Ayi˱89H<@ Zt#t| +=Rs,UaYX5Ckm'Vͤ=3~3h{Y -۹:nw׾wmKnYy,~˪&Y< iŰt~=wj׷I{SanXR[kH~ +C| xDm ui &"_RUv>(UkdžW&:u*W㵔:fG2 IB?u7AGvhV7i:o /'t{)ZSͺwOjVOy2D!|[ӂi1쫰4G^zr2뭭>S*,? W o.SnF<[nS\2M8/(}%)fv\csYS]\!ͥ +K!VJKy/$ݥAQ⭑fy#H;r>;ۋ7+bdIk$c+u]ӹr q|/{g&w!N;gq3NVA۝| /K`X]N8Fgp) EVkg'}S}̊O%A؉I_,:uNr=}w[79+=ue3 L?TFؼ&qjRgPY 'q'Ί=y܌}-ra}Baex$JZuth%L07a60!NSG)saJ#C'#M72 +R` sBsuy_!TکKgiJ;R^i[1ZhwX䌥1R fe\VsdN[tobnzY32bZ)bH-YFC]mE-qOyΏ=,,WwdǾewi2qY<|=e/XrBeDŽ@-9i|I "vq2|5J'"d g?2dC>jȾzsHf__YZBuT5-.|+L1P,?CvƏ endstream endobj 315 0 obj @@ -3651,20 +3645,19 @@ endobj 317 0 obj << /Filter /FlateDecode -/Length 3689 +/Length 3947 >> stream -x[oϧ8p8A"EE$JP>?˞Ieq] p͐=>'W\)5'9_^^Rbw%H5x~.r:ߝ\gsp@ˏv죡PybC9d9tVK3b GURKT0CB( L|TU2Tc6TaM " EdTj.CG9X:fP$KW]J)K'%VO.–H"-]-؛:JfKaKw+:'KWZDL]Η\࣋[:"17aEaR6t$-}t [_K1Vk͞EBS[0B->' XANd1   -;)R, -RBNRt,-QE&"Xp` -X,`-Abb[,0x+paX .$ T ebXbSX.KI e!o@]fi` &1X . 2 - 00Y,\qo@PX,p7dS [,p7Dtn>X,p7HH 0QlBb=t-2X,.U?cMVJM "Kgꪣ ^vRX]*X]X,"jX]bDjKRbAw7DX,@|s1uM]ub RX(|IL]vHd0vył"W bAw 1uKX:,[cM#Yu>tZ,HஆM) 0!  RWsN R!3u:Z,d:"Y, vkXl,[2X,@F*!6lAh$sX,1a?Z\+QX8bX+X xł\a "W2sKGIdY,( XPB.3yKՖN3ł"ih;M`bG7b6?lbc` GXPJfXP -l >X,fXP=lAg4MXCłJ  .uY,TobgIbA:؂L~tt * jJ, f`<(q+d]db.Dfk=33[YtYFVV<3CeI*c"ӧ*a:d̒B=([~ n?[Naec󫆊R`d;hR aܣF:$`q;tS#nɰXm&$3Kd. -d[n͋mA,Z`xu~:_ܞ#x/{=SП4^.ȶ;ˈqŷs;z<5uߎVn>v^|6ײ5/[37h>sm۝ g|'q-0omZZ]/{-A_kaY-͞Ѵ-Ȗix(Jrj9r~[Dm3c j+{suO/'VDGR.>^W>6ǣS8pxy()gxӦk|JTǩX)@i[fKi_gkό[dmd>z}>Ǻ?4oLr5#6e{^Wȃkvtvߩywu, f49ͣE>])5b$88oD&/=Lt=vg^FocRՇ1 2L׾udɎC8<"W'Gcݟv(tG7~H"Dq¢}˝~~vIkk3~R͙9ˢQ[|$?8|El݉Ho7Mؗ$ 2a͆Cx-v?JR'(u,Ç8O.+/Dc3zɭsh5f. |ĕ!Z Ӎ+` 97]<mMSLG#o}g%vV2p3fM>jɾzKo{ߣZ8mB2VQk[Odo=5,_; +x\[d ~_UU I &<0yϧ:u;}4=dClRI:=~>/59|ˉL +o +gKL%pY>TKtWk7cΔ _{rJVWX!\ ++Z% FHJK bsYae9Yde1l IaY<B)<Lңs\\Qy <6XWL1dǐ%/@`IA9iY| kYS^, ExJfVy<)y {x֚*MI9)Y'9;)79CGNئԛIÂB4Y8xDQo:ְ~)fְxBOԛI% EQyISQz"dq5,(1J5,@zz$Lqp7 "3&2['oHtf3' {zf@_C2GaLKӧ*bfN`d3Ͷ_<}{ǏIY0~ϱb_7&m'H$GHe +iMD(F-E"E2SWƻyQ*X앏od:B݋/ {_wyuޫ;R'9=ռTEY;$2mz] +ڼ}^y;G yv# ":d 'o~>}?~ş1} +=N|-qeNmsWC^~CC&6zl4eч־}\ۖ趍J}kjǩzoǐ'4ioȢ.nu۸xSˏ(L ,[,fo<9"V58)QAwNnև!/*Zv87/YCc+id^7?;MAr$Se_= =,,| _Tf/AAO7Sn^}Z7S˼[.YcxVM -(@`rq3JIZT[{ѻvY|vzXKfw+zqku֎.sn wE>nhvYmk՚=*ʫ-RWf{s깲+mHFL-ՖGK>6-Qr va hGЏ ~л}8c7{X[q}Dr;Ďp0Ǻw{o]`7,w{Y-ui{Sןfj1tTT^/`_TZgu.{efg7)fޯC.ʼnos6[1aK֚~o2\jQ(ّTL[Plo')>9ӽi*=t/ibO {՚2궕D=e[̏R)rjҚZ>cAN5C/b|x>L n0=\L󋒜vXRn_ݦ6ߗ,yrB-khJT^f\r$6Մ7-n.e_2|hv)޲\& %f,21L *;a/H;vY.Kv{Ds]0ƴ*O떤Tu/nEq+x8_Q~/腢.k^WE{qu=y7h G{7ƴýܮ^2m}i/2}5=ul{1cmca9^6ezۇۺMؽS56ۆc]w+n'_g؆y!'ޯ"a`roߔR.;cCBzg搣$OGv#9Ov>Î"fK%;^_GR@PoiynXM^0rzc@ )|vNU}P e[|~Ws r])3;ƿ} mb},WS(fczl@g۷V3=V%` 墵n(!^4pt6Y!3Wc!qW 7rFv.HлCLn+DHՓ,/fU8pv|l=-p$2$;XyIb.N}U]ui[I>Tyծյh"T[ O +rRS욼s7$Jo.']-JU]KeC +%y,c)/v)I~:+P#/ri/rW\qo0'x xh( Y`]YAxL(YlNm0!Y MRy(LRL -ChCQy% O'odiYO &_C!MQx\0dx@g29k(s1i0K0Kp; BQCr*Pa Cаx& h˰ p˶8 xE  1ĥY”%`Ѕ' K!z K%vVʃ,0` \& K&  7`V 0jX[1>gaw}aw}BPyI!h0p׳P Ǫpt`5,@ϓhx%+O%jX.cT^1.ABX4,]*Ұ wY`AD#DjuX pyCа` ߌ0]W-9kX%aH!9 "հ wދkkiʃ,k*>dXx]0km*D஄M b@@,kX3R԰  R> ɂY*pb XB%kX]y-JD@t>_?|7ç.?(s nqn`-,fZ -w,#Pk;-5:~BxVvCjnß2No/6ڭ򵲟wu6ۘP?~S3P5{y&XӿQ1O/D&lj+3-}Թ<1~,Dess DyQ"};XM#ݥvDV@dWi -['=I|*oLc̵ݦ*S bi_qAIdױ,Oi- U?S( -&/{I[廥\F~uy7kfn-0)ZoͲD-Ro7O\2Ma E%7v2F|dߙn.S/./bȓ)uEyÄzchQEuhKV=r0@{EA^Ͷk 9M璝.;+a ] 1tN&N/K-uvv،z9]mknc~Nmw2[{it:. -μ'k棱Yl|UF!.\,3yR&eu5qzTl=/?ӹ:GQw?Ьl=mY^<}mv-/='QeenwLB1B$ ˙Xİ,uc6d~x2\#ϼhvY`[F) -e9}su>:9SuOZֶYeUC'(6LkC.%w:N8S*B^)bA[D:NU8)tho~%:FI&>#]ua R9&וcSxGP{-`SpX9na'#xIv[A@zAP^ ktW$G#~Z&:˱ \3] c -Ku>DAC9k9 E_n>l^95?o>aXRPkE64V[n;}}F{У/e+8Ao15]# 8%OmgfQ+q\TZq_O%#Uq}I)Z9Jr؟p8Bsu>L OіBx=3=fc] -wh-ex2ŖX6%{C,ajp"<<I+'A|n|g=86gX̪K^=\|tKзT+ѲqFR}A˻Ǧgr[Uf+6N)O0w,f;]RI0` ^@xȁ]Wdh!W@a]|&Ǣ)2W_S1NRq, 񻖔 ]Qi{G)IV31_.>,i~򀾑&Mx[S_T5մm$TJ >O -vQ4c2;5yB͐+B]rkkTZ()w+KM>bܒ屈>6Ov ^#\BRJ64ӛ4{T9"k6> +/Dest (cb6-1) +>> +endobj +322 0 obj +<< +/Filter /FlateDecode +/Length 3538 +>> +stream +xM +leVl z"V룻v7h!ibXY=τ=)])5'9_ޜޞH,7dz'.Jmu\Q\oQHw|~?EzT!2sGUO)h0adž נ:@Ki gzcz|;t |w?|_7O?Mo|瘯KZ_o&%V"Sm_77c襦{o¶*XzuW_1D+:ʰ0^6f< "*݀?.ٻ 8-nOA/DڻH{[DؓˌiN*EoP@IY1zDn#56WKtc^k%4IW_v\y^cklǩ[Yc\읯% {Xwq|Z+|cʺ=mʫ+X9OS43rXh}Y)iks?8~(bw:mqK2/\h\~aHBFߋi3><.cqgu|t=|=f";i-Z/{-CfZs֘5xˤif1KF}[Nʡ/ych-iDWnuϮyrV ftOE~^=>Ǿ?m*JS~$S R;VDwA8BcN~^}>Ǿk.,Vcƺ.6^&M|~ +WԈ2HG2F2g)[#Q甉5nqs;1T+?_~wyyv2ı9}r8ig\x QoI(\x!y>NӞ8Ӫ5og`O/+c]mPv+72^uɶi} #]H)\ƻKݴBqg3:flp<')烾چcz'% 6M~q?sBj}G}dtLdrq}Z%!;\bEFXG}D]NPSݷh8}z1v5z~lsvB/O]683X_N\qnJLfG2{IB Pwץ!Ϯ!Or°ޙR}uռx2vil-H'Ct9ϩu-̮fMg +K $jkg.'[3{2NÔ\ e*̳;q+5)nAx9:VPl7 y귋 x\4L]Y>`u0AtmvI߬|98,C#%.qMGJVt"Nq8 Xe35 A~u`*#NFn*&(y>;?Z7Fz&Tޥw_J;l)/i{s-Ok{3(-ds0$-㴵A& EddlJi-KC8Jwbg%j-j{phd1di>Ke&;-۱[=O!Ð4*SC߇9V eD->swPI }M7Kn9+9iJ0N){m= wPSW7اU2/pUG Z~]rCf*oga-zT~; +endstream +endobj +323 0 obj +<< /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 320 0 R +/Contents 322 0 R /Resources 4 0 R -/Annots [ 322 0 R 323 0 R 324 0 R 325 0 R 326 0 R 327 0 R 328 0 R 329 0 R 330 0 R 331 0 R 332 0 R 333 0 R 334 0 R 335 0 R 336 0 R 337 0 R 338 0 R 339 0 R 340 0 R 341 0 R 342 0 R 343 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -322 0 obj +324 0 obj +<< +/Filter /FlateDecode +/Length 4631 +>> +stream +x\[$m~_V+ 0XI~00,0Ӟ C~>Jfw9sAOwPR]-s/39zŚ,#>)\d+1/BdR >./?:M)ѻpWa1SAa#Iɇ3b) bĞY bpAcA >+ 1{V>9XÕykU &BQygb.K^1b %8f SN/BdUd9KC;Ee*h+dB*gs%ų>YCH_Xdxi@@, Uy +kX@D3iX@@[hX@[iX@[.jX@\i5, . T4, `.;5, .=iX@@] +kX@]5, .0p5UdkXt42iX]r6iX]װj`Q؊9[ e BK>H0p A]װ}԰b?Va=x4,@c#-Ѱ w]AS|he\.QÂuӧq WZ6.ƢaA"P  "װ w!RkcXKB3TQ V@JY`~d4,M,sTde5,x5,mz3iXP,dAƧaAHa`|@)Opnwk9/e1c׺PPe*]ii:ijRv¶>3V*NR_y]I՞>rI< knù'[y~jȹcÍxMkꛧNLk]7{N޺ SIWh15۹קrP\oaO~Yk?w>i~8q5]F}n~1cT\s5԰nE}:_v91G~Xm{? Z,u-J]|]c~{[ֱ|]y/B֯oFU~-ETBPڷkO)cex[bk1 '`oۺjТ(T%Ylɖrawh??X5skNw~k$jx x +i +D_n(J,K\6#pu~(tyCLW/ʻ&,C-z]UNXV@5.9#mqIEȑҲVW.W:@,]:F@̀`ZrI.qǙR9b:H " r4uqQLD>nG{x#s=<Ԑ,-aN0ME6) [6n96l;Ek +TNGq <Hsu>6hnr'{ rw]=ΧLXK6*%9B9OӢ5YJ4S8\Ꝭ&ZپE_m(*uarH\ܮyq ÒZ;.%r7ڃ},TS"`V]g?U(c_MXy#z^<958o/:\y4#у,lk0r[-vA$"ZV'-7^$Ó?>x,R_Gqa"cs.&z˜1ˢ-Jm> ʍP\g &[QF(6:۪0[tJy·QNf1;1?Ol=#Oǃe]-EPV躺]&G Ѥ +<5=%Oq'vҍwdiXߵ\O^OKNO=ʷܴNNlNJzi_W`,HKd6\ l q&WjiK Yy݆> +endobj +326 0 obj << /Type /Annot /Subtype /Link @@ -3732,10 +3767,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-1) +/Dest (cb9-1) >> endobj -323 0 obj +327 0 obj << /Type /Annot /Subtype /Link @@ -3743,10 +3778,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-2) +/Dest (cb9-2) >> endobj -324 0 obj +328 0 obj << /Type /Annot /Subtype /Link @@ -3754,10 +3789,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-3) +/Dest (cb9-3) >> endobj -325 0 obj +329 0 obj << /Type /Annot /Subtype /Link @@ -3765,10 +3800,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-4) +/Dest (cb9-4) >> endobj -326 0 obj +330 0 obj << /Type /Annot /Subtype /Link @@ -3776,10 +3811,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-5) +/Dest (cb9-5) >> endobj -327 0 obj +331 0 obj << /Type /Annot /Subtype /Link @@ -3787,10 +3822,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-6) +/Dest (cb9-6) >> endobj -328 0 obj +332 0 obj << /Type /Annot /Subtype /Link @@ -3798,10 +3833,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-7) +/Dest (cb9-7) >> endobj -329 0 obj +333 0 obj << /Type /Annot /Subtype /Link @@ -3809,10 +3844,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-8) +/Dest (cb9-8) >> endobj -330 0 obj +334 0 obj << /Type /Annot /Subtype /Link @@ -3820,10 +3855,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-9) +/Dest (cb9-9) >> endobj -331 0 obj +335 0 obj << /Type /Annot /Subtype /Link @@ -3831,10 +3866,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-10) +/Dest (cb9-10) >> endobj -332 0 obj +336 0 obj << /Type /Annot /Subtype /Link @@ -3842,10 +3877,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-11) +/Dest (cb9-11) >> endobj -333 0 obj +337 0 obj << /Type /Annot /Subtype /Link @@ -3853,10 +3888,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-12) +/Dest (cb9-12) >> endobj -334 0 obj +338 0 obj << /Type /Annot /Subtype /Link @@ -3864,10 +3899,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-13) +/Dest (cb9-13) >> endobj -335 0 obj +339 0 obj << /Type /Annot /Subtype /Link @@ -3875,10 +3910,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-14) +/Dest (cb9-14) >> endobj -336 0 obj +340 0 obj << /Type /Annot /Subtype /Link @@ -3886,10 +3921,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-15) +/Dest (cb9-15) >> endobj -337 0 obj +341 0 obj << /Type /Annot /Subtype /Link @@ -3897,10 +3932,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-16) +/Dest (cb9-16) >> endobj -338 0 obj +342 0 obj << /Type /Annot /Subtype /Link @@ -3908,10 +3943,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-17) +/Dest (cb9-17) >> endobj -339 0 obj +343 0 obj << /Type /Annot /Subtype /Link @@ -3919,10 +3954,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-18) +/Dest (cb9-18) >> endobj -340 0 obj +344 0 obj << /Type /Annot /Subtype /Link @@ -3930,10 +3965,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-19) +/Dest (cb9-19) >> endobj -341 0 obj +345 0 obj << /Type /Annot /Subtype /Link @@ -3941,10 +3976,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-20) +/Dest (cb9-20) >> endobj -342 0 obj +346 0 obj << /Type /Annot /Subtype /Link @@ -3952,10 +3987,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-21) +/Dest (cb9-21) >> endobj -343 0 obj +347 0 obj << /Type /Annot /Subtype /Link @@ -3963,42 +3998,44 @@ endobj /BS << /W 0 >> -/Dest (cb3-22) +/Dest (cb9-22) >> endobj -344 0 obj +348 0 obj << /Filter /FlateDecode -/Length 4927 +/Length 4926 >> stream -x][$m~_ `>y؝ݱ p|T.g%JK"?*ڝ-~~p/39闓5-J~dؕdRa.o??6M);>(S -HlRRtXFӖ  bY!e(%#1\ᤐ[ % -^965w&JK5Z&&r4Z11F 4CvDVA -9iYB VASh xNQh@J,6ZJ0\2J+ٜ-!XafPi(LRL -Ch4z G'8kbxHAL>B #aOP񤁀PPJA_P,IÁ`hi@,daY K(aA4,x --A[4,[iXd]԰ p!հ qCaAB.=iXװ vaArV* @5,:rа٤awaF^̪F +l5, ϖ4, Op*-`аq z^zQ(X5BX V{|а̌GXaw]Slhe\.QSiŸWl\EQ   <װ.Sk4jX] a8g*[rְ%aHҒ"9 "հ wދk9 "pYB  f4Uc=Bw k4வhX65,I -|ְD^ÂɔXhp$d4B4,@`mJ(YÂ!K^Â! B }dADL.D$0-zZe\Ұ %2pNR&5, 4,9Ұ SѰd\9Ȃ [D9aAѠgdjX\CJ5,Li)UdLhXd5,@diJ,IÂYÂ!^IÂb! "> Fd YaAq' `of J7)v[B|3iXP0BY4nI7N-B_HÂY7ѫKYͤ.w4pi԰7jrB|dY]1^oU ,*k+9h1Y樮謺l`h էy*B|fNrfA{1w]ӯ?_Օ$,& pe*;B@^0F>FHeˢ W w[[ Ef`"SpuYn$Y!E !膯Ǯ6O׹1Hwy 9FB&k_UȽʻw~:BU~ϠPIc55ý̆3[:!ˎǚ+>Dy]Y=N%_HPr V|JLjΨ{ 'ֆ]mg|X=vv i-G}ivӮ ,E3nWxZ"$L)(Ÿ#6o%{ĩg@]5X U~82ȓw>YoR>2W#yFI8X;=/yKѩ>X{(h rl,b>bcSFJU a͕iI1$zܽ'kk59*{-gd}ٯ&נ~{L?ÎD0r}Km%)xP( e2AbrYG>w&q)3pEZ}*\(O#sF.Hd,k->>81puuc)i9KI[,%)x#W=+jQd-Dv_B"P$fOvf]d~VkU 6e.{㢅L&g<;?5]mϸ2|~x58Ͳ% JybҚ -4EȲQ? {I'3-{-D FݏDKi}gH#ohip04VҶ\SpOhr6m |P"+Yy7{D=k <  X$^}dXއv)ڐGlǚ| `:SC58jl#y%n=Ї|W8×>%4^;0ȭ#YBbvla-㓾w7wNZ.߱Gxڽa -!tJﰏg?um%voPu/+1{/ͪ t}9AθqªoAƱ&ϐ!p"Xh9CǪcۚq* +ql 9cM>'VΒݚw ot,ťxhlrږGd:H}^zZV_p}ѧMր7 )əO^4z{ˋ9. y)jō}.ZX=6kwC׫W|gmiw0uwW=R[XK( _Qzd>WWeWwzI%9Jޗ I-a2|^+Ӣ*eG*!5םV{͔B=lk~7^Vbex,WC'ݡ㫀H?׺l-f%ErcqpHsrW89UfўcM>eʷ|3N}yq;${P< ]cwEEw.\ʗɋą»G{Y2|ş'y{via!ic{g,@MﴬGsk(rVqXR'瓼>ԓum-ξ]ⷓLJ1b)\>΋\ǬV'L d/]>znw#5d%]_:V -2mܽ5n)ө,W±,YwgHsp4-vN-SwXޝou}X>Em.}SK%nz$Tj >OJI)6քidKanD^iZo}RGF~2T=>J?و 8 F;o -_NLGۉRVXn7o/v(.`Le/PT~pUJVW^pPFjq֎Nr8L/,9rCOtvŏ{wl]ϞL% ,o hlBObG]n^hn#ԹNžwaQr5=ֹr͡ GT6p1.K\IA%?5SeHSrOTk Fά[Y -B0_̌͝<7"rl {\oLJ;饡^e96#yBriЂVNy4[*)UQt@mecj2ťYzYcQyy>ΥժVԕѼrPKmK6u}ii6J+"md a(|o.e0jߩ7-7RЀ9Y _RP7^')HЛu~Z-ԟyҀ +x][$m~_ `p8 yGuR]xv0;]D$#R29sI/~=Y_?7YJ]ϿHAH&)NrvoN_qgoJ_DeT@.($f稐3R4D1dH +)C@Ʌ-@ i$ +',pZA,Q +ͱѼ31_TZ%B01cъ1rhYX# PIEb* FKctBːڕUd:VᒉTZ攷4opj4 C7JEabRhDEAkY? 8!X68ƐD* `55% |J' |2e |.R + †bI@N`! SԐ 8B\YB! ,aASа m ڢaAܒ-NÂ%뢆 1r$  T4,԰ taI (G p7p7Ti +a &  3`V 0jX]1>gaw}aw} Pi[<7p׳pד@Q Ǫpz8Y߃惆`f<  +ܟb@+r0peLJ+%beb,0p*hX]gְoQ uZw/V"n` !а8 Uiؒ ,y @ iX06q ^4,]!hX4װq h0[Ŧ kfXwMEÂaALRೆ +L5,łOEkְ Y0 KAJakSB$Y$Y2hX[M E R԰Hfr!Ұ qD>Qhћ*-撆)+v 2FaHa͑@pE&{DA 9 ,5,>#ˌVxhjFV̬aAh$T԰fLH `B̏$۬a$HsTd L% Y@7%L YiXPl4&kXZ 7=iX|3kXPEOIÂB4Ȃ(v LB thB% @^]Ȓo&uȤрL@V-3%ꊁ2|d`VI]3_ɑE2GunDge EKT3s,0 BtsQ-S>~9%f1_0݀+S2D16"D*CHX\DHbrZdH,2;3hTzw':,w A7|8vm\yAdeM12YBUޕ.ȿÎr }$H/Le6ҙXv<b$$"+ hl_NrK%ϟ~9OOn?wr'/ڿ3c/e~Y -/^^D/?ߗі !erWle Q3-["[Z۰#cϊHb-3Y͗A9|?K@!EڽA19ăJcLLap "!:Km:RwN4Yo;5=,S9/6= [J9{Dr;zC=ɶA[Ln32l^y$dL::eNZkIPiP=bd'(YbSGMgZv˳N#x$5pE*n*HŷSaT8G[ݥU$UifIAW0;l[N(01y cs|]CZ++>Dy]Y=N%_HPr V|JLjΨ{ 'ֆ]mg|X=vv i-G}ivӮ ,E3nWxZ"$L)(Ÿ#6o%{ĩg@]5X U~82ȓw>YoR>2W#yFI8X{(h rl,b>bcSFJU a͕iI1$zܽ'kk59*{-gd_giMA.k6aTڗڔK=2S6Q4e6䲎|_gABĥQj +p9<ՎI\\"]u<`0ǘwՍ5,%my޳폨^FMrg} ֒CM>ț=wQ5YIxz9V'^ 썋3ǚ| G@tͶ=tu> 4˖8$()Ikv+@Ft!K &nGX3I^'M+HIw$ZJG$#w?-#DKDK񴒶r(4-{B㐳lcLp04>ÀYyʻ#YNhyOhИ\0ǚ|%g$+>Kц|8b;L#)l:Q#gs+qu> )݁Gn +`3l}ݾ};tuv= STZ}D=޿kC`/5&~گ{!X}nV}H[ rƍVM};l25yO99HB:V Gzҫ:g}` xcyݐE'HZkf[粫c) v7t:YqM|wv_,]і6}S{w#U=QuywKVޟ+Ns5zUxuwTC}b:&Iż_y1-z_yt*i\siձw0L[!#Yn6wEa)[V(w}ϲ[A5t]-H= +/q6ҺQikn0i]]Y-W9T8'w-Se >[|Knη: g[O E?VyW:_Xt]|Θ~>^nlU;S%ȸx…FOh桼>3l;̩t5q}mftpBV3QhV@kCo-q8)y`zsalRyA \6KyG]lq5:AcGFQur)ueJ!Si HuXuX Oʹ6!(o!'wSe;nRw|Gq6>Nvη—XT?NFo[9Fw뫜(OK#wV]ik%sOC!{t@(UN-<VnPJP┺]<=IA,_{-j endstream endobj -345 0 obj +349 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 344 0 R +/Contents 348 0 R /Resources 4 0 R -/Annots [ 346 0 R 347 0 R 348 0 R 349 0 R 350 0 R 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R 359 0 R 360 0 R 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R ] +/Annots [ 350 0 R 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R 359 0 R 360 0 R 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -346 0 obj +350 0 obj << /Type /Annot /Subtype /Link @@ -4006,10 +4043,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-23) +/Dest (cb9-23) >> endobj -347 0 obj +351 0 obj << /Type /Annot /Subtype /Link @@ -4017,10 +4054,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-24) +/Dest (cb9-24) >> endobj -348 0 obj +352 0 obj << /Type /Annot /Subtype /Link @@ -4028,10 +4065,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-25) +/Dest (cb9-25) >> endobj -349 0 obj +353 0 obj << /Type /Annot /Subtype /Link @@ -4039,10 +4076,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-26) +/Dest (cb9-26) >> endobj -350 0 obj +354 0 obj << /Type /Annot /Subtype /Link @@ -4050,10 +4087,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-27) +/Dest (cb9-27) >> endobj -351 0 obj +355 0 obj << /Type /Annot /Subtype /Link @@ -4061,10 +4098,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-28) +/Dest (cb9-28) >> endobj -352 0 obj +356 0 obj << /Type /Annot /Subtype /Link @@ -4072,10 +4109,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-29) +/Dest (cb9-29) >> endobj -353 0 obj +357 0 obj << /Type /Annot /Subtype /Link @@ -4083,10 +4120,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-30) +/Dest (cb9-30) >> endobj -354 0 obj +358 0 obj << /Type /Annot /Subtype /Link @@ -4094,10 +4131,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-31) +/Dest (cb9-31) >> endobj -355 0 obj +359 0 obj << /Type /Annot /Subtype /Link @@ -4105,10 +4142,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-32) +/Dest (cb9-32) >> endobj -356 0 obj +360 0 obj << /Type /Annot /Subtype /Link @@ -4116,10 +4153,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-33) +/Dest (cb9-33) >> endobj -357 0 obj +361 0 obj << /Type /Annot /Subtype /Link @@ -4127,10 +4164,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-34) +/Dest (cb9-34) >> endobj -358 0 obj +362 0 obj << /Type /Annot /Subtype /Link @@ -4138,10 +4175,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-35) +/Dest (cb9-35) >> endobj -359 0 obj +363 0 obj << /Type /Annot /Subtype /Link @@ -4149,10 +4186,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-36) +/Dest (cb9-36) >> endobj -360 0 obj +364 0 obj << /Type /Annot /Subtype /Link @@ -4160,10 +4197,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-37) +/Dest (cb9-37) >> endobj -361 0 obj +365 0 obj << /Type /Annot /Subtype /Link @@ -4171,10 +4208,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-38) +/Dest (cb9-38) >> endobj -362 0 obj +366 0 obj << /Type /Annot /Subtype /Link @@ -4182,10 +4219,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-39) +/Dest (cb9-39) >> endobj -363 0 obj +367 0 obj << /Type /Annot /Subtype /Link @@ -4193,10 +4230,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-40) +/Dest (cb9-40) >> endobj -364 0 obj +368 0 obj << /Type /Annot /Subtype /Link @@ -4204,10 +4241,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-41) +/Dest (cb9-41) >> endobj -365 0 obj +369 0 obj << /Type /Annot /Subtype /Link @@ -4215,10 +4252,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-42) +/Dest (cb9-42) >> endobj -366 0 obj +370 0 obj << /Type /Annot /Subtype /Link @@ -4226,10 +4263,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-43) +/Dest (cb9-43) >> endobj -367 0 obj +371 0 obj << /Type /Annot /Subtype /Link @@ -4237,10 +4274,10 @@ endobj /BS << /W 0 >> -/Dest (cb3-44) +/Dest (cb9-44) >> endobj -368 0 obj +372 0 obj << /Type /Annot /Subtype /Link @@ -4248,42 +4285,44 @@ endobj /BS << /W 0 >> -/Dest (cb4-1) +/Dest (cb10-1) >> endobj -369 0 obj +373 0 obj << /Filter /FlateDecode -/Length 4731 +/Length 4729 >> stream -x]K$ȳH" l,>Í=ttX,0="U]cg*ԃA)EH?9L%EtbM -jEer2'!P2vs??:M)ѻpga1SAa#Iɇ3R4=߲Ƃ}VXb'G1|r +!),g!֪<b+<Lң\|Qy <#21 Nc Y1d : KpVA4^,ɪ)ñ$ :Ӏ,d 5$ Y ְtwǟ/~-k rV/ > =`v0~d9&Zmʶi)^m>䥺\&?-]5󗵛+=v6DگmT%_ϋ9utqy"?.[MFꥇ}#eokm{8ڬuL4/h--.m""YVEƂX *>{:oBX02^ܛ%A D ڄ뢆~1ln˟>Z޸myuXʟE`Fg=TٯP!5GSo(=.n\ suk[ߊO57R_u(5ՓudcVMyy9^Oh]"Z˥u]` vy֗{ vݻN;dp08?-_6ÙId%]s^rۊ|N9ِnb~g萆j.zvdI6r=:h#͈4~yiX >nkAߘlg3sU(˝Ŧ(<ѹ0<֖-IrAX᧪zM* d -g&ʑi2͌FhLf4eh-&3*r;ًe˶=ue+AKܵjD~BĐ<{5fhi89!k]fc -0j_%dE힛R?wa";sw;,r`cUV5\{[ѤGZ>^wmkⲼ&; -Ǿm8\7u@z]mZۖ~fCݶnlܴNl6zmnKg4zN8/]#1 - g)jzϽ!ISqX\Deo"ױBfn B\h/@M_ʺnnC& -m_:V-Ye'i6^.JMfG< dGv"[dM'tAϪs>MrA~UrXkiXh4 U:5}@Bz(lk1?޲s3$J+^.jG*RyT-MCaꔻZJMr#-Ycmd7r =q^BRJ64ӛ4{Ԕ&g_*B -/I5jt"[%Q5 8N.d$fg}lt؆:l%nu,ӱr&&M< UE7{ru&>N#v'oėxOϭAT3DyJnIXm_iK s>,]e~_o0%{wlݐH&'d<݈m& Q64kq yT[IuL CwӕfN=ֱ{vs&.e<!:5+):B:짊am;y -)K<avn]LE|17,OF[e#"}96jN:S Nz=U. h=IpZbщG@;FtE lS)՚ZgUKYa0J)+׳% P9d%BsNQoݢu đQ-ܔ|wsR腱SmcQc`QzD$3#f]Ȫ RE~!Z|+395)X%6g|R:Wbן@ɤ| ~.⯗mw]󋰘L)٠ +X֑ +CTXb) bĞoY bpAcA >+ 1[V>9XÕykU &BQygb.K^1b %8f SN/BdUd9KC;Ee*h+dB*gsʷ%ų>YCH_Xdxi@@, Uy +kX@D3iX@@[hX@[iX@[.jX@\i5, . T4, `.;5, .=iX@@] +kX@]5, .0p5UdkXt42iX]r6iX]װj`Q؊9[ e BK>H0p܂>Xaw=a  w!AO V{Ne}||M])k?OX|xLm B*"$|W%#!0n"&1n/n+4dҙzoѢKJ!Y7uR"1`J~|_?槯+k rV/ > =`v0s?-6eۏ46R]k?,]5׵+=v6D<ֺBCڇ_YoD[>m沿Кk3qǵUXnk׭&4KkZ燵Q-M:T/VjM8hik?R|ꊿ,zj ӽƥ*eo5޶=}a_h1ѼʢbnPڷ'E]$DD:.p!$@TLm}!uޅ0+`d07CK E ch?>fj{:Koaa+j*_aRw.ia~F|EF&1uϭERl !Wʿ joXV^su( ײm0x̋SWܠ=㢿@^Q"x(䭗޾_[fr+ Ĝ5XdM񰜩<=*}P@@v(NsUG1bZg Y.Sj&{e, +Ng'<:1sXJlQgH:o;ewzuNvamW D +Bsew4!xyBɘX};G6mj`Vva$cL-M8ڃ^e{hf#~L-GltyOMjpc@*Y|x2\ܶ⾜vN6d٦':!}76]h9Yi t}gqθ:ڈd3"Ͷ9~ju>nbaP=V*OpÇC8Qw{𫪧r(z\2BF#&=,yֶ "5#D?YrBxߚ֖$e&[byc3Wkjy4fF#CSw&32ޒ9wet:Oɲ pc?$ +~5"f!bHu]3ô{k.v1rctvM)؟0Xy Nہ9*In۽hR|dUs qY^lanc6G_G +}S_U .Iٶ -mKm}?q|?en[76no{Z'y6=r7%3\=l @M΅цUʳf=^J~d$Y8_E2[ٷA~uCׯ7; P8/)+׾[bGЪɩl[!ꗎ"jFwKƬdI Wb eG!ّhsk%]uq4Op>"\-*UkM5&JVqRH/mM3Q[bnĽ\iE-H^*i~2LrWB:ZI4|R%}m_.'%$tXaC3HSAM +hr^"t O⸛_3F'⛝ULuXӀ4NBFmv֗V)/Kwm&z*M<[VaM?+gmBAݔ_7!gl,Cowcי;9۝l_j`=YL?NYfS|zgqPܼھ'"</y}$'gY/O0%{wlݐH&'d<݈m& Q64kq yT[IuL CwӕfN=c3rI 1@M*\̷> endobj -371 0 obj +375 0 obj << /Type /Annot /Subtype /Link @@ -4291,10 +4330,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-1) +/Dest (cb13-1) >> endobj -372 0 obj +376 0 obj << /Type /Annot /Subtype /Link @@ -4302,10 +4341,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-2) +/Dest (cb13-2) >> endobj -373 0 obj +377 0 obj << /Type /Annot /Subtype /Link @@ -4313,10 +4352,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-3) +/Dest (cb13-3) >> endobj -374 0 obj +378 0 obj << /Type /Annot /Subtype /Link @@ -4324,10 +4363,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-4) +/Dest (cb13-4) >> endobj -375 0 obj +379 0 obj << /Type /Annot /Subtype /Link @@ -4335,10 +4374,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-5) +/Dest (cb13-5) >> endobj -376 0 obj +380 0 obj << /Type /Annot /Subtype /Link @@ -4346,10 +4385,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-6) +/Dest (cb13-6) >> endobj -377 0 obj +381 0 obj << /Type /Annot /Subtype /Link @@ -4357,10 +4396,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-7) +/Dest (cb13-7) >> endobj -378 0 obj +382 0 obj << /Type /Annot /Subtype /Link @@ -4368,10 +4407,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-8) +/Dest (cb13-8) >> endobj -379 0 obj +383 0 obj << /Type /Annot /Subtype /Link @@ -4379,10 +4418,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-9) +/Dest (cb13-9) >> endobj -380 0 obj +384 0 obj << /Type /Annot /Subtype /Link @@ -4390,10 +4429,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-10) +/Dest (cb13-10) >> endobj -381 0 obj +385 0 obj << /Type /Annot /Subtype /Link @@ -4401,10 +4440,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-11) +/Dest (cb13-11) >> endobj -382 0 obj +386 0 obj << /Type /Annot /Subtype /Link @@ -4412,10 +4451,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-12) +/Dest (cb13-12) >> endobj -383 0 obj +387 0 obj << /Type /Annot /Subtype /Link @@ -4423,10 +4462,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-13) +/Dest (cb13-13) >> endobj -384 0 obj +388 0 obj << /Type /Annot /Subtype /Link @@ -4434,10 +4473,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-14) +/Dest (cb13-14) >> endobj -385 0 obj +389 0 obj << /Type /Annot /Subtype /Link @@ -4445,10 +4484,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-15) +/Dest (cb13-15) >> endobj -386 0 obj +390 0 obj << /Type /Annot /Subtype /Link @@ -4456,10 +4495,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-16) +/Dest (cb13-16) >> endobj -387 0 obj +391 0 obj << /Type /Annot /Subtype /Link @@ -4467,10 +4506,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-17) +/Dest (cb13-17) >> endobj -388 0 obj +392 0 obj << /Type /Annot /Subtype /Link @@ -4478,10 +4517,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-18) +/Dest (cb13-18) >> endobj -389 0 obj +393 0 obj << /Type /Annot /Subtype /Link @@ -4489,10 +4528,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-19) +/Dest (cb13-19) >> endobj -390 0 obj +394 0 obj << /Type /Annot /Subtype /Link @@ -4500,10 +4539,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-20) +/Dest (cb13-20) >> endobj -391 0 obj +395 0 obj << /Type /Annot /Subtype /Link @@ -4511,10 +4550,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-21) +/Dest (cb13-21) >> endobj -392 0 obj +396 0 obj << /Type /Annot /Subtype /Link @@ -4522,10 +4561,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-22) +/Dest (cb13-22) >> endobj -393 0 obj +397 0 obj << /Type /Annot /Subtype /Link @@ -4533,10 +4572,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-23) +/Dest (cb13-23) >> endobj -394 0 obj +398 0 obj << /Type /Annot /Subtype /Link @@ -4544,10 +4583,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-24) +/Dest (cb13-24) >> endobj -395 0 obj +399 0 obj << /Type /Annot /Subtype /Link @@ -4555,10 +4594,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-25) +/Dest (cb13-25) >> endobj -396 0 obj +400 0 obj << /Type /Annot /Subtype /Link @@ -4566,10 +4605,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-26) +/Dest (cb13-26) >> endobj -397 0 obj +401 0 obj << /Type /Annot /Subtype /Link @@ -4577,10 +4616,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-27) +/Dest (cb13-27) >> endobj -398 0 obj +402 0 obj << /Type /Annot /Subtype /Link @@ -4588,10 +4627,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-28) +/Dest (cb13-28) >> endobj -399 0 obj +403 0 obj << /Type /Annot /Subtype /Link @@ -4599,10 +4638,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-29) +/Dest (cb13-29) >> endobj -400 0 obj +404 0 obj << /Type /Annot /Subtype /Link @@ -4610,10 +4649,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-30) +/Dest (cb13-30) >> endobj -401 0 obj +405 0 obj << /Type /Annot /Subtype /Link @@ -4621,43 +4660,50 @@ endobj /BS << /W 0 >> -/Dest (cb7-31) +/Dest (cb13-31) >> endobj -402 0 obj +406 0 obj << /Filter /FlateDecode -/Length 4923 +/Length 4922 >> stream -x]K$m赁+K". pAb|[ְ>a -PyI[fnkX]>jXC1F]@Hհ=x4,@c#,Ѱ w]4ʸ\2O4-l\EÂDE.3kX7Q3:_!hXs0ߌ0]W-9kX%afac3D%CrEaAbz/D DDe=*P n4Uc=Bwk<வhX2mjX|ְD^ÂٔXhp4,HRykX*YÂ! yaA!Lq\! "E d&f RǠU p2x.iXLNR&5, 4,9ְ WѰSsAtsNÂ! A 2հ34rIZ㱕<3kX9 5, R<а#vаM9*P` rnf r,z `o& ,4,(6 5,ge䛞5,_J5,(do"SP|3iXP(* h*o4^,%F73o"WI].dx]DQ\ Dd3%ꊁ̭ꒁbJꚁJ.@Ld9VtV]6_cÄӸDa sfNrn[ы'.c_1_ԕGI/n1A#H#B҅teMT鶜L3E0TuY$Y2C81J -b:OoW&u%+֐!(>dN4ـ)S }5!'+/3`Mr8-_ֽ 6b$f=_ ~y?Gk9'_q_j3BQ#KuDTCCv1$6 GpiM 4fL㳬.to:z'y߁ kLAV*C DK~K)wRˡN<Sm hӖNVϛ6Wel RPĝNwOD+:ĂZnul{As>d=&$\VyڂĦX]uխ8qq*rn/sÃD<\Oy򒺡[|-SZ7 };pI?͈@_22ZT[dO uCwN/?-`Jm1vu>ƇGX^f+Q|mZFZ)p'mNYQHUq 搝̸p ˴Y:HQ۶|먻,?q\y'k.øvg5>'YGB :t:ȓ -P:tUݿ/{rpT'GPh)_!gmtRoWn /[f?oU&pkV}X&pn8\qK$;\L&{)+z`GF } %`l8B:=;9嶹ؾcx(`jTj߱zCT`|@J: -ԗ?CdJT3u-. *\R}+SY}-Ju۪,ğ:/q@TYBs Ob!3BʼnfJ;*N/?"AO{y{sjϮ.k3?=L!Cޗ?e5%躚?As#} w_D7 "d?2tfA'染dۼ'Tj%mـtck[@M! -ST1x)!k$G# Bae UmAE$G9\y)S[fCmO|+z(:5ݲtcu1y[lPov\Qo2T4|=!R\}w={Ծ3kRs& >eܱ [h FeH4a]dA,wZ o)V#9qY _%>FE^.'g"_!It*h*Z*̀/tx69Z{g_+2AC^t=CGlpG]D̀ gu^G]$o 1ޝmNoL_>F!uә\1 /H%iob$c&sU^g`0j[̈́g Ҋ)q(:YX烽ecc26X(:*wk3wnlحz.p_۽0'(x'F<z==~vސH!G[mnsev,͢ tzL @ȱ:p3$}.dzɡ*d<R^Pji|wGdƀ8W87Uy #q4t &˓_~1"22Hej -/^ʄEO [)RqvnA~{B;xճVc ezsG_ߗ?ے5+]vm+}+V*w+{isu15YwکoW>ks*˵6;8a쟆Yۀ᯻b?_cȦ6nUL;CݥK(83e{ƕTLO0n@w )`W3 wT^턏ʻNw_׃8/ -| yW4$Y~Uc%6d{ٰZCǽ{uہ}-p fѠpv| rI͡#\Wp1.sQC}JPc:,]bc'M"?C!k{F%uivlzջ bliȣ{}/"ڠQ?Fj16өT/9TyZ[4 F-xs1@ͽR JtN .@+VRmUKj)S2j:ҔQ:hZFsNl/bɬXQ}y ^-J>ΥժVj[WB\GWcfS52ctL)y<,]Z~Ed]+{p&"|QCSodcrK)@Y -0gw+AgYjIRE17ϟ$ԥ Y>PuO +x]]#muH"8)r`zyo=Nzѿ߇^.!GF#L%E>|dM +jEer2g!P2.??:M)ѻp7a1SAa#Iɇ3R4=Y bpAcA >+ 1=@ k,JH +Yἵ*Xf +31_T^%LLxCx YBNx)'! E*H%⡝2dueYlN2dfW9=`B&9`Q,ц K 5A_rVՋw%d>ʃ,| |,6E AFpIYp次pJ/p,I<4 YG AH0p܂6sw}^zQX5B@a3a +?ŧV5,]1|*qoeb,.&*Ұ wY`5,]G5pb5,] Aq4,f骼blYÂ,y 0 $*/Ӱ`l,P "p{Ѱ wm Ұ w-#Qyװq xp[ŧkFXwMEÂܕiSÂೆ +̦5,łOEaA @ʃ,X֦P$Y{ ,4,@D`C Y)jX$30kXBD>jMNksIÂ`*v 2NaHaϱ@L5,5,@ sdY jX}FKBYÂHa&RAIH~l"QykXt3kX3dkX۔|3iXP,dAħaAHa`)vY_O=8JbE|pLmEBH".,.n"$bLܾȐXdvf/2zw'uAyTR#TNy^~4Y,Yi AY&DuLRI 9яDXx3%,o + tYn؈ӯǟ~O?Z7?8˵wULBY# +\TkT!7U7H8̀Mk5cҭew{{Ё$=l8\cj R҄oD$]2do]JZuTȰJ|mk@ve~޴*/ckȿ"t{"\!D~grwc t#!5#$6zu誛nmljSw7v{% +-z "S}mIKlFm2ՖG쐦"|Zms@|yanySUjs1>?bVt5>+9ɢ,8\8СyFgWСj}ؓ{|?>B+OJ? 9kD}r N~iR0y2s]ݷJH2wQ["١b"5ٛHIQ} @irao}e|}W'⣰w :l? Euu޶=}g&vto$ |CIuqܵ{b}km۲ܥLpl1V\L8^$;GAa ꃫ~1WeBJ1!n~J$m-mkt]kcw S`=IR{2g_f7hc~<7!lV{$Oq&w֛DSXףAeRIS&d](.i3a#0zYY;204b/cJNyAߑ!<.=-ÛESR32O:`TjϬQ(?&S"֞YlvQzݐr[ݷpz{FmPVeY&y(BПK_`g~b6fv-NDW-6SjtVsz  z:K̜V{P|vu^\a +l #//y.A,lU[ "DI@ᅈ'Ȑa7 =6$s=IR;, &oX:Bh +Q8"Mo ^#6?I +{.{="n7."9<ʑ檼ȫM"6l=~cv^SU^GA薥ϧ( Nbr}꼎][g wJCG$!#wCp!#\w.{74Y)玵dX}*GH0,>0*CU +EX" Bf *yKd펃|*ehhz(cAYE@H;emhVAV'V1Go|>ûB;;Z\ :f;2"bq>ӟ:"ykX$ns2}dJ0Ѭ窼yA*9L#4`=nw6:Q[h&m8ӏaVKSU^F:-K+1D`GYdQ[ѵpGe.nv=}?@a=A};1J3Fs|F +y>jsw(ܰcn}H[/׃`REU%БSU!s!#sHT!㱐rmBR;Lc; +'3ĹzŹIv;nߥmt,ťxHd0)^ᐹFz/S_UxR&ee.rdJ1%Es uX-Ӄ;?->ޖ]W m[_CXV[÷}.OE[A*uиwN}Œ];+UYyu d2 bKE6Qu:L=`\JG87W.]\&GGIǹ)ۻ0bJt%|q ,-fHe{j'|TޕvZ` +rf^  Hgwl($-I)S{, +bϗ:]sָCJ}mwzUw\VT/6qigiMO_az[|~Xmzazjci䅻T.eK܎=rUIzt/ neEx'd]_듣7Ӷ_/:$'Bf6~,mmZ L.._Kk\Wֻa&'~JlұBDd{$ YNoφD qY e{!Yİ'ڡNeֲ}-mAlse}nR赩UHW BF k6 I!vm1?y!Ր+k9vR-6RʽjY5EN)^U-$?G1eֱy#d[͎q +I):VذHFζK"\T\irn{ШMJ)\CE\rt6bA4Ջ<C!yܧٱVb(Ƌavce#"㾈WjFƄOR6P+Wjm{Ԃ=h5jK0v+m:Q4ͮbZeKU-bNۨ0JSbG%Jע%jP9d%BcF^Vھoζ6 {dj{+=;:WZo] q]]"Ol3q4rwk%ud a&'+F9f M9We-ݧe)ÜݭŸeA]&IwH,?S +mO r endstream endobj -403 0 obj +407 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 402 0 R +/Contents 406 0 R /Resources 4 0 R -/Annots [ 404 0 R 405 0 R 406 0 R 407 0 R 408 0 R 409 0 R 410 0 R 411 0 R 412 0 R 413 0 R 414 0 R 415 0 R 416 0 R 417 0 R 418 0 R 419 0 R 420 0 R 421 0 R 422 0 R 423 0 R 424 0 R 425 0 R 426 0 R 427 0 R 428 0 R 429 0 R 430 0 R 431 0 R 432 0 R 433 0 R 434 0 R ] +/Annots [ 408 0 R 409 0 R 410 0 R 411 0 R 412 0 R 413 0 R 414 0 R 415 0 R 416 0 R 417 0 R 418 0 R 419 0 R 420 0 R 421 0 R 422 0 R 423 0 R 424 0 R 425 0 R 426 0 R 427 0 R 428 0 R 429 0 R 430 0 R 431 0 R 432 0 R 433 0 R 434 0 R 435 0 R 436 0 R 437 0 R 438 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -404 0 obj +408 0 obj << /Type /Annot /Subtype /Link @@ -4665,10 +4711,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-32) +/Dest (cb13-32) >> endobj -405 0 obj +409 0 obj << /Type /Annot /Subtype /Link @@ -4676,10 +4722,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-33) +/Dest (cb13-33) >> endobj -406 0 obj +410 0 obj << /Type /Annot /Subtype /Link @@ -4687,10 +4733,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-34) +/Dest (cb13-34) >> endobj -407 0 obj +411 0 obj << /Type /Annot /Subtype /Link @@ -4698,10 +4744,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-35) +/Dest (cb13-35) >> endobj -408 0 obj +412 0 obj << /Type /Annot /Subtype /Link @@ -4709,10 +4755,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-36) +/Dest (cb13-36) >> endobj -409 0 obj +413 0 obj << /Type /Annot /Subtype /Link @@ -4720,10 +4766,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-37) +/Dest (cb13-37) >> endobj -410 0 obj +414 0 obj << /Type /Annot /Subtype /Link @@ -4731,10 +4777,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-38) +/Dest (cb13-38) >> endobj -411 0 obj +415 0 obj << /Type /Annot /Subtype /Link @@ -4742,10 +4788,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-39) +/Dest (cb13-39) >> endobj -412 0 obj +416 0 obj << /Type /Annot /Subtype /Link @@ -4753,10 +4799,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-40) +/Dest (cb13-40) >> endobj -413 0 obj +417 0 obj << /Type /Annot /Subtype /Link @@ -4764,10 +4810,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-41) +/Dest (cb13-41) >> endobj -414 0 obj +418 0 obj << /Type /Annot /Subtype /Link @@ -4775,10 +4821,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-42) +/Dest (cb13-42) >> endobj -415 0 obj +419 0 obj << /Type /Annot /Subtype /Link @@ -4786,10 +4832,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-43) +/Dest (cb13-43) >> endobj -416 0 obj +420 0 obj << /Type /Annot /Subtype /Link @@ -4797,10 +4843,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-44) +/Dest (cb13-44) >> endobj -417 0 obj +421 0 obj << /Type /Annot /Subtype /Link @@ -4808,10 +4854,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-45) +/Dest (cb13-45) >> endobj -418 0 obj +422 0 obj << /Type /Annot /Subtype /Link @@ -4819,10 +4865,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-46) +/Dest (cb13-46) >> endobj -419 0 obj +423 0 obj << /Type /Annot /Subtype /Link @@ -4830,10 +4876,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-47) +/Dest (cb13-47) >> endobj -420 0 obj +424 0 obj << /Type /Annot /Subtype /Link @@ -4841,10 +4887,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-48) +/Dest (cb13-48) >> endobj -421 0 obj +425 0 obj << /Type /Annot /Subtype /Link @@ -4852,10 +4898,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-49) +/Dest (cb13-49) >> endobj -422 0 obj +426 0 obj << /Type /Annot /Subtype /Link @@ -4863,10 +4909,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-50) +/Dest (cb13-50) >> endobj -423 0 obj +427 0 obj << /Type /Annot /Subtype /Link @@ -4874,10 +4920,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-51) +/Dest (cb13-51) >> endobj -424 0 obj +428 0 obj << /Type /Annot /Subtype /Link @@ -4885,10 +4931,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-52) +/Dest (cb13-52) >> endobj -425 0 obj +429 0 obj << /Type /Annot /Subtype /Link @@ -4896,10 +4942,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-53) +/Dest (cb13-53) >> endobj -426 0 obj +430 0 obj << /Type /Annot /Subtype /Link @@ -4907,10 +4953,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-54) +/Dest (cb13-54) >> endobj -427 0 obj +431 0 obj << /Type /Annot /Subtype /Link @@ -4918,10 +4964,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-55) +/Dest (cb13-55) >> endobj -428 0 obj +432 0 obj << /Type /Annot /Subtype /Link @@ -4929,10 +4975,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-56) +/Dest (cb13-56) >> endobj -429 0 obj +433 0 obj << /Type /Annot /Subtype /Link @@ -4940,10 +4986,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-57) +/Dest (cb13-57) >> endobj -430 0 obj +434 0 obj << /Type /Annot /Subtype /Link @@ -4951,10 +4997,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-58) +/Dest (cb13-58) >> endobj -431 0 obj +435 0 obj << /Type /Annot /Subtype /Link @@ -4962,10 +5008,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-59) +/Dest (cb13-59) >> endobj -432 0 obj +436 0 obj << /Type /Annot /Subtype /Link @@ -4973,10 +5019,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-60) +/Dest (cb13-60) >> endobj -433 0 obj +437 0 obj << /Type /Annot /Subtype /Link @@ -4984,10 +5030,10 @@ endobj /BS << /W 0 >> -/Dest (cb7-61) +/Dest (cb13-61) >> endobj -434 0 obj +438 0 obj << /Type /Annot /Subtype /Link @@ -4995,44 +5041,42 @@ endobj /BS << /W 0 >> -/Dest (cb8-1) +/Dest (cb14-1) >> endobj -435 0 obj +439 0 obj << /Filter /FlateDecode -/Length 4512 +/Length 4511 >> stream -x\K$ s+H Y ]8C~>JfwNb =_N_mw]8AXL&lPX,Ha`R!* XƂ!kV\rX -+C U O5p%$,pZA,3y炉Pzxޙ/*/xD&&vibb!k<,Xd j<”Ƌ"YY|NdNQxʃ,6Z -P2+ٜ5`B&9`Q,ц K 5A?rVՋw%d>ʃ,| |,6E AFpIYp次pJ/p,I<4 YG AjXC1f]@Hհ 2.aASyŸ+~ -cѰ wHÂ|f kX5pb5,] AqH4,@|3tU^1aAf K4,kX `aAlJJQÂX,xHT^4x$ Bd<‰5,@bm -aA򐅼װ yȂAd8d\CdL.V5^&'๤aAJlXK װo$]ҰbXÂT \E"=2s l 眆CddʌVDh%jV֙YÂHa+M ʃ, 0?`&9*P` r Y6e4,( Ӱh$Mְ0aR֛YÂBM,-e4,( YRY4oIXo4^,%FYof f`^ȲLvp7 "3MdxCB~38c`U2^DXMe*Ϊ|0a}"!!f$,p Fv(|gusHjiF~7}; "U2i*C(\7D(;|FRն[1Q Bea/౶ȶ`iBIWz(tBRHsCKVR)$J^VD5\`FzQp`!aySWN@Ueӻ?: -M|QHw_}<("0 CX7 ry˗W:2z8>?wdqqఀT_/cX]S>DEٗ2?urmwcD&ڑaլ9v07Ծcow[bӼ#דm:H1Coy9͆־laŎ7Η+Zl/~-ߓOZ_VibF\4o~Ҽ>.6D~VV;;ɖizB^U\y,W׼vn',Zdcq^ۊw(vh_IcQڮVsukiX/4볝:Ժgl)>q6~zCm'8y]s֮[ǰui3(Y۱4]|~+&7O}Dy+?~A=2-,v--2; -ٻrȞ >o?hAqɰ馿z+X}KST +V{Pdgv4kQ;:: -BG˻U@nfW]9S]NhVljR$/"6$QVtF!VQ;^=,򏖧t[n?Ci{D5 >\2a o{ lf3 E6_Kv[,(@1ʘ@w@ -[XRa}wRKdOkgg͸x-6Fx<tS L!W[~oZl-A'&[É9s#;rLJa|cRtVA' (F c:cx2wR[[i?<ꔣPeg:Ov{=ewz -v;%ڕ b(d(4{^fp7L3D㣗DdHNאVٙP$*%S L:=y$_Or<aݾ],la-<+Ň6.7AǑQ8TyWyDHtA>Uyȭ$pI[4[g\Y9L3r4{D9<:/ӳlM&S6?| p[$W+r 0"&$;VdE[~ߑ>l*uS=(^-b7 D=^Yכo7au\/>A6y\H7v;~fGr4\ܮvEN='8-'->b}+|*6 `ç"l՟O5<]IÍ d :^o/o즿s7-m4gm{0qO~ - Ξa*..Lס*OQr!ED%z}KA.\6>];fc]BԖ7NPtFboMY! 3ʄAQLTyBl;y%AhՌ(/|^r]!9r[˥u]7`d^yI,^UvA]߷i{v;]nI =J*Ii}\me:²osNQ[ϓ -W_gc8sm?Z_rl=wi9ٜ,2iFW[x9Ҹ"/cȌru\U;ߨYc/~DwNa-cNN;Ő~JrBf'i{[FSٗ`8NahUxl[!Wі"jFwM[V|4>.JMfG< ɎD D;u7ȞMyx9[S_TdjM5zi4 U:5}BϓB5͘ΟfM. B-ȯ`oSJ^SV:Me&p'H +Av02>*BDlP #7\<,M< JNH\ʹtxhIJZj#DQjf1ـ+qtU,VH"P,$,o +dZX6Gu4>x=xK}oyo)\eǕNL?r?hw<݀"x\Gϓ8,`="' U4Ɗ%8ڕ>?nLLTD~})9jS@^`n@.Pp?ty7FlYVjݱ*cwɦ{;Lgll;yGb~}˳̹o6d ,vov<_ײ4f{al|ֺ؇L{,6墩}8ߕvu#꿛{[̞$[uhB1 IzuT<4V=r坳ln#@\^ڹHhvym+ޕ[r1:m|utRd$ѲEiZPX9Yc>vҷ(S㞑ɫXl[=ڼ[r qbʗDzw=u[nJwkԥТ$~mǮtq^|?Z ,?O(h+ȴ"<$c(d!{6Hmr,>?&JlcM-MQz$XB1<D@|R.FW]uNv:VYVY#0I~Dڐ(GY:ȇX}GVx?Z"Z oyx64lrɄGڿ[3%qR07L|/ٱ:o|l(cm(laIY N/K-=6⩞U[Mm,3S\mG[Z_Dx̳߭K{G֝.o8S*= AX.>2CU~mDBmiYIesr 4f/[wx(28yw=YFi{+Ѻݻv!#ӽ-/x6uzٽܻǷC(^Wl߷CU0YbiCvSU/9EI"crQ"x(57'Rz>~oZl-A'&[É9s#;rLJa|cRtVA' (F c:cx2wR[[i?<ꔣPeg:Ov{=ewz +v;%ڕ _0~LR}۽g/_@ "f2$ťu4rc+aˠlIX̳nO5bv&z4`;Ty& "I.}FT?'D߃uF5דE/vءpjW//[= +Gͫˍ'oq|#xig@wryU!<3s4ucUG1r+ a,8D.'f)3{V=##<-QNp5i+elɔ/Vo2 +Ǿ9ȶ#ɎyafMrX"׋$wt߮W^R8˻eWnt>,@mNshRuuJaihסE[NFy@\"FWX;FϼWy/78[nogN'y60˲j~:zի^4X62㩜*e{&W7j/K]S|ahzXT'ǓNv1e'/ljd!~|.'T%)9N8nh~h"VUc]eָ,0Ob eGC#;5N &K]uq4Ot#^N*7ZSMvMBN d.'mM3&Y 17C^r +rR˭>Sʣji S.M$_|RsKC}(v㯈Sr +I)VLo&n'g;ePSnk6\/P:U!\k`~ovVI3=vaM(;˥mv֗V)/Kwm&z*M<[VaM?+gmBAݔ_6!gl,CowcΗ;N6߈xOϭAk[|zgqP/ܼ|9L?O5y +^rHN>G3gY_#~u%{wlݐH&/1Fn3=O?.YCr[+hR`o%]GP׹31 NdMWn ̈́;N=ܹ{y68tCrsIy8x̃G#$&$EGHTsx:,Cbs']"?SA0H#M7ZT)0sNFEOvϞU<@;e N=Y h=IpZaщG@;FtE lS)՚ZꈳsA0JWbg%^v[((sɬ\SyF}h{C82S;;KݮV;!./ P˖Xc|+qF^]^H+{t&|u^(SSSzb!NVЀ9{TXo d(o%Iz.Y u eUU endstream endobj -436 0 obj +440 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 435 0 R +/Contents 439 0 R /Resources 4 0 R -/Annots [ 437 0 R 438 0 R 439 0 R 440 0 R 441 0 R 442 0 R 443 0 R 444 0 R 445 0 R 446 0 R 447 0 R 448 0 R 449 0 R 450 0 R 451 0 R 452 0 R 453 0 R 454 0 R 455 0 R 456 0 R 457 0 R 458 0 R ] +/Annots [ 441 0 R 442 0 R 443 0 R 444 0 R 445 0 R 446 0 R 447 0 R 448 0 R 449 0 R 450 0 R 451 0 R 452 0 R 453 0 R 454 0 R 455 0 R 456 0 R 457 0 R 458 0 R 459 0 R 460 0 R 461 0 R 462 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -437 0 obj +441 0 obj << /Type /Annot /Subtype /Link @@ -5040,10 +5084,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-1) +/Dest (cb17-1) >> endobj -438 0 obj +442 0 obj << /Type /Annot /Subtype /Link @@ -5051,10 +5095,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-2) +/Dest (cb17-2) >> endobj -439 0 obj +443 0 obj << /Type /Annot /Subtype /Link @@ -5062,10 +5106,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-3) +/Dest (cb17-3) >> endobj -440 0 obj +444 0 obj << /Type /Annot /Subtype /Link @@ -5073,10 +5117,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-4) +/Dest (cb17-4) >> endobj -441 0 obj +445 0 obj << /Type /Annot /Subtype /Link @@ -5084,10 +5128,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-5) +/Dest (cb17-5) >> endobj -442 0 obj +446 0 obj << /Type /Annot /Subtype /Link @@ -5095,10 +5139,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-6) +/Dest (cb17-6) >> endobj -443 0 obj +447 0 obj << /Type /Annot /Subtype /Link @@ -5106,10 +5150,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-7) +/Dest (cb17-7) >> endobj -444 0 obj +448 0 obj << /Type /Annot /Subtype /Link @@ -5117,10 +5161,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-8) +/Dest (cb17-8) >> endobj -445 0 obj +449 0 obj << /Type /Annot /Subtype /Link @@ -5128,10 +5172,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-9) +/Dest (cb17-9) >> endobj -446 0 obj +450 0 obj << /Type /Annot /Subtype /Link @@ -5139,10 +5183,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-10) +/Dest (cb17-10) >> endobj -447 0 obj +451 0 obj << /Type /Annot /Subtype /Link @@ -5150,10 +5194,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-11) +/Dest (cb17-11) >> endobj -448 0 obj +452 0 obj << /Type /Annot /Subtype /Link @@ -5161,10 +5205,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-12) +/Dest (cb17-12) >> endobj -449 0 obj +453 0 obj << /Type /Annot /Subtype /Link @@ -5172,10 +5216,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-13) +/Dest (cb17-13) >> endobj -450 0 obj +454 0 obj << /Type /Annot /Subtype /Link @@ -5183,10 +5227,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-14) +/Dest (cb17-14) >> endobj -451 0 obj +455 0 obj << /Type /Annot /Subtype /Link @@ -5194,10 +5238,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-15) +/Dest (cb17-15) >> endobj -452 0 obj +456 0 obj << /Type /Annot /Subtype /Link @@ -5205,10 +5249,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-16) +/Dest (cb17-16) >> endobj -453 0 obj +457 0 obj << /Type /Annot /Subtype /Link @@ -5216,10 +5260,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-17) +/Dest (cb17-17) >> endobj -454 0 obj +458 0 obj << /Type /Annot /Subtype /Link @@ -5227,10 +5271,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-18) +/Dest (cb17-18) >> endobj -455 0 obj +459 0 obj << /Type /Annot /Subtype /Link @@ -5238,10 +5282,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-19) +/Dest (cb17-19) >> endobj -456 0 obj +460 0 obj << /Type /Annot /Subtype /Link @@ -5249,10 +5293,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-20) +/Dest (cb17-20) >> endobj -457 0 obj +461 0 obj << /Type /Annot /Subtype /Link @@ -5260,10 +5304,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-21) +/Dest (cb17-21) >> endobj -458 0 obj +462 0 obj << /Type /Annot /Subtype /Link @@ -5271,44 +5315,50 @@ endobj /BS << /W 0 >> -/Dest (cb11-22) +/Dest (cb17-22) >> endobj -459 0 obj +463 0 obj << /Filter /FlateDecode -/Length 4906 +/Length 4905 >> stream -x]]不}_q">AX$42 s3 $eKr,V/jzL-G,܋şoKk[7X]L?ِ 3$J&)]e_/.q/ޔ(@&,+uMJŠKXPSaJP# jPBre  jIa9 =VAyDtzxޙ/*/xD&ibb5^.\x ]؅`5t ƋЅ"Y]|Nt蝢2tue]lN2\r*gs[l8Ya&a  w!a{_~}il`$,. peڙ& Q",΋n$bL~qkLwv)8 E]2ҕv~Hb c%Ҁd0C4+H}W1Gh%/GE4¿t{_We7- _>t_ݟhӗZ^G_>N2!.n]ThiOX:Ϛ0 cEE}΢~毷_q߉rvQY0B(QL_Y筰٫`z$9:bD>H[wd6%"Z+Jdjl*q?FpNNO~gwD iK)2}AS5 rJtSBma6liU݄7s':AAc[F 5i_F_f3X45^}cie:-d9{V1$$<) 9ݤwOȽ Gލ@wZe *tã@/)L->̴=Dy8cY_%\W4J; bK,g4{ XJxEuΣqQΔ l[ÑG$ń -7$wN hLi0ԙcIp] 93br[d?+-OoMCQ/,bXQȏ*dMdaZN#aM~O1 VjC7yv8{|<5[ ҂@=(4>9|f*ʺ"}`ZFw]oɉĽ#!-Ss0aOSíiʳ|øT<)Y#y(A[W2-AW>$r[Ww׎61SkDg8dgqM ~kX=•Rd>yfۚ0hjweز#>2f???J]}VH Fmr r\tKȣmeg^~M$jHiRtg_u<9ݮ/02yEF7A'tXy{y HsXE -U3 : o׏JԁjZ]wH̸U6/xݭo ;j:`dE^:p1 ==MfK(ow`[ɝ l<)p=΄!v!n˸i=4SFp?xܑd?sS״~)A'<[AjU2 qqI0:wE= j7;Edd(7gPy(`cP;5[{HX=Sy09x_Y#.f:!j&}#*\Rm-cF;pd.F_L;wNwuud'JUBZ<}QBb7՞65DW-6Jx>H9^B?AKܽBȬIϰ%rޚXyz#lN?{9o[W'U=h oS!+cbGx!Ade}ɣo[1I#I",Eq"ޝ"DH56UǷӧ LӒ c"3,!Ufюo!ʺa)ʾC9dfDlUrJ#Ruu6;N"0%yl"BA{bTDUt+gowF" Bf ?h -WuO^1cЫE] gyZ}bT0r=}*Xr𧬂"NY9UРUD9 (2b(@ R=Oo8_+ydsdf>&wCHtK$c}4[WL[L_`LLy$[Rҽ0U3>*6x @PI2u~q}tcLy:hڻsNȺŗxAb샺v3 Uc6Bn=A>N"=?z=Fcvn"z_EO)t1IZ`GvVv3zȋM>ΣF%Ӟ$Gb??ۦdQ1мDfyƀ8NJV"5;u״n×y;رT}gg$'-8tN{ ϗ8m&_ɩc0]Nr ,arSǺw$_IArt.XCǽ:4qۀ})*#jQ3|zӋ5ش zI͡p.sQ_*q%E۔n .Jq5Xf+5 Fj׋ -y_ta\R6U/."+oQ>^YxP+W[O7& -x:˸sMg:.zEQ rk".zo4,UDQ4ji)bKLw^J5h=N~T⦬Իx5ZqoΩݝm%k,Z+5жmulFh&ƛ\enVRۯ$`./mɢ3Rr4rXZvEdY+[p@d0Ux37X喎u`nV߰PL*OVY~i+Y. MK(a|2?i +x]]$}_qXDQa xF7ugauR "E%GJv/q+gr.)_/]IlTbu1OgC2J(Tاv_7}˟wZƽxSJ_S +X֑b6)y ++:[,EcA N-+AP2k, ++C +іUO.h, +',pZElcQygb.K^c1rxpN1tax%PN/BdUt9Kţw֕Ut:Wp!)oy޲Ld5saQ.rQyЅzG%N0odi<.ާ _CMQx\0dBAɄ>R" |abIuyY!jH@xʃ.T +hX@]| h`-64, m.jX@\i5, .4, @.LhX@\vjX@]{ҰkX@] +9jX@] +jXDTyaѐˤaAIÂ܅y 0v5,հ w}A SK>Hg܂6sw=[aAࣆ0j4@a*3a uӟ@+r0pe +%eb,0piX]gְo0z 3:_ ECa7,LWcK0p5,,lld`HNC5,]LEÂܵLaAڀGA^5mFjRh7wֆqo";uR=aHkcd|*!S2p9Y[_ +83>ݵ?|ZP1-L Fn4eN $T)NE }DYbUu̝bxm5P~!}`pxY jAx8YŐVBŪ(6!MwxDX#d5{wtx,\2w=Y"y7_ݱjEe'0X0}P@/d.@p]Hp+$6HGn-@-d`*i:E-:Szo$0³m G"#"+ܐ,y;-x1dSg1C&uu?&DH>-f{ou{?Vc5-Gٶ*k_ߏ|N&bEn"?&4'[+|'lUL/rlA8n w㚐-EװlEz+n/}3(|qʹ5#`ԗdeG|d~bV.und%zĹrّGZurHr1VӒ dξx&#r]_ae<4n2O-^׫>mg$^7t4J3G-Fմ:Rq[[nm^aw-38[߶3vtQ=R du)7mc2OzD+{ا ̖Q9;:y$ISYw CCܠɗq9v{h#~,i3SeOy{1X"ګ6e`A%jEau?F>*z@n<| vPHqwoΠEQ@<\Ww~mk܇t_>zH!`sq+=^G\t B>~MO/ ;FT?^ץ\Z6v0z] +vD .|VNs9~F{9#YaK伽56G:um4s\ CaFO`zuߦCW04B{2O~G($s]cmGLEY㘣)D;El$oO%DgXB˽`BuOR}rxG朐uuP/%2,u9#ݼg``gիvv?mݗ3Tz"}Ez~,ȭ{޽9 ݢ0u+E93BwRfc͟cYN zgMw}Gc&Kç=#I?_6lL %B9wͨ%239VYۿux-Ďl~S=sݜ>&9h+U?mwLupwCe~(W7m4JNrEc` >:ֽ#9Jo a4\i.i*+k +mr@ؙ,? WTb0e[Mp,5"okP_Ks}׹n>uyzAtK}SKUKb&[h)U*u@B'zQإjMQCļRRN!^rsm\G*R*)׎WhS$|eF6oI) +,/mҨ)/]\hrD} +TA դv߬u'XQ'h=BjeB?.g>_qo+Z+r?6ABn}`]ney:{uhRUuaGtgk ѱiC3$/Zᢿ\ƣ6%tUJ);A\k4VjAԮC?< m^h]tESW\hY(}ڽ>> endobj -461 0 obj +465 0 obj << /Type /Annot /Subtype /Link @@ -5316,10 +5366,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-23) +/Dest (cb17-23) >> endobj -462 0 obj +466 0 obj << /Type /Annot /Subtype /Link @@ -5327,10 +5377,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-24) +/Dest (cb17-24) >> endobj -463 0 obj +467 0 obj << /Type /Annot /Subtype /Link @@ -5338,10 +5388,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-25) +/Dest (cb17-25) >> endobj -464 0 obj +468 0 obj << /Type /Annot /Subtype /Link @@ -5349,10 +5399,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-26) +/Dest (cb17-26) >> endobj -465 0 obj +469 0 obj << /Type /Annot /Subtype /Link @@ -5360,10 +5410,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-27) +/Dest (cb17-27) >> endobj -466 0 obj +470 0 obj << /Type /Annot /Subtype /Link @@ -5371,10 +5421,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-28) +/Dest (cb17-28) >> endobj -467 0 obj +471 0 obj << /Type /Annot /Subtype /Link @@ -5382,10 +5432,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-29) +/Dest (cb17-29) >> endobj -468 0 obj +472 0 obj << /Type /Annot /Subtype /Link @@ -5393,10 +5443,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-30) +/Dest (cb17-30) >> endobj -469 0 obj +473 0 obj << /Type /Annot /Subtype /Link @@ -5404,10 +5454,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-31) +/Dest (cb17-31) >> endobj -470 0 obj +474 0 obj << /Type /Annot /Subtype /Link @@ -5415,10 +5465,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-32) +/Dest (cb17-32) >> endobj -471 0 obj +475 0 obj << /Type /Annot /Subtype /Link @@ -5426,10 +5476,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-33) +/Dest (cb17-33) >> endobj -472 0 obj +476 0 obj << /Type /Annot /Subtype /Link @@ -5437,10 +5487,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-34) +/Dest (cb17-34) >> endobj -473 0 obj +477 0 obj << /Type /Annot /Subtype /Link @@ -5448,10 +5498,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-35) +/Dest (cb17-35) >> endobj -474 0 obj +478 0 obj << /Type /Annot /Subtype /Link @@ -5459,10 +5509,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-36) +/Dest (cb17-36) >> endobj -475 0 obj +479 0 obj << /Type /Annot /Subtype /Link @@ -5470,10 +5520,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-37) +/Dest (cb17-37) >> endobj -476 0 obj +480 0 obj << /Type /Annot /Subtype /Link @@ -5481,10 +5531,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-38) +/Dest (cb17-38) >> endobj -477 0 obj +481 0 obj << /Type /Annot /Subtype /Link @@ -5492,10 +5542,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-39) +/Dest (cb17-39) >> endobj -478 0 obj +482 0 obj << /Type /Annot /Subtype /Link @@ -5503,10 +5553,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-40) +/Dest (cb17-40) >> endobj -479 0 obj +483 0 obj << /Type /Annot /Subtype /Link @@ -5514,10 +5564,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-41) +/Dest (cb17-41) >> endobj -480 0 obj +484 0 obj << /Type /Annot /Subtype /Link @@ -5525,10 +5575,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-42) +/Dest (cb17-42) >> endobj -481 0 obj +485 0 obj << /Type /Annot /Subtype /Link @@ -5536,10 +5586,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-43) +/Dest (cb17-43) >> endobj -482 0 obj +486 0 obj << /Type /Annot /Subtype /Link @@ -5547,10 +5597,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-44) +/Dest (cb17-44) >> endobj -483 0 obj +487 0 obj << /Type /Annot /Subtype /Link @@ -5558,10 +5608,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-45) +/Dest (cb17-45) >> endobj -484 0 obj +488 0 obj << /Type /Annot /Subtype /Link @@ -5569,10 +5619,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-46) +/Dest (cb17-46) >> endobj -485 0 obj +489 0 obj << /Type /Annot /Subtype /Link @@ -5580,10 +5630,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-47) +/Dest (cb17-47) >> endobj -486 0 obj +490 0 obj << /Type /Annot /Subtype /Link @@ -5591,10 +5641,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-48) +/Dest (cb17-48) >> endobj -487 0 obj +491 0 obj << /Type /Annot /Subtype /Link @@ -5602,10 +5652,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-49) +/Dest (cb17-49) >> endobj -488 0 obj +492 0 obj << /Type /Annot /Subtype /Link @@ -5613,10 +5663,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-50) +/Dest (cb17-50) >> endobj -489 0 obj +493 0 obj << /Type /Annot /Subtype /Link @@ -5624,10 +5674,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-51) +/Dest (cb17-51) >> endobj -490 0 obj +494 0 obj << /Type /Annot /Subtype /Link @@ -5635,10 +5685,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-52) +/Dest (cb17-52) >> endobj -491 0 obj +495 0 obj << /Type /Annot /Subtype /Link @@ -5646,10 +5696,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-53) +/Dest (cb17-53) >> endobj -492 0 obj +496 0 obj << /Type /Annot /Subtype /Link @@ -5657,10 +5707,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-54) +/Dest (cb17-54) >> endobj -493 0 obj +497 0 obj << /Type /Annot /Subtype /Link @@ -5668,10 +5718,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-55) +/Dest (cb17-55) >> endobj -494 0 obj +498 0 obj << /Type /Annot /Subtype /Link @@ -5679,10 +5729,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-56) +/Dest (cb17-56) >> endobj -495 0 obj +499 0 obj << /Type /Annot /Subtype /Link @@ -5690,10 +5740,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-57) +/Dest (cb17-57) >> endobj -496 0 obj +500 0 obj << /Type /Annot /Subtype /Link @@ -5701,10 +5751,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-58) +/Dest (cb17-58) >> endobj -497 0 obj +501 0 obj << /Type /Annot /Subtype /Link @@ -5712,47 +5762,46 @@ endobj /BS << /W 0 >> -/Dest (cb11-59) +/Dest (cb17-59) >> endobj -498 0 obj +502 0 obj << /Filter /FlateDecode -/Length 3936 +/Length 3167 >> stream -x\Y$ ~_,Sub0ymf󐿟Q]cfg bgAQGRUH\RL -jEe8`KN>TKx?gscΔ _ -I9% - -E+LJ.DKX#$vg%%1ع2߳ -pɲƂ,AT!f &BQ9kb.MNyobb+&c -Y K̤ 4^,>zRy5^,) -/CXWVy"YW %35,` X.Ӱ]԰b?f]@Hհ<5,`!-Ѱ wmAS|hel.QÂܵۧ WZ66ƢaA"Py p5,DTaAZHҰ w7 `"аX骼baA†2D%C !հ wދK{ "piʃ,>; ׀U|ɪ!x]a%JEÂܕaALBpYh; bfSRB!Sy:hXRykX_AA  #0"VsQ,5,\5,H!V5^t&'٤aAJlLkX7.iX1aA*aBƳItV A ˨2#iXZxLRgf 2G#pT@JY`A2GAXÂYÂ!#alSͤaA!ȂOÂBHa`<" ͨ7kXz3kXP> I:d/.+j5ÙJ)yU!o5)7//+’kwyyBFd2ͿcY(*]9$/(~嘺iHSRIҧx78Ȧj3 I%GZd ad\RX&`ԨkRk[zWgmɂ&Ww2`~Nm'tq'k= _ữ1c d]6* /GgB "p_ݵ;a H굍v,95߮懭mӶ_m;xM Rޅ\KJX4Pgh+L[dړv*` 8gkaiGZӤsӓ\X)[*Iw傟.WaKC]GcR'7ʊIMZm]u;|H될\^z}GzȹUZޤ] }suy׬[TZA>4_NPWkUű)%d&fq^5~_O| i~;99MogYw܂Գ1wņkXm|$zn~㰭x'iӐGrjE9)gkCwiV[nF8^Ӗ%"J;MBV[FzҼO&7?{^#Gcy<&cūrdwIkzaf(F ]Qp;ee" zuc{yMpMuݛmhٞy5{S׿{N[uT5eJZhn5DSKc)lX |br; -t͚^pNx͒R*<\:ˮ0|jv$O6]Qd ElTL JF{'s-i;mr["uLYQ>%)tE],7&{^QiE]qtI.cuu[QG7:y(nߊ;}Eݪnws=DoRR1Hw=/FV= qgl; )|tH7JGKRKsX_]FTSm\sKZn>,&!tw=)n bKLlY m m{h[_u1(2yOڪX{гmZ_@&y'IG_N.C&,H]ǃ, -y$7B\?Rmc:ri+G#хZ7yaɵ+ebɲzJnU좄d'C<7H'bin7yU>Nں4m5i9Q6T.FPSCk7>)A!~NmhfvkB͐+B:vhTZ(}Wh H od_^S툧CxIiVPh74n'g2)7U5M5*S?X&%ovVI3=vaMh;˦mv֗<Ʋo/[wm&z*M<[VaM?+g"5!0 nʏ3tW 'v2رq&Vq'oS l|NmAvԣݘl" -<`vt3hitPÜxV^e,{|up[79;Ef":`mmC剡tF4Am0t8]7]gpx:bOd>toF^.}[M -rpϏ|ĕ4!+SG\̃r 6bAΓtՋZY&VȀV=3 HDgY{j +&{l@_cz zD9ɆPT~9}˿OoNE5B$6p!dMhS6!'L1J"2@8r3ly|k!I(eu[ CIv%)_Hҩ F̓UC(g,{J}/uߩ#O֏eERkz_Wȧ?)ؿ'(_XH"9Ek6k +Eҏ%,}N%-Z^X#}uO"6*Mf#_;}|@ QY-qIYWے$/l(e%wMi TSжŤlV=jg$lp\Pv?j \%m|+V+mo~V7c^]1Fr}1 +\5Vva)iNGHnwM=hvw[{t`sXѰ}IGFzD/~Fz[66Z]鵿ٸG^'$yr|건xV79=NZfԀ@c[K##pڷ{5V{f>9ù/G5ToOދ1~76?iv8+}cv 25q()w :v.8'>Ifl7Q6Ŝ/'l+jC_k7Ҡ"TG谓C K+9INݑtk}CqjiXQuNm]SRڦZ%FcJfnk;tD$?RqFDYJ_& ơ*f9ܡ" !u=WsAVJukcuq)gW}Yt?@w.*[u x\yx u \ԅv+?\ijYXw·\ yǺweKlzK6ׯ}I4l!N +63aoۈ=2Rb\ɓ˒3=X&b]ˆmJv%9Pɯ)Z.2.etuNbX֋uauv%#'g90A}Xƌ:ϧv/GΑ XKؓQИ^]>Pv HiWD14괱b2cZWvR5Ťj:VJLUX[gQ-(e͑-UHzmm$ʔt7Sbgss_Ir(_P_Ѻ|JODYɺT +"<ўf,K5row.vȽmBXh!VV{ݴGCJ:>پ X9 endstream endobj -499 0 obj +503 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 498 0 R +/Contents 502 0 R /Resources 4 0 R -/Annots [ 500 0 R 501 0 R 502 0 R 503 0 R ] +/Annots [ 504 0 R 505 0 R 506 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -500 0 obj +504 0 obj << /Type /Annot /Subtype /Link @@ -5760,10 +5809,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-60) +/Dest (cb17-60) >> endobj -501 0 obj +505 0 obj << /Type /Annot /Subtype /Link @@ -5771,69 +5820,14 @@ endobj /BS << /W 0 >> -/Dest (cb11-61) ->> -endobj -502 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 101.433071 719.279014 101.433071 700.529014 ] -/BS << -/W 0 ->> -/Dest (cb12-1) ->> -endobj -503 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 101.433071 391.031993 101.433071 372.281993 ] -/BS << -/W 0 ->> -/Dest (cb15-1) ->> -endobj -504 0 obj -<< -/Filter /FlateDecode -/Length 3121 ->> -stream -x͛[ Ss+H݀ -b4->88Aq\C~]vb;svDj$EDi|&bʡV/ONJ"j\6-̤%$n{H X?7ŵ/N1#/?J%Z -%Gՠ"GR(%2z, 0M)]l&<`|l<`&9HRFnV–HcbcA#؂cA,MXCG䱠q~3KoVMMly$~x,h -[RW[45gނIoN.ÖcAc 7ѻG=.wS<4{,@MdޞTj;ЛGb*Gr `&v5XVdr E>wLO#p(X3kl~9f5y~>O/b=ӻ/~ѼmbxWakODm2 acF6d`8t3#cmq&blOWb+ɮ}ϯn+, uU~:gF>WW4>R"p]L7O_~_0:oޝ_jJj'MV aEPCfz<^{OVv6V:ҽަ;d뷣taS^ꔽt|,-{+memp܏:̯~~#>mO͍һlɭ{m};]x>|fozo {=}ˣNopƻeWl>SkGijfOk #E'!OolZ G٦5v[nܴ-hEIP='nEdc_NzE4ErVO)~YOե;Nl,}ڵ(ӣ}+E ~#|z ݖnؖ\u/窫7ϖ{@ >q}Zʦ{"1!]`G;nvsөXǔz@re eZeCc{ա#IcpoʼΡlPpq;:1v7>c/`V apSս'Ήe;KʴlqO7D=>M.h^Fj.VnG j+7~.=x ɲ 8-$ٲ -o+{^zk&1dP2 ?ap۹o=YlL8Xr`gV܇7;W:>Z[d_ء -R8,mb̽t+~87ꈱQ/іr8d@v[S6y_ԟO6K5z% -!|/jARmp6kY1 -t/)a;S8L_],rBr+}p]jo{7ҐbTk1Nrr7̡_FNwa큤^;ZKcʨU筭{~2C]p#|tH~y-6}.qS1ᔊS;MVP꡷ -eiw+xR054Fu_;iA k7I:i"^ו./ێ ǴYQO1Y7hx uN&Ю4}Ȳx&=!xq$2;6sދ݈}ѭBa}\K(YչCqQ۴L ȵz_סk),iet.k]=R)avec'OgIڇa3/c͑dOі,sOF3L-"BZ;./QK)ulO\]/SLϫ:*Éi|W+Ȗd$@i 2f͑KVG׻TgMڞiH)]Oߧ[,VNBίtP+O5g0DEu9{>+?g%kO"ToyTmG8<ݸvb_/V{-vOD -endstream -endobj -505 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 504 0 R -/Resources 4 0 R -/Annots [ 506 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] +/Dest (cb17-61) >> endobj 506 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 719.279014 101.433071 700.529014 ] /BS << /W 0 >> @@ -5843,31 +5837,26 @@ endobj 507 0 obj << /Filter /FlateDecode -/Length 4866 +/Length 4957 >> stream -x]ێ$q}gK~`! 2 ?tNK0z f̌iJޙFMUF$O7sʹϗO'RWS,p6'L9?%J)_Oouȓ~y٪R5׏N@T!l*&"`FH* _rT0[U'㶪3l2^R SBTFcu0D{ﬠ3AEtzt֨-.AgtΩ Fc Yy6.`גxEEl99I`EAa ЕElQIW -%{/ -t:YTiIg -uQ-Q"`KpJ:[<$x"0[-ntX-|l-:E06% >K,`sQ>%'р-AXN謑i|1sElqK\,lA -; -8ЭH\^(qL-q ( 8ׁ;%.p ]L$q|8FK\!-`GLvx3:I\FV9k k~}2W}702Uo?מ'Y0wDwǥ: #Wy'rZv[]Bݞu1MpzgY=ul2:@ =̥'r%a]oޒsKjܵ@el[UZgJ`z=M;KVG׉>WBOWRy >}<h%yt6뽀v:s븙QE+!\A+ ݩm\Lv<oǢw^CwC߳k<\筢ޫWXnޢmeiWtؒyCQ֬wOenUwô>Mui^nmi;aڹ]S;d|ݴ:w"18NgkceDZr輖m%W|D~Cs0!vS=adL?3|WPv/v/8P 杻GFJ>VWP5"%)}yU;jq?ТvǑpg[?wl0y4$q={l ݾ -)?Mh}_͚0PgT:Wiwv -艳hT<Hﳰ#=-jn̩x -zpf`CUqz-aHϹsn#K}<Нr-R_Ev7 zƬmX}ȼo}%Ͷ+y4Ґ VヤЛFn&ݓІ5W%kCR3Xf8MM-2@+{)=*~|m!sZWO~oInz-5Y"mZO}){FfV2j6ZM}fYK/8Gh+)3=#6kM&S;֜䬯BSoGtzXv0\MmCz7YxA{GLeyo Jq#9P1uZ6z¨-؜*VLbzHVn>% Gb4PfGCM]g6%P[K_E)z.s̨ҥ8 "zFnE{ f׳Q'9O܀{ IL7H*0e@Flh~.>:3؍r -!٦+thB^4UMF']JS!EϲG]$.uƧuIcZHOS[HY1y*<"NKb?+P7#PׅxT W {qũw{{ Mxͯ*b10 0ăF_NsL2^N9U7g]tt޳,s;>@M~sB=)[O&<҆ǭe|Gv=4AMra}ĶCz&^V/ᰧCG/G7p 3r +x]ۊ%}_ '́cY$փ6ÈB'( l gQ[UFY#Ɣjht[eŘDlAK `lQ1H4/I`b\6N"K hd?Vi茖*]j0rElI\` lA -Y ,-XЭSYK\`N qL%q (e ,8ׂ;%. ] (qZk] +XuZI\"-`d%.p]Uw18 +III\&)'q)@cJ\ƣ 5^ x8$.P.(lJ\:c%.@aAX"qO`A$.]}.:¸Bw1QY p`!e$.>`=J`Aע.A1Sk!aK\(\f@1  0 2t Ȗ.tZK\ lA4(qA2 ̠$. $\-霢uf 0P(q V`JQ[@h%.M,sDlI\f %bؤf +؂O€@aq蔒 q`\z3I\zK$xi'Xo" +#3Yhř[-l=5i3LA5 +Vⶁ"s+NwU"!okn$/?bo_C4HAm_.pk@.4]ӂ\RXv-vabDy`M}˱KEΪӈ56&0Hb[^^n0iot{G3:+/{1QVVA]sjeںD +¡w5zdF\t..eM2"/(Ŵziq sq9 +ViS!R/>t긐C(j^U2p)R@; _9ȸ߸l;39b>| /o6 9( tҾ͍j(Fw5y0І|M(mRmPv*ܬ^Uֻ󼻭+DzE#ZwFzz]Wɚ${6;ޠ z Υrn+O><_+ ++]nP@xnR.)?h`F~ldh]xDkMQ7L܏PZ 4F9SZTQ~KZYԅm۲rF9ʋq-zd{c53cSxff>fy集!lxumq"x~Tc;`ͦVkf\F?6|fgGjV%N<6qWcTǮ.-5Su LJ2KwD7\fIe$m< EBdlf7ϫbi" ]G{Q +vN-gWjkکٛkj8~_l%xMӞg{˦6+aPnYTX)tD_ANP> \c!*e2=)e;솇$u{,,4rՒv~WX~w`%r>O[4DNrXDu[|5v+PYtm;AzP[ aݟQ%y޲Gp'}cn~GC乾*FXغ,o!~ wOyאV }| +NlrW<@zB=2ʱy yp?Q~K/W::"ͧ$7fO߼N$<.ꌋrc{eP@E:syelzheO&tV:52?^"4Y[i+.{@B[.yoV.{\#M ,QL?n~x>_Wf~KRS<R"U@TvSk=3Zrm;*2GԾ끝ű䍑{;ZolOm!3ƇC92Oy8d]m^\Y{( kϸ{ maѠuu4o~Λ1v \CxQ\mlqq+.ODֲ'9Q_Ocqe2/lڶuƓ;!鹤T%G޹<rٓqXϮfc)oH3[~ޏY?YlGzY͐U2;<'<zA\YYEϲUq|5ri+ybf!mg yWu2bcO#dC~01[׼޾AtsϨw\ky1ڎλqDwE@s2áy?]ţ4;7 ;T{F_īK|sm#+ƶFқĔ.oG<ƴǮh({zz]ݕZ<0T +5xfH;Vҽi^^p?}CLy][ήo=8ӈS[ۢ([{E3ۻ<":w.Yj"[ި:V,3赘Z=/iYhM tdbӠke;‹-yk {򢫬%Al /i^i#~LuQ{pikIR[N9Vec϶ Z (mJyf։dZl-IRl1E{^iNW*-[g-y[zK&Ax&u=un^wmzdz6J*{(?e'D LNGklJ!C}*:lwׄ*j*l X_e%6>[AVon峄eϯlHKE +7Ӣx#mI??"; endstream endobj 508 0 obj @@ -5896,21 +5885,21 @@ endobj 510 0 obj << /Filter /FlateDecode -/Length 4963 +/Length 4918 >> stream -x]I$qׯIq_c X6 kI0/XI2TSF X2_*NR]o?_~)z?⢰_rq:?)fob_pɛ_/諙rF_~"SL1*/2XJ[A`=a9K,3n͊%p$ uQ5+C XCgVCDQY#$SHdH V%^0SkQ‚W%,@.5%z K@ 𴓰 fȂ"a\є "s! l 邧@D$e%a<4rIZ9Eyf 0Q(a 2M ȃ, ?l{ D# N‚ I‚ QF&Q‚ "> -SJ‚M$,|3IXBO87AEAMY8$@' N‚I7ы%Df]L4HX 䛈l^x}D|&3eI(@oK - oŚR$ &2Ī*ZeEU9Di!o9Gof7cן|ۯJJk -dlG|cqR$!| sR G !8ȋ2\b|f>"GD>hY֮*>oו$}>JV۶5S2-@k:iw|!($blq+h?\rd#t?|~ -=vϿSQw>?'zEz̛8^ k6^\V̅)zq~ΰr圴*/.Uk_7fTwA?Ʊ]Yk6Zgz{`* Z|I4':JQjGi%r+X--`I_lږQ 8i,ȤJоrz;^Y)6hFgݙaodXP| !搏\P1|Qvw0>oWgSNmYX5ѓ}^cφT-Ө1i;c"ycޕai+D/>Qo+똭X(3coP"sN[oPb|YZhC|M`T5?SY6X(*_fxŭpeQa!C26 ԛlV='%2K[e-/CuK-?Wcsa!*eNcӮ.Fi8:r6}|zkd㌊{]Bq}ފWgg˝מQ7ɦ[PA_G?^786+B#NصDI-Vxl:ԙVԯ"#x.*)[m3[{Y6=~/dƓ5׷aRR YF-lC7zZ\[ꞈeOy5Ku=Gj,Ox۲}nXV"ѳwfOy9+ޏ^[GFުKrQ*Ejw_Gz]᳙Pu9x~Ddă:W~s^O"f?m"V'f{O2n`;? 'lC`\BFC x,es%kCX0nd7 Ϸuf2bQv8V۪6r^e`{xf1ĭVOy5 YVP5]u2G=l3c |"=,bɇ<-H&5OM=m==]:,-ZӹqU}oz'bӓ}^BXÞhZd*Xo >,8ǯ[93'*=]wf-xlk`͓}^~NJ]]f9WrxPۻzCx[|e=R늄'tx`C= O<"ӧ^cCke31z>fVǭ{f#Nݳ6KhY" < S5.;"Z[4oߙ')VI#a3DڼMm/H+ufi;ПjLԷ=n,u )^vW;iZѝaEm65F396i?ɳ7y'<=kqѫUWm=9T]iܽ ;(gB.οc},"mgtk -25K>عZPw7{2m: \yog{֋l i{2(C)=]sj("?W[+{tJ7aӪ\ڪFWVsr/k_g1v "zVeWkWofaaiwT{3,;woܒ]Q_BOBzVDzϳֻ3tzD̲PlrSXm.>/I:Ny|N<%arKf$<9&lNä2zn5,ӕƾ<(ߎzT(QogRo(Ã1׫8솆VipΖ7[_< Q^Qo75y NYr]m21׶:(.ֆM@t^O5&H/ =RclcV~Dx&U%>}e N7-fe72[ -&7Ҝq~l]$A4iCߢt n*+;)t&]=wOZ ) -z;yF~1lH[jR:F2֏ }ulLjc9ݒJ)-ZgXoԌu5nJgj#[^j|X gk2^Mz&/WB݈}@{Ctl\GB'6ѹ4Y9E]0"UkTY&TnT_[ qm"Suhl|k;1UCr]"Gmbkz\5EnSS@*Dcgɔ\VٍYoIBk߱BjzhٸTN5p4+^IS=VX]0.mfЕVV 44/~x}"zڠQ9- d-ay|E=]Cm,ΞmAN?=p nz瓺J[LZE Tc)ݪZʊbN3״ҔU[z-ynαN-L-ލzK[irml zdz7j=sv}Ԫ-wQ;U -K4pZɺ"Rk%|&lUQC"lr%=aN*AAs .#ED_o@S %-' +x]]q}_VXI~0p#00ӻc# C~NEDZꞹw{iUX<<,RjJ~/9=cpOOj^_I(?7V.N^'8M .yӟse}6Shrv)FUJi+b4>'41gI3|tƭUfΘ$̰.jVeav +f죠 +vh!9kSӃ3z +),"t:Ig^K<|tk甤-Φ(l*Q[LVEb,l-*(-鲝|NΉ J1uF'kzuQ-A,`H: [~$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn 'E93Ejdưpۚ'ɮc/|oNYJj +dtG|A+G1w#5hqt##1ѿrN#7E2s`RâCsf7<&GD>h*^ody>Vۺ5SR-`kiv@Y> +ND1il6ʈו[$`⺷.C4N㟿˿O_N'|w_w|=k:C,h33<׆tkIGy˞\+z~^Di_u`ٖeiL/8%dJ|~ʎeʾؿ;u]@Dy|uie5md'p/y6@aw QGz_7| TF9A/.c{:P/;w<询 zeZsFʱ鐺cex\^}Z}C9k1湵yamԦBgy6ĺxvg⼏G2OZ܍Z6@{0ӡv9r֑Y.o=wq&|Yy:ĩ1pl4dzc{0ϳ<:ְjDW:uﳡb(T簊6Q潈߳'nD~`#6Ps<Jw+B\ᩞ~eR$Ud:z[x*7!XC C>enSlr@{<ZoǮޖ(Y/p(͸JAjU<'pe~m< z@y:$ߎq]zʞmqa-kR9VbTц]iyL#c]ރyŞ,kXqFeԝn񈿖I.17y^wVR4ǙQhg$L4?,㡂_)=> ?Xޮ߅o|=7c1bGQvW7.6˷f'z]sX6cCCkv&Oa6wi=kmz%OB}2 yY;;\&=f^*p큻h +65$7e@ݬTM_͇anW2-u~!-}=2Of!n)rw?Ήͥ"?W>7}W 3N.o6V42uwNСdf/1=`.%K>=˂k'lVä2;TXot͓Bm/K$D{r0e>ry[kw=d+&vCa;[N{/򢫬%Al/i^i^#p&:HڨI߹5d-ay[uv,{9}h-.8F4ls+uUN. SUJզ0gn)-Nb)oӞJsVi:hɶs8:SX2 s7)mv˺l{fpݐ#SճUʇs3:HO ѩ5[^RG.+YԽ^cr֪镾 P}+WΖؤ luSNDj +WKAo7EpI?)J endstream endobj 511 0 obj @@ -5929,7 +5918,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 105.123057 101.433071 86.373057 ] +/Rect [ 101.433071 123.873057 101.433071 105.123057 ] /BS << /W 0 >> @@ -5939,28 +5928,28 @@ endobj 513 0 obj << /Filter /FlateDecode -/Length 4732 +/Length 4711 >> stream -x]Y~_,(^@ /Af;6q;J-J-u`,;VctP>/bLǓS7 ; ra'RFOXEv1UJi+B0 *bJ -f@3(E'`UKU&hT0C'VCD QD:Fd `$ti޻(si"%` $-[%`J[ Z' [(`JKd"KЩRg\VI:lZQNAK8'Άjxt[esŘ@%0% -$0! I$`(RX4PV@>-UőjBDX[@ka!+q"qݒJZ % 3k' ,(PJXpwJ\`AA ֵ ,hRX%$. )` ,qq:Z k -xH\^C/q25Q5S Ơk2xא(Gxdw`%.|-wu'iՠc8>Q¸E+$qb8.3J\0 xW[ԒMR8.'q0h8`~tE]TQ- 0 *ID]$-qxPC%.]LIUZ Q; Dl@MQ``5F`` \  Ip[)J\&b" 8ZUy3u:$.LZA/q~`wI& B-*`*g.4l-q<]贖 oPh"V^I\kI4#(qA$?(q V`JQ[@x$.M,sDl$.r3J\#l1H\lz3H\l'qAR~`7Y8tJI\tzӐތ$Oz^o E8MI$7NH=7p3ބG/"7.ft]x^` VZ+ deg# -0!lĘI L,VJ (/1Zp5Ԇ<0g'0,}Ysdv%5>wϞ01R415&oӷ 2vOZ4j NA66 -;/,_ͫz#? -IuoW4zw\cs8̀-w?>_O@r~ L&߁=&5\Xi>ݗmىy\Ʀ  -O[MkߙczjbI#gh+6E9C4ݸo_k7'~}t|1mN0y?SyrܽYaCfger;ܼbc>S8jaйk-38Z)Ferp -oT"9)X&ӝySr 6hvu;eob׈[[Lzj~ :|Ɗv9lg2R})m eg w 5ӱFZY{;mf{P4ϛ#wdD(.[!kcr2ihg{RsNٶݍ7=WR`/|23 h^ Rsg -^d?tV\`gmxW]qW -x~$ywp 6F!7?f][\{w97o$ו#r3M?l\Q5W -Bs8V 6h[ٯSXA՝yڍ%7hQv9Z>MxKtueY{3{ccZ)%yڍ~χW)qwm|2 -=ݙpr$Ipݭ:Pcy}nf׆Kk/1fDeœ#j6n4g=ws8y>,HT޲H/k.z2Ex4,mm!l5 -jv-<]!P+o{^ytG Cl=qa.R :tW畈6I/8iygL#cv97T0c)/S91S}|WghN/了{hzr9am?wR&i`g;3:ҹذs\ǒjoQLu3`J?t۟Y7*~9x$ N1 E:', 7 Oiݠ/`4. w9Y@*'[ Bz)Wļ`t)g!RX3nU- e{4GSWa1m:tNkBӝEfܺFmJEr!TI]NS&tf7{\1J IL7JO*֬)|5BllIxf}1Z}b^NH◓ BjWB Vhr8*{.04wTኔg@wǩGEo}=PMU8hOlM8uJLm8l*Lղ ȶl?]aq#Vi-:ƳhA[04G0>`i"}iXZO˜c]-TʲسɩC4;h1Hc6%pmeJDQ2eĐmS,GB)]+]+~3^lq\ PNՔŗ̷jJe˺i^wmiP5WTln!{d;sI ѱntƞ;{p񖧁b;X2"c%mM莁UAo+&@MQ/ӾtrSPP>jcls KE޲yޠ<|2N| +x]ۊ$}gJyH`d X#l$?}"RYQjKTɓQٕ,!9_~9zRER_oR?X]_HUޝ_Nl~iyVCNI{#|^XFR3*ku#e*3L S T`Tfh㥞"P^N3dQI;aVNSrp!f*Zh,lQV[([w` K(H@=`*x9PE:%9"X8&\V[t4h[a2 5@ tkDhq\A0Sp\:8qJ N 4Hs\:qj` qq2h xWK9.0] #qzuʠB +p\`c +`u~𮲸n*+r(Gxbyw`9.|A-wenji CtX >V̸E+ҹqbX.3p\0* ,xWjԜ+UX.q0H8`~tY]D  -) 0 "IX$qxC9.p]LVk xW=8._-3B)8xWH0 +#K&Γ@ `/Xq\tpXpm9. buxq!8. +h8. +e%ovy[v}`` }_OU-!(ж10m sg!Srh突k7o =^Y/ALh^@aU}y}b aW]5"ɖKo/ב\qu]L>mdnKs>jAz Rvyy>dߓ~35=;>sY-xyݟ3C%;䓏6>GEѻ/Ы7܂ӿWmV-k|עɦ%o33>m4Rϓ{VrK<:3o|t{ [F$YZmn_s8Ϋq[;us-ݾߙph^{g1+#b;G̛gV9rh]'B ;hܗhh4~–sgYOݻ+#w<9{0? +6B6C2투m=ݞxd;՝y gWAM ,&G[ݗp݈>o³*z[Bkd.D>ŋzdzyЍF3fI):(3~=m}BK=]G;lk;J[}hTD;4u vOsYV)Eo_GFJGh(; nÿܻhRv a*Ŝy~nz6 +[sÅUjZM\Y(M+EkNGy +#5y痱M>SuoYiuЂF[2'PpE^Z}j6׾<׆uo7}uS+.U^GgG-Tʡ|Ѷˈ]`;vGs8Dm<%,7>gyTW; U~c;786aGkg!ekWd~_Ԟ,Ϋk%WSȻn\mG\''9^{Vonߍ3к!ֽ{"s7I>ݓ蟙M"i Hm"[{o3ᐺ ;(M򊑷/j;vs4D}dyh7-Or0 8ۙpU_i? +xP-ڴg< +l嚲j{Minñ Ƚ; qܻsq^_W};i687kݙpF . 'E'9{:+QBnۙ;tpaiheimFCǕj{N) ʢma#VJeҵbqd:a_/u9TԪl.e:]sS$(i%ɈP\6jLd[Iizߴ]q#RWl[thE[mqbc~MvyP{rc$-Kut23][[SFu-h# 5ۘ,T'B,+%lfIwVŧҟۖmFmYZ*7x[-};QS_202.RSS,mu܆ꙊRk.?)"C=^+}!&4J+ikBw Fk%` q[2tg UHP:K=$S@\zZ*ژN!Љ^G4|~ endstream endobj 514 0 obj @@ -5977,19 +5966,21 @@ endobj 515 0 obj << /Filter /FlateDecode -/Length 4869 +/Length 4924 >> stream -x][,~_Qφu2k1ЧffY_(uKeTfvMP=M%$}"TfW -ED)x{}"EprEV]A8|tI`o7].ZB$C H(,E2)r\4l1Zs\4lAq"ovy[v}`a "E d"&k9.c=^t^@׬.B!XW8.ZJDLz @% `tr\lTHDȜ)؂ D)qA԰ QG2kIt5֙hPL4&8.bq\X:b FMqAEKqIqAIzAa2q `^z3r\zK}?Oק5h-,? -Çg'_eP\AOCo`Qy>5Loqs۩myݥJMWOy6 cd3xa8~D,hJ!myi 9LNʚl"Rv]1;e>]gieZ,p?BcX|JAwy=<cӶrc}[ˋ:B+9ͶO;g1;={ָiwv?؋6D1egD%RˈJ' el)ݖ9zPmK^e{}ևu+c#\w闆p[VƤ$;z~ ӊV6,#g"a-Q_pZ6͝~Yc5+}ݽ*XlRҶ;\ =\fcH|?r'1Z]f76UoYr];s n75돌?}DZ: ƢiYku:΅gs#sPX^ʃhd.~`暽X`Ds~Klwr ܭ0y!=3UX:Cf~wK& qQn("9;;yc{HϭN}m[<= oQn76j̲hǦ+'똃|w@xdza}ۊ*4mPFO'zvo4{ 0z=)Oz<q_n&сR9Y]EN"ΌCqi`u N\G6w˒AMa4#9ZwFY%~b]-t֕xd7=I1*lfj;~Ӻǵ{M Zg܎6b d~t\8:J/Vbl.cיCݥCkc*LݲȱdP]FХ:XtV Ib,تҴ1ǽ i&}a$mKMsL>VY'oViAN=4l%+U:F*k%j/jGB)cOqTZ'qT&-[=^L ['{KFFMj{JSeۺmC3l7Tln!{d,y].U;!*iQ[6o=8ҟ6[#γW{%cMaA_Mx"+_%6}lugcjW K^4Ym6 +x]۪ʑ}gÑ~p c?z00{ۘ}ߟR^BJ{w]DF\JU%r zEM+S.f/V.N^'8M ׷ .y˟uu}5ShWR9;*CTO1U>:㶪3\N^R gLT fXݪ20Q;I3tQPi;QJ5N)A=Mu:v +i%]B>I:[|VZysJgSt`-&E+"l1Nt ]ItN>'D]N:䓵Ji=y`ӊ:(tR|u[e$-%xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn ߢ +CĜ"52cX8Dmѓٝdr &_qyռSVjsj +dtG|6iTm, ",ld&hz4S'JAf>4AKS?3,ha@ ͠E}[% ȴXӷKf>b:맟.^/oJAӧY}&,\OuB`m(o+oeZeTZ>-C[T_mdfguV乗Qi*>}|~?9 +8 7.zsYϿswް﷞G?>/ul(Cڥ ]#UH7=! oz"+艬g^׽^֤!ϝdVVfv|l726RpZ8Jy:cC!rCI32a|ėlM7$uL=? MF=tH=juިQ?(`5[Gb{1i Г+yDZk5J_Gu23zf1Qk^Y ڐ{cyu : +j_ǡsEe؈3m͑GBifl{ '<q:g&0$U<^?1d|QAf\leBګj_fiD >'<c\+gxFtKeX%(2~{4=t+w瑧Y:GIW9Vxl:`Ll&vWJ9fvÙzP'%7kCڤ'w?)itF X`wڐN]zbϵUF }]<:<|Rf,~IGZgYLkn7zhS.eE;CkZm{jrTJ5 ]ծ[|u4bIk)I>]9qQ#G7qPpZsc}Ӷ꧑5}ޒ>2Z%g_c1tc#~^cK7~,_,x-b9|iGaVhYAc].[X|6F}Nx =r*;]>0^:e=`. { ˂v+aR֮zzDc.PۥYD{a}&'񆒽!3?d|;^Ւw=OO=u! <`y%QB}l\zᰎ19)hw Ir`ڽqӃ*G+RSw2ϓ,u9ܧ^'<8sֵzSv97npJa0Z I SCGNAy ц#6&W["Q'˵ːK,rcR>6>Qt#qΓye젏PaMY~h<\w`:sRJwaL?n"5Ǒz.!5yacŷ}Mj$Ս׸lk;|7%Oyb[F̍p<2>1Rk:Bt}yBd~su;ey3)!sy3Qe+pGGHODQԷ:WX[cB6ۺIa݉!O|8w'{r<2f&.Eaᝣc8sfGzY͔U2t1zy:މ+chÊȿ =G|m7cQP?Jnޚn=vv{lNǏ-iSy7ZaNˠثV&z4aꨫ^׵>"Gl 0Gzx&,\m9Kj;N_za޻^vt_{g!c.Lc~^{$;ʯ =Cq۰鶟/a~߁BI7љᘯͤӵX}9-U E//J颳 j'S/B s1 Wr=Pe7mI:|5TMdw. B z+֫I1Bl +:؄@{ƻbmPظj6ׅ.lsi5; M;kQջF5eF&5eI.Uv̦gFo]ɵtD[OŖ*zҡNOunH?ƈZLOVlwm$vG!\|ZVn'ҥ1UWahVW_7)1E)z7plⵓ<4q=-saK'%'mVR2&G$c- uMLVӸ U5uoP~[ UZeA3VnƝo\[kzs0_ybsj%]lTzeL )tqѷY\Gkc-'kdҌ{2OszCOw xD?.e7iܺ~&ӯTa6Lh.֩ m7U'R7M˅Mіyo[ }'j.xsp)ʊ%S:ΰUe+3 zT`a]ڮs}EW +!`yye`7{19@FMƥa$m'K|֗mαuv,{9}h­.8F4l%畺*[UZ'F*k%jS(٪['K]Wi{9^ TnZd[9co)[,Y๛ʶuuufnH葩&=cg3:Hy'DjyLNGkk*q/%5p㽒H+5;&g~Q6 |_ )gJlc:ͩN_^!.#-w,~(*-Ua~ha}2?x[K endstream endobj 516 0 obj @@ -6008,7 +5999,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 386.373057 101.433071 367.623057 ] +/Rect [ 101.433071 423.873057 101.433071 405.123057 ] /BS << /W 0 >> @@ -6018,19 +6009,35 @@ endobj 518 0 obj << /Filter /FlateDecode -/Length 4697 +/Length 4770 >> stream -x]ێ}gIV~ p.E nc#ϡZ*=l`vZU$UbKTK~>/B釓U7/Y+{> >Zö髏Ng3茶I*T*IPY;xoTN%̰ /Ufp VR 6&3* 5K*J+ءR(f2Nӝ3zp!(Q[ Dla " q7؂ADCԈl\DɆ%.a=^t E]N{ Sk!`K\R$q̀N>  0 2t Ȗ.tZK\ lA4(qA0L$. $ZұJ qA`7PQ 4&$.bJ\X:B%.f bLM/qATQ!ơSJ₨֛%.L qA$&x¸zK\X( h¸'a vtDz3H\0MDbJ ]LI\7Jk{ iČZ̭b@{1[y1g@i$& `&VYLPj% /8}jSTp3O1,}YsbR'11S44#005.Is"d! |N2j-NId$01#fӄVI -XY VXau(C$vW*:Yq́|̗X wߟ>ǟ=;|_zr_o>ToU Z62 ڮ@Vǘܕz4o;+c&[ұ۞ݼΎxjg,^=W}~û9H>\\p2$q+s <ÝlːJDiFu*HE:w{fQ鯺Ԇ -~{ӱV+B;R(-Ts8TM4~$Iz>6\vI18{!1le?TD-ʽGy۾-W+} _~i[W2ƨnnxg6Z?GKA}N[#&às[Wp׾4^gdˍW;T92w҃YY QSv}Owk-Fa&W69h;.跐ᐸ7}$ٮض7Fu[o\sGam :CkxXAK3OwiV}W)Ȩr; q%YS^Ak3ݍ}u}O2xctueY{v6qlj9j7ą?^-*9oe>-;+{ v;,|3IR\w=t)y>vvmy@?OejFTsOwG:9iYw42y'F+ ̻ 8#3ꆯK7;;ŷz-.eл;JFkDvz.Xf#omGV -Uj7`k Oᐸ}+}&b(fKD," od\v4dmwo6 -yk9ud2đheûres~ZwIHo5<76_s8tn;=}9~k<9}NOZo+| YpȤlE*eY VS#ƣW;_#^{o5CMw9BF~W5zo3VEJ|;~-efnJz |~n}WU|{v96j.n=x-حtǵM~HSSk~nCY^n`7}Bzg!r;F_[(H=dYħݮs~u3;.좹3/XcC"3Ԧʇs8nCJo}Y $}/?߫/\_z׌[ 'rIS02( uuuKar˕ܤ;5} 7H6 ڷӹ{6ls 6_m?=J0h^iyv<]>R"MzX}^9Rjz7J K890:\./?ľ$KdGcդ6WK` !j:W]aS6CXlmVkR.9]u -m;o /'z(MoM5Ȩ1*%CI]Ncf8]!K I,7f|)j՘{RNt hrf(b<}B^NHBi[B VHMETKOYR-<RMN$"wR+wuX;mK{_0J(H.=66]}%*1낺"Npe+TmL\edN7p*v;[/\n,ORFٮV@ -U\iyZicdҌ{9}w9CD|p[&(K2'>%:Unۙ,8wga6pCUC-k3џrq:?)fob8pȓ,賙rF??)T*~ p9K*3VaK*I* 뢶 3LNR }TZmu0D9g~ +h 錞B&FY;ג.O!$->+-'D]NnuF'kzuQ-A,`H: [$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4swWF5 Do +;[@`X PdH\:c4j) p`)e$.>`=VtL)E]NG btb-qRS ?$q̀N; b-*`*g.4l-q<]贖 oPdVAI\kI4s֙ID&Xi)ElMH\Ŷ,6uz'qAJIₔ`QF`֛Q€` <> +ơSJ€֛I\qI$qA +M,qmf ;ᢈ:) &Ib @$q 7ы!D( >$xiXo³ +#3YhřĈz̭b@{1[E1f@F0+ĨU( + p5CTp3S}[sdv%5>Ͽ~o{zU? v0 LFw{xoHLDRd! |&s7Ro,,?m>c/;@݆b!X? VXa Hc!vW*H'um|̗X ;ӯG/Nor<Ҭ| (WYΚf.߃ZeN79}d^txvzf[Zڳ8^=|~ߝtKxp.Ney N<ϛE:s7١K_ʹ\Mu]nN?_a13@uvma D.|GN]s4buTSԛVO^(&{ń^C~4r +iUBe}bqi30@zvV>(GnIQ[A}-w9]ly\FBt~eF~*Fn\ +If=nLCʩǬL+fN&Jg a ҷ8{ue!UqiSCǏW˲,r̷ӗ<7P6>WE;}$ 3($,Yǘ[FR}E8BS"D s4 r廙Ƹ]F8!e==p{Djr.$ݻwwpihՕZV87C+g+COcIGy +-y痹O,y]eL3OZ-ZarIW{-׾<׆lz*{cc<.cY9mletY0Vz9{Mgz2~UV=ܙh_wwyDmtcw{7yEwPuѰ㌬G]o/j&#uӭNp%L36|•YCW}q?ۙpU+hyhu{a3+eWZCFc&ߙp]\y'5v +;s84n?^9z+b$S[}lWcaԷñ2rz<3ѐ]}WG谟Ln`l1'b;Ir_"=)=:i>a/aׂ9bs/ya蜾 +qO;o}xݙp>$ !#ORTlϽ'pOVrBZkղvm<ί zYyzw9} +ٛkBֲ.u9x"hx{Wh,uۼ 1Dwgaz_lgAׯaQ7#Z&1Ĕ7kkHWh 3{H^<CC{3 +?Olok~9~7b~|%`1;|~Ҝcmc`;.Xۃj'z'&C&}=SRtZ9l[ˑڐN-{My>ճкYe7R-4,\vg 󖴗eX[[{fgĮ驵U/{Uode-ՄE1N![z\[oϭYZr qn)g^[7a~*r(k[f{r$uH`3 El:5t8=E[/W:/ـ MJ_]6ŀS G]I畜r?T{z^;p} ;\:'$7:v;T'SDsع>7$Vm> stream -x]ێ#}W9i/^ <;6q;b7/.u`vUT?(1ǓI%Y~;+ip*?_Oo싿_:EJ^+w=! JPIes"ZB$C H(,E2)r\4l1Zs\4lAq"ov{[v`a "E d"&k9.c?Qt^@׬.B!XW8.^JD,z @% `tr\lRHDȜ)؂ D)qA԰ QG2{I 5hP,4&8.fq\6:b FMqAEKqIqAIzAa2q `]~3r\~[79SV~oFLi7J,v59 S@sҍ+MB-MdB0.VAagmΛjAH3ru/v /,uvɹ 沗eWu+}yhS?4j;Cβ .sg~զܾD`v8MΟ7^ڲÇkvv/4h"4MkQ& %h ɞmLuWdžV6?gVʼt` `T7_u6)D Wx.ͳƐXN2RFx9.s-Y;yz(fTu-#C`CNg杛gFc\%vo;+j+L^^`CNt5W}_?s<6E:ĸݒX<'?n =ͧݛVs;n%z6uP!*ɖUrO6Pv'# M=zá`Fj\LFf_^r}OM'<zw7d;U{Muԣ(wdy8ėCvR_Ek6TX_͇t-iTg5k3=~~W(I4˧ciG}I(|,Jzَ_sd='sէTwKmٳ8"&|i*+=o8{+gsHcU&Vߩc-EC$e:u3Oc11O'GA#eG].DG[Flm;OjGLmYU* 544Ne;Ê>;Ԯ wUhe)da}Snj5ZPV -3_j -gRAۗm bed'tkkbm=C盰ꦿա-n(}etyi.QΨTb<1ˉ~"KYݬё0 Z.rrbͭ:Sj*#LiP7<#tnHS^.t~Yk;rr&~=v++녦klxiRWXEFjU*%/CqUf/:eC+ -b/%SH#vCC*IUXUE]\ e15P~].U'kg^upw&;_{q3jom|^cK'MevN )4q,.}kKyq/Oi4U换(K2_'{S9!vZVЕ[ޓ׻ăb"˦j~ʺǵڶ{)*텮a'Znd܆2b d>tnÞ.M9:{.Vᢿ\Ʀ3%&qEEK".Fque 3 }'u~O.Ktپ"wAlaN軗l/+ګ#i%<^j_^Vceemn䴥B 1Ic6p}GQ2YdPls2,#;JM}?Ү:*KW%S 9d%##}*)uvw6l3ķTjnU.gFsO΄T*m=87us%Hɕ=a:5FE_xț -EWtM/C%mͭx9!T/m 'HM)"} J"} +x][q~_ ؀?8yc# C~ċҥ{f{s}ZD~XE)uNh1o.?_N_N8UISGw&~i\{G]HkTֈCQ%29vQy%p)q*v +0æ8̰ZGFaA* T0C%Ci)Y 9VǤ Щ91tIx]t$s)k%-KTp3cL}9Z2lZ.}{\~Wʟ9O|%ry&mMYCFԌTyэT6]Z fg&_]ԋPAgm;ϧ + >׋y:C#)`^KqDqg3}k@=kM_~/oHiZC1ÈR_?"Ӳ*]TrSu9 2}~6 6ԎLҒ,gˠ|5[os]aʛ9:T.N6(j 4\T1y.uի̗Ttt,`j.4j^WKWtH.2Aɽ&emQ:]adkFvmDZ h/_2;ʷ@KKÔc{<3zIEx]-NMSOq^ܧe&?[# ew6}gB!{ +DCm2 \O"%j$0%܄ ڳFm_W[|:o6Z8UZic"`ϜwK#XH2{<|(7x's_B,hE;g }$lV'ϻ'WGm]$j|HOOf#\gC;!Ǟ ˖^Lqy&ZX7}_|uH2jza'<z҂o+/CvQhV1riy}fƧƚ]ܖ%aT;Gsho)ʱ={SzytCt9;ϗ'<j3=;8ή)]C[#bY];Hծm /C>|~ Y\:|x~nTϟ=ϟO߆|9 ukg#y }ytrQ;qc㹏dpD$D=r2ӡ<uw)hcDvFEEAg1~^XZw==pY +~F4?kt2I.1Vs4k16J6E t)Fћ7f[ٖʢO2AC-϶N:x|w\ׁhw}uW *gccۮe>HZ_lYlKf._ê~{K\b +rCQJ7ܰ꺑3b皊HF sdNs.*YAO 0!Cfq変/ˈeYUV DDS'|jᴵtd},L޻u"Wk1]j[f0󙯦jU +}V`x(VFvBʮ&ֶأhWt }өKZ.֌wVJ(EղLgTRWRhάhI lMJ:Ft\PSŖ5o4X6^ՍiRL;־Í^ ogHl Lj׸B^hr8ʆ&Che +W<@ +)#JhlVzcP6]s*fB Ϥ'ҭk-]uyDR-\WBTlDmU0䷦=8ҋyJ+"eIѪ12(z-o;XUލgKY +j4~C~b^ B4PH;5FzM[; m|@] endstream endobj 521 0 obj @@ -6080,7 +6092,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 642.273057 101.433071 623.523057 ] +/Rect [ 101.433071 713.673057 101.433071 694.923057 ] /BS << /W 0 >> @@ -6090,24 +6102,27 @@ endobj 523 0 obj << /Filter /FlateDecode -/Length 4922 +/Length 4786 >> stream -x][q~_Lx?^<ٱ p}DDZɢsiUR,HWibLˏ5X]/V6LN'L0L׷ .y˟~vu}5SJhw̲ۗ4r+4 , KLIbA [V6E' 5& -1M[V&h+ N., 6J<%#<%ѓ$H<xi޻(,dqIi *Y, &qB˓>IXpT$a> HX%pW$,p] NäHX6iyiR)F pd$,T0I!wޓ,Y( ׀c+i2@ -U;,J$af)a`pBl$,N)/aO -<|"Ovd3Ȅcaݷ7fs}o3/T_p Lv;D'_'U !{d!BBjRtB?퇕<ȋ| C6$*[$L]!keY]W(YmkM˴.8;Xƒ]>ND1m(8ʈו]5O"\[nL|!nǯzzQ8Naӹ:.~9үƱtfcc+1]ƴm<2eY ʹSx_^}\ltUe:3V_]K?":mvu0ٔzm^m;Ƭ-ۆ0`Y6|Q[=ٌY]k=<}md^mvv\Z|D|:s}j}}@ 'Tq9F/sr[!ňIG; wZjzLl6ȬX &s!+Roa<<^iTNn;3bG+ Kk;wFocbնk89y,;~ۑ}\SZep}ۇ*߱`Rs}΂ǡ zձ7YR#ڥүRGy -xŭpcQa!p0r`+16am>TYeK6q,>,܏QY&ky=,c XJ,D͡DaNl qE:3*uG};B[mr+ud<5j-jvj f/wj|ѫyk3,˞lJc{7U/8sGzޱb;{YUةI`vrS*Ej껯C~],}dYRI[#OӞtxP}N6XЬ.o-b|f>Ÿ kE0c%PC x5[MSy:K>ҰCX0v631(;zUJ³rd`/=Bq\}+VcPdgN{ٝ5`>j[3:])3{IL߳}^=0ޱwĢ'-ݹqU}zwĦ'<WbU{[Y;+VŢ&ʿ~\g`w?~mr̙=Q麇~` |(}iт6=t8ntVw?6wG7gYq@!7v7+"xs:~apwUץ;8 &j,\Get4KwU߼;YgZ?8_3ݱwĕ'<5fVǽ{f#Nٳ6KhҞ5,L`d4idY?f(j5/c6k& qI;CYs[|+78Fڬ"!N!:a#]=oyK}gƞ#7Fv):?Ny׫|>0pM^`F.c,WhM؝0IBaBnB\Kk#Jˆދv~J{&.!ӡLy1uv4n4RyGb~_;4 w7*Ӽ,Zr1"&`>/f΢U@{6ίNlwi*/{aahپ쪇7U!DPŪB~?mXkF*^E4n0u닾=hi1jI>/t[GEm10yVU5lNj//IWot/!Efau&];=wmZ-_X6e@l&WBYs#풿* -dk{}@jcYRJY)-KjrWWXZUQy<@DOz5酜n"N\&J8mw<$kRDŦdc<:wbNmM`yx`Zo"5U8҈ ՖmCl'tTb3Z~ULՐlkj;t\۩Z5UwQSlh7V sQT?ɹZEf7fC]m'..] -q"q9n/?hVZ~j -רymI%>I>V:VҀe!4Q 3Mc+*ST cM9CXOJNTULɮۊt:&󚙻kvoɡonqW86;:I'ռ]`N0V6t*Y>C&y寗 9I=_@__7iغ"sO'$vlXco54?n kۻ쵥n]!#fFӌC ZlMw%8sJ \ΣlH\ݥk >(.لK3$>oVP]0"_RfЕVV &~OVBx}/"z2A{qj[X6T.*e=]Cm,bgZӏF-(miVVG4UimPeK(j)S54%:+~6[=^@sSe%@wޒ*m;]]-vA|LU6-߅9;s K%D}8j*_'J#_+VDjτ, -:,_)wKJ\c -JAԦT 'i;Y]S"ӕDOU.}VJR/ߟ~8)zꢨZ8yCI`71NoN:lOrv)FUJi+b4>'bΒ +f۪"p9yI31IP%a]v0D$GAF)QCs:IgR6YEt4)Dty +!$lYiIa)I[MQbU;Y%t%Q[TPZe;u:bO*IM+00H! +:[Yot8H:1%aVY-Rxd#Y҈:Ɵ?|z/h_iv.uXr헿y+zhk)Ӣ[8^6 CPV? a׶Zh^k?/~ߝ~a ʲLAIY;R# +8Wq|K7/ֵL,_"Ϭ0] 2tD]úѩp<x̾ޛq!==ԾþO. $ڻF~&=Xs逬7ɣD\S_HFWp٥'OcwSTJVב{!zy ֏и.A~ ~N=ƋVG/28ͭU:OckX;ztD +E s(r[#X IuZ{뿰Hu+2 qih۽0D~dH2RM;g<R͍\;V/ZƉ:G}[7Zq#: +<.ӗ]! |`C|v/Sy'{-ݱ{γ]]ȽQRj_F]62C60ּ2D!;B5{]ߠcAM[3ڲ}31ۊ͑'τg;dy:__GwVI!z~F)2;\cp(͸JIf226x^wcus\+g7τrdgl{\XԲ'rUa|=Xۺ+1}.:OC<^yQX|mKL9m%oh ;o#khg$L2߬_bD)׳j伆o}Xgï+w瑧YwsSGrv^cms`_Y)X3_4b#.`>-6%kǂm)+TO>J[VW岏Pl\lSd}?.eS׏6QkkԎk5[*VhPt4+{Ό+3۬]Z˼2n7 [`yUy@3;꜎ئn^s;7kvtpތDA8+HXkQ<DZ+dwQ{IȷcL^xϛ^)yDu9&ƥGZlH8*vhs]u7{}>MqC/eY<n9L*ӉQCB|˴bEc.ТUۥrZ=j0e1j󷥷e!SN.u>޺s-с*wx҃BVm75K,9y}V耟;A\$eP{6#)36tZfe8\$7S׸O}{)7\z9>`R˒idyga(=aAl5 :tI3@`mQu௡(*3 jkhvXC5 +sZqsS>E=8GMm90(v4U"7PT}=謇CtM]@]GX>븬-(p%_/l=J2FZzٳZO6)u93V4iCʟh!3Qu.睚(Zt~Eab)CO:_6 IڪiQvԝ v4pyZ[N*ǒjyw7)N/wC}F'!zE;VLw&44*4S(nޠe{M VXw]l\Gu u -k"k Q&J,T.VUfQI}-ĵqD Jզ٨I0U V.rr-6RJjt/. @`sDr-6*1ܘr.~;(+Bm:^4*L*s*|5HYwBsNXI.]:ƆY/PHn[I˘{C$mޤo\nd-a}b-juv,{%9}j­.8F4jK;uUF*k-jSXU;Nb);iG9Q nx-[-αߝ%[.Y൛ʶ}u5ڞmnH虩]wܙ RSvBtGq#P;T + 2KlkulwD^ 19kU=y oP +T=ZV-VP9 *_TˆPTE&:rj endstream endobj 524 0 obj @@ -6126,7 +6141,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 135.123057 101.433071 116.373057 ] +/Rect [ 101.433071 210.123057 101.433071 191.373057 ] /BS << /W 0 >> @@ -6136,36 +6151,25 @@ endobj 526 0 obj << /Filter /FlateDecode -/Length 4734 +/Length 4688 >> stream -x]ɎWYC^AˆCwiZc@IdȪ)84zK0 g% F!DI -K%fI ~=Ka`et?@G;_w=}?:{R=཰*B%fT+N1FN37,Uf,FKTE4 -fh=vH%!à;NBTyWNy#tqp lQHNgaN[9آ5Eat"  -'$z1"t")aNaEagt -8a#-V 4l1t }jUВYآ7`9P8 - -8P&*Ñ -z0T^s4-$tJrDlqL%l1Xh8. -Ze4lk 4ֈ(9.[#@pa@qup "h.@uu &8 4xW)8.0]Qes\`XF: A 8.0]w `u~8swUF9 #h -|8[@C4hlPK8.]5 d ޕ =FYA:9.]8*q>Uq\`RSs:TQp\`, p\6H貺8 ZR "IX$qxC9.p]q -5+ V[tP ˖YV+$fӁw%q$P8 -V`EB>V[ Xl1p\z: -Z) -8.@D0D؂H01xèr:A׬.@'=ޛXr\9..q\3a -pECP9-9.@ [ r\T. ࡱPs:#h8. *r\e&l[ fV[5h8.(8.6i9. -7Pqh:!8.2` X D-YQ;oz -! --"nIo8-* s  ~=lk#Ӂw: p&"[no/@#>㕁vPoeS oٜML,cpPJ Yp˜}jSTpIF, 9j1Rl̏'8=|2eG"@H +,1ѷk@.Yn)KX)FFѿRͼ[l~$m[F?,%qf^Zm{lL !$p(" -ź@+̬ߝ&+Dm9fAرe>ǟ߽;}׊׼s _ce~l7u]KWVz;oԏ\te6\'v*O2~{;;r(̸}Ox7© p-TVan`t_Y;͛1_<[ - -o%Ţ~:d_C+>~u+5o֛泝' |m,1.eC<۱:AJ1[ )eM3;kxigv/*:0_⎌ۥvxG!+Աk9瑙oJW2@QEhYphWy3(sWF]gu -!.+t*(L;R:;?);T>E hgBW*j oCPksl Սzsv> MOR]eoʧɃ?g<ņKc_C) ksegEq=:CMȒӿlsX;m6u]wę; z,J*koh5f4V 8BUs8nę-M"~5ty9t: -9 -ǍйLѹ@rOms 3{O^v{ObΩ>gTe='%;! ƕn-s8_Eo⽌gk}u6f#EeTWX<%oqni3+ƫBy옹]<s8D]rҵ;f4~qhiEV䱳Py}߈z5Wb6L11e[yu*]uyE~ G_*pޘݾ#6٦HYpHݒ]'n"^|ޔڱ/ѵKGܕVQ]a;u;3R}f227|z9%jz"[_9e+;wu&&]D=͹c}ޑYhueԫ#ӟyպ+ (]},\ rƣ;G; z7|.6(ĜC.}[^]W+#_>5oVj77k[(Wp(ވk\]]pߥA>>枫69Pw[_wYhw}d&RyZƬtSvgWٟ7?EaW&^uč vܶ_a:zu+ -hcwXw9BXˌw;J|L~6ޭmٯ*RXA՝uڍ% B -Z6:GCkɷ1G]}Y^}^}fHjC.n=4d_áv#zG\xk]Jؚ]mX—eb;;a\2I\\v9鵧4\c/wmhŧ2t^[ 5 +߰.;| 9TuG4ߟٿrgpߟ/AteARG%/wޞkߌnQ^1K[u}M+@=[u3ۻ+ew ѐǨAbr5.mu\sqE% }tze5>iXL;=02 8#3\xĎmsL6ܕy^2 {O`7ӥx(a/֣ܞ7Yp2{S$ {-I畚ݗ?R0!ގ2+9&IF3kI g{^]hA SL(m ؠ/ 4N_?*φ\^)aD.KƎ!j:ًANbzct)e! lmVK-] -E]+2t -fsY&Э^:ʣDƨX6,b<1ˉ~.rYͬѫ{Fa@2\ĖZe|)j՘GRCxFhzzmFbG3Z7j!)+_O3m -a3Zn- *^?aif)1O@OvBk]aÍ4mKz_0ێ )O[JI!k>f -yŲl"(N[*;s-V+ڊ}qIo*vg%96Ӌ !wRJoW;k0BW}MZ ;uǺ8{9xJnNi">8-Ŋm%C9%gJP[g֓kxN17 ˲i4_2Բ6q6ĞK h[c؈U{ExF2;7a:la:]]iGTtIOn*mMZ63vR7Th9h:UgmβtM=h64a{y}O&HZH_[i91:a9Ly*mfԥQC 3;h1HC6m&ffGQ2eEmrS<,;JUc;Ҷ2(KfW%] ׳d%#sm"5βefw4L5TjvQ.guW*L wpFz9Rz#7I\zdɹ'L`^o+&BMSkjQt0Jsb Jo&O͔*6NJ^/J1I?# +x][~_ρ~؅$ By8ӳ'K8!?lbl='̡UU>}*eK\9k gpR8s\;fD\?Gr#]_sX'Wd!X)_?EVy!T*.29'%TV0\b +f^J3Pyj +0C:)8B%8sRCJ:aE[J'>@tIJN #(]`Z)-&pA l1BkN`VQ: [U面tHN t]ntA1֤.@ǽKtB0l*RFIb %SEҁ'rUޭ)&uO1;KQzDqt 5E+ HvNQ4 aG:)("Pm)&Ph\R[T( [`Ԋ@  +ty(R\@0S\[MqJUN HQ\XIq*- +hRI` Lqؑ)wh.ʀCKq¤ ޕk 4xW: 1AEqJKFn4\R\RKKq?CKq{褢'cn +?OR\`£H]`¡Ɖ~Zf@qbR.S\gQ%+FjJ2p x~p`ߘ. ).0]В0LB cR\`ˍRX.p{HlQ^R\:t[OYe\)(x 0rM ). ^z͂s8tpHe868e:آ5 *x -JJ -p(.GMN` B4lHq5XPJy脣90 0b<0:).pP\y Ϝ 'x Aq ^z2-#4撨jJygz ,` $u4Aq'N `i-h q).H.).6|Q\8lGqAE78tS\|Sj /|S\|S<e|Q\4l1pQHl~ N|D,lAS\MOq 7ѓ!盎 wM3Q:.8a-˷?> 0z977߈-o7~åCwLcRIҤ4}Or)'}|2iˏz[O@1zɔFMtli5l7Ke.]?s}X֞l5s cu-2֯qU[:T(e0Dy i~jppPJvʓt;Xyqu;kYC]q +O0P;r )ѰJ%cl2ms5md,c} gב=imurVz(בV2-{ʒo*aaCf_!lrhv,Qe4x3b?"f}yN>o1Y.R[#նdͥKe 12KoJx++QH1s#wnYzõ3鐻Et޷f|ߙlhV~ 9#fgѡ±_mdi\iŰ`yNm?vTb<2~u7gjGnxrqgadleVH눬 VyڙtWpJ7z,KQ;;q3w⮝gЌ-Q&.%XBҷOhiPݮ٘?(۵#벵S:SUzs:FK=*UnBKZ9gow*b'P{z]jV3鐷s.:ѲڮHz>-o{$7FV\3{|y\^RTWQg{55Ki}'*~|ů4JM13P_:껔lE8+r<ŜynZ: +Zèk:u;}8J_f6g ,1g 2>ǔ.I3W;MX%]V~ƢN2' v%qBG 3g\ns/_;ֽm\ա6#."<{=N +ිm ÌwXٙl;w}-_3t$kXj؝yN_ GDm\3EVZEzs6hqF~j'F޾Hw +rG={ u9w|']O~jզ.,_AouyL q4jb~=~4O԰X0!DN+xILMG6blrB]-',wBJhB^WR'{Dܿ-W-lz]ujV9 U]@өRJe2*dI)sNv!tj^j' .tv!Mg3\NK֐jR|xB6$uqp~6@jk+ȅv1:"~G6+IЫ:o{^Rfŝ#U,3:C*&WJ!ofjͬڕUu 2f#ԹfҪ* ɼHRu WQ% Zԅ=ww}2٦ڳ LxT v~uRUS)]zvPcmJ`Bu +ME x3djؓOQ?5mVɕhViޒ2:wR%ٲl=/;2t1ϔlf.y* fpJkN*4r8vdI$4Jq'ޠTo>tK:VD(_DSSrC& zs 244ܼӳ_1< endstream endobj 527 0 obj @@ -6182,24 +6186,23 @@ endobj 528 0 obj << /Filter /FlateDecode -/Length 4793 +/Length 4917 >> stream -x]ێ$q}gK~=X0`ȖAKm F:-^ ?(1퇛I)VY{wWTݿ' "$t9&^Qw-RZ߿#5"cT * rNgT^ 41%N3\nUfVȨ"06(U% -fRv(-%!Zri%|L: -#|)NENgaKRq:[Vr:bM duE`8]-I.+:"T.R%d q N)M0I>0: [tgtXp:3!FfjFl:XV[h[d` %t&m9mX@$l>TiY1Qb:bh؂[5Z8.0[+oT…5[ (PJpwr\`@5k h9.0]cwANV[` ¨h8.]dw14Uz cXr\`:` -`uA`  ,xW;4Iqj=H6B,ӆ&4 xW%L̘[ wUD$TǙq / }w1Q x9. ̨U35*$q\8oBI@%!S8.hIs\YX&auAHC9.]Lޕ @Ŋe]#S?o~zWfQq\>nJC쥤ܜLUEkmTr* õ>'ѢfhڪKcK#S'~O5h-vkY~  -twN:GաF=B.¡yfj0ll ⁍gͶstwc>Ջy X"L=^{d-"%5G_hMWI{j[^EZC8&BGt&`WNfUtFK%\y-ӡ2o~нBI<{ -Awq\3rsό1,[j>wxbCq zK̉z;Wt\㑡䪩 ~0E04ϼ= 1y:ǰ?K-[f/B^lDZ)<|z:jv<ĢC <6[kf:<uu4|{P0hݤ6{o^t;Mʃrc,/NpcM/ 7 1o囟l_˯e}84M]sCHGtTڝ!ZCqE<٭{pؽ>kmumϔGyG\y1ϳќyiHLo3(ZŨF˼j9H|OMes4S~Ei߼y džЍ~#=;dooHmPVĔ/#w&Wf}Mm}J/%-cÂ*}fjfpa9}ږ,ls-KM˘|gv/U\6N4]Vcp\8=yu9}hkI3_wޮ1GN`GߡˬɎO\;9\)s5жw8_T<>Kγݶ,6|bi[۽SWߡ6\~w7~f>ĄvRguW IM>I% yZ]g?pފn!`WG -Nح0y!=p6UXÆo-Q$E`Jt/g|=gɡϸ9C::ov:[Lluz=ѳSyd^00 -;!ydq_>Ǯ?F,˲%pf?}?¿ES >M \ j+7qv<φ7?i9q,+p0eѷW"כ`Mouif[ ZzI+9_< RN]AJఉ>0Tc=wဣۿ-nNGEQӓhym늺ᱩ}o:HEml|y<φZuȱ'd_y~lrH\f^9ݾ6|}Cs4\mܩqgymDZW嫏@739?w>3Ou;|Gy1ӡ8臝\c- Yhzgoºð^~<φBa۩0.YayQ7N-y9>9y{<-|!BCo;e{^p{uv^ѳE"thLx~ϛ[.&r]ᄐ[nivJ!^na3l6TH n;T~Q(M/F{+\MHwz^ƪM*;VwrR7Kz,ppypQ;ram2]z[Flm?w"&a([YVU Y>ca|Ԯ򻚍feMd{ʖ!rzSPELoT”+LM c^`x*VFBʡ.ֶڣ u 5Cw 7Tkf++8עwl23ՔCl'F1od-ڢ3~5z"HK5#zt4z*TgMݔuc8j+"1"Mi2l]zsI:W} 6q/]JY>ahVK_5)1Ol_Jhl6I7ֱ =.B/%Hn[I yDRniND7U>FYH[W_Z6Ѝ[Wq&oMU؆ v.Vu mzk۳N5j vAt2g܁1y2?o\8:FUVbl.cי>%߇"qEICF\r0uVf J~;v!KuOcU[1$AlƋ`Jwd_GI7(m #i#<^j__9]uv0L r衅]]g+ XUuhtVb6%8^ --ҿvc4'W&-[g-ΡN-̏ʶuuuͰ#SٳMw{ΒguR՟b4&j&CރC,}Cqys㽒H+kBwk 7tgKmlue?y_3o@KEn/CAo$ ROM[ͫtvH +x]]q}_ 5py)J$KTIixӪGxxX(*_rzJ)ஷ/\¿buQoW\!$qٛo7\o?'41gI3|tmUfΘ$̰.jUeav +f죠 +vh!9kSӃ3z +),"t:Ig^K<|tk甤-Φ(l*Q[LVEb,l-*(-鲝|NΉ J1muF'kzuQ-A,`H: [~$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn ߢ +CĜ"52cX8Dmѓٝd?z &_SV4!00}k41`CژYDlYuae+L%c+@SKR2+Cd^[$Jf_HlO\Y}mho[*a/Vbdg+Vhh|aD6V*FdVze]ސ{cyu :XKEe؈3mڙmifAu#\C;ہ87!z~wRd9 uM_qn2[)b㔽W2pe~m<d.>|ZۺgZֱ4fhcu!@mCR]1v>0} 1ůaQuG\&1ĔcG12bFi 3hg$L4_P/qFkz4݈l5ߕGfk$GJX逩3ju5F(;/iw6RnRu2XOKjxڤo?Dٞ5bYg/a6g紞sm|_g4aKY%v-.J3zݽ漤٫ܘ\[~\XRc,[)v)VY{SKoӝI̥v%O[l nSQm9ji#;lmYmf^l#A9 7__T2WkjcӸeI+߰>syRmxbRmKIyf˒6uhS<&r, ~LAh\qHpf'֗nḠ~kW;oOwmsMʘ0zqfv{̺Ӊ>u ʮ}0W?UvƑTz,u;'.uۊ?V0 ~Y8He~~lN]v)gpUu X e29yn\ux` W:R|jq2ϻn{r7{m*qQ(ln ZΝ[at\t +A%.Pۥr:ў{}GIKP;ʹw=dcK3ڢ=vt opΖVKM7-'َXZ5>r7\e#K̐NE798(Obpcb)CÇ35.y6G0:bYm_oEgg^4_,!_y͊ڔQvE:yelP xbn -%znqi;HqtH|}nm? c;HZWx=k;|6K3toGkBwӰp<2!ZGJc=<G KAa7.bQx.ϳ0[ϰ[i{G`m5!u>Y;G@ ouuA g6ۺIa݉!O9w'{r<`5f&,Eaᝣ8sf>U2lv,F(JZAyhˑ&. tD~ ɪ?T^'pݕ9bjIYy)T jF<cy+feSam\By.U!M MCWzaRM8V_wrR-oW2_zZvtD/Il"N^tۅ޲sa;b.U+V@qcJ'|xQ#x}Fos&osł9ފjҋT&\f +m^i{=] VXu]l\GӛMB6ӹ4D֝GQ&Jص]2ruk$nAE;tfӳ^TZ\ EL[OŖ*zҡnSs #}#֏k1=GZ%.޵oԾsz\hYMTKT]YeF +ߤ7b*lÆ c:0v=^SƠiw2i52mb do=_8zv^W[o.S>%_Y}JP\ +sle&W\O;b,KuO*+`I[~ vWWF{x}s/&:HڨI߸5d-a}[{eس-Cnu1ʤg[x^UuhtVb6%[uKiq[LѥW=IKEK@9֩ŒII]Oil[[]g+k놄oR3v<îk1Q;T +3Klk<{%WkBwLZ5}lU_OΖؤ luS%Je߲lHKE4KAozJﳡ#~}R~W endstream endobj 529 0 obj @@ -6218,7 +6221,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 356.373057 101.433071 337.623057 ] +/Rect [ 101.433071 450.123057 101.433071 431.373057 ] /BS << /W 0 >> @@ -6228,27 +6231,26 @@ endobj 531 0 obj << /Filter /FlateDecode -/Length 4774 +/Length 4900 >> stream -x][,9~_QH؎MB<,Z ҈ڇsjAa|J_yNOWFitU+!_o_~[cŨ^b?X]5]_/l^9ݎ5<ܻ7ӈz1w>A:`͵Qb2cyNjrL;%#koSFӆy#2Fw]΋nFO؉{֡`ik!z6s҆5~Wr{q%`vbw_I4m_6_*> Уm?W>{WV@}4wn~[~Fj6&Qf3Y}}{Ԥ{S/@>a$vq%71h;.wx0ِ;q@m[N`QXus(Ś' - ocOX9BXKw+J%Z?n6-3꣏<>[=ty(GV^Ak3=cyNc?e>˲l^XŽ v'_hUJ]%m_—ebaOC9¶}9$EuW4ghCl]an|"SCͿ@DŽ\c~œw=C5OOG}7Y/+>}|,`ӡ`0oq)PҶXY[oݟ׵'|كyNԝ}Ϥڷzy^vs YFo<ѣOf9潝=_Eץzv_hNR>>V[?đկBM}j#ؙqڃyNĝ8G.^,5CAwkD“ܠ}k' -!h[{;l(Ľ7P<{;-O9VV7,8~-W&=ey[oUoOGzF=?o`ӡsgў}zso2fz7 {M}{KE92N$d+w-J#Gz=:tމ{5WH `!t'ێƏBLo {>t_lٯg9#H+k#Oƛ8l;X5OGcAND^fzZ~yCihC?.?d,K<;1͞Ցs8k -+9wbvw㒺W/ݷ_׌[ 'rI32vQljץ-[d&u߱XNȄ7՗ O4]?+Nu7elEpqCz+[F*ʯ3qӖ -ʜnnKU -wb_z\Yx'6 !WRFٮVa *4:h-4~2iƽ]r9CD|pӹG.|]>>Unۙ,2өYXM#4~Pڌ25{N ma#6FS2vCxZ82o:a/)t] -2T)Nвi2-MZ6334}ۮTWsѸ钪4e]4IS{̺4~zx']IZH_[i$-'Kit25][[EأԡQ] ]mfضRβYy(tʲR6)[nJUm+m+n6g-Qql g_NՔŗ ̵kJʲe<;϶6gj6H=3vy*ўY{2t ΁C894lJ+ikBw LVLx"+^SQlQXJsj *>-mV!bhhʹYd0e +x]M丑ȳ, /|b)Fc%!f(̪ng/܅JET )%}VNR/?~9)z꠨og\!$qٛo'7o?:lHS VPy?h|TAObΒ +f茻VEr +f8cJ0ú* T0CgVCD QY#负=H:ɢ.BtN!:S'I`JK:[vNI:l.uŤh%]-]-@WuE%]9QS)kQ~Z%鴞 ,h׺$.]봒wEMQ[` J\V(qb 8 +III\&)'q%@ sJ\ƣ 5^ x8$.P&.(lJ\:c%.@cAX"qO`I$.]>Q'1¼(O:,qbx.3I\ `?QtL)E]NG btb-qRS¤?Q$q̀N; b-*`)Ad.4lA-q"]贖 ؂hPdvAI\{I sID&i)ElMH\fK\6:b %C$qAJ(#qI(qAVYd @)%qA M$.f [&x¼6~3J\lQDlAДy N~$l1I\CfaŔ@f]L4H\7J{{LLb@z=V1eX3P _#Ie +b*ZiE<8a>U"!o{^ncןJhC|i`2}ktH,!#bFjt##ѿ0rzNϧDŽ3y9a:Z|g4N6͆ C\ܪo?Ŋ9X/vƟ?|0zSʅ|כ/@m2ϘGhu9j;"*xGO>.nKeJ<=Ovcsc\YQύVaxoߏzac9#~?O85KtZ谙;"=V=VdRDvJ7%&v]>jkk2fqJ۵ ~hOe +/ӶsraGY{9`gvF7֞g :F}O9ꎲ⽑\j{H4O, ߳c^㰶ȹ6l; " a a<M+O#JXk,C UqmSCǏ3 +댨-~wU~YeҎ_x2se,z( a6~}<WHV' `Ͻg&oD{(=VP_r0o[a%r7 1Gmyxz`g9åaT7jMov ,&;CXQèzKeis>?W$ӊ~AnXl@uҌ~q|tډ1]>3.U>G11X>[vY0]v`cuQ&B#Ʒ>U:OQ?w2va@`gC1gXlڸdQ~b}v~Gw]6ڛٸ XJ)dmth݉!Aj]p%`8:Qs!W>rcw{wyewPu<RwaG1N`˚m wHP"<"wbU]W }y_:φ`~7r +b@Y^v5d[=:OޝuBWC=VƨDoj@yǃu;WN/=uE쀄-ˆ@n?p!GuI}'޾?i,ù\:φ\,~m(.Xޓ" t}݇?ynԲb܃uͷcn=}jv[jYV9]<{@#d}<:φ{2U7ySs޺6c҃;u˹~H\tԲqxq̖{ }3q,>=z`Cν]]U99ly/lѦeLe~> >p_:Oҝ +vweǽ|ASߜ9oAd1rSyJޓy6ƃוC1mn]S1:O۱k%{5ZU +eot_.W]3B5{]׿Bǂ-ԙwqVl<57t$ GCRGRTwe'ٞ[(mjueVƵ8.7'u.>V|;Ƶ~SzvƶŅK-zu]αso,Z^c6Vw`)KqXNTrJq2N1'ЎGr-jUvA <>|׏P}_ѣly|bAA_jҋ^ۖ&ff{ bmkbb=^ц.ta3feMd%pZ;JD),6UGר&̨ܤlqOrߩڴ3y^1 Skr-'.'ҚoTUsnJMmمEC戲ZLI5܎s%k3N> +} ++вv8.',͟05^X@Tᛔ|ЮA^:ҏIhn6z<4qh{Y6\:ƆY>^:)[g =2U*=2w:CA*UJ&D*,NGkly J!CI2R#w׹+Έ\ ?19kUByل7(5U_6/WJ} :ͩLPypSB0V^ n)MӨ|a2ya>)? endstream endobj 532 0 obj @@ -6265,25 +6267,18 @@ endobj 533 0 obj << /Filter /FlateDecode -/Length 4801 +/Length 4820 >> stream -x]َ,9}g1^›$5Ai3dfTeVߦە^q]2g KdTJ9:_=}w*z%⡨FST[b6 䯧es*`?3ȩb^Peq{APĜ%,mUfPN^R 6 3E㶪 3l4$`> -*aZ:tƫNRYEL9"o$]V!$txC%l! El):IaEdA` ЕDlAI9 N1muV{sZ:❶OxSf3k#:؂آc(3H1/I`cT-I$`S(I,`SVhf((:k$"px -8[3WIga H\l$.p`[Z$.p[H\Mpaq] -$qJYuN H=J\+q:JAudu9El%.;*g(qw1U eSx&MxF,.*A'qwGkxג ( -Eo -;[@`: PpK$.] slLA5 '2=.[2!d l{  D#`$qAJ$qAJj+qf kO€b7Y8tZK\MBiIK7iěy]x3J\ x(i¼'!;I[l& ro& f ބG/n $7]$Lx@ V5Gg2qę X[- j= I4,Sw Bimh ӸE53Endƴ x-ܕd?r_yzA)?w8]0+U#Dp-/@l! |K6"n-Λnl$b,^ɰm6pfJhQ/BrA~ 14fu4 抇X&{dr_1:zjv>XC) mnz/,b=''OVi"^V*8m$׏$V% mS:OiL}Z_m|4rњ&8[v[Sd.}1`Ӗg.cJT1%җ] -8 \yrO?wu';{Q+bc. .̽yۂ*-G9tN6n Zijу^_p> ]0ɽiVPLgާ\UXyye%Z! -%}y[?ў>1fR![wKU$G,NRzre7<B۹ z^nul<:@ -'r#1r39¹tƭCV},GX!y$lp_[ܧ1nP\~9S*8K%xe2iy2m˳e>RJ㼬pC]J*gYUx |[X^\A

9z+~%e|!=p[®z}9ՂRð*9BY>rNfeee=ց-w1;+h~`CmC=ezJa9%kgԍoXչ_Ãy{*Fme0TFk>#y FMhh ;~=hrz/Ҕ%oXCm]t^o[ ys GUqhI/9u}HxWJo7.Dcy}ѻxY@5ΈocywVp+,^6o6Vy^iWX=ot. =MoqsޖzS짝i=Za|i=rݴ:w<0VwqpQNkce o)]Ӓ+kD|s0!궗SΞ0|}f/ --ǣHy<vv˼s~=¼)Qaay8TxW}@)Ǒpg[?ǓݦH<ѐna,ɟu+|3蛧ћ5s9~%>PgT:٤Uڝ4]|eVՃyuwYؑYq -sor8oVONS+}<ޝwŭv{v^e#7{K}<r-R_Evj| zƬ"auؐy% 7df}}0ϣ7 =ЛD͆玨M' k|ۏkľa`C?P}[?j|ISDy87NW7wq5=WW:Ƥ#\By8  !.Nٟ'm]>kD=`W2 f Fl~ޮ|2z3pׇ -7ac4qjǠ0w~u{7٬Z~5e^/@[|0Ջ?=͟ӱ]r0 UXww|YJl#|i̯-K]Rs45\rʯ ,.)~ifؾ;r )Ww)>WO&a2cJ ߵT.h,8>+dRrrA.dC|D1 痺E]XUe0kTyyV+k6ObAlz,/HOZ4a/ƴqWl~+Cu]lcRu cיakZ%P[K_E)_m^kuܤlBm$ҵh`60j|A$LHN]Nb4F*Tg͵).dߚ2˥okcӀ^NLדBj߹B -Qr8鎗.e~zYe|&?QoRfP_۟z%<7xI<4! Şv.c_&i!=nKzl!l\cj&f -Ӹrjbߠw;}^ʂ[]wF}V*b~tm nH;q;\>ɤr,sy˷Ug2!Uq[ƭ 񗽤b*lfZhMi}EC[ǭzv݉4AMӎBp]k3|{ztq|4\E≓%ZCF]K(/#B*I_~'bLS/dU+ +Gw6 !9}˟u!%oGVB A9AR +*.* JI*ADAaZ` $AF)QC5Ncн3z1$t:Igi%].J:-.)-lqHI:B6IaV:bb.I.+:آҒ.H$t*UNVaEa|tx咨-*#,l!H:!Fa^VY-l1&-|-*x%L%C h%01 h$7OA4tFKD`lq%&V-6ZbJ\`H\`AoIi/qL%qI kX.{uF ڵkI+ k-j:K\vVZ22`VK\ &F%qwMT$qwM €5h%. q8i5dQ78- X Cghl0pK$.p] kl5蘼#OԥAn1ʃ>I\ب F;j I\8 ]QbwAKFƒ`QIK\2P RASҍV6]=7L>3PAcm·y F>#V_ڜ6C'{o>]c_;l x O_~PXJ_E/9|Icae>&EYqlnF87 c9eu#4F{XfJ'mlȳΌz=ձP1~?2n6G3lK;<mhl>N0]Wکd6ߏ<7{áLvP ~KVml^*g^.XxC5&"`a !b^E%Fqh꡶ G@F?çj+/;ͫ6SSdc$lv7A%r&@Ob-! -ףV8hQmUaΤ=tFyry1BVE"g/f>[Uż9A>ϣ@ uK&/qf"g7u& +[B.p>q:li^Wm&3|)靬kpܧ0VOsl9Wv4ʌ_.V<*d-mTt\ڪ^u̼(oa]N:%XŠ!j_,;8NE:φP Ahq!MQcQǟ(e;ee;>âP@ue< ʚl'^*&v(+B~>k̏ $F_UluȬhB;k|z<~k6H=WwPB.;]Ԛ3v6GόX!uuoseeqՉ+i:;f6VnQEyK4&2SCO2y6d:GJzg #[Լf|?rfP<#f'< +ufCgti u}"3sA2#yKm[g<)dbPsuy>r&|Wfvm|ڏ-xGc?Gfćf:v͐T4| x<zʓ:]Բw=ZUmF^&Yi<=ܖaT;G:φXo>ޘx7YyZOy:noշf??YмBڝ+bvVF*3̫-%b9ڶƑ[Wv>)MQ|{>y:4+duw\T/ׯwfw7R+>'WWfG%fV/^k\]2WOy6dwA]Ǐ Q(#vړuw[p%mu.]gb=}Hչo k'<B'U`C.CfD_M\KhR{Eqŵwm̮^4.:K۾tZI ;ⳏsu~ߙ=Bkۻ r__Ŋ@iZnŪ:B|yγ!/\_ķ.rw]ޑ]54}<-_": Q:2A["dCA>tݓ]sanSEǗWO̷ӷylJ ]lDtӡyt(e;IY{W{VJGhQNy:g*"X";#꽘3?/QвL/ςݭlOpq1k5G87o; g9b0{%wp&e6գV~ˢ/yڮl)u∼|y:Yua=:\5~ʇXر<.LR϶&LWfݑ'<fdyG'<Z杻gfZQp| uγ!%\}_7޸C{y_ԙɫ%Ո)nsY uk5>Yz}!{ d''>kfLR[tH=Ȇ=gTM򁙷_^lx!7Yu7=W +o{'<yV:7r X%MN9 +?M, 3͏{jayՋG}Οw&]E6^ ?W|&"'~ay)OD1LXB:'?ɏ('o}Wٔ.S$2d\~yeg칔i9ϏA~w{HW~vTt&V_7j7>\K)~/?8?ih\9J5~RG  Bz-Wң8WS!UlkU<k:[ U]*h~H~:߄~t7 t otk7QʯZ)M5lgTRWJ :Ovߩ4a25~`(HT˥RN.b5Wg*RUMe) 6ցdy&i෸ukDq.<eUpcVQ]MvqA(WHkڭ^',"}#U*e4UH#Qf:$våCKG%gҭͤݐuyLRO9EXM'4~ʺ5{)+텮a'6Fnd܎ȼwnچ=rre~A +06m[kG\mВ*o]Y63wR~*,tnڦMY>\` ;M3{^^d_VK+W[/'JxC??{+.PmvkV'-Zh'TR:-E TCOʰ3(S4vAtUYnx[r=C;;JV_2 +2׮Rj%myevA> @@ -6312,24 +6307,22 @@ endobj 536 0 obj << /Filter /FlateDecode -/Length 4898 +/Length 4862 >> stream -x]K$ȳ 9}]>ttXa~T$Y]ngE}"**|OrzJ)ஷ/?]ŸRbPؿZ8yC`71\.gx.:j/rv)FVKi+b4>' 1g1|tmYbĂΘ$İ.jeeav b -rhȃ 9kS҃3z -),"x:g^K<|xkă,Φ(d*YLVEb,du%YTPZe;y ,`׺$,]봒wEMY`'wVQ22`V'a2kr8உD^k< ]㕑w3AQ7x,X ߃ghl2pK$,] kh5锃OIGh\XCx.6*+a> ;wN-d%ao& @oV0]'SwKF“J@'`<).,aA*oYl2VXpV'e4fXwY‚ܥmS‚`pl$,M9 aA -<|"/LxDd<⢓mNDY1DY2HX`޷@8OQ ٔsDA/)EK(aAnV%,@,5%,z K@ 𴓰 fȂ"a)xOC8Ok ,%,H&! JЈ%jřI‚DX&4"&$,P%,@`aȃ,; R2n& R,F `oF ,$,*L&KXO) N7$aA -&Ba?`݉n.X>߶ɈGXmo/PNʭ{tsN_᷺&m] :Oy6tά+~Pۜx8`f7oѓ0{g7={C{2ዞtyI}CN< ~ DS^t|K9ZcH}MOy: =ȯ̲Fv[Y;3VN~e(>:fv1ffDuAQӌe>`{yY}ߔݬ]f98,o\ԗ߆'DXM d*k 鷬MY:Og}͏-t4Kge<;Y3\83ݱw'<5LcΤŕ{!Sv> }-]<] -Յ(6pšӼK,9 Cpê -UȜcg3DgNt贬+3`۬Bȓu$lؗeا>ů|^셅?g9J+6w̪L\f76I)g{lwˍoѣ׶@auõckI`DQ\aƇ{xS[o`Rt3ݴ-B}:yڧlWɳ)O_ǰ.*Ikp -dWIutQ,_S+|kJ2a)S~_r߽*do'QGr%*$SKfg -{CP}_=jS"j%դ2}gD(4bo^񐬭bD%*]'WtpS]&:Wf_˚ȦvAvT6UkTY&TnT_K qm"Sil|6ktLLՐ\+k9t|J^5WwQ/n,KpAmE&_.e3JPq} /VqZ+2{I2}O%eÈ1dzY_0v^Kꆠq9w2ikewA͑ڹh(BGWyoW$huUo%[I;i' -JFУ<׷YtQ"p- ;;+y߽zC]DmިoFx2Ֆǰ~l{-xZ[=ۜ4kVF5jK;un .@SZUTj)#Nb):/\ӞJS6eݺ5o6ss}tldhnTKJ}ʆ {W¿ΐuJ՟ ѩ_h-߁RG_c]bϕl3"5W{tLZ5},t)WJc -RA&Tά$KB=[mC^hMKQiMI?P +x]ێ$9}gM|Hi  5ۻBH >'i;ӳ[ ӕagK_~/9=cp.j^_I(?7V.N^{8M ח .y˟v:)`R9;*CTO1U>:㶪3\N^R gLT fXݪ20Q;I3tQPi;QJ5N)A=Mu:v +i%]B>I:[|VZysJgSt`-&E+"l1Nt ]ItN>'D]N:䓵Ji=y`ӊ:(tR|u[e$-?">VI1P^U2P^VQ3P _Z#0+]LPj%n(/1yoQ!bL1,Ny^~]VvFPR;W&=o@1 *1Us7Km62 n?ld,rc%h!kSJwXcE`h춾:]#b|mlk;IyVL`XzzE#%~gbf֋1cLlm#%S'PS>Sٿf&2;GDfC3(hkV2]%31h_O@__iiw!4vݖN뗼>oeTNҙ~oK]u]<$͠r`oթ/R%o  CD{]~a 2I +h;,/Ŝ8Mr?0麘W8iӳl$=P&Oݝa|ru+O-Q U2HdG.VG[{LO$t!{mq,Zar٤C2$LcpuǜG_&!t25ErkDP $g|NKOlD5xފ`qyi(=1D~ބG;HdC@8V/ZƉ:G}[VP7'Zq0Gy|^iiwwhdCxvoV˗>?yإݨEFyC{2ϣǸ*QMG[\·q0 k*kZyM<#y}\z2áNs٦:@ftcu:_na<&=:yH~ms98|?iFcaE}ŷ^ИH]p=i75Zz8tgCQOgVVfv|-nޡpHeGݺdZwExFtKigNYM/j~y8,vmOtԙm;Mjw/110,Wq Bh-_&oo)it^ ~'L0ZɻsZOT[6_oi0z12*2˵Y5Z*#5f}kW=|ʥts/Yj +ݫV˖*GG4l)Z=J7wP-uZʙg2(&?pE|sm+bO[ڟ-+r- yf#,u9Cg6inúow;aH3+b-s[viӎrUs;]`fS`m~Ѭ}Q"?3͡觙zY]&Rm7of3PK缵E3LfY<=s.Ѽ5mYPJKĺumq5ǍQY~ +hEGNynjSJrˍE&v+aR*7zm fZp.SUBۇ){?dۂP{CW|;Dzgz: jy4rףg(/DTP UB@rlQ9Vtxk=v2ϣ!*k}ͣkaN_ ۹%>{[w:$z`vl ߽tOy\y;(챟fRB1 +y4ju.`rLoOΓg?6ۺ"JaJ8aѣǠad ow܁W]mW@:Et5@QtҞwM]bvoGL] at7UᲉ^nLYnusyj_7=LMJ6%"u9%X4iC_#p ngbҩIYk7X}Y|ᇖj>EG4Œ_tv,g"N^t˅wع~{񎘄Grݭ3NyLիZ>[?_[C}Fg:Ur\ DΠbj"H]B36[x^`xWbB*V]Wt^ms]f:wf_ӚȺHxZ;J_D)z^5,3*7)[Ov_ZCg6=5:;v +$N.b4z*Tgݔuٍ*l([?tJ 7f#]k#_.> +} ++вr8. +CM +ߤA&͸w2 I V<#%;F50[Wb>b^*lÆ c:0v=^SƠiw2i52mb d>o=_83LWpuOWV$(iҡue/-[I4דw #v,/J+X_=o^ɡ6jo.m #i#QiinՐV'?. endstream endobj 537 0 obj @@ -6348,7 +6341,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 180.123057 101.433071 161.373057 ] +/Rect [ 101.433071 292.623057 101.433071 273.873057 ] /BS << /W 0 >> @@ -6358,27 +6351,22 @@ endobj 539 0 obj << /Filter /FlateDecode -/Length 4786 +/Length 4739 >> stream -x]Ms+$@CY f{wbNyTd*=l{ўVIbj¿/4bL'5ߘbv1'V6 N',0L]/o~q<>!%o;sVYB A9ARsCyAGLIR KU6E'`5& -3MKU&h+`N.*`6J:%#<*K:I.@tDV;-wQYҒUXAyB-&tNt]Q啖t.AbKQnpHI:lCB# l%Q[)#Xt G!FܻIt-h|-*xЃKHDlQb`C Lr)H<@JCgD`^bҰŢ:BJ\@ DXh@V%-qo^L%qq)z+qr$qs )qt݃%%%Kґ$.]*H\`FFz Ĩ$.]wM €>HXqxik(Gxdw`%.x! P`H\:a4j1y xWG4Kqߢ}w1P FՄZҁwIJޅ$. @oVKJ1J\%#qFAE0 %. -~=I\I\u~ tB:(t]’THxn6%.! L>!%.IAON₠ p,Q[l(qA0 AxCl\-%. 1Y+qAp1Ԫft-"t:H\0k 0": !K 贕 $؂"q!xN8ӅNk -%.&b1DUK:<3J\(q f`JQ[@}dI\&:BJ\(qA(#qA₤` <> Cv%.CIG727曘 6 qAEuNS-8 M$+qA>7p30߄G/bo1\u $L|4W ^ʘgQ(P* Uc -Hbfbf5 -Vb@'\OWJ9:5p MQqk35 jzc&}e5<dZ) Mti3lGϗ8Ƈ05`one_ aRI?&`~lV6m>VL>r^lW{jt9P/2w|x(+$;mugádZ{m~*+K筐,uȪ(B9Rsy7us/P]ztm 2v~F髨ʗ6990P/Pnsl :97oMOR=c˧1i~:ҺՆ 쥳WoGϭq/˝Χ==rm͛=s8ޕY_V=ߌ6z:# -*p3w9*m?h6i~j#2ZM3>#&Zw9Z7{zV,v}y~\Lѥ@2;sL ԜS{}`76gW꼒YM0[ޗp{}4qF|39ZF^%]cJߚq܏,m8ƙkڧ=HrdK|k:{Ch^|s8|mxF1k_q15UyΎz|b;ɶ [+Y#/gg!궗3<=в~:WP"Z[&ys8TmD~`޹uߌoT[߽0WP<%.4V\`gnxW]q(WY<|}?|;cx2-6Eۙhueݖԫ| _Fu+ }wH;:3t+ m2zν3л| TLB-ëЕ 鞄gQ˫k -b=s8nh^ -@Ѹ-s8o7VWwaX|߷sP qЄBXFg62.&P3z :)⧣͡}߿?}g!x_,tAyeERGjlϭ79 -Ӱx!lk XV绂s4$>*1-f-n{XRVǥυa=tw+m轓~/8ޓygL#os8LoxžbQ7ں#Zffv)oh5zm'I} \UzFtMiXKQs~,m_w#6+wV7ȏDT8 -M;Lmok}^8f}4e}}es845.&6wjs&}U>s4}7֤ڷy^6sYFqbޕٝyv|]"݊,r7{ZYy[?ĞBM}j#qڝyč8{.^,։PyXe͝+{uxF!}s3H3ᐼˌ2a5;zGxyӥ_m{.cY)~kz`e)]2~?/mpr=zt㛼'e7L -5j|N믟XN,Mþ!GQեXs -bkSWU˲$ 5 OInPT \W&w%[>;Ǫc7R^ zsn@ӕ8_lhyV`˸)֤-ݮ-|.Z:߄t^u5Ikk[ ^"J隥RFU1R6$.'A*E[4fճVg]tDn*Ֆ -5UlYSfJ:ZlIݬ(*_b[ 7f!=_N.] - -XUUKf/ ] OWpUgmT>]YJr_YJ5mhiYu*fy}騄tkZc3)2&I\+8SXʕ\] -嗙jWͼfpw&;_8Ƚjo-a/f{q~,7ibhnƄ0B7}ťVvLjI#i 9œ'r/K4_=YvǍla*|$ǝ|xnÄ2ob[ZWPqc_ۖ]5b/)ueP]\Z25X͸KWՑym۴zIpʇp gV$r6Ck ˈ ^(. Slff$IlMA^삹ζa]dS$p_7M3{^nd_z@Vj.d)~~Y:y[ ղ=NN͵ Q&-۔"ݴ . SEVK &?e+2>qk)TI5xJtU"m.x[9ОN՗Uj[J*e=ǰ\׎7OQsHg/_.iq,+STiŜwBB*csXBe)@`qZ T0CK J;3R #T!9'u0k$Y4tR0 A'tJ10f5ib#hEYIl)J`DBa Il J3kMt;?InJqJ'3"uQ$-@`Q\R:[4(x(=1Ze݊+A liR[H [`KHRS$ bkOiE2mp(."aіb%`%uEMq (.P +H(.P`[ P\@Aqj., + 39 +(P.(.P\@t1 +(ЮR\J Nq*^Q\JpGqbI Ы 8+Lz).]鹦@w@Th48jJ%+( Io +1;[@`N* PpK(.0]0clńG-N[2 xwAp<Ì*).0]0SS:𮐁S\` p(.tI]` ,ơ <֛RS\qכ₠8֛X6(כ₠aB` @[p֛`'Jga `m\oz f` tdkҁwZ p&<[jmA?>8=1^ pp/f+G 87Ƞ[2jiJɰ3NGLI >9J2WO|?)KZÿ0m} h,GD#\(F +tFbaC*W0߫X%u Vs,0ZQAFvWr=I :Zq|̗X ki>]o|ᯀч?MxlXr~c~P1i-i)U.qBlhԯƼbz./ԟXӞC.0(p<],y{S~.P?TF5L`M@~I5y26es5uɰK5;odoia%iƨ^v9`ZEB/![H˽!rZK=SW!K=#>$oTLu?ROܾzMA;# ǒ9:}PY@hH\Mu9B7}fl4Depz,!Z2zTgb1}{^lm"w,:SK_s:nFK=*?}W?cH˺K~aTNJc6 ;L%=[AQCfuَRe-'׷ꘀڔKC9fӷ<7P֎2,]:}}օvMRZ߉*_##yW#|D֎ٿ*%ؙtص;}5GԆ?lD: )fkWlv_TO\vMkWWW_K+*v`[G\xו=ը{;?-3'tO|?f6- lɸ6j}yNԍh8#?#o/j;;}w<ywlD: vW}Zvz{mςVWZ{s:n.W5okq⎝yN ta7S&${S]q%3pY_pr܏ݙt{ӷFh?h۩M@3ِ׽F{dwdDVй]%Os:$?s}H~XA铧f?m:f;[Wl; н -GջBjKh eE;wܐ6#@X +y-2R7YmNlT8+pα.'y9}\EggׄNٳ5%.Le5\+rcL ^8ԩy'L0fgFPW/*@LkMAi°Japaup-<7/Íq;E~Ich294<;dpbDp/~ߩ-NÅ֘?CY&ϱxQ6N'囱ʞ SIum^(1A[τZ"poH$ׅËͩw51CYlH!Ae:(K|&Nq?y.K0n`bBRǟ!L)M:ߤl}GDjxϽbBV9835lfKN[ +,7BJhB^UWR'{D|]n:[D)tUw oTZ )oDME֕f>KBfn,#w;0J(uEE,|Ik<.e׺dSJTdm-4 +ЕBU-cV#hߔ ~ɡ_PA}:8Eʔ|QLZth2.UX613$7}_]b]AFCUtLuI6E.ꂵ+ {}4٦ڳLxT vzuiej䔡Q\ =91ZI}6&0u:&"d> stream -x]ێ$q}gK~ =X0`ȖAKm F:-YiKiTe/aVWVSzE$ ~*ip*?_.o]~)y/ߓb1TQ9'B3*.XmUfVȨ"06(sJ0Ce9PF$PZJVCF3:儇=Jtbu:43F`S. kt8etŚ8-`p[4]-@WduEz8]2¥h-KNK'\4Fr:6 ÈB'4l%V[b΄ѪitisE`YlAs =ls$8!H@G#lc!tr80RAGFg=F`Ia p\` lp\`hnLRy fJ Do9.0\@)q\`qb X89.0]cwU 59Yl9.; -w 0Wp9.VQr\`:Jq)1h8.]nj'5(#h -q|8[@`N PK8.p]01cl%TLUPg-,De8.p]g/0j xWԜt8.q  0 %]VL1r\%qfa!# ) @B"w1' p*1F$Rx_/=郍6Y:!w(ml":&ZK,z1I -ZGUt+}v9Naro~>]\>+ڕkYvi_.T6.iLݦfҽL'R\߁M9jkKOQY|3u˿|Z22(-a| MPy5MGϥ<͛<[4}[ˋvcM 7灻ic7k am{]})ײ>\2=0ÃCHۼ:*y.!r?"iqB)e@Z|{3p94+Vl;q:znûQQ#<Шك+M{A*F})=e^cZέĕiᓻTP9G3WdLmLG8O14>27cCch34x珐{.!w?|dk2\FhC̓;<̬ m<hl98*ȃ??DT:Um C\: ~[qP֐fk2^۵x{-ꒋ+,=NFwf zIFܔ|g52\hCR}1կlttйbq؈rԗrtܣի>kώ쐽-u.3 c@j2 ?Sĭ ʩ&W򽶕챡폥ou+L;2 -kaRWX.&`ҕ>[߭}0+B-6JMiӆ5\GS~h6m}5պ/_oOzHl& 6YF~L[Ò1}ᒙe k˪s;qqOOΩc[}X}]4unn;\C_5'Qۍt6/Dsyu-B!:*Z[w 6+L^D% -+g huCaDmp)ѽl=Gɡϸ9옗1C:?c7V뇭&3toQn7y5FY1R:`$:xdzyRU hHty4- p&ɣ

    B,7eXK\6_H!$x-EVbPS{(u yEI[3 Dgd7>O[61-%Mo['>NZF9IS)u)̓ݭCi nFmÿLmϝRMGh qQ$5Eup?"ⷞGOǘ>xPTC~͟,ڨQ.ᯆauQ -PLY8 -{,Ұv_'<"W_p6|Tid|cr辖.݆%sDzGs2!j?Q}=Kw@հuayU`ϼp~~7w @ꑒ&tѾ<φ*%«G1y#O<7qo5(o(8ڈ$p__rU+pcP$hīRws|e>(t=ASҮ]r9}we>MS(烱ivp^3[^$vWGr`{8Xʯ{VSa܆n;T~Q(M/z+C{4VnRٱ&g~]-Uy r7%(zTE.#y۲E]mۖ[8|,S Uv YGE(Uj6z 5[*fսZ/*bzcy\f -Lm^{C2r{bm=p\绰>N _0tvAfRzOr-zW&3QI]M:Ķ~bD #N֢-:^M.Xd[T1ۅMWJsBK{T=MP79݆ǩ aHSOk;l]vqI:WHW7 -PnGҥ!VWahV_5)1Olo_Jhl6I7ֱ =.B/Lz"ݖyl%\6CI5XUC]U45(N׆2VnƝo8Wfo+w|fg1A?JX6a7 ŝF߲Nkd܌{9mNQ.1RC_/eײnܺ3xRLI -۰*Z|m{vىTAUӎB}8uVf&/@kO˥h赥*\e:ӧP$(iҡzȈP\nLXIs=oǮ0Tp1tiiv,r+$x1lXiZ^LuQ{06&_esL~VƞiAN=4l%+UN. UJ &_UGK]nD7KKEK@ns譓=e%##c&=:^fn]w{ΒguR՟b]3&j&.X# -ak<{%;"ud !12([j oPcPT;k|$&=f+Ӝ L'O vhH;PO~7dj$7dZ +x][q~_K8``#0ӻc#8/%N"c%U")<]o?_~)89"ZQN>,a +əo7\.yL)yoYEv +1UJi+B0 *'41%I3\ C[UT0* KAۭ* 4I* J+ءR("kvG{Igc2It0NK4y]t[\RZ94tl u`%]-]-@WuEy%]KH%T q3M.Z$֓6Ì l%Q[UFYBt gCl5I\X 'F+j I\8LX&]Q&bwAKF“`Q&IK\2P xSzN~]H&s}yaѺbo-'̓P6|]p(uvNu2XTAuQ/U[IӦM#H BŲ6;L +s9cy)78nWV22Ye6E[]9GŬ +sNwVeLfbzިT]\-TۈNp;FmT-'hU۵gV;vYoyEgĶ2l~f1 ʝ_lrSϥl6?.c}wvd4,0K]aΛ/:tnCmvݍ}S1; B)s[viӝbpeNe}0Cwm+[f^Eev)43R++VYz)9oic%#ˮv柞{z޹9 sw)m~im]I,>]4ul^;9qt, S< +C?ks^EFxgep؂vN<w+L9߼*,4aSIJK46M"%ףNE{r;?%Fʝݎceq=dCD伽C}pL:VΫMT֓:vqOXy=O`Eq.-[謋${n흎#h9w[牟I|v4;G p$k>rn㽓r"8oK7+ ->I|>*J²weEPDSJ.=T"]Qw<{(\kn˿au.CoEn'SoߴM/l2 + 1$y5CٽͶӋdd4eezT[b$py3˞C}dVia7~-+6+Ej0#\CjC !vЩ-grͰya݀ b\/QQfg8ʶ%,yҝ[;jo]$sg.2SC~{'<2ڋ#k%->!}tK_gZ5nύ(#g&3bvQx2ӡXGI0nnA}"Ƒe˜u'V ڬHۺIa|H'38wC#=A_7g†w#vsd>4zJz;Q)h}t=+KV^:l]_+F6F^Yi!<$p$wޒ0;G<φذo>јWnϵ<ßtQ|g.h=}wL'<ލ?zAHsEwlq:"W"{8rlǭOgX(]G[>"uA?쎚!N?y)Ϡ}~O m6 ~i}y6e,9zV4u{g#y}ͣ{$E)w^~?x<|W#4EF('<J˳QGr6FdgqTT}s5 +ڮu7GOkF'wPgkpq@,0ܱz'g>j9_|cbIK/:O'r,\4ۅOd'ALԎ8pjYEv-))g+dHD67W,뭘[&T8WSe*lR2Um {4Z7a5: IkB7{Q&J,RT]vF*u%e$nA*EQIga,@.tv-:R-k*=LiPSQn7#ʖk1RZ7f#]ՙoԮqrzvVqT /Mʻ'L"*\2*Lv*YN徲I=)]w*f gҭk]uyLRV a &n4eVv/ )$V寗 {/K_i~y7ܺ+H<)o):m:Xǖ4uܘeWKJ]TWm/t;5v=v#ѱi |iKd>ڶX9Mgے|'mK:d eWajd@Ԯg +uu-}E[% l`}ie`ׇ}1ٗJUKkXZ O|חuͱP2y[ղl7lurh.zvز- \_)٪ҲPTLY-1tKnq{)TIGvGoreūޒZTKY}(|JEu5!yes̝9ϰ *?y'Dv7jME!_(v[#+& D֪dޠHNJ]|r&=VP9 _wP *Yvz#-LPZ>4&Zm`У endstream endobj 542 0 obj @@ -6431,7 +6418,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 461.373057 101.433071 442.623057 ] +/Rect [ 101.433071 573.873057 101.433071 555.123057 ] /BS << /W 0 >> @@ -6441,27 +6428,29 @@ endobj 544 0 obj << /Filter /FlateDecode -/Length 4834 +/Length 4929 >> stream -x]ێ$9}gM|HhX!!nҊ Bδ錼Tu;3lG+U#wz|r^0~2`@G>_?uU 1:%_eT*!5v^YǨ9̰(Tyab -f -0C/Rap*!J -!cbt8 QEV硓^q:獴9g3F!9-V#8l1:xN`vZ:آלщ.+:".` ЉRlZp:) ljVIr)ℍX-ӰӁ'!0Uխau1rExQVАx`2 LX@85G*9BB$GZkZ`` -p\5lQFs\h@n 5B: 4f - 4Wg8.Р\@)r\qb{ 4XW[8.Р]m@w5Yl9.;Zqj)<e8.XTUA xWyVAq*.pP2q\ F]P:9.@cBXqǬi CtX >V1̺(ҹqQi ,x8. ޕӁw E`9.A -@A8.]В^xL I @ƃ@q½G xWX9.p]a:آq tX̚F:t]!1Ü+8nr8*p\Dw(C܀kqXP- XQqWE+qW!(}[)r\&B4ocUN<{3K = !K G؂q\"sN'a l B'%ADtxh%1ԜΈ *r\e&ٶ`&9hk8.Af آLMqAQ!ơ(p\uエ16jh`E` Ȭ[p`'N`\o f`M lk#Ӂw: p&"[no/@#>!81^ ʦ ʳ9M{$6i3 B)6_cf c3OX}sbzؘ׏rHA|e""v Es"d! |N2f-NId$_0o#xq@h=`[|gW4X`soPFG C\)̬/]Ɋ1Z/ e>_~0zt/o$5aȦؗ -~_5>AY5k6oKɩ{K4)mٮӽsݵ=&ϥʆW@D7mbX`9lU7 W )5 -~:˴d$4KrM+ry:~̦K9y\=$=M+}Ps{Kn "Ucv{!,#~Bэ &9~>Buʴ~!Ea=Vt5ZrwR=?/SWB[7r΍T^`<0f+W -z[iuBj/68XtH_U7m9fH^}C%A(C.}[^]W+ :CN<{*~yWa]#h}} zz,Zgi,PJTl;oZ=ϑ~uZ@n`VoǠ/ʒwB -ZI0Z9ZţgټƱ$=s:W >K {+-*|Z:O,V@>`!l;|Q2I\\v9~GSgFyHD+Қ1^|*#PQmZ?rnWriw;_QxSE:gC9 ]F)3Df\92<4K^,zhZ^(dν^[5TP@< 1&H[ZN=]ƅK5?!N:>ZzYw4<|02gzugFݙرSߚ絈z$IHkQpe>㡌nXB7ܟ78Xt2s$v͑D< -M;LmL]t?J ?lSi =˲gY `0q.P]J.A7\R﵊bكuNԝsϤ:zyY m;2㼂b}2{Plgku.=eW2Zm%:1Vg5Չ?ؕBMsj5"i9wo}x%_xND"OkD"yOоuqj(cuNz~Lr>i}W*o>=u;cE..Ayn'iԧOC"nY^Wo :Cveș~I~};}}9ӕP{ ;SoQC8ROiw.sbΡfǙS4|w_An VCJmڽ|:CN>ƞǵ+{ъ'7xn KU!)#X/1obXC~gRUy;Vܪ ]lRQѱM''?^ T6M:F'o[=-dG[}y#Sm[8#>5fږՁ b_Ri[>*[zR-}%_ -?ޘKq$N \5źb3AC˶[]ԂR(XbL;C皰NN/e'ӹ%]p[KYiziViUQJm)Y'ybD #F &ɬWPdjX1ۅ-7fLZ*|3A]:F"AIֈ\:p 7j!]+/3m -a Pv8&M_OXE^ܐ?R<4R+$*:i|+KKz_1KKO[KIɐżDRSiXV:_e9.m#Td䴥B 3%ЪM,)Mt(ڢ/6Z1ERYqjkd)}h%k,ԴȖ6{o{%0"SѪEɇ3\3!2wwQu"81鍚vd)z'L`^o+&mӋu -zCzOf_`( +x]]$}_QφMa ?b.ݵ6װʔʪ陭5+# +YJ}VFR/?~<)z%ꢨZ8yCH`71OoOrg"!p )_s5 ?R"M<=LP"ܚy6D1ά;Vָy[_s|?/Fy:߈U?;hlbW}Ōς8pK[ky7bכzϨֆ1*|tahhua?RYSWHzW~Ykñ2r`gC~^ 4mP?_?'޾0iLss{<rům')BE@u@eGh]%?yͨEF{ =Ǹw:G:rv5 >1;rg2?{@WhΗ;{``Cߍ8ߑ٩Jܹvc҃+yɟDG0Nosxg3qzY|zeSlrA#7yk빷5JVjjW3.{!QKկLtqGuot,){;{ ud;Fy`#k'gody:__GwVI!z~z)SIg|^GQq! +ieVxߗ `gCrZa='=;cZyܗs=?Ĩ WFcnF<~=YPװʨ7#~.]bʱkw/y;+])Ll43[P/qF˞toX]+?_V{%`Ǧ7cĶ~po/110o\;`moGPODddDHڤobCCkvtoa6ē紞赶nȗwQ/,@Dž';:zy[rN$5=܎KSEkbkiT&5EYպHaiNX#)dKg.KyiZ|rwrm9n)+\#igmq־y aA9PvpSJ͎Kj_f}Mm,}rUgF؟g~6]}Nϰ-}}-O^+i"5J(Yo}g s|8_U՞Ň-x{,bfBݫ z7%L^d,Z^T|:t#XX:,\RB1ƚ'z] 1 t[>WuZ>56͒jak6:F֩ȖT!rSդ1%Mv +qx^`xSbB*V]WtDxs]f:wf_ӚȺrBvRzD-zר&̨ܤlZ? I~jY*\Kk:At9|R5WwS:mjdVl([?ŴZ%^N޵'Ծsz\hYMTKɌ' *Î*|5HсWBcNXI.]:ƆY/Hn[I˘ѫA1 +۰aBwN=hh1]Ϯ:ה1nZ.݇Llt32x27}ž/mm-j.xsp)̊%S:ΰUe+3 zT`a]ڮs}EWYiK ^ӼҼG0 i&}06“\eslYX=ʲlC eԳ- > endobj 546 0 obj << -/Filter /FlateDecode -/Length 4884 ->> -stream -x]Y$9~_QHk|VHKBX⡻vzEZx3}3fUS>/vUJ}_JĘw/R'/X\d - ©䣻~GDHN}Oz',)yIe1UJ*è!hWMLS kU6Eǩ`:23 ʬU f,*JK`hFt>&X]N>XK{"%8-NY+9l&NaF:آc0.I.+:"T.R%d q N)M00H>0: [tgtXq:3!FfjFl:XV[0h[d` %t&m9mX@$l>TiY1Qb:bh؂[5Z8.0[+oT…5[ (PJpwr\`@5k h9.0]cwANV[` ¨h8.]dw14Uz cXr\`: 0 ynvRs\`jq"?LJq=tp\„FXqiP1y xWE KB83oBy8.p]8*q>#x9.p]e9xW$9.p] A( %]VL1r\%qL c!r\pޕ d @IqARMm9.f &x̼Mz3p\,lqQXlAДy Nz3jd´뚣%3ɦ~{]^~wʟya I'7J,V59 %R3RM726]4 -Ln]ԋXzwwb譯,kaC ? g*Oqg3kH=kNc~ӯ~'ׇ_~&%F,x᳽wЇaE])/h >~k*:7QJK{F>1)(S|fwu#mN+'s[J˿^?jSߏJ3ܜ<&wӜT:SpsS箦7UҨ)O.e|.p~9lJ5>3Ԇ,5d_yIӱn5ǔ6m/s90]շT& 7]Bi PdO}Z7STEM -iB<`PܛM= Z+L;" _R5RWEjAZfo~'`g]{F3_{OY!%ha(q'IpQn…J۳Ʋ29J-=uPf>ͲΛJ/ uL1?3`);l=9P,,s}*Gi/pW[,8>`ӥyvT_C#g}|&祟/lge3cDCyfovò.)!CqX5uYr{?̸9fJU+o]e쮻Նr}7a8QLp۰}lSY/iraնlg߷ϵ2׊ ]@px -<!"_iBh<!G -QS|mᠮyT3 kkw4?>vv}Y鶴ea;e#X>Ѱw(50]ݍ}\C9 a{`󽹘4+<y7tXmb'<./hj7r]n(1X#Sg"[9o !A/ϯ0{뻺v ڭc;ȶ)P_7ΘzOyֵur 85qͯ,{-Re^Y_^Eosm xUB+=Bʹ<fvpgR{b`aw/ue@2o)+L)y;A\6!]i/M~nh0"ɨ~<Z^y\5bVHo;#@1 H -|]\TPu2 "-7cgMNL=P9Űt=ύ{KgFly9)?i9=ԸpY[^=?y 8G?ж}Vzd~_9ls5 ̨c_?y7P8dC~yOӎ:tйmu%>"!9䳧7,4@UE_-I6dC.;wlc\Zd=Cv/p2á WݷFq~ w=s $vMx.ϣ!1a,ɟ5ty7RВ_/rѸzj.ͼDgS^}ůƓ͍Jm.vq -G^dCq*6orq޾ڭ:MddC↝k7!u>s﹩܃zOEC w'<BawۥDv?%[1Əg xm5P|!bsw6큆(Yvz.!~_t>YQyʿ%cf>a!Wv{g2ϣ!amGM?Lܶuwm6G -pB/h:e Yqyg-^p/_Q$=īRIJ5q|&bdml4>غ;Nv_\ـҖ޸/Ghs}R=u6҆հ}*^zx+MOz+x3+P9JcU&;V]7r}_SIzY:c1>w'F!8rįze -}RLeYUV DS'1GG]|J6;%7*fZLBbztNf\m2Э-(z:߄T7%p oTkF++vJjYe3*U+):Nva_R`V}7jtI lMJ:Ft\PSŖ5o4X;>iǥÍ^ ogLl׋ Lj׸B^hr8ʆ&~Ydth -W<Rtv*YN徲z@vݥBKEɤ'ҭk-]uyDRIyo|tWo=H+~ߖO~\rB{2zY<)Ea6PێXŖ4T?u׶eKJUTUm/t;t=vk ctiJ讵tb.26i.+J\:Vwqˮ,[I+]O~( ]ta]EYnE!/+M {<>yg}$^6xɗ~yY}7|-P-ts MZEN[9+E8J"%bn-l/S4vNtUZ*x-ΡN5Զue^ffol*-s}0sCਭ -F(XXzW;^zG5)e3FEMx"+lIMFsX:}˼!T/-!HϞ Em}y -endstream -endobj -547 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 546 0 R -/Resources 4 0 R -/Annots [ 548 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -548 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 127.623057 101.433071 108.873057 ] /BS << /W 0 >> /Dest (cb48-1) >> endobj +547 0 obj +<< +/Filter /FlateDecode +/Length 4833 +>> +stream +x]ێ}gyH8 lﮍ`C~?("tٵ;V/%X*!蝹~zRER_oR?X]_HU]/l?_~yyUCNI{=|^XFR3*ku#e*3L S T`Tfh^"P^N3dQI;aVNSrp!f*Zh,lQV[([w` K(H@=`*x9PE:%9"X8&\V[t4h[a2 5@ tkDhq\A0Sp\:8qJ N 4Hs\:qj` qq2h xWK9.0] #qzuʠB +p\`c +`u~𮲸n*+r(Gxbyw`9.|A-wenji CtX >V̸E+ҹqbX.3p\0* ,xWjԜ+UX.q0H8`~tY]D  -) 0 "IX$qxC9.p]LVk xW=8._-3B)8xWH0 +#K&Γ@ `/Xq\tpXpm9. buxq!8. +h8. +e%ovy[v}`` kv/oh?!\=Z1]M&Yޚ<yŇybC_,a橱ֲ[mlm)۬֙mI6>cc[gϥl۵ksO}.~3% J/X[Ƥ߂n>oz} <vVok~ ~tm`{|ۤ񾱵iN-3Y$]jOӯsYjӤQM7XHuȮ~ߕ໺;.N̻n9+ oX<òvܿʎϓ}lbHf~'~灂G"e8L4Pj^|ҏGZ1\]m(d)r|۾q&?"L>$/0uį%?&ޗINǮeJs[6ce5=v_6&|6qqL[SMXcEn]T|ʦ +Lh&z9 zNY8zAPikVG{ҼNr&}}7˴󰽗2]d1[B=5+/׹2H2+bAsU:*…grKݞ0 MAY~=潖ҼpzGq>^v M2t9fۥm#+5nm|RzUȴ} vۏ] +p,ꙗ̝\=f-B@hd-{Ѽ#>s:d:;P)Rm iŻXK*+&wXbہ]ONrܿ`ӡuk{ݱ''tOb?f6}oUl}`!u'pQ<#o_ll嚲j{MwqJ&qY_>F oib3r%UDjeRJIGka':8qo/iSڪNK:H~}19H1OuR HFrwsCzyc%ˈH5;x[1hz]E} *͉E$() T.=-mLi/0Җ,|~F +endstream +endobj +548 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 547 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 549 0 obj << /Filter /FlateDecode -/Length 4945 +/Length 4894 >> stream -x][q~_0Cs /bFv8C~DDZsLbU;_)~tQS -JEaju_$Sp}pɋ]~諙rF_)X,~ 0Ĝ%eEr b8cJú햕!I,K+ȡR"(xOJ)lȋh$SN{-BI9CS8 Dd1)Z!vK֕DdQAisrNeTi3O>Y$֓mZI -Q"xijG') j!1щ<ȂɗȢb +h"\08l&%$0)O.F+~r!G -UŻ !Րa'qaB˓!KXب L'F;j KXs4 MZtE^TNI, O*ID^`HZJX޳rp{DdHX<,[aMYRH<ҘaU*f pM B$I@ ^ $7!+0KX% N8S9IX dHX d a<)kxbxY`.b| ]Ys:]2:iA_?xOz@4/iW\IXJ-uRWj6|X^wYu"aU9v -«]M;Q_U3}i_?ֆXs{_dskyP_njvlFSLz\.y3gTΣzγ+z7 g-˖MYW_6ZmXmpYjy:u17P -ƙxF3Cf_:o#&Qyfwp/:VUVmY߱0LR-GoaW,ǬgYq%U8Y,,uaW -72YbZVlL _X/UVْzOy6K6}T,m<ֶ,xDaN<Kv[w4Mdv؏iO/zֹQ`?6 %7{f팲pv'W}o7ɦ[PA_)ۯEkcC~~Ŵ\Ɠ9aZRQN.C7ZL.=KeOy6K}{7U/C;sGzޱb扞;{Y}eI`v*s*Ajg_GzX]Y?ĕ5FJ&mv~<:OgyZ;+pksy :"6gf]0j8Yd8V2 -y1π^r\6zYA3>NtvLF=Ǫm{{نRvpPnݛ{(`v -u4ibyγY;xN̚z͙g殃=$^$ٍ{^>ޱw'ȥ-ݱqU}MOy: =ȯ̲FD㷲wf`{yY}ߔݬ]f98,w\ԗOkU^A7wMY:Og}͏-Ǟh6 ^y>w̳pz|tWtxyCz[re̩{* O6]#?L|Z-w26q;k-|`ʳ0U}E= jD_~`;NOQBsFLÄ/ik9K|/etM%oWraKIV~yu{-e>3 M^{,95JL魜sI0Ie:pB7ҕ¾ߢyQhѿv(Qm1gRmZЛĞ=Ԑ)'k;쎆UpΖCwhzByT ߚӼK,9闇1:"&eU;At[9+9t[Lt8iY;WzS3>$!hþ\>o_9Wy|K; (xݓuĂٙ93}ɏ~oǼ{mˑA90غYm̻~&+6Rq7 ˍ -dZTSwx_>\v%)W馥$X{a>/mvkYԧc~.*Iz5NW:!utQ,oZ^f|{:۸L#XT&Njn"Vy*d8>~$]#N ;ad".UkW 8Ny,Z-{mu4Tjt ,S"j%դ2%Mv -Mr7x`xHV1뮓h:컩.tbNeMdyx[;RD*26UkTY&TnT_K qm"Sil|6ktLLՐ\+k9t|J^5WwQ/n,AmTl([?ɔ;ms!.޵oҾc<%Zn#'Safѱ{ -ߨ+MJؔv׼% 9ѩ^I^Q]/i+m۷[]w+낄^oJ ޳v:CA*UJ&D -lNGklyJ!CO*R#׹+fDj阜*jz,e%1sj *,ΒjЈ׈Zrz,*-?WO?~K# +x]ێ丑}ϯg#~ c`w/`؇)F}HRY]= Օ%<< R_~/9=cpۏ.j^_I(?7V.N^G8M ׷ .y˟~uu}5Shrv)FUJi+b4>'41gI3|tmUfΘ$̰.jUeav +f죠 +vh!9kSӃ3z +),"t:Ig^K<|tk甤-Φ(l*Q[LVEb,l-*(-鲝|NΉ J1muF'kzuQ-A,`H: [~$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn ߢ +CĜ"52cX8DmѓٝdrgL׿Weh%C|a`2#h-`CژYDlYuae+L%c+@`,{J` ͒և59"&A˶vz$[F1y!Yy7vq[10h<lm#%S'ŤDi~fY>`a@ ͠E}[%ݧ tbާo|tO?^~?}?^w_\_0bEvï3=}KAfy," i^"?5C;6W*,m?jKm.=w'HG乻t#W6[2Sq7D2IONy:$߉c9z.g~G̨ul4/dPH=l51UKC؜6yfamfGv\FF*C8ֵRwF ]u5->V8siWc3O~r0,\mIC_9Ɗ7Sse^Lugncֽkf]D1 -wiӃȧyusKOy/vRW9LZ6ϝ[aPanMTwK46O>" +%{]*d s/S3)7ILyىx纑n-3X<=}ׅ(^n7k>.Vcx@x'a{ϟtۀby2wH/:] ;un+d'Y6qͼP>w8`ztAēy<.9pBr֏c\grRl4zp#8S|q^>lym4nv{8$jVӤ5GQOy: G?g4Z69 |8mG Xμ2dܾZnyG&)-o9F۹y[W8}JK +vmfɓwfkArA֢G/zm˛1b/lkxj}U/Z9(Zr'$ayQ=^fōFBXP~Cwwrgi~T?תiW,$V~=gnY\ڰ鶟.ES7)UZ7K`iݤcu'gZ;+ƚ^aZ_,*Eg7}Q򪈓]vpع~s1 d7jћZ>(?_[C}F}t&͇sł9ފjҋ!Mv +:Rn^i{=] VXu]l\G;}B6ӹ4D֝GQ&J]2ruk$nAE;tfӳ^TZ\ EL[OŖ*zҡNnH_:ƈZL㵾Vlwm$vG!\|ZVn'ҥ6Ь2z;)?SoRbA)zplⵓ<4q=-saK'%'mVR2&G$c- uMLVӸ U5uoP~[ UZeA3VnƝo\[kz]t0_2QLO.6v2&솁[ة?e4.iXo~`5}]P_;F50[Wb>w夓b*lÆ c:0v=^SƠiw2i52mb do=_8^\o.S>%_Y}JP\ +sle&W\O;b,KuO*+`I[~ vWWF{x}u/&:HڨI߸5d-a}[n{eس-Cnu1ʤg[x^UuhtVb6%[uKiq[LѥW=IKEK@9֩ŒII]Oil[[]g+k놄oR3v<î 1Q;;U +kcKlk<{%WkBwLZ5}{lUYRΖؤ luSaelHKE@KAo/9Jϼn]mr endstream endobj 550 0 obj @@ -6559,7 +6548,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 180.123057 101.433071 161.373057 ] +/Rect [ 101.433071 348.873057 101.433071 330.123057 ] /BS << /W 0 >> @@ -6569,28 +6558,28 @@ endobj 552 0 obj << /Filter /FlateDecode -/Length 4742 +/Length 4696 >> stream -x][F~_1H1}I( $.R!L RW3lڳ㪾g4St|{)fKw֊tѝe CH~9MrgRF>b VP97`T^Ŕ$p -UfPNR 2& -3,m3L$`N.*`6J:t %у$QH:kH;-wQlqIiI`DJ1H:[JtNt]Q啖t.E"QS1ĥ(7htZش# -䃠3+DlqVIga Gҁ' 1 -jI`1DlAK `D `/H\# )/qO -:|ve:B$.c=$k #-.` "SL6D$qAp1ft-"t:H\ XK ^0:M[0T$.T4D\i'[xi-qA4ޠD234֒hjIGיQH~`WQ 4&$.@bI\X:bI\f Fbf )O₤nq蔒 ! 0.y%.HVa%0n $-.-p0nIXo$-&{^oF f` ^ D^o1\u $LzW ^+(F anC -܋*154XYF/F 0B6P_ck Qy!`Όo2aXJk|_? >=l aLM0 LBw;xo9>fxbfb a#y؈8HL09ހG8£DfzcmiZ=ҠBXĚo; -+:il2L'p k-䱂'=/ꏿ_(E?]z@5IXCqһ&>]g<>sYInIL5uЕ#/sJ=B;ueޒ.SPӯ?9:!z_ do<7VG5;Nԁt1@zZF;56?wW|lsN3IVtIuve}3}g zn҉歊 @~; X.$c_ېD|N+Xq{L%~ROHLإ֩v8}cIɚxoٔFeB~k8nm_án2&TϽXNE.'r_-4: -֏6ScyHn_揿ӟk+]9K;c &En <>[֌7Pr1BC-c(,GnXݙ XuloÞa0lean}ڪ7f߬Nمu[XaD+琖jTq FS$Bʾ<AJ5۹=H)-,֜qi:V{2^.CwZ}("N*IF0 ~77jI9g> v7JsdS+5?'f;}ѻx/; 3v9\o:ox'+I8=qrW{uגI4T&m]c]#%ӵ*ɖp5{W߇&__ѣ}]}쯸wުGgG=ޏmʙaG.n񀗳3n{9=;?dy2\Ѳ܋̖3Py}3Qu7W|\AU3貭3ᐸ7}$V} u[oXs6V@ug!4Q 5YO?65 6>[ݙpoM=fWQv9ZmDQG_ݓ٫N ٙp݈>|xzWq^?F=ڱXAНy{Ϧ=vJC)59.m3ZS8Nv{+1T@t9t>빳Ϥ>}g!x_,t3zyZ>5e{n}3ZEO6vOԤO55=";5}ˉzS}yYn==|nw}}OA~!ҙ/1MzlX}^9FjzmVl.ߍI'y_߂Fq4_NDb)fQHEv!)o)Щǁ^?󻜍N+bA^/|'1I2vM[ 7ڪFBTWņ=E~Ӷk{4k{/ry+ޒ-kݩQ6wRMilY7γ Ꙫ-R>k. ?c$D=LԤ5݉ރC_n(6܎,#"9VքZ4b i[2PΖxK5 -4%cr KEWѪUA/OYd/ +x]ێ}gy)ހ $Aaϡ$^Dnݳc vJaD*d}pO_/sF_brЫǙ:#) +\05u߾{G^UU\)Hw;' +P 1sXFeeK S H\`o8 <0Cz +0C9I +f`vH%!H+F'MgQ)YT`u:Ӻ.tZ9tI$8l!E[-XlQiN`BFa YlVHNtg'bu:᝟0Z N'egMУH1:[0t8xh=[UZh lQ-h|-YЃK(: +8P^ws,|9р +#ZH@ brL%l!\V[t -HqְE@m h@nIqߒ …  ( 48W;9. ]twqjc[ 4xWxWkdui5R8 n8.@vX*/*!չ}Ps\@]ep UF( HY #Xo +1;[@`Ni PXp\`2`c4ت>X xWz4 tqߢ;imw1Pi x9.wQ+5FjNޕ* x~p$ 0uR.t"xq;$ud X.q +5+n-+ @ni8P` +N-Bqa@y ``/Xq\`=u9q :|v868e:B8.c<NN #肄N` SL@q31*t~t1ƼQ7!ß/-'W雞s,۔$_%=[Lw#)w?~6`a U,?1u]`Ti$.ULMS }K爰TD'7?˶XUV]KQD&:xyO3<5- +Fְ\1!e  {\0[o9dAۤ-uВ)OzMF;# ǒźΟ{,^#T1ԝyΆPwy({"epZ,!m  ByTgb1}{]lmʷvCk `:ov_ӡvOMmv~b)ze۫njs_s:mܤo淳δ`;cuPhy#uZAһ- /&g"N;|=:ߪcnjSFǏ +wOrȷoun%eGUrhg[ډE?UGzJGQ[Qv9J7˽.e3h#,ΊiFGteu|kkv9]|S }MT12Hv18s'0^G6G%}~G:p8aі 1x^:x|wk_kú:vEdWk=ףr[Ѷۈ~3cum3ِj7awI^1f c qVw; ՇdN;[wgӡy}t6^NFa*-TӰ ~^zs:٧#tcmg=, 7 +s:$?s}H~XA铷f?:[g}O& 5wCqĸ9ְUru0oO cعTbA\εĈ #Nq?E.dJe7BRN?C.\St51IB$R"3"sqzQwl6d3@ӖKMԢPT+bEwUg0^W?Uj5VJ㞣TJd +YjR ۉ.K&4fWwn>r1ۅM7frKʗ!|1@]\񌬯QvU:mlWQ3b("~Ǥ6+IЫ*7(x) ]3W*LFHʐ{וr7xZIf!$.\l]_ &}$ݜ:DZUY%w!I*T,38RX̕P$#p"6/q +YYrf|.f{slԊ#}:I+GrJX )qї^zkf-ɸvsJjխ,y/|Ͽ.t>m6JdP['z$+{nS U_җ&!JU|M%(ĞR̠2kk)uXU"5Gۦ áN` +.C*G1iҡ%UeA](b$T7*7"ꢣ2E'YU> &Y4La{=6(Ԟ/4_Xf㥺?> stream -x]Y ~_\ubȁ m`C~>T$[YL `v$Hִ4J)@NZEXhʛ?Up~=_cVa9S 6N`yb>`Ă>-+B K,A& hܖ!$0Ge40VkA4x Q!eE^D+S!FeBIdY!7DZAr)JY\pZAxXh' Y]IAx)ӖgW>9%17ÎBxȃ,i+d!|IиoeeBx.wI`BDxqklx./aA$ )"/+SwKVDaDEG2F*aA"g pW{$,]MH{DdqJXO(3{^y^y`g>ܔI(PQ Q# h PDiWNY锾#3֟}o˟~Ԛ2vfz~Po͉Q_~F/ U`ei"G ʳHMlwk;˝<ĝuYrvZJG}Ot>o:>ꁴⅥ5G [V(!]h͞Ic޾&lwC"[\-]qi0-0=)=9O6ڕEk1.I^3Fr}lѡ{R뿎x-"_㗶+gd \-6؝1?"i5= 4p;ysy=o=lY/0}= a5z,[Ek[e\/Ş7ιeϴ5ϴsѷV4KW\Ty=B5| >o΃?I~]iXOoMyszp'vj,drQro+->yEul̴V;qs]Ϯ=VgIu kM̓}ޚ׹i;]{w{Y :8\saطױ> \z{깮A7/Wƙ߷ND-X[E:e}8~xOḺ3v'| ]=7t?uzϛwDMH+'Oͣ8y<}5U L`>EDXA7"qM;imM>bNm=<>UNܖYSY塰,G߯nn|?N)1JdY}?uXtmΗz^I}YeyQÜfi җcLx͟vL<<ּ6qCqg|.ɡKOLFN lؓ/1mc{Mves4_Wby(>3 (m^y>s>~ fn_bs;ʺ2CK[=Ak;4°w>tێpGOq2zX,zĤ i܆f:W#VUQ,j(iw?rY?iT`ISԼ3br4#+b9^TKhkG e\{-UݕizPrp>s~(yH>َs_ȡv쟋wŎkˆz{<˱3\YVSaDelmwy/EfRWc4,m3l~M_luga\-+)PJ"`7SGML&|"o93y<Njm/d "Ei~(}p=co\yNk!jlr$j9}lV3tĐW<*LAPu -csMOXU"ƿLO5[Naz~d}Ym ,5|6PctHX~9 #Sdbygy 񋒊Ǜߣ#jUb ^Ŕ2Qn8_6VVa/nТ^-r3vp_eZw=ْyZoE7߅& -cw#ilooz-Uy 9.tb}T_8r´nM}:TծՍrڲ$?uh1k"HN ]Nby4,[Ի.Jwu>2D~GK24[4/'ʹ!|ZWnҩtYi$ -ߨSU*'!&`"PκMt -BrHi8H=+g99Q# -FF uӛG -ˁP\*$q&~zFA,<O +x\ۊ$}gRyH`d XcnK#af +?}"23*gv$v<]Ul)DӇ59Zk%6M~s<;KDWS,}N]⏧|v綎;{Sk.UL.9ۨ*TEǤ3b +0b&OGU %j* *(pTUّ WcVT֪:D+:MѓΤR}Uu: L.:MWMJ)MGu.KtDV 5]UuK.u+*XlN`b-DBgK.GtΙ + +lXb^`!h:D ez^"xI &_cQVa^8lzH`PXj(рPY`tiD,DJ,%TҸ x`A BOA%xtK: K.`Z 7DP.\j\ܩqAbg X75.@%i\ո!8`G\ x785. .׸jIX % 3U `и>b z ' (ch +z8, X Chx%D5 2ԤqAﺂSuո +V6.qAb +D.h\7QvjMuZ "xqCԸ` gẪ[KѸ wAK^04.8T^5.H]Cи w-!Qu׸q tXʚFjSh:uaM޵6W xM Rf/A5.HL9i\!KQl!,U,I֦Z4.Xd,4.@D`CwQDLD䘐.yS2Z\ָ g2؊ȥL׸o8\Ҹ0sqAq"S<"sMAtsNѠdj\$LrY4.( ` S:`Mh\d;j\&U,!xN7^&Yj&aqո|ӓXo j7)붆fָD(X4Ue݂o4]_I゚E7ѫGͬwc3i:."Ӥq.o"r{ ,qz#V{[e|9GR eIU(U ,8a9}GT g̃X~XRl9ovRV_a鎈|$%uD-n ;?l8CGmE" [ I1{:OBΈy|p:i*ﴕu^ $9F:nWvka cT.ڦ4-@[aϬ "GtP&Tϻ)(yMߜ@+~\ +6Joޟ/_}ϰӛ~gS|~D߷-gHY(eko욣~:t$MG=#VNhZ_n]MT®Nc7ߜ~f-z?WcpZoqn6\貝OsZZmˠ2~7>}]y׎!l1Zpա;zu>5v&5yvׅ:}bɴ[LQp60|ni[^Qqw;?nr;y:r-(\JTXxgCxr[} oWݱz;py&Vĸ_L;_L_}?͙p:D֭gl ?[K n>ײ'xmX`tsczoX>|*LjI#<cch\&uԃgp 4hѧeax"bO }G-NϽk8}ie+d y˳ͭoNZa;,1ʳli^׿IG^a[wsv:?Q`r:߲{{tlmuroؿb^}Xy[v|D)y2 ߴ۩u|u;ll }JN|a /pm&_I<G-w׶[o>rlx4oI}LHΚaqWLxgb0^$3%FЇ 6Z'n BevXuة8{-PMLJX|KJ*jdjĜiQG܃|b +W,ԏ0DJwHQ)otۭXkRTm7pBgy*P7|3un'ܟk|[SL^`y"{5ˋ$obI^.Tw>/=TO'y#mYގ"Q/7?pZw3)M+dǥ=v6a[ n(N{m7_"tzXzŴ#!P+{-م߭5R tߜr<,r?dA'H٭/w7x6K} ipJy7מy(g>y[4Y@Oku+5۫d>Re,?p.kmߟڭP=koM=ŏ'~)bCN1 ׏vEnĢ]vAMݗDrm׏3`{c ׏? +}~XfrG1m*ń* (ld+()8~v.M.M>%t/}TT.. TK 1OrR4a2^? Kw$j/.'Z3G2n ez("̯kĆq+a̵-oAx9E+qO1+ +N# bLi.TX] U!ei go$iipgYa.Yi/WRIwHɄ<IjV 1SXJ)8\q#8XюΒGSw>Jq3w+| /mc]N۱΄p)L&uLq/Nm!z>N{JdFo.-֍XdVrrՅc'AS,7}{4I콤 V +㴡axCxYq2;7s^.C#.ppY.-,[:EE\Fq):&;d񓜊} Fe:۬l(DA^ȆN} +`!}10ӥ]s™/mrҘm. +iQvJ]o. ]6ZSZuJySt2嬤CYnx#Z +#ҝ%G,YYfeǾiwmb4Y-J^v:STi'!WI`&g׹}Vr<g%'LlvW#ihVV:@9 +4g'AE큺v 4.3^AoבeorVNb5 endstream endobj 555 0 obj @@ -6638,7 +6631,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 348.873057 101.433071 330.123057 ] +/Rect [ 101.433071 536.373057 101.433071 517.623057 ] /BS << /W 0 >> @@ -6649,7 +6642,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 112.126036 101.433071 93.376036 ] +/Rect [ 101.433071 299.626036 101.433071 280.876036 ] /BS << /W 0 >> @@ -6659,15 +6652,25 @@ endobj 558 0 obj << /Filter /FlateDecode -/Length 4774 +/Length 4808 >> stream -x]ێ$q}g%x}`/%CO}`򖙑Y=Q4%<< 2Xc -/?]¿bqտ+V&# lBr&.o?D `(H\#M)/qO -:|Ove:B$.@`=%k  "F-.` " RL6D$qAp1xUy3u:$.&LZA/q~pI& B-*`*Ad.4lA-q"]贖 ؂hPh"V^I\kIZґuf 8T+M0- ?v`&9XGhx%.e$.6y$.H - ⓸ )?q,qh:$.H:biHK^oF UXob'd=7`C"` $[p֛`'IaI$qAכQXo""7]u $LzW ^+((P*n(p/f (/MeU( m8a}<0gL辭9z2l˟.|{\^w-y^X#x ry&m[ߓAeӍT6]4Ln-RAm}8ۊB"Docp`$%-Ksx%س>-ب]; mӏ_#?~'0v;eRONw_ޫ)EqN,F^ҲDxψnC=̲o\>QZj+r9^??v)4˦Pe2Pb?X~h-#6>cuM;Bur|+7خteq6`G[k)O\Sjܮ~3vվѵoSbT1Zie*~uSҎc:xoTǭ- me۪߲,TY(}t|-1w_|hy[rC1C[-17Q;NIj pj}&w-MG5R[5Kca#?u2רNU͝[!*:}S#IJhlA(ѽƢohx/s)9A=O -vCeѪ|+{Jޙ֓͛v+Gq|)HR酻u@JǟI6owf2LnA"{A6h%c-J#*9^W};kGqzE?*kNein+2,X<{ڶ{S>=% K6h_3^fFe^R~dt4ˆ]t$ftӨ:ϦķJٴ1ea]56݄ՒA*Ǥ&˻< V¥ z0Ӽ/J\y?e=ŲU4|oSUFR'$) d'AJ7ۺ3Hi&׬Q3/WJ{g1.*_ykY-%V|38ͷ]ў9!thwyyoC' _E=yO.wޜ-Bj^ůuI&]թ:@m1X]ԆƗ2a\Cmϱ/#Ϲef4Y_ sj6n}N=-w1:_Ό8~.ϳߏ)_}tO_9ջj߂F`FU3J8dC8xh1˭Q;[ٿY|33u<ZGH6]"~=twQ(x{-t5426HnL^2ֳ~Ez&oԵE{W9BAp+5F[y6CW]Y@g8gt?[Eͫ;,7o6Z )\}%1ul}%oG=XW)vNsK2ZRw>ܼs͑;?!5증׹Zތ.K|oB#R&H!C(4t;#07(7U;]<φtTj)?[KzYrS'ѿπݻyjw[ڥE;vYf鉎ֆdž̝|'Ao_st=T}JB> ?WDmҽmX|~[^ݛvǓySm6Von1jG(>PA`{n$v?NЫᔫ$0_ڞtի㜖J|Tn Ж&~3֗z@R\SPN@vHGx@>!|D@=!#Hr}f  =+RٓmtOY O4}4򱅖t&;9?Tg򹏹Nj?^t1ʇr,^tۅe'ALB:|T,h*XÔ)Qc?64󻚍#U|\\ DNbntq7S(&Ҙ3Umj U{4\绰>N_Ӛ0t=jZ&J8ZTQMfRu~D Nբ C񡤳0V QKj:AtJiThbϚ)66 pFY_ƈRgaVqoGm$v!\\(CMUKX]Ye|#?SkRfASگz%<6xQMܥCh3c AR5IRꚘ)q(TTŮAm!v6Tjy=ݵr7|šS/Ux X+bl+0Bw}:Z;ԏ}I3Ku Vc4.tzF<4n]Ǚ`$Ta6@]cO*2VƞmAN=ňA{R-*E TCɗl-QRh1Ey{9э7i:hɶȍpuldd~ݤS*M˺l{A#SճMw{ƎxpޘIkl6F8l<^vG5;&V?'E:V E՟㓳%%61[AL\yC]^*OYz#2LPZ>h:Iv}W +x][ȑ~_Qφy30?beN1=>/$EYKUit)"//$}UNHz1Oן.?_¿`T]08|tןX`3_/;l_?u )y?b VP97`T^8Ŕ$p ݪ̠dLTfX +ު0A: (%`"Fi7x tF>&D]N#| KEIG%%-N)I[ ;wN-$%qop qA+@WԥA%.p]В"Dԅ@?T$.]嬕wuF#ql5 guPL!Jc%xW$.]6%.&J\xFiH!x |Ru~ ((K +$q!%.Xc$.e4o1<-l(qlH<1ft-"t:H\ ؊E/q~`wI& B-X*`+g.4l-q<]贖 oPh"L$.XC-Hq%.v%.2A u4!q懃m'qsDl$.p%.e$.69 $[I\M4R$o(qA +&B-pe[ ehUn$a(ٸWx:vD\.#=ZF?e=ǭش]ژ|gg`@! Q&;hEw9eب맟._~Oo-gz:=ɝ=7ġɲ?BMb  + 8^f2;=mњOg&89oѡu]GMwdΜKs/Ǝ*o:gk0n[u)Sg:Kg.3>խWf7Ӝv~G]h&n{/\w> +c:qyjS ]}yA_p29'U4FmR:!_܏*&Vm8%UrЬjV[aGvl,.`gg̈́Jq[A'i\mtstVAKU8ٴ0eҹH3њ[&%:bRC"8ƉMs&5na`DQcQǟܕ2e/_ۿj>{ یhUĨ(;V$(fm.Œy_VRg36(˳B~9kc;$NLzۣnmZhc1dw}c0=^ԔG:gCxsRhJ֩[%zͶq}]7ڑWi%7omuFϟ GF5= ;,]˗ՠ}U4~̠yF6 +9 +efAgT]IHODV?-_ctE_Sdll\uBv|H|C/Oo#X!oLJg2,G}d+%#D 7#m۟#?ѝW6>62 W|[-&j-_+FnsS73 >m4V2wErk:QXas:n?}U(O\Kt 鐻2:O쯉շpм;;l6;gW1_?ֶʑ[V6>)9Qm4s64m?vza˹<3}=xUʐݠ?{o drڗddՃuNɻSPuWټ6Q"x+j9jw p:]kh=̥y,փއY7>p`!t'zQ GҘ2j ˈ&{~:Twm,^4wn޶/MsRrN/lXJFKZ]FMyVߞ{no.±5{{b-+zy_U{WH/9vwZfvqu];Rײ=bɮٌ +2A[/ X!x'[.o9˄WO̷ӯy_%{&wy4":Xt;o]k')J}')~?}d%pȈڻ`4G*emQQP^̅(Yf;.k{wksFnvpՕ:F87; g9b0{%F[_v_zT}oYe?O}pP-N7F<8_:Vtfc?Yis|<:;m}ѶcĻXys8>6c* s6Tŝżs>o^);W_#?7^C/H^VfյגJ]7Nv /|ו}Hߍ}к}C½qwϘ˵O&vyl:CN6M; +mYcVJ&?qJޔ2j|>"Xj|>yYn~˓hN̰cCdh}7r.ʹ|(J" i}~,,~v-[wڪFn鮊 e{4 bz;t\քf:tk{(WUd1*%˄P'Azߩ4a25~Q$HTʥ\N^rskT(bWS*m,/1ڬeǥ V^XҮrrz6qT/UWOXYƯ'pE3~T ůG^EV 4B- `/PI.#6CC1IXuA]3)\ +U6U+P~_,UJg^7pw*;[q(3Kn,|76 ;bnW;k0BW}yvwuI;oqCXaUj~`e ][3F0[v'Cǃb~ me 5_:ֲ.4|MĞK h[c؈MѶ!|F82aO6xA{:8Ug|m[:d8haa-d@g +}5nmY6ES.mچI=/l+ڋci!> @@ -6696,25 +6699,27 @@ endobj 561 0 obj << /Filter /FlateDecode -/Length 4908 +/Length 4950 >> stream -x]Y丑~_F} ? 0crl,j /( Q*;ۍJE_R)U7%r zEM+)-V;9$6N1{Kǟ\f9L,gbT^`e)F -zsXGgܖ!K,I+A 뢶[V&j' > -, 6J<Fi?(=H<"/xN!:S' JK<YvNI<2B8mLI8NUVK<YNAl&@8Aᒄ&e$0N.$Iyr1Z L 9J8`h , ,'WA@4ZbmE u*k ,)$,\$,@\raJY ̵N ,@=JX`#aZkV8வ) Xdu8*JX8FF; V&wMRN5.@ gJXc k P&. dJX` ,wu4j)  HXSK<6YIX0I#m -+rJx.`HX/<$yq!i ƓB*aA½g pWyk%,]J`"/1 XKX\jJ8' -$,i'aA̐GE)DOC Ok ,%,H&! JxhPs$aAraPQd@JY`( A4GA띄)J7)AM7YAD|d& -%,Y'IXsIf [|)pn oF ,!ȃ,pnI7N/@973o"K( >$pi7JLf&8X1P^* *5I,@Ld)UU0 -xm0a>U9Di!o9Gofwo|'RVjC|c`2#XЦ8f)>҇ Kэ?퇕DGoEjt2?#?03s(rD탖ev]IGj۶fjJ:t1` 򁆠t" hc!QFܪ~)rd#t㯟Ͽ[/o4LOg;i,`~ZX~ƅy-?gpkoi-ciqL2G&Ykoڛru]쿯~yOk*l\H9x˗| aI>N~_ۼlڗQy7Y{Iw:ct0)wdg3PdwrJٺnV̰; x=tݵu6;j-~EVƫr.5йq4 :F}U̵kAG[UOy:uwquc_Y󼵞tz.?C۵zu~u~Wi/}6o;a;VP@g1|d<ޏ] Au g3_" m-vMYTydfXIEJlfǞ /^|iTY^ѴvnQʼ+ڎ -/QXX(3cvdTeuepݺ}ۇ*ر`Ss}΂ǡ zձ7YR#Rd`<|EiLV`Vp\eݱdt|?F6YS=aakRMzJDd{i}WH#tzy:>`L>52[qFEԃn$dr>Eԛ3[O7ɦ[PA_Gת Ny6Y~WzqŮ%Hj]'cĶR~ pqsQI(p<8|W?SK=kReOy:K޻'Z)4qYہ>wtp+f;'<ߏ^[ -tj|N`c1>ܱ]Uw*ZŲHmHOik;|6K>y{COg'H>id_ԣ{΂ 6=,#}_BXy:;Ytd<ߏ_sfvOTz]s0Vv>4hcX.np\߱bwG7gYq@!7v7 "xs:~apwU׵8XH/{0I`'U?؋6q͞YB{i0OYvލAE=bFZk15 ؤ#ӓ/u%gI7!ql򸰥$G?˼v͑_)%Z4^֧*Yf\o 邭{O#<6[jM1N![zGn]k9K/nizwXI=9T_Ka]_jr&daٞkAzy?-ZI{۲e}Qlav1tVL&-{Xk;zn ͖:v~]5;u{3t0C)Uw)s5aط}⎞f;^=uƵ-[űvu5Zߛ7#S\;cWcl,$她%T1>)ER20 -Cs0L/D&t vG4>" -#ף. sۇ){ԛ`b~*Lz_7ECu!l~~eu/ -} -qe6rR^:?hVf7*!O]3)zUvl䵒8=4q-S,חNJhOZ7Les@ǚ52AXOJNTULɾۊz& ovrhɱ7y۸+VdNF5o'c.@;r= Ivۥ9cd2 h?wM}oǍjhaܓї>dJldžc:ZC0v^[ꆠq9w2ikewA-ҽ{uqǫTe<] +j]:ΰMd+1 $M$[ai.v纛CWZYk >|ҼG jF}Զ06\e9v ,;{9h­.2jݖO*m5iu .@SFUtj)+Nb):o\ӞJS6miZd[9Ǿ:[X2 {7-mmv빫e.H葩Cٙ UU[*!:oZv:Zc˗g0EXi}JZ+3a;&gUgv_*wJ\ :̩M%|^yeTRЛۺmm*U7>5 +x]]q}_ 0p $Fa cn<%%VnwӪGxxX(*_rzJ)ஷ/\¿buQoW\!$qٛo7\o?v'I>m %,bzAlzö^X,{6mH C1)31Q`4*ADfC3(hkV2]%31hϗ?߁O'_\_0bEvï3=}KAfy," i^"?5C;6W*,m?jKmQO[d02gz r>si^X_;V9]#?5xG;\Cߝ sw9:Gldf0j;[od\utH9z.g~G̨ul4/da(L$zOy6v[êόJfl[z<Ⰺ6S棈gv.#}a#[wA);O\CqS=Rr€ւL7Ǖq%[=? ŨMF=tH=kvިkud( ~#=q]4݆^}'<c\+g7g{l{\XԲۮrաUa=h,umȘ~.Tgu;z(mFKoWtzõMXrm9zz|s[N[ +v`ZޱC\̣^ ʙg<2A~&Fqs,6L٣Ϥm E]:pΖIwxBy/78ÚK,9y:P\䤨= bN`aٽlл(2==TZFE+yz̡͓ydAڸ/z}3[􍋼:5 $N]nÍ"BQY$t#3LJSZ>FZ+bN>IPͦd0׎6!/t| ãGHAj#\gCjև|}pm||rxD#Eu$-+ص>%Oy=A}tqT۴  dtȴ5rn󼟟>Y{G +{缙wssy3ޱ>Y;. ҿ6ۺIa݉!3O9w'|< +3g)o Iݯ3Caw|d#}dgCVwLCM/<~Y Meѣw A5Mrul"^WC6] З#OG7՛YCCKn[YL]V?(pMrc7r~#~ӸtRݙzÜٳa҆Mr mX4iC_Yp n6MM8V_wr/zZAUŒ?_tvJ*iWEL bѦ;b.U+vRn 81Z>T84ޟTMd!rSդ1}Ar)tS {w*&[buqMm ]LӬkZYw oTkG(7עwj2ˌMk! ]ЙMzS; SkrM'n1Ro=[ԳnJ::ۗؑH_ƈZLZ_pc6Ż6⣐wPB -+xҘ04ITᛔ|ЮAۯz%46x$.ubOܥclI t[汕cI5XuC]U4BU@u]VnoCիVY šq^m2WLlnSj] a .4Vu6v*!Y>A&͸_/e3:oQ/kkyܨqJg2ΙtRLASm0qXW4y׮gWkJT7-C&6 F[ ^lMK[G'*\2uS+Jڧthaq %0wVf y%d]a.v]4ˋ +!`yye`Wbr#ڛK[HOr֗mαVC,ƞmAN=p Q&M=ےJ]*E Tc),٪[Jb.+ҜyMZ*x-Z-αN-L,MzJ[eۺݺ:^Y3\7$Tl~]3vT_h-ݧRG_]b[#9+Խ^cr֪[eޠ r&=a+Ӝ*eC]FZ*ҷY +z}YPTZ~vnI?iEL endstream endobj 562 0 obj @@ -6733,7 +6738,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 142.623057 101.433071 123.873057 ] +/Rect [ 101.433071 348.873057 101.433071 330.123057 ] /BS << /W 0 >> @@ -6743,27 +6748,27 @@ endobj 564 0 obj << /Filter /FlateDecode -/Length 4733 +/Length 4793 >> stream -x]Y~_,>1^ <̴wlyWx*=vnU(?KY C;s|8}<[) ۳VF |ʻ um9{GSҞ~O*QEԌ{err)ȩ`F T0(Ux3S gTR`u0Dvpht\*:i=8o.98-6 -,l`s:[ӂt(Ndt]tQ6cX]N:%`ւI9X`S:(tN'lduj8-GADe8PA& -q0kTqsV[ Xl1p\z: -Z) -p8.G0D ]]O01xCr:A׬.@'=ޛSk!`s\]f@' >  0 A3t.tRr\l7qAPL'8. $AqA0n W 4&8.@br\X:آ EqAE qIMqAQd @ qAMe8.f j&x̸zs\ lpQXlq NzlQp\fnِ֛@g]L q\7rk{ l@z-V6d <3 _Z#Aepl*Ra?f0F<$#w_5^I6~&9=&E򟄃RW*-o\ ݒ*%AStG3Kajc p uoW6Z`( pÁ5v -`6&ߘ X%pH" -Ÿ+,ޝ`d-Rl>+v݇ӗ/?~Z1~ Mf7ʰ/jc9VS#k9d?|E=$KrOuX;?b[hii -W[Vj|1.2s\ͯOsw9ZU^+斈1|B]^+76UP r:Ry ?i]I١:)ztm 2?G*jMK-D[ݗp96Z9;Մe'1ʇiz9w ƾ~.xEϵy-˝·=#rmՏ=s8]ޔ^Y_OVo_#0}]W挿;̝yJ}ϼr=j4f)V]}FcՀ#d]ESuH#%X]*ɖcsq:ݔ3]M]%+sٙpkOw,]iehiEՖ3Py}5jnׯu)G7u˶; Uvû∋@U#s1}GmM{3x%0NجÈyWe>WoJN؉ԥCsK|i)]2Nmͪ;u;#R}d"27|z1%jz"Z_9e+;wu&&5w]97;RtwDv9B݆E(*:^frǂ̕| mވ;b;bǻ ^wkFYy -+#3Pq%QU^AOs4}<>˲swgG?TzuVt/ ٗp݈{zWqgawCw9=4 1rkoi(e<>5kå}FY|JCwPPuYn;fߍ>y}==I;X5x{=ݢbꗶ67FznMo -$q/dI0HE;BLd&VWr}4?T֚vۢV}7)N2ڟXcO$1&8ۋO aN1 edNXd/|>~R8~yl>os6ڞˆH Ɗ!r:ًANbJ2 z:rMX3n.Hz4bztV; /'T{3+ rQu(2攥CL'Ft91/D.ڠ35h $SŜ]Nl4[zʗTf):gd&q1"t9;"4Q dMU|Im+W -uSnQRt C3h -[<^ڣZ "7R+wu i.}l^2&=nI]Zl&m#*1˂"& -Slb[<W;m{[Ůps+%jU-6KL/&\I+QfZY#sZ؉v? fS收*Ӓ6il,y/|ϿN+8+QBnۙ ;ŴoaiheimFCǕj{N) ʢma#VJekȼo=|rF~R*PuNHQ:Kz[wm8l*ղȶdiBS]AFС:Sٶ,Kg$ ۃ`#J軇׋}2@BEJˉ/˜tomRnƞ.NNյ04lSVjlVi( -]@&Mnʖ%q`[Jj[ڶRѶi<oIȶpDMY|\HMMlYםgssg*j6Hy3v<]ԁKR$D&j#V ΁C nMhB#7+YFDr 1ۊ PmES!- -nk&TiN,"AiLrihcڋV@{1{oV^f? +x][8~_H|)$HaA!H }>c\!#1G=ݩb\8>+}_$=ĘO'5oL1;Y+ +Gw1 lBr& uҐB'c'qAP8P-H8C)J\ lH\ l q Cv%.CIG7 I\qכQd֛X 6YכADEuNS-8 M$ yכQXo£C17.ft]x^` VZ+ de+(F anC +܋*1k$1h3^`ZR+1l'CC>ɄaA뚣% ɮL1RV41500 }ks&l! |$O6"f-NAl$|cf9 nfkI"wfyGGm=d2;r+ @@!3%dӏO~鏀ѧ_~_~;GI7!7}<ӱB9嘕W~oz_qfwh=] t,c,?bvvtD \uH.neSO;z8Yjg7CH\8r~)=VMSq}^Y[}ȝy+ m>'%7]G5- !Xqڙpވ>SA=q˒L:ܦ(?je^S9nӗ<7P֏6,vwE3g7HfVV)$Eǘ3#yW#4Č(}y r廙_V=GUQ>]hG[}w?7EݻwwpkՅ:&pn&|Yr$;L}K0f2壖5Ӿ\ Zl)+{/~y/96p Őpނ=;v>݋_3Ed:ʻ n#pQ=#o__lܙp c7=W>rھʸs8oﴟ^B]ۏ{_/ +\Czֽٕs8nyG!e4; ~?] }sׇk\SW {S]y%3rY_c;>|G#O& {~}^ԧb;I글v?Kq]ퟗ83:FsUuw~+$~q\ޙpHU_߱eOaî3м>Z} +񅫶YZ/2yfr{Fs8}ه{"U+\}B./{X@ڙpH~.U"=bgO͸~x<f}w&.< {s4 Խ=G]! +B"~;w܈6M#g#}^ (}`_ݙphx@E&ֳ߫7ׄٳ5%.,eu\jٕכrx"hCWbe4uۼ31@wgaz_lgAׯbQ7#Zffv)o_kKHWgykQH=C#Vg~2~X_[ݗp݈ +=XuKZ +M;cv9bحc;.X忛i;+* +$}Hy}9<!3LJ!''ϿW}x:rSj}efi&7g.[qmqIN믟XN,TrL +W|7p\9n;A೧!wHN[ncB?T۔U~b~U`J?t!7QM9hS~- bgSղHUv!)+o|؄Odo$"U<׊!rz}+g=ۃ`#_Mq a+xV`˸)V1*V]*t 4֝k ^&J;KKQu2ˌJUJ!TI]NU&tfճ^o~ +ctDn*՞ +5UlYSifJF4ס1l9Ud17QMvrAHW(WDž[Q54i~ffT43CST~];jYFr_YZZ\:Y^:*!}&ݚLʚC*e1늺*Vڧr%bkbW67;]{kwWmb_Cq_dX2eبgRIUgV6@ +MhmZi| 2iƽ~9cI^>i~?NtCyu7:,=緺a6Lh~Һ:ZvՈԕAurkmĦBhZƭ/]+VGپiЖC56BX~:8Mg۔|fE('mS:dXFBq*LͲ~]as]쀹6i]dY$p-?敦=}2ٗګKei%> stream -x]Y$~_&yXc{ksl,j a~T`(Q5Ft2HE}H}UFR]o?\~%z械ZxC`71\_/o_/:jS V`yh|XA/b b۳"p9y11I`%a]vD$GF)As<gR6YEt4%Dxy !$dYi!)YMQbU"ċ@;Y%J"v99'2x*ŴUO6Ê$( d gYUFY#Ɣjhu[eŘDdK`dQ1H.I`b\\6NK -`dVi*]jrEdIX` dA ,Y ,Z$,[oA J ĵ)8 , %,\ 씰tܣk}0Xu)HX`i%aZ"%,:.V'+aZed$,. ale1)) p$$,p]D^\k< ynHXƙ a e(1B@+a[  U9Di!{Q)/?^?_LYJi -dLG1| Y)A7ncbiaMXpxP?Cv );l#0%oP䈘 _-:tJd}s lb~nR>,?:ΈQ `ҞB۾V2MCRJm">&K o+lِ0bܦ|Nk_2iG㯟~O?\+8Z7.ݭ2T^jV}-ukZ;Wy ϣ!y1F8GZ/R:5lv}1quY<$G)O:}^ָʾh5.& #wh{gaGfns/l10Mxo, - v1|eֽ3;)yi|N=5kcGOy:<DY@%-hyD:iHerF+s -"3Xֱt|,-ŲmY=oljcSqc{ڃ|-YUsǂY,b)Y:OgkYtۿ~v;Jb?{`20滸߁<Ǧ=r.s >X|Ns[ î)6[/ [;M%udy-Q -X&F7Z.kF^d61B2fǧߜ?X [1GГurC:6ͷ#AFh'pn1`^D`d'6lv4G扨u{k{tLⒾHkYq_%%Ҫq\kȅ='9Zsϵ]WyFNs(^X0V㺹UnSWؘݦKE_#2}" չCb،y=KkeUt};aFz`fN׿mC9R'c)j+A6zp*(gB.ve^j[2[lIiLם-:.>O[mcޖ6u6tgf]~ -{q3g\2ZKYo2}ݽڼodښ2"&oNGaSt+2]st|h<]ru=Xqh5rs8#I֥bXZu74W]F>.[޻Q1~`wjOoLkut*H۸KHӸm{l_dl!h]iGR%=~ G>bΦ] n>b&tFGk|#Dj 複KzE=K󮃵]=`QN8zZ20Eez m갅r͋BQm1=(ϣ>,cΤڴviiPC`hk4z8zg3J;4OOBu!|T ii%U️y *bRT ⦳'YPٴ{}OOgzt괬;n:wld'Ita\v텾5 `2V#Se۰-=e.*-R $;E]e?s^LP;L Uk<{d'!vTG-i~J$kXReww~aN d8B1YRgw^_unkhz#!9ݒ) - -dm9:Ogf^3&$<9i3[(}馹(|$bsfpgn-'v\>Yl9C\\C~շ Jyny5r 7.7{BnL9lZ:P1[}퍇6<"]z6z={h< GmX<NyKb{}RYlw/6[ܓ(dvpku;@FqH1F/na-5;S\Ĺ\Ͳa7m?^By.`U!aOI/iP*&+/)t&]wjWKշ+z.p}>,EAJԪiz7;8bLQ'KKb?q6 GhoqNB3mX f{2^-i*tQs'/;UDźd<UU&<".WJnM5i ;շ}B\'toTka2;s%fH˭@]r5g*RiTMCa6u ;*Q}ܒTikݘvA~(+hY԰A4kHP;|Юt\NhmvVI:8IQKmK'%'6T2FG cK: c%'&dMuCrTv9t|g\Ӌf]fx+d2:d1 0F_ ֎N Xdǽ]v)nXoXޛΣ,}_-~^Թq:Z2d-$uaDNo1 ݨ#\NClmf6i2?un^/mW6p4xv+kWTttpaq%06bANI~ǧR_삅ti 7˛n2 -V!ayy# O*rh+;SOrr-ޡޖek g,ZQFMZ-y66G4hd -ZSKq{L1|V=+K6ף% 9ѩQǒI^S(im߷ݼ AˆLըw%߅Y;k) j?%x5[L!p"R#os+gDZX*j9YW0ck}'\-+qHoS -0vC%YB2VgRЛQq>)?gq +x]]$}_Qφ װ6xa?LL,}aPHeTfVO{(ve>BW?h/9=cpϗ_.j^ῒbPOW\!$qٛoox.yL9_IS VPy?h|TAOhbΒ +f۪"p9yI31IP%a]v0D$GAF)QCs:IgR6YEt4)Dty +!$lYiIa)I[MQbU;Y%t%Q[TPZe;u:bO*IM+0I! +:[Yot8t ocJh54ZybLt%0$ +$01N.'Ivr%LʓJ4`\Q4tFKD`l.HL`5lq$. l ,֩%.[tpaqm +N kX.{uF ڵ. ,x:$.p]kSXdu8*J\FF ɤ$.p]wM 1h%.p]ik (Gxp`%.| ,wu'iդSxN>Q'qa˓!K\ L'̨F3jK\8L&]Q'SwAKF“J`Q'IK\2P x{ wVUa-6 @a+i2` +IU=,J,qAҴ)qA$0I8! +6c dB>Q&<{ DlqI\z6' - -$.@D0e[\E\8؂HQ0ٔsDW%]0SkQQ݄XK\Ԕ0%.O.I\3Nₘa dK: [dK\H:%.H  UfP`ZtN:3I\\(T+M0- ?`&9X$.Hr3I\l1H\lz3J\lA'qAVa0Y8tJI\uz8 0.i$.Va%0n ތd[V=7^/"YԇYp`&Qq&[{6o?] X#&]?|{^/ GпY>,S\ +IwX~WWʥ9-r/~*EF]~Y]򅭜';ܽ.s}^ʥ|~)e?r*TmCoZ1涘wκ4ʭT/Byn? K o!um[ӗv,C9˶`)>*{prRVص#{vޖھJ6ڋ ʁ߄ RgWո]|RmKZ +q".O* +K~N/J~* /}X\l)ϵL{}72߽j6{>2jN)wyҙQϔ<]ƚgknq5tck<#qvl6U=vվ|| F0V_}vr9(>uic nW+ԑ{ih7b}5=1G"s qGzOr_ _⑏h3*W,۹{Yw䞏`͝uO%}q@[%s~T@xhw-(Xw2SN6rU&v5Q[21 L7DO?})F5\ֲtb2q֐c.K=%qDc3VxB(KH(ў>L٣Ϥ4|X DLy`x}]-PL*>cag;ΖmOz QnQn7p5y FYrc/+:@ m%JOD[ 9 :Z-Z콅6ЧCLUCed!=U%0?)];[ sY{bȡ0tnq浏FF]MWʚuXPک`ݯu*vM溴NjK99ٖl]ZɄ;N!\'Ap7=7$UH%2"u쭚!tpnU6[[ioԵZ8z6{k um}ai?2[/nk[VXq,tXl450囓=BCǡɆ8=Xl1Yxq,K#c9y:,]^3Q_5~ Jɱoy3cdČ0ۼ(Ʉ\4F3[/hh}Ȱq< +]<aH^ Ft'<~t#Ga=ɱ#Sg"[>{C\`H{`blϯUŝu_[E6Fw[m6=5r)½5Ϻ\7#Q}.ϓ\qrgQG<^f;/{7mg+;3OݶQtQPv2ϓMz|^v*UOυeSuĬ ^+iHhwõ}d6ia/czS}?TGjňLY%Csyqx22g٪e8Zy~%nHWBL" ѕ={kU[slo.1)5rsy `?[cÇ8z% o|uчT捛y'ύZdp=*i_Cˉޗ~{O(ǷGx{=/,;NKs9]N;P{*-|&?Tۋ#1 qTHƈZLwVlwm$vG!\!oIut)EJ' * <3U&%)kKxSf塱<]it _:)!=nK<21y<"Fknkbƕ\}Jmz* ݷr84|z\ӍV.|F1A?Jب6ʘRNoE\Gkc'2iƽ]~)ӜНFje"_wcvǍjla|&I'2U؆ hui}ECǍa|zvՉԍAur>dbӠke;|k {~qtGe\oS>%_Yx}JP< +sle&W\O;b,GuO*+`I[ vWWF{x}s/&:HڨI߸5d-a[7{eس-Cn1ʤg[x^UuhtVb6%[uKiq[LѥW=IKEK@9֩ŒII]Oil[[]g+k놄oR3vKT_ ѩN:Zc87DyJ;"uׄ*jEل7(U|QΖؤ lu^)^aI iH_g)M=@QiR>).;B endstream endobj 567 0 obj @@ -6815,7 +6821,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 356.373057 101.433071 337.623057 ] +/Rect [ 101.433071 597.273057 101.433071 578.523057 ] /BS << /W 0 >> @@ -6825,22 +6831,23 @@ endobj 569 0 obj << /Filter /FlateDecode -/Length 4714 +/Length 4809 >> stream -x]ێ}gI@^ <̶wlZ6NQg-btZʐ{iUJ*bT -u)[S 6s&˩`:03xEsU+é`3*%aR:"!8V…#)9p(8]98-6J,l`9-H:آ'NaFDF` XlN*NIau:|봴"$VNri⤍Xl1t K>f4Ith -|-;0D%Dm8Ё &p,C{h@G+ -:8" [q-#Ұ 8. -5@ 52* |krfJ K  (E KN 9. .Y9. .8. .%9.0]"du(HwIIqbi Ы8t+B 9.0]w$ xW[7swF; 7X- X 0C&4 ,xWEL̘[ wU@(G3,s DEX.3p\Q535*% r\8oBI@E!cX.hIs\YX&au^HC9.p]Lޕޕn-4kðe4U!5ӁwBs:>r\i$Ё(k \0"z8.pQB9kqXP- XH1p\5l!9.e -7<- >0"`21xCr:EkVST8.ZJ z @"K G؂q"4dİ0˚&d?x{ߧφHYQpn [ɡfɓ@c-/;?L, S>bV -Kh9`:@%GmPԉ9L @@ec>K,wO_}?FO×+xmkҸ˟_\u%}*u_K]Z|Jƌ.IbG?7_z.N_I]\J~O{7}އmY^$:-|rW6]5M9Cwj t5O>uCe-\H<'QbKՍyVVZN#r z~_@!UKWu6g>@R}]n:܀1 M~.TeܔO>qj϶}`n\Q\݃WR`"9o;w^FwF{nv[h39\l -V]`u½g8t/uҽ^sG5 cP_r7L֥pMtdSm.t,tr6kcKxF{髻]qd-_CM9Lz2b:پ0G^1OY*TIܤߧV5os8_lٯg9#H 5{#O{nx oAVp͑jIV5?#qN?=t܈As)Py3 *_ۯ - .GĩyOzДRnNSw^g(ҺPy('dbK)Ivg(6`=̺IRYya٪aggDڑ9$I 9#*Se:0Ru=4tǓFOzA*~9d #6F$?RQ9a]^>%Y!ǏN66Most9 g\+f\^ -5)Ax)e!6m-f\+΅tj[i:WT9Mw^Nz +MgrjYd攥CL'Ft91e.ڠ3tU2LIs:Ft9l)_R5斯TS( Ȇ6>+ތITR侖 /'kH◓Lj[B VHMEdKfWEgLT:C^J,i#rWXp-iR̶d'-KMM5ry -yLŪ)\ -e6U-P~ U=WTw[ʭbW*X-60^r%UejeRJ/8N7 f0i:#ηm,u|O@lY;l+STmK۶WJ#ڶW,m*7x[ξޝ)/ks))uiy=7a!zfoع\3DBTGb6ʓsLNpbބ&4rw۱yD$JښI^늦V>[-L(ҜEHBҧ12t {ƞ&翄 +x]M丑ȳ6| 0|a,0}?R"B셻P] +! +?iIO1|IM)+%VE~;kEar:?e SH~==WYg3v~*S!('TJ[Aq^Py=)I*ڪ̠dLTfX +nU fIR \TZmu0DY#贛<%ѓ$QH:k'H;-wQlqIiI`DJ1H:[Jtx' [(`JKd'"KЩVg\VI:'lZQAAK8#ΆjjI`1DlK `181P^UL(p/V 7Ĥ2z1keJĴ" ''CCd´ Dmыٝbs~; o{zUɔ&W&ao[_j`%r>hzګ_z9~/Z/upN5E\i?+h! ,}Ǫ_^ ZaCQ]>BW^p0 0|y ͙e\c47`G\6nX5e^FW&cIeV}체Qυ[VO9bŖJN^>2,_<*{=l4~Ef#K,kYl,ζrw0ֱ:!SF=#kݷ>U=`!lAA[:VPu=yͣa|̨OJy~)<REH v\u/[=ۻnrYO]&ڶs/5y Zޗu,fJ*cu7⯯bHs;Z[!r$3G{M'Vίv9,̤H=Vz#vh""ibL}{)DJ+:1Ϊ;mԒ:3&2ٽu FA[=-|f X(AoC pDتړpAj}ˬև1*|t~h;phxdˍ2;_mi2Ȳocwߞ8X{ +ֿ:Búc=觱 Υ;r<rX2IA.X3g9E5"JF>h_,~o3InxIk֥m~;spH> cexD# 7v8qX#:r,_vew;#=X[/{$śQqy84_q߻W:G:rv +SrϘz͝Vyf4{/6e;<܍8#Ͻ%Su҅-_$dqpH~_DG +5@lbaE}Ƿ^b{áƽh NqSs #GB8U6ߊ[ѦeЏl2twJ︯`C +W3< !c.u@REkA&_;-_9,FU4-@:TAr asn#?a5&7ޑ=Xz=vm#F^Myպd |_.W]3B5{YߠcAMR;oqVl<5wp5fV$ϐT=?](3/p(͸ٚi\ 08.7'e.>V|=Ƶ~vsM!GvƶDžK-.Gz86WJ\v[w4"Yރu 7؝~ <Ψzc[<63KLnq޻TJj43[P/qE~cu7r~W~vK +MomF^.v+rLy$Fb'K>?8$ʏ~&}=S Mӵk-lgО;u}k|)㋴zFVvt,kWyāQsbuv]le9\w_UjTwmR1/]>:[^XoC򃣷4ҖjG{vޗC>g`[~Wd|.xNsܿiǨU0v_yAfkfLu++"KKߟ6U?S/vmpz ݾ>]eW|>5R(x +Թ&W}fFT{;Kw"/}WUSfviSz_d?a)w6~ƪY By =ԣ/kי]#j:9+>^+gz9bo#fkjౖ8=sՏUlx3λw oEZ?,O ;mSbl"76+g d~͍gl)dX)+e +Zf?CMa7SLDg4f!6reY+h_gE!iQa3l?|y.OWޜ=My +霟%]IN򲠟[A*R ?Nz~;X\'D$k|Y8zůD=H!jmn1o] SKZWcGjor}Wg𒪅ly +|bA^oŹjҋ8/'Nv9 7*&t[bbC\绰]ײ&&pZ;J_Ei~KGmzר&̨ԤlBm$Si`6=Y+K rKkThb)66 <06G?icPl6PuPB -kx(f'EgpM| ޏIlⵓ7!B/ܥChQ 3c+)sT$c- uM)q%jNŮAu%v6Uz2]k}W.mu~t0_(Џ$]lT[ɘRNE\gkcTcdҊ{9T9cIoQ>8:nTc Ӹu%+Y~oY<(16m.ֱu m75{-B}ĦAh</[ ޱ |hkp_cپ$Y8E-VQn H~l?\쀅ve7]eB`xäI軧׻}1ڛK[Dz,ЯۚcN֖es϶ OZcIcpTeօdZj-QRh1E{QiNt|Tlnx-Z-rΡN-MJi}ڞY7{dz5)y3w:CA*UJ&D,Ԥ5UE!_(ț\ϕl3"5WτZt~l+鶂5U+WKJ :ͩM&ʱ\- vV17+**}R~Qye endstream endobj 570 0 obj @@ -6857,25 +6864,24 @@ endobj 571 0 obj << /Filter /FlateDecode -/Length 4976 +/Length 4937 >> stream -x]Y$m~_Q6z`@’a衧w[k`}i 4z`|d\Y%t~ju_"Kp}'W׿H,gbT^`e%F -zAsXGgܞ!K,I+A 뢶{V&j' > -, 6J<Fi(=H<"/x.!:K' JK<YvNI<2B6$VC*%,D' :_B ApIqd\P&Ņ%JgVAVC+ Nk HX`-d1JX`"a:xX.TX MIX`0,aZ`%,@]냑vKA ܵN+ pZy,aq:Y pj%,p] ##azu `+IIIX&)'a 1h%,p]swWF5 `( Gpp`%,X PbHX: ch蔃OEGh\Cx.wI`j$,]m%pW$,] ^âHXhyyQ9% $pio" -#3hƙ⒁[Eq@|i$.@L,SW VJ\6P_cn _ -0"52cX8D}18R~4!00}k4!L EB!!bBjb]t#!ua#9'ё@k4P~ Q)aR!9D~8]#"|,PwJ<.c -sӯ&Fp/v8"Wl15cBlOvmeҥpLȔpQ`O*AfC0rZX#14O_?/.+i_~vנDC|=4Ϲ{":QoW䧼f+Wj[>Q -Tkn+i N{/C^~bSt~kdeTQp0;vy.s>2*<ܶ&3-3LP|Mix{:o'ώvaiCB6E9z#Oy6c閨q y=e^}ۖ6Y61B2& LV=6$5>2oXh-p{{.Y;GWǦm.[8n }ED#hCWT4oQWWg1!3徴;zMK|LNcWVn281žNczK-}Q\39֬mU#hy2ǃ6UӡYYjLuj¦MV,FhmSUo(G/'XZ}9]ﮖHjqF0o.ԾF*QcEWc-ɿRY6J7ڑ>SWvvzdC1X->]Y璷W[`}Mֱ&M:3Ίn<'=˖mKIPOUmL7-_YO'/ŰPon쁵dX2߰~qDx</ o.u*o#Mf>W챥0k~C?JT/W/HNG19Wŭz[-t d;q<ZĀwy[$yჺhvizxvTaszQ7K46/>! -%{t"(Q{}XGI'L9j|744O9fd;Zhw[lh~Au! ei%QB۶s:鞈It+{N'x}E4k:CTi7@[;OJVĹ bPa\NDW/ I-_4-iwZam|RݡRFf믷l9qdg`q{{}O;U&('9l3lnL9lZ:muҗONln8-tQ{"Ny:>yO#ɦD.;-7`x0E|!9_E7s)£^u -=nPlc'ƩѬn/ۼZup򐟞VnLZ;>P͗{:Fz.Yk<ĵqNkV׃Y~1]7-ksv.gԲ0%Oha>[fc+̿a|g<&uӁuszӴɏm~ݯ:ǜ6Ã6G#;Oy:k;)^}e~c2ǯ;#X}T]*?gtVyg>ml<5:bF͂@ :syZęX#Wܖۭ߰^[?٬0ǍX\K"iwػE[ u-]"kU{3!G\7چxz$wLm_qKW(^tmBrwC'CmzRcܲi; - -jK֫?ȱ6׫4t&]7rׅS7+z(Pn}8{.ӥ\U(^ -90z۳΍ wDU/~?^qsJۘ%Z*_?ZC}For%=Tk9ޓjѕLoNOBW,:qxQxbD'*V Ů0]t:ͺ5ujL}VTӮQfPS}K;~HjE;tf^ tH1]-=UYseM]]4l(>ntJn̎zA~(+ǞhY԰A -C]q -S yIӨf'o顣4]itfI t{ꮱ cnHuؒuN&kXɉ wS~ߐUzeA3sA;99.o/|#f2~j QۍqPFkG'Bq 2^r)nXodEͣ,}o-~^~q:Z2d$ɠaDN#o1 Ȯ#\NClmfubdo^mkf64xv++Ottpa #06bAJI~ǻR]쁅h 7ˋn -!`yy# W{9@ΩaD'Smy slJP/˲g{3-(&RhJpj^bl28Z=ԿpM{+]JإrђGHc$ݩnmnʚ aDjd¿5ϴ j?e%D`8j5|J!C?ĖFsV_ik%&tUQwy"3XQ{lYMzLRЀ9[ *_R˂P4Un&ʉ0:e|R~]K +x][q~_Vxր <ٱX!?_EJ= LcUI-wEC)x~|QCp +rAV]08|tןX`3_/;l_u )y?b VP97`T^8Ŕ$p -UfPNR 2& +3,m3L$`N.*`6J:t %у$QH:kH;-wQlqIiI`DJ1H:[JtNt]Q啖t.E"QS1ĥ(7htZش+ +䃠3+DlqVIga Gҁ' 1 +jI`1DlK `D `/H\# )/qO +:|8ve:B$.c=$k #-p-%. 1I\G ơSJ₤#MC`]r%.HV!D'd=ǛADEuNS-8 &IybI\x3J\7&/jE1Q֋>Z-"๵‹-k3B/N!=Z^_.{_h XOǿ7חdBJe~_/K>O[9+hyn*Om\8`-<`EbtzzðШk (|Zti>@VIsفuLO&ʭrw +ΏTeƱ:5]M:+{tH TQ&>ز} +sm8een}rԭ86FjV])nMy]6_m(7ةX]nc +Vlϩl}[aն8?j>׶Z+64d``s!G|I<#"}j4;=R*u*R̈́ D1zVP[WO7& ڔ)cck3uns[fX6q,s:,&f^=:&Ԕ17X}е#;6ZO`n]+ oXvO:òvܛ2#x/d?7[5cF}b~/ ӵ׹7ڍQשּׂe O.߃,YmcXax;n=G.lzxud/s976|.x\ p+úg8]uN@Yv @ڍ7܏E+u;ʍ75e_u&֬حnj&Ĩ(;V$(NHLVye0+#2`2l2[}糖!6.gκdVisߎTkH%F:gC*M>.k;Zr&׬22v+vn{ۗ]nl˼c}6ctEi5 b!H292iC(;v-H 3[WP8~̠yF6 +9 +ufZ#R`IHODʵ,jR;*u[g<)\SZ``!oLJgc{53V>KG#m۟#?ѝWZD:gC+"]D^m-kblӚ7:̂O[= 飑ܚnTwGcGo<*fik1:C-i-]кV9ޅ?AHsEhCey׋z|s,ץmG>n]+֠t&9@VY<3ݠ=qWZlZ.}iO;'ڟrYAmooXӡv'QaU=qot{,ݝ^b=}H/ٹ"ꟸvw=xݨz}em;1*J ~ W~w3=bhi{L6Z&wy aOU2Zڝpr3߅Z:Gh[wPJZ.V;ʋEڻB|y鐷szfWݵ#jhxx-[#:m WQ[Ap_8hK>Vtɟ~_:Vt񰞝fcʧ˷j;/3v1#zȃuNƯ}>f:gCUڹk;͸vD`!ekW|;eoH^]{-F\MNum]9)'mM/u^uNHf{r~/GfGPN߷:XtHɆ=gTM򉙷__֬"ッ9m߽jC\a[duYg^u6$1+;r)C,aSJ֪~הr-:ry+Sp9> @@ -6904,31 +6910,20 @@ endobj 574 0 obj << /Filter /FlateDecode -/Length 4803 +/Length 4841 >> stream -x]ێ}VxAbr,FvzwN9DD.3fUK<<,آ -|!_0r!zg._bv_۫VF$~*/]/v  0 A3t.tRr\l7qAPL'8. $֙`ܐ\E 0LS:ۖ,~2m ! [Pi9. -7$78tBp\ezS 0.z3p\zKK,]~}0|B/$J߀d#~1ۀLZ=Lp-qZgW=j9a,G)o ٩̩*OuߦHY]uMg,BGPf=o9k2ll$߮~{9Pb\a~[Dz[ Ha))暺<ϛѸI=]I;uJ]uRF}˰ӵL9嚖wwޫlkboǕ{6;0LQ{qx0ـ& -"#s q橵z;|ђGtUt*dT4TH 'o -vݏNvg#1]ڰ:]̦1)7s:ԙMSCH鉞S7?8|#x]3ipK=*iӕ{Ps{LaQ Xӡw!QZㄢA97՞;ZtU)TB;m#X!tǿV\Pn^iHQuzWι=^ z|񌣍G9zնO&zo{>5D-}dGy۾/W+wWVJB> RB9Bl 4&Qg3Y8>k=MQ.1z,k]{\I 49NdrXn}[I0m\5rXA1փyNc1JcRDg=ͦu_[}1b;_%'as:G+wFYG_ѧ϶yc C1;磋;=l5;{R^ ->nK|: -==t=+_HݪC{_Ԟt}2mct@?Oi< 5զG~SCUO;~`(9BQJO,+Jw

    s:kx&u׾#cжӞ+m<D>=l(vv|]"Y~%[/ck}VS8yk;UIOz;3{ N{0鐸}+s"1Tt~^%"G+NGCl[{;lĽ7P<w9wݷ{?1s^YݐY0-W&=ey[ߪ^?m^=A -=o`ӡsgўlh2fzoN߻fm%7}n_`!DRO"y2s0ѫyNXWZyw6|ӃyNН,jf; FM}zE~4!BO|_/e=Nfz~C`!r|2dOGEZ߃$zud=>_z_t;1O;]󣭷(:CysWL|O]wsS~u7:좹#}i VC -mڽxee)q:<鷤_ד]v쩶qJ_5 m75/kebٻoEk>)mDtI"ӛ]]&U;(?- r:-ϯZwS0soQ:>y)z$;|zy5nE ub`OoH~mܪo9A3mJPMڼQ}nOmcۧ 3UmF?$#4~>rvؓ˰lE}q -O+. R @v56t ++9!Tӹ" $Ssq1UFZ>MdqP墉_. ?È8 edEvاԶcP売nR~[(t>]`"Kq{1IA \5źb3@CӶ[]ԂR(HuMLGssjӹ&ӦKZIwn oT{ +MJ*QeԖCL'Ft0/D)ڠ3Z:f$SŒ.l4[{Te) :Ԇgd72t+#BsK=PZ.ԑ/ԶqzTIUDK' "K'GU'B*ӮZ%ilV񼑨U1\ H[Z\Y^2&}"ݚLJ},%1ˊ*NVڧr%bkb[27;m{Iw[mbW}qdr '6ӋC]a &n4eVv>A͸/ySڪNt ?H[b(Gڌ-T֙d;s@^T1*BH {!i -f_U; +x][,~_1wt@08`8!sap򐿟-Z]=;eLWR]$hYKSJ9wpZ8yCH`71_No_Nu}6Shwrv)FUJi+b4>'bΒ +f۪"p9yI31IP%a]v0D$GAF)QCs:IgR6YEt4)Dty +!$lYiIa)I[MQbU;Y%t%Q[TPZe;u:bO*IM+УH! +:[Yot8I:1%VY-Q'q˓!K\ L'F#jK\8L&]Q'SwAKF“J`Q'IK\2P x{ wVUa-6 @n+i2` +IU-,J,qAҰ)qA$0I8! +6c dB>Q&\{ DlqI\z6' - -$.@D0e[E8؂HQ0ٔsD0W%]0SkQQ݄XK\Ԕ%.O.I\3Nₘa dK: [dK\H:%.H  YfP`\tN<3I\\(T3M0- >4`&9X$.Ht3I\l1H\l|3J\lA'qAVa0Y8tJI\u|8 /i$.Va)o 4ߌd[Z}%"<N_ßϧo_}.uXri=Qj~DF}4ί硌AyÐ2CaײZ(^g?.Ne[͠9%Xs75M,OKY",] 2ti_j"- bT݃y \'ߛ!5=ԺþO. $ڻFz&=s逬V"G$|e\ӓñ;e)WY%C={=}[3 4mP߇_lE#/48ͭY<ckX}=:"|й\9ȭAy,9-Q½Xk2 P{bdwy4G!v^_uR4~iJoصa+qa> qwij<boij{:OA<nĩ<+̔.N'=H<&=8:ѐl߶D{0NocxgO3j c/3<1YKCN]l9̊*NE-;'Spl<!TO?1k*Z 2W bT&]rRy8^ks ~#~̽=&7n5؃y zZy2gu:!Š ]q: jBYT qVl>y$45X=|=~k\QZ&GjsWGQq! iwVx zAy8$_q0 =d{l{\XԲ;cu!Fmw>Kvw42X=0}cwiL/~ <Ψz[<2%{{ɛ3ۑQhg$L4P/qD)׳gc5}_Ϸp,ϣX,vmOtԑ&v[WrFE5j Bh[\VTZ⯿7#[ӵEԽaOzbzwF/_eSu~Zgz8.v:,ݥP{!'o̺l~UhM,\fd谘-NʖNlZl/Tv.Oږ,}ٖS쯾 ^AۡؽU_ۂaɛnT9|3W 8ͯU_iJlcx$?[IGG닶foSZDD/[j s#Vä2W3TX/R%BVnN!Ô=L/mᗽ!SMt>T[7r p/.D>ovX~wɠ%r>/p19))=Ā=U@cm@e:yjң_^)ΚCydָ/uGЛ 3h 0~ }!fuxhkn=@A[v^Ir)k{p`GuqyZH^qu=qH?,[fק=O?~do:b>x0σ5љkK1QOV*<@XlYo\}$~1<RU>پ?~kgI|HjOZz`vl> endobj 576 0 obj << -/Filter /FlateDecode -/Length 4718 ->> -stream -x][q~_V&Y>8A L`6:/J-uX݃nUR$?~,Ԕ*N!~xQCp --jet]`!$g_e_\{G_͐7]UCPNP%&Aq^Py=)I*5v -0æ$̰DAa٠iJ0m%AF)QCdvG{Igc2It0hj%].J: [\RZ9ⴵJK1H:[ȓu@.I.+:آҒ.RV%T q3 .)IMuQ$-^$`#e$<((VóiI`1:؂xآ(3h`^80dD&` I4`OAR:%" [-3WJV2 $. -ƒ@*i |kf* K[  (% KN $. .9o$. .%. .Y$.]"u8$qVA 42`TK\ &F%qkQAwCk2XK\ %z]P=t$.@a["qO`A%.p]1|. :Džy^IBE8.3J\ xWVjI&) x~p4 Z. *(qX$. d<(x.$q*G$q* GF5a -s BҁwK:R!I\lJ\ L>!%.IAON₠ p,Q[l(qA0 AxCl\-%. 1Y+qAp1ft-"t:H\k "& % `tJ\lTK !*81p#w_-m$c/X|/r?Y7iLx\ζ-a#BjFjtc#cMEMl3[fgb1VE[Kk# a3Dcf@׀/05/嗿v_qF)h b:*{ßlgwQO7}= -;4LW$Dz\X]N?oO&&ZZedz> WӼ5;8~ -c|\l]8ڠͪk!HˮɽmSQ\ۨ^|45iA(]jV]n/e(:$zRW.6A{]_}۫[y\lq-U+:W >H2eTzm81p;y4S> Z;P2LCP R5R—F2 ?wo2;h73.d_NS7fҗw+]!2NiR9 RAJAۍΒ -sv̸dH̘mYQ`ێ53wD(.g!+۴`ڎq66Zc(T4cyΆV^A_# -RoQ`䌑1 pYZ(gԼZŦ#uIxRZky:{?c9ӷPkuK2a`ӡf=Ϲf4,U9J^e>=TOp+#{[ثwxGϽu˝Η#3rm͏;s:>>Y_ovdo73z/]7Py0Py|rKiVOO7|F̀gdG4a,<̭IO/$4lו#n4״/crdK|1r͞zviu,wjca:rluwK6s0uYSfoU]Dxm2{k.@ʟF7u_7ߛ-Py$>\Q*ٴ;]|.VՃyN}"2 Nan(רhΩxdO=ty*niOj5beMuN+O'w;"-E7D>\|Y>"=Q۰Xo$fz{yΆ޸T}NBm> ߣDҽmX|~.nW2bǃyNTS[?k@q >%s;~흻+u|ߏyj] 4Az;O})R~==P.ܼg5.zYyΆĴ7$E9"mo0۶5J!#4=c=t=c}wyhl}Zv+OaOV9jwK3V7įQ9ZkDYg_wOforl燒-S>.j9j ۔7Jvpo?Eo(h8M`-+v>'7O]AW 陲r&Or.K}z뾶gF!mAnжNs;_|zgGrVSu>i^8hïz;u!]d2L:wn/C>9c113j7TGS._b=(fUղ. b CZ$7k3WQ|J6>˪ɰcł9^jГa|5`VӶ[]& Zb3k&]/iMvAR~sF)QUFQJ]IYqD N-QGa,@5]*"JsuBM[TzҠNv }4I#׹ccb.֙Ԯqrzr8& SfHJym+v*YN徲z@vݥCKG%gҭkͤ]uyLRN[0_٥K%MlT]ZeRhFY\fke'~EX&.eU=i~;Le"o_{rUTn%"Ӧ~ҺmU#RWU ]Nl*tgmыՑֱi xIq|Z,d_E\Ʀ$_"qIے5]F\ⲫ05ff2 Jj׳ -⺺΍Kj:ۖپ"˭/4G0> `i*}掠a,'K)_e]s(Z&oZusӦFs-h'-۔"UZJ"%bn-b/S4_vNtUZ.x[ΡN՗ԶTd^ffoj*SQ *r$D,V2ɪ˯ -6v܏#"%Vפ9JF&C]Qͻr&=B(9B2VߦJF~ \P&Oi>js -endstream -endobj -577 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 576 0 R -/Resources 4 0 R -/Annots [ 578 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -578 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 270.123057 101.433071 251.373057 ] /BS << /W 0 >> /Dest (cb68-1) >> endobj +577 0 obj +<< +/Filter /FlateDecode +/Length 4725 +>> +stream +x][,~_Qφu `16xYbOʹc?e.UigÞNUF)}Tfw +R"]o?_~HĿ!`PW% s/|ڻum˟u4j^SR>x/-PIe{mrJcT0z4WyA1XN3H0䕙"^*ZϨJK`$2)+q: QGVS^s:ctQ8lt[lYbtLduEo8-]-@W`uE:8]4@"t20ii HNauQ$-N`5Rs:[GA"{AQG:A:DAt\ӊ##a%1Q0rYl18.0 M%%|KR9 fJ GP.9.0\t1=kЮ8.0]CJr\@]c0* kxHs\^X:qwuqw4xW[7swjҎE$ wA!w` iq +n "?fL +q\`*X]ʣřqVʹqb2X.3p\Q5 fjNU:J ,x~p +߄.B8.]ВL c!r\#+18$=9._-3 ++zӁwM&'@/Xs\E \>V-^B`AY' Xhbkbkx"*x.` ~w_`<;ÅY-q*eyvXn֍~35ݪRW~OF:N7Sv!CtW|!C7E3EtW3.N t=+ȮE 4r]hHYBnA8&ӥXա*&#/3ܼMhޜ'6N#K/ qs::.B4ݗ!7s_=uđ icyب N5 )jd\~7Htgn4W6]R!R$9ޙ?ApsAȠF1ΟYun[cѺI*w9;CVnYgYLݻ+#wg7CHC28s~=Mcqh,|ߟצ-{~lȝx+mDmPۊ8s:oO)Hrr} M?Q0|z:cGM<}se(sZ;qwGW|ۺurڴ/:҂F[2'<Ꮌa㫽ڼ__֣}ա>vw\$Vy>sp>)mV ȝyNᱞM>ϣ+yΆ*k;{fQ} 3鐲q+~3xav/jO\vMWW^K*+&wX`ێ+'9^Vkޙth>p ͐pto܁=C|O"#kfHR{9R7aI1f<";w9"ݾ;Yڍ|GZۧ. h_]9}$?S/׹w9R7|w̭hNvݗYpn霾 +q;><'s; a}v5\Nfa=tW}A>#=gݙt;OsG"U+\}B.o{X@OڙtH~.)'O͸1~xm=L\@ob3{ BOݫQsT+尌6PQo~p k8f6~lyΆҸrOvwN0>𘀭g s:;; خ{>O=k`w9Z70d=PTrW3S{oGmW?5醽}D(u3tb |m;9ꮟBdw9#OHw|$x^r+;=E!d%?59-R]}"h>\7ׂxN mryHf _>_qM=݈CDpcJѧw$ovUJ݃I Pc󻱙).#5Q* Jw RZw erB&t+OIvg(6`9̺헋IEWG"RARа꺐sx}/%Fe^^urs0e/*H퟈S9UvIo%FLAwp)KYr"}JcRlR~̉^{Ō9KFqzpf#SK=Z7z&],XoԶrz4q/Un̲*l&~(*J→G46xH!i.}l^*H&}"ݒD4Y#1HT +8QXn•Pf#P]巉iPseN5p*v;Z/= Yx&6 !WRZٮVa *46h-4<~Y7. Ӝ6VGpFw^ i^2EmiJiDMxK8@g'kKFEJ5ɲy4;϶4g*k6;K=2vy* S1QFkLNpBB9g=V2XI[C1+m7(ⶢ)m|,-J5 +4'g #BЧ+e KņgId?q +endstream +endobj +578 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 577 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 579 0 obj << /Filter /FlateDecode -/Length 4921 +/Length 4962 >> stream -x][亍~_QAlv䡧f:O}ؿeKe j4zLBQ'U)~tQS -JEa_rq:?)fob]pɋ]uL9_S V`y?h|XAOb b۲"p9y11I`%a]vD$GF)As<gR6YEt4)Dxy -!$dYi!)YMQbU"ċ@;Y%J"v99'2x*Ŵ'UO6Ê$( d gYUFY#Ɣjhu[eŘDdK`dQ1H4.I`b\6NK -'`d?Vi*]jrEdIX` dA ,Y ,Z$,[oA J ĵ)8 , %,\ 씰tܣk}0Xu)HX`i%aZ"%,:NV'+aZed$,N ale2)) p$$,p]8a Z px Aڹ+#ag0 Do ;Y`X dHX:c4j) H&p5*(B80͆S$"!VкH1g%Viӏ_׿O?J!nקPal(JKrԭe[K9kNy]UMz392*mٰeTe6k=E&sdLg?OQ}v|ʷ?|skqPLM ̌CS{:LM7ns"Ӎ[YwS}-L7.A'L3+S*1ݣzl] Қ33#ֶ 1CǡI8=Xۺ+mھOy:vwy܌iC/zֹQ`36 %7ϛ\#AkS8v<'_Ly:k뎡иVղ<\YhUa߸~kz~ -0VӟxBڳT/{γY]q\;cy_vn?7k;c.7[:Ogj~V8z{guo+r!U,ԶϾt_]Y?ĕ5FJ&mv~@dă$@re}n5wsN&m] :Oy63k> -M/j3Ճ殃=? qg;/zYA&"6vmw=}O$=WM=l=:Y, scH^ MOy: =ȯ̲FeBX9:;Yz4X:fv1ffDWqx\ktMb?jjZ7e>`{qd);Yrm".qY>:>!w?<׶>3L2^1Id9k|/S)spJ+ _\UN2a&r-Ho7ʹ=eN. m3ܓN1P},6>ҽ -A6:((gBڞn[gͭ"_F7RĤDxNǖbʁ{Nvӧ24tZVA& y:tT?YI}){ا^楺դCSfAh==iYݠf=yޖդ2)g:g9es혓ur2o9fU(i-y떐˒^@j|>gOfo꬟~d'.vg,Eđ?3_i%=p[ٽ#҇Fa#k=W5ŵwVp0w=`dg[}=x([6m)l/pT]qY:͢xmIAҚ90oxX& lBЏh(bWͲ_?Sk=e5kŒ]_O&^g5ݴ0Kiseojkg ̋Y1lK(Vrr -i҆D'5|2NiES|!O#C4Oe&U!#D#B[d".Uk νh7dXZ>&Vsl9ipX f[2^Mz!w".WBF :^7+UDźdE&_/e3 o^/}qQ -Ld4$۲aDwNqc^^]u`%uCPݸ452;۠| {uptWFRlߒI\QѾ (.YK wTO;>b̍KyoJ+`E[~vwWB?yC]DmިoFx2Ֆ˰l{-7jmYlsr讅[]peԫ-+MJؔv׼% 9ѩ^I^Q]/i+m۷[]w+낄^oJ>ΐuJ՟ ѩh-RG_]bw׹+fDj阜*jFY7015UQ8)@HuSLP, v)To&R,'=VوP +x][q~_Vx@ &D]N#鬝| KEIG%%-N)I[  3wL-$%qop qI+@WԥI%.p]В"Dԅ @'?T$.]嬕wuF#q0l1 guRL!J%xW$.]6%.&J\'xFiJ!x |Ru~µ ((K +$q)%.Xc$.e4o1<-l(qlH<1ft-"t:H\MA/q~bwI& B-*`*g.4l-q<]贖 oPh"L$. XM-Hq%.'v%.0A u4!qm'qsDl$.p%.e$.69 $[I\M4R$o(qA +&BStm QC%QG5n.uة':n(؝:_u>-}@4ߚuh/뻁{w(Kv>@<_mv Y瞧G-` d^h _uyrڂr_y:J݃^XU]m Bu=Q/;O4o711Ok=uO^,Yv[FkE;1;78m[6!;۷f#Vo0嗴VWԓeTj7:za+?۹Ww6K5/4DKvi#ۍ8mZx3o[NҞ>͞,ۡڽp{7lM]qPV_ [&Vw֘{e{( fȘ*i^;)Λ/:tnCmv=mS1; B)s[.긐ۊy~T}*nM{I_Crl׽6jf=ok[FxrT'Ǟmʶ+X/e+w9S~< +?ѡpސ`(ѡ =˝Vo (@bُ%B(7żhQngR/ע-Ha!ͷsS򙺴/ʜiQ'Qv.ϓ-lA^b\v!f[q+u%_> vâS__N#M Ww^וTwH=鐚vPB.GvЩ-grͰ⮡݀ b\/QQFֲ%2͒'yG[}lCWZ"y2ϳ!]8=PYPg Ku4u] wP|? 3bQx.ӡ(F8[1%'"kɞKnw2^A5 j3"}o'):!}>wC=9>}0Lvzha;_92C a?jG3D>y:4duOBT|,;{+d]Y+^ᯞlȌ'ڟ?7|6jQ~:?{vsy >aݽwFSWV}Ho?ػ?zzrߨz'^QQw72wP~AƀPe '(ǧGzw|dýOsRrNQ{.ӡOU2ZU% +WW> )ʱ㞽T[=1 8vHz/Oy6䥃}q =gnaW /C%~<O?SA#떫~M m6 }`>|<}e(9zV4ukg#y}ͣv;/|,`KޚZE\ \Rh| GSC_8m^uUX&9Qy%i{0UQZB|WxK,#a#My)?/yQ+ۨ8׈_9-pZvD|܁_^W;{Va~헋'=|گr 8 ȧDZҥtnX}3/5 +Zc6s7K_r|щ&n|B>]eq4墉. bvhÁWU˂ m 4R/h_+w]g*l>oX"[1߽"]|5_V i[-X[ VPG󹳵|V])j(}|zy)QUf;Rv~D A Y]0 QMJ:At\PSŖ5o4X^ݺT0J7F-_b>#nFx8#..] + +zʭ^oE'hgpU̓hSpUf:$vͥC I-vMC*1IUXuE]3\ U15P~[Uje^wpw&;zq=Hjo-|FK%MlTZeRhFoY\Fke' 2iƽ]zӜj> ]Pq*[ʭ+q?ēb}"æhuli]ACǍZvՈԕAuBڰ +]m2nGxZ:26aϗg‡ p.c6%_"qI۔-.#.BqUe+3}%~r]EFm:jl_tE_0ҴG0`i*}XZ O|חuα(2x[ ղl7lurh.zvز- \_)٪2QTLY-14K(R>EoiJmDߤrˌW%[ 9S-e% }*ٶnZ]fkw 3U-ۤ|gyU)UWBtlc&wTB&b4pHY+kBwLd +P6 t*~(gKJ@X +j46+A'c^~_F!|&j$?2 endstream endobj 580 0 obj @@ -7025,7 +7020,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 270.123057 101.433071 251.373057 ] +/Rect [ 101.433071 570.123057 101.433071 551.373057 ] /BS << /W 0 >> @@ -7035,22 +7030,20 @@ endobj 582 0 obj << /Filter /FlateDecode -/Length 4714 +/Length 4847 >> stream -x]ێ}gI@^ KMt7sz$6p*~l{XE9=X@pu.U -)r^!x[!#zetgf;8c[õm?vpiOX'ܛ~_`ڌJZ'ݻ5Kyt[0e,]m] -7,~۴oulu-c9CpuӃŗ^f|ms4|ho7}uW+.Ғa}>:;~)I]FL'٘p$TY6T5a-Jh^<69VB`g޹w7߽0PU=%҃tZ\`cájŻꂈ@.\oGzgwuuDjM[1ѐH{bVUe Rh~sӡ+Qzj,ǎS+G=8GlAhw/k)7fՍy~c"2$nbs5J{T2O.߃;}jOG79zo4XဢKSn*=w>BwD69BW.Eѹ#ҟguO3yh/^ozXo2q55U_I_6J3f2Уm_W=ns8ĮOm6jG5i89WOWgwis&Pdskݖp]BizCE(3xp`c.LmTr'O]'7صƕF+찠_!-ѐhW⦯$ەr[۶lU#k(̼ns8nV36xI~{wkFYy - ɧ[+_%Wxecáu?*oc&:}^Xns4ԺUJX]m_§yybЍy۾gI"[uiO+34M!Nɮ0M7<g1Mڡ柡cD̀jS}[x.;bzGtwߟٿos8ony?(,H-Ȯ^rk.z-E!m6WG~RӮ]A{69o mj9tv:.yCuw^ kC{YoơN0 iyi2{Ȍ2sL9{F?/yK;HBL`;l3KЀծOt`cw%6w7D8A70ŷǦ}?nJe"c.XJ4f۷^֞ey{yƍ1ק´Ź@Iۮjb zi~cO&^"Rw+Zo/BX5' ⽝=_/E׹zv_h NRf嚺z#oi`GV -r7`e;+q]/='jᆍLjgv1ᐼ򵌴ife29vmut?W˻VuKtisB/[Î}+ֳ=(1~#ޜ~7qyzw q%zɫWkf5ژp^~޽^_io} f7ݘp]~fQ~!tg*6!Aԇmyk-5sL]w;}if{ip o~7-:*>r9@m5 -xc0駇1LAQа꼐s8cI5J,A鐪ŘN*? r/N57p(KYFEvWzd?R8Q|7)>FD4ms"Ssq{)(NA+XmhڴqUH6B;ʦ*&ۣҩm\ۦSM7yKx9ZϬ4ʭeQcT,RS1h, jWa@2%]ĦK|Ij֘[RN4<#htx3F$SK=Z7z&)#O3m -i3Z!5q/U|OYΟJ_ib2R zU+Ic]aõ2mKy_0۶ -IH.-66M}%*1"Nۧpe+TWŶ@y"v2T\S m)]VKt ``> /fzq~ȕTe5jH+>)`?;R9;*CTO1U>:㶪3\N^R gLT fXݪ20Q;I3tQPi;QJ5N)A=Mu:v +i%]B>I:[|VZysJgSt`-&E+"l1Nt ]ItN>'D]N:䓵Ji=y`ӊ:(tR|u[e$-?">VI1P^U2P^VQ3P _Z#0+]LPj%n(/1yoQ!bL1,Ny_;#&}zY)?BI_a5oQ)3YCF܍ԠeӍG+a8X aDtE1nyn!se[xWwy/[mLIKHi  wfyG (,:c(#^WnWN Ŋyo]2hߟ~??O^OB)g~_ta]_y3), Uבz,!z\w hj=|#V}dm)_X>3> wPz9,ny:ވ]oCC=ZƨDIӅM;h|``CtKeM]; eV_-el_d?k{<r8bqnB>)Ockk={,~m;IQ.ؾ'sֈ(;G:(/lD;I,oN CMutH~bE8sڗ9?'97CV8ck{--vFm+>t}8#]-ތZd4b܃y z)~s#wmW=\S*{gM<#y}t/=;UWйY)]X;>yLzpu0!\H~ms98|?ly0A/Oޱ={бU$ʸҩ{ #GB8U2E-|Fi[6R{KFโy s{;!.3 +tX bBtR]|? sym9Pt鶜P|sŎ]XO< ڠ Y({f/s331]lIϵd=mib{^k5+û阢?٤Y.蛆!lxmkE^:jnkl +moz?r[~3_> v~$Қ<$ٰAfij7'oGmygo,6SV悑RcƏO?c?z\Wnl,,Cq<obApo7ҰTz5hٔ=wn9L*Cj3A-`Q(ѿR98ў[}GIc-7=d/(;[κs< ׅ(Vn7p5y FYr WhlY bg*X{63QA&͸Oe3ZLq}X>i~y7iܺ^ޔeNU؆ hui}ECǍa|zvՉԍAur>dbӠkeW-Ծ|ikhqL'WpuOgV$(iҡue/-[I4דw #v,/J+X_=OPGI7,2/ۜc˺Vec϶ Z(mIyV։dZl-IRl1E{^iNW&-[g-y[zK&Ax&u=mn]wmϬzdz6I=2v<î0Q;%*q;H+5;&g^g*vv]:e%6>[Af'Ϯ> endobj 584 0 obj << -/Filter /FlateDecode -/Length 4834 ->> -stream -x]َ$q}g7%$0$ۀ%ACOm F_Wz3$+r֨dO+#D`2K_~/bLNjSS.7 䣻 ve\{G_͔7]=N!JP)msSyA[LIR н* JI*ADAa* 4I* J+ءR("kvG{Igc2It0NK4y]t[\RZ94tl u`%]-]-@WuEy%]KH%T ^g\VI:'lZQNAK8#Άjxt[esŘ@%0% -$0!L I$`(RX4QVD>-UőjBDX[@ka!+q"qݒJZ % 3k' ,(PJXpwJ\`AA ֵ ,hRX%$. )` ,qq:Z k -xH\^C/q25Q5S Ơk2xא(Gxdw`%.|-wu'iդc8>Q&¸E+O$qb8.3J\0 xW[ԒMR8.'q0i8`~tE]TQ- 0 O*ID]$-qxRC%.]LIUZ Q'\; Dl@MQ``5F`` \ LIp[)J\&b" 8ZUy3u:$.&LZA/q~bwI& B-*`*g.4l-q<]贖 oPh"V^I\kI4#(qA$?(q V`JQ[@x$.M,sDl$.r3J\#l1H\lz3H\l'qAR~b7Y8tJI\tzӐތ$Oz^o E8MI$7NH=7p3ބG/"7.ft]x^\` VZ+ deg# -0!lĘI L,VJ (/19ԇ<0g70,}]sdv#/?}{.?ɑ  -$tqc'f&)'R3R]?,l:rc]9n\?(NXc}`xl&?!]-ښdy>VLXB݁< Am6{.mk$w/& ptbC3? J-z -ĺH*/>]@s ^vӘ8~?w?^3i{ï?S\d~kPankhѽ.SQWfmWԺ|,YtTliJ2k͞ZΗV?Tt˿|Z,2xTQ\)#R7p7їZAPFC~n'C> Ns?$d(.ңy2ϳ+]rt۽SPD=B^CˮyˏQdBn@aiAY&#_1 3zm$qȨ@h-X|#tȥ]}d2L[LY)"zՊݪD']mbn_of".Ųg۰k*7 IKܪsZ~}.w:_֌ír_nNcps|jW-iol^^?}qC* PgsPr /UU]M6XK۹ܞԹ<o9۽{/s C?3ma]*=cZ3;lf\_mO_/GZI4Lq|?Iw>fݭۦbHw6_$*#7,oƣmsynpl|{T #u8Ȗ,%xe/zcȿEOgg`KS4a7NyTgR[ PbƁQiQW/kvᶽ]~'[!k(cZ~{E2a\C/UѴu-rн,3˺{Ωi=]ѳ7@hk~dC۾M#[>bQ'+k3*gl ~#jQۧ63TFkh>#93a-Yh=zg>G.%7P|@ǧb'iQx.ӡpo>x[yDFuzYEH|i2i֯^ 3OcG+!l bj O<}чxﳀ-HsyAjr͑e7Xj~D>fϝcigu23zow}Py} v~lWβ+mu%'#gyQ^N{zGN?3|"Zg9t:y0Qm7wy!6OWoF/帅xo6y$>\Q*ln<wJѬz2ӡdDj9cv|1{|@;vFOy:<7DCsS'ѿOwDNy6ju`m)L w [ w/ ;=8gyVGu^uR=Lr@_zxm/=j=aHgq|4x9_acf$Fj>2}W~»{'U프W]U|Wݺふr̮gu.-gnt~ǩq҆_~4f8ro~7 bv(@壪eg SSZW^ƕd7*l~'\ DN|jҋߞ'\j -V i[-X[ ݽPu5bm֦MXMNw_ҚuvAvR~gs)QUf;Rv~D N Y]/ga,@.tv-S-k*-LiP6 u/ uQ|\{k;ܘ;⨎&~ v++녶+jxiKSah7U)3OBٮZ%<6xHW!4k.Bl^:*!=nM][l%횬:&Jkb>+{*F&vo+qաTľr[/5ȵ[0_<(fRIUgVY'l[Zى|lLqo\4g3|[%,}~B//œq*[ʭ+q?XēbV"æhuli]ACǍZvՈԕAuBڰ -]m2nGxZ:2_7mž/m9>ίP-Vᢿ\ƦmJvE⊓)Z2]F\ⲫ05Vf2 Jjӳw庺΍KtԦپ"w% l`}ie`Wb/#ګci%> -endobj -586 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 536.373057 101.433071 517.623057 ] +/Rect [ 101.433071 142.623057 101.433071 123.873057 ] /BS << /W 0 >> /Dest (cb74-1) >> endobj +585 0 obj +<< +/Filter /FlateDecode +/Length 4736 +>> +stream +x]ێ丑}ϯg#~f60@/ᇮ)5xeR %ʫw#wzE +S,Fx{肽Bva\#j)iTF>x/,P :FKS 2k&˩`Q*03RUf(/ 2ZϨR `0F+F'P)9Udu:zpH+9]s6p:[lYb1th-*xuJrfuQh$-N`Bq: [ 8xj[n-t( -h|-;Ѓ%p$L0c` hx@ h[qh [ z.-: -HqְEq 5"J 48. \)8.`\@rqjp'9.`]m@v  F + xWkdu8h4.:`eP! xWa8.0]1:?j xWY\7rwUF9 #Xo +;[@`Ni pA-wei CtX h>VQLE-ҹqbX.3p\0* ,xWjԜ+UX.q0H8`|tY]D  -) 0 +"IX$qxC9.p] Vk xW=8._-ӧB)8xWH0 +#K&Γ@ `/Xq\tpXpl9. buxq!8. +h8. +e%ovz[v~`` 3v?rXzgkÇ; u(c;09_S:ʗu/Uz9餞5,[R'˛mSNҏyS4:5]9/oOz?OM6rA70MT@\:_,Cb,J!(kH5֌WlSS/K.`-ނ^1fEbݮҙ百5wHƐj+Tk6s:[/?7i߳\Wϗ;Vi_fLΘnAۇmu|Lߜק7PfFDY_ 7{eu.33 ۾TjKi%̈aske$F5BO nKYEyjܣm9Oöt;kYcVLo|@jT#/ِ.rᕤk= jZ6CƼ} _BI%?)淚č'+?Ɩ>F˟B&KhOٙtԻzjjdĭk}}Ow,Y e4o~ƪA`NGa_ӡ_-c*$lqz^ԖXd-Ys2FWe?Lo<m]d[u>Aư>y>dے~Y+U-6~s.-xٟuߟ3)C%{z+Qs62;eYh9"z#/hcJ-OMygu;g=bs6;>[D8#ѝz6w9ޕ?zApsFNϨC_md/k +Gw[I!Bhs64}?v~a͹2̧U8nݙZ\YX![?y:"kc%3y௾.+ټ VQZ`ٳT3P{O}7z{UѵcI\\gb=}p޹o {yNЃk}vuҊyn(NwWZ,!'djVm,u|/#ۮZuhWqD;4v}yΆZ{ +-H~:>s(k +&sl{ޭTlbYO41]3l{R+\hju \+# EiƠH2s:ʓfI;}򙒿.+?eQgm l>oՙtH==g&y۷5@+; IV#sG#{ ѽvd1Ti|{1Һ3k='$&ˣӽN?sٕ=f~xal^ܸ. RўWgZb㕶P BI+9ǝBͩC'F{L;Vs_"OQ˶ mh1p)L v]bRA?c>9|loS6ڀÈH[PL3Btr-ŴYf|)%!,'4ur’P,v-UqELGJ\f몓UW͹']PnoKJDʨ6 br;1ۅ~'ҩ 3V&aH@29]L¦fsK*1|1@]\lYiߪ~.ŎZ nJxX{b]gR&B]7(x)RZ8BL2&f)1vRQ)f/+:i|I[U>c/H75VUV}LIeXeF]\Y E2P~[6wU=dw[.s[-%ە0q`3R!EDJaR(Bo8NqY:7.?_aNi"~8-i˒G?sShǕl2.HFN1mbTBe*/bJZАq*6%(ĞR̠2kk-uXU#5gۦ ӡNb4형A}98 Eː|N#JZtIo2>)cla&.$W=oTVuPtΔa>uWQ% Fօƅ=w}6٥@LYVK4/[1G_ uRC\{:;9k,jVP l]IEitH|FlrsT-|)约m*m*nΛF-ξ\()/sg))u6˲h{.C\LEfW)GΔ:p HFrwsCzyc%H%9x0 xN6og* HиBTq]6e[OƿDq +endstream +endobj +586 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 585 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 587 0 obj << /Filter /FlateDecode -/Length 4924 +/Length 4893 >> stream -x]ێ$q}g`!_AKᇝm F>JKմ42HD02+S_~R1/5EX?V.N^g8M ~ 粎)`'R9;*CTO1UN1gI3|tƭUfΘ$̰.jVeav +x]]$}_Qφ,aw1?Lܶ1}aO(SR22+P}BGG!2K_~/9=cpO/j^_I(?7V.N^'8M ׷ .y˟~uu}5Sh珤rv)FUJi+b4>'41gI3|tmUfΘ$̰.jUeav f죠 -vh!9kSIgR6YEt4)Dty -!$lYiIa)I[MQbU`tKJv99'2t*Ŵ'UNVaEaBt峨-*#,lqt ocJj5ZybLt`%0$ - -$01N.'Ivr%LʓJ4`\Q4tFKD`l.HL`5lqX$.l ,֩%.[tpaqm -N kX.{uF ڵ. ,x:$.p]kQSXdu8*J\XFF ɤ$.p]wM uq88swWF5 h -r8[@Cghl2K$.]5 tA '#F\XI%.]8*+q> H\SK:6YI\äH\6i芺< Z2 O*ID]$-qxRC%.],qA*oQ[l2 VXV'e4fXҁwY%)qA$0I8! -6c dB>Q&{ DlqI\z6' - -$.@D0e[E8؂HQ0ٔsDèJ`Aע.A1 XK\Ԕ%.O.I\3Nₘa pES2%-%.@ $[ J\L.3( ࡱPK:h$.H.L*J\e&RЄl{ fQ[wdh$.H e$.6i%. - ⓸ 0Q,qh:$.:aiXLdOXoF -!-nIo$]-&; rL ~Hߌb3Iҁw p&"[io@>">vI(PoS - oŜILL,SpPj% [q=STp)If, 9z1Q˟.dFPJ;WX&c=oӷ8Vۦ5S- ܑi  V@ P'bl+(. ي{n2hO?_~?c>]oVioqXmr3Ųz|vr+-]}x;n234Bs6^nW;4c}L970Fg~~>-AX"1H%*_ۿ\sޅ+U(l~ZNSvNvx;˭ wYtj\2 HG j u Qo$1DTr"D2VL;Jd28!!\C/Zkw -’ ]|,+@&Zsm +ќ+{ǦJ;#\C~5vDn[I_a6mۺ^n"t[%su^186cR6hFF3a0Ӄ7mkQ;&"Ǔ^Pj51 -_!z=\]d72Z8ImH`vl:y]RxZ<yړu^yگ}kF`uE ?mH;7ʓŶcC z{A3>ĉyޙ{;zmeJP)瞫o0m~AꟸodC}gg| -u:g:ޟu0;avr{12EOy9ddR_lG!w<+@M=^r>ȥ~~z}*w>[?<j o,kaw4~-> -,uvLtsu^k㞙]{;ciGyݻGe>7ygr;:Z 9}>:!W?|_ۯm}f,\_u7Oy9Dǚ9[ѐ6 ^|g_XTFc|"p#6??7cCkH1|:/܃|LZW2EGṻgmHhS`;dO͊5v4_<NwQb/ I[G4\~1pocy FK#KJ~^l-sҶw}PC (+j#f="Yu{ s7aѾZzܾg}in'Xz($=x|N:¡)m١GaB@3! mߑ\"ƙ"js3>e\ϕq-O GCLElE(|?1 -Ɏv̬ƌ3I=Uqqc*pwIem ݹb^h,zAeuz<?'=0,琉sJ萘> =0LO{osou746O> JM.ӵkɢ>Lc CG78(};[\K0z!nQu< -=F%}|~]nPFnaAg68,r@5p]?'-tD6)&#=YenOگbճG<{:׆ehܴycӲ)kWYxJs~_.<8\G&mRWSWzXyR:M n,)zs=L#?R&gpf5$.QE Q~W*9A\$?֖-L`XNF{,OG ZφZS-{w,Q3赘^MzkdL!oޠe{X[ń~-T.6ڣ5mB6i6l: ]pjSutj2ˌMk6!͓ ]w60Mf^)p -$ZN.b5f*RWu)6d7ߍ=FbƵVƬwm%vG\|Zn'ҥtOf*|5HKQf/Cc'veåcl㥓mR6dLs5HRꚘ(OJ.TtžA}!vTj[]wsql3 .|ފcsj']lTv3&솁{ةLltld6b dtnþzrwSTpOlwW$hw:*7Ca-$@NГO #vn7]e,X=O//PWI7;#i#ҞJDg%Rhɶs8~vlddnRK*[}Wo{e!GWO3k^g:HOɄGtƖ,8ћK,5p\:#Rs%'LUQ eޡ -T}\-+!iN2A卩jsIH[EzA2R:F˜t#.'45F +vh!9kSӃ3z +),"t:Ig^K<|tk甤-Φ(l*Q[LVEb,l-*(-鲝|NΉ J1muF'kzuQ-A,`H: [~$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn ߢ +CĜ"52cX8Dmѓٝd?vgL׿Weh%C|a`2#h Xb,{(1Us7Km62 n?ld,rc%hOZ*X%krDL탖me>b2' >m İhFW4^|V/7ނ ;ƞF֣:t(eO-M| + xDil64Qn7. Ŋy]2iL_?t~z?r?~_/k\{dqH濴\?׿Յ*KnCy]y+z(KRmQ=-ْQhÏCE{ƨGoo/i βZIqfC<5x%`}M>}2Cֱ0j2tT"dR,.{2ϳWCVEVYϼ{}^ֆ^:ɬ(n>p_HeGݺvPj(=P9vqj@ CH *Z 2a|ėlM7$uL=? MF=tH=jv֨Q?(`5[Gb{1i Г+yDZk5J_Gu23zf1Qk^Y ڐ{cyu :XCKEe؈3m#ng?6񽄓y 8~ˏ?qyW/EƟRG{2( J3.dRвY!յj_4|^wly1ֳgZֱ4fhcu!FmCR]1wt;4FugTF-sSfȈa1<~f10|YCSouc{~sywv<4]K$zcǦĶiR{)aqe)쿊;`mo7'z]{9:ԮM*=7;OI;4k7Zg7{4/#!<<@/uF!;.B>K/12'ew6e=Yl'}z:-s Ced^{3[N3w2ϓ,#Sչ#5xFKtSzYRvIO//aDאgd0OI~g)#* 5glȋ>?4-/~|-<;,yHeȍY7/zN#*ï9yd'A;̪P<~e.ϳ0g&ԑDd*H᭗9x_xĦ}[W<)n;1d'<ĐcOFd;#6st=vs c/>jwbDms2ӡN\9^VDгq|vToC+={k%+Z4'<M>Ms?Y;x)W昩%ݏݽh Eo=WMv:Nve16r餄D-uJ\1WyźªWrF. o+qӷU,hwиcqMnrV&67 VFٮWƄ0Bw}+:Z;, f2 =odQ+yܨqJg2tRLSm0qXW4y׮gWkJT7-C&6 F[ ^lMK[GˣUe:ۧ++WO:2KVa$@J~ǻR]삅tii]e, B`/xNJwPGI7,2/ۜcc/uv,{9}h­.8F4lK+uUN. SUJզdn)-Nb)ӞJs6i:hɶs8:SX2 s7)mmvl{epݐ#SճMw{ΜguR՟Si>&j5|J!C}Mtm> @@ -7162,31 +7146,24 @@ endobj 590 0 obj << /Filter /FlateDecode -/Length 4725 +/Length 4866 >> stream -x]Y~_,>1^ <f󐿟(Uj{cnU(?KY C;s|<}:[) ۳VF# |ʻ um;gGSҞ@*QEԌ{err)ȩ`F T0(Ux3S gTR`u0Dvpht\*:i=8o.98-6 -,l`s:[ӂt(Ndt]tQ6cX]N:%`ւI9X`S:(tN'lduj8-GADe8PA& -q0kTqsV[ Xl1p\z: -Z) -p8.G0D ]]O01xCr:A׬.@'=ޛSk!`s\]f@' >  0 A3t.tRr\l7qAPL'8. $AqA0n W 4&8.@br\X:آ EqAE qIMqAQd @ qAMe8.f j&x̸zs\ lpQXlq NzlQp\fnِ֛@g]L q\7rk{ l@z-V6d <3 _Z#Aepl*Ra?f0F<$#w_5^I6~&==.E򟄃R@Et-qa,aJ}FId#0ѿRݼZ`7IhX[fzEw'tT6vd -lx?~\{:+>a6.0=yLk-HDiݷmّyT|?&ûttZNDi4m5}c8818?,>F2NE\Pj[0 teS7O?|nhVL|xn:7.1>ɦ4P7M(nLl W'+?zɦ r!ٱYp -N[?;log!\As4o_!ywd'oC>>ꕚm'4Hs$(VO rq)KHQB^ߕ4 sTa<-cp{?2*ysY7qGF"MKσT!x pG愺3jZi6DLeŦ@ȡk& - -$SNT*!{OչNѣku&*~4bB}yZwc3_[^MhzY63|fy{pi={ע},dܬ9{ݽ>6WCXAp+%ݝ!j }ћx/;A -gq;gs7.)xsSO4±"x(ckkZ]r|oJb;FKڇQu-9a5y΃WMۍ}y >n>v#.Ն=M9t]KM]%+sٙpkOw,]iehiEՖ3Py}5jnׯuɣVO8s]ؙhUG\l 71x+HlM/x%0Nج~DK\P]4]ڍm.z'f՝y~>2S>5oq}ꯜWMV{ǕѝyލH -. Tz3K};w; nÿ\zwDl^| -C?b;B;:9tW 2WwoWݾޙp݈ ^}%!Ë٠gD-=0УmߖW{ܙpg/lV -'7^Q-s8oW. bu_+xRBw9B/W)ZxO7n(wvq?>!7?j][\{w97o$ەr3MtXꪑ5W -Bs8V 6xI~ޭmٯSXA՝yڍ/B4p(; a?&Oc%:ݙƱC#EP/P_/5y*%l㶍/\FӲ׹b;;aT.$..U[J}1ϠOpi{bzm:&$Tu-+ۯes84 bIݯsygKݮk < N4/L+>lIpV@dn|unzr]4Q{4STwnLO0&h(u㧼ZMEԶm{4m{-Ry+ޒ.mى6wRgٲn3;϶4L5UTlv.g{mq_PKDmJ#;9pML Mh)`?'R9;*CTO1UN1gI3|t]"p9yI31IP%a]ZaI*J+ءR(tON)lh$SN{-BI9ҒS8 Dl1)ZIawKJv99'2t*t3O>Y$֓6Ì ( l gQ[UFY#Ɣjhv[eŘDlK `lQ1H4/I`b\6N"K 'hd?Vi茖*]j0sElI\` lA -Y ,-XЭSYK\`N qL%q (e ,8ׂ;%. ]L(qZk] +XuZI\֢-`d%.p]Uw1 8 +III\&)'q%@ sJ\k28q&H\L%F]P=tJ\&D˟0VN9H\:aD]tDžy /O:,qbx.3I\ U"$3Ct(6ӯ?c=_LYJi +d Gq6 -DRd! |s7R?,?m>cDŽ3ru*h0u6͆ C\ܪo?Ŋ9X/vƟ?|0zSʅ|כ/@m2ϘGhu9j;"*xGO>.nKeJڞ_Q';c\Y}#UpO^/G~dc7sӿZD p#cUރ/Yluo@+*uh(]FR ewnl9.e_>jkk2fqJ۵ ~hOe +/Ӷsrɰyγ; 둿t:? ;RU䍈+@Gn~fHN=f5MGD401=tv7s}]y#%FniY`Ha*mjqFA}/붌^ O_A8K:@:JBC߱:OcuIbGx8cs(")Jy:ėGl4ƭƈ0wXRm5Gm%݃umt. ^ݘe7s3c}e1i1ҽǒF[/K/y_eL+/y6 ݰR9ye!GKuk'ztX5aʇX>[vY0]v`cuQ&B##Ko}g;uU6=7ˌډYu )v_,6mGWcnoˮi㎓Eucs=ImRLY%CLoXCN_ n}u3sÕ6Dͅ\ʍypUfRBmtHɆ=gd#i6 4>wX鐺~bE8xuZ½`]+Nֈέj+ׅss; >t}݇?ynԲb܃uͷcn=}jv}ղrfy}G2yփu }a'Nsdnjta}޺6c҃;u˹~H\tԲcL@/O^=Xлso8ZîVT +Vf6ڼ{yǍh2܏l2t?vJ`C}|;z绲^ өoN| U<%`<Roʁ|!6)@`Cص%{5ZU +eo#3D#j]i]ܻ:fj\5%[3K1yHh~J| '{!vzϓ4 I<4JQ]ߕd{n=P|RV_ 08.7'u.>V|;Ƶ~Spm k[Zv꺜c}Z!Tu2>٤Ye kO"@6zm@j rA]k'l +uw|-m LX~=<-=KEv'/g\ IzMgs.GzP 9(3Cz sŝysܯx0=Ї y^#)p5lBy./9Q!M[M|'ct&]5˻~i)z ]`~;XRgP=h{y*dA_N;W1 t[p삀0Ny,i}}47[gC}Fdwsǂ5٫I/bz}Zr)>T! :^7+UL诅uU{4n.ta3NeMdyKx9[;JD)6UkTYfTnR_Kqm$Silz6jY*\+k9At9|J^5WwS:mjdEz$#֏k1$mvܘ+]]vQ(;W(_DžIut)=hYe +ߤ*͉J*KEK@9Sd% v^Vunw]m4\7$TjCܙ YT)P;u*qFK]v:#Rs%' UQӋeޠ +T}\-+s +42A;zKIH[Ez7Grvi>)?fm endstream endobj 591 0 obj @@ -7203,24 +7180,25 @@ endobj 592 0 obj << /Filter /FlateDecode -/Length 4753 +/Length 4800 >> stream -x]َ%9}_qGKx $4, T4 gzIgR5E2tnFx Ng^}WRHz1Ooo¿buտopw(LN'[0L.Ϸ?~q:)%o N!JP)msSyA&$` dh -0Rt -f1QPEa)hU%a&I3trAPi;QJEdnptFO>&D]N#鬝| KEIG%%-N)I[ %OEMf;,um^Um]a;r:?}u5h/vkY~0L : -GݠFC.¡¢jbW7(toʣiC\1]dP2gz1ϣ+C$ۡKtŤ$&>?W oGAږWVӏݵ&&eU'Si#uR&a:y8t!^Y(X`kNzvUCRs暡}$=#l+A+ыyǁj/i#'^qGkTF*c2^ 9GaAKr{yElz1ϣ!Ǧ EgCAp,3_p>_l9uOW;gGVRf>@#u ڼ˛y-á86+Oc< < 9a[濶/嗲>t\8=eS`7qgykeo1lvv?~Z8r/3h_W^hh'{nw*V1reS`|OM 2h+6xAn Ћy'/*7#Ϣ#O"9D™{b݂.]áhOK }&ޟ_lSϫlceQI^80CqE5c>:k>Ѥ6[D`K4Ejy9.$W Nح0I%~ iLg`(-49Ptc^,Sr3)w̞zyud3*|^'5:v~Yvh0"!Ǧ[NX1.BdNxqQJk۽ wDω-*#{օZ:AЕ@Gܧ޿5/#vM3u,XqfAzd l4bC8LNp?Y'so odo-tsoN,zESmF:ޮV{!gn\ Hif[})Ճ k*x\{t|DQ)h)œ#.y8C^;?OgG.j}ˇ!/y8c=y "{ʳ^eoesꭶbC{nP[ףhx5Goc<qY-[L:u}:Og|q<8L)u~T3gOwbFgdZCI$ -rW.!~-<?vSߕL)nuQQ֣aL.HZ9$?y[\yp~1ϣ!^;$ -~Mo_sͫCϧINZ6ŷ/S6}sɯ nZ^/Crɔ5嗣=iY6loI~mdҝB%]IgNj_ʯ_],M>5#|~WhE?]$ڡ1 odO 01uZ>t|`h\i w%ÌTId[!rzsդ1oՑ7ԮqrzvVqT /M/?ah+gpU̓?heV *^;:$y@Shi;w*f{騄L5uJڹTc늺*f -+\ U15P~^Uje^wpw&;{q=էZn"|b~,4QukufH>gqmI3< gV(K4_7:rǍla*L/{ Nh&ֱu u7kjU#RWU ]a'6F3@4x2?oڄ=_8>/-Vo.c6%߻"qI۔-.#.BqUe+3}%l?]a #6i/r+$mL4~`i*}a,'Km:| ZƞAN-EN[%+"[UZ&J"%b_GKMӮDߤrˌW%[ 9֩ƒQ>wRKil[7.k5C|LU6)_;saAJU~Ne˘Ikl,Bm8^vG5;&V߄& E:WtEoI%%6eͩNP*7e"7vg -f$W +x]ێ8r}ϯFK5a6ᇪ]5f J))j9Bu"H1DF>+_$=Ř/'5/XdY+ +Gw6L!9þ/;׺>)%o;N!JP)msSyAKLIR е* JI*ADAa* 4I* J+ءR("kvG{Igc2It0NK4y]t[\RZ94tl u`%]-]-@WuEy%]KH%T Zg\VI:'lZQAAK8#Άjxv[esŘ@`%0% + $0!L I$`(RX4QVD>-UőjBDX[P@ka!+q"qݒJZ % 3k' ,(PJXpwJ\`AA ֵ ,hRX%$. 𮵨)` ,qq:Z k +xH\QC/q25Q5K 栕k2xא(Gxdw`%.zd["qO`I%.p]1|.M:Džy^IBe%.p]g?aE58X%xW$.p] Nap$.6i芺4 Z2`T0HZJ\Xޓx"=h$._0Nʀ)$xWi*˦>D `/H\#M)/qO +:|O8ve:B$.c=%k #-p-%.M1I\G<^tL1E]N B K1%.O.I\3$qAHSE,ES4%-p%. D[ J\MDXK%)3Į&4&$.p$.@`a-֑171&ǛA₤` <> ơSJ₤#MC`^r%.HV!D'd=ǛADEuNS-8 &IybI\x3J\7&V8Xu{w|aH ºni3DqG+}׀×{sMЗc~vPJ0.<:p\}N斿\/.e,|.2rrs\wu|g{qϱ2/6Teuq~?co ;NnqkKڝ<oKgkg[s!gS9Rv>^3[]>/erkCYmo aݮu>?~V„snlޜcl֬8e,. +Bl2a G:wM=U{l˨O?}y܏?h`c lJ rv~> ^ pFWq{ўØID/=\QsO伽Cm9W饡yw#{d[v-9!AνȟջLҕ"wy!lr둵+{yB dVn +GLʑglXC1 uHY]:rq${.FvE_sd>xO +.!qoo#XCގ9dXZn|ڎ-\񎴲m‡F^ɯ>kooNoXgC+KV^yFZG|ӕ7̂O[=14HnT'#50by:nO~4'z=bUcu>ΧqDwA컁fӡyGw<iu٘}v07#b;m#;oI Jxγo^?O׻yɫ; 3dW/^[\C뒌Lz!s_USPuW3|g~nˍMl{=VPOox hЍw RtΚzگ*_|ܻ?Xw=xߨz +9")g~5 RF !Q\P=>t{8>=/G۾v[IM;|cu aOU2Z2X<Q1~{zvOx +rx_ߩ=2ss!gҠ˃uy;j #;8)]C÷#bɮ~'mi~<w)랼Vk*:(ȿ{Z?ee ׹q=+ш`C1s^;IQ;IY{WGf 6_Q{Ol(;ѨK9D#38* +>-kݍe}|i`݃>\z\p™l ^cIuJQr׮}[[}ٗ ybKg3CW(y:|xXq7Vwqic|:;mzΗYl, zȃuQ;wc#2|G<SǼs~,3jNdy:}򊿚o| #yY%WKWS(O8}öy|϶&{<ZwjHق#;܋~>bgʤ@j:}u;ٰI>1˚@Old(*ˇG׿epmmFثnwˊ";0-\x6cpJ~g4[{/-Ϗm):575heviMܼj->2K{cӲ -(_0Ya$_հryaWqҜ=Mtm0ܱ|f~/=yZeǵVÍ^NLl Bi׸B^hVqT /MfVLJyMR{;jܬu'r_YZٮt}騄LtNR1IZ+ꪘ)O^h]Jtu:U󺃻mb_:֯v/K^h3ci]k6@ +Mh=l +$Vo!0_{Y?(G*{Q-L֕_b7,:m:XV4uܘUWKI]TWm/t;5v=6#ѱi |hδ} +06mK;%h[ҡ%UARv fLdHzVwй|h2۟UtE?1ѴG0q_LeR{za,'Km>úؼkl7lurhzvت-\(٪ѲPTLY=c(6Z|QP}&[ӮډU[V-Ρ]j%/kW)Ȯۦue=wA? v endstream endobj 593 0 obj @@ -7239,7 +7217,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 371.373057 101.433071 352.623057 ] +/Rect [ 101.433071 713.673057 101.433071 694.923057 ] /BS << /W 0 >> @@ -7249,21 +7227,25 @@ endobj 595 0 obj << /Filter /FlateDecode -/Length 4727 +/Length 4861 >> stream -x]ێ}VHVy 0ym{¿1bT_oZ.I@~/']_N_y}6Ch{I4ི*B4 *kuֳ J*A`״TEafI3t^Pi;QJLFi;84tF.DEN{#Y[-A1lQiIgaJ%-H:b'IaADA` DlQNiIi10 ->,uF"%,I# -传3)El#t K>a4ItYtDAC%G @ $0좗xhHNbҰ1rEl-H ql1Lؖ t*j |J;  3ƥXJQSb{ K K%J!-`ǁt KZy ad$.@XLJX)@c$.`𮱸i 5lQ7X- X 0CgH6%X𮎘1 tN '=Z\hA;%.]LT$q>3w5at]mw7X A۠+bX.hH\YxPL" i @ƃ*qbz8D8b=P0VpVe4zXҁwQMӦ' ^NtpDpm%. - u=K\z2Fo` \  Qp [)J\&Bd[ZU93u:%.LZA/q~H0:[0T$.T4\i'[xi-qA0ޠ234֒hjI*3ݐ\E 0LS:V,~2G,qA&-7!fZoz -$. M4RD4,qeZo ")7m$֛^ȰEuNS-8 MsD :֛AXo£C!7.ft]xN\` VZ+deH+ F bnC -܋ʋ1Mk$1h3 N`ZR+1lx Srǜ|Ɉa˚&dؿ; 6F򏆃0fW&-o's"d! |$O2j-NAd$05VOYZ}*wfyCGmP49gNV\c1%lw_>< : ׿|t=s:|.ܣy_Dl&y/M}^KT'.S|\uaބLj6ӵL,\723AYԭ>~ӯ?!3l_נ.,Jon:vWPs|sx?Ԕd&.KN).~/v96Gz쏛z^g -ԋsUU~(޹wߌo/sdGs ZAUuإoj_ájõŦ^yKrv.SFӆv2Fݷ]΅ܼH^u\P|3D3o!T/x˽@Bdk!+Z+ - -:te>*2z*NӗGLN^ѳp6Fi-7f՝y:sWNJ=$n!8,s?k<gN乛Ge['w|fn82784h[ݗp-4 iM:݇@y [qB}wR=?OSFBK׻z΍܃Ao68V_ss8nUoh޿le?VD-= УmߗW+@qg!6Cˏm6jGx4v ~ JKuO-m@]_YEha޹-s8k_3W;T12wɲ|ޣ&OO{- #k+h[HܗpH܈lWmor;#º7WR6d1֝yPc-=ޭ4(mhٴk>Fy -+} 3P5QR^Ak3ݍ}y}e>˲l^u:磋[ݗp݈>|xzWq.yY<fs4۾gI"[uyO+34O!Nٮ0O7>g)Mڡ_cB͈j1Wɻ⧣;}ߝ3/؍{Dz )|#W]sAg^nE/m67Fyn] 'yɏ `o mj9tv:.\xԡ;DN7FX'-ΘFs8Loxž`32nuGS.^kN)p?Ϋ5曹?4bk/qFiSįS v9~FlVיִo=q+oajo{덏]t界+nE؏v]&i̶ol=rtyƝ1算¼ť@IۮjVb fm~cM,uU>s8nkL}{'5жў+m+(n<ѽOfw9o{Zt]wOlgֈ^(Oﳎck>)OCY*TYܤߧV w4y'o>6,<ݟuic7}Czg!2n|7{: -lW{b+h|ܙph܈yYΐ{q+&>YݮsP~u3:.좹#X}C"3Ц݊s8nCJo}Y xODS. ڤ#Sώs:'(bI +9ǃf?Tٳ*G"L\L?IGRw='R`E9,SGUbا$бN646Most~ L Btz)Nw=YaS6CX 6m-fkR. g{t:4bzt;o /'TKEsQu*2jEjs!\I]N ftf7ɺ -Ct1Dn*͖%UYcnjJ:llIQ?.@kܘr\FbRfBj-*^4=Ľ~̲tPJH4HU$"7R+wuXj;mK{_0۶JHH.-66M}%*1낺"Nۧpe+TTWŶ@e&v2T\ m)]ΗVKt[`> /ƽ8A?Jب2a5 PŕF_FqoM>A&͸?N4gȚt:ŴH[?cQ-L֙ҙa8e4B W5h(1 _sͮ*町0.Vhk6bSk45-co/]+G}S'%C5\Vᢽ\:%"q)Z6MF\ⲩ0Vff&@Osj.7"]Rqfۢl& \`j/ڂYƙ=Wd# I K+-7d)n~Y:ʔ[}gl_2BQHWo4KNO)凋WWR.xE~Ov%Ov˯.Σf9TN1ŨP)mSA&,`θ* T0UEm 3LNR }TZmu0D9g~ +pztFO!eE]NG#鬝BtkIOtx휒t%]-6X%`IJ[ ]-@WuE%]9QS)(?dtZOش# +3%(ElVIgaßOxSFmՒcu/1 E QFD$qqr8LK.I,`R\VBX3Z"`wAbauf'q5 $.g%.`[H\`ANe-q: 3kSpXP.%.\ t1ܣk}0XЮu)H\`i%qZ'wVQ02W'0H\L&%%qk"Q'A+q&H37xxe$.p]L@?J/+q{茕Ma3?aL&rwuB< ^tYDe%.]g?aF5x𮶘%xW$.] ^a$.6i芺< Z2`T8HZJ\޳r{DlH\: [aL#XSH:aIU*f xM B$I Q $7!+0K\%`NS9I\ lH\ lA q")kD.Dɦ *邙R]&LZA/q~pIv [0T$.T4%\i؂ [Di-qA2Ѡ$234֒ps֙ID&Xi)ElMH\Ŷ,6uz'qAJIₔ`QF`֛Q€` "> +ơSJ€֛I\qI$qA +M,qmf ;:؂) &Ib @$q 7ы[֛Q. ft]DA\`VZ+degw cn U ȗH2q*Z +xm8a}[Tp3SFf 辭9z2l/?v0 LFw{Dͷ)w%jcfiFfa£퇕0En#KR2+Cdyke[xI"^"#\+y/v~"ԋ=郍mdҡa#>I43ߙ VX#" HcrĿt.V풙Ncr4˯o@_~Fݖ\/y+)ݐʮ:5cISҫie)6mm"wl"yfy_i cXZw-%;B9W?}oOۧ5 J6Qp_HeGݺvP(=Pz"TO0{*Z 2Ww~w,Qvɹ{H=zhlk2)6v=ؓyDZk5J\pg 5 ,mȽP^7XPS~wȢlx߈3bsdpddOy6uqGiy"5ƀ8 +7Ҍ lVH{u-#|Z0$sX۪u/_g:S4c6>.2cx@x'!{{̟k`N`tPi;Gs.F/x޻}~2ϓ,cMHҴ.Y.*KölIHlKHB̆Lǯ >7SCGˀĂ$o͹Ny6y1<=lwünyZy! +. tח=/?qeTC0Oyu>B{:J=fÿ#=(\?rRy?Ry:C>9sL|7HZWx=k;|6K3toGk7э]dƇ9ِé+!~~Bh~\ z>`夳c^rBePആI@ۃz8|kmH ,ҩj/,_^22M,(շn*Y,7m;b7OT&-_M^mmKfj0/biæ~r.'&m'Mt;b$Lt&];9ER-8i:Jt#XP:n">wUԋ.~9N;opZYXCAvy))P~ÊGkk(Ej"[N +VLW^[ iUhXO ULBŪb=m ]LӬkZYw oTkG(kQջF5eF&5eI.Uv̦gFTZ\ EL[OŖ*zҡNe7vS7ҏ1l}*1ܘv.~(+Bm:^4* *SB*|5HIWBcNXI.]:ƆY/Hn[I˘aϗ6с*\2uS+Jڧthaq %0wVf y%d]a.v]4ˋ +!`yye`}19@FMƥa$m'Km 6rVec϶ Z(mIyV։dZl-IRl1E{^iNW&-[g-y[zK&Ax&u=mn]wmzdz6I=2v<îA񘨝*q-%5<{%WkBwLZ5lUQΖؤ9@ +46;Agdj}D?6ݥ>O{Rp endstream endobj 596 0 obj @@ -7273,81 +7255,79 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 595 0 R /Resources 4 0 R +/Annots [ 597 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 597 0 obj << -/Filter /FlateDecode -/Length 4741 ->> -stream -x][q~_Vx} p.836<+7IfdkAnUR$?~,l}UNHz1Oۏ.j -N_NU+ -Gw6L!9Vc~qe}5SJhwWVB A9AR -* MLIR V`$ c0RvJ0M -f䂠 -vh!A^=Lu:vӒ.M{%t8M$l!zDl11XI`A$Aa ElQ^iIR$u :Cr*IM+00H>:[rIgt$x0[ ntH DA&!LE & -J4`ȧ U:%" -8X [3WHk` H\`-l1d%.`[Z$.[RIK\`paqm$qJI εN ,H=H\`y#qZ^ ޵޵9El%.;NVG+qwVAb 0p%.V&&*&` uax84AZ)#qw /q2 wA!Nv` V+q -  xW',œ[M:&/qui=.[O8.*+q> +wJ-$%qop qַI+@WԥI%.p]В"Dԅ @'?T$.]嬕wuF#q0m9 guRL!Jc%xW$.]^6%.&J\'xFiJ!x |Ru~µ ((K -$q)%.Xc$.e4oq{[q@`)&" ؏W%7S kQAhR%.^j'v$.i $؂"q)xN8ӅNk -%.&bXDWK:RόD`` u4!qƇ7Nl~6GH o71&7Ix|$'v%.CIG7 I\y(qA -Mlyf lqpQDlӔy N~$ɰmpfrhQ/ -ceh|V-%{;(i1=rUKZT_9])8mNu/liy~gy-3,kY/6zJ[yS=cvkFk[^nH_ڹ -amhVs'[i/-cshɖAQGx~SmQ]ssÞe<[c^xO({-*pMBbK46a ^rctE{r;?%1rgϤX]a|;=D_^'P8b~eO;Rvz9dw<8A (78[y[m?eǦKei~?ZOrV<@<>G{FǕ칼SA3T'uho|uh2"Ryt:C/=o9v8kEiŃQdl]x,.jmU^;huqqJ*Up'<Zk*1MVQYBr}d5hR/eզ3uI5riWu5~[}s3}%%7LG=PK9ws#Ϲf4=UdOeZ9ut :F[|:3#w+<ߧG K~ؽqm8 u03Fׯ<\wP?dC}?-b[vL󷶲*wh=̷-WXwv1\C}C ܫo[ѥAOwc:PoEWu s7>s{}ÝfvJ͏kQdC}_MW],y3;8\xn9x#e^$kú苠<έO/mʑb7G[ڧŖps=wAhY|h -{x7q6|iʎunZv^<^N;?g6wP5D,"%syp:yͣa|ܵ_Dڄ!; p:VqM|z_.#m}c >8D"dGCb%O<]!-|޽]qmtg[ ҝ͝vQ7]| uT<}"2+Nan(hΩxd3z2á੸U)?{#7{[}GdCnKQ]t#_W櫭0g鉎ֆdž̝|'AoM{y 6+lxڤ{ڰFʷ\^[v<続z|Qy8wn6 bw~3W;b!Ng<BFS2|#o{vHrwٟ7m]?kD9aW2 a ZN?LnUHo;_kk}[nph ]9v+86pWa/n{qU&> +AhK{˝8wM;A|oanTkMrI>%>^J~jdhCD{wm OVx]^>i!]8Ǩ,:L:w̿ZSKU~@|e)hχ0CUGS/‡Γ &'9YX>Vv0TaJM|G|p~WaؘzŘ+V̭W.b>?N\f -Vф@{CjP uj^[.l]iMvAv-}|\x-QMfR qD Nբ è񡫳0V QKj:AtJiThbϚjwS:ml/n kd#֏K1Z7f#]ůԮsrz6qT/]ʞ SJ -פ<)>v_Jxn6FoCRh -=]:ٱtTBz&ݖB:t $c) uMVq(TTŮAu!v6Ujy=ݵr7|š3Ux  X+bj+0Bw}:[;ԏ}I+K^uOV4.tz뼎4n]Ǖ@%Ta6@]cO*:nԳN5n vއ4mqwU/6G[Ǧ/󥭍㓵j.2vKu(W/В2b,C[09VҺq(,5\ n_ڮ̎EWYnŐ./ƂI=^> -endobj -599 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 627.273057 101.433071 608.523057 ] +/Rect [ 101.433071 273.873057 101.433071 255.123057 ] /BS << /W 0 >> /Dest (cb83-1) >> endobj +598 0 obj +<< +/Filter /FlateDecode +/Length 4726 +>> +stream +x][,~_Qφu `16xYbOʹc?e.UigÞNUF)}Tfw +R"]o?_~HĿ!`PW% s/|ڻum˟u4j^SR>x/-PIe{mrJcT0z4WyA1XN3H0䕙"^*ZϨJK`$2)+q: QGVS^s:ctQ8lt[lYbtLduEo8-]-@W`uE:8]4@"t20ii HNauQ$-N`5Rs:[GA"{AQG:A:DAt\ӊ##a%1Q0rYl18.0 M%%|KR9 fJ GP.9.0\t1=kЮ8.0]CJr\@]c0* kxHs\^X:qwuqw4xW[7swjҎE$ wA!w` iq +n "?fL +q\`*X]ʣřqVʹqb2X.3p\Q5 fjNU:J ,x~p +߄.B8.]ВL c!r\#+18$=9._-3 ++zӁwM&'@/Xs\E \>V-^B`AY' Xhbkbkx"*x.` ~w_`<;ÅY-q*eyvXn֍~35ݪRW~OF:N7Sv!CtW|!C7E3EtW3.N t=+ȮE 4r]hHYBnA8&ӥXա*&#/3ܼMhޜ'6N#K/ qs::.B4ݗ!7s_=uđ icyب N5 )jd\~7Htgn4W6]R!R$9ޙ?ApsAȠF1ΟYun[cѺI*w9;CVnYgYLݻ+#wg7CHC28s~=Mcqh,|ߟצ-{~lȝx+mDmPۊ8s:oO)Hrr} M?Q0|z:cGM<}se(sZ;qwGW|ۺurڴ/:҂F[2'<Ꮌa㫽ڼ__֣}ա>vw\$Vy>sp>)mV ȝyNᱞM>ϣ+yΆ*k;{fQ} 3鐲q+~3xav/jO\vMWW^K*+&wX`ێ+'9^Vkޙth>p ͐pto܁=C|O"#kfHR{9R7aI1f<";w9"ݾ;Yڍ|GZۧ. h_]9}$?S/׹w9R7|w̭hNvݗYpn霾 +q;><'s; a}v5\Nfa=tW}A>#=gݙt;OsG"U+\}B.o{X@OڙtH~.)'O͸1~xm=L\@ob3{ BOݫQsT+尌6PQo~p k8f6~lyΆҸrOvwN0>𘀭g s:;; خ{>O=k`w9Z70d=PTrW3S{oGmW?5醽}D(u3tb |m;9ꮟBdw9#OHw|$x^r+;=E!d%?59-R]}"h>\7ׂxN mryHf _>_qM=݈CDpcJѧw$ovUJ݃I Pc󻱙).#5Q* Jw RZw erB&t+OIvg(6`9̺헋IEWG"RARа꺐sx}/%Fe^^urs0e/*H퟈S9UvIo%FLAwp)KYr"}JcRlR~̉^{Ō9KFqzpf#SK=Z7z&],XoԶrz4q/Un̲*l&~(*J→G46xH!i.}l^*H&}"ݒD4Y#1HT +8QXn•Pf#P]巉iPseN5p*v;Z/= Yx&6 !WRZٮVa *46h-4<~Y7. Ӝ6VGpFw^ i^2EmiJiDMxK8@g'kKFEJ5ɲy4;϶4g*k6;K=2vy* S1QFkLNpBB9g=V2XI[C1+m7(ⶢ)m|,-J5 +4'g #BЧ+e Kņg|O +endstream +endobj +599 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 598 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 600 0 obj << /Filter /FlateDecode -/Length 4916 +/Length 4918 >> stream -x]M丑ȳ, ƎS9]65 HPJY]ng)I!S_~'9=cpۏ.j^O(oW\!T`71\.g.6j$rv)FQHi+b4>' 1gI5|tmEj$Θ$԰.jeavj -zh("9kSу$3z -),"d:If^K<|d$k$.Φ(t*Q]LVEb`,t(.*(-ɲ|NΉ J1meF'k$zeXQ.A,ʠH2 ]~$xۘZ nd(.|L.*&%LI$`\rIbb 'rx* X] X ]V(.6; . q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZe8Yk8.:A`e2)) x$$.p]8a Z xx Aڹ+#qgQ7x. X Cfl2pK$.] kl5锃OIGX\XCx.6*+q> ;wN-d%qo qI+@WI$.]ВD @'?T%.]孕 w#ʠMF5a -k Bw K2R1K\mJ\"$q BrS1H\ .( QDtqI\z6' . .p$.G0e [  "SL6c$ fJt-d:J\k KM ^DP2$.`H\hJ$Nt!Zd A I2;4bIZ9Eqf 0(q "M0(. 0?l{  D#ʠNₔ IₔQF`(qAVYd @)%qA q`]R$.V!D'lśQ젋"ʠ ,[pM$ d'qA$q ěŔ@x3`&Iޅg$.MxRl@>?"$f coS -܋*9IL@MD)Ylj% pœ})8D) 3wb^Tcc.( ɘn[c6I?EC(6D]I Z\n$?s~XiIuF\(n|0Q!(F|`h*?P!_-Mm%p5S=}E%*S`/xm(c!Mp}* -c |BUtK-Z vԇ~d~z(ʷh?~NuXopkp7CKWoK[䵣OMX^w,vEWz.EVu.~QNgշ~>XB:vɹk%G@6绐_զCsm`4P =.,C<Փm po g-~W^zm6tX,|sm>>``ig43aenc5ե9t4{xy?4ʶ:o˜3IٶJ>εy:w<_=^;Vgv] 2aP_6mGqLU>(:a5u6U`RF6O~h:6&0$U>Ÿ cʓE!0cC x9smZ;'; 629(:zeJPM=suo0;}~bu1tllt Y(~Pۜrn:H٣oErݸ3}d=yI}Cޖy$+@ލ^lt>ȥ8*o>;|ӓm՟YhZ}g3_ү '8mcfLTz_83H;?j6y7}7Oy:Me158fyڞ|A{4t|Cx_}0N2~$m"ϵy:D5?r{!mA:|gjlWlthdgCn8ȇ>o\^Fwц'ܼ6$߻' 橼 S-./:P[,l'-blxaM:"u=9RG9_ohmni\d٥Mћ{z~ntuhYt,[2n]? ]{vwosrm_Ijj[EiLf>\f 7qF:3[:r]ӛi'KI~2ye/e=T4fޛDɠ Y{dgɗ/)-sf/uӂvr-`yetQ9̏g:iVoÚޱ{m0[mɶRwe6تu{ü3&e;%5i=^;iZ6Io|'ԩ>ρ1eitGDk;G.$?[).K\8]|#曾!Xr@k[}kݽatpJKW^ ~\DGzڥrg>G}ǜIC28B|;Z;[Cay: QQk75gy VYrpctENڃw踷d#sVsҶN@ee^9m&0: -ہd_}8I}}l{W^DKmz򼵯RvGVؙ@+.--7?7Sn9_.zږsAb5V9X9[]KcQE:Q\aCX|!S<~s*[/k \nZ\Ũ 0Qw|m'YtO_ǰ.!9*Ikpe+$::]IN?Z7v(:ěp-/? !%/R cۅ] A1.Uhe7fX=A<ڌNzEo,ebRLP&\ -;wxaoxXb~[zqUM'7Ӆ^Tlk]t+]p[;t.~ZרVfRZMk$.B7v0MfN Skr'.b7f*Z7]uᅲEF:@mUb1Ż{G\|/VTK/OXfg𭔘|ЮAWW&6[H<4q.3aK'%'mVd<T#unkDa>+yJv7(-U͂fp^wf\aM/|-͍Toҋj]+슁zqѷR\Wkcr0/2iǽ]r)ۜP2# hCOok6)?eD +x][,~_1˺_ lHyB9gm:`!?_[VW_fw}ćLWIRӧԭQW_)/Z%bL)/X\dUISGw&r>寿kG]Hk宿|&5"cT * rNgT^ T1%N3\ڮUfVȨ"06(V% +fRv(-%!Zri%|L: +#|)NENgaKRq:[Vr:bM duE`8]-I.+:"T.R%d q N)MУH>0: [tgtXt gBLoԻ49آu99 +@KMr$6ȱI G:9a} +ӊ##ac`Eeu$qѰ 8.0hk8.0`[ p\`@V&qZ< 3%kP.8.0\tkЮs\`*qQp\`Fqi Ъ8+B(9.]wu@4Xv7rw V{ l48>- X 0C K8.p]01}l%TLUPg-,@e8.p]g/0j xWԜt8.q  0 %]VL1r\%qFa!# ) @B"w1' ;R뇟._~/@K~w<0zz1.ez't~Y>6z7>uiOyϴ2J"/*erc4zPCagCʾ-mXC.Ӭ4$}X4ϵC,oA]V6;5t@\5ti\{jl8;6FHWdLdN2\; SU2~gS5C*ZTzOy4*K~~Iڷt&:{cȼ`y ;W?i .K>;5 Z^vhDlcn +MDٲ0yCW/="<_ukV>QչoNO> a}=5'C{s=F8٧}<\GgwvV?Mm<%&^6l+,6}>3ocO#cyn>Iu6TzqMŐl.xk+84KPm]݊U{I_CmW{~2rm[vվ:DaL o&vV}MQfݳߥ 7l\G;>mnNyբ;tڋ It] rWgsj;Ӆ S#l6. gP!;jQn>=Gɡ͸9 )Aˡt~:o6A2kHk9la;9g>jY_nIFM\GCo8+dž8l7k-_jmڊF昙ikZnmF8<jSo^t[h#}}Ckk;{'<B]OK8yV oGܿ c@(BU{l#};>xaMŜ69ҙ =PTɣ ^g,]z=_➂;NZ, %a]h4dC>י]DJkj{VgW6ŗ! +e,=syo)ϠuV&6Ut|Pް{Z?%% <@KM<s^f)ſ:b={KO@iH:zdGCiGM9L7FhgѴ(0" Ke뮩25<<#zU0AFG]pܒ7R)Йt;M~zn+3|(̪.o' +ޟAN/~n.o/Ӽ>Mil/rz{޿ٳx7Pê~|JDӁWo"h*ͤcu#gk $fLYf/?颒|A>e\fq墉_.teֶ$z/ Ev)Ɣƕs#v6ߕlt%M3Bj-Kf1|5^vCۧm7lNB{Z]盰޻Nu_5vAfR:ܪxW*3QJ]IYvbD #J[[4fwFNXdkT1ۅM7Ֆ +5UlYS|3AxFv1 #]|]T2v+lMrqIWHW Mw*Ii6}C,2:?QRbE +):g]BoVIWֱ -m.Bl/%H[H;uyDRĺBW+yok ֶitiJ +:X:Mgڐ|n+Jچth2⢿).Sla&/}S*4Mg0ߺr-$Mتд1>K i*}饵b$KM:|CC^{9k..zvز \_-Eet,zPls\z)ԘI=VNt}UZojdjz8V;RX222RR"[meU6C|LeV)_;SaՁKU1 +Fs2z!ni> @@ -7376,19 +7356,25 @@ endobj 603 0 obj << /Filter /FlateDecode -/Length 4786 +/Length 4914 >> stream -x]ێ}VH@Y <I\H}F fT#qjL-$%qop qA+@WԥA%.p]В"Dԅ@?T$.]$.]e:BH\: [aLYSH:aIU*$ 'R3R[6_2=VOzx@i>/&(2&b:wfyCGm=P29 @@&Wb1l;˿?Oчs_~_ ׿p` ->a;e6S#>7fҗO[]ϓNvŨФL~cZF{T|N0|x S;LFh^ey ^&jo vǦ+}e7?oi#yõUWX| 3vW&kuג.1elMzTG϶1NqZ)Vl)w[g]=}"Mۋy >f}uW+.g o{X9Nfž􀗳3u<=г~:WP"Z{&ys8TmD~`޹wߌoT{+{[ayJ]>貭P`H^n?ǓhYi/w9oaf?5tKR>]2~ͧ՛S9nlҡ`'>\Q*=ٴ]ڍe~W~# 7f՝y~~"2dn(yhUT|js8n"M9V84s_C w;860?l-jw9j7?^ĭUrܖu>/'+{ 3MI"[uyOJC-5ͮK>,>;x:&Ԍ^yúx.;bhsFc?빳egOߙp ~PcYTZ㑇z)容(shBiXJ<6Fyn%֮ z^A{v9mCl=qa)Rb㰬y% we1:iw4oM=<+ ,+ֹQu?effr6܍~^vHl86oj:o:ͺ5u-j|f)QUF̨Tbk? I~JYeWa,@5]*$JsBM[TZҠN6 h|p7#׹(}"ÍY/'gHl◓ Bj׸B=.$VnGҤً~,|S*\fh[!OikW<6xH\+X --k.B,o/>nM][l&eM!2IUuE]g -+S U15P~UT56šGU{k Ex'6ۋ3c] a &n42h씏/_ f8r&'O^>i_'{c9:UTnL;"Æ e:0-j^Rʠjе6dbSk4q7#ھi͡ʇpoMgV$r6Ck ˈ ^(.YY633WR>oyWP]07"_R6l .0 ^ռ4G0~Ledi*}zcYZ OxuΡs(P-أ䴡\ ;eزM ٬2QTLY-14xQlP}&R^񋴹2Uo8C;RV_2 -2sWm)Ȗuye=۰B2K +R1O'5EX]Y+'sH# lb& K_Σf9TN1ŨP)mSA&,`θ* T0UEm 3LNR }TZmu0D9g~ +pztFO!eE]NG#鬝BtkIOtx휒t%]-6X%`IJ[ ]-@WuE%]9QS)(?dtZOش# +3%(ElVIgaI6$VC*%-D'` :_b`AxIq d'\X<D&Ʌ%JCgDVV+`Nk` H\`-l1J\`hnZ uJ ,f* ,צ$.\@)K\`)qbG ,X`$.]RwJ޵9El%.;NV'+qZad$.@NaXLJJ5I9 xDL.NV5MfnH\ƙ q2 wA!^` V+q +   B7ӯ_ӧӟM)~󝦿i.u\yMg(E+bwf'ڐetǸEo?CvY}a\B1;rgy~1#?w>\NO^WaibmKNt6y"-=Ee[Nt-G-\}L;vޖ?wmtrP΄,=ʎk3qT-6UoKK~',oQ0QӼe*j?٤Y>蛆!lxmmķ'J/Jڅ ]`fS`m~+뾨~ʟ몟觙mնƈg>IB;\.o!C]zyD1f2RꟼjmSigMcqYsm">~#?cn"9r(`87{RAUq(s'Vä26}^zjA$qо[UhmE/"tXk۝=rzmA9Lrڪ5pڅ(ޝcF/ZYa23Q׵ҍO/Q qEծ/^f2SYnZ"HA<e0{VQF^-mtOPI|Ҥ K%mT|Nnű觖~C=tFuF~tXaU3/QEGۉ^ 1栘Gr-#:NyL Q-ZfI0~m 5TMdѶsł9ފjҋ^“&\f +8M t +} ++вr8. OUFO*|5HWBcNXI.]:ƆY/Hn[I˘"qEI3,#.xdnL$w+,.XA\fyUVZ 44~xxC$mޤo\FFxԖ˰ls- :xZY=ۂ>4zhVLz%畺*[UZ'F*k%jSXU'K]Wi{9^ TnZd[9co)[,Y๛ʶuuu=fnH葩&Cؙ R@h-/U)pEylwD^ 19kUz`ل7(m+:XΖؤ luS~DEj:XKAoE[Y[?A} endstream endobj 604 0 obj @@ -7398,80 +7384,82 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 603 0 R /Resources 4 0 R +/Annots [ 605 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 605 0 obj << -/Filter /FlateDecode -/Length 4778 ->> -stream -x]Y$9~_QH}HVHKZ1bAiEZxWfF;N*#|ß?luBh1oo/]N_N1UISGw&r1囟]5ϣZr$5"cT * rNgT^ 41%N3\ڮUfVȨ"06(V% -fRv(-%!Zri%|L: -#|)NENgaKRq:[Vr:bM duE`8]-I.+:"T.R%d q N)M0I>0: [tgtXp:3!FfjFl:XV[h[d` %t&m9mX@$l>TiY1Qb:bh؂[5Z8.0[+oT…5[ (PJpwr\`@5k h9.0]cwANV[` ¨h8.]dw14Uz cXr\`:` -`uA`  ,xW;4Iqj=H6B,ӆ&4 xW%L̘[ wUD$TǙq / }w1Q x9. ̨U35*$q\8oBI@%!S8.hIs\YX&auAHC9.]Lޕ ˵+N HOy}Pظ1Ew[+eJ-ʨz9}b)T_=]ҪE ,YW̫ J/i)h,){`]Ӵzt|_z#*Ó6U4ϞhŊiL f%zCkxsyvcT=N kdTYtK.G=%Z4oMtsyui-ë; G<#B39~.?GژM-f6F=>DkYN|X=0ÃCHۼ:*y.!r?|"iq y9SÀ.5f:s.8?[=[m ^|<+ʓy z?\zpƁfP4QJOE.cZέĕiU|Zm*(˜+2m,Pm/is_lOȘi+jnL7ؤt1w+iR6x_ڏ `&?]uXB+)7~mٶXmhm'igs>p6[/(F~c 2ݮ?e\۔Y1nӲqYsmߛg -m?ִk| omO:؛ʍqAgg9H}!r9e=Cyϵzk9>8K=O:v~7vQcEd.^حch`9`'2mmA,p4[:آB^TG;aSyd۸K})m9 -\0Fetm=Me|嗯,{Hl( P!1MtF`mXЊ\ jQ -zF;w#dC!mopuUѕ{B YͲZe.A_E}{]4hs٧P{I+C5'<R0 -M׼e7xkvyP΍@Zn~IFMwz2áٍ*Ybq8m#}郋'<j>.nV5<Ѵq+d[mTfynUƛi(Í]ѳ7!Sqgymg嫷@W3#1:g T"2ncQ#=3cG+!l Ǖ-GGOy8Ǣw^EwE{[^<~"^ƤA3>yWtGIZ{>b(cS98_|;nini:6J+[·v)rco_iM;y_kx諻Owުϴca: }-]l wK6(dC~z4@հuyU`g޹wߌod_@Cꑒ)tѾ<*%«{y=ON;7qo5(~]ޛzamDrx Sa/\U>1(^nUU);sZ\ʏub+icwe>MSivP_3_^Wv W/tx8\ʯ{fSa܆U}wx*U(_D!]}|Qj73v^ińNj^=r#?5Zfq_.pˈ폗IXVUi*@H˔ YGZ(Uj6z53*fZLB1y= -S|36a/Ўi{=X9Z(Xj7u6.lSC״: ݹ']PYJ_X)UeԤlb[?1ۅ~!kC[3'a@-]¦+S=ktnc_0F_bznJx8Fb\\`RUB3QvtiUUF'pMJ̓( E WM0[Aj'(Q?7e" 0CAo?]f'/ -endstream -endobj -606 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 605 0 R -/Resources 4 0 R -/Annots [ 607 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -607 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 461.373057 101.433071 442.623057 ] +/Rect [ 101.433071 123.873057 101.433071 105.123057 ] /BS << /W 0 >> /Dest (cb89-1) >> endobj +606 0 obj +<< +/Filter /FlateDecode +/Length 4704 +>> +stream +x]ێ}VxAH8ȃ nF0`!SxUݳw0;*^JaU+C;st"o);z{肽Dre\#j)i|O*QEԌ{err-ȩ`F T0(Uxת3S gTR`u0Dvpht\*:i=8o.98-6 +,l`s:[ӂt(Ndt]tQ6cX]N:%`ւI9X`S:(tN'lduj8-?GADe8PA& +q0kTqsV\[ Xl1p\z: -Z) -p8.G0D ]]O01xCr:A׬.@'=ޛSk!`s\]f@' >  0 A3t.tRr\l7qAPL'8. $AqA0n W 4&8.@br\X:آ EqAE qIMqAQd @ qAMe8.f j&x̸zs\ lpQXlq NzlQp\fnِ֛@g]L q\ 7rk{ l@z-V6d <3 _Z#Aepl*Ra?fV0E<&#w%H6~|?7c,H8cj +@Et-qa9ZIKX9FFa0e7dNBڛ镍֩~=JT= P:0wfyEVpp 計B1. +Hͻ Fl͗Rd>+vOo_OIS `+JȲ 0 +xqyA!gwPʽokVg &,Wj֧ߏX0ٮfT8edY׌vȏ*kQ^7Tʰˈ(s,KB }z+K7soe1 nK]E}jQw̌6ɔTV[R}yΆT%vC $Xs.ܖYpW۶Al?-HH#KNIk|Vs1d|߷bmS|[Ȥh3(pm ps:d]ͭ5P֭'@,h˺ +7PX|?cbQؗt(g}X^r'k.T~O+e_\קö LmwT?HA͝yNIl]d9?ìViߟ3C%䳏 V>G<ۗl~eiiWD}ӳժejyi0̌O=jV_Ymٛx;v#3o|v{ {F"Zm_w9r}_[D8-ѝz86_w9ޕ?zApsFȨCi_mdֶ7ʞA3CHCjB=M\K걄h3oOhiPXvihK>j Ows:4WkAsoj{|R_n odw9rc܇smq^_wm;i87>ks:Qb*Iy=cDb;\ww崑*o o +qyNv{ޓ9jw|]L{L$_c0oOZOlIHpU@Rt^qmw1|"SwwOϧێL"xK7vSzz758SZ7e͟rBb>)?=~Q1;=tnCxhpaN:3tHIMrlXy9sN5).:e:8-˒"ͷ\Nq%2[̭ q=ѱSL'a6PX&4y\M. +23ZhKVbZoM+fGپ)t͡MgR%pQ.C2%_"qEI˔.UF\ԅⲪ0f Jrӓ +MuUALf뢓l* \`]_YW0F?$ǀPTq> +endobj 608 0 obj << /Filter /FlateDecode -/Length 4675 +/Length 4908 >> stream -x]Ms$@C^ v{=6q; C%.CIG727֛X 6 qA!DuAS-8 M$+qA>73DD/b^o1]u $L8zW ^ʘWQ(PoS - oĜ54XYF/f VJL(/1k<3c0-,hh5?wOwchci -$ CqA&;LRBHlDHH ZnH09xz3z*h֣ % C\ޝɊk2/Ɲp 0ztJ9'munTRe?8LG r@͙|a~^[y[FOL}KW]SҖ~q:XwRveci}q9 -5en}U^rXހ\n8FH0T8]ːꇳ ˨ۀDf-SY{s.O5tZa^ϩ9oNӕk0s{iY ݜ/@Dkn`wg]Yz C91ՑLr>r9}Rʼz!GajokR{較y:zT]snz 'lf?l[Ao 2edbu髠¢ 5G +oYX>dr У lߖW -b|_~ibbTq(Yh(6qm"J C">H"Ũ6!k~ ڗƫGvj -L#x}ZyX;i7pOny|L4;JMnp~ I7@m9'1(zs(%k*BȰs8˱V 2$U?ΛVsHAF-=[Yh1苲oS^A+˙F:Cx_1:zvkP|B:CF~ë5J۲X§esbaCw9nǞ/J&Iʀnա#ݯhм\4O̻2.ȋŧ2i^ 5#m!+9T@t9t_Qǡe[SE:GCݗ ]F)#Fx<4JA-zhZ^(a\ 08!PO+H~`/:CCl=qaiRb";6IfxNZ֝1i;s8LoDž_:3 -nuGܵS5kN)p \UF}<#a8Fv%z~2~yuߍܬY?*:]%"{[;Wφ“mxF!}s #2 s4$|-u#ʼn#ye29vkut?W-[6e;owGzƨ瞋o0+m n[Yp'wd+G9~k|mޝ0k+fs Xtg!s#zɫ얹g%3@XM=^s8oR~xw\^k?<s4,kj; -fE- |;~޲_3{sgV>Gp_y7x:Cwe19حtǵMnhCԿڿ_8Y? dqoHs8Dގ5_s,Q֏ ^YϿy>ϳv{ޗ3]yq:GCcyYzjrǮW|O]w#nfv\Eswgwؐ 9;;?'ʭ]T5>O\M.6(赬;'?/6S7x 4mT&}Usuבh:+{i,`O';4:ftl/J|ίS6zD4?'MS~d~ϻSsOS_\)?;eَOc_~9=7844i=>f nZ>l<zi׆&(&m -Tɛp}X8eT)]]a U}۠^7^>,7xaqNmMfm8v \b~]YAlm,>ږՕoԗ$WF͈\h\\ߕj)VB4>zbA^/ՠ'q~cXh:-/l7ŚP50Q7a5wf_ʚri>T]QJ])YqD D-٨=\rDXnjՑ -TlUSfJ:œiȯ@dsDQ8<eUd1 lM|rA(W(WDžڭ^4o9~,*\f?h[!wюIܬy'qc6ttTBLtuT$Uc.uU)OJ.T]Ltud^3nʝ\joma/c8C?4Q۵1a3 čFGqƧSN$dbSk4q7k ұizHpʯ )V_cQsg$rҡUo섩Y633v}|.vˆ|HMgMxB`aI臧׋}2ٗګKei%:㶪3\N^R gLT fXݪ20Q;I3tQPi;QJ5N)A=Mu:v +i%]B>I:[|VZysJgSt`-&E+"l1Nt ]ItN>'D]N:䓵Ji=y`ӊ:(tR|u[e$-$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn ߢ +CĜ"52cX8Dmѓ+qGLSVi%C|a`2#h Xb,+1Us7Km62 w~Y +SXJ(RT );,"04Kv[s䈘 -|eNl;m İhFeHFJb#ԋ0ȢG3=hz4S' 3I|gGDfC3(hkVp.V풙Ncr4ӯog oQ}W>͟/˵_f8 '<ӽvݭPxIce(o+oeZeT?*u_kr-6|?{Y乗QiZ|4뿟?|w58˪j'eYw|,qw0;7o<賗 qUKw*&eq݃y *„zu{㚴6IfE`mJ"\FF*C8nuݏcync!N {aP9a@REkA& v2-F~@UhcyA_u{Y# +V^կ}$'^ë< =;к{]yTw/:g!Š g@z]ߠcA8kYT 8Vl<Jv6`K8lב87!z~wRd9 uǏ1 + 4Bf+-ҵ` K3' +\|0!y?ƵzS³#\X: s=?Ĩ q{Xۼ+1ރy7xȰʨ7#~.]bʱ~1#4ǙQl43[Ox`u8vtlOϷ{,ޮߕGfk$Zrtԑ};M^cmc`_Y)X g BhެukJOw|?}Jڡ5]¾yy 9'z74-=uc&ϓ8.uz%yV_=7?V6U;j^>dKoSigwO9.ww赽#~#Sdc1}S=q(9]GufwSCF%HCi\eS W+aRV3/<(_ov<hϭ>L٣Ϥeo؛2QK烽/uf-,yz Qnoky FYr!`/_ʜ= bpk"*`ׂmAezZe+NL`ޚcGyy_>}#>_\׸7m[Ni>-ܘE_>-}ґcEo:bx=IPae۶GW׎49)JyRl| mH~tHͻ|ǖ}k1em*.re5^͒'_ybjאTCz s0 zhXgCfyxg"==HDxޏOw@7G^|=s }t(</޳ޛ|ԑDd]9LX~G}/sM*ۺIa݈! 9w#{r<3f&][=ja;{c~X}0ӡq?vst;ݰӻ+w= GwGSEwG3=6>x~~|DxlPEږ~^Gz3 h kJI?apXa>RM̔sYGCٽgv4t/Hl^=W4WPؿjNjMy,@GtV~=NY=҆Mt +'Z4iC?$qnb>{INnű|%gZ9^Z_,*Ig73 +]v_Opع 1 ňdmз|WQ5lVKj"[8W,3識Z&(dL#M t +} ++вr8. +Cݫ*|/5HUf塱<]it _:)!=nK<21y<"Fknkbƕ\}Jmz* ݷr84|z\˰\*͍b~tQm1a7 ŝFߊNM0>ȤrT9cQ< wɝX_&/be*lÆ c:0v=^SƠiw2i52eb d>o=_8z^C]o.S>%Y}JP\ +sle&W\O;b,KuO*+`I[~ vWWF{x}v/&:HڨI߸5d-a}[M{eس-Cnu1ʤg[x^UuhtVb6%[uKiq[Lѥ?pO{+͉Jؤrע% {TOb$ݤUۭ뮳5uCBLU7);saAJU1Q;U +GqKlk<{%WkBwLZ56lU7SΖؤ luShe/lKzo!Z +zSTZ~DFYmCՕ& endstream endobj 609 0 obj @@ -7481,83 +7469,87 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 608 0 R /Resources 4 0 R +/Annots [ 610 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 610 0 obj << -/Filter /FlateDecode -/Length 4740 ->> -stream -x][q~_Vx} p.A9glyWoRZɸ{sUKXRSc -ΗO?¿bqտopg(LN'G0L[]N鿗yL)y/XEv -1UJi+B0 *'41%I3\ Cת3(E'`Uת3L$`N.*`6J:tM%ѓ$QH:k'H;-wQlqIiI`DJ1H:[JtNt]Q啖tN.E"QS1kQnrZ%鴞iEfAg`W.:2O8bfmՒc:؂xآ(3hb^80Q2$vHQbD!XLr$JCgDVG^ba a:bI\` lA -lK@tK*i ,X.TX0$.\@)I\`)qb ,X:o$.]KK\`"-`h%. *H\@]L##qFudbTxDEx,.LV&H+7x8e$. !%.P&.(lJ\:c%.@a["qO`I%.p]1|.M:Džy^IBe%.p]g?aE58X%xW$.p] Nap$.6i芺4 Z2`T0HZJ\Xޓx"=h$._0Nʀ)$xWi*˦>D `/H\#M)/qO -:|Ove:B$.c=%k #-n` "SL6D$qAp1ft-"t:H\MXKM^0:M[0U$.R4E\i'[xi-qA4ޠD2+4jIGQH~bWQL4&$.fI\6:bI\f Fbf )O₤nq蔒 ! 0/y%.HVa-0o $-.-p0oIo$-&{oF f` ^ Do1\u $L~W ^;(F amC -܋*1=4YF/F B6P_ct si Qy!`͌0-}sdv#˟N~{^#eG|X}2 ry&m [FԍԠtc#cMA/Ml3[FzU+E[ཌྷb6JF%޵#y|]/^pƱ=9稱?؄< ӯͿ(*_|vس;(y۱rycZEqVf(cY.\]N,/&&笳9zZe}1=^nki^u9ok. 6!]mk!HɽMjr)uϖ&mt \E5737V]14^ΟC. u]˾˿[>/6vj.us^koSngHCʿB vo̜1NYuS6Nڂ_o8q#tvoֈB`h6_hdagJ|\Ziںf/|eI$;3ehk lVL%[*lg,d~Dc2\Dqᰵ={Mc&xiIiQ23rn}+e^Z1P8b~eO;Rzlx'{:vq/Q=OIb7BX --ޮ܋MbK[a -kh/dƋLv1H<7H%+,0xsy}nqz՘0ra$ڌLTkfDlRKy fz(˓[N? 9mk6,fN_4bЫ -oߜr&`'E/M\|09l߸,ZRq(.xSi\ -T.@JmRڱY Cʱ>YZ_9ջj߂vf`FU+*3y6T~=b[vL󷶲*uh=кgރ{, v1nXCmCtnշЭ̸BOwco:P9X땼^ԒSj7ifaݯ\>G9|*+ -hgl=wy+o-?\`KW|/ڰky&IqSVۗ$[|uH#-\ߘjbK|9r͞;?h!hQ|tac?"m1>Ҏ;Sf.ݒ5?tƟ3 T -=q0ӡj' -W杻GFk~w; TuO<gC8PvU*>PzǑpg[ǓhQ$tHX':_B3Z﫺yzft)^{S -vн1ćJ;J -ˠQ~oU=Pw0"_̊S~~1k|hΩxd=лT*ҔR==^t?Bl;*-E7@W[aXϘ! OWñ IvY>W3.@LdO剟2I~Zc#l!SOOێcݷ>dr]>f-}OW>2ÕxO9: ʯG ,NL~nհt,aϓWX/9{|~qTt&;V7rR)>̟r8^?M[6TGS/oY!AL bE&l 6LiҺI=l,R5 BZ̭W.b~SMl> {4bm tB5Tņ=O6o]绰>v5a[ ڵM1jQwj2;Քm@ wM̦FOZT ILWJsmBK{T{ҡncxAHzk#֏K1Z7Jx99j3N.] -*Fm:^#~'L*3*\2~+N徱I=)CwfQ t[c eF50[q%7Ńb>& -۴b{ZWqc]ub)ucPݴ>ĦAh;!z92`ϗ6lUu/H\qҾCKfȈP\nLXIzơ\p1|i2;]eCv &=VF?<=d_gK7(m ci#?˾m -endstream -endobj -611 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 610 0 R -/Resources 4 0 R -/Annots [ 612 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -612 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 438.873057 101.433071 420.123057 ] /BS << /W 0 >> /Dest (cb92-1) >> endobj +611 0 obj +<< +/Filter /FlateDecode +/Length 4773 +>> +stream +x]ێ}gyH8 Nc#)I$KRK3b<*^aDIs%r |I +7X\Y+sH lb& .ỵf9ϿH*gbT^Pe!Fム +z@sT0Ggܵ* T0UEmUf:((%`rAA=Mu:vi%]B>I:[|VZysJgSt`-&E+"l1,l-*(-|NΉ J1]O*IM+00H! +:[Yot8t ocJl54ZybLt`%0$ + $01.'Ivp%LʃJ4`\Q4tFKD`l.HL`5lq$. l ,֩%.[tpaqm +N kX.{uF ڵ. ,x:$.p]kSX`u8*J\FF $.p]wM 9h%.p]ik (Gxew`%.z-wu'iՠSxN>Q¼E/:,qbx.3I\ c2t۝yލhuU-9 +VfVʼ[yFi6S;%4>p`g4n+geHg;'?/>; k-3ᐺ9Oخ_؞,s=oˆ`w9Z7^/d#Pjjp%^GzҹũL7]#Bů{^Bnj1[(3Kgq6Y;'?<s8_y=QTz㑇F)SI֛{8 +7+k[i!5jYVD=HK; 鶏k=Clwm KYZv꾜culI?+qc6u 1@wgaz_dAy֯bQ7ƺ#~*]bʫgoڽgVR4w^ըg$L/]+ +o_v6V5y ]~ V=W}ɘ[i19WrE4b#Q/1u! jƑ۟aqJОkawLnVSOi=1Sit}%Oj%"45h'45gޮXFBZUY9"5科jl2Q˜z~WW[ΙWi)Vk07^)kjM}-aakCȖ4jQiE ^tNӹ.glC0`ѣ & +n&`9"_Oim(>fnC'eZ +&g6vn #3?eرs ݯ5:EOLcs_ {Rj'S.Dsع67$T,+7kxroF ֗?/d;UMSł9Sՠg1}- v +O +l7*&BŪkb=Q.4a5wf_ҚȆrBRT)QUfQJ}IYqD \٨4&a*@r5].$KubMZ\zҠnSxAvalL9ls)4eUb1Wɻ:䣐7P@ -+jxiRz9fU*%ЮB(ҮZ%47xI\*8--.c,/H=.cyDR i*}0V“v ˺3]zeܳiSnq1ʤex^+Eet*Zb,69[閱IX}&R;Q WiܲUoVs8:RV_2 sWk)m]u̚!yeW)GΔ:Hʿ1S j5vƸJ!C}&2B#w+X 18kUxل(U$/gJl} ͩH1D>e"}ܒӛ裦Qi9:~#o>g> +endstream +endobj +612 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 611 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 613 0 obj << /Filter /FlateDecode -/Length 4918 +/Length 4944 >> stream -x]Y$q~_Q6}`@aavZk`}Lȣ{ZN3#xY,}WNR?~)zꦰZ8yC`71_oo_ouL9o_S V`y?h|XAOb b۲"p9y11I`%a]vD$GF)As<gR6YEt4)Dxy -!$dYi!)YMQbU"ċ@;Y%J"v99'2x*Ŵ'UO6Ê$( d gYUFY#Ɣjhu[eŘDdK`dQ1H4.I`b\6NK -'`d?Vi*]jrEdIX` dA ,Y ,Z$,[oA J ĵ)8 , %,\ 씰tܣk}0Xu)HX`i%aZ"%,:NV'+aZed$,N ale2)) p$$,p]8a Z px Aڹ+#ag0 Do ;Y`X dHX:c4j) 2j&UgNU\EMKŮ˹.g^z,Ӻ:yui,&SLqq ˆڲAXNlldTeLRdRtmA6_z VX A7YR"-uV -72YbOZV`L Ŀ2U_;lߎ<%C,Қ=33;{XX:Vft7C.( x~Kv[w4Mw:Og'Ӟ^s?"\7mKH94{f팲pv'K}dӭk/qG헹MFܙ^t{Kw-DZHVo:vZ Jkc?\JJ89zq^OК>C0ouO։5^lh}1wتq)f'`Z>lwo}ZoO}wB;R{Oz__bc_v%:Yۉ>wtp+f(tyZ{l<{ -dV8z{gu+r!U,ԶϾ,uzPVy6AG;;<%ikSoQЬ,o-b|f>>xcE!0c%>.x^r\6gzγY=a?`݉n.XdسXmo/PNʭ{}76ou1Mں™u^ty^YVP9S=Xn:H٘H?|ƩϽcE/y:<ɤ>YDfڮSܷD? -w[pG/g.y: >ɥ-ݱyU^y|:f$ }lΌcә_t|쿶r3Q:7ǛMivWG |wqӿ7y:;Meckqqĵ=M Vw|Rmat׵8F,I3V,r읎fi ՕxgyVq\ϙW^lOr~v6oyϏVo6q Y9գRj^do1B{q- Uc7>c?ˇ^t{}&q{EE8ys,}4.L`e= >iND[T-Ů?Z1 ߤ#\ӛ_( =6s[.Cڙi,MQXgDIv|~"GksUU=GWG4Sl#LW䅿yյMX$a% [:j.Ii"im;ҧm;e UHP},Hfm$ Yh{:I䕓w>`u+b/[Ɵm,852/ln+Twά,L[f|ek4Lj2ǾD]Vkd -llU뽖oav湎aF Etf6:(RǕֲou={dݖ/sAr^HŎ-׵nay7e(F=9ٜs -歮ҿˬ]l}oEUvYwaccV]=խ/7_eY:˚҇sI1O7c#)l6Uwu9kutQ}ܭF9'ҝ܂yv;aRNq:Օ?n<(_jcӡg!as&.S rhz$q:zg>t;4OAu!GƤa= 4- k@cnI:&2ӁlCee^ֺG})tΓ Gا>I)%W|w5סF ᡂpX-u;o7yt [냅C|9jpسw?Uy;Rsv:~Hi2jWu UqrS>E=t8 GEm9I/(vS"']5=W箇cCtM6ÑN/?,OK.kvLU^/G~VUTXĒgi y==*BmȃɳnO_ǰnɫ -A6t4=>NK:]INrOrƽco|vL7MyF5/ -} -qe6rR^:> 0_aiVfHP\hLN$wZV:NҀve16I t[馱cH5XuF&iXɉ -:7S~]-UZgA3sN ;_99tllecs#L?N:٨ P\WkCr r>nmXo(ҹ2_>nTC ӰuE;}FHڨĶl8S/5}׮WWkIT7.'CF6tL3oaϷytk -7|8Mg|gM⎊-\gXEFq:]dz񩠔ans}MWZ+ްӼӼG}9@ʩm`Dm'Sm ۶ؒ keڳKnumQSSWiNF4UiXe -K2$j)6S54%z>+aSڭ;^ls<7GzK&xFumnwml gz5).{ڙ YT)بe* q5%ys\6#Rs%'LUQӷ"Mtr!MB*Üd `IH"}%7їDכ(W +x]ۊ$}gJyH`d`X#쮍$?}"+ouu;vUD^2OȪΒW% FN!D1y+/X$*{O>Z>ǯ.ZW5蔴_>eT*!5v^YǨp1r*aQf0`90JF`6^* T0CFC*!X h褝q:%'C'tZOi%sNg`Br: [4Fp:bt`uE9- +]-@W`uE8!9]ԓVN ;٠tRNԬ# + 3wLREqoqI +@I8.]В$ @'?9.p]aw`5a2c$ӁwDs:>r\4mr\< TN.)z8.pQ@չ / ,V[7`V` \ LQf-9.M!qZ95fu:9.L%Aq~"w4[0T8.T4ϜI'xIqAP ADNp\$Aqf 7q "M0%- ?l[  D```MqAQd @ qA2`\R8.Z Dnjۨśh`` Ȍ[pMsEEqAtq ě%@g 68x'7rZW8b @s+d O;#(2Gdoy|t{d2քa7W3}'k6^\jF SEW$,V0]f4"vĈ<Nᴶjz_=Z=֪䳫Eu˗* c)F*c,#͌u2σ 2eCYJsVG9OC;Ud|߱KK2kyN?[we5Ĉ(;AP6bed]<̊6ɔ3̟)FrKYL]MQT+oG<TˇBxĚ3޶2V]}Ɏ2<ؑ/pr1d~kS|)c`;B≮ˡ][GJ8B|Ȓ-} bYWC3B|?cՄbvQx2ϣО(lw+u%RA},ƞJ}?#e_קö dVÉi{/ 陠}p;!Ǟb]dǜ_ac}Ψ̇jGz;Q)i}p=+jг]Բw=ZTlFgiJxS$eosm {.!v|1-nnfk=?ѐ}7/ѷfu{2áy]7;W쌌~uՀЗ"{qmѺŭOJ2d<ح;=Rϼ&3nV|'Ww돂]![x:XYK^5/m dC恿ƳꦵǷ Q뻵Q\z'<jzk}Û7WPꯣs^;ݟp=Xw=yߨz 9")et7q/ +X>;<#k=ǧ6N|+ǧGzhۇ.wK}9MNp;P{ +-L~Q>WgL[ߩZe=S+Qut;\C}!]ugwu|"kxxk|D-fI5/}6[}h맯)Ϡu~M/m0 }^q>J|K<<\Qrh.FD'<G ~?>{H@iMu4<lߥ ayQ\y~je*<׻'}0XMMQB+1(ҽ;10:S"On :LUeѧ}렀-(O"_|_'<⁇uow}uS*ogccsĪ +[O +lRNhBU{hrk6d%]w /VVJo(EUtgTR[R1~-JY]^0 .t¦˥S +-k,-LiPס6<#Km^ՍRL{־ÍZ /ԑ/ԶqzPwVq /MJ|Yd2?SRbt MZ%46xHU1\ H[ڮ}{!pbԵҮ:<"JKb>+{(F&/ q֡jEĮrK/%mm_v/4QL&VvN )4qї$.A͸ϗ\40BNKzSKe|y1?y\rBd^pRL*:l:27 --hR_]4b/)eePYж6ĪBWIݵ>XMS].vܤMU8/t]8mJ֨.#NBqUe 3 }%~w΍StM}EKX'}Fƅ=wW{6ٕ@JUK녑/-O뜣feen䴡\ 81IC˖ؾRSdJDQ2QdD_lr9[itŁm%_}&GҶڈJKzK:@oW'ZKFUjZJ]dͲ2^0> @@ -7586,19 +7578,29 @@ endobj 616 0 obj << /Filter /FlateDecode -/Length 4786 +/Length 4791 >> stream -x]ێ}VH@Y <I\H}F fT#qjL-$%qop qA+@WԥA%.p]В"Dԅ@?T$.]$.]e:BH\: [aLYSH:aIU*$ 'R3R[6_2=VOzx@i>/&(2&b:wfyCGm=P29 @@&Wb1l;˿?Oчs_~_ ׿p` ->a;e6S#>7fҗO[]ϓNvŨФL~cZF{T|N0|x S;LFh^ey ^&jo vǦ+}e7?oi#yõUWX| 3vW&kuג.1elMzTG϶1NqZ)Vl)w[g]=}"Mۋy >f}uW+.g o{X9Nfž􀗳3u<=г~:WP"Z{&ys8TmD~`޹wߌoT{+{[ayJ]>貭P`H^n?ǓhYi/w9oaf?5tKR>]2~ͧ՛S9nlҡ`'>\Q*=ٴ]ڍe~W~# 7f՝y~~"2dn(yhUT|js8n"M9V84s_C w;860?l-jw9j7?^ĭUrܖu>/'+{ 3MI"[uyOJC-5ͮK>,>;x:&Ԍ^yúx.;bhsFc?빳egOߙp ~PcYTZ㑇z)容(shBiXJ<6Fyn%֮ z^A{v9mCl=qa)Rb㰬y% we1:iw4oM=<+ ,+ֹQu?effr6܍~^vHl86oj:o:ͺ5u-j|f)QUF̨Tbk? I~JYeWa,@5]*$JsBM[TZҠN6 h|p7#׹(}"ÍY/'gHl◓ Bj׸B=.$VnGҤً~,|S*\fh[!OikW<6xH\+X --k.B,o/>nM][l&eM!2IUuE]g -+S U15P~UT56šGU{k Ex'6ۋ3c] a &n42h씏/_ f8r&'O^>i_'{c9:UTnL;"Æ e:0-j^Rʠjе6dbSk4q7#ھi͡ʇpoMgV$r6Ck ˈ ^(.YY633WR>oyWP]07"_R6l .0 ^ռ4G0~Ledi*}zcYZ OxuΡs(P-أ䴡\ ;eزM ٬2QTLY-14xQlP}&R^񋴹2Uo8C;RV_2 -2sWm)Ȗuye=۰ +*`6J:Fi?8=H:ɢ.BtN!:S'I`JK:[vNI:l.uŤh%]-ɂ.+:آҒ.䜨ЩVg|VI:'lZQA +QϢxGҁ') jIa1щ:؂آb(3h"^88lD&%$0)O.F+р~r!G-UŻ 1հa:b؂X [XZ$.[oA …J Ƶ)8 ,(PXpwJ\`AQ ֵ> ,h׺$.]봒wEMQ[` J\V(qb 0p$.V&wMRN5K栕wGk28q&H\L%F]P=tJ\&D˟0VN9H\:aD]tDžy /O:,qbx.3I\ ;/㟿ӿ^/'NO_痿u},\܆z|u~fk7]0hߣ}^cC k^}V?\de4 %߱u| .s>cf߃Nʴڨz5Ů@_zTH_.(f;:`9wd2>fA.rNÌy.6*sکp<z1ޝ 5G}C'M>?<$qM}="evn<~=\bU2f:F:O8b_q]nB15^:)ss E ).{u \Z=VBM@C\enkֈ:HRx(/lF5x݊`q uih۽0D~DH;HqdCX;V/ZƉ:G}[v*oNصale7ӷ! xdCxN⼯dvx7jA1:OkwSe4j)hq3"ua5c~[vM;<]c\G:~&YOy6;q?"Ͻ'SuN vcғ;u_sU"#rv6q^ˌZf8o,>=dCqLaWaSs #GtYqXEi󽈿g~.3}a3[w﵃Upӡ +W3" +-{k:-ў{}ǘI{[kzȔCTvC? rT?.DjӸO8ϻd0˒CȱMQ8z;A GX + ^ tL 7-3{ąMt9y-p㾬ϿGjy8pbm&2qم#<7eqgos^۠|$p#,cf\zkνUd2j͛χts9-qumPK{rَ-!n{ ofe_~Uެs9Гue `w+eu;w'ݡz7Qe?Р̶1^rfPϻE.cz88lI#btFfvK.^6/, eSY{hPYnZYmuOJͥeSʒ`ya҇Ͱt \N]fV!MЗ7\YRW: 4)t&];5W^J-߂`l: #XTNjta>^1h?.N;ӳw$\^֖-[e7lXkZ^0-Kko$Ij![Ro,Q3識z&[dLd/ULBnU{4\]ײ&<.oΚMUdגm@\'AtTma0; Skr-'nҚo#[ԫnJMD6G/bҷVlwm&vG\Y +-kxҘ05;gMJS^h Eg~Mv:Nve16r餄DtJ\1WyźªWrFv]VnoSիv}kC7.m5@m2W,lnSIV~3&솁[ةβLZqo]2g7)V)(K_e:nTc Ӹu%+}N:)o6m8F]S/+:n k׫N쵤n }!]-?/@kǦ/󥭝7\.Sپ$_Y}IVQ\nL$Is=PP_0.m׹򦫬Aloi~ӼG0㾘 i&}16“\e[slI=ڲlC eԫ-*aSڭ+^l > endobj 618 0 obj << -/Filter /FlateDecode -/Length 4751 ->> -stream -x]ێ$q}gK~ =H0 ȖAˆm F:-QYj=UK0xxd2UU"޾|"89"J J>w$0At׷ .o?uu"%[RY#B A:F0*DyF@ST0V`Mq*a* c2[U:(˩`J.0*%aR:"5)'<9VǤ Щ91tIx]t$s)k%-I:/p8.buqkL [ [2p\@$]]X؂H0Z XkET +0+ p[0T8.T$FdlAq"] j؂hエ#V^r\kIYIqA^Pq V`JV[@h8.M,sXl1r\f Fآؤf I؂$08tRr\TzS[ 0.i9.HFb%3n $ [BV[4%f܂;q:[t$i9.@&"zvK z3]Ls\ 7rk{ u쎁:̭얁b -잁4XYF`ZRIv@ ',O "okIO`.?;eG!@ȩ-+ ѷBbf`CڐY -DX,Lxȍ?DzT ɥ[,"4Kv[shr@Lm|4;8<o+&T,b}GL09jwo?"(||ZW>˵+N 0'<ӾvQ]l\ҘMvL'R\߁M9jkKNQY|3~_?AWS_RаsY~ O;Py5MGϥ<lw9MnqB\"꧛;!0{jGM3Z4滼<[47cw@yEF1W|sޛ]~1oZ -5̈́6FĽҾDkYN|[F!lm^vG<k~do4Ը !v]2KwtbΜSgl;q:znͨѨWlhq&D͠h2S1X-Vʴ&>6eLB[=6gl~ ;1G=鐻O>25nzf.ă?,=-3kCB'&A)GÅ -~_ 3sUՍ%=smr{3R2Ӑ+s3JїζZ9k-?jFWg|z˲V!M6 --׹ū%vhEuzKJ|i_}SCfK;L]Gln*m9kisn1޳CALFX'5jS򽶕챡ɷoGeuץlRC҇u+o`sCen믣6vW:\)s?4жwj8c;~?eWKu\_AX`}g~zvf? 6޲]{2?~cm5T8!ɷ/n^ʣ&oًGt/i2[ƥV_NVZ];l %jL(7pMgg9H}Ρʼ,2! 뼹㡯]zky<8K=O:v~qQcE>6]*[Dgx6o[C - ͽ`oLQO}B`*;84q*ϓ,]yOۯr#ٛ1:%6TMxa5}xS ^ AII.5Ue:^'c;L[Z?ðEz|IV~sekKPfCڳVOV2GGlNy#bJAJiY7>|;2b\xYofo#o8BkЍЏ"ɨT.ZOy:]^wfu۾*~jt=ttqͲ}Ï/Oct#"΍oӦK_ֽ>rNH 㭵pqF'oOlqdC~U#zLzawo"u03OuwP8dgCe܏3>yofynji'd?xp.ӡ |_a]n?2ψ{OtgcωܲsM;vJnY|t:C_=~EQ}|unʡZvܙ#;yQQN􎞥;쿃aG#'<vμp~~7wxCꑒ*tѾ<φ*%«Gy#Q<7qo5(E)8ڈ~R$p_/>1(^nUU)^\y3g+eԎV|Gd"8'Ǽ혵[p<_55N nT~[Q(MSz+C4VnRٱ&g~ -Uy/Wk -s7%(zG.#yE][89|,+Uv Y\(Uj6z5o7[*fVLB1= -S|36a/Ўi{=X9V(Xjv6.lSC״: ݹ']Po\ղ`TjRWShl0V ٖ.tvaӕ\RŞ5UwS:MlgdA@Xb#ԯk1=wZ7z#]m#..0] -*Fm(;^4* *7 U&%_m^ &^;i:󀲡ܥBhIOR7yH<"FkjkbƕPV#P]巕PuUwb߸m^ m[,&ZIkf^ 솁[)g|탌qo?_47p>FYH^[_Z6Ѝ[Wq&OcTa6PہXŞU4y\끯m.;ה1jQn q;оrijYzk -csp):+Jڧth2b,C[29V\O۱+ 5\ a]}܊! B`3^[5VV0F{x~/&:HڨIFikIR/9&?SoP+ cϴ ZňA{*[UZ'F*k%j/٪[r#b.i7Js{oRukђizdObImOil[]]g =2=ۤ|g,y].U;!*Pc*m{p? lFγW{%cMaA_Mx"+_%610[Af'(?7e"E0CAo?d6'oK[ -endstream -endobj -619 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 618 0 R -/Resources 4 0 R -/Annots [ 620 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -620 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 461.373057 101.433071 442.623057 ] +/Rect [ 101.433071 236.373057 101.433071 217.623057 ] /BS << /W 0 >> /Dest (cb98-1) >> endobj +619 0 obj +<< +/Filter /FlateDecode +/Length 4661 +>> +stream +x][$~_Qφu plcfjm~%lsEfS(RRWo D;~t[C^$/.I`jﮯ_/6EN+{IEFུ*B%aT +u)[S I\`9  +pÐWfpC{E +nh=R~(-%#hFpt.DYNyΓEᜳ|Q*NgUD2s:_3thNdt]t\6#9RաGgt8i#/H |!p:5>Ի4Y'V_h_wKhEM ` + yo8 +rs<`N+/FBeuDh_4 ؖ dT-I8.0 \)9.0`\q\`@Rs EwNs\`@w )qw%/0`GaT0x(9. .*Cq"t j!y>h8. 𮶸nj+5դH6B,,ӆLh%X> *Dq婢cuQ(g-jY("p\`q8^`DX29xW(9.] A(`|J. +CwAKB0 @RDqbx8p\:bq tLF*Sp:ThaNޕG x7 8:p\`q $%tX8x e:B8.@`-њ B }/9.8.a>ZtNA׬.@<ޓP8.\Jtz @"K q\#|AWC9SA6tS゠ A e:qFh%Q՜dg 9BE M0S:&ۖL~04ctn B/Zj 4D _q\)L4D0qeo obh\oz "M$7N\o f`M 4lk#Ӂw: p&"[nn/A#>!81^MHp/F+ $7͑ؤ286kaJ%ٴ"'ܳOmcf&#!/sZ,/?c__  hn[CC+1i>b:@c-9/?L< 7pxL0}rMteLԉ9ĕ&^sq%&äӏ_~Oѧ_%%oT Ϧ_y~/n+e,GyԿQO4 ^'Q7C +oMY6qz'UU!/i +!&H |3y_ήTDܼʩis6u,tg'3Z7{YNӡy=ţ7:Ĭ65[8ū=bޝ?ܷʑ[z61iZX'@mlN8v\ R<3auWgj9Fx%|lle4HۑY=5.- xu鐹&:{|lZF"is6Ԛ|곱x TQo }Ēϒz0_z,_6s6tȻ|nT"n4deQ_reDX?FFrqh,|ח.{߾oxTjjI +ĝvPJ-Hhzr]u[EVV/Dž4?w'KX6h==w(.^Ԅr鐷񜾛:Ӳ/Giv>-{$N+H5ė>eȻN!6OĔ{u$o9yԧ(~xz:ǎ|x^Rǁ5˽36C߾xsY;q>vG&Vx2<Nӡjc;[fQ} tHxZlB_'/}gIe|ۑ>$kX;mΆV!ڂ={D_蟙M2i Hm2[{otHȆ=g&y˚- ;mN}dyj5' +~ N!x#V}O(CӮ,'{lߛw];mNƍta5[rM5tH9צLfn>6C'ڭ'օ>ozlq֝6C%&(1hh)>Y?qPftȧ틜}}*$5z3"<{ِ6bLkyU{Gk{YZ{=}bgwڜϭ><_|$sĸ;mN{U_xj;^CY=Hj=y}Ywڜ}SܑL +:Wбx$(lH\?$"Wp7&롵l\c mӽOlwڜ wU3*zjWѦy[\q4 [絀9J7vwe7IWoObJk-tHr ur?OqOoѰVa/%'-> +D7l r!HV~zȹkHpEIѧko?T o琢Re=$=v!՚ 6O;,O_3$BSYw5~2륤iO N]?936`=̚]R{tڜHu>^^OARP`9liS)5r,ƇiӫXH""rv%FLཝ$?r.R`^ľBc9nfi ʹ_ҩ8ݽj]}0+X}ڲpSlv.XSG]Jչ*,UeosMxದҴh>U]-4N"di*ĈnF̧&4f7vd Cr1cD [n<--KPMcJ PGԧmʛ>"M8ehpgRUz)m+WH +Ms"J5,gS-<ERiOzT/fO+:Հ"_6ե/mKɔO[JH*k>fIUA]' +S.WŶ@u"~U|1r*v;_[/-rYx6 !_,]X# νcd܈{2 sXm,u7{mq\pD܎diwSv[mXZf4q\놯J칤* ZXje+[W%ym}?4p^ᠽ3uH6Q*ZthI78hO悱z6q3H?Maҵ&HlB`'&^4Na~{=.$-^Xf8t2k:ȝP9i)AN5AFX,\4. YVOn42q`kɗJִm[Tm[ʦDK@w'kKFZ"Zd4vmmPuTV3;+=w6]ց+L +uKS ԤSPhShR#ms%HΕWBs2Fz- +EV4zw͢doX0Jsr 2Œ)!!T}*8l .:yT^*654OK +endstream +endobj +620 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 619 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 621 0 obj << /Filter /FlateDecode -/Length 4848 +/Length 4980 >> stream -x]M丑ȳI?Ç50 c]65{ؿL Q2\OS$$_C>+|hc -ޞ/?~<)8JEQZ09|t3NpɋߖuL)y_b $B0 *'t1%I3\ƮUf֘(" 4U f: (%`nt/錞|L&FM>XKEIgaKJK:[VI:b)Ia yRHb0:IEtEQ[WZ%\֊!uFE"%鴞I+ -䃠3+Dlq#b#Bj5yu"-l1&XQ[0[T`M$0!L6+4h&Ɇ@ &SxhHgau lA `$qm-"qnJZZ…JRVJISb K K6z KV+ ,x5El%.;N#I\`Uw 8+QI\`&*+q „5HXq)#qkQb489- X 3$q  xW'?aM&wu4-Fy' x$.p]g? xW<jI\8LoVKJ1J\%#q"Dԅ @'8Tޅ{OxrDx{Dlh$.@\Nʀ)$xWḭ*ݦ>d QG;>):?I\%` VS%.1[2H\`Jѷ=-?`)&k%.c?QtL1E]N B\{)bK\r$q̀N[ B-X*M 2t Ȗ.tZK\ lA4(qA4L$.^C-(qA~ʡX&i)ElMH\ɛm'q6?lb#` 9+qA&o71fo -$.HO9L4R$4V˼ߌ$Rob'D>7EMIX$7Nߌ ~ytx%0"2MD^x]@|&+cqF1c@UL(p/Us -Hbfbg5[R+1m'Cό!w2aYXDmыFk~9=dFPJ[WX&ao)3Ie a#u!u#5hqNe#0r{jOg"hU`GJ& REtPg+9v̇fw?0zrik_ b_g\Y^e9f}Psf_XVeٖs;.-~_{ɁU_uSrCۯC{[K{lbk;_Ni ]^S榛;V[7 ׆m) -~Rti)HiB;W?z^ }z vOu!i]Y[e[2tsfA6Z݃u ":/3. Q/Kbj3w|r))J*VF:OP{_WV:P@f/,˴02̮^r#>/ =Bzyնd:h<zo 6 $o̾eb n}Z{0|l?Wb|{!v'}*~yW2MQmN`gCىk- Q]"67_[OX]\Mlx!q'iHrC;"-Fm[oD|DփurmƇ - ߒ_M}9ҟ] ȭl17e?»S!z,gz<ZţYW_GnycY -0zO{=VP_} .7.%ͮ,nu<@Ѓuac5$e˙w4mfhYnCW]\EsBnjjQ5x ~ȡ0|EjlYLy<\4J!63$ՑxY -jsD**G4m%;Wyn%6 z@gy:$ߎQ!mky-.m \J,\ECц1:j,uȘv:OV8X5082\x].1x[Qo2 y Q-o43[/x`u/ѣ~ y:f.yiH"ecǦĶRs_E%eG9[eke9uu `uq)]F.lo=ɥkIJ<Rwεx&u׹#ж3c?(f'<oG|s캔A.2ltRS}.Uil:i]RxNE{<:Oĝ=<vƊ=]]sYȋ>O\P? Owk[' Oy],n<<"oǚ9[hHge?<;Y3\ߗޗ3 -ʃu q'gguCx~t[s NԼbU|:+csq=6ߝ?7cC"3Ԧˇtɇj~g/= zֆyTl7Lo,_Z̓!o~'ʭST->!d/ I[GyDe]>9zaϧCYf]<ڽ~ifÁ6ut g|8\{Rw#5>2uJͿ|]z3xmW52Kb#+_F2/wUS~WwxܞnS"u;j׵ϥ߷qK'ҵ~A Gvsuj=ccs6q3w^-S"پ|ټݑX篵^D1r6v$]7Ƚec׏FUpvO2׽zXR@{ݒ0 {!?upE+ qӮJ}?&( ׿K w-;5+^a>c\2+V&.S1_Y;*7m3k2O]w Mc}pik tyuq&Q9*!*N.5lޠΈ\2? TS^襊8zoB7+kGGڲ9* SK_<&Ѹڛ\j|Ƃ5^sդgq~)^h-/wŚPu_҆wa3f_˚rmi*T]QI]-&ĶyD Nզ-&٬\ɶrDXnn͵ -TUSnJ:6¢ʐֈq)Ik^Nζo'Үsrz\H&K',*˯Rk<僶 R.$&^:VmC/ˆK0KG%ϤJ[Hِ1yHռLR.X/lw*+`E [oF?yg}]YڨI߸u,KR*~y|E]}Z[ /Z(^m.Mm-nZE TC갔GqB)|6ϊ_Vע%jpwlddnRKRm̺a!GWs#kZg:HOɄGmu C%*z=F\:#Rs%N ޠH -25ZRb!iN2A}yMIː씃ޘ*4"}R~ƞ8C +x][,~_1u@0ؐ`8!9gm:`!?_ukuuO0Yt.ҧO%G~/93/_ObV_JHY +'+ |ʻ }߾8kGSҞD*'QEԌ{errBcT0zZar*a +* mkUKé`3*)`TB:"ъI;98q:%'C'tZOi%sNg`Br: [4Fp:bt`uE9- +މ.+:".` ЉZlZp:)' ljVNr)ℍX-ӰӁ'!0UBKNgaRް:؂@9"(#h"^8@y? G*8P!N{рv2.z)1`:آ@+؂h [hZ8.Р[#@o …  4(Phpwr\A ) 4hW8.]mwFNV[` As\`Z +qb) Ыp8.V&wUUSƠwEP2q\LF]P=tJs\& ޕ3V q\`2X]Ǚq /OҹqbX.3p\0* ,xWjԜ+UX.q0I`~tY]D  -) 0 O"IX$qxC9.p]LVk xW=8.@\-3NB)8xWH0 +#K&Γ@ `(Xq\tXpm9. buxq)8. +h8. + d%ovy[v}`` "E dSp\z ^tNMY]Nz 7bqRS?Qq̀N |-*`*Bd$lAq"] (؂h゠VNp\kIAqA0nP 4&8.@br\X:آ EqAE qIMqAQd @ qAMe8.f j&x̸zs\ lQXlAq NzlQp\fa֛-@Mnwm3q:."Sq.Dd˭zg2Њ3;k1[܋ʳ{Kk$vfbekiJ)mE[Tp3FF 辮9Z2lWO|?E)+?BJm_a%]p_ޓ)AyӍG a8X9 0DLJ7Xc}hl&ߜB<r떯k^6'^ fY*A4&EyKZvNg2ziu%ty^y2\2i[Yڭ6vm*6|g;²~?;imuey Ƹ _?[Fn.=%Oj0!AׯmEߠԕ_[ίKSØQ݊y RVQtYcl&ّG",e DMF 3]rp6FcS.Ǵy8L]v'cГ_}>(zk0b29?3Ocx * `tMq %bg<~[k$>5p9.LMpU߰E?WmtIKm6fot85q˱]x~iv;߶Űe4t o +DC?C}~B_"EW3%ڗkMHgcۺ)Z;wc%W=scPPY8N΁=; \>c[nW`Нqq(Yv ^)G<>MT<6ΘcbR&үY}W4fRY_~?濱Kg{7PF +bA (kf9mmm6S>&Iw(3է˞ȬhL9ۦ(~!rS)6om"ۑz,!5!Yk嚍s3XeEuvy/K!b$%^wݵ>'n= ߽dK:2`~ƪIX1(_"au9kwHc/y4 7'cq{p^#)mC/G޲nv?V!C~m+uz_k*n&r\v"^~K֊Z~yg iKVɥwK~a$}ٙ#L BYI&F Tܙ^왺MIF3ӓ"*MzFlL{|eY. OqLmy+^4?gj~[(tz\1#DN'bjd7I+WM{hXj Z(Xb7V׹&]wݹ'Pޗ^*UtgTR[R1hά譳0 .trbl)_S57Sugd#BK1=^Z7j%#_O3m +a zʭ ^ԇ* "wv3U*%IV *^::4%%`c iNc1HR,+ꪘ(re/TĶBu!nv:TݛYdw[mbW^\v/K(&RI+QgVY'lkZى|lq/OiS*zjiI GY<%ĪBWIy/k ־i|K)dz}q +}spN)+Jڦth2/]Y0WR]O+4]ta]3m.Ԋ. B`_W0F=dWFI+Wk/ #i%<^ӥ[^9Gxmen䴡B 1IC˖ؾRSdJDQ2QdD_lr9[qKjq`kLѤ?}T'ھW*-[f-ξN5 Դuee=w0"SѲUʻ3vT'^ێHN'sC_MFnγW){%}Mh-TMx"^WtE[E660[Aj'(}VLBRCOShi}~ 7e endstream endobj 622 0 obj @@ -7682,82 +7693,75 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 621 0 R /Resources 4 0 R +/Annots [ 623 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 623 0 obj << -/Filter /FlateDecode -/Length 4701 ->> -stream -x]Y~_>1 8A`6|Eѽ`vZU<ǏŒW/$ F!DE -K)fIz{肽~"Vyw}MzgȫbtJ>eT*!5v^YǨ9̰(Tyab -f -0C/Rap*!J -!cbt8 QEV硓^q:獴9g3F!9-V#8l1:xN`vZ:آלމ.+:".` ЉRlZp:) ljVAr)ℍX-ӰӁ'!0UBKNgaRް:؂@9"(3h ^8@y? G*8P!{рv0.z)1`:آ@+؂h [hZ8.Р[#@o …  4(Phpwr\A ) 4hW8.]mwFNV[` As\`Z -qb) 0p8.VwUUKwEP2q\ z]P=tJs\ ޕ3V q\`2`X]G3.?{ߗHY6.m._ <&mE YCFX)FFb)r僜 f g&VAbcm;ϛ - >65r/u]v eL -a{4/>\c]lxçϿӟ1Z^.Ra/䘆;ٍ28k)ceK2 -MqMeIg2J0@i)꓍ڕ2eΧ';]SW1Pަ嫿]?zcۏ'ӟkӋitvyN_ C[s6o Jԍ)ҭ]mӽai?R,ەd}:)eN^ض[_jɼ.e&h)Cu|;Ft!flN4B1(8bm u zOLa:***]‚~Lur)-©5 I%7񷿯lf %u @OAX._*l$jD#'\xDpaw={c6O41L-J=Sfe+=d>Ne^913w.m=vUL=OWt|;rӸ7a`\(l)~?N8vWDt5?t^t^Df/fAn`D -vBzL`VYld -tlvޱ-[?Ι-*QOu?/ -֮8vagNs9nޚSeNo[I1/? lM鯡>~u+5o֛}5Ͻ8YTkR9 RAJAӌN/̙vD t|mY1qGFRlصyd*2kmDk(qh=lh` wuk(!gQmdHi?lӑI١:)zt 6o{[gj,|il"s:Ԫm|^oyG5CkV{V'{2]gí/쭳W^u-˝Χ#3rmՏ;s:m~Wo,Y/V}+v Lk}_չ⯠?`ӡrϼ:OiVwOWZ}FcՀ#dmX-I"G>BHdm`ӡpo|>kt $7tۦX?|_3ĜS{}&%;! T5-Mh<9v`?0=o7߽0WPU=% 3W+mb> R񛰛=ty3wJ&?o?E:`.W61Уs6$Ɲ; vܶa:ۺkb#4>c=t=c-#4(m9H?idW -js:o({?)Dos:Gξ,k>wOfrljCjt&j9j6acxomJ^ngL×eosˢ@1b4b'S5 v(<*#秮HzWDOGƲg陲[Dy0jt粤gP*ctFt\:.NCLiM!wi ]+8~s^)?3;,0Nώ6,KGtܽpaއsufG|Ah#0Ա3EHл4Ŕ4.2g8Ǘ$*_T^c{PL(e اvX -fƏ|lt"9Nӎ3Btr)֋ANbzNt)t[MX3.H:xtbzuVf8 ս;rQw(2e@L'Ft0/D.`05:} $SŜ.l4[FʗTf):gd&75sDq.v4yEhpŚ2b=V6C"J)<~2:B)1O M_j%47xI1\Hkڦm D%u鱙Fc6H\, ꊘ(,OV(mL\eZQ*s-V+ڊ}qIg{K 6Ӌ !WRJծVa *4yvuq+KZ+:iIi,y:Da Uu&nW2zY8(!LFLCU,CMk3:TצfsJYTm+*UR7=c7#cSRIt~ -mspN%+JZthj2-MZ63VR7PhhUg2eMh 64a~xz}O&<HZH_[iiI R.9:'oRn.NNյ04lSVjlVi^( -]@&Mnʖ%8OQo{ڶR:ѶiܼoIȶpu,d`d]YΫiꙊ.R>E \"!2Է`6kӋaEpb^ބ&4rwX2"c%mMdZ / P}EST~/- -Iu -4|Ezc;PUWjrz 5PY$S -endstream -endobj -624 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 623 0 R -/Resources 4 0 R -/Annots [ 625 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -625 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 502.623057 101.433071 483.873057 ] /BS << /W 0 >> /Dest (cb101-1) >> endobj +624 0 obj +<< +/Filter /FlateDecode +/Length 4869 +>> +stream +x]]q}_̏p Ly!%%ԭ]촪Q*KjI~~/bLדSWJ'w֊tѝ C^O9>)%o;sVB A9AR +* .* JI*ADAaV` $AF)QC5N^=Lu:vӒ.M{%t8M$l!zDl11XI`w芢(Kvr)!nuFEkzruQ$-^$`H: [? +wJ-$%q"npF qַI+@WԥI%.p]В"Dԅ @'8T$.]嬕w!uF#q0m9`uRL!Jc%xW$.ݼlJ\C(q  |)%.IAO N₠ p,Q[(dS b ؂ADS҈l\Dɦ$.c?J:o@ע.B!ЄXK\1%.O9\f@Iₐ` XhK: [dK\H:%.  ]W`^t>3J\O9T;M0- 0>y$.MlsDl$.f Fb qARI)ơSJ₤#$.(qA +Mly qA":؂) &IybI\(q 7ы)ALw]3I:."S/qDd+g2g3 +밶)jĜ=4YF/f B6P_c9STpX3c'0-}sbv؜۟O}{~S2eG#@( In[TLRBHlDHH Z\nH,yae9 to[ xHl͂dؾY Va(c!T*O'ub΁Cf>Klɸ_N~ӿFNOJ:_gy\!boӅlmk9eq$Ȗ&mf}:AU~YeҎt^ԩmΟpOk@(sTJ>wǪ_zز*JW7 s.ZW+Qjpːڃw݀D;-SY{s.o*4!3 o``g)vCP:XFF#ma9~ ˯_NCۀ>et]m_tKW9 98W!hVˍ}Y1@;@Lֽǒ.1^,sY}e}a8/W܇U]R9!׉32ױ:Oգc13.2|9񸜏e5mvX:Vu=jʨxdd}˨2:φ*s={ݣa|̨OJ9;t)<RGL-B_16j{Ѹ{͎Euαem;-q0n.wCaޥRLIEӧzӡF _ n}urv}m3Ĺמ ٔ{aUm,̤H=Vz#p"ib̼}Y3w.VPZy6D1Ϊ{OJ r|ewdy:߈U?;hjbW}Ōς˭>a̱U'?X{#v=rzϬvcT"pN;h| xӡF|:F㕓aʞ"v@oY헅X^#˾K:φ\:vka]nB1xj`XփuזI +GGPt9(rQ29G6g;rL2^2uih/(<RoĪ/BXh'=s|h֟p/9`׊5bs-ua9}bgy:ľ:1;|e ȯ6w@`Cߍ8#ݓNvW= Ǥw\<ߗs.m s;8|?lǀlgQŧGtqo8ZîEegCQamf{;mZff*Ccy(Wpγ߸`q5S=2R$"[p+Ũ&)B:OԃǕCukm]SlrA9؃uc6rokjW+N կr1#T㺷u :ԔNn,Uspnj3̶bs`#Y[(:O_cFiM I<4JAmʎ=8 +7Ҍ 9hZfn̯ua=Qo2y6$1kBO95=.m \jٕu9b}!Fm~ߕ2Kv[w42t>/vgA_:3*Sne%}gE*!*VuEYj?mg}eks +uv h17Ǘ~/}{͖`|Z7ccn`(S=wKgpΞy wwyuů_aspyMyێvr^9bse双 3s`[~@Wd|.%˸-mY}n>/6eny"7KY>Cp^Sڲ}W}lG?`q!Zw[k6و돹 >+l?ǂ:4.W}6xdM/=rgs3rc;0&)5~kM*.Ka%߽8<[qʱ0ލ)Wpl5}9|k6BG6mʼo bX:?+j,r#>>й M#x6SO8KcvM B_ue^tr ė-KܴQ.3.گ0e(4-s ۯ'_I)ΐQYutq>,/Z;(cReAH1_yG*hA9w & q.UktC삽bXҺ _ZW?W&wZ~v3ZȖ Bz+g&{d#Lq aox`xSbB*]\:߅t:͆5 5n("J]jSջF5eF&udj$.'AM٨gXD\$[ZsmB+{T=MP9^]؆.DZ9l縿 7f#_N.] +*вv8.A?ajVY~x +פyM R-wf徱IzY.B,J(In[I˘dbӠkeqW-y{>Ѝ/[Vဟcپ$Y8E-VQSlef$魯>O|(l0"ڮ򦫬+0iiZ#z/&:Q{~vbYOrׇmͱ|P'oPk˲g[ӧF-hu1ʤW[ +8)U٪ӺP4LUYk1TRqZLѥv|T)ۭ+^l sgzKFAy&^VٶoZ]W3; ^mJ>̝ΐuJ՟ ѱd 5`- V{pW,5rw빒mFJxOUA7@&|"VۡjItTP9WK%!wL~Ao/* Jru>)?? +& +endstream +endobj +625 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 624 0 R +/Resources 4 0 R +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 626 0 obj << /Filter /FlateDecode -/Length 4862 +/Length 4751 >> stream -x]Y$ɑ~_ς }Ê=@YI=ttI,5><-<,颻307H/}WNR?~)z?ꢰߵrq:?)fobpɛ?}L9_S V`y?h|XAOŜ%eEr b8cJú햕!I,K+ȡR"(xOJ)lȋh$SN{-BI9CS8 Dd1)Z!vK֕DdQAisrNeTi3O>Y$֓mZE -Q"xijG') j!1щ<ȂŗȢb ;h"\08l&%$0)O.F+~r!G -UŻ !Րa">2$V ÷%셷b@|)Ge -bnLIJ"sLOD`>3EɌmݷ7;?vg8R)?Bi_a5n1H=}HHH?s~XIItF^2?#?03os*rD탖ev]Iˊ)4N>/D.>%evRh \VȌjِk Pn_>݀Rs]2,ix~?b1?+i^}Z?c|? --|\/}k6΅u;pk;`}^}˺^]NWl}f򍲏Te6k=E&sdli}M?FYҔ.bA~09&03jߵD?(Ot3&1'2ݸAt7x2btxt"=~am>VYe3=o}͐rYe֬^\dG5uϱ90Ƒd2]!l|ٴ;DC/zyQd[01 %?Zh3=zmy -p~g>-3 (^ϵg>f8-8VG v<~nvyNJY$J)][>OgkBm&^$Yzc-a(gMjW_GzDŮ,}zqgYRIAGg߼V{YI"j%D :"6gf6E0JF}C] x,es<%kCX0d7 Ϗmf2bYvvڎWm(m ' ֽs fgo[mA]L.pb2 }gʱXkĂ/y6 vkc̞gG n5}(ゥ>n|=ᦳo͋}cSttwD\pLwq>Og'5O:"m=9|EMcn[(sJu<Ei9XeKjN\=[.vcxէj8t-V6c!4{~5}zuf(2EӏE;aQKtQtТ܃waӲ2o KlQ}\H:HC{Y,L -ʙns/X.:7_]TES׵_Atqw_ !}wVSƲ|y_qPd\dSh|ՎKֺZlhYec+ sU+mGZ7r˨6pd-ZqfK%bY3yތ8.{JͲu)0y̨ D7߁))z7L|]fc< f.<ƤTH* cvg& Yf_Ɔ/3*?[ LI":6>ھɋ&ym/,h[ eUF!ȼ0Lg r%ZL<(_zT -A笷SX3w ֞jȔ3+vGC?գӻwCGiCtT|gi݀|]2e!۷Mz<ǘv15kd\pToV:0ӱ_äeg^ -5 -dE=L8S~GGm9-(vhP[&'k\5=宇fÐtM-N=,Om)Y[ň~KTlN6ʣ\ɦЉMt:͖5-qôvT:UkTY&TnT_[qm&Suhl|jtLLՐ\kk;|[Z5WwQ/R=l&SAJn̆yvb'|ZWDm䤺t*}aYitB;CoTBAfRtel䵒8=4q-S,חNJhOZ7Les@ǚ52AXOJNTULɾmz& ovrhɱ#Km\f(͍d2T'd1b F_ ֆN帀cd}~+nXoy6#g?nTC ӰuE枌~_CHPm0q ;YWkh~׮wWkKT7.'CF6tL3o]K[owtXh -vp:v|gC⊚v3#.d.JL2H>IS=RP_0.mfЕV5Ali>i^#뾈 jF}vcDm'Sm sl{5ƲlC 6ʨw[x>դQ4MUZ1Vҭq[Lѩ|U=_iKVע% 9Se%@ wVvnz;  =2Uߴ|g}ԪJNd8j5+B8%VysZɶ"Rk%|&,UQo0Ex#3Pݲom -JAԦT~M) -P*o&EQi,*fHUdCPNP%ʹ!㼠z)$` dh +0Rt +f1QPEa)hV%a&I3trAPi;QJEdnt/|L&FY;@iIk`KJK:[&RAybU `t芢(Kvp)!uFEkzpuXQ$-^$`H: [?;wN-$%qop qA+@WԥA%.p]В"Dԅ@?T$.]嬕wuF#ql5 guPL!Jc%xW$.]6%.&J\xFiH!x |Ru~ ((K +$q!%.Xc$.e4o1<-l(qlH<1ft-"t:H\ ؊E/q~`wI& B-X*`+g.4l-q<]贖 oPh"L$.XC-Hq%.v%.2A u4!q懃m'qsDl$.p%.e$.69 $[I\M4R$o(qA +&Bs]Z޹CX'g>dx!TQ*Tuv6Oj]rÃ5uz;;{÷!]%}r5T~˾obAZtGTx/sT0Jm(A9Oۍ(-#H]=S]ֲóp y a|6ϛrK'xhf`ӥiv}Td'͙g2= =׏Ee֍OTekέ&b,:+{4}"0gH)y'g7Ep<}0|EUBW&X(幟jeY%}3X=5rΞӪb[X&m®{_FA>:^`=WI٬f y76sTQ?΍8*#e⦘Y!r1E{dNydRڝ3fFoE̗$7fҗ/ԕ}ڞK^3,ڭ, {C:uelC{(Ä.v2/lQfd;يY;j +;ޮ3mg2+ڴ΂msD}=WSݍjw@u#\C*{Zs.qb+ĸmn_ ,=:q%MywvLu{c{ܳ*fk1:O}-a5]zd4;}γ+82Pa^-n.^ֶ5vrO-T:Ssu~žsyfO׻vfw7R+>'WWfG%fV/^k2WOy:dk=~olj(#xsuw[p%mu.]gb=}Hչ\?Y'U`C.CfD_M\KhR;qŵwm̮^4.:K۾tZI ;su~ƭ2u]kB?o.ʱk~}b++ziRw?>57suyj 3;:]wtW Moe˗'N;Hf3jm)c<)Ϡ랼Vs*:(ȿzZ?ee-eUrthrg#u }᜿yt(e[c{VJGhQNy:g*"X";#꽘3?\g?v^unvOpq1k5G87o; g9boNXqae6գV~ˢ/yڮl)u∼|y6׹:O99#.U>lϜŽqPme&ns+3V|ȓu Q*q|lf9-@? ·8Y{~UUZh0qNrgV9@\yWx`[hve㕝>.0[V<+jLQGuяmZXdo~S; ?s83=p־a\9մ|:B8hoz8ҕ%]I׍a?R?D,OLE'xyQYM9h 1`NY8}T-ҥ`aH˒pf1?WΆRIacǂ5^ՠ'16+v:~j/lڪNBuĆ=_P7a5:M)kB7{ڥMzJSet2ԕuBΓ ]w4M̪f_y0 +crDXnjՙ +TlUSfJuYI=Q|=@k;ܘvqTWb]\JB۵[Q54)_?ai?0U)3OB_ЎZ'6x>HW!i4V.Bl?^:*(R3!:wa&5*z!~_إF+YgDJ 1*h~lX5U^-WKJ<@H5[&5(sBΖ J~M6K^ endstream endobj 627 0 obj @@ -7776,7 +7780,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 240.123057 101.433071 221.373057 ] +/Rect [ 101.433071 770.673057 101.433071 751.923057 ] /BS << /W 0 >> @@ -7786,20 +7790,31 @@ endobj 629 0 obj << /Filter /FlateDecode -/Length 4787 +/Length 4941 >> stream -x]ێ}VH@Y <I\H}F fT#qjL-$%qop qA+@WԥA%.p]В"Dԅ@?T$.]$.]e:BH\: [aLYSH:aIU*$ 'R3R[6_2=VOzx@i>/&(2&b:wfyCGm=P29 @@&Wb1l;˿?Oчs_~_ ׿p` ->a;e6S#>7fҗO[]ϓNvŨФL~cZF{T|N0|x S;LFh^ey ^&jo vǦ+}e7?oi#yõUWX| 3vW&kuג.1elMzTG϶1NqZ)Vl)w[g]=}"Mۋy >f}uW+.g o{X9Nfž􀗳3u<=г~:WP"Z{&ys8TmD~`޹wߌoT{+{[ayJ]>貭P`H^n?ǓhYi/w9oaf?5tKR>]2~ͧ՛S9nlҡ`'>\Q*=ٴ]ڍe~W~# 7f՝y~~"2dn(yhUT|js8n"M9V84s_C w;860?l-jw9j7?^ĭUrܖu>/'+{ 3MI"[uyOJC-5ͮK>,>;x:&Ԍ^yúx.;bhsFc?빳egOߙp ~PcYTZ㑇z)容(shBiXJ<6Fyn%֮ z^A{v9mCl=qa)Rb㰬y% we1:iw4oM=<+ ,+ֹQu?effr6܍~^vHl86oj:o:ͺ5u-j|f)QUF̨Tbk? I~JYeWa,@5]*$JsBM[TZҠN6 h|p7#׹(}"ÍY/'gHl◓ Bj׸B=.$VnGҤً~,|S*\fh[!OikW<6xH\+X --k.B,o/>nM][l&eM!2IUuE]g -+S U15P~UT56šGU{k Ex'6ۋ3c] a &n42h씏/_ f8r&'O^>i_'{c9:UTnL;"Æ e:0-j^Rʠjе6dbSk4q7#ھi͡ʇpoMgV$r6Ck ˈ ^(.YY633WR>oyWP]07"_R6l .0 ^ռ4G0~Ledi*}zcYZ OxuΡs(P-أ䴡\ ;eزM ٬2QTLY-14xQlP}&R^񋴹2Uo8C;RV_2 -2sWm)Ȗuye=۰#eJTFfe5+# +*}UNHz1O/j +N_I(7V&C0L׷ .y~q:)%okVB A9AR +* MLIR V`$ c0RvJ0M +f䂠 +vh!At/錞|L&FY;@iI&k`KJK:[&RAybU ;IEtEQ[WZ%;D]N:䢵Ji=9`ӊ:(t\uYe$-Ip6(VGUVK:[ $` :_ba +^)&!LE & +J4`ȧ U:%" +8X [#WHk` H\`-l1d%.`[Z$.[RIK\`paqm$qJI εN ,H=H\`y#qZ^ ޵޵9El%.;NVG+qwVAb Ыp%.V&&*&` +uax84A)#qw /q2 wA!N` V+q +  xW'L˜[M:&/qui-b:Ѹ.^/74:?_Z:754X(0^]uҐ&#t! =_yNڧgYc9u&;﬷Gy/lD5xފ`qA¤4M/ 6"һ#ytȱe +=>esڗ9u[Nk ]+N1p`K煝6W 9Z<bړywٽYsy4.kF8. z7jAs'NgwйY)X$xA2IONy:$߉c{r6qˌZbaE}ŷ^P1={nzkX4qXԍφ^:Ϭ8^߳|@;@_HeGݺvP(=Pz"TO0{*Z 2i+?6,FU4MROy6_wvV^խ}$'ܻ۽`Oy:Ǯ^()kpvksZg]3C40ּ2D!;B5{]ߠcAM[#+eFy`k'g~dOy:ǯ#;J$ϐT=?Cw@1d|QAf\lAfW2pe~m< zAr|y:$ǸVXn =e5pew^7աUa=h,umӈvyOy6Lӝ]a>szk`XqFe;}7]bʱ~޻;- Fc<#a +V3 +oίi~y:,vmOtԙ&B m +K9eUk|{=XOK6%/kKOOOwhkY <<ֆ9R[6_oqp٣͒~)fowFؖUXgȏ, -3v;vu҆?*ž=,=e[o3"_L+\~O.3z}X|e[U:kSՑ1١z[V}d-ؖEOBi_0|]|Qmr,s .R⿎%`Ó^ql_k_>jCqV+q|g5oK|f"|4UWƂ^C_/Ιwr}݃;xԚ6]Zzᰎq rRxq^0`*({6|2Pi{ .qUG$ }Q#S?~'&;>zzn6UFc1pņL,jXL\05[ҔA0gL9k=w20cFs(Z(7עαF>i˲,eXڗ{ǔb +1'=IPeyLh;?4>HzX#~Pػz2!>cJr;7okN@RGҾ]Y򤝑{;Z+G7vIɅD0C:]Z_,,E 򪈣]v+@#jenOT 4nRAސ?W[-H&ùbA^oŹjҋ87Cr)Cw*&t[bujg6.lsi5 ; MkQջF5eF&u5ej$nAE:Ysuga@.tv-S=kt/n쑜leǵ8?5ZE.Hⷋ Bj׹B +=.&KCЬ|*i +פyM Rd~+cNrX$h +=-saKG%ϤR7eLR5/T#X75qƕ\]Jtm:*ݵr7|z\c\*Fq~tQm1a7 ŝFߊN,cdҌ{R9cOx(K_i~߿^z<4n]L#'̩6l.ֱu m75{MB}ĦAh<-־|ikj.xsp)ʊUNڧthɰUe+33 y%~]as]삅vi]e, B`/xyie`}1ڛK[ò,ү/ۜc˃uv,{9}hЂVL{%R*E TC/٪[Jb. ҜxM\nZd[8Co)[,繛zJ[eۺi]wm =2U=ۤ|;saAJUN`zLԤ5|נރC(]LȶFޝxd#RJxM莉UAoMx"W7Jْ>[Af'|mX,B2b@ޘ((-woaI?hl endstream endobj 630 0 obj @@ -7809,82 +7824,71 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 629 0 R /Resources 4 0 R +/Annots [ 631 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 631 0 obj << -/Filter /FlateDecode -/Length 4776 ->> -stream -x][q~_Vx?؉^FX!?_QIԳ tb"EiU")<]o_~)89"ZQN>,a -əo]yL)y_XEv -1UJi+B0 *'41%I3\ C[UT0* KAۭ* 4I* J+ءR("kvӽ3z1$t:Igi%].J:-.)-lqHI:B6IaV:bb.$Aa ElQ^iIR$u :Cr*IM+0I>:[rIgt~$x0Z ntHtDA&!LE & -J4`ȧ U:%" -8X [#WHk` H\`-l1d%.`[Z$.[RIK\`paqm$qJI εN ,H=H\`y#qZ^ ޵޵9El%.;NVG+qwVAb Ыp%.V&&*&` -uax84A)#qw /q2 wA!N` V+q -  xW'L˜[M:&/qui-WQ1P^U2P^VA3P _^#0+]LPj%n(/1p¼4nQy!`Ό0,}[sdNy,!&W&o[8̦s!u4lYuea+Lec+!ϫUܓK',"0LۦJqF\"[#v< -l墳5uhݤ6M`Gݖ_7cm(P@ aȧm͈о69ikɖ~r}}ݶo0=ܖJf?e_=;ToGfKWd|xMsRˈs[1V -7r i2"r?l=|jCvG|)Hwcӥ u"'I;^\, a]^ ِħW}B`snٜ$ }^=S/tgf[MOl֢z˧初ñVJ3 a,I~<9g l4bЫ -pDJ y~[3 ^g\o}.T +ޘUOwgMfBuheל$Hô>acskn}"Q2xux`Zi~sdC{hhgY { y AwQK/O`Aə k\CAZ²~X{Oǘ?xTC~՟Sߙ7R$ l !;tfrQh8J3GwJևyCW]Y@=Hsy`?o Ich+dpm|%1ul})KޖzSer}|y#w>!ݴ:uz|L;Vvs{P2Ŷptڏrw,iGfgT ;Zg8Pu ;wsq;lH=R"B l z䙙'\?Cm}pF^oC9w^ cj;Lrzez^gy>Em*~טxR˗_#Ur^4y%=1`}̧i|5rPԗWt[N^nhmtߑ{R6"I0+/*KvΎ9h_Pq(E7jۣUGS/o'AL:9|U,*@Ô)Tt@Wjk8nj"k6W,뭘[&]8r)| {4bm t[bCol]L]iMsOxZR~s-zר&QI]M:Z? E~jфl홳0V QKj:AtJiThbϚ)66 0X?)1eץWj}.Hⷋ Bj׹B -Qhr8. -C݃LIyM R~+K'rX$h -=.B/Bz&ݖyl!\6C1I5XuC]3U45(-N׆S2VnƝo82fo+w|Fk1C?Jب6a7 ŝF߲N kdҌ{咧9cVn1E_/t2y7iܺ3%xR -۰b{ZWqc]ub)ucPݴubӠk͎EWYnŐ!/ƂI=^?ߋɾ6joҷQFxKls͏=ʲس-C1:HcVREuhtVb6%8^ --ҿvc4'W&-[g-ΡN-̏zJ[eۺiYwmC3{dz6I.{ؙvT'_?t(? -([#+Խ&tD֪o&ACQْNsj8PޟB2R70 Joû>?s. -endstream -endobj -632 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 631 0 R -/Resources 4 0 R -/Annots [ 633 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -633 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 461.373057 101.433071 442.623057 ] +/Rect [ 101.433071 311.373057 101.433071 292.623057 ] /BS << /W 0 >> /Dest (cb107-1) >> endobj +632 0 obj +<< +/Filter /FlateDecode +/Length 4702 +>> +stream +x][,~_Qφu am⇁Oʹҳ0އ)+uIe䥲aOӧ+#t>} +E*K*!zG/_/Rx+oH1?۫U{% >Z6/4j^sR>x/-PIe{mrJcT0z4WyA1XN3H0䕙"^*ZϨJK`$2)+q: QGVS^s:ctQ8lt[lYbtLduEo8-]-@W`uE:8]4@"t20ii HNauQ$-N`5Rs:[?GA"{AQG:A:DAt\ӊ##a%1Q0rYl18.0 M%%|KR9 fJ GP.9.0\t1=kЮ8.0]CJr\@]c0* kxHs\^X:qwuqw4xW[7swjҎE$ wA!w` iq +n "?fL +q\`*X]ʣřqVʹqb2X.3p\Q5 fjNU:J ,x~p +߄.B8.]ВL c!r\#+18$=9._-3 ++zӁwM&'@/Xs\E \>V-^B`AY' Xhbkbkx"*x.` K,I_._~F_^/NӿV_Fy_Y[9Mg/ְ~e ;M*QwS8 6.]uo]HdK;e+4mBK}Y+kp]PނY +Ŕ6?.{#Ïzs>foC;leC2^1&s˘yi՝yN gwAUnr|{ټ:(m7P3P}է}Çf^oSdphc\g_Fg՗ܽڙt]?n9GwAKhgdt-t.ՎGl~ڴeoOMoehNJQ/PJ-Lhzz]u{E^V/rY_}ڬP2-bYOVQG[]ַp/9~};L~Q|3T#: FxƿA(CmEv9F r[Nn1?; +Wd6-K;m[w(GI.v92qwcx+!!Jmt_ӡtÿܻhRvҪȏ]h(BXںvsÅU갚bpufIbI~RzX&m]:9Xmڗ{iPu-RpGްy`Eڙl h7}P;.[﹏ΎzӔFFL+^ٿ*Jpgӡjc⿘wwqDmt 3鐲+~3߸{.Dgյϒʊ)]7V-ض#.Г=;9ZkoG=gO^|DlI[@jٲZHK.jѰqFy|7;F>_lvs:D{ȏtw97Ӆг>l嚲jܛN+˺Rc{yN}Opsqރ_W};i8@ug!wZ"I{R\3E'9}w#IM~?Ǿ#xν3ِ7|w̭hNZ m煅{KmW =s:>|~iW;qw9}gWS߫S,Ljfyzfr{>#s:}٧G"U+\]$EXQhg!9<sH~XAo͸1~xm=L\@o}b37=jFEQ2B"~wܰ6#~jFjcPz`_> +endobj 634 0 obj << /Filter /FlateDecode -/Length 4832 +/Length 4899 >> stream -x]ێ}yb `x'00ӻc# C~?HRK3NJb-ɳ#w|xtrAV_oR?X]IUޝO;şOyyVCNI{CR=཰*B%fT+.1FN37,Uf,FKTE4 -fh=vH%!C;NBTyWNy#tqp lQHNgaN[9آ5Ew"  -'$z1"t")aNaFagt -8a#-V 4l1t }lUivk%E)oXls lq4$^8@y? G*8P!{рv0.z)1`:آ@+؂h [hZ8.Р[#@o …  4(Phpwr\A ) 4hW8.]mwFMV[` As\`Z -qb) 0p8.VwUU.sPs\`8 UV( xW8.P`.(lr\A!,wec4j!: ,xW qfޢ\w4 xTqJ OREq"nDq  bX.hIq\/<&au~$ A w#+80{XlAq\:L[fN#XSp:aNG x7M O8.`q f; \!cun ,( c+آ+؂DCl\-9. !q1*sjtts\%XK % `tp\#lTh -9A6t゠` A -Xe:q<4֒jNgDZg qC -9.4JL` hOZl[ bV[5r3p\lQBq\l -؂(ܐd @ qAMe8.LqAM,yKMqA4"DauASd-8 MsEEqAt.73DDϦBZoz6]޵L8z- ^ʐVPoeS oٜ54XYf VM/11DSTp}]sbzؘӗp{z]Δ!60 Tp[DHQ%ǜH*Y禎)AS- fou=}ϧ7.(,_{o ,m;r+û:Y1@!1aӗoѻºkoddSYKyı寞'5yM_m)9c͇Nivm?u8;]~?D1]P_wߜn]O K\S⦫W%% n#CJ͇¡@2/A2,Y:̒i:]kڥüS)NӕkPs{Sn "Uc6.,=0B0':rING#_#Pݨ2-e^HQus8Z -:o:z~^΄Unt^剠7YGm+mA -&`gáz@**(hC0C(. cCԢs =ʻmyu_ 6_(V-F5)A <*ub9Z*8D.;o ɕU0 dm!t_!z\x֐QPAsՃwrG/Ǭ4)wC4.j]\I6/跐ᐸ4}$ٮؖr#Lu[Ds|]E֝u}9:JcRg#yV}x;r; z ,[xWJrѺк/Woξ"mgǒ8`tGPP_#.5y*%l$iܱXAНug勒I2[uH+:2z^C'] \S4@DŽjӮ#_WA;ڭJUݑ?6n6v+8`CbʽYh6r(eȈ+GTz㑻Fɋ]M+WSU84+p&Zy -$߱`g!z Cl=qaiRMEa9dw.*am裓ϯ|N;cvWpވ`=_=:3 -nuGfbv)_絈zm'IHsy>0]˼C]^'p{`gw#7w=O5GA+460'27}/*+nEG.X+SDO9u/ˊes44ڝ9קn¼ǹ@-KW5+vjss&}Us8nkrO}{5жџ+}+(&;;ףz-eл;JF+#)u}_*Ǻ:q>;UIOF[<:CFw HPamXD2v2p; 'mpF&}u #2p s4$|F3 e29vkut;W-[67]#M9jJ/[Vw9:7 Y -((ދeδߟ_u'JYo+ȼ#YpȤlE*enY `VSw#ţW;wWZyw:GCȯ~fYWV3cI,j9ǯ[kfrO]ww Ww3˼5Yp;92uֻ/O;DHNKGY^W_A7:CX5Gː=i՞stg!w#zcw\ZFhEtϓWxn ”7 Ko,I-Abz?}AIvmNq:o[k 乏tjS(ת_K8q:0Gd~R>(n2lI:IhIOb0ajO_tzvz˲1]Oš]ˬ?0W8aLq14@q\}d'Z_iןSS5Me+4fzl-ycԾYLwD6r2\Pqf}ʆ*'>sز]dilq. 8AЌ &u:wfOoN{^R8A_]f |uyf9ޯ ,Lo8Dquڍ׋>K9{l폄KC<SG[?aOiB׾%pd-[a1lN.T@қ E>Ӌ Facyf~_ߧZjzHoIotG{_%8rϧ5Èi^eCGQ2:" CKj[N<売jR}[Q - Č5\ՋANʺ0US+6C4lkUK-.)u $RVy2ׄN{3+M/*MU41*V-%뀘:Nrb_Ҵ`V=Q -L-K9Ft9l)_KV5o4P;]H;8|S@RnF-5u&6zm\!ljnҤi S#U*M̓?HS!^ҎIܬy'QcƷdLDttXK$Uc.uU(OJ*mLudNnʝTjom`/ٱ^IXɈRhFY\fkexcdǽ~:e7Uep4ʒ7ɜZ>2q%*[ʭ31dաa8J!Be7 -h~\)צUKIYTV-ևD*tԤgȼtlu8Fp@/tsg$Rҡ5Tm䄱Y633v}С\䀄P7in6]d*HІ'3{^/dWf@Vjg*x·n~X}>2y[ն4{9mj(F4jSKOjlv(*]@&MnV%_q`{טI=mNtTܢljx-Y -g߮N5 UjZI]ds=0"SѪEɻ3\3!2uQ"81-\2#Rr%Lh-VLx"n+HSӫjQt[0Fsb oSwSrBTL/O) 靯^H>S4}+#$) +x][ʑ~_Qφ#%ˁcX0Y>L,}࿿_$Uw{(4=]KdD))K_~~/bL嗋SK.2 䣻 ze__]w]G_͔7]YdCPN`%˹)zSX2eA):1Ș("İݲ0AĂ: (% "Fi7y(K<'I"/xN>vZ{#Aă,dcxXoȃ,&+d1Nxȃ,+-\D"/b[QnrZ%|ӊ<(g W.<2BN8bfmAc<K`\e%)3uG?2h1daV`m?A9$úh'pyD~ +#(cGѪo>].}GD4wO?}Oxৗ˟M)_7TAqʹZFrV/4Y"mr;fyl׶[Q(ȝ:_~)XRfu12_aԗ A_?.3쒤yCGC^|{)=+% R88kFʼlaٺbN\,c;ǭ=inBcq!3DVm A61[~o~Hw,횵aZݝ5~tn-(2eYM<aiw_󱥬 '۲||3J}QYE2LsMS.<:Yf^6~ JkGJannW.sԬlaՂC~V-^rيʍmRnlW⼊.mt׍UwZ|%͛/ʴ~Aݷ]glm&vOGVKU׬IoYڕwVe\+;6ۜmS:oJ?0VuUDSDRkU f#0I%e5tXK?i?hlEZt/G);ދv~J6jh7PC&?:E;oC8> +٭cnrѴl;o<ˇ|yT 4O`EBu7]ZǘD|wz^^p wN̾zu0K+,蝬$yz>~^c~I2$ШXM_>>m=Ctc=#7;5c{gxΪe!~Y|oKSJ.=twoZ>䬁)͖Msuwߤ 0_<\Pwo~+[6xcI/;WI۲l}Q{0ٛlej"#go{N=z6G~M+2+Tzj2{:^!luځ5& +k36㺺|Yefy։3i_u]Y;3Oqqߺc=!? Kgtiw1tԪzͭ>?!}gVy/l93)G=f y:/</VtUFV|[J#5Zw WwQ}YW8)mA x'<Đ%Z,Y|ڏ-lpGZ#~M ޜ;D7 +iz{:q?w\{zWzǺw6?<8}vgo}*x#1b)X:b1߼rpG4:O'īE9+J &~tG/={>_SZ=0RbNJnBIyukAdoW£74n~C,V1~oyqMz +bxoTۋ#2ss!gҤ˓uf ]W{>~;ŗ!N?<쟾#<][o{a-Sw=ϟ22N߆qx8KMٌdsѽv;9b={L-VD 4EQNy6/N%iGrH7F.iQPaUnж;S`o kq9[)8hi;ȁ #gz8gN CmX*>L|ϯ+Em%G-,ϬI~p跦k~4-\֫y|m=NPk밵j'ݴCy r{ϒ.fYzf>Zj9^|x|}w%N49diєF~$ad&.Umt=[n0uZ>(qe4\ߕj|R3"jz%դ2'\* +YA˶[C#-Qu5"<|#V{ 9 #UХ]*vBJud5U; E JcV~g5>Ys&HT˥RN .b5W-jت&Jsu>>&9l&9"*v~c6QzqA(V(W\'ڮJKr6,4>U*#O-ڮZ'<7+y+ꐤMԥC>KG%gЭVNe="T5YWd=Q!]#ʯ+rթT]m}מx2 6t|OqYGlk&Zщ|lLZqo^2g3|=,}sA:nTE SuEW2xߚQutDC7+Pqc:V]5`/%uEP]=5vdS]hiok ^۴{ep|VZE?\ƳmIvM⊋%\2]E\05VbCTճԛr_EFm?eW endstream endobj 635 0 obj @@ -7894,127 +7898,139 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 634 0 R /Resources 4 0 R +/Annots [ 636 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 636 0 obj << -/Filter /FlateDecode -/Length 4660 ->> -stream -x]Y$9~_QHk|jX!!. 1bAEiၿG4j2G9YTW/VSzt"EprEVJ J>' Br:.䯗o~v4j]TֈCQ%29vQy%Ĕ8pjTaSt -fX#0ؠR`r* JIءHkft NN+c҉TМUNq$.r: [\9┵kbto$-:l"l"-K.EkY]N:-p43 -ӰKXlqFjNg`O8bdfmQeu1EQf ^8@ lҖ#FtL†`8 SxHV [[,f.-&Y -Hq1E[qZ2) J9.0 \)9.0`\rqp'8.0`]v5VI ,xdu( 5J ,xHs\QX:Fq(-VwCXs\d.(lr\:m8.@aB-wUiP1y xWE KB83oBy8.p],T}F +wJJ'qopBPeuI# Z`2IX]d,$P ZB$ H(,pE2)r\4l1Zs\4lq<ov{[v`a |5ːd9?v etqR)ק:;F=u+eόv>ci)W~J?suϦ?W},7T6%\}/IXqˌ -+2x@xPOz3,V=DZ*tY^{K{:\ jVuNکs6ܡpWYCÈ8ML6y|ס4֣v{@eޭ ū2NۂP) Fg;O0UG`/3T>M Bv Y٦v< LZ0QGdFuZ`/ Yh=lhu;~=h -r+z~QW1m`ӡpo|>kMt=:73HO}M_8_nIN9u/}dݝfVJE_DUcyNm_.+.{fм8t=ϛyõWWX<o6wA>+qI<\s:ʣq.mr iȮ\?R"n\._ި/yfw3f +9l[Ao}0wbo7Io{QtOL(˫k@`!vǟ=VZVPr0ɿC[=tݹ9QXR^AF9th=揾˯1g}E}}3{c;?X: -2sV6Q{,PK] {oSJ>p9u,[bn GzٝYqdFH噁W5;pz -gx@K -t){ޏS6j(<:˹,s؆'2IKSZ/rz [^ChJ)W/uLKwGryU>](g\պt$pƪ2L*wO!t>>E%f -Q&~ЃK,#XbI8~,J*H 9~Lp:`f=o]FfYY|P1#DNbjj_0㕯iU -}V`˸+VFvBʮ&ֶأu }שnKZ.̥9Q*eΨTb81ۅ~!KYݨ݃0 ٚ.tvaӍ:R-k*=LiP7v<#}4J=ͪ#ҔS(c-c.֙įԮqtztVq /MJ1fѱ@Jye+v*YN徲z@vݥBKEɤ'ҭkM]uyDR> -endobj -638 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 558.873057 101.433071 540.123057 ] /BS << /W 0 >> /Dest (cb110-1) >> endobj -639 0 obj +637 0 obj << /Filter /FlateDecode -/Length 4930 +/Length 4913 >> stream -x][$m~_NY !FFv{wls!?U%b]fvN EQ)VZ~~/9=cpOoj^_)(7V.N^'"8M .yuu}7ShWb9;+XO1VĂ>:㶬1\N^bA gLX bXݲ20Q;1tQ`i9QJA5O)@A=My<ijv -i%^B>I<Y|VZysJAgSx`ȃ,&E+"d1Nx ȃ,*(-|NΉ J1myF'kzM+0I! -<YYAox8H<1%aZVY-3EdƲp۞;_|'8)?B)_a5o HB:$D]H X\n$$o?$$:jc_(?)"ΩBZu%:/+.:kucq+4zت2cv@ZoiF$}6W5ZU7zo}Z=O}wB;R{Hz_{j^ljcقs;8+NavkW,fm'wE߱_tV|V+{vZa E}g1tVl R>:]5vmf+o+k܅*ʛ::ڋuOw$)W7V(!bhuod>1k,t|5T, yq+JdSd9.SLV,$_kĂavgwü`LF=eJBuov`{y7ĭǠ.I[C8΋u:qzyfXAEmszuvfcbvr{1e#X,$d;6vme'=Wzxrb\/т߽>iK[d:Og'_X,Y;3VŢN4M'|γY;_jhuwMb?{o`20=tyYqln.X〈>,w\P au;׶>3LYH/瘤?ku"c͏-Ǟh6 ^]|gjl5#X$ggphd^˘S=z* O6]#?e?؋6qf,ESyj]w<%4ۿo_')Z4@')eK-cl{*2l ^ cge\˸䠓d9TJjf$FLB\WHm}un. J׵_VK,e-eljqW$pHiYd_3_/zez5lֈt]tjWEDZVe :QP3QB͊]u^nlSz wd]u)q*8Mz]Gz2= dޱ8׵8]7LgIòE6zշˇrZnݗ]u8Gq2 yP)n.EUkuɋ#y-\j#Da< 0L V8LjRgEc.Т9R9+Q>LcΤ1[I{!St> }[wN.ۦ_=c0VqҺ,Xv/0taÆN*YTr&F{vb'7yO}%°xաoxjLxXsH0$:;}dfj6sQ9]y>MSv-ыuΦ> h\RNCrSf%,7j߱{{4}Φ=/yKapT -Ygy1d{>gCsrZVYm90(vV"'&Y!{]G6cmB$rb[Kªފ)i%2o,b]MŇ,13ݴ$JKboBW 9g!3cLϷPNDT\Ҥ nUw:1)t&];5˗ J-?Hb:rrvLO7D/rV*d~$x'i2_n  -} -qe6rR^:^?aiV4IP|Юۯz'6y$N ub/ԥcl6Z(OJ7Les@ǚ52AXOJNTUtɾmz: ovrhɱ͸]f(͍d2T;d1b F_ ֆN c_d}r+nXo(y2ѩ7iغ"sOF{.{P*-F4~'j ͏{-DuȦіi[ s|i(MVpy;kWTtpaq%0wVbANI~ǧti;u7˛2 -V!ayy% 7"r+ SOr֗ؒkeڳ-KnumQSSWiNhpb2ZUKq[Lѩ|V=)KVע% 9ѩ^ŒI^Q]/i+m۷[] uABLU7%߅Y;s! ?%S?lh-RG_]b79Εl3"5W{tLZ5},+(WJ :̩M&|TaPUo~&š |I +x]],}_QφI1xp1fL,=2%E*#ީ1{]P(R7%r |IM++)VEF?Hv%OvӯN_g3@*gbT^Pe)Fム +zBsT0GgVaK*I* 뢶[U&j'`> +*`6J:Fi?8=H:ɢ.BtN!:S'I`JK:[vNI:l.uŤh%]-ɂ.+:آҒ.䜨ЩVg|VI:'lZQN +QϢxGҁ') jIa1щ:؂Ηآb(#h"^88lD&%$0)O.F+р~r!G-UŻ 1հa:b؂X [XZ$.[oA …J Ƶ)8 ,(PXpwJ\`AQ ֵ> ,h׺$.]봒wENQ[` J\V(qb Ыp$.V&wMRN5SƠwGk28q&H\L%F]P=tJ\&Dӟ0VN9H\:D]tDžq /O:,qbx.3I\0 -8D̙)R#3Ct=I6㯧_`=_ n[E4TW,!#bFjFFb퇕0LGn`D# X3wirD탖mv_Iޝl[3%-R 1&h$ܙDfCx]U|:+vGAƟ?xw?}z=?o4M_wYrk:C,h^33<׆tkIGy[^Rg.#Ӿu`ŖeiL?O;2%>eDze_\X_:3(\i`x]cY9lbe4nD<(!PHZ˦ٿ*(!e y:TCrg"!p )_s5 ?R."{|a%L0!FL3뎳~뵼5C%? ˿;|#Vdm)?X|,f|ǡPsXZt{F͵6Q CD{e4y64폷M^*k ?_/j/ } r8v=yX?B:c=Oc[^/촍eW2b<φXw#|q#]-ތZv@{0ӡz9r֑Y.o=ǸFtHA<nĩ{0ӡzzuճZU zfFs:]yvuq: jBY~gm#Y[(=كy z:׸M + I7?,y__FK:^ z3[Q2و\n[G7;:l^`j|Pҳ[3s:WDZVm W|>8a ԝcX)wtx:bO7k;rϰUs;]`fS`Vw̷7~lzqkq3%WX._W9qV.e7WF]m q@1F8: tr`wSܔЖo,\ƥ^(ò m +sT# +o.P[%'p.Cۇ){? LyUxk=4rΖSs-7jk6:ةȖr!rSդ1'Mv +&:3koUU{4\]Y״&&Po^ R5,3*7)[OrߨZCg6=5:} +$N]Nb4z*TgݔuZ.l'һQ~\iJ 7f#䣐wPB -+xR:qYet5?SoRbA):_Jhl6I\8ŞK0c+)s\#j놺&& +i\Ʌ7(N߆W}+C7.5UeK(&ZIf^v@ +]ihmT[>A&͸Ne3Zq}> i~=9ϰ ?e'DLNGkly5J!C],ĶFs}d#RJxMY &Ao+XQr&a+ӜL2ʆPTZ +z /*-ȧ j\ endstream endobj -640 0 obj +638 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 639 0 R +/Contents 637 0 R /Resources 4 0 R -/Annots [ 641 0 R ] +/Annots [ 639 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -641 0 obj +639 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 240.123057 101.433071 221.373057 ] +/Rect [ 101.433071 108.873057 101.433071 90.123057 ] /BS << /W 0 >> /Dest (cb113-1) >> endobj +640 0 obj +<< +/Filter /FlateDecode +/Length 4683 +>> +stream +x][8~_H|)$HaB<BH }JǗ8N{vLʗsY"!D `/H\# )/qO +:|ve:B$.c=$k #-.` "SL6D$qAp1ft-"t:H\ XK ^0:M[0T$.T4D\i'[xi-qA4ޠD234֒hjIGיQH~`WQ 4&$.@bI\X:bI\f Fbf )O₤nq蔒 ! 0.y%.HVa%0n $-.-p0nIXo$-&{^oF f` ^ D^o1\u $LzW ^+(F anC +܋*154XYF/F 0B6P_ck Qy!`Όo2aXJk|_;3&}z)?˜g ޷[h '-WR5J fSB$ں7;l_}:_Meci9AfѧN?oo\|z=}TʽKL.0\?8pvc+_ϟ~ixء/46-%-gA"X4(Z־33m=51nN  }äShwʕ_\j +F!n ӷ~cmi鳛^.ӵuTP.#ӎve|!Rl򰬯k=KFH*@]un5 M`5K@c'5/t%nBzgawf[XM7\Esw3ojҾL~k#uxMil7z,fuՕqxV2ʌ1jv9ʪٰu.ԩ:K[^bh zFν6C¥c׹~Ϭ=6YЦr:T7z +RMt%hJ֩%g=3zuX .sF;22Q'F^͵>)OZyOB+t9rO292MOp|5} j^WE + +G ʑgF 5HX㬗=p ={;u5ue2/l\uƓ.}l)G#73ѐg7|Ⱦ'ükzv1|RZX4?cmLWćFw^O>jW IE1ݗp+s ^ljw-Z>j|3n2̂O[<>䞕ܚ9nw܏}ya|g׼>gT׆;}λqG;ush&ugn tÃf炘#:Ġg,my_ep+5>)/Aq?m4s84cמ=z<ѻ7WjGxrd{+E^k1S +2Ww927wUw7<&6{8Mmv_áv#oxϪc\gb=}Hѹu<ߙhuqםύg͐=萹&.%XF4M32:z:T6fϏv|/#[ڲKVy ?UhigBoQW+=BK pl/TbEO}41]GR}yv1օ=g~GJдhy{tI_mDmR[y>t=jcanSAǗ+ +'̷ӗ>7P֏]]s4}ֳvV)$E_gF +JGh(;UG[mƫ^̙(Q릧;.k[5<ݝ>\Zue ܛ3 Gy`Xrt'0޲w~}iQUeѦ| \?ْ9+{܇i^|s8|mxXqWwYx}tvBΗlLW2cvGs4D>ٿ*sJpgájcwwiDmၨrAѽy _?wժM|ƣ |ֽؙ͓p]o˨]+oD{ 3И6ӕЋo}5e!7+˺R_Ǯ ods8{wN?~2i_{3AN}-} ֺ3ᐻ3]44qOK#}UpݝݕG~#"={g!uW,}{n}/s+z{~PLGìVm@<3s|7<8v<«ěI6 |z~I"(CL/O0WJkU޾h'WucW]}]ߥyoyyʉ+39??o^>>+Mu7^r.â~< +=\2|C:IQYҹذs<ǒj:#RQ|dbJ?t۟z*~;y~$S*e CSZ7c*󋠯w],ʉxbA^/|jГD|1l3@jkMP5Ul3tJ*,MiMhrBR>-[ר"QH]NY:J? I~rф,<0f QIr:At9\PRŚ5喯TX^m4Iڌ1&C+UlpcQUvrAH*W( +mSnGUR C34JHy +DzU+YFj徰I-)ԴMs +fQ tKb3id:UnۙϦ;|Vma 5_:ִ.4|M5ĞS h[m؈MѶiwCxZ82M6|0R +2VS)WNВi2-MZ63VR+,\4n_ڪ:ͶEgxMh &VfF?xUs\`0Ss:Qr\`,Pp8.&tY]2q4 `V8. ?9.p]i8.p]i:BAs\: [fLYR)8xW*0J#M O8.^#%tpXx e:b^Қa \ }[)r\&!q1*sZfu:9.LŊD/q̀N |-*`*A3t -.tJq\4l7qAL'9. $֙`H"&Xi)YlMp\Imq?Xlb` YqA:-7!-5fZoz -8.҉&s\NJ -XojqeZo "I7cm$֛h`` Ȍ[p֛`'N`\Zo f` lk#Ӂw: p&<[nm/A?!81^ Hp/f+ $7ؠ286jiJ%ٰ33NG9t #y>V#hq %#10z*G1 `,_`cY`f[4ub'@~4ĿpPG+1r٘aw><_K)Mg -ߍk3>5LѽrݧQ71vZbMys~6?<)ps|UmoLfW~S D8$^,X@6wKn d,wpu,x!KWڵņ[c_[gm.faۖ;O{#Ϥ'wv9ذZ%$@ 崮5+v7!8.?\W?^"@r_ӡҬrS| M=j4?i=m:e3<{q4XHK, Ѻ/кd>G/?-gVЦ_Cj~\o˽'#&!Զ>υ3,S{}cw l.3G~J<973}чx/;#7-8=;,yåUXm5 uٙtZr*,7~UD(zؙl(w7qDq~^W qa8l+.3P]uqY| {_s#{}0oMi79GbVUe ߩCw g/Qzj,ǎM:l1ć JǚKJ_MYu_ӡngDL)~|19ja,Z?9e5s6uv+Ptk4s'_S @ng!tÿ\z"y6/Z1nGGcAB~'FzkyNލ[Wr< ҳY'zw|ǝyN TckQljWeGmvFs6 vn "?m\- B9B7v_gdk^P$ y&䧹Zxt;y?=njDîMlb{ws:$nMI+޷m9FaU#k(̼s:V36xM~GwkFxԺ՝yΆZ5QV^@os:G,k>w;9CF|tq ~ëջ6pCw9}SDVj Mqȴmk#L OY|LvgQ3zeœw=C⧃;}^>?}g!~PcY[C|\YftBJmo5JMowuOؙtH^QAlr%.eu\J98LSֆ;ơN0 ڙt`=yw}zgdF{9}n<꥝\$!~&W6 ?4`k/vFioxzs RZw erB?]?)ߎu7 elY}qÙHj8O:_:{uF'k>^9LAQа꺐s8njnI]Zl"mK$Uc*VuE(,OV(mD\e2Rn/ؗWbo)|ކ+b-lW+k0BW}yv~5~X7.^iNtmeKy1?󸖅-t։a8e4BmگbjZPq65ĞS h[m؈uVԴ]޺V,kNK7j(E{; UGuJ6E*%S:F7q˦X-VR>oڮTWsѸ钪i-:ˆh-ب81zu&<P{rcIZp馗eΡkȃP)GɩCfrbmL`JMM*E d}ɍr wVŧoۖmFmYTnD-};YS_202.RSSR6Ӻl{mnTC\Lefg)ߑsEToPDm'Mטܝ8ĤC Mh<뱒yD$JښI^ۊV>[-=L(ҜEHBҧÑ2td A& +x][%9r~?ӵ1_(STF^}ݜ2 +}T]?")<?~)8"Opw(LN'g&0L~ }۟su}7SJhwWfB A9R +, ]LIbA Ж $ cRvJM b +rhȃ t/|L&FY;@i&k KJK<Y&RAybU" @;IE"(Kvr)!nyFEkzrM+00H><YrIAgxK HXSK<6IIX0I#m ++ҤR8.`HX/<$ya!i ƓB*a½' 0D (HX#M)/aO +<|"OvdOpj84)ο[~ic er=pfovn,4"}n1ç>([ٮ_Em;GgLW?z?ZTgq ^-6k^JGG_-#3ZPqӴՔ_^y-&[pj 46 +_Ϳf6n%ur +ӭ1?FɆCC;X ;K޳7Xx蹝RG=G}0΢";k8xj=5tQOƺ#nn]BGmFr[{la.p5{hʖvgܑ8Vv1Z^wȲ?fٹg~Ḳf\:Ƿǯgfo.ߵY[/픾rK/өQEJF*ewF1>˽{'4_sBgx,#."[̽`R^]5rKmwmx0G2́˞8֋{ދ-J@E>L:Xd5g>CA*/!R <eɎ'qMd{ÐSY\7zBRyb3)y .)I7gW2 C]j 3C0uH?b`]j_/ڈ>)UMQ`{gmZ&~\M?'26#Nt.Ʊ&/o'k?΄%֟w͈~2(@7M9jȱxG7%6e;v/r#2N=uViuP6Cܬ5\Fz؀"l  TPl_Rz]j*:ߒ'+D(G'!)ؠ\| h68fWiպ­䧪֜ $N -T]= Sz!ar*b7a w=NWm8}.pӠbԌ2dmPC~]U WoxW' A9U>~Z>0%H^E,OyWkdцWqN%ӕ#\|ƨIJ['mE[}P{a)N'\jf~xW0ɛRzJngnUagDlk 6l; gVqwHιLo5Us ҐYD6O9V*ϣp>EC;[" +NNidl'eA!ZNB m8.`DR9-r"F=~㮇ߞI>(M)A0v%m +[B/SY,Ͼ3+mnQXx2-CmEj&o?3_TZ=[Dr~ECE2l|>J6|$ß8;%]IgN|/Iq|Xb)Ko,29rȯ7>2QۤvBfUնHם +SKZ7kgN Wz]3*l>h@DMd=g).W| e[)96UwF6T|^Uo*z: )kB7GǍ㳑*RT.҉BPR])Y8 M JQsfb,D\*&[ZsuB-[T4DincU@{tGe56ֱFlRڐ_o.] +D۵[Q5{i05 O3TJe_K5> ]ܬ䵒zC4VSjtTByZjlETC*1HUXuJf+XUkdWMuEnr:U73wWmd_':⚏uv;/Gvl4cI# +H1z(4rL.S~|&q߲3qЈ^)}2?otc9oFU0[Wޓ"ϸ/:m:YVk~ܘUW KI]TWnOtMT͗M3XoK[:W|b +}wp6|m.\2]E\ⲻajdoRUS?]ta_ƣf -+}ä<^<ȾVhמZ; +x2K>2yj[{9mjЂVvت-\S*Mp*b(2ZQKqjLѨ5QJtMYnx-ޜCj%k,kW*жwݠ&ojܦ=sg3:HV+!:dIkl@*z !>=PF\xd"RJ;a8&VIt*Jإ)@X +j06+A|W=P *_FcAi@~!O+m endstream endobj 643 0 obj @@ -8024,215 +8040,219 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 642 0 R /Resources 4 0 R +/Annots [ 644 0 R 645 0 R 646 0 R 647 0 R 648 0 R 649 0 R 650 0 R 651 0 R 652 0 R 653 0 R 654 0 R 655 0 R 656 0 R 657 0 R 658 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 644 0 obj << -/Filter /FlateDecode -/Length 5011 ->> -stream -x]K$9nDs€~mxm,|ޅc`}T̈g2ԃOBR2;sI/?]~XſbPo -Wg9J(TO?9˟~smw]티L)٠ -X֑ -CTX41BbϷ1䠱 {V-@ k,JH -Yἵ*Xf -31_T^%LLxCx YBNx)'! E*H%⡝2dueYlN2dfW9[Ld5s&6IaDbRxDʃ,xY?8(嬌V/,9 UdAk#d)jd4 ).5 g -\ D  ǒ4 N%pԐda\Y! hX@Y<eXe[e뢆VRaraJESb' K!z K%vV!ʃ,0` \& K& a5,@a԰b|VlY)@%1H0p4A>Xaw=a  w!Aw VyҰDÂuӟ2V5,]}*qeBX4,]LTaA>xkX0Sk`OQ ɅYÂ"1hUEor\ KSӰK@ kX -dPѰSsNtsNÂ! A ψ2հ34bIZ㱕83kX9q5,0A Ty0aGasTd% Y6%L YiXPl4&kXZ ˈ7=kXq)fְEOěI%EQyNSQ-0 &IE kXPbx3kX7&KT0g$, #I/~{\fWo,;*${Ub6!l"&`܇뇟.__/;/?3/歬{V~\>+[pؖrT^>LgB5 ]y{-Mi{:~~ZNƮl(He;%̷G+j sKfh3ug~uG-M~f7G1՛4fguwΓyo>[2od9e *("$5}[+n-mfga}u qV~+ȭϻFAB4 pdv*`΢Vh~\{vwZ9/SY #)E A4ߧHJSnHZ4;&>DKڀ8ϭupxՐmxi*kطݯ] ߩٞ.r -*e.D2i/[ӅQZNkkﯰ4}6'E+{$ >>[] Q>ɣ+R9ʙ항wS@\#`.^Mïv+wh֭ w#2eU3;M)R@E1(.'t}/tyj="+XeUW7n:wYuC @{ICZJ4pJ)Cړy9CeL%`no,-L32unÄel6مs92=M {ٻܻ%oN@΂܆G-TXv[{ؐT,ww͈w[0M̑VWdc<ʏCL;v42|SYG1YP?ˡGynvಧwR(!u.d.Ө6-frrVjauVyq UĜ{8{'I\rݓy=%Ę₅n3ªmqu-mŴb}<*)LSJrm_=u ݕW*L|+S߄{B_i=7hM^S =yPQN8HDz,OEd=K[]z'l|*?sygo ZJҺ?AЦU# )D㔦} AlWEgX#7.HypOr/DΎydCE%;^ l| Cz<$9{#+,>$;> -endobj -646 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 510.123057 101.433071 491.373057 ] +/Rect [ 101.433071 416.373057 101.433071 397.623057 ] /BS << /W 0 >> /Dest (cb116-1) >> endobj -647 0 obj +645 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 491.176036 99.933071 472.426036 ] +/Rect [ 99.933071 397.426036 99.933071 378.676036 ] /BS << /W 0 >> /Dest (cb116-2) >> endobj -648 0 obj +646 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 472.229014 99.933071 453.479014 ] +/Rect [ 99.933071 378.479014 99.933071 359.729014 ] /BS << /W 0 >> /Dest (cb116-3) >> endobj -649 0 obj +647 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 434.334971 99.933071 415.584971 ] +/Rect [ 99.933071 340.584971 99.933071 321.834971 ] /BS << /W 0 >> /Dest (cb116-4) >> endobj -650 0 obj +648 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 415.387950 99.933071 396.637950 ] +/Rect [ 99.933071 321.637950 99.933071 302.887950 ] /BS << /W 0 >> /Dest (cb116-5) >> endobj -651 0 obj +649 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 396.440928 99.933071 377.690928 ] +/Rect [ 99.933071 302.690928 99.933071 283.940928 ] /BS << /W 0 >> /Dest (cb116-6) >> endobj -652 0 obj +650 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 377.493907 99.933071 358.743907 ] +/Rect [ 99.933071 283.743907 99.933071 264.993907 ] /BS << /W 0 >> /Dest (cb116-7) >> endobj -653 0 obj +651 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 358.546885 99.933071 339.796885 ] +/Rect [ 99.933071 264.796885 99.933071 246.046885 ] /BS << /W 0 >> /Dest (cb116-8) >> endobj -654 0 obj +652 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 320.652842 99.933071 301.902842 ] +/Rect [ 99.933071 226.902842 99.933071 208.152842 ] /BS << /W 0 >> /Dest (cb116-9) >> endobj -655 0 obj +653 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 282.758799 99.933071 264.008799 ] +/Rect [ 99.933071 189.008799 99.933071 170.258799 ] /BS << /W 0 >> /Dest (cb116-10) >> endobj -656 0 obj +654 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 263.811778 99.933071 245.061778 ] +/Rect [ 99.933071 170.061778 99.933071 151.311778 ] /BS << /W 0 >> /Dest (cb116-11) >> endobj -657 0 obj +655 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 244.864756 99.933071 226.114756 ] +/Rect [ 99.933071 151.114756 99.933071 132.364756 ] /BS << /W 0 >> /Dest (cb116-12) >> endobj -658 0 obj +656 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 225.917735 99.933071 207.167735 ] +/Rect [ 99.933071 132.167735 99.933071 113.417735 ] /BS << /W 0 >> /Dest (cb116-13) >> endobj -659 0 obj +657 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 206.970714 99.933071 188.220714 ] +/Rect [ 99.933071 113.220714 99.933071 94.470714 ] /BS << /W 0 >> /Dest (cb116-14) >> endobj -660 0 obj +658 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 188.023692 99.933071 169.273692 ] +/Rect [ 99.933071 94.273692 99.933071 75.523692 ] /BS << /W 0 >> /Dest (cb116-15) >> endobj +659 0 obj +<< +/Filter /FlateDecode +/Length 4421 +>> +stream +x\K$I ׯ3aKB+J4bEZ8*WeNOҎa#3˝-~qٙK|tdM +jEe)d+1OBdR > ./?mw]8듰L)٠ +X֑ +CTX,1BbϷ1䠱 {V-@ k,JH +Yἵ*Xf +31_T^%LLxCx YBNx)'! E*H%⡝2dueYlN2dfW9[Ld5s&6II1)<Y EA@k<,rVՋw%d>ʃ,| |,6E AFpIYp次pJ/p,I<4 YG AjXC1f]@Hհ 2.aASyŸ+~ -cѰ wHÂ|f kX5pb5,] AqH4,@|3tU^1aAf K4,kX `aAlJJQÂX,xHT^4$ Bd<‰5,@bm +aA򐅼װ yȂAd8djyY`.j}@2 )DcЪƋVy<4,H BӰpz F% x5,HU4,@(2#3x ְ.xiX=dA6aAUf B5[3TQ *M ʃ, ?Rl PD ְ g/fְ gװ)fҰXȂOÂb4Y8xjXP\FYԛYÂB&Jo.+e/f^UȽƻґ;~3T m֖!:Q =w}VRz +(sM~fIъ M?@{3ryG1:E>>^ ;'YGSۉmԦўyݑ8o:_ʑw9Y;&S#泻;DkC9=aL5,Gnby?m@ǡbBaܜ؀C&[bQ܇ $o{ae'.ȑ="9Ya[ơ.0<okag6M{VJדNJ?(ˉ3-MpnV,.d|Q)eoRﵾ6Kw&F"vg;KKNQR$;xb̤obW >7Wzxy5x,6R<蝇̲+-- /| ru1gId}]ɚ‹K'm#[Y!I4w`ƅ.o&c©DG?m6=[LfK/ +|ϯ-Kgy2i{`y +d)j}|%UZ>rPtWXM>dirVzǤդ6 si.9B|C9Kz| ~<tVyۃ6* Ob WO6qgX]lhIdu5֖ڿf;#7q>:R;Y\+jʒ4Qmo'l9)%r w~.<ُCzBҖ5T^eV9CjqrTK^JjݟNzy;ĢyEAo#jnVcD:Ki"iD&NdsZi5m%vJdž ,'УyHĚq;N݁U0ȑvꫭOI2gsX[z.V|߂E'wyWMYB=Qѥyr %qOdrSudumM27{Hm]GJ(}:-mup])zwC}?]۝}nk.r<=ԙY3L[Yݺ6O~+yէ6>odi~{ځ`Xe,H_|@p Wti+~ tzZok[^oӬcֈ#r7z;ƮcuNlG|6ЛPZo4~s_ƅ/}uNz `~g.}5E~*|߇㰽G;WCΩAUw6|ϻ9Y^y0FU!gZ>R߰鎆qZ/XQؒlig/ȃм Ťsoy^ݷͰcq}~>僧d$Z}]ݲٞ`H (LwMSøZze*ķ<ޭ) KݔT#gGo9rw=u#9w\vgw5&5|{m?b}Gdmy" TF\*gy/+[b׶UźG~/HV^R6kMl|[ɰpM~9ɷGBF~},vp.{ɔ-v8N $;jhj߮旉"zFwK[V|G6^.`w'yn;w [dyc{b}ViG 5E{iNIҩ}mhfvkB͐+BvhTZ()w+tJ+&>nr(n r +=q_N!) +Dl <|k6{&*S?8&%1f'o4cG48\Jfg}dQ ]cꤲJO@ǖu@XOʙhnC7 y'n2رe&N^q'oK l|MmA& 0F_*ykG'q8q/O5y +^ +8mߝr^\⸷-| ydMH YLDˣmh^n#ܙ'M +-DKfДpT> +endobj 661 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 169.076671 99.933071 150.326671 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> @@ -8243,7 +8263,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 150.129649 99.933071 131.379649 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> @@ -8254,7 +8274,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 131.182628 99.933071 112.432628 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> @@ -8265,7 +8285,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 112.235606 99.933071 93.485606 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> @@ -8276,7 +8296,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 93.288585 99.933071 74.538585 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> @@ -8285,146 +8305,118 @@ endobj endobj 666 0 obj << -/Filter /FlateDecode -/Length 3977 ->> -stream -x\[\ ~_1H"u?4(P Ѵ(zNQG3Ý^g EIfk2;sIwkRW[*pt @ɤ|ǧ;{\?~}w]8VXL&lPX,Ha`R!* XƂ!KV\rX -+C U O5p%$,pZA,3y炉Pzxޙ/*/xD&&vibb!k<,Xd j<”Ƌ"YY|NdNQxʃ,6Z -P2+ٜ%`B&9`Qؤ,ц K 5AƏNJ9+ŻɒxxXAl>B #aOp񬁀d8sPb8%``8Yw, sUd,hadLЖa-mq𖭋bZ K9ȅ) KN  wOPB`8G K쬆 %BOY` L0pM0pn5,a԰b|VlY K"7p5,`g5,U. $djXx' 0HK4,]WZK԰ w]b\hXTaA>x5,]G|.a8$ ga*[rְ wK^Dac3D%CrEaA" "p" "p2Y({ ׀U|ɪHa5pT4,] $5,Yװ f6%aA,<|*/< !Td 6Jְ yBkX`ȂLQ ɅYÂ"1hUEor\ KiXZd8x#钆<Y* 쑙k<YdkXL<4, ԰ *3Z QKBԙYÂHa&RA)(~PlQykXr3kX3dkX۔z3iXP,dAƧaAHa`'3qY_{le޶c{}Ӷ砾.ɛwlwJs6I،K$nnkj@>߼jb- oxHe&5tQJ-ι~3x osUxqkzme&|ؕo:}(-I8͒϶Wѷ=pkB{b.FwOg;~ǼLk^f"3j~E>\$cqtWh&h17=Xb[TjVxmH>\giDS2=‡MHj+TZ^ iΒi5RfuâRГj m֖Ǧ;1ҟf=XGB*tYCkxm?yf,IVP=EXOdf9{K.Ok#obw -譭 $fqrTKn}I[=߇Ob:<.U526iu.C"5u"HVl5Y\VklYM_2t*\p@^q"ɧ6r3rMWW99\KW_dXcLe잼'?og6y:W-YB=Qѥyr 'ױ=mҮWu3l-2w{H}]GmMJ(}:-upC%zwS?3Pm]xr>gX֕6y{lF6_kDw!KQtgti+~ tz|Zږ}qDc6Wo'#x| /'Uҹ~_j e>>7~|7{۞?'ߟqr~P"1u'Ϩ -n 9A$W+j !u}Œ',"&iM %yM|ox*&D<$ex7z6FU[C4%`ϴ[|VjM -P?N["?;?@8? -=/kP]L:o}CB42#~6C+Ʈ!IG_˕7 ,C;f!cKValj=Q¨̛B|],yoĭ98}ϑ{ޏ|XGysE]]ZLkxumt8/_&;F6R9l]&W_{?ZoY/4-Pֳߠ 䧃|2< Ab{kXB)-Zl{;O $؆}5?n D$6M3K-l=!` ym;oY-pItP]!:loӲ׈sJ>T׮FPePCo96>)A!~mЌeFݐx+B:vm0v*Vyv-]Siꔇi9KG,{ -yA<$]!) -DZlL**fK0I7y갦i]R6 %^@wQ-TxRO+u,Lt*Ǹ1uSCc,Z|F3]c{Xmt٭5iI{p1b2֭8ZJ#_VMuWú+񢭌#Ȗh$@a54WggˑKfރʳ%uܼG ę-\(:hO= qy~]"O(h\?+<g%LD698O`یesnŪK0<]K?PoTBfwN!v'q*S -endstream -endobj -667 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 666 0 R -/Resources 4 0 R -/Annots [ 668 0 R 669 0 R 670 0 R 671 0 R 672 0 R 673 0 R 674 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -668 0 obj -<< /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> /Dest (cb116-21) >> endobj -669 0 obj +667 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> /Dest (cb116-22) >> endobj -670 0 obj +668 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] /BS << /W 0 >> /Dest (cb116-23) >> endobj -671 0 obj +669 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] /BS << /W 0 >> /Dest (cb116-24) >> endobj -672 0 obj +670 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb116-25) >> endobj -673 0 obj +671 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 662.437950 101.433071 643.687950 ] +/Rect [ 101.433071 567.702842 101.433071 548.952842 ] /BS << /W 0 >> /Dest (cb117-1) >> endobj -674 0 obj +672 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 289.190928 101.433071 270.440928 ] +/Rect [ 101.433071 194.455821 101.433071 175.705821 ] /BS << /W 0 >> /Dest (cb120-1) >> endobj -675 0 obj +673 0 obj << /Filter /FlateDecode -/Length 4752 +/Length 4933 >> stream -x][$7~_1Hi|)ߤ - " .:ၿW]]=Ndv|)>Wy=l?sIΗ'3`_-JS%pTK|?KYONXױg7 1rJ&(^a0BTXNb) bD1䠱 9V{V.YXÖ5:cT1D)<GsqE%lr)&j2CxYB1V,x|N/BQy5^,) -/CXWVyDc5^S(HLNys&L!{o4Smz$Ťd&Y7NyBxSΊ:nox8HAL.BqIDő.2e \.5p%LKp xYE ,UyҰ;ȂxYy <Ж`-x-b5,[26jXhX>GҰraJEN <@4,@]Ӱv=azFz*5,:Nfaw5I v5,L.gaw]6aw]p A[.awa e5B@Xs^469%-XZM6aAڌSye WZlEÂB5,]gְ?aEuX5p׺b4,] AdhXmdJ.`iXUx2HC'8TÂ^4,]װ w !QygaඊO#XRh<றa5& "pM bb@ QӰ fJJQÂX xT^p4,HRyiXz*d ,9 ,4,@D0[M E R԰H6BaA -r\ MDbar)5,O.iX1aA*a);DB Z ,5,.#ˌF%jG̬aA8qa&RANH~l"QyҰ gfְ gӰfҰȂOÂbaqѰ،|ӑK7H->r4,(YBY4oI7N/BWHÂ#Y7ѫ[ͤnwC2i<."Өa.o"r{ ̜qfuzVu{Z%u|9GR7 &2],`Zn/1a¼$"!ảY?(6}OԝǶIӘmW0NPCĵQAΈL7dneqKx9 2;q9R -J1|ɤޤ?;g9_y E-}vNXyI)>0TF:2xCy*_Rz&[.P9z^jN yq>>\JPQWB*|S~/ٶ_ ҟPߜ0 MD~cIﺟ|8/'ϛ|i @Rcy ^xM5_^yqYo0ZNVd/ƥ oʜ,VNdg_/=.޹,KNogz0),[F諵|\s U D۵lMNoY֪ak,6-Z#[$ZC# k]sRK8bHȓD=ת,У3 wr=;>o,\}M0c,+}\O)Qhp=[hsmCןo.jW\gc+{Ymy/ ;lAC:/-@YNj@eKL#MPM`YFM֣Ҭq[)1ܪ Uik4SC:M3î[ 6y]nyX׹9/5>%!.B g-DdG=֑]>>=aUMj*GA>hօO6n:p|@v? du-#54OrY={e]:W' ޼EۢR1T:sϮ'ny]g v0l -kxJާ2_gYY}q" lfZd-Nf}R&l,rvs5ܲ[qG,X}a3)Ybwvo5 ޼kXٵ,Vְl%}g\=7kv<ymy`X]p5Yz2,zl6ZLE|ٯewjygW77⸧JΖGi> = -wCޖ>d[|mpHGWGl?_QH{#"k)E=܊z~lLrhzވP}>,nDطst#gR8A?_x~MEn`i7ΨQ$?iĔgRah2'uE8uk*寝o6 #ǙhLw]bz4aiY3/XcMS&"Ets<3?,OM烚y{ކOt-.'Jή] L -h8 2Es]}>Lf8b]hU`i|}ܱBDhdBGV/Wg;q4HhpTIbn5y,?Ⱛ.b]Ίoe]yx9[>T~PnkiI_y!TJ >O -o0idv5~L͐+BrKkTZ(}Wh0&~5o8)zQ= e':=`^ǝh:r%w :?6YC_ǝxMJڎs%1  - W{ }f,oM*\2KY4+.:tpɉRtXd+1 e'],?ɩܗa_ʦBAl촬Q~{}y_DڡS%tq}_Oj;4|rkЂVF5jK ;F[uF-&S\5gUKtҕ]Ynx=Z= -Ҝ%{,Z;FIhiw[mb4#25Zؕ|wh_ y< 5䝯?dr'bk:J+{tLILKr!j?W+Fc -P?c믩!/I̿h׷oClS +x][$I~_–y"00g"g_d%*̸ٳ=/̺w$r |t|RS +>џrq:ϟH`71_Nguȓ~'41gI3|tmUfΘ$̰.jUeav +f죠 +vh!9kSӃ3z +),"t:Ig^K<|tk甤-Φ(l*Q[LVEb,l-*(-鲝|NΉ J1muF'kzuQ-A,`H: [$xۘ0Z nt-|L-*0&%LI$`\rIbb 'rx* X[ X [F-6; -H q8+q:E u*k ,)$. \$.`\r,qZp%.`]냑vKA ޵N+ xZu8Yk8.:A`e2)) x$$.p]18a Z xx4A+#qgQb4x9- X 0Cg(l2K$.]1 cl5锃OIGx\Cx.&*+q> 3wL-d%q"nF qI+@WI$.]ВD @'8T%.]孕 wC#`MF5a +c BҁwFK:R1K\4mJ\" LN!)$.YAOԅ ^₨ ,Q[\t Ih`5Fh` B LY#p RL6UI̔"Z%t F7a*`-5% z @K 贓 f؂"q)DN ҅Nk -%.H&a%SL$& +%.0JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@seg@F7 `&V)VJ6P_cn ߢ +CĜ"52cX8D}1+|ge6< R4zd!/'D+M װ]"QAb_rR4b͚Ƥ&~9aJ}O;0ђ&U H~DGe oT"5ʊpӪ`9+c]1ԭK eWyNaneNX(C("RL6x !.Gҫ4m +R2PB؇^rB]:=ޑ{ydRN?m$ȫm xc1y#~|om9Av_ye@ 6 9( t&gsʢѝML0\Wɳu]>T[= +k{A<_VhmiuQh7;[#: g5I4hhvNrK]Vi[O^)JӆU| {4(-W@IK}/w=i`J;lhmxD-*߮Z~jߡ~7kd{(kZTQ>EW[G tQW+朞3U_e-?y6ᵼZtZkXBiYx% 4nvLer/p<'|jUu遷c +vR2wI ԜW٥} dOڇn#W>v3+1"gz Yk+KuO8}e&i務|8WJc{$(ЅYhG'DQ+賆F4^Td贶BrxIV~JtsYD.uҏe W+aR.pZUئ:Uk%,|AJϷrT AVn3J]؛2B{烽!qU3/î[Vin&yX9tB K51b}~n~_k>`Z$kk"9Dۤ1y0@rיs\UZX +a岕lt%I `/Y[Wx3=T(>.ѵ"v5nFYVΓtkVjgٔFqc8Arys6h2M9{:XVqx(K\y շҿH |.QEYχo7|f ڒȱԻ.kh;A6~7U˞j+ֹƶ%˵4cQA ۚ/Vcmjf I7J=%.΋z:zPw%KYsX#4m7vBy4ˇG{c(ynjhyV3|'m r$Z{|0!r-kc(IiE,B5"宣Em)зFYwoI7|$x0!y?k5O%u4pYIGMV=}efN#f$.ܠIX}ÑWDWК^<Zcԟ.{6[^d$G?4@3ʣ -5j^ѓ2#[s0?\H8G2+hVB۱<:Zy~Pk~+vzPڱ({"j">;zx?>[_R׽7u&γьcHT/`t4TUHR}biu ZR)yRݗ|4(K*܍y ei?v_WteeY9t&T.\WW􊽼yMw"!.d:~m޹WP_Q<c׏ȼ{qCqyQ7o2;:p0ϣ'oЁ38VZ_䅲Vi8{sJ[KCmv?/K=gG3p<RM6(;lv{_> +1<Y_rj_agp^=vĮ]=s޴v͡}q<BΗ.Η޺jwb+\8JhGry(({ }gA5ͷN`Lt-"="fp>P=|a](^fcu9_{{B]֫)6iE;Me6U͔G7{$ < Agq7ԚroNe77V{7b^.mtS(-*Iz91YIY[7X}sOUB젦\:Ig7 +=T'Dotqعȃb֟tB]UJ'U, O[k(oINDڍj{K;B?|ĦChЃ6xzY=ۃ14FhLFJ]-*mE Tc)l-IR1Ő{^NW&-f-y8ZFK&Ax.u#mmnYwmϬnFdF6I*{(je'DJLNGkly˫J!C+:$\# 19kU^ل(m+WΖؤ l > endobj -677 0 obj +675 0 obj << /Type /Annot /Subtype /Link @@ -8435,60 +8427,95 @@ endobj /Dest (cb121-1) >> endobj -678 0 obj +676 0 obj << /Filter /FlateDecode -/Length 4591 +/Length 4764 >> stream -x]K$qׯM ae4l,t詝م+`}L>23*+g4=ꪌ#bs̕fJ)O/4EOWJ -xE5q&? )foc>_k87똫r/n)F -+E), -+ CYcA !5`kJq4nF b29%RyUxOJϚ)lʋh5sSlxy -!LFy 3i<.E Td):!vKޕTd@Fe7U^RL{%?iX `q -8cC0p9Tyaqr&9  E id5,U'aа2ٔHDawm94,`rw'aw-۠ae w!^ VYa, 2Id iXMBiYK7Mxʼ.H5, YȐXd6fx/R[:]VXؓu>h#>ᱏ -F]l_`f]0O~?}xw=GĉHXL|ËA[>{|_@ 5V}?wWʄޅ𼟟J3M:ZD3;?-uk_aehyy0^+)85vqvmPU]2dŕn8*/*Zm:?PhKn)[{a?R|\ȽdZQ!2y{0Q˸iёt8m m[ZxY;7B-/Kq k 8E -d5M"zziWAJiwrJ2RquVM{47y0pRß/ց+#S6s9}6jS}MʔJK?Yh_h섢Ң1UG}@iQ}2mCwGCaiji JK-ٯyqfZx۫g[y9xNl8#sʪ -٬UmJ!ϛFNѯ}^,xw+K`VP Z\Az EB,vӂ -wz_ϺR6dOX7.UY, [CI07zft_>ggٳЫy߸|'u}f9WOL=uޚAGw&nhZ|H0=^ױvu_5 e4/WyqhJkۍig< -|=Wyfx߽+s -w7+l_r7ӻ[31Ɓ'9>Ǹl;*jec~5Oy՘I@*= COxF ";cSHd7lŭþmW=q'Cz-<='6BS>YVOld>'cX33Qˡ:>cجs;{nm93-/AUEj.k=:GäUgͨ=)h|ڇV{ qOCiSz_>^ۤ¹_X 'nbSKH'b`p(c>#{r`ߵ }>'Փv~ݦ_}X]ꛊz8al]*vp+M_/9ç\TuldLL&|?}/9s58y+6Նj~?&;=:F*l) =;Y獤 p 4x _erkJMy`k7]gT nKEEyHa9j0Kx~y]fS!V趥(L CfzHgYx[ Ҁ<~rÊ)lQHr 3͉UnuIT3XsS\^s+%A"L)f?'ɇ݃TևN~ݓ{R,#شn8mIxZ>D^`PFZMa\cX!f0{&4)4Q$i e{Cq4HCwlc侧ЉMQuf0-k`#nݖRTծFsPQ}- N -vQ_Qma&w/T[\)E-曥b+z\5ERSB ]Q.$qMfkJvfb'?_|TJD7ȉt|>Ԭ4F~PU|0\JnOVH uXӀ216e)t[馱uP@ki^aU? +G"U!]'+rӷuɡaHFkv[YxKONV@:s!IG$VKYV3r3e̷xW1븥a:PSc\iNB4b2ZUKqR[Lѩ?Uh++EK@~tGGd%B cF^Uھo^]W0 Rw%_;]ZSvBLbfu0Jiyq㽒H+{2r9Fg]g0cT_Gj!LVPjjW6cTQ' 'Ao #93y[m׃` +x][,~_Qφu20?1fه6KaB[*2ϔaNӧ+#t>}2U**c +^o?\~HĿbuopW%mN% Br:Mc˟~u:j]TֈCQ%29vQy%p)q*v +0æ8̰ZGFaA* T0C%Ci)Y 9VǤ Щ91tIx]t$s)k%- + C5(z(g[k{6W6ڴuuEО%Kb؃YyDiLMAIJOkbYovO?\~?}ݧ?.oQk׹r}+׺\F$B"4E*j9-eڷd/K9]TW~':Jszo+VG6Z_]~i !䞬GF^ZL {kduTi댦b_*=gd')˽Uz>n~QHym8\u}Ď%zx抗e.,w=HiObW ҬiVs;eKrCΌ0Q#+e+n}l1BBMU{xcn!w›< 1dMb!ɦl?zT>fp|K'ܭ0y!m,MV +C*vG'ͷ%jL(y{֞΋g\~8Y͝gczSiTMaP牶Ly[8gGzvF uk+Jh*Fy.oq둝{}N=5dYc7ȺomHŠ +(h_Pm'_<ِGϵ o7 *vY)M/ k*oAE_/m\wg9ݐcwm}$hf{;~rݽU޺4j,ddTLuS[<@|,>W1Lmcmv BC6TlBy:]><㹗_Ρ}Y<(庞G[;6*9Zrx3lHj+xbܳ'8M|e0G]y{>$CNw<ċgu5di_:3\_l)a!/h}; u2ӡj?x}/D^/8&wyQ^qX;:p2ӡ`鑝3{;8eq2f L+۰97a}d=? q@Hݧy `]NmPvY7[Z;@w2ӡ`=K֛Nΰs)&v驝}ӆڙCg8 KNy:_'/=zjw\c{\;I+Dhs2! ~8FG{=ϊ[M[-sDs ~xklgêa//=lgy9Eu>eq:W5a~Eҡ&^5P5˗E8 5/qXEBo~6-Be :?I*s[Ջ㩬{tۏTXPz+h(+Iv wrlis7%d> -8z:L2bkqb d70biNi\=l8^Z>-}j6:ʚ3ݖ!rzKN”+LghǴPn+Cu]mGi|6ǦSC״S՚YJZTm]- F&u5e.Y̦zN]ɶtcD ZO*|7C6S41"Mep76uBo&KdfѹBIye~+F徱Z@ͥBhKEɤ'm[C yDRC.-23-Cvu1btƞ$pcVVG2YePm%[m|Ǒmb.nֈnIKVע% 79=e%##c&=mv]w6l7TlnCVT'؏ކ*m=8b쯕lWDZXCXcdPx PcPT<>[-=RP9Y _P5}7׷S)i#u|Ž endstream endobj -679 0 obj +677 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 678 0 R +/Contents 676 0 R /Resources 4 0 R -/Annots [ 680 0 R 681 0 R ] +/Annots [ 678 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -680 0 obj +678 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 570.123057 101.433071 551.373057 ] /BS << /W 0 >> /Dest (cb124-1) >> endobj +679 0 obj +<< +/Filter /FlateDecode +/Length 4781 +>> +stream +x][,~_QφI~e` /~0,}zmxJ]"QYY}g]BOBL*|_rzI)ய?^~%z%梨ZxCI`71\/o/oA/Zu;|$pn%nzE#%0;^Z {6W63uuej"-L~0W4Xax0 ͆O"V>mTZXw%3hӏ_}鿀Oo?B73=>0ggP"-U_k;7W?[=e,e4{4ikW#(;m>iMR?_?O[uOASb\/?j9BmrWw5 ^nRa9w'֭۝ff]4\B1K6+j!Iw?s 1M1$Hކ'ZbPn[wtUή# QW3XeiJT[cwZJ@_v3kqh8V' Akod,%|ȿ tb_Ni#;Z߰C|e#u +-Mu0Oo-be'_P*mB; Z76~6v%z4)e'y˩Kњ_7kL%b߯|_|ЋBHڃugtg>{pVr +Bm 쭀llNVAF~n"rwd'YUvtzF޼ziv9SpFq5T؎O2rkB̦xyJ7s)#4z@" Zes'< Gh_BVYIAw^E]6iݦ}/w76\ȱԻ.ͤc$hfc;Սi[^~}ko)NMӐ켃: qoT{ kK]tjw%[Ys[;!0X"8{=l^~9gআu3~Wzʊ6Heľug{|.ϳ!1Cs=Y~B{w +wQ[Nš=(y搴-iXxv?|cDEg%|#W+A23^&!ݔő7D7ݓy1+#,{s.d$tH˾܎k~+3j^ѓ2#9Uz▭FF݌1G@ۈ={h;īs5y~FG`!z9Xn56wZ"Kztؼ">O2T)n3we7vfyDZ/Ž{Dg'<]g#cݫG3fLT#ǐs}LGQPU"Zgύ,e< ՖZNɓ]ʢye<ʎc0J';beН8Sm{ezjzlhJDZ"!!dt#tyNy:T:O0#謗F?0tu/GdC/yRjow7wrOO=[OO79{C~i~7luډ9t#{Qoz<φT]uQ|rLxB}hVIqcI%.'G^0C=(+?fsAc:&پM"s(ɑ +u_-A1w?FeoC. 5 ++QZ_atQy[^Ϋ"x~J)ϑ5]s/ټƞ>Liî~rV.番m@kp m|Nnűz#g9 X:(t#*EgygUɴ!~)N;7#&azYN3&<~Q8^Z-[6:]ͩȖ֊!rSբNBOWBv(X[ń~/T!6٣0t:ͺ5uj,}tr+yר.̨ܥz? ׋ F:Y)05 .t"SJ#kn Ye찖Hځe׭}Í _/8~p z\hY]ːҙ`7 &3*|/uH9jTBcNYI.]:ƎY/HH˘T{C:wsq=N Fy 07k,&V< >2&x{ىD:4^z)Ӝ9j:cGYH;]\q:[έ1/Rb M؇ hui}CCǍa|Fv5ԝAur>dbӡkeɋ=Ҿzi[:Y \cJ"qEIǔ3,#.xdaL$w+,.XAvܘfyMVZ 44o~&6HکK߹7d-a{[hwxeس=Ccns1ʤid <5٦6QtL5Y/16BRZD/S _=D{%RmђpujddR7R&uʚ!aDjd⿏5ϴ j?e'Dq 4&j5e/B8 %5p㽒H+5;gFl;~-+I9@ +4v;AƲ!/#-orY +z)|'ylo +endstream +endobj +680 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 679 0 R +/Resources 4 0 R +/Annots [ 681 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj 681 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 160.426036 101.433071 141.676036 ] +/Rect [ 101.433071 573.873057 101.433071 555.123057 ] /BS << /W 0 >> @@ -8498,16 +8525,23 @@ endobj 682 0 obj << /Filter /FlateDecode -/Length 4592 +/Length 4741 >> stream -x][ܶ~_2E( hZ}8 I %^$jǮ)J3 g5g KdTJ9:_ޝ~:iƿbqS_hʛ?c*foc8?vL|7-U9k7"bQ{ ,UBsXGeEA9y1$p۲2İѐĂ&(j- &rV$5*lȋh%s*D2HB>I<,>k#3eKoГb*kvMdLf.sY7s]xlAiO3ꄞk,; .zBMC46M -[y40 Oe)ـ3ٗ78m[&MZ,~[Np_ږvMm.ޓlн- }Ɇ,=^ҫmu=xeSսi/6m*:qsܶ,>g]]ǵ>lke/0Gc;_bO.sBc\'-e+/ mzk=MfIC6K}~-GG{reA}o.vvuy9ӊ.Jׂmϣ/g]M]q3wm%r&U~5гy^U2q! dtWVah;irnP{+7Fjߴ]U=_}o<2︙n'i"q&sC(s-'SX%/"lQ?{ÿp)?~G`G)>%ISc>:Ai>/idq覹yKO/i im̹GP[SE*F\ڵ TnT_S6P@gM0fV3'bD-]$KRJ=ktWw)^]x`#%wt5[4/'O'vG!Xx(on(ҩtYi|"?AoTFrajz%7yꐤ>l(;泣1t[ꦱuP@ cI6!aHUTɾz* fpwаy$fqG6y[W l&ZI'[F^@:s!Љv^N&ӏ2Y- ceAGlq_?W;O +x][,~_1˺_lH~0Þ=gmžqZVY]vJRUSI֨ +U"=?~8}t;&>ӿyYV{bY#B A:0,Dy@SX Mq,a +B c2[V:(˱ J.0,%!R<"5)'<9VǤ ੠91xIx]x$s)k%ǃ,,X 0ރ (Lh%8J> *&a$Tƙ~ - }w1P p9, U#5*$qXw +߄p]L1rX%aFa!#GRDabxOxtpX"ayDam>`UH x]`aܕ2$ ":Q/_Woqu\>x\?ϒO6DZR'S..4nMv*|z˨Aޚŵ\mC-ꠥ)6ίy~Oo=ف4BhD,sDz|ҮMjۨt0_c4s*UR :rP]FE A1.w1E1q KֆM'ZbEW[78t*kv-)I NoǢ_6c оYi)wdh1[ݶohRIrdi=9l_CAKOdd ,/-".2^u}#-ٳSZSuw?٦6_6gV]z~FyյA=(us;b%z*se.zLU_K^izmCܮ¬,wa-8u%oAEUoSt.Gaݞ]ݥvzD˺pV\ҡ+og=飓>~~ZKZ_ƌ5UܜOћG\3n +5~㭳3'miK7c*wI[##fQ{ZzGo;J:]g==뵝6MZ9߼P#GWm[9W)n_ֳ^7jMVku5>,u䇱jRybY|4_ocy~{tcrډEa,˧ υ`-`퍞9xMoΏa*⑗6;ڏu^_`D=Q/8&wƒyΣco02_{a +<=z-;Cfҗvp0KIiiܑ_ ;8;kb7m^;c;Cp4`=`?KWyמ]:טwҊ<69<jO ++.pp^ϳi)~,lÂA"O}r8$Wܱа=^嬦#m(coE:}+X*5w37$+U˴^WDu?@W~u~O.k붃v+7Pn#GS$ +]=@kTB|ls):=Jo6ZI#7Ա =.BQ_*J&=nK4*!Uxɪy]#U4 +:5W~^uU'[e^ Zv>,NFq>_y`3\?J:*]0B'w}[:;ɸ)s8Mg(xd1R"ͷɞGI.㸖 -ty{ A2}/D%n3`Ui]6k=eR5U;]@u2fqb d>6}^nMm AVp36LC}H!#nBq;Td+1!JI~;P]FЭ<ۇٱJ˭ 6XUci%#'۽k jF}aDmSM6|$B]C,3=ӂ5zhaW7سnVڪ:P4MVZ+1T|VՒ[Y-StOhD7ZoRukђi9ɞŒ1wڞTڶn {d*{6I"{IYL\WBT/c*mi=0W"쯕lWDZX!12(f4^g0uPT4>[lnSaNnVW˼ nM雰 #HşIDIS endstream endobj 683 0 obj @@ -8526,7 +8560,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 324.123057 101.433071 305.373057 ] +/Rect [ 101.433071 558.873057 101.433071 540.123057 ] /BS << /W 0 >> @@ -8536,19 +8570,29 @@ endobj 685 0 obj << /Filter /FlateDecode -/Length 4506 +/Length 4776 >> stream -x]K$ȳ15 , 76=t0ja?*BP0#cQ]I}LjJ)௷._<ojL1E33=_/uժ5tGfybQ`iRX( 1g1(z1|N$ 6 1YbhĂ&SXFCcyD{3$5*lȋh%s*DoHB$,xYx%d.E NHH d"%,pA띄h-8HX^ aBL-a W8`vJXQu| -8FKXΡȃ,p` ʙ$,]gtw1 +ʦ%,]wm tx% AZwA8h1BH VY'aSa5˟0Vʤ$, I0Dh\в2!d IX@]gZ kVj56k $,;(@ohJ$, .`JXUX$yQcJXX޳9 pW{="d%,@\0*m ,,Z,aA)aALI[ B*$,YOg j% ^*$,8k%, dѷ=,pq! "E d*e%,V%^*EK(aA^a)6`/&xᒄ<%,`HXH%\Ȃ [D#aAѠ&2+4PI‚PQL4"&$,}xM`&9"8dy$,H Xm%,o~3JX5dA'aAAq,a`<%,&aiLdOoF ,EAMY$7N/@9o& f`^<Hߌqp2Iw &"[io;$h@/am 4U 4H2*Fx0a9}!bL1-<ܝb| g夬5Ji -f}  ٛ -s1w p=fcFV¢6vBwc`OicU:E }0]Gc]Ioe%61PH5dV;bŎ"Iˋ |A5ʸlyb}>W)8(`9t? >Oڇ2;vi" e|}^۴x{?屙)Zh[ח_}1!7^-m}aMWd*GilZ~\d2G5ÅV])iV*W93z lg-+zy?Wa{4jPGo0[&`hOqUnS:=#Xd pg5jzsqU{^a([f5OF8x2l\٬S[_YR_E"w9z tz6\d7q?T͊;=qg{[$oV%mÙ *Ʀ_~˳{mV־5cٖy1.;z:i:^k묷Qe6yo2p*{)tyZҋO)6S[Ʊe n84a q=z[ÄU04;ΠZer(pݷ^};zע#9ݑCl6˜dT Yh{yY(z[DKYWuojŦv[uֱulo\?'U_K]zm ØPOqS{W֮#Nrll9a4Xh#}%]-Oyw5_;yHV3sMy~35_FS' QDrnNP@- bt洙 -Ŵ5l=ۢuPnCZOjTByTIK`1oQC ْ);t-j~0=VY"q6#V`5)y"~Myas.s0ClMvsz3gMTPu% 8;WI 77?h_(-v3_ C/ܧAL)# pՏ8W6hS}dg‘=KyZ8g !y_ZǮe;Xv{[?88< u˺XێKMƣwO'Tw<;l_=v zxKc5Uك<ڸt^p^ o5_6+5_=憏 t[y6oSV;/4yEgXs0o7*V\=/g:wsyqs_?,pf5s׿AwR}oMZsr4tx/{Ϫ;8dsqG]qv^R%Gq闺Әr 3v7}[otxSJ 6"utX)ɵI©|^wm73$g5;8t*:8N'tV~MO=~;yqSvNOzy4\K6)>& -6boЏe{Cqz Ҟ:*ƚB'6Gՙ9 u3U򥕵] BFZ7; E ~klj|BLՑ|+k9t֨Y*RWU]% asDqK/4[4om&v녢P:Vh7n#'SpcYi|q@5*#O`|s)?Nxn6VI#=4.cQ_&i5Ǖq5rs-S~0@MZN}m: E tc)ժZʈbN˨iҔHU®,[W-αN-L-}mu]#SݫѮ=sg3:HrbR; 7YW;Bx:4YD=;F14UZަ(Üޝ٠y7Qz 6 - +x][,~_QφIw g1ه>=6Ka ns):I\%` l[1[2H\`Iѷ<-> ؂HQ0yUIZEt Z0k Z" % `t$. `H\hӰAtZh` A Xez%qfh%jIGיQH~PQ 4&$.@bI\X:bI\f Fbf )؂O₤aq蔒 ! 0.y%.HVa%0n $-!-0nIXo$-&{^oF f`^ vx%0"2MD^x]@|&+#8c@seg@F7 `&VыVJ6P_cuiܢC72aXdr &_SV4_av5o=e(6} R7Q˖ɏ]6vl6*`1AR=x(NXcu`x?AZ{jJ<_Vs7FKu;ƾ^,سѶ՟C A{ +Ė`vbf+,zl +:H&o?]@ŊuϾ]#Ә(~?>'(ZF/s\rֿ#T [˫IoSH/k9mzlSB9Om~ױ}>mW<+X0Ak1׹,_R:UuRqσ +TҸ|NPǽ ];45K R!+;Pm[_l4'COw +p )w!Ny6a}c#:{tDȈ4шj rPwraf`߾G]e^LڱűmkZrѵN'Ļo>^uRxe2rn꛽;NV/C*Sc\mضrP|Sۡ6!ڦ'ueWhY,}&*6GPx |/Gv~ʾ:O_e;ToGf3m|!^b^G[3 +\Ql^A>5Ol-mm^ngƝm>ί:J_nsnGXr~Ǎ6Wn.3c;bAyiVdlw m<1۱{cc^'+OqWӻkW{fvۏZ?: +gn|9R_o󢓏m<Z5{adĒ(1DCx^BvNYaJ||6UXi8wm [˾=.X8"%{)f${v~I}&΁żtw=dm\伽!a +:6= d:u5LRgss85>'%b߯x|_ל׋jHiĵKCtP-bP (6A'')TifI|(,(_j3soo8nFga};ю'ڸ=z|ؿ6Ҟ7Hҳ_lHwbٗ89ȽP:#^=i/3RS-nhd$]9JF['` hthqy#~׆P NQfkT)n3woǍƧi7{t(<5)6L=(X5}#f >;z8>ok^=6Vf2gúAyLEU[_K|u5di_:M@\_l';n]}ɷ3l 8y6韡w?Ɏ:er$^گnܧyMDZ"s@C+#u2ӡ8x}Gg$Jܭ{'<c_`fy =~#'C'VҷNpcg~4gwPyhݹmv7~~(~ >t/DZ6u~(x'<zg}ɝR~x"9Npn=n=upnP;s>yi~qΑQ{4̝>esZwS~B<qLȤKu]wQsK-yܨqF͎EWYnŐ!/ƂI=^_d_GK7(m ci#> @@ -8577,17 +8621,15 @@ endobj 688 0 obj << /Filter /FlateDecode -/Length 4514 +/Length 4596 >> stream -x\K$ȳ^b6 `CuM x"$1"Y3wP]I}J7r]p&G桱R6T{&lr>ev붎zSk.^YL.9ۨ*XǤ3b bL 1 y_V GV>;X՘ykUD+<MғΤR}Uy< L.:WMJ)G%V4^,YY(d )XY|Ae⡝ -dwYlN`b-D*gK.GxΙ *3 -FJYyȒl*` 1RyvƋL*YlN`% |Ά' | - |r  5ցBHIC a<*iXFLXvU;d̒yӂݏ5,n[ϟ|NYqp@+#0l{@,!|O"),n,$B1mn+2$f62􋥂BRe}s]ք5WٛQ^w=~#d/oV>:/>]{;vSxG|~_w?v^.'`?q XVF:oѭӣT>/t=kY,'mkyg2ۧ}zYrf[O=㷮~CRsc"ڱr]iMRxV >EֿP"q :$~%:o -cQ:;DmN3camiF~FMvKMi%`ͭ3O>:qI[7vaCXǖNY\/2w縮.{}З'┹ 8ݯ,oŧe>bԵa-G{I)۽6]_5]zven?m>oq[);뿏ehv|`uD_MqH˞~ڴl̔aN&c-,Cz\Ie\f=6}y~3GȸlP?5Ɂ 9::;u3彞ɤ<{nGfk3}CvNg VmZ6/yocwĻŰ S:BZ7w3 ^5bAE5х8dDL˿]v5$s "-FaMV~_so;+ߞ˽T!TyՎi[@A1Րo(pCCeЮ2~Z*ly[Il^p[ZTc5>1KT'|?brƻ~"INyssWdzQr?o& -cG*nuP`&o;E~m8` )p3xI#~RϨ{2/ˋ%5)dz ~W~ȱHݻA 'ԹC>T:3|Ǥl& IpH,<6XuxG|6cXvT xɝ5l7ZߗmW S}GVE7<U{cu>MSz ԉ22b<-۳mjLho{y<5-ʥ^^; ';`|8[V/t'_$V ~)7q9ox ߇6<g%wV"ZcV+}Gu>qO#yd۞@^roHZΐ*%[#[f~+mGF(;;^X9߽G"nĺ/{;7<3_pثB}xX!frG2nb(|ng$gŻd,01Vt7ɞ<K8Dsœg {JzS]ZBA0 ;)B |a5b!H4^N!=_rkkqX*ReV]S +g̗=9bC%ak[iI~Ĭ+l'A;NT^,05;o>8.7{̧ A*I@4(ϲB].R_X<(=4 - z]<[^7 a]?+%v!$ʯ3,9q;i`$aq״ yG;6ړKdnv&S0$O}m>[:ՓdZ}œ:&,wo ~rk.8@ ?uC,NF= ؟dWfؽaq^Ӭn'n \ISzf yő|mf^C /HRAe W$  ţN6bCNY~ܗxi?ɣfeӝF! A6LNvZ7(B{z}WSL>:x:5Ǵ}1'S}N {a$9sjԂ6Gjk(;Ntŀ ls)պZڈI<,>k#yde\MXi Z$>;@iϧϾ/ />5}z_뵭qh68|hXh^kϣMzZ@Ez.h_deuv#eЮק?;KYl΂mcB_U-*nTvr'hs3{eNwڏLkty['HsC8nw˴nL~uW;q,jXy6U_ks6zۢtZEg=`lZh&p-zBɺC&')*7m*/+ګ~+m^ήrmea6mz-83߾\ۧ˸0}w&:؂kgMw.ͪo5kfG=!Oj~FJKSSE(C^e.X9qm$fc:g~8oF c;vb"OUdy^,c.Ұ~cArxG{o6ak}t:5>f#Sj;WoY|yrs\ثN>] ?d.hmV~<&s8ʭmnz>KOF1|Aouieo/Lc'o []ɮyL[Oq{*:ynQǨ6N^O3ᔩ~T2#<~+6~ ?[lYud^ϫ|t_Tju<1/㱓?aS[=qkўo|x]ֳ\WLl6Ƨ!gT.yܟi@vw!/{m>S|CӶ\j2>zSeH295.ȸ('?Bulg%9>8:IyLJS\tO&ɘ?Gܛ6}c(s{~Vj1^djt^ta~&>c1(o ǫ;Gwy[!qwy=SD2*Sg6u)mFaV2'Z:lW\-[ BVmJ] wfnK6֭EV?wh]TaX͗b&6ݷ j>eMzH_UxuR3>YAܤ$¿].%TDŽ:g>UtZP`Fy>GW:df{qS?tuV ir˔j[[~,nv7lqy&WE\8{22l>mpJmHs߶T-&p~s?E>:LH;$O,^ád]eR*g%^+C 8}//H(y:➷+\Zvs<ː8.e>w0]u^ ZZ(FbݑbK:s7N zgXNt5B;kMmࡱcE`0[z_W*kb5`Sm~~^rY"sG:.;#}u^'ikx>ZH|V5]srq%CҾywyu|=? } J/;:o~X<[.Ǣ <>pgW7rهqGI/`V?ZxAv8g|Y܊QK43gyFI$/[v_mFHXsK/_$Qd&֯ELkGgTy-|{:w:W0V& +Tֱ@D`dViIz(|G4 7D=u7Ȗ<߷U>LoemyxBn>T~kSkiNsPS}+ BN$?խi1;b#HVN =r5-{4!put3 !9]')nk&S|Q(Vh\o&NNzˠ7LF7 *|2/K?f'4CG4`(Lgg} t؎:lc'uӱr&&d]yGr>U3r/QiRb.S#KvQ\N!NLvȹzfS8ktG#M7ZT)/̝<=>UfS;wLcj> @@ -8616,20 +8658,18 @@ endobj 691 0 obj << /Filter /FlateDecode -/Length 2788 +/Length 3514 >> stream -x[$S̳a咪t1\xBփ& 󐯟zZ$g3*T-~R^/<󮔚]ow{SaWw/]5xy]1ty﮸V~j |SS\rHT*JT1CLD-T0#f 0jL3,BTfe -3BT0ט A`i :] ' ޥRC ρT]gRJ0X3]-ћ Ӓ.M*T[BtN%[]`$LWZ̨B'%G]bQERV&)e %IT[J`:-ӁQs)dU3]-!d:؂g HN XAq1 cE+Tg9+@Yq@C< -l ʥ:آ 4T`,P-@A[0(pkR=c&>1( 3@A\- ȅ+Usd,P@=3(1vJb,PpW c` tt2^2cXFB)X`n(b-TwC- QcBb,8Gh4!e,~]P4Ƃ포iRcAw}Q]u>cɺ(;Re,.6*e,.Y x50Dp+vjw}X] <o \ꪓZ -cAwX]II.;8g, e,H.X] CCuEK`,@\-YV]awEre,Hn6 RnP `C R1WsN -t.9#cA"EuŲ1 vUka,h9 \iz[.4?0؂H$s1䘐aT.W2pMu: r63 rw-\b,yc,`0`+r% 2g:[d3 ҅{Ƃ` AƂ -$ءKbΤ噅Xr-Td,2A RRl& 0?-َH~l"͡:آ J -, XP c,\  qD /71`]|0THȺZ ` J-|tb[B5ƂR7 c 䛈@ifn ӁLc -7ٲ^ޘqeig'F@^Vr$zh3YDO Bxp;}Z!c,dŲ0D#=nc}ooO#@k+,P1ѷkBp[>n4iCfwyr~wۊ]-|Y-HWOhpkB.8RT68as?"/n_?|?m^_rC~=p 5vQQQ'<5iq;H&a,MuEomuoζ׋-e簫_xvy;ƸY?.~{;XhُK|Hi?}Z㽋edcte#׍N\c{eU=ϺJw]9ɂVy7K{u:&9!Tq "8:zZ&_:'FIb nm 7Ym 䵁OsVoo7yhuu|)}^o&?{6ri{=y vD (6cmi{c'[Zs{ ~ym۪B.FO[{ -aD$| 22+lˮZGݴcEHB/5uL2Gq{q'9QJ8ug֝ {Et7=ecס!/!uCz/}v~ܛ꣋t1i5DŽؘ'"nDBzӆeZ~H6^wLQKkitu-clCۣegqj3) nALj -V.q/S*,.k9LCEFRbf'mmyVy16 y:^ߠ;j;I![v')sYo|b9aQPR + K><ْc"x 1%[x7[vC(*@P,6 AL%6$i(@)5썄5`#[%hHqoƅ5,]*ְwI`AD% îj@&EK๨aAbLkX7%]ҰbDÂ! \E"sItsNÂD٠`5,@F-xbK4,HLI5,R<а)ŶװM9* RRn& R,dIf7Bd|dLI5,g%ԛ$/K4,lQoS6s(f԰ dHQTdAҔ&:iY(9Ro& fDF RoF3Iw @V-Gg:33'[# EꙁI=4,SPO VtV=6_cr |D`13rn!{1n/?xB=g8$ P=og⩊^չ,c"^w< +Qr_7#nu d<PIW(_pG02dV6~wiR,9W}8|_}0wχ`aK_~w~{oTp |<>Oum'뵜V#^A﷙kקe]nFu+4W7.ѺYF1#N*SWQU3ƅJ&W6ܰ;JLƱnY}cβ盛/L[li-\?絏s}t4i[t6I{'hfc#dK彝[vߘ~{}޸ǣٲ4n}$zlw\ vzh+fz>ĥ=6r,?{EU)eH$DVQtPփذBQXu{7@eV+lT啍*)p]n˯RTSZ<)j]e|I׵'y~˽>B}էmSyĔ蘏dY\SF֗>^{{<_\^kU.)_\nyVrCyJ \sk;&{7v}rY}V}:q}kYX!bdpr͕\SKVdqL(s1x 89N 2IǕօA[&'u^#XZގiS%i< ;շ]!NmS 3 15C/~ +tP{14 S7^=Zx;v%k&3{ |Tz7ӛ<{Ԓ/WpF+OhZ^8&UHNnLuD'qmv/ҿnwlCl+ cKv:@X۟36! n/wWły9t|ɱkܕG滼}TS[dh7C0 }odZ=~>0G)"+oY;}9~9^8َԱuC#Yy_8I.7bwH2 4f =Mx-czsg{8.9v_!vOKa.7Иo4xYȡy@vhԗoP;TͰm:c\<$gH-dӘmt1lE6@4h}d +밶-K~JD?k%-׳% 9g%B Nѓ|mٮݢq 1̟|w1SW'!.tE&wŦ!R^W~Vr~"J敠#6tt^ȷTòUoupmsF9 B ތT,1Kқʋ:h>6'أ. endstream endobj 692 0 obj @@ -8646,23 +8686,22 @@ endobj 693 0 obj << /Filter /FlateDecode -/Length 4368 +/Length 4509 >> stream -x\Y$G~_HN$+ B<^EZxEVefTU1㱽qowE_8SșRjNt|<}:Y梱Wgg)j* !\t?KONqgojMeK6* -uAahr1) XƂ1#+C %j,AU F‘U!ώ4p5f,pZA,Q -E3T_U^eB0)NUREd:!KtDVA -%kYB -VA_rxxh*Y`]EAx5X ʫْˑm4`5s&6É&d^dű D#•fK}?=9}I?ȇ0 =D\ tGVhI[Ӗ4!\[ "V"O'$ HwG9$9$ϕ< \jjG6cjָ+]؞6Ѓ2׹e-]ۡn5vZdm'F\tIn+ur%sӁ1Iޚ#2s6 YaB䘦$QPRMhPTS;~/oG9dv>!z;|o%/qrB[~;|o=y!v{NȉJEyk\ִξ<׬%}ng\Zy|Ri -^CRe}vWW^=G!cpʼY^rZ[ى뼏Z}^}式Z}^]9ۜH?wmὒ!*J(.wO?ů? ןY h!u4Zx@a˿z;nb^ -sili՗/pG2;B}m)+eW~벮2K6n\ v@q_mr)ef^IH+fl{j/li&a >~Xw i<8N --Iuik8ߒ#krع}}wIK؋%15dYֵEXb02oqv*Grݺye؏2w[}=+F.kzː3ps/z&?SK_~gQleuri QLe'[ #\dBmΘtxԀJy_]|/֋<wmMXIG}E5҅8-oaqW+p_Z1'l k2]L ;f"i=2p{a|_J%/>oa}}w7#`7Z[\NϏe}òEV . L턷,/"^(dBtYz:ŒĦi?z}]v4X +sJ7 'v9>h64dWñfoA{XĺEWw[۹rܩw wsXr:9_]usJ:Aʸʳ[=K|!{ȿ9e~{/&aGio吝upny=VFv)ׅQٔQKDc*n'|2qQ5y/{2ϱ͋2 4/ʨyQFnXF-?`u;bVE&X_Q$>^.%4U]€mckb9DEЯ?!muLqJ YoqLBp ^qHX#zF~ɝ]9dvV} - l9%Q8nwm !.IwE#YH]~d(zVf$߯{tfcm y6J]ڏ]{@M8Op;'ž1@bM)֝lϽ4Z³t~2T׮PuPco96>)$@ 9b tCѮv -rRۭűSy*k횟LSe(^]D]2,W}$Kgcmv)8~4ql'VMOw2tUhv?]"*#Oh?d^IlVIꐦGyr9r*tG롱 ULs1H ؒݰAfX) &9S~ڐqhd scIN;$9w!W|'^c=MI&d8(LѧFu?YL?N=RpP5exD_,~ہ~`,=?e÷8k[5yYL.9ۨ*XǤ3b bLYbP-QcA (1eYbHcA WcVXBUy\4 JO;JUe\/24^5)X4AXxDGd5dPK%`Ud%!v+UTd:W +-&sDfPyXQ,ƪ K kY?8C.EYWwiYϤ &_C I øaP/P/PA_T:Ӏ X)iHd!\YB% ,(aASа m ֢aAܒNÂ%뒆 1J"  T5,԰ tܳbn4,@jX@PSA@G\ p785, .װj`I؊X % 3\k0hX@]1sw}^zIX5B@a3a*ܟVƕ4,]W0}*qeBƥT5,]8aA>x5,]5pj5,] Qq4,3tU^5aA 4,8TÂ܅{$஍!hX<װq xXʚFjRhә3΢X@ooU ,*{9i1Y鬺m` 'E`>ddŲ D#…bؿ~{8sS6"/R4fWqm' "9{YkۮE#(btduEwZZ&'1A~: Y@F#8$1v'yIPgWS;~Oo1џeS Um<Ωvp.%JTcy IֺjJfbY7, p[2gϽ,ޝ7&4[t?XFwݦbBV7!+LӴѝ$JJ jjGm$ #uxFY9OȤޤ-XX(bkom- 9/,ȷ~f I q7[ӒF:j|򼡼fϩs=u=/uSA~Ck}HyqY)Z :?8t_~ͯ᯿BP2"Ŀ[ z׏s_Qq&(  +wﭽҫ/_n}Mkǥw. 3t zog,h1,mD+~ON_zky`W t~[U&G2Hz߭N]g4[/OBZc|TS{Z{Kk7I+:1M{w!1v6S59$ci3dzyTZ娴XlskYӪn9Nz;i{Y럄%&} ZNf~Zm߯r)1ʭU׽^8!s<■;tHڅwiR/yr&1>nE/?$gj+ay>]B. b|"Md^ck}]sabL12_'4I o|γ|/:5bi'^ՌG␷>67߼p<qSw^ =ĖIaMV>"Ñk&2 __o#m Yi1~Uv'RRUgej7W[4njȷS!~*ЮVZ w?dm=vj$8Mқ糓P]8oyr +U^XYdTL"مctЄKAyg+uVУvȸ.>8];|K`}}w7#e`7Z[\ZNf}òEV . Lm,/"X1>_;6˃ZY^G+ M>{&~eeSǰU|f>EFMoD /{o JvgΫP_(9q,y`nLi's8ǽi,!݊,zlg'(2`"tXL{;n_JXJ=wZ޷'[ᕻ𗤧r>{~g_s=R"7#-rVo ‰Y}$s>Hg_v=GNEϿ\k<0Ѿ8rg`݇`Ɛ#.[t; Y\p3ha P|sz'~G*U!sxx׮tOZ̈vz#~ESll]s -}>vkT|-1'#Sl ק5źㅚ2ϣz+[&q2.J0۸'?.RRD3Af֎ȍNp]I8y{"h ׏/iPh,+DḶGp>b(8$Yv68+$`1n=uy5T&q.U>F<mST*"ٛvЂj%DŽИ'ߊ;#~e{ӄ|1k|B,ݐhB:rkkqTʬZ(CWh'[gZ-ӿ1׶g+7!Klj6vӓ bLj.]UX7 TAeio o$iipgY.Y/WRAwP=.- dhn0 yRvt08ڝ4IqW yG;lw2o7;)@a'>5r_v.2847C%y}Hw/<+vغ!KOj;|v'e#O+l0iV{I7 $ƩCAt B3 +d~L<>8N8R.pX&/L|M≋N.yQQ<l#&d'9"0y4ݬl(DA>ȆNFEg/<ȩh'Ic<c>mrҘm +jQvJ;N-.SZuUKy(ge(1YIgeFF99:;KX($k*͒m0h +fdjgxVY~+]+N+2K8jr9>-)CTu\KQ0͎Ҍ.6C4 +^ZuH)@ +0wvkj}6cToϕg{Nf_̀ endstream endobj 694 0 obj @@ -8692,7 +8731,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 212.807453 101.433071 194.057453 ] +/Rect [ 101.433071 100.307453 101.433071 81.557453 ] /BS << /W 0 >> @@ -8702,19 +8741,17 @@ endobj 697 0 obj << /Filter /FlateDecode -/Length 2895 +/Length 3420 >> stream -x͚Id )l`dR6 !FYÃAø琯?{Z^{CQS%R DDrׇ7 -%m5NM-^%]-t}c)K>^Mqx˿mCk9rTBPrT *bqT)Rbʎ*s#`F*^U`<0Cܫ̈S n8*&R8IϞ.rȵ -t\ ('t-St -[R#t $V%O[TjtHru%"ixWuu2kRAG{]R!O|S\v)GaK\lIB lQy:p"I٭vK%Ƣ`= [dA1 E Z= -ڂ"bKAs+`K@(v-cD؂ - D`KTX [<pcJ= 3cRz, <+`t݋u%@]њ=+@]tut U<(+LcFcV5Jwc%Xn,8\] ؃@ݘ DcQcXG  $?-EXBDX p9{ -\[X]X>W̸o1ˁsn J<$p 5z,H. NjOrl C` p&kZ  ,E8UՕGbq ġ 2y,.%%E`q tضΞF(% -{:p4ܵccA.&c ǂ\5Rǂ:|.ǂB$ -uhҪǂa豠D؂c"ѷ(lA$ z,()#ìzC-qXPT `ǂ` EFD枎a ltcXP#lA4豠Ɗ,3%1՞N걠j*z,6A R:Lx,X< A4I걠hfXP+l=7-, D| `a`:"+ͨ /-߬ Mxξm-, –Mٷ`Mez,h9[Y= @޽oM dt."䛈lܞTjguo M8[+{qZ΀_ˑK̲f*L zEgf- BݏcVwT~+_syvSV[_aĆN/.h>P4LgNvoѥx> 4ܸ"y5|F ڌ:Ң T//pÊtYR7DE*1]_|?}ݟ -'z x^wt0Í^ri1z'sχuN=YJ^M7{hQ=uۖ^_~s˳ 8FuX򌏽_OZjp)w}_cznS*|Rn< >VO/y㵽]/xθذxcw÷ʹ-G;*!OGżO:{$[%r=D<<Խos(?LNtns[۹ݟ~{@X/ w}3yjˈ}o!:u ݾw_n0"X>Pdw\ޗ3mSnk.1ޭ/w1yym}~S?X_{XlwtسgH%o)"oׄԜ}2CZZU/owܾ}};j_ȒZ~[o~satyy612t+~ؗgSH/^qmMDcGxmtn!14>f od>2؞b9Jy P׺Y1ӽ8jjL]a:u,˲O .VnԾ]EZeՆ4cAt#z8ԻV,/fGvGQz;zKcʨUgg~2]]xG!-egqkL~M>\8ŏTiRwU(KC\i˔ڧ -[,wT!5lXK,AloyVyQoXˬL2|v/7cNe Rg1bCXUH 7iI҇M;ƺWM۸:sbV, B^ m߇?+k= +x՜[\S̳A IL&rsN_f+l4UuU"Rsλ=-%.^T)N.⏻Nؓ5Q>J咳B]JkT0#f!9We!DK33XrsUX*j̆*x{SC % zt\*ЅL٥,!KW]J)K'%V,]-1xK[Kt pbo` ̖.TCW` : +/G t!dSIJlI>VS["{t [/KNDΥtu`"l!b` &"%sK(g'ĂvRXRF'ft,-QEErMl* ` +X,`-$lA[X,`V|  paX .$ ȅ+U 2i],lA],0RwYX .3j:X::-gb̪&GxRb@].;AX .E܂],KBbŁ?] $l`- CGl9BZb "krd `L]u!cčuQv!j Tl gX;DTXԖ Tł"o . X悇뚺|-bAw%X(|IL]vp`0vył"W bAw 1u Y,@^:O w} [:p\-$pWæłU@b tȂbA*jbA:|.9\GC,S[$$֮r- 2&X eXՀ?؂LbHJXc~ jkSW bA\X;M, X,`X,@(r[[d[,@ ] +d +2X$҉}fXP$9M-`` R:LX,f;Z,MlsLl( J!ndlz؂bAil{57I,`]~X,X7ł*%"E1uIS5-&dl* jJ, f`<(q+d]db.Dfk=33[YtYFVV<3CeI*E>&gLXO#wȈ%MV, Av_(w_{f9)ka)-g,;9!ӸRa3 ~onw0{jzW4|ؿ_ֳͤmck8@ Ooo/bd}5cҳ:NZ0I݄ͮk?]ƌfdIi㱃-xb/mq HbpB+wlܥuE s`BNqz4w#T +w_x/k9ֿl2)[ߋlF9LZKlaZݥ[֠mol={8l?JW۰9o>_~zm;.r( _QL^!%3zXs!0F$'^ҦݹЙ !bW"YWN:̇rχ[ejl;WeJw. 9bh:SR5 9y!3FxsnHQ > O`sB3m44OYudg#zFzozU{_*,\q:~*{Zٖm>WS9mm+w)wc Gm|rg%d|_*_LK=3d҉|ν':^hR'L~Wچ1mu%#zuJ\6X|p:pZ*'>5tNi[Cm=>;j?n}OvP!{8ϻ<kIzS{}\xЦ),j.ߊKm_>7~b^&.Tq:@ׇ"..q!qtX[ے +vaӒΡd}}Kݍ֏>l cC) XPoWSѠeGMq`? O 1I'd}v &<-JM>ܚjKx2vil%H'CtW5-̮fMZ9r3DYnk-ʽTUkapu.} 2F475L<3ڗoLxE+qw1`f!Ovq_6TXMK<˛ ݥq5:ѵǃ4SX#$p7+t{>bGi&y.Z;{WXdV=~-a8RśA/dc{k;-HRkj$$T4}I R2<vV2ps6z[15;Z-=m.>^n?|gu9F\e֭~E5-ͺrt|@ endstream endobj 698 0 obj @@ -8731,25 +8768,27 @@ endobj 699 0 obj << /Filter /FlateDecode -/Length 4817 +/Length 4776 >> stream -x][$m~_NY!F9<ٱX!?U%Uٵ;>"u(VUٳeS%E:_>̔ZbuQٿo -gk(M3|R . m.eO:=l8O)d*`VSJ.D! FHhJJ bsYae)Yg%1l IaY93FAC³aPzxN1WT^&b"+S1dG%c5^,Y"dY\N^%⠝2dueYL4V?T^xc[ sTdk"d1)j4 p)MTi ಟ(SP2QJ^WD$ 97%PԐ[B\Y|! ,(aőװm ֢aܒ)V%c 1s$ < T4,\԰tI!: <`Sx'k4, Xmp[4, .iXY`Qr6peCp%,*/MAaw]qpבP&Q. $djX<5,@cCXaAڂOids͘>W&qoX4,],T^Â|f VTaAZZw+FÂE4,9LX&k`*LaAX'$*/M0$ax2C5,],EÂ5{ "pY|v n48 x]cRѰ wy԰ &&a; b5,ŀO AÂd@,Y(Kְ 9Ӱ 9ȂADS\ "E dS.DA/)'٤aAJ4a) 2^ᒆ70[OwzM3 i)}p.Uag -~/k]BqswQ>sǹ[ 4R8sO86hRL v枹li7w,QrJی{6.wꇦEvkcKc|:ZV[Fj۞˚pDuMeD Cb4I3Uceq?Cn>4퐵Yg};7|@hߎY5Yب*wfel|P,V+m7n(-WXAZp(ꤥEꖶlKo뙶h2~M+:*Q5ѣZ{q5)χGeb;2Vn}n1n} -^V(d^Zt{m ӅD6þ~UU[gl]r×PC߃DBC4|eI.^^o+-m$`ΈeI2!tn, o:{ |I=j^W"> ]Ӫ+ ;`A&Pd@ r'X|u\6s6YBn"-踹mvWCZ?%qui_oE4u(sR!IY[>̢wS8X|")>qe˼b1qW|࿕3~ڷ[gekfumXl]nZث]"WEYѱ:bECl7yѬ@5}µ̆g|iGe%Xr8]i4[Ld)i; #W_q*ɎOT޶cu*ml&€ya=K]#,ZVY!uSo#->fŦ "P#7-`Gt'~Jfiƃk+^MV]gdk~w3\bů9&>$~z?A\v\5]aIv[֌7u}[Y/7n՛LwϥFrCcqKܸo7 yV7u ir٥> r_pq -rfɶiU|f}-ȗ^jySᇇc׈:O 53O7]Ձ2ѸG"ln )dg>$>tVIys -5ݓyf ߌ'\. -pՉAeG]FÞhDwcI]uqRuVL+뒘[ -E[SMtBN d";5MO5rSHZni-JTUKe] -"U?GodCϵn܎x9!E>Rf_: 0$zn'g3ePSnk6?"t*#O`?y\N7;y$IuHӀ4 -uٔJ}aW3]c+P# 2cM:!c$&MeEr΢z;vHr3n!]ޮFԅd6:dgj7:!@aTr֎Nq8^N:en-sBFY([׉Ҟ4tp[WdA2#l(5u94쭤j;WС nzpxh2`ϗ c7p!>̔ZbuQo +Gk(M#|R .m.ew:k]TJt6Y䧔S2Aa ++)%ŠvKX#$rg%A%1ȹ2߳ +pɒƂ !N0E(=j +Ӱ wJaA"n&@o50]W&Srְ wKN“@&հ`<ġD.aAཆkaʃ,>; ׀U|dBw k<1hXljX\ְN1TRbCȧaA2 @ʃ,HS%kXdiXdAȠa"XDjzY`.j~@@)" RǠUݔZelҰ %[ KMNa~pI% R,p M!2x ְ.xjXdA4aAvYf4`F. Uk<2gf 2ʼnCE &4*&4,p4,@diʃ,>9;N79CgM7@D|'5,gf䛎4,_r5,( DmͤaA!<Ȃ(~ LB txB9 @^Ȝo&u +IwF p|oHtf3;[؋*{9i1Y`Yu'Ea kfN< D=bؿq{,S~6;)` +f +Az6 + ӭ,5nuעOAFZ +tl/k:\;ĵMPOb$r@tCaI"vyEPǠGWC;~O0џdCeYSUx.Ssm,{(hsɖS$fYEQWh]Ɋ1&݆l(1­ɜ>#lh6$鈚,+ e݆[rlN EՆ:u zt5?r +ʮQwȳNқ9/"K;O +,F,7{s7T'/]l/x#uկ*Wi!KQ%>cawYJ_Pշz  MD~Jo}<c c\6k(74 nߏp>f]  N\}.AsiɵƥpB"4p>7)l+Ѻ6Й7.==s*LoKYV.r-246>,mMfƖVuZV[Fj۞˚pDuMeD Cb4I3Uceq?Cn>4퐵Yg};7|@hߎY5Yب*wfel|P,V+m7nz/-WXAZp(ꤥEꖶlK/뙶h2~M+:*Q5\ѣZ{q9)χGeb;2Vn}.1n} +^V(d^Zt{n ӅD6޿*TcpdF[׶jH{HhԐl]! {*\ 9 *6zU/]^Nw~7߼ԖN-ha8‡66S,y<}EXF\$|6z/FUkQUi/i{_՞tH9v NR F#;|hYUmz]^M2gOM^ y[ e>=a1MjQs +mi7VM9> 0"Ez?.ay/͜h).oP۬H :nnjۧՐ~Ilb+?l8IJ!K~m>`r/Tft'h*%pVO hͦCᡋ>qcGȧeT˟0 /[~[/-I6ֵbJq'.7r[YZmuĪ/YU`G̥5D]C76K7'k9hvaX®㚶+}cl[Y~ӧZ\XpGS#+|[*\|Hk[rš=&.$$Bc庼g3:g"ʕkgYMeUc]\^[n}!Cͨ|XV\b*/qy5Gg/,:f}rWۜγz .~D|3YmcRv(DYĝMd3ly8k49_V +V~!˿w|h/šYFLIX\t,V$ڢѦe2v"C0:|?wC0#|hcq]-rŔk3i>&>,$~z>?.Ë֨.䓪r+[V&FzSH|XX[n7Bz,!&%3ǰOXj "y(G~h6l&[kgjl|꥖7o~7?u~-X` MzWn}JzhfC~9[H![{|4-NF;i >Lf8n'CGh~hdZ!_8wQ3=Go&MyU L8$Yv48*^%[o1Ft7ȎO +ױ#~eZӄ|1k!Q/WZ9t:BKQ4QNį>b|&}Mvv)-a` $ыv;9a/'HOpFg3TNe,u$ f'$鱣iFY.RY/D Jy^klE*t/7;xɶ[]'35tDӄ@w)C]5YCowcIN}-?6߈і̦['L_Fg8( їJnщ_>'VC]N;deE?:=[h^ǝh:r%7Fn#ͣlhq^Өn#\I C:fi|܌{mp|5?nI 9\cI>&qEǒ.9QQ\ːl%&줫'9"K?x4YtQ" <ЯvϞE<;EROzח}CC-/| g-hu!mTPSjUmpibj2ťZSKqVzL1?HM9+]AJܕvۊף% 9љQǒYEYSi}(AC8"S3]Wk|G}VԝcPMDc&xu.Ȼ 1&Y~. :C4ޏW+F} +PgKcꗉSE~7󫚒9ظINlk endstream endobj 700 0 obj @@ -8778,27 +8817,24 @@ endobj 702 0 obj << /Filter /FlateDecode -/Length 4755 +/Length 4689 >> stream -x]ێ}I@Y ;1q;EDZDwۭ*^Jat>+}_z1oϗoOߝ¿1`TOpglN>Y@aə/'/?y}6CJhwsVYB A9ARsCyASLIR KU6E'`5& -3MKU&h+`N.*`6J:%#<K:I.@tDV;-wQYҒUXAyB-&tNt]Q啖t.AbKQnpHI:lÈB' l%Q[)#XI:0ZMݤHK:[ VtDAC%LMJ$`" 6(i!D&$ 3Z"RY/1ib1rEld%. [@"b,I\@`[ H\@[Vi/qpa@R@AF풍^J %BNQ[` HX.i$.] ##qzu`bTXJ\`&` -ua$ ,x84swSF 5x Do -q;[@`ΐ(l0pK$.p]0 cl5蘼#OԥA0nʃ>I\H}F fT#qjL-$%qop qA+@WԥA%.p]В"Dԅ@?T$.]$.]e:BH\: [aLYSH:aIU*$ Ʉaa5GKF+ɮq >=l? aLm_av5N<:ZЎGd#BjFjtFb3acTOm@&B|c; -#̶i(NJegNV\ca ?|{o?Lc|INƎ~)z~k_hۺ{:€) MtiݔץlG]?YV$ty4[?s H>Oа}Y^rXހ J'ҕ.dewptu5ժ/P=\@.rᗣLy9jy@pn!p YZh'*t{i׺CuS Dx 92x#ZLar7HsxE  fXngá97MO8l-"^)n ҳ7qܚ"w=6Fk/tI{Wz d~1?osX;{iD]:wun+l.~Ts8Tf\ZU~gwOe흍w9Z͆wZ¼܊$WP;/38op_áO&|p:42Hft}n0II~Ac?׵sj/}f:|VJ/jl!x_!x#`xt}мؗp-/ڪ+,>Fnqnƕd뱤yL[:2-?k +Ot+OGz~Eٍy/cWwbV}<:;|d&.RAx9;QGz܏}^g -XDr/dpetgáOHS(0D=͹Agע} z3_vm)J"e6Zw1!+;A7d:u{gmUoPտd 鞄sQ˫k -b=s8nl^ -y:<A_{. 6\ @C4B9B7{.<-}{Q*k|e?Z0ҳhrHܙhHqw@m噦(zs(Ś+ - ocXw9BXkw+J^wk[&VP@lugávzk1Fٙph現"W;860?!ڝyڰ_}/7*%nyY\XAНyix\w=鵷4ԲXcAʸgŧ4= 5#W+r1T@t9t?빳?}g!x_,tAˊ*1-V-{XRVǥυaYJDz錄heȯrz顝y -+ֹQu?effr4܍~^" y 3[QHi>]{3 -?Ot`gw#6+w7=qvzc}y%㊲[㑯 Ҕy"Yֵ3и3ڿj0[\&vq?Xv]H}ݙpH~ou{ жў+m2D^ݙh(NWZt]wWlg[ υRvzLo3I6#_*5U`cOiw97}wJ`qy zy&oɸ|4,ގ7l7P;EQեذs܎jڡWMM{=diQM9hSM -bkSOU˲$ 4 OInPT 'W~W&w%[ƪ}^ Bz)g=qWS/6C -mEx, \``yif`>JU¥IJ,C|PokZGiCvv1ʤe8^-Yet*Zb(6)[iJM oi{6iseƫUq8vvddRRR-l{fa!yes#c皧:H ѱmlj@);{p͛dYhx/-PIe{mrJcT0zҴVyA1XN3H0Y"^*ZϨJK`$2)+:q: QGVS^s:ctQ8lt[lYbtLduEo8-]-@W`uE:8]4@"t2ii HNauQ$-N`5Rs:[?GA"{AQG:A:DAt\ӊ##a%1Q0sYl18.0M%%|KR9 fJ GP.9.0\t1=kЮ8.0]CJr\@]cP0* kxHs\QX:qwuqw4xW[\rwjҎE$ wA!w` iqn "?fN +q\`*`X]ʣǙy^ʹqb2X.3p\XQ5 VjNU:J ,x~p +X߄.B8.]ВL c!r\X#+18$=9._-3 ++FӁwM&'@/Xs\E \>V-^B`AY' Xhbkbkx"*xlx[6> O0o1*sZfu:9.bqb)09..q\3SqS,E"hxN8ӅN) -9.: tЈ%՜d3H"&4&8.`r\&V[% B) [)D [q\M4Doj2śh$Mx̼ƥxs\ X(i̼'!;q:[t$ s) @ M oz6]޵L8@ ϖ%zg23 X[ٔbl@|S& `&"جU(d Vp>)*8x(vɏWS,(8Sii#V|0JLB,IFXT9閌ӛrUr4NV[2&NJI¿}wPg+.9rؘ0i{~~w޽̑')IJiW*W!Pee@Er;R TڋMe&^Η>??m濓te>gֵ<_-0y 4Fvƪ<W S,/%uaZ~zX;snz2>uelX^Cn\z nrnm۴K.Pݶ{ )˞A G&JDfǃudD:א܏ZݾE[2Q9h*Ws7Z5t +>Xp<F&tk?GuOuR_y|y$ABu9Z;#k f u\#h$=ͬ[̄д延چcH}skSЊa;~i?=4#Vz_W4zsAO]]sKvo +hcVgx4 wnMu&}7\qݓC>]I![Z\H=he™CScOnC { URj^i8/XG~h7[ff" }Gpᐹum;dcֿ+3q,̣?z96g=׉W|nNW=lAֵ~pv}h ǻua-jUL[=\֬|Zאn6-.5oS:GC50mԜVt2sw٨+|ǽlco3Xph3 F=E9E.Kt[0V|Du`!v}4%V.}:{ ]*nX=e?ؾ;po5(vo93xPvtݒ\ksLm>YFm;ډ{`_>`!s>MX+o ~u{{dO}~/n-_UQ/Q]9r|͂)v;.k5wbu;ϷtXۛbpme8dxJqOWgPڲ#_|umn_u/%;oo5#gJ;ll)ߑMs8D]n*ٔ17Puǝ:Cn_wn7yF]zuUNJ6Fܓ%WK*WS{ڰm /|}R;fR}!ֽ#>-;C |Bh.:CoMy/k;Ts8D~'HΤO2g5#7Xp~I፟ڴig< +y1b:GCo|OZ@y:Czԇ\~wd&.c $`!,}jv}aoW}?e8\`!'SFQbg M3e9N}gn3IM6kG bP2vl^Q[dFW/O77酭&`R' ^7<ѼQ_)YKOr-[wFhBٜ5e{TzSX:WT3p^>pZK_Yizdn*Efb\ qbD'FMQKoCr1cD'ܚ-#KPՔ +uJ3fOn4R䱖^ OLדLi[B Vhv8Ȋ*M[.05,( +[y +{Q=IEV +|-t`/$S>n)]zl!mK$Uc)VuE(,OV(8]ׅiTɜjnKU +wb_F\{K yZب'|*ֲvdRJ8Nӷ$V?N2Q靪Ao/ZЅ[v%KoF,,ӦjjhUemFCYǵnjuY=TAUѶB[]L3<:6u|q8IVᠽ3uI>7M(K:8hasX-[ٞt}ڡ0\AFCSuTٶ,)شmäړƅ=wO}6ڋ KBxLnyXsNy*mfԩQ] ZmV e慢d2J>j[+l/ST?ڞNUn^dd[8zu,d`d]TK,[Ϋ ZͮJ̝K.?S&DK,ԤPzФFns=WΈ\I{& cWۆ P}EPZ%L*Ҝ\e0srJCBEWGҫӽTljh~>~ } endstream endobj 703 0 obj @@ -8815,19 +8851,25 @@ endobj 704 0 obj << /Filter /FlateDecode -/Length 4886 +/Length 5035 >> stream -x][q~_Vx?8"N`aώ`6:/Jj9vc33*^ǯW4Stx颦~jEar:?)$g_p'ZW3v׿*S!('TJ[Aq^Py=)I*ڪ̠dLTfX -nU fIR \TZmu0DY#贛<:K:'I.@tN>vZҥ{#Ғ-dctXo-&+l1$"l-+-钝\D.Ab[QnrZ%鴞iEfAg`W.:2O8bfmՒc:؂xآ(3hb^80Q2$vHQbD!XLr$JCgDVG^ba a:bI\` lA -lK@tK*i ,X.TX0$.\@)I\`)qb ,X:o$.]KK\`"-`h%. *H\@]L##qFudbTxDExQ&A+qwC$ 5N kx h -qr8[@Cg(l2K$.p]9 tL^'Ҥz\I{$.p]8*+q> H\SK:6II\äH\6i芺4 Z2 O*ID]$-qxRC%.]$q*ga-6 @i+i2` -IU#,J$q۔(q  |)%.IAO N₠ p,Q[(dS b ؂ADS҈l\Dɦ$.c=^tL1E]N B XK\1%.O.I\3$qAHSE)DN ҅Nk -%.&bXK%)^gF "CE 0MS:Ëm'q?Xlb#`u$qAQaQF`כA₤` "> ơSJ₤#֛$.f Y&x¼Mz3H\8( hJ¼'a vtD$y%.@&"zqK z3]LK\ 7Jk{u񙬌⎁:Vq@{ᭂg@F7 `&VыpPj%n(/1p¼oQy!gL辮9Z2l˟.|/o;eG#@ȩ In[(Me%jCjfifV"7VBW.r5W ɥXև59 &HA˶v}:Ig3}ѶhA-| - xDil2AAX(Z%bżO_/;i8Gx~O~v)E?;.-k\;y|.Յ*KnCy]i+z(K\WM9bkM? ZfڧkPT%a ` 8>kp-9@X4}]$j%Ó6Ҵ JϞlŊفLO/j;kvl]"f|.!9J78#.lQd; 0Fg}5MOh.o*7 7#O\lfc68%ܾgX\MFڹd4jr6B]8půqvbEw6qm\wel붍Xn֟ߋ]]k5NKd/\go\۠a9 43~/qx1K=| D`?:t*8C>1p wʕg 7)WۍRnO*c!C^w7 FnƦ K*%{)槨)9Dz{,? ;-jMˣKz%h&E,@C$},e[븎1D9-/fiW 2N3MDPiArƝ;y2ϓ,EwueIsލB`f:=%얇e lʨ13rrtflutx 5֋uˋ.qFggT-a !Ψ4y&PBM4bCG)p`ѧnl h6DO 2˦mt|f_R2=;( -M'< Ih8P}!4euLr.;/m6FӗyZdVm]K9jsTvuH]8*p,ĚydC,!JNVb[,x0=|n,6|ڄ|cn75F}Y[ԲבH]kڗ^v\PoaʺxkGNy:ǠFF[ae]??K, fz6jufmp ip?[wFiSU -»I@ܚݾꪇWpޢH[' /w#lyԨG!PQѵZ7{|l9o1KNVxcU\|t;vW/:{VG܆Ͱt:X8i_|p43 ьʒ.äsNu?T7H(~4P4c)ǘ<緽,\4Oܽ#fQղ80 SSZ7c;,7JJ6~ # Bz+֫I/bƄ8WSXO -lUm {4avojzu+OsJxZ;JE)Uzר*QJ]IY8 E~Jфnm0 QMJ:At\PSŖ5o4X;^ݺ#ʖk1cb.Ll Bj׸B^hr8& tfB*\2*}Usם}ez@Shi!T\HϤ[S[I.!*yźJT셪U(NWS2;Znʝ8jo-|޲cQЏ&6zVY'l{Z)e&qo?_3> ",}-~B./Q-L֕d5񤘿ɦ鄆:ob[ZWP1_Sˮ2^ZvbSkzoC/@kǦ9Җv~mr -}sp6|'m.Z2]F\ⲫ05Vf2 Jj׳庺.Ktl_tVtI/t_iZ#㾘 `i*}掠a,'Kmsl>&^&oZ枭AN-EN[%+"[UZE TC/JGB)}O~Tj'~T&-[<^l \ZZKFAUJ--mݴxk jmR~>2w<îIkl@Km"PJ_~/bL始SWr. 䣻lBr& I\0TV}F ,wd]mw78 Im +eiR)F xd$.T0HZJ\0IUZ OQ0yЫ̛)е( qA4k "& )K@ 4I\tTh$Nt!Zh A Xez%q,4֒jIF*3]E 0MS2N,~2GAHM^nF b.F ͼ $]I\,qh2$.H:biH˼ތ$O $..(.p0oIXo$.&ތzypx%0$3Mx^x]& c^qF1b@U (p/Uc +Hbjbe5YP+1lh s􉇨<`3c70-}[slv'. {?/(  +$ qgǿޕ97RWK0[V /n?tYYJapO Ɗd+u}w*>hYGI.慨sp1Jۍ`mX4s@VlVڶ N,_8AM?SE>Pa<|: hӏ_O?@_K)sٙo\/XL ~toX?5y 2NJSC{C=99D%ooi^2Uלn[dZn@鷗aY=| n\S:ű%>yI+_y:@z5~v δUְ"mӾ T0w*0$Mv@|̳YCm$r4ue4LX7C +⨏p6 +eoMki"ǰFSj{??wgϤ'<Ky.'CȕMf\";9<8HC;9=׳q~>{QKl604?bC\COa-ֆ^:Ϭ8^|}.3-΀m(5<ғe WERr€ւLʕ~/޴;D\x+iGU4MRϕy:_knmf( nGu76ܯ>'<Z}6rk5!Uad! 7Uu]~5%[3+efy`O }6Ȟ,t>_G#JhgH=?CHDFGQq!5;-^[ 0kg'UFUe ǵzv!#;lqakRK,ϸ)G =?ah{Xڴ۲+1@d(`M/ֹQX7uffrlh67sgԅ띶 ^5 -ϗ?T:hQ}} {NlW犯Gfk$ZW9Vo:`oXIRá1S.twKXзe?1ewb^ϗޫ/-=QqΓӍY99{IY q^^Fne EWOy6Dѱֱn{VwF.Gq-2һY}AV#pcd? $ٸk=6Ѣo~Ow,nkCq{!~cu%{ 'h?7Um.S;֮N+ܗ&}cqroјeqn G[m%mֽ~SmyGei}3ýVs~~iޯ asVb-u< fCWZg绗ӿv샆tj>˓IWv}oc?1 ^:F%ly'\a6N[NytX\פ):! 1Pma'C^V>5Xqދ+L*}cػg ^Xܹ#daDMG[&)ƺ7)̪H0uXtKX븍E9(bSXB/krH잓5-=GrqU'2>7uiq灮lPq}28]~ӡg<҈9K/rxY<[ձ_YGP2AjB25.p.˖F*w@Fi[/@y7([Pe"HZ'06?["iYOjy_F, edy`ô@c^V6xʹR|\aCYm*^6ŗ3?u9Yyx;&1ӔʒäKNu?\7l|v>p #XTNjN4/4|U).HH&[wsQ!V SsZ7cΡc˧Tl9qnXHDIդq˕o +$W MVDMTl ĭ|Ollk^"ͩ1MLתj,S*TWs6NB"$~jՄlr6j491V Q˗j>!v-6R劽h=UPuvc|9l([? mUd1Q=ₐuPB'ZVoK㥧u ST3U| CW<7[xoCRh +=/.B,/,t[cTe,=^&FdPג3i\UUdנJz6UjyZ=7|ɡ·[7}[ 5V 6ғj֮7b i$ة|L/L~Z[{Y/-~BÁg;nTc Ӹu-Yfx29OMlӆ%bߓuy]EC0^\ub9ucPݤ<>dɦAhz$ކ^l׎M77JWpol7WV%rn!% +WK`ꚭ̀䍴 +b̍ȗ˨Y^uM+wWL7VJ?)?0 endstream endobj 705 0 obj @@ -8846,7 +8888,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 401.373057 101.433071 382.623057 ] +/Rect [ 101.433071 307.623057 101.433071 288.873057 ] /BS << /W 0 >> @@ -8856,20 +8898,20 @@ endobj 707 0 obj << /Filter /FlateDecode -/Length 4737 +/Length 4670 >> stream -x]ێ}g+~?8"Nac# C~?HR3vv0;*^JbIjɳ;C;s|<}:[cޞ0~2`@G;?_sH?eyVCNI{2z{aUJHͨW1*'b -fXoY<01XN3RQz0Cyi8̐zF%JVC1Z1:iAwN"I8փFZb+V1̺(ҹqQi ,x8. ޕӁw E`9.A -@A8.]В^xL I @ƃ@q½G xWX9.p]a:آq tX̚F:t]!1Ü+8nr8*p\Dw(C܀cqXP- XQqWE+qW!(}[)r\&B4ocUN<{3K = !K G؂q\"sN'a l B'%ADtxh%1ԜΈ *r\e&ٶ`&9hk8.Af آLMqAQ!ơ(p\uエ16jh`E` Ȭ[p`'N`\o f`M lk#Ӂw: p&"[no/@#>!81^ ʦ ʳ9M{$6i3 B)6_cf S3O', F)?|٘)?X 2Pm}Kvh9B3Z禎)As- u>‹OcG -ؾAbU^`CUb'@q0¿}Pg+h9$_b3l=xo?0zto0}Nak/5`@o2랖e/)WY樂nnemdǤ965φ2iǪ.5Y>xȹn,lщ/Bo?:|cD:ADwW%x_k0m@3TY2| 7Z,aS8A<aff6E~6sUծ-{ 6%LrW1Yh V')1#!ܮif4}%&Ĕ_".+$Yq Q.KS쿐;w9M|gr"IvW[z\K5±h˴+4P=`PA*ؾ:CN qTT0x5)˜ξ:CNh?z p̌ڦa>y~9&T/Aԇ)L(*c -Ŭ~;_JΗuHu=Lqs8UzC>۩LG% -] m˹fcYy]k+mPVMFC6PWcDRSPWpWjwC9鍐5"J7,?w}yOQ(e$KC`_!/xk%2ٟ+{"TϑԟUم]s8]C2c#̺9Fz㛇 N!ٔ2C2{WsqWx皗tvp?_sYa1s4$qڛk K+Oavr?;7PIr}ݨs8Tޖ|!̛ŧh%[7s8v{zK*;ru¾tn]{nqOws)I2׊ڸ̣ݭ>\c2$݇휡qL7z֧}b;KهtcBiͶ̇)rOt<-us8|DF1M6GcG{<&VmrdGt9G9㕹;fV۟7~UdtE^Yh;YwnWQuqF쾗w\s8TDWMqAoJGzcw*I}uq-9ݻSPvܒ.(lnS:w/nI]WpH4痣\-US ^wǕ:GCyZ4\Q/E!zG_v< ;25Wѱz:{9j@}Yp ^}'!VK|IeɓkmZ7ꖿ@:CN<{(~yW<Oft9}S]"6u@(Ɂ0Hms{s8xMyXǬ4)wCSte=5Pa.Wۿ1ᐸ7}${ܶLO0mk ޑcs8iv+$[{֦6jg6\oI- -hi:Ck_<&Oc%^}nXv\_áv'zG\xk]J؛]mI,|^ȇv9vB(<@3uLo}KCi5fD+Rzʋez -3jFTo,x'p{ޠ𻓛e+ȏD< -MLĶמOC_T2(a`Liҧ^kY_sgy=Dnĭ_&_pN?-܌% dH/rD} /LKq"34qqi5M[ruiY'M!Oe;5 zscX~/ڷsĞ KsXMۧ# ҋ] }<~I+5~*7Ҽ¤`.i'͐?-mbfjup(J[FEv!%1Ƶg\-eƈ\HY:fZ^ r7†AGb]ڠekXjAv-*V&#й*,ӡdsYt^^NVgVCʣDibT,RK 1e߉ܴd=6I2L)s9Ft9l)_JZ5摯TPc4K}z5Y#BKK3Z^N֔X'ҶrzTIEDKOXYޅib4R}fvf/]aÍ4%%/%`'-ˈ-dȈl^"BK,+Day| -WRF* qӖ -Μ$p*v;ؗt.|^FfZq~ȝTΈRJϣ8N7"x4Y{9ui,(F4jsK;5Y4;B,+-la8KLQ?БtV Z:+nU6=^t ,g'jKFh"5βufwgrjd*j5*yݳv:Mց+L upFz9p'81%\:#s%'L`^o&* K*A&A`hRa$0GAe40VkQC4xAYB6V9B$㍤*#6o-Rtന-6E'"l,l-:h#S>'"Q)j|rNK:c6Ì (,l gQ[V9Bt bJlev;팤H`%$ + R$1*ʖ$)J$)+I4`Wrxi58 [< -+`$q$.pXr8--8-l$.p[&H\@0SK\.r,q:p%.p`]烕v q:2Z:3I\@]gtFV)i k& k#Q栓kxג ( +Eo +;[@`: ИpK$.] slLA5 '2=.[2!d ?DIhP* 4Us[b$1i3Y f Bi6_ckfX.2cZsLJk~;owz͐)?P_a، . Q a#u1OFt+Fb+3a];}*>B!"P8ZO_ *hFp6˶ RӬwNh5X/ O?~?>ZS7}p[2tː:7B;W?׿\8EhΩo_YEVO㵬z?6x)Q g*`s@!-( n+H js]Y_P3Nw|- +8;+kMs4"Z7jjאmnK+k:b$$;GTLjzD=n=ۍ("6bq>I>V@raxvڌݵ]Xۗe~6{'Ѧlu G>\n;Y^u|3Z%_׸@ܒC},֡G+henA-ams8U=f+{WCς^x?ɈOI+YȝuH~!Cތ _}O>u~b?O*ݚ3t(^]̯XbB4m"9"7|;/#~쏝|:ViO!mew9Ok_W=Yht +ʆd.Lm~qlz\u_Z#aWMms9}Yk76lQ L}WPϷPv5lݺ+O4δȸ"ɍ҈*Q7t+SWQoTnAV;{VC2ƭLk(#m~_Y&H\AWb+Zu{QrKۻzs4҆xۿ 9e?> ¹nzgáu>յ[fx&h6$.ͪ[f>~6˶qBb>&e %-s8m=y7;zڟcqp]{W4Do:"#ZAŤYph.ü]>]Ikz"}vy3ⱵX{jk> \㟛 s44 Q}"9mZ'w[<uf =0;;Qy"F髽ɩ;)/]F j>p|g!v}6'>L:GC\ܸ_ݭ 17xgȗ@X.mqQٴ6Xg"s8n<+Gf[#mK wU;[fv9 +|Tݙ{ ~VPʞs8n:fFm_CkU.]yQC:l>3蟙j}U>:GCnQn_o8Z'šֽϳ4Jkx!Vons3 w={+|=3KB!ow_áwQg>Z.V:mػUҺxˤcپ's8DmHO>Ϯ $}>3^ +ou t[χo%|sLi=IkH; y}1+x߇C?ᚯ'єm: q|͆-^>O|'D~Yp=~K\57x2xn/96G#!xutv]>;;v1=DRAe FE6Pȡnp.?=,ˆeHMT]:%˾#~_d7mcVSbn-.Cݕ!PӲ]CZ@-ewhk +Wqc6q^&iy S>D+U&-3|0 UNX0L  ҭfReLs5T#45q?+PW#pIgNߦ*^O oNиcqS6kv2,lԋ S=$vɘp2 0'}u6v|8M2iŽ~: ˜uf|Δ}Ne2um:슝v.Uئ Zb?M[z"Z45M˅~C& 83bsdizq8+[Up/iҹiI>&qTNK:dYEFqN'ff@򓴮/ +WQݤiMWp\`xdI臧> (FMՊ,ua5ǝAS{99Ԙ\ p2i> stream -x]Y丑~_;Xw nᇮ15~ؿ_H!*Re r Օ"_J)@.ZEo*oW)*orH=\T1{˾Ͽs]\9X,r*X,m^h}X(b bH1('/ YVq[V6XdѐXED -X `Q -8#%, s) Xr&9 댎pJXYU atEٔܵIܵ&@E5$, rwVZA(hB@Y'aSnk2̟Vʤ$,]0}"/+1º(+Bwa L,wx]cw7x M yY霒 X -+$"/*(`4P p=KX;'aAj# KV5a -kΪH!`%pW%,]6$, -^ $R9 aA<|"/(\{ DdHV$aAY+aA.T6@] $pi7JLf&81Ѐ^* 4*9 IL@LD)YU0 60gU:D&31G+v}wGw|Ŕ)+?T_a، n8v 0ws4+Y!* ڈGX5p掁=S0e+d}sC#||,k6HoC sݯ(Q_7N'+Ю̓J`l;Xqٲ,"Ѵ*.E9O_/;G_.~_.B_ 燲0t[.kY,7ÿ_ʇm6U~Y8<ܫ뮽cz/^Zi "ੱ|j=5)(61кajjyhsSqUwBf6SyWOy6%FO=`,2]z&9fP}MfDͺk7|K^y{C\Y<,Tƨhzi"G5^XfHӴq}nU܅fy7cV`{ -NNa;mǝq'ӜRXs(CL=W4[g3㒤5>ߚ5hthT돖ڶW-mTvp^k[LUmi+V\PIBcGyi}wЂ -ӧ_;^i̎8襰lִGa\/ٞQOܲf|ѓuM3}_":nw=}K$S!zX?z:ui}gǑYz' ޳dЃ,k^i+t<_cf915Dg٤{YMuSy7~;nlZ5rn988֦/yK]C[GKK;Sn]7/Gyi}_=gqfg^|g-8rYo˙h~:O9O?;U0ۂ|ee̩n|έO6iiѲ s~ьavo^;mkRS}t{}4H;wUGsŲ|Ǯ/\e WXZoj:ϦitN|ZG[b$2bL%/teV{Ɋs#'Nhv"#kL쥟tv"K3h5KffF>bf6̴YkO3/3Tn י)3Ve,t<xG-Ցq }@)Bmf%ii 4mMZS4Eo6tOx(GW:piem?̣;suNc}}6;JKAEus?|ҳ.o:Mx;q֮Yir?Sӟt;m߰Xj7㾷UX=f7W3uoU9b a(M3t8`r%,K{99mQ%4sf>[Bs)\Dzo&n9]jӠ_<$|{L0La!)cyW~gҎL&3 ԜZj /N_,&ɤxz"'[.N@m/|Ե- v݀Q$oض49 ?Z_RIr{"j%ke2CRn -UNBWbkVl~K]wlcuB#V3n)nH}^T]+uBJd$n.M&YTj\ E,LZ*|:6nݶ䯬ֈv̻u9mLA[xx+_/> -} -D׵[I7}iT~ Kݦ RyJUf%:$veb:ۏEiJDJؔvūޒ9ӭd%@ }JVڶoZ] jVoJ>ΐuJ)bR{= 5講P!_:)u7׹+fDJ ӡ9 ,+5URxKo!`No2AӗM)!T/#]_O|gpZ +x][ȑ~_Qφye`  g1ه56Ka2 B%uԘ=M.E%嗑! +?hIO1zEM)+%VE'wՊt] v!/v._W3vUdCPNP%ʹ)㼠z)$` dh +0Rt +f1QPEa)hU%a&I3trAPi;QJEdnptFO>&D]N#鬝| KEIG%%-N)I[ I&L Bt)6˯?b_LYJiB|i`!8}˂ʿb! |N6"n-.Il$gQ"sXJM1&w949 BHA˶vW~$[]sj۰\t uqv@;|F (l:xdTFhU7. Ŋ9C4ݸ/㟿O^/, _nb&7:laAͺk,e M kz~ K;~@)Qy +aAuʧ`K@ +[;jCˆ]Cg8 :C;?|f@etUa4BC)wqrγ;HuphrcagYqaI5J_F֭6tՆ.S`o?x9V;?vhNsvb׵OfQCT49ĽsutzE6u6djA/?>Ժ +;LR9sĹ2GVίk~C NF}tHqMmG1NˏH3m8̄9?."{xp?WyF-mePG 5g`޿_>Ylbρjb};qhDNюdCAz8?¿B3k>i:?h=th_4?㞬th~n_9U*L}u">c5w[ރwŏa&|,ȳl裃8ߑޓNܹr;H1:OO˹"9rv6q^r0΢A/O^=Y{pc8ZîEegCQamf"wq#ڴTAt(=`q5S=2R$UdAs+Ũ&C:\gChlukm]SlrA9ؓuc6rkjW+N կr1#Tu :ԔNn,UsgmΓGBfWP#oedu1&yGweGٞ~YWDiƅlvH{}-3|n̯ua=Q;Hp:O1kBO95=.m \jٕu9b}!Fm~ߕ3Kv[w4"Yޓu 7؝~ <Ψz0-qs%7{ג"]sx\ [xFt+:*X%(=Y{`;]Vxl:~3Dl7 +r)İ_a߸\5nɻ \ϻl{dCAΖ{eҽZo+c!7fϹ̩Ml(\ «ڭn7 ՓuQw:v\31jw=Fd)ٖƽ'vX=ϴQZ.xN_+G +idgCe{OzQ[A=ݏVD9jsӗqޛצvc8s.;Yw 1{aRU +߉|#f, $ٸk;6٢;ח96OSS~;dO +ȵewCͽ>ȻۗF>6< s|8>sƥ_aw6ns-׎8Gݞ=w3w{/[D٢қ_]~_ڷ˨soC"ȷ3^Sqυn='5:ꨒ_|SHoRV4{mn}J]5ۯF?<ՙ^ +}8v[}W|%4Lg# 8w/Q8W>5k8tz5s~o< ~0K|y7FEޢT0o6NDE'<ܱ`0GCoي8nO*姇=V" +PIY|{Ic<Ԥ{=N6GkcOǍoGm&v\\ZnGҥ'L*vT43OA*Nlⵓ7!B/ܥChQ 3c+)sT$c- uM)q%jbנw;]Nμfpw.;߸8M.|F8C?NبΘRNoE\gkc8cdҊ{R9D&oɼQ<`^Ǎjla|%˯'Uئ b:0^]ub%ucPݴ\4mgmb d>ul=zryqQ?Ʈ}I&q%Z2"x8dn HIs}P;`aD>]G}MWY9 V!aҼӴG0㾘 FMƥIJ,ЯۚcN֖es϶ OZcIcpSUuhtb6ZuK9(z)K=4':>*~S6[W-9N-MJmߴWv =2U۔|;s! ?%cj[^׬o YjuJ+=a8&V_-E:VKjI>Nsj *o^-WKBU/Z9AiiaϮ'_P endstream endobj 710 0 obj @@ -8922,7 +8965,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 288.873057 101.433071 270.123057 ] +/Rect [ 101.433071 101.373057 101.433071 82.623057 ] /BS << /W 0 >> @@ -8932,21 +8975,17 @@ endobj 712 0 obj << /Filter /FlateDecode -/Length 4504 +/Length 4651 >> stream -x]ێ}gy)ހ10yi{lyP/J-vxޖx)ŒԔgO%$t?}8cɨ -gR ֛(np(g'לɟO|r2t)N`I#9]s:-& l1Hp:B;NgaZ:آӜ ˳:".Ot;)aNaDct -Xa-F 4l!q:{f8Вآ#V[( [` 8P q$ȓX@0s@68)Ő@KB@h[a"qqݒ %!- 3% 4(P -hpwr\A * 4hWh&)8. ` qqk pxHq\^Cq2(U^USsƠ渀PxW(Gxbxw`9.|A-wenji }>V̸E+qb.s\0* xWjԜ+U.q0H8`~tY]D-) 0 ƒIX$qxC9.]L Fk ,xWV[WÖpV+$zӁwp ލ&E^zstpXpn8.pbuq\z:x -Z) -p8.G0 ]]lqlg,chUNgy90K <= !K $q\lPS!* 88̙ŋ >9J2lL{zd? aLM0 T@wx-:ZF a=y.#%hqE#1rXSqľX#̶itP9VL1|ZaR雯W響C?87:vw:'1]ʌmSF[JҤ\)_>Un#n9_~->jwrGU~`z3Шv|Gͧ|{r#Z {Hs8^oᷖk4-:'oR |pk[ӖIgPjceߣ`̶Q֗p(#ZO4(R^KRKu -`iFV̈ty<2^\^k@ l|, ]Pחp۹]OWYuqADn]v]&ԽKH Mv9/x%O5\CeE)w稊5hwO1vv;fh_)R[Xg!%.{}y;7x6}(FgxFk pmҡ2jb~^HDzd"kqz1Ywfl6d3@ӖK]ԢPTd;y妳EMNVݟ*Wu5ju+}fq?TTj]%LWF,5)eĈ.'FHE:3^jMBD9]HĦK3\NK֐ZR}nxF6,uqjb{ nJx9#O1M -ajb/ -^4# ${'0Yg,q/N4QV˸ieK|}_&[uqh¸>nmdCCr|ok>{K +x]Y$9~_QHk|/iHaA!k^>3G:#rvVMUF?pVW D;~x[CoJVE$0^hw 䯗?yu"F뻤"#|^ZF0*k:F)ȩ`i0b +fցQa+TE"N3TQ) ;Id4SV84tZ CtIYp(*"` 9-`p:[4Z'2[`tRqhEda +N)aM0I3: [kt8x3ZuF,l-|-;0D%&t0t7 h90RAGFKc` a:b"q\`4lA - lK@ tK2* r.̔0 8.0\@)r\`qb{ XX9.0]Cq\`一 '-0`GaT0x(9. .*Cq"t j)y1h8. 8nj+5դHB,,ӆ&4 ,xWEL̘[ wU@(G3,s De8.]g/0j ,xWԜtX.q  0 %]V!p\`%qfa!y ) @Bw1G xWZc8.p]Ip{Xl1As\: [fLYR)8xW*0J#M O8.^{q:| [ Xl!Oqװhqװ.DT.l|@"`2":chUNtts\= LŊR"`s\]f@a +D9-p9. R [ r\t@$K9g 9\E 0Li)YlMp\IM9KS8.h9.6S9. J'qh:)9.* qe7HěqK lpQXlq NB vtHDR8.x=$R`&Nޅg8.Mx\l/A?!E]1^]2^V]3 #0epU(d $-8a\}j1gN2bXsdf%ٸ>/|{ߗ_ +eOARa#V8}`{ҦJ}F)Ȗt]?foSLz4;l__ƵMFhr[F~/׿pׯ }KM.0}Zxl._R_m:19:S573=0Ĵ@h MVwfyK[OMSCc$$-ڝrcSCel:Dе Fr+ujOzNi^&S9!r3Tf-jeFbDcGY5xve6xbjiЄSD 篫pkL7b:nC({8Y|%Vtag,{k=Moj͘ps&] ;!mb{iaԋ9 ٰpUlfk0odVɜ7hws;g;[(}@fک=G51]G^^+օt;cyN`zO2Y9qBVw)9ttZs?:9:&3Yr~3cdjc}ƿ!9h2 MfWL3Si >Sۚ4y2gY2G7%'7\{lHm_uL3[|c&FBs\顊giVƕO#yN_>Xw(dƳEWgY%TZDtf۾{kp;!ԣ ++7Y}/&ly,ㇾAcGA| Ӗ߯ҿeMyΆ4YӜCꌥ~g5tO:imy,;މWlsj!-yNYO+׸ǃyNծCEv(3pn(0v[X'xun֔V!3M=7eQ-+٦}MtVu y(IwQ˧G{;l(s>ߡmz3t_tL}ݵTQos]=h9[{}},л#nxw!<;D8[kh`\>0>bYWROLO Դӭ +:>iȮf+?}eǔtڃyNfp뉀%;u,Krh&y4=tֿ3SkM[Oy/ ]3&EV;e\Kǻ_s-,U/b!_f1*皷ڏ;?wK0ZaPc;kw;gG jzOxylŻkk6z7F3;>[z +wuQsٮFm~W:%b\y먔_:lUrvɰl"K/$%K'+-z*3d$;P[<*߻"ӆ&\5}z?m7ݓF UkUWu~8r`$7 w^Ûݘ>i8ua֍ +o72t9|Vnl>Exqj?H&oD Dkگ"HC*wV]Wr2XRM;5ʴySڸcƱ98tIO~UM5wv#FL$AqN?e)TNXd7OiX +OIj&9[dNd3Btj)Ng/ig t)e!RX3.5e{Tɦ4bztV; 5rQu,2攥C#]W2M̢oz-*3 +Ct1cD n*͖%UYcnjJ FԧV1C~h.@봙uVb*~XϤ+k)x104,ɑibᇢN=YFj宰q-״Ms) fRA2ԥfҦټDRHBEJˉ%i!<^jC7?,s#ʃP)4c'Zh# 5۔R*E d}Mr gVŧҿ-m^)h^q<oȶpdMY|\H4YuڜUC\Lef)G* +!*m0QFkLNpBiTOY;ZrE$5;#VLx"+^lQt_0KA; fkÂP9)TqTT*=h|2#y endstream endobj 713 0 obj @@ -8963,30 +9002,28 @@ endobj 714 0 obj << /Filter /FlateDecode -/Length 5038 +/Length 4919 >> stream -x][$9~_QHk|HÑ]3 BH K35ͪ_,J|_JĘw/R'X\UISGw.L!9KZǟ\Zr},kD!HǰXRA;ϰbJ b`]İ):1֑aEalPfJCe9P$PZJAF3<儇=Jtby<43F`S/ kBx8exŚ8, pY4^, RqdKZ15OK'\4Fr,X ӆ4&4 pW%?fMsX*bX^*@̺>qXpT|F UsXSs3<Ȅeac3c^ONYQJi -@'LC0|wY !#u! !`ne!BrEGmE>Du>s:"D?(^֡*'|OkEs@-Dw+vvüW3~[N5T\E-OK,Y,_G,㲜:yeiT)&m8ʸe2YNdddnGLRdR}7|{γ0] '3= D0-u)V -WY$+@/LǗ&%#:Ogv nEL=N&,5 KPSSH0&ҧY] ot>Wl |qE:3uGܽ͌RV8Z;,Tn -p6|^CV'}_J+#=Ww?>wIZ"XHVhl:ԙvZMJocE%%y=Ҽ`Ly6?!+u`'<5XwΆf4m4H[{+^~_֓Lcu) As{H|_@,{Y~,[pnT 3͎dp}ڹج@:8H4?)Uo<G --0q"IGޖWb2cUɵ>Z'-Wޖ`W֜J7ttإ=Y,`Q |`ra}nub"n_fymH[b-3 jh8Ydq,ddws{rlGzγY9د5ӌOqb0/X>֙ɌGjnC);YxPjݫ eD(=7ߠ7ՌԆ(#tydIiHesߓ +ɦ޽:Y,`/hǙVyq:f`GkQY;VĢG|Y~ڽ3{ܣuvʏW_we-x.cMntVһK,Gߖ8┇zǵM}n;ߩܿz!_$qcJ#q-ǭݢgY%ys3WU^[ -n=#iK;W,^yy?Z˜ʉgSJ^&+ e{~ۭ-M)͚7?FpOy:K;N"K.3\뤳gf3ƝyZO3U܊Kh#v -)$SZ$ulO>nYnYgB2=9bܒC,w #0C?=\OLe%{b-oˬsX,j<jU~j[8*m.5yJ}}>^UߥsfG^el49\k|~h cjsؾkDC]Y]:N}-;`kFػS7tp^jَAtRRWeɻ3imuy,<5t:\e-_Z۸R9pUdsn-]{s{}$i>eFq9U@Kz*">Y#>0v]^kEtH#%A͓ .> &/dqN6wUn[-jL6m>{V΋0g\=6P{& -oix`D&a܈ir2ڴXDmM5VUmՍ>椆Ǡ`-Ϧ1>ql0SE~_ 2(Q8#a kY~vUӹhK. -V1od5FkwJVvӛjw1"˘n?|;>d*:-){'yqAUVŗcGU9zZ*MqV0k>4JcU&U5=K>d>;z/Pٖxe!cv/d Q$gb({[VdnpA$T֏#c>QV|o]ʴ2{ 5ZP_jWK'--;HBtk$ MAESd[YtotkfKG鷦v4CJZ>!C]75m1Of-H|'fHKC]r5g*RqTMMCa&v3U --=dH>.yC5ra7zE]+q..0 -Q!vr^5c Kq;TNS>(M**o[qlv&gӏAֲ{! -<`jT"3wL-d%qo qA+@WA$.]ВD@?T%.]孕 w#`MF5a +c BҁwFK:R1K\4mJ\" L!!$.YAOԅ^₨ ,Q[\tIh`5Fh` \  YpSL6Ъ.!EеK(qAnT%.ZjHr$.i'qA̰CELEC2%-p%. $[ J\L*3( 0Cc-tN:3I\\U+M0- ?`&9X$.Hr3I\l1H\lz3J\l'qAVa 7Y8tJI\uz8 0.i$.Va%0n ތd[<\Q[4ea܂;I[Lvh$.&Va8r,hm@  RY|hdcb嗿÷~o叿R@֯7z5]ߦ0[f h=}j9p .uLZ~g1Yf^ cXySYQä8-rҼME;K_鷗4އ%LLcYރ/Q,m wC-VVwa~ ]ob;A䯶=ס½ZO6t_Oҽܯ%)믢ߦr_X>u2X<{`ɖ 'pGu,%=Ǭpq|f6az\ʌes6DmPLRkfٿ*iPu,Pyy0FκWW);+Wb+.YWt׽1x'.;qgIub +smE=W*h +Z/͐U2qdE!эG"sݓ:D,}V3Y$MFk>/B&R9RN#⌏n%5[AdʬHT8:gm_ewOD9m{WP}=Ͱ][WPz9,;> ݵ(?w8tclgGhN{3~зSfss:>Zr&=)>?/qPgtS/w$/Pv¼ԕK,> +syN_;Vhٞ{~zNsZoSjϮ<[1Ԛ +FeW2b>ֳgB:.⹜cu|_hCWbc4ueȘ~"{00}/W¨;}]/]bŻ,y~&W51hj^S3ߟuvNlWיִ7;] +Voڿs}µXcحc7."`FOq<RP؎ +$;H]QʸO0a0q]p\t& AƯݗn#B̉ +QqPw5H26gJcY籜T*S}5O!xS̞ {XtO0TH6t5"1_ӥذs_Nq$7!rݫAOb:7 v +O +lw*&Kb5qM'զ MXMMY&.7QJ烖JUeԗC\'AtoT)ڡ3v$WN.b4_{*Teͥ) 6ՆdcMHG1l8*1ܘv&~(+/Bʭ^L C*NJyUH9sUBc塲Z@Ҳ1V +LHO[SIY1y<"Jsb>+P#P] +巙PKeA3Znʝo\kk:4[e/8^LO&6v2&l(.-6Ȥve&C^?ˡkyܨrLg2:1= EX huji}ACǍa|ZvՈԕAuromĦBhZoo]+VG}&-7j,W\mJ"qEI۔3,#.xdfL$6=xWX]07.mӹ6l .`yyf`> i*}zc$'KxuαW(P-˲gӆFs-cIS6%RWdJDQ2UdXl +S,'b)/=ڈJXrˌW%[ ݩIJ]KilY]f+ 3U-_|;<]AJU~HNRLNGk5B8:<> endobj 716 0 obj << +/Filter /FlateDecode +/Length 4726 +>> +stream +x]Yȍ~_Fqƀw/`؇.F>ߏ$1%eхJq0dHW4Stt~jEar:?1)$g]r,v/.YW3v׿~b)X ,rn +8/0Ĕ$p mYbPNbA 2& +1,m1L$ N., 6J<xMJd `$xi޻(si"% $,[% JY ^,( JKd'"Kg\VI<'۴"+ +3+DdqVg! G' 1 +j 1DdK` SJ‚#MC`]r%,HV!D'd=A‚D!DyAS-0 &IybIX|3JX0&"zqK rK@&Ed%,MDRn. >3((@o *{ +9i1YF/mh ӸEa>3d² D-b_xG8SV4ߒ.oՔ#d ;  RR˦ W w^ Yf`&"UИ+EYeE۲_Yȃ‡Yw~8~{'pʼnž>\v뗃"yGM~~zÿiH('4__VS\ƯeC7zC/eEEim1|溙D76rE. +'ToRoNi1ZC,+U: ]yMQy+*.Yױ嗕cJ:(^04zjY>+V8t{M\nǬ>n8x8Bc: +XK45 x' gHT6!^gմKm]X$"X?|!b,qjlUbyv4Q%C]uXUy~Ec2D\EzTi9r^稶Sr3ƲcCYG +iJ58 5;|Tѡ6-.MwhMFcݷ&E!BRnz18t ZA!ߔM|ci=K#h&Ƽr|N +5-m .}9հV +*^Uqͮԩa}_ilKg=wtw}gqzwZNzuzbĝh!"?k9p 뛩kM'Qz6|IpHW>2*KNΊ;57 J/EP|N2q(E'X|vI L,Ukt;n0uI$(|T Gh`ARG DzKѫI2 @lM>ԡ{4 dm@t[dCU͇6Nlײ& ӹG]Э]SD*=^5 TjTWK 6Ovߩ4a25>u&jHʥZN .bҚk3Zث.J7um8- kDqIS\8؍oGm%vX\5hv9n/o͟4+gpȓ?hj&G F^*i:$i@Seu͎Q t[馱uP@ cI!aHTUtɮۂtm::z0wd߰m$6#iv[vl&I'ռ]l v +a-jm߱R?E&yOuOlVc2/tm=uF50 [ѓēdrJlf `ue]ǍzuՁ AuDu8M3]CϝK['PIU*\e<]uhW\tp q16ˡ%[9vT8.0/mQwcӕG1AlNjaci! g{6RO|闗|S]]C-;=ۂ4zhAFjJ7vJ:Jk-*/ժZ򈣨bNӨi7JSgorhɶȍT/b(XQ훖}Wo{A]#SիMw{֎xȳT pԤ56C$PFW{%cOUA"CS jICzLVPcjSE::Aoo Jˇr_l 3 A +endstream +endobj +717 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 716 0 R +/Resources 4 0 R +/Annots [ 718 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj +718 0 obj +<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 146.373057 101.433071 127.623057 ] +/Rect [ 101.433071 612.273057 101.433071 593.523057 ] /BS << /W 0 >> /Dest (cb154-1) >> endobj -717 0 obj -<< -/Filter /FlateDecode -/Length 4571 ->> -stream -x]ێ}gy)ހ10yifϡ$^DZ잙fUK<<,բ< |.'9xI S,.F7u,`9rteg,ȳBJOos0Q38eTV80UfPS R3*349ת3ĩ` 1*)`TB:"bt n9AV砓Nq:H`5l1AHNg`Dq: [Ղt(N`t]atA&x"VN 3tRԬ# -dS -Xl1Z(Na Ӂ'v3Uѭ:؂@Y"(#hqrn#@<ʇ `q Ct9.C'Az7q\qכ゠֛X16hכ@EauNS`-8 ME XכXo£gC>7.ft]x\` ϖ[ qx+NF `neC܋ʱ1k$6h3`ZR -6l h SQYa.d xyQdS|N_<`=ӻHYp -@t-qb9ZnI+u%As-.;?,,,u>NQH^hۃ4VC90k1Y|c4X`"*R(_AĿshRjcNʜ߼?}?} -yw\+_\BF~טoLCWeNn>_6\^SNYM*7o_7_Eb;41¼‹o/2J75S-QFsxWhJk -`DO0!2ٻ.2i8Zby3^chŠ󕱕wj;veu;X yidpG/I(z<5g*iiǁ*7c`L})X=> a XK%/APT̆} EMV,tˎ`RGFddj\s9 j B:-e+3VMTSdWyʾlFoZuecmKo+N}8]']vǴi  =VeQ)civizd˵ +SU{ 7PV1mbVJy>hWVtS&5"8tC]_q_yfI YuqADn]v]&Խ3||g3y/Kd,?WfňPM;ʣU[lܙph -U"~w;ߕyF}sy:ޖm$ʸY+jgn6f*o`wnc2rMjs8}l wpF_߉}gkݧ2{,s8|xFK5c}jwN] ޱ3ڙpDių淣8?݇@ѻYդcqwgG=k|0.rw,k<t"3q=&|3]C;=tnp1rx4[**Y+B2w~bD#\ Un&O@.trbͥS.%kH-_L)P>7<#hxk5FNb{ nJx9#N1M -ajb/ -^TIOTa42! _RIYlZn3\I[5t.cn/>nN[l!̋$c)uY),OZ(MB\4y2++\n̝Olo.|^ƉZqOy+UbH >4Z3;3h2ȸr4NsJj,y|t4+Ben],V;$æ*h/iMBCǕJvQ=AeBSڰ ]%u2Ҵbvd7ež.u9TII*\ԷK_tLH\ŤeJ UF\ԅⲪ0fF@֕䦏S:U]TnDEGeN.$pu}QL4,a{x=gmQ=Kji(̈́Kxiyxoi\ƞNNŵEJK9+$[T&L$%dfسOQ?-m^ɍh^4eoIgpvDI}Il;KIu\ClLEfV){Δ:p JCtw:Uh2Vܰv>1 -endstream -endobj -718 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 717 0 R -/Resources 4 0 R -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 719 0 obj << /Filter /FlateDecode -/Length 4797 +/Length 4676 >> stream -x]]q}_L ~ ^6<ݱ pED>g;VIS[W4V1始SWJ{wʆ䣻 v!/v.;fHUCPNP%&Aq^Py=ST0kR`MI*a* AR` J* J+ءR(k:Nd `$NK4x]tsik-bt'%`$]-]-@WuEy%]hKЩRg\$RN$00H>:[rIGH:-?<((Vg7)Ғcu/1E/QfАyI` H6J,`bl$рIn>Hi茖lqKL@X\Q[(Y K-֪%. UK\@ \$. 0.Eo%. P.$. p.;%. .{休@ddwPSX@:KZ ,xH\QC/q2kX p. $qK<7x8e$.]c@?J'+q=t$.@cAX"q'iՠc8>Q¼E/$qQ xT#qjt]mw78 A#m -uiP)F xd$.T0HZJ\pIUHUa-kô4A0*t]Bw۔,0Q8 -6h'B>Q; DlJ\zH2F`` B  I#p RL6dyЫΛ!е qAv+`-5DLz @C$.i+qAHSE!DN ҅Nk -%.&bXK%Uy%.9T+M0- 0>y$.M,sDl!g%.f Fb qARI!ơSJ₤#֛J\yכQD -M,yf Y:؂) &Iyb yכQXo"S17.ft]D^`VZ+ de+(f ) -b@|ILL,pPj% ]p=STp1L}[sLh=??]~OdFPJ[W&ao'R41ggd#BԠ1閍3aNDŽSkoU>|x[2Lf'@q¿tPG+9v̇bw~ }z_to㱟mr3|?ߦZ; _29ې8˸Q7ֱ94Bk6ܮv+i2zl]ũF;-O9Kd:0=V=[-xw_|H[r-p*s= צXnA:ͩө~6〣q;>Xl -k Q$1DTr "D2fLgk&uURLp=s:m}_cg٨vhhya K#xwm{#VvMyf˽>嵶 3k+&_ۼF:Cv5vDn[I_am}p/pakGW|]vF:CNLڏxX!@1QcM7:#ݍtM_[zɾHAFIP(rW9jv @ټ?W:Ŗzz,ۯ 2:E-f [A-CFCi;'GOR*9ib6 _Hby aOdC9¶c5$uW4mdh^CW]\Mc:@Ljj;]G~ŃvȯJ3$՞xQ -l!g^f|Q@f\l%;gn%֯_Xz]A2=1*1-V-.zXVǥEa9tw.*m裓Ϸfc9'-ΘFƴ{9w"[wlXqFeԝn񈻷]b[Qm2 yuQ7 ӭylGB+bQK=s:oǯ[kfvOT]w ޛ{e>Wygs:|NJ]]sȋ:܌w\ԗwwC"n d,K<ƣߐ>Xt܎5?r,ѐ֏ ^Y|ngp/},g*1<Ws64[.lgGxϩnJy'uW8wPw.Gl~8x֯ Ms:C`k5}\myrgUlgϓ=Wnܯo!3,r{i;툔ƌX?˟sCk4CKVfn|q"FXYz's:Kw{^jQ5okR&YrzʚIc\u:bţ=ոqquOYnPcIx鐸s-7zoKA~棴صw^ӎ߾G `Ql!1 $!^6ү߳ةO^a ߊ+.9!#rx!<,{0(L?o2 0v3^]֧eJywq -פym*$yn6񼓸7ֱRht tTBLt뱙uT$c. uM)OJ.Tn巙xӵ -דyZ7|F\W4{[ Ux+ XO2jn:N&DoE\gkcl4${Rܜ!g>xMZ@tIJN #(]`Z)-&pA l1BkN`VQ: [U面tHN t]ntA1֤.@ǽKtB0l*RNIb %SEҁ'rUѭ)&uO1;KQFDqt 5E+ HvNQ4 aG:)("Pm)&Ph\R[T( [P`Ԋ@  +ty(R\@0S\[MqJUN HQ\XIq*- +hRI` Lqؑ)wh.ʀCKq¤ ޕk 4xW:L1AEqJ[fn4\R\RKKq?CKq{褢'cn +?bLR\`£H]`¡ʼnqVf@qbR.S\gQ%+fjJ2p x~p`ߘ. ).0]В0LB cR\`ˍRX.p{HlQ^R\: [bLYe\)(x 0rM ). ^z͂s8tpHe868e:آ5 *x -JJ -p(.GMp! [)R\&c>hMq3ZYɼ]:p8bAqb)1)..Q\3` +)-p). x [ R\Gi9K)1xmYt).0A $u4Aq'ۆ?6:آ{MOqErIqMGqA[d @qNqA`\xS\GAo: -. +-p1nI7N4oz f ބGO|7.ft]x ބgKk3ZcɌ̭dʀ{1[92gA1F"0d*i?0fLM >Z)6~&/9=}1dҏ00 d@wx,:ZA a-u.#hqJE#1凙0*_>`/!4+f[2*NJgpP'+h>|`XKs?~͇FN?scR_cQ.LbT.k>W۩\s kWϛΓykOu׍Ǥ.~V)q;e4H}N05 9Y*`5tJ)ߏ߰lFe + 4$xfCXf05[عOshQnxʞtŎ _UA,5;Kpf1;@Yଳрe i E%/JO^\oǍ6A猒k  +ROI:2ordLg&>^62zuۦA1˼^JH#FN"yfaʳձj>˩NX%#][`jJY[`睍4WX9lhs84n;wỗ@(hk]ڨ|\:[HmG7v{\Z z5z`Qf9!C=*ޓ3LȺT\n~*\oux1:gvY6&nuFsӫOML|(sZ.4GCc{-c]Ac3 +2Wph3_ F2".5uq2XջV[*"Dv9bw|{ckb۷+FŬdB ++R86$DwB׃X/.Mu9Զ1QgRG.1"38(l9׾=b\AiPgáwG~w7A4dwPw=|{?;:s8:n{W ;֟K\ڠ gn>ѹȦ=fhjGs45Oz,!ZO<Ҷ~BF UG=z-#Qse;]We+ to⣵.ذ޾:Cﶏk2Ƕ9Z.gO ػUԼGCf\oz]S=5u<-@һ)VP\;;h[Ξ97ﱌ# +;o#O_QvQγvMwï_ѐi_U]WEІw<6\5ME|]U(vWp53Rm YE_i|:k[|@MQ7)[fɎ񔌺:)JztǪ.kP5bk'[':~C<A⫯%U_]vEhhӋTaO!1+ǭgBƍgVυssE&148KM;_i޷::IbGwtPϧ۪&Z3)#"̲ 8ױЖTc'W&}&MoR 橐/LQӊ8=gbk=SӑͦlPe K]PW+b="pa6n:Qu*+]՝[ U}2өRJe2*dI%sOr"_tjnc' \.rr"Mg3\.KՐZR|nxB6$uq jp>6@k+ȅr2:"~>G6+IЫ:o{^Rq C3^M*LF>![+G"qlfjͬڕUs 2f#ҹfҪ* ɼHROE}00uwO&44S{>|cQ  B\{*;9ehBjVR_ML}Qd"d<]NR wVr٧(_6uF4uEx4eoIepvx)}IOl];Ku)lym=vmmb-)/̢Mw4YT2!—:1QkTo-8DMUj:۹eF$J+;V; EWTzv:Nu @ +E&H154P>t1T4a{|w\]4'S endstream endobj 720 0 obj @@ -9084,22 +9121,28 @@ endobj 721 0 obj << /Filter /FlateDecode -/Length 4758 +/Length 4972 >> stream -x]Yȍ~_FqLa -ə௯7_/uL)yEv -1VKi+B0 ,'\bJ b@1(E' V[V&hXC'VCDQD<&{gc2It0NK4y]xY\RZ94xl Cy`%^,I/BXWyEy%^KH%T q3M.Z$֓mZAAK"8ij'Άjxv[esŘ@"`%0% $ 0!L I `(RP4QVD> -UőjB"DXYP@k!!+aE %xKJ{ ,b* ,FOX@.L)IX`)ab ,P:o$,]KKX`֢ȃ,0` JX@]UFF;V&&*&0aZ k.A]㔑2 w!N V{Maܟ0VKX:bD^tƅy -O$aQY p%,OFZwIJE$,9LoV0]&bwKFxIE  IKX0P ZȦ͢[+[bM~%ƾhVjaef!QVFm#VpV~߻OyjzYAc/޲;4GPͲoXpsu΂cj1q +iL\XF}\kYx沆b@{^صE;#uwe~v"Cʒ;/_BVœ[EUrR:YѬǠFF[a;/G+[ųVxY~߳r޻:Hha]xvsY|:wLcĿHy]K=W, ¹;wQx.&ERG7{͜#+;WѬ,Lj bX2dW٢.1˘KOb񪗦fufHkOeh>C"[bxC.dă{oxr(kL%3}+G<{b,3.YE#OK,)ܲՓmu'owa]vpz27xZºj= -ߐk yOu ti⇍CQYetVި_UC-xC{8c!hboPM9i i2!d?Ifrj[KJ{P)%rj㼑|xܷT`IB6:w,Q-^Mz!Zd3_E*5H}`xHVuD%F6TѼwUo*z: )kB7{ #U;"JSEFUJJ: TI =_74MFwڞrHҚ#jت&J3uZB n([dyݘ F~ v ++mn%GQC,,4ާU*#O>TMogVROuHҀv!T3Uc+jRAǚU2CXOʞ讑]5TuvugȾbkOu5o_v6_ٱHfӏF6zYGlk&Zщ_U$>mHmmn䴩B Z6Qcp}ThNp*b(2ZQK(j)ԘQkRQnx5Z5r9vudh]JBM뾋vAM"SժM7[掸TLUpԤ56}TE!/ -us%یHɕ=iY"]SrKOB* E9B4Rj9w):'#:" +x]ێ$q}g ۀ =C0?lKz fdF^w]fݕA&3K+9=cpOoj^_I(?'V.N^'8M ~ :㶪3\N^R gLT fXݪ20Q;I3tQPi;QJ5N)Ӄ3z +),"t:Ig^K<|tk甤-Φ(l*Q[LVEb;Y%t%Q[TPZe;u:bO*IM+00H! +:[Yot8t ocJl54ZybLt`%0$ + $01N.'Ivr%LʓJ4`\Q4tFKD`l.HL`5lq$. l ,֩%.[tpaqm +N kX.{uF ڵ. ,x:$.p]kSXdu8*J\FF ɤ$.p]wM uq8h+#qgQb4x9- X 3V6%xpœ[M: quy=.[Cx.wAIpj$.]m%xW$.] ^a$.tE]TNI- '$.Nd<)ġ.{ wVUa-6 @i+i2` +IU#,J,qA۔ D$q  BrS1H\! QAAY$.@`=ek  "F-.` "lA(qlJ9 XW%]0SkQQW%.ZjJ' +$.i'qA̰SE)DN ҅Nk -%.H&aXK%SL$& +%.4JL)` hB-X`e-; R2L[2ތd[I\U(L4Rd4NKZo& UXob'l7EMY$7N.9Zo& f`^Hތvxg0"2 MD^x}D|&+8c@U2P^x((/Me +*Z +xm8a}[Tp)R#3Ct=I6/~o/);eFPR;W&c=o[آL1 )1Us7Km62 ݷVT2 +bpO)a!/m}sS#b|ol+#Vo$7p[rcbzAg?v{&`dث>hF4 MDai\?3Y>`<"€46E}[%ݧtbާo|tnß~ӿ^n'Y58w>]\>r]Ҿ,2<˽]:AL2N$qkک_!kL=}?ϟ++aZo/ќ 75 "s0P-=ڮmYjc([bӍI*+8X伾u:ZiB9'Ô,UafKΝbg*VGHm#v~mmf(tˬ\!+}$'l9ch'Um;EҶ ־8Fʈ޿NRC+i3 izϖ^#Ua1'tsev1Oiҋ_K.m9 wC#;RڳC03 ^P^Q]{vJbc^RvMPouwHq᫷Cj샆lk> ul붍 +ft.q)X%;>޴A~3cRoQ|_pd[pmf)΍1A?[CU&i陯KyuCiycyӀ`7neŅ[Aح0Iez`fR ʦ%'SQ(ѿv<_hYn1fR+s |iYzz r-'KJ-:MK wChM fUrp{Xqc)r~- eApl:=Yғ;$& ?$ydֹ.#SZxgHi-y~V}z!1a?̌6q-lhu{5=&%==WQ&]6Mπy)˓Ҏqy>.Vd#5KHy +aX}zbm~1ϓzcѨ_M:v +\o 4nwqg2T-LC[< >xdc:f΃ԛ6~_;6\L.'ŋOj9޶i7*'P9Prƛy-ӡ3t,M<">xz+qAhx|r@h.~t 3\;(Ի_t;[x_lX8\=ufBթź`{rp''^X@t~s]9 i,w,z׶/2($'7eUX{](pޱ"0rg2/6+/nXeBXMػ[1CNl~?(vR[T)v૕_j1{V)m ϷP-UH6&z2;2)t&]:VwrmZA˝ŞeŒ2?4Ulߺl u b1 ņdfI-U74ކTMd!rSդ1}sAr)t8 {bmPظj7ݶ ]L]״XɚK Q*J}鵨ڻF5eF&5eI=n;Uv̦gFoɵtDn)ͷ-UYsnJMكU,l([?tJ 7f#|ܼk3_o> +} ++вr8.{'L*wv*|5H{wUf;Cc'veݥclԭVReLs5HZꚘ(OJ.TTžAu%v6Uj[]wrql#%V.|>csj%]lTv2&솁kة=d'qފ3:yQ?Khg?nTc Ӹu%枌A&]7Ta6Lh.֩ ͏{MBMі?>^l̷Mw󥭍j.xspv|gE⊒v3,#.xdnL$u=PX]0.m׹fyUVZ 44~q_LuQ{rikIR[.[%{eܳ-Snu1ʤg[x^UQ4LUY+1V’vKiq{)K{QiMZ*z-y[zK&Ax&u=mn]ww =2U=ߤ|gy])U_vBtmv:Zc78їDțlwD^ 19kU Ps+~ߢ-+Ioa+Ӝ/*{eC]FZ*wY +z}OTZ~j_f7e endstream endobj 722 0 obj @@ -9118,7 +9161,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 713.673057 101.433071 694.923057 ] +/Rect [ 101.433071 401.373057 101.433071 382.623057 ] /BS << /W 0 >> @@ -9128,22 +9171,20 @@ endobj 724 0 obj << /Filter /FlateDecode -/Length 4812 +/Length 4691 >> stream -x]]q}_V&Y?8q wf󐿟CHG̝VISW4V1始S7U+cPBr&uϼ!%o4r*A4 *.Xc3lNR kLTf 3LVR \TZmu0DYKFi7xttF>&D]N#vZҥ{%%-N[$l<)Q[L $l1$"l-+- .EkE]N:"tZ$QAAK8RFlt G!FadQG;>):?I\%` VC%.1[2H\`Hѷ<->`!&k%.c=^t 1E]N B\k!bK\r$q̀N[ B-* 2t Ȗ.tZK\ lA4(qA4L$.Z]-(qA~ȡ&Xi)ElMH\ɋm'q?Xlb#` 9+qA&/71f^o -$.H9L4R$4V˼ތ$RXob'D>7EMI$7Nތ zytx%0"2MD^x]@|&+c^qF1c@UL(p/Us -Hbfbe5[R+1m'Cό!_d´뚣b؟xW81SV~4E|i`!ָ|h=B;ZAS- ]fS=}>;/0daUU;M=6}-mtllaWiZñ0ocЍBi.;Uj^oȕk{Hl!q$s:$naeTHHzKR2UQСQEԖS;n%u(Aw?c8:wRve6 \ uf;VKCHS2758.? ijsG%?tqfpa񝲃6ZcuN혰Fn Q_TG>Bs:ėaދ  t>Ku¼L =n97ry]+CPo6q7>>Xt ~>|%>dr/ Qr_kQŶ˫kJF,={$P{P_}".|4*%,uܱȇs6سE$Ipݭ:|My'lF^|*w tLQmuկx.rhsfc?뵳eߧws:˅.vb#XV$xQ -jk.,ˌ8 -;ai+C94p+~uZ'OuNƃ9nǥ@-W5+vs?gK?*Re9Rwnܓzh { ~Yhϕ>HكuN{;{^ˮK,s 6yyrLg3I?ęկBM}j5"<:gCb~|>*:X%"W+gCѶ~vܰQ{oD9wS}8rn?ߖ+cVGsղ{']#Mcs76's:t8:>[/XM-sxrѝ0k+'ޏWD,z鐹I=يCv< Epl:gCpɥ{5}׼|"6=Xtɯ²Fd*X@{_9-53'*{虃>n}U|{9vbwGs!'uֻ/;DXNKY^y0 i;F?p,Q֏ ^Yz>ϳv{K˙`ӡq'GgC9{#83,n9Fhۇv<:Cνv;!~1S/o\К⺧/pwӹ=c]+װ.~||/z;!]󻤢"0cuj-*X1Tev0i/:!7QM9hK~uPGU۲1 /InPT'W>W&wZ~U⹟XKqz5I|5b3A˶[]&ńn)TtMllGծMXM]&.8-7QUZ*kT3*U+%:NvߩҴ`V=Ʒ0 Z.rvM:Rj*=LiPX;^}4IC~ :#ǹ(c"ÍYogLlⷋ Bi׸B=.$nGҤy;feT43A -λvNf;}e+eݥC8R(I=6.cy*yź3\Ʌ5P~NUkwWmb_Cq_`X2mtlgr&6zv2&l(.6${29C$|xy2__ ~ܨrL=Y~{{<(os/:mXFMc+ -7mU#RRWU˅! -]޺^{Ǧ9!i(:X~98MG%_Y8EKVQf H~~ˇ #!5mn7]dU"'M3{^d_f@Vj7.d)~~X}]Aj[ MZ(Vm*ImNZE TCOJW^ -5h?v|Tj':>*~Q6[<^@9Sd% vVlyn;?wWv[dZ5(=3wuT+Sᨭdr"`#K<\g;Ẅ\ ?cD*hmń7(Ҿ56mVxIu -j4 hJ? zRѥ*b'SC-C]d +x]ێ}gy)ހ $Aagc# `!CxUj]ffwۭ**J}_ %B嗋JJL6x{U*`x]/l?_:EN+{Ǥ"#|^ZF0*k:F!ȩ`i0b +fցQa+3WE"N3TQ) ;Id4SV8ttZ CtIYp(*"` 9-`p:[4z'2[`tRqhEda +N)aM00H3: [kt8x3[uF,l-|-;0D%&t0t7 h90RAGFKc` a:b"q\`4lA - lK@ tK2* r.̔0 8.0\@)r\`qb{ XX9.0]Cq\`一Ơ&-0`GaT0x(9. .*Cq"t j4xW[Jqw5iq"?ˇq=tp\ƄFXqiP!: ,xW By83oB99.]8*q>x9.]e9xW(9.] A( %]V!p\`%qL c!r\pޕ xWV[L ӖV` +Nޕ +#Rq&qI0P +@"z8.pQB9mqXP-"8.9. d +7 RL&B$[| Y]Ny 'W8.@.%&= x% `t8.`p\W$FdlAq"] h؂h゠L'9.F.t$S8.D +9.4A du4q'%ۖ$?H6:b,q\Nf آL J؂(Ha2q |S) D#o"cm4.回H"DauASd-8 &؉9آ#q\KfaMD@Hg 68x7rZWqv@z-|+d V]3 ߔ#0ep*Jxfp[}j3O1-}9j1P>O^a,)CiB|i#"V8|0J B,G$#|F*薌KaM}iamxgW48֡: RҤ.hm l6_"&m>^o|ѻ? T߾-hێߣm7n DSYPӴ=仒ʷS r4n8}lKhWPlMRG5(T\w|ajK}?ᄏCTz O +fUy fHq@u}wg0d{߾'CJ"TvN?ǴJ?FLa ȔѧA=Zd|NPQ!oB񆆽i۷r>?f*S<0έyuN4}i^lavߙt(^tWw}5_5Dns:D; qf6t2 QXXt3<]^7Qm! Lm1vkzо\q>ڷy_rkxoXl5+1hrCJBso R9:CXswcIJѯx?qY07nq5_g5oK4?^hSЊ¶9VҞu7]uY=Hֻ!\jʆh6M^nȆԬ !9dž0{rSLqҹނ<1w^G^sv%}iλ'C[m;>.k'~Ҿ3acf QǤC JD>^n40cuZ_JM2-fc,0/*HVF9U|Io$FL$Fq?eiT.XdW/b_X!ǟ4nlm>Tjm)$s!3/cFNP843nbufkԖ ֊bed#slvWŚ=* tbzu\Vf8 /حϬ4O17{W"3QHm.Y81 #R YͨR݄!J1 [nl͖TUcjJ GԧW57sDs*viXFτKe&Vz\!m^+4MEdKd S3;}7Eg@*n՝YNj宰q=ײMw) fBĔO[JH.k>fIUA]' +SlvWŶ@y"v2U3nϭؗW%kn,|wRZoWwa *4vXMuطM1f*lPuk$Rҡ%TF(6jv'Ij60"mfۦl8B`n jw'0F^/dg@j/VZ,I R3lf96=T23%ȩS4h1HC6N)&;͎d2J>j[#l/STmOvTJ'vTܬlj7{-ξ%K,kk)Ւ&龳6AW#SYYCwdt\7P_GMm1;9p-{ +:J+"yC1+mg(⺢iy|#&_-JuTiNV0 T6}Jm^,CHRKC:nd ;\ endstream endobj 725 0 obj @@ -9160,30 +9201,20 @@ endobj 726 0 obj << /Filter /FlateDecode -/Length 4821 +/Length 4926 >> stream -x]Yq~_Q#}`%^ k%V~Id>fU5.F"2Wo4Stp ~jEar:?0)$g\p|諙RF럿g)X ,rn -8/p)I,ڲĠĂdLXbX -nY bIbA \XZAmyDY#<%ѓ$H -UőjB"DXYP@k!!+aE %xKJ{ ,b* ,FOX@.\)IX`)ab ,P:o$,]KKX`֢ȃ,p` JX@]UFFXuz +QIX@]IX@]D^05 EnqHX@]CKXG?J'+a=xJX&D O@I%,p]a>&qaB˓>IXTV|F "wEx]mw78 F aۤ\WI%,p]QxRH"G'0D ,HX#M)/aO -<|"Ovd;@i?Q5~_Z%Zm5ZV mڞnD`s\oSNRni7_닆{zЭ zv_^iv:@gRp窼O{t=lTlH[S L]봔 -Xӗnv*^ uhβTy!QdGsDmXV[l1̺ږ+@{^wlw0,Cm5=f+YTgzeyJ~׬]}SNs|7 7 }54Zsyny[<̥Meo뺕oJFw\)^(:/Yf羝j̺byn`?w~ 3cү]},:D;˶oy7d={r>,j613n `$=kksMŦ].k_dL_/˛.e;_7>gCч+[vGT_ѝyWf]ۨڗdve\5}VBCSi$ːF䞞iwf}* -o~#or;:z_"77myG?m쩼d7-|`㪼!MpĄ' tR/BlT w% ,<.Т{>M1O{/sT)9L}Oc9=Ԟ_d~O{Gi 2iiٺWߠMR4u?6)b^"![}A8d{ZUdmRO$+:͚9"_+M qNy]:֩}xZۼھL-rڙaUR%rۜC0L兾5!q.^28*M|?ǰEg’u|Ţ>bf,M)=rTLq9s:Z?WAvgh,7y[O2)vKʮ39 -VH \EnZݘ~޻iƋB(WtNy/v]/z4v(r66"~=uQb\,K_fkumݖK;f]O2OSX6>ZҫS7rNy4>YݶjE-3X6_Vufgo ;x^YxwrwtcqdXqG[.ꝘW<~ym /˘7/Yw ?:屚ǫ\CgnK{O][kn_]P^א˺| htyu;+ʺ% -Nr][yz:~m7ώhm!z+/;偧_8Wz:gN;y[ⷛOGzy:燯,];x<` -k3Icf!Me-ߣ=vyqayuqz\X2ددKObj s5> k=1a-dGtwS%bL>=ˌ#jVs:|3Op{K~Oy8K SEk/Փm7bnj|bdsP&Be%:owb5hI"6 h~6GiV9W'^L[crWp6ט+LjU;,rfuQHW=?~cM6^ Xk_vKi$ 坒<\"[v5|}3M~dya8xbs;AM>Y$֓6Ì ( l gQ[UFY#Ɣjhv[eŘDlK `lQ1H4/I`b\6N"K 'hd?Vi茖*]j0sElI\` lA -Y ,-XЭSYK\`N qL%q (e ,8ׂ;%. ]L(qZk] +XuZI\֢-`d%.p]Uw1 8 +III\&)'q%@ sJ\k28q&H\L%F]P=tJ\&D˟0VN9H\:aD]tDžy /O:,qbx.3I\ m6eʦ0S4A;U>`1B26Z7T(*ObŜo|KO?^~?ݧ`~z_r?|ƫOk~]_82 CPVzn}ㆲKR*y+{lvhzګpg~ +ێyR&!Z\/׀cwXٮ!26^ͯآ8HayKm*iP=YWGZރZcחBpsfs!|Q){ö<\CϿ!==! =?<Y5ɣD\SߏHFWp٭'ٯcwBR읳Jr6{!~e1/и.A~x{\/Za}ٔ9\cQBhuγ!ל_+4UFAnc$ifDX#׭אNX CMwNy:Īرz2N|9J\-v9a׊5bp`+ׅ{{;>Ϟt=g}y$èeĸ'<Ǹ_*QMGۈ]·q0 k*kyuŏq&|,>g=YgF{O:7;sA= Ǥ'w\'<,DG +5@l賗͆qzY|zy:O1f]KC_N}6Tyfamf"v= 8k|dC +W33\c p(͸JAf2pe~m<Ο zArzy:$ߏq<zʑqamkR˞n9ևbTцfcn뮘FĴ {γadyȰʨc?I.1q{;-] [xFt+:*X%(>e>=Y{,vmt;Xg1'b2Mj7v+K;%z'ykwmywz:Oʃ-ej\^QNs{*s*:f4[_45J6†j6ƾvknfȯt:yͮcsw5F_.<ֈ,%Ҹ!Fr^dŻTgYi_ %&}w\۱y`xAI:S5Ie_ݿ;j,njsog+;hwRycȇYFw>L!r +{;m];fs(8KPCgv۫+6@1?y]8yŇGm'X:ܶSP}ّҞ I?3`@I! mxm}]ԅŗ=Q:0lƼv-ʰn}Dqu}Cd&5aE3zRf]W`6:?߫]Cnpgl_wd6~:Fpk ÎQ=j}_ 2K|n9$)rHj6^ +rC|` y tJr?&8X΃ata;Wohl|EZG]*GΆ sTۇ){TLzҁÞ)wdS,-ѡ7-+=M*&cM fUrXz藰~c*rPvh1XmLUdmPArg:vxrrԍr<8YI6뒿u3_c.~z0DՐs]By 9mKV,IZ!A%<{A"hdAL-OUyd} {;=ږ}jS'8*\3# 0*ґ"/kkm+/e‚y?oN*eS$L2 , =-Z|Cگ4gLOoaQB"'1_᤬utq,߲S+EC,~: #XTNjD;I*b,~]KR v$\ު֖-CQe7@X\=A z7TjtxS-Ƿ B z+W^E3iUhP؄A{C VXw]l\Gu u -k"{Q&J-jSջF5eF&dI.Uv̦gFTZ\ E,HV*zҡnSs T_obsDv-LUknFxxfb]|JWqe6qR/]SufLIy~;k'qyh$h{Y.c,NJ(OJ7eLs5HZꚘ(q%jbߠw;}^΂fp.;߸8t}0_QLO.6v3&솁[ةaLZqo]2MP…GY(]X q[ƭ+1_ I1}XiÄ1bzY_qc_^]ub%ucPݴ\4mgmb dtl=_zsUසu/W$h_ҡuUo-[I4ד #v,o]"- ;;+{^_<ɡ6jo7.m7FFxԖ˰lk- :yZ[=ۂ>5zhVLz睺*[uZF*k-jSXU;Nb)oӞJs6eݺhɶs8~wlddnRK*}nuCBLU7%G\g:HOɄԿe [8U!*R#s?W͈\ 19kU oPck~=\-+!iNm2A;K$e"}婥77EwЧ?'C-d endstream endobj 727 0 obj @@ -9202,7 +9233,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 570.123057 101.433071 551.373057 ] +/Rect [ 101.433071 176.373057 101.433071 157.623057 ] /BS << /W 0 >> @@ -9212,26 +9243,21 @@ endobj 729 0 obj << /Filter /FlateDecode -/Length 4717 +/Length 4690 >> stream -x]ێ}gI@^ <fϡ$^D.LfUK<<, -|)ײ>8O9#O1יuFc\05u_\5# *i?*M èTB2sN˨p!p*aVzr0Co8JyFai'i -0C99̐8F%JVC֤4E[Ndg}P9SNK#9]謵s: [LbւMq: [Ȓ`uEyG ˳:".Pgךw~St N'egMbuQ$-V`!8N0gFINg`RN:؂@Y"(#qrAiN{9P>t9h@i$$tJrD@m9& [4F.-4` p\@[& l tEV i9. .(P -8Hq\@`]2Vq\@]r\@]Rp\D` qر# %)a8.@vX U^h 4xW9Luq*[fn2Bq\J+qҁ wA!w` )u -n +?fL:wGIg-Z xq\`Oq8Ì8.0]I9xW 8.0] p8.I貺Љ= ZR`:Hq'r\`+ +4V[+ @aˌi8P` -N=Bqi@y ``/Xq\`stpXpm8.pbuE;q.P8[H) -p8.G ]]hO0Y8cCr::@׬C'Skcs\q̀Nj \-*`*꼂g$lq<]+oYtz-GD#\(FJtFbaw}u++,V+ ,0Z";r+$ :Z1@ee>K,2w/_?|?F._J5~w6㵑5i7FW?V]BO29桦N1狿vP:;3ޛQ1&Rq}w8H!ckk ai\K{(=&VHj~e]Zs.uJti5tZ؛9lruaO <|xŨ -SIgz(2nOhlgd_3vdXE)!Vů$w9պ/z%t'=rB3Z|27[u# RVQ8\sG5)ncU>]uI=_C$rhK -{<~+׾<׆gt퀋*{>su?TϤFn#xcrv9ֽ#=Kfϣ^Amy; U?ݽj|3(ί_ݷBT<%mitV\`gӡjûj∳@n\Gzg wsu*ڴ~=1׏NA-X}])9cF^Ϧn -6ݎ{cMݤ݈HQwŗ(pSvsVݗtj#i8%r-ϢUS ^}BDv9B7&Ey ҟf5Ovt{h>fd.kwo-ܿޙt݈ ^}%!fóY+>O{`Ey۾-.W ={ܙtgO/lVbS|T_[ڥ/Pl6ڕ3UX\zs*|'I;k/j;#]j:&g3aw'?}{TS!|2kj]\Y@LBn[y>' ;ݙtx =yf!=ݮhr4];&64]D4q^5=ް+:?mvhlg=5/t; n_,tAqeFRjG]sgS7ۨkv<^ -j$ 3鐼R٪=xK\j*sqx% we]}4;aڙt`=iw}zg$F쏘Sކ[%zi'Ic LUF?a:y?z6(} v9~7b ~'G$ jԾi=+fE؎z]&qol=gY; ~g%?mq.pw7ʞM,uEew9R7It!cD n,r9/YCjbJ:oQq>N6@k+ܨv1:"~Ǥ6+IЫT^i\04,didRrU*c3Tmf͵ԮK:1[II7-6VMV]HE1ˌ,'se-TW&Cy".v oĦ[qOy+UbH >4Z3;?~,qo.4Ȩd<^6(Ԟϵ4Xf_es/--ˢjQvr(\dRdJD2dDlc,{\)M+M+v6f-QvL gWNֹٗTd4^[ ɆI/{ۍ +x]ێ丑}ϯgC16腱0PU=ecQxP/Bz]N)yxAIIuN@JOoRx+oH1;?]Iª肽 vi_{Gݵie1QE2ZὶQ9%p1r*a=iZ<̠,u`Tf,UfhS gTJdu0D8V…#)91yRVq(s6p:-6J,lHr:B&xN`qF:آ7։.+:"T.ac bu:|X괴c$SJX`Ӱ:(tN'mdu9-?NƇVFFq: [` :c` x#@c G:ZA.zTiŒ(BH [c`&qqݒ% 3%k# (Ppwr\`@5i hPp!%9. 1` qQ 5Jz a9.@ +q\一:H⸀c +`u^`  -.Jqw5iq"?˻q{  U3VB8.]}. +̸E+ \w1Q ,x8. ̨ U35*% r\8oBI@E!cX.hIs\YX&au^HC9.p]Lޕ xWV[LÖpV` +Nޕ +=Rqi@ `9.pDq\ࢄ.s/!,V[pE41p\5l1Zs\5lq<o6<- lqLHqZ9-]xOSEr8.)G؂q"4V_qHUa6hdԼ>:q)`I6\TN؝OOQM=.''~eEF}|'֓>>O4SSN?:ht:tw4}6i|2QH[1:#Ĥ^@u0EPUm*`EN rO D[7~Q:;SNgD7еS{jc:e&oo?^+qӇwn\!^$vxk@hO~fy ZDsS&+3=sƏ]KW$FM_`ˡiWL3Si >Sۚ4y2gY2G7%'7\Z^D=ts9twDG1Vp6=td`ˡq.yBp塚|A6V`mms5Ԛ55Ԯ!KܖVrnc1uy #Fӕ|A3+JVGtt0зҼՇ_˥ջ18d%6vWJdbAh=rhU-\_f'+?ggK.@d)09cyHC?_` Cތ㈆Y$}>N?rHiҡxuRG͚dz\Ѵ{7r>W; +79{9g [ͶF˼}" rM)i;q7GA\;J݌csѿwGY;6]E:r(<>#: >G;r(Y|؝fd7{\ z\k;y~r^6`!W'5$pQ3=Vk7/lo]ɷwTђQiKy-%xRZaڎ[UfFfw$;]0՞pP{ +ȴ w $Fozߠ T=ǩca 7O[$HrҺ35LS}Orܺ ~ʷSݍ=4mPkXt77l9mǤCӾwG"=ms!I +9\. ^e-3tc{2yn*Hb܌Q'p;-mIH$e)TNXd/Oia,-Cmդ6gK̰̉MX1#DNtRI64 Lgb]Z ik5XR(XSG Jӹ*,MiosKrCҴb.*Efbڜt~bD/7FE:^KQD%]ˍM7fKO*Ԭ1|5B݄lhI&.@kf*~YϤ+k)xҴ2ahfY'?R-<ÁW=YFj宰q-6VP )`m/$>nI]Zl&mK$Uc.VuE(,OV(mL\e2RnoؗWiobo)| +b-lW+k0BW}yvJE:ȸ0icuā3*mzYHG|F?彩y\pLdicpP62lXf4y<>d)ĞS h[m؈uVi!|Z82:a&_1iWlNi:S{S$R:CKɈP6jȶ~j¤ƍHNmY6\E.iOڂIƙ=wd# I [+-xN9fA> stream -x][q~_#@\Ë8yWHZ={8fUKc)~tQS -JEQ_rq:?)fob_pɓ_諙rF_)T*~ Ĝ%UEr -f8cJ0úVaI*J+ءR(tON)lh$SN{-BI9ҒS8 Dl1)ZIawKJv99'2t*Ŵ'UNVaDBt峨-*#,lqt ocJh54ZybLt%0$ -$01N.'Ivr%LʓJ4`\Q4tFKD`l.HL`5lq$. l ,֩%.[tpaqm -N kX.{uF ڵ. ,x:$.p]kSXdu8*J\FF ɤ$.p]wM 1h%.p]ik (Gxp`%.| ,wu'iդSxN>Q'qa˓!K\ L'̨F3jK\8L&]Q'SwAKF“J`Q'IK\2P x{ wVUa-6 @a+i2` -IU=,J,qAҴ)qA$0I8! -6c dB>Q&\{ DlqI\z6' - -$.@D0e[\E\8؂HQ0ٔsDW%]0SkQQ݄XK\Ԕ0%.O.I\3Nₘa dK: [dK\H:%.H  UfP`ZtN:3I\\(T+M0- ?`&9X$.Hr3I\l1H\lz3J\lA'qAVa0Y8tJI\uz8 0.i$.Va%0n ތd[p>WX#dS_!FGۚ,˂Z~-r-0e}ԶSmAsy~"iBܺ)ttqNuҬ8,zڡm/K?6nF?[th<*G86 Uzu j9%3ljӂ9F("c@hg@8r;6c=GO3/3BI7~֙BY͔U2t#<BlBVoV|ǻ{ȭ=m܀[m Δu'/_9씸̊I. :mE֠#bX{H2,݂2?`vO}st䷼kfS`V,S8kY+mCX|2{TϺϨ#y>3˸X8FNrԃf8U70^:1S&D5d| -sTCuJ)]n͓B^ns!Ô=L}P=KOM`wNlCMkEwiw]9o:hK*97Xfq@䠠= R"g<ȁ6p'2=c2TZdGKPZ1OFfD\s)l% .j6.;٧ -0:tX<φh&O݀˭, -o, vawo8vcnjH[IØX7_vPbE[u'< AhUbJmK#ovkIX7>Ͻ]~͸-ݶo벌^ʩUاMY&'<*1Nn{21tZ8 -ʧ;sy I! |yyǂ2t?ǶR^?pHx̢;vqc݃y+#?ֱw<0RZ'`:G=s2ӡ8>m  C8+^4xyWOy:ǫ?_!z>Cmlwb_ʾw̻м9WJȖy~~=x4 -y:ǘ]hx^zcQ_]48dgCV6&z`:^>e"E6] P#N<d\s.A!,QXM͇ t73 r@pyŴԪ jsG'~(?2d$[`#guy/mtOPީ{uUH6kp}1_=IYk7X}Y৖jE/5ZnKJxMrm\q2/y'I|T,)*`ǔOjGkk(-NDoX"g[1^MzdLÁM tC ˈ ^(.Y[2+i' -Ku FХ:קY^tV$-;++{?<C$mޤ\FFxԖ˰ls-=ʲlC eԳ- &D]N#| KEIG%%-N)I[ 'R3R[6_w]XXY|@pɃ"f@Gm=d2;r+-@ba2oї˟_}q61,3sܩ>44mrŴ\9O͎RwKOe2tL|=׽/Wlw~?~Yd'XgG +U总:= 8azN7]i0v[hp+ˮMCl;~ꆈɱ{)׬ +?H]i=] }/ck4E s6ctK$jƵŽ8ַDdt-rS|Yok~}auig,TG^-rlKᄜ'NR~}29yΆ/%=Ǭc?"s|f6cz\ʌeu0u߻ɨxg}oBPu,Pu{ýa|3u9RvW,i+.YWt׽1x'(q9'vίM&v ({wލh̗fH*5t (g? }ueG6B qykBV龲tkm>93(G>>R9RwVgQ8^lͿs<\ 7s:D#QG␿ھɸs: <aش3l>|Ƴ \F/5?4-'RmoM~0K;}BwK-J6:ݓh;s:4t4 b;$zW:sYwX cI>_oߍԧ'bI +r_&=st#P1)^ޑ#I,oxIsH$K]ĪpOss6_;Vhř)'9ַ:)7]ٵn܋ִ|^ظ|OB@;=}dv1 SGZENg?9i#y}OY9vknkLUe_=E $YK;VѢ;K~O;3֊o߀b +$;H]w2kg +̯г +Q +[3퟾?K4i6K*DqYXȪU&$ibsN߱XN,K ?ä_溙=c݃+_.~|[ߘ|ɯԻzr k~CCTt&=6n_DKM5PWUL/.ds_ 3iLS8ro9ĄAqU-tIXe7poRҺ=:­++w-?Ȏp?U,8߽,⋃|5b3@i[-X[ńn-T&6T-|Vyi% ; oTk{(o+E5,3*U+)kP'AtT)ЙUz-Ge$RI'n1\=jز͔uk fi/ecDq)J_pcVQMvqAHW(WDž[Q54i2fP'pUgB*I]Jجe#qCR h +--k.B,o/tkb )k2&IR+8SXiʕ\]Btu2]-}7.u~-P0_qb^K%MlTZeL )4qѷQ\FkeumI38Lou~ ]X^2FU0[b>wƃ"Æ 1ob[ZWPqc_Sˮ2Z.t TmY˸;[׊Ցyoߴ {P/)V.c6%_YI۔-P\ +Slaf$6}xW\`nDMGmEx, \`/xyia`>JUƥƲ,_^9^EjY=[64kA Q&-ۜJdjlY;b+S4_yK;+J-3^lushwZKFAy*ٺnZ]f+ j晪ͭR>ό)OuR1c{&j;[^E!_(yJ+5;V mEWwْoBA*4&z mzR1f7иKz[OƟv"O endstream endobj 732 0 obj @@ -9280,72 +9302,77 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 731 0 R /Resources 4 0 R -/Annots [ 733 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 733 0 obj << +/Filter /FlateDecode +/Length 4737 +>> +stream +x]ێ$q}gK+6 C ݵ^+?}dfTfV̪$y=]Kd0U2W KdTJ9~|*z⢨FST'b6.?:jUgVS1ŨPi*F냠 +FsT0GUEA9yI3$p۪2̰ѐ&(j-`&rV$5*lЙh%s*D2HB>I:->k#:❶OxSf3k#:؂آc(3H1/I`cT-I$`S(I,`SVhf((:k$"px +8[3WIga +H\l$.p`[Z$.p[H\Mpaq] +$qJYuN H=J\+q:JAudu5El%.;*g(qw1U eSx&MxF,.*A'qw-H+7xzm%. %$.PGxp`%.zu1eH\&c4JkOee"<.[xYI\$q8^aExqX%xج%.] ^A`}SF.+SwAKVJ'0 +@2F*qAbyI\:⒕q tœFSH:6aI:f xM BdM@(J\c d B>QQCAYP$ Xr Z⬕ Z؂AD*Dbz[1? ؂HQ0JH1xUR]H +KJK I\3lTKJ3At3Fda A M2+4rIZґ<3I\((%.4A u4!qƇm/q$HsDlq$.Hr$.H Xm%.69ߌd [I\uP&K\Nk I7-I\yf ;|)0o oF 2EMY$`'I`$qA$q 䛈-f >$xi7JLV&8cAkeXgA#0e +U( 4m8a}f71-}9z1wش??]~; +Xs.o*2Lۖ ~s7ҀM76K1|m/dX63h/RrA:_VqޖF>Ł`8_xƞ7.nHf~?a>]O~wbDA8iy3 *ZS^'9|SYί~𚺼c.momC 6&6,l 籭鷧Goqnzu{3R6%)7o}yPoS{m;qS6'̓Y +vx (A!A8Jhms'w|4og3x/+a^F@wIGq?_!W'n>8P'ŕWfVSKarn˻q"Mu׏6|k_c?kaǟk,2o?~?i\q܌o.뇹_˭}6vf7~kfSX0ݗ sdĕ:JK*Ggy?w}]cs?*P ޫFn=Vch}sD,~˖O:'M0jkڥq!gS~~C051 {7 μ.)ehklY~edYB6R[޶A稶*{T{cR9u{7őF{kmŹYuܑGxtlL|IE7 BǢϳgwaAx; <L2.u ª;$ 9 u$ &\h˸$dLK˙6-W5/d~yҲi9]Aܩωby\{l5\fmm}f&_Fb@pċO*yiRf`WNh̓|${h嚽wiY鐼5^'wbl]~,uN=de& 91;=QҐ* θ+db26gJ'<A,JKѿ3w*YZn:)z]8ĝƪGzӡu?VxpsC|X_Jt|Y0 wcJ"?9y! W;W[xh?c]/ӌx!sp{@ }+9}-vlC-:) +\۷>t(ۏN0Jn]R3OtT?vWOʨ;YP6rn9j +쨝SY2նÙ'>n[k:+;|L8/`dCX ?c}gϴ\Oy:Ĉ;C"=+d8{{ Z9:OփOlwx$'jYLE,(w;?l۲_`5rӤDt cFk + + +(8'vM{Ҳ݇"t-ļ QȢqI~n@tX29XW:kn"pl>0gavs`o<ĤC:>/6$/f_)\i׃A{M/9iʱ:$e,/5M|eҎL&SkwjosA|gb.s.&ba캈%+'ALO:p~[[d!YUv F%Wz~O׻VC`zŘ:VwI*4Sp& X7+Ӄoz讋-U{ \> _8 vAn-}|zmz&sQI}-8 E~kӄla0I*˵ ]rskTlR).5 p\ohvR'ioOm&vG\}(tCMtKӕ+L*<*|28~;K'X$.c/PIn[H yLR5zhA4js?vJU.. UZզ0Wn)wD/StGOqT8*aSۭ+^\ N-L,zIWe۾iw]mmP7$Tj~SC#X-?e'Ĥ~;j2YWO!߱) [#+Խ' "t4U PcTFZ-=a+x][elȩ"77EmƩտB)?O4 +endstream +endobj +734 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 733 0 R +/Resources 4 0 R +/Annots [ 735 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj +735 0 obj +<< /Type /Annot /Subtype /Link -/Rect [ 101.433071 423.873057 101.433071 405.123057 ] +/Rect [ 101.433071 627.273057 101.433071 608.523057 ] /BS << /W 0 >> /Dest (cb163-1) >> endobj -734 0 obj -<< -/Filter /FlateDecode -/Length 4749 ->> -stream -x][q~_V~ p. sf󐿟HR3kgЧ[Uȏ U;S;sx"&ooR?Y]@G]_wH]ȫbtJ_~H*'QEԌ{err)ȩ`F T0(Ux3S gTR`u0Dvrht锜\*:i=9o.N98-6 -,l`s:[ӂt(Ndt]tQO6cX]N:%dւI9Y`S:(tN'lduj8-V'̸E+OҹqbX.3p\0* ,xWjԜ+UX.q0I8`~tY]D  -) 0 O"IX$qxC9.p]LVk xW=8._-3NB)8xWH0 -#M O8.`q f; \cun± ,( pc+آ+xSl\-9.M!q1*sj -tts\ཙ0K = )K G؂q)(xN8ӅNJ -9.*`DSs:#:3p\q V`JV[@br\X:آ ``37=Qx|D&s\N Xo*qeZo Xobnjۨ]Zoz -. --p"3nIXo8-* si8.&'c3R[2_wXYÿZ},7 L @`$? XauHJf\Ŋ9Z/6^x~ -}y aou-aol.4Yda3_1&E;yúL\klgshuDz2sXǪf]8ٛmiX`bXށئD!%u!փBYuY)t]d-)[p]oѕt5$vhPfun7R{[_l݃a/p\^p0ـ#dW),h5?lRC@;ۢOӏFYbulK#Ď9b]n#m㟬N)CMGU %G|]\iˈK{Ze>14 !s,yMonjarQ|e>U$S/<w_Џͣa8z'FzknK|{/+;{":t;x -Y{n!=Zvk,3+] 6&ݡGoб&z )w=CUOO;Y;}yNXAˊ[5i -x`0ِ mj9uv:.x!;N{Y\]1 's:Lx=ugF=عSœ=zN.p?Ϋ7 XڋQy Yvs|$X (Voajķ}ƼVx낽4eHc>rt-+>> -endobj 736 0 obj << /Filter /FlateDecode -/Length 3800 +/Length 4668 >> stream -x\ˮ#+6`d_@E AFp'8~NJR;׆jTh\R,-%6'pt D@ɤ|ǧNO>;g[)%z? *&rJ6(uB0)UtX!KU\rT0ϊ* RU`O5p%$E,pZUC,3yE炉31_T]%LLtCt [BNt)'Ma EH%1:EeteU[lN2dfUW9KLd5s&갢0I1):[ E@k:-OJ9+&KN}bU[0[l`%|Jg|&Ù>)Fñ$:ӈ,l 5& [+W*qy؂ϤqmhѸ@lӸl]Ը@0j\@`\ʑ5. P.T4. p.;5. .{Ҹ׸@9j\@]bg5.`.j:k\v42i\]r6i\],#qfQ` ٲ .@%5H0x\>Xqw=qb?Vq=t4.@c#,Ѹ w]S4ʸ\2OF\Yeb,.i\Ϭq8z x<:_!h\8@7,ꊱ%g x5.66IT]2Ӹdl,P "xh\6i\:Bk\:,[eM#X5փ)4x:̰Z+nS゘D0 -̦5.BOEqAP-X֦P$[{ -4.@D`Cn`  RԸLfraָ FUEor] Ki\XK k\ -lRѸd\9؂ [D9qAѠg2ո{I c+̬qAh$TԸ;M0- 0?`&9P` r [L [i\Pl4&k\Z ozָRYBMlu[(~3i\P( h*ʺ'a vte5.@&"z5%etx70"2MDނxCB|+81ߪ ,*9 =4Yf VtVMX/1siLQE!g$Y,}sbt9?/=ϖLY8KiF|e ; v|/gnSf9f`c+LfZ~ܯ8NƆu>+l(C d$-o -\8g=`><$͇wΛ΂ΝmYT_m.e~9ɧU~Ҷ[ kS\E;|hjӞo1?_lħg`JqM,)X% W)~XTd0.a{NbG~5QzDsZl]]kN[{ĎO?QO˩;<WI/E O͆HѸADZ&;%"2=hlAj$ؖq7l<;O. -# r{!orjU?0[KjF+@tHjg7%\u^sǧmK ݭɦ%dj_isWq=el=tpY -(X0u@qwfvMSҸ_5{f4 :۱mGL7#9}6\V= ɒҺu v D7wZ+!/Mwy8ގMk)B2z}u-=ۄiXwgWIky<@+\U/}uucӖ]9)kw@?my@i.uHy圗;pהVہk;&Sti6wΣ!nǚ9[3٪y՞ϝ'^y9+h|A\áN3\D̶M2T/bΩO.jӊs~EF?ggw+~l=:;gxM/FFhC̓7xzVb,_U]e.걇xp7y8W:~,evgsJN(lē䇉#ʢFùhH;"no%w}ff>so%i=ϲVD K7OpYa2<~Λb1o#t_CҬ2yJH?SEhRaq/oܺLYw6Uؖ <~ˆǽ{uۉtA]ӎp]hpCxF2:7aO^!y`ZrpK>MLv-"NFq:tXe3c'm~d#䔺*"i<f7vZ6(Fxy}&ǺDڨIFi06ӥi9txhX{Ԃ4zh4jk0vU:F*k-jS\aY8ZLѥ?#YiYeZD- -#S:KX2+8nR%.mnH쑩EKιΔuJϒ q?(G.6ay}K~9IĿ`PJ J>,0Ati߾8{ZGHkοUֈCQ%29vQy%p)q*v +0æ8̰ZGFaA* T0C%Ci)Y 9VǤ Щ91tIx]t$s)k%-4oH4<&cD:7VyE%#eLҙ9N +V\s7 +{>03~Sv?~BY@:12iY7ui.msMW yiyUx\S١s۶Ğ8m]J~N|7Q^ +mm_G)`tfB/0! ^A +5Ŝ"\Rݴ):9S2.˜iAr=YhDn]btQ*(Ē8tKc}c@J]GEťzԭ`jYk2hhWphjP-4s84n?gu7:#jVnį4!6-_tg!v}4%} aVL[";L|KĐ?[Wp^Gg% Zo}{=U>˷pKtqq>g:WĬ\:G̛g6;@γ }۾?bkv9zͺƱ%xrvӥ?rL#ڦH;~k7|Y@iwGG;䑙+sK;,֝~l>3րs8nz7q/e +#}dtС߲1cDoEcuimHFWU߱]7vXɧ s4uSo߳8KXF^uw?uΆ͌K+5:CԆ^~ki<-]AgS>5-Ҋ!ڊv97%o9Gsa:b(~{Z7f<}fYFm-#s8d?F|/:GЇ6\5]U~Pѐ)6hez_lg/:|M16)VκcNM/yߓzէm qr^h٧k9`-rxC<fk_kKwX4̹6{?ǐѣmCĻXwdv9ֽ{F6g>gy~U;; U~co;786~.u+~aaz/jO^{轤qBٓԂm;7W*lZw9ZR}!ֽ{2s7}}'93dJqZHg}zzdg!uoMy/k#2:GCdx'Hn3y6w;{;v=oRxgm3 %O1Gs8no[!xGqgáq?] ={5QCroj;G2u>]";Yhȍ~߳vq^_W}?e\:CmOF . H3g'9}gnOw$RO#. ;;^$Vأwص\V_g-z˷kbgw9b7ٍ=F^ tМvW.ѭUx(=w[WF:~ܳ#ݑgYp{{>K%SoX}*$:Cc9ɯ+ >֌ @}61dz:C~gU *zB(sފ-oq4TyU0"8 SfxE68Fy9P#<_`kM!%C?|U6C~dp=#9+Tuy[м JCppX†ycT'wcĞ\+0_N~xWW'}Jڞy?jH~(UeбPsx /f`__u}m092 ǓJVϤp}Q&~9巸ZFl;Y8~\VUv 9~Lƕڕ]߮ce)d\f\^ +5p0㑯8_lҲ턭XIn.&ֶأj&ӮSdKYp /'4kz +,*ebTRWJuYd[̮XdkT1ˉ-7Ց +TlUSfJG4W{9"M8<ee$3lMrr)WHWGlxiXfw@T43A +vsD徲z@ʒR!TRQ23ҵ&ReDR1/T%XUUq?+P#\ +嗉TKc^z&;_8W|z^" 4Zծ5F0B7}eVv}&^N?eN>x;fE=_^jv]ǵl+Nt%o$; EX jKhUle]AC]ǵ&|m[uوTAURk}HĺBW+Czƭ/]/VGѱi ДC3&Xz98Mgڒ|&Q.ږth&q@OC`jM̀Ԯ[:&EMٶSp\`C艭=wO}4ٗګJei%<^jC?=k92y[s2LurhPil6jlhY(*]@&1XtpőP}&R;Qeūޒpd+Y}<]4E6oN.\mVJ̝k.*?C&DP,V9ew'zFzd)CXcdPۂ /Pm9UZ%L*ќe0crHÐCEWiTlj]NR( endstream endobj 737 0 obj @@ -9362,20 +9389,23 @@ endobj 738 0 obj << /Filter /FlateDecode -/Length 3198 +/Length 3543 >> stream -x[M$ 賁) b drXwm=9籺$9ClQ%QD4LyI Z|y:?Qoq(lS9Ԑc/-jϩ_wE[zӿs -׷*Ju(#9ԚrqD% wO5r$ -5쉠Q,5CTx"{(ȕAbF/,PZOݕUbM9*1GOC)%7O&%w,CEȓAV=Y.\\tI'%:ݑ5j P:ܛ+QQ(ܘɓ2|]" -T#KХP d~<x"sm͉֤ѓeRW]0]AAyTk#8H@j=H@9HY0A,cE p 8AT$a l+ t+ԣ BM܊x\\R Aqu9qvYZ,<..3teq1plqw9R@qf5Z# MK+1x7e [)S@IR?f]PH=d=.@c!!- wc4*֋ϕ+,-b) Bd.y\XQ+' Eސ=.;o!\ו@5 2x<.*I\Y pq8P -x{w)3{\P$H{\t<.@^։i$“w)b=xv -xWM JU 5 `@<.(MBx\P:Aϕr reEx\:t゚ qAM)BȾt.=.E<.`?zBkW Z%`)`/|tY j. {]d{\L=.h ]f! Bc/ S{2!g6 4 &<.f;{\62Y<.h-vy\tI<.o~z\ S &{\I<.@\~y\ЙωE.%#EqeISw&ɓ蒺x\Kfi#ws3y2.2q -o"/llz3VȀX{f@ _#P;VS,Fr |L8vd -ܡblU~9V5~|ןO_{?w_m'eG}#k1۩cN0k2;Aӣ.ȵ܃۩^NƶcG;䵣͠3_O,`Gz,(\ Z{9~oXT,kt#/xD5~v8טjl;EfƎv\֌>TmCUyŷC >ő5 oE]Wj5C \Vׇٝ&Z{yKjΏ_=Xgg`7c{ YWϏ_>#f~ { >7>/|& _%~g)~OlTзU4ϯN_~ca>cyr{OYnr}v]<}GUrk2uwk>v8¼j_,E/T]n6z> \n6o_on=o+;1cfV}۾Qw^Oe~ogtu1ԭ,:l k˽^6 52Qbo eפ*CO_>\nm%O֣o^f7n'zNZVf #G7fSHRN#dئ}]У!>ۊnouyo/m\vvuӥFc^v=fԔWm`ٷg9s yaޟ/n=^={_l4Ͱ̓5~h]5mH([p-‚'), -_i%qG"kuWsZ8)y9[s֣}X~\4]LbWjkN2皚b$3mkYMne؂BhLߡU*l_L{:؜H/uij@sZZ{FN}%Y{Z$#MX)lgri(+_3PJ4g .;sƣ^jv-lrɂnufHaFac$۪7u<%ײEf Ԃyinl,?^8:7ky ݰ^'Z`b[2^K4V]K:̃(FQ4AMuH4/v*X2FhL2k6 -S)0ۂmXq\F(:}W΁): Gy+cq9|eX -G c{l;: Ť `4b:am͵R9BvVPW+̖x&@ٺs]Us}zjcc=aR̔cߗĎ{?IHljoIp*|3_zL5߸*\!߿uryx>"n䴽fVQ5my@zG(m" +x͜ߋ$篘geIU`Cpa &[8!~-{3]RS%MϺϗev&"/ON֤`o)X?7Lp%p(J&S!dIc> `w=bf.t DcAw]AS4he\.QcAw]b\ˆ+l\EcAwHcAwϬ7^cAw!Rk:pb5pyCXw0 7,\WcK  ,yfD%Gr ccj,.{X]4Dp2U[({kòU4Uc=H]0Úܵ6ܕ &d^cAlJJQcA,:|.\B,U[8$֦P -Ƃa RLqȾl-5d&f)D0.zp2t.i,H BXX x#c,E&{d$ BƂa Ag2X$Zӱ}fX9I5`` R:Lh,f;h,MlsTl r r-zMo&d| Fd8tj,(.cYc֥7ƂBMlu[(~3i,( [RU[4e݂IoN._XcAQYc 7ѫGYI=.wC44j,lxCB~+8zb`ހتX*g=zh3Q=5@XYi"$曇qO?Z~KW~`k?}8n2y{;V,fkK۵^-QLmoeޡ߸! >L]6b}n6>}9zN~;ߒ·;}U~n 7\i\}ߖk2jmIKilcOڷY0Η~uWx}@&羚Y9+L73<0\;~b +K7Ͻ u&ؼ`kZYŗ8ն؜,myxŃ_ys̷y;+̡qO#?qU~N:ª« J}mVƵqOO`}uޜ'NpiEL͙8;famkb)POCnJPU铎uw}:ys>};e\cQ\|$m +5RߚC3J5ʼCNF>Uc+?wpgv~ngNI-|eM'' /em ̇+[; +jW?Ōa;t/8MՒ)xz ÝuޜWyw#j^yQ̒k{{p y%mnB8tԵ~+G:oΣn>vnLٙcށ##.7ښ=4ޱYC<1Uہgs3 `:o+?e,?Se;dKP۵C_JykEފ̷xHc<ȴޗC죺MO.M*}wq8-~OD:tn^Io +hyB'yS3׏n3b|0Ѥ|Ń2;%Sz7od[/mKe[XaUA%uu(SNȽ~i'׭֟ԗ#w퇭0CpO<':my9TQĮN[֝\(ھ;cqZyjbpLǓ+ldsvg_/$s`Eq)ֶՂMv{)sI +noKkB}Cj5ym-DkNJ5;qX+ mWb e{bGvujg .lCe}rB4KT<^m`TiPK 6OrR_4c2~5yoHʕZN]Njf*RW-u))Wdm$_~ֈv/2umSR:tVP]ongKSCYe"4gy㸹<دz'6x?H<66S/; K8^؁)ttAJ5O uM,X9 +m5uqhw;C[pYtnΧQڌ;yl| +/K`Y,k']mvA ci|fLӯ%y +M$',w/|}}o6Z֝xd|XWm B^6TohqܫZ5 uad eŖ޹{zsj.e:!<4+)C:쇊a;iC/8$} C!ut-w1A +L0ӲG1wfr+@ M4JۍOr-Y.#ڢaQKr.FW +S]5P4\@fMqVe㬎Rj9E:tg bg%J5lZFwNl/rɬXI*;k=ݐ3S۫CW5kg3:hrrP]"O>9F0kp4:J'"d a&'B7 bh Z-l~ਐkr .l$YlS#.Pf 8 endstream endobj 739 0 obj @@ -9392,23 +9422,18 @@ endobj 740 0 obj << /Filter /FlateDecode -/Length 4786 +/Length 3198 >> stream -x]ێ$q}gK>X0`ȒA ݵ#?udVdeVOk;^ 3i?Ȩr t|:}>iƿbqQog)*orH.z1_wǜ9X*r*T*m^h}T(41gI3|$Kת3('/`YUqת 3l4$`> -*aZ:tƫNRYEL9"o$]V!$txC%l! El):IaEdA` ЕDlAI9 N1]'紤3Fy`Ӊ:x)DAgaK>:❶OxSղw;팤H`%$ -)%l%lr%lʊbt %p@gDNOAbg` sElq$.p KN%E%|K fj ץ@8P.%.p\tQu>X hQ -8#%. s)` ,qQ9uFG  7`Tp$.VMIK\@]4I\@]1NZ&H37xzm%. %$.PGxp`%.|u0eH\&c|lLA5 '2=.-zYI\$q8^aFxq%xج%.] ^A`~SF.+SwAKVJ'0 -@2F*qAbzI\:⒕q tp[*m FXҁwYiSY`0P! -D*$.YCOk/qAxP-I*$.8k%. dѷ<-> ؂HQ0JHcUIJt-t&J\#)LFTK\W.I\33$qA̰"q","sIg` l BgD$ ZXK%i^g& šp4&$.bK\X:[Tp3SFf!okm$ӯ0_줠iO'tk ~8!2]hZ4 #u)Ǫ.PA9l%V+-mn^n^U/0П2zoT"5Ίp3`9x(cCm0[H84ˡHX#4 TЍcsNC 8b^=״t%\@~*XZuMBZ z-U7 -GBMݫ#$ˑ:;_HvކOCn:ocso s7ѥXܮƎoZ"{Ҽ뭝iLUSF燌Q5vr0σ @Jq9bz"2Zj$m B2/iDh.Bւ^<0wXìZqg,?t<ZM^kWdu7PFNYl[t;j(0B9+QXʪMGgF[թA*,h1K\7P_RC<tcWQ_rTMR0* yZ9-¬6\֑nވ[@.wOGhh cW,_/FWx`AU38`C8xh1˭Q;6t=f$ou<Zw{zO6"z~$](["it^@+3y[=%նC4,{\i۴ƅh|,ϣ!8ގE⽊gq0~*^߅|A7g{M|߲ytVߚq!c]eO;-TCa|i#wN5ױ<c<]c&\ 5Gڱc}]rm wK6(`C({zƟ3|v"eyhJ;`?1=7]O(ȨJ=R'-`y8TDWO^=r} $Mx,!vv>󰆮 -)?Nh)/ݿG՛5s9~%7uY`kgTI;;RiTP4*ͪ<HYؑYq -so5_~nΩxdo3z0ϣ7<i*O==~7p݉/W.&:߰_g0=fDDGkcCF m<zwUメЛOÏ{QW鞄6Qm.nW}<؝x6j77}=h(6z'q{.$6¿}j|eMo\98̆$;0>Tpu\(_hm9 üW=? M/f*}i't,{rWҗ/zIns|0|u2z~!6\ S(gr~I/9Rek|#Sɔ5獜@[MA_GO.:LrPꡋ8zů'~ b~TŽG"N^ YG ŵ5l|.ȕf!rs-kef1')7_f -A {4b B=TŖ=ORo]>vq[ պUBU{&sQI}M8 ">_JEQS'a@.trͥ6RJ=k=MPwu GD~#ՏK1Z7Jx9yjLԾsz 6q/]S*fDIyC R|{ꕰo6FyhCR=]&ƆٱLBz&ݖB:t $c)6 uMVq(TžAu!v^ʂ[]wF!V*b~tm nH;qN;4^N9i:o sfoH;ωMՍ-lօx e領XVmؤW4yځgםkJ4(mе =o/^l̗MKWǧ*\e:קP$8iҡ%;dX(. -sla&ru=OP8kt]G}Ҋ! B`7^+ {^_<ɡzK7(m ci#?)5ԞS- Wz/)oU$j#QdGs5J bj*IEjHoA I95XjGQFDP#\Q$+"$ɑ +^|jƇjù; Z*Mt zuT]8,{Ón/|+|FY͈!|/||n}^L@KSwOlTзU4ϯN_O?0|">#>= >/9oy~3[pdޛ|py7*bX^"Hmf|>m߾zWv<ct(6}򽞶ά:OwcK[Yzu\֖{k{l,kdhˮIU(L}KPKğ)GzⱝZovݲ?WNͺFnzͦҝGȎMƻGC|e^۸[oQen|K3Ǽz̨)Rͳomry~)ATo?ӎd#fl1s:)岨q>#Iu2lvg99VO?ʇ&C#K,Wf~Ѥ^o$D_[ttxL]7D1eZ4+ootf6MmI*ˍ{ Cل}*ô?]_{Pi!&z.g}؈%ia'kgf-e}zvk +{?a%Poh[_Oz RXd- ܿlK\v9El&@׵hq_SxLNj(:v@7k^?梁U vޠh c#W9/4GӷQ¹=r}>f9MeIOin zzniK4S9?f=:65o{pGkek'Jg%Z*gj6j|_>2@dcx\.[7ʬ)-ef%x9ۈEƟ`036z@B${L/bl2.#wi&k~V9N!soi)s߰b60Dڽy^5RL46EE/A)pfܦ:6M=U{JƎT:t +rg;;afEv:y' $qQnd{w9ʍ61<ba |S,9o7Z~S<--H]}}=S^ֲó'OW<ߥA>ϣo>kޯ)xY$P66]zaH 2dNiU i$De5ݎ+ZT={m{# Hdr +#;ܧ>}?-<,4/XyZ*m*;u9؆1{8=qzMߓܘI_>ԥ}#kUF b9 (kfp;(+TlbEʔr?uUZS%LFPVz+{0$uZPT3gκdVieŦ3u6];~G<TˇBtY Zs.,w-z-Be; +2gDO/ⷙ ]\ZcɟDf|CsyqCZmY{(Vq@n7y] (l93(p#f< +xLYOݺ #u}"=s:r(4g&qq_۶xRX ?;;wC.{2[zgW#o)H#[~ޏ,ET/ v16CR={W|W^~-hz|9l}j<&k\SZ䙙ܖ%n-vjS}ڏcm+e<k:[ UW]*hށ6ojztք; K(i\)QUf;Rv~D/J*E:^Ga,@.tvMS-k*-LiP6 u[~EZ#ʖs1hRZ7f%]UOl:k\\^/]UUK Yd6?RRfCSߎZ%UMGm.|]? &WfFڽɾxK+WK/'JxC??cm-T˲4hzvزM \_)٬2PTLY-14K>(R1EoiJmD_rˈW%[ 9S-e% }*ٺn]Fkw -2U-[|w&T/^t7=8%g]4ϳV6&t@֪]Dz /PcEWTy-)ka)j?P_vP= > +endobj +744 0 obj +<< /Type /Annot /Subtype /Link /Rect [ 101.433071 593.554475 101.433071 574.804475 ] @@ -9434,55 +9499,25 @@ endobj /Dest (cb166-1) >> endobj -743 0 obj -<< -/Filter /FlateDecode -/Length 4530 ->> -stream -x]ێ丑}ϯg# ^60`ڋrl,j a) Q*;Bu"x '!K_/Z=Řۏ.j -N_)(U+&cPBr& 叿m]G_͔7]%,M!JP)Mʹ)㼠z-$` ح* T0Ud* T0C'VCD Q֒tM%ѓ$QH:ti޻(,lqIiI`*I[, 3J\r(q v`JQ[@`~fI\6:BJ\(qA(#qA₤` "> S%.CIG727 6 qA!DuAS-8 M$+qA>73DD/bo1]u $L~W ^ʘwQ(PoS - oĜ=4YF/f VJL(/19STp1LX}sbSlΏ/_~/( In[ M3Ie a#u!u#5hqIe#r}Z ^toHl͂bؾ9(CdvW**Oub΁Kf>%6ָ/OR˯ghM/iЩ'<Ԕo2A旟at0Y}ڙg\Xʽjɷ2ǎms\ޜկ|?}ZD3ALwxؾށ᷀@Bvo+_-. o3gdN-ӻak|%a0mRnĞ5nVe[f0Ȝ$Z"dgC{6x3Q=:zMZW]r9aKAǂj׸A;wcxOq΢bsV]oP;f1it61kc3nKbv>W0}82aQ#nn33Ĕcy/ެnwz7DHne~XCxߧ_Rlܬ8˞tH{&\) /v0;cp<;(f''<G-c~ NHz5'A ϠOlWVA6nRS}ۄ욆f+o+k܅*ʛ'<AQ>\os"14t~ٛ-"6g)MjQ>uYqN6xGc1픑6;=;2LWt7lǣzeOBZ}̋j.NQuCboe^ڪ3cQ嵷1s?^xzu>.Zژ{Yj匝pFa=s_{c&m -<*L3ˆnym2T8$,C,L\埴LAU.4oۮQj륱jUt6ŗst9KS8iF9Cۢ"42SQS+ZAHsvL`o;aUԋ.~ 8 eu!UvC<4$WOb\h\\j/j!*g_ Bz+w&)q7S6CloW<kRLBźbc=:؆wa3f_˚vA4JDi>6UGר&#fTjRWK m"Silz6kY+l+j9At\J^5ՑtSl/n, 5~\sZE.ζoҮsrz\H&KK)',*gpM|жA*1ٯz'ym6z7ֱhzY6\:Y>^:*|&VJʆCej놺&Vǧq%jbנw;][{kwb߸Cq mvVvF5o;cnH;q]ʉǾ${Rܜ!g>xke_{zǍjlaܓ忖O_O¶lXF]c/*7U'ZR7M˅!]# K7n(Y\ƮI\ݥCk (.Y[23w҆>oTP]0"_RfyUVAL7l54~xy}/&Q{qi,m'K\e9tujm[{Ԃ4zhaWL{*[uZE TC/갔;(St_H;>+m)ۭEK ݩ^ŒQy^Im/IUۮnvC|LU6%G\g:HWɄ؏(:WTb6Ȼϕl3"5W{tLH~l%>쾂5U\-)7g=o9TLyQB2b{QޘEPZγaB)_ t;D -endstream -endobj -744 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 743 0 R -/Resources 4 0 R -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 745 0 obj << /Filter /FlateDecode -/Length 4213 +/Length 4458 >> stream -x\Y~_1D(^\!NAhJIVwJcǫJUZaw=aZ w!Q/ V{|аDÂuOiq& "pOU24-l\JUÂE -D.hX7Ȩ^ÂuZwVÂE5,;@7,\WUck)D.`kX,lllHNC5,H]aA k eʃ,x P׀UbŪHkm$.M Rf/@@*kX -sҰ U J> قY*P& PXjѰ {װ {ȂAT:T]ATLD䘰V5^d+๬aAdKװo\ҰbHÂ\! BE"S<*s l P眆CT_LVdh%jGEÂBpa;M ʃ, `lG fYB$ J,Y7y5,ӰdLְ0TWaEÂ,)q[Cfְd(QTdAT&a tx JԔxY4,@&*zH~3XL4iX 7Qj{{ ,,ꉁFV{zf`GR &v%H`:X/1:`r$!#g̋ Bu?Yl9׷/ goDR4+`{6 #ӽ-5Ԣ/'AƶctKPB6A Hwg1$wJu.zN5r ǘd5:ԃlsta[:m]ֳK`Gt[[lli"aemGG^uIn.+֘ur%ŧqC!IGԽeL8(>Tt*‡ -Z1Ͷc:I>TԹ9ԎKO"Kus>~PPvz@^ ބ_%~bO>?<#bR~ { gd+9KO,SrbSh%<'w7[6n)ŖwN}z} δ -և>]R3 ͼO5~Rl߄< iwTJO_|?|?aNZa uko,--,JzBkeqe{YW%ڀALUx<8))|qRݺhzkڹ6sdɧdNN6j6Gힺw",댗U?qBP }/M}'2N[\/rS״}$iδ ar YsZȕ@&Zvmt)ͱbuV۴5mӸ鄾/sGD/(o8G:>(Ho杹6:{/g6p*!n2"'g? ^/S3H 3HѸd_Mo#eE3lDێjW=,covyVhu' ׽oN&۟!9M9M~9s!.% -ktqo"ŹnSis盺->ĩe!{Y/-ơQMQhw\blz-d{lEɉj>9?찙ZT/_C0N:*V +Zy>u:7bP5zҚhk?tg]T3.]C 3??LM;w_b[t5[ti'Fm7SΑsO%E*߮{B!΄e^!no;tw[Q{2;~pzKʮ'\>?PQn$ oxUj~.f1"}[BH^8 S~ܵeI[RT[DwTp;|EP]QW7ۭ^_l? t̂_ـLvGH sz|Cwz}}~ ^6&wpT=1Ϟ+moΛMl³?Ogn$ʑ<]؟ć7>5"wYi3ОBMV<5&OxQ~k0$(OEFZmC?\wB_=gf=tO~w?O|x;gO<35bvg~J@5źePFP_ //kOac.I~<|H!ͳ'L\?1.Igp]?l>pػ3d{О2\&Vܑ̫ƭd~R1aJČc@m瀳d #ъ&SCuiRuNE"^N6쩏*҇vЂj-AhI!M+ۇ&sYX#hW{;t9TZ(CWhOܒak[r4"qۍqb$1q/KWBI`w8<탣R4plVIꐦGyr9r*tG롱 ULs1H ؒAfX) &9W~ܐqjc䄻1$a;>߉hOf/}Ivd9 N -63a//}R..rpY&/̔|C⊛Δ.yrP\ l#&;d'is QFeY$֓6ÈB'( l gQ[UFYt ocJh54ZybLt%0$ +$01N.'Ivr%LʓJ4`\Q4tFKD`l.HL`5lq$. l ,֩%.[tpaqm +N kX.{uF ڵ. ,x:$.p]kSXdu8*J\FF ɤ$.p]wM 1h%.p]ik (Gxp`%.| ,wu'iդSxN>Q'qa˓!K\ L'̨F3jK\8L&]Q'SwAKF“J`Q'IK\2P x{ wVUa-6 @a+i2` +IU=,J,qAҴ)qA$0I8! +6c dB>Q&\{ DlqI\z6' - -$.@D0e[\E\8؂HQ0ٔsDW%]0SkQQ݄XK\Ԕ0%.O.I\3Nₘa dK: [dK\H:%.H  UfP`ZtN:3I\\(T+M0- ?`&9X$.Hr3I\l1H\lz3J\lA'qAVa0Y8tJI\uz8 0.i$.Va%0n ތd[.=^=KּՆijdS{X|2ѶkRvfOfQG؛U2]G<VwҺfVsZ2P΀RޗB[joȝ6;qLH҅u}o5B Ncy׃[h?GSE#G[D6#"kGEd<ݢF(n<"oĄ;8^[Y.;Qo}~_~>6y F9 {m[Lbπc1 |=[avkE~0áFzs>5e\k>i0Iww=ph{+b$xe?-\5H䦷pȽ~Z# 4mP?~J}u`Ә;Zy4ckIGGPt=iw#P FDّ=ڗyD f#bIbyێ4p¼4"G?o"=ӣ<;V/ZƉo:G}}Z}C9kʼn1湶yamԦ/BA<=Nj>=yͨewĸ<Ǹw:G:rv5 >1;W9ݳ=+~k4Hˏd}}փy }Fs乷T]AftauKr{;H1<OsI"s0Nosxg3qzY|z<5Z'QƕNl9?9V߲O܈6-#F*C}y +y8x`quz!dKTZ ¯SsYd4`n=o,ϣ!_k`'`5[Gb{̽{Mn;hc`Cص%g5Zpg WO u#T㺗u :Ԕߝ:TFc#k'g{ܓבnR`Hx^jTv|QAf\leBګk3pe~m< zAry8$_qzȞqa-kRn9VbTц]+iyWL#b:ܱ{0ϣa:{~ׯaQouG\&1Ĕcy^wVR4ǙQhg$L4?㡂_)=& ?<{~W~K +MomF^cmc`_a߸w, v tz_Ȏ1&o)nڽ1.ZOX:Os.KK2m9a3tᶜ⹧6qcGJ{vKOWtϛy +A9PvAg}^WsVw(y̜wDjw{ae/F uI(myeqTvֶ$qqI쟫[]%ϒWw>~9%z4k[N +ҦśInۣ̂Y'gz\=cm:#,s9IB.sxP\-p=?JQ [DU#SKXQ:tsTު]bexGQ-L֕dt}:(s﫰 &4~6{MB}ĦAh</[ }'ơK,VpuOgV$(iҡue/-[I4דw #v,/J+X_=wOPGI7+,2/ۜctQoP+˲g[ӇF-cIS϶$RWeJD2UeXm +K$z)K=y4'z+aʭ3^l $N- endstream endobj 746 0 obj @@ -9492,13 +9527,49 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 745 0 R /Resources 4 0 R -/Annots [ 747 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 747 0 obj << +/Filter /FlateDecode +/Length 4211 +>> +stream +x\Y~_1L(^a`@yƒ`@C~b7YIj*:*r۝-~>u3Ԝ|y{zw&G?梱ogg)j* !\p?K'o7&̢`rFU.(M>&kX#ftdeAD1 +]8*ّƂƬ[ % +^h4w&5^&erijRJh<,Z"djgCՓCTC9 |RN`!K!Ap*JY@ aAEÂ%[xK% bZ 7D@.\jXةaA"ܳbn4,@jX@SA8@G\ p785, .kXaҰb|)VbIA  #enஏkX@]O>iXG1V]@Hհ<4,`ƣ,Ѱ w]ESbhe\IÂuSyո +q -Rհ w , 2װ w]@x]հ wQ7D ơа8 UyZ X [$*/8Ӱ`l,P pjX6aAZB٣ K(^5!lFjRh#wș%"+‚Pݏ=l4[~K$9A +}ߞlQ&A~2ݑ`=Z4$ؖ{Ö`it1Z&A~8al;DN\ɃEϩv4^NSAzm΁.l\zvnkk-M$ (+.eCYd>t n|h>$騚ŇCEPA=9vL'҇C:={y_%rT?e7kx M9|O +,V,{{bAJ@>s)%'6&Posyq5mHRlI}W>}nDlGAߗL;ͼak}HOe-51̫ +XGMaW/NPN +W2D}ķhd>>x{ ϭuZG 6zFk5~£/y~91'O:, ~yux(Ƽ{;oVQ2@qSاRt)b}S9Ϻ;=.s&嫅ޥ>׶>c~iyb_qǮK[mkknmRM^Ӽ>3j?5ۮ6$ /UCgc_$'diVWui]bڬ Oaȴ/[sIO{vȐ}#zYir%Bn9-™!]n!uTqn[f}_m:Vmno4tJsX]է6qM{o4c:˜ù ۹'Nt]柎/qD. +[ygq^ y?v]#d8?O!rW rA9|ha9w;ˢmhjF h\Xgeͮ#oQ}d<$y#8ǘ)G9/DZ{8ĥAm=зX8-qJba>-ֹ{0r|Seǐ8V̵;d/+84C#7vi +B?"KM]Ϙl(9Qg76^KtӋvI'^ߺ7RيaX+NGF +5c&T]Zm-jƥ q[r&w_~oLM;w_b[t5[tiGFmSΑsO%E*߮{B^ b"Gpo{gH!/ur>!΄e^!z皯;tw[Q{2;~pzKʮG\>PQn$^oxUj~.f1"}[BH^8 S~ܵeI[RT[DwTq;|?GP]QW7ۭ^_l? t̂_ـL~vGH sz|Cwz}}~#^6&wpT=1ž+mooΛMh“?Ogn$ʑ<]؟ć7>5"wYi3ОBMV<5&xQ~k0$(OEFZmC?\wB_=gg=tO,ޟzv‘t y6'=bz(1uǀ$gG.XAGM.$ѥ0oE0mST*յ!T[аBJOm`VgbD]夶[GRy*k횟LWe(^]w>_&bĆqKm~)҈In7[lj6vד bLj.]UN'*2KjN±9[%IzCV<|Vg6T2Aϵ 5cKv!g`$.8\aCrюɒǸv>Hrwj!W|'^Zb=]I&ۑd8(LчF:Љ_7? 2㩥9烬iHVY_:~ǽhn2{ʝd~O]'DO'ٕ6voy{4 콥Wԡ xxiq2j>~)B +r9,fJ>!qMgJ 9(.ńuJRN2T4Eą(#2L4+ +%pr`rrҺGz0u@>HXS.rN_{N 0ͅQA- I6D14iceJkj)bR*CQZ%=j)(JwsuvdQhIT-C=۞2h +fejgxh^>>ӣ?$ĕ2$jr9kKJWe*h}U$r&P6;~S.qYV)[u'\{Ug;lB2V-Bl> +endobj +749 0 obj +<< /Type /Annot /Subtype /Link /Rect [ 101.433071 265.954475 101.433071 247.204475 ] @@ -9508,39 +9579,34 @@ endobj /Dest (cb169-1) >> endobj -748 0 obj +750 0 obj << /Filter /FlateDecode /Length 3991 >> stream -x\Yo$~_1L~ p"N`A;Y<+vH -WjGXGge&"O?Ȥ@W[l.*kp[bBɤ\LJ]m{tl8NXM)QPX,^a`Rr!*h XƂ!sV\rX +x\K$@AFc 3kX/*U3;d0;]Ue/-lM%E>>Ȥ@W[l.*p[bBɤ\LJ]m{tl8NXM)QPX,^a`Rr!*h XƂ!sV\rX +C sV.YXÖ%aʃ ³D(=j; ׀ciBwb5p( "pWܦ1 e A4,MI)jX OEaA" KANakS|$Ys$Y2hX[M E R԰Hfraְ | Zxљ*/g)+ 2^pIe R,8*k< YdkXHŒ21ECc=8~zAW|[t<]׵cqOWPV{j!s=2jФuu[`W]kKNֳ$msA[Rtef* 'bwkZdl|届rdde?}cg=3WY#5օ1ydcZ "c'ō&[OmC ߠ L>b8bŊB-mۻ齝 X{b4 }^^>_>b1k)l%bPUM)~Ys]dL W/7PSF=?v"_d&G\YTχß-,J㙥_m- ~-Q vYtŅV_ b#,~XsY00˷cD#Qk{3~$9/^s*oJ_6sIf ښ5) -eZLo36\iɓeyY(riW:;icrXJgc",S;KlAS^g?{LD~'Scn.S'h+fCTtyl;݇ǔ~-}Py, 9BnM~L8<6Ƽ۲OYkwqv9M12GL4 -[u1"7尖B>^]ff,6̶R-ˣH<$78^4"F r -,> E;sDo*ZǯyVw%]>C{~!wWt8籢lvHbW\{}Gq0Gg &@:ɭ;uE9|M1׷ލTGBY讫qڞH&:ݺuno5IMM@ m g!GFl}l@'8F6^1Lm&[kocZ_@̦V#C&9\_&V9YVOƮdy!A6~]yn;Ή4M7ȎY> ǎ39ld;|#c=YL?IQvc8( чJn}LNJ[yh~u۳ewulݐgO&/7E1؏Dt< <چf ݏ;754Am0t8]7]gpxi27a/-NTb -rp|ĕ4.\vSG\̃r 6bAΓtՋbj2ŵ[SK]qVzL1?̚t%yWY[y-ٜX= --ν;GKhsvm2xGdJ[8k,{YZS+!6&|}!,HIȓ\WDZd a{JV^FΘjQԻR4; ׀ciBwb5p( "pWܦ1 e A4,MI)jX OEaA" KANakS|$Ys$Y2hX[M E R԰Hfraְ | Zxљ*/g)+ 2^pIe R,8*k< YdkXH:/εg{>WENʱCECGO2 3Ry͇UKXuo +uo"BnQPp5~͗2/rG<+e OOqUGIׂx78U廎~i};v7o|sU$\?o;@zGr:ʎu?}2`s<׿I3x`׿q聈'B[[ n-~O ߍyvF[in7xcũoZv&zѶhIF{M#|'Zs<4.T J*u\ō9=,BUNj?EqVi;^Up"Uk;';dwUHbQd|Y;[:O^Ӥozݟw]w?US,-sjc^ԭ߯?1XJ~ׯdϋ|UηkOXN7su]7_+_iG(xl)?gr hS;y:dY\e4}V*-=cȕv<[F-"ϞyqV:.=&W,~134.,u^Kw?<\1y؍}>w6b6Ĉ@ZKǶ}lyLGǒ/t{y>䇼/cSl̻-XHoCd.D3- Y0]7-r\k)Le,_oblI/ٲ<SPLrEӻ+)b pkҫ.Z?yJ^ةg58[‹3)IqyEq+:Xo'N(ᚯDN v:'xC{|bz,a}\\Tsˑ{}8L} k2 ݭ[w9fVdpm>2bc$:y1(dl6٪X{|g}Çj}A3bmn{x605Urvb0=+d$rF׏bqNɔ}K8Z?p|tFMrlv%6L3s]Blz(!6%Pv 8:^%[O1in7yNں4m%iR16T.uIҩ}64c3;5yl!fHەN!juw*Vyt-MCa>w+ae:#-Y})OvΈC~: Lo&iN4ePSnl4yG_"t O`܎>$r6;y;갦ieS6;fR ]cꤲ.D:vؒmNkX9 9tS~ؐ@}h's}A;fr;n.owFbj2ŵ[SK]qVzL1?Ϛt%yWY[y-ٜX= +-ν;GKhsvm2xGdJ[8k,{YZS+!6&|}!,HIȓ\WDZd a{JV^FΘjQԻR4> endobj -750 0 obj +752 0 obj << /Type /Annot /Subtype /Link @@ -9551,7 +9617,7 @@ endobj /Dest (cb172-1) >> endobj -751 0 obj +753 0 obj << /Type /Annot /Subtype /Link @@ -9562,42 +9628,42 @@ endobj /Dest (cb174-1) >> endobj -752 0 obj +754 0 obj << /Filter /FlateDecode -/Length 4874 +/Length 4871 >> stream -x][$9~_QHk| $ $#!FЊiEZx8/efTeUM0%t昳WJ)@wOZEX]hʛ?Up~;cs9;g똳U9k_EN+Xޫ+!, diϊr bI`%(gea!1LQ` 9ZAM3^(=H V%^*EK(aA KE/a^$aϐ1C, dK<YdKXO d i-aA6 % .9Ldo"mv(aA&ᢈ<) x$d$,!p$,xHoF1]$L@ V5Gg23qęČzb@{[E1g#I21kmLŴ&,٧9E`{f<ȌeA{1+Ŗؿv 6}zYɔwJ` f7Jdcᰄ:,DCHXI7[1|_ZdH283ed\ pw^~m<*|(#!/ArX -sCKWz'i5s#bSRu]se}λˊe/xa~Dž~h4ph}_揿?c^OSZ 4=/5MhdlqЄ9XM#-Tǥ+=n^*=k]E c0D/}:׉V>a6wßԜ ̈́Jy}CWX˼:O֗êڮͣNkCguI=c:6E]F_iv|q9couWdK|zlR0S݆e R263Mҝ _RV - #X1M;G9!ϣu -8hT(.[z댨{Bz]T/]^_~?P*ʰ)\V:WC@3g65l*_[50ExIjeɦ,zF6ӫu7mu;mW^-u];9g]wWkn1ʒYQNF] }u~%嵆(M0UwO8MyC&Ƶ ?/m,p8CqFd@oܝu4s -hr? -?S^|j/}k|#t2DV7kr֚P7b~;og rW}3#IX7M:~Han7,.2E5,od8[M@ܰnqU֛k(Z7 K*ggMMYaJp-mBꗓm>Tc a뺰}au2Ba -ZbEsOkpnƏ𩴑6kYtu.SUqìonfYg3\g2Ƹ˵袵׺(ȣgPF߽m[!X&+wH1-| nNÚoAz׾2\5Rlrr~9ݓZgi,y3^7u;덯[jĿk9X=KPeiTh<ߥL]KCM߯c|Ynfʼ:' sU^hSr֥D]˭ 򄝭K,~&J# )99%b&GLԿ-UuWwH焨Lt9wc2@ʥ"o3U~ -ǯd+.{mU!8g}E?C^bTƗ/{gAI2迆[!r@s`$pye+̛Mfp]mǦݷM.ёd[(Nе:jYPв/2w!g &u^7}h)C$8wy&1(c){$O*5MTV<ڝa2lmA_GcP[^5bh2$m<'(QBe\PtEG9gTf*?ou~{ȋ uJ/f:Xʫ4Ѧ|H&@[}Y$j͏DL{_/ϗ:O@)0 -Y4fb($#BqlxfLNXi|V/.܁Hd-a|\q #G/E">LJF}^rCI_|>ni3DT;s3/WLcLʜHD!9DZq&3ɬvo8:B $Uu"goR=kZ6صk_Qď<#ǤTPj_߽gg Xh4ኟ]~`N'{xd:_\-OVM> WWTk@־]A㺟!' k/ϭ]Nu[n6юlr"뛼f -!C6Q5%8`xʔk@y~ ?( Q|[b`T?N_ PjPFG:̩Y浅rLS(:d7#`C,F9296luD6#[wzR7S#~ pdw94R0[gs 7..3)o\y{Vȕח"j'2KիEv;q4HsxH6NOD'ꩻA1^0]YufVi:o/'t7ojM5§l47 ;շ}Bϓ@W5MΟfߑS3$r+'.'\mTUseK]2i63Ou -S_vQ(VhLo&NNzˠN7,F7LSyCݤq5:k%Q$ M t{鮱uRD cM6:!cLMt7Ⱦۊ<}z; f2wбm&>_N6߈і̦Z'luFgqPoVkG'~T}Lq/6gg ve2?Nt}{eʲ[vl]睌w$O/hiA6i>n4쭤j:w&Élf e|܌ {tmp-lIy8LƖ|[:dad;gi -}MnhlsӍVF1 拹a2sy% 罊 -`jN}}`L'S] ˾縒3hwh妵纓3p-hu1DMZ-NVhzj2$j)vbP>kϳҕY ngsctzdhaݩ4JFMn{AC06s_~q׺9[sƟYTL1j/2X8彊 Qb bH1('/ YVq{V6XdѐXED + OQ JH‚1hUR\H +[JXK@ IX3dR[J3Nt3F‚d! A M2;4bIZ83IX((v%,2A y0!a懃m/asDdq$,Hr$,H Xm%,mr%,㓰 M0doZ$aAv&Bw<$Jxwv)yY3w1 !<"v?%Y5;;^և뼻XbQw\XNp/Z_cj6:]&>u}E^ݞ匽:]).)뱙KLҢS.[t1HuX 0Ɩ4Iw2tD7W=KfZq|((⺣:{cPf7)GۭnJi辡xA[g21`Y(>̊f[u6uz&c\.Z~Үzy,FճU~Mƣ]Ե449waVjks0]_q9;P>aO)&=0+lHƓ|2x%T]ƕ 5AW|Ds\Ner&NY޿?0q:N^lÌ*Omʧna;d)E21[aH4|t  QEc-JʁbNRK/?-tKgf*I䯌6|o5ka((~D܁e8|z;Q$dDGu_/<4?8e Af>CMJ1O<'?SrD<̙M:_0:M8ZUp:i>ØjWI3(ΠHRU'{-[e]qϻu*X^;A3|L:J {}[{vpրKY*itG&T0jpNp%H=d[{/ڵd=YzB :uny^k}ls&'2n~kjr?_ksU^S"C V+}nLɾ귎H%FCQp u9@o?etÜu~͡kIo^[)jt?%쁢ӪAvC? :?b4!cˆ_Gd?ᙻuN.e`p35ڐGygC.eoYi uo>:ػP|2cmnTjƕC}B_Sdg}^h_ҹܳD4²Kv"OۖѫC<٠g u 1d&Mwδ/?#j=5ɳz6)/e _oS(oB0m8:rw'K[Hμ#& שM)5+5K$_a_`,A<8o'~`f䤇 *?|l4~.P;|1MW^VLuHߴ0;*ڎ/~p~_A[Q'Mx RϬ/RS2!&J&:{u +BHiJ<\vdi'rNG,15wZS +0YOytIP*;_TU +䩠 endstream endobj -753 0 obj +755 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 752 0 R +/Contents 754 0 R /Resources 4 0 R -/Annots [ 754 0 R 755 0 R 756 0 R 757 0 R 758 0 R 759 0 R 760 0 R ] +/Annots [ 756 0 R 757 0 R 758 0 R 759 0 R 760 0 R 761 0 R 762 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -754 0 obj +756 0 obj << /Type /Annot /Subtype /Link @@ -9608,7 +9674,7 @@ endobj /Dest (cb176-1) >> endobj -755 0 obj +757 0 obj << /Type /Annot /Subtype /Link @@ -9619,7 +9685,7 @@ endobj /Dest (cb179-1) >> endobj -756 0 obj +758 0 obj << /Type /Annot /Subtype /Link @@ -9630,7 +9696,7 @@ endobj /Dest (cb179-2) >> endobj -757 0 obj +759 0 obj << /Type /Annot /Subtype /Link @@ -9641,7 +9707,7 @@ endobj /Dest (cb179-3) >> endobj -758 0 obj +760 0 obj << /Type /Annot /Subtype /Link @@ -9652,7 +9718,7 @@ endobj /Dest (cb179-4) >> endobj -759 0 obj +761 0 obj << /Type /Annot /Subtype /Link @@ -9663,7 +9729,7 @@ endobj /Dest (cb179-5) >> endobj -760 0 obj +762 0 obj << /Type /Annot /Subtype /Link @@ -9674,45 +9740,43 @@ endobj /Dest (cb180-1) >> endobj -761 0 obj +763 0 obj << /Filter /FlateDecode -/Length 4697 +/Length 4696 >> stream -x\Y%m~?< %Q`̃qAzܶ 0C~>JKU3۷BQGJ*{&|e_fkr.)jMe)-q2!dR . n?:L)p˛؛S -Xd -BTX 1BbGV\rX -+C #@ ,k,aKH -䰎HAbN`"5&K4&&jbb!k<,xLIE'Y\N^%⠝2dueY(xśP2+QNsLޓƳئWyXQ,BQy%xrCƏNrVV[ sUdk"d5 -2K  g -\ 5p%%i8ɂ K!rUd5,C^eXpTxd 1I9 S*x`vjXXI!: <`sxgK0p{Tyax  2r`V 0jX[1.gҰ.kX]T^2X^!h9 E `(Cj4=,X s^4f p?eM%jX6cT^16AʺhXpT^Â|f iXSkhXRykX_AA  "0"V R԰Hfraְ 39U^& RbWl5,^d,z F% x5,H`hXWdCd,dAa"]հ ;ȂhPÂ2v4,^xLdFBE LR<а#a6?lb aANYÂ!#alSIÂB0Y8xDta֥7)(ͤaAa<Ȃ(&IE -kXPbfְa#,ͤwC2i<."ӨanDd 3eǙVȀVI=3 Ce*c"&,OU9$̜d˂=([|ӧ_ՓcalK]0+SۃY -,+UD/U1RbZz&bs[!HmԱcl,fG]+}!idM0IMoĹk}P&u6B+|W:/Nju'Wv !+_EA4 H[~W8r7=q^ž׺M?ײ?ziZ_ʕoxi/IVc["S~fˬo?nv"BUV^6oa })Y\VUqVFxdcQ"ױ%ǍvǪ[rtMc':w2Olr7J"Rdei֧kWM״9-poն e&۫핛qqsx^o>}}A#k S`1,k`貭9 COWב"JMQp &@KK%v:/'xdӃH -6o]ލ6i\\ ٛYhMx-^ö=J,k[ -laF:U|Gz]To]ޘo@V<@sa+<K5oe],oۻ: `=Hg(} 7֖R0#Lݔ:_"D"2l`4?[rX[ă&׉ڝ@gU'3ӎg}:xIr\O}WBGZ}纗+%h /2WCᲈ !~?L-ļ3&8"hB |Hp:.A&@5&: q*24宆CO(9e0lXƋrB ߔ4TM4C-6E$ʓ\Oocu{B -#-n:Xʛ)ncu~9%G%"Glh-6CdSNy9ǙǞ/WL$BY2XxD1",)4,+6&3ɬۤ~+"9Tk#u[J6jOxC g}]>^5% y`E!eJZG¯n{+s y4R)]S:$G:Î\h/նgX&|RZBulzAd<yfa[Xm@P{yy#3"W-sldldȼ0'k@t0 RVS୼G=JS|Q%d.9g+vz VI_>9f ( mSnVݗq - (bݼV3Oߛ)SRyHӪ+kfE\uso$-ϱZP5SgV)m.8R@&Mt˱ǒ. 캻݆=6Gկ[9ߡכe6 :d6ka}j .y?&&1q_վZ>&qm}a52\szΘj&HYklݿ}+xhMŃήEMivH5rnIvݚ{ldMj=o4|f>:kDGy^:kva]]ӗFz˖C|lzT}Lɻ__mkqLkdxe-2:L}vmn#YwiL9ly6gxqlxC$9=ݲfe@sl秉{m+~vslvS~+➗rxȒ=(ɀ[߯/ݥei\3E񵩳enϛФ|msMQLzC^|z<ךn°9mx楬;8]o f޴<$ƿ%ea~Z/UF#C&3B tQ3#YFOƮdl.vQBl28hpTK&b8in7y|桫.b}Vui[ =]ǂZSM:OBN d.'Ӭ'bnĽ\i外[[ }R/G4?DsWBLmNk|ܒ%sMyw ^NŃ~ -I)VPh7n'g2ꬪl4ya]_"t OMJ>:1F'6;y;갦ѳ*N/ySX^@P'MTxR{Wc[Bީ3Ltq{}mi䌥1B 6:QshNp5Zo15Z8ZJ=?Ϛt%yV⡬<^|liFKfڝʣoc߼y4 Ҩ%_¿W֎T'!6oQK3Ԕc|I0qFsx"J0d`qZ!uH)@9 -0w:Ml͡B6VQ> %DWR?ꃋ]D +x\K%qޟ_qD 0@&0!U9|n>sFx.*>WEvu3+2[sIϗO?Ȥ@WKln*Ml ? +'Jp)Oow;?7ֱggJΆބޤU"V&%Š`h,;>Ƃ\VXbxNYbdYcA [BRX uD*w +51WT^&71 Vc Y1d %Xfx}N/B=?{> ec`_r^BPgY""$|c7 + Ejp7c`1[>>_ I;${m)MjB #]Suf~4YeEpČEW^yw>^<}8!wӤ'o Y~<}_N. +Al@o`׿q聈RDօneD( O?/RhǓLSMr^K7q4[f~7wq>ӮʯB\ByGSn(p'{LNi mR*%ڈd=0U>4%KbD/`=nѹyRecH Q٤',Kհ>}}\E8 hҿ]u}ia믶mp-3^mmޏߗ@~{zߍ[cpN먍aYCm}IzbwPo1"8_Z/!tcLw5y8cl'DT=~nm6uY~0y{̜Ōڤzy5lkأIJmYeTϭEId4мTf+=PU򶽫Ӑ +vctO7~7ymm) 3tpM%B/b Cp(aA󃁸(иL %>I<_iK`rث tqf`x]u~2;zSi$ \m1%y*٧{/!}վw{R["w5.+mλ>ӮB;a#&Y,p0ȇ4 `/jPSiRlCO0wrH=(CA;^j8dSvh8 +5m('MIC9܄N3t b]IG_yhs269|%jhaޕ;r4^== ˍQv:E\^!I)X$ʞ6x=V^Qr4윾{~Y"B0q϶b3D6گ'?hsyrD<,%Ӊ_wM:)oʒHòroj)[k1ØPM:龹1*J?<[ϱtk>lߞ}XY^VR~d+j˯ǽ2xpр KY*"е>cIBx+i:\m| \iRmW,/Yǖt?A ݿY3 K'`%7lazHIA1r>> =#.r~>F&(|F s2D# i;{4sk1Ju\RSfpf `X7g#C撳~b;mScrh86%f}o7+k5Ҝ=?>!q:bnVd%YXM:wMFNbݲHZ%p \1u}n^‹)jdDL},Im Jos4Z ՛ZO{x^f#/πsLVZi#GϳGs4m+=d:?%k<e;4{Qϐ ^w:SQҔϲ>q65U5yicۿd^kX{31֧mo'>^Cm'ơZ&\s.c5ikfUF?ڷY<\fT#[햴k׭g&NDOJ÷m#PϯvoKtTyk^^_{祭6o-5}ldol9d͇؎zvGǔu>߶_ǴF\:WR+ӯm1uƴf=q!ms&?DL 햽vy[f =v~G6"g=Ƕo="y)率,ك2 ] +!X__̕_?#[ΑH_:] M׶|>$/Mq9ͧsv. ;߆w9m^ʚ`MLl{Y2Y1S/Vq &3f2,r<6M*֞Ԭ,A"^qYT'Ǔ<OQ%gn$b<<KmavJ/郡rxm?^Em4R?j*0S+˰K +5=edJv!@Xb%&3AˎGŻdi"#qg vgi[YEЭSU|,5մ$TJ >O +rR_Qk1?͚|ra!fH˕VN!]Njg*RyT-MCa>w+&Fȷ-Y>ה'q$類a`fz3Ovra/Ϊ*,F*B + ݤnt"kJ鱣k={픺7ŏt{鮱 uRDO' cK:Y cL&M}CrT΢=v9v|ɩϸ/ty{7:6ޓsduo7:C0 }Z;:WXdǽrnhV>5GY({?/0,~QG ױuC=|>1?H)6b_6l(5t?܄<Vv;Dvtġpxi2;7a/ xvG +7pp|ĝ.\vSE̍v 6bAΝtՋ0vөm9>owh姵{3-xs3DͣZ ̝rm:mhhdk:j)bP2k:̳ҕYnx=Z= +91:%{,Zkw*ю}m0xGdJZ8| ^Y;NR> endobj -763 0 obj +765 0 obj << /Type /Annot /Subtype /Link @@ -9723,7 +9787,7 @@ endobj /Dest (cb182-1) >> endobj -764 0 obj +766 0 obj << /Type /Annot /Subtype /Link @@ -9734,7 +9798,7 @@ endobj /Dest (cb182-2) >> endobj -765 0 obj +767 0 obj << /Type /Annot /Subtype /Link @@ -9745,7 +9809,7 @@ endobj /Dest (cb182-3) >> endobj -766 0 obj +768 0 obj << /Type /Annot /Subtype /Link @@ -9756,7 +9820,7 @@ endobj /Dest (cb182-4) >> endobj -767 0 obj +769 0 obj << /Type /Annot /Subtype /Link @@ -9767,7 +9831,7 @@ endobj /Dest (cb182-5) >> endobj -768 0 obj +770 0 obj << /Type /Annot /Subtype /Link @@ -9778,50 +9842,27 @@ endobj /Dest (cb183-1) >> endobj -769 0 obj -<< -/Filter /FlateDecode -/Length 2687 ->> -stream -x]dϯk咪!1`EȐ/6͎5sW}t;z9JJ="W1J9aQ׸+'Nj.J|h.r6z(o?~o/՚_7%gDUD9DT; V1[gUVKd*a!*0C-{}VU7LT^`"TCL&=1].*e|LR6=UR *"lLt hR:JV˰%`v*؂UHtU]Ō*tRry.Ua:]TGaR&[Ju%Sbf:p"j.xkhޭ"l !,>#@HErb%ƀA uV0 -R Fgf] *%Zb$P[ KuE1h-X -[)cXI -ޚX.q$c,P [2(`'cpX U+@]5/%l`ѩ/X`zɌcVa&JwCc,0p7dT|P C`'7wX D=tA 20DpWħA+KMGu'~Yv>X]TX]0'j`,WLP "c p9/غTWR " ,N -HBua#y PƂx ܕX]1=T[5mO#Xu@ -wcɕ d,H Ba,Qp`,H\91*!䣺PY @XU آ!0[20 "p#lvD +Ռ DŽ| t)k+X9Ş+pz޵pf@獱 WWa,QJ@dt f,@ %D%dI pB#T3I3 cAZX7A RRl& >-َH~l"͡:آ J -, {囙 -lAXP%&3Љ0T_oc,_|0THVM-̌`KDBuAS%~ &!.PX0&"zz%PZu+t."XMD,7fg\YZY荁g+2Uw^Ld%[Pz"'&OUv83Knp Ct?rYMߨv܏;~ߔ?lZڍ1ܗ7_u8Ă<xb9eQ226?`b^g㧜|^Gripg|uiRoZl=`qǣ~_^{cN:m+_Mvgn{szVϟ;_:~9z\uٟҗ~W/j-cz\¾ֈe7y% p8 =Ix^Z8gTicuGdp;s?={oxpQݑq+oyh0/_;"$hٶY}^-WyxqMo[(6">S܄磌w!occMdr>rgcopĨڞ?:&BLYF/Οv^4LAFRpֺᯊ"BY`ߒ1ui -e{ݐ[}ި]WEeU4cAl]7"Z 9˪Dlԫ]7Z|[+G2>Ӕյ'}Nin.>"ũ@_kDs߄'uCPoO3'+$ -uyeJܟSf*6ȸ{*O*O:f[u9=Η/B7c˔-\y Rb?v7\ҍ@wSV݉q*6{,e)NUNJ{{=߅`Gqw2Ai7;[0@a'Fo{S,?N'c'uqۏ1T<$$HW(_:.yqw$kzAp" `}uc a2kAP?09\alu aG {fGQЍ[:Bg)bJ\g:2&1oDK:n> -endobj 771 0 obj << /Filter /FlateDecode -/Length 4233 +/Length 2686 >> stream -x\K$9ׯ3&a;V{`xI Bzkw@i gڎE;?Lw&|_aRs㉖ ZEc9q^!}NO_}wKɻx3EU" VK>&܂%j Fk b`8pdUc1\`9<B<'ݒJe\/%evYbx Yb%g"d,dPK%@&ːC;*&P"gjXb-&G%#S\b ,sKoR6x$A[Y?8C.ňV/(8!Md- PN % | W.\,.s`׸p@<, Y"' ,5y%T xȂY< Ж--Su-K.$ 7@.\ZXiaA"ܳbn,,,,`ni \ 0p780pa-,UaRBlaw}` 0pG,ڹ>}hka{|-i*?#V+5YX|&..CFBˋKZXب ,‚u;:_‚E-,;, Gp]WXX%oav -,,/<‚^-,H]!XXH{Ld [X<HV@ -% [<.Q$l,_,, `oaA*ԜxHL^Zp-,Bd<™-,@bPCཅC  #XCmb Y)ZX$[Je DŽz Zx/%M^e r[RI,,9 WȂP[R<2s l 眅Cd_Pe&;4jI1IY,,(I-,@R<b;ZX&YBd JRn J,M7 2> *Ed YXP]Aĥԛ‚&J<#nkHRof *CA$MՈ[`MKW$fiMd@z3XL4YX ԛlڞ1#?E*b7bo5 ؋*g<4,K2O <6 /1>`z!c,YY~Yxz>Ͽ~(A -}?k"?\^`kb;hIx㞎4!Z+Vȏ' H1s:MLsI+yTԹ9Ԏ+cjIW=G7CL4]ۛ[k )#[?*5*krXlPe=Yĝ Mޅ4Ow1mp!] &4eLڅB:=ڱ{L]_ ڙk`Au)>ߏ,XX)bٟS} -d/K9O)~dE8Y]*n|uˁVUJT}z_ -^!:u#ߓnWwysYoU!'vW4|SGˁiwysy5}Bޝ@|V^KӥQ/wN?Ęޟ9\K 9a54nl^*9@5B"Sg3JnLgoH[+:oֶj ~I~nt5[zPmhӔ}ZɚZ&::%s5|vl.&BsëaQL_sIA"&w]iMm)9hE?'b#S6.#X^V=791 7nG.MY.j~]iwѶnx'wzl=xS6v8߯_зpRk}KWa=ЦҰ)? !me*m7ݭ#{ ^_k&;[v=<_oM\25˜7kzS_/&V|ZP܍e6|&XiMǧ|8߅#c:/]xQsi_+zlG/橓Mikӷw8QnonuǴEƭvW%?[z#Nnj]"(3/Rvp9_CrKU>jrw!W|'^dq'dOc) 0FG@'y[:q/6C>:r/o6_qO-Ydr'Y׉#lѳIve>ki{o8u~wAi& ^8ja/y@ -z9,|VCJ-\#.T)NLqH=PAR*0yPC%*Kz|k/l/qTwIz/p^ +x]dϯk咪!CpE` Mccz \9GzafG=RU̻RjNv~>nr|5 +Ų/@5. kϯKpMerY"QU+Qr1UC`FYa +fX +P^Uf썩`11@t>IOLKJu:өGtեba:-g[7-%3]-T2l Jt`w-3]Uk1 +\uAEU{7QX.$Rl*K!wg[BFulAq1 cE+Tg9+@Yq@C< +l Rlj` *0–`Xa0(pkR=c&>1( 3@A\- V +*X.=3(1vJb,PpW chIutt2^2cpXUu؇{ŅRP GeTwC (`!1`8Gh4!e,y]P%iRcAw}Q]u>cƉbO2Dp2Dp,`É "'5Ӂ>Ta,.X<o .U'ƂKP]vH0v8 8+cAw%2$pW a-q tp[V]XawEre,Hn;6 RnP `C R1WsN +t.9#cA"EuŲ1 vUka,h9 \iz[]h~`"cHJ5c,1!ì2] +d +t>3lGg,@. +w-\b,yc,U p3- B=cA  cA Yf%1LgXP,*2MiT[ OK#c$Hsh4ƂRBK7 cA)%H`,lff,[1TIɌ8t" -,U&R0_Gھ[1ػs񨷷cޘӺiijݙ^E9޶Nlw_ν^:q]m%˟0w˘ož5bqsG9\&Htq,׼NUr~O^'\lw8dq!0m[0LN<;6s9tmֽc_G6sWeCD~\꽿w;--=߷bR>cӲ}=%FjݙN:K 7Z4|GXdb)~<—6-;. +e#.q~7(]ÃyXٿu\cDf؛1j襶珎-ы]g) S!/|lbP8XǷlL]a:u~Y^7e9?%nV7*mW|U}vu.F!XDD׍jbj-Q:o$jGD׍;JQ̦4enu-clSۧ{qj+Q7IxۓLj +}B];E~RT58<2ެ4;i9Ӡge|cϮ勐 ;2e؉{~c.h  I.5wi{tA-`x=ڇ3C.n-؟b_fw8CXxmL~*sq[7x]f&~Bx}޵Q>8t-V2u:JZyCkaiR̶!N7m] +m}-%hE:.GTAka}zg1wirФCz[c`M:ǥ}q9zisƻt=AtZ]aݣfgvj]vi?(. .oݦt6ӲY#י몌I몤ђ(9ɬ9bBdim=6kj=m} æ!iF2ŧ_Ŀ/íտ_M#jY<&%%0r5|Fߕ=a9J 7(+Wͪ! xʖ_BhsKۿ}i zK: ݯڏ]2| endstream endobj 772 0 obj @@ -9831,13 +9872,45 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 771 0 R /Resources 4 0 R -/Annots [ 773 0 R 774 0 R 775 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 773 0 obj << +/Filter /FlateDecode +/Length 4231 +>> +stream +x\K$@ AaV>̨Ȗ0]Ǘ9U΄+RjN||8}<ђ#_kho%J<BKt~<ΎKg_jM%) +`b\r1,V1bfGV\KX/@م#B [,jpAb๸$(=Yb  쓅pCf6D;,X ߃烅lHK,,]W1 Z\‚u3yuq7Z^\J‚F,,]g`GD ة-pJD.haaqH,,8뚼P-‚,y /T$&//p$gax!$.jaAR ‚%Fc K(5!lFRX<.9Xwr we۴ e!ba\{ R,,HCg҂haA&" Ala륆Z,,-, eRo<,p>`ȂL R*9&cЪK~)pm +x.[X3/؊HdaϱB؊⑙[<Yd[XL<,,( *3ءQKBIbaAHha&A?(6Q<"[XPrXXP +d-,oJ-,YYXP)-&[X‚ +M .,@7Qq[Cz3[XPD(& iFPo,^,5%7H3Po"7ԛ<. +dx]d\Dfk,RqĀ{yd@^V<3 HDeYyjmLG'}D{fɲȊ`dv6uzY;)?Q0 k +k8A!(&E~ 3"to pMvjш"#:8=U]it5CV)EDO(P^cmt渓%^R޳?ߧ|/ >3^r>S%)'%p?ULK+ⓗ孪|Mە~~c{DR@Pr"WX,Ϙ'иyylLwf,+-3mI"m߭t][c9.%E/!ڿclAMSnim/s&krj,^*XL!wziY\dlNI FfsF1m~}'uu7uܒ#䠹X‹LD`5nzYt/t߸I[4ei1ևot+;UDۺ_a?*qg N]͟\ z~|^BIq7-]gjƆMB>Kænt'>s3XʷO8zv#.!.lx}=&|oMoo|6qx/sVz|rM}Ń<WXOiYw\BH>ދg>r7:d3o?8$?)ɊWg";.q_S)uV?yњx3t{wr\&P'촂uc<ң:5)Gk;{:'lOAs-;{::{뿮FMn!ΝzOE5_k?G^p>tSoZoHe|MŃ_#m|覞򵞞;GjB۵{zW؏<7q1[z,!=ן UN~!y(*5}6tgMi_Kj~Ÿl!Et=H=4,lg u|hpxe_cHyaP(g-,ؙ~Z!m#l>8rmJn9XR1VWyD\ͷQ->:جub]×fxJP@, Iy.,ϣ +캙\S;?ѳvh `&u e /~)I~T׮A J:a'$oSaWVWbģ] dFRy*k횟LWe(ޠ]ԩNWпr`0lME?/#'ݳ{l'VP쮧A;ȅLj.]UNgn* +/KsjN"9{%izÖV<|V2 Cc;R'u,3R &9W~ܑqj1YrwGMN^0*K,_$ivs2E&yc#h$/v_gY;S|^GgYo8fu4lݑN&o+wp8F=+؟dWfؽa+ٝ&n \MSzf J#z0Mtp2yang5$e:BK5aԓ ՋMd.u sCwZ[j8 =0;=icvDN=:}P5u,Lljhi9ڃwjhT셑И.*jݶQOʝo.@N#.SںuSKyw騭2Uҡw-EyfˑKtA2tqnw۳ZOALiv¿Ď8ժWkWQ&]*)CX^y[?L0!PvNd[G0 5T_ݭ)טRvB;YJEynȫ2=0 JQY +endstream +endobj +774 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 773 0 R +/Resources 4 0 R +/Annots [ 775 0 R 776 0 R 777 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj +775 0 obj +<< /Type /Annot /Subtype /Link /Rect [ 101.433071 488.554475 101.433071 469.804475 ] @@ -9847,7 +9920,7 @@ endobj /Dest (cb185-1) >> endobj -774 0 obj +776 0 obj << /Type /Annot /Subtype /Link @@ -9858,7 +9931,7 @@ endobj /Dest (cb186-1) >> endobj -775 0 obj +777 0 obj << /Type /Annot /Subtype /Link @@ -9869,36 +9942,40 @@ endobj /Dest (cb188-1) >> endobj -776 0 obj +778 0 obj << /Filter /FlateDecode /Length 3943 >> stream -x\Y$ ~_,K"u ?8`x;0n{lyGU.1:At:(D-~?uٙK|<=;XOmJ,'\9 -I%9?mw]8򣰘L)٠ -X֑ -CTX,1Bb{V\rX -+C h*' brr8oʃ sD(=j'x xh( Y`]YAxL(YlNy6s&[ְ>PyI%h'7p5,`g5,U. $djXkX `aAlJJQÂX,xT^4$ Bd<‰5,@`m -aA򐅼װ yȂAD8DjzY`.j~@2 )DcЪƋVy<4,H bar)K@ kX -dhXd\9Ȃ [D9aAѠgdjX$TJ5,Mi)UdLhXd;hX&Y(9{I79CoM7BD|VÂ2M/%7)~[(J4,( YBY4oI7N/B_XÂY7ѫ%,fRPL4jX 䛈lxCB|3dYX@o٪ ,URk+9Z4,sT8VtV-X/1aR}KTpf$,p Ftsь.4[ct O9<|R+e$El7 &bm/EDHekMDAöL]"Op(O /DnyUo5)qFrbqޝϋ+t޽ :` O}}^^Ӽw>/.kL-jx}@T|6hpx~{?}߿_?{ ZOx$7bx,<~y|Ꮿک^…ؽbSeDY[* G*^5HaD6~(tȄJmU?P|2O+Q_WqJO_xqb !!lbK6H esgޏkq~^WY_mXbk1NlvO7ዖj`Q7]m/iE|y5g:ݏIԅT`&;{]*̀XWm>!۷oMڊNͤN[6Ϯ3I~9Y' dW%$vWyW 2lekV  }m)KVlI 8u^Zl_␩ᕾ= rkk_xxkoѐջO;/eƋu$=II~kS9H -gve8xhA2vb'UuuLHULͮ-\*VL,?٬b~7lr\m8_?<߂|yǡ< G1$HswIOx<-pٹF6-5q79+MŬV' ;֘{N(WUvK 3]^87pڲU]}`'.7ktMOvzrOg <~-Z=d&ܴK|=jc{Wp|lt.eRIG.#wDԝ}>A=Ma "M+,Sx),maSIӝ}>ž-e9#?b'(Wu^eQj"7%ozV0XpTov 7j쎛m!\G$$mUMr|\!YL{ 2esi{B=8:z g2ghkmۻC[ȍ8/#ATrwĮmu =zf+;ɽ˓]෈wm%g. %:V#xA\Nw)-LH$\Jh ̶5z2BDdY5n%üz(HXJ'yn;oqMİ'iAq@W].:7mkӴ׈sJGPMvMBN eNmC36]1bnĽ]i頶[G }RoG4?DN+^:ɷL>bݒ%W{md7~G<wOCHJ0†fz3q;9a/rS\6v@ETAq7)ye\I7;y;갦iR6;e6Ie=&T-ud36!0 nʏ3tW Od;ȱcLN}ǝNCJ#\SG\̃r 6bAΓtՋjx5DS#04>k%H3a; kt(P+nŪKz.>?Tg~\ B2I(_+Ef6dǙj6%? +x\[, ~_1WJI !B0y8{:!?Ӛڜ$TJJt;[~'39|ɚ,~jEeW +gg9J(TO|Ÿ˵Oޔ ~',&rJ6(uB0)VtK,EcA 4`89: +ɱƂ[ e&\0J;sE%\.8WL1dǐ%4^,1[YrxP$ ω4^,) +/CXWVyF4^!JfVy &d"3I*MIym(*^daj` z G `(ch  z8Yϓx%+8ZK԰ w]b\hX8HÂ|f 'װ wx]հ w7 `!аq%g p5,)lld`HNC5,]EÂܵHÂܵGA^5mFjRh ɂY*pb XB%kXuG>$#Ѓ,By.>1GTGՇx^GG_7_귿?<G[8",_>In:sx˷NPN.6ט*p%\.oҦ$,bx p#͆]kǥ0 *e쫷Uӗ_~T|2ᗟ/DYQ^FFO_xsb !!jbK6H e]{+>yܯU/~o3G 5e.cw&|rT,2 E"H/7s-QخClfTW~N.\s5i&R,:k1H>dcc{bV&v2l&-txuVh.Œrêܯک²ʼ~MG?o_rU&)XG8 +!tDZm]AR8s-;}\&xFz^6;r1f#}k.Lݮ-*] &6_lVm]v96\[0ηaG/s}8ˤ}tC$YznSeߐnu=;]ݦk޴n#vS7O.gU[|=`ÞB-ܱt[r}W_堯@aJ:Snzdǹ9fVvuNwnG?6a鞞䚭/g M<<p:v7Xa?Ikۅ.}07ag^u]]v`=' yyU}t׶:v-:eݯznw~T׮FPePCo96>)I!~nЌeA!hWz;t9haTZ()+˒T'vG,{cm^Sቓ| +Ii&VMo%2 g;eRSkv.7*S8&%̫9 @48Ͷ\JfW}l؎l'au,3r%.0LyGrɢ[=q'9|^i츓犆c;R6&>${;N9B&ys%wo$ߕN'Nozy +^>15rel縷-y=KdNn=/?.϶[8ǽ_gw;tA0u0]hLC\iq2?vo恽]R_!yKu9̓GH>/CJ#\KG\rLvbA Ջn\F%Mcv*&iXfNZv(Bٽ~7ch:&x:e_3'RyX g -xwBͳ[kIvbhƈ[j)bRj:2]2n?FD# +9:;[X2+T-ӎs~~ڞe$nMQZZ qy>Ɉ]"O˩lRyucEJ֙lr5c`P+nŪKzn>?Tg~\ B2I(_+Ef6dǙj'k Y endstream endobj -777 0 obj +779 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 776 0 R +/Contents 778 0 R /Resources 4 0 R -/Annots [ 778 0 R 779 0 R 780 0 R ] +/Annots [ 780 0 R 781 0 R 782 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -778 0 obj +780 0 obj << /Type /Annot /Subtype /Link @@ -9909,7 +9986,7 @@ endobj /Dest (cb189-1) >> endobj -779 0 obj +781 0 obj << /Type /Annot /Subtype /Link @@ -9920,7 +9997,7 @@ endobj /Dest (cb191-1) >> endobj -780 0 obj +782 0 obj << /Type /Annot /Subtype /Link @@ -9931,40 +10008,41 @@ endobj /Dest (cb192-1) >> endobj -781 0 obj +783 0 obj << /Filter /FlateDecode -/Length 4519 +/Length 4574 >> stream -x\[,9~_QHc| ߤ,+!v@>5 ԃ4/efTVvO^ir/pp3U+R/?\^_*hʛ~Up}MqrgۘU9k1)FVK'W1ZV0 -SYbA Ҟ!% kJQ4nFC b2rȃ Yg -Pzx֨"/gxΩx# -!$"- %^,.8- MIY,^,$ HωHetiϳ+aNH! -< YYAﴕx~$p»ୖig$,Fy/! E A^‚A,Y(Uv9IX-dqJX-dA a" oxY`. "E d*e" 8A/X"Z%L FR؊8K8\bgH‚! \ElE*YD@  ,%,H6ءq%i>g& šp4"&$,aKX8<$pi7Jg{ L|Lb@z=V1eح3_>#Ie -b*Fi E5(:2_?I[{IsT,XZmIN炷kЌNy_Eq~Pt.݁-1fnH[G69v~1O:Mx}]&ֹ6V~ 7c;F)r,zʄX=;$P|Ɓ7$J_(H?i0-ym>Nʾtn= \4/%3pA2pj^/%FG K\-YnsSP%]a7f'9ɗG%^m6c>K Yq=Oswb" _QdbyCl~4ryoيH!Xg~>iHˇ(G*g xrRG,Kjvr)#[+'r-w¼~2-d멊i6:G)ض`itDkkTJݰJ&ɺݱ*ۓq!v_%~쇆wߖ_ػގ%W'65zkEC|rǢJU} K,sefo3~uy nښ[Ow񝠇w+<^cn_4͋)8sm>ymd!oAzlVJ='X<|cuSͽ=OqcklZ6:cCz{zANsDf_2( -]Gޮ?bJC߉c򱥞k,+:L˻FlC\Cjo\y6陰U{Y~57t-1#?(CLߐؚ-F-3To+zz!y~J\yл(ez;6o'yV7 r=9K(2t 85NڑidbNzZ,o৤wfMZ_L&/+lt!' -roBI LuLzhKyl[yq?S\Gm?ZJUre`<{L%kr(>4A\wt8>$'4 [j~m@W].:3-k㴜Gú-EgZWMVwʝ[; I .+ݺ&,fOƏ/ z EW{}bF4?DRW@Mwx#n5i#.'GX}3~;9a/SS^i4@TFP7)~(A7;y:ꐤj̎c6;$-gVIe=&T5td3Q7!0 n/+wWd;ȡcL} loec-M?Aۍ& 0F_ -ykG'~^8Lqo]6g|#8/X,s ~~>o;NƯK'zFn3-M?&YCǭFs=4AMD?t8m7]kܤ@m6c^M8~D -y:(scKN]Uǖ.٩! -s(N!JL6yzp'")=j|rNKив2!d 6%, 6IX`+aAHrA‚5xD^PD dX@.,BCDP%71|Z`2e]4O<`\%}mwt(`p +#r;ԓ}]gzϻˊ +SrB>jP:6# uu4i:ݝtίp}]gzϻ8yi^ Sy EWNlw\Ab?"#^$+ he9 h1HVHNܤnAtlӏ}0Cm&7f{W!Tԙ(x +l#jBHorM_ЩNDhk4b(@|b\ e?4mgͣ/Rt. +`iG!o+0\ o<ЌNy7բȩ_m?*xwb?fCL 'Ocֹ|k9h~^c}y>l"nlz% O,-K0Uf-9\P h%ͤegE FA_-ן믛l +Nĉֶm.lͺ_mnnIwrbHeъMdoQ˱^԰fAĿ}8*}u=ۺzd ovY}[fcO5 f2cmgxMaxrkW4gIv6uaԼF6N%yh7,Q eGrtO=Rv] ?4!.p[N"g]b*{iYzNSxϕ.Kw lqۼ]G^>nȅn7^vX7.G4ծuFOȰȂxHWd{'2#.( u 1?__uy[>1myaޜhcXKx=G1Ƀ_1iiW4{e}:Sm2£"ߡ-S_iҷ΢X% Awcʫ i|1V m"W첆vR7-áv}FtGLӦ0yk_6J>ҰNxx16h~x7z4LkmyHo~X8v(Rq^.vʄRX=];P|F›`W*'7U@@_Ǐ0-u}>~p*p~&_V:~)=0}>Zq;}mR67* 5\bݵJqcmn_q+p;|yĉ{?Xg3GcjĐkl8wgy!6+Õ6)zM_ߊ&(MR9o'4,yw;Yyst&2­A6n#?;KBGpgyhf,?({ly|4+]߷54ml5;af5۹~&9ڙuuC\Μ-a[O(Č>ժ=My{Σ;V8Ōg3}> @ǵhu9[q69Pܖp\G~뗅o^)p5S'AG~/G7g՚Uŵ޸㠧u}䁙5מ鿚3Z7Vt-FX1=Pm>k^b[5>Qc?uѶ^֚=uSO;i3~?ɳz#*AYn~dS^PCRbvd6Xsӳު +LA{¦?^L&/6BN] ˅@&G> 3~},2qF]-W~drYo7GߺiIF|tX g0{2^+Sꫤ\ +] in;zn-5y *. b}Vq#iݖ"R;m];MBNe$nnC6], z ElWG}boF4?DRW@M-G~#ڵk2? +Znxx8/~`f䤇 jLMU$A*|2I՘}J顣I0GI]&nLB{޺klET6cn1HuXMNfkX9u "9}wUdL:vw[8}V6ڒSdݘl" +<`vt7 ɤvsyOgRse6\Gl[W$Wd~%a#v&dF[߬NxMZsg:ȶ5nҌ? 6Zݛq`/-8~E +rpύ#: +n:tpNq1i<$[9OUӼ.0/8fbjdIJA7*rh2S˜Or֗qaCC},7ApZbщFϓR&mE tc)nM-eIR1Š}ִw+ϻvmyvhhc$ܻSits:- aDzto¿gSuZR 1i5+r)`"4>ǵ}EJ晰Ke^ȏPr%NB)hU[YK]eT_8MȨUUjJ(_X endstream endobj -782 0 obj +784 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 781 0 R +/Contents 783 0 R /Resources 4 0 R -/Annots [ 783 0 R 784 0 R 785 0 R 786 0 R ] +/Annots [ 785 0 R 786 0 R 787 0 R 788 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -783 0 obj +785 0 obj << /Type /Annot /Subtype /Link @@ -9975,7 +10053,7 @@ endobj /Dest (cb194-1) >> endobj -784 0 obj +786 0 obj << /Type /Annot /Subtype /Link @@ -9986,7 +10064,7 @@ endobj /Dest (cb195-1) >> endobj -785 0 obj +787 0 obj << /Type /Annot /Subtype /Link @@ -9997,7 +10075,7 @@ endobj /Dest (cb197-1) >> endobj -786 0 obj +788 0 obj << /Type /Annot /Subtype /Link @@ -10008,37 +10086,42 @@ endobj /Dest (cb198-1) >> endobj -787 0 obj +789 0 obj << /Filter /FlateDecode -/Length 4757 +/Length 4800 >> stream -x]ێ$;}gIh? B< i}i;@1%2b9r7ES)x޾pQSp -JEQZQN>Y`3_.o.u}5SJhw";r*ATM!n1%I3\ C[UT0* KAۭ* 4I* J+ءR("kvӽ3z1$t:Igi%].J:-.)-lqHI:B6IaV:bb.$Aa ElQ^iIR$u :Cr*IM+Q$-^$`H: [?):?I\%` l[1[2H\`Jٷ<-> ؂LQ0yUIZEt 0k "^% `t$. T$.T4E\i؂$[di-qA4٠D234֒p#יQH~ʩ4&$.Ŷ,6u: FQaQF`37Id|$姜&K\N) XoqכQd֛X q qA"␢:؂) q Nz$,b>su>ޯ~=WmE -VѺ_{?6} `.獘3 ڜ0SգM&O`n,+^.ŊvGک1wǿw`~z'J97:o-a^䵜Kܣyo$tdy &>ג.1 dϬ/Xx˾} ?ŖRmid@nox?Sea\ڿb)Aah eY;xobm_?WJGtγ #4}\>Lg4Ѥ"wPeguUtQ'|tuB\u 8_sva~[{s5gV߯Gi6j~GdYz+Y"EY_}ba] -;Q6y:O^ONy:4SkI@G1hu*5Q{/?7桛6D+-֭Ξ' wyӡ81٬_F<1p_ˉ1$EAEan9"z'CU:φ({kVDxFk1_3zWQ3Bl7^ M<hvΌg,T4Mzy:?(Ol6]"[-Y cg{HMRy:+_t߻SPݝm{C qYT|rdCqHmvc -gN(:޸7"`X>#yrhWOm6"f'!3Նac|z~:φV:QW; G8bfls/E%,Vq`̍gwxF\@ܴw=Խڸ{(=WPzgtxڎvѰٯE=Jkst=Jmϖ\CqA;V R7 婏y+=~iG}t=Jc'|<:k999gTU8Cw"w0'T>lzGy&OJ!qs$yoH 9'1_oqE6z2!?sYVX^o96x,[⸍Ҿ6!nSiov|<>'}\=}byf$mv;}xOضS֗{>=;Tvy=|:Wd|.y[gT\__1>vu"-v6R'?+V1zSdyuƖYU_'Ky F~ՏaY/8nݮmC66na|Gc;gʋMLuVc~;Zۨu<h{tG4Y۸)~[xbEq90cf'是J?/pf|)O9l~2-O(.π^~N-tόChr8g3y]sżJPcȟc~:G7l>|̨M| -ٹ:.\ۥyǥp]0QA0I|aM&Ǜ4⇩2HE nJcŅ;I0NSL[ȲSu@II@@2TBN?ގCݘm})J#)#w=\͞3W֖WxT>//哩N> -|%Щ3\'ىOeyY}܇}yi!qrFp0i[Jќ_oO_ᬂ5d>iƫKSȇӈ0XZ!|xYH qY٥&=` 6߲,2{Vܧ8l?\|9TI6ݫ)!]ANQYutq,J-G|a>j>ߘ],(EIͰUEpuD}K8 EU 4Dhm߆:ij| ZȖp!jzW^87S6C$^7+kmuņ=:\绰]ײ&<.֎7Q -MU"î2ˌJMj6 I.U& fӳQǭXD\"[ZsmB+{T=MPϫ}ٍmU|9e۵8Vl]vqA(:W(WDžQutiU*ˇUgpM WMv:$y@Set _:*|&Vyl%e.cyyź3U4BU@w]VnkTkwb߸CqOlvV&6vFٮwƄ0Bw}+w=Ȥv˥Ls:u|.ϲQxB_yܨqJg|tz<)GWa &4hue]ECǍa|M^KƠiu2i52ϸmbKdvl=_zssUසuOW$r>CKUo-[;i -b,ȗO*+w 7LwVF;z},mޤo\n,KR[.9kv,=ے=(^m)xTeND2UePmKrQRh9E{QiNt|Tlnx-[-rΡߝ%[.絛zI[e۾iwm6{fz5).{Ou]T);!:J1Q'hTB@m<\xd#RJxOUA?&$E`M?4$WKJ luS$\j!/9\-/B)?C_Q +x][$q~_ςSK lk1~m0s G~Yyʊ]m/ȪW4St|墖wՊt] q?%/q.fI).!JP)msKyA[LIR ^`$ c0RvJ0M +f䂠 +vh!At/^|L&FY@iIk`KJK:[&RAybU ;IEtEQ[WZ%D]N:⢵Ji8`ӊ:( \uYe$-Ip6(VgUVK:[ $` _ba +^̠%&!L E  +J4`[ȧ U:%" +8X [3WHk` +H\`-l1d%.`[Z$.[RIK\`paqm$qJI εN ,H=H\`y#qZ^ ޵޵5El%.;.VG+qwVAb 0 p%.V&*&` uax8܂rwSF2^e(1BX3V4%8NX9 ZtL^'Ң<.[xy' x wAQpH\bt]mw78 E#ۢ+ҢR8.hH\UxQL" i @ƋB*qbyOxrJ\:bq tœF(t]1’THxn^6%.! L.>ҒBC'k'qAP8P-HK)J\ lH\ lA q"%iDbz[1? ؂HQ0ycft-"t:H\-XȥI/q~0:M[0U$.RD\i؂ [Di-qA4ѠDd^I\$\-H<3J\/9T&RЄl; D#`u$qA&QaQF`3A₤` "> K%.CIG䛆$.f Y|)0o9 $-!-0oI7NH}73o"b7]u $L@Vg23; +밶[ +܋*{ +s$qf"^5 +Vⶁ"'O|kf &!9(f[˯߰^_ ҄ +$ Cq#64XTmH, "l,,xuac+LƢ62!sv )`d&֧<49 &HA˶~$[le>CҌ =su@A*+T9m9ɘ#)PvV>hstL}w4X-&el2ys#=x~룄~Gة~w׿?~g ˿"u7?h\wQL\XDt۶ʛ܇a[_jrwB;qٌwL_~q7vق$h+!6"ܝ-[-CCLu4JV[YwZ#p`oTRnIn-} !m{+U CLj;qM$ aa-=>2_m MͶ~AܷK Mq' u}[YfD  +OJ.;$=WJII0!NZҔx{ݫg~z5 KyˌTnB&le3e6Negݻfcrȅ*7G]8E64v8uęˉ=pT3mAOtsVY3GCӗ:eae6_R #$rH|>C3?6 !m;}%џM;eNl*m pć&)׃!\CqL9qy cK7mz?[Sm{>Y'c7oD&CS+u޼ "}y9T?/" 7ӻ'c}bodWC=؛b&\mW9k5fع8o |J¾rͷ6޳C{ɾǡ>l˧exK> m Vl;6 On`]e{v],=m]ݎ7;}k?f^5j۵OQ1,c[pv.ös>?a}H0Uw4jo+S[XoG6j}l֣C>bϛzNjM_q5k04̝9|UyjmXy䧠g?9g󞧫{uw)mZ~SU_CۍZׇ̟y)ˊ_yv3nbgK0z-(elT{i=]sVدo"tuDcK8 G"wؚKKbjql~Z|,VȖa֎!jzW|m\l *&t{b fGu!si6 l8 C3[Sͻ2RVqD A lc06 Q/Z9AtjkT⨚)9K/fsDq+λ}Ud1;! v+kB^4`dJK3:ljtfo徳IFY.B,J(IH˘GY_(; ]N#[q:[έ1_Q8-ބ}0!FC(:n k VRw]˅nMіyo{ c3ҶC76c׬\ơcI&q%Z2".xda HIw}P`aDCGcM7Y V!aҼӴG0ǽ N]Ʋ,o/cK~&Po˲g{3-hs1ʤqTli[(:]@MVkn)wE/S _DGvۊף% ݩQǒQy^KiM}n!~DjTs̝δ j?e'Dq~'j[KP>U;Pd[#O9+c!kU?בM"=V#WKJ l S+͹!/CNbsAi$f 7 +) endstream endobj -788 0 obj +790 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 787 0 R +/Contents 789 0 R /Resources 4 0 R -/Annots [ 789 0 R 790 0 R ] +/Annots [ 791 0 R 792 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -789 0 obj +791 0 obj << /Type /Annot /Subtype /Link @@ -10049,7 +10132,7 @@ endobj /Dest (cb201-1) >> endobj -790 0 obj +792 0 obj << /Type /Annot /Subtype /Link @@ -10060,43 +10143,39 @@ endobj /Dest (cb202-1) >> endobj -791 0 obj +793 0 obj << /Filter /FlateDecode -/Length 4070 +/Length 4069 >> stream -x\K$mׯ 1"/` , fkw$V>cd2U]3#<$`̲W7e&"_o?]~I]T7%N&s$L*x}_]k^)%:QXM)QPX,^a`Rr!*h XƂ!3+A .9h,e!dU K5İ%$e rXG 1{l0JYsqE%lr{`5^11Ɛ5CPjYe&Y"dѓʃ,.'dqNQxʃ,jM(Y(|9 -&dIYklӫWMив1 pkXϬa0 : pzDjܵ!hXs0 oLWC%g p4,@6$*/հ`ly^4,] -kXH{TdiX'LN#sH9" ܂ݏc6wmc|˧_ՓcaRkɱ xex -ɶ$B!RBZb;t!nu|{!lԕn^ -{*|!YR"do>_\>_\LgԲyU!_kt^]B}>\;eӓ޺|׿?_ jݷO b#7$Ƽтmc遈DFnb+GZҖxB轟dO_vGq/Go?~ʪDDSYb[ -VI}.[%~]U h27"c[]\%H$aں|96Ux8KVO5&Ok~$GL䠹<98ѵ*Gb2v5g49z7MMa}EƬr1uC}Y=^;vx|\Dy@{r9\jkg8nsew].P]ן>y,Ioy..^+7VߴEz̯c=2Z;@ICN6fϞ}] ӆCh<8c`Kk{!k}ͧ5 - aƫ`MG'.m|I|vPO'l{u;j`I[F;N1b;aF{Uw?ZJ燺:xFe~q岶[_qμmbo~&~Vsr'VrC&ljb@k>TZob'GQdXpuS͸> y)+jE??/lw+v);aܔ8Lӱ -ueK-6sWC~iPd&Ht7bZiFRNwπXJu \OГ}~1roSĽ&ޝ*CKYmoT[vQ h}DzMx[de7o3tmQ!iAzw䱉"7(֝crgb}>k~>}~b9]l&-taspm$-ͭ'*r;%+E}?Q>tOsΞwѶ,Jc{ώAϨ*nsF9a5[?,EW0t,ǩުyûpW=<7{@,`0˟F(cbO*QWN"܋: ފBӃq|S&/࡮ vS,OAm=ӻjsWm̢?|;qKczoۭ ut_bT7ivJ9j^vj.h=Knq ZG-?-o8ݤT -فvv|_s̡D1f:VPe_t{^pI~{׿m̮ﱖeb{k$R<7~xX~Tһo0̿w#QW#ؑ'yޫM^9;?GȺãZ"%y9ȱWd4gjVe pS{ c Fwg5:fXc,Q35KklwzY\ ߶}lUY߄yj/G/%ooN/uBc{p/2R%g/&"X!3 -Y#؎iŖcK 3*Qnwz#_&V,'cY^Ʒ8D ׶sUÙHtc呡8CUuv֥e;oL* v _*z˱!Bܓ%!{Myw".'N%$uXAJ˸iˤU4y ^ߠ" O`y2$⛃WJuXӀ4.) ]e3)tG롱uQBO' 5cOY g`J.0LeGr᪁d.Ƹv4v{IC1bxd1'dG# 0F_*{@'q:qo?_js>8yN z+ٮYy?:8hغ#L!?I/i6 ll58܂<Bvtfő|̀]8L占..2O! +i:C:얎X2a\'y -/s-K!~xuNX :0uҲGD:}P_VXPT_/r_;54Lט.V]yvk :)wn(\F6FL]غugUKiUaݕİJUeRQKқ4Yq#niwR* +x\K$mׯ E/`!`d`` X0[#5#㕙yit%HFfZ|_fgr.)嗋5)X-vM,'\9\%J)^_.p67qWoJޅ~I9%V:RX!| ++:% FHJK bYaeAYbXcA WBRXBUy2Wx.G睉x.yGdbb+&cu/@ƃ,L9iY(UyD/A! +)ñ$ :Ӏ,d 5$ Y ְXaw=a  w!AO V{ Fd YaAqg Rof +Yԛ(-L,)ʃ,H$ԛ@'!/aAQͬa ԛ#,fR 4pi԰7jLgf8zb`U=2^DXHDezj +걁"&lOU9$̜dnG1ѝfrG_78?qZj-9v~LQa"DB>"D*SHXln"$B1mn/2$2͋Ra(uꈑ!%B^^e tF-ky?*k_,~q`ͼ\6=D$ϗ?}ç"[[LQHKOOh|ik.CH?[Y}_q6GXmV5ĩU5/m6~{ªgm.e$0m]zeM2JLJaqU= k)ݞufՖiӏb/\emշx㿦#ζbo&49Ye$.صxkwU*-7^V^CQ5XpuS͸tokE?݇[*V W-);a)qcʖZl氯. ɀMՑ@ rވjIu;=b9+";1p=q|h@OQK7:xwb/WlA^xR}^hn{wܷu:lG#&k"]~f8ln-*=-Q[U<6QaҺw^w&)?sNP8۷/-fBk'y<6jOz<ÔkGuQ?9{ՏF۲*==#=;r>ݮ儉Bl${x}/wtZzF` Fܳ]Pk'v&.R)GN-ycŞ-׾ghiߠ|2vMK[ݝ8ii短m5Nt[ckuA+_^p"~v~sK +L<%_ .ncv}M>▉W".* v4Z*z˱!bܓ%!{mb7D]OKHJ0†nz+q9i/rW\1x0> endobj -793 0 obj +795 0 obj << /Type /Annot /Subtype /Link @@ -10107,7 +10186,7 @@ endobj /Dest (cb204-1) >> endobj -794 0 obj +796 0 obj << /Type /Annot /Subtype /Link @@ -10118,46 +10197,36 @@ endobj /Dest (cb205-1) >> endobj -795 0 obj +797 0 obj << /Filter /FlateDecode -/Length 4094 +/Length 4092 >> stream -x\Y#~ׯsExb0yXl;F3;,hQ,:-{$}b_fkr.)L -梲+%N&s8O&R<>oGgJΆ/?I9% - -E+LJ.DKX#$vg%%1ع2߳ -pɲƂ,AT!f &BQ9kb.MNyobb+&c -Y K̤ 4^,>zRy5^,) -/CXWVy"YW %3 @,Y8M%kXdiXdAȠa"S,o5=,05?`ȂHQ ɅYÂ"1hUEgr\ MjX\dz F% x5,HhXWdCd,dAa"]հ ;ȂhPÂ2HC#5YÂHa 2M ʃ, ?l D aANͬaAΐőӰ)fҰdAħaAh$Lְ0f䛎5,|3kXP$Gݯ;^y}^]V/9"rYO5~R:/Olp{{UF"3CugW:zˊ>_xP=ޑۢx1yw_y8|@2^p~E c? *^&|v/ /H1N* H;#|o[pTy̓9^6~jm\WN9/讬ZTyۆSNsUTQ__2xt ͱLrESSkl,]-T$: -oݢqщ|aMdoW lk.Ӥم=z:_?ԕS[k1\Z?Fq^_~o3umfW ߟݛ -~Hj|7);وD+>ϋCC\L_dHdxK>Y50Dh 'ᨢDeATbDNjb]G7H!H}bB:Zc[]m.C~^e&t94QEԃz/n@.åa%\ \'7 >!H6em@/7Ď5X.&亯ic|[9x>ۮ#y>b"Nl}J͓ۼĜI|\他I^1z_7`Ki o}'nzm{pqkOnkŵ|HIh\.6+EZmsb{x=euCu?c~/cjb>?; -w7==nqiWD$ܣfF[פ g{nZ5GdJ?W;,pYם"[d\WMnEeXj> x41f'zCُɀb] 9p~As-}ªV)~zZN4Ͷޞ۹?=+Y\&=KzXڋf(y Ù.Nیus/6s^3M/_ɧe$O\j|$Z&?L[9n6h{o[=G=+dKfr~nx4YyݣzM;^;}-Rs>?X}A-=ŝxbkÎIϩ/סU تWY]GGv2!_1!1RlE[=/ҼKR(uYnWVgULoTVXϮޗ|ԕDBTV9hwWVG| _YN_B熳HYWἻzgƀ19+ۉ*9fk2_VeUn,F6|lBj;5\폾+RUx{ CWwc}:Z}:r͞]`N[Ҫo7;H}d3^Πl^VzUV{~nmM#ay$!r쀮'u1 >ɗg۷V㕞~ڏԱ0ө^9Vc̣1C \6PuRͤQ :mLuj+Ϊ҈)&UaݕİJܵqђPX9l9bɬ{Pyswo{\S8#S®%gG}Jkj%d05䝯?F9F`u$Ki}nJ^+YgvExWKиrneb,.iXϬa0z p<:_!hXs0oY+Ɩ5,]װ^ $QyccjXpEÂܵHÂܵGA^5*gHa5pT4,]q$5,Qװ f6%aA,<|*/\ !Td 6Jְ yBkX Fd YaAqg p.%7)P|3iXP(* h*ʹ&!:iY|a Jof f DDI-wC2i<."Өa.o"r{ ̒qfb`U-X`/URk+9Z4,sTp`: ,0\}ZKT3sE Ft?rٌ4;~[8/:<|V+ecMqb 2u.+I\v^Uȧ?)ɿ/\l޻wyu޻wyCHlKyơϫu^eE /S<}jjȾys@v(7x_poO<~Zڐ;,]5Q!j4᳴x1^|AڏvR }?OEy-Gڄ]sg!:Sku:|{Ewe]Uע*6\2w;[Eez,yy8 2{jnuNߺE^ɼ߮f+f[\Iu ?{up~+S[k1\Z?Fq^_~o3umfW ?Û +4S$j% "q9s6"+>ϋCC\Ȣ)TdHl0}ֳjƥ0Dh 'mEo2QYW;1&\)-R_P>vshc6w_?lC2`OI۷E7[֞1vŋkw EqXh݋jI^ωY2sڦCG!yT8~ ۸qCSNKNNO''n5Ӫm]6bhG]ikAOpZ+}hvXu5;Eȸ>݊8|,hb:N$Cُɀb] 9p~aZ6Se;"R xL4z{&oVfq`.aIh/]Fyo$g8~3ͽK}m演g"Qߛ1]_O˺1Iz~=3rI6Lr..mtn_?G=+dKfr~nx4YyݣzM;^;}-v˥(T}Ty?Rq W\WZ|[z;a*S5_PC6 U [5q_5(Ʉ|ńHnH.YXK e]YmU1G{?SYmc=bzS_{_IWV>*ȹXEzgO08chw}vRe:7D,B ݕ;|2}}߻c&S=+IoUV&nr8zomϧVY-6߲߭cfWlͷ+rK{^נ>vuw?&QQORGNٳ IWzKZfG飏̚{V^qJ@jۭ)`7,$D);&O ~/]euRi|6p s +RZTKcZ4zJp6eݕ|D7oװ۶X_p6 <~l$Oe<@6Xwҳ2ѪXّ/ ,rE짯>k+9~1ɏIX!3#Yci'deK86>Now(z7moD +=ۓeָF㳡v(!vAv8;>Ivdb2${ȝJc{./uWչe{[.iR>T׮FPePCo96>)A!~nЌe31wCѮv +tP۵ة4ZٵtOQSWhŵ&Xdm5bi7~G<xIi&VMo%2 g;eRS4y,D?CETA0)yk^IlVI+=aMl˥4lv՗Vi/;Zmz*]<[V7a]?+WB`IÔ7)gG51Yt1$ǁ+9wސw|'cK~L 0F+ցN#to>_R_!yBKu9̓G%!q%MK렸\&,Sb$C"?[A2rrIͮCwZ]!0IFE&r'@q uNzP;54Ƣrјo.V]yvk :)wf(\f;mLuj+Ϊ҈)&UaݕİJܵq(l9bɬ{PyN۹=.)H®%gG}Jkj%d05Dꏽ#0:4>k%H3a; gt(O3O݊U<\}ZdnS-mׂиL*ϴY~]&Y^9(ԿbN endstream endobj -796 0 obj +798 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 795 0 R +/Contents 797 0 R /Resources 4 0 R -/Annots [ 797 0 R 798 0 R 799 0 R 800 0 R ] +/Annots [ 799 0 R 800 0 R 801 0 R 802 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -797 0 obj +799 0 obj << /Type /Annot /Subtype /Link @@ -10168,7 +10237,7 @@ endobj /Dest (cb207-1) >> endobj -798 0 obj +800 0 obj << /Type /Annot /Subtype /Link @@ -10179,7 +10248,7 @@ endobj /Dest (cb208-1) >> endobj -799 0 obj +801 0 obj << /Type /Annot /Subtype /Link @@ -10190,7 +10259,7 @@ endobj /Dest (cb210-1) >> endobj -800 0 obj +802 0 obj << /Type /Annot /Subtype /Link @@ -10201,36 +10270,39 @@ endobj /Dest (cb211-1) >> endobj -801 0 obj +803 0 obj << /Filter /FlateDecode -/Length 4831 +/Length 4914 >> stream -x]ێ$q}g%xz`/eCOʹ}`Ȭ작\;%H#3c -.?_¿buտopW(,N''ذL׷ .o?ҒB'k'qAP8P-H8K)J\ lH\ l q<%ix.` R-3>oqb\þF)QdʃQw|<EKH*aݵRwumu;ãy~]wlSCKp9)#zTWv#7~_ߦ*#z-ʑ@2Ϸlbu}2F_wrœV|XXFѫMr[u,k;2۵^8m}8+z ='H1yu;B/1Y,.}B4/%%*VdC뱟WGNwy4HC%=\OD]rfL8}~~mejA~e4P2y.ӡwuo?nGݽ'Zcin=U?wեf?tSƄ:r>.:Gw\COLwj}gp󣻾pv?w<}FMx|H)_Eʹ x'LG:y;-=~hD{.ϳtHXpQyyU{ר&QI]M8 Ejфlaû0V QKj:AtJiThbϚjwS:ml/ri9lEmUpc6Q]vqAH:W(W7 -PnGҥ!֮WTᚔ' G=^ &^w(uH~No(;ٱtTBz&ݖJ:t $c- uMVq(TTŮAm%v6Ujy=ݵr7|šs;Ux b~tQm nH;eqoԯ}I+K^uOV1ԣ4]:nTc Ӹu%W2Ai3 : |M=^SƠiG}8Mvw Mo`/mm|bf -csp%:+Nڗth q1ˡ-[ɀ+i]8.7/mQ_fǢ,bH؎cJOob3ڛm,ү/ۚcaujea] Z]g+ X)U٪ҺP4LUY+1T|V%8Oѥ{ڍ:э7iܺ5o6ȍpuldd~ݤS*Mj{A=SճMGxhH`,Ԥ56'(w9l#"5V2քXZ4/ل7(cPT_r&PPe[EMm"(M%|G +x][$~_QφI`w eه}lx*Rt/[Os*#t I>E(3UEK)x~rQKp +#jEaq:?%$g]rLvӯ.[Wv׿e%T *rn 8/^Ĕ$p mUfPNR 2& +3,m3L$`N.*`6J:t-%ы$QH:kH;-wQlqIiI`DJ1H:[JtNt]Q啖t..E"QS1ĭ(htZ/ش3 +䃠3+DlqVIga ៤O8bfmՒc:؂xآ(3ha^8P2$vHQbB!XLr $JCgDVG^ba a:bI\` lA -lK@tK*i ,X.TX0$.\@)I\`)qb ,X:o$.]KK\`"-`h%. *H\@]L##qFubbTxDEx,.,V&H+7x8e$. !%.P.(lJ\:c%.@a["qO`E%.p]1|.-:Džy^^IBe%.p]g`E58X%xW$.p] Nap$.h芺 Z2`^THZJ\Xޓx"=h$._0.ʀ)$xWi*˦>D `/H\#-)/qO +:|/ve:B$.c$k #X-p-%.-1I\G<^t,1E]N BK1%./.I\3$qAHSE,EK4%-p%. D[ J\MDXK%)3®&4&$.p$.@`a-֑171&ǛA₤` <> ơSJ₤#MC`^r%.HV!D'd=ǛADEuNS-8 &IybI\x3J\7&[TpX3cF&L wb$ϗ_`/;e-y x'0%G0l^B +LN] fҍ).߇44c u(j[CW!;]Ulmb04iA.>= +%UOE!}凜[f } pw#Ʊ?-iĸ0}g7x~ϊ/uo Gh@`4E e[Jhx8Psѿ9m:'']E1`hy7s<i?^nSG͘= 3[1di^IH!)6ސAR?;{TkwM5{#LlTv8~K~f0ln/*Tak';1 d#\'A\7;##< |cpÅ'Ƃ iIŠ +Kvcm)x'< :Jk,. G5d0%:fY9 [t?1ռ3~u$PG1zyL'< Q&E|}Y>ڸCo𵯹ĊvH3yf.Uf>̆VFZu= RZKRmclꐃf4̑{FBϣBYE\!}۶ 59yR 3 ׼_Yhxu8JnqF?$qΓyhڪr&DLz%Ϟ@IFGØxyn+8 rx_QcDtߪ_|>r[;ͺVc0-)PywyǾhºWG|<3QђG4L\PFt<;c9D5p?ިm\|a4E>Oy:iysm=۳Iؙ=iG}wWt~_Tգ6rqhA)o3s}mgKޖz4ܘ?ŖQ4 >{gQv.ӡGtcv١Lړ :8\gCh6q b9?]=lc9f'86pjO$=㧞Cr1*wP$m!)TZttQ0A}+:V)ʛηhSĦUޤ-ߥMy<85ʯoiNHj aQj:<U{ר&QI]M8 EjфlaŻ0V QKj:AtJiThbϚjwS:ml/ri_戲Ż#VqoGm&v!\\(CMUKr~Ư/QSkRfES3ٯz%<7xI7!4v.B_:*!=nKzl%lTcj놺&f +Ӹrjbנw;]NʼZ]wF\V*免f1C?Jبa7 ŝF߲N;kdҊ{咗9c |e ]P\F50[Wq%L' +Uئ 44~Ӻ35{M 6 Fۡg܁6bsdul}qi*\e:ۗP$8i_ҡ%3dX(. +Sle&ru=OPXk]G}܊! \`;^+M+{?Eei7JD7ߤr׼% 79֩Q1wROil[7뮫uhuC|LU6)?;⁡R/O)BM:XcO=8akyJ;"ud ñ*h 1ل7(cPTy19[RbVP7d^cjCE(No_J>5o#V[(- endstream endobj -802 0 obj +804 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 801 0 R +/Contents 803 0 R /Resources 4 0 R -/Annots [ 803 0 R 804 0 R ] +/Annots [ 805 0 R 806 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -803 0 obj +805 0 obj << /Type /Annot /Subtype /Link @@ -10241,7 +10313,7 @@ endobj /Dest (cb213-1) >> endobj -804 0 obj +806 0 obj << /Type /Annot /Subtype /Link @@ -10252,39 +10324,40 @@ endobj /Dest (cb214-1) >> endobj -805 0 obj +807 0 obj << /Filter /FlateDecode -/Length 4539 +/Length 4504 >> stream -x\Y$m~_Q6 =X0` h`S`X#`f{zwN*8$#ٙjsI/?\̒bsQٿo -Wk(-{&\ח ]/?>R/" -eWX!,)V XƂ!#+A *9h,Ae!dU K4İ%$e A w -φ%BQ9\\Qy <~l,1Ɛ5APxKd4d!ƋGoTdq9y vːޕUd1XWJ&Ry Kg^aGH1)<Y EAx~4p"[nox8HA_C!IQ젅qIBő.2e \. 5p%,Kp xYE , /aw 4,8x-[4,[2jXdl԰p!Ѱq}a•끝x.{Ұu}N =z<ְx$ m4,Ua԰uِu !@{kX@]-rw]0N:rQ81j6=,X s^ 8%-ʞZ-6aA 󩼲+Z^lEÂE.3kX_Qk="ZW!hXwX, k*,aA‹@8հ`D.{Ѱ wM^Â5GAköU48  k<1hX65, .kXdNÂi))E b1!Syquа  KAJa5,Hx4,H eаR,o<,p> ȂLQ ْ )DcЪƋn p2x6iX-VRKƦװpaϒ@l 쐙k< YdkXL\l PD aAΎͬaAΐa|ͤaA1ąd aA# /oPoSmͤaA!<Ȃ(z"dq4,(1r5,@zz$Lqp7 "3&2[7ސgVO 7 G؋h3I=4,sTO VF=60_ctIQECB̉Y-9f3z>\~{\UOEP[+lW`b\ 1O1/Y!* ި"W|^式>%,ܔI(Pp9 Q7A|0/'@Mt6)Sq)GFg]~?z|~'gҗay;쫿[\m;/<<7oy}sz?ݗ:v8icy]j]BgSx꓏u1\SW$8͍4!7 h뮽m5mgygBi޽ݶ}6Ye+6cOn&Sm]s ۵yNU[}>ߚ?ha hi{݂W1v,z==^ʹ3Zx~׎1xOR?`ek^XoKSirhZa~`mgItoOV(^W1ؽ=2] e@^Lv\~{c}9`8,bc)#\{Ayz/GotowI_Yvv ;gj_bzw<Wtc"7qsՎm~Q6αX drQӔ~F9ϪŇW - _i3۹*^) ڐ um J7Vc*c[^O=W[oX?ljooǩY\cۯ՚"*>ߓ5qiZ?#e 'WѐE,z }iRvb}T몣'&w*%gjr멾A_BOU6^3O3瓲Vjda=~ -uXi}]iqc[{Zۺ'F&Wro&*So:癝U9iQlzv&V#(Nkn(t瓡c;{<^O]ch f?ymR~nc5td3ϊ :`rcߩ(V}n#euǏE/bMgbuYqu {H~r ߄}-i^BecܰqȝO͝-n.fVICك}u{K0ME]?l/n8j5Խ%SbM3۷F3rp%y n+^9y$7!c6..m\lyWP̽Vs; -JriW.zE?J/j]5-yL/" -875ȑ'WnDZo3z6=͂`z}'=[Ox)o@9խ?6'[>o""[lp6o->r+JY%[tͷOs=o?c֩c6Wo AY|>|rIob>۷~}'Йë:n9}\??Pg?~}vcicxň;{;y 罰KÜq58n닏ƭS=swy|U6vpӋo5XF7Nuuk>Pm9ig9>sToL׽KKKL?C7lsCNݰ9q# nqy w˯?9M7o8?؇)&nG&~#[26Y;o@c'N%$uXaBw=IbAfˤUi=BETFp)~mƼ䭒$=!Ml+eS>+DiϠ;ZmBeJAjǖl 2CXJI4]L7aˆ< c3&V{Nr"iX;Pc\xdv'dgF  0F_*ցNQun2-.0|pGo^2˲E.t5;3 lݐe$@BNF ؟dgнaq^n&v \I S:f Hd63`/x~H -r9̓gH!qMgH 9(.ńeJRN2T4ąH#O0+ -)r`rҲGD}0u@HXST_/r勾yX^=?5fjA 飂g I6@14ice[WK]qVFN1*CAZ%=lɏ(HwNsufdVhQT-}=^2h -gfjfph.{YNV<ߺ@M6y담MB.DYYDș`7+u^(3Puzb%Mw__udIP}'n}ĥ"sқ͝X/O>mP; & +x\[$ˍ~_Qφ/~0b㇞g)2.LUvtÙ+($')2;2%"]o?\~%梲PZ-1LiI%/_.}-Dg_E~I9%VXBXRr!*h,1B"GGVTrX ++C O#@ ,i,aKH +a1*" Kңsvx69`5^Yb!k<,d h'!ި; ׀mi$q@ +5x]cRѰ w9ljX\ְ.Ȃ1RRbCʧaA2 @ʃ,H$K%kXdiXdAʠa2XdjyY.j}@@%" RǠUݒZelҰ %ZMa~tI% R,* -!3x ְ.xjXdA6aAvUf4 B53©&4*&4,}A2GAHÂYÂ!3N&כIÂb 2> 3FÂb3MG`_r5,(ޠD#כIÂB% EQyISQ-0 &IE +iXPbz3kX4&2zH sn(@&Ef5,MdZmo!!?ә+ά@o@lU *g5zh1QY樞 izl` Urr.Бw*I>$QR̷}>\r޷}>JV?Yi5'd{&y. wm|q?| mPڤXOǥEhtӧ(N E@n{8 mPFqs9\;}^5s9@q?~4˹̠">s@9nl:p:|'/x~:ImJQd !ԯ=~pRN7߃2R2qC]tc>ߚ6>j PWp3,LƦq#w^jg06Oϴx}oovn5uti{)LyƘ1?ls\"0zCP:7陔Z-y!vݫVvvk׾izRo_emkkkm?F;6-3WE$X(cWŘ[o6/MWyj_wiϓx+^u6N|Nu>[a~gFvU>vV몣'&w*%gjr멾A_BOU6^3f'eC;{ngǵ/zVJ=V鹵-IDncQ7̠t( E{QWkn(t瓡c;{<^O]ch f?ymR~nc5td3ϊ :`[xM_}[}9?Bm:i7Y枉=eŁvl7r*6 +[Ӽ^_Ǽaz;NyIUO3WzˊZկD;z[b&O@xWŚKVnM -n➞پ5a[e[y{Dw<-܄lF\qq)dGp]] :Jy(^+й{kHd+|ln%||Oo/j]v4-yL/"}qMNHܓ݅qd{MO {sIjJ{_t+nxnn#nyټPkWʛ7]7\7[MÍ͛ߖ\Msp|67_MwOջu?oX,%x1bg0C$'Np`} vV`iw3am}qTeo`\Ư;*^b>qF5j[58!yjI>~\z;ezSSSSoC7lsCNasoFLqq7 +g_9co怟0 6e>֋C~~787kZz5!.-f2N=W-ߵRu4i66yK目vVD%񣮪b8 +֌'\حxw༱c{78T ͡p=V5cT׮3PePCo9 BN +vQߙ>4//oX;vSHڮhg5?E_UOۑh(wM~%؉r Ii&V]Ow2)wUakv?P~4\__1$7y$IuHӀ4 +uٔJ}&Q3CcPc%u3RMMr!O9تɢƸvHr.!W|'j`=]?I&ٙd8(LїJuS}}L_.59g[~̲hrX3- YF2~c~#_؉c#ll78k+aPp]gL8!vZ{m3z0緀tp!*yvk :m3i.@36FL]غugUKi 2U-#ȖHt4WgfˑKfeAwqnݣU, qffv __w>SU'!6Ϸ!PMBkc0QG#9?+99̱&Y~5. u\Vp5RGw֧MиL\*='ߠտyJ?F 5 endstream endobj -806 0 obj +808 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 805 0 R +/Contents 807 0 R /Resources 4 0 R -/Annots [ 807 0 R 808 0 R ] +/Annots [ 809 0 R 810 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -807 0 obj +809 0 obj << /Type /Annot /Subtype /Link @@ -10295,7 +10368,7 @@ endobj /Dest (cb217-1) >> endobj -808 0 obj +810 0 obj << /Type /Annot /Subtype /Link @@ -10306,37 +10379,34 @@ endobj /Dest (cb218-1) >> endobj -809 0 obj +811 0 obj << /Filter /FlateDecode -/Length 2863 +/Length 2862 >> stream -x[ Ss+H݀ -b4)>8ۜqsvt/{Cj$DDj/ Ɵjm%f{Q(ooq]҅IKHrM7&JK?O._l>×ZˑןLJ-jPJ)SvT5O3RѨ3`XU^`F, -fpKQ1DDG)dLztC-6WW=HE9k!眪SؒK%*y:آR˰E-tDNst-=]ZUuu :"y:QX\]-Rsu% EO'EtDRѢ[H%cQW[b-TDP0.y mQ=*AVR܊!.!ؒ4{$-uuEz,[cl* Uxn{,Vpa&y,WjV•sX .½x,PWR cL =Awx,Ppa=`U0{,X+y,Pp7VR -Ƃ-Օ -ƄGvnp7& ܍8J] $l`=`.t" ωi*pmcAwb\] \0Nb<$px,H.Y=;jX]ԞcAw7$pH<` Lp]WZ=$pX  + @C=dp{X]J" 2KcNL#Y A -Oc=KTǂ ڶ dcAZ)cAnR>WǂB$ -uhҪǂa豠D؂c2ٷ[[(lA$ z,()ìzC-qXPlTz|tc̀cAi[Qc؂$c2]=[ z,;4jILS:z, &4AJW[ X+?(6Q:"I=ܬ j-՛cA#؂cA,MXCG䱠qEc걠 DmlfX$( ijN܂I7A'OaKl걠lfX4&2zHZYp75ӁL\DfWV8{b@@o؋ݪgZLT5Vdr E>wL>GTPgb~|ן/_c/N"aw(0kG@ MPt6Z&]l,0yaN8J?-fYgmPyt&؟6shH' ϗcw~l'pRusvZק[?|d'g"Oy ÷6. ]mLM=3Osvdti?!ER6׍"& v|ss5' 0<  -t}>&zA^B">xpB1bGZ!gxtny/5x?n"xCQ# b.VޠQw/λ}\ fc6CxŨ4Sf_¨#Fn?Pl#{!n%Bmtnzh?,9Fm`G;3ߋ)!/j*S1!vv8o|VB0 inv{>)S,>uðTJwgEbT[ѱN9ԻV,/f7a펤]usReg~2]]xG!-#$YmZ"~ މTiRwU(KC\i˔p> -eV*Ґyåf^A,6WrtG1c'2enAj,uCl3X -8 W~i"Nf?((tEusmSǸZ4[ (*LsqYI^Hd>wm}pF4[qpYN|Yĕ5[:qve6-;i2u)Z.4.etnk]?)kdc'gar`ҁ!}\L:Ke˱^34%d$934fjGi :viоQ \@F]6z,ݦ|֧eR9ŔtZWeLbZW%ߵ~7% PZݹ̧rՑ!R~l=w: 33y[kIعk_IyZHTsCԾ[/Zg%'"d T -Ol}h+oqίCvj?eR~R)V%H!vc {x:B_ +xM +l@e 2p Axmry;V f5MVWȧȚ *Z[zoJ"[.vxta\ R,ϳ˵Wۿ%rt'SRKTR +ĔUGlST4꽪 m5y*1VGUahaW5 RqTL#!*q +=]kDO'rQNZ9FlIJ2l,`KE<]-]-` ebO$VU]]jH)*B9$:D)GaK\lIB lQ<8Dkt X,Ga !Kb)A[TJЪգ@-h)a 4q@@$ a"r]l $4X [m@[ U@\I ĕcp@\;=p/ ԕvEkX (wEp-p`c@]a* EEX? +!J ܍c` pu% c1܍wrpI~:[XcAwasb +\[X]X>W̸97 F%  |V`|=$p;w96X] c!0\յ@V *HJ#8P<dpǂ "quEjX:HVEӁXaO mz,z,YpXVJXA䱠 ruEz,@b걠D"1z,( eX 4F +[)z,Bm Jʨ0.P p*t\<[1{,@-*c,]X3cXPlAx,VjDf XL:f5d j23y,ZS锬ά ` *M`cNJM9HRF+7ǂZaKifX X(K=y,h\QoFXzz,hB7Q9q$[Y<4- )-H`Mez,h9[Y= @=VoM dt.27z= ?*ЛGb*V#0eU(cnOU;왵C6"5l&hv;|/?g{j?)/f+HlXn*) +L3}-fBiD#7316vl05\:P]K?R"aFv׵/Z'r7RػQذV£~[9-~-tjK$+E;"i9v<.YRn#]m_7߾]WzC_(r;kC!޻Mmzl~xM)Ӷ]h{?o9()o1k:\n{N3DF;EjV=t_6[c;酓}=%Xoq}z{eqWLf~2|,r9א:plCPZi䅹;/9gGFXz(,es,IlR-n7Yn77Ws{ɳ>@# ojG%$O|-L?c/}RϗR&B:8r b jLO,_>p-b۷~6Fi`on;]J#=?m%:bf&<>K7o["4FS͒c_v3؞b"90S١mg,ӽ8jcL]a:u,o˲^7 +ϥOԎ{W}vQ^t,F!MX䈮#|EkbjvqH:ڵ]7[+UF:om})եwdb/1B?V5*7NxP0iKi&+(u[;ĕL) +c]f%" g:\ʎabsϓz3Zfe|q%Aw3v.SK?np姓xڙF&e^=~8v>2VLm;]| Ʀ2őn7[0@a'FvqA'@8q/۾!GVeahͲ_mzIHq$^w2AAD G,¨ l7}<ƅ:o ޒAyhWaspȲLlG"[fnطKaNUXudnɗK\YӹCqk\lӲ c~]BlbI#RN6veS,MzvN8Fqxu?L=L:>Oto>uȽNXsи,V*O*Œj)~ dewh endstream endobj -810 0 obj +812 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 809 0 R +/Contents 811 0 R /Resources 4 0 R -/Annots [ 811 0 R ] +/Annots [ 813 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -811 0 obj +813 0 obj << /Type /Annot /Subtype /Link @@ -10347,61 +10417,21 @@ endobj /Dest (cb219-1) >> endobj -812 0 obj +814 0 obj << /Filter /FlateDecode -/Length 3997 +/Length 3998 >> stream -x\K$ 賁^Ⴭ,6Q]XUYAT,ȏßBΔRs-~ꤱOGg)j* !\xͩZaw=aZ w!Q/ V{|аDÂuOiq& "pLʫeX\[XٸD4,]gѰoQ2:_!jXw0oYʫR4,]װY$QyccQjXHUÂܵ1 p]Ba4Uc=Bw k<வjX65,H hX `aA*djIÂT-x(T^28d Bdy1Vv _||Ra1bigkߝ}%煀| %~4k7%CT-}-Oo~?~|u<m}:2 EŊ>/Ƿ?]ЃMzpE )n"ܔqϛy5 F_C-_x-yp,˚л3!+EhFk w]6_(>_{Zx>qa ڴvX{8{[[Y#EV# )0(ه5Ч{o'(-~W^qX<ğ}\эoI|JsOK"NZu~a+o<{4#|m|fFtϗ^?pN[0Lu=f԰mJ[}[jɖMuf>o]`fk#p-֖^ݺ0.ck=5t-<ɹHxNv> -=>_ڦo},]c; on"n:4]y<V`{a{_}]Q,K5M5Ȭhz+sDk9\Ix_^_2Y~,o,]Y~K 5T~#3 Yo+/>mQmv#ng6TrGe*=yҽF9l_ 4PV2Jed +nú FS_1܇}ucCEGћ:d.lQY:RڰlyOnlQ삜V߶>D^[iU>·#Pg'FQkÛW7kxo羈/6\oW|փWmvZ91V7ĎXԅ^f ]­~ht9?U [x—,.V8bLi󹫸Q7pcNOzrIgƾ^]mg}v/pu]ݓdlnVg,6[;p=3nA +|=qCp3^nq/#:G{M0y_aPGcr[DrGHć55;:d!"#! E/v+ٜtX+r'i{ qd]M7\Ugy}oQ$/ ē{M; kd|7rʂm.(>t?~ǥ)ҿF=^>bn>R{4ĵm*y~1aȏ$ק5ú+[>E roi'6PIhMF.L'L4+'L\h(L:tpHhr8}4|} dPh;V2=Go[br*1uA $`1Vt7ɞ>TK8Tsbb:OtGʏ;u M&sŬCcgbDCv9t:rKkqTRe^Z*CWh'Qg~,U}It̵-ox:D8펝tXacw=I A.vˤP\L4~"*#O;p4\gA^I@,(OYa.Yi/W"Ϡ;VTa2Aϵ 5cMv!g`$ڮ8\qEzpYrhwGIc?9 -SKl%${;LbI0=Z:{] 2-Z!tǏ* ׁx-Yf2~L/6I$2ecǽxMr;Knp%1N -]WG!ܹ |MV8i0SQ43)\BFq*:S쐲az֟TK2OLNk"(< ֕>_^ϞE#QR:Ov֧##m{a934fiA飂Ze@R:bhF딖˺Yڈj> -endobj -814 0 obj -<< -/Filter /FlateDecode -/Length 5430 ->> -stream -x]K$qׯ0t`%C-5_2̨JVM ltd$"tg??8əKt~ɚ[$>;Kɰ+1G!dRaㄿ6}q5;{SJ}$ -&,+II%٤9*Ib)ZDI bPɬ%A >+IbJ. -ɑ1\$9 9VM (x%ͱhygb.i i.y--9vZZ11FZA.ii YY- PIK%`4s -ZZ,S Y]YM,6Z`d"5 i޲Ҝ3 jF:)&%ChiZZ,?ZpCY^Fwii YOAt>BAFpIILYCX:yA)jHd!\5 BYA aAEÂ%[xKE bZ 7H@.ThXةaAb' P7pn5,@jX@A(@G\p784, .װjQ9[ % L `а -z^zQ(XBXw V{a -3n uO@+r0petVKhqeܢhX]awY`E0pXj- |0p~kXu0oYV-9kX]װV $QӒ"9 հ waދk9 "p5 5,_4 [eLY5)4ua- km*D஘M b@@/kX3R԰ 4|jZ4xf YjdD6%aA%xaA.Lq@] l)2v~3"00F9q J}q'. MY@i1nѢs=Rߘ_I~v#\_"O[Me-iq"sGӘP`ľ}pk^t]hژ#̆0X>jYUѸW?zi^Ji/2+hIŵkou2`jw7f m魜T%wͲu>6oonAK6e>LdG"ۃvi-yk"=Ua ko{Æl,[Km(uk6]xm2Tk^S QmAgYϹ.WV1Q3ǗU#*Nm^bC˰(fh$Dv9+܇֔eg&nvl&{Ț2TQڡ -h -e)]vӑ7e㲜9R1Qw05˥ ow(ު1o-6& -Svug],˼gG%' -,C,ϣ$;񛾃aX+̄ lLrnC, f=n&Ho_}.9YKѢ\M̃<Ϸ "'(ujaxͺ{w칫rw&]m;do᯦hV)mh9eq%) -⬺QTDvvN2Fnۥ+1_Lv{ə&{>f U5cAH0K 734V݊]#p -~Mq$y c&Vn2[7|yVF-FvJvŘxX{cPVFyn/pt=vV2Ϩ29Wz`9ʛR@Kr8ޭr{Ko@Gwϩ4 7-!ynn(wUD޸hcyUIrM"O[;6Os4!'ZFwq˸ȤXȿJ~;ݲHvގmwisC,@PVK>͡-(R>&7e(ɍ_KeF&l#tM׉)zn&mYo}[]`<ݖ['tqԲk9yS}j-y;nM~M,md0?,ޟ- M6;_咿A)ST;Ǔ8͗oLJ~~X')d.C_m+ ^aڒ)ۜ~m@?lr?+9S=6Uݞ,oo6)6Q}#.Rw)pa<$`;"n!{q]tq!6s]y}jÖRPsQszh4*9[P'zR?عh8Lw&ظH9Bz=ҸTjZ_DYT= -DMnȽs?d^͝+J;lj<^O ]/ UBo3MP _U⨩j/OK%26yH==6!%o\.}{l-wkk.7Cc55kd}VD; 27UX9 UYuέ܅v~z'cNgk5l%繒,¬>PX ~TPlŪt_(SA GU?! $T/,^d:5Tx֛PN +dx]TI`V[[ǫtfgQw ,7"[؋l= 5i5,I5@ZYuQλOr*2rf<Ȋ Tc1o@=çNYe߈i̶CԵIA.L7״%]F<Rc}\ӱ,.C]ۥnz# Xn1Nѝ$lwHuzv5tE1 PHkt29eٻ;[5'[NeGaG9^auIn.+Ƙuʲ&hG\$}HQ5uo9+݇-9);DCIA]Mh=F%rT@Aٕu>y1Vv _||Ra1bigkߝ}%煀| %~j!*>/X?tֺÇx[ж>iʋ "b Fw?]ЃMzpE )n"ܔqϛy5 F_C-_x-yp,˚3!+EhFk w]6_$>_{Zx>qa ڴvX{8{[[Y#EV# )0(ه5Чo'(-~W^qX<ğ}\эoI|JsOK"NZu~a+o<{4#|m|fFtϗ^?pN[0Lu=g԰mJ[}[jɖMuf>o]`fk#p-֖^ݺ0.ck=5t-<ɹHxNv> =>_ڦo},]c; on"n:4]y<V`q{_}]Q,K5M5Ȭhz+sDk9\Ix_^_2Y~,o,]Y~K 5T~#3 Yo+/>mQmv#ng6TrGe*=yҽF9l_ 4PV2Jed +nú FS_1܇}mcCEGћ:d.lQY:RڰlyOnlQ삜V߶>D^[iU>·#Pg'FQkÛW7kxo羈/6\oW|փWmvV91V7ĎXԅ^f ]­~ht9?U [x—,.V8bLi󹫸Q7pcNOzrIgƾ^]mg}v/pu]ݓdlnVg,6[;p=3nA +|=qCp3^nq/#:G{M0y_aPGcr[DzGHć55;:d!"#! E/v+ٜtX+r'i{ qd]M7\Ugy}wҨhP|&E52w>Nt9eh{fdx_/Bm a7m_=6>a](+D\ܞ̣-d~@1a9KC IO]D+dO] ӥIK91]g1׈ [Jǝ{SݺZJA]rLyRH|Ǝ 9b3tG!WB:T8f*2/S +3IEσ$sa:7~G<"Hv^:N$ ;eRQ(.Bhv?rP8.ŏͳ $iip0y+Vgb+0c&u3RmWMr"O=U8{,9q;i`$1㎟vw%6ڒKdnv&S1$O}l.pqO_-}{:GeO@ǿ{ }p&Ӈ]+L^)(Δ.yq!Nd8֩JMvH0=Or*%NDahYtQAȆNJEgr(c`LSC;Mӑs‘OzN 0ՉQA-E NVD14iuJe,mER5Ť*- #F9+i'70 +(9)9jɢВzPiJNM{=aT$NkbGsZm'ĕ55|h/ҳ%%`P25r5_̯=T! +`ԧDj!gNv| +Eo7d{wZQj ut endstream endobj 815 0 obj @@ -10411,13 +10441,51 @@ endobj /MediaBox [ 0 0 595.275591 841.889764 ] /Contents 814 0 R /Resources 4 0 R -/Annots [ 816 0 R 817 0 R 818 0 R 819 0 R 820 0 R 821 0 R 822 0 R 823 0 R 824 0 R 825 0 R 826 0 R 827 0 R 828 0 R 829 0 R 830 0 R 831 0 R 832 0 R 833 0 R 834 0 R 835 0 R 836 0 R 837 0 R 838 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 816 0 obj << +/Filter /FlateDecode +/Length 5429 +>> +stream +x]K$qׯ0ۀ !=n FdfFUjzGexg{3 #|;[L\ROO$X=?'YJ]? !$ +'yyٛRw|$Q0)dYI*H.(I&%QIKђ 'OJJf- bYI#PraT O$ +'%YἵjD+iMDG-;sEMKHski!ȱҊ1rpNKcŽjiBNZZ,!ASdhejd:-%ii6O afP0I1)iDEM,d!ҀRh2 NKc}"5 552K O e +\ 4 Œ4!; ,LQC ai%Ұ xȂ Y< Ж--4,[.jXjX!GҰ rJE N @=iXװ vaArVN5 @5,:rа٤aw1U=@WjX@]-iX@]`Դd0W,7p׳pד@Q Ǫpº;Y# PpK4,`+0ʘZK԰.Դb\B+l\EP   ,װ.Rki]հXqp4,}3BuմblYf iX06~ ^4,]!hXi%daa*cΪHwCki]kSѰ wljX|ְx^ÂɔXSӢ3kX, R %Ұ)d ,{ ,p4,G`Y)jX$3iX8"CjiћjZFKDiXXd z F% iX +dPѰd\KsNt朆CxdeFa,4bI4FV̬aAhU԰&RM, ?l~l"Q K`Ұ g/fְ gװ)fҰXOÂb7Y8Ҭհxӓof J7)㶄(fҰda(jdTq LB t"d4,(1J5,x:%%Ltp IK3&<[-^N,gVg ,a[) 셵J꜁JN@LD90HtV6_cÄS?E 63'yɂaA[̱d W]ӯ_`|LAE n pejqTJ!RYtiM)-[ Efg"RpuY Y/'en3$O_ǿ7ғ-$^ 0OpIs͟_~孄K@^%p_TuN' +Yf?.M, duε,5Ԧ2{Ay ]v s6h$KKW7`?5%_4w+$ekoTSQbZ ޾f>Msn.pץ[ n F^/iZ¿"5ͬЈZ&tX)(-˧@gt"792ݭԕ ^j,ZTU=]F b]b-v.|ER z%;TY?K<c(.n'HAS'xb_;Tp˓zՌFx_?[k_T M` +ǍCe2++c])|Gߏ "Qj0B3>WfN&E88$Rqq"^٣X5-_QhdE܂( 3cyT#BbM5,J"Jog,M%Wa %ApY9d1#Hkmp=et+ d\ #(U8>%,4ˏ!dKI#eF1(yB JQ<fj?a ge& +:܈S%x[⫍A^ucP?wKXB?PJ{YDK(]+pxs4ܝU܀Ts6iMo.+oy#WvsZф,g +$k?,{83i܇uc6)C֔R. vjUpԇ4GS,K̅ܽAҲ=/̬[o]սnߞO{aObUb r^ؕ ц|)t͑<[x_.-nxCVŏNx{no6Q0O]J^=wUחGF[eI끈^)AQk. HH+Kh)g/ <̀d9 +K8kﯚZ`v`Yv:yf%/Uvn"r8\^Xz8 +Zn67l,9bK5mM̪G ] pvF;SlVh^$\>rc<V57n)Ym+Zyz-.{߮C{,"׭(,NF $@xG^AW){tWmඐ$W -y9tvy_*#@elQG0E_94]3r|γZ62h1HnW+|s2 +7ku|!yF)x2Qޔ\nC}y: A&G\z:u8K|N]7g5_axo skv3G"RgEJ#ma}ݺرyҜ 82{i[Ib95f+hu}s_ESH̏*t kf0aJD={7P)2 {%̇ z$h zJ$HLZ{mzlQ96gm} T77|jsy@)S҈ P\Uss gFŶbcAfcSIX|ŗ!/5= S?K w3z\tu V."z^noItpV.K,1&hI20p \G+;>0캊{OE90Va^/v &r9RvepE =-dyWuO6)cu߶+6kup[:oWۼѤB︯^u!>Ox.X=~p;sI1|pO ʹdȗB"wgs8Zy!$/›,xSÇ:Wmv:?_a-YT?ϕ,d fiuE0B^`IR]fq_O;U3_K/^;?yOn\츷 -|d> +endobj +818 0 obj +<< /Type /Annot /Subtype /Link /Rect [ 101.433071 766.923057 101.433071 748.173057 ] @@ -10427,7 +10495,7 @@ endobj /Dest (cb221-1) >> endobj -817 0 obj +819 0 obj << /Type /Annot /Subtype /Link @@ -10438,7 +10506,7 @@ endobj /Dest (cb221-2) >> endobj -818 0 obj +820 0 obj << /Type /Annot /Subtype /Link @@ -10449,7 +10517,7 @@ endobj /Dest (cb221-3) >> endobj -819 0 obj +821 0 obj << /Type /Annot /Subtype /Link @@ -10460,7 +10528,7 @@ endobj /Dest (cb221-4) >> endobj -820 0 obj +822 0 obj << /Type /Annot /Subtype /Link @@ -10471,7 +10539,7 @@ endobj /Dest (cb221-5) >> endobj -821 0 obj +823 0 obj << /Type /Annot /Subtype /Link @@ -10482,7 +10550,7 @@ endobj /Dest (cb221-6) >> endobj -822 0 obj +824 0 obj << /Type /Annot /Subtype /Link @@ -10493,7 +10561,7 @@ endobj /Dest (cb221-7) >> endobj -823 0 obj +825 0 obj << /Type /Annot /Subtype /Link @@ -10504,7 +10572,7 @@ endobj /Dest (cb221-8) >> endobj -824 0 obj +826 0 obj << /Type /Annot /Subtype /Link @@ -10515,7 +10583,7 @@ endobj /Dest (cb221-9) >> endobj -825 0 obj +827 0 obj << /Type /Annot /Subtype /Link @@ -10526,7 +10594,7 @@ endobj /Dest (cb221-10) >> endobj -826 0 obj +828 0 obj << /Type /Annot /Subtype /Link @@ -10537,7 +10605,7 @@ endobj /Dest (cb221-11) >> endobj -827 0 obj +829 0 obj << /Type /Annot /Subtype /Link @@ -10548,7 +10616,7 @@ endobj /Dest (cb221-12) >> endobj -828 0 obj +830 0 obj << /Type /Annot /Subtype /Link @@ -10559,7 +10627,7 @@ endobj /Dest (cb221-13) >> endobj -829 0 obj +831 0 obj << /Type /Annot /Subtype /Link @@ -10570,7 +10638,7 @@ endobj /Dest (cb221-14) >> endobj -830 0 obj +832 0 obj << /Type /Annot /Subtype /Link @@ -10581,7 +10649,7 @@ endobj /Dest (cb221-15) >> endobj -831 0 obj +833 0 obj << /Type /Annot /Subtype /Link @@ -10592,7 +10660,7 @@ endobj /Dest (cb221-16) >> endobj -832 0 obj +834 0 obj << /Type /Annot /Subtype /Link @@ -10603,7 +10671,7 @@ endobj /Dest (cb221-17) >> endobj -833 0 obj +835 0 obj << /Type /Annot /Subtype /Link @@ -10614,7 +10682,7 @@ endobj /Dest (cb221-18) >> endobj -834 0 obj +836 0 obj << /Type /Annot /Subtype /Link @@ -10625,7 +10693,7 @@ endobj /Dest (cb221-19) >> endobj -835 0 obj +837 0 obj << /Type /Annot /Subtype /Link @@ -10636,7 +10704,7 @@ endobj /Dest (cb221-20) >> endobj -836 0 obj +838 0 obj << /Type /Annot /Subtype /Link @@ -10647,7 +10715,7 @@ endobj /Dest (cb221-21) >> endobj -837 0 obj +839 0 obj << /Type /Annot /Subtype /Link @@ -10658,7 +10726,7 @@ endobj /Dest (cb221-22) >> endobj -838 0 obj +840 0 obj << /Type /Annot /Subtype /Link @@ -10669,36 +10737,38 @@ endobj /Dest (cb221-23) >> endobj -839 0 obj +841 0 obj << /Filter /FlateDecode -/Length 3623 +/Length 3621 >> stream -x[K# WleVb`x;rUvl9cwף%';u`ȏdu _z+])5'9>>HYz ;x$E_SJr!Κs_՚_+K3EU"+Fs`%pZ,de!D1$b -`ɞ/YbbA _c6X D&KPzxTj&/sx.e[RJX<,xD/Bldd K(-^,ک@XW1yyWZDL^J.@L{alQؤ ^,b5y%2ǐEks)n&/B<Ȃͷ $B9YrK N BNrf BNR0y DI,5yXX̐%[X@[XX[-,`୐O0b ” e` Ѕg 1 R edaw1A@GǾeOU;LV\(,,n($p7d|-,n+rwC`awda hka=x-,d. - w}E3|h|‚g7Zv>jaA"P ,"j w=#R[<,,] H,,@|s`&:XX`a$1ycGC-,H]jaARd wI<%XX{+:tĸ̈بYI(Rn1yII" *!گk yMX7n!ou~e!Ac !="$3ƞc!Vzq ٨Hvߖ_!$7Mn|8|?e<-@ߏo}zzFޯ IKi|GoL̜唷)P2 yX?co͡D'n0SEDtߐYЯa8agS٭:Nipηj 7Tc#Ұ˭} lTS=[fوmx -U4,7Q||q89j濛vQtެg}+STW^_ ٭WȻ)n4/innImw O_&ewe/^O?(To@_M"]([dV^Z'aP @n'q UsbWMbJM~*}d6 {}n]<Yn7)ww0)}|b&N|vǵ7ӒEqƢ -;M2?6|JkXxf0yHO7Xh-EiY]Y^R~Չ ?muݢVe -Y[Y临85~k5p/UoggoU6w@Ӛ9̢PPI }Z渷&Wlf7fSu jmѥ&>_͗Gy ߓ3~ņOf<*_vm;mt7tmIqHMc3Owk|]>dxZK[d)Y3DyBnI.Yt11fboY?}?rS{ j:Z;;LN~L /olx^N[OwLC9t '+ә{"{3vs\_kR1ex4%Zutp%Lј'EsZvbA΋tի2oZScJ#Ƀ'#S7rS<7ϋ֝t쮓aOIuQI:ǿ"ޕRsÁ\Ǯ_GO]5x|.r:>v:ÿc1ZS[e \rh*X`r1nV1b ׬ 1h P V,5BX,kA`|t JO/xJ e|٥,>zW]J)'%V/BEA-^,Ld %ː%@;*&P"o*XɫQ(Xy"lM< + %Q&D`~-p"r.֠EBYY(' ANq€PIb@(Il@I&^0A(BE&p 8@ta h+ p+T BL\XX\R 촰plau9`avYJ,,,.3F<@)[X ]Q`؊  ` `Enn,,n,,8pt`-,@/%DயO/5YX`L^u>CBΧT-,]* w`CD DgDj!ZXsp oLUG "p,,@vT$&/;`y ^-,H]$. Y ׀5|ɪx]a%‚հiaAJ RWsNJ!3yɡ-,Bd<"Y,,@b*baAC ȂdzdfyY`.f} @2W9&cЪK 6y<-,YB+pz N% x^,,U,,@(r% 3x ɶ.x[XPdA6haA Uf" QKBOHbaA4UnJHi `?(6Q^u%xQ ~][;Js# yg(pQ^4#",ps,jB/A; uɮh.r#67?^˾zwy߷?U9(y.$ۯ~(\ߙ!9)S*8+Y#d@$yw]&/"7zNXcC>ʂ~ é>#np" FN:wù R~"W0ؒǛؐ/f[P:H^/4QMbm#j['hY=D}lȗ=wSqs7ܬ˳˨UKjEj?ij ίΦA@>#](-2+/'NNO☷ڛ7v!Ĕ +yո mlx]Y0wK"o7/0)}|b&L'b>]7xnfZn8sQܦ~MϙRcc>l-P<߲Bz>HEl2~"RoCkDaQUbu4k+C/xF.j -{NWhYs4׃Y +*w_:OgAg{rf3gP < MsTTc5n}<67|O. 6>5^Qy\U'vINV㔚V^%/,ö8Kޘ䧃-Yd;d%KsNH=PLent|TNwya_FwQVeqN(k9xb&Ҳ$oe{}U_ y[%ɤjէ 4hU5cCdA: ԧl/=~3HٯNѫ̡k~2MPA;-I^/->B/d7^SY&\O_"?b6zljD^B^&5*f[# qPy /äͯٚo^I+= K^컨O+uܘRTޚi1sSCc.^|G3]ck6P:uQݢ=P :m̘L jZ#_VMuW+骯#Ȗx$@q5> endobj -841 0 obj +843 0 obj << /Type /Annot /Subtype /Link @@ -10709,7 +10779,7 @@ endobj /Dest (cb221-24) >> endobj -842 0 obj +844 0 obj << /Type /Annot /Subtype /Link @@ -10720,7 +10790,7 @@ endobj /Dest (cb221-25) >> endobj -843 0 obj +845 0 obj << /Type /Annot /Subtype /Link @@ -10731,7 +10801,7 @@ endobj /Dest (cb221-26) >> endobj -844 0 obj +846 0 obj << /Type /Annot /Subtype /Link @@ -10742,7 +10812,7 @@ endobj /Dest (cb221-27) >> endobj -845 0 obj +847 0 obj << /Type /Annot /Subtype /Link @@ -10753,7 +10823,7 @@ endobj /Dest (cb221-28) >> endobj -846 0 obj +848 0 obj << /Type /Annot /Subtype /Link @@ -10764,7 +10834,7 @@ endobj /Dest (cb221-29) >> endobj -847 0 obj +849 0 obj << /Type /Annot /Subtype /Link @@ -10775,7 +10845,7 @@ endobj /Dest (cb221-30) >> endobj -848 0 obj +850 0 obj << /Type /Annot /Subtype /Link @@ -10786,7 +10856,7 @@ endobj /Dest (cb221-31) >> endobj -849 0 obj +851 0 obj << /Type /Annot /Subtype /Link @@ -10797,36 +10867,41 @@ endobj /Dest (cb222-1) >> endobj -850 0 obj +852 0 obj << /Filter /FlateDecode -/Length 4345 +/Length 4344 >> stream -x\K$ s+HÇY v^lu*=v`'.R"?*U'2;sIϗ'kRWKl.*M,'\9?I%O']şN_mw]8L)٠ -X֑ -CTX 1BbGV\rX -+C *' brr8oʃ sD(=j'x xh( Y`]YAxL(YlN6s&[ְ>a PyI!h+7p5,`g5,U. $djXkX `aAlJJQÂX,xT^4$ Bd<‰5,@`m -aA򐅼װ yȂAD8DjzY`.j~@2 )DcЪƋVy<4,H bar)K@ kX -dhXd\9Ȃ [D9aAѠgdjX$TJ5,Mi)UdLhXd;hX&Y(9{I79CoM7BD|VÂ2M/%7)~[(J4,( YBY4oI7N/B_XÂY7ѫ[YͤnwC2i<."Өa.o"r{ ̒qfuzVu{Z%u|%GR7 &2],`:nX/1>`²4oQECš -}9F1zز?7_{_;eGl#1۾`?kD~9#2ݑ 0\Xw-*rȈN,iKGV+}!\KOM4tBtG81:={9}81 PIX֤*]؞6PC21˺ubn;՘iyIֺ8wRL; 1&憒ܖ,s+oƄykB3O3ޝeS1!L(ⰖLM(&ԩcУMWQW"uw>~Q@v!uYo_~f_:&OZ:߫T'{YC:ޫ%!'BCF92>,&kjtH6ǖU>Rz&*[>p9/z^șS~Ck=EUe0*KE__T!o)]sR6VPԯޜ0> \W1${7N7yֺۧ_z( (|.:R>~/NWIO5~My""gOw^{ JvjBʊn-0ou|\J[ۯm4.5M)߯{~ܵYe8VmWYaоSyDV{Yg*ǹ]X2\kB2 N$!kT]e Ukr$vW^ NMYE>mund?SE/{z8..VG?Ua ~_[ُڽ<{՟q?~ۣ[}3m\Ae*% nN>Z_0Ħk$gXeZHHr>$ ~*hu$jS5YYk]nUm}qt^v]Z#󭞛$:mCY#Yޯ<44lW997yq^>Rv z\g>m9icaó?M*hgrI`9ף5Ts&:tkb~x /E dquQMtӒ_wI - YC =d~\] 0ca;ϙ#j*D}v]:93;HߪGI}(g7:֮#[-ȩ(tݺnuL-Y)(NΡ<7Nl8njg?5ߥ7\4|Z3ǔZkoP)O^sū$А6{{`;|ػ:?6 ys3IЀ;[%Fq*~O{Fad\ȭl{s[k1y[LFsC훐 3C}؎{Cb2yIQn6 =qR (wÌ-gOY9蟉BXWM3p1~S .tr\Rv9F=[ϵ-rb V7Mem0tK*Ol#.#$ "ѸV;EmnaT<]ѐo&P(-;7,XD~@,@Sj]Ya6hr~dxۡUsXOj nkpC}cq Uyiiݖ{&i6甝(,߀;|H-šfUci۫z>/PyK>콗_TqŊѶcَق8%-m,(㵋5 :t_$hX;} Sn.}=YtԄWh/m7퇵I} 0mO>,jMȆdYΖصirU}W{%XVދ!Di/j|_5}=$A=+d qj{[hr2rWR@l:^Ė>HЪɃX}_:Vݑ,ƭdyS6^.JMf9 hpTIvd'b8 {n8yI@W].:7M+4׈=IʫfZSMb&JVOyRHrt@ĶӬ 17C^r -rR˭>Sʣji S.Sp-vXj_d\<ٍ?/>+lh7ij2)7U5Mw TN_wWщf'o4cG48\Jfg}lt؆:lKDݛj?u',y/19F`{iku<•'La"Z r15^UW+Vl ;DKX#$|d%%12 N1|r +!),g!֪<b+<Lң\|Qy <#21 Nc Y1d : KpVA4^,ɪ%ų>YCH_Xdxi@@, Uy +kX@D3iX@@[hX@[iX@[.jX@\i5, . T4, `.;5, .=iX@@] +kX@]5, .0p5UdkXt42iX]r6iX]װj`Q؊9[ e  |4,`rw}^zQX5B@Xa3a +?ŧV5,]1}*qoeb,.*Ұ wY`5,]GX5pb5,] Aq4,f骼blYÂ,y +$*/Ӱ`l,P "p{Ѱ wm Ұ w-#Qyװq xp[ŧkfXwMEÂܕeSÂೆ +̦5,łOEaA @ʃ,X֦P$Y{ ,4,@D`C Y)jX$30kXBD>jMNksIÂ`)v 2NaHaϱ@XL5,5,@ sdY jX}FXKBYÂHa&RAIH~l"QykXt3kX3dkX۔|3iXP,dAħaAHa`mrO9ĚkIzF2NH!G*7kBfB* +yܐ 3XO}ᳰa~#I~~o~Λ~iu-[i2ππr|'ᲫaI)W;J?iŸ)9OYD] epkvUݮ-RHY߭eV歎 }V_ikeI3eUsoUU6lǪ*:,{wx3j/Lŵ8 KkRh3X!pۉ$>xͱlwM䟓=Wb1hǢ-mڜyx|6~OCOpeqǿ_u&pUتɳWIVY[=*7cXZ4P^OFi謕ClzOr{}U]կZ{ݏ$C0PsAÇ#W2Z_ph?jk#cеjo$i'̪~Y8laubqs܏sy)SK7qMkخʦ_ 75&\dSΙK<ӭ r 5T&ؒ-ǭE5Q8#OKo͟Gw!khPܠAzv^9Bfl] l4x9bM(K's:‡[6io̰FuD|9[׃ݼ5}ۭ X%;39ƉGmV'2˚}VkrrQk*kxfoz}=lP7a{W!opP0 cwĨ5Nu=Oi/ۈƝ:rˀhnp}p~&WrxxoCBL8o#O3jfawv3Zn@vlU(uU437.2A')oa=Aݓ\;"'.`uӤX֦C$6"=MN <ؐ)kûi[K Јh= Ңc{p}͂Eb =eo&7Gz \5v \ >176\e'vmgm>yNى Ώ" +j[5=֟gs޸{uK (aW[Hm;[Ѽh-S܂vx͂<^X #a@U'!4f?/D߱ P qV3[FRwy0kLãҺoThmyٶzq99cǶ i {}To]{7> ]Qh'zȍU<dzENj w5!ܗ]F5봶*KUu!aZwt HL6g}>,Q+\ţޮ ݴ־'y;16ô}:XfHw7#y(gy8[bצU"k7^}֗`Yy/<]qX~JF䧓"x,mkj]]IXx%[F#C&bIJl~X!ftGOz(!64ho粣Q&ّHSw%]uq4Ot^#^N'*iM5"m4*Z>!I! ۚfLfO&/ {)I-L^*i~2LrWBLiM>b}ݒ%smd7@wOz\X: LNvˠTl4yY.P:U~qMJ^Y0F'⛝ULuXӀ4Nr)uU ]cꤲ.uo:vؒ]NkX9m r!9Cw`{gMz;v>g'R6ޓsdegOl" +<`vtw굯ɴrT9OˍHN^4GYo=~~9eغ!+|/I5bwyAvy :<쭤:w&ÉzGfeع rImprAФ<\$&q%Eǒ.".Fq9uXd1 NE~b +#2;7huS4_ ;-yv=ȱyP;wLj> endobj -852 0 obj +854 0 obj << /Type /Annot /Subtype /Link @@ -10837,41 +10912,35 @@ endobj /Dest (cb225-1) >> endobj -853 0 obj +855 0 obj << /Filter /FlateDecode -/Length 4380 +/Length 4378 >> stream -x\K sWXU` @< 8l{'A0`琿!ӭnAv0;-,ɖdτ,lM%E>_=}w"bu1Ζ8`K|26cW8{Ǟ)%:{rJVWX!\ -+Z% FHxJK bsYae9Yge1l IaY<B)<Lңs\\Qy <6XWL1dǐ%/@`IA9iY| kYS^, ExJfVy<)y {x֚*MI9)Y' @,Y8M%kXdiXdAȠa"S,o5=,05?`ȂHQ ɅYÂ"1hUEgr\ MGհpz F% x5,HU4,QdCd,dAa"]հ ;ȂhPÂ2HF. Uk<&3PQ 2M ʃ, ?l D aANͬaAΐőӰ)fҰdAħaAh$Lְ0f䛎5,_J5,(o"S(fҰ0d QTdAT&!:iY\a Jof f DDI-wC2i<."Өa.o"r{Lgf8Z1 @o٪ ؋*5J &2ժU0-e"&էDa gfN`D-+8 9=b %"`Wfbw""Eť&" a[] yEbPfZ"O(UI³S)eU[oJyᆐa!o5~[!Sey0a=e8r8XuM9NHҐB98<}Q1zgs2NbV8p!%^5Շevi}h*[Gߞ~}~x>}93!9,u\i~߿?|yenT$q^-!O%~aBSQIkfhЃ4_\N$ oudnuR&b:O[He.-~',EtĈlp3RȩY@ciĮB[I a`O]w}m ۯmY|X#T,L))c]7IJ&. Y -f 6vl.vyͿ鲴ㆎ@mc222^l[cdߧ[Vcp1ny#6c}` em᡹l[C81^Q`gҺ -cuW7)DBkŎzqVf몾i6fC8 ZtY*oϝabip8^*84)惩-oqш8}'pF`Cz>Ȳ7-0lW4*@#GBJ na1 r-ޯ?KIqi^d pBtԠUs"A<S"l|׿.{0"̹|N0_ yk^}TlBͤ2V-z 79ǾO}ccׇ9Wن0nן{}s42HjIh?)ҢT`9m.;L[&'SNJqSGo?\ZӚ.&M9"ܫ{"f܏MK9FUoJ~LSױD@+-w>踮uƿ7ޮmb4o*]Zվ?z| Yc qᡏS*Yx4VP+#y̫:[H3Tܥěg6=, ;/7s'rù#Rד^{ -ڎW-)jm(?ކ+z#z -!sDs l]^҅B!wW ۍC,}A=j=o[ڇl16rH`E}jfzۑއF搋2+}ݍ3܈/7ݪ6~ܸ9,?}=^k-c{SV澣$x -藅P=oyD5{"6}ylDN%_݅}Ɉr~ RjSWʲ lL~}a=5 J5-'t~DPr?"- -[]qx,/Ou%7D,%Ae)׶e-!>/4uy8*%,O~J䠾JJnK+~_u?:^KMSb+Yn< OύFgj&7z?]0CʋO KgP7.7YoYtMGr2v1 XZ\9&QԥAyq2|O/WeAm amߝ􌩝3@1ED><ך#E\NWzNoA"yɃ<;mxnoq2,޾BqXؒ_N޳Bf bJ @D^mlB]ܙTybɲz2v!UlXec>`xl= İ'0]';Xy⽩.vb}Tuik -E{SPUBF en.'աî31WC֮v -rR-SʽktS)^]@7+!_?C<؍/֕-:tPMo$aFSSkV<+PUg`<߯$⛍VH uXӀ)5e3)t[릱uP@O' cMY aH*LeEr檁dڸvvm+2l%:I'|d P/zkC'yA\؝L;q/c譼hh%~u9kغ"'I.$˛*@t<~'ۆj wnkݩ{mip fA3 -b d~{uqƠJq9̝|ĕ4G܅놎0a钭'iy -/s C!Е6bh؏lIJE"r 2R„O2/ۙv {95zhFjݖa+m5i=(\FFLUtjVU-St?GMqWø+qVƭ'^| hΩzKfލʽܼa=2-Z>gSuZ՟bs} j;?r%Ci>k%H3a; {Oʻu^(PzBSR -0GJr ..]y3gy`"cK%J(C` +x\[, ~_1UU I!L0y3>;unLxm/9˞RI_Ige&"/?~TKr˱N^ggJΆOޤU"V&%Š`h,;޳Ƃ\VXbxNYbdYcA [BRX uD*w +51WT^&71 Vc Y1d %Xfx}N/B=DazQlIz*5,:oװRҰp#avr& 2 u GK>5,` Xvrw] awa Ha{װDÂܵǟ@+cs>WMив1 pװ wY`4,]qRkJ4,( YBY4oI7N/BWXÂY7ѫ%,fRPL4jX 䛈lܞ!!>әY2άV p%Jj̀#E2GjcLKjـx si,QEC™,-}9z3J>?N_<=?ϦJY0~Q . +pex*&!~߈."B*]D P\Jn""b>صW$eu8-Q.o.)< y=Ry]Qet^nVr05m^=l}6c}\(//e XwX[XHߔL$ / đ.wvy='$h勓 [U?p\.ĴKCSq4 ::şŴO}Iğ~ߐ:.\?27b*8鐧?B~)}ᨤ5?[A]N$ oudnuR&b:O[He.-~',EtĈlp3RȩY@ciĮB[I a`O]w}m ۯmYX#T,L))c]7IJ&. Y +f 6vl.vyͿ鲴ㆎ@mc222^l[cdߧ[Vcp1ny#6c}` em᡹l[C81^Q`gҺ -cuW7)DBkŎzqVf몾i6fC8 ZtY*oϝabip8^*84)惩-oqш8}'pF`Cz>Ȳ7-0lW4*@#GBJ na1 r-ޯ?KIqi^d pBtԠUs"A<S"l|o?^9"s.Ӽ>AxBW'[yPc3c.f;r(,߂c}~NKk5ԴuP߶T^{={ko/wXo_f!i<++Bz$ނ8%d7^ 4d^'s'X0J$r}bβj 6P a\-)il9OYb7lU}\{Dk8qn7U&jFĞcӒ:eQg&8a-u,/ +g=>-:k0>ꍷk-2 J=/vo^7}oeC$9F\xㇵ7Ɣ_17:JHkV!v: 23wigfM=Cˍ2o;pHTe»}{Knzm?ވ+|[[tPUv }G.>uyZۖa [vM=%"Xz߄h졇vd(9'î!;9" Ji_w 7y iM7.@KfA2Z{('ު¾0SﺰlfEo__Ox͂j G Ǻ7I!];gߏH~Wܯ2.F] KIyiCʵtYKϋ=] cJ{m >S,+}|.59~|۵oh*gOouy|~ӲJe,sǙzɍAvs:L!S’Y=5ԍM[2]Ѵ]÷8WI%ui4@^ܻ4ӢKwa{t[Ckmۏ8=cj P:y9,ϵfHmb~lH^ N8^,6lb= DF䗓z,#ض.n["c?%&?PW#C&w&2F~z.pX!g{]lr(!VAض;$[O14LɎ)I!~Nuhf6kLՐ+BvhTjrZ(}nWh!MJG׏kPm)vviueK~9+(T~3u{Ԕ&3TF>Xn&%>f#4cC4`9lJfG}LJ{ֺilET6S H5XmFiX9 +:94S~Yj6Y6n'dž/#92&owJLobNrw56@:DI^W?v'N韧s>8!z+,{/|0|;jhI&ofJln36ZC;ǝ{w^[چqGb:Ȯ~LBl7/}]|"1Rb\.s~$!q%M.wạ#.Aq9LXd+1 IE~\Fȥ<8tM 80qҲGaA{Զ06ө~v;]Cm,?oANwZbс{A'J[MZQS).ݪZgUKQaܕ0Jܵqע%0sꫣ޲ŒYűwro+m?7箧yXwAbLw #3TVg_߂mOo#0jPZɾ"Rk%LSne]0m0T}ޭ:Ѯ4\sf*$KWY^XRFI?A endstream endobj -854 0 obj +856 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 853 0 R +/Contents 855 0 R /Resources 4 0 R -/Annots [ 855 0 R 856 0 R ] +/Annots [ 857 0 R 858 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -855 0 obj +857 0 obj << /Type /Annot /Subtype /Link @@ -10882,7 +10951,7 @@ endobj /Dest (cb228-1) >> endobj -856 0 obj +858 0 obj << /Type /Annot /Subtype /Link @@ -10893,38 +10962,42 @@ endobj /Dest (cb231-1) >> endobj -857 0 obj +859 0 obj << /Filter /FlateDecode -/Length 4385 +/Length 4384 >> stream -x\K$ ˒H^ 8C~>Jt̎"(#jw\RO'kRW[l.*M,'\9%J)Now97:}_>M)ѻpL)٠ -X֑ -CTX,1BbGV\rX -+C *' brr8oʃ sD(=j'x xh( Y`]YAxL(YlN6s&[ְ>!daw} z G `(cl  z:Y ރI f< p?ŧV5,]}*qoeb,.iXϬa0 z p":_!hXs0 oY+Ɩ5,]װQ $QyccjXEÂܵHÂܵGA^5mFjRhʌVDhԒPc+ufְ s4*jX7A Ty0aGa(sTd Y6L YiXPl4&kXZ ˨7=kXz3kXPȢDm(fҰ0d HQTdAT&:iY|a JRof fDF d7z\ ȤL@V-7$g:3Kř ꑁ"Z%|FR &*SU0U ,0a9}"!!f$,p Fvkьi>=~ROڏG)/n*$쪄5}DT?ȐXdvHfxVQe}q7;9#ľBj|S:[B --o,$ydC}D5W$ Ş[Ȫ"ZQ-,o NuKGɍЭw?>´OOmqq~ՕHi[C%`a ߆z֦57[Aׅc (I]…[C[٭Q"$1u9|kȬ`^[۲k/!91%0Bu2xdɺ5 W, <3`r@2Pld]~ ߯o07 gP"+ҵ")UX˫` Ѭ$ i;lq 'e|>lلU>O[.;9bw.;emluoP%aAvg$#CmN5W{p9GjFp/8|\bF}MJ"x|}"*} ޛ>@Ob.gvV'0CRI))}Jķ\>K#L>͌oFY6Ce.. ޷9$9t809qr0lA"ŒpK*qrt_끫eIn"is;pnkXd+vo8|rCZ 8>p+(JcK_v rxZþ`HxC?O<CR7_7kXmH("̹~NPXXZV?&{A4+bIexW0p^/7>rKTYt&mj/)ozOۯIXGxŊB8[QMtVUޣ)%v^ ݬ!z_~kB4q155m(CtТZ-Qo>Zvvb96 _c*ܓ74^VwZn* n>y0}<σ&^`/,O[n<@8V<vaz59䩞gE'uX"<!Ţ]ˣUncN{_mH~E/sz6}l߯:rWk6W&->voKtجS+7V]R:Nle辷旵5ԶLVtgW9<4_u,Xt{/nؓNsD4}SL~_Y-xG mlq!v.[2@aIMjdT؜=L_\mia0\2ބ{xse&h}F7DZ=&~m{s˴idžz}QUƽ79\Cgڏ[jcܖ>ܞ׎MS^Q='qI{pm5۝f_ee#{tsÊj}oƎS~٢IhsM(v \CrvcPy?><|+RudkUDCau%ֳ f?Zd#BֻT꣎R|mgCUcG^ӛn'gIEnB!HRJqiěJ}1BևpW+ȣ"T_vzjƭv;ޱ=0JIjz3.p]o] -|ɍ-۽~Vv7*z'Ә2}%^{>;W}t1CY)W\}-J{#Α5l*֝YmJ;>VbmS- /JF䧓e<2d!m]OrrزoIȞчZ7ymkD5ebɲzkJ/Ȇ֫Eǀ<7ɎD GdM'/(vAϪs>Myx9aZSTކjEh4 U:5}CB⧶ ΟvM^\vSHn-JU]Ke:xv*$ߠ3qK͓r -=qN!) -Dl jMUpFW*B -IjL"[%Q5 8N.RY_.[no5N*4:xlɮ[]' 5t 9tS~ڐj}&s}A;fr;.owF{~n =ڍ& 0F*ykG'>q8q/N5y -^,˝6_'>;qo;Zd"Fn3=O?.YCOxͣZsgb:Ⱦn}k&\!^vŻ%i -rpFH>OCJ.#.Aq9MXd1 IE~dbJ#Gn R`/͓<ЯvU<@;i Nz=P}9P&ߣ o.fyt[yRnͤ-PtLqRWU-S ü+]aޕxh+㶈׳% P9ѲYŹwhIvsh{C82S;CWk|g;uZzxZ^=T@!,߁8OG#/sx"J晰lrUO`یi5zb%LQЀ9{8 ߅VŭB2I(_}HfƦd*(isR  +x\[, ~_1J NLy3>k;Tun58gٳR]T*T=lɹϧ_N֤`\T_YN&s8,J&Sgaw}aw}BPyI%h0p׳P Ǫpt`5,@ϓx%+O%jX.cT^1.ABX4,]*Ұ wY`AD#DjuX pyCа` ߌ0]W-9kX%aH!9 "հ wދkkiʃ,k*>dXx]km*D஄M b@@,kX3R԰  R> ɂY*pb XB%kX`r4QECBIY=l9}z'RXq_݀+SUXI.U !k !`q=t!n˹p[!ԕo.wrVGç}Qt$`[XHj"@!4 kfDIvy=(UE% +ZP?X4 NuKGɍЭw?zWL?Xo_vW~Zw^k&۹e:TmXZimJ< ~\S}y]89B \x9HȨ< Is\÷H +չu.-k[S" +#\g(cG[íH jy29i3: +ͮn &G>*= vyK6no~}7\8YI}]^kof]\$aHdg[wlxXm~w?)a&y8m܏wwv&o/kg{*a ;|:& 'js ڣG͇q=U3߇xy3{WlRzߌc|0V}w!=:>XJLNS"t\gTof|0rа.tAnwq=n8=wΑ$ɡqoa^)LJ[Ryox_\-koMrIdae!'cؽ-r"ˍi>$T+WPǖB^8aYg}%4puг~#W y:>P5o_}?߬aM!(,29-{@ackYTѬn&yz]iP'y܀;|oQgQ\I@þ߇=i{o&!^`Ee+ A,^lE5Y'WyĦMx͂0t,^Ϸ}]>5!P ıԴI/'k aCj .D a\VKh E>,,,|^[rOްxZik֊1,YR5?x<`V:ě}/v{tuEKWu:įp9j?n>IBKp[;p{¶;v7NqzF^÷ R> <aqmrCMU~][ÖŒ]hqC>#}^/{q3ͼZ>c]mCks;r0-a^@:ud9I y P8PrDZ7'e}lwB}y +};JLUs=d^'55s e&g˭۱=Cu<@ồKU{?#\W9JV=#vCg8gt~8Gw﫩Gk6ΆƎ:7g^q#OΒ܄C ꥔17L4coޭ֯VGEyrɍ[+v=rc!{"(a +g\Nᨩ,{apj+nTU.6O1e\J0|v*b +!5SZBF#)JS9kH']U;?ӳ~/wr}?#%a[R_,$O' +yd27B\?>5`eߒǑ=m5?n< ֈk +=;eָ,_8 W"E'yn;oىD;M7ȞTyͽ մhtjh-p't9)m?횼,s3$Jk.':Z;zwɻ]>dxd1&do{M!@a>Ur֎N}>p2-^N?j<-W9Y;m?O|;qo;Zd"Fn3=O?.YCOxͣZsgb:Ⱦn}k&\!^vZ%i +rpFH>OCJ.#.Aq9MXd1 IE~dbJ#Gn R`/͓<ЯvU<@;i Nz=P}9P&ߣ o.fyt[yRnͤ-PtLqRWU-S Oü+]aޕxh+㶈׳% P9ѲYŹwhIvsh{C82S;CWk|g;uZzxZ^=T@!,߁8OG#/sx"J晰lrUO`یi5zb%LQЀ9{8 ߅VŭB2I(_}HfƦd*(ysR endstream endobj -858 0 obj +860 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 857 0 R +/Contents 859 0 R /Resources 4 0 R -/Annots [ 859 0 R ] +/Annots [ 861 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -859 0 obj +861 0 obj << /Type /Annot /Subtype /Link @@ -10935,42 +11008,41 @@ endobj /Dest (cb234-1) >> endobj -860 0 obj +862 0 obj << /Filter /FlateDecode -/Length 4887 +/Length 4884 >> stream -x][\~_QD !$ bvE{'Qut9.ng:.E~tT;ZyWfgr.)`M -#~R8:WbOBdR >mOuuw]8QXL&lPX,Ha`R!* XƂ!=+A .9h,g!qrgc1\ Ia9 9VAL^`"5w&K5]pc!K(iYc0"dHVAiY[ְ>!daw} z G `(cl  z:Y ރI4f< p?ŧV5,]1}*qoeb,.iXϬa0 z p":_!hXs0 oY+Ɩ5,]װQ $QyccjXEÂܵHÂܵGA^5mFjRh`ȂLQ ɅYÂ"cЪƋVy<4,H BӰk)K@ kX -dhXPdGfdAa2]Ӱ {ȂlPÂ3VjX$T:3kX9I5,` Ty0aGA,~2GA -aA^YÂ!^ئ7Bd|VÂ2֛5,_z3kXPb%ⷅ7!K@ -0 MƋְ(ͬa 7ѫ[Y֛I.dx]dQ<`V[[oHtfgVw ,7 [؋h= 5i1Q5@XYuλOU9$̜dnc c_qSmqR4f!8@L7dL׸%]J<&2@'c5+}ym+=6QOH&H7FL `|V@T\;De%z12M4q\Mvcm( %A5Yϭ,>+ tdMZzwNbCYOC^t&soo|QKg8,4Y+|ߜ=T'{^y!977s礜X(oCƇɚh#טB]/t}-*>p9ԑ3uWui_5]K]0EN@$.>t7/hO[2~l8+ m~<~h 4~[䐓 -]ZAK}jퟖ?G[ ZMO;wygAcklƥjn|ֹ yN$y NT>,*9KroҪ+hǢ]mF*M]'lkzkYz-=/z7쮕* ǫzn~khm뿍CtXi4dɯҦs ugЯt\Ǿ#;/e}Ҽ~mpUq2ɜ7m5kY Oإ2֛}9-ϋE^'-wEa36#чD:9K'=6t㊉BPڷt.ﱮ)gXd9?'+!yAZu^ZV@!Prš`K]FuyW~JꁯAI :౷Wʿ,|BK,18%f - 75U5DGGⵉoo.XjrCͪR}2(N7y(qK -"/ۣ; p]kL;zr=-ttbANY7>C1R vvHM7L.pۘ}-cS%/Y@A%ٝuޞ9%062`@*,ek3c1ϒaP)`čw/q1sJcV//0 CNc0h4G'!ܘ8R* ޷y{ڑRqfj,|xm[ԴyBfVrqlb!S׍o4laKiD{A-rϽ,WgK&P"}YA8q!5v8ۙu'erj_1<ˆYuxR%ys.@/]TRi׋#TbDz\T_:oX5g);]7w_36F'7ܒPtÌ9֯K4ہ3ckksnk7oɛ>fbK,ڞTN֥&h5lVڇ%3QK'p_7dQة` -V]TxvVv߅/*,X16fCݘ]o,ڵcݓv6y{;WfVdRgbUKꌻ[7^6ӵ9?2Gmk bF?yΛ␆3ܷ kmin=v Lyq3~W{/׈'nF }Ft vxLɞeF!/%_'vEI 7]D|檷9 &dcl;]:oǕY-'"F}D}F5Nn[ZD1z`m|#:>%bJxB#ʉS vA.$:mO3.g$y[ lлoVj7TJ&RČ(hls՞_t%9MYVN^}-H1!vxN} Y. fr 'hX7wy;_ŨǿY7:om>R ߈˕ ; p4Ӆ6Z56[d+DԌnO#_rm6<.JMfG< 7ɎD {dM'uAϪs>Myx:[RTܲٚj.6MBN dK;;ۚfLfO&wrSHZni-JTUKe:xv'{K,\<ٍOyù#/KDl jMUpF3TNwD|J鱣kpFI].n\Jy^klET6Si HuX]NkX9m r"9Cw`{gMz;v>g{]dxd1:dI& 0F*ykG'9>'"C s6bhvo>W9{wl]H&;ry#v'dGЬq'Q`o%]GP׹31 NdMẄ́+F=ҹHmpһ&ᐜq<!85'):B:짊xa;y -91?Li<sӍVG1A -L0ӲGC{>>0vөT:CsޡMG=1R ^=6:QshN[pmbj2ťZSKqVzN15YJ ]YiE-QOliΎ= --ε;GIj}߼E4 đQ-J^;Z<.Dsgbs+iku\jr a&'.6cj+=zb!=OVЀ S ^!,_^!Iz\+AxFɫ- +x][~_D l$@"Xa;N8y?եKU/3g;.R"?R*9ٙK|<}:|>Xꡲr2(TOt_ǹ_ޔ = +ɤ +e)LJ>DKX#$g%%12 N1|r +!),g!֪<b+<Lң\|Qy <#21 Nc Y1d : KpVA4^,ɪ)ñ$ :Ӏ,d 5$ Y ְXaw=a  w!AO V{NcL $&ŧqeCYKI\Ql(6'(%8flCQN] h=}_s%U +ʮIwȋNۤoǜ/ F<+beߜ}sg:dK9/87xcBCMy(p7YS|dS˲EEew.A_:rnV򵞢.+߼?z` \_ $w?61lƒū̚-ichm;wb @@׈Tmv9xfokzmcn>(ļcCa#6Hy]dkkuF,"־uZKr|qڷ]mLHqiAyZti6%愵2-*]KU45\@1$km'f;u$pW3XGLS!%Xrc3 +YxyU*y"uDX7Tr7?XfuI>b'ʼZ %\QQh.]U^e5{c= {p 'YN!ra~)Wj;;$ASJ&dmmLW1), ܒ:oϜr0 j2ӵߘ]g0{xILI0F̻ ˗9vxԍ1yDa+ߗ{WC^!I4fnL|)[Vۼ=H83yvX>6-jp<!3+c6)qOcQ%49OJ^tE_ ³%KKs>J 8Jz;`x29Al5}퇯\naDT<\9@p ˗B*)4E_*\cY._ՎKv_7hQ[jIܝ~n}nf#Nns(a%Su1 V59 ڵ]aM3\K?lBmKe*'zRgV}6+_C͎(k TΛIY2(Tt0yRo{a^.cU;\A}XFMuD|OX]@on̮7pڀIz;HGnPW%<]pI +!Б`)[@wy; vixȶjc3[ѭf6]ql+*{IbFq_49nj/nh,r+'> ;c䈹/v&Q.OG ~`r:)0L֢GڟdQR:jiqBi|F"WocdC2( e lbBz^JʕrTa)N𧃤1]otZY!#w|-DpMI +.\BxV-2"jF'/d6Zb%&3AˎGśdGv"=N &Ѻ vgչi[YF<-mO*UnlM5&JVOyRHmM3&Y {)A-L^*i~2LrWB;MGؓ\=qMS}mܑE + {"Mvr^5*fMO*B +Immit"k%Q5 8N.RY_.[n/5N*4:xɮ[]' 5t 9tS~Zj&sA;fr3.oowF<[~n $|zgqPOܼ{iit9OKRtKo4Pǁlp>qo;Z+|'Y!o6(58<쭤:w&Épxh'2_:7#` ݐ\zפ<3nG#$&$EGHTsx:,Cbs']"?S!5)G<avn("Hi~f7wZV(Bؽxcvhԧ&x:c\?CGyh;4ۢ'95FjF'jՖami .@[LMTkj#ΪR)ﳦ<+]a++׳% P9QYŹv(I}h{C82S;]K|GTB+ԝerS[lrw> endobj -862 0 obj +864 0 obj << /Type /Annot /Subtype /Link @@ -10981,7 +11053,7 @@ endobj /Dest (cb237-1) >> endobj -863 0 obj +865 0 obj << /Type /Annot /Subtype /Link @@ -10992,7 +11064,7 @@ endobj /Dest (cb237-2) >> endobj -864 0 obj +866 0 obj << /Type /Annot /Subtype /Link @@ -11003,7 +11075,7 @@ endobj /Dest (cb237-3) >> endobj -865 0 obj +867 0 obj << /Type /Annot /Subtype /Link @@ -11014,7 +11086,7 @@ endobj /Dest (cb237-4) >> endobj -866 0 obj +868 0 obj << /Type /Annot /Subtype /Link @@ -11025,7 +11097,7 @@ endobj /Dest (cb237-5) >> endobj -867 0 obj +869 0 obj << /Type /Annot /Subtype /Link @@ -11036,7 +11108,7 @@ endobj /Dest (cb237-6) >> endobj -868 0 obj +870 0 obj << /Type /Annot /Subtype /Link @@ -11047,7 +11119,7 @@ endobj /Dest (cb237-7) >> endobj -869 0 obj +871 0 obj << /Type /Annot /Subtype /Link @@ -11058,7 +11130,7 @@ endobj /Dest (cb237-8) >> endobj -870 0 obj +872 0 obj << /Type /Annot /Subtype /Link @@ -11069,7 +11141,7 @@ endobj /Dest (cb237-9) >> endobj -871 0 obj +873 0 obj << /Type /Annot /Subtype /Link @@ -11080,7 +11152,7 @@ endobj /Dest (cb237-10) >> endobj -872 0 obj +874 0 obj << /Type /Annot /Subtype /Link @@ -11091,7 +11163,7 @@ endobj /Dest (cb237-11) >> endobj -873 0 obj +875 0 obj << /Type /Annot /Subtype /Link @@ -11102,7 +11174,7 @@ endobj /Dest (cb237-12) >> endobj -874 0 obj +876 0 obj << /Type /Annot /Subtype /Link @@ -11113,7 +11185,7 @@ endobj /Dest (cb237-13) >> endobj -875 0 obj +877 0 obj << /Type /Annot /Subtype /Link @@ -11124,7 +11196,7 @@ endobj /Dest (cb237-14) >> endobj -876 0 obj +878 0 obj << /Type /Annot /Subtype /Link @@ -11135,32 +11207,35 @@ endobj /Dest (cb237-15) >> endobj -877 0 obj +879 0 obj << /Filter /FlateDecode /Length 3166 >> stream -x͛K$ )l2%zb`x;rXO6guݜ5bgԃEQ?Qx$|Ojm%BQ[M ~#I [z|g.4M%r-xÿc -ˏBTQRfGc-`Ir*0CZUO3$*`)U fSش8H#&"WCH2=]!ז+Œ<sEFOBYآSآQ<le™T {[]-` eqVE\]j׺D21(b]f)G`K&m(St [?P.:5fT Ga !3(<R$R UGT[R@j$q)B&آ=p-` 7X fؒ=0h+ -豀[=0 3c\x,` <0`t1݋uYsX.K e@]ftut +{,p#b%Հ8 +!J Mc` pu%`wMJcIRX@  c{{,@c!!-XnlX9 ZX[Xn>WB,3osn B >0>`EM ܍Ӂ15X.Xp o!Bյ@V -KcV@$qu% 8P<dpcAwI:5y,@^3J w)b=KTǂ ڲ dcAZ)cAnR>WcA!ruEx,@b걠$)y,( eX ?؂LcHjXP4c?zB-Ⱡ XBŤXK< x,( `x,RjBf"lA.t1z, XPS.3K՞NcA,UXi&H` 0cmX6:* jMݬ j-Ħ7ǂFǂF9XcA$ 0/mY=4&7smlⱠ lQ( ijμ<]-ǂ7o"w7{\j<4{,l=Zj;ЫX[#{Z̀_#0;˚S,PFr E>&WL8>GTPfb70-sbD/?xo?NODdXM0Uؚ퀇f! :fDi,nf$b,8salw&k)D gDNY &ዓtc1;|rN'yΧrFF(|:_nHp6VOl$~@`Ҏے],ƧqcjF)nv2¿{}OOb6+lw/_뷇i}믟i rfYkր Wǭ߿>Y {|W܆'uOTRB*o8^ll l|˰&ExN@J?Ƽ.bQ:8ͼ[j^m=tVzqY}v*Hn~X6ݭ;di9^&B>$ Dcco؝u߀a/m4T8q qIbTsݠ̗K *Å=硦ߏ{yA&|QZCMy Ñt{(6;MAEۘ<гqz_Ir~e 3QKoϛӈHzRO#%+wcnDT}-Qg9V7;#NZEE=aۣҧ?oώw7(l`f>`1^$+a& IZ0uW -yvT'W}O(r:x*iҼamUϧ߁ͼ=V7{p?Y@h_{d0ëa{9nܞ2ec6hgǕXƱEO^z?JoM=HC+U^6I0[pM\Sǃ"X$;&ܿhKb/8d%˒NmqcIX},7x;{;uQ3k=-xfg Ί7ői교8I'S-_J]% DCƋQmH"c~Ni`2j$=dk#z8tTں)3Թ;Gk!_F5%nҕ2f?8u*!4eJK2;O!5l_g\jvbssϝxRf]b%Aw;..[Hh42F<ahw.|6['lN)}}:Kdފp-s5ٖ=so,+2__9?9-`x]mz1maS,=:kiqhWN.4B7E^<.8`.q]:u<$\ҡT(.۴L ȵz_֡`kX䩓̮MwvK^ K\;mg8FqM}t}HW1R.Xsx;wzh̩1S 9XctYm/kegb2b6ZwvR9ŔzZQNuTUYkx#[e͒#,TfIېiH)jzU!sT+X+X%N ՜=aÖH]F^\~VL%/&WǂB$ -uhҪǂa豠D؂c2ٷ=-w,Ԧ걠r ׮BcA)BŤXK< X=[0U<`) +5"3t [d{,@ ǂa A5V23y, +$\lY=TRE&i 0>N fW[$ǂZm7ǂZaKiⱠlA籠Q&{,ơ#Xиbc7ǂ&&xμmmY<4- )-H3o$7A'OaKl걠li#jLEf=MdޞTj;ЛGb*Gr `&v5XVdr E>7L>GTPfb70-sb@o|NN#EmM0Uؚ퀇f! :fDiHC73K1v_h2,6vgc$guJ0Ql _k =>gtg|~[!wot7OZ'F +gTl~@`Ҏ"ے],qcjF)iv2Coޜq *<~7Coޝ~ʶ7>2,TCkր"лׯxkOo>)(v^~V܆:W OTZB*ßpE?;^ll laϪǛ$Q%Y/yi' v%Yvw2u` Jgrȉy)՗SYFr7@TkBڦ}aG,d}w.eR//!|=4uC?6ј:o@aÑ(|*{M$1nP%D^(&9wݕ=wPKO!Z%}GI봇|phh_t^uC={l '=ϫ)IAy$j32"=RzDl5cYt~nʳ~AIǢnDT [r ݣnvFbכj8{¶G6JWox{t%IJfZ ,nztdvh^D;sQ|E`GujxoW|Aᖓ%-HK9=H.ˇɷU=_~6X}gأ=,9q}Y8W9^0JoM=HC+U^6O4-T/o8&_LpQG3&ܿhK;LuIL'ڿѸͱטXԫYn vvf[=P _aJfg ΊOYh[!-MqnSL:>tܘI|lx9΀m2d$9sjBk.:کv١ӾP \@F]6Z,ݦWn^*#_WOuT:*W-He͒#,TgI۾w_mm4$̔ftS1sR+ ,ElB5g'lؒȋ<~Vr{"J֞0AEo=iT&Z#^5UIvb[E{k=ڎeH5 endstream endobj -878 0 obj +880 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 877 0 R +/Contents 879 0 R /Resources 4 0 R -/Annots [ 879 0 R 880 0 R 881 0 R 882 0 R 883 0 R ] +/Annots [ 881 0 R 882 0 R 883 0 R 884 0 R 885 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -879 0 obj +881 0 obj << /Type /Annot /Subtype /Link @@ -11171,7 +11246,7 @@ endobj /Dest (cb237-16) >> endobj -880 0 obj +882 0 obj << /Type /Annot /Subtype /Link @@ -11182,7 +11257,7 @@ endobj /Dest (cb237-17) >> endobj -881 0 obj +883 0 obj << /Type /Annot /Subtype /Link @@ -11193,7 +11268,7 @@ endobj /Dest (cb237-18) >> endobj -882 0 obj +884 0 obj << /Type /Annot /Subtype /Link @@ -11204,7 +11279,7 @@ endobj /Dest (cb237-19) >> endobj -883 0 obj +885 0 obj << /Type /Annot /Subtype /Link @@ -11215,49 +11290,27 @@ endobj /Dest (cb238-1) >> endobj -884 0 obj +886 0 obj << /Filter /FlateDecode /Length 3336 >> stream -x[K$ 賁%z1r9v<6QUXݜݙ]9xvvKE~Tpyrp|yp$ơoI๸Z^T\i)|禨_O?|uױM8GZ!QXLR|2X ,`J)ؚłp{VjXcB  F,--<{A<3EPzx1\[l&JxD.)XrΩZ<,`dI[`*kZ=/R%/`dQX\ ^,٧f K"-AƏN$*ŻSx XA,1C_ 'da@,ql@rP ` 8b^ , sMdP,`adLЖa-} }bz K5ȅ)5 KN  w/PR`f K %BKY`J0p/0pn-,:abƂ` ܍ S"7p7&-,`n-,87. $dZXx^$ ЙHK,,H ZP[ wCB ]ȹYXTdaA>x-,H@b$.da$ a&9j wKDa+C -GjaA"7 2p'" 2p3YF ׀5|ɪHa>`-p,,] "X-,Yp WvlaAn<|&/;ŃY&pa XFZXP"d-,( ekٷ=,0s@2W%eǠUpm*xXXP -;`aR-,;I,,4WՈȂ$d`aA٠5V2{Iⱗ}frv*ZX7NHi `l`mɃ,‚Zl7B装Mo ,,,h>;I-,罅-T7#[Xf~[D~2Ɂ\a}D)9v]qY:Is9fSyJq7dzXkeʆzfs̽~ʬv6$,lNtQ^D׽Dmކ砱a;mtv@`Re4B1PqD~{ћ?hYqCſ2OrwOE@Yq}Dmn2lJ> {#j?тt7:۽\0iӁȏ.nd߿_ ٫IۆgT > -jХ\fEV] -T˖dC$cZKNVx?nt7zdl]RćݜOjYXd4plNՅ(ϙ+8e -]D~}ìߨrN.XlUa/{D!vyĝ~wrד~f̼'BÌv9]MMJ+`R1H4[i$q淁 "ZpO{v R`&quȺp5$9WtOjE< rh./].ucQ1;1ET:E0)&nβ?=~yaǣh':7y3͞An/rn0x -y5 G04L&CEtc F3ҵY{+Ҙ!F6BAOźxBYuT]!\! -SՀmIvS R2U/^ -TARfu׃g &]sЃ<П^_yxP'OUSĄ:ϦR/cq:Ka8싔LrkԂmZWB҃bh~feȔfC-}R9Ţ5L%&*;"̖h&@IsY%A˺Iv?6K2S;+0'! -E߈5g`˗Z -Wu46{ySpLK"\hff͛Szl ˍMg?"[E.3I[+X?cJ/a -endstream -endobj -885 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 884 0 R -/Resources 4 0 R -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj -886 0 obj -<< -/Filter /FlateDecode -/Length 3182 ->> -stream -x[Mϯ$>!|&`@!?8͏y+[!.v,lN8{ -W5Z[z?}8yWO/qs_I൸Z)K>?v/tӿo Z1?HŕZOD A(%WJLrpbkL5RѨ5DPCcDTh (jP#L5BK!zOePīJ$\3rmQY,d". )0Ys9TLKj>0Y.)z&.*0Y.StaFd*A}`&.Je 2_K}E\"Bp )T BddA$>2@/'ZIFn,ARt3 X@je,ksZ0-9ͭ0 x43&]KeE2.]Pqt* lUߪqpg\ `\Y(8W p/ +)GqwEg\]*k.X-B΍qAb 3jd\A0S3x7$.ĸ\p]*kηZ$.h)2.,|PYqpd*qA(ʠe\5iqAEbd\P"tAk7]@ ](tAȸLjSe\PRz Ve]-k*¸u\E3.;K@ Ȃ2.( T`*r5"3g]d3.@ Y j.X̞qfh%aj&Soʸjv*2.@` 2`\vb\XPt jܬ j.GM[oCd| dqȼg\Bz3*ĥ7+&M,H6ɶ, Bʠ F&؉2tMmY z=,tL3`̖=7g\XmY鎁&̭t{1[gAFP+˚U|L8oQeCYu!,\sbL?|N;e|#Y1ڱaߟ`, ~\eA6RC0}űߚC^;Jome?XNizz򴡫ӫef; 􇽎eMJfA|0΁Gl,K[c0{(anCm6ʬ͎{7pw٭P+*p-GY\=7>[qdM[fsCP|=*;݇2Nu}//\KxAX:y@>d7vl|/; l?x +x7čgK' OK9 ȗ{ Yq'h೩Su/y~77;֏ߝ/\?xkOkR  oiޚxrƪUxm7׽5^] ?ZX;lb6Jv{W<맶oϘ6:t9z2Zϴaģ^ݮzne+zgv- p^$|ʛp=4Us}[ғ;טo;,haj0WBYrnz |'mQzh9tK]!??ƠGHn1Ct#9k̍=:vp"1vuYYz G,3:ˡC^z(=ܣrkh7ǖZ?k)H{"#G[}ϨN"#<{XHΨ@2v"lp, -dwRF뺾wޛý.׻𼽥އ40lN# Յh)Y~l cB7l8?d?~a:Nz;b/(U>~zwq৓T.Ϻ4yd`SRJJr\q=cVǝaawfur -r6UeW_ Lߚ[pԡO7tyStaQ6m8?^.vkT5Yb`)&F9 :lj@>Z1S=u8rm#D9Re6,TY.u`-!+v|/yK ty,W4\oew/Y(.wJi<"t);?V#5Ҏ:,B)gw{aaCb7f rϪ$[8LQذC 44]^zpXYΧ.săz7OlzȂjlb /}Nv}\ c3өOsQRl%6YV8e߿NzO[o}&Wv2~3l60F uM<׺G04Le uc2#Ί3c&뭌ΡcC+m]2YSywVtMj^)nFMsȽiz_kk%5Ub+Xb {FgoC<"I}1C'qTmsfЬKؓX>u=vH{:FD1ج 0KqV*3XO>*ӈiP3̖d&@iwzWəKV*){l[oy.ELz,=,ء[Ȭ;!g5ҿQkCE5|᧽% S_}7AeV(yڥO3_o -м-T%վP3/Fy{` +x[K$ 賁%zH8!FzsGUIbusfgvٙ.zPRMJɻ<Bg%Rh!PqXzŸ~=_6]k9tGa1RK`5| +%lrpbk b‘YbpbA  +1K{VX#T V#DM ^H.Crm^(\8`9jK%fo S-/CMd+%B;U&kR&kK[\mɃGar1xdɃ,|xY?8jxk&O%caY Y|-BXRȂؒ܊x1X@@$P, 5y[X@D%2YX@@[XX@[-XX@[![X@\-, . ,, `.;-, .ܽXX@@]J9ZX@]-, .q0p-Md[Xtt*YX] +XX]Q`؊z g  B+>H0p7&Lݘ|c?dka=x,,@g."- wCC3|hBm‚ g 7Zv!faA"P "j w!R[N`&9&Pb jݬ +Y6eY,,h 㳰$M0PߌlaR‚FMl meY,,h YRY45oIo,^,-goV f`<,qp75 "3&2[ko ?Uv<1ބjx`/U1 w># s($܂=ǪFT~;O>=|OƏF'Lccj8A!"͊|"3!`z[b?I-:둎`t5Q[ɦ5EYҪ;D^.UQפPK;~/uK&N|0Ɓ&.%j!ZceUƿ*=*kr7Y5bPA#Yϣ.Z i:a-s qŰjPU6TQ;DmCٴI]^C-Xzs%Ueڙs`;NvЛ:o+8XX+`ٯ|B3e)#xs秜ޞ YTƎȑ㟰|p7އ߀"g)m !o-zhO~w n]w|ެ"8eT~&|OK{;LEٟuVDI>C]n[WqoyXlӼ㲍7e<Sw7ކw/&{|scW]4i/}*08'e ևqO&9ЖK[|OA?&Ǯ+.K'iNqtC6<=܌z_6{rW~;O?LuYٜ%s2>]x}-< + G6=sՋ躷tضom+ӆLi{/ =!%ZO#dZ +ǪMK%'~=P+ }?/CN_ }(X,9ޛGf.˦,ސ.{Ѿ{RVVtÍwްF! M.D~uqk' Jߕ^N6Ag_f,)njRr~\xiFڧLJ#$6 l2{޻yu{6CuW'Ɂ"{W-r!OGSuyZuA-ZΧ(|jRjhMj5\'$;?f,U?CYzr2Re֪i_,S:o.*,#,9\k_;儜vZX0=M$$WeQKkܝTIIUZoNQI'갥eU +L +tgULK HM8ôIX~9MSK4]>A{.ry2W=YM ye~5Kw5? >wW`VOBB]g9Կk/hm> ȗ mE>P]͚72> stream -x\K$ 賁- l d|fsG(=ݳcHDQGRUhRJ)Of_j4_њhk*>/F6MWGԚ~&VK.9*Xz㒳Ia%`j,spa#5U =B mX֘5:cT1!xl\4K*Ui<V% %Vc5^,ц`4d d Oި&aP5SA@5,]oMְ wFN;LVWѰ w]1AÂu!@>5,]-rw]4NÂu% `( Ǩpt`5,@y 0␖hX")> ZlIÂܵۧb34-ؔ@5,]gѰ : "pzDjܵ "pyC԰X$ -tU^]L-EÂ,9 S$*//0$ax1C5,H]aA轆 kY|q n48 x]crհ w)ljX2\Ѱ.Ȃ4,HՀOaA6 D@ʃ,! X/עaAv;aAv)j}dA,5,-aA [J\baj5,/.iX1AÂ\! \E8dB$ Z ,5,(LFDhԒP ̢aA iTQ *M ʃ, ?TlG PD AÂREÂR 3N&՛YÂj 2> I 3FÂj M4,_RY4,ޠDmͬaA %"EQyISUzdq5hXPSzhX4&2zHPn@&Ef4,@&2[7ޘBgQO 7"G؋h3I=4,KRO VF=60_ca 'yD`1dZd[dn~9|{?ǯImDrR4vUym' 2 /5mԢOAFtdOk:b:\ ID(Pn1s:ILsI+yԹ9ԎGlg9&@%#ѭHwa{4έ.=zӴr&k? 5 -KrXĬPe5gqeB6!IG262 aB䘦$QPRMhPTS;~Ooq\q\'!/:ԛ9'+X[9ߛ|ݗr^p7{s?ݞr YN ְPڧ!}O߾?P?<cl7m7'o:`+vh|gl]|H}hg|!Β|~3iC*uIYkҡMƓ$ўi|My%^U1FU]1NJm4SX?d6[]1h;)5k>q]cX˩[C')7eutj?IqAkrdwIee;!ldKUr=?̽o'*2O4ν}Z hxUuc!uqOSkzhrx^ci?Xk9g([( (PdӲBI Of1g͵~G;ڬQX@RcZjGNzOZxUaeⷱ*Ә:7lg^K{>Ʈs5Y9Ű{3uI_@>?w٢Эz[[BR2cu:kF՝ȫ C>y_r'ю˧qb6{yϯk/K^g{={DZ-+vfO5eN jK6G˾qoɻ1d<}snx]\?u2eC 3ģKܨenjuVn3.e1.iR]n6ݰ?7^=5kEζ* ȏ5r8mF:GŶylR68rF5wsGrxFG9 Z"qF`?cqxP9ǛX'>p+se>Yk͙?]>I1O:V│c9P4wRg뜚 -&q;5)^{OMc{nDW=uV;>eN׳kT:b=2s g"{Py=yRum} [J3Mֶҹj߰.'NZ dɕw!N2G;NK矟}wr2=ŝ-GYݦ[aya۵TVKNVƮ_}_OAONO8Sޞb? i§ 8qOkݮU -(z]!- W' "nk]mFLLJknuPwl,WN"m31ȭFǠasַ -Ϲ nrQ 婘>! F KҾ?}\շvc*ldze^os6_?o[$|f'BU9#am=|h&:zC j`Gz,om w|~ =OO~$’8(rF.tײŒlϐ/r tb匦>򥋼?m\0ɷ+DܙL7dzMY|o!JL,3}m d9YFhtcQ衺4Ct:+ -u7OL'J/X BAslH ;;Cl]ǒ†FűSy*ʚLSe(^Dƙ]]G5צq;In_ -+LdӓD/bLj.*&N qP yڅ äٚoZIM6W7=/xzBC.2y~-:C:ѐ)&Sdrz?ȭ4h4~ rhU.Hlȁ֕C y۪Qt. E}ʶ.gځhҧ^)-nl._Ov/~=}τstLJ-'"j D+%LD98t5&hGQjb"1V"PCy5KP&BDC2(U%YH.bpب@Jd2sL%5,AT=AZ,C Z +tN# +]]ʠ>0YZU>ʢO.Ud!*CDar!]OʠKLIJ$ZEx LKE ` ]|ɌAxq@,iH VqZ29-E ĖV@) FޗƸ wmd\2.Ypd\VJf\ )eĸx EeE2.@b횴ʸD"12.( e`\. ܅ Sd\&s2.()c=2Y5UBa\P:LŁqR"K dA]* 03Y.H Ӆ,5Bd jXefϸ34֒05ufe\P5;K LSRtM0.b;1.M,s HRF[nVB#7 2>ggi28d3.hbq֛qA&x$nd[oMKBBeIS#q NzdĦ Zζެ f`n T[o]M d]dqnDfě +3.tzVe +3 _[#Met*mE>p}ڷ2ܡ`ά:~9V1ymO_{?w_k,HA0O0k_WdO`M 6RC0X ֎o!76d',"}vPW ^=njjYracYR0Y! psX.%J#P`C2kqf.p*{E(·|C;ixl.ؼB|rU~ +vpL}hӫefK_"Ru9?^{ٝ6ۿK΂/O9?^|B +o= q/|/GRg%^wx>|\|6uŶ4ϯߟ͟w|} O/G|Sq}_;ÿgڳ=k"*AuܪF)ޚMuoͧtwBϳ@-N4ۡRG~*|5:] O`3#]E3mW뼞mCvʽ3M}8/7m>́cOᦹ>-טo;,nhaj0WBYrnz |'mQzh9tK]!??ƠGHn1Ct#9k̍=:ovp"1vuYYz G,3:ˡC^z(>{Gn8돯-~ПS+m;حE>G6o@[QDGxb+Qe&0D؎NY;!o#0YwvÍ'uz{on^ԟ {*}H;I\]vi^z0)tÆ3OfDC*v\u9 .|k7 Xu/~֥a#X$5H1iXbc鴸§z;([~Bt9L{7H5AKu؜v RHwC7m8~V'yaz݄†}&WJ;xfGc9lf Γ;;\; 2n>?K)l_G# ~v \h\AfS梤lsKmܳp/|ױuǣl'Lf'믄dgl`ԍ*7y<ƍu=a2hLˆ eG+D淎͚o2:fĎa pwudMJY5Cq{7{lK;5!FM݇BfK#VL4W=ދR`o5썶;}ҟ^yC'OcN|;9eYl'3YR }tCz(Fu`wb0?Yc:aJTfNПvK}T>*;f-Leί3URض޷=f ]䕙Xz(Y9CYwBB]0Qk(ל!j‹mk䓟O{K"n(W +AeV(yڥO3_o +м-T%վP3/Fm{r endstream endobj 889 0 obj @@ -11302,26 +11358,23 @@ endobj 890 0 obj << /Filter /FlateDecode -/Length 4317 +/Length 4326 >> stream -x\K$ȳ%Xa~65 }GeHdeDu횚 `PG(2=~ ppԜ|ɻ, >Ysvj*rA ]s:'5 >+咳U 9J2X)8b bH 1Xc,@ U!F́-U -rɃ ,^ .-KW]JIc"'Exd %&Ēej -duY|UrR ɫ=/zqR lLv)e!KRMddaX‚A@Ƀ,֮R-Y(F r,,,@Dj@mb Y)ZX$s2[X%!V-^d+laAȥ\4\b‚\! pEDD/@ / J,-,( LxhPcyfpr*ZXmLHi `&ba$HsLd!a Jn J,G `of ,,,>9 -,罅5䛑-,|XXP#DgJIlaAe"QLdAT} LB tx Ԕ4, @, 7Y.J2Y<."da.o"r{f8Y1^o5K o͚jd &2˒̪*eE%s%MVl Ft?rZO?}=o/?i`IkƊ\6#ՠkBRtS!ny"Cb9 iw-h\tרczϻuwU%'!{w#|ǎIa!N{:O!Xfx\w8#a|D:]yO繢ׄPsTժgKӺe1hY؜oOvtѩWըq 2Hw>U2"\ݪ~׫Ua2eYʕ}\B!yҷVB$ GucÅc~sz $Cܐ)kN.[BOkJEH -!Sæߠ,1`&_$ -;=]{;eZteYʌWzupѺ+w3cFC~zJ+Ɣ[YF=1=l^Oǒ[o"ޓ`gNȡ[6\P!(,/ekfoNn~ǸcZPCPbaF}Elc{S kϿajօik͟;gd1Cʜc/;'.L-=ؚ-jzy<`uARFq1G,Hz9] 8rh'*}>m -ABsڏ ݽXduK VsyÈUE0ɼ/U(~l'r`2?nn/JAJ)qcɎ_I1o̢&7CK[5g*3Nfz0'aZS䧛o\Z< [|#}|͡pD%K.ʗA\lgw?EXM#Aw4^]nr}߆}ٓ>vK"ٲ]Cs-99=Pއ>z};-z:=%?j|* fmuqL~;lq}^- 𹹾qfL e`G vx|"5 3Hއ bnV u1s4X 쓣O%Iaw ^kهCM r-c fv)Sx Z80yI\ylk|ccD}.kx=xƷLK~;kXpG -_!nftsdIdJ$Q+#ps{ǨFH=F.?O"0k=szxzbyv)ޏ˯\9y$1Ik蹤q1 -B5ͰqTT38} |c]>E_ޓ8a]d[`Z=n^@jb=b]ةc]>^1P26xDaFvVr_k1#k{߲:8)`i]3BFzO?u -E^Q;-PUjїG©Y2Zv'_|x?JT~']~/TWi1=7L#z-i>RvOU_}jzރ RY:qOKrZD~71iı`uGV7,*/@%9YrY[ir[R*% Y\[6#wVܱ.ګC@cw}akɎ~<&$ښ/h f}Ƅ:W\+4lX*6fԭUqyDw7i2b?NnƗeI^6̸xJc88oug}@VwˤW?@8uC=~T9H֓8D1coݭzަSx -B2k߅I -YjeYJ(]c +x\K$ ׯ˂l 1>Lbz >ST*BŇiz:CP(ORTe;jtVr<>)_jt[XLr-tLPLiɗ||:MSv:{ћֲw'b`J-&.(L)>e[X#U Fl5i, +B {V k(,g!֪<bc ^d25w&+5^&xSxfK%ƃ,1Ԣ2d 9XY|-A⡝*duUYlN`R1y&jV9gl3a ZdP Ǫpt`5,@ 0HK4,H]ZW[ְ w]f\˹iXTAÂ|V kX. Rk IÂbAH,Yb 6-aA%xaA)LsȾ\ BdLm1jXPRF=jM-kWsEÂRA(v2NaPaE J,p L5,H5,@ sTY jXP}EШ%j-ՙUÂTQ *M ʃ, ?Tl' PD KHQÂZ=UÂZ!^&՛EÂf! 2> ͆d YaAs/ެ`QoSLfѰEȒ<Ȃ)~ LB tx5,h9SY5,@zz$P,qp75 "3zV[o*tf'Л[# E*ꙁR@LT5`:X/Ä<0Y --"QsnBد?}@=769)`v +Ay6 ~jщ #:8ا5U]t1C ID(Pn)s:IsI+yԹ9Ԏ'l9&@ ѭHwa{vͭv.%zVciM֦jJnbE7"*pk2UW;ʄ&ymB䇍eL(l*&du„*zo)OkI4РEϩv4⸔ӿBYϺC^t277{sߙeW;O,W,7{s7T'/ox3ǻ=ܗ??@mX!}χo?翠~|xwֺ_:o-o߈3?7s;𛗿7awv& +YbCC8*uw)M"I=Kx]:x$8:?K&H",J;4ag?ȴ/->mu9BeG;.^~:kȋYM1X0Cc qrj2~g_cI\ee;!llMr{BvYN>"D಴OﷲmqSӶ]w_q!/㞦ײN{}XcuV4sXޔQ,Mt'QJɄ}@hƞ5-HVέU=坞nч'ۘY?lm^41Js|ΥXi:&viLR3=PeӢ{5ǪY9Ű{3uI_@>ْ۟Эdt;W /C(c;t}ROΕW{n>w ^]_V_+[c[QVu͞6kF˜@Ԧlp돎}]wc@x2j#>Lܾ.~7e:8~mm=VsUg:GQ_Ր^g]f5csu]ӤrMwyû|nra2ob{j\CmUS64/ko| >㴍CƁkLok!4 ic=Or9-;f_e϶ykw ?~\3:Ym$֒XKgE^ +p, +;&r DŸt@ؖ\YcV;t bsNO'z̓թ8`(=q읧o:&%'_d?}&պKr,S$UO/ucih,Į3m2@ϖ3 +rOKv +bn}dy= +=T'q.Us_T&iÖR<kA B6{ c}ApG|gy|kXXِ׸B:~hiT꼵(CWh'qzWrMDj쵭nx:8?_x+?Fp[WdcF2rmGF^u u+iP0]LBIXQЛy1';54 +Hrk"FۖINŀ ,ƈemjbRNrWܕKrR P\9rɪв{P;h{ˈS<3S;oK/¿p֋IѕCU9C"m*F祯3a;L G/Ex=C yۚUt. E}.ghҧ^(nb/> endobj 892 0 obj << +/Filter /FlateDecode +/Length 4317 +>> +stream +x\K$ȳ%X 0vჁ6 :Ƣf2Pd2˞ `PG(2=~ ppԜ|ɻ,>Ysvj*rI ]s:_w'5 <+咳U 9J2X)8b bH 1Xc,@ U!F́-U +rɃ ,^ .-KW]JIc"'Exd %&Ēej +duY|UrR ɫ=/zqR lLv)e!KRMddaX‚A@Ƀ,֮R-Y(F r,,,@Dj@mb Y)ZX$s2[X%!V-^d+laAȥ\4\b‚\! pEDD/@ / J,-,( LxhPcyfpr*ZXmLHi `&ba$HsLd!a Jn J,G `of ,,,>9 -,罅5䛑-,|XXP#DgJIlaAe"QLdAT} LB tx Ԕ4, @, 7Y.J2Y<."da.o"r{f8Y1^o5K o͚jd &2˒̪*eE%s%MVl Ft?rZN~=N_~*e'&H7R rm8F0A3a4 !Q!r] ťB#lE*s@0y),%[7y'YW%Ѹ(g%!膯Qn`w<$K7ywYi!OBX/yM!JG! B5~G!7N{:O!O_~/Xfx\w8#a|D:]yzy5?\:kU#YҴn6s ڧp6S7w*3]tո1G5j 󝢥zqj~Wj3>e d$.j˲+R}.C?,o/HhQƆ /Nǜ.}sqH!?R@a]*qC煞ה B`̇MAYc`j='MH + v{,*w}cʲuWnqf^,ه,~$W)z]cz)"%!j|E'>ϜCTmX_ajօik͟;_fd1Cʜc/;'.L-=ؚ-jzy<`uARFq1G,Hz9] 8rh'*}>m +ABsڏ ݽXduK VsyÈUE0ɼ/U(~l'r`2?nn/JAJ)qcɎ_I1o̢&7CK[5g*3Nfz0'aZS䧛o\Z< [|#}|~\t8 ^ .|6;꟢n;O79oCznI%lYܜRVCzKI DUV>=ўGc}>LEaC_k&{8VK>Fݍ\8ajs3ϲ#Let<Y>{ R܅ zCR_17L+ 9 +zQ'\ˤx u0PѻXL5}!_ y&13;q_)RZ<OcwO$.1ľil5T.F/I.jCz-0~7}rHv5rñ.(P0h~#N{g;[+FoɏvۑxqownJzS MG.!m#rǺPJXҎE}/z}~i'~쫾pjIנ=<^R+^Kݟji՗n&m}2B߷>G@Ӓ\h=8Micz.ql7X PI/GNVblVJfGWb͈wGp?j}!]_Gm;9Bs f!C$ZYߵ1/m#k@|= M8u%pn;eG!m|^ Q]CgfZ)ŏӻe{ 3A=|l?R{G,=3ΛtYO2p~gG+$/i zm狥m:Nz8ro`PXƑN`#m?ǮFwwsJm:ADzޅ@R-WiuA\:qOD'iա´mr>"^Nn/&U>TnFPuP c d}haUӷG Gl&chU֮k~e5u*ChfJi}fKkd7x9 _Nֲbnz3q^V*EUؚWAUi&ϮW$7y갥ym;+> +endobj +894 0 obj +<< /Type /Annot /Subtype /Link /Rect [ 101.433071 766.923057 101.433071 748.173057 ] @@ -11347,7 +11434,7 @@ endobj /Dest (cb241-1) >> endobj -893 0 obj +895 0 obj << /Type /Annot /Subtype /Link @@ -11358,7 +11445,7 @@ endobj /Dest (cb241-2) >> endobj -894 0 obj +896 0 obj << /Type /Annot /Subtype /Link @@ -11369,7 +11456,7 @@ endobj /Dest (cb241-3) >> endobj -895 0 obj +897 0 obj << /Type /Annot /Subtype /Link @@ -11380,7 +11467,7 @@ endobj /Dest (cb241-4) >> endobj -896 0 obj +898 0 obj << /Type /Annot /Subtype /Link @@ -11391,7 +11478,7 @@ endobj /Dest (cb241-5) >> endobj -897 0 obj +899 0 obj << /Type /Annot /Subtype /Link @@ -11402,7 +11489,7 @@ endobj /Dest (cb241-6) >> endobj -898 0 obj +900 0 obj << /Type /Annot /Subtype /Link @@ -11413,7 +11500,7 @@ endobj /Dest (cb241-7) >> endobj -899 0 obj +901 0 obj << /Type /Annot /Subtype /Link @@ -11424,7 +11511,7 @@ endobj /Dest (cb241-8) >> endobj -900 0 obj +902 0 obj << /Type /Annot /Subtype /Link @@ -11435,7 +11522,7 @@ endobj /Dest (cb241-9) >> endobj -901 0 obj +903 0 obj << /Type /Annot /Subtype /Link @@ -11446,7 +11533,7 @@ endobj /Dest (cb241-10) >> endobj -902 0 obj +904 0 obj << /Type /Annot /Subtype /Link @@ -11457,7 +11544,7 @@ endobj /Dest (cb241-11) >> endobj -903 0 obj +905 0 obj << /Type /Annot /Subtype /Link @@ -11468,7 +11555,7 @@ endobj /Dest (cb241-12) >> endobj -904 0 obj +906 0 obj << /Type /Annot /Subtype /Link @@ -11479,7 +11566,7 @@ endobj /Dest (cb241-13) >> endobj -905 0 obj +907 0 obj << /Type /Annot /Subtype /Link @@ -11490,7 +11577,7 @@ endobj /Dest (cb241-14) >> endobj -906 0 obj +908 0 obj << /Type /Annot /Subtype /Link @@ -11501,7 +11588,7 @@ endobj /Dest (cb241-15) >> endobj -907 0 obj +909 0 obj << /Type /Annot /Subtype /Link @@ -11512,7 +11599,7 @@ endobj /Dest (cb241-16) >> endobj -908 0 obj +910 0 obj << /Type /Annot /Subtype /Link @@ -11523,7 +11610,7 @@ endobj /Dest (cb241-17) >> endobj -909 0 obj +911 0 obj << /Type /Annot /Subtype /Link @@ -11534,7 +11621,7 @@ endobj /Dest (cb241-18) >> endobj -910 0 obj +912 0 obj << /Type /Annot /Subtype /Link @@ -11545,1602 +11632,1589 @@ endobj /Dest (cb242-1) >> endobj -911 0 obj +913 0 obj << /Title (CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6) /Dest [ 6 0 R /XYZ 85.009843 502.818898 0 ] /Count 141 -/First 912 0 R -/Last 1048 0 R -/Parent 1053 0 R ->> -endobj -912 0 obj -<< -/Title (CIS v1.6 Kubernetes Benchmark - Rancher v2.6 with Kubernetes v1.18 to v1.21) -/Dest [ 304 0 R /XYZ 84.259843 784.970079 0 ] -/Count 2 -/First 913 0 R -/Last 914 0 R -/Parent 911 0 R -/Next 915 0 R ->> -endobj -913 0 obj -<< -/Title (Overview) -/Dest [ 304 0 R /XYZ 84.259843 704.822079 0 ] -/Count 0 -/Parent 912 0 R -/Next 914 0 R +/First 914 0 R +/Last 1050 0 R +/Parent 1055 0 R >> endobj 914 0 obj << -/Title (Testing controls methodology) -/Dest [ 304 0 R /XYZ 84.259843 166.076079 0 ] -/Count 0 -/Prev 913 0 R -/Parent 912 0 R +/Title (CIS v1.6 Kubernetes Benchmark - Rancher v2.6 with Kubernetes v1.18 to v1.21) +/Dest [ 304 0 R /XYZ 84.259843 784.970079 0 ] +/Count 2 +/First 915 0 R +/Last 916 0 R +/Parent 913 0 R +/Next 917 0 R >> endobj 915 0 obj << -/Title (Controls) -/Dest [ 309 0 R /XYZ 84.259843 608.631496 0 ] +/Title (Overview) +/Dest [ 304 0 R /XYZ 84.259843 704.822079 0 ] /Count 0 -/Prev 912 0 R -/Parent 911 0 R +/Parent 914 0 R /Next 916 0 R >> endobj 916 0 obj << -/Title (1.1 Master Node Configuration Files) -/Dest [ 313 0 R /XYZ 41.740157 784.430079 0 ] -/Count 21 +/Title (Testing controls methodology) +/Dest [ 304 0 R /XYZ 84.259843 166.076079 0 ] +/Count 0 /Prev 915 0 R -/First 917 0 R -/Last 937 0 R -/Parent 911 0 R -/Next 938 0 R +/Parent 914 0 R >> endobj 917 0 obj << -/Title (1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 313 0 R /XYZ 84.259843 684.651496 0 ] +/Title (Controls) +/Dest [ 309 0 R /XYZ 84.259843 612.381496 0 ] /Count 0 -/Parent 916 0 R +/Prev 914 0 R +/Parent 913 0 R /Next 918 0 R >> endobj 918 0 obj << -/Title (1.1.2 Ensure that the API server pod specification file ownership is set to root:root \(Automated\)) -/Dest [ 313 0 R /XYZ 84.259843 553.851496 0 ] -/Count 0 +/Title (1.1 Master Node Configuration Files) +/Dest [ 313 0 R /XYZ 41.740157 784.430079 0 ] +/Count 21 /Prev 917 0 R -/Parent 916 0 R -/Next 919 0 R +/First 919 0 R +/Last 939 0 R +/Parent 913 0 R +/Next 940 0 R >> endobj 919 0 obj << -/Title (1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 313 0 R /XYZ 84.259843 423.051496 0 ] +/Title (1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 313 0 R /XYZ 84.259843 684.651496 0 ] /Count 0 -/Prev 918 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 920 0 R >> endobj 920 0 obj << -/Title (1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root \(Automated\)) -/Dest [ 313 0 R /XYZ 84.259843 277.251496 0 ] +/Title (1.1.2 Ensure that the API server pod specification file ownership is set to root:root \(Automated\)) +/Dest [ 313 0 R /XYZ 84.259843 553.851496 0 ] /Count 0 /Prev 919 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 921 0 R >> endobj 921 0 obj << -/Title (1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 313 0 R /XYZ 84.259843 146.451496 0 ] +/Title (1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 313 0 R /XYZ 84.259843 423.051496 0 ] /Count 0 /Prev 920 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 922 0 R >> endobj 922 0 obj << -/Title (1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root \(Automated\)) -/Dest [ 315 0 R /XYZ 84.259843 739.970079 0 ] +/Title (1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root \(Automated\)) +/Dest [ 313 0 R /XYZ 84.259843 277.251496 0 ] /Count 0 /Prev 921 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 923 0 R >> endobj 923 0 obj << -/Title (1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 315 0 R /XYZ 84.259843 609.170079 0 ] +/Title (1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 313 0 R /XYZ 84.259843 146.451496 0 ] /Count 0 /Prev 922 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 924 0 R >> endobj 924 0 obj << -/Title (1.1.8 Ensure that the etcd pod specification file ownership is set to root:root \(Automated\)) -/Dest [ 315 0 R /XYZ 84.259843 478.370079 0 ] +/Title (1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root \(Automated\)) +/Dest [ 315 0 R /XYZ 84.259843 739.970079 0 ] /Count 0 /Prev 923 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 925 0 R >> endobj 925 0 obj << -/Title (1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive \(Manual\)) -/Dest [ 315 0 R /XYZ 84.259843 347.570079 0 ] +/Title (1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 315 0 R /XYZ 84.259843 609.170079 0 ] /Count 0 /Prev 924 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 926 0 R >> endobj 926 0 obj << -/Title (1.1.10 Ensure that the Container Network Interface file ownership is set to root:root \(Manual\)) -/Dest [ 315 0 R /XYZ 84.259843 170.823057 0 ] +/Title (1.1.8 Ensure that the etcd pod specification file ownership is set to root:root \(Automated\)) +/Dest [ 315 0 R /XYZ 84.259843 478.370079 0 ] /Count 0 /Prev 925 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 927 0 R >> endobj 927 0 obj << -/Title (1.1.13 Ensure that the admin.conf file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 318 0 R /XYZ 84.259843 694.023057 0 ] +/Title (1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive \(Manual\)) +/Dest [ 315 0 R /XYZ 84.259843 347.570079 0 ] /Count 0 /Prev 926 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 928 0 R >> endobj 928 0 obj << -/Title (1.1.14 Ensure that the admin.conf file ownership is set to root:root \(Automated\)) -/Dest [ 318 0 R /XYZ 84.259843 578.223057 0 ] +/Title (1.1.10 Ensure that the Container Network Interface file ownership is set to root:root \(Manual\)) +/Dest [ 315 0 R /XYZ 84.259843 170.823057 0 ] /Count 0 /Prev 927 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 929 0 R >> endobj 929 0 obj << -/Title (1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 318 0 R /XYZ 84.259843 462.423057 0 ] +/Title (1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive \(Automated\)) +/Dest [ 318 0 R /XYZ 84.259843 694.023057 0 ] /Count 0 /Prev 928 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 930 0 R >> endobj 930 0 obj << -/Title (1.1.16 Ensure that the scheduler.conf file ownership is set to root:root \(Automated\)) -/Dest [ 318 0 R /XYZ 84.259843 331.623057 0 ] +/Title (1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd \(Automated\)) +/Dest [ 318 0 R /XYZ 84.259843 365.776036 0 ] /Count 0 /Prev 929 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 931 0 R >> endobj 931 0 obj << -/Title (1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 318 0 R /XYZ 84.259843 200.823057 0 ] +/Title (1.1.13 Ensure that the admin.conf file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 323 0 R /XYZ 84.259843 702.470079 0 ] /Count 0 /Prev 930 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 932 0 R >> endobj 932 0 obj << -/Title (1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root \(Automated\)) -/Dest [ 321 0 R /XYZ 84.259843 799.370079 0 ] +/Title (1.1.14 Ensure that the admin.conf file ownership is set to root:root \(Automated\)) +/Dest [ 323 0 R /XYZ 84.259843 586.670079 0 ] /Count 0 /Prev 931 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 933 0 R >> endobj 933 0 obj << -/Title (1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root \(Automated\)) -/Dest [ 321 0 R /XYZ 84.259843 668.570079 0 ] +/Title (1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 323 0 R /XYZ 84.259843 470.870079 0 ] /Count 0 /Prev 932 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 934 0 R >> endobj 934 0 obj << -/Title (1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 345 0 R /XYZ 84.259843 184.188585 0 ] +/Title (1.1.16 Ensure that the scheduler.conf file ownership is set to root:root \(Automated\)) +/Dest [ 323 0 R /XYZ 84.259843 340.070079 0 ] /Count 0 /Prev 933 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 935 0 R >> endobj 935 0 obj << -/Title (1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 \(Automated\)) -/Dest [ 436 0 R /XYZ 84.259843 702.470079 0 ] +/Title (1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 323 0 R /XYZ 84.259843 209.270079 0 ] /Count 0 /Prev 934 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 936 0 R >> endobj 936 0 obj << -/Title (1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive \(Automated\)) -/Dest [ 499 0 R /XYZ 84.259843 563.129014 0 ] +/Title (1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root \(Automated\)) +/Dest [ 325 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 /Prev 935 0 R -/Parent 916 0 R +/Parent 918 0 R /Next 937 0 R >> endobj 937 0 obj << -/Title (1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd \(Automated\)) -/Dest [ 499 0 R /XYZ 84.259843 234.881993 0 ] +/Title (1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root \(Automated\)) +/Dest [ 325 0 R /XYZ 84.259843 668.570079 0 ] /Count 0 /Prev 936 0 R -/Parent 916 0 R +/Parent 918 0 R +/Next 938 0 R >> endobj 938 0 obj << -/Title (1.2 API Server) -/Dest [ 508 0 R /XYZ 41.740157 784.430079 0 ] -/Count 35 -/Prev 916 0 R -/First 939 0 R -/Last 973 0 R -/Parent 911 0 R -/Next 974 0 R +/Title (1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 349 0 R /XYZ 84.259843 184.188585 0 ] +/Count 0 +/Prev 937 0 R +/Parent 918 0 R +/Next 939 0 R >> endobj 939 0 obj << -/Title (1.2.1 Ensure that the --anonymous-auth argument is set to false \(Automated\)) -/Dest [ 508 0 R /XYZ 84.259843 720.651496 0 ] +/Title (1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 \(Automated\)) +/Dest [ 440 0 R /XYZ 84.259843 702.470079 0 ] /Count 0 -/Parent 938 0 R -/Next 940 0 R +/Prev 938 0 R +/Parent 918 0 R >> endobj 940 0 obj << -/Title (1.2.2 Ensure that the --basic-auth-file argument is not set \(Automated\)) -/Dest [ 511 0 R /XYZ 84.259843 277.220079 0 ] -/Count 0 -/Prev 939 0 R -/Parent 938 0 R -/Next 941 0 R +/Title (1.2 API Server) +/Dest [ 508 0 R /XYZ 41.740157 784.430079 0 ] +/Count 35 +/Prev 918 0 R +/First 941 0 R +/Last 975 0 R +/Parent 913 0 R +/Next 976 0 R >> endobj 941 0 obj << -/Title (1.2.3 Ensure that the --token-auth-file parameter is not set \(Automated\)) -/Dest [ 516 0 R /XYZ 84.259843 558.470079 0 ] +/Title (1.2.1 Ensure that the --anonymous-auth argument is set to false \(Automated\)) +/Dest [ 508 0 R /XYZ 84.259843 720.651496 0 ] /Count 0 -/Prev 940 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 942 0 R >> endobj 942 0 obj << -/Title (1.2.4 Ensure that the --kubelet-https argument is set to true \(Automated\)) -/Dest [ 521 0 R /XYZ 84.259843 799.370079 0 ] +/Title (1.2.2 Ensure that the --basic-auth-file argument is not set \(Automated\)) +/Dest [ 511 0 R /XYZ 84.259843 295.970079 0 ] /Count 0 /Prev 941 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 943 0 R >> endobj 943 0 obj << -/Title (1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate \(Automated\)) -/Dest [ 524 0 R /XYZ 84.259843 352.220079 0 ] +/Title (1.2.3 Ensure that the --token-auth-file parameter is not set \(Automated\)) +/Dest [ 516 0 R /XYZ 84.259843 595.970079 0 ] /Count 0 /Prev 942 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 944 0 R >> endobj 944 0 obj << -/Title (1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate \(Automated\)) -/Dest [ 529 0 R /XYZ 84.259843 558.470079 0 ] +/Title (1.2.4 Ensure that the --kubelet-https argument is set to true \(Automated\)) +/Dest [ 519 0 R /XYZ 84.259843 164.720079 0 ] /Count 0 /Prev 943 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 945 0 R >> endobj 945 0 obj << -/Title (1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow \(Automated\)) -/Dest [ 534 0 R /XYZ 84.259843 799.370079 0 ] +/Title (1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate \(Automated\)) +/Dest [ 524 0 R /XYZ 84.259843 427.220079 0 ] /Count 0 /Prev 944 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 946 0 R >> endobj 946 0 obj << -/Title (1.2.8 Ensure that the --authorization-mode argument includes Node \(Automated\)) -/Dest [ 537 0 R /XYZ 84.259843 352.220079 0 ] +/Title (1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate \(Automated\)) +/Dest [ 529 0 R /XYZ 84.259843 652.220079 0 ] /Count 0 /Prev 945 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 947 0 R >> endobj 947 0 obj << -/Title (1.2.9 Ensure that the --authorization-mode argument includes RBAC \(Automated\)) -/Dest [ 542 0 R /XYZ 84.259843 633.470079 0 ] +/Title (1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow \(Automated\)) +/Dest [ 532 0 R /XYZ 84.259843 183.470079 0 ] /Count 0 /Prev 946 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 948 0 R >> endobj 948 0 obj << -/Title (1.2.10 Ensure that the admission control plugin EventRateLimit is set \(Automated\)) -/Dest [ 545 0 R /XYZ 84.259843 183.470079 0 ] +/Title (1.2.8 Ensure that the --authorization-mode argument includes Node \(Automated\)) +/Dest [ 537 0 R /XYZ 84.259843 464.720079 0 ] /Count 0 /Prev 947 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 949 0 R >> endobj 949 0 obj << -/Title (1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set \(Automated\)) -/Dest [ 550 0 R /XYZ 84.259843 352.220079 0 ] +/Title (1.2.9 Ensure that the --authorization-mode argument includes RBAC \(Automated\)) +/Dest [ 542 0 R /XYZ 84.259843 745.970079 0 ] /Count 0 /Prev 948 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 950 0 R >> endobj 950 0 obj << -/Title (1.2.12 Ensure that the admission control plugin AlwaysPullImages is set \(Manual\)) -/Dest [ 555 0 R /XYZ 84.259843 520.970079 0 ] +/Title (1.2.10 Ensure that the admission control plugin EventRateLimit is set \(Automated\)) +/Dest [ 545 0 R /XYZ 84.259843 314.720079 0 ] /Count 0 /Prev 949 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 951 0 R >> endobj 951 0 obj << -/Title (1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used \(Manual\)) -/Dest [ 555 0 R /XYZ 84.259843 314.223057 0 ] +/Title (1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set \(Automated\)) +/Dest [ 550 0 R /XYZ 84.259843 520.970079 0 ] /Count 0 /Prev 950 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 952 0 R >> endobj 952 0 obj << -/Title (1.2.14 Ensure that the admission control plugin ServiceAccount is set \(Automated\)) -/Dest [ 559 0 R /XYZ 84.259843 799.370079 0 ] +/Title (1.2.12 Ensure that the admission control plugin AlwaysPullImages is set \(Manual\)) +/Dest [ 555 0 R /XYZ 84.259843 708.470079 0 ] /Count 0 /Prev 951 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 953 0 R >> endobj 953 0 obj << -/Title (1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set \(Automated\)) -/Dest [ 562 0 R /XYZ 84.259843 314.720079 0 ] +/Title (1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used \(Manual\)) +/Dest [ 555 0 R /XYZ 84.259843 501.723057 0 ] /Count 0 /Prev 952 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 954 0 R >> endobj 954 0 obj << -/Title (1.2.16 Ensure that the admission control plugin PodSecurityPolicy is set \(Automated\)) -/Dest [ 567 0 R /XYZ 84.259843 558.470079 0 ] +/Title (1.2.14 Ensure that the admission control plugin ServiceAccount is set \(Automated\)) +/Dest [ 555 0 R /XYZ 84.259843 264.976036 0 ] /Count 0 /Prev 953 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 955 0 R >> endobj 955 0 obj << -/Title (1.2.17 Ensure that the admission control plugin NodeRestriction is set \(Automated\)) -/Dest [ 572 0 R /XYZ 84.259843 708.470079 0 ] +/Title (1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set \(Automated\)) +/Dest [ 562 0 R /XYZ 84.259843 520.970079 0 ] /Count 0 /Prev 954 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 956 0 R >> endobj 956 0 obj << -/Title (1.2.18 Ensure that the --insecure-bind-address argument is not set \(Automated\)) -/Dest [ 575 0 R /XYZ 84.259843 145.970079 0 ] +/Title (1.2.16 Ensure that the admission control plugin PodSecurityPolicy is set \(Automated\)) +/Dest [ 567 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 /Prev 955 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 957 0 R >> endobj 957 0 obj << -/Title (1.2.19 Ensure that the --insecure-port argument is set to 0 \(Automated\)) -/Dest [ 580 0 R /XYZ 84.259843 427.220079 0 ] +/Title (1.2.17 Ensure that the admission control plugin NodeRestriction is set \(Automated\)) +/Dest [ 570 0 R /XYZ 84.259843 258.470079 0 ] /Count 0 /Prev 956 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 958 0 R >> endobj 958 0 obj << -/Title (1.2.20 Ensure that the --secure-port argument is not set to 0 \(Automated\)) -/Dest [ 585 0 R /XYZ 84.259843 708.470079 0 ] +/Title (1.2.18 Ensure that the --insecure-bind-address argument is not set \(Automated\)) +/Dest [ 575 0 R /XYZ 84.259843 427.220079 0 ] /Count 0 /Prev 957 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 959 0 R >> endobj 959 0 obj << -/Title (1.2.21 Ensure that the --profiling argument is set to false \(Automated\)) -/Dest [ 588 0 R /XYZ 84.259843 258.470079 0 ] +/Title (1.2.19 Ensure that the --insecure-port argument is set to 0 \(Automated\)) +/Dest [ 580 0 R /XYZ 84.259843 727.220079 0 ] /Count 0 /Prev 958 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 960 0 R >> endobj 960 0 obj << -/Title (1.2.22 Ensure that the --audit-log-path argument is set \(Automated\)) -/Dest [ 593 0 R /XYZ 84.259843 558.470079 0 ] +/Title (1.2.20 Ensure that the --secure-port argument is not set to 0 \(Automated\)) +/Dest [ 583 0 R /XYZ 84.259843 314.720079 0 ] /Count 0 /Prev 959 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 961 0 R >> endobj 961 0 obj << -/Title (1.2.23 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate \(Automated\)) -/Dest [ 598 0 R /XYZ 84.259843 799.370079 0 ] +/Title (1.2.21 Ensure that the --profiling argument is set to false \(Automated\)) +/Dest [ 588 0 R /XYZ 84.259843 595.970079 0 ] /Count 0 /Prev 960 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 962 0 R >> endobj 962 0 obj << -/Title (1.2.24 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate \(Automated\)) -/Dest [ 601 0 R /XYZ 84.259843 352.220079 0 ] +/Title (1.2.22 Ensure that the --audit-log-path argument is set \(Automated\)) +/Dest [ 591 0 R /XYZ 84.259843 183.470079 0 ] /Count 0 /Prev 961 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 963 0 R >> endobj 963 0 obj << -/Title (1.2.25 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate \(Automated\)) -/Dest [ 606 0 R /XYZ 84.259843 633.470079 0 ] +/Title (1.2.23 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate \(Automated\)) +/Dest [ 596 0 R /XYZ 84.259843 445.970079 0 ] /Count 0 /Prev 962 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 964 0 R >> endobj 964 0 obj << -/Title (1.2.26 Ensure that the --request-timeout argument is set as appropriate \(Automated\)) -/Dest [ 609 0 R /XYZ 84.259843 183.470079 0 ] +/Title (1.2.24 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate \(Automated\)) +/Dest [ 601 0 R /XYZ 84.259843 727.220079 0 ] /Count 0 /Prev 963 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 965 0 R >> endobj 965 0 obj << -/Title (1.2.27 Ensure that the --service-account-lookup argument is set to true \(Automated\)) -/Dest [ 614 0 R /XYZ 84.259843 408.470079 0 ] +/Title (1.2.25 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate \(Automated\)) +/Dest [ 604 0 R /XYZ 84.259843 295.970079 0 ] /Count 0 /Prev 964 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 966 0 R >> endobj 966 0 obj << -/Title (1.2.28 Ensure that the --service-account-key-file argument is set as appropriate \(Automated\)) -/Dest [ 619 0 R /XYZ 84.259843 633.470079 0 ] +/Title (1.2.26 Ensure that the --request-timeout argument is set as appropriate \(Automated\)) +/Dest [ 609 0 R /XYZ 84.259843 595.970079 0 ] /Count 0 /Prev 965 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 967 0 R >> endobj 967 0 obj << -/Title (1.2.29 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate \(Automated\)) -/Dest [ 622 0 R /XYZ 84.259843 183.470079 0 ] +/Title (1.2.27 Ensure that the --service-account-lookup argument is set to true \(Automated\)) +/Dest [ 612 0 R /XYZ 84.259843 164.720079 0 ] /Count 0 /Prev 966 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 968 0 R >> endobj 968 0 obj << -/Title (1.2.30 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate \(Automated\)) -/Dest [ 627 0 R /XYZ 84.259843 427.220079 0 ] +/Title (1.2.28 Ensure that the --service-account-key-file argument is set as appropriate \(Automated\)) +/Dest [ 617 0 R /XYZ 84.259843 408.470079 0 ] /Count 0 /Prev 967 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 969 0 R >> endobj 969 0 obj << -/Title (1.2.31 Ensure that the --client-ca-file argument is set as appropriate \(Automated\)) -/Dest [ 632 0 R /XYZ 84.259843 633.470079 0 ] +/Title (1.2.29 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate \(Automated\)) +/Dest [ 622 0 R /XYZ 84.259843 689.720079 0 ] /Count 0 /Prev 968 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 970 0 R >> endobj 970 0 obj << -/Title (1.2.32 Ensure that the --etcd-cafile argument is set as appropriate \(Automated\)) -/Dest [ 635 0 R /XYZ 84.259843 183.470079 0 ] +/Title (1.2.30 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate \(Automated\)) +/Dest [ 625 0 R /XYZ 84.259843 239.720079 0 ] /Count 0 /Prev 969 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 971 0 R >> endobj 971 0 obj << -/Title (1.2.33 Ensure that the --encryption-provider-config argument is set as appropriate \(Automated\)) -/Dest [ 640 0 R /XYZ 84.259843 427.220079 0 ] +/Title (1.2.31 Ensure that the --client-ca-file argument is set as appropriate \(Automated\)) +/Dest [ 630 0 R /XYZ 84.259843 483.470079 0 ] /Count 0 /Prev 970 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 972 0 R >> endobj 972 0 obj << -/Title (1.2.34 Ensure that encryption providers are appropriately configured \(Automated\)) -/Dest [ 645 0 R /XYZ 84.259843 670.970079 0 ] +/Title (1.2.32 Ensure that the --etcd-cafile argument is set as appropriate \(Automated\)) +/Dest [ 635 0 R /XYZ 84.259843 745.970079 0 ] /Count 0 /Prev 971 0 R -/Parent 938 0 R +/Parent 940 0 R /Next 973 0 R >> endobj 973 0 obj << -/Title (1.2.35 Ensure that the API Server only makes use of Strong Cryptographic Ciphers \(Automated\)) -/Dest [ 667 0 R /XYZ 84.259843 506.287950 0 ] +/Title (1.2.33 Ensure that the --encryption-provider-config argument is set as appropriate \(Automated\)) +/Dest [ 638 0 R /XYZ 84.259843 295.970079 0 ] /Count 0 /Prev 972 0 R -/Parent 938 0 R +/Parent 940 0 R +/Next 974 0 R >> endobj 974 0 obj << -/Title (1.3 Controller Manager) -/Dest [ 676 0 R /XYZ 41.740157 784.430079 0 ] -/Count 7 -/Prev 938 0 R -/First 975 0 R -/Last 981 0 R -/Parent 911 0 R -/Next 982 0 R +/Title (1.2.34 Ensure that encryption providers are appropriately configured \(Automated\)) +/Dest [ 643 0 R /XYZ 84.259843 577.220079 0 ] +/Count 0 +/Prev 973 0 R +/Parent 940 0 R +/Next 975 0 R >> endobj 975 0 obj << -/Title (1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate \(Automated\)) -/Dest [ 676 0 R /XYZ 84.259843 720.651496 0 ] +/Title (1.2.35 Ensure that the API Server only makes use of Strong Cryptographic Ciphers \(Automated\)) +/Dest [ 660 0 R /XYZ 84.259843 411.552842 0 ] /Count 0 -/Parent 974 0 R -/Next 976 0 R +/Prev 974 0 R +/Parent 940 0 R >> endobj 976 0 obj << -/Title (1.3.2 Ensure that the --profiling argument is set to false \(Automated\)) -/Dest [ 676 0 R /XYZ 84.259843 167.404475 0 ] -/Count 0 -/Prev 975 0 R -/Parent 974 0 R -/Next 977 0 R +/Title (1.3 Controller Manager) +/Dest [ 674 0 R /XYZ 41.740157 784.430079 0 ] +/Count 7 +/Prev 940 0 R +/First 977 0 R +/Last 983 0 R +/Parent 913 0 R +/Next 984 0 R >> endobj 977 0 obj << -/Title (1.3.3 Ensure that the --use-service-account-credentials argument is set to true \(Automated\)) -/Dest [ 679 0 R /XYZ 84.259843 332.523057 0 ] +/Title (1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate \(Automated\)) +/Dest [ 674 0 R /XYZ 84.259843 720.651496 0 ] /Count 0 -/Prev 976 0 R -/Parent 974 0 R +/Parent 976 0 R /Next 978 0 R >> endobj 978 0 obj << -/Title (1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate \(Automated\)) -/Dest [ 683 0 R /XYZ 84.259843 511.220079 0 ] +/Title (1.3.2 Ensure that the --profiling argument is set to false \(Automated\)) +/Dest [ 677 0 R /XYZ 84.259843 727.220079 0 ] /Count 0 /Prev 977 0 R -/Parent 974 0 R +/Parent 976 0 R /Next 979 0 R >> endobj 979 0 obj << -/Title (1.3.5 Ensure that the --root-ca-file argument is set as appropriate \(Automated\)) -/Dest [ 686 0 R /XYZ 84.259843 670.970079 0 ] +/Title (1.3.3 Ensure that the --use-service-account-credentials argument is set to true \(Automated\)) +/Dest [ 680 0 R /XYZ 84.259843 745.970079 0 ] /Count 0 /Prev 978 0 R -/Parent 974 0 R +/Parent 976 0 R /Next 980 0 R >> endobj 980 0 obj << -/Title (1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true \(Automated\)) -/Dest [ 689 0 R /XYZ 84.259843 799.370079 0 ] +/Title (1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate \(Automated\)) +/Dest [ 683 0 R /XYZ 84.259843 745.970079 0 ] /Count 0 /Prev 979 0 R -/Parent 974 0 R +/Parent 976 0 R /Next 981 0 R >> endobj 981 0 obj << -/Title (1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 \(Automated\)) -/Dest [ 689 0 R /XYZ 84.259843 596.570079 0 ] +/Title (1.3.5 Ensure that the --root-ca-file argument is set as appropriate \(Automated\)) +/Dest [ 686 0 R /XYZ 84.259843 727.220079 0 ] /Count 0 /Prev 980 0 R -/Parent 974 0 R +/Parent 976 0 R +/Next 982 0 R >> endobj 982 0 obj << -/Title (1.4 Scheduler) -/Dest [ 694 0 R /XYZ 41.740157 784.430079 0 ] -/Count 2 -/Prev 974 0 R -/First 983 0 R -/Last 984 0 R -/Parent 911 0 R -/Next 985 0 R +/Title (1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true \(Automated\)) +/Dest [ 689 0 R /XYZ 84.259843 727.220079 0 ] +/Count 0 +/Prev 981 0 R +/Parent 976 0 R +/Next 983 0 R >> endobj 983 0 obj << -/Title (1.4.1 Ensure that the --profiling argument is set to false \(Automated\)) -/Dest [ 694 0 R /XYZ 84.259843 720.651496 0 ] +/Title (1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 \(Automated\)) +/Dest [ 689 0 R /XYZ 84.259843 524.420079 0 ] /Count 0 -/Parent 982 0 R -/Next 984 0 R +/Prev 982 0 R +/Parent 976 0 R >> endobj 984 0 obj << -/Title (1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 \(Automated\)) -/Dest [ 694 0 R /XYZ 84.259843 369.904475 0 ] -/Count 0 -/Prev 983 0 R -/Parent 982 0 R +/Title (1.4 Scheduler) +/Dest [ 694 0 R /XYZ 41.740157 784.430079 0 ] +/Count 2 +/Prev 976 0 R +/First 985 0 R +/Last 986 0 R +/Parent 913 0 R +/Next 987 0 R >> endobj 985 0 obj << -/Title (2 Etcd Node Configuration Files) -/Dest [ 700 0 R /XYZ 41.740157 784.430079 0 ] -/Count 7 -/Prev 982 0 R -/First 986 0 R -/Last 992 0 R -/Parent 911 0 R -/Next 993 0 R +/Title (1.4.1 Ensure that the --profiling argument is set to false \(Automated\)) +/Dest [ 694 0 R /XYZ 84.259843 720.651496 0 ] +/Count 0 +/Parent 984 0 R +/Next 986 0 R >> endobj 986 0 obj << -/Title (2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate \(Automated\)) -/Dest [ 700 0 R /XYZ 84.259843 684.651496 0 ] +/Title (1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 \(Automated\)) +/Dest [ 694 0 R /XYZ 84.259843 257.404475 0 ] /Count 0 -/Parent 985 0 R -/Next 987 0 R +/Prev 985 0 R +/Parent 984 0 R >> endobj 987 0 obj << -/Title (2.2 Ensure that the --client-cert-auth argument is set to true \(Automated\)) -/Dest [ 705 0 R /XYZ 84.259843 558.470079 0 ] -/Count 0 -/Prev 986 0 R -/Parent 985 0 R -/Next 988 0 R +/Title (2 Etcd Node Configuration Files) +/Dest [ 700 0 R /XYZ 41.740157 784.430079 0 ] +/Count 7 +/Prev 984 0 R +/First 988 0 R +/Last 994 0 R +/Parent 913 0 R +/Next 995 0 R >> endobj 988 0 obj << -/Title (2.3 Ensure that the --auto-tls argument is not set to true \(Automated\)) -/Dest [ 710 0 R /XYZ 84.259843 445.970079 0 ] +/Title (2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate \(Automated\)) +/Dest [ 700 0 R /XYZ 84.259843 684.651496 0 ] /Count 0 -/Prev 987 0 R -/Parent 985 0 R +/Parent 987 0 R /Next 989 0 R >> endobj 989 0 obj << -/Title (2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate \(Automated\)) -/Dest [ 715 0 R /XYZ 84.259843 333.470079 0 ] +/Title (2.2 Ensure that the --client-cert-auth argument is set to true \(Automated\)) +/Dest [ 705 0 R /XYZ 84.259843 464.720079 0 ] /Count 0 /Prev 988 0 R -/Parent 985 0 R +/Parent 987 0 R /Next 990 0 R >> endobj 990 0 obj << -/Title (2.5 Ensure that the --peer-client-cert-auth argument is set to true \(Automated\)) -/Dest [ 720 0 R /XYZ 84.259843 183.470079 0 ] +/Title (2.3 Ensure that the --auto-tls argument is not set to true \(Automated\)) +/Dest [ 710 0 R /XYZ 84.259843 258.470079 0 ] /Count 0 /Prev 989 0 R -/Parent 985 0 R +/Parent 987 0 R /Next 991 0 R >> endobj 991 0 obj << -/Title (2.6 Ensure that the --peer-auto-tls argument is not set to true \(Automated\)) -/Dest [ 727 0 R /XYZ 84.259843 727.220079 0 ] +/Title (2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate \(Automated\)) +/Dest [ 717 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 /Prev 990 0 R -/Parent 985 0 R +/Parent 987 0 R /Next 992 0 R >> endobj 992 0 obj << -/Title (2.7 Ensure that a unique Certificate Authority is used for etcd \(Automated\)) -/Dest [ 732 0 R /XYZ 84.259843 595.970079 0 ] +/Title (2.5 Ensure that the --peer-client-cert-auth argument is set to true \(Automated\)) +/Dest [ 722 0 R /XYZ 84.259843 558.470079 0 ] /Count 0 /Prev 991 0 R -/Parent 985 0 R +/Parent 987 0 R +/Next 993 0 R >> endobj 993 0 obj << -/Title (3.1 Authentication and Authorization) -/Dest [ 739 0 R /XYZ 41.740157 784.430079 0 ] -/Count 1 -/Prev 985 0 R -/First 994 0 R -/Last 994 0 R -/Parent 911 0 R -/Next 995 0 R +/Title (2.6 Ensure that the --peer-auto-tls argument is not set to true \(Automated\)) +/Dest [ 727 0 R /XYZ 84.259843 333.470079 0 ] +/Count 0 +/Prev 992 0 R +/Parent 987 0 R +/Next 994 0 R >> endobj 994 0 obj << -/Title (3.1.1 Client certificate authentication should not be used for users \(Manual\)) -/Dest [ 739 0 R /XYZ 84.259843 684.651496 0 ] +/Title (2.7 Ensure that a unique Certificate Authority is used for etcd \(Automated\)) +/Dest [ 734 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 -/Parent 993 0 R +/Prev 993 0 R +/Parent 987 0 R >> endobj 995 0 obj << -/Title (3.2 Logging) +/Title (3.1 Authentication and Authorization) /Dest [ 741 0 R /XYZ 41.740157 784.430079 0 ] -/Count 2 -/Prev 993 0 R +/Count 1 +/Prev 987 0 R /First 996 0 R -/Last 997 0 R -/Parent 911 0 R -/Next 998 0 R +/Last 996 0 R +/Parent 913 0 R +/Next 997 0 R >> endobj 996 0 obj << -/Title (3.2.1 Ensure that a minimal audit policy is created \(Automated\)) -/Dest [ 741 0 R /XYZ 84.259843 720.651496 0 ] +/Title (3.1.1 Client certificate authentication should not be used for users \(Manual\)) +/Dest [ 741 0 R /XYZ 84.259843 684.651496 0 ] /Count 0 /Parent 995 0 R -/Next 997 0 R >> endobj 997 0 obj << -/Title (3.2.2 Ensure that the audit policy covers key security concerns \(Manual\)) -/Dest [ 744 0 R /XYZ 84.259843 314.720079 0 ] -/Count 0 -/Prev 996 0 R -/Parent 995 0 R +/Title (3.2 Logging) +/Dest [ 743 0 R /XYZ 41.740157 784.430079 0 ] +/Count 2 +/Prev 995 0 R +/First 998 0 R +/Last 999 0 R +/Parent 913 0 R +/Next 1000 0 R >> endobj 998 0 obj << -/Title (4.1 Worker Node Configuration Files) -/Dest [ 746 0 R /XYZ 41.740157 784.430079 0 ] -/Count 10 -/Prev 995 0 R -/First 999 0 R -/Last 1008 0 R -/Parent 911 0 R -/Next 1009 0 R +/Title (3.2.1 Ensure that a minimal audit policy is created \(Automated\)) +/Dest [ 743 0 R /XYZ 84.259843 720.651496 0 ] +/Count 0 +/Parent 997 0 R +/Next 999 0 R >> endobj 999 0 obj << -/Title (4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 746 0 R /XYZ 84.259843 684.651496 0 ] +/Title (3.2.2 Ensure that the audit policy covers key security concerns \(Manual\)) +/Dest [ 746 0 R /XYZ 84.259843 333.470079 0 ] /Count 0 -/Parent 998 0 R -/Next 1000 0 R +/Prev 998 0 R +/Parent 997 0 R >> endobj 1000 0 obj << -/Title (4.1.2 Ensure that the kubelet service file ownership is set to root:root \(Automated\)) -/Dest [ 746 0 R /XYZ 84.259843 553.851496 0 ] -/Count 0 -/Prev 999 0 R -/Parent 998 0 R -/Next 1001 0 R +/Title (4.1 Worker Node Configuration Files) +/Dest [ 748 0 R /XYZ 41.740157 784.430079 0 ] +/Count 10 +/Prev 997 0 R +/First 1001 0 R +/Last 1010 0 R +/Parent 913 0 R +/Next 1011 0 R >> endobj 1001 0 obj << -/Title (4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 746 0 R /XYZ 84.259843 423.051496 0 ] +/Title (4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 748 0 R /XYZ 84.259843 684.651496 0 ] /Count 0 -/Prev 1000 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1002 0 R >> endobj 1002 0 obj << -/Title (4.1.4 Ensure that the proxy kubeconfig file ownership is set to root:root \(Automated\)) -/Dest [ 749 0 R /XYZ 84.259843 763.220079 0 ] +/Title (4.1.2 Ensure that the kubelet service file ownership is set to root:root \(Automated\)) +/Dest [ 748 0 R /XYZ 84.259843 553.851496 0 ] /Count 0 /Prev 1001 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1003 0 R >> endobj 1003 0 obj << -/Title (4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 749 0 R /XYZ 84.259843 454.079014 0 ] +/Title (4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 748 0 R /XYZ 84.259843 423.051496 0 ] /Count 0 /Prev 1002 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1004 0 R >> endobj 1004 0 obj << -/Title (4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root \(Automated\)) -/Dest [ 749 0 R /XYZ 84.259843 163.687950 0 ] +/Title (4.1.4 Ensure that the proxy kubeconfig file ownership is set to root:root \(Automated\)) +/Dest [ 751 0 R /XYZ 84.259843 763.220079 0 ] /Count 0 /Prev 1003 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1005 0 R >> endobj 1005 0 obj << -/Title (4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive \(Automated\)) -/Dest [ 753 0 R /XYZ 84.259843 519.629014 0 ] +/Title (4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 751 0 R /XYZ 84.259843 454.079014 0 ] /Count 0 /Prev 1004 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1006 0 R >> endobj 1006 0 obj << -/Title (4.1.8 Ensure that the client certificate authorities file ownership is set to root:root \(Automated\)) -/Dest [ 762 0 R /XYZ 84.259843 799.370079 0 ] +/Title (4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root \(Automated\)) +/Dest [ 751 0 R /XYZ 84.259843 163.687950 0 ] /Count 0 /Prev 1005 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1007 0 R >> endobj 1007 0 obj << -/Title (4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive \(Automated\)) -/Dest [ 762 0 R /XYZ 84.259843 383.493907 0 ] +/Title (4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive \(Automated\)) +/Dest [ 755 0 R /XYZ 84.259843 519.629014 0 ] /Count 0 /Prev 1006 0 R -/Parent 998 0 R +/Parent 1000 0 R /Next 1008 0 R >> endobj 1008 0 obj << -/Title (4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root \(Automated\)) -/Dest [ 762 0 R /XYZ 84.259843 195.693907 0 ] +/Title (4.1.8 Ensure that the client certificate authorities file ownership is set to root:root \(Automated\)) +/Dest [ 764 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 /Prev 1007 0 R -/Parent 998 0 R +/Parent 1000 0 R +/Next 1009 0 R >> endobj 1009 0 obj << -/Title (4.2 Kubelet) -/Dest [ 772 0 R /XYZ 41.740157 784.430079 0 ] -/Count 13 -/Prev 998 0 R -/First 1010 0 R -/Last 1022 0 R -/Parent 911 0 R -/Next 1023 0 R +/Title (4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive \(Automated\)) +/Dest [ 764 0 R /XYZ 84.259843 383.493907 0 ] +/Count 0 +/Prev 1008 0 R +/Parent 1000 0 R +/Next 1010 0 R >> endobj 1010 0 obj << -/Title (4.2.1 Ensure that the anonymous-auth argument is set to false \(Automated\)) -/Dest [ 772 0 R /XYZ 84.259843 720.651496 0 ] +/Title (4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root \(Automated\)) +/Dest [ 764 0 R /XYZ 84.259843 195.693907 0 ] /Count 0 -/Parent 1009 0 R -/Next 1011 0 R +/Prev 1009 0 R +/Parent 1000 0 R >> endobj 1011 0 obj << -/Title (4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow \(Automated\)) -/Dest [ 772 0 R /XYZ 84.259843 332.207453 0 ] -/Count 0 -/Prev 1010 0 R -/Parent 1009 0 R -/Next 1012 0 R +/Title (4.2 Kubelet) +/Dest [ 774 0 R /XYZ 41.740157 784.430079 0 ] +/Count 13 +/Prev 1000 0 R +/First 1012 0 R +/Last 1024 0 R +/Parent 913 0 R +/Next 1025 0 R >> endobj 1012 0 obj << -/Title (4.2.3 Ensure that the --client-ca-file argument is set as appropriate \(Automated\)) -/Dest [ 777 0 R /XYZ 84.259843 675.273057 0 ] +/Title (4.2.1 Ensure that the anonymous-auth argument is set to false \(Automated\)) +/Dest [ 774 0 R /XYZ 84.259843 720.651496 0 ] /Count 0 -/Prev 1011 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1013 0 R >> endobj 1013 0 obj << -/Title (4.2.4 Ensure that the --read-only-port argument is set to 0 \(Automated\)) -/Dest [ 777 0 R /XYZ 84.259843 301.829014 0 ] +/Title (4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow \(Automated\)) +/Dest [ 774 0 R /XYZ 84.259843 332.207453 0 ] /Count 0 /Prev 1012 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1014 0 R >> endobj 1014 0 obj << -/Title (4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 \(Automated\)) -/Dest [ 782 0 R /XYZ 84.259843 641.326036 0 ] +/Title (4.2.3 Ensure that the --client-ca-file argument is set as appropriate \(Automated\)) +/Dest [ 779 0 R /XYZ 84.259843 675.273057 0 ] /Count 0 /Prev 1013 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1015 0 R >> endobj 1015 0 obj << -/Title (4.2.6 Ensure that the --protect-kernel-defaults argument is set to true \(Automated\)) -/Dest [ 788 0 R /XYZ 84.259843 445.970079 0 ] +/Title (4.2.4 Ensure that the --read-only-port argument is set to 0 \(Automated\)) +/Dest [ 779 0 R /XYZ 84.259843 301.829014 0 ] /Count 0 /Prev 1014 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1016 0 R >> endobj 1016 0 obj << -/Title (4.2.7 Ensure that the --make-iptables-util-chains argument is set to true \(Automated\)) -/Dest [ 792 0 R /XYZ 84.259843 799.370079 0 ] +/Title (4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 \(Automated\)) +/Dest [ 784 0 R /XYZ 84.259843 641.326036 0 ] /Count 0 /Prev 1015 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1017 0 R >> endobj 1017 0 obj << -/Title (4.2.8 Ensure that the --hostname-override argument is not set \(Manual\)) -/Dest [ 792 0 R /XYZ 84.259843 425.926036 0 ] +/Title (4.2.6 Ensure that the --protect-kernel-defaults argument is set to true \(Automated\)) +/Dest [ 790 0 R /XYZ 84.259843 445.970079 0 ] /Count 0 /Prev 1016 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1018 0 R >> endobj 1018 0 obj << -/Title (4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture \(Automated\)) -/Dest [ 792 0 R /XYZ 84.259843 208.126036 0 ] +/Title (4.2.7 Ensure that the --make-iptables-util-chains argument is set to true \(Automated\)) +/Dest [ 794 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 /Prev 1017 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1019 0 R >> endobj 1019 0 obj << -/Title (4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate \(Automated\)) -/Dest [ 796 0 R /XYZ 84.259843 542.326036 0 ] +/Title (4.2.8 Ensure that the --hostname-override argument is not set \(Manual\)) +/Dest [ 794 0 R /XYZ 84.259843 425.926036 0 ] /Count 0 /Prev 1018 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1020 0 R >> endobj 1020 0 obj << -/Title (4.2.11 Ensure that the --rotate-certificates argument is not set to false \(Automated\)) -/Dest [ 796 0 R /XYZ 84.259843 138.881993 0 ] +/Title (4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture \(Automated\)) +/Dest [ 794 0 R /XYZ 84.259843 208.126036 0 ] /Count 0 /Prev 1019 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1021 0 R >> endobj 1021 0 obj << -/Title (4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true \(Automated\)) -/Dest [ 806 0 R /XYZ 84.259843 670.970079 0 ] +/Title (4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate \(Automated\)) +/Dest [ 798 0 R /XYZ 84.259843 542.326036 0 ] /Count 0 /Prev 1020 0 R -/Parent 1009 0 R +/Parent 1011 0 R /Next 1022 0 R >> endobj 1022 0 obj << -/Title (4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers \(Automated\)) -/Dest [ 806 0 R /XYZ 84.259843 392.223057 0 ] +/Title (4.2.11 Ensure that the --rotate-certificates argument is not set to false \(Automated\)) +/Dest [ 798 0 R /XYZ 84.259843 138.881993 0 ] /Count 0 /Prev 1021 0 R -/Parent 1009 0 R +/Parent 1011 0 R +/Next 1023 0 R >> endobj 1023 0 obj << -/Title (5.1 RBAC and Service Accounts) -/Dest [ 813 0 R /XYZ 41.740157 784.430079 0 ] -/Count 6 -/Prev 1009 0 R -/First 1024 0 R -/Last 1029 0 R -/Parent 911 0 R -/Next 1030 0 R +/Title (4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true \(Automated\)) +/Dest [ 808 0 R /XYZ 84.259843 670.970079 0 ] +/Count 0 +/Prev 1022 0 R +/Parent 1011 0 R +/Next 1024 0 R >> endobj 1024 0 obj << -/Title (5.1.1 Ensure that the cluster-admin role is only used where required \(Manual\)) -/Dest [ 813 0 R /XYZ 84.259843 684.651496 0 ] +/Title (4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers \(Automated\)) +/Dest [ 808 0 R /XYZ 84.259843 392.223057 0 ] /Count 0 -/Parent 1023 0 R -/Next 1025 0 R +/Prev 1023 0 R +/Parent 1011 0 R >> endobj 1025 0 obj << -/Title (5.1.2 Minimize access to secrets \(Manual\)) -/Dest [ 813 0 R /XYZ 84.259843 523.851496 0 ] -/Count 0 -/Prev 1024 0 R -/Parent 1023 0 R -/Next 1026 0 R +/Title (5.1 RBAC and Service Accounts) +/Dest [ 815 0 R /XYZ 41.740157 784.430079 0 ] +/Count 6 +/Prev 1011 0 R +/First 1026 0 R +/Last 1031 0 R +/Parent 913 0 R +/Next 1032 0 R >> endobj 1026 0 obj << -/Title (5.1.3 Minimize wildcard use in Roles and ClusterRoles \(Manual\)) -/Dest [ 813 0 R /XYZ 84.259843 423.051496 0 ] +/Title (5.1.1 Ensure that the cluster-admin role is only used where required \(Manual\)) +/Dest [ 815 0 R /XYZ 84.259843 684.651496 0 ] /Count 0 -/Prev 1025 0 R -/Parent 1023 0 R +/Parent 1025 0 R /Next 1027 0 R >> endobj 1027 0 obj << -/Title (5.1.4 Minimize access to create pods \(Manual\)) -/Dest [ 813 0 R /XYZ 84.259843 307.251496 0 ] +/Title (5.1.2 Minimize access to secrets \(Manual\)) +/Dest [ 815 0 R /XYZ 84.259843 523.851496 0 ] /Count 0 /Prev 1026 0 R -/Parent 1023 0 R +/Parent 1025 0 R /Next 1028 0 R >> endobj 1028 0 obj << -/Title (5.1.5 Ensure that default service accounts are not actively used. \(Automated\)) -/Dest [ 813 0 R /XYZ 84.259843 206.451496 0 ] +/Title (5.1.3 Minimize wildcard use in Roles and ClusterRoles \(Manual\)) +/Dest [ 815 0 R /XYZ 84.259843 423.051496 0 ] /Count 0 /Prev 1027 0 R -/Parent 1023 0 R +/Parent 1025 0 R /Next 1029 0 R >> endobj 1029 0 obj << -/Title (5.1.6 Ensure that Service Account Tokens are only mounted where necessary \(Manual\)) -/Dest [ 840 0 R /XYZ 84.259843 449.446885 0 ] +/Title (5.1.4 Minimize access to create pods \(Manual\)) +/Dest [ 815 0 R /XYZ 84.259843 307.251496 0 ] /Count 0 /Prev 1028 0 R -/Parent 1023 0 R +/Parent 1025 0 R +/Next 1030 0 R >> endobj 1030 0 obj << -/Title (5.2 Pod Security Policies) -/Dest [ 851 0 R /XYZ 41.740157 784.430079 0 ] -/Count 9 -/Prev 1023 0 R -/First 1031 0 R -/Last 1039 0 R -/Parent 911 0 R -/Next 1040 0 R +/Title (5.1.5 Ensure that default service accounts are not actively used. \(Automated\)) +/Dest [ 815 0 R /XYZ 84.259843 206.451496 0 ] +/Count 0 +/Prev 1029 0 R +/Parent 1025 0 R +/Next 1031 0 R >> endobj 1031 0 obj << -/Title (5.2.1 Minimize the admission of privileged containers \(Manual\)) -/Dest [ 851 0 R /XYZ 84.259843 720.651496 0 ] +/Title (5.1.6 Ensure that Service Account Tokens are only mounted where necessary \(Manual\)) +/Dest [ 842 0 R /XYZ 84.259843 449.446885 0 ] /Count 0 -/Parent 1030 0 R -/Next 1032 0 R +/Prev 1030 0 R +/Parent 1025 0 R >> endobj 1032 0 obj << -/Title (5.2.2 Minimize the admission of containers wishing to share the host process ID namespace \(Automated\)) -/Dest [ 851 0 R /XYZ 84.259843 589.851496 0 ] -/Count 0 -/Prev 1031 0 R -/Parent 1030 0 R -/Next 1033 0 R +/Title (5.2 Pod Security Policies) +/Dest [ 853 0 R /XYZ 41.740157 784.430079 0 ] +/Count 9 +/Prev 1025 0 R +/First 1033 0 R +/Last 1041 0 R +/Parent 913 0 R +/Next 1042 0 R >> endobj 1033 0 obj << -/Title (5.2.3 Minimize the admission of containers wishing to share the host IPC namespace \(Automated\)) -/Dest [ 851 0 R /XYZ 84.259843 238.710432 0 ] +/Title (5.2.1 Minimize the admission of privileged containers \(Manual\)) +/Dest [ 853 0 R /XYZ 84.259843 720.651496 0 ] /Count 0 -/Prev 1032 0 R -/Parent 1030 0 R +/Parent 1032 0 R /Next 1034 0 R >> endobj 1034 0 obj << -/Title (5.2.4 Minimize the admission of containers wishing to share the host network namespace \(Automated\)) -/Dest [ 854 0 R /XYZ 84.259843 603.629014 0 ] +/Title (5.2.2 Minimize the admission of containers wishing to share the host process ID namespace \(Automated\)) +/Dest [ 853 0 R /XYZ 84.259843 589.851496 0 ] /Count 0 /Prev 1033 0 R -/Parent 1030 0 R +/Parent 1032 0 R /Next 1035 0 R >> endobj 1035 0 obj << -/Title (5.2.5 Minimize the admission of containers with allowPrivilegeEscalation \(Automated\)) -/Dest [ 854 0 R /XYZ 84.259843 252.487950 0 ] +/Title (5.2.3 Minimize the admission of containers wishing to share the host IPC namespace \(Automated\)) +/Dest [ 853 0 R /XYZ 84.259843 238.710432 0 ] /Count 0 /Prev 1034 0 R -/Parent 1030 0 R +/Parent 1032 0 R /Next 1036 0 R >> endobj 1036 0 obj << -/Title (5.2.6 Minimize the admission of root containers \(Manual\)) -/Dest [ 858 0 R /XYZ 84.259843 584.681993 0 ] +/Title (5.2.4 Minimize the admission of containers wishing to share the host network namespace \(Automated\)) +/Dest [ 856 0 R /XYZ 84.259843 603.629014 0 ] /Count 0 /Prev 1035 0 R -/Parent 1030 0 R +/Parent 1032 0 R /Next 1037 0 R >> endobj 1037 0 obj << -/Title (5.2.7 Minimize the admission of containers with the NET_RAW capability \(Manual\)) -/Dest [ 858 0 R /XYZ 84.259843 453.881993 0 ] +/Title (5.2.5 Minimize the admission of containers with allowPrivilegeEscalation \(Automated\)) +/Dest [ 856 0 R /XYZ 84.259843 252.487950 0 ] /Count 0 /Prev 1036 0 R -/Parent 1030 0 R +/Parent 1032 0 R /Next 1038 0 R >> endobj 1038 0 obj << -/Title (5.2.8 Minimize the admission of containers with added capabilities \(Manual\)) -/Dest [ 858 0 R /XYZ 84.259843 323.081993 0 ] +/Title (5.2.6 Minimize the admission of root containers \(Manual\)) +/Dest [ 860 0 R /XYZ 84.259843 584.681993 0 ] /Count 0 /Prev 1037 0 R -/Parent 1030 0 R +/Parent 1032 0 R /Next 1039 0 R >> endobj 1039 0 obj << -/Title (5.2.9 Minimize the admission of containers with capabilities assigned \(Manual\)) -/Dest [ 858 0 R /XYZ 84.259843 207.281993 0 ] +/Title (5.2.7 Minimize the admission of containers with the NET_RAW capability \(Manual\)) +/Dest [ 860 0 R /XYZ 84.259843 453.881993 0 ] /Count 0 /Prev 1038 0 R -/Parent 1030 0 R +/Parent 1032 0 R +/Next 1040 0 R >> endobj 1040 0 obj << -/Title (5.3 Network Policies and CNI) -/Dest [ 861 0 R /XYZ 41.740157 784.430079 0 ] -/Count 2 -/Prev 1030 0 R -/First 1041 0 R -/Last 1042 0 R -/Parent 911 0 R -/Next 1043 0 R +/Title (5.2.8 Minimize the admission of containers with added capabilities \(Manual\)) +/Dest [ 860 0 R /XYZ 84.259843 323.081993 0 ] +/Count 0 +/Prev 1039 0 R +/Parent 1032 0 R +/Next 1041 0 R >> endobj 1041 0 obj << -/Title (5.3.1 Ensure that the CNI in use supports Network Policies \(Manual\)) -/Dest [ 861 0 R /XYZ 84.259843 684.651496 0 ] +/Title (5.2.9 Minimize the admission of containers with capabilities assigned \(Manual\)) +/Dest [ 860 0 R /XYZ 84.259843 207.281993 0 ] /Count 0 -/Parent 1040 0 R -/Next 1042 0 R +/Prev 1040 0 R +/Parent 1032 0 R >> endobj 1042 0 obj << -/Title (5.3.2 Ensure that all Namespaces have Network Policies defined \(Automated\)) -/Dest [ 861 0 R /XYZ 84.259843 538.851496 0 ] -/Count 0 -/Prev 1041 0 R -/Parent 1040 0 R +/Title (5.3 Network Policies and CNI) +/Dest [ 863 0 R /XYZ 41.740157 784.430079 0 ] +/Count 2 +/Prev 1032 0 R +/First 1043 0 R +/Last 1044 0 R +/Parent 913 0 R +/Next 1045 0 R >> endobj 1043 0 obj << -/Title (5.4 Secrets Management) -/Dest [ 885 0 R /XYZ 41.740157 784.430079 0 ] -/Count 2 -/Prev 1040 0 R -/First 1044 0 R -/Last 1045 0 R -/Parent 911 0 R -/Next 1046 0 R +/Title (5.3.1 Ensure that the CNI in use supports Network Policies \(Manual\)) +/Dest [ 863 0 R /XYZ 84.259843 684.651496 0 ] +/Count 0 +/Parent 1042 0 R +/Next 1044 0 R >> endobj 1044 0 obj << -/Title (5.4.1 Prefer using secrets as files over secrets as environment variables \(Manual\)) -/Dest [ 885 0 R /XYZ 84.259843 684.651496 0 ] +/Title (5.3.2 Ensure that all Namespaces have Network Policies defined \(Automated\)) +/Dest [ 863 0 R /XYZ 84.259843 538.851496 0 ] /Count 0 -/Parent 1043 0 R -/Next 1045 0 R +/Prev 1043 0 R +/Parent 1042 0 R >> endobj 1045 0 obj << -/Title (5.4.2 Consider external secret storage \(Manual\)) -/Dest [ 885 0 R /XYZ 84.259843 568.851496 0 ] -/Count 0 -/Prev 1044 0 R -/Parent 1043 0 R +/Title (5.4 Secrets Management) +/Dest [ 887 0 R /XYZ 41.740157 784.430079 0 ] +/Count 2 +/Prev 1042 0 R +/First 1046 0 R +/Last 1047 0 R +/Parent 913 0 R +/Next 1048 0 R >> endobj 1046 0 obj << -/Title (5.5 Extensible Admission Control) -/Dest [ 887 0 R /XYZ 41.740157 784.430079 0 ] -/Count 1 -/Prev 1043 0 R -/First 1047 0 R -/Last 1047 0 R -/Parent 911 0 R -/Next 1048 0 R +/Title (5.4.1 Prefer using secrets as files over secrets as environment variables \(Manual\)) +/Dest [ 887 0 R /XYZ 84.259843 684.651496 0 ] +/Count 0 +/Parent 1045 0 R +/Next 1047 0 R >> endobj 1047 0 obj << -/Title (5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller \(Manual\)) -/Dest [ 887 0 R /XYZ 84.259843 684.651496 0 ] +/Title (5.4.2 Consider external secret storage \(Manual\)) +/Dest [ 887 0 R /XYZ 84.259843 568.851496 0 ] /Count 0 -/Parent 1046 0 R +/Prev 1046 0 R +/Parent 1045 0 R >> endobj 1048 0 obj << -/Title (5.7 General Policies) +/Title (5.5 Extensible Admission Control) /Dest [ 889 0 R /XYZ 41.740157 784.430079 0 ] -/Count 4 -/Prev 1046 0 R +/Count 1 +/Prev 1045 0 R /First 1049 0 R -/Last 1052 0 R -/Parent 911 0 R +/Last 1049 0 R +/Parent 913 0 R +/Next 1050 0 R >> endobj 1049 0 obj << -/Title (5.7.1 Create administrative boundaries between resources using namespaces \(Manual\)) -/Dest [ 889 0 R /XYZ 84.259843 720.651496 0 ] +/Title (5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller \(Manual\)) +/Dest [ 889 0 R /XYZ 84.259843 684.651496 0 ] /Count 0 /Parent 1048 0 R -/Next 1050 0 R >> endobj 1050 0 obj << -/Title (5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions \(Manual\)) -/Dest [ 889 0 R /XYZ 84.259843 604.851496 0 ] -/Count 0 -/Prev 1049 0 R -/Parent 1048 0 R -/Next 1051 0 R +/Title (5.7 General Policies) +/Dest [ 891 0 R /XYZ 41.740157 784.430079 0 ] +/Count 4 +/Prev 1048 0 R +/First 1051 0 R +/Last 1054 0 R +/Parent 913 0 R >> endobj 1051 0 obj << -/Title (5.7.3 Apply Security Context to Your Pods and Containers \(Manual\)) -/Dest [ 889 0 R /XYZ 84.259843 324.051496 0 ] +/Title (5.7.1 Create administrative boundaries between resources using namespaces \(Manual\)) +/Dest [ 891 0 R /XYZ 84.259843 720.651496 0 ] /Count 0 -/Prev 1050 0 R -/Parent 1048 0 R +/Parent 1050 0 R /Next 1052 0 R >> endobj 1052 0 obj << -/Title (5.7.4 The default namespace should not be used \(Automated\)) -/Dest [ 889 0 R /XYZ 84.259843 193.251496 0 ] +/Title (5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions \(Manual\)) +/Dest [ 891 0 R /XYZ 84.259843 604.851496 0 ] /Count 0 /Prev 1051 0 R -/Parent 1048 0 R +/Parent 1050 0 R +/Next 1053 0 R >> endobj 1053 0 obj << -/Count 142 -/First 911 0 R -/Last 911 0 R +/Title (5.7.3 Apply Security Context to Your Pods and Containers \(Manual\)) +/Dest [ 891 0 R /XYZ 84.259843 324.051496 0 ] +/Count 0 +/Prev 1052 0 R +/Parent 1050 0 R +/Next 1054 0 R >> endobj 1054 0 obj << -/Length1 41004 -/Filter /FlateDecode -/Length 7588 +/Title (5.7.4 The default namespace should not be used \(Automated\)) +/Dest [ 891 0 R /XYZ 84.259843 193.251496 0 ] +/Count 0 +/Prev 1053 0 R +/Parent 1050 0 R >> -stream -x| xUut;YH',-11QZM`D!Ȓ@XAM @aDp\*qЙhԘp{F6K5;Sc')A k*<Ex©3g9Q}Ss -@S2u¼7OOɍZ?͠Ta}.lR9.ǶOl#>Q09qx/a̜ -C -Fj3sJ·w@򳋅Es[> 4zy)} D)T ׼y#C*>vkz޽r!;~P?LA9z!B~Z6D#cVV&mbC^[Ka5@.,tUvlC嵿tݠFXkc?Rx{oVk%^wO#}Z%~[ F3o*?W*֏+_&KWd/9J'x ~t?5` ^8H/ K8q|8J|\sv* -_;8_X8cv]j9=.pwXq{.VQJqsi+,0iK.>&=mɄ9n 6p -TQ럱J+>݈ʏK8(xqOfuwi I{lY*s*3REi.$M -;evi9ev|R%}-/Y"=q\ţ]Rq\1+.|8qN#nBgq9>j/=: -q_Sq -\9Na N+8g78>&=c9.lҨPIp2GgFpφ9'8bᐈi  8pW&ۈ=DZǻrHw;@.f 2|-7pͱWOԫ{I=#,aĴL,rÌ)f)%ؽQnnF욊]:{.9!ubR=xYD8r h3ځ\jH!2#Mts oN1 -aCs141:cG5pph[h` 8Z%M64rTD9Ez(jײIB7d6xuf5p-lΦ*yT:;ʄnT jY -pl(Q-G7h8LcfN #xzEy1[,biC+7!8,DA Ep 4Vq/|E_=ka'/NV%B0jHa3Q=?϶ 1.F]"G %t y< E"H Ѕ{kF`7Fסf ;iYTb O -1V-~ `67}/,ME좈e\(*Ί'̢$&*D{?m#4:oD3vV}ХyCHms, -bHL`]bN!CD/xW9==X!e -+\&]ç 7_+]|zV_A2,,DFE*F`"̑Qks}h]^2H9*1an0gL M 5>S3`ۛ -fVZo$RΑoߚ 6\tL|Bzp7MHO3.-5X\#/`ע/?WniqÜJ76 ~7zX:򔨰.wfz|n'YB1M,&::!F+ kvʨc `hQ1GOņTo4>xS=ԓaVJDJdJT'%:%_/y|ѾȬ,OVtVLVBaŠҨROi򄪄 m]:uȎ̎dGFFz -F.ZYz˙N~!4#-,M55V?^ܐ}dWO/vL!]^=GUBrB8hW*$&ZZGe;%(. nZ<*jI" -#"ލ!~/\jHV]MP -WAqlU|0EMGLt~aIM_2Cª͵V 'y]Y/f"|/Lt}n,\g `0JJ@ySu&-U<ڪՐ1tSm1lJvrUTZ?roi |KVWxUvnʟ)[;>E_wher^c`b#ԝT} h ;viG~][ieNsk/_[yv6?$lݶRټuJw",տ6@U>!:Ab)A5g2f dd7S51* ʱ3/JR,,-Hbl0e2;4r]n>tޕΕP܌}F+Vru؇qk@%gMnҝxWsWK_c_S_s_'$͝ɮQI踄敖W AM-V Da' GaLHNHRIҤ򤪤IBξ=Rۃ,Uwz ee;?7sϷo;,;8zoH-GbcO`X70b$G7i+Y9VI =~Z̤c:mj!K:i@E.TV꫗vJ[6Wؼ}!{-[i }};l9k,2][T}j6+pTY ~nuTSsyb`DŽ]9۶)T?ouܭJ1dɗǙ 7d@/ FΞ^% =wG~t =Ci#Wn`QX(V -KuNAQ'2+ ;ϒ0I(`1EɄL6`٧l<Bo+>h`:^HPP\NM #18KԪX[Fm<}Ye5Nk屧/0$EQl:VVB)g> f>hi>ͥ,jC}PQ7Q >9hS9Def;y͞=}Q(EtUg-Ҿ(4K;-[>Ek}c҂ۭwZ_>Q @$]qdLuJi:io(ͤud0 S:4` t04:da@`3wI~9-dӧ̙EfL$P4UZjaT mZO7?_jV-no?ZDͭ ZCޡ)oZ}CMkmZ ,Dju\8bٖaxFVj5OFC!@=v^"ZSH `CH#<@;j$FC;xuJΙ2sfQ)fzά(SQS#37gMWk -̄9fQ˹yR3F[ӦoDy8f!ϐra><A(tR2-Ue&meX:Ϧj5meߚ J8V;/Ƹ~ByO54Q`1> -endstream endobj 1055 0 obj << -/Length1 7648 -/Filter /FlateDecode -/Length 4714 +/Count 142 +/First 913 0 R +/Last 913 0 R >> -stream -x9yxSU眛&-Pڴ P&鞦M=ݒ%;m)tR"oTe(::q ysޟ}{9wo9#fQ e\Xм`tUQ3O+qj{a z|}L|E[p߮J5k;@ն@ahٿgc!{E/Ee>;Yvn^LY,BsޅGV T@_GqW0 #?EO2+))A Y \B)~y~m -!/-:nXݦ -ZpvdB9s&LZ>=*E{eǏew2|i a=J$%NNV0f%k& Bd5вmQdkANFi$9wПȉJ*aym1;"P9{ 1g_gA0;y^^~cԁ1lT'$ҍIQ}D -!5*hT܍aB Ff?HB&Z# T,xcoDh.gR`Ky`ȃjn@Ь& ;lۗO Ǘ^=ނr}bfq!iB -= _. Lg A$@+p :N -Ňyz ;* .6w -_^%,{ED}>#|vxIx_s򈦈E<nWfCY~IF\HdOϟ1Tf\nqPhS"\d⤚Qk34:r'B$FQJ-zO2gi+}aBW-;S$/7cGe,x.XЗu -].QCX(,+*LIDI#pI醙 9c2XHfH%s]}]m^p(NEtp.wFJ j15Qjظ,"Jkj8щwʎ#'u<܎O:RT3D ed7+ߝ8mVn߾h]CL-2T=P1;Pk.ЏD# Fd_u;D`؂+oY:V#qp*N2K(/U(g峅xVXCNb,x?U 3O]?">E/ >A(f|D"1Q9+.Ui]݇HY*5 f)G~+mʚ56ۚ>!հb8E/u!aĢp2| - -9QL"6](Idgk7L`miWq ޼^a[33T(<hhjH7E#װZ8>h5g8ΟW&EzHsp{[ sdy+Zsl{4z"g4 'Rbl1inc_/sn3 -yOyF,hɾ^JXFs5jW{vEyǦՑn}Iii$f9>N\\'2P]/.`]@š#)/Ӏͤ"4h -w&8>UXUضVhLo#*uwQCxEgكr3먯WSdNަ'6FsxnHň._\к9 gZm7׻]덆ρV x'r1\]?/:2B*"cvlvmi/Lr\.<k>w_#6H%/Rhk;)1yu1l/U195Y0fki֭xJc26P0oc#WXjqaJMNBQvTn;Z|ƿhw6Ky;b 9Dw&ʘ'cZo7[y:#FH8lx8&D% Nj*d)dTztf6ؗfr;ÛlyY"p͝QzeV]Q8 hfG.r5@A(5_;yl?Ya:c*&jv0P!OYcن@͵55xTegU`8=C(~{GN0cI5Ԛ1 oZi9uut`c8am,spţsQ .Mr{bJWAA#U%`7ܳdI$XNa Ɉ&U_9d4z&!& '褃Btzn7(5#J}Td /odqjzte*e+T}IКoyu4YEN5L.㚜8Qł[p]d[m9;V֙6],rۛ^*a9Į`r3r[6Kg74F5mi*6RV+U]Mݙjwit.NeiuCVNNmK -;D!wjHZ,9%@cZqmi -RJҊ|"\#y2RJL+*FCv]YULĵ3y4k Xc6w䦯9%>oWz+Z%;^wTéL̓5E4xuWW?T}_dMT]>("83DB*lRULӃL&K+u2df #Y5fK3>h: 5˹A,M ީ {Q6t>[2Y?~Q_ p[#K +~tX Rޣ5Pmf/蜯 g5ׁ̓As7@j\;}f^pqR^p?(~grS<; a0 kʊnduK; &˳{g%]nM@J0!q$+yS}ⳁ^oX5jwʥJ/Ovo,*h*Mzo2ox:o@B:iU~r1[zx j7nY?+]nv5?#EjL5~:ϕD+;qRW!Nw)%R*L(S793TOkҳ<9INu\!G -4KMKI s:Ue "䩉XOɅO Y K 2۶Z9ui뉯Է怪YDP4Tpod*@4WXBOukt㳼A0Ƴx|n˖#?sŀsN #AOCJ3X&wmZ_Xۦu;sGYo OǑEF/|b{㖣Oōq8`)y8ێq~ݎwl؉^fP xd}J&䞖=~Չn׏tuj/io 7gB EB4] }iз ȀV>4PjCh" -u!rH 0e~cY-Uh>}f*,< bG" -endstream endobj 1056 0 obj << +/Length1 41004 +/Filter /FlateDecode +/Length 7589 +>> +stream +x| xUut;YH',-11 EB$!`B'AIT&d 0Ȍ +88L@f:cLnx9ֽrι{?R R23[1i& ǩ=x~sg7;@>x>|- `wbkͷSF'N+KX-NSE@7T^7y\L`ySgξ}/{6eꌅy3 *ϟ}7*zSTKsr> @pFEiY3s+ ,\R{ϬSy `=m&s3|Pu'<\G PɕMƎKIEfJ H[&*DC +4i#w# `QD|77(|;FLv)XVx[ +_p rߧe)s*`i +:iO(N(svx{̦1f0[xqpD'[yZ#j5nQ`,gz‹:tСC:tСC:tСC:tСC:tСC:tСC:tСC:tСC:tСC:to%2Ckmԯ9)e]twj, + Ca4@Lߪ~=6zzt= 0洶^9~7ADtj*r<|ht(^*W:4׊|oxUx~5_/_=^io.xqwӻp'Ǘ8݁8*[%Iun |0\|nMz. 7p 帾*@Zϱ*+Se{*Kgt8*XQ>Q8KxXŧ8YSZquO||n,[eʜʌTQ+IS+Ž|]Zqดc G_KHs\bTEr|̊ ,8߄8m¢&ӄcYgDtHiT*q1d8&|؂9ǙM8΄IX 1.lPIs2}GkFr׆#8'9jЈi `U8 +rG!ӄDZ?ǻtHw9Ό@Nf 2|/rN&&vbtˆf=0663$L6cF {{*vꕺb$ՋILLJwcf)>f1&Ihzr1 #I\@7i1 0*q T`.NANm 梕c%X +h֖`4s4Qf +G\HBEN^& =8Z)/"X:g;~u6T `̣7V&p QR8E` j>As>YqxP%֊ų[,ϊbKíXi]}M! +jE(#-a8PE/~I2,$߲u_YCWr ?<6:Fխ3'qӒK*HgdL!0FV6(CtI'tI'tI'tI'tI'tI'tI'tI'tI't鿟L4A.(~DwoƔhWt|SJW Px$7Ns~zKqtL`(TKOڨDn(f^8f\514ǰ( +{Gۥto8lÆ5o- ta7 PE 6ºc.`$qm}]@sL3Cl(Gؚ׸ 51"NOo<~uMb҇x> a0.|y^e2lYe;ag}"L齠w^Ȇ^RES6ʄ#Si9s-:?0~} ھ3]P5woKwm/[/U$`/.HmՖ5^Kp/-I@kpvU%:<gY,-@0Md12\ļ*rB6N ڼy]8o w`L׾-*b#~Gn9zt#ڸx7݃w3{-dHoUlR>Y@6;`'DA]Sf7  вZiIQ 4T2|(}Q2 Q5|# zcQ;n?kX@C`>0"hY0,SY/,9cJ)[%,<+l*1Vhb1cz~U⯅>jydd͍$v=04+OJQv"EI`uKaFp;hZf:d}4ӥ]r 0d`hmb;2^Z-)c3l/"g֭]rŕZN|^z +!U0gv˶:=g}}E0źTig[`X־!,R.*ip5``xT@fCzdàZ_c6.=zedW^&]xa~?~ܐ!l3u`q>>H+>Wu&Rv1-4l$ޚOvp_GGe13Tͷyl5{if((l^ͯ+,9h)fYlÐ?>{KZk 5B g4ϨV H|R-K%ybP=;HƑ8A$QD.8@ x,J2n),Lw1B F:cG: ]<6Ǣ &$.1DyxL Jً2Y/I Vɫ X{=ڣ&M,>uw]g?~}>{͠yyKi>qJ&I>#}-WK/_U$㾌`5 QQ0&sdb\Zi+a 61d +7@Lx!hdcscGM/ ¯)'0s(*)9$۷?CB MoKK WX--nr}a!ODf^KOCޠUZU[(&{7POa9h]!rYu][k_b 0*(Ti=ߘjזdfoz2JHLJDOE"}Q>/ɊΊJ(LXQYU)^SPp-!k{ّQٞ¨BOaȥQK=KCo:s{c/ĐzEw>QgZ~bKrl¿_'}|0iDrNl}duϞUz / /VUue*S] U#8jhw^6~)>s`-|ixExu:-rZisbxy Y֫Y/w!{utnvű9XXZAJ ; t.u`uIk-[O aadh~vjʡȥՑ:6 vobݿLk[N;w>KxHxƝ9l Spי˗m|8ƕ*ɵIuv4QkYw K#p[cOFRˆ"EH?/wdcwSUn8[Uptpn5LчASA,i>`9{S&7_XRWP+l_*<<ةo׵;3??M$` ]x[1Kf*כ hTݲIuf-jy5d8ٜqC8 t ۮR!\.[lzj?j&˒u55^'7'#!Pu/ V&Z&&(0RݹNg_WF2сlvڵvQ&ͮ1vʽuu^w-a[C¦͛mk)-~ RBYatYc~$ؚ3Uskhn$},cHHvz8QKBx&EI]%]%GsI@FYbLffU')eNFh6-B{DLJ $IݔB0U)H˄273B^yQpP<( f1AL >K>f[pX&=%6zn|I:dxx .^L x1b ޿_k9U';K-[ +-7s 4oH[!^(]dHa6]"h_0apYJ#-bv.IDMV[ϭjfn[b4j~45C u:ք5(TsDmwlb(K %JTb.XKKl%bGuص0o= {uh=5WxӗyԷy#Bny'ïFځ^d3KzIV@t(`V U'($E Kuu}ƃc-Hy%f+s͖bmwes,T=U7bQՠ8c%\){t>nən$7b DsנdgkpbdbT'):.aiyeeCUBdlF цa-F'=T4":ZR(o ` KsBY٤uOnGޘVβ5S<%&mC?<WlH{Ng.z?WJMf16Ur`H% ^g4 "IQz*VW /z [KKMw-e#7n@.gwy8m9}c1zg~jHf6 3oQB<ۧnkk?숰%gcۄ⟪M;U=^"f ?8$ $ANڏ.![:g(o-"<* %JaV&(DFzW9`1Y&%Y_+(ɆP1S"0bylNJr2b,E +Xʰ΃rTF|V|VZ/^kEUkz 077CMbvS?vC|AZa ThsWT6lj@>1!t)rTq5‰ԔBNaj>Zvܠj&'ijo/c XCP.G:EE`< ~yPC!ZC﷮7BTnrwT + Z)(ئe]WTS#v2|Iɢ(6agO厢]FB8>@PWLSݭ0L:~F,RMј!fOt6>S]JFHcL7u2UM5uGSTX6XlVTڜT_ݫw׼%z>N^ဪζG&-p%lWnhBn5a/813@:ܲnI2M0 Bݞ]vez^nV-N;E2.kC!LPh#I7jA0yٖNbld[^'˃{ +a!́i0a.x & x R(7Zx` Et́)3;YԾ'D1VVB)g> f1i>ͥ,jC}RQ7Q >9hS9Def;y͞=u(EtUg-Ҿ(4K'M[?Uk}c҂r~eSi]}baꗏl1P= #FiY>Ӿ)hݺSNZf@J3i $ 2x [UDd00sș; BA$PԞS[S"\3z&hwFQ[ +a qڦsLigЇ/5pGU7?D˭[_ƶ9-֩ŶI TNE~Fsm>ܩ-zPFKZRCj:utkο0<#+t'#~! Q;/@i{Lo{kyDzHd5L#=@;x"U}A(R2-Ue!meX:Ϧj5eߖƝ qv^;qSN97?gHFGDDM)> +endstream +endobj +1057 0 obj +<< +/Length1 7648 +/Filter /FlateDecode +/Length 4712 +>> +stream +x9yxSU眛&-PhZHYӄ(rtO&͞nItInPR"ouFD}*OE2 ~CGE8qDܼ߹IK|{[o;)h1Ho.)vW;V!4^]dv,(; S])jnBn_/.A(l5+=*A9{%ˏewr|i a=J y%NFV%0f%k#B9d5mQd~kFNF)$9wПȉJ*`y1;$Q<9{ 2g_gA10;x^~cԎ1l"T'D҅IQ}H -!5*h܅`B Ff?HB&ZXp*u61 +7"4E 3)2\ +A5h ZhN PhV VUl]p6˧~k~KڎGoA9>CWCI&ny/ALa1_ R킇''87|_وyDcƈ"x7iis,[T?R@#fM$WP*3Mx`.'8PiS"\dccdQk5:r, B$ZQZc ]e(ՖԉLn[VZInN,Aiixs2]U¡/\:<3ܑ%ja,WXF(9_;#/ 3]%sB(HNg%B"-vuyq#8Νw#V`eupT֨RFKfQjkg_o]{_glq9}RKm0#IEJ<]LWKAxb] QYrɣY2fevB8Гhc͵pǑ7 [pv|E-\Ej66UJf % +E|Pj+>)`_㾪bkԧڧEoQ$$M r@7IBUXhVgm16|Jd65KouQnKsktՑaQLzeKÚe/plFׂ #4"49XJ -uMMz +%NQo>m4[!$He87KtnZjKҮ,k4*ҭ/.))GȖ vZ 3uEEr h8t ptBĀ&A%SLJ5PUk5dz9R*L'ynuhK?Wv> 7 +[QJkm}Rmidg/F. \x%  rh'{Bp2 +*B Rh;tVgկr8Ub*,q\zjVl6BSgi4|C} caƩB}Q` jУ8ZH9A )'TU*&C{κ:kZgV&WYѝM'ylEO.[iVR-x;Sr(iFI7AA nw$*r::zAd#y!X&ǰ1r%?qg2꯷_/y~s{t8>G[&qc6[m5qׯTt{Ho2ŧx{nz!۳^A1\̆(xסC=;G;;wȘ7?O)]p# G,8<`\(46|{o=dyQHfZ 5{U*k˖ܟPw׷foJulaMʹb xo9i +NZ#ЎTޤxp#pj9dVVðFO> h Rɋ<T=[[{#.z^F!=[K&GULNE"=jFl_Z~u+9}L7n u2PC-.L)tIQ(ʎJmg5qR+wn>sܦO{F$] +Τ7V"GxYqz۰fڷdLͶDsq5Wg G /Ǥ3IVM,lb|BWvVa}xS-7ӒY"JL3KTqԆ%ٚ9Q1luPJq8!GWOz^GVڨ؁J D|SZlBasMuu ,CYYC!v7_lL GA3"|@RfD 3Ovn&t()#NX\c(fAh>\h>r+⾇Kӳ죘UĈFUq,>Q\l!rLaC2 ggگ;t„ibaqq:`~m큭d}CeMg@%f&9$Jͥ}~_!$ #~ds2hZ:޹fj#>*gYJfrn`ҥ4ϷY6ri^]^MZZ MVp &'Ni&\wVs.A@E(u n&.\>(`BXkM+܈\͒9EE9%b4 )+ ΆƮ 4bBZHKҲ{惴:֡[H+;給@\A\mo"Ԑ; M5e$la͖(`hɸBWFBlWVQ{q-' &h,͚$ +x|SsvܑU]ug!J1 =~)l)xedMbz6(e;z|1yV( ]OC薶C֏_Ԫ H"w_)2*hMry\$. 'a5:(CY5Feh 0/οs_s\\σ~0$dOCo̢B<qҎIo81YG'~n\56?I"^TAl כ#EE#VhQ +ڝr"@ G7Jޤ$o{ :x[y Λ=ЩΐN:}@y)܃̒)Z[zVO +s7bgKnnO+Ss%JڃDǿȃ{JFc +LSS+(P t7+0y,&%ۦ*OvDST,WQ|2RoIzY\$2jNdY +;yj"Sr!SBVb2Ca6{vyii*m4Vox]*szj2-٠jV7Qϗ.K[k8J`?ǰxg o< ,A>%(ݲHjXG1c(85>ͱtHxmӐ)fǰt=ںi]3GOQx[oqqd1K X,枯DqCNpF".GvJ^qiwn6@6v3HA!^x:;`|~I"^O>t8u[]j oC?M7rз-@WCah--D p<2 ~ԎZQB|]0 m  0=hH5+*h`_4+PDػX 7knc- +m06қe໐@ [8Bs*5АOoNK .x_|oLCpC*S>ԼZk?5G" +endstream +endobj +1058 0 obj +<< /Length1 47128 /Filter /FlateDecode -/Length 11769 +/Length 11768 >> stream x} xEhUw2353IH0<W $0 s1bVA nD֋.rO$XoΡNwUPBH - 3e㫞$Xҷw_}p?+< B{~0!/oCΌYЭx?|Œ H'dxvmsyF݄affrD|^5xv9 myyOr7%'\y}"﷜g异M}jfwj~i\KT)>$ӼA>ReֆmWFߓ|u$]H2Y$~e+9 1A b 1A b 1A b 1A b 1A b 1A b 1A b 1A b 1A b o*v#S$?<<+D~/A$t%I2 !-d$G;.R[xAҊ#|(n>/&/ k~WË+(itUpՑGj۠&CPjR aZ khvݴUn{`M#Ra5.0Qy/N|`z]%]]{[D3 @čeKBqڒ]:a٢N^ e,D,Sͧ)ďe2JhY7DL0KYzĩ׼@8tRYϝ杼j60:;OjV7J u `:YT7Blf)Pw<֞_OUs^,3bf 5KiX !b[^'b[p/~ 8'48+'ƀo ր77j ޜpZK>pJgpD~r"|'֧ᓏZ8 y?R }.V~,Xϵ>~>jGȟWm[bN290f-[emaf-̨0MTSL`s`(h Q&77ˋWBu"/3`Bc~ѣhnT20n0# ,`X䁡7Z!7Zan>  A^8z`@W }xx_/@Z( pz]jZ0Dz:yD@8xO'=ytCU@%rx^r;{xnW:v)rl:Et; -@vmvmBz"d h7L Ӡe:2M4HwC b-j!PD z `@ZyjR<)g<$!?'-?|:o<! qxN;_qH{-rSH1`D]&"@WpxDQj&b@rs&{9uM'޻m!Rډ䯄d#f@bfC ?Eld O"-lGc05q9Md4gjێh2r/yk!Y9;f[msTWyqVj+@=d !E@+Ֆ#~nd4î[]֑-֋޶glg +ϱqYsMstŝc01a c01a c01a c01a c01 }^[=AZG$q͖M U4bu+.`N\~~G⪫ɦ 9KHe^O(տ_f-ZT)~} zD'EWf`&bUױ95Mvf!_,!ЬUZpy$}E'uѽKv{=C)(u -CelN8)[O˧wckd++8hG!}:Yw/gz~ƿ -d?M;t'gF%+I x U޵UgKP}qDI:}u62[nSNuPOY`һ~XI3h3g77DD̠l:.3&+HAZE]a ٮkjDNț眯9fN8ww&6t&vF?+~ž7%"Y$UJ%ry"q,sZ*9ġ4~קFDa5#q/woaq9s'[\-h$%N ؂HhKrr{OBDg!)nYTG.B,wPͺMgh2םS]?kӮ;>xg@×Ya+2(҆x*52|JU|uZuU/!./僀'Ӳ\ujQ8}tJXxu6?|^jIQKRs/ {{BT=uI7=iG~|:M!y`g_4+ S..>uM -_ScP:0"AaVvNaNmIR5A>`M)ǺנyG|( ;]* F-Zux~~)l**Q\|GbI]TeqtTYvsd}U 4g+)lU|%&N#5!Wr1R[ۑM'?ϿD6<|8.?81v灊i'KgJ[.@v6n됪^kF~ NF`vm^۱89q>@YLS$p?X#;+X\NBDgʏ7o(-X-3 /yiPJXf}G~㋊}BOI7*іYEԪ4R-z cF?j3+*fUTfm|7UnjʲϾeЛG9H~*́O2JBB]r --I Eݔщl2.Q=좪-Hn&yȠMDuh~wQg4ZhK=SʒRTAyP'-mb`gۻF ك"m%;*L!UH' "R$-Ȱ5ǂW"!**7R5\,U - -(6]S5 W% -Bv4i::g35RtpԨ$RW 2\qZz_j0RoQ'ORls|zRks}je%__^%o7ػ״ɇC &ҧ~8ewYXX>L]?^ۆP7{ћ>ӈɐH8ܧD)Q%K9d4B9&[hTR:_I W-PhaΤ.J2F;ͩS_߂Sa]BJa(?Xc-1~|oA[n$K'>cZXF6I.qF]%3ZFUorj >fW CbE+~5uӆvn%nxBAF䩚o4x~} Ә =͔09h\!~tc!('!!-/|W#]IN)-rF쨻S}CӋ甈 O=-Q2XJHa%_%~rIf&eQM^Y?M_6_<m|`=-VĈ5# (}#|UJ]lGkajt@G?%ՌP͆OuٺC7 h #x &I R'[lpRnWOfId9֋ Ԇ|6N+b|VnGCKgBsh?ϤwH.?B=βAsUrX> Ynr]+#,RKlONg,,2MN CDCfXP;*FGz^5(G帨]Lf|,ՙSs5ڰ 2na#-#ɬRf`˴eӬRm$)TGraJspm>1Nm^W{PLKD/y'tߢVm'NDR-y/T?qZXGł6ou~\N1j0Pկ^Cp:RbD'E=gI߰N8f6RʦX੔Iv3/LBbRgU^4H<ٶ[=nbPa=QdBdR9t|J(]h{Y%MwQk}b܌7zbzr$'9S} LIH>#BvےJ;{K5#$ wTu$eq͓*|LLzHNL'%%''y|}ý}CJ%4%gM>s#eM2odpyt #:zT:B%~GKˇF,G={&y*ҚO۰/}]񾞸ݭlujfXwx,\DH#ݡ Fh˥/3"TIF_jY ]Cʭy0tW, ,laÍ*]fbbB쒇0]i\o/{_a08swq6] w=y'#1bX6F5bg:]VcWI$[&kJ+)#cGólKwt>J?[`(6 -nVnCա(fk26&+-%d}1:Vf s۬[ n6\tz[q:Fg@](ו@ZvXC j)ӓRiDLRE}Eo]iҨqƅQ,†">2(I!vl̐l6nˌ5S!V!T7U gSo(W qb>#TPUֺJ+su;x8nʺCU6vn[\渣a$DOg٠==B=3^* fۺ3xg<á'O >z%Jț.-)mH`BZQ޴EivU\ҋ]Zݡ\4V+6s[GX\uq~7͛g3vvzaЀu][J ohߞSR}4\IV7؎:*MG+.hI.3d圏R]7Ľي LL/z5 ͛={vUHŮb -z[^iv||xQ#X8~#2EYqDclH@%Yzىەkg]?"Y+zr$kwՅ +zj"ÞE/ana3JiNsO<\NGq"ՏK@csEyu7*! < -HR/k7+-N?]:}WffcS)͙En QqDD#svn5oe#~8a Oa;{57WHxB1F?J\wȶ*%40[If'sgJ,g$]Ŵ QFJUGst mA5C,[4.֩;+5i.MqxmyŠR]<'7FR\ڴ *]G69ԝN'7ҽt~`t{:uV F""!Ւh4Mwu%oNsğĚ;z֥`p[E ~9Sw(PHF]\*~Ⱦ3}C'(d؈{ݲny |ǻj/ g$P%|.+gl1H={?y\"t-]_ @F=OG~ Eȕ&&ɾ3!d/|odsmF݅&S"Y8]jItMCi;St)q[$r9XE?c"fi]O_j—X$OgcXK567 EH3i1_HDqw&\jf E&ښ y,J?b{0BZ] -Q -6E6a_t?ԨIPscs;tB`Q!}PDsIF?(4=9ѫ(j:vxpV Z>Sv,.ǝx7|maK qբ\1ptl1cʺ+盒yH[rkefp1;UuЭVծ;yz-ɞHt`Mftvulsms{=cum=P3k\.,͖?16BǕNXܓDmw }1g3z~|݄O0:)M{өsZ?J|MFynOb0#6Nm14t4WcFj,̬af /g kwNO:Ğg8]N6xXD'*g'7N1W&n։*fnޱwO@?FOb7Hz"Rd'c"Am'|2RΘNf/4 nޥXUh]&gTfYo4%r?ң?+N]??X 2Wtr57El[k(G<`m!@AZ64lC1b+Et1+JV++u+@_#zN}\ԋaLoڏݏ,#:οq#Feh Qȿ7|̃+8R]M1| ڒYjkup\ڙu]ծ.5,Wg Õh}um)yZd)&E -Vj\c[Q=}ևlKjۖ9a4ź͆Q_^I!8>R>g_Y6o!P?:f+ cb+{<\( -Xh^g"}T+꩚N@jJMEYɓ"|:NIXG) -=eX+-jkM \^asAATl,EI⍀Z(hȶ@(GRmY(5J)I:v|ξWQ>7~&?]/Lѷt:7t>{~,]좃OœC9i^:g*qsrb+47ga0': ;]NUפGB/jZ3yg:(Otq0Xj6_vXraztZ9cN+Q:pfᚏzWZZjKk Oͳ;Io:(you+QcŎJ\\vle`i^حTƫ֗/9fuaz|xtk!Td}#oJ@؅y/[ׁB>u<I Hx6pMQ tթ{?s+~F -F)2fDzܢk.\p5|u6;IyxEC%P/FBP_ *EkH-+ rO ēdsd%z*ST{w }X+`ÇH"ĔgnZB;pUi0Z oȝ]:.(HKkJK?q楹Q JfV% -#̋A-#Pڠed,b'v+t^&tۑxIS&ec;w-\jL%'%G5j -4⸼L4XuҖrb3k܅1H͉fV)_#u5iݠ+&Lb/\泷S{kYϻ/HAZZdxg|m+I.$<޲wa M -oh%B{kԅ;SCru+TW+b`jjL31WG/kw!g(E$$m\JUޡgWS'bCz*y֦KNWJib7LK9`! 4޼ćwkF4ڧHnV]sHg6^$G#e#2L&s̯O@IFWE6sl^f#Ee~< ^z>ܤj6Ufu"]xvފ A-e@`4WO/[j{Kgv y(qT,[(ʵ-IG,;!RTROb"u, L - 6yUa +3hqL/3$JJfDڣTS|3>-EY35lc%d/67T4lnM^W>۰aٿC1=Si޸apyUSYUC8+Vb, GD%ʣOj qyMqA̫s y`_䗸beF,El9U4]sËDɳ 7ɡ(!_RӞ޹\6?o^4k]4E[v ne%}ӷtG"HtcL/W觔+`Cnt\r^r]x#D~pnD1)h^#yHAD RtEM(DF!KB:n@tb|}ߌF?G_9ıG!zqc/}TK(U<,+5c&Y6~VlBXN.YɲI%ex=iV4lrLl3di[N1"o=lBB!3o/̖c 8xFI[۵Hse4 p||VI_2E)"y^8gIwO/ϟ ٦FjUL2${"lCMkrfC`M`E"߱PeK8t6-zH)0ȶf})=I"U=CXf/mhhOHiSK[I5J 2؈xI<*1:36ڑHsYm^ϰ'W'er^A>Hͻ 54xdC}y AF|i^ Ul2 ^k6Y+v:.$`H,kלA b 1A b 1A b 1A b 1A b 1A b 1A b 1A b 1A b 1A b7@c;KgzKj"F\X AEޤ?La2#S- iEڑk@|> 7iy×^5E` Yȍ#o k{me V!y CF(|d5OVӿ_k;pȈnڪwAc +x){<U'L>z0냮-DaƲ% !8mIj.lXl'2id"24ɬeY&,ԃRkkuY:,NN^Syf' +Q+JOEXg:`ojfi!6o;kϯ9/n +1%4,߀Pw-p- +B_BQ ? QyeA}]Pc@MD۷[|k_kG|_Wpo8-K%  8%Z8i"?9>MaI-|>|q]p+?glZx? GpO~$^ދp*C xB"H[av!Q +ÛޘAkjW^}6+{$u{le'K8Kv x /Sx>xyi{-J6Ouz|2BPv(w);EREg+ke>!)! kְ5i{ t 8-\fзAw[?hrY.=KFWa7U832[^R~ TfЎG PR-~E#v8f&*UWw0'.?#qdP%2'/_E-?r=wɓy]0{Nfun1*nr;̐/a͋h֪_-~8K,VѻB3 X ?m_ddM2Φh:s|V3oow爕$H^*ZD%8O"$r>_:M]-T)'H(Hf ۧ,X0uS]bD|,ͤ4jh3qohX"ft6Cr~_ "^خ|l׵D5 H"VMs3a;th:XC xU]?a QNC,p%S9W<89UqkKr|^Ӂa#^"аոFǻ7߹-.4ZZ'GOLHHHlAZ$H% 'ORI7,yiqu +*^ja#_g}Tߊ;fy&34~΂)DiW<3|K,ΰiCUJy{\x>*:}*ߗAiYc5qm>%,~<:M}>G t%鹍i==!Ğ_:՛ڴf#{}cg}>Ѓ<⳯ae)F:&)1Pu NB0e;D6$bI~&ckмQk Aɝ.~:~\VpT#BHVWx,;9ľ* Z3ĕywu*Li^+L^lʟq it~\fߟAC;@m۴VZh-IH TԪJ +WU)6=$BeXZiك&yRg?"mz=PwIc5;SPZRBouH~W5PxS\'ZA{Oz}qw#DM6Q8ES,TPj&YJzGS,̑J,O'H!3FH }Ƈ4DC(%{,#?EEكn!'bihˬ"jUn*;ѫ۠eu7COJ΄$gFe6z7"Eޡ \ɱpFFn疡F#2s^粀;̙>m,`4 I-^8:ϐ}=Ä1Ə5f[{̙3**U*e~eg_~ٲW#FW$e?@'FeoWd%]T.VVS–"n`]D6svQ$s[d&q:j`ͨ3kO-%Ş)ieI)*Eiizڠsr6JN w{w#gJłQVSxU*]icxNC)  d؋Ac+T[RUUkCKTP +ٮ)KTf蚅+] !;@ |QLDxFEFcQjTJZUsuƫGO8-EZk=h}~ 編aR'E9d>C9}>}/h/7]k{C!r\D` QASeXȲ,K,JW.qmlݽM@iMdH$G^rS_JZ ĥٜzbb_uY|~-AZB4*H)ώ褅ECZ(QgM% qǎ}T̩/ob.֋v |ogP\,1ז?Ȍ7JQǠ-IHͥ1vmv}-Jog#j$fuMi8z#Js- 79|O3!1 :?iiC\C7ZJ7\Eۿ@\kq?j#T7y@Gdig՞tfJ4q.{?1nٓU`sN]T#NUvϾsJą(S,s%C鰒GٯcmA$`3x`_pهM&q⬟&կf/sR|ǶhcfErQ́a]FcbDH䚑>^*.6juwE505:PTMijFq f}ܧlݡe R-EJRi)ݫܧn$dMjH>BR>C+gUj%3Z|9ygW;_o֟bug٠]͹IB*9PPQO7.ٕu{%6H'ȳhG&OtCy !3\׀Qn#A=`#r\.y&N3>̩9ZZ@mXO֏YdVf)3Ve2iVm6`~p9Z0tp@_m6RL'A6U/rܫ=?%YkoQaӿGbXΏ}6JA _CB' "<`yE иJ-bYY7:Y.sPRlW}u8N"$oX'K|r3e)eS,VSTJ${; bh&D!H13*g$tl-doPNjlps!xD:>%.jҎRJz;(GUo>1nĉ= 1=K +?R\$$~K!umIOW_%=[|VH;:I>B^&H $'&Ry޾!i%_Q&9OB|БSLQTA_솅E ]n =GM*!?տˏU%FCQ#go=<iMŠ'mXx_OV׺WJ3d I;<VOk9(#RJ=יK*;2<GcG&˂3Cssls  B+O[X\bbbߖ-m[`[p[Ut""j9qff4)Qw;{FVlw⿖.w7zϏ u̧ +"vfА%rriAgPZ(;N #0SͼSġF5گjtt|MN6/;y ./VvD{63*fqy"L%*Mai_I`~lR 1qBeD#m s f + $DHTx@ j}I_):j&BC>Lw$rёPGGBҗj*R$/5Ү!<\Wy+ +̆qF.VY1~1j!vC}VY.M7=/0^AĮ膻򞼓1q,ˋy13sjDHPܫy$k-Lǔ#Gj%[;{:Cp7+7PPm~VFh ɖm>͘ib+ͅmm-j^d{e7^gxI.fIC= 3zQ .΋Jy-J5VDZ]_4Ih~̢t>բ7.E4EaiTLȨlaCXj z$֐KBqQfH6Ac?`FԿeF[_zGDB ]*u c7+Å8o _*o(ѪHk]%9ሺq<x7e]!*IODn-C.`s0]ulP C3m3Tp'B |%I\ ܔ6$0!(poڢei;Ҫ..csP\~9lco,yPkǸzm}ͳC;P;0h@Ⱥ-n|cw7oO)˿MG>V`nB$lGdwPģ~I$rGS)slҊdlE +&Hp͞=*PCtb~uO[4;>P(_,AJY墬N"1q~V6$,5qɕr=q95BO=rca"0704''x.8Nj% 1rUĹJ@:QmY$i +ϟq+31)i"8"~Ƒ9;7J͚7?l0ؿ=yD+dr]$Da_g%;d[eN +-Ť`ɹr%3U bZqeڇona%ƪ9:!-[Tz4&8UtaL)L\.AƓ#).Nm#N[Ev{omV^u?x0=SW:+FM#|eƐjEo4T:7u9Ob͎?T=R0ԭ"J)Wч;y(Vd`$# {w̿..A?dߙ!r2lxnYMAr:*eY[n\Ϛ[7(Pti{mT{'V]~Iӽ񅙯ö/LJ|vuǪ~³/Tݤ,̈N&)b7)ыr}\΃hCQ.W=y pcKwMM S;q]0=-E~c,e#,̥i%ܦܦη,{CuTI>]֗ІBmF>~?=׼W.Qj?bXzꞧSH?shJڋdd_2r72dFZ6\B)doXHP$:Oá)h:8fWyqTWFt֓*vv[.@І!噋2e>i)ܽ4%ϕ=/8$VQgpi"C'^LLqᬟ=%i?aL{Iٝz>H"Re}h&R!.n#lV%꽜U?U{K|Oxhє%܅ V,XP +[,NK/fÆgAx[ Mk$%Ub88-z9rT134ʮӧ5Kheq'Bf ѳ1lߥd"ctcI_i֘/$;?sJ5 ͢`mRD6Ҹjty@Z8j6aune]MCq͕3>s٣%/kG{)gXO'3} 7qk]|s3V7^L\QW?X,r+:J"5]#Es~N0򁁶OS I -iRHgJև"v~Օd%] |^/A G'bRTW r0nmWGtGt~D_ݏ8rOVW^#h\m57ӍJdG4}㨁  >Fw.&N>km,Foi :8rI.̺jWK[OG_~pm>:6QʊH-i"k+WfrR1ʭ(>CGm[ӰEyA{ZbfC/h/ޤz} )3_FŠ7@1c1b +z]\N4jy>FXTM'dsWTEURꦢI_E$2,j5&V{.0;xi'?'Bt t;Aw:1xφ;`,їꏑe S^ _%pD?pJ??9ڠb*6 xhFBWh- Mld @eV`#Rux`kmZ^U^դ^QhQvJzJ;j|M>g+ߨk?ԮRSh[b::[Žu?{Y.vAIiw~\Qšܜ4/r38lvp 930c .êk#w5 L3 '8LeMb,5ST/;,Te=j:]ֱ͜FP8G pGܫz--yKE5Yޤ7޼:}bbcl%..VW;mMyt/VjUKow:q~ΰK = <]õS*7%]kżWr} !JN$ih c &mTѽq_A##pVjncYnP5EZ˚YZk:@g<kڗP͉xriޯw5 FT'IDIn9=)=;>\0buw$wbJpC37y-Ii*4օ7[nXN@n.yBMw~j tn58(r+UߒS +~EtߠiLmC2t~2W ~]V:u{|o{XRHHOgq )dIF}.yr5&˓#5 oq\Xnxs`W&cbxZuOiKq5˜T{I$D3N+q锯Fz]nЕud[ig&v_LJwa[HAݩ_|mȵ,E -I{2cgʖ,@pt 6~˱2He*67t& /FjmXְ_ܡMô_o0O\xe X~+{b1WԿϣ\Qj~'Wz5ؼi䦸 Ήsչ<@]K\@U\12yHzT]"p*.ɹKslن ݛkPK忐ׯAEiO\.^FZ/m.m-˄Q2Kt@޾[?Kd$z1?ʗ+KSp_Qamjz7Uc:.]9/]hn<Ǒx"?I͈[pd7"CϘDTL‘< )G +"oQih#%!7 :1> žoFt/\Gأ81HCԗ>Iw*OϚ1,?x +Y6xl,'rެd٤24dY6x&\2k,&˦e>s&e3ɚI3ȲY3ҙ,mrIWnD}7E3{H +iAZal yPsc9(Y,ߩDY endstream endobj -1057 0 obj +1059 0 obj << /Length1 17264 /Filter /FlateDecode /Length 12304 >> stream -x|yxTŶo {s;ݝN$B&4<a<*C &P"ǃA<!=9\q@#z= -݉N]VZހ0B;̔=/ ӫw~ ;:dx.FAc 8h_Cf4nh:oB|qS,j "DҦ/1o,s ̘h!aCm1wi&Ews ˞ ' ~ p9'̂]0urvlDüO.?_õM s-\;03G-r(#@HD\VdBϞ?Q]~"!-bhd<'cYބ=Fzkg&.HYPQC8WL -~%UBxN](-̎tRwrꄳDA@⅒ -p8h -ޏ7A)rMM([ +/ -ʊYTxW%qJk}*D+ edš{Rl -ү=ch?i=t\F2؎ke?:Q5uóQZ-uA~"ET< -{&M$Fh"Z~1 &߹s߷5MYJ0kG|*}w7}X g\[wB!ROG}>.^N0`halv^prx!Ty N޽k|}M;ufӖZ(I7t"Z -B+ѧtk-atjVb)kp'?/W0te&'}ŏf#1}쨰FG}х.?\\PAK\Fdٌʠ3otF1Z)q*SE⡓DF'ыLt|. v:FOA t#}8->AG0:a>etftN1:0Dsshmb?%eh]C̷u =b~L{Dp1 :1@_$`;h$څ\pn!v@sNٌf "Nh&2̀3M4-B-E;ŎiJ01NS*v8B>1|="g4DF/zvfh,1Mil -@=0hF@QF¬DinF]:g waj0/NmQ+pnͧb&h6SsPv&* dgTdw@0訁VgTNTFuTPQ s8t)Y(E~5?ux83%d֭E#}uÇ ` -Uz@-pmמ,ߠ-t0gPRxC^| z[(p :e<_ -G2 z~_CF6sVT-*CpM1p =Րd:wzۊU \9C& M.86?:.\n[8 FehGB ltFl\GtDm8 aAW)Wh{ ` vm_K>rH+V4~YpȢG}ulG>cj+?l{jr9u?u"/>z<O墑TONtR\95=)َ͛賮dIIuj1j|sr]|3ܪqygfp$SvfFSc.>.'b/Y͙;p𬒺5E;f*Y[ !4hNI]qJJ5%u8o9͝=`ZVzGL;'}5d\3{0\HIYs:eR8X-fvh4t AfdvsN¢lN7P2+mq^_V%Q%5(BNוi -aJ-mΖϛ w"⺡ ԃK+7}O37 Fbm^::cP\[ qU  $ &k:!:1io&L!msپEl_.ζ⡋PұSY ^8x +i7g -+ӿp4@ke :a+ ->EGVYkQ50 kG#^]/dKpUX<_tRv 8ۉW΀r4=z( 6m>pB#tD>Q Pt0Q(M'*u|?x<kk:hbJ}v9(!^_Z~CioɵCs:H)v}p6iI=Şk -f&x9%R ZUxCa^0 m3$V1˗ib]kxixFX<r@0Q!{%厠H$J{* g`G&^2&љ1:#geV m$X| -6}wጓ?EjjjN=VY!3cz7Z&>@oXC-2VJ1*+*+= b@fěA5rrHK7f MM7f|4c;Sv߿e׌.`qIe^:W_-TBY~#P -"ȓ 8@iR7.^Fǁ$a`o)9dM#oy}Hdfs ? 2QT&2{h1<81{c`ҚYhUu%_+k1L],굛cWn?o\Y+W؝,-^lI19QUe붌X+x8}Sէ''亿8*8j$T7԰R'UFUU$ctCOͭ6í7T=,@2cm|XiLee>'RL ,.m&ز{hVֱVA*$j1YHv=NIR4m $,-G>=*P4c+i; -IvB^X"<zD7&*cDpi#%ۗ/}e;w|V -$a  TK)"2ؐ p&ڪR(xy7/_s?5J^ïI[s5aYuBѷkل]l›;PrVÃ2"SY4H>w -w~tHmF1RzCeXE׉KfKc?<`C5>ZtZBs~ -=G鑺jS&y -{'hlNY7lt{z+72DT3D(-l*ӓE8ɠD:u{ v{YF)ɀd;0v4ؽɆY@º5m8O545h 4X,b{Cx%n`gUh"Tf8Jlas9sV3ߪa/;5m.ؖ=77-oYOngomV>mvA^zydovGۅ?ex '/f~UZDA"DQ@>Gk5J"iY AF4,Vh6WUS)*2rDA'K(xL0x2 "o1"n%lݻGXܨRUJ1V;&L!"2yŌtҼ|ц+5S!L[+>]fŏ?~쪕Y|_W2~cTe]G ?R7ֽ`?ScRܨ?:^I[*u*",ÀҥNpwEA웝#9]fqsP'N/}{\}3ygd_X!U֢J:fe%dx]_FՒiZ;OAH܋j]q_<'T~8jz.q4*U,eBmJ&r>2lhy T3ĉ#<8xp%^'.+̠~ L)wqD$ qRI.:.ӂr\e+PI ;Kǯk$[>V29ْ˥x -z^kysGF9:B;GF`vg'qn8e'AW+QSZ~)>tPφJw-G'4Kf4.:1A&a2J)eD"oJ;Hr҅}>X:J, -Q>);̀p,5nigߠtIh)JPǍlHl -|#%wPʔ#2HaMUIRU KU m0T0&iKUۉsbu*.]nOlK:YMFy!}#!V%͇*v_o%hحOC@[aQz02}&*V wEO҉ &8KnO(RDfˋRYuI@TI AT(1 !C -RxCg{z^{ d%nw]:DbhLlʓ1dw'< &):>E,U6@#RHG #űXy2JWo4, KtA1aaSܞ4>6 |.JO\5dP@z~hE (#=X Iz`{C\ \އ!,K)ܟClKLI/?IOMY1+vx!NJV|,B4XS )ҧYn}ْJV,NqF;ϫΫ,* -XFB7у:m"rɂs>e^lMS-S 3gdZMRLD@KIotxXd/-P~;"{㣶%q#֑i-~S#/ (8՛6VO/%}%; zcT8{;:22F\fպ24HtYz[ˈ]ۤJ^:77e@C>kn(NIMUj\Mjjg]ar9Y2x#_ҹ[^v}o/xͦ GN?\Xz{B,|dᴅزrWķw>fIva26qNNan(pt̬+sT#eh,##CV+cb%!O=XzOYۦjcQUǺ:хϚ~<9BĨ'(z| y7JGJG-}4Zt<TZZxQ~ ϰ moW3iKda@{vg.w I\Dd(3˔*S=FD }6}_.>ʅPQݯ阺UEW;=m+3]t,yG؁8gtM]hzz jn^2#~]Vo$ʢ P(%D[Cc.+\-ׯiA'|H>VA% -_yYDz_ꄍkWﱐ c7&/a/N|ev>`AnaH͂ J6tL%a2҉Ѭ%7tD7 }$kCh,W4kw֙Iǔ,PvEIݵo>v2V֑3|̧ DEvs|8X]FوBdҙ(¼Zoџ:Ԗaf jIܚy"~dei]]E{Զ'doyi\ja^0QG[Eu:&ZcI &Js[e( LG<[yxcIrO)ztqHgZZji0mǔ6Bt,H&|RYm: >*dʾKN*]v_ri6w5vEqqp )C,:%NDp &m,KR/nhW'eIDQ‰Kt)Yd1y\(n.-E.%&IrWŗpş13<Y?e3EGJPK#-2A` (נF g1 s@@pvr]{NO&IirKSyykv!OШs8`n=)qGzS>NEyû6Wk2 O<]7ߞ^* ⅒-$|(QF2pֱaBX6Ro<>>\zn_5xy0'Vĵz"5h߯ɏ ⣂qUf|֪` -bHd'KIAyO -npH4DkR径tw!ۦ|ٸ7[3t g/K=бC7El_p||}Viŋ{*"+02 -DȊ)PJt/hޭA 1zV2d&,>sL  XyKlH&!|)LoWU~2) -.6hpn§>x0Gƻ狞,s|.y$$i7 sc>a0D.~F0oxH GH[X_tGأ?'AܮnM-lփTu*LU K4INp`ryWr%'qr"hMR:Abp4Q[ECJI^j/+ $[̕rLOWoFGYt0K,T{TbV݄'?b&d!vSd8S]FV% -a'u20e~~Zvk -tj2e+Ձ I=z0,d~`$ -ԩ*V櫲fj"qh+ YЎ<ϒKdI@P1HUuDUp"L` p]cp[nI-߶YK\l~s:JԆN qY6{Nb4Nɘo 3"L>n5 ZFѴ)~a<~'{ҺrF5X٦A,[bUlnۘ`J0w6pu9'3Ȅ]0ur65pq'ZNE^~{E¹.X؝X~}v;yF $G .+2 +Ds  I( ME#9y~&1G;3uC&Ȃ$@Y *ftc4D/""7tzbC1hdgvU;lS'%4 J8oPA{W~ J1pn:PnBe]\E|UPVϢu(PPSAZyc(#.޻88&?eS~?H@xLj6:v\+!ԂjTs~ҳ~虧HP>UҦ2iFO-2zw=(62zcQ精1І[(:O +i}E/MFPw}`bD^F_cV*{2nJ:m/ﲊ/']Vחſ./%ӿ0&/Xa }^lctVo,V33*isJFz0}DW ^tpNi9(/e 2/}J1RF׬k]m*FO +-yrq^N]fK}]A\l1]3ǎ +ltOxG]tDqp:/etN:t:qNgtŌN2:Y)n:INdt8Dqұkc4NG1:ч#ćF3:чӡ FiB?>h ]_؏Ѿ[L Upqpw6}0*>hO'2V_OzLb/3UB˗g}&%3<ͫ>_Г@B[49 b5-\:f3l@] 8d073ij8MZvօN!b&>l'UB;qr+bxiGMh" ƛ74_4XYe,zӘd=ad7QFl#Yጆ1b =8 h#Y ͧEt$S}!vjmZsk>+dg6D3Ud ;J AG \=*p2 ʌJеĨh9$@NBq=.^'C K-鈟)%+m,Mx>]Ugғ8j lhd-os>78³KۺGcq/ Gy% \V8a2z¶ @S +迈2tm!Wk +M詖 VH@,6$p]lpyY %Kv9rۅid0:/C#8 'UTAf3bdGr%$m[#Op- +}NBm8F&sdk^-Fp?e@'@2-0L\P-lzZ kN2&Hs퍲a(ZH^>$ {n0KFj3MGEB0Y8(đK)Y~rwyK S&^]TU5M}J}UDD?lVݍLѦѦ3̵5(Emn=da+=ck Y=>ݾcB'|ەZu#lҢsE̴TZ*1j9ےR[RqQk#MMMbs#lZ@Z +[FQ:BAo% YCmtkg_N@xѴ (EH\NQ]yYo5F"#]b6 N pc9{>7ן-0 ɠVBx2=Zq4ycVͬإ5n11qSfbƈ&lVM/Ro;ZOu;'-b_]מbq`oY щn{Y\a-A$""&Ƙ@pnʩg?r y'kkܼfXs6'dVVf$9V||Bfh%+;3 :L/f.wO?5i껧)Cvxš[7L+?,~^X8ad:w<3u6}5)E`Eۺ:~fn= +GnrH_;;*16AuϚcޔlMYWdD̤:H5x.h5xbƮpL^pnո'\ +ՙ +al1/P1W -θ 䆸*i +Ņ m5Yggee8\OK6~h'SOkUA}&/5n)"BZϦUΌ)^wW +zc{+t\7cu_y/NfabA.71Z+]pҨ4%a\~%DjvdIȥ+. jqmθxŖM^juMU +W]-87_+c\M[7#9.˖مqZ5лdka.ܖo;_^._HNƔC>/Z ϫTiS *IV +3 z]Qi&s(N(pq3S(^f WHb[oۗ9x"JA)8!ELR%EP#y4O<9Oy!hBCD;HVFU:%NrS=La_0 ^UfXp7zg߭-km$zEzEItSgW|ecR@UYTU3B;DY0ѣ`]/`6L녑3PvV?y 6J^L^/>]Jƾpɟa͵'pK,ߐ{iW1cx]zQ_7ʡv貘]UqR㕎!7;@[@5rrHK7f MM7f|4c;Sv߿eֲ׌nF'|w8٥rSջ[,1PLgo,{70,`/QjGT/Wa܊ L#]5[@ħD%X(O&:=ߝu^:W_-TB0K(^AE')p,Fͭ\oi[$I2sDiGZ)&\*`~uPUTNMx%emֹmD¤heѦ꼕K6Wζп PMlV8Ɉ:bM0LH3/3Ⱦ/L*ۦuL59X_XǞf X)[ 4d>#ى;%G HѠ7Nt~βpЃ!z}! +T@QX 6pA#*'YzagD J¥kH8p&_n_68/q紴!~OCcz7x Gf>'ƭS ݽ(m>zŁƍ# Q>`o [E +ĤNj2"нN^5${oZRfQJ4 )Ɏ vO!s&,6@Fms3%R\Rb/qH ,LjYʬl'\ 4lT2gʕs攔?]5s^þ7E۲-ƶI{ܶmS۶o~.葷A&[jwd72Ѽz!/@]Pk(P$( +:/U(ثRy xM\AU$-ST=(ƀ2ʁj +2x/\EfT@ dIYe<GGf6C7Zڭ$-{@<YRuUJ{UܡbzdmhE-B)Am.G~Wvͬ?>կVmzdrϮ#Yυ)^i@X4Xqa/:lh}?MAm!A:Y;T.jwww.hGnkm/0GQ( G4*yrG (+$]ts5΃^ez5=ήFQ }vGypZOe*O\f֙A L)wqD$ qRE.i:.Sr\e@H%5MM\vR|+lR<JZ5Umv*-lg!#]?E{8簓 +jk(H)*Gwd/:H(ETgC%;ᖣS%i7@Y Jd0RqLg"eID7%$9^F i_<"y2.ON03 03 eM8Oz¶r $[Z_'-/77g i"Y4ؔr% k&r_,6cx΀V:)[eJ UP0`V$ )R%&|x*%*F}DE9:.wJG]ΡYJW,æRC<Ȁ>ָf5qVȯ4֧A]yH@=@@>ebd+JULFޜ'S|%w$rWy)&d$ X*(<ϔ :AoaWĔb [I3-:-W Ui\B,)ݖ҈j-O06:]Wzk_Z[oo\Ņ8} ^}p![JZ\KX έb͎$ WYREUtcW+r2H-Ur. ߕ?}=„ݹi1ի7ٺg_W j4YV`F.0j3P|FZҨ !GKLR]9)-R!+~rXWnM: _C1^Iw(LD}]0PUR^AT!^DkN*HUk]uRƛΚc fsm&;SL: +qZڅM~<Xӧ-v[?qC3m]l&^ubn>LF^{juAdh &VtDV|Uuˮ*+~,Ty+ՉnU!S]ΉMM䱩 +Y.MusGQe$22紝9c1q'T_Y~6^ |{GΌs}F󿒓?.ncRj=q'̣"}&)`_&wdZSE,%#k6zhy>ڐuUj ^6i,}ouooBLI,i|&9fQOz̆9g>اA Ƈu6n.yݻuE u< [DG">@BGRT9iM ⎎r3L<,p 8[+&m~A OUGU +fT5!CDE2`/2 *WP <4 |QJ?K5 s/pq%MhgbT!cDSO^1QIyLҍf +J7]}aǐ":J)ÔQ"x ea }\X{\i 4ҸTtٽisV}ה Ҡ!w|t^CJ֫%@g|=܏N҃ ݥ]> a_BOlhW(]bNx}ID|Boz͊YpqRg駑E* HO—>eϲup|Uu9urh4~^p^|fPQ2rE7ʕu FK K1|<#Zg +3 uқ) kI#Κ3xO?"^wXE Km Ki2F&m#:GF=$_7jAP`d'l&%觟$_THYJw&7P=Iy/pv +7t( +fx%{k6M8:vᢲ=cH# - +>S_߹wme浫W^%ֲ~(;gb.|~ m\@O_ʼnT-uYAp9f$DF:Q2v&Vm\r>m >pNW'd~h + +=[15M:` ~0;"AGme!rwhju'{ ! I18w+W c;N~M=]S̠cJWnX7w Rsk;mws+SIΙ?>s 좟##:wڹOY>aen#lDAEhsLa^nm0lOB +|j0EC?9R4fYYV_{^!uI]Ն7Z*[_42~7CF!C H@$DTuşxyL8x>.za?yb#1B%"+ZM1M1 ^76UV,Doq|ӯ*n?}׫\-~ͲuSst=N Ich[0ˠÒ1[ •  pcaQP]J&"f)d:YL*JX&.%&rwqF g1 +sh?HPs\^*RRT}^h3ϕ.%B0yJ}EhUV^QYU5j{yNER vg ;a/{ Fs]j}aѲZW?-GaҤܼ +Wv:7U/VYY8-s!P#ܛ=]=sqĻ?x 3˟y|3Ϭ޼I/]Ϛ?}4N؍;F +#`\3|~TcQj.z۹ b{0rWͷWJxt})I>þxpj ul-^7{[#cv 9:w~hqwk̜:$7xq8]rW`\&QY1NU:JiE-sxg%N6a3r!Uiʦ]MdRħ„V}K_[w0Cі"h,|^ydn/{ɒ;wO.8'LB~=g &! Cd(bQ(D}dm6yE +UA$^BҸ#.8<vM[nh1`ܦSyfZY:Ir3pλ(9qD[=w] hH8H]6ģxܑċrɐC)GPr }B]aRmNf,qnqT|RQ}Y #<&FjI{bO&ę2.VK?+Tȭ-y.x;ױ[^߿omnא[II+~Ad  S'oiUNWA:'H6_,(0$X#qJ1S2dMn@;tBXIJP:t B G5h]N#vU(ZLt$qЍ=_d0Y0eZ*.:`h/3K^]c<t; ykЩb0!Ďbzf 䋂[~gBY?.;zz+s{\?|` lccVtqSŨ >!,b_+F"Ll,4HQ/߸h{/HQ~߳}ވPY;̂CQX]{'⤹72,a_Є;l +v q?=Ou柏I p.^?r̂cGs|gC_o*6]ъǪ~Y[AAݼQ u|ӻ wEB_`%D B=fh&z NDS!fAPʀ#=EPEd@l!wZ/44EZk3þTQo͆FpTw22C3e>=SYp_ <Ɲ]Z/Ap|(P9pZTd{o{YNw>Ac ?.qrvvB +#bhBp @E.{"a@$gT7½ q;~sv=~򣓧ԩKRg<:mJ;yA ?6ާW endstream endobj -1058 0 obj +1060 0 obj << /Type /FontDescriptor -/FontName /EREYAA+DejaVuSans +/FontName /SXAKMW+DejaVuSans /FontFamily (DejaVu Sans) /Flags 4 /FontBBox [ 0 -14 557 560 ] @@ -13150,24 +13224,24 @@ endobj /CapHeight 560 /StemV 80 /StemH 80 -/FontFile2 1054 0 R +/FontFile2 1056 0 R >> endobj -1059 0 obj +1061 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /EREYAA+DejaVuSans +/BaseFont /SXAKMW+DejaVuSans /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 3 [ 317 ] 16 [ 360 317 ] 20 [ 636 636 ] 25 [ 636 ] 36 [ 684 686 698 ] 42 [ 774 ] 44 [ 294 ] 53 [ 694 634 ] 68 [ 612 ] 70 [ 549 634 615 352 ] 75 [ 633 277 ] 78 [ 579 277 974 633 611 ] 85 [ 411 520 392 633 591 ] ] -/FontDescriptor 1058 0 R +/FontDescriptor 1060 0 R >> endobj -1060 0 obj +1062 0 obj << /Length 744 >> @@ -13223,20 +13297,20 @@ end end endstream endobj -1061 0 obj +1063 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /EREYAA+DejaVuSans +/BaseFont /SXAKMW+DejaVuSans /Encoding /Identity-H -/DescendantFonts [ 1059 0 R ] -/ToUnicode 1060 0 R +/DescendantFonts [ 1061 0 R ] +/ToUnicode 1062 0 R >> endobj -1062 0 obj +1064 0 obj << /Type /FontDescriptor -/FontName /CHSCVX+Poppins +/FontName /YFABGK+Poppins /FontFamily (Poppins) /Flags 4 /FontBBox [ -27 -132 753 704 ] @@ -13246,24 +13320,24 @@ endobj /CapHeight 704 /StemV 80 /StemH 80 -/FontFile2 1055 0 R +/FontFile2 1057 0 R >> endobj -1063 0 obj +1065 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /CHSCVX+Poppins +/BaseFont /YFABGK+Poppins /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 3 [ 266 ] 5 [ 291 ] 7 [ 621 ] 10 [ 158 453 453 485 ] 15 [ 197 550 209 475 627 319 574 588 628 627 634 545 630 629 212 ] 32 [ 722 ] 36 [ 673 612 771 706 512 503 777 691 245 ] 46 [ 598 431 860 702 785 578 787 607 586 540 674 675 975 ] 60 [ 583 540 422 ] 64 [ 422 ] 66 [ 732 256 675 675 606 675 619 328 675 639 245 247 514 245 1029 639 639 675 675 372 521 363 639 560 819 478 562 454 ] 95 [ 290 ] 204 [ 218 ] ] -/FontDescriptor 1062 0 R +/FontDescriptor 1064 0 R >> endobj -1064 0 obj +1066 0 obj << /Length 1430 >> @@ -13330,8 +13404,8 @@ endcodespacerange <005d> <007a> <002f> <004c> <003a> <0057> -<001c> <0039> <005c> <0079> +<001c> <0039> <005b> <0078> <0027> <0044> <0032> <004f> @@ -13347,9 +13421,9 @@ endcodespacerange <004d> <006a> <0054> <0071> <000a> <0027> +<005f> <007c> <0012> <002f> <000d> <002a> -<005f> <007c> <0020> <003d> <0042> <005f> <0043> <0060> @@ -13368,20 +13442,20 @@ end end endstream endobj -1065 0 obj +1067 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /CHSCVX+Poppins +/BaseFont /YFABGK+Poppins /Encoding /Identity-H -/DescendantFonts [ 1063 0 R ] -/ToUnicode 1064 0 R +/DescendantFonts [ 1065 0 R ] +/ToUnicode 1066 0 R >> endobj -1066 0 obj +1068 0 obj << /Type /FontDescriptor -/FontName /QVTIIS+DejaVuSans +/FontName /PPVKZX+DejaVuSans /FontFamily (DejaVu Sans) /Flags 4 /FontBBox [ -9 -92 733 729 ] @@ -13391,24 +13465,24 @@ endobj /CapHeight 729 /StemV 80 /StemH 80 -/FontFile2 1056 0 R +/FontFile2 1058 0 R >> endobj -1067 0 obj +1069 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /QVTIIS+DejaVuSans +/BaseFont /PPVKZX+DejaVuSans /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 3 [ 348 ] 11 [ 457 457 ] 16 [ 415 379 365 695 695 695 695 695 695 695 695 695 695 399 ] 36 [ 773 762 733 830 683 ] 44 [ 372 ] 46 [ 774 637 995 836 ] 51 [ 732 ] 53 [ 770 720 682 ] 57 [ 773 1103 ] 60 [ 724 ] 66 [ 500 ] 68 [ 674 715 592 715 678 435 715 711 342 ] 78 [ 665 342 1041 711 687 715 715 493 595 478 711 651 923 645 651 582 ] 5038 [ 741 ] ] -/FontDescriptor 1066 0 R +/FontDescriptor 1068 0 R >> endobj -1068 0 obj +1070 0 obj << /Length 1182 >> @@ -13470,10 +13544,10 @@ endcodespacerange <0049> <0066> <0030> <004d> <0013> <0030> +<005c> <0079> <0010> <002d> <002e> <004b> <0045> <0062> -<005c> <0079> <005d> <007a> <0035> <0052> <0025> <0042> @@ -13495,20 +13569,20 @@ end end endstream endobj -1069 0 obj +1071 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /QVTIIS+DejaVuSans +/BaseFont /PPVKZX+DejaVuSans /Encoding /Identity-H -/DescendantFonts [ 1067 0 R ] -/ToUnicode 1068 0 R +/DescendantFonts [ 1069 0 R ] +/ToUnicode 1070 0 R >> endobj -1070 0 obj +1072 0 obj << /Type /FontDescriptor -/FontName /YKWSLN+DejaVuSansMono +/FontName /MWAATU+DejaVuSansMono /FontFamily (DejaVu Sans Mono) /Flags 4 /FontBBox [ 0 -155 598 728 ] @@ -13518,24 +13592,24 @@ endobj /CapHeight 728 /StemV 80 /StemH 80 -/FontFile2 1057 0 R +/FontFile2 1059 0 R >> endobj -1071 0 obj +1073 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /YKWSLN+DejaVuSansMono +/BaseFont /MWAATU+DejaVuSansMono /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 3 [ 602 602 602 602 602 602 602 602 602 602 602 ] 15 [ 602 602 601 602 602 602 602 602 602 602 602 602 602 602 602 602 602 602 602 602 602 601 602 602 602 602 602 602 602 602 ] 46 [ 602 602 602 601 602 602 602 602 602 602 602 602 602 602 602 ] 62 [ 602 602 602 ] 66 [ 601 ] 68 [ 601 601 601 601 601 602 602 602 601 602 601 601 601 602 601 601 602 601 601 601 601 602 601 602 602 602 602 602 602 ] ] -/FontDescriptor 1070 0 R +/FontDescriptor 1072 0 R >> endobj -1072 0 obj +1074 0 obj << /Length 1570 >> @@ -13583,13 +13657,17 @@ endcodespacerange <0038> <0055> <001d> <003a> <002a> <0047> +<0059> <0076> +<000a> <0027> +<001a> <0037> +<0013> <0030> +<0054> <0071> <004e> <006b> <0042> <005f> <005a> <0077> <0011> <002e> <0006> <0023> <0004> <0021> -<0059> <0076> <0037> <0054> <004a> <0067> <005c> <0079> @@ -13611,13 +13689,10 @@ endcodespacerange <002f> <004c> <000d> <002a> <005f> <007c> -<000a> <0027> <0015> <0032> <0009> <0026> -<0054> <0071> <0019> <0036> <0017> <0034> -<0013> <0030> <002b> <0048> <0036> <0053> <0028> <0045> @@ -13625,22 +13700,21 @@ endcodespacerange <0032> <004f> <0029> <0046> <003f> <005c> -<001a> <0037> -<0018> <0035> -<001b> <0038> -<0016> <0033> <0022> <003f> -<0026> <0043> -<003a> <0057> -<000f> <002c> -<003c> <0059> -<001c> <0039> +<005d> <007a> +<0016> <0033> <003b> <0058> +<000f> <002c> +<0025> <0042> +<0026> <0043> +<001c> <0039> +<003a> <0057> +<001b> <0038> +<0018> <0035> +<003c> <0059> +<004d> <006a> <0039> <0056> <0034> <0051> -<0025> <0042> -<005d> <007a> -<004d> <006a> <0023> <0040> <002e> <004b> endbfchar @@ -13650,1107 +13724,1109 @@ end end endstream endobj -1073 0 obj +1075 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /YKWSLN+DejaVuSansMono +/BaseFont /MWAATU+DejaVuSansMono /Encoding /Identity-H -/DescendantFonts [ 1071 0 R ] -/ToUnicode 1072 0 R +/DescendantFonts [ 1073 0 R ] +/ToUnicode 1074 0 R >> endobj -1074 0 obj +1076 0 obj << -/EREYAA 1061 0 R -/CHSCVX 1065 0 R -/QVTIIS 1069 0 R -/YKWSLN 1073 0 R +/SXAKMW 1063 0 R +/YFABGK 1067 0 R +/PPVKZX 1071 0 R +/MWAATU 1075 0 R >> endobj xref -0 1075 +0 1077 0000000000 65535 f 0000000015 00000 n -0000001104 00000 n -0000001238 00000 n -0000040577 00000 n -0000040711 00000 n -0000043403 00000 n -0000043602 00000 n -0000047323 00000 n -0000047729 00000 n -0000047930 00000 n -0000048133 00000 n -0000048268 00000 n -0000048404 00000 n -0000048562 00000 n -0000048721 00000 n -0000048954 00000 n -0000049188 00000 n -0000049403 00000 n -0000049619 00000 n -0000049860 00000 n -0000050102 00000 n -0000050325 00000 n -0000050549 00000 n -0000050781 00000 n -0000051014 00000 n -0000051228 00000 n -0000051443 00000 n -0000051670 00000 n -0000051898 00000 n -0000052107 00000 n -0000052317 00000 n -0000052546 00000 n -0000052776 00000 n -0000052987 00000 n -0000053199 00000 n -0000053414 00000 n -0000053629 00000 n -0000057395 00000 n -0000057860 00000 n -0000058057 00000 n -0000058255 00000 n -0000058474 00000 n -0000058694 00000 n -0000058895 00000 n -0000059097 00000 n -0000059325 00000 n -0000059554 00000 n -0000059764 00000 n -0000059975 00000 n -0000060190 00000 n -0000060406 00000 n -0000060637 00000 n -0000060869 00000 n -0000061072 00000 n -0000061276 00000 n -0000061495 00000 n -0000061715 00000 n -0000061916 00000 n -0000062118 00000 n -0000062255 00000 n -0000062393 00000 n -0000062587 00000 n -0000062782 00000 n -0000062972 00000 n -0000063163 00000 n -0000063354 00000 n -0000063546 00000 n -0000063738 00000 n -0000063931 00000 n -0000064170 00000 n -0000064410 00000 n -0000064625 00000 n -0000064841 00000 n -0000065048 00000 n -0000065255 00000 n -0000068823 00000 n -0000069301 00000 n -0000069497 00000 n -0000069694 00000 n -0000069890 00000 n -0000070087 00000 n -0000070286 00000 n -0000070486 00000 n -0000070686 00000 n -0000070887 00000 n -0000071085 00000 n -0000071284 00000 n -0000071518 00000 n -0000071753 00000 n -0000071952 00000 n -0000072152 00000 n -0000072355 00000 n -0000072559 00000 n -0000072761 00000 n -0000072964 00000 n -0000073164 00000 n -0000073365 00000 n -0000073561 00000 n -0000073758 00000 n -0000073947 00000 n -0000074138 00000 n -0000074330 00000 n -0000074523 00000 n -0000074713 00000 n -0000074904 00000 n -0000075090 00000 n -0000075277 00000 n -0000075489 00000 n -0000075702 00000 n -0000075917 00000 n -0000076133 00000 n -0000076346 00000 n -0000076559 00000 n -0000080257 00000 n -0000080760 00000 n -0000080962 00000 n -0000081165 00000 n -0000081367 00000 n -0000081570 00000 n -0000081781 00000 n -0000081993 00000 n -0000082214 00000 n -0000082436 00000 n -0000082665 00000 n -0000082895 00000 n -0000083096 00000 n -0000083298 00000 n -0000083496 00000 n -0000083695 00000 n -0000083908 00000 n -0000084122 00000 n -0000084321 00000 n -0000084521 00000 n -0000084732 00000 n -0000084944 00000 n -0000085090 00000 n -0000085237 00000 n -0000085451 00000 n -0000085666 00000 n -0000085858 00000 n -0000086051 00000 n -0000086262 00000 n -0000086474 00000 n -0000086693 00000 n -0000086913 00000 n -0000087112 00000 n -0000087312 00000 n -0000087520 00000 n -0000087729 00000 n -0000087925 00000 n -0000088121 00000 n -0000091980 00000 n -0000092451 00000 n -0000092588 00000 n -0000092726 00000 n -0000092918 00000 n -0000093111 00000 n -0000093310 00000 n -0000093510 00000 n -0000093667 00000 n -0000093825 00000 n -0000094038 00000 n -0000094252 00000 n -0000094448 00000 n -0000094645 00000 n -0000094837 00000 n -0000095030 00000 n -0000095253 00000 n -0000095477 00000 n -0000095678 00000 n -0000095880 00000 n -0000096077 00000 n -0000096275 00000 n -0000096472 00000 n -0000096670 00000 n -0000096830 00000 n -0000096991 00000 n -0000097188 00000 n -0000097386 00000 n -0000097521 00000 n -0000097657 00000 n -0000097840 00000 n -0000098024 00000 n -0000098216 00000 n -0000098409 00000 n -0000102247 00000 n -0000102734 00000 n -0000102893 00000 n -0000103053 00000 n -0000103274 00000 n -0000103496 00000 n -0000103699 00000 n -0000103903 00000 n -0000104126 00000 n -0000104350 00000 n -0000104554 00000 n -0000104759 00000 n -0000104990 00000 n -0000105222 00000 n -0000105435 00000 n -0000105649 00000 n -0000105878 00000 n -0000106108 00000 n -0000106326 00000 n -0000106545 00000 n -0000106781 00000 n -0000107018 00000 n -0000107236 00000 n -0000107455 00000 n -0000107590 00000 n -0000107726 00000 n -0000107919 00000 n -0000108113 00000 n -0000108324 00000 n -0000108536 00000 n -0000108739 00000 n -0000108943 00000 n -0000109134 00000 n -0000109326 00000 n -0000109540 00000 n -0000109754 00000 n -0000113833 00000 n -0000114320 00000 n -0000114523 00000 n -0000114727 00000 n -0000114932 00000 n -0000115138 00000 n -0000115328 00000 n -0000115519 00000 n -0000115756 00000 n -0000115994 00000 n -0000116225 00000 n -0000116457 00000 n -0000116661 00000 n -0000116866 00000 n -0000117074 00000 n -0000117283 00000 n -0000117491 00000 n -0000117700 00000 n -0000117853 00000 n -0000118007 00000 n -0000118204 00000 n -0000118402 00000 n -0000118563 00000 n -0000118725 00000 n -0000118907 00000 n -0000119090 00000 n -0000119255 00000 n -0000119421 00000 n -0000119618 00000 n -0000119816 00000 n -0000120018 00000 n -0000120221 00000 n -0000120370 00000 n -0000120520 00000 n -0000120702 00000 n -0000120885 00000 n -0000124723 00000 n -0000125194 00000 n -0000125415 00000 n -0000125637 00000 n -0000125851 00000 n -0000126066 00000 n -0000126284 00000 n -0000126503 00000 n -0000126707 00000 n -0000126912 00000 n -0000127088 00000 n -0000127265 00000 n -0000127464 00000 n -0000127664 00000 n -0000127859 00000 n -0000128055 00000 n -0000128253 00000 n -0000128452 00000 n -0000128604 00000 n -0000128757 00000 n -0000128944 00000 n -0000129132 00000 n -0000129326 00000 n -0000129521 00000 n -0000129667 00000 n -0000129814 00000 n -0000130016 00000 n -0000130219 00000 n -0000130386 00000 n -0000130554 00000 n -0000130710 00000 n -0000130867 00000 n -0000131074 00000 n -0000131282 00000 n -0000133585 00000 n -0000133880 00000 n -0000134024 00000 n -0000134169 00000 n -0000134371 00000 n -0000134574 00000 n -0000134788 00000 n -0000135003 00000 n -0000135188 00000 n -0000135374 00000 n -0000135552 00000 n -0000135731 00000 n -0000140534 00000 n -0000140773 00000 n -0000141029 00000 n -0000141236 00000 n -0000141442 00000 n -0000145032 00000 n -0000145263 00000 n -0000145460 00000 n -0000145649 00000 n -0000149334 00000 n -0000149537 00000 n -0000153277 00000 n -0000153500 00000 n -0000153634 00000 n -0000157398 00000 n -0000157621 00000 n -0000157755 00000 n -0000162461 00000 n -0000162852 00000 n -0000162986 00000 n -0000163118 00000 n -0000163250 00000 n -0000163382 00000 n -0000163514 00000 n -0000163646 00000 n -0000163778 00000 n -0000163910 00000 n -0000164042 00000 n -0000164175 00000 n -0000164308 00000 n -0000164441 00000 n -0000164574 00000 n -0000164707 00000 n -0000164840 00000 n -0000164973 00000 n -0000165106 00000 n -0000165239 00000 n -0000165372 00000 n -0000165505 00000 n -0000165637 00000 n -0000165768 00000 n -0000170770 00000 n -0000171169 00000 n -0000171302 00000 n -0000171435 00000 n -0000171568 00000 n -0000171701 00000 n -0000171834 00000 n -0000171967 00000 n -0000172100 00000 n -0000172233 00000 n -0000172366 00000 n -0000172499 00000 n -0000172632 00000 n -0000172765 00000 n -0000172898 00000 n -0000173031 00000 n -0000173164 00000 n -0000173297 00000 n -0000173430 00000 n -0000173563 00000 n -0000173696 00000 n -0000173829 00000 n -0000173962 00000 n -0000174095 00000 n -0000174229 00000 n -0000179035 00000 n -0000179498 00000 n -0000179632 00000 n -0000179764 00000 n -0000179896 00000 n -0000180028 00000 n -0000180160 00000 n -0000180292 00000 n -0000180424 00000 n -0000180556 00000 n -0000180688 00000 n -0000180821 00000 n -0000180954 00000 n -0000181087 00000 n -0000181220 00000 n -0000181353 00000 n -0000181486 00000 n -0000181619 00000 n -0000181752 00000 n -0000181885 00000 n -0000182018 00000 n -0000182151 00000 n -0000182284 00000 n -0000182417 00000 n -0000182550 00000 n -0000182683 00000 n -0000182816 00000 n -0000182949 00000 n -0000183082 00000 n -0000183215 00000 n -0000183348 00000 n -0000183481 00000 n -0000183613 00000 n -0000188611 00000 n -0000189074 00000 n -0000189207 00000 n -0000189340 00000 n -0000189473 00000 n -0000189606 00000 n -0000189739 00000 n -0000189872 00000 n -0000190005 00000 n -0000190138 00000 n -0000190271 00000 n -0000190404 00000 n -0000190537 00000 n -0000190670 00000 n -0000190803 00000 n -0000190936 00000 n -0000191069 00000 n -0000191202 00000 n -0000191335 00000 n -0000191468 00000 n -0000191601 00000 n -0000191734 00000 n -0000191867 00000 n -0000192000 00000 n -0000192133 00000 n -0000192266 00000 n -0000192399 00000 n -0000192532 00000 n -0000192665 00000 n -0000192798 00000 n -0000192931 00000 n -0000193064 00000 n -0000193198 00000 n -0000197785 00000 n -0000198176 00000 n -0000198311 00000 n -0000198444 00000 n -0000198577 00000 n -0000198710 00000 n -0000198843 00000 n -0000198976 00000 n -0000199109 00000 n -0000199242 00000 n -0000199375 00000 n -0000199509 00000 n -0000199643 00000 n -0000199777 00000 n -0000199911 00000 n -0000200045 00000 n -0000200179 00000 n -0000200313 00000 n -0000200447 00000 n -0000200581 00000 n -0000200715 00000 n -0000200849 00000 n -0000200983 00000 n -0000201116 00000 n -0000206097 00000 n -0000206608 00000 n -0000206742 00000 n -0000206876 00000 n -0000207010 00000 n -0000207144 00000 n -0000207278 00000 n -0000207412 00000 n -0000207546 00000 n -0000207680 00000 n -0000207814 00000 n -0000207948 00000 n -0000208082 00000 n -0000208216 00000 n -0000208350 00000 n -0000208484 00000 n -0000208618 00000 n -0000208752 00000 n -0000208886 00000 n -0000209020 00000 n -0000209154 00000 n -0000209288 00000 n -0000209422 00000 n -0000209556 00000 n -0000209690 00000 n -0000209824 00000 n -0000209958 00000 n -0000210092 00000 n -0000210226 00000 n -0000210360 00000 n -0000210494 00000 n -0000210628 00000 n -0000210762 00000 n -0000210896 00000 n -0000211030 00000 n -0000211164 00000 n -0000211298 00000 n -0000211431 00000 n -0000211563 00000 n -0000215574 00000 n -0000215821 00000 n -0000215955 00000 n -0000216089 00000 n -0000216224 00000 n -0000216359 00000 n -0000219555 00000 n -0000219778 00000 n -0000219913 00000 n -0000224854 00000 n -0000225077 00000 n -0000225212 00000 n -0000230250 00000 n -0000230473 00000 n -0000230607 00000 n -0000235414 00000 n -0000235617 00000 n -0000240561 00000 n -0000240784 00000 n -0000240919 00000 n -0000245691 00000 n -0000245894 00000 n -0000250695 00000 n -0000250918 00000 n -0000251053 00000 n -0000256050 00000 n -0000256273 00000 n -0000256408 00000 n -0000261217 00000 n -0000261420 00000 n -0000266288 00000 n -0000266511 00000 n -0000266646 00000 n -0000271495 00000 n -0000271698 00000 n -0000276574 00000 n -0000276797 00000 n -0000276932 00000 n -0000281905 00000 n -0000282128 00000 n -0000282263 00000 n -0000287124 00000 n -0000287327 00000 n -0000292165 00000 n -0000292388 00000 n -0000292523 00000 n -0000297432 00000 n -0000297635 00000 n -0000302594 00000 n -0000302817 00000 n -0000302952 00000 n -0000307972 00000 n -0000308195 00000 n -0000308330 00000 n -0000313147 00000 n -0000313350 00000 n -0000317920 00000 n -0000318151 00000 n -0000318286 00000 n -0000318420 00000 n -0000323269 00000 n -0000323492 00000 n -0000323627 00000 n -0000328610 00000 n -0000328833 00000 n -0000328968 00000 n -0000333776 00000 n -0000333979 00000 n -0000339042 00000 n -0000339265 00000 n -0000339400 00000 n -0000344189 00000 n -0000344392 00000 n -0000349443 00000 n -0000349666 00000 n -0000349801 00000 n -0000354679 00000 n -0000354882 00000 n -0000359675 00000 n -0000359898 00000 n -0000360033 00000 n -0000365029 00000 n -0000365252 00000 n -0000365387 00000 n -0000370176 00000 n -0000370379 00000 n -0000375288 00000 n -0000375511 00000 n -0000375646 00000 n -0000380645 00000 n -0000380868 00000 n -0000381002 00000 n -0000385802 00000 n -0000386005 00000 n -0000390833 00000 n -0000391056 00000 n -0000391191 00000 n -0000395993 00000 n -0000396196 00000 n -0000401012 00000 n -0000401235 00000 n -0000401370 00000 n -0000406361 00000 n -0000406584 00000 n -0000406719 00000 n -0000411580 00000 n -0000411783 00000 n -0000416636 00000 n -0000416859 00000 n -0000416994 00000 n -0000421744 00000 n -0000421947 00000 n -0000426762 00000 n -0000426985 00000 n -0000427120 00000 n -0000432113 00000 n -0000432336 00000 n -0000432471 00000 n -0000437332 00000 n -0000437535 00000 n -0000442361 00000 n -0000442584 00000 n -0000442719 00000 n -0000447642 00000 n -0000447845 00000 n -0000452621 00000 n -0000452844 00000 n -0000452980 00000 n -0000457917 00000 n -0000458140 00000 n -0000458276 00000 n -0000463138 00000 n -0000463341 00000 n -0000468192 00000 n -0000468415 00000 n -0000468551 00000 n -0000473458 00000 n -0000473661 00000 n -0000478396 00000 n -0000478619 00000 n -0000478755 00000 n -0000483760 00000 n -0000483983 00000 n -0000484119 00000 n -0000488919 00000 n -0000489122 00000 n -0000494208 00000 n -0000494583 00000 n -0000494719 00000 n -0000494853 00000 n -0000494987 00000 n -0000495121 00000 n -0000495255 00000 n -0000495389 00000 n -0000495523 00000 n -0000495657 00000 n -0000495791 00000 n -0000495926 00000 n -0000496061 00000 n -0000496196 00000 n -0000496331 00000 n -0000496466 00000 n -0000496601 00000 n -0000496736 00000 n -0000496871 00000 n -0000497006 00000 n -0000497140 00000 n -0000497273 00000 n -0000501325 00000 n -0000501596 00000 n -0000501731 00000 n -0000501866 00000 n -0000502001 00000 n -0000502136 00000 n -0000502271 00000 n -0000502407 00000 n -0000502543 00000 n -0000507370 00000 n -0000507593 00000 n -0000507729 00000 n -0000512395 00000 n -0000512626 00000 n -0000512762 00000 n -0000512898 00000 n -0000517565 00000 n -0000517788 00000 n -0000517924 00000 n -0000522505 00000 n -0000522728 00000 n -0000522864 00000 n -0000527453 00000 n -0000527676 00000 n -0000527812 00000 n -0000530675 00000 n -0000530878 00000 n -0000535321 00000 n -0000535552 00000 n -0000535688 00000 n -0000535824 00000 n -0000538794 00000 n -0000538997 00000 n -0000543889 00000 n -0000544112 00000 n -0000544248 00000 n -0000549078 00000 n -0000549281 00000 n -0000554242 00000 n -0000554465 00000 n -0000554601 00000 n -0000559413 00000 n -0000559616 00000 n -0000564613 00000 n -0000564836 00000 n -0000564972 00000 n -0000569551 00000 n -0000569754 00000 n -0000574867 00000 n -0000575090 00000 n -0000575226 00000 n -0000579872 00000 n -0000580075 00000 n -0000584947 00000 n -0000585150 00000 n -0000589983 00000 n -0000590206 00000 n -0000590342 00000 n -0000595229 00000 n -0000595432 00000 n -0000600328 00000 n -0000600551 00000 n -0000600687 00000 n -0000605479 00000 n -0000605682 00000 n -0000610693 00000 n -0000610916 00000 n -0000611052 00000 n -0000615876 00000 n -0000616079 00000 n -0000619954 00000 n -0000620157 00000 n -0000623430 00000 n -0000623633 00000 n -0000628494 00000 n -0000628717 00000 n -0000628853 00000 n -0000633458 00000 n -0000633661 00000 n -0000637949 00000 n -0000638172 00000 n -0000638308 00000 n -0000642374 00000 n -0000642605 00000 n -0000642741 00000 n -0000642877 00000 n -0000647826 00000 n -0000648097 00000 n -0000648233 00000 n -0000648369 00000 n -0000648503 00000 n -0000648637 00000 n -0000648771 00000 n -0000648905 00000 n -0000649041 00000 n -0000653813 00000 n -0000654076 00000 n -0000654212 00000 n -0000654346 00000 n -0000654480 00000 n -0000654614 00000 n -0000654748 00000 n -0000654884 00000 n -0000657646 00000 n -0000657849 00000 n -0000662157 00000 n -0000662396 00000 n -0000662532 00000 n -0000662668 00000 n -0000662803 00000 n -0000666821 00000 n -0000667060 00000 n -0000667196 00000 n -0000667332 00000 n -0000667468 00000 n -0000672062 00000 n -0000672309 00000 n -0000672445 00000 n -0000672581 00000 n -0000672717 00000 n -0000672853 00000 n -0000677685 00000 n -0000677916 00000 n -0000678052 00000 n -0000678188 00000 n -0000682333 00000 n -0000682564 00000 n -0000682700 00000 n -0000682836 00000 n -0000687005 00000 n -0000687252 00000 n -0000687388 00000 n -0000687524 00000 n -0000687660 00000 n -0000687796 00000 n -0000692702 00000 n -0000692933 00000 n -0000693069 00000 n -0000693205 00000 n -0000697819 00000 n -0000698050 00000 n -0000698186 00000 n -0000698322 00000 n -0000701260 00000 n -0000701483 00000 n -0000701619 00000 n -0000705691 00000 n -0000705894 00000 n -0000711399 00000 n -0000711798 00000 n -0000711934 00000 n -0000712068 00000 n -0000712202 00000 n -0000712336 00000 n -0000712470 00000 n -0000712604 00000 n -0000712738 00000 n -0000712872 00000 n -0000713006 00000 n -0000713141 00000 n -0000713276 00000 n -0000713411 00000 n -0000713546 00000 n -0000713681 00000 n -0000713816 00000 n -0000713951 00000 n -0000714086 00000 n -0000714221 00000 n -0000714356 00000 n -0000714491 00000 n -0000714626 00000 n -0000714761 00000 n -0000714895 00000 n -0000718593 00000 n -0000718880 00000 n -0000719015 00000 n -0000719150 00000 n -0000719285 00000 n -0000719420 00000 n -0000719555 00000 n -0000719690 00000 n -0000719825 00000 n -0000719960 00000 n -0000720096 00000 n -0000724516 00000 n -0000724739 00000 n -0000724875 00000 n -0000729330 00000 n -0000729561 00000 n -0000729697 00000 n -0000729833 00000 n -0000734293 00000 n -0000734516 00000 n -0000734652 00000 n -0000739614 00000 n -0000739949 00000 n -0000740085 00000 n -0000740219 00000 n -0000740353 00000 n -0000740487 00000 n -0000740621 00000 n -0000740755 00000 n -0000740889 00000 n -0000741023 00000 n -0000741157 00000 n -0000741292 00000 n -0000741427 00000 n -0000741562 00000 n -0000741697 00000 n -0000741831 00000 n -0000741964 00000 n -0000745205 00000 n -0000745460 00000 n -0000745595 00000 n -0000745730 00000 n -0000745865 00000 n -0000746000 00000 n -0000746136 00000 n -0000749547 00000 n -0000749750 00000 n -0000753007 00000 n -0000753210 00000 n -0000757610 00000 n -0000757813 00000 n -0000762205 00000 n -0000762572 00000 n -0000762708 00000 n -0000762842 00000 n -0000762976 00000 n -0000763110 00000 n -0000763244 00000 n -0000763378 00000 n -0000763512 00000 n -0000763646 00000 n -0000763780 00000 n -0000763915 00000 n -0000764050 00000 n -0000764185 00000 n -0000764320 00000 n -0000764455 00000 n -0000764590 00000 n -0000764725 00000 n -0000764860 00000 n -0000764995 00000 n -0000765131 00000 n -0000765323 00000 n -0000765545 00000 n -0000765671 00000 n -0000765817 00000 n -0000765957 00000 n -0000766154 00000 n -0000766388 00000 n -0000766619 00000 n -0000766875 00000 n -0000767114 00000 n -0000767361 00000 n -0000767591 00000 n -0000767833 00000 n -0000768058 00000 n -0000768302 00000 n -0000768530 00000 n -0000768761 00000 n -0000768975 00000 n -0000769210 00000 n -0000769428 00000 n -0000769672 00000 n -0000769899 00000 n -0000770131 00000 n -0000770378 00000 n -0000770597 00000 n -0000770832 00000 n -0000771036 00000 n -0000771212 00000 n -0000771407 00000 n -0000771612 00000 n -0000771818 00000 n -0000772025 00000 n -0000772279 00000 n -0000772509 00000 n -0000772732 00000 n -0000772943 00000 n -0000773154 00000 n -0000773369 00000 n -0000773585 00000 n -0000773799 00000 n -0000774049 00000 n -0000774264 00000 n -0000774483 00000 n -0000774701 00000 n -0000774917 00000 n -0000775129 00000 n -0000775334 00000 n -0000775541 00000 n -0000775746 00000 n -0000775947 00000 n -0000776174 00000 n -0000776404 00000 n -0000776633 00000 n -0000776850 00000 n -0000777067 00000 n -0000777293 00000 n -0000777529 00000 n -0000777773 00000 n -0000777989 00000 n -0000778202 00000 n -0000778430 00000 n -0000778644 00000 n -0000778856 00000 n -0000779039 00000 n -0000779253 00000 n -0000779457 00000 n -0000779682 00000 n -0000779915 00000 n -0000780128 00000 n -0000780350 00000 n -0000780547 00000 n -0000780721 00000 n -0000780911 00000 n -0000781108 00000 n -0000781300 00000 n -0000781511 00000 n -0000781719 00000 n -0000781923 00000 n -0000782158 00000 n -0000782371 00000 n -0000782580 00000 n -0000782775 00000 n -0000782972 00000 n -0000783155 00000 n -0000783327 00000 n -0000783510 00000 n -0000783702 00000 n -0000783901 00000 n -0000784123 00000 n -0000784343 00000 n -0000784583 00000 n -0000784805 00000 n -0000785053 00000 n -0000785284 00000 n -0000785530 00000 n -0000785766 00000 n -0000786019 00000 n -0000786241 00000 n -0000786418 00000 n -0000786614 00000 n -0000786841 00000 n -0000787060 00000 n -0000787269 00000 n -0000787501 00000 n -0000787722 00000 n -0000787945 00000 n -0000788153 00000 n -0000788408 00000 n -0000788656 00000 n -0000788879 00000 n -0000789106 00000 n -0000789318 00000 n -0000789513 00000 n -0000789713 00000 n -0000789892 00000 n -0000790092 00000 n -0000790275 00000 n -0000790490 00000 n -0000790695 00000 n -0000790886 00000 n -0000791071 00000 n -0000791310 00000 n -0000791542 00000 n -0000791778 00000 n -0000792000 00000 n -0000792194 00000 n -0000792411 00000 n -0000792624 00000 n -0000792825 00000 n -0000793019 00000 n -0000793209 00000 n -0000793406 00000 n -0000793594 00000 n -0000793799 00000 n -0000793969 00000 n -0000794167 00000 n -0000794362 00000 n -0000794533 00000 n -0000794738 00000 n -0000794971 00000 n -0000795174 00000 n -0000795355 00000 n -0000795419 00000 n -0000803098 00000 n -0000807902 00000 n -0000819763 00000 n -0000832159 00000 n -0000832393 00000 n -0000832797 00000 n -0000833595 00000 n -0000833748 00000 n -0000833979 00000 n -0000834576 00000 n -0000836061 00000 n -0000836211 00000 n -0000836446 00000 n -0000836985 00000 n -0000838222 00000 n -0000838375 00000 n -0000838619 00000 n -0000839214 00000 n -0000840839 00000 n -0000840996 00000 n +0000001112 00000 n +0000001246 00000 n +0000040647 00000 n +0000040781 00000 n +0000043473 00000 n +0000043672 00000 n +0000047406 00000 n +0000047812 00000 n +0000048013 00000 n +0000048216 00000 n +0000048351 00000 n +0000048487 00000 n +0000048645 00000 n +0000048804 00000 n +0000049037 00000 n +0000049271 00000 n +0000049486 00000 n +0000049702 00000 n +0000049943 00000 n +0000050185 00000 n +0000050408 00000 n +0000050632 00000 n +0000050864 00000 n +0000051097 00000 n +0000051311 00000 n +0000051526 00000 n +0000051753 00000 n +0000051981 00000 n +0000052190 00000 n +0000052400 00000 n +0000052629 00000 n +0000052859 00000 n +0000053070 00000 n +0000053282 00000 n +0000053501 00000 n +0000053720 00000 n +0000057475 00000 n +0000057940 00000 n +0000058141 00000 n +0000058343 00000 n +0000058558 00000 n +0000058774 00000 n +0000058971 00000 n +0000059169 00000 n +0000059388 00000 n +0000059608 00000 n +0000059809 00000 n +0000060011 00000 n +0000060239 00000 n +0000060468 00000 n +0000060678 00000 n +0000060889 00000 n +0000061104 00000 n +0000061320 00000 n +0000061551 00000 n +0000061783 00000 n +0000061986 00000 n +0000062190 00000 n +0000062327 00000 n +0000062465 00000 n +0000062659 00000 n +0000062854 00000 n +0000063044 00000 n +0000063235 00000 n +0000063426 00000 n +0000063618 00000 n +0000063810 00000 n +0000064003 00000 n +0000064242 00000 n +0000064482 00000 n +0000064697 00000 n +0000064913 00000 n +0000065120 00000 n +0000065327 00000 n +0000068893 00000 n +0000069371 00000 n +0000069567 00000 n +0000069764 00000 n +0000069960 00000 n +0000070157 00000 n +0000070356 00000 n +0000070556 00000 n +0000070756 00000 n +0000070957 00000 n +0000071155 00000 n +0000071354 00000 n +0000071588 00000 n +0000071823 00000 n +0000072022 00000 n +0000072222 00000 n +0000072425 00000 n +0000072629 00000 n +0000072831 00000 n +0000073034 00000 n +0000073234 00000 n +0000073435 00000 n +0000073631 00000 n +0000073828 00000 n +0000074017 00000 n +0000074208 00000 n +0000074400 00000 n +0000074593 00000 n +0000074783 00000 n +0000074974 00000 n +0000075160 00000 n +0000075347 00000 n +0000075559 00000 n +0000075772 00000 n +0000075987 00000 n +0000076203 00000 n +0000076416 00000 n +0000076629 00000 n +0000080328 00000 n +0000080831 00000 n +0000081033 00000 n +0000081236 00000 n +0000081438 00000 n +0000081641 00000 n +0000081852 00000 n +0000082064 00000 n +0000082285 00000 n +0000082507 00000 n +0000082736 00000 n +0000082966 00000 n +0000083167 00000 n +0000083369 00000 n +0000083567 00000 n +0000083766 00000 n +0000083979 00000 n +0000084193 00000 n +0000084392 00000 n +0000084592 00000 n +0000084803 00000 n +0000085015 00000 n +0000085161 00000 n +0000085308 00000 n +0000085522 00000 n +0000085737 00000 n +0000085929 00000 n +0000086122 00000 n +0000086333 00000 n +0000086545 00000 n +0000086764 00000 n +0000086984 00000 n +0000087183 00000 n +0000087383 00000 n +0000087591 00000 n +0000087800 00000 n +0000087996 00000 n +0000088192 00000 n +0000092056 00000 n +0000092527 00000 n +0000092664 00000 n +0000092802 00000 n +0000092994 00000 n +0000093187 00000 n +0000093386 00000 n +0000093586 00000 n +0000093743 00000 n +0000093901 00000 n +0000094114 00000 n +0000094328 00000 n +0000094524 00000 n +0000094721 00000 n +0000094913 00000 n +0000095106 00000 n +0000095329 00000 n +0000095553 00000 n +0000095754 00000 n +0000095956 00000 n +0000096153 00000 n +0000096351 00000 n +0000096548 00000 n +0000096746 00000 n +0000096906 00000 n +0000097067 00000 n +0000097264 00000 n +0000097462 00000 n +0000097597 00000 n +0000097733 00000 n +0000097916 00000 n +0000098100 00000 n +0000098292 00000 n +0000098485 00000 n +0000102326 00000 n +0000102813 00000 n +0000102972 00000 n +0000103132 00000 n +0000103353 00000 n +0000103575 00000 n +0000103778 00000 n +0000103982 00000 n +0000104205 00000 n +0000104429 00000 n +0000104633 00000 n +0000104838 00000 n +0000105069 00000 n +0000105301 00000 n +0000105514 00000 n +0000105728 00000 n +0000105957 00000 n +0000106187 00000 n +0000106405 00000 n +0000106624 00000 n +0000106860 00000 n +0000107097 00000 n +0000107315 00000 n +0000107534 00000 n +0000107669 00000 n +0000107805 00000 n +0000107998 00000 n +0000108192 00000 n +0000108403 00000 n +0000108615 00000 n +0000108818 00000 n +0000109022 00000 n +0000109213 00000 n +0000109405 00000 n +0000109619 00000 n +0000109833 00000 n +0000113909 00000 n +0000114396 00000 n +0000114599 00000 n +0000114803 00000 n +0000115008 00000 n +0000115214 00000 n +0000115404 00000 n +0000115595 00000 n +0000115832 00000 n +0000116070 00000 n +0000116301 00000 n +0000116533 00000 n +0000116737 00000 n +0000116942 00000 n +0000117150 00000 n +0000117359 00000 n +0000117567 00000 n +0000117776 00000 n +0000117929 00000 n +0000118083 00000 n +0000118280 00000 n +0000118478 00000 n +0000118639 00000 n +0000118801 00000 n +0000118983 00000 n +0000119166 00000 n +0000119331 00000 n +0000119497 00000 n +0000119694 00000 n +0000119892 00000 n +0000120094 00000 n +0000120297 00000 n +0000120446 00000 n +0000120596 00000 n +0000120778 00000 n +0000120961 00000 n +0000124800 00000 n +0000125271 00000 n +0000125492 00000 n +0000125714 00000 n +0000125928 00000 n +0000126143 00000 n +0000126361 00000 n +0000126580 00000 n +0000126784 00000 n +0000126989 00000 n +0000127165 00000 n +0000127342 00000 n +0000127541 00000 n +0000127741 00000 n +0000127936 00000 n +0000128132 00000 n +0000128330 00000 n +0000128529 00000 n +0000128681 00000 n +0000128834 00000 n +0000129021 00000 n +0000129209 00000 n +0000129403 00000 n +0000129598 00000 n +0000129744 00000 n +0000129891 00000 n +0000130093 00000 n +0000130296 00000 n +0000130463 00000 n +0000130631 00000 n +0000130787 00000 n +0000130944 00000 n +0000131151 00000 n +0000131359 00000 n +0000133666 00000 n +0000133961 00000 n +0000134105 00000 n +0000134250 00000 n +0000134452 00000 n +0000134655 00000 n +0000134869 00000 n +0000135084 00000 n +0000135269 00000 n +0000135455 00000 n +0000135633 00000 n +0000135812 00000 n +0000140610 00000 n +0000140849 00000 n +0000141105 00000 n +0000141312 00000 n +0000141518 00000 n +0000145091 00000 n +0000145322 00000 n +0000145519 00000 n +0000145708 00000 n +0000149393 00000 n +0000149596 00000 n +0000153335 00000 n +0000153558 00000 n +0000153692 00000 n +0000157714 00000 n +0000157953 00000 n +0000158087 00000 n +0000158221 00000 n +0000158355 00000 n +0000161968 00000 n +0000162171 00000 n +0000166877 00000 n +0000167268 00000 n +0000167402 00000 n +0000167534 00000 n +0000167666 00000 n +0000167798 00000 n +0000167930 00000 n +0000168062 00000 n +0000168194 00000 n +0000168326 00000 n +0000168458 00000 n +0000168591 00000 n +0000168724 00000 n +0000168857 00000 n +0000168990 00000 n +0000169123 00000 n +0000169256 00000 n +0000169389 00000 n +0000169522 00000 n +0000169655 00000 n +0000169788 00000 n +0000169921 00000 n +0000170053 00000 n +0000170184 00000 n +0000175185 00000 n +0000175584 00000 n +0000175717 00000 n +0000175850 00000 n +0000175983 00000 n +0000176116 00000 n +0000176249 00000 n +0000176382 00000 n +0000176515 00000 n +0000176648 00000 n +0000176781 00000 n +0000176914 00000 n +0000177047 00000 n +0000177180 00000 n +0000177313 00000 n +0000177446 00000 n +0000177579 00000 n +0000177712 00000 n +0000177845 00000 n +0000177978 00000 n +0000178111 00000 n +0000178244 00000 n +0000178377 00000 n +0000178510 00000 n +0000178645 00000 n +0000183449 00000 n +0000183912 00000 n +0000184047 00000 n +0000184180 00000 n +0000184313 00000 n +0000184446 00000 n +0000184579 00000 n +0000184712 00000 n +0000184845 00000 n +0000184978 00000 n +0000185111 00000 n +0000185245 00000 n +0000185379 00000 n +0000185513 00000 n +0000185647 00000 n +0000185781 00000 n +0000185915 00000 n +0000186049 00000 n +0000186183 00000 n +0000186317 00000 n +0000186451 00000 n +0000186585 00000 n +0000186719 00000 n +0000186853 00000 n +0000186987 00000 n +0000187121 00000 n +0000187255 00000 n +0000187389 00000 n +0000187523 00000 n +0000187657 00000 n +0000187791 00000 n +0000187925 00000 n +0000188058 00000 n +0000193055 00000 n +0000193518 00000 n +0000193652 00000 n +0000193786 00000 n +0000193920 00000 n +0000194054 00000 n +0000194188 00000 n +0000194322 00000 n +0000194456 00000 n +0000194590 00000 n +0000194724 00000 n +0000194858 00000 n +0000194992 00000 n +0000195126 00000 n +0000195260 00000 n +0000195394 00000 n +0000195528 00000 n +0000195662 00000 n +0000195796 00000 n +0000195930 00000 n +0000196064 00000 n +0000196198 00000 n +0000196332 00000 n +0000196466 00000 n +0000196600 00000 n +0000196734 00000 n +0000196868 00000 n +0000197002 00000 n +0000197136 00000 n +0000197270 00000 n +0000197404 00000 n +0000197538 00000 n +0000197673 00000 n +0000202259 00000 n +0000202650 00000 n +0000202785 00000 n +0000202918 00000 n +0000203051 00000 n +0000203184 00000 n +0000203317 00000 n +0000203450 00000 n +0000203583 00000 n +0000203716 00000 n +0000203849 00000 n +0000203983 00000 n +0000204117 00000 n +0000204251 00000 n +0000204385 00000 n +0000204519 00000 n +0000204653 00000 n +0000204787 00000 n +0000204921 00000 n +0000205055 00000 n +0000205189 00000 n +0000205323 00000 n +0000205457 00000 n +0000205590 00000 n +0000210570 00000 n +0000211081 00000 n +0000211215 00000 n +0000211349 00000 n +0000211483 00000 n +0000211617 00000 n +0000211751 00000 n +0000211885 00000 n +0000212019 00000 n +0000212153 00000 n +0000212287 00000 n +0000212421 00000 n +0000212555 00000 n +0000212689 00000 n +0000212823 00000 n +0000212957 00000 n +0000213091 00000 n +0000213225 00000 n +0000213359 00000 n +0000213493 00000 n +0000213627 00000 n +0000213761 00000 n +0000213895 00000 n +0000214029 00000 n +0000214163 00000 n +0000214297 00000 n +0000214431 00000 n +0000214565 00000 n +0000214699 00000 n +0000214833 00000 n +0000214967 00000 n +0000215101 00000 n +0000215235 00000 n +0000215369 00000 n +0000215503 00000 n +0000215637 00000 n +0000215771 00000 n +0000215904 00000 n +0000216036 00000 n +0000219278 00000 n +0000219517 00000 n +0000219651 00000 n +0000219785 00000 n +0000219920 00000 n +0000224952 00000 n +0000225175 00000 n +0000225310 00000 n +0000230303 00000 n +0000230526 00000 n +0000230661 00000 n +0000235447 00000 n +0000235650 00000 n +0000240649 00000 n +0000240872 00000 n +0000241007 00000 n +0000245852 00000 n +0000246055 00000 n +0000250970 00000 n +0000251193 00000 n +0000251328 00000 n +0000256189 00000 n +0000256412 00000 n +0000256547 00000 n +0000261310 00000 n +0000261513 00000 n +0000266505 00000 n +0000266728 00000 n +0000266863 00000 n +0000271838 00000 n +0000272041 00000 n +0000276936 00000 n +0000277159 00000 n +0000277294 00000 n +0000282231 00000 n +0000282454 00000 n +0000282589 00000 n +0000287403 00000 n +0000287606 00000 n +0000292603 00000 n +0000292826 00000 n +0000292961 00000 n +0000297965 00000 n +0000298188 00000 n +0000298323 00000 n +0000303231 00000 n +0000303434 00000 n +0000308403 00000 n +0000308626 00000 n +0000308761 00000 n +0000313532 00000 n +0000313735 00000 n +0000318047 00000 n +0000318278 00000 n +0000318413 00000 n +0000318548 00000 n +0000323431 00000 n +0000323654 00000 n +0000323789 00000 n +0000328814 00000 n +0000329037 00000 n +0000329172 00000 n +0000334040 00000 n +0000334243 00000 n +0000339339 00000 n +0000339562 00000 n +0000339697 00000 n +0000344581 00000 n +0000344784 00000 n +0000349796 00000 n +0000350019 00000 n +0000350154 00000 n +0000355070 00000 n +0000355293 00000 n +0000355428 00000 n +0000360228 00000 n +0000360431 00000 n +0000365468 00000 n +0000365691 00000 n +0000365826 00000 n +0000370748 00000 n +0000370971 00000 n +0000371106 00000 n +0000375917 00000 n +0000376120 00000 n +0000381088 00000 n +0000381311 00000 n +0000381446 00000 n +0000386387 00000 n +0000386590 00000 n +0000391465 00000 n +0000391688 00000 n +0000391823 00000 n +0000396759 00000 n +0000396982 00000 n +0000397117 00000 n +0000401918 00000 n +0000402121 00000 n +0000407114 00000 n +0000407337 00000 n +0000407472 00000 n +0000412461 00000 n +0000412684 00000 n +0000412819 00000 n +0000417598 00000 n +0000417801 00000 n +0000422784 00000 n +0000423007 00000 n +0000423142 00000 n +0000427990 00000 n +0000428193 00000 n +0000433212 00000 n +0000433435 00000 n +0000433570 00000 n +0000438436 00000 n +0000438659 00000 n +0000438794 00000 n +0000443530 00000 n +0000443733 00000 n +0000448788 00000 n +0000449011 00000 n +0000449147 00000 n +0000454091 00000 n +0000454294 00000 n +0000459120 00000 n +0000459343 00000 n +0000459479 00000 n +0000464495 00000 n +0000464718 00000 n +0000464854 00000 n +0000469631 00000 n +0000469834 00000 n +0000474808 00000 n +0000475031 00000 n +0000475167 00000 n +0000480155 00000 n +0000480378 00000 n +0000480513 00000 n +0000485271 00000 n +0000485474 00000 n +0000490551 00000 n +0000490886 00000 n +0000491022 00000 n +0000491156 00000 n +0000491290 00000 n +0000491424 00000 n +0000491558 00000 n +0000491692 00000 n +0000491826 00000 n +0000491960 00000 n +0000492094 00000 n +0000492229 00000 n +0000492364 00000 n +0000492499 00000 n +0000492634 00000 n +0000492768 00000 n +0000492901 00000 n +0000497397 00000 n +0000497708 00000 n +0000497843 00000 n +0000497978 00000 n +0000498113 00000 n +0000498248 00000 n +0000498383 00000 n +0000498518 00000 n +0000498653 00000 n +0000498788 00000 n +0000498923 00000 n +0000499058 00000 n +0000499194 00000 n +0000499330 00000 n +0000504338 00000 n +0000504561 00000 n +0000504697 00000 n +0000509536 00000 n +0000509759 00000 n +0000509895 00000 n +0000514751 00000 n +0000514974 00000 n +0000515110 00000 n +0000519926 00000 n +0000520149 00000 n +0000520285 00000 n +0000525136 00000 n +0000525359 00000 n +0000525495 00000 n +0000530166 00000 n +0000530389 00000 n +0000530525 00000 n +0000534114 00000 n +0000534317 00000 n +0000538901 00000 n +0000539132 00000 n +0000539268 00000 n +0000539403 00000 n +0000542898 00000 n +0000543101 00000 n +0000547952 00000 n +0000548175 00000 n +0000548311 00000 n +0000553075 00000 n +0000553278 00000 n +0000558388 00000 n +0000558611 00000 n +0000558747 00000 n +0000563492 00000 n +0000563695 00000 n +0000568822 00000 n +0000569045 00000 n +0000569180 00000 n +0000573906 00000 n +0000574109 00000 n +0000579103 00000 n +0000579306 00000 n +0000584107 00000 n +0000584330 00000 n +0000584466 00000 n +0000589217 00000 n +0000589420 00000 n +0000594467 00000 n +0000594690 00000 n +0000594826 00000 n +0000599592 00000 n +0000599795 00000 n +0000604796 00000 n +0000605019 00000 n +0000605155 00000 n +0000609920 00000 n +0000610123 00000 n +0000614957 00000 n +0000615160 00000 n +0000619972 00000 n +0000620195 00000 n +0000620331 00000 n +0000625074 00000 n +0000625277 00000 n +0000628895 00000 n +0000629098 00000 n +0000632371 00000 n +0000632574 00000 n +0000637611 00000 n +0000637834 00000 n +0000637970 00000 n +0000642503 00000 n +0000642706 00000 n +0000646992 00000 n +0000647215 00000 n +0000647351 00000 n +0000651417 00000 n +0000651648 00000 n +0000651784 00000 n +0000651920 00000 n +0000656866 00000 n +0000657137 00000 n +0000657273 00000 n +0000657409 00000 n +0000657543 00000 n +0000657677 00000 n +0000657811 00000 n +0000657945 00000 n +0000658081 00000 n +0000662852 00000 n +0000663115 00000 n +0000663251 00000 n +0000663385 00000 n +0000663519 00000 n +0000663653 00000 n +0000663787 00000 n +0000663923 00000 n +0000666684 00000 n +0000666887 00000 n +0000671193 00000 n +0000671432 00000 n +0000671568 00000 n +0000671704 00000 n +0000671839 00000 n +0000675857 00000 n +0000676096 00000 n +0000676232 00000 n +0000676368 00000 n +0000676504 00000 n +0000681153 00000 n +0000681400 00000 n +0000681536 00000 n +0000681672 00000 n +0000681808 00000 n +0000681944 00000 n +0000686819 00000 n +0000687050 00000 n +0000687186 00000 n +0000687322 00000 n +0000691466 00000 n +0000691697 00000 n +0000691833 00000 n +0000691969 00000 n +0000696136 00000 n +0000696383 00000 n +0000696519 00000 n +0000696655 00000 n +0000696791 00000 n +0000696927 00000 n +0000701916 00000 n +0000702147 00000 n +0000702283 00000 n +0000702419 00000 n +0000706998 00000 n +0000707229 00000 n +0000707365 00000 n +0000707501 00000 n +0000710438 00000 n +0000710661 00000 n +0000710797 00000 n +0000714870 00000 n +0000715073 00000 n +0000720577 00000 n +0000720976 00000 n +0000721112 00000 n +0000721246 00000 n +0000721380 00000 n +0000721514 00000 n +0000721648 00000 n +0000721782 00000 n +0000721916 00000 n +0000722050 00000 n +0000722184 00000 n +0000722319 00000 n +0000722454 00000 n +0000722589 00000 n +0000722724 00000 n +0000722859 00000 n +0000722994 00000 n +0000723129 00000 n +0000723264 00000 n +0000723399 00000 n +0000723534 00000 n +0000723669 00000 n +0000723804 00000 n +0000723939 00000 n +0000724073 00000 n +0000727769 00000 n +0000728056 00000 n +0000728191 00000 n +0000728326 00000 n +0000728461 00000 n +0000728596 00000 n +0000728731 00000 n +0000728866 00000 n +0000729001 00000 n +0000729136 00000 n +0000729272 00000 n +0000733691 00000 n +0000733914 00000 n +0000734050 00000 n +0000738503 00000 n +0000738734 00000 n +0000738870 00000 n +0000739006 00000 n +0000743465 00000 n +0000743688 00000 n +0000743824 00000 n +0000748783 00000 n +0000749118 00000 n +0000749254 00000 n +0000749388 00000 n +0000749522 00000 n +0000749656 00000 n +0000749790 00000 n +0000749924 00000 n +0000750058 00000 n +0000750192 00000 n +0000750326 00000 n +0000750461 00000 n +0000750596 00000 n +0000750731 00000 n +0000750866 00000 n +0000751000 00000 n +0000751133 00000 n +0000754374 00000 n +0000754629 00000 n +0000754764 00000 n +0000754899 00000 n +0000755034 00000 n +0000755169 00000 n +0000755305 00000 n +0000758716 00000 n +0000758919 00000 n +0000762176 00000 n +0000762379 00000 n +0000766780 00000 n +0000766983 00000 n +0000771375 00000 n +0000771742 00000 n +0000771878 00000 n +0000772012 00000 n +0000772146 00000 n +0000772280 00000 n +0000772414 00000 n +0000772548 00000 n +0000772682 00000 n +0000772816 00000 n +0000772950 00000 n +0000773085 00000 n +0000773220 00000 n +0000773355 00000 n +0000773490 00000 n +0000773625 00000 n +0000773760 00000 n +0000773895 00000 n +0000774030 00000 n +0000774165 00000 n +0000774301 00000 n +0000774493 00000 n +0000774715 00000 n +0000774841 00000 n +0000774987 00000 n +0000775127 00000 n +0000775324 00000 n +0000775558 00000 n +0000775789 00000 n +0000776045 00000 n +0000776284 00000 n +0000776531 00000 n +0000776761 00000 n +0000777003 00000 n +0000777228 00000 n +0000777472 00000 n +0000777700 00000 n +0000777935 00000 n +0000778153 00000 n +0000778384 00000 n +0000778598 00000 n +0000778833 00000 n +0000779051 00000 n +0000779295 00000 n +0000779522 00000 n +0000779754 00000 n +0000780001 00000 n +0000780206 00000 n +0000780382 00000 n +0000780577 00000 n +0000780782 00000 n +0000780988 00000 n +0000781195 00000 n +0000781449 00000 n +0000781679 00000 n +0000781902 00000 n +0000782113 00000 n +0000782324 00000 n +0000782539 00000 n +0000782755 00000 n +0000782969 00000 n +0000783219 00000 n +0000783434 00000 n +0000783653 00000 n +0000783871 00000 n +0000784087 00000 n +0000784299 00000 n +0000784504 00000 n +0000784711 00000 n +0000784916 00000 n +0000785117 00000 n +0000785344 00000 n +0000785574 00000 n +0000785803 00000 n +0000786020 00000 n +0000786237 00000 n +0000786463 00000 n +0000786699 00000 n +0000786943 00000 n +0000787159 00000 n +0000787372 00000 n +0000787600 00000 n +0000787814 00000 n +0000788026 00000 n +0000788209 00000 n +0000788423 00000 n +0000788627 00000 n +0000788852 00000 n +0000789085 00000 n +0000789298 00000 n +0000789520 00000 n +0000789717 00000 n +0000789891 00000 n +0000790081 00000 n +0000790278 00000 n +0000790470 00000 n +0000790681 00000 n +0000790889 00000 n +0000791093 00000 n +0000791328 00000 n +0000791541 00000 n +0000791750 00000 n +0000791945 00000 n +0000792142 00000 n +0000792325 00000 n +0000792498 00000 n +0000792681 00000 n +0000792873 00000 n +0000793074 00000 n +0000793298 00000 n +0000793520 00000 n +0000793761 00000 n +0000793984 00000 n +0000794233 00000 n +0000794465 00000 n +0000794712 00000 n +0000794949 00000 n +0000795203 00000 n +0000795426 00000 n +0000795604 00000 n +0000795800 00000 n +0000796027 00000 n +0000796246 00000 n +0000796455 00000 n +0000796687 00000 n +0000796908 00000 n +0000797131 00000 n +0000797339 00000 n +0000797594 00000 n +0000797842 00000 n +0000798065 00000 n +0000798292 00000 n +0000798504 00000 n +0000798699 00000 n +0000798899 00000 n +0000799078 00000 n +0000799278 00000 n +0000799461 00000 n +0000799676 00000 n +0000799881 00000 n +0000800072 00000 n +0000800257 00000 n +0000800496 00000 n +0000800728 00000 n +0000800964 00000 n +0000801186 00000 n +0000801380 00000 n +0000801597 00000 n +0000801810 00000 n +0000802011 00000 n +0000802205 00000 n +0000802395 00000 n +0000802592 00000 n +0000802780 00000 n +0000802985 00000 n +0000803155 00000 n +0000803353 00000 n +0000803548 00000 n +0000803719 00000 n +0000803924 00000 n +0000804157 00000 n +0000804360 00000 n +0000804541 00000 n +0000804605 00000 n +0000812285 00000 n +0000817087 00000 n +0000828947 00000 n +0000841343 00000 n +0000841577 00000 n +0000841981 00000 n +0000842779 00000 n +0000842932 00000 n +0000843163 00000 n +0000843760 00000 n +0000845245 00000 n +0000845395 00000 n +0000845630 00000 n +0000846169 00000 n +0000847406 00000 n +0000847559 00000 n +0000847803 00000 n +0000848398 00000 n +0000850023 00000 n +0000850180 00000 n trailer << -/Size 1075 +/Size 1077 /Root 3 0 R /Info 2 0 R >> startxref -841088 +850272 %%EOF diff --git a/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/_index.md b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/_index.md index 913d6594f3c..b1eba5740d7 100644 --- a/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/_index.md +++ b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/_index.md @@ -29,7 +29,7 @@ Rancher and RKE install Kubernetes services via Docker containers. Configuration Where control audits differ from the original CIS benchmark, the audit commands specific to Rancher are provided for testing. When performing the tests, you will need access to the Docker command line on the hosts of all three RKE roles. The commands also make use of the [kubectl](https://kubernetes.io/docs/tasks/tools/) (with a valid configuration file) and [jq](https://stedolan.github.io/jq/) tools, which are required in the testing and evaluation of test results. -> NOTE: For the moment only `automated` tests (previously called `scored`) are covered in this guide. +> NOTE: Only `automated` tests (previously called `scored`) are covered in this guide. ### Controls ## 1.1 Master Node Configuration Files @@ -137,13 +137,75 @@ chown root:root stat -c %U:%G ``` +### 1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated) + + +**Result:** pass + +**Remediation:** +On the etcd server node, get the etcd data directory, passed as an argument --data-dir, +from the below command: +ps -ef | grep etcd Run the below command (based on the etcd data directory found above). For example, +chmod 700 /var/lib/etcd + +**Audit:** + +```bash +stat -c %a /node/var/lib/etcd +``` + +**Expected Result**: + +```console +'700' is equal to '700' +``` + +**Returned Value**: + +```console +700 +``` + +### 1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated) + + +**Result:** pass + +**Remediation:** +On the etcd server node, get the etcd data directory, passed as an argument --data-dir, +from the below command: +ps -ef | grep etcd +Run the below command (based on the etcd data directory found above). +For example, chown etcd:etcd /var/lib/etcd + +A system service account is required for etcd data directory ownership. +Refer to Rancher's hardening guide for more details on how to configure this ownership. + +**Audit:** + +```bash +stat -c %U:%G /node/var/lib/etcd +``` + +**Expected Result**: + +```console +'etcd:etcd' is present +``` + +**Returned Value**: + +```console +etcd:etcd +``` + ### 1.1.13 Ensure that the admin.conf file permissions are set to 644 or more restrictive (Automated) **Result:** Not Applicable **Remediation:** -Cluster provisioned by RKE does not store the Kubernetes default kubeconfig credentials file on the nodes. +Cluster provisioned by RKE does not store the kubernetes default kubeconfig credentials file on the nodes. ### 1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated) @@ -151,7 +213,7 @@ Cluster provisioned by RKE does not store the Kubernetes default kubeconfig cred **Result:** Not Applicable **Remediation:** -Cluster provisioned by RKE does not store the Kubernetes default kubeconfig credentials file on the nodes. +Cluster provisioned by RKE does not store the kubernetes default kubeconfig credentials file on the nodes. ### 1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated) @@ -457,68 +519,6 @@ exit true ``` -### 1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated) - - -**Result:** pass - -**Remediation:** -On the etcd server node, get the etcd data directory, passed as an argument --data-dir, -from the below command: -ps -ef | grep etcd Run the below command (based on the etcd data directory found above). For example, -chmod 700 /var/lib/etcd - -**Audit:** - -```bash -stat -c %a /node/var/lib/etcd -``` - -**Expected Result**: - -```console -'700' is equal to '700' -``` - -**Returned Value**: - -```console -700 -``` - -### 1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated) - - -**Result:** pass - -**Remediation:** -On the etcd server node, get the etcd data directory, passed as an argument --data-dir, -from the below command: -ps -ef | grep etcd -Run the below command (based on the etcd data directory found above). -For example, chown etcd:etcd /var/lib/etcd - -A system service account is required for etcd data directory ownership. -Refer to Rancher's hardening guide for more details on how to configure this ownership. - -**Audit:** - -```bash -stat -c %U:%G /node/var/lib/etcd -``` - -**Expected Result**: - -```console -'etcd:etcd' is present -``` - -**Returned Value**: - -```console -etcd:etcd -``` - ## 1.2 API Server ### 1.2.1 Ensure that the --anonymous-auth argument is set to false (Automated) @@ -545,7 +545,7 @@ on the master node and set the below parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.2 Ensure that the --basic-auth-file argument is not set (Automated) @@ -573,7 +573,7 @@ on the master node and remove the --basic-auth-file= parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.3 Ensure that the --token-auth-file parameter is not set (Automated) @@ -601,7 +601,7 @@ on the master node and remove the --token-auth-file= parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.4 Ensure that the --kubelet-https argument is set to true (Automated) @@ -628,7 +628,7 @@ on the master node and remove the --kubelet-https parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated) @@ -659,7 +659,7 @@ kubelet client certificate and key parameters as below. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated) @@ -689,7 +689,7 @@ the apiserver and kubelets. Then, edit the API server pod specification file **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated) @@ -718,7 +718,7 @@ One such example could be as below. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.8 Ensure that the --authorization-mode argument includes Node (Automated) @@ -746,7 +746,7 @@ on the master node and set the --authorization-mode parameter to a value that in **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated) @@ -775,7 +775,7 @@ for example: **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.10 Ensure that the admission control plugin EventRateLimit is set (Automated) @@ -805,7 +805,7 @@ and set the below parameters. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated) @@ -833,7 +833,7 @@ value that does not include AlwaysAdmit. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual) @@ -896,7 +896,7 @@ value that does not include ServiceAccount. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated) @@ -924,7 +924,7 @@ ensure it does not include NamespaceLifecycle. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.16 Ensure that the admission control plugin PodSecurityPolicy is set (Automated) @@ -955,7 +955,7 @@ Then restart the API Server. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.17 Ensure that the admission control plugin NodeRestriction is set (Automated) @@ -985,7 +985,7 @@ value that includes NodeRestriction. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.18 Ensure that the --insecure-bind-address argument is not set (Automated) @@ -1012,7 +1012,7 @@ on the master node and remove the --insecure-bind-address parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.19 Ensure that the --insecure-port argument is set to 0 (Automated) @@ -1040,7 +1040,7 @@ on the master node and set the below parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.20 Ensure that the --secure-port argument is not set to 0 (Automated) @@ -1068,7 +1068,7 @@ set it to a different (non-zero) desired port. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.21 Ensure that the --profiling argument is set to false (Automated) @@ -1096,7 +1096,7 @@ on the master node and set the below parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.22 Ensure that the --audit-log-path argument is set (Automated) @@ -1125,7 +1125,7 @@ file where you would like audit logs to be written, for example: **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.23 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated) @@ -1153,7 +1153,7 @@ on the master node and set the --audit-log-maxage parameter to 30 or as an appro **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.24 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated) @@ -1182,7 +1182,7 @@ value. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.25 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated) @@ -1211,7 +1211,7 @@ For example, to set it as 100 MB: **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.26 Ensure that the --request-timeout argument is set as appropriate (Automated) @@ -1240,7 +1240,7 @@ For example, **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.27 Ensure that the --service-account-lookup argument is set to true (Automated) @@ -1270,7 +1270,7 @@ that the default takes effect. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.28 Ensure that the --service-account-key-file argument is set as appropriate (Automated) @@ -1299,7 +1299,7 @@ to the public key file for service accounts: **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.29 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated) @@ -1329,7 +1329,7 @@ on the master node and set the etcd certificate and key file parameters. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.30 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated) @@ -1359,7 +1359,7 @@ on the master node and set the TLS certificate and private key file parameters. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.31 Ensure that the --client-ca-file argument is set as appropriate (Automated) @@ -1388,7 +1388,7 @@ on the master node and set the client certificate authority file. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.32 Ensure that the --etcd-cafile argument is set as appropriate (Automated) @@ -1417,7 +1417,7 @@ on the master node and set the etcd certificate authority file parameter. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.33 Ensure that the --encryption-provider-config argument is set as appropriate (Automated) @@ -1445,7 +1445,7 @@ on the master node and set the --encryption-provider-config parameter to the pat **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 1.2.34 Ensure that encryption providers are appropriately configured (Automated) @@ -1552,7 +1552,7 @@ for example: **Returned Value**: ```console -root 6684 6662 1 13:04 ? 00:00:12 kube-controller-manager --profiling=false --cluster-cidr=10.42.0.0/16 --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --address=0.0.0.0 --leader-elect=true --node-monitor-grace-period=40s --v=2 --allocate-node-cidrs=true --enable-hostpath-provisioner=false --pod-eviction-timeout=5m0s --configure-cloud-routes=false --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --terminated-pod-gc-threshold=1000 --allow-untagged-cloud=true --use-service-account-credentials=true +root 121366 121346 1 12:27 ? 00:01:13 kube-controller-manager --cluster-cidr=10.42.0.0/16 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --allocate-node-cidrs=true --configure-cloud-routes=false --leader-elect=true --pod-eviction-timeout=5m0s --authentication-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --feature-gates=RotateKubeletServerCertificate=true --bind-address=127.0.0.1 --enable-hostpath-provisioner=false --address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --cloud-provider= --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --authorization-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --node-monitor-grace-period=40s --profiling=false --terminated-pod-gc-threshold=1000 --v=2 --allow-untagged-cloud=true --use-service-account-credentials=true ``` ### 1.3.2 Ensure that the --profiling argument is set to false (Automated) @@ -1580,7 +1580,7 @@ on the master node and set the below parameter. **Returned Value**: ```console -root 6684 6662 1 13:04 ? 00:00:12 kube-controller-manager --profiling=false --cluster-cidr=10.42.0.0/16 --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --address=0.0.0.0 --leader-elect=true --node-monitor-grace-period=40s --v=2 --allocate-node-cidrs=true --enable-hostpath-provisioner=false --pod-eviction-timeout=5m0s --configure-cloud-routes=false --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --terminated-pod-gc-threshold=1000 --allow-untagged-cloud=true --use-service-account-credentials=true +root 121366 121346 1 12:27 ? 00:01:13 kube-controller-manager --cluster-cidr=10.42.0.0/16 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --allocate-node-cidrs=true --configure-cloud-routes=false --leader-elect=true --pod-eviction-timeout=5m0s --authentication-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --feature-gates=RotateKubeletServerCertificate=true --bind-address=127.0.0.1 --enable-hostpath-provisioner=false --address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --cloud-provider= --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --authorization-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --node-monitor-grace-period=40s --profiling=false --terminated-pod-gc-threshold=1000 --v=2 --allow-untagged-cloud=true --use-service-account-credentials=true ``` ### 1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated) @@ -1608,7 +1608,7 @@ on the master node to set the below parameter. **Returned Value**: ```console -root 6684 6662 1 13:04 ? 00:00:12 kube-controller-manager --profiling=false --cluster-cidr=10.42.0.0/16 --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --address=0.0.0.0 --leader-elect=true --node-monitor-grace-period=40s --v=2 --allocate-node-cidrs=true --enable-hostpath-provisioner=false --pod-eviction-timeout=5m0s --configure-cloud-routes=false --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --terminated-pod-gc-threshold=1000 --allow-untagged-cloud=true --use-service-account-credentials=true +root 121366 121346 1 12:27 ? 00:01:13 kube-controller-manager --cluster-cidr=10.42.0.0/16 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --allocate-node-cidrs=true --configure-cloud-routes=false --leader-elect=true --pod-eviction-timeout=5m0s --authentication-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --feature-gates=RotateKubeletServerCertificate=true --bind-address=127.0.0.1 --enable-hostpath-provisioner=false --address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --cloud-provider= --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --authorization-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --node-monitor-grace-period=40s --profiling=false --terminated-pod-gc-threshold=1000 --v=2 --allow-untagged-cloud=true --use-service-account-credentials=true ``` ### 1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated) @@ -1637,7 +1637,7 @@ to the private key file for service accounts. **Returned Value**: ```console -root 6684 6662 1 13:04 ? 00:00:12 kube-controller-manager --profiling=false --cluster-cidr=10.42.0.0/16 --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --address=0.0.0.0 --leader-elect=true --node-monitor-grace-period=40s --v=2 --allocate-node-cidrs=true --enable-hostpath-provisioner=false --pod-eviction-timeout=5m0s --configure-cloud-routes=false --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --terminated-pod-gc-threshold=1000 --allow-untagged-cloud=true --use-service-account-credentials=true +root 121366 121346 1 12:27 ? 00:01:13 kube-controller-manager --cluster-cidr=10.42.0.0/16 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --allocate-node-cidrs=true --configure-cloud-routes=false --leader-elect=true --pod-eviction-timeout=5m0s --authentication-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --feature-gates=RotateKubeletServerCertificate=true --bind-address=127.0.0.1 --enable-hostpath-provisioner=false --address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --cloud-provider= --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --authorization-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --node-monitor-grace-period=40s --profiling=false --terminated-pod-gc-threshold=1000 --v=2 --allow-untagged-cloud=true --use-service-account-credentials=true ``` ### 1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated) @@ -1665,7 +1665,7 @@ on the master node and set the --root-ca-file parameter to the certificate bundl **Returned Value**: ```console -root 6684 6662 1 13:04 ? 00:00:12 kube-controller-manager --profiling=false --cluster-cidr=10.42.0.0/16 --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --address=0.0.0.0 --leader-elect=true --node-monitor-grace-period=40s --v=2 --allocate-node-cidrs=true --enable-hostpath-provisioner=false --pod-eviction-timeout=5m0s --configure-cloud-routes=false --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --terminated-pod-gc-threshold=1000 --allow-untagged-cloud=true --use-service-account-credentials=true +root 121366 121346 1 12:27 ? 00:01:13 kube-controller-manager --cluster-cidr=10.42.0.0/16 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --allocate-node-cidrs=true --configure-cloud-routes=false --leader-elect=true --pod-eviction-timeout=5m0s --authentication-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --feature-gates=RotateKubeletServerCertificate=true --bind-address=127.0.0.1 --enable-hostpath-provisioner=false --address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --cloud-provider= --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --authorization-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --node-monitor-grace-period=40s --profiling=false --terminated-pod-gc-threshold=1000 --v=2 --allow-untagged-cloud=true --use-service-account-credentials=true ``` ### 1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated) @@ -1698,13 +1698,13 @@ on the master node and ensure the correct value for the --bind-address parameter **Expected Result**: ```console -'--bind-address' is not present OR '--bind-address' is not present +'127.0.0.1' is equal to '127.0.0.1' OR '--bind-address' is not present ``` **Returned Value**: ```console -root 6684 6662 1 13:04 ? 00:00:12 kube-controller-manager --profiling=false --cluster-cidr=10.42.0.0/16 --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --address=0.0.0.0 --leader-elect=true --node-monitor-grace-period=40s --v=2 --allocate-node-cidrs=true --enable-hostpath-provisioner=false --pod-eviction-timeout=5m0s --configure-cloud-routes=false --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --terminated-pod-gc-threshold=1000 --allow-untagged-cloud=true --use-service-account-credentials=true +root 121366 121346 1 12:27 ? 00:01:13 kube-controller-manager --cluster-cidr=10.42.0.0/16 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --allocate-node-cidrs=true --configure-cloud-routes=false --leader-elect=true --pod-eviction-timeout=5m0s --authentication-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --feature-gates=RotateKubeletServerCertificate=true --bind-address=127.0.0.1 --enable-hostpath-provisioner=false --address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --cloud-provider= --service-account-private-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --service-cluster-ip-range=10.43.0.0/16 --authorization-kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-controller-manager.yaml --root-ca-file=/etc/kubernetes/ssl/kube-ca.pem --node-monitor-grace-period=40s --profiling=false --terminated-pod-gc-threshold=1000 --v=2 --allow-untagged-cloud=true --use-service-account-credentials=true ``` ## 1.4 Scheduler @@ -1733,7 +1733,7 @@ on the master node and set the below parameter. **Returned Value**: ```console -root 6889 6870 0 13:04 ? 00:00:02 kube-scheduler --leader-elect=true --profiling=false --v=2 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-scheduler.yaml --address=0.0.0.0 +root 121587 121567 0 12:27 ? 00:00:12 kube-scheduler --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-scheduler.yaml --address=127.0.0.1 --leader-elect=true --profiling=false --v=2 --bind-address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 ``` ### 1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated) @@ -1754,13 +1754,13 @@ on the master node and ensure the correct value for the --bind-address parameter **Expected Result**: ```console -'--bind-address' is not present OR '--bind-address' is not present +'127.0.0.1' is equal to '127.0.0.1' OR '--bind-address' is not present ``` **Returned Value**: ```console -root 6889 6870 0 13:04 ? 00:00:02 kube-scheduler --leader-elect=true --profiling=false --v=2 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-scheduler.yaml --address=0.0.0.0 +root 121587 121567 0 12:27 ? 00:00:12 kube-scheduler --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-scheduler.yaml --address=127.0.0.1 --leader-elect=true --profiling=false --v=2 --bind-address=127.0.0.1 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 ``` ## 2 Etcd Node Configuration Files @@ -1791,7 +1791,7 @@ on the master node and set the below parameters. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 1 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 2 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ### 2.2 Ensure that the --client-cert-auth argument is set to true (Automated) @@ -1819,7 +1819,7 @@ node and set the below parameter. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 1 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 2 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ### 2.3 Ensure that the --auto-tls argument is not set to true (Automated) @@ -1847,7 +1847,7 @@ node and either remove the --auto-tls parameter or set it to false. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 1 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 1 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ### 2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated) @@ -1878,7 +1878,7 @@ master node and set the below parameters. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 1 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 5 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ### 2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated) @@ -1906,7 +1906,7 @@ node and set the below parameter. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 1 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 4 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ### 2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated) @@ -1934,7 +1934,7 @@ node and either remove the --peer-auto-tls parameter or set it to false. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 2 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 4 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ### 2.7 Ensure that a unique Certificate Authority is used for etcd (Automated) @@ -1965,7 +1965,7 @@ master node and set the below parameter. **Returned Value**: ```console -etcd 6259 6237 1 13:03 ? 00:00:13 /usr/local/bin/etcd --listen-peer-urls=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-client-cert-auth=true --heartbeat-interval=500 --name=etcd- --initial-cluster=etcd-=https://:2380 --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 --listen-client-urls=https://:2379 --initial-advertise-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --client-cert-auth=true --enable-v2=true --election-timeout=5000 --data-dir=/var/lib/rancher/etcd/ --initial-cluster-token=etcd-cluster-1 --initial-cluster-state=new --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --advertise-client-urls=https://:2379 root 6465 6444 8 13:04 ? 00:01:02 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 root 24183 24165 2 13:16 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json +etcd 120679 120657 1 12:27 ? 00:01:17 /usr/local/bin/etcd --trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --heartbeat-interval=500 --election-timeout=5000 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd-=https://:2380 --peer-trusted-ca-file=/etc/kubernetes/ssl/kube-ca.pem --peer-cert-file=/etc/kubernetes/ssl/kube-etcd-.pem --peer-key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --peer-client-cert-auth=true --data-dir=/var/lib/rancher/etcd/ --initial-advertise-peer-urls=https://:2380 --initial-cluster-state=new --advertise-client-urls=https://:2379 --client-cert-auth=true --enable-v2=true --name=etcd- --listen-client-urls=https://:2379 --listen-peer-urls=https://:2380 --key-file=/etc/kubernetes/ssl/kube-etcd--key.pem --cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 root 120728 120707 0 12:27 ? 00:00:00 /opt/rke-tools/rke-etcd-backup etcd-backup save --cacert /etc/kubernetes/ssl/kube-ca.pem --cert /etc/kubernetes/ssl/kube-node.pem --key /etc/kubernetes/ssl/kube-node-key.pem --name etcd-rolling-snapshots --endpoints=:2379 --retention=72h --creation=12h root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json root 214939 214868 3 13:56 ? 00:00:00 kube-bench run --targets etcd --scored --nosummary --noremediations --v=5 --config-dir=/etc/kube-bench/cfg --benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/logs --outputfile /tmp/results/etcd.json ``` ## 3.1 Authentication and Authorization @@ -2002,7 +2002,7 @@ Create an audit policy file for your cluster. **Returned Value**: ```console -root 6465 6444 8 13:04 ? 00:01:03 kube-apiserver --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --service-node-port-range=30000-32767 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --secure-port=6443 --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --api-audiences=unknown --storage-backend=etcd3 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --admission-control-config-file=/etc/kubernetes/admission.yaml --etcd-prefix=/registry --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --advertise-address= --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --requestheader-extra-headers-prefix=X-Remote-Extra- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --authorization-mode=Node,RBAC --cloud-provider= --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --profiling=false --service-account-issuer=rke --allow-privileged=true --insecure-port=0 --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --bind-address=0.0.0.0 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --audit-log-maxsize=100 --audit-log-format=json --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --audit-log-maxage=30 --audit-log-maxbackup=10 +root 121142 121120 7 12:27 ? 00:06:28 kube-apiserver --audit-log-maxsize=100 --etcd-keyfile=/etc/kubernetes/ssl/kube-node-key.pem --service-cluster-ip-range=10.43.0.0/16 --encryption-provider-config=/etc/kubernetes/ssl/encryption.yaml --requestheader-username-headers=X-Remote-User --bind-address=0.0.0.0 --advertise-address= --requestheader-allowed-names=kube-apiserver-proxy-client --etcd-certfile=/etc/kubernetes/ssl/kube-node.pem --requestheader-client-ca-file=/etc/kubernetes/ssl/kube-apiserver-requestheader-ca.pem --allow-privileged=true --requestheader-extra-headers-prefix=X-Remote-Extra- --admission-control-config-file=/etc/kubernetes/admission.yaml --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --service-account-lookup=true --runtime-config=policy/v1beta1/podsecuritypolicy=true --authorization-mode=Node,RBAC --audit-log-maxage=30 --profiling=false --storage-backend=etcd3 --etcd-cafile=/etc/kubernetes/ssl/kube-ca.pem --etcd-servers=https://:2379 --kubelet-certificate-authority=/etc/kubernetes/ssl/kube-ca.pem --secure-port=6443 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 --insecure-port=0 --api-audiences=unknown --audit-policy-file=/etc/kubernetes/audit-policy.yaml --etcd-prefix=/registry --kubelet-client-certificate=/etc/kubernetes/ssl/kube-apiserver.pem --kubelet-client-key=/etc/kubernetes/ssl/kube-apiserver-key.pem --proxy-client-key-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client-key.pem --service-account-issuer=rke --service-account-signing-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --requestheader-group-headers=X-Remote-Group --cloud-provider= --proxy-client-cert-file=/etc/kubernetes/ssl/kube-apiserver-proxy-client.pem --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kube-apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/kube-apiserver-key.pem --anonymous-auth=false --audit-log-path=/var/log/kube-audit/audit-log.json --audit-log-maxbackup=10 --service-account-key-file=/etc/kubernetes/ssl/kube-service-account-token-key.pem --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize,PodSecurityPolicy,EventRateLimit --audit-log-format=json ``` ### 3.2.2 Ensure that the audit policy covers key security concerns (Manual) @@ -2392,7 +2392,7 @@ systemctl restart kubelet.service **Returned Value**: ```console -UID PID PPID C STIME TTY TIME CMD root 7101 7078 3 13:04 ? 00:00:23 kubelet --streaming-connection-idle-timeout=30m --cluster-dns=10.43.0.10 --pod-infra-container-image=rancher/mirrored-pause:3.4.1 --node-ip= --network-plugin=cni --event-qps=0 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-node.yaml --root-dir=/var/lib/kubelet --cni-bin-dir=/opt/cni/bin --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --v=2 --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --hostname-override= --tls-cert-file=/etc/kubernetes/ssl/kube-kubelet-.pem --authorization-mode=Webhook --resolv-conf=/etc/resolv.conf --volume-plugin-dir=/var/lib/kubelet/volumeplugins --cluster-domain=cluster.local --tls-private-key-file=/etc/kubernetes/ssl/kube-kubelet--key.pem --authentication-token-webhook=true --cni-conf-dir=/etc/cni/net.d --cgroups-per-qos=True --make-iptables-util-chains=true --read-only-port=0 --fail-swap-on=false --anonymous-auth=false --protect-kernel-defaults=true --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --address=0.0.0.0 --cgroup-driver=cgroupfs --resolv-conf=/run/systemd/resolve/resolv.conf +UID PID PPID C STIME TTY TIME CMD root 121813 121792 4 12:27 ? 00:03:37 kubelet --fail-swap-on=false --resolv-conf=/etc/resolv.conf --authorization-mode=Webhook --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-node.yaml --v=2 --volume-plugin-dir=/var/lib/kubelet/volumeplugins --address=0.0.0.0 --make-iptables-util-chains=true --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --hostname-override= --tls-cert-file=/etc/kubernetes/ssl/kube-kubelet-.pem --network-plugin=cni --streaming-connection-idle-timeout=30m --root-dir=/var/lib/kubelet --event-qps=0 --feature-gates=RotateKubeletServerCertificate=true --protect-kernel-defaults=true --cloud-provider= --tls-private-key-file=/etc/kubernetes/ssl/kube-kubelet--key.pem --cgroups-per-qos=True --cni-bin-dir=/opt/cni/bin --cni-conf-dir=/etc/cni/net.d --pod-infra-container-image=rancher/mirrored-pause:3.5 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --anonymous-auth=false --authentication-token-webhook=true --node-ip= --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --read-only-port=0 --cgroup-driver=cgroupfs --resolv-conf=/run/systemd/resolve/resolv.conf ``` ### 4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated) @@ -2581,7 +2581,7 @@ systemctl restart kubelet.service **Returned Value**: ```console -UID PID PPID C STIME TTY TIME CMD root 7101 7078 3 13:04 ? 00:00:23 kubelet --streaming-connection-idle-timeout=30m --cluster-dns=10.43.0.10 --pod-infra-container-image=rancher/mirrored-pause:3.4.1 --node-ip= --network-plugin=cni --event-qps=0 --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-node.yaml --root-dir=/var/lib/kubelet --cni-bin-dir=/opt/cni/bin --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --v=2 --feature-gates=RotateKubeletServerCertificate=true --cloud-provider= --hostname-override= --tls-cert-file=/etc/kubernetes/ssl/kube-kubelet-.pem --authorization-mode=Webhook --resolv-conf=/etc/resolv.conf --volume-plugin-dir=/var/lib/kubelet/volumeplugins --cluster-domain=cluster.local --tls-private-key-file=/etc/kubernetes/ssl/kube-kubelet--key.pem --authentication-token-webhook=true --cni-conf-dir=/etc/cni/net.d --cgroups-per-qos=True --make-iptables-util-chains=true --read-only-port=0 --fail-swap-on=false --anonymous-auth=false --protect-kernel-defaults=true --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --address=0.0.0.0 --cgroup-driver=cgroupfs --resolv-conf=/run/systemd/resolve/resolv.conf +UID PID PPID C STIME TTY TIME CMD root 121813 121792 4 12:27 ? 00:03:37 kubelet --fail-swap-on=false --resolv-conf=/etc/resolv.conf --authorization-mode=Webhook --kubeconfig=/etc/kubernetes/ssl/kubecfg-kube-node.yaml --v=2 --volume-plugin-dir=/var/lib/kubelet/volumeplugins --address=0.0.0.0 --make-iptables-util-chains=true --client-ca-file=/etc/kubernetes/ssl/kube-ca.pem --hostname-override= --tls-cert-file=/etc/kubernetes/ssl/kube-kubelet-.pem --network-plugin=cni --streaming-connection-idle-timeout=30m --root-dir=/var/lib/kubelet --event-qps=0 --feature-gates=RotateKubeletServerCertificate=true --protect-kernel-defaults=true --cloud-provider= --tls-private-key-file=/etc/kubernetes/ssl/kube-kubelet--key.pem --cgroups-per-qos=True --cni-bin-dir=/opt/cni/bin --cni-conf-dir=/etc/cni/net.d --pod-infra-container-image=rancher/mirrored-pause:3.5 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 --anonymous-auth=false --authentication-token-webhook=true --node-ip= --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --read-only-port=0 --cgroup-driver=cgroupfs --resolv-conf=/run/systemd/resolve/resolv.conf ``` ### 4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Automated) diff --git a/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/Rancher_v2-6_CIS_v1-6_Hardening_Guide.pdf b/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/Rancher_v2-6_CIS_v1-6_Hardening_Guide.pdf index 2df9a1dae27..c61b5c4abc1 100644 --- a/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/Rancher_v2-6_CIS_v1-6_Hardening_Guide.pdf +++ b/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/Rancher_v2-6_CIS_v1-6_Hardening_Guide.pdf @@ -3,25 +3,25 @@ 1 0 obj << /Type /Pages -/Kids [ 6 0 R 8 0 R 30 0 R 45 0 R 53 0 R 67 0 R 77 0 R 99 0 R 129 0 R 169 0 R 204 0 R 241 0 R 280 0 R 320 0 R 360 0 R 400 0 R 435 0 R 475 0 R 515 0 R 538 0 R 572 0 R ] -/Count 21 +/Kids [ 6 0 R 8 0 R 30 0 R 45 0 R 53 0 R 67 0 R 77 0 R 99 0 R 129 0 R 164 0 R 194 0 R 232 0 R 270 0 R 310 0 R 350 0 R 390 0 R 425 0 R 464 0 R 499 0 R 534 0 R 557 0 R 591 0 R ] +/Count 22 >> endobj 2 0 obj << /Title (Hardening Guide with CIS v1.6 Benchmark) /Creator (pandoc) -/Producer (WeasyPrint 54.1) +/Producer (WeasyPrint 54.2) >> endobj 3 0 obj << /Type /Catalog /Pages 1 0 R -/Outlines 600 0 R +/Outlines 611 0 R /Names << /Dests << -/Names [ (TOC) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (cb1) [ 45 0 R /XYZ 84.259843 441.572079 0 ] (cb1-1) [ 45 0 R /XYZ 101.433071 439.875057 0 ] (cb1-2) [ 45 0 R /XYZ 99.933071 420.928036 0 ] (cb1-3) [ 45 0 R /XYZ 99.933071 401.981014 0 ] (cb1-4) [ 45 0 R /XYZ 99.933071 383.033993 0 ] (cb1-5) [ 45 0 R /XYZ 99.933071 364.086971 0 ] (cb10) [ 400 0 R /XYZ 84.259843 697.970079 0 ] (cb10-1) [ 400 0 R /XYZ 101.433071 696.273057 0 ] (cb10-10) [ 400 0 R /XYZ 99.933071 525.749864 0 ] (cb10-100) [ 475 0 R /XYZ 99.933071 249.709434 0 ] (cb10-101) [ 475 0 R /XYZ 99.933071 230.762413 0 ] (cb10-102) [ 475 0 R /XYZ 99.933071 211.815391 0 ] (cb10-103) [ 475 0 R /XYZ 99.933071 192.868370 0 ] (cb10-104) [ 475 0 R /XYZ 99.933071 173.921348 0 ] (cb10-105) [ 475 0 R /XYZ 99.933071 154.974327 0 ] (cb10-106) [ 475 0 R /XYZ 99.933071 136.027305 0 ] (cb10-107) [ 475 0 R /XYZ 99.933071 117.080284 0 ] (cb10-108) [ 475 0 R /XYZ 99.933071 98.133262 0 ] (cb10-109) [ 515 0 R /XYZ 99.933071 799.173057 0 ] (cb10-11) [ 400 0 R /XYZ 99.933071 506.802842 0 ] (cb10-110) [ 515 0 R /XYZ 99.933071 780.226036 0 ] (cb10-111) [ 515 0 R /XYZ 99.933071 761.279014 0 ] (cb10-112) [ 515 0 R /XYZ 99.933071 742.331993 0 ] (cb10-113) [ 515 0 R /XYZ 99.933071 723.384971 0 ] (cb10-114) [ 515 0 R /XYZ 99.933071 704.437950 0 ] (cb10-115) [ 515 0 R /XYZ 99.933071 685.490928 0 ] (cb10-116) [ 515 0 R /XYZ 99.933071 666.543907 0 ] (cb10-117) [ 515 0 R /XYZ 99.933071 647.596885 0 ] (cb10-118) [ 515 0 R /XYZ 99.933071 533.914756 0 ] (cb10-119) [ 515 0 R /XYZ 99.933071 514.967735 0 ] (cb10-12) [ 400 0 R /XYZ 99.933071 487.855821 0 ] (cb10-120) [ 515 0 R /XYZ 99.933071 496.020714 0 ] (cb10-121) [ 515 0 R /XYZ 99.933071 477.073692 0 ] (cb10-122) [ 515 0 R /XYZ 99.933071 458.126671 0 ] (cb10-123) [ 515 0 R /XYZ 99.933071 439.179649 0 ] (cb10-124) [ 515 0 R /XYZ 99.933071 420.232628 0 ] (cb10-13) [ 400 0 R /XYZ 99.933071 468.908799 0 ] (cb10-14) [ 400 0 R /XYZ 99.933071 449.961778 0 ] (cb10-15) [ 400 0 R /XYZ 99.933071 431.014756 0 ] (cb10-16) [ 400 0 R /XYZ 99.933071 412.067735 0 ] (cb10-17) [ 400 0 R /XYZ 99.933071 393.120714 0 ] (cb10-18) [ 400 0 R /XYZ 99.933071 374.173692 0 ] (cb10-19) [ 400 0 R /XYZ 99.933071 355.226671 0 ] (cb10-2) [ 400 0 R /XYZ 99.933071 677.326036 0 ] (cb10-20) [ 400 0 R /XYZ 99.933071 336.279649 0 ] (cb10-21) [ 400 0 R /XYZ 99.933071 317.332628 0 ] (cb10-22) [ 400 0 R /XYZ 99.933071 298.385606 0 ] (cb10-23) [ 400 0 R /XYZ 99.933071 279.438585 0 ] (cb10-24) [ 400 0 R /XYZ 99.933071 260.491563 0 ] (cb10-25) [ 400 0 R /XYZ 99.933071 241.544542 0 ] (cb10-26) [ 400 0 R /XYZ 99.933071 222.597520 0 ] (cb10-27) [ 400 0 R /XYZ 99.933071 203.650499 0 ] (cb10-28) [ 400 0 R /XYZ 99.933071 184.703477 0 ] (cb10-29) [ 400 0 R /XYZ 99.933071 165.756456 0 ] (cb10-3) [ 400 0 R /XYZ 99.933071 658.379014 0 ] (cb10-30) [ 400 0 R /XYZ 99.933071 127.862413 0 ] (cb10-31) [ 400 0 R /XYZ 99.933071 108.915391 0 ] (cb10-32) [ 400 0 R /XYZ 99.933071 89.968370 0 ] (cb10-33) [ 435 0 R /XYZ 99.933071 799.173057 0 ] (cb10-34) [ 435 0 R /XYZ 99.933071 780.226036 0 ] (cb10-35) [ 435 0 R /XYZ 99.933071 761.279014 0 ] (cb10-36) [ 435 0 R /XYZ 99.933071 742.331993 0 ] (cb10-37) [ 435 0 R /XYZ 99.933071 723.384971 0 ] (cb10-38) [ 435 0 R /XYZ 99.933071 704.437950 0 ] (cb10-39) [ 435 0 R /XYZ 99.933071 685.490928 0 ] (cb10-4) [ 400 0 R /XYZ 99.933071 639.431993 0 ] (cb10-40) [ 435 0 R /XYZ 99.933071 666.543907 0 ] (cb10-41) [ 435 0 R /XYZ 99.933071 647.596885 0 ] (cb10-42) [ 435 0 R /XYZ 99.933071 628.649864 0 ] (cb10-43) [ 435 0 R /XYZ 99.933071 609.702842 0 ] (cb10-44) [ 435 0 R /XYZ 99.933071 590.755821 0 ] (cb10-45) [ 435 0 R /XYZ 99.933071 571.808799 0 ] (cb10-46) [ 435 0 R /XYZ 99.933071 552.861778 0 ] (cb10-47) [ 435 0 R /XYZ 99.933071 533.914756 0 ] (cb10-48) [ 435 0 R /XYZ 99.933071 514.967735 0 ] (cb10-49) [ 435 0 R /XYZ 99.933071 496.020714 0 ] (cb10-5) [ 400 0 R /XYZ 99.933071 620.484971 0 ] (cb10-50) [ 435 0 R /XYZ 99.933071 477.073692 0 ] (cb10-51) [ 435 0 R /XYZ 99.933071 458.126671 0 ] (cb10-52) [ 435 0 R /XYZ 99.933071 439.179649 0 ] (cb10-53) [ 435 0 R /XYZ 99.933071 420.232628 0 ] (cb10-54) [ 435 0 R /XYZ 99.933071 401.285606 0 ] (cb10-55) [ 435 0 R /XYZ 99.933071 382.338585 0 ] (cb10-56) [ 435 0 R /XYZ 99.933071 363.391563 0 ] (cb10-57) [ 435 0 R /XYZ 99.933071 344.444542 0 ] (cb10-58) [ 435 0 R /XYZ 99.933071 325.497520 0 ] (cb10-59) [ 435 0 R /XYZ 99.933071 306.550499 0 ] (cb10-6) [ 400 0 R /XYZ 99.933071 601.537950 0 ] (cb10-60) [ 435 0 R /XYZ 99.933071 287.603477 0 ] (cb10-61) [ 435 0 R /XYZ 99.933071 268.656456 0 ] (cb10-62) [ 435 0 R /XYZ 99.933071 249.709434 0 ] (cb10-63) [ 435 0 R /XYZ 99.933071 230.762413 0 ] (cb10-64) [ 435 0 R /XYZ 99.933071 211.815391 0 ] (cb10-65) [ 435 0 R /XYZ 99.933071 192.868370 0 ] (cb10-66) [ 435 0 R /XYZ 99.933071 173.921348 0 ] (cb10-67) [ 435 0 R /XYZ 99.933071 154.974327 0 ] (cb10-68) [ 435 0 R /XYZ 99.933071 136.027305 0 ] (cb10-69) [ 435 0 R /XYZ 99.933071 117.080284 0 ] (cb10-7) [ 400 0 R /XYZ 99.933071 582.590928 0 ] (cb10-70) [ 435 0 R /XYZ 99.933071 98.133262 0 ] (cb10-71) [ 475 0 R /XYZ 99.933071 799.173057 0 ] (cb10-72) [ 475 0 R /XYZ 99.933071 780.226036 0 ] (cb10-73) [ 475 0 R /XYZ 99.933071 761.279014 0 ] (cb10-74) [ 475 0 R /XYZ 99.933071 742.331993 0 ] (cb10-75) [ 475 0 R /XYZ 99.933071 723.384971 0 ] (cb10-76) [ 475 0 R /XYZ 99.933071 704.437950 0 ] (cb10-77) [ 475 0 R /XYZ 99.933071 685.490928 0 ] (cb10-78) [ 475 0 R /XYZ 99.933071 666.543907 0 ] (cb10-79) [ 475 0 R /XYZ 99.933071 647.596885 0 ] (cb10-8) [ 400 0 R /XYZ 99.933071 563.643907 0 ] (cb10-80) [ 475 0 R /XYZ 99.933071 628.649864 0 ] (cb10-81) [ 475 0 R /XYZ 99.933071 609.702842 0 ] (cb10-82) [ 475 0 R /XYZ 99.933071 590.755821 0 ] (cb10-83) [ 475 0 R /XYZ 99.933071 571.808799 0 ] (cb10-84) [ 475 0 R /XYZ 99.933071 552.861778 0 ] (cb10-85) [ 475 0 R /XYZ 99.933071 533.914756 0 ] (cb10-86) [ 475 0 R /XYZ 99.933071 514.967735 0 ] (cb10-87) [ 475 0 R /XYZ 99.933071 496.020714 0 ] (cb10-88) [ 475 0 R /XYZ 99.933071 477.073692 0 ] (cb10-89) [ 475 0 R /XYZ 99.933071 458.126671 0 ] (cb10-9) [ 400 0 R /XYZ 99.933071 544.696885 0 ] (cb10-90) [ 475 0 R /XYZ 99.933071 439.179649 0 ] (cb10-91) [ 475 0 R /XYZ 99.933071 420.232628 0 ] (cb10-92) [ 475 0 R /XYZ 99.933071 401.285606 0 ] (cb10-93) [ 475 0 R /XYZ 99.933071 382.338585 0 ] (cb10-94) [ 475 0 R /XYZ 99.933071 363.391563 0 ] (cb10-95) [ 475 0 R /XYZ 99.933071 344.444542 0 ] (cb10-96) [ 475 0 R /XYZ 99.933071 325.497520 0 ] (cb10-97) [ 475 0 R /XYZ 99.933071 306.550499 0 ] (cb10-98) [ 475 0 R /XYZ 99.933071 287.603477 0 ] (cb10-99) [ 475 0 R /XYZ 99.933071 268.656456 0 ] (cb11) [ 515 0 R /XYZ 84.259843 179.686628 0 ] (cb11-1) [ 515 0 R /XYZ 101.433071 177.989606 0 ] (cb11-10) [ 538 0 R /XYZ 99.933071 723.384971 0 ] (cb11-11) [ 538 0 R /XYZ 99.933071 704.437950 0 ] (cb11-12) [ 538 0 R /XYZ 99.933071 685.490928 0 ] (cb11-13) [ 538 0 R /XYZ 99.933071 666.543907 0 ] (cb11-14) [ 538 0 R /XYZ 99.933071 647.596885 0 ] (cb11-15) [ 538 0 R /XYZ 99.933071 628.649864 0 ] (cb11-16) [ 538 0 R /XYZ 99.933071 609.702842 0 ] (cb11-17) [ 538 0 R /XYZ 99.933071 590.755821 0 ] (cb11-18) [ 538 0 R /XYZ 99.933071 571.808799 0 ] (cb11-19) [ 538 0 R /XYZ 99.933071 552.861778 0 ] (cb11-2) [ 515 0 R /XYZ 99.933071 159.042585 0 ] (cb11-20) [ 538 0 R /XYZ 99.933071 533.914756 0 ] (cb11-21) [ 538 0 R /XYZ 99.933071 514.967735 0 ] (cb11-22) [ 538 0 R /XYZ 99.933071 496.020714 0 ] (cb11-23) [ 538 0 R /XYZ 99.933071 477.073692 0 ] (cb11-24) [ 538 0 R /XYZ 99.933071 458.126671 0 ] (cb11-25) [ 538 0 R /XYZ 99.933071 439.179649 0 ] (cb11-26) [ 538 0 R /XYZ 99.933071 420.232628 0 ] (cb11-3) [ 515 0 R /XYZ 99.933071 140.095563 0 ] (cb11-4) [ 515 0 R /XYZ 99.933071 121.148542 0 ] (cb11-5) [ 515 0 R /XYZ 99.933071 102.201520 0 ] (cb11-6) [ 538 0 R /XYZ 99.933071 799.173057 0 ] (cb11-7) [ 538 0 R /XYZ 99.933071 780.226036 0 ] (cb11-8) [ 538 0 R /XYZ 99.933071 761.279014 0 ] (cb11-9) [ 538 0 R /XYZ 99.933071 742.331993 0 ] (cb12) [ 538 0 R /XYZ 84.259843 294.539606 0 ] (cb12-1) [ 538 0 R /XYZ 101.433071 292.842585 0 ] (cb12-10) [ 538 0 R /XYZ 99.933071 122.319391 0 ] (cb12-11) [ 538 0 R /XYZ 99.933071 103.372370 0 ] (cb12-12) [ 572 0 R /XYZ 99.933071 799.173057 0 ] (cb12-13) [ 572 0 R /XYZ 99.933071 780.226036 0 ] (cb12-14) [ 572 0 R /XYZ 99.933071 761.279014 0 ] (cb12-15) [ 572 0 R /XYZ 99.933071 742.331993 0 ] (cb12-16) [ 572 0 R /XYZ 99.933071 723.384971 0 ] (cb12-17) [ 572 0 R /XYZ 99.933071 704.437950 0 ] (cb12-18) [ 572 0 R /XYZ 99.933071 685.490928 0 ] (cb12-19) [ 572 0 R /XYZ 99.933071 666.543907 0 ] (cb12-2) [ 538 0 R /XYZ 99.933071 273.895563 0 ] (cb12-20) [ 572 0 R /XYZ 99.933071 628.649864 0 ] (cb12-21) [ 572 0 R /XYZ 99.933071 590.755821 0 ] (cb12-22) [ 572 0 R /XYZ 99.933071 571.808799 0 ] (cb12-23) [ 572 0 R /XYZ 99.933071 552.861778 0 ] (cb12-3) [ 538 0 R /XYZ 99.933071 254.948542 0 ] (cb12-4) [ 538 0 R /XYZ 99.933071 236.001520 0 ] (cb12-5) [ 538 0 R /XYZ 99.933071 217.054499 0 ] (cb12-6) [ 538 0 R /XYZ 99.933071 198.107477 0 ] (cb12-7) [ 538 0 R /XYZ 99.933071 179.160456 0 ] (cb12-8) [ 538 0 R /XYZ 99.933071 160.213434 0 ] (cb12-9) [ 538 0 R /XYZ 99.933071 141.266413 0 ] (cb2) [ 53 0 R /XYZ 84.259843 753.620079 0 ] (cb2-1) [ 53 0 R /XYZ 101.433071 751.923057 0 ] (cb2-2) [ 53 0 R /XYZ 99.933071 732.976036 0 ] (cb3) [ 53 0 R /XYZ 84.259843 654.779014 0 ] (cb3-1) [ 53 0 R /XYZ 101.433071 653.081993 0 ] (cb3-2) [ 53 0 R /XYZ 99.933071 634.134971 0 ] (cb3-3) [ 53 0 R /XYZ 99.933071 615.187950 0 ] (cb3-4) [ 53 0 R /XYZ 99.933071 596.240928 0 ] (cb4) [ 53 0 R /XYZ 84.259843 282.344928 0 ] (cb4-1) [ 53 0 R /XYZ 101.433071 280.647907 0 ] (cb5) [ 53 0 R /XYZ 84.259843 217.647907 0 ] (cb5-1) [ 53 0 R /XYZ 101.433071 215.950885 0 ] (cb5-2) [ 53 0 R /XYZ 99.933071 197.003864 0 ] (cb5-3) [ 53 0 R /XYZ 99.933071 178.056842 0 ] (cb5-4) [ 53 0 R /XYZ 99.933071 159.109821 0 ] (cb5-5) [ 53 0 R /XYZ 99.933071 140.162799 0 ] (cb6) [ 67 0 R /XYZ 84.259843 749.870079 0 ] (cb6-1) [ 67 0 R /XYZ 101.433071 748.173057 0 ] (cb6-2) [ 67 0 R /XYZ 99.933071 729.226036 0 ] (cb6-3) [ 67 0 R /XYZ 99.933071 710.279014 0 ] (cb6-4) [ 67 0 R /XYZ 99.933071 672.384971 0 ] (cb6-5) [ 67 0 R /XYZ 99.933071 634.490928 0 ] (cb7) [ 77 0 R /XYZ 84.259843 716.781496 0 ] (cb7-1) [ 77 0 R /XYZ 101.433071 715.084475 0 ] (cb7-10) [ 77 0 R /XYZ 99.933071 544.561281 0 ] (cb7-11) [ 77 0 R /XYZ 99.933071 525.614260 0 ] (cb7-12) [ 77 0 R /XYZ 99.933071 506.667238 0 ] (cb7-13) [ 77 0 R /XYZ 99.933071 487.720217 0 ] (cb7-14) [ 77 0 R /XYZ 99.933071 468.773195 0 ] (cb7-2) [ 77 0 R /XYZ 99.933071 696.137453 0 ] (cb7-3) [ 77 0 R /XYZ 99.933071 677.190432 0 ] (cb7-4) [ 77 0 R /XYZ 99.933071 658.243410 0 ] (cb7-5) [ 77 0 R /XYZ 99.933071 639.296389 0 ] (cb7-6) [ 77 0 R /XYZ 99.933071 620.349367 0 ] (cb7-7) [ 77 0 R /XYZ 99.933071 601.402346 0 ] (cb7-8) [ 77 0 R /XYZ 99.933071 582.455324 0 ] (cb7-9) [ 77 0 R /XYZ 99.933071 563.508303 0 ] (cb8) [ 77 0 R /XYZ 84.259843 372.023195 0 ] (cb8-1) [ 77 0 R /XYZ 101.433071 370.326174 0 ] (cb8-2) [ 77 0 R /XYZ 99.933071 351.379152 0 ] (cb8-3) [ 77 0 R /XYZ 99.933071 332.432131 0 ] (cb8-4) [ 77 0 R /XYZ 99.933071 294.538088 0 ] (cb8-5) [ 77 0 R /XYZ 99.933071 275.591066 0 ] (cb9) [ 99 0 R /XYZ 84.259843 652.281496 0 ] (cb9-1) [ 99 0 R /XYZ 101.433071 650.584475 0 ] (cb9-10) [ 99 0 R /XYZ 99.933071 423.220217 0 ] (cb9-100) [ 204 0 R /XYZ 99.933071 780.226036 0 ] (cb9-101) [ 204 0 R /XYZ 99.933071 761.279014 0 ] (cb9-102) [ 204 0 R /XYZ 99.933071 742.331993 0 ] (cb9-103) [ 204 0 R /XYZ 99.933071 723.384971 0 ] (cb9-104) [ 204 0 R /XYZ 99.933071 704.437950 0 ] (cb9-105) [ 204 0 R /XYZ 99.933071 685.490928 0 ] (cb9-106) [ 204 0 R /XYZ 99.933071 666.543907 0 ] (cb9-107) [ 204 0 R /XYZ 99.933071 609.702842 0 ] (cb9-108) [ 204 0 R /XYZ 99.933071 590.755821 0 ] (cb9-109) [ 204 0 R /XYZ 99.933071 571.808799 0 ] (cb9-11) [ 99 0 R /XYZ 99.933071 404.273195 0 ] (cb9-110) [ 204 0 R /XYZ 99.933071 552.861778 0 ] (cb9-111) [ 204 0 R /XYZ 99.933071 533.914756 0 ] (cb9-112) [ 204 0 R /XYZ 99.933071 514.967735 0 ] (cb9-113) [ 204 0 R /XYZ 99.933071 496.020714 0 ] (cb9-114) [ 204 0 R /XYZ 99.933071 477.073692 0 ] (cb9-115) [ 204 0 R /XYZ 99.933071 458.126671 0 ] (cb9-116) [ 204 0 R /XYZ 99.933071 439.179649 0 ] (cb9-117) [ 204 0 R /XYZ 99.933071 420.232628 0 ] (cb9-118) [ 204 0 R /XYZ 99.933071 401.285606 0 ] (cb9-119) [ 204 0 R /XYZ 99.933071 382.338585 0 ] (cb9-12) [ 99 0 R /XYZ 99.933071 385.326174 0 ] (cb9-120) [ 204 0 R /XYZ 99.933071 363.391563 0 ] (cb9-121) [ 204 0 R /XYZ 99.933071 344.444542 0 ] (cb9-122) [ 204 0 R /XYZ 99.933071 325.497520 0 ] (cb9-123) [ 204 0 R /XYZ 99.933071 306.550499 0 ] (cb9-124) [ 204 0 R /XYZ 99.933071 287.603477 0 ] (cb9-125) [ 204 0 R /XYZ 99.933071 249.709434 0 ] (cb9-126) [ 204 0 R /XYZ 99.933071 230.762413 0 ] (cb9-127) [ 204 0 R /XYZ 99.933071 211.815391 0 ] (cb9-128) [ 204 0 R /XYZ 99.933071 192.868370 0 ] (cb9-129) [ 204 0 R /XYZ 99.933071 173.921348 0 ] (cb9-13) [ 99 0 R /XYZ 99.933071 366.379152 0 ] (cb9-130) [ 204 0 R /XYZ 99.933071 154.974327 0 ] (cb9-131) [ 204 0 R /XYZ 99.933071 136.027305 0 ] (cb9-132) [ 204 0 R /XYZ 99.933071 117.080284 0 ] (cb9-133) [ 204 0 R /XYZ 99.933071 98.133262 0 ] (cb9-134) [ 241 0 R /XYZ 99.933071 799.173057 0 ] (cb9-135) [ 241 0 R /XYZ 99.933071 780.226036 0 ] (cb9-136) [ 241 0 R /XYZ 99.933071 742.331993 0 ] (cb9-137) [ 241 0 R /XYZ 99.933071 723.384971 0 ] (cb9-138) [ 241 0 R /XYZ 99.933071 704.437950 0 ] (cb9-139) [ 241 0 R /XYZ 99.933071 685.490928 0 ] (cb9-14) [ 99 0 R /XYZ 99.933071 347.432131 0 ] (cb9-140) [ 241 0 R /XYZ 99.933071 666.543907 0 ] (cb9-141) [ 241 0 R /XYZ 99.933071 647.596885 0 ] (cb9-142) [ 241 0 R /XYZ 99.933071 628.649864 0 ] (cb9-143) [ 241 0 R /XYZ 99.933071 609.702842 0 ] (cb9-144) [ 241 0 R /XYZ 99.933071 590.755821 0 ] (cb9-145) [ 241 0 R /XYZ 99.933071 571.808799 0 ] (cb9-146) [ 241 0 R /XYZ 99.933071 552.861778 0 ] (cb9-147) [ 241 0 R /XYZ 99.933071 533.914756 0 ] (cb9-148) [ 241 0 R /XYZ 99.933071 514.967735 0 ] (cb9-149) [ 241 0 R /XYZ 99.933071 496.020714 0 ] (cb9-15) [ 99 0 R /XYZ 99.933071 328.485109 0 ] (cb9-150) [ 241 0 R /XYZ 99.933071 477.073692 0 ] (cb9-151) [ 241 0 R /XYZ 99.933071 458.126671 0 ] (cb9-152) [ 241 0 R /XYZ 99.933071 439.179649 0 ] (cb9-153) [ 241 0 R /XYZ 99.933071 420.232628 0 ] (cb9-154) [ 241 0 R /XYZ 99.933071 401.285606 0 ] (cb9-155) [ 241 0 R /XYZ 99.933071 382.338585 0 ] (cb9-156) [ 241 0 R /XYZ 99.933071 363.391563 0 ] (cb9-157) [ 241 0 R /XYZ 99.933071 344.444542 0 ] (cb9-158) [ 241 0 R /XYZ 99.933071 325.497520 0 ] (cb9-159) [ 241 0 R /XYZ 99.933071 306.550499 0 ] (cb9-16) [ 99 0 R /XYZ 99.933071 309.538088 0 ] (cb9-160) [ 241 0 R /XYZ 99.933071 287.603477 0 ] (cb9-161) [ 241 0 R /XYZ 99.933071 268.656456 0 ] (cb9-162) [ 241 0 R /XYZ 99.933071 249.709434 0 ] (cb9-163) [ 241 0 R /XYZ 99.933071 230.762413 0 ] (cb9-164) [ 241 0 R /XYZ 99.933071 211.815391 0 ] (cb9-165) [ 241 0 R /XYZ 99.933071 192.868370 0 ] (cb9-166) [ 241 0 R /XYZ 99.933071 173.921348 0 ] (cb9-167) [ 241 0 R /XYZ 99.933071 154.974327 0 ] (cb9-168) [ 241 0 R /XYZ 99.933071 136.027305 0 ] (cb9-169) [ 241 0 R /XYZ 99.933071 117.080284 0 ] (cb9-17) [ 99 0 R /XYZ 99.933071 290.591066 0 ] (cb9-170) [ 241 0 R /XYZ 99.933071 98.133262 0 ] (cb9-171) [ 280 0 R /XYZ 99.933071 799.173057 0 ] (cb9-172) [ 280 0 R /XYZ 99.933071 780.226036 0 ] (cb9-173) [ 280 0 R /XYZ 99.933071 761.279014 0 ] (cb9-174) [ 280 0 R /XYZ 99.933071 742.331993 0 ] (cb9-175) [ 280 0 R /XYZ 99.933071 723.384971 0 ] (cb9-176) [ 280 0 R /XYZ 99.933071 704.437950 0 ] (cb9-177) [ 280 0 R /XYZ 99.933071 685.490928 0 ] (cb9-178) [ 280 0 R /XYZ 99.933071 666.543907 0 ] (cb9-179) [ 280 0 R /XYZ 99.933071 647.596885 0 ] (cb9-18) [ 99 0 R /XYZ 99.933071 271.644045 0 ] (cb9-180) [ 280 0 R /XYZ 99.933071 628.649864 0 ] (cb9-181) [ 280 0 R /XYZ 99.933071 609.702842 0 ] (cb9-182) [ 280 0 R /XYZ 99.933071 590.755821 0 ] (cb9-183) [ 280 0 R /XYZ 99.933071 571.808799 0 ] (cb9-184) [ 280 0 R /XYZ 99.933071 552.861778 0 ] (cb9-185) [ 280 0 R /XYZ 99.933071 533.914756 0 ] (cb9-186) [ 280 0 R /XYZ 99.933071 514.967735 0 ] (cb9-187) [ 280 0 R /XYZ 99.933071 496.020714 0 ] (cb9-188) [ 280 0 R /XYZ 99.933071 477.073692 0 ] (cb9-189) [ 280 0 R /XYZ 99.933071 458.126671 0 ] (cb9-19) [ 99 0 R /XYZ 99.933071 252.697023 0 ] (cb9-190) [ 280 0 R /XYZ 99.933071 439.179649 0 ] (cb9-191) [ 280 0 R /XYZ 99.933071 420.232628 0 ] (cb9-192) [ 280 0 R /XYZ 99.933071 401.285606 0 ] (cb9-193) [ 280 0 R /XYZ 99.933071 382.338585 0 ] (cb9-194) [ 280 0 R /XYZ 99.933071 363.391563 0 ] (cb9-195) [ 280 0 R /XYZ 99.933071 344.444542 0 ] (cb9-196) [ 280 0 R /XYZ 99.933071 325.497520 0 ] (cb9-197) [ 280 0 R /XYZ 99.933071 306.550499 0 ] (cb9-198) [ 280 0 R /XYZ 99.933071 287.603477 0 ] (cb9-199) [ 280 0 R /XYZ 99.933071 268.656456 0 ] (cb9-2) [ 99 0 R /XYZ 99.933071 612.690432 0 ] (cb9-20) [ 99 0 R /XYZ 99.933071 233.750002 0 ] (cb9-200) [ 280 0 R /XYZ 99.933071 249.709434 0 ] (cb9-201) [ 280 0 R /XYZ 99.933071 230.762413 0 ] (cb9-202) [ 280 0 R /XYZ 99.933071 211.815391 0 ] (cb9-203) [ 280 0 R /XYZ 99.933071 192.868370 0 ] (cb9-204) [ 280 0 R /XYZ 99.933071 173.921348 0 ] (cb9-205) [ 280 0 R /XYZ 99.933071 154.974327 0 ] (cb9-206) [ 280 0 R /XYZ 99.933071 136.027305 0 ] (cb9-207) [ 280 0 R /XYZ 99.933071 117.080284 0 ] (cb9-208) [ 280 0 R /XYZ 99.933071 98.133262 0 ] (cb9-209) [ 320 0 R /XYZ 99.933071 799.173057 0 ] (cb9-21) [ 99 0 R /XYZ 99.933071 214.802980 0 ] (cb9-210) [ 320 0 R /XYZ 99.933071 780.226036 0 ] (cb9-211) [ 320 0 R /XYZ 99.933071 761.279014 0 ] (cb9-212) [ 320 0 R /XYZ 99.933071 742.331993 0 ] (cb9-213) [ 320 0 R /XYZ 99.933071 723.384971 0 ] (cb9-214) [ 320 0 R /XYZ 99.933071 704.437950 0 ] (cb9-215) [ 320 0 R /XYZ 99.933071 685.490928 0 ] (cb9-216) [ 320 0 R /XYZ 99.933071 666.543907 0 ] (cb9-217) [ 320 0 R /XYZ 99.933071 647.596885 0 ] (cb9-218) [ 320 0 R /XYZ 99.933071 628.649864 0 ] (cb9-219) [ 320 0 R /XYZ 99.933071 609.702842 0 ] (cb9-22) [ 99 0 R /XYZ 99.933071 195.855959 0 ] (cb9-220) [ 320 0 R /XYZ 99.933071 590.755821 0 ] (cb9-221) [ 320 0 R /XYZ 99.933071 571.808799 0 ] (cb9-222) [ 320 0 R /XYZ 99.933071 552.861778 0 ] (cb9-223) [ 320 0 R /XYZ 99.933071 533.914756 0 ] (cb9-224) [ 320 0 R /XYZ 99.933071 514.967735 0 ] (cb9-225) [ 320 0 R /XYZ 99.933071 496.020714 0 ] (cb9-226) [ 320 0 R /XYZ 99.933071 477.073692 0 ] (cb9-227) [ 320 0 R /XYZ 99.933071 458.126671 0 ] (cb9-228) [ 320 0 R /XYZ 99.933071 439.179649 0 ] (cb9-229) [ 320 0 R /XYZ 99.933071 420.232628 0 ] (cb9-23) [ 99 0 R /XYZ 99.933071 176.908937 0 ] (cb9-230) [ 320 0 R /XYZ 99.933071 401.285606 0 ] (cb9-231) [ 320 0 R /XYZ 99.933071 382.338585 0 ] (cb9-232) [ 320 0 R /XYZ 99.933071 363.391563 0 ] (cb9-233) [ 320 0 R /XYZ 99.933071 344.444542 0 ] (cb9-234) [ 320 0 R /XYZ 99.933071 325.497520 0 ] (cb9-235) [ 320 0 R /XYZ 99.933071 306.550499 0 ] (cb9-236) [ 320 0 R /XYZ 99.933071 287.603477 0 ] (cb9-237) [ 320 0 R /XYZ 99.933071 268.656456 0 ] (cb9-238) [ 320 0 R /XYZ 99.933071 249.709434 0 ] (cb9-239) [ 320 0 R /XYZ 99.933071 230.762413 0 ] (cb9-24) [ 99 0 R /XYZ 99.933071 157.961916 0 ] (cb9-240) [ 320 0 R /XYZ 99.933071 211.815391 0 ] (cb9-241) [ 320 0 R /XYZ 99.933071 192.868370 0 ] (cb9-242) [ 320 0 R /XYZ 99.933071 173.921348 0 ] (cb9-243) [ 320 0 R /XYZ 99.933071 154.974327 0 ] (cb9-244) [ 320 0 R /XYZ 99.933071 136.027305 0 ] (cb9-245) [ 320 0 R /XYZ 99.933071 117.080284 0 ] (cb9-246) [ 320 0 R /XYZ 99.933071 98.133262 0 ] (cb9-247) [ 360 0 R /XYZ 99.933071 799.173057 0 ] (cb9-248) [ 360 0 R /XYZ 99.933071 780.226036 0 ] (cb9-249) [ 360 0 R /XYZ 99.933071 761.279014 0 ] (cb9-25) [ 99 0 R /XYZ 99.933071 139.014895 0 ] (cb9-250) [ 360 0 R /XYZ 99.933071 742.331993 0 ] (cb9-251) [ 360 0 R /XYZ 99.933071 723.384971 0 ] (cb9-252) [ 360 0 R /XYZ 99.933071 704.437950 0 ] (cb9-253) [ 360 0 R /XYZ 99.933071 685.490928 0 ] (cb9-254) [ 360 0 R /XYZ 99.933071 666.543907 0 ] (cb9-255) [ 360 0 R /XYZ 99.933071 647.596885 0 ] (cb9-256) [ 360 0 R /XYZ 99.933071 628.649864 0 ] (cb9-257) [ 360 0 R /XYZ 99.933071 609.702842 0 ] (cb9-258) [ 360 0 R /XYZ 99.933071 590.755821 0 ] (cb9-259) [ 360 0 R /XYZ 99.933071 571.808799 0 ] (cb9-26) [ 99 0 R /XYZ 99.933071 120.067873 0 ] (cb9-260) [ 360 0 R /XYZ 99.933071 552.861778 0 ] (cb9-261) [ 360 0 R /XYZ 99.933071 533.914756 0 ] (cb9-262) [ 360 0 R /XYZ 99.933071 514.967735 0 ] (cb9-263) [ 360 0 R /XYZ 99.933071 496.020714 0 ] (cb9-264) [ 360 0 R /XYZ 99.933071 477.073692 0 ] (cb9-265) [ 360 0 R /XYZ 99.933071 458.126671 0 ] (cb9-266) [ 360 0 R /XYZ 99.933071 439.179649 0 ] (cb9-267) [ 360 0 R /XYZ 99.933071 420.232628 0 ] (cb9-268) [ 360 0 R /XYZ 99.933071 401.285606 0 ] (cb9-269) [ 360 0 R /XYZ 99.933071 382.338585 0 ] (cb9-27) [ 99 0 R /XYZ 99.933071 101.120852 0 ] (cb9-270) [ 360 0 R /XYZ 99.933071 363.391563 0 ] (cb9-271) [ 360 0 R /XYZ 99.933071 344.444542 0 ] (cb9-272) [ 360 0 R /XYZ 99.933071 325.497520 0 ] (cb9-273) [ 360 0 R /XYZ 99.933071 306.550499 0 ] (cb9-274) [ 360 0 R /XYZ 99.933071 287.603477 0 ] (cb9-275) [ 360 0 R /XYZ 99.933071 268.656456 0 ] (cb9-276) [ 360 0 R /XYZ 99.933071 249.709434 0 ] (cb9-277) [ 360 0 R /XYZ 99.933071 230.762413 0 ] (cb9-278) [ 360 0 R /XYZ 99.933071 211.815391 0 ] (cb9-279) [ 360 0 R /XYZ 99.933071 192.868370 0 ] (cb9-28) [ 129 0 R /XYZ 99.933071 799.173057 0 ] (cb9-280) [ 360 0 R /XYZ 99.933071 173.921348 0 ] (cb9-281) [ 360 0 R /XYZ 99.933071 154.974327 0 ] (cb9-282) [ 360 0 R /XYZ 99.933071 136.027305 0 ] (cb9-283) [ 360 0 R /XYZ 99.933071 117.080284 0 ] (cb9-284) [ 360 0 R /XYZ 99.933071 98.133262 0 ] (cb9-29) [ 129 0 R /XYZ 99.933071 780.226036 0 ] (cb9-3) [ 99 0 R /XYZ 99.933071 574.796389 0 ] (cb9-30) [ 129 0 R /XYZ 99.933071 761.279014 0 ] (cb9-31) [ 129 0 R /XYZ 99.933071 742.331993 0 ] (cb9-32) [ 129 0 R /XYZ 99.933071 723.384971 0 ] (cb9-33) [ 129 0 R /XYZ 99.933071 704.437950 0 ] (cb9-34) [ 129 0 R /XYZ 99.933071 685.490928 0 ] (cb9-35) [ 129 0 R /XYZ 99.933071 666.543907 0 ] (cb9-36) [ 129 0 R /XYZ 99.933071 647.596885 0 ] (cb9-37) [ 129 0 R /XYZ 99.933071 628.649864 0 ] (cb9-38) [ 129 0 R /XYZ 99.933071 609.702842 0 ] (cb9-39) [ 129 0 R /XYZ 99.933071 590.755821 0 ] (cb9-4) [ 99 0 R /XYZ 99.933071 555.849367 0 ] (cb9-40) [ 129 0 R /XYZ 99.933071 571.808799 0 ] (cb9-41) [ 129 0 R /XYZ 99.933071 552.861778 0 ] (cb9-42) [ 129 0 R /XYZ 99.933071 533.914756 0 ] (cb9-43) [ 129 0 R /XYZ 99.933071 514.967735 0 ] (cb9-44) [ 129 0 R /XYZ 99.933071 496.020714 0 ] (cb9-45) [ 129 0 R /XYZ 99.933071 477.073692 0 ] (cb9-46) [ 129 0 R /XYZ 99.933071 458.126671 0 ] (cb9-47) [ 129 0 R /XYZ 99.933071 439.179649 0 ] (cb9-48) [ 129 0 R /XYZ 99.933071 420.232628 0 ] (cb9-49) [ 129 0 R /XYZ 99.933071 401.285606 0 ] (cb9-5) [ 99 0 R /XYZ 99.933071 536.902346 0 ] (cb9-50) [ 129 0 R /XYZ 99.933071 382.338585 0 ] (cb9-51) [ 129 0 R /XYZ 99.933071 363.391563 0 ] (cb9-52) [ 129 0 R /XYZ 99.933071 344.444542 0 ] (cb9-53) [ 129 0 R /XYZ 99.933071 325.497520 0 ] (cb9-54) [ 129 0 R /XYZ 99.933071 306.550499 0 ] (cb9-55) [ 129 0 R /XYZ 99.933071 287.603477 0 ] (cb9-56) [ 129 0 R /XYZ 99.933071 268.656456 0 ] (cb9-57) [ 129 0 R /XYZ 99.933071 249.709434 0 ] (cb9-58) [ 129 0 R /XYZ 99.933071 230.762413 0 ] (cb9-59) [ 129 0 R /XYZ 99.933071 211.815391 0 ] (cb9-6) [ 99 0 R /XYZ 99.933071 499.008303 0 ] (cb9-60) [ 129 0 R /XYZ 99.933071 192.868370 0 ] (cb9-61) [ 129 0 R /XYZ 99.933071 173.921348 0 ] (cb9-62) [ 129 0 R /XYZ 99.933071 154.974327 0 ] (cb9-63) [ 129 0 R /XYZ 99.933071 136.027305 0 ] (cb9-64) [ 129 0 R /XYZ 99.933071 117.080284 0 ] (cb9-65) [ 129 0 R /XYZ 99.933071 98.133262 0 ] (cb9-66) [ 169 0 R /XYZ 99.933071 799.173057 0 ] (cb9-67) [ 169 0 R /XYZ 99.933071 780.226036 0 ] (cb9-68) [ 169 0 R /XYZ 99.933071 761.279014 0 ] (cb9-69) [ 169 0 R /XYZ 99.933071 742.331993 0 ] (cb9-7) [ 99 0 R /XYZ 99.933071 480.061281 0 ] (cb9-70) [ 169 0 R /XYZ 99.933071 723.384971 0 ] (cb9-71) [ 169 0 R /XYZ 99.933071 704.437950 0 ] (cb9-72) [ 169 0 R /XYZ 99.933071 685.490928 0 ] (cb9-73) [ 169 0 R /XYZ 99.933071 666.543907 0 ] (cb9-74) [ 169 0 R /XYZ 99.933071 647.596885 0 ] (cb9-75) [ 169 0 R /XYZ 99.933071 628.649864 0 ] (cb9-76) [ 169 0 R /XYZ 99.933071 514.967735 0 ] (cb9-77) [ 169 0 R /XYZ 99.933071 496.020714 0 ] (cb9-78) [ 169 0 R /XYZ 99.933071 477.073692 0 ] (cb9-79) [ 169 0 R /XYZ 99.933071 458.126671 0 ] (cb9-8) [ 99 0 R /XYZ 99.933071 461.114260 0 ] (cb9-80) [ 169 0 R /XYZ 99.933071 439.179649 0 ] (cb9-81) [ 169 0 R /XYZ 99.933071 420.232628 0 ] (cb9-82) [ 169 0 R /XYZ 99.933071 401.285606 0 ] (cb9-83) [ 169 0 R /XYZ 99.933071 382.338585 0 ] (cb9-84) [ 169 0 R /XYZ 99.933071 363.391563 0 ] (cb9-85) [ 169 0 R /XYZ 99.933071 344.444542 0 ] (cb9-86) [ 169 0 R /XYZ 99.933071 325.497520 0 ] (cb9-87) [ 169 0 R /XYZ 99.933071 306.550499 0 ] (cb9-88) [ 169 0 R /XYZ 99.933071 287.603477 0 ] (cb9-89) [ 169 0 R /XYZ 99.933071 268.656456 0 ] (cb9-9) [ 99 0 R /XYZ 99.933071 442.167238 0 ] (cb9-90) [ 169 0 R /XYZ 99.933071 249.709434 0 ] (cb9-91) [ 169 0 R /XYZ 99.933071 230.762413 0 ] (cb9-92) [ 169 0 R /XYZ 99.933071 211.815391 0 ] (cb9-93) [ 169 0 R /XYZ 99.933071 192.868370 0 ] (cb9-94) [ 169 0 R /XYZ 99.933071 173.921348 0 ] (cb9-95) [ 169 0 R /XYZ 99.933071 154.974327 0 ] (cb9-96) [ 169 0 R /XYZ 99.933071 136.027305 0 ] (cb9-97) [ 169 0 R /XYZ 99.933071 117.080284 0 ] (cb9-98) [ 169 0 R /XYZ 99.933071 98.133262 0 ] (cb9-99) [ 204 0 R /XYZ 99.933071 799.173057 0 ] (configure-default-service-account) [ 53 0 R /XYZ 84.259843 561.590928 0 ] (configure-etcd-user-and-group) [ 45 0 R /XYZ 84.259843 283.686971 0 ] (configure-kernel-runtime-parameters) [ 45 0 R /XYZ 84.259843 539.222079 0 ] (configure-network-policy) [ 67 0 R /XYZ 84.259843 599.840928 0 ] (contentsbox) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (create-etcd-user-and-group) [ 45 0 R /XYZ 84.259843 169.788971 0 ] (ensure-that-all-namespaces-have-network-policies-defined) [ 67 0 R /XYZ 84.259843 564.092928 0 ] (header_bottom_text) [ 6 0 R /XYZ 85.009843 422.718898 0 ] (known-issues) [ 45 0 R /XYZ 84.259843 799.370079 0 ] (overview) [ 30 0 R /XYZ 84.259843 272.631496 0 ] (reference-hardened-cloud-config-configuration) [ 515 0 R /XYZ 84.259843 385.582628 0 ] (reference-hardened-cloud-config-for-red-hat-enterprise-linux-8-rhel-8-and-ubuntu-20.04-lts) [ 538 0 R /XYZ 84.259843 360.287606 0 ] (reference-hardened-cloud-config-for-suse-linux-enterprise-server-15-sles-15-and-opensuse-leap-15) [ 515 0 R /XYZ 84.259843 245.434628 0 ] (reference-hardened-rke-cluster.yml-configuration) [ 77 0 R /XYZ 84.259843 191.441066 0 ] (reference-hardened-rke-template-configuration) [ 400 0 R /XYZ 84.259843 799.370079 0 ] (set-automountserviceaccounttoken-to-false-for-default-service-accounts) [ 53 0 R /XYZ 84.259843 522.092928 0 ] (title-block-header) [ 6 0 R /XYZ 84.259843 502.818898 0 ] ] +/Names [ (TOC) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (cb1) [ 45 0 R /XYZ 84.259843 441.572079 0 ] (cb1-1) [ 45 0 R /XYZ 101.433071 439.875057 0 ] (cb1-2) [ 45 0 R /XYZ 99.933071 420.928036 0 ] (cb1-3) [ 45 0 R /XYZ 99.933071 401.981014 0 ] (cb1-4) [ 45 0 R /XYZ 99.933071 383.033993 0 ] (cb1-5) [ 45 0 R /XYZ 99.933071 364.086971 0 ] (cb10) [ 390 0 R /XYZ 84.259843 416.811778 0 ] (cb10-1) [ 390 0 R /XYZ 101.433071 415.114756 0 ] (cb10-10) [ 390 0 R /XYZ 99.933071 244.591563 0 ] (cb10-100) [ 499 0 R /XYZ 99.933071 590.755821 0 ] (cb10-101) [ 499 0 R /XYZ 99.933071 571.808799 0 ] (cb10-102) [ 499 0 R /XYZ 99.933071 552.861778 0 ] (cb10-103) [ 499 0 R /XYZ 99.933071 533.914756 0 ] (cb10-104) [ 499 0 R /XYZ 99.933071 514.967735 0 ] (cb10-105) [ 499 0 R /XYZ 99.933071 496.020714 0 ] (cb10-106) [ 499 0 R /XYZ 99.933071 477.073692 0 ] (cb10-107) [ 499 0 R /XYZ 99.933071 458.126671 0 ] (cb10-108) [ 499 0 R /XYZ 99.933071 439.179649 0 ] (cb10-109) [ 499 0 R /XYZ 99.933071 420.232628 0 ] (cb10-11) [ 390 0 R /XYZ 99.933071 225.644542 0 ] (cb10-110) [ 499 0 R /XYZ 99.933071 401.285606 0 ] (cb10-111) [ 499 0 R /XYZ 99.933071 382.338585 0 ] (cb10-112) [ 499 0 R /XYZ 99.933071 363.391563 0 ] (cb10-113) [ 499 0 R /XYZ 99.933071 344.444542 0 ] (cb10-114) [ 499 0 R /XYZ 99.933071 325.497520 0 ] (cb10-115) [ 499 0 R /XYZ 99.933071 306.550499 0 ] (cb10-116) [ 499 0 R /XYZ 99.933071 287.603477 0 ] (cb10-117) [ 499 0 R /XYZ 99.933071 173.921348 0 ] (cb10-118) [ 499 0 R /XYZ 99.933071 154.974327 0 ] (cb10-119) [ 499 0 R /XYZ 99.933071 136.027305 0 ] (cb10-12) [ 390 0 R /XYZ 99.933071 206.697520 0 ] (cb10-120) [ 499 0 R /XYZ 99.933071 117.080284 0 ] (cb10-121) [ 499 0 R /XYZ 99.933071 98.133262 0 ] (cb10-122) [ 534 0 R /XYZ 99.933071 799.173057 0 ] (cb10-123) [ 534 0 R /XYZ 99.933071 685.490928 0 ] (cb10-124) [ 534 0 R /XYZ 99.933071 666.543907 0 ] (cb10-125) [ 534 0 R /XYZ 99.933071 647.596885 0 ] (cb10-126) [ 534 0 R /XYZ 99.933071 628.649864 0 ] (cb10-127) [ 534 0 R /XYZ 99.933071 609.702842 0 ] (cb10-128) [ 534 0 R /XYZ 99.933071 590.755821 0 ] (cb10-129) [ 534 0 R /XYZ 99.933071 571.808799 0 ] (cb10-13) [ 390 0 R /XYZ 99.933071 187.750499 0 ] (cb10-14) [ 390 0 R /XYZ 99.933071 168.803477 0 ] (cb10-15) [ 390 0 R /XYZ 99.933071 149.856456 0 ] (cb10-16) [ 390 0 R /XYZ 99.933071 130.909434 0 ] (cb10-17) [ 390 0 R /XYZ 99.933071 111.962413 0 ] (cb10-18) [ 390 0 R /XYZ 99.933071 93.015391 0 ] (cb10-19) [ 425 0 R /XYZ 99.933071 799.173057 0 ] (cb10-2) [ 390 0 R /XYZ 99.933071 396.167735 0 ] (cb10-20) [ 425 0 R /XYZ 99.933071 780.226036 0 ] (cb10-21) [ 425 0 R /XYZ 99.933071 761.279014 0 ] (cb10-22) [ 425 0 R /XYZ 99.933071 742.331993 0 ] (cb10-23) [ 425 0 R /XYZ 99.933071 723.384971 0 ] (cb10-24) [ 425 0 R /XYZ 99.933071 704.437950 0 ] (cb10-25) [ 425 0 R /XYZ 99.933071 685.490928 0 ] (cb10-26) [ 425 0 R /XYZ 99.933071 666.543907 0 ] (cb10-27) [ 425 0 R /XYZ 99.933071 647.596885 0 ] (cb10-28) [ 425 0 R /XYZ 99.933071 628.649864 0 ] (cb10-29) [ 425 0 R /XYZ 99.933071 609.702842 0 ] (cb10-3) [ 390 0 R /XYZ 99.933071 377.220714 0 ] (cb10-30) [ 425 0 R /XYZ 99.933071 571.808799 0 ] (cb10-31) [ 425 0 R /XYZ 99.933071 552.861778 0 ] (cb10-32) [ 425 0 R /XYZ 99.933071 533.914756 0 ] (cb10-33) [ 425 0 R /XYZ 99.933071 514.967735 0 ] (cb10-34) [ 425 0 R /XYZ 99.933071 496.020714 0 ] (cb10-35) [ 425 0 R /XYZ 99.933071 477.073692 0 ] (cb10-36) [ 425 0 R /XYZ 99.933071 458.126671 0 ] (cb10-37) [ 425 0 R /XYZ 99.933071 439.179649 0 ] (cb10-38) [ 425 0 R /XYZ 99.933071 420.232628 0 ] (cb10-39) [ 425 0 R /XYZ 99.933071 401.285606 0 ] (cb10-4) [ 390 0 R /XYZ 99.933071 358.273692 0 ] (cb10-40) [ 425 0 R /XYZ 99.933071 382.338585 0 ] (cb10-41) [ 425 0 R /XYZ 99.933071 363.391563 0 ] (cb10-42) [ 425 0 R /XYZ 99.933071 344.444542 0 ] (cb10-43) [ 425 0 R /XYZ 99.933071 325.497520 0 ] (cb10-44) [ 425 0 R /XYZ 99.933071 306.550499 0 ] (cb10-45) [ 425 0 R /XYZ 99.933071 287.603477 0 ] (cb10-46) [ 425 0 R /XYZ 99.933071 268.656456 0 ] (cb10-47) [ 425 0 R /XYZ 99.933071 249.709434 0 ] (cb10-48) [ 425 0 R /XYZ 99.933071 230.762413 0 ] (cb10-49) [ 425 0 R /XYZ 99.933071 211.815391 0 ] (cb10-5) [ 390 0 R /XYZ 99.933071 339.326671 0 ] (cb10-50) [ 425 0 R /XYZ 99.933071 192.868370 0 ] (cb10-51) [ 425 0 R /XYZ 99.933071 173.921348 0 ] (cb10-52) [ 425 0 R /XYZ 99.933071 154.974327 0 ] (cb10-53) [ 425 0 R /XYZ 99.933071 136.027305 0 ] (cb10-54) [ 425 0 R /XYZ 99.933071 117.080284 0 ] (cb10-55) [ 425 0 R /XYZ 99.933071 98.133262 0 ] (cb10-56) [ 464 0 R /XYZ 99.933071 799.173057 0 ] (cb10-57) [ 464 0 R /XYZ 99.933071 780.226036 0 ] (cb10-58) [ 464 0 R /XYZ 99.933071 761.279014 0 ] (cb10-59) [ 464 0 R /XYZ 99.933071 742.331993 0 ] (cb10-6) [ 390 0 R /XYZ 99.933071 320.379649 0 ] (cb10-60) [ 464 0 R /XYZ 99.933071 723.384971 0 ] (cb10-61) [ 464 0 R /XYZ 99.933071 704.437950 0 ] (cb10-62) [ 464 0 R /XYZ 99.933071 685.490928 0 ] (cb10-63) [ 464 0 R /XYZ 99.933071 666.543907 0 ] (cb10-64) [ 464 0 R /XYZ 99.933071 647.596885 0 ] (cb10-65) [ 464 0 R /XYZ 99.933071 628.649864 0 ] (cb10-66) [ 464 0 R /XYZ 99.933071 609.702842 0 ] (cb10-67) [ 464 0 R /XYZ 99.933071 590.755821 0 ] (cb10-68) [ 464 0 R /XYZ 99.933071 571.808799 0 ] (cb10-69) [ 464 0 R /XYZ 99.933071 552.861778 0 ] (cb10-7) [ 390 0 R /XYZ 99.933071 301.432628 0 ] (cb10-70) [ 464 0 R /XYZ 99.933071 533.914756 0 ] (cb10-71) [ 464 0 R /XYZ 99.933071 514.967735 0 ] (cb10-72) [ 464 0 R /XYZ 99.933071 496.020714 0 ] (cb10-73) [ 464 0 R /XYZ 99.933071 477.073692 0 ] (cb10-74) [ 464 0 R /XYZ 99.933071 458.126671 0 ] (cb10-75) [ 464 0 R /XYZ 99.933071 439.179649 0 ] (cb10-76) [ 464 0 R /XYZ 99.933071 420.232628 0 ] (cb10-77) [ 464 0 R /XYZ 99.933071 401.285606 0 ] (cb10-78) [ 464 0 R /XYZ 99.933071 382.338585 0 ] (cb10-79) [ 464 0 R /XYZ 99.933071 363.391563 0 ] (cb10-8) [ 390 0 R /XYZ 99.933071 282.485606 0 ] (cb10-80) [ 464 0 R /XYZ 99.933071 344.444542 0 ] (cb10-81) [ 464 0 R /XYZ 99.933071 325.497520 0 ] (cb10-82) [ 464 0 R /XYZ 99.933071 306.550499 0 ] (cb10-83) [ 464 0 R /XYZ 99.933071 287.603477 0 ] (cb10-84) [ 464 0 R /XYZ 99.933071 268.656456 0 ] (cb10-85) [ 464 0 R /XYZ 99.933071 249.709434 0 ] (cb10-86) [ 464 0 R /XYZ 99.933071 230.762413 0 ] (cb10-87) [ 464 0 R /XYZ 99.933071 117.080284 0 ] (cb10-88) [ 464 0 R /XYZ 99.933071 98.133262 0 ] (cb10-89) [ 499 0 R /XYZ 99.933071 799.173057 0 ] (cb10-9) [ 390 0 R /XYZ 99.933071 263.538585 0 ] (cb10-90) [ 499 0 R /XYZ 99.933071 780.226036 0 ] (cb10-91) [ 499 0 R /XYZ 99.933071 761.279014 0 ] (cb10-92) [ 499 0 R /XYZ 99.933071 742.331993 0 ] (cb10-93) [ 499 0 R /XYZ 99.933071 723.384971 0 ] (cb10-94) [ 499 0 R /XYZ 99.933071 704.437950 0 ] (cb10-95) [ 499 0 R /XYZ 99.933071 685.490928 0 ] (cb10-96) [ 499 0 R /XYZ 99.933071 666.543907 0 ] (cb10-97) [ 499 0 R /XYZ 99.933071 647.596885 0 ] (cb10-98) [ 499 0 R /XYZ 99.933071 628.649864 0 ] (cb10-99) [ 499 0 R /XYZ 99.933071 609.702842 0 ] (cb11) [ 534 0 R /XYZ 84.259843 331.262799 0 ] (cb11-1) [ 534 0 R /XYZ 101.433071 329.565778 0 ] (cb11-10) [ 534 0 R /XYZ 99.933071 159.042585 0 ] (cb11-11) [ 534 0 R /XYZ 99.933071 140.095563 0 ] (cb11-12) [ 534 0 R /XYZ 99.933071 121.148542 0 ] (cb11-13) [ 534 0 R /XYZ 99.933071 102.201520 0 ] (cb11-14) [ 557 0 R /XYZ 99.933071 799.173057 0 ] (cb11-15) [ 557 0 R /XYZ 99.933071 780.226036 0 ] (cb11-16) [ 557 0 R /XYZ 99.933071 761.279014 0 ] (cb11-17) [ 557 0 R /XYZ 99.933071 742.331993 0 ] (cb11-18) [ 557 0 R /XYZ 99.933071 723.384971 0 ] (cb11-19) [ 557 0 R /XYZ 99.933071 704.437950 0 ] (cb11-2) [ 534 0 R /XYZ 99.933071 310.618756 0 ] (cb11-20) [ 557 0 R /XYZ 99.933071 685.490928 0 ] (cb11-21) [ 557 0 R /XYZ 99.933071 666.543907 0 ] (cb11-22) [ 557 0 R /XYZ 99.933071 647.596885 0 ] (cb11-23) [ 557 0 R /XYZ 99.933071 628.649864 0 ] (cb11-24) [ 557 0 R /XYZ 99.933071 609.702842 0 ] (cb11-25) [ 557 0 R /XYZ 99.933071 590.755821 0 ] (cb11-26) [ 557 0 R /XYZ 99.933071 571.808799 0 ] (cb11-3) [ 534 0 R /XYZ 99.933071 291.671735 0 ] (cb11-4) [ 534 0 R /XYZ 99.933071 272.724714 0 ] (cb11-5) [ 534 0 R /XYZ 99.933071 253.777692 0 ] (cb11-6) [ 534 0 R /XYZ 99.933071 234.830671 0 ] (cb11-7) [ 534 0 R /XYZ 99.933071 215.883649 0 ] (cb11-8) [ 534 0 R /XYZ 99.933071 196.936628 0 ] (cb11-9) [ 534 0 R /XYZ 99.933071 177.989606 0 ] (cb12) [ 557 0 R /XYZ 84.259843 446.115778 0 ] (cb12-1) [ 557 0 R /XYZ 101.433071 444.418756 0 ] (cb12-10) [ 557 0 R /XYZ 99.933071 273.895563 0 ] (cb12-11) [ 557 0 R /XYZ 99.933071 254.948542 0 ] (cb12-12) [ 557 0 R /XYZ 99.933071 236.001520 0 ] (cb12-13) [ 557 0 R /XYZ 99.933071 217.054499 0 ] (cb12-14) [ 557 0 R /XYZ 99.933071 198.107477 0 ] (cb12-15) [ 557 0 R /XYZ 99.933071 179.160456 0 ] (cb12-16) [ 557 0 R /XYZ 99.933071 160.213434 0 ] (cb12-17) [ 557 0 R /XYZ 99.933071 141.266413 0 ] (cb12-18) [ 557 0 R /XYZ 99.933071 122.319391 0 ] (cb12-19) [ 557 0 R /XYZ 99.933071 103.372370 0 ] (cb12-2) [ 557 0 R /XYZ 99.933071 425.471735 0 ] (cb12-20) [ 591 0 R /XYZ 99.933071 780.226036 0 ] (cb12-21) [ 591 0 R /XYZ 99.933071 742.331993 0 ] (cb12-22) [ 591 0 R /XYZ 99.933071 723.384971 0 ] (cb12-23) [ 591 0 R /XYZ 99.933071 704.437950 0 ] (cb12-3) [ 557 0 R /XYZ 99.933071 406.524714 0 ] (cb12-4) [ 557 0 R /XYZ 99.933071 387.577692 0 ] (cb12-5) [ 557 0 R /XYZ 99.933071 368.630671 0 ] (cb12-6) [ 557 0 R /XYZ 99.933071 349.683649 0 ] (cb12-7) [ 557 0 R /XYZ 99.933071 330.736628 0 ] (cb12-8) [ 557 0 R /XYZ 99.933071 311.789606 0 ] (cb12-9) [ 557 0 R /XYZ 99.933071 292.842585 0 ] (cb2) [ 53 0 R /XYZ 84.259843 753.620079 0 ] (cb2-1) [ 53 0 R /XYZ 101.433071 751.923057 0 ] (cb2-2) [ 53 0 R /XYZ 99.933071 732.976036 0 ] (cb3) [ 53 0 R /XYZ 84.259843 654.779014 0 ] (cb3-1) [ 53 0 R /XYZ 101.433071 653.081993 0 ] (cb3-2) [ 53 0 R /XYZ 99.933071 634.134971 0 ] (cb3-3) [ 53 0 R /XYZ 99.933071 615.187950 0 ] (cb3-4) [ 53 0 R /XYZ 99.933071 596.240928 0 ] (cb4) [ 53 0 R /XYZ 84.259843 282.344928 0 ] (cb4-1) [ 53 0 R /XYZ 101.433071 280.647907 0 ] (cb5) [ 53 0 R /XYZ 84.259843 217.647907 0 ] (cb5-1) [ 53 0 R /XYZ 101.433071 215.950885 0 ] (cb5-2) [ 53 0 R /XYZ 99.933071 197.003864 0 ] (cb5-3) [ 53 0 R /XYZ 99.933071 178.056842 0 ] (cb5-4) [ 53 0 R /XYZ 99.933071 159.109821 0 ] (cb5-5) [ 53 0 R /XYZ 99.933071 140.162799 0 ] (cb6) [ 67 0 R /XYZ 84.259843 749.870079 0 ] (cb6-1) [ 67 0 R /XYZ 101.433071 748.173057 0 ] (cb6-2) [ 67 0 R /XYZ 99.933071 729.226036 0 ] (cb6-3) [ 67 0 R /XYZ 99.933071 710.279014 0 ] (cb6-4) [ 67 0 R /XYZ 99.933071 672.384971 0 ] (cb6-5) [ 67 0 R /XYZ 99.933071 634.490928 0 ] (cb7) [ 77 0 R /XYZ 84.259843 716.781496 0 ] (cb7-1) [ 77 0 R /XYZ 101.433071 715.084475 0 ] (cb7-10) [ 77 0 R /XYZ 99.933071 544.561281 0 ] (cb7-11) [ 77 0 R /XYZ 99.933071 525.614260 0 ] (cb7-12) [ 77 0 R /XYZ 99.933071 506.667238 0 ] (cb7-13) [ 77 0 R /XYZ 99.933071 487.720217 0 ] (cb7-14) [ 77 0 R /XYZ 99.933071 468.773195 0 ] (cb7-2) [ 77 0 R /XYZ 99.933071 696.137453 0 ] (cb7-3) [ 77 0 R /XYZ 99.933071 677.190432 0 ] (cb7-4) [ 77 0 R /XYZ 99.933071 658.243410 0 ] (cb7-5) [ 77 0 R /XYZ 99.933071 639.296389 0 ] (cb7-6) [ 77 0 R /XYZ 99.933071 620.349367 0 ] (cb7-7) [ 77 0 R /XYZ 99.933071 601.402346 0 ] (cb7-8) [ 77 0 R /XYZ 99.933071 582.455324 0 ] (cb7-9) [ 77 0 R /XYZ 99.933071 563.508303 0 ] (cb8) [ 77 0 R /XYZ 84.259843 372.023195 0 ] (cb8-1) [ 77 0 R /XYZ 101.433071 370.326174 0 ] (cb8-2) [ 77 0 R /XYZ 99.933071 351.379152 0 ] (cb8-3) [ 77 0 R /XYZ 99.933071 332.432131 0 ] (cb8-4) [ 77 0 R /XYZ 99.933071 294.538088 0 ] (cb8-5) [ 77 0 R /XYZ 99.933071 275.591066 0 ] (cb9) [ 99 0 R /XYZ 84.259843 652.281496 0 ] (cb9-1) [ 99 0 R /XYZ 101.433071 650.584475 0 ] (cb9-10) [ 99 0 R /XYZ 99.933071 423.220217 0 ] (cb9-100) [ 194 0 R /XYZ 99.933071 590.755821 0 ] (cb9-101) [ 194 0 R /XYZ 99.933071 571.808799 0 ] (cb9-102) [ 194 0 R /XYZ 99.933071 552.861778 0 ] (cb9-103) [ 194 0 R /XYZ 99.933071 533.914756 0 ] (cb9-104) [ 194 0 R /XYZ 99.933071 514.967735 0 ] (cb9-105) [ 194 0 R /XYZ 99.933071 496.020714 0 ] (cb9-106) [ 194 0 R /XYZ 99.933071 477.073692 0 ] (cb9-107) [ 194 0 R /XYZ 99.933071 458.126671 0 ] (cb9-108) [ 194 0 R /XYZ 99.933071 439.179649 0 ] (cb9-109) [ 194 0 R /XYZ 99.933071 420.232628 0 ] (cb9-11) [ 99 0 R /XYZ 99.933071 404.273195 0 ] (cb9-110) [ 194 0 R /XYZ 99.933071 401.285606 0 ] (cb9-111) [ 194 0 R /XYZ 99.933071 344.444542 0 ] (cb9-112) [ 194 0 R /XYZ 99.933071 325.497520 0 ] (cb9-113) [ 194 0 R /XYZ 99.933071 306.550499 0 ] (cb9-114) [ 194 0 R /XYZ 99.933071 287.603477 0 ] (cb9-115) [ 194 0 R /XYZ 99.933071 268.656456 0 ] (cb9-116) [ 194 0 R /XYZ 99.933071 249.709434 0 ] (cb9-117) [ 194 0 R /XYZ 99.933071 230.762413 0 ] (cb9-118) [ 194 0 R /XYZ 99.933071 211.815391 0 ] (cb9-119) [ 194 0 R /XYZ 99.933071 192.868370 0 ] (cb9-12) [ 99 0 R /XYZ 99.933071 385.326174 0 ] (cb9-120) [ 194 0 R /XYZ 99.933071 173.921348 0 ] (cb9-121) [ 194 0 R /XYZ 99.933071 154.974327 0 ] (cb9-122) [ 194 0 R /XYZ 99.933071 136.027305 0 ] (cb9-123) [ 194 0 R /XYZ 99.933071 117.080284 0 ] (cb9-124) [ 194 0 R /XYZ 99.933071 98.133262 0 ] (cb9-125) [ 232 0 R /XYZ 99.933071 799.173057 0 ] (cb9-126) [ 232 0 R /XYZ 99.933071 780.226036 0 ] (cb9-127) [ 232 0 R /XYZ 99.933071 761.279014 0 ] (cb9-128) [ 232 0 R /XYZ 99.933071 742.331993 0 ] (cb9-129) [ 232 0 R /XYZ 99.933071 704.437950 0 ] (cb9-13) [ 99 0 R /XYZ 99.933071 366.379152 0 ] (cb9-130) [ 232 0 R /XYZ 99.933071 685.490928 0 ] (cb9-131) [ 232 0 R /XYZ 99.933071 666.543907 0 ] (cb9-132) [ 232 0 R /XYZ 99.933071 647.596885 0 ] (cb9-133) [ 232 0 R /XYZ 99.933071 628.649864 0 ] (cb9-134) [ 232 0 R /XYZ 99.933071 609.702842 0 ] (cb9-135) [ 232 0 R /XYZ 99.933071 590.755821 0 ] (cb9-136) [ 232 0 R /XYZ 99.933071 571.808799 0 ] (cb9-137) [ 232 0 R /XYZ 99.933071 552.861778 0 ] (cb9-138) [ 232 0 R /XYZ 99.933071 533.914756 0 ] (cb9-139) [ 232 0 R /XYZ 99.933071 514.967735 0 ] (cb9-14) [ 99 0 R /XYZ 99.933071 347.432131 0 ] (cb9-140) [ 232 0 R /XYZ 99.933071 477.073692 0 ] (cb9-141) [ 232 0 R /XYZ 99.933071 458.126671 0 ] (cb9-142) [ 232 0 R /XYZ 99.933071 439.179649 0 ] (cb9-143) [ 232 0 R /XYZ 99.933071 420.232628 0 ] (cb9-144) [ 232 0 R /XYZ 99.933071 401.285606 0 ] (cb9-145) [ 232 0 R /XYZ 99.933071 382.338585 0 ] (cb9-146) [ 232 0 R /XYZ 99.933071 363.391563 0 ] (cb9-147) [ 232 0 R /XYZ 99.933071 344.444542 0 ] (cb9-148) [ 232 0 R /XYZ 99.933071 325.497520 0 ] (cb9-149) [ 232 0 R /XYZ 99.933071 306.550499 0 ] (cb9-15) [ 99 0 R /XYZ 99.933071 328.485109 0 ] (cb9-150) [ 232 0 R /XYZ 99.933071 287.603477 0 ] (cb9-151) [ 232 0 R /XYZ 99.933071 268.656456 0 ] (cb9-152) [ 232 0 R /XYZ 99.933071 249.709434 0 ] (cb9-153) [ 232 0 R /XYZ 99.933071 230.762413 0 ] (cb9-154) [ 232 0 R /XYZ 99.933071 211.815391 0 ] (cb9-155) [ 232 0 R /XYZ 99.933071 192.868370 0 ] (cb9-156) [ 232 0 R /XYZ 99.933071 173.921348 0 ] (cb9-157) [ 232 0 R /XYZ 99.933071 154.974327 0 ] (cb9-158) [ 232 0 R /XYZ 99.933071 136.027305 0 ] (cb9-159) [ 232 0 R /XYZ 99.933071 117.080284 0 ] (cb9-16) [ 99 0 R /XYZ 99.933071 309.538088 0 ] (cb9-160) [ 232 0 R /XYZ 99.933071 98.133262 0 ] (cb9-161) [ 270 0 R /XYZ 99.933071 799.173057 0 ] (cb9-162) [ 270 0 R /XYZ 99.933071 780.226036 0 ] (cb9-163) [ 270 0 R /XYZ 99.933071 761.279014 0 ] (cb9-164) [ 270 0 R /XYZ 99.933071 742.331993 0 ] (cb9-165) [ 270 0 R /XYZ 99.933071 723.384971 0 ] (cb9-166) [ 270 0 R /XYZ 99.933071 704.437950 0 ] (cb9-167) [ 270 0 R /XYZ 99.933071 685.490928 0 ] (cb9-168) [ 270 0 R /XYZ 99.933071 666.543907 0 ] (cb9-169) [ 270 0 R /XYZ 99.933071 647.596885 0 ] (cb9-17) [ 99 0 R /XYZ 99.933071 290.591066 0 ] (cb9-170) [ 270 0 R /XYZ 99.933071 628.649864 0 ] (cb9-171) [ 270 0 R /XYZ 99.933071 609.702842 0 ] (cb9-172) [ 270 0 R /XYZ 99.933071 590.755821 0 ] (cb9-173) [ 270 0 R /XYZ 99.933071 571.808799 0 ] (cb9-174) [ 270 0 R /XYZ 99.933071 552.861778 0 ] (cb9-175) [ 270 0 R /XYZ 99.933071 533.914756 0 ] (cb9-176) [ 270 0 R /XYZ 99.933071 514.967735 0 ] (cb9-177) [ 270 0 R /XYZ 99.933071 496.020714 0 ] (cb9-178) [ 270 0 R /XYZ 99.933071 477.073692 0 ] (cb9-179) [ 270 0 R /XYZ 99.933071 458.126671 0 ] (cb9-18) [ 99 0 R /XYZ 99.933071 271.644045 0 ] (cb9-180) [ 270 0 R /XYZ 99.933071 439.179649 0 ] (cb9-181) [ 270 0 R /XYZ 99.933071 420.232628 0 ] (cb9-182) [ 270 0 R /XYZ 99.933071 401.285606 0 ] (cb9-183) [ 270 0 R /XYZ 99.933071 382.338585 0 ] (cb9-184) [ 270 0 R /XYZ 99.933071 363.391563 0 ] (cb9-185) [ 270 0 R /XYZ 99.933071 344.444542 0 ] (cb9-186) [ 270 0 R /XYZ 99.933071 325.497520 0 ] (cb9-187) [ 270 0 R /XYZ 99.933071 306.550499 0 ] (cb9-188) [ 270 0 R /XYZ 99.933071 287.603477 0 ] (cb9-189) [ 270 0 R /XYZ 99.933071 268.656456 0 ] (cb9-19) [ 99 0 R /XYZ 99.933071 252.697023 0 ] (cb9-190) [ 270 0 R /XYZ 99.933071 249.709434 0 ] (cb9-191) [ 270 0 R /XYZ 99.933071 230.762413 0 ] (cb9-192) [ 270 0 R /XYZ 99.933071 211.815391 0 ] (cb9-193) [ 270 0 R /XYZ 99.933071 192.868370 0 ] (cb9-194) [ 270 0 R /XYZ 99.933071 173.921348 0 ] (cb9-195) [ 270 0 R /XYZ 99.933071 154.974327 0 ] (cb9-196) [ 270 0 R /XYZ 99.933071 136.027305 0 ] (cb9-197) [ 270 0 R /XYZ 99.933071 117.080284 0 ] (cb9-198) [ 270 0 R /XYZ 99.933071 98.133262 0 ] (cb9-199) [ 310 0 R /XYZ 99.933071 799.173057 0 ] (cb9-2) [ 99 0 R /XYZ 99.933071 612.690432 0 ] (cb9-20) [ 99 0 R /XYZ 99.933071 233.750002 0 ] (cb9-200) [ 310 0 R /XYZ 99.933071 780.226036 0 ] (cb9-201) [ 310 0 R /XYZ 99.933071 761.279014 0 ] (cb9-202) [ 310 0 R /XYZ 99.933071 742.331993 0 ] (cb9-203) [ 310 0 R /XYZ 99.933071 723.384971 0 ] (cb9-204) [ 310 0 R /XYZ 99.933071 704.437950 0 ] (cb9-205) [ 310 0 R /XYZ 99.933071 685.490928 0 ] (cb9-206) [ 310 0 R /XYZ 99.933071 666.543907 0 ] (cb9-207) [ 310 0 R /XYZ 99.933071 647.596885 0 ] (cb9-208) [ 310 0 R /XYZ 99.933071 628.649864 0 ] (cb9-209) [ 310 0 R /XYZ 99.933071 609.702842 0 ] (cb9-21) [ 99 0 R /XYZ 99.933071 214.802980 0 ] (cb9-210) [ 310 0 R /XYZ 99.933071 590.755821 0 ] (cb9-211) [ 310 0 R /XYZ 99.933071 571.808799 0 ] (cb9-212) [ 310 0 R /XYZ 99.933071 552.861778 0 ] (cb9-213) [ 310 0 R /XYZ 99.933071 533.914756 0 ] (cb9-214) [ 310 0 R /XYZ 99.933071 514.967735 0 ] (cb9-215) [ 310 0 R /XYZ 99.933071 496.020714 0 ] (cb9-216) [ 310 0 R /XYZ 99.933071 477.073692 0 ] (cb9-217) [ 310 0 R /XYZ 99.933071 458.126671 0 ] (cb9-218) [ 310 0 R /XYZ 99.933071 439.179649 0 ] (cb9-219) [ 310 0 R /XYZ 99.933071 420.232628 0 ] (cb9-22) [ 99 0 R /XYZ 99.933071 195.855959 0 ] (cb9-220) [ 310 0 R /XYZ 99.933071 401.285606 0 ] (cb9-221) [ 310 0 R /XYZ 99.933071 382.338585 0 ] (cb9-222) [ 310 0 R /XYZ 99.933071 363.391563 0 ] (cb9-223) [ 310 0 R /XYZ 99.933071 344.444542 0 ] (cb9-224) [ 310 0 R /XYZ 99.933071 325.497520 0 ] (cb9-225) [ 310 0 R /XYZ 99.933071 306.550499 0 ] (cb9-226) [ 310 0 R /XYZ 99.933071 287.603477 0 ] (cb9-227) [ 310 0 R /XYZ 99.933071 268.656456 0 ] (cb9-228) [ 310 0 R /XYZ 99.933071 249.709434 0 ] (cb9-229) [ 310 0 R /XYZ 99.933071 230.762413 0 ] (cb9-23) [ 99 0 R /XYZ 99.933071 176.908937 0 ] (cb9-230) [ 310 0 R /XYZ 99.933071 211.815391 0 ] (cb9-231) [ 310 0 R /XYZ 99.933071 192.868370 0 ] (cb9-232) [ 310 0 R /XYZ 99.933071 173.921348 0 ] (cb9-233) [ 310 0 R /XYZ 99.933071 154.974327 0 ] (cb9-234) [ 310 0 R /XYZ 99.933071 136.027305 0 ] (cb9-235) [ 310 0 R /XYZ 99.933071 117.080284 0 ] (cb9-236) [ 310 0 R /XYZ 99.933071 98.133262 0 ] (cb9-237) [ 350 0 R /XYZ 99.933071 799.173057 0 ] (cb9-238) [ 350 0 R /XYZ 99.933071 780.226036 0 ] (cb9-239) [ 350 0 R /XYZ 99.933071 761.279014 0 ] (cb9-24) [ 99 0 R /XYZ 99.933071 157.961916 0 ] (cb9-240) [ 350 0 R /XYZ 99.933071 742.331993 0 ] (cb9-241) [ 350 0 R /XYZ 99.933071 723.384971 0 ] (cb9-242) [ 350 0 R /XYZ 99.933071 704.437950 0 ] (cb9-243) [ 350 0 R /XYZ 99.933071 685.490928 0 ] (cb9-244) [ 350 0 R /XYZ 99.933071 666.543907 0 ] (cb9-245) [ 350 0 R /XYZ 99.933071 647.596885 0 ] (cb9-246) [ 350 0 R /XYZ 99.933071 628.649864 0 ] (cb9-247) [ 350 0 R /XYZ 99.933071 609.702842 0 ] (cb9-248) [ 350 0 R /XYZ 99.933071 590.755821 0 ] (cb9-249) [ 350 0 R /XYZ 99.933071 571.808799 0 ] (cb9-25) [ 99 0 R /XYZ 99.933071 139.014895 0 ] (cb9-250) [ 350 0 R /XYZ 99.933071 552.861778 0 ] (cb9-251) [ 350 0 R /XYZ 99.933071 533.914756 0 ] (cb9-252) [ 350 0 R /XYZ 99.933071 514.967735 0 ] (cb9-253) [ 350 0 R /XYZ 99.933071 496.020714 0 ] (cb9-254) [ 350 0 R /XYZ 99.933071 477.073692 0 ] (cb9-255) [ 350 0 R /XYZ 99.933071 458.126671 0 ] (cb9-256) [ 350 0 R /XYZ 99.933071 439.179649 0 ] (cb9-257) [ 350 0 R /XYZ 99.933071 420.232628 0 ] (cb9-258) [ 350 0 R /XYZ 99.933071 401.285606 0 ] (cb9-259) [ 350 0 R /XYZ 99.933071 382.338585 0 ] (cb9-26) [ 99 0 R /XYZ 99.933071 120.067873 0 ] (cb9-260) [ 350 0 R /XYZ 99.933071 363.391563 0 ] (cb9-261) [ 350 0 R /XYZ 99.933071 344.444542 0 ] (cb9-262) [ 350 0 R /XYZ 99.933071 325.497520 0 ] (cb9-263) [ 350 0 R /XYZ 99.933071 306.550499 0 ] (cb9-264) [ 350 0 R /XYZ 99.933071 287.603477 0 ] (cb9-265) [ 350 0 R /XYZ 99.933071 268.656456 0 ] (cb9-266) [ 350 0 R /XYZ 99.933071 249.709434 0 ] (cb9-267) [ 350 0 R /XYZ 99.933071 230.762413 0 ] (cb9-268) [ 350 0 R /XYZ 99.933071 211.815391 0 ] (cb9-269) [ 350 0 R /XYZ 99.933071 192.868370 0 ] (cb9-27) [ 99 0 R /XYZ 99.933071 101.120852 0 ] (cb9-270) [ 350 0 R /XYZ 99.933071 173.921348 0 ] (cb9-271) [ 350 0 R /XYZ 99.933071 154.974327 0 ] (cb9-272) [ 350 0 R /XYZ 99.933071 136.027305 0 ] (cb9-273) [ 350 0 R /XYZ 99.933071 117.080284 0 ] (cb9-274) [ 350 0 R /XYZ 99.933071 98.133262 0 ] (cb9-275) [ 390 0 R /XYZ 99.933071 799.173057 0 ] (cb9-276) [ 390 0 R /XYZ 99.933071 780.226036 0 ] (cb9-277) [ 390 0 R /XYZ 99.933071 761.279014 0 ] (cb9-278) [ 390 0 R /XYZ 99.933071 742.331993 0 ] (cb9-279) [ 390 0 R /XYZ 99.933071 723.384971 0 ] (cb9-28) [ 129 0 R /XYZ 99.933071 799.173057 0 ] (cb9-280) [ 390 0 R /XYZ 99.933071 704.437950 0 ] (cb9-281) [ 390 0 R /XYZ 99.933071 685.490928 0 ] (cb9-282) [ 390 0 R /XYZ 99.933071 666.543907 0 ] (cb9-283) [ 390 0 R /XYZ 99.933071 647.596885 0 ] (cb9-284) [ 390 0 R /XYZ 99.933071 628.649864 0 ] (cb9-285) [ 390 0 R /XYZ 99.933071 609.702842 0 ] (cb9-286) [ 390 0 R /XYZ 99.933071 590.755821 0 ] (cb9-287) [ 390 0 R /XYZ 99.933071 571.808799 0 ] (cb9-288) [ 390 0 R /XYZ 99.933071 552.861778 0 ] (cb9-29) [ 129 0 R /XYZ 99.933071 780.226036 0 ] (cb9-3) [ 99 0 R /XYZ 99.933071 574.796389 0 ] (cb9-30) [ 129 0 R /XYZ 99.933071 761.279014 0 ] (cb9-31) [ 129 0 R /XYZ 99.933071 742.331993 0 ] (cb9-32) [ 129 0 R /XYZ 99.933071 723.384971 0 ] (cb9-33) [ 129 0 R /XYZ 99.933071 704.437950 0 ] (cb9-34) [ 129 0 R /XYZ 99.933071 685.490928 0 ] (cb9-35) [ 129 0 R /XYZ 99.933071 666.543907 0 ] (cb9-36) [ 129 0 R /XYZ 99.933071 647.596885 0 ] (cb9-37) [ 129 0 R /XYZ 99.933071 628.649864 0 ] (cb9-38) [ 129 0 R /XYZ 99.933071 609.702842 0 ] (cb9-39) [ 129 0 R /XYZ 99.933071 590.755821 0 ] (cb9-4) [ 99 0 R /XYZ 99.933071 555.849367 0 ] (cb9-40) [ 129 0 R /XYZ 99.933071 571.808799 0 ] (cb9-41) [ 129 0 R /XYZ 99.933071 552.861778 0 ] (cb9-42) [ 129 0 R /XYZ 99.933071 533.914756 0 ] (cb9-43) [ 129 0 R /XYZ 99.933071 514.967735 0 ] (cb9-44) [ 129 0 R /XYZ 99.933071 496.020714 0 ] (cb9-45) [ 129 0 R /XYZ 99.933071 477.073692 0 ] (cb9-46) [ 129 0 R /XYZ 99.933071 458.126671 0 ] (cb9-47) [ 129 0 R /XYZ 99.933071 439.179649 0 ] (cb9-48) [ 129 0 R /XYZ 99.933071 420.232628 0 ] (cb9-49) [ 129 0 R /XYZ 99.933071 401.285606 0 ] (cb9-5) [ 99 0 R /XYZ 99.933071 536.902346 0 ] (cb9-50) [ 129 0 R /XYZ 99.933071 382.338585 0 ] (cb9-51) [ 129 0 R /XYZ 99.933071 363.391563 0 ] (cb9-52) [ 129 0 R /XYZ 99.933071 344.444542 0 ] (cb9-53) [ 129 0 R /XYZ 99.933071 325.497520 0 ] (cb9-54) [ 129 0 R /XYZ 99.933071 306.550499 0 ] (cb9-55) [ 129 0 R /XYZ 99.933071 287.603477 0 ] (cb9-56) [ 129 0 R /XYZ 99.933071 173.921348 0 ] (cb9-57) [ 129 0 R /XYZ 99.933071 154.974327 0 ] (cb9-58) [ 129 0 R /XYZ 99.933071 136.027305 0 ] (cb9-59) [ 129 0 R /XYZ 99.933071 117.080284 0 ] (cb9-6) [ 99 0 R /XYZ 99.933071 499.008303 0 ] (cb9-60) [ 129 0 R /XYZ 99.933071 98.133262 0 ] (cb9-61) [ 164 0 R /XYZ 99.933071 799.173057 0 ] (cb9-62) [ 164 0 R /XYZ 99.933071 780.226036 0 ] (cb9-63) [ 164 0 R /XYZ 99.933071 761.279014 0 ] (cb9-64) [ 164 0 R /XYZ 99.933071 742.331993 0 ] (cb9-65) [ 164 0 R /XYZ 99.933071 723.384971 0 ] (cb9-66) [ 164 0 R /XYZ 99.933071 704.437950 0 ] (cb9-67) [ 164 0 R /XYZ 99.933071 685.490928 0 ] (cb9-68) [ 164 0 R /XYZ 99.933071 571.808799 0 ] (cb9-69) [ 164 0 R /XYZ 99.933071 552.861778 0 ] (cb9-7) [ 99 0 R /XYZ 99.933071 480.061281 0 ] (cb9-70) [ 164 0 R /XYZ 99.933071 533.914756 0 ] (cb9-71) [ 164 0 R /XYZ 99.933071 514.967735 0 ] (cb9-72) [ 164 0 R /XYZ 99.933071 496.020714 0 ] (cb9-73) [ 164 0 R /XYZ 99.933071 477.073692 0 ] (cb9-74) [ 164 0 R /XYZ 99.933071 458.126671 0 ] (cb9-75) [ 164 0 R /XYZ 99.933071 439.179649 0 ] (cb9-76) [ 164 0 R /XYZ 99.933071 420.232628 0 ] (cb9-77) [ 164 0 R /XYZ 99.933071 401.285606 0 ] (cb9-78) [ 164 0 R /XYZ 99.933071 382.338585 0 ] (cb9-79) [ 164 0 R /XYZ 99.933071 363.391563 0 ] (cb9-8) [ 99 0 R /XYZ 99.933071 461.114260 0 ] (cb9-80) [ 164 0 R /XYZ 99.933071 249.709434 0 ] (cb9-81) [ 164 0 R /XYZ 99.933071 230.762413 0 ] (cb9-82) [ 164 0 R /XYZ 99.933071 211.815391 0 ] (cb9-83) [ 164 0 R /XYZ 99.933071 192.868370 0 ] (cb9-84) [ 164 0 R /XYZ 99.933071 173.921348 0 ] (cb9-85) [ 164 0 R /XYZ 99.933071 154.974327 0 ] (cb9-86) [ 164 0 R /XYZ 99.933071 136.027305 0 ] (cb9-87) [ 164 0 R /XYZ 99.933071 117.080284 0 ] (cb9-88) [ 164 0 R /XYZ 99.933071 98.133262 0 ] (cb9-89) [ 194 0 R /XYZ 99.933071 799.173057 0 ] (cb9-9) [ 99 0 R /XYZ 99.933071 442.167238 0 ] (cb9-90) [ 194 0 R /XYZ 99.933071 780.226036 0 ] (cb9-91) [ 194 0 R /XYZ 99.933071 761.279014 0 ] (cb9-92) [ 194 0 R /XYZ 99.933071 742.331993 0 ] (cb9-93) [ 194 0 R /XYZ 99.933071 723.384971 0 ] (cb9-94) [ 194 0 R /XYZ 99.933071 704.437950 0 ] (cb9-95) [ 194 0 R /XYZ 99.933071 685.490928 0 ] (cb9-96) [ 194 0 R /XYZ 99.933071 666.543907 0 ] (cb9-97) [ 194 0 R /XYZ 99.933071 647.596885 0 ] (cb9-98) [ 194 0 R /XYZ 99.933071 628.649864 0 ] (cb9-99) [ 194 0 R /XYZ 99.933071 609.702842 0 ] (configure-default-service-account) [ 53 0 R /XYZ 84.259843 561.590928 0 ] (configure-etcd-user-and-group) [ 45 0 R /XYZ 84.259843 283.686971 0 ] (configure-kernel-runtime-parameters) [ 45 0 R /XYZ 84.259843 539.222079 0 ] (configure-network-policy) [ 67 0 R /XYZ 84.259843 599.840928 0 ] (contentsbox) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (create-etcd-user-and-group) [ 45 0 R /XYZ 84.259843 169.788971 0 ] (ensure-that-all-namespaces-have-network-policies-defined) [ 67 0 R /XYZ 84.259843 564.092928 0 ] (header_bottom_text) [ 6 0 R /XYZ 85.009843 422.718898 0 ] (known-issues) [ 45 0 R /XYZ 84.259843 799.370079 0 ] (overview) [ 30 0 R /XYZ 84.259843 272.631496 0 ] (reference-hardened-cloud-config-configuration) [ 534 0 R /XYZ 84.259843 537.158799 0 ] (reference-hardened-cloud-config-for-red-hat-enterprise-linux-8-rhel-8-and-ubuntu-20.04-lts) [ 557 0 R /XYZ 84.259843 511.863778 0 ] (reference-hardened-cloud-config-for-suse-linux-enterprise-server-15-sles-15-and-opensuse-leap-15) [ 534 0 R /XYZ 84.259843 397.010799 0 ] (reference-hardened-rke-cluster.yml-configuration) [ 77 0 R /XYZ 84.259843 191.441066 0 ] (reference-hardened-rke-template-configuration) [ 390 0 R /XYZ 84.259843 518.211778 0 ] (set-automountserviceaccounttoken-to-false-for-default-service-accounts) [ 53 0 R /XYZ 84.259843 522.092928 0 ] (title-block-header) [ 6 0 R /XYZ 84.259843 502.818898 0 ] ] >> >> >> @@ -42,22 +42,22 @@ endobj >> /Shading << >> -/Font 621 0 R +/Font 632 0 R >> endobj 5 0 obj << /Filter /FlateDecode -/Length 2579 +/Length 2578 >> stream -xˎd 602%R^I N"b\AOqy:UT?.tw9⑨Yz-V/oONj=|b5؊.j˩ ^4ϧ}q5Bk%|2 kLT *JT9ZS.DUb#T0#WK0Úg Q`Fј +xˎd 602%R^8 ;0 dad1.'8~~*]럋IDHGRU,x{Η7' 5 ~wCw|b5؊.j˩ ^4ϧ|v5Bk%|Ǯ2 kLT *JT9ZS.DUb#T0#WK0Úg Q`Fј fĖ+QE1P 3MDs(t)-5ŚN5j1Gk &2lLze[PlI^*lIFt[]NuEDkrs3kЉW%!0]!7갣H]-Er:ؒU)l1ZnM}whd [RFu lZBc@5XK \9@VeH-+2DRd P- #FbعT[c&؂%2(hknMZd,P$pa0(^@\Rc,P0WNt+cKb,P`W cjQ UŕT[cX`Fb%jJHX`nr1wSEݔ,r)Kb,0p7Y*p] $t%e,BBZXȞBV 2Gu-Ċ'b) TX]  2ݘ0dpyCf,;-DR]  2 ,%D P] pXAXP]XP]ɪCCuE=1 ۖi$AHtD0Ӂ"1pMƂR 9c ȂcAq XP@J@;3T YT[cд9cAMESb, e`,@FZDMwd YfXPsA=YeWX jP PKǦg,CO `t j-*E2sI6c2]bd,[ 2xrTE QKbΤיXVBO MPiT[ O/3c(sh6Mg,p-Ic|כ lAXФ&3Љ071`_z -Mxd6-ެ`KFBuIS#LB :1]-cA+כX4&2zz$ެ db:pia,@&2[V +3^q:=17##{*=3HfBO VB E>fL>GTP3l~|O_A=_'ej֥\ow~~\?&s;Qeц2=cb7 }᧞<<|dW髾Z;uRpޞ_=po R$bE)hcr4ٯѯ[.!A~qx6= DzTcӉu?aj^T3`9YwP'tֶ\2"ގXKF;)\Pz"\ЏO@^`}i}[Dzoݩ;UIMX[:hvYRcz1!+w|\zӥָw, 6>"lƞ\ϲ#`bl`@\DqʼJBv9ExZ{޶ys-IYqY1Hhu_LGqzAx`zki -6놶]7\~TU6a~6'^?̩+K8Mߧ.n?-燄՗g*PVcvL7ڔs.u"ˉ_ɸa1~[_>f6DJץm2ex";&mW`57Ax9!)W;/VH u,YR䟷 WT)9ޠ(jf }oN$2clwX} ߡ;{nSkuHMx܋)3Y e8OW~/;ܪY`%n}Lv>:W҈ԥf[[7[mw?{{u\҉)}ޥtKh9zy {t&9kknR_:}PAGLlޱ1-;:s%i鼯ʜļJy;"̖t&@yw纞NVϙK:)Sql{D )+3uY~YClX:N00D7XoGqfL>GTP3l~|췟OF=O'ej֥\ov~~\?$s;Qeц2=cb7 }᧞<<||tU_- }F8OTOoN}_bO?BEhc9m]n_}?U>uy~}e?" $ȴ|70f\'wqQ_7u~:q'L+W*ؑ{,'.ږKF+w}'ŗ*_O q0 ȋ/W}[Dzo;UIMX[:hvYRcz1!+|\zӥָ{, 6>"lƞ\ϲ#`bl`@\HqʼJBv9ExZ{޶ys-IYqY1Hhu_LGqzAx`zki +6놶]7\~PU6a~6'^?̩+K8Mߧ.n?-՗g*PVcvL7ڔs.u"ˉ_ɸa1~[_>f6DJץm2ex";&mW`57Ax9!)W;/VH u,YR䟷 WT)9ޠ(jf }oN$2clwX} ߡ;{nSkuHMx܋)3Y e8OW~/;ܪY`%n}Lv>:W҈ԥf[[7[mw?y{u\҉)}ޥtKh9zy {t&9kknR_:}PAGLlޱ1-;:s%e鼯ʜļJy;"̖t&@yw纞NVϙK:)Sql{D )+3uY~IClX:N00D7XoGq> stream -xMo$+l`$@8}r6)n)4YoMj$!ZwUdU=$5-EwIN)r~8}:5zE`{;¿ƻ՛}^tԫ):j6艭GzzaQ"uPkжX芭GT?޲ߘl(%C=Q樊tF4ND>НND'ud(Euw5NEMI DAʝHX ꜯW@#^JTQ DAP=6ΣG~e1"AatQ2iMD`y0|@yr< DAǒfByЃ<m#ՏK< (21NDx-*ŞчΈ&щ!GщD6!e]H]EQ? Jt4XpԹ n4^] -:жu="ʑ[4&[!;Bw":F׹*ʺD*5yv"N?zars KD>a?K.Msc< -բm pȑ[-d*0G`y=t)uyH2ָ٣PE p|"ՏK< (ND'DoEDECgDщD݉Dt"w[{aa ެ.bv=^?o:xo\s{2i( aym>wN>Q*)k@GQ;\ۚ2غӐDHcDnzUn5i:k˖ԑʽNUӎއ5bZ\un[bk\#]Rm1U&\PC@͵JP7 Oe9';=Cт&'jL5Tf5x2Ug{]+6,zhE@m!\:V/T}t[1B@vLRmnU2EU;AX U*,h(wyrlA:x6w-O FՎIeF7f's{ɐVӶM.˰TF^KmmqzYǍjisq%3>)ذ8Y։Z m7kǧ+kKfPEs A6txbȼ47`_mziUp8t=K&4%ޥ Z>\݂Q:{&Y -З;L-{Y4]mi8iaitE:}rMMG mv; 9v)^Pe=69o-85i{N]ՄӺP4Uf1>mĩDY n]nɶ r<:-^2ug7qK[o'}va8HM-t/k%nan=(Z%N -]54}792MD頋vztO N˪;sjonwra,>'g˦ /9 +xMo$+l`e #6@ +!?Ş&iRZ$]k=d%(N?5[Oj^џ8n&zbN-'j]p>~/uźoN'iz|2U'Y|XC6Y˧hZC//m!5+Yk:x HA 2tkX'p$ :(ͅZ}Gm'CX-=H/?Vb<8JĵNj٣P6 ]ȑ[-eֱd'U3yզzDy2]XQ"zyPzH}&D-'< :fb":uED'r3Dt"FQ|FwDt":}n}DY(f_EQ? $%#\tT!ʷYiɵ5TQ DAP=6 ]F#Տ,iLCy.J&ረ̃`QKtQСPE F="ʑhQ ND'DobCgDщD݉Dt"j](E(׈Za7 '.rs KDW$ nG +?4X0&Gۦ`y#Տ7&[!;Bw":F7>Kػ(DQ:7@S-+>TQ DAP6ΣGD9Rx˒d< + dꎈJ @tˤM$p, Hp =>/?D4΍!(TM7x0=rd;Bw":F7>KꯢMII)u+M$p, vn4] +:jѶ3~eIcECuQ2HU p|;C!<% *y0bnT?/@F0@w"db":ZT *z.F:#ND'ohotGND'W:_EY(_EQF48NIGO10#\.vn"chGC[ 1qt%)vn GZm:<9Rx~cECuQ2HU #!n I"4{ȃActC~ <cE!щDע}h":};ND_t]֟>takX7K:$]OGo?|ӏ[PJ?s;_44_dԙ;2W/9-mH5dzE+(Y_wm:%۰KՐnB+s9ǐu]R?`טG/Bh +Pn?^Xϡj.'SDĢ՟Ab za΍<¼VXM9K.;sc$vBpR%Eu2T8@gdLpkXzBj;Uf 'I,aeǸ +=.?_Tt~IGDOmH,y1{#]~EgWS,0'/-ϻwܯ*+ {a2Ly=<[̷-/^s[ou*mK} +}tR~򉊕6UqYYt'x*$S㫷epa3\[IjڶcqoNTkL.H&gZG.WE_f6CWMmjiތ6_GS4|iߔb8tfG>ȔVjId۲A>IY[? +ܱLִu ׶&B:'rkjtLQMЩT_[TEwv>dͬiS-$ڮ#Ov52[ħy +M-mѮ4q<JjU1|*A?iyP69)Vc"4V˿7< ZIńG줰d$Cu\/En 1x:ˤZ Bz̵{eju&)Ƨ͕( rDzo|/doRWgACf{c˸ ׁ5_󶰹k~NX6v DM +,4zɕ6;KOeXor^7J_j=}:nT-L[+1I٘Ć ϲNjh10_;>]^[6.cikGUF楹rhȍK+ráY^0IG)/.]!83R褅a*l(s̢m&NN N,x8{C%mjo=m`Em^_amͱK9r- ٶa4xk(Oxt&օM5)հl#N(Ŷ`7Ǭ zJ8-vvKm> @@ -325,22 +329,23 @@ endobj 29 0 obj << /Filter /FlateDecode -/Length 4946 +/Length 4947 >> stream -x]K$qׯ# 2 F3m F"+I3#{V ;f0{62)"/O_NfJyp1?'5`K >MzVr_gǞTJt6#O)d*`VSJ.DKXP#$re%A%5ȹ2߲ -pɒƂ!N0E8=j'\ !TtD/YÂ䠋wN Z LŢVS԰H6BaA -1xUE7Vy<4,H&,V쥦װ?qaϒ@XЙk< ]dkXN%v);lMg=hDc/'Aw葁בGt1#  E#W M皎n3T/e7:қbF)ߗӟ/%K󙚵ќ0JŊgr'B3 2$rØ e'ʘ ƬX{ԹR\; |raBɅ8b[F ~'Y/f}Ԥ -_N|KI6窪|>Ab:]ʑyЅYGIE|孋7ȵ׿eE hs,>s]/l҅Yt-w3K-F=bzCWsv_Cا ^6]D.iхô4ges:j"a̍=" {Q+ˁGVEQ#םxޱGvBēO$foӅx"_A/=_أ ;Ca밆x ?>]X.0j =|"~}?=s - }g4[{ta -=B}N<أ ;w!}~}i9з|{=bwх໌׻vO5C|c.߅7v?l\gQآb ̏+|/c|2>bL<~-82?6&O v?7Je.5^nc?l6/Ɣeް\Z]dۛy?vOHGoObCϲBCzY~Hg[n=s?o2Bs=,dž::O+I~G[oYޡ_Ưn/-q.wTmɕt|5/bҚ?iɽ4|o8|ǡfU_m\~|޹j==.8 d]TЛnC5+6Uk_xɼo1>Z#Vy(n=n+]ȂD/ּRQgkyfܮ G84?;7Ǚ*+ͶShݝ={Vjk!4nDNcY[^}>{x|8U쟷~`J}YrFn6r\}6Coѓ|6OsJs~kE훩u㍽xgû'PǍ/׵w¾W~q˴5"5}gYk?>쭸@s>b.YV?_-ΖS/`+lN?њoZ$7|>êu-mr] ]If!8K^^Z^_sazG1xI!d.s6q0 342SS~ebD0AWr٨\rnX(*n|qpP&NHg^%T -ZȨ 3y #$c*/HƓs+=-} 8_5_^,od Mo4539zі2Q?mCfiȶÛJ,2G"k?PC4DڹMqg[2[o&yUlXu $9 7%[o1lFLɎ>"\;.]gEXD8kUH]RQCB-N -rRߘ*Q7݈&qSH:nZRzSxv_s.jHk"^x9jSHб„zFΦK\]Ҭ4$Ш8h;zەݑ6Μ>u:LC װu ˕Ξ$+ :6fC[ǝxMvӁ AmJb>dRY/<[#vqߡմ* mp;%,D⊇%\rF\H٠&'' -s F<ˬ]ibZ`//`r2(zsc6hoԫ6ØO2mg=dyQ{594zkAÅQAe@R օhҚTum-YRj=EUz:Ȩ4'r׺% 9uLzɬТQƹj{fPW$f5Qj +Q#acDazQdw<ְ8y$ 2r 0jX\\FlH%@ 55, 0A[.awaeB@Xs^ p,JM&K԰ wmFT^lǕ'cѰ wPy p5,OXQk=Vjܵ p}Cа0Y4`}Aꪼ2 Xr`L4!ɠհ w "p5,]Ch{TtiX 3FÂb34,@]~3kXP~[?^~3?)k], _Nh&]o%z[Y:&Izd`'uG3]H~ztBӹaیKٍ.칎fQxJBuԹsti>S57q|SXqLDh_@N|sBs5y:w[ v'8Z.,3r\;\@[lK6@r䂠7ŌS/_Tc)3\U/'^#ׁ^LK9>/0(ɻȟubwXvmò4݇buKY0nnfŨGZxhjv@vH9taK Sæ^c>={ -=s挶lNGM$G$`~>je9зª=W#0j|;`Cx6__ }/]+5a{tax(V]oנ_ =|z7|5ѷ|{=bwх&|5ix%-*/?/?A :dLO nB8fyadͿۘyO9<1e7,ןqA`&sG_?(qI^lzY2W|C/rK|gT[MFBv%V}T5՘}ZtXb^|y%?Ycw|7;-?5N2wRץj-վ5E_z>VZ=-Ɯ7 ~/84߬꫍kϏ;Tgdk՘ +zmӡ?tŦ'l6|ӕuz_g\Af4S<Ύhh(淈ITiAMc9m16&9$3ṡ#z٩%U-<6fX j]>+m⸉ϡ/5^2[ֈU<"[O +xW& < 5js;sY;kώ6qJ9Zw|޺ռ/&{ >SG֖Cŵzǭ.?ظe_֡FMP[$߷n9Ĝ{ĪZCuQfsxc3>?.;_?8}n}E%b$_f+%pbhͷJ-{t>aպouO6K.Go?mx%s_/G/}- +r/t0Dn =ȣFO_Pο_h{9X`8Iuh )n)21"+nlTI.P9_P~7O8~LlhPE]dO`_ a&"a@T^r>sTbL%3fغo<8DydJ9̺g*8U:NyWXh<ݫnVMխZYmjsVMMࣤ?_MlgA-i-" y +Jﲆ{7=b=|hQ<\I˞0 ZL$oA9DM/Κd3aDU%>S!' +Ɂ-BJȣo^9^x[j<6 Zx}kMݕn|F"A1D=&r61sCb&~ ObLlJ&_ȯ녽_^Q_T O;9.|$zh;M6 bmuڀt +¶2x6)kqCz|B=8vWssom>}693:_[/ l9|e^<͒So|fG/*kVx:# -%}J5gtL-UfwMk uC_ŵNylAayC2֢7x7F~aONk砋֙5}lq+tKҥ/,GyA~"B3*%_s;4<~X +Hҟ1~zZMɍ?aio8{MLo817&s '>+X 'rGګF!wk7f4v4;ƛ}Kߣ=V7$p|(pk6}徨҉ R9󻢲d{k9J#sK/Nf[~}9BS%MLή^to%LO[j,.'L+tOx|0TkPo7 ivn+D֛.d~+pr*!VAIwA [u5NlKY:%#izU.*zkeyTiPGPBw&En7bDm\夎[F~kT9^])hל1:#GƚHn'^NZ%v2:t0$z!ҩ)WW4+?ߠ"4*# / +W}IG'IzlC,>V˦rVfgmpRcj1m˺FfiX)*iR:j0mhE&cΫ$qO75}\x6Z9si]LbN0zɵZ:K믽ȴri^?ڎvewd3':~];5lr%㷳Jle#w}lq^St`#mCP۸ٵu τeȼ56}]jwh5B\}I> }IR(.ńk6 )'igI\B|;2+EWl ) (JEX+ *06ө~e[s/jv5Y^ԞoMN/Zp!sTPsmTiäuhp&1Ur[ulqVZOѩ2*͉AF%nƲܺnɷ(tN:G^2+(nT#}mqڞ35*{MGڨJ_zG!/*OőqlO2٣&Yt` ![FmŨ&=j+r.oߧf~~2;qsZP endstream endobj 30 0 obj @@ -516,24 +521,22 @@ endobj /Length 5107 >> stream -x\I$9ׯ3R7 !"`ئġH^"3#L+i;bIgşw+L)5':_>u&G;6K7dzMt5x̄Mt~9KyO?8sǝ5y(\rQih.(M1}LJSrKUk1cSTKԚy_6eMlHkƬ49 >Vm#(xE ygRmm.{-2贶jRJhm^bNk%:" +x\Y%7~?<#㥼I DEbar Bw>_u{݉h2m\Ujiwşw+L)5':_>u&G;6K7dzMt5xĄMt~9Ky?9sǝ5y(\rQih.(M1}LJSrKUk1cSTKԚy_6eMlHkƬ49 >Vm#(xE ygRmm.{-2贶jRJhm^bNk%:" %km ^|AkC:Ui+U6buZ[ &BUْ˱hb jmΙ jvKm%뵶^6D ezE}& @^lN`% |Ά' |  |r  5֡; /UKaA7hXx4,@[hXdӰ oɺaAMaA→HÂȅ)U 07;5,]laAꆘ$ p7p7T X  pkXaҰb|)VbI e=4, ஏX湁>Zaw=a  w!Q V{a3a*ܟVƕ4,]W>!qeBƥT5,]8aA>x5,]ੵ6jX0hXfmZ X [$j[60$aXġ$.{հ wm AÂܵGm/x נ VV@ k4wUÂeaALE0h{ R!SsNjцOmKQÂlA, P& XjѰ {װ {AD:Djz^`.j~@@2S*9&c֖)paAdȥLװo8\Ұl͑l L̵6^dkXHmiXP[ -'pZoe7,_s+_˴%vC|Z/t=7_3ۘ9l! (+ ߡ? -[l<5.B<^luZx>7ekzgƾ8N-|ƇErQQ/,xy4aR~=8w[}]M9ڮQ(k&שŊp]WyΣ+z8Cd ޹ %u,"!P0g%oVWar/z<72U+Lx~~zf r`! | -HaBfI=}}-_föX=|z0B*ch)%'2C^ ;W;.N:}J_(bxٜS潷nM&џuj0+f=tiMT-JpLunب Ǡ埄֘ibHE>U}^&ncj7r|襝޾?OoR~> -+ľ_n5}/&IdL)kۦc^tKs#?Rf2;`Z -?4YssOy6@/sm޹E[jm}v}`kcW9N>K|r+J#sY*p,c/gL1*qB_5X!; 3>?Lj1l5t_%i;zo=9vtu.1L~s`5j{;U3>l@;o ׀><; -=(";4;3CK7'*ư ظ8ʼnn (BNXE?f@QY.jth+|; kIY Vj9a9χ,E>o ~bzfvӹ:o6/o{e^ ;Ovܪb)Q0urdFHg {.GNݴ&i ƥ>ϊEn9:);._פasJ-[ <_>WkNukvlnj5Q<UgpWn\: ^JQ{Ψ>#5o,#Ⱦ\{{ #>췔CJ{i㉚-oTH+80uܱ!\Eg+[}^[|Ӧ蠻]9YچzǺVwY)G#Cxyv2ף*%u7ǁ*t"+7 W -]|;nhǠo+RO ~ы5nr)g]MN.9v@Uۙg}܌;|u}gݳo[* Yj-BA _|r))s܁/!*}_/NgsΏ>ݒs3έu=Y;SѶ[G-ױg#,}i5 ۳]y-V3(~lq^7^Fs#(dNJ⟘)ц{#߈Ǎ%,9ȕoz^;rE{K4θcى^sKDǶ{˝mtXxAv/Cn!P㵷v8?JscjõqvrLG1W?f/tҽ[>bYv#,z x\ʴ#ˋvj_uI=Y>Gerb_N)dA2O;"7@.'K;C40ľ{7~MWl -=;yָFOUyqH9x&1VL7ɞ:??2D&q.E> u"^N6/*?$ՇETiA0U5;BhI!]N -C9څ|tCq_)I̮K~2M=!xvշߨ{ĆsKWr4v$bV+l'A;N{T3MTؚ3Pg.՜r䭐$= !M|;aR^tCbc4cKv!g`$8LeC|ƱU%'=q'9 |<421N,d6'do d 0F_r߭dǽ~Zܜsʑ㏥ȝ{~8uՏ{;lݐ'A2jǶDO'ٕyo0ivn  ]<1$o/;)@Ku3zץs \K>!qŷNV#.䠸نM6H9=OR"0hY9t- B59V0zo,:}P_$u,tjX.r/wJh #ș[c6*evk7D9)uf(\f;m;OubYV\T)SLߥbZI{;OZz9:;dQhITwN;M۹=ed$np5{G}WkSpe~ -\>,(%%`)2QxDZkr&r6;ؼ 1TޭZuI @)L; VSEx࠷7Q+V9?j\K +%á&4jxLhXp5,@di^B$ Jn J/z `of /4,65,Z +7=iX}fѰ|)okHof *Em/oI7NZ[/5%73o"WKͬ 6."Ӥa.o"r{ X8,jz#|Z2^x ,s$h6YV VZ6_ct$KT 3KEVl Bt?ry[rZ/>OJY`'!SWffK ]Xl:tVvc6pyp[3s,kH~ṋQ|7/H9߯__bO)w'7"5/_ Jo_lkUkEqMAqD<6:&a4cy a_c1QIqU1Y)`[ZD[I)xʒ>B4`%5~jElk mwyA%NR8:x+SaY2[/^-ݴj뙽)BF!7f YGY\Abqwb˴ ֚Dw|m)t_;W7)woo6>ܴ-j&bme!s&ϋ [MǹVznʯp$αv= 9trkPN;pWY|u_CmE_]`Kq |Wy1zيk-]쳮b!fw+/ۯ~Lw9̣fs=4]VѶǦ--tu`W=Pn`n9HÃj+?Ȋ4kxC< 1H [SGpODT@< 1%SLG{˵QԂbE8݀JpLunب Ǡ埄֘ibHE>U}^&ncj7r|襝޾?OoR~>+ľ_n5}/& IdL)kۦc^tKs#?Rf2;`Z +?4YssOy6@/sm޹E[jm}v}`kcW9N>K|r+J#sY*p,c/gL1n}k_{[p8a3LY'dלD]K!C|} #_%SXeP>oEwq^/YUǡqkeIP@3`>}޸$n}EbxF>Puɸt!~l PWpݯaDvHi|qcX/~۴u{;bOE:J ec}&IWk2*7^,J6 䎲;R :tC;(T`U TkEICl"MI|Rl~]{1=RXh;iDzg +|~'UnU1 q(:]l92#W#nZGcg"ĔtgkRB09U-nJ[v+5:5Qub7Gjn(*dzn8+7.|E=gTx7mxtvEis_ +d|_==߅SrPd[!F^ hyDM7w*GK:_l +^•->c-ziStݮ,mC=AYKc]+,m#!jSS< ;Q:qA:ʕ\`+[A7cзG)s݉?E7N\9󔳮&lk;Ҫ̊>nƝ{>o +bhYw-ׄ, ]U߅/> ۔9DJHjt39nGnIIVXU¬h[ǭOIoͳs>fᴌ}.o_lntq|VZ+VB88z//G t2B'OhCZo[FQFJ@7vek/D\R:ͽ3X}v߷;\(a=ѱrg1^<ːbȾ>2T3xmN\pm{ݣQՏYw;]󟴼tX/0˯Eb&n!Wz.2Ȯc7ŃEݿ'DdRpQم\|F +ӎ m?g}%s>ލ_G|:BDd^5nńv+1uAw8;%IGMΏO ѥIK9~B {JItvZLAΡzRHB|gev5cc*ݐhW} +rRkš<*k풟LSe^]D-7*ܒkxi7@"8/ +Ibr^&Lf +TAeY~t}y5'y+$IOuHqp*yج":~q؆*D&: ؒݰAfX)3&9S~ِ'qlhd scIN;_$9;w+l/c=MI&d8(Lїw@'bf97q/7Crci2:r➯':ݿαqoZd|Ǫ~_>[wSꋤ1uN e^E}N {a9skЂ6Fn('NLŀ ls)n],ˊ*> stream -x]K$qׯ和 0 @ {- ; fY+3̨^FwUF ~A2s?ɹח/\I_-?7Lp%pYL*xx\smw]L)٠ -X֑ -CTXb) bĞ1䠱 {VёU O5p%$,pZA,3y炉Pzxޙ/*/xD&&vibb!k<,Xd j<”Ƌ"YY|NdNQxʃ,6Z -P2+ٜm0!Y MRyQ,ц K 5AƏNJ9+&KN}bY0Yl`% |Jg |&Ù>)ñ$ :Ӏ,d 5$ Y3WA*ayȂAϤam֢anaoٺap!հ#kX@\RѰ԰IR^awհD X!IIby 0v5,հ>[ְ>d0I[<7p5,`g5,U. $djX' ИK4,]W9 2.aASyŸ+Z6.ƢaAQ  <װ wSk#ˌVxhPc+yfְ s4*jXiLH `B$A$?H6]d:f[JuQ;Ug+f率TiMw.&5!IS:oٹߡ$M֧뼹^3 8%Ug+f'Ӥ}[H{߾ X:uNo<w?_G^/?d6O'"G$_:zLX{Ƶ>q^zeiBkq;<[d-tA_Fg.jm0HၡLj:~ewFoo)|w9`'e:lsԩ)O-9kATltjL 5> p+h_i p2t~~g1 CuڔW/@9MAZjX w?7!;1]@-Y5K-uC䭉Tc۬26>Y`mۼ}Y g tYxMn6r)M?bzcAx{e异"C^GU y-9Z/$E@G*_z8ea7"'_-{:$v\ sbQ(nSU q4ѫW(]?oaˀ"[Gr =/M܃;Y:9:ݓCANv DD~l ݝی=>;'GkGIJ[s&ucR BNN&dN?m=eVOձ3fGv_Ni87עSo1)$wGG ,xky/?˟~a^aN[_ͥeTഷd=#n37),>R0u]7FoτRږ̮GuT^6aHlΡuި[x鞦տ^vӸ׬I'c%lc*4wXa{?Mi; -@;ձqTVW4YQ~euk[}m07rgy_:;s>>Ҏ(&=ޝ/7p}ڳSc|ogx.:΍~}| <EmQb3Qv ɱGbZU>Wc6hryxo}OVa]1sjhRv4Q'ƌ<}KAmM0MLxN`ul?ǜNVn&y|3vdH%ңmݓu"\IȀeiE=&Sc9`IO8Ik=%{S $aȢN-QN>G%hW8VvT;ٜ r̤o6ǣ{܇-lT{s'Bξl!uN3zJOC9npN_F)!9$/Gd]JBU>_-⚼զ-v5hgzTL<+onn}n\w_Sy:_k<( H{b{J8k{=?O ҅B"L'n6"F?9#/IWOT0V9j -KJWgrJCv[mz.Շm'Y>|W/X[z(kXe*Wy+DYW7j֗K_"I^Q?_EP1.Y[]f+9v1/:V ׯŮgjrgʾ$R~ogv\5VM)TұBDd{kJ!Zb%&3AˎGŇd1vn=7y/.b}V/tK{G*okM5zi4 U:5}@Bz(olk1?\!q/WZ9rQ˵%}R/G4?DN+^Lt#-Yc- ;/}&KHJ0†fz3v;9a/eUfɛ/Syݤ$WULuXӀ4N%0:vJy^klCT6Si Huؒ]NkX9m rqCr>UE7{rq&>sdRbu2Ȓ 6M!@a~6[;:IuL2\vnSGrf9:rE?.|ev[7ٓ{XI<ӈ}LDˣlhM쭤:w&ÉzGfN=ܱ{vs@(/jRb\ᒯSå~Q\N!FL1ȹz硐b -#nzS4_ ;-y?yz}"6ڡS?~cB퀧S^e9T`lwhEܣ䌩1B \6:QshNpmbj2ŵZSKj)bP6k:̣ҕQnx=ZٜӸ;;JX2+8T%ю}mm$ԎjPST+.+C\"O}6 ay%i<-i<]q%q=a8 &EFy̘jk^XS3`^jj[reTQDOfyn{\,ԟR +x]K$9nDs0l/<^]`COkFYQzD33݀P HJhwOfgr.)˯kRWKl.*M,'\9\%J)^.]m븫7DodRNUV&%ŠKX#$|d%%12 N1|r +!),g!֪<b+<Lң\|Qy <#21 Nc Y1d : KpVA4^,ɪXaw=a  w!A V{ ɂY*pb XB%kXKT3s,(//+ecM? xej{\Wc∄s !`q]t!n˵q[!;MHƊ*uI֡#/yjYGS{һkvxhIJ'IbRq 4՞Jd}λ5݀ p^ SR{һkvx2?M+G^GG?_YIfd|"rDhu#_Aʄo\wYyeW6k[9-ˣ_?0߃,;E3AĖKjt RPͶ;zAvc9U.~ʯ0E"L㍀avɦ.C Alq9vd +_$l"d2X䘸eCKL@XiZvClJQ&ŇcR8h d1w7u-o1,yehz;ߜ. k,I#,QM#٨:7J뢒~(tye]eU_?TIu\&N=2Tle2%v~N3^r~q LP'4f/yA?Wk7"p7:}NAwyZӻۍ.]5a +49CdtRT''nSsN2t:ۗLSSTZr!d_e:WۙZ9 =ž p+h_i p2t~qg1 CuڔW/@9MAZjX w?7!;1]@-Y5K-uC䭉Tc۬26>Y`mۼ}Y g tYxMn6r)M?bzcAx{e异"C^GU y-9Z/$E@G*_z8ea7"'_-{:$v\ sbQ(nSU q4ѫW(]?oaˀ"[Gr =/M܃;Y:9:mwZwɡ Lm';~""?ӆΌmkÝ#pw#ݤHvl%9:W1)!''eCt2'aV2C'ģeX/bśkѩSszxD#e#xRO??O:i뫹Lu'N.)UyL6M) +*gWom?rzSgr1r]hC]) +݇ +6Pg|&ŗY +ntF3j柲7?=7[ޯNzmMf߲b^n|"56|WguSrGڱ~פǻ/[{v6}̰ 66l?R1|<م_\ǹ?o^璼"ߣm^58Jsf>.459vHLa'*z&8 ]6_0}3c[uMNF=ĘQo) &X ~өʍu$OzƎl6Dz{^" ,dyl7/=' iGӷdo*$9 YU©=ɐ:(@&'?2[l['|3h+=:@*;leB(%HsQjcTn}R.*ȅuțM icrbiam;85pN^t6n9gr<3&|3Pv?]yssTus; %G{NvD^AA'gyOhyϱ[s:p +h)]A/􇊻>,$[{|vOm#b4)3yDE[ cPʯ~uV;o+4di іޭR}jv{uz NJRوUrBdKuU!zf}᯽+UZ:0\eovwױBfa~-v=Sk< T% +8|C=Q?jNէꗎ"jFw$[Vz(!6A \v48*>$K0HSw}1]uq4,?E|[STu5մm$TJ>N +i`v4j~siĽ\iE-JTUKe:x2JBiXj_dy,C0 \8oa` f"Mvr^˪*LF7_*B +/II,5F'27;y;갦i%K`tlt؆:l%nu,ӱr&&MmCr>UE7{r6SqyqF|d1:d& 0F*֎Nr}L/^YoP煯?W,~ێc<{2yk>IcOyAvy UIu;tA]0t8}7]hLC|i2_:6a/nN%@M*\̷goJx2%TgosW&ӒuqW20MNg]70cT_ jŪ%sWSߺ/&z7 tsf/(f endstream endobj 53 0 obj @@ -782,25 +790,33 @@ endobj 66 0 obj << /Filter /FlateDecode -/Length 4925 +/Length 4895 >> stream -x\[$m~_V u  lǃ!Ù<$X}ά"K*q3ԜzŚ-kg?ǫMt5x !\v_Cy?qw] (\rQaU -+FIa%gZ5ĈiXG1V]@Hհ<4,dƣ,Ѱ w]ESbhe\IÂuSyո +q -Rհ w , 2װ w]@x]հ wQ7D ơа8 UyZ X [$*/8Ӱ`l,P pjX6aAZB٣ K(^5!lFjRhU;d̒yaAǞcN˷/H?S886֞Wxe|p FP8RYDHA,FSLXL$c$z?ZhR;3mm06  -I~ iO`̽BHy~|7~ GZ*;>k߸p.}>}l;i*J9mS;W}˯?AbT"ϘǯSm١wc'Zs*@|DWd2k׿ݿ۴KU1G+>8u(\𕵋`V쾰ϰ\d8ɗh"HZ2i&SY؇j E;5hrKKpDYhIkow/.A=Փ3=/ @ -bm`8q'~r_bHwc?'ݥ͗kU,KtN7z2*WB|';$a1 ԥ{#QTЅ8EsIn rW8*t;^3yr]h -X}SB뫠ΰeEf ;vE<7G`~ Wc[ -n;{OMm ǧbˑũ~9/:<ܚNHލ?ݪ}\ElBwmVk˙^ƳG-#[u߯xJqX@y %|j:vyeHnTs=]|NC鲟EϘsnX6V.<J֓2?B&F P -θ0} oCmhRjne@^Rth—gdv -~$=36\Nt# b~[H\<7#KσؚK?! WEB.e˅?2mOŞxi?̕"GǃR*WidBe*szjǵ*Q3*BGV-Uow?{^gjeib}9C.IoҹZ[SPJW=ZWۭzo߮n_O\$MaNvyeESԉ^UE/]wj{SuuavCe/wY)N9Z.GVsLkwUWڦif^hv[cq}׽b.%֛-LQ;Ot~&zUC7/"r\2+|zގx4 ;)簕&ik>dgt\6>qq[h/52ǷkhƗ^mA:Y,>uHȼx tU)C_/}~rJ,֯W^_RciQ9|NMkr'{dM_]wOd6'~UV?'*]@/|2 l|:r?8Փi(5mc~TH^Sz+.KeYky,mTLz$m?e ,ēďo| 8c_BOazM[?aX#ɺ޴3:8?D`GVjzϸ[NYçxm{) 9 -3GH&k{Yv{ƳR}?󙺋N{vz6{ULmz^vWvoWVMO+ ->U*Oe?a\u$ts{]jW~ك7ȪN7{6Ϳ]{.<uO)l^R۾zڢ=Okw!CGO?7~6]-֡=Lno592\3|o<]-Q/qs悽)uZUmnoLY]MsR,;>?JACx ﹭% X^oIb|x8b)B}gmU_Sړ>jl;u%ҝ]Wg){8xyhe.ڇ=,+󗿮 xW~>@5Y7Ho7˃{boXɤsGv]BFA$3qi\wiu{f7?Ca?s|" -#ۓyָ̟ vx9JC\͘s9!+qOrCuiRuN0veÖRCE}]o-~0 ;)E!~ccz#88̡k~2]=xv6eN"Fl?趶EoH#'rvXBA;N\/w~kO E86y$IOuHӀ<r93莳VT2Aϵ 5cMv!g`$..7qۊ<#TKN{Nr&yXKc^xkdv/2ގl7/&S0$O}k 2-.4C-JǸduP$_.tǽh2˓d~G'<7voy{4 L7 $ƩCAu B3xhq2_k/ ݐ.rpX&/̔|SO)b 8S"C,?IS8eɣfԝV!NA 䁜h]ɣj/"L>o:x:5ô>9'\И+ ș1K ZH2-'DyQE{p1c2eXWK[qQGM1*CQZ%y{RP;jH;i W%r'mI BLE4=DZda(\ !:ׇU.} -PZ85[4ra":p[:YW +x\[$~_Qφ1 ֻͮt9cB"34]RE(q3ԜzŚ-kgl?ǫMt5x !\v_CyuvzSk.^YL.9ۨ*XǤ3Xb bL 1 y_V GV>;X՘ykUD+<MғΤR}Uy< L.:WMJ)G%V4^,YY(d )XY|Ae⡝ +dwYlN`b-D*gK.GxΙ *#ʃ,0>A øaP/P/PA_T:Ӏ X)iHd!Dʃ,CaASа m ޢaAܒNÂ%뒆 1J"  T5,԰ tY 1y `7PIn g5, n X  pa5,U 0iX_1aw}aw}F +Py K27pG5, '4,U. $djX|`2QhX")1 2ԤaAj\ƕKjXHTAÂ| kX. SkhXP(.5,@` Ty0aÛa6?lb KaA)EÂR ^&7BT|T V +4,@\~hXP~[<%nkHT,%ʃ,($7N/A_IÂ7(3DE +7. +dx]TI`V[ǫtfgQ;[Ֆ"[eg`GR;˒Ԯ*Ϊm E=FLXOE9d^dEX瘧;- syU?(8^6܂Q8T~hǭm7 ^2L[m.͂Bҥ}BڣY*$H.~߿zӯH1ZK~7v+~7U̕9mS;7~w`bSWn,t3&+To[cvC>U؉ +(-,UÀRfwoO]18B_ѭaѡsNCW.Y>>pM4'_ iyucĵMq4wk|AkВז/.A=Փ3=/ @ -bm`8q?OleYbHwc?'.K5n*%:'݈e=+!񓍎аҏ=Ǒ_u18t!yQy7#0 +kfZ7/\ϳ+_]1K|zWw{TȌaǮ<$O +Spl16`V.拫c\ԑԶ,Np|*ƺyqߝ9]‾ݽ֜[)ݓwO7oms2}~E_9.Wi-]y=~}(qmr,Q.<i9_~+CXg@>)\5 p>r|`wrwSZ]?sg)/DM:ltiڿIJ~ٹJ.Dⷤws7fAU@.&.phMM6 UxߵCwQ7S_RX׋4;8J +`_*G9{e=o{d-۰ۣ>WYĺݟϯ(MHѕ'/Xьf + 9ZwbԊRG@PMzO더0 0j ?mp||#ύH QMx +B6n +ಛ.eΕ?mOxe?̕P.$F7 +YN}!ת UP4.޴g궇TRܭq`ݮz=cW֮ #~r=/Lzd.>սCy(Gm2ںX=S!n7nBcykF\!Ҝ'V"lҧIIq|q m[ O:߮ +B;_zTgq?J? !jUΧd|}|u{'q)u,Xc{}I񛎥97Q s#[l꺻xw{t$[9x'#㯎S=6zo\>7OHtOuH䩇OV(걡]zL{=>kW)Lݮi +ӷ6~w7mN49OuX} +KlZx7k_}z*/{ ;M^a`iȇ1rf"VxKڬ\b*mCy֌_\P\|_4b|w֦9cPp&o]Oj^ЭrqFB'E̩&=_]^н?;N=YE>Tߙ󙺋N{zv{MLmz^Wvo7VMO +쾣tU~¦ǹ^{Id7pOU1xo/zmK>Cy ?鞢SW>8}gQo1kz 8?+e~'= ܘQplw;{z{&\cn<\kF}ΛOto;K]`oEJkkUddow=|)kwiNvV/ऽyLRлC{nE e ֗r#vŸX"5xʃP?t so\6o*?ӧvЂjgаB]7OM0 p :j?O!.ylqX*Z(CWh7`S*bĆsKNlnk[v4"q.1+glj(ļ\Iͥ +i8@ETFr}y4/±9[%IzCyPy} G3ʩ;B8919yѺGv_EN=:}P$u,tjhi{8rNAީ1WF3Cc9>*e[OiD14iceJ밮j)bR&5UJ:70 +(9y%BKr<3tڴv϶W Y9,}$vvV:o!Q >Aے0~hi{y=y%P6;.1CL?V]p&uˮom[Esࢷ'uz׳nZ'Ƥ endstream endobj 67 0 obj @@ -918,24 +934,24 @@ endobj 76 0 obj << /Filter /FlateDecode -/Length 5585 +/Length 5546 >> stream -x]K$qׯ% , Z zaCO}L>23jg0U$ɶgXN)|L)O/5'osH(N1{6__N?uM9gi)F㕢"cI)~;a9kE`Gv/`sZ`Rq/`EZذGa1j12)ZQfʈz)Vgc2^e6ZxaJQ+  I+A:Y)K֕2bZYĬeӾ?Dd2k'$ %9jxdVFW+Nx))Ļɐ,O6BBʓ !kXH|& fTaZLwFE5,9L&k`jYLNI,9 0 O&IԲ8 հ w1g px" p0 Pr AViq@ - k,4wYÂܕiSÂ`pB4,cа d2|jYkX a)SND^9 /4,@D0e[M E R԰H6̬aA7Vl԰ F0[ KM Na~pI2 ^*`*CdY [D(V A K2Ѱ34rIZ+c#yfҰ q$T԰nLHЏ$^$?H6e$f4-}Y^;+B 8:#+{+jn>܇>ׅr34몙VpS#^(5tifY#ǟxXY ǕDِ1g!I`@(C3;Qb6N A݆n[+H7FCBR|{[Si;(z$#"-.ES0s`or#' -:W"&7(N)!Qfx*{+]Lc]L*Wz n%Y 켑^1ـ  Ʋӷ?Ⱦ¿1^/< !~$Cvr;Nao$5ȓ3eG*GҠмLNR EI*3N@v>˩}Eb\^A\8AT`? Fy'CT֔#܎hШ%|])4g|O $O ki,}B/C3eɦL -cEZ~W)}./͟<>^Ws}|uҞwQ8I f XU0Wo_-nBf|E1Xd|F>${G[ +;|vsX -<{*3^>V66e us,Jce?RrGwgcPyݠ4qCc'.gMV]heGNj`/&dd!DG|d wUy?0sQ5y\[s!qSFuTecp[y?JC10'~5I׍~AHywՙʲԮj˴jj52(yƭQ곺!AN:GYݿmmwUy7FHUS -\ -4$<n6")C|YsW&H:G$AfCF?.js%>o,=ϝG Ρ\A88j!'9yMgbj'!Dew궥UD֡kڪяJ>gϋ"pbrY*^D^6[xWĔdW c׿aBտ9#nS 38BWxi_Rvx9IRY˯U{c^K\MrLZ8 D#l|_r.=j^5 ݮ-O,=hՏ>Ls=BtỪ'9}|U?^5~_p^[uz9uN"uz9չnqu7u;7ۥ}$o ]8].^v/ea[-UaKOî]^Pjܝ u]aHE6=D˲V~:7FymkkUsmntza؞R/.enMQUXOqlMnf^DCbM ND ql.ˋibJ #ۓߕxjٯv}|~5/qlǪ#Ă`&G[& e2)%&;gY3~YN_"^}Y&zMY$Gwyi|^5c#=~+asSRZ  -{Idb/. Bthy3[KB_9ː\uӏvv{vvڐ]wc,'+pVM>-gXiRm+U6FLtK -OG43oVmо[q<0Áj|`O&L4Z;zNiXFvw4Y@,A>cbCПQ$lUxyg1;Nf,M .fJڞ0PU]wt fm3Qrˡ}m6RxZ;s}}wMu3G#yOxl:LYZr/뭷_} Wz-vplVZx6}yds;/eH8KE۞tWH˱oh _$LO FQ_$  -Er.>\ mw,jA1FJLYux˪eG3r_2GS~G[~s[:#WKTקۋq;Vo6h'+mLE؍u)99_Hy[vrJ$:QmV7hTݢ8' $im;Ѿ„ؓR;Bu&wÛ_1aLZW"}w-J`w›njWDYNQ$g(O?}?@oLMNx39) WmxՌm'VuWC]KD:U# `Dځ(KhAS\nQP:o".5~WԷ<*:7=6dy++|@-}{wW; juaϭ4{N=_YQnS(+{eC hyt$n i睸fD[n5"T'0AWnxҳEĞ,tZ" r8Curg)d9%xV9B\>Dv9;}d=1l:k5ˏM[++D vOћ.dw?M| 2Vbog{!ْ~O4Cw,^g]Al.E-m/*UnMUb4ʍM!.'M3ɝ31UC\)I}ni7MTUs|g:&xvR냏`rU#9M툗扝rQyw0HFNKU.'fɍ Qyͤdu띈o6ZH#=4aMQvfGydtMb+ ܴC56kd*#T&F͔_VΧoM,}kCΗƭ\m6_2,j',/Ui @;rֆNkMdڌ{9T9GIX.ZEGI9Jln36g}6˭:qC{}6t$.Á:Kd e#|n=:8tCrnJ˨OI|GRvCE|ס9[)9vD/ -/C!_qfǦ+bx!0_ƆeW(L{}C6hoԗ&x:װ*-Ujm{Ԃ=՗FjՖ)Wڪ:Q4TZk1VR8R-ԿV{Vڭ3^@~4Gg-L --Tiywm03zdjz5{K|G]P֞ -MqLr\Q=r& aU Ӱpk1uLLd|\04U[^-uH @Y0_v/jYi_H$&oZ:)q +x]K9rׯC2/`0x<^c@CFŢe`}L>23Ju &x| l{6RϗϧNfOybuSƿp!g!Pb. mnǟO_:즜R4JQFy?|P9kE`Gv/`sZ`Rq/`EZذGa1j12)ZQfʈz)Vgc2^e6ZxaJQ+  I+A:Y)K֕2bZYĬeӾ?Dd2k'$ %9jxdVFW+Nx))Ļɐ$f4-}^^;+B *tF#VlOW0uGr.$UΗ/ofZ!UNVx)V*Ԙ-eSy+ĵ!cnB% ^1QfKw$:um> " iOWԕn_} IuOG8l$:U:c H6 +ߢ?vy՟G&+ +:W"&7(N)!QFx*{+]Lc]L*Wz n%Y 켐^1ـ  2w?O~@wNC .]>wr3E$2q{#A)+r]V9?E +39Ime'dv;,vĸr׻?q!Q]h/f#hO8&Φdvv@SF-W\^)4Ƶ]BZZ?q߶˫ř}ݲd a᱈"-~W)}./Eq~?^ޯwV2đHM21jj ru~ + ̚Z7vSU`9d:-Ư`&]2QYmiwUy;Ѱujb/XGvozjH0ƻc%L/FߏP^#}׼0^vR*oGT&e *p^R$Wl}1B%2m-W9KO1WBk˪G{mq tGȞ4|W$[P/ǫFw+kN/BYx|W|_7N/{WSrѼ:׍>}tf9{䋁 +°԰V~,ke*,+Y~iX JsNtj6 ɾgh^|vY]Y/>^(-Rp߭j固E˂ckK*6EV5`b/_<)6y> In6e18u5c'vY>L\3Ole[h5Y7Sz㼆߬ya|`d}>TXڄHu$L&$}uB݋P9}}/^˰?D A0K0:=,PϫflDܗgwe<,nCjOע A4x|?pQ_!u/ LEA-:/ge#4b Y+{Cnw__].ۮpXN+n )dي)c‡I ˱1;Mu!-mv?S9!ݒ~y{ [pUZ kz9x/rIS/=,mgˢ֯#k _'#^Uب5]M_2_?73t\37iA!1|:Eeǣ!N9pZ; |D< &K#OY>qgc,X9֍xXxG%wW^_mw _6.Iq;c"8cTצݑ"Lmh'U8RDDzį~qOf)P)fGۓe}6CO)8aOПC0F\t)|[u^{6~\dc/^J iO/3T^kN'}&l%5S!KfTBjۋybf2}6|h'+mLE؍u)99_G9y]vrJ/=$u +1LmШEVA|o^ݎ„RAu1"wÛ?aLZW|wM{J`w›njWDYvh$[|˿8R#& +^PQ~M]c6jFPք +*[@85 mlh#1DYZG@ "FrE(Rw%A}Y}NWX79&,99[<_iFF>+۫y|5aϭ4{N=LYU^w +4vWp 4] gM|m,?\畗G~AY>];,_WP"8:;*z^=ۗk=\5ʚi;fF x\} gFNO1^MOZ'J TrUgHC`fnhKgHm+9ʩmֵP2?ueC{(a|-ϖnmauٹx7phIF(s&i1BzS?HF#Ǜ9|Cur~)dYߒOr~:+dd!.ŶQ]N)o$?'ԓ _FZMεcӦns +5ݓdA&ZBc`xHd]'gY.s9QtvP}A-Y׵*] ֕FSQ}})1i2[59?t&jHܞ9t9-؞JjtS.TJp} _a$@յIݸr*OW4t{T9dkV(PU\Xn&%w"k!P5 wvGE16eQmO7:pӚ aT,nsvO8ywkغ"#.t'Y~7H%6dZC儙IuӁ>iV:}@vtA2b dV7}o!9r%H62CyhwhQnQيM1ȱ&zGU5 aR/>̎MWZy4ތ Eo+Qbj/,Bmި#PT*a}*GUjm{Ԃ=h5j~+mi(\f*+OaVR8R-ԿV{Vڭ#^@~4'[,Zk7*'}:ڞH葩/¿/uBY{-361PiGw0bDNÔunqg211V~;3 +qTyzlWzLN?3BDN*oC# zh:cVS'zB endstream endobj 77 0 obj @@ -1177,22 +1193,27 @@ endobj 98 0 obj << /Filter /FlateDecode -/Length 5342 +/Length 5338 >> stream -x]]q}_./?_@` n/Ewmy)JTjwg~vUd%aDFcE53G5&_XࢊZ]_/:jU'N"bQ{!)#I'$yb>I(bR,m"̠3$$%(M0FCR0G!hab D -iƫFR5*lfҜS!FJ*Fgm4[!Rl!` NiŦ褴[,Z' i ]IL-:h#e|NDbZFN1mӬ'純fQ4 [YL-i+9BŔoN;#ybm$1 %$ -)%l%lr%lʊbt %p -ieY؂ 8[,9 ؖ t68-i$.p \%.p`\I\@RsS҅G X`%.p]G)H\ASL-`GLrx%. .J\^UaXQ6%-qwm$qwm Etxz܂4rwVZAE wA!^` VHN, `Ui ڠ41K\6udԇ_hQ4\|\雌\ζ$(\CHb[a[?`%̲l6_s~?ɪϳ:l3c㔇\*u{[rK~[uc[hM[k­vg?¬WMd^$gP5||}E??Ϙq" E^$LBį0?X]ӌyV7doRYvJ6m]ga O\hao y֍:ͻn#a"( jY -:6>SG0aaqnٟۈ6@>v]?#Z!it>4yJy"]yxy" xOK #Z8썼 - ̈ҥ~ᔧUhM7-ӧ.,T9UqYf+kԙ 2lH;6i2eua,{@/19LxQ9]a79<xa Dn?˾4?ʼ ǃVN<5'u;c_}ᔺ?~^upIZ6ʼgݕ}i/'yj-*wIX\к) xq9.Đ;)4aEoU.>虢_Tonszޞƕi5<< 1lX+8F\ qZEe4;{Y:?-yQ9nk:+i1YN;u -dVrٴzǻYs) P(`9&o2O(v.w6AkJƮ4 :VC0 Őg0X.l˖R<;kcj[Q(g"9&D!,;tD,{`;o[So}L/ N;`a@|+s'u#dG,x'<ums]bs?'_7a1A;s*OcoZ:5%ygpz[5> ͏5Y/ihe_?ҙ_AfegJWtq6ż(wվG3N;VŬҲN~a]w=c8<1Yu9tjp:*tB\n)TiztFD}uveH]U|zDw{fC +x]]$;r}_Q WW/0 6 |0vfc}P>232kN3ݕ!)8 +)*sW"R1UJEI MQyCׯ,pQm ~.쯗??Ks*`3'S1ŨW1Z`n1g) fHIfPN^Jdmp&ea!) f죐d40Vk1 h"g4U@)RYLH3JiΩx#eBIJ#6R-i) KQJ 4bStRZ-[$ҲS>'"1-#MiV{sZJ3Fy`Ӊi(tRB-A,ﴕl!Hi bJZnO '5LAW4IKȳ1>c&rm :y2įcO.F>]FxghlzC!$0~z/_P/b4&_3ncⳝ|$>Ϻp\S +sY|hmY?}.mv"mQn?i6oڮ !iN ^Z>4vyu@Os+~?Ϙq" E^$LBį083Ɂ_ +3n ,!O빝 >OmZۺ̟+ o_ e֍:ͻn#a"( jY +:V>SG0aaqnٟۈ6@>v]?#Z!it>4yJy"]yxy" xOK #Z8썼 + ̈ҥ~ᔧUhM7-ӧ.,T9UqYf+kԙ 2lH;6i2eua,{@/19LxQ9]a79<xa DnȾ4?ʼ ǃVN<5'u;c_}ᔺ?~YupIZ6ʼgݕ}i/'yj-*wIX\к) xq9.Đ;)4aEoU.>虢_Tonszޞƕi5<< 1lX+8F\ qZEe4;{Y:?/yQ9nk:+i1YN;u +dVrٴzǻYp) P(`9&o2O(v.w6AkJƮ4 :VC0 Őg0X.l˖R<;kcj[Q(g"9&D!,;tD,{`;o[So}L?/ N;`a@|+s'u#dG,x'<ums]bs?'_7a1A;s*OcoZ:5%ygpz[5> ͏5Y/ihe_?ҙ_AfegJWtq6ż(wվG3N;VŬҲN~a]w=c8<1Yu9tjp:*tB\n)TiztFD}uveH]U|zDw{fC V+/%AX[^~3 (3=~ -GSΓ:"-{hQɂд$}͡JN'=Z1uO @>hs1Ѻ90cKi5 7&G;<weE%VT<M } 03KIjI^PPW|zUfa$ʻ!Cl`č ߅X*o4i}ykɼ<-+)CɋYT^ilm8^F}Mb L#Z7)p:r.3txJ x9PtH3@4^qNFпǀ|#2y%G@<<@l$ƇoE%ćam8A7gQ[Pv9^D`7ޢNܬJ -z< 7pZ*tV('o'uIsА{O[Vq\2&/a:b#3AZ\B,e}Rye#ݷ֢R-H}Ix}jQ- - 2BgݞSyy~cV0ZTR`zr_v+~8-B7g 4@pBTss:D]hQI j/`SC,~ x?-P_QtRi 5o|AhYIа5A۲ᠭc$ί?ǼjwU6^"vV'uV_@X'oy#X-*)7AjSCh?mC0%@ٞFyRy E~=!d4.2﷝l[1l}vV"He;QcDMVyESfJ>ըת;[]iS#-ڏ=DdQ ܸr.N< e2h[2.1,^UoXg:GNP(y>4K}d|~ha$;o}'U7#+4aN|1VSA=sU )ytzs?U҃-6̦ЯQ-q~/+#Sה1G_[. oGKst/ [-E] m bv̑G"ӎ8-ɧA;p=;AUM'zX* f+~-Y_B3Ňj3@⡘Bt -P][>*5]ftfơ; oTWQ_8RkuܤlB"еhBgI*5 ]|siTlRW͵).dfi2|Dq)upc7c mįܾs&NKcM׬2>OTᛔ|0 ^ f/i:$Gf#E16̎Gm3ܭҡ9bJ݊$_"qYT".Bq9Te 3c%~CQfǢŐ!/ƂɌ=^ɡzK7(m7Fxԕ˰lc+꼽ZYn=ׂ=ňAڜR-*E tc)jY'b)cKWZ#W&/[G-αߝ9[,YzNWeۺiYwmmP7$Tw5M-#-?eä'ٔlu -BmdҰ5JF]kBw(rNG_J,|0UXVZ@X4=QݵmBN ˖qЛ9aI? +GSΓ:"-{hQɂд$}͡JN'=Z1uO @>hs1Ѻ90cKi5 7&G;<weE%VT<M } 03KIjI^PPW|zUfa$ʻ!Cl`č ߅X*o4i}ykɼ<-+)CɋYT^ilm8^F}Mb L#Z7)p:r.3txJ~x?8PtH3@4^qNFпǀ|#2y%G@<<@l$ƇoE%?ćam8A7gQ[Pv9^D`7ޢNܬJ +z< 7pZ*tV('o'uIsА{O[Vq\2&/a:b#3AZ\B,e}Rye#ݷ֢R-H}Ix}jQ- + 2BgݞSyy~cV0ZTR`zr_v+~8-B7g 4@pBTss:D]hQI jǧ@)!h?B[{Jv(/G(N:4ʚj> @h{rmYpV1jyUc^ Z*Lrr; :+/m  )!HmԶ!EQl?<<pZT2p}N}nv}f>ivVjƋ2􀝨1O+O<")weE%jk뭮灴[Ǟ[ +w"\(n\9EgZ'ul|ԃ2~Gj*C3P#T'?uRK6>f2>ytd?OA07Ev*GyEJ̑46q{պUԢjZdn0*79[P'AtŸt-Й-}5>} +$jr'n1\o=[UsmnJKYiYѮ~\@k؍vCG!\(on(xҘjS5U&e) 5HW¾F塱I-QHQv c{fL-wkthARC#451SXmƕPW#& ʯ q7WUwиuㆿ0_2ZO.Ս +V 솁kWom۷d҈{R9;8_3FGwSܧqqB`Oj.eiסH\q>#절P\nLXIkzƮG&Fiԇٱ*+w1dAƋ`2cya`wlrFM:Jۍ,u2,/ۘʤ:ooV|ϵ F-hq1bt6gcTeJ@2]eXm +ZmrIlb.~ֈ~앰EK@~sw{K&AF&UٶnZ]Gp =2]or~}gtKOY0 j2|6e*[BY4,i> stream -x]ɎW\`aJfKIKHF/[9kDFcO'X],?_g)*orH#'b6 ]_N_ks*`?#ȩb^eq{A9K"#YEfPN^ 6 3EFQ6D0dѰXE D -2U@If -),"d&ZI -7,O`H2[!Ғ KQӢ $Ţv KJ 蠍$NDYLF^䜖d(l:QF -QYϢ x$sW') rvIaDlAK `l1H$1*ʖ$)J$)+I4`Wrxi58 [< -+`$q$.pXr8--8-l$.p[&H\@0SK\.r,q:p%.p`]烕v q:2Z:MQ[` ʙ$. 3:J\@]t#+qZUA`Eٔ޵I޵.@E>$. xswVZAE wA!^` V{Ȭ7Sak2ܟЧVʤ$.]|,+QBE-+Bw᨜ L d @i-qA6 MK_x3I\xC0XUy0nR8a.dq%βߙ!h6ڈlԞ^7h$gjy&¤qp U!Ot6iОw2C w7l첿tĈ3*䓀kbϤ֨oVkyבlL$9@q%>?zB<0M2X^˔k]lpte&3Ij^L,/pېe2d6;sZ"x&xW'inwr `?hi]7_;sz^D U! pB;.dlz邁 ܺ&u%TP1 y2jգ%cQßS] ]uН9t# U!˄uοĭԠX!\ )-S`BZsD9KD X -6nC=c V+&dS@ ._cyǐ9 dIA^u!RPw#|W^BsmGq -0wkv%fR89MN7w&MDwc6M>g|7M>s|6Ġ]Zy-ɏ!8sz٣B$WŻ1y9IIѢ=QN)HYOGԨv[NxR8`M>Yz_;U!%n= jT1Xr(UӘoۙvs:id-~{&73Һ:ű=NqG}Nei)N|0aT-XoЕS|XAP?G[Q{;CO  Gz 9sjpMׅi -v'?9L_G7@ޛ_`*q љ_DH -Y9,LK(K?q]v``kq T[kvlS9 ˛t^8p,kO8jG}q`0x[t8s:>F$Wqh˞8p&,6'F&uSgޢ1[Oo+p]jz?l5o?}mR8`HXB> x=gF}g{KB6 (5:sEgL.gƲ^DJPē 7wR8H( okօv,X|Ga6mFR+soBZuW:Û ˻p-vCHV90Nxbܲ.shrwhr> o?49s%ީeOܪgK31jB]wD9 G/~օ<&Gj(C:c#goU1M69G}i#\MpM: EB~C{MMEfY}NAͤŤqq*_K}[دܷ9I%k |d3:_|ڍtx[օcϙQ{ߙ]Axʄ4]rx'u^B 7]n0t&ۜ/`Mq=;rTfZ X,`G w6g'u'{Ѫ.`ey=050;~zaDtgT+ˮz⨾oM@ݠ7cT{}&ejY6)Gl[ -BX4Gr;W0? 0"3_i+ehDvUb|?k w..y#(~&p-~pP?|I%<ͼ#_>CvdJB?\?4F7M,_4̏'gs^y>7$!Lۯދݥ]qQ+}5כ;_~< ƄGcZ`d~zd~nRv)p&Rݰ)n&Dג%%HUg/ymQb}ꋘ_+*Ψ\S}Yj; I.ʻV\S|.'1nTRSͥ) .ՊҖ:FmG+yCqmknx9a!䣐7о@Ot}kr /-'k4: - -_Sy_ UHU+fM^WR*T.nT;ƊپLB~&ݚ*.=bT%uLa~*WZP~Y%7;}^‚}[r'?WU0_/cd~*dku0BKn4$Zى˯IriqsyQxpGG_yws?W?nue [u{2VoLomDKdZ^_P_SS׍KNSTi[vɶBՌx|j4}tPEp?.S-qYKl -Ͳ ȾZl?M%EFk2jnuI[˂yM+~svJJ5OƩT\e9ny)t鼭\\ rZh.zv2P*iBt4]c)J,OZ5hkR+|jj{8t嬱dB]St%m,eo{!E!-}s7[ * Dg9sB6R4v<g2G_Cs:^ ۂV/o j|rUx} L4 rMCE#QqJ\VS':* +x]]}_ρUQ,$0$!p7C~N-YnU۳a^Wtt$˶9kDFc'3XL?_g)*orH \T1{no﵍9[sƟUTL1j/2T8A彊 QĜ%,7('/YUq*  I*aha֢h"g*уFmu:sNHIU'IGgm$/iI_ȥ(|qiQ_lNEb:Y%t%Q_tFe|ND.CSLj|rNK:c6ÈB'(,| gQ_V9B+Ŕjyt;팤H%$ +RKeK %J ؔ$+ +9J<ഁ/ueY8_,9 ؖ t68-i$.p \%.p`\I\@RsSp8J\@Rw-qw/`GLrx%. . qlJZڤIڈ txz\k+qw- q?Z/+q=tI\)D5O`+eRxI>Qhqaܢ !K\TN}& +J\!RK:YK\2H$.@|SF.+SwAKVDaDE  @J# w޳s&=d%.@^0*m zXҁwY)qA,I8[ B"c C'± j<(K$qk]ND _D _2H\@e[E|A(qLL$qA1 Vu :%.Bs)0%.+N$. f"qBJ3It3Fd A Me-q"4hjIGIDAq(q f`JQ_@x%.MLsD|q$.Ht3I\|J\l|3J\5|A'qAAq,qh:%.&aiIKo& Әob'7G" ,[p`'I$qAIo"7\$L8|4 ^3$hPGl 4*ks$qnbfj +ⲁ"OU"bf|Â9R)v]?N{O_~5wxby،]t6j!|ƆyqҀE7v6/f2 yV[!HcO ;MSTĹ@@)-s'^M¿p0oDsBZ}~?~rN?<96уVui_OE)̿iEv{;4s<ߧ; 1<Mi|b4EC)`^.\4}i~N݇5ΒWyi@S|1xx"AcuΏ*c|N8lAA%|$ ɝHLA&f: ;˧_7z^u6 ۦ{ӄ J|)rT&%Bјq@l3zѪ /οTv&]|?Wmߝ"af\LtۜSuw2&[9"YWlUJT4YO)72]ۀkYnɸz{=%enS;Fo2ژagyB+\ї4otSm-[@lxob$ 5PSmm1_iJPI,t>lo- 6- Zxqtaa8|$xJ +x_d(u>mRg=Dgd n",i- I!WqUWqw]2ދ=ZU!R{ |ƤL][9 xW2 c6 yF.UǺZ\c,W-w7tۼ92z73)x-n*7mȊ229x-dsJoIګ2o@pCT9PIm6G\ڴӮf9p=D_ U%pBj$P3PA`|$Γz=}[0uu4%oc6ǁn"2WBwUɴ DM/y+-P.nSdB26r%`) T-V-6!h^JS4==a Kj~u]W" }vzU&E[k;B+wS \wbm*~Po@zsSj4,}`ܞ+/}]{{}PφK#c`iKcCho UlfN^G6eQhjfoo5߿S +'RԨv[Ax8`M>Yz/ǃ𪒒7Jl?5[*ӘM5,x7(26va:kqߞD4#+}mP{}A=ΚAZƃq &̪؂<W wBp'ao?z$lHcaǑt80, νr麒R8C0+P wk>nnس|[[ퟀ47؃6ǁ4Fg~ !dpgZ"}iN ZOf6A@!h~:zzη J_u{}y`o/ &`<o mAǏo Ul'偽(#6ǁgޢ1["[tcdwۻ7Lv{a38-~A!q+7c+gy ``oIe7{p6Zm9+7+y3h}]8)?"9N;~fyͺnPeO,lޟ=Mo]Z5z(xk?]8m]hC|Vdl1G*xGHrܯ;ߦ]nl4+%8|>{[[M] v2_KaY>UGB(qx UG .*݆c3wguL&`AsK!fql^.)+ &~_Wooc8HĖA.x|Mӵh-mӵY3M÷Ȳc;:o_>V7׵k?;Bw.ez}Kj/p{$8LGol +1r˺o=*GV['g36gAs|ںWm>z>!C~/車mO) ^ U%̻zvzg[P@wΏh0^m"%zZ"=w{}[Y淞cV8 %E67)ln +u!8ş;gۈ\@~^pJ?^lvڴ4ߒ˱*w$w0aLi3creS箹>f*Sžy)|`$ЋsAǟk)"͟ Ssd*|H젘󯺞@.ྨmI畞Η_/W1QvrXV,aL/ט_ؤ|+>!\NHm儋ᦘwr,B uS"kCX]o4_t#jݭMWʩJZ]eq*W/%kP'At9 t955VU +˥ r|XK4_\YRmxA6,fhW~]yslkNx9P/\}^+ty8/_Lv CK*|2L,GK%<6xH> @@ -1868,7 +1886,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 268.656456 99.933071 249.906456 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -1879,7 +1897,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -1890,7 +1908,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -1901,7 +1919,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -1912,7 +1930,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -1921,92 +1939,99 @@ endobj endobj 163 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] -/BS << -/W 0 ->> -/Dest (cb9-61) +/Filter /FlateDecode +/Length 4884 >> +stream +x]]8}_/haahh؁bf؇;U3,apZ̔oUVt +KGG!9lşL%E>|dM +M%V/YN&s8,J&S[TpH3s,辭9bte{iq?qu! te1:ڙIȓp-6D*8o1ݖs.c!zRp*mT8m{\i5ݏwOᅲܭݟԁº :4n6;@W&;A1jqex<vmsn #cZ \|c&o304KaOܪ9-ggT,򊷆0c..XGDL2֑5nGpvk.;A-l:iһ9 u%; +eԕnX>ʛ_?_% uo!t/.H`hEb^OxKtPh͐c6/Vo>+fY'Nki +O; 0PjtnDD#x.;nslӹInQ3iU9cW=ܰ|sŗ٭CdYֲ5,[l"/)'h]~ +y>0˃.`~J]8BP;l"vKvq)0,o-+ +]pWWGF>#ZE3+< ͸~#)eeuknr'&1#P q }nc6ǁѕ[ YAQ3\l_||=ñT˹s]lky? +{>qZva8p 3pVݵ N]}nZ[4&?2_KeY/:jp[|9lIKyl`)e%y*JvUz3 Mvkk(;2X쓤p{tm8ɛ|ᙀ[U2w9N1*=ز X]dWG+Yp +bc6ǁX@Q[UE;wwÞwkoUZqvS^7fsIbgoU 'JMw@Xn (1ߑ7hs 3SA֕Vo[/m%mA/|)y.Ly&V#KjӞD[}YR[ \o4Kj0@,V#bU%U֋=YR[}YR[{+ݢw7hs<S|fRͺ/zOXcKhgXVCiӞxk][-WVi6\R9H<%o&HW|.u{nKodYޖ H*?rzk=FbE(/{mU.1oA[ײʊYuk1)%=*y)b>G p.jՅs˫y +75՛_qG0LC={/pϟYL\d/32r""88)72+^l\;[16NFb$ ڼnjwa9}VJʇz$Yaj`.1?EQ Zv˪Zz/"F"v.I +\`S?}W# ]HzX2X"+t|+!V!\N}儋C$/°ڮE,_e}YZC\u_u= ҵUʷjzd9U4ԒC"z9)l=5(^/\[R)Zn>[h=Z+ )WdS$ƈs-mp7—<BRJ+lԝ]Hԗ_U&_/TTgAJ2Mn^rm8wJ }{lBtkkNJuOHZX(O^hnוx3l,wƝ8wAo;o*|&6 sd{fN8RX N:Z;I^.Lq_N> -/Dest (cb9-62) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 163 0 R +/Resources 4 0 R +/Annots [ 165 0 R 166 0 R 167 0 R 168 0 R 169 0 R 170 0 R 171 0 R 172 0 R 173 0 R 174 0 R 175 0 R 176 0 R 177 0 R 178 0 R 179 0 R 180 0 R 181 0 R 182 0 R 183 0 R 184 0 R 185 0 R 186 0 R 187 0 R 188 0 R 189 0 R 190 0 R 191 0 R 192 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 165 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-63) +/Dest (cb9-61) >> endobj 166 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-64) +/Dest (cb9-62) >> endobj 167 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/BS << +/W 0 +>> +/Dest (cb9-63) +>> +endobj +168 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/BS << +/W 0 +>> +/Dest (cb9-64) +>> +endobj +169 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> /Dest (cb9-65) >> endobj -168 0 obj -<< -/Filter /FlateDecode -/Length 5056 ->> -stream -x]MܸseH?$X,@``OlMy)JiQXUd%H%s_R]~|*z)O?.*orH (|_6寿{cV|$G*2!!{AH -Fs`κ>) `6 I f 3l4NJ&($ ;ZL!9B*уf -),Eh4"3HiY|lY)oRlq` bl)aEd!-+iEmL䜘SL}^D4c6ILÈB'(Ybl񤭔FᏔSFMaщi/1 E QFb^8ƨ\N"H6eb$lʅ% mfDawAb2ai,lA `u$qm"qnF:m…ZR -NJYSbG K>X K. Kh xbl%.;*2$.p]2:J\FV)i x&$.p]1iQa k=nAk+qZghBfI, `=V҂U)Ŵ4%.)LFT ]f 8 b-*`*R3 l-q<]#qAޠ&234֒hj)i^g& ]E 0LSi4!q^,~2GL-)Y^n& R-V[ M^oF -$.:(v%.#Mk IXoZ'q%74֛X 6Sf ;ᢈiNS-8 M`N7p3ބG/n $^oFq3IJ3 Mx^x}&'&^q&q@z=Vq@{1[Eq@|y$nL,Sw 0"hq@ᏹnOU"&3w_K6z!m?&?{i1? kCft7JM9tQM1/FFb*tY fgf3֋AWQm=VR8oWeƞ60S}\-s'^Va4Wۡݘ뻟.oD>_wߘwMU\KbGr:ۤoMXj+(ܨC\:}[}FLD {Œ1WŠN$bkU?܊qO ~Vz sn~}ބ}u^T|vx;@C҉B' 8N5B}R]&^e5a`PvGtNӥIPmu% #>]9܅}y$h-aϷeɰ#fѠy@dDy^U%Ck~Xz#,?7pu 9OW~`we(ΛMSw4nOMϿ}X筰9q{*m&oek"דv^|jZ;v6VFLkKs%nݿ?dt3d"B_rȬ*\v;e Ia-CPq7:۲s_f7A!Xh],yI߁w\?8"c:oLKJ߷ma`qנ/^W'6e2ZuS gR[Q)X~t9 ] n.UD 3Mϲz+v$ .}8uLkÐ)neU2\W] Yqd!'MØy$,Cpjۺim7ن^ -l}[_G E%ǘy9@> G .*݆k3O(o H ޷.ǘiN_]ɫGN6[L.ΐCЊI;9<,&C'=_2ɽеđAs_(uyc"72ו md~%{nT;&b1@߿3[U}Q{("cs]y^gXCdiy͝ѱܜ&4e5Zetއi`4ޤ8+Q`saGd)c Qfю1{qޜ$hL!',fvb,V{uRPH*y.5V4 )X1t=A^ REc^3U%踙kLXꑺ9nux'Ϭ^j=Xzkk'\ ~c:cbWگ㪒C>n!bH'Dcvv(q'αrέ^>s^XeȠlOó Cqc:zXwxʺБ)]%m9aR9DA@SQ9Oot|UɗQ;rD>vDEпaqk;[m D혲F ZU#*}]k^'ilz{O;be~xy8"W YU%l@_Ё^X@okyz뗧o 9 @W;?pJ:v$t>:} -aLp!xʘy F<~yH*: GVB3¿T x'#â֕#tH@},t׿ˀ_Ahn`Cu Ň2઒:[q$t>:߅1xc-kS;t?re'rTZ0=yj|L67{&+-Atɦy-u4w! eeתwV}PxΠyyƒAZ~EN x# zlb61gN)aL=󕿾4a <7\_М>2sCSD|jb1?]ylݾ'1/ # bBvPeq`FƋ*osWzkOݰ/jQ>*P!4|(f1g/)B5Ňb3Kͻ({BT%?ssmәK^'|ZJE)ݫUZ[QcTR_rqE~K)7a*@r5_.E7kOŚ+-buJF4C1\@kNtc⣐/\}^+*Nz"4f&U*e~W!_YJxlVZyt+f2I tkb+idMۊTyעV@ -xI\Fke'~Q~.Lq.LӜ%o'd vwdC.cdmܺ34 EXM#ElҒ4yچݢb/9MePSS[_ڰ -]kiGi|i,͡p.ӒF˔|mg]t:(-Myle&6=ڮEF%-infۢl& \`j/ڂRV^#>`i*}nXZ Ot֗uΡe.-TˢfQurnubEmJ]*-E tc)jY;Nb+S,-^^ ]^.x[q;䬾ddծR"vl{mn-3Ջr^3vn:)W3`|d 33!?]j4w2G[C9" H MQd5>)ұp h7oKE;ݥڈ[:V O?b -endstream -endobj -169 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 168 0 R -/Resources 4 0 R -/Annots [ 170 0 R 171 0 R 172 0 R 173 0 R 174 0 R 175 0 R 176 0 R 177 0 R 178 0 R 179 0 R 180 0 R 181 0 R 182 0 R 183 0 R 184 0 R 185 0 R 186 0 R 187 0 R 188 0 R 189 0 R 190 0 R 191 0 R 192 0 R 193 0 R 194 0 R 195 0 R 196 0 R 197 0 R 198 0 R 199 0 R 200 0 R 201 0 R 202 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 170 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> @@ -2017,7 +2042,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> @@ -2028,7 +2053,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> @@ -2039,7 +2064,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> @@ -2050,7 +2075,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> @@ -2061,7 +2086,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> @@ -2072,7 +2097,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 496.020714 99.933071 477.270714 ] /BS << /W 0 >> @@ -2083,7 +2108,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> @@ -2094,7 +2119,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> @@ -2105,7 +2130,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> @@ -2116,7 +2141,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> @@ -2127,7 +2152,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> @@ -2138,7 +2163,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] +/Rect [ 99.933071 382.338585 99.933071 363.588585 ] /BS << /W 0 >> @@ -2149,7 +2174,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] +/Rect [ 99.933071 363.391563 99.933071 344.641563 ] /BS << /W 0 >> @@ -2160,7 +2185,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] +/Rect [ 99.933071 249.709434 99.933071 230.959434 ] /BS << /W 0 >> @@ -2171,7 +2196,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] +/Rect [ 99.933071 230.762413 99.933071 212.012413 ] /BS << /W 0 >> @@ -2182,7 +2207,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/Rect [ 99.933071 211.815391 99.933071 193.065391 ] /BS << /W 0 >> @@ -2193,7 +2218,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/Rect [ 99.933071 192.868370 99.933071 174.118370 ] /BS << /W 0 >> @@ -2204,7 +2229,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -2215,7 +2240,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -2226,7 +2251,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -2237,7 +2262,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -2248,7 +2273,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -2257,159 +2282,151 @@ endobj endobj 193 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 268.656456 99.933071 249.906456 ] -/BS << -/W 0 ->> -/Dest (cb9-89) +/Filter /FlateDecode +/Length 5023 >> +stream +x]ߋ$~ +K/X` 3 w=kXEVJ̌T@ݕ!}T2;sI^~Xſb* ~R:Wb_@ɤ|׷ ~m.okw])b2)dRTPd)E!|JQtXV1Bb1A >+Eb'G1|rA WBR[AL^)sD zʼ31_Բ2VFdbbVVL1d!K(iel2”V! Ejd9V ,CXWV ieL(Y-+(9}Ld2LmZ%Ťym(jd dVF_+NJ9+&KN+ jd55 2K L3g |.S" | cIu(N%pԐda\ Pa CTаx& h˰ p˶8 xE  1ĥY”%`tOPB`8G K쬆 %ZY` L0pM0pkXa԰b|VlY%9H0p܂湁>Xaw=a  w!A V{yҰDÂuO@+rPZVKqebhXpTaA>x5,]GZpb5,] Aq4,3tղblYÂ,y @,Ӱ`l,P "phX6iXeװq 0m9`XʀAZpT4,]q$5,Qװ f6%aA,eԲhp4,HR 'ְ)TC^Â! B }dCDL.aTMNk,% RbW4,@.e2&x#ᒆe5,H`hXWdGd9Ȃ [D(sNÂ! A 2հ$Z+c+yfְ s4*jXiLHAЏ$A$?H6ekXt3kX3dkX۔|3iXP,dAħaAHa`ejXP\FYK7,Mxʼ-%L,!ZY4eoY|a Jof f DD. d7\ ȤwF p|[oH,gVW ,7K o5 I]4,sTW VQ謺l`x է~*|fNrӂݷcFw_|M+eGIL_nc(ڙȓ=<"D*8/pp>ȐXdvf;_d +4GJ_L?ސZ 0cO O|HbZT`'&^˫t4жNnxsz{+G ~??1u)V}H|k*vM3uvV\ϵǷHa;r?0  ߱[n9oo珟֖a0!occyG`A߱4bH6cWmN621XOQ4U'CV}S7zי̮c f=bp:@a5~=˒+bs="i ˊ +-;ܺ! PJo& {?21IvuPTG yLiiN&W`xgŘI +RC~fu8S/Ol"O(|<41˪՞{hݩ[)֝q?dtr<qjs?ix4ҙîg1-b*w ,&$rKc9)%F})vxFgsqJ[BqI7lbQG$yNc.leח>\֍HEx[]](E/+{ɞYs?<bxk٠3|#o.Z"jzxO6s}{^۩'3ӞI:Mdy,0RqG&9s %@INɧT[K$۸kx{- ^my&X⑺xΣ.2G"Ȫ?~<*,𾯁𹅿{T yIu?GSi4,ǧm$n7ɄƳ.޷yF/a{l=6J5Q1sÑW2ŏTntUs'5>^}_Ϥ{xNNC>f ZOG4r# BD:: C oYPf(Ɗ]@,/P[:w7s+Cϊt"s(v<؁?"hq-Oߗ*Gbn߸|nPcumkgDE^奒,i(Zy/r:CY#`{Xn=dQjHUAwlі' y!uFu-s'ȢAlA\R DHbv:R9wf0 R8իF1]φ0N0n?MYkr_tP"sS:ZJ׾_s[#|G xO5~0YN]HѺۆ!D(9ay$9or=|Ksvb*~l0Lx,cCwJY5C?D0>Q('A(?.nG}D63c=\o keZx1.h1p0r+w f{4Wb\Lr(QgI6qjl]Se:*7wt(i5A(;CͧQWˋ9 <,`4]9RGvAJ DO2sLڹęqNпR1Ib?t|T{%Y.]k +8r0]t78h0E釜=yӟa@ܮĺLRlF<\O=s^;Q +;ՙǝ=&ꄮx#nK:uy6NFr<19g*fKi@5"Z$+4\I1^dܣX[DՕ-" +n8-yb'S5);,q +n?T69"F=+[ +r9ȍ, W\*4}ݥ,[bmBj]>sйNO:_/薶7*צzh U5ԚM!^/ +[hwZSo\ [R)׋Zon-4MV+/"b+ifj戥qMk?"vKHJ` z"u6r,ԔPajV!+oPUgน,-WK'27y=H==6am`$픚U mVn:z*U<kkVau|VD[@w 94S~[9C΢=vrl֓SӸC+url%B|Zgq }u6tei</i$'QGGgן7?mC ߰uE=|Q$7Ub6s n^n`5]CPJ{bXư#fQ72u3-V,vI9NJvp2Z\kWRuq(e1o]el%dIz{U]ta\RƋ훮.*fwZV(B{z}gcBmިo=ݘPT.{wusZL%Eo5/lswʕ:Jk-*SLwQJ-XG:Ziz]]iz-Q Boi;ldVhnT^jRu^EDva ¿̝f@UO+./_#G.!m>s45JF]{: ;>uPP l_@YY`Vp/yÿy!]&I;I,_EStzas81 +endstream endobj 194 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] -/BS << -/W 0 ->> -/Dest (cb9-90) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 193 0 R +/Resources 4 0 R +/Annots [ 195 0 R 196 0 R 197 0 R 198 0 R 199 0 R 200 0 R 201 0 R 202 0 R 203 0 R 204 0 R 205 0 R 206 0 R 207 0 R 208 0 R 209 0 R 210 0 R 211 0 R 212 0 R 213 0 R 214 0 R 215 0 R 216 0 R 217 0 R 218 0 R 219 0 R 220 0 R 221 0 R 222 0 R 223 0 R 224 0 R 225 0 R 226 0 R 227 0 R 228 0 R 229 0 R 230 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 195 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-91) +/Dest (cb9-89) >> endobj 196 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-92) +/Dest (cb9-90) >> endobj 197 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb9-93) +/Dest (cb9-91) >> endobj 198 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb9-94) +/Dest (cb9-92) >> endobj 199 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> -/Dest (cb9-95) +/Dest (cb9-93) >> endobj 200 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb9-96) +/Dest (cb9-94) >> endobj 201 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb9-97) +/Dest (cb9-95) >> endobj 202 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb9-96) +>> +endobj +203 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb9-97) +>> +endobj +204 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb9-98) >> endobj -203 0 obj -<< -/Filter /FlateDecode -/Length 4851 ->> -stream -x]K$9ׯ3~I!-1̀P/әU]ӋrZ=]a;#/"l]-~q/39凋5)X%pu  I%o]˿u՛Rwb2)d*`YG -+QaEgh,{޲Ƃ}VXb'G[V>9XÕykU &ӣ\|Qy <#21 Nc Y1d : KpVA4^,ɪgaw}aw} Py`  ynkX]>jXC1F]@Hհ^xћ*/璆)+v 2^pIc R,*k<YdkXH<4, ԰ ,3Z ࡑK5[3PQ d@JY@?l D ְ g/fְ gװ)fҰXȂOÂb0Y8xjXP\FYK7,Mxʸ-%L,!ʃ,2nI7N/B_XÂY7ѫSYͤNwC2i<."Өa.o"r{ ̒qfuz|:e`VI3_ɑI2GunLgi E<L>ST3s,s1S6?_~{._~RgڏGI _n1L%r>SGHeI7\L}2LAUuY]dv_ ?l "9vD}g7X /؉/>]0fh 79s~_׿qO_.w?Ƶ~̓6 )P֢Mi&[3%>K>O|FTvp hb!6@X Yx+*בDy[@x.h]ke[姥`(Un(Uy( [AЉLjyilGQ16Ѓ(~q)h@kURJO9 CDeu|0 zpaf^xk^*<;.V_fB*ίHlԓjH؞U99<ҜTMFoSIMf"sHJ#fH:[bQg#%*6,]t:T4Fe-nhڴ4PfyÛQ+m/:N5f'M]9 -}@97Ο)R5ɃCsyAaR#< x/U!FiqC?cDbN2eQvψ9" -wQuid|_ jk2;kr͐ء+H -lms=zݶira(YY .~9%c&wZu82u 5ד!"u+=LmoWҰwsV(s]ySZw/s}ƩtEW $՗G7̜d -]Gx/:X4)ۓ+t;:FIsCvϦA,BK/[04szqitS #WEE Ǝ0(HDu -9 - `*TyP[AM- Js\S`oܴ0"ʲLv-6@{:fFhVKVA])ˍ[c ʴW8vy;ݕ\lJtE}Đ acձ:1`, cw _g_(AvFw9퀌RDV#=h KeoZxldHc'ǪGAѻۢ;4/{c0^%Jwy݃uʭ-z],;h1_٦=JU=F},I{ٛF^}iVR_A~ -*d1DHŨD뜧eݓjނ/wT"R9`hX$.䜾!*FCMV$!B "ʎ{FDZ:QEDOlLpO5Sͱ:QM8xnoUC::]uyT!/dICޤ%}sOiω}&2Μn}y|S.ǖ1RӃ2I)W-,, -V[; +ek;wz=FH}CA`m{:1,£n[XxƗN qe}k{JCa*xX]k8V؝a]d};PWItGqw+:1\ 9GOrtl2zʹ1_},aꜧIIF/`äw}bt<9:X<*VrLO.'O}OpO%QwLNoKz5+YNnD'G0^l YԽvީYOXAr,/?T|3 eTH\'V䷋ -?HduE{$S%);},q -i~h2ԮVo7Vݖ,Oorx64]. -҉s<+吆D;n&#K9]ܠV֧Aܖ7*GZzi4U:5]!^/ -ۚx7bnĽ\iE-7R/窥,l{+G5ɷ& cR$G@5Rnzk%$t†fz#v;9^fjʭ04MדoP:U~pMJWMdlvFzZ8Ns١\Jfr*t{c e=&T%ud?+GmBv39tS~[g9CE7{رm$q'vy{7kul&v,i47`<[%IlAy?.y -^HN#w/v^͏{wl]GO&_y\64k~yng`o%]GP׹#1}8}7]h|nf}prT4ڤ83f|ĕ]:쇊p2KS rIzGUkdznC4^ oZ(B?=ZȱvhԷLt*˸>+m=ۢaQr1mtT 7F[ܴ9F-&SnO^J={:ZFMYiy-Qhi~:;dVhqݩ> -endobj 205 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] /BS << /W 0 >> @@ -2420,7 +2437,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] /BS << /W 0 >> @@ -2431,7 +2448,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> @@ -2442,7 +2459,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> @@ -2453,7 +2470,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> @@ -2464,7 +2481,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> @@ -2475,7 +2492,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 496.020714 99.933071 477.270714 ] /BS << /W 0 >> @@ -2486,7 +2503,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> @@ -2497,7 +2514,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> @@ -2508,7 +2525,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> @@ -2519,7 +2536,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> @@ -2530,7 +2547,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> @@ -2541,7 +2558,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] +/Rect [ 99.933071 344.444542 99.933071 325.694542 ] /BS << /W 0 >> @@ -2552,7 +2569,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] +/Rect [ 99.933071 325.497520 99.933071 306.747520 ] /BS << /W 0 >> @@ -2563,7 +2580,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] +/Rect [ 99.933071 306.550499 99.933071 287.800499 ] /BS << /W 0 >> @@ -2574,7 +2591,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] +/Rect [ 99.933071 287.603477 99.933071 268.853477 ] /BS << /W 0 >> @@ -2585,7 +2602,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] +/Rect [ 99.933071 268.656456 99.933071 249.906456 ] /BS << /W 0 >> @@ -2596,7 +2613,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] +/Rect [ 99.933071 249.709434 99.933071 230.959434 ] /BS << /W 0 >> @@ -2607,7 +2624,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] +/Rect [ 99.933071 230.762413 99.933071 212.012413 ] /BS << /W 0 >> @@ -2618,7 +2635,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/Rect [ 99.933071 211.815391 99.933071 193.065391 ] /BS << /W 0 >> @@ -2629,7 +2646,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/Rect [ 99.933071 192.868370 99.933071 174.118370 ] /BS << /W 0 >> @@ -2640,7 +2657,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -2651,7 +2668,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -2662,7 +2679,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -2673,7 +2690,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -2684,7 +2701,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -2693,149 +2710,142 @@ endobj endobj 231 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] -/BS << -/W 0 ->> -/Dest (cb9-125) +/Filter /FlateDecode +/Length 4449 >> +stream +x]ߋ$~bU/~ÑB>?_Ꞛ^Inٛ*I]]%}U%t_rԜɻ=M%V;x&/E'%pvƐ6cӟ~s5_~P%g V]!&kX#f rCj bH`YbLb ՘ yA{AG%(=Y@.Q٥,UR dՓŋ%xEd '&ej +dA*&UvW%k^-l0` ^,j Kd,CNDΥ5fd"d !Ƀ,0!AANq€PIb@(Il@I^ C(B&"&p 8@a h+-0V|% x+ rIbarѕ e` p0Pc +0`$ B2Ƀ,Sa 䳅0 +0YXB) `d "}@AB w! {[X\@XbaAR34Q‚ܥ(CƸT-,]8* w`G D.1<R‚E-,@wp7G]Uk)D.`)XX/|БC-,H]jaAlaAzAc `a0l1`x]Oz n‚! +",,HՃ%haA D@Ƀ,֮r-Y8 r,,,@D*!6ȂbY)ZX$sXXcB>Z\ɀkWlaAR`[Xw.YX1# WȂba\+#Ȃ DYXPdA4haA YfC#-x3EP d@JY>lG Dc Gf|}SlaA'aq𼷰RAK7=MxƸ4T,!Ƀ,1nI7N/AP‚7ћSElNwc2Y<."da.o"r{,qsz#|9eVٜ3_͑I̲$snL洁"+L>ST !gY1,}9b|e~O_=L3eY&QH07M Mn"$!|M"EH,Γn*$\1m=/̄`fz2L`*N/Vr/og9 risUBRHcR\b'^/¿{w0o헃~廯?>[ ^I~C77\h=~=]>c=_߭\u#Uy>]m"C6:o ->$_+4@ %?0:u$,R賙u6D*d4tg qL; nvƯ Ip;GQ3FJ71\NAcsQtף@MoaFngØLosh(I*e_㘅u'q׎C\s47,X0[})TJGXIJ>zf_=*4-w6[}ڪK-i +l쾫}uΈ1#Bk16Kc?^,\ Yi>߬iYmmݖz/Ȧ+[{{-snQ~-4"|mqWEFx]iJ)(qjF~`}Ucr)}K qi>o]U LU1v9j7}b^W7,]&Av$4{~sd]7s-z=ྍwU9Ӣ;Kf*]9qa99AY[Qfc,µ,<,X"g9+a>Hp +4+,bHDgܗ5fz%[Kʬfg.e=cS^Ns)ѐ5Nep4X~+u|J9C45#ԢG9ݲY6*ziRoԜOzПNjO/?Ot"}F홗8D^ݐOzdmԆ]ݖ9!UӓqtFҾzADDd}zh&)|(15A\R!xMʆvEUG[ِs#>p[RMٚj xvjl%A = 5:@v!֑Az:bTR6/,]KWAt4S=뚜HZ~O'AtE~>l VغHN.~/ 5* F TNU䙾.g-WMtlvZI#=uK$y);r}voWVAe=&T5zd#7!p{W~^9c%{.Աy$nqݡ7dK֮_Mr-7`Dn( <ǠgbaDom]x-BydzxIdLe)~<e`o%#(uHr]7wO-@fqؗKn۰eפ8, |ĕ]\:púHS;xz_FSk'n)"yoZWBzxj"6ڡSGj0v<]e9<c{ %GjYxSiMpobn2ZSR1BitҕGnx=Zű;RǒŠvR޲w1d$-_ū¿׌KlUL3T#<ᨅ2*/)CDR)׹?q=8;N}&:`njwjx)Y`_L`扜~5UԿogO4W'Ͽ2 +endstream endobj 232 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] -/BS << -/W 0 ->> -/Dest (cb9-126) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 231 0 R +/Resources 4 0 R +/Annots [ 233 0 R 234 0 R 235 0 R 236 0 R 237 0 R 238 0 R 239 0 R 240 0 R 241 0 R 242 0 R 243 0 R 244 0 R 245 0 R 246 0 R 247 0 R 248 0 R 249 0 R 250 0 R 251 0 R 252 0 R 253 0 R 254 0 R 255 0 R 256 0 R 257 0 R 258 0 R 259 0 R 260 0 R 261 0 R 262 0 R 263 0 R 264 0 R 265 0 R 266 0 R 267 0 R 268 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 233 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-127) +/Dest (cb9-125) >> endobj 234 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-128) +/Dest (cb9-126) >> endobj 235 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb9-129) +/Dest (cb9-127) >> endobj 236 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb9-130) +/Dest (cb9-128) >> endobj 237 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb9-131) +/Dest (cb9-129) >> endobj 238 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb9-132) +/Dest (cb9-130) >> endobj 239 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb9-131) +>> +endobj +240 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb9-132) +>> +endobj +241 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb9-133) >> endobj -240 0 obj -<< -/Filter /FlateDecode -/Length 4260 ->> -stream -x]A$m賁%( CMbdfX琿%ݭ5j̫"?QJ?#H-o?~>yWǟfa K:ťPOJJM \ݎOst?()'U VJkX#|*$18F1X1K[VX#T V#DM ^H.CXM^/h\.Rx圓X<,`dI[<$eBɃ,Q -YY"S @.1yg,^%0 -"KB-^.oɃGHYOAD>Z<,HTD o)XYb,l o!@̐ŗlA<).YKq\#[  QRȂX\x1X@@$P, 5y*[X@D%2YX@@[FokC[X@@\ ]ZX@\vZX@]{rĒ-, .q0p5MdA(YX] -XX]QVuE ܍Ƃ!$ ^1haw#la:x3B@da" p7T O\-,H 0ɫ.h[hم ,,H]XXwQ #X !YX 0uM^uXXhaFaHbCG -GjaAbxdODdg=&D ׀5|Ha>}d䢄(@@(8ZX]-%[X!‚AH,Y]*Y(F J,,,@Dj@mN 9?`ȂH laAI1hMP,,\ p^` J,p 09-^,-,@ ^H,-,(efoaFh%j^bapv*ZX7LHi `G'L~04AJlaHXX Yo|XXP=dAgaAila`<-,A0ߌlaRbaA%&xV:,T, !Ƀ,$7N/CX‚7o"7Sb ,pi7o" -3):3c c2^VxΑ̤R5 -ff &\Oc*;R%+܂9Vo?b=N?fɔOubEbWny-D^$Q!J݄ 5Bb(p["E*s@0b`*ʶ]kJ]y -节9D*_CR4@F)Q?~8/~;ȍќ~:_O}Mx;o#@+O?~a9̵ag@RVh{*/)1ftyӪ|e)qrKo*w{F7ߴS2Ac[{z.SZ˚=p׊PQn0+N9L_/(/qQ>Fʻ6:o4@w xK^PA"D 1W8-2 -KO+o_C u3XC6z ]K ̦c~j:1UT}A|k3@6\oxnn&c.b*暫ssEUYFoǪfg^wtN)9+Ϣ:1m1<28*ipr9¬:sX =W8ֵMn׉HD{}q"rlHa9cܗm=I̘GOJ:\tO9 "#+cGH |GhjEuc k+d~2Ye۠Sl׸g&uc,\УXE$. -l 7Y8jNĀZ_pɑhw>sV8_3#,1dèzwsb83UBl 7Y8#)JJtY(Zl 7Y8fHG51i҈Yw\v-<6\E“D~;n0-}JLu|Bu02 GsslË~09SUcW=6UtXfEˎpI>d(O -bҹ -^_Sݯ!/#.m2 OW՚n{! B_pa1Y<5q!F:IhΧzwa5}tݙ]jچfÍ\&zf*1~Q~3cӸ4\{.x+)Аc@-fF{oXȻ$Aǵ'4;=e NL#0OWaYtQSUcb\a{$e*X0 GO+&0۝r %ϥܿVn2|nwqT!ksU:1Ģ;yܙq@}\M ڙߑ6Y0]>d_f68Z/>BXcoEoGt?-ҷ/Krh^M18=Y3z΅߾_cS_*~۷OVZ)=}lSy-g˾Lʫ ^S^U Z>/1O= -Gӥ,iUoXwj.GKz=LSҋǛϋa~:xAkIOd5N^,]:s%)9^pJ26Z?jznahwW/ Dᖬo]Xzj8Zr%&3y,=ptKCsYnec vGՅl,9Nh&U -ljڍhvjj%A 7=q`jz҅(#q/W[9v2˭OKRjmDٺ:IWA[tRCm M0F`}!7o褋rs2k}; sRԨ8S0(euw8}GرuGG2==Y&zr#vA>85od:w$M9 IoWZ̗f/^͐դ:Gې|;- r*f|(n&NLc#]*? mk0;>і f|0Ѻeb"Jީ#R;TZn9МwP G=\c -xw3с*[@F5FO,MVkjYXL-SlԿNUh|SVF-Q؝v~+cI1hyݩFmm<o-2[tS%{w.uVd0lGbP(PxzpaR]q6rcK0c"_"`Q.f>OF -g9Yǟ5oN zE.>)%Ւv  -endstream -endobj -241 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 240 0 R -/Resources 4 0 R -/Annots [ 242 0 R 243 0 R 244 0 R 245 0 R 246 0 R 247 0 R 248 0 R 249 0 R 250 0 R 251 0 R 252 0 R 253 0 R 254 0 R 255 0 R 256 0 R 257 0 R 258 0 R 259 0 R 260 0 R 261 0 R 262 0 R 263 0 R 264 0 R 265 0 R 266 0 R 267 0 R 268 0 R 269 0 R 270 0 R 271 0 R 272 0 R 273 0 R 274 0 R 275 0 R 276 0 R 277 0 R 278 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 242 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] /BS << /W 0 >> @@ -2846,7 +2856,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] /BS << /W 0 >> @@ -2857,7 +2867,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> @@ -2868,7 +2878,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> @@ -2879,7 +2889,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> @@ -2890,7 +2900,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> @@ -2901,7 +2911,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> @@ -2912,7 +2922,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> @@ -2923,7 +2933,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> @@ -2934,7 +2944,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> @@ -2945,7 +2955,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> @@ -2956,7 +2966,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/Rect [ 99.933071 382.338585 99.933071 363.588585 ] /BS << /W 0 >> @@ -2967,7 +2977,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/Rect [ 99.933071 363.391563 99.933071 344.641563 ] /BS << /W 0 >> @@ -2978,7 +2988,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] +/Rect [ 99.933071 344.444542 99.933071 325.694542 ] /BS << /W 0 >> @@ -2989,7 +2999,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] +/Rect [ 99.933071 325.497520 99.933071 306.747520 ] /BS << /W 0 >> @@ -3000,7 +3010,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] +/Rect [ 99.933071 306.550499 99.933071 287.800499 ] /BS << /W 0 >> @@ -3011,7 +3021,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] +/Rect [ 99.933071 287.603477 99.933071 268.853477 ] /BS << /W 0 >> @@ -3022,7 +3032,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] +/Rect [ 99.933071 268.656456 99.933071 249.906456 ] /BS << /W 0 >> @@ -3033,7 +3043,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] +/Rect [ 99.933071 249.709434 99.933071 230.959434 ] /BS << /W 0 >> @@ -3044,7 +3054,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] +/Rect [ 99.933071 230.762413 99.933071 212.012413 ] /BS << /W 0 >> @@ -3055,7 +3065,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/Rect [ 99.933071 211.815391 99.933071 193.065391 ] /BS << /W 0 >> @@ -3066,7 +3076,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/Rect [ 99.933071 192.868370 99.933071 174.118370 ] /BS << /W 0 >> @@ -3077,7 +3087,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -3088,7 +3098,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -3099,7 +3109,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -3110,7 +3120,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -3121,7 +3131,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -3130,159 +3140,146 @@ endobj endobj 269 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 268.656456 99.933071 249.906456 ] -/BS << -/W 0 ->> -/Dest (cb9-161) +/Filter /FlateDecode +/Length 4154 >> +stream +x]ߋ$ ~¬-ٖ!C `H!w^SuL{" 3%U*,ׄW%<~J:ťPg%PqX_c_~wN8FWk!,&W V2X)Rb+WbAT85@ ,` .YbbAPS1XC7y3S4x! gRc5yP#rpHUsNbK%fo ! e&D)d +dN5xYкA}x\l*x^\O. x!I&#b"d>UYh0-p"Q15w`dɃ,01C_ da@,ql@r,, +DK! bMs-`yȒ8[H@0 rAj w|&Pqoer$.:* wba0ޡG$n b$.da ,,@G5y*baA腝 + )XX0vqZX>YXkkW2yk:k^a{ߘ3"4eDQtA&"ӑq7qDe=t.{vk9xFGno~(2EMAJ%S˨;-Y˪nOǷZU ]h{}Z;":)m# R-WeNUٍ ffx,2jTS9I*$HW"pn)v~ SobZ;,H>tf/v~T3:d'SmU=peD;>Yg?+ДpNxIR>\ti_0-zyg|8-/<F^hu+):j#bWB|YMi f|wQeSk6}k{ aWycy>cM vXW]ƁnXp~ SܤM<(:r"-<p|+Ø&TCXɼ7I_Љ429ќEiΓL`6/$rNQLuٹ:Q-u'뺹{g @⻋+[}a6*uFoEu" t_# Pq'&P ]?ס prx:Rqs.F:~0F.FXtyX:QsOs +W3l^҅WER-8F 8}޳ x͘.# ع:Q}Rj&oRo'kxq}js/w9#ĄyOd]9We7j^W¯1(8F䏄 $Ip5v ]oob_j"UN`ԕE#zj÷|XLFSctӐ3)=;-l>yfKeOSe|,TC^NII>/}o=)zԓ9ް($@:I*N\?^Y N䧃]D$+{LZ\,IoN}OJ5s&{d=Qr%&3 y,px+1]𸕬;[?ns`V6/x,]RLnմ} TJvpAz<į|F6?XM95$j+gfRTdZWQ֦NoE|S%g@5+Aל\ӊ>7io'_J9OpFG *R*,&'WC7;y;갥e-;+쨯 (KwmzM<[r譮š~:VD߄VrMiC^LUahw%玝O#t=;F|\:6$kӗ}և U0J^ai!7o複CY=EJQLAO7p7|};NԏG"vlݐǞL•IۈmbWrlj1xku{+:i@@f -@fO^!=Iup)+.8WZt8TxS\d1AWy4鳆!KZyvmyB`/sZ7B^gsvhԧ_Ll*-y{Zv7]5EQrVXC \mtZ\ F5x$_w=ss1Z`jF:t +EZ!aHu^hc`DO`یV?GtuJS1œYy _M!e%oO! +endstream endobj 270 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] -/BS << -/W 0 ->> -/Dest (cb9-162) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 269 0 R +/Resources 4 0 R +/Annots [ 271 0 R 272 0 R 273 0 R 274 0 R 275 0 R 276 0 R 277 0 R 278 0 R 279 0 R 280 0 R 281 0 R 282 0 R 283 0 R 284 0 R 285 0 R 286 0 R 287 0 R 288 0 R 289 0 R 290 0 R 291 0 R 292 0 R 293 0 R 294 0 R 295 0 R 296 0 R 297 0 R 298 0 R 299 0 R 300 0 R 301 0 R 302 0 R 303 0 R 304 0 R 305 0 R 306 0 R 307 0 R 308 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 271 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-163) +/Dest (cb9-161) >> endobj 272 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-164) +/Dest (cb9-162) >> endobj 273 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb9-165) +/Dest (cb9-163) >> endobj 274 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb9-166) +/Dest (cb9-164) >> endobj 275 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> -/Dest (cb9-167) +/Dest (cb9-165) >> endobj 276 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb9-168) +/Dest (cb9-166) >> endobj 277 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb9-169) +/Dest (cb9-167) >> endobj 278 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb9-168) +>> +endobj +279 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb9-169) +>> +endobj +280 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb9-170) >> endobj -279 0 obj -<< -/Filter /FlateDecode -/Length 4524 ->> -stream -x]A$m賁%( ! &1fX琿-ݭQ"%>*&=~ G88Z2_~>r$?K3tKfI矕@ŕb]_O鿷}9Zs 䊔`@+%WJL`kX#|*$18F1X1K[VX#T V#DM ^H.CXM^/h\.Rx圓X<,`dI[<$eBɃ,Q -YY"S @x<KUM^K[^%!/d0`\ ^,٧j K"-AƏN$*"l:Sx XAB!/ق da@,ql@r,, -DK! bMs-`yȒ8[H@0fɃ,T ,, ,2ܲ޲BLoaqI2[X@\R촰RK[X]"4ylaQ|FXE ܍Ƃ`$ 1haw#la w!N {"YX\DZbaAgi R 3yՅZv!jaA"P  5ZX-p7-,H]  H,,@|suM^uXXha$1yc瑇ZX‚ ‚ Aha0m9dx]`aT 2pWæ(!! daWKCgux A.lakW%B‚! R }dCdɜTf JʨǠU6y^(8XXZ &x钅 -Y0U,,@(r[Yd[XL,,Y ZX QPefoa"4jI:S,,NSE 0MPi)MdLXXh,,@beɃ,XX Y7,TYYXP}v&[X{ jԛ-,zS,,Qo3mf2dIHQLdATy LB txԜ fDFo. ֛\. -dx]d\Dfk -3)Zqb \2^DbxHDe)\5@X3xs &\V% w(RKVL FvkivY_O{fY)k?ON:EbWna"/BQ!J] 뢛 -Pp[C؊ Udff<B(۲GJ~(/a59.!)n@F+QYMite_r#3O7O ~O/0~\.Ïk_/\k{n1??GHԠ+2\s]eoa%ԞHǐJ2WG Y-BZXk|NJ Vf4X.,DZ7] u9Q,”9 &쿳,G -FKXs}fTK)Լ_fz~bΞn4WqVn}Δ_mm^6a7×avQ2UUw30s'(8 Umл whZQ&Qg9ԮI~>Q}ԊE"Y'yF|76ѭC0;[7 $h\>18*2OA ?NkY$fwq@ b -pcFULHQԣ~US9 DY0{o1ߎwˆ(E׵tRJ\:~a̫;$T*s3淩:@u)_w,&]~>Q^JN)oETw C^}&Fḩϻd"݁o9Jkc9PH1^.yM9."h9sOFzI5ܝ$Ou9n+fzt\W@H3 R,GZ#ǚsղ^+~&}5xNMΨmMr Wqͤ(=-Ǥ@LQRz!ݮޛ+,ɰn)$QiqqԘ573hWSTu7+˳Cؤ ?yd|:>t~f>1>Nyλo.{2j<~}c=E -?T(9y ^ħϖmlҍUul28홂}:@[Čf[GIୈ\?\H(ӳE>Q䫾߽BFaֈ֯sWb Z7Ysd;_>£l3CƸ0*/^DF˦G It=8f=[-b}`&$f.VyL9jd:YIx&}!:mUf0ղV%ϊDStg尝B$JTM82C sD", Nq}W{3cݡ 14x{) ,轸Ɠeٞ!W'|;Y,>y|qT9P}q>'f⼼NInL6 Β]NBS]cIrX~`WPwm4f}y>8`tvʨejѕ+D;E918#& ~l᥅څ0f!=t{ƁwA_0#az>Ot͠06V0-E#nCl>3GBŦ*pq -'(hܐ1F*=4rXc7s7L!fOCq{jw ,xS~/Ɗ˸K_N ->uiҜ3n{OZ!JVG.՘ 'ǥE7)JқAg\#븼09Nym/Iz=tg=Ij~G'3HB֔~O~=lI}Kh/@%%kRS6?nz6.kW꫗DᖬSJs|*wQRn2cuSc-[zCkmb}T]2ҞjR6T.hvjj-A w !t`5=BH vRTdZWQVW'7hԢsS%g@o {oȯTi -Dd񫿬T=V S+SyK)tzUHuҀ.*.쨯 h[wmzM<[r^ -aM?+GoBv+9uW~ݐW9S0{ܱu$nG -vy7xOVחv}*@a%0lǤ$"o%̡Č_g -zB͟N|vw[71y2IOydm78׼v+#hܑV]74_vZ̯/ԾnCz_ -> -endobj 281 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] /BS << /W 0 >> @@ -3293,7 +3290,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] /BS << /W 0 >> @@ -3304,7 +3301,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> @@ -3315,7 +3312,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> @@ -3326,7 +3323,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> @@ -3337,7 +3334,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> @@ -3348,7 +3345,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 496.020714 99.933071 477.270714 ] /BS << /W 0 >> @@ -3359,7 +3356,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> @@ -3370,7 +3367,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> @@ -3381,7 +3378,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> @@ -3392,7 +3389,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> @@ -3403,7 +3400,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> @@ -3414,7 +3411,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/Rect [ 99.933071 382.338585 99.933071 363.588585 ] /BS << /W 0 >> @@ -3425,7 +3422,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/Rect [ 99.933071 363.391563 99.933071 344.641563 ] /BS << /W 0 >> @@ -3436,7 +3433,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] +/Rect [ 99.933071 344.444542 99.933071 325.694542 ] /BS << /W 0 >> @@ -3447,7 +3444,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] +/Rect [ 99.933071 325.497520 99.933071 306.747520 ] /BS << /W 0 >> @@ -3458,7 +3455,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] +/Rect [ 99.933071 306.550499 99.933071 287.800499 ] /BS << /W 0 >> @@ -3469,7 +3466,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] +/Rect [ 99.933071 287.603477 99.933071 268.853477 ] /BS << /W 0 >> @@ -3480,7 +3477,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] +/Rect [ 99.933071 268.656456 99.933071 249.906456 ] /BS << /W 0 >> @@ -3491,7 +3488,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] +/Rect [ 99.933071 249.709434 99.933071 230.959434 ] /BS << /W 0 >> @@ -3502,7 +3499,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] +/Rect [ 99.933071 230.762413 99.933071 212.012413 ] /BS << /W 0 >> @@ -3513,7 +3510,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/Rect [ 99.933071 211.815391 99.933071 193.065391 ] /BS << /W 0 >> @@ -3524,7 +3521,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/Rect [ 99.933071 192.868370 99.933071 174.118370 ] /BS << /W 0 >> @@ -3535,7 +3532,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -3546,7 +3543,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -3557,7 +3554,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -3568,7 +3565,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -3579,7 +3576,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -3588,158 +3585,156 @@ endobj endobj 309 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 268.656456 99.933071 249.906456 ] -/BS << -/W 0 ->> -/Dest (cb9-199) +/Filter /FlateDecode +/Length 4927 >> +stream +x]߫帑~?y"<,@``B=73 ˝d߯t%٪o{%T>}e5~3'9R1/_oZEX]ow]TPT1{6}[s'9R1Ũ IޫBR0 +3|t֍If3IHJ0\44&eaqR0G!hab ΑҌW4kTHf1-"D+FJ*`Hix㜖`[(`M[,Z' i ]IL-:h#eR>'Ĵ4bӬ'"- CJiAbZBb#qb)0%.+v$.H3Nₘa T̥4[dK\OiH\,l7(qA Qf`F,Ҝ83I\\P*J\aHL)Є~l"` y'qAJ$qAJj+qf kO€b7Y8Ҵ x: 0.9Ld҈7 6Sx3J\lpQ4) x$b fnMx@x3]LRxi7JLNLq&q@z=Vq@{1[Eq@|9F `&"ULH4Z\6_cnSD93EɌaטed{o{~]Y)[~ O.p`y،]RCGUX?F܌4m_dX683\_/" zX,[i +0{|B]0;Sa)*b_ e܉WUt0zVXݘ_nOO?>3oW7zȽ̃4orᙸϷ?~Z"n bf[:‹SP(kg[8)M_䇎[䙆ɞ׾J>\KpKt&#T.K)T7am؆~2GsVbhÄ߲s:iZ+֑s#`hj5ihLsYd?D9_N|ûwƜu:#8> *-iˎ-OMH:PT0vȠH`frrP^9ˀrTj\ +bۂlnE3W#4W Ž bac~]9 4^#"m'܁%3yZud^gR:A 1m B pp_\(BՃd"^]!<ÈD%n)t?Eg@:!4[ȸuΣݏ&;^X/hόn= z B &^,PnWؙӹx"1B3*N/@cbzp(u ީ= IPWVWg=Iw7$1{u<Ǵ *Χm2%MO)cռQ{XowNQ)H&ٲǽb&u,Y8YLgkU~#e3eN_9ҵW@J3z{s0Lef``HI[Z~|9";||& W~;yf#¬ϼޛ_Bx} ibϕgzD[;v(YAɔy0GJ +7sHGޤ]8YW@2k0ɍǍS~`@@ +^(΃jN2j]篁fY^pݵ +Z@i>%AJXȸߤu1dgBiUiF x~1O߃!^ՠ !0+\z΄o{tF8.t`'tA寽8?qFОh7&IpO:ׁ'o Lx + ++7uhNhq8ws:p,~1 uԿFpݨ}hzQ-o9%z rR:Wc%\/2׵g]m}ƺ_s뜸 nA`iCz~uYNUCe5: 3@kOE=[罶IOЙ_>hB 买Xmk:ⵍǼ6AP篓:Tv]9<@ -lͳhő''Ԃ WBmR:P#~9s&w ]=U mh 6hڨ4oǀ8a59@[zhy`cG|Q&+fms_ԹO>sҺkzY6ղ[m>1j[ *Miޛӹ 0~g޺3vf#7jc>A`p>0"AIṀBlX,lcҊ_mxZĎ3kb=9m6syvbgn9Z^Na~K1P!f2ۨ[D':XӚe<`Bgv_$g>rɆWO\VF|yZzV}m m}"cԞ Z!2Gu7s@85 UӀ<C[y͂ {s|i6pA7syvݜh]A BCn\%6Sޚ &uܪвˆDpaH0j =Yrfl0seo9P.t`.5 FcႠl2!1|2=Owa5sX b8sѺ+h{(Kn.D'Bof3['>Z:`hF홀J& +Z߃C6gw`Ѥu yꇹ2ݪo`euh{XǑFFS">gtI)[d|@ZzH WN +8sGێ5j{K`fgeӟdO{7r1Y,$ g2'XhX3o߷DZ%O9Q<+o+)sDބ~ꮺ&rkCXMtݿ䵱= V.J;IKQK\d/9kO&KkaZjDo71߳4_{*\) j FOiO0vcDZ֩Ío7~d|r/ԕ[I74iLKSah.2>}PRfqRv*YF塲Zw~Ac$-gҭk]u*yŦ–\ bkb_7;}^ʂkM*wX{SLln+f觥& :a3 čFߋxkdҌvLse?ׄڙHN +#ѥnIǸq5;#eޑ_'tE-Y=Xᖎ5hN+8c\ȩCEv6/PğڈK:e%O +endstream endobj 310 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] -/BS << -/W 0 ->> -/Dest (cb9-200) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 309 0 R +/Resources 4 0 R +/Annots [ 311 0 R 312 0 R 313 0 R 314 0 R 315 0 R 316 0 R 317 0 R 318 0 R 319 0 R 320 0 R 321 0 R 322 0 R 323 0 R 324 0 R 325 0 R 326 0 R 327 0 R 328 0 R 329 0 R 330 0 R 331 0 R 332 0 R 333 0 R 334 0 R 335 0 R 336 0 R 337 0 R 338 0 R 339 0 R 340 0 R 341 0 R 342 0 R 343 0 R 344 0 R 345 0 R 346 0 R 347 0 R 348 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 311 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-201) +/Dest (cb9-199) >> endobj 312 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-202) +/Dest (cb9-200) >> endobj 313 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb9-203) +/Dest (cb9-201) >> endobj 314 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb9-204) +/Dest (cb9-202) >> endobj 315 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> -/Dest (cb9-205) +/Dest (cb9-203) >> endobj 316 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb9-206) +/Dest (cb9-204) >> endobj 317 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb9-207) +/Dest (cb9-205) >> endobj 318 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb9-206) +>> +endobj +319 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb9-207) +>> +endobj +320 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb9-208) >> endobj -319 0 obj -<< -/Filter /FlateDecode -/Length 4985 ->> -stream -x]MׯI ~005VX4c`~U*Fg1[9TCRg$#H&S_~'ZĘח/\Ÿ5Gw&jet]f%$g^e\YRF뿾p%&!ɹ%㼐GLIJ.XcǤ3lNJ֘($EA6h0A[) f䂐F)1 (ki-4IbZ@FJ#Z|i)--{4 [\RZJsik[, yB[L $bP;IHblQ^i)-RVLKHS11(H4lFAH3+4H)`ŏpbzM`1i/1E/Qz¼$q aXLF%01-6h$X4ҌlqKL@X\1 P- ql1$. Z$. ЭUIK\@[@0SI\@`\J\@\@)I\@\wJ\@ ]t quy#qvF/qwj%qASL-`Džt$ ,x -X.^`e11* ,xDe%.]0iaA$ ,x8<4rwSF 5x Do -q;[@`G! PbH\:a4j1y xWG4PBE-/$qb" x%./Q #&) x~pX4 0-ZbZZTQ- 0 -/*IĴHZJ\ޓ,1 P4AЧ.ʀ)4ha) THx.%. `#qvI!x |RH'N₠ p,1 `%.c$JQ`` #qA0.}l\xɖ 8x *y"t `( Z": % `Ҵ $؂"q%xR-p%.4%. (+ 0B#DUKiVq%./*J\nHL)Єh~l"` 9+qA(qA(#qf )O₤nq)%qA_r%.Ho"m"f Y࢈iNS-8 &IJ$+qA(q ě)f .4.ýs"(.=}֯ K[&o*!U6smS8`}3sa}r=1V6<Zʨ=47ƾA{m:kdhguV{F}^(^ -| J 9x]⑀ -}`PkgОﲲF'oA͛9@-`PwG:j]m9/cξmyl@lA{'F-k!:׬76s>a呜hy``>L߀%zK:灗 F#nxfe5>σfcy4ǨoC&E۾Yޛ90/LG+ o.w2ߨ0yЂim`7t#`Efϊgz{a}|%Բ:j. -[3<-8ls:UO[(/xSkA!Ce{ml%ᚷVͮL`C=ܑ -Powܳ.0j[`E+ލoT6 9aO - _?Dh>j1jτ5Q1NQ4cFQ{F#AH^{ &w5s Bf>Bw)sk+˿;~~6tȃ=܈څ /\j\N{).70jO1T9I I}5S*:rP6qJfah|Poh3l>Ǟ9{'DF}"<.;7wRWw݉-HP .Gc-]L- Xz=O 87^>![ ů-k_S# q++!*B~^V~𗒋Hxxa~3}E/yQz/YA GLYxUxσܢR8qiXe5>i+Ƃ^b~z w1/.tmXyzQU1'k*ma1:4kBӜ[— nKWQE`e圥Ali'Arߩ\4%i5M3lɗr>ArKsBj5_MPX*^utgG_{mx — oįܮrrzr8* 1Wf U"eYѶ@RMoq_IֱR ^ -=HQvm}騄L%wNTY#)$Uȣ낺"f -SlnWŮ@W;]Nyݕr|mš{K e죘M2|a5 PŕF_Wq]kd҈re 9>'ߛk#}?#b?q -[­qR_+m W5h(1 _۪*眺0.:lĦ@hjjm_j826u]R~8Odp>.cM:$_"qY됎TkE\ⲹauf2 ۛgmj.7/:̶EgM>˫h eZV~wvs`i"}mXZOz2:ɕ;oR5}SFu-lwbƪvڛ,nB,+%ljY8OQokڵR*ѵ⇼\nDr-C}:Us_2 -2j9){y6a!z!=}0[ ? `K;D!?ll4vlq3ycD*h ^'4E޿&[#a -Ҝfp6}"\Y _ -endstream -endobj -320 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 319 0 R -/Resources 4 0 R -/Annots [ 321 0 R 322 0 R 323 0 R 324 0 R 325 0 R 326 0 R 327 0 R 328 0 R 329 0 R 330 0 R 331 0 R 332 0 R 333 0 R 334 0 R 335 0 R 336 0 R 337 0 R 338 0 R 339 0 R 340 0 R 341 0 R 342 0 R 343 0 R 344 0 R 345 0 R 346 0 R 347 0 R 348 0 R 349 0 R 350 0 R 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 321 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] /BS << /W 0 >> @@ -3750,7 +3745,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] /BS << /W 0 >> @@ -3761,7 +3756,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> @@ -3772,7 +3767,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> @@ -3783,7 +3778,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> @@ -3794,7 +3789,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> @@ -3805,7 +3800,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 496.020714 99.933071 477.270714 ] /BS << /W 0 >> @@ -3816,7 +3811,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> @@ -3827,7 +3822,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> @@ -3838,7 +3833,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> @@ -3849,7 +3844,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> @@ -3860,7 +3855,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> @@ -3871,7 +3866,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/Rect [ 99.933071 382.338585 99.933071 363.588585 ] /BS << /W 0 >> @@ -3882,7 +3877,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/Rect [ 99.933071 363.391563 99.933071 344.641563 ] /BS << /W 0 >> @@ -3893,7 +3888,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] +/Rect [ 99.933071 344.444542 99.933071 325.694542 ] /BS << /W 0 >> @@ -3904,7 +3899,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] +/Rect [ 99.933071 325.497520 99.933071 306.747520 ] /BS << /W 0 >> @@ -3915,7 +3910,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] +/Rect [ 99.933071 306.550499 99.933071 287.800499 ] /BS << /W 0 >> @@ -3926,7 +3921,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] +/Rect [ 99.933071 287.603477 99.933071 268.853477 ] /BS << /W 0 >> @@ -3937,7 +3932,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] +/Rect [ 99.933071 268.656456 99.933071 249.906456 ] /BS << /W 0 >> @@ -3948,7 +3943,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] +/Rect [ 99.933071 249.709434 99.933071 230.959434 ] /BS << /W 0 >> @@ -3959,7 +3954,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] +/Rect [ 99.933071 230.762413 99.933071 212.012413 ] /BS << /W 0 >> @@ -3970,7 +3965,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/Rect [ 99.933071 211.815391 99.933071 193.065391 ] /BS << /W 0 >> @@ -3981,7 +3976,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/Rect [ 99.933071 192.868370 99.933071 174.118370 ] /BS << /W 0 >> @@ -3992,7 +3987,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -4003,7 +3998,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -4014,7 +4009,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -4025,7 +4020,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -4036,7 +4031,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -4045,150 +4040,150 @@ endobj endobj 349 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 268.656456 99.933071 249.906456 ] -/BS << -/W 0 ->> -/Dest (cb9-237) +/Filter /FlateDecode +/Length 4954 >> +stream +x]]6}_ρ(J >$,w}ؿܖ,[nΐѩ*IU%gTJ9w}rUM%VSO?.*orH(z_˶_]1Wr8ˑ)F텬,mH^h}QŜ,ᣳϊP,MBV䢡>+C > +YFCcvg + YB6yy&Z)H7R^V!<]|F純](B]l$Eb;YKJbtA)/99'eSgW>i)M00H! +y] 2&spYGV!lm\ƧMC4Rm *Pw#PAAvNy/݁(K6 +#ɜDw|V ACW^6N8ˬj O)aW&9X^f@9>]W:1N@h:wNeiAzdWuY1 ;YR ʜ8 kx"pVoڙj 'z%vyl-2k8(sangoU}8$3gy:KkwE|d9h>Z6 1Øg|&Voke '&>/!umX'}`.:paP<3|>!}&V1v3fC *h@{b20coֺ`M@ڰW6ւKz=yԑ'L"mP<`㧗"_`sc&JM^&J/ Jؐ>.he{P<ʀJ߷&J.Ke?u 'uz=femaeu]Zs|o,g_9$:O҉'[~ <7D=9շfKl.2ZiL4p +^<8+݃ӽ(uV 06Ah. +Q$c2/LX*mMB}l=.;s;p(N#p{cpExA)ʛaCFr958'pj652ĦwmhYz=oS+v+lZ==&rְ^˳*]jE9K;-P0\<{P">k,,Z뾽u_A~&򫼮nB4!Ldħ"5 3RժoY4q?7oԞҍg]6a\)}t>T&~7؜^)K6} /Cd1(kɄ5&ƇhP}VD<8]IN/my 1@'k~c Jo Ӽ_ru4Æoꥏ.A~Lde]AL0*= oR748K `P8"0(syPtf^4<][Gꥏ=%mWD. ʜPr?PJ7sW>G{cˁ2S `CiC"SV'.r͋,,w{6:lVn~ߺJ_ a㮗axXAO:$;@{|Olnu: ŷۏ_z~l3IqVmL^3uޑ>6[-#I')xvb.40_.u=2oߊS2nzo9!Lu)M Ty[\+'_~Z_}w8rX5,$B2>kN7%EU5qеe +ɼw$>Q7-FR֟9mיfKYK|YڦRU]XIF\S})Yq^.B׺TqoFߕKLH˥r͵:RJh.=@Rx!m959\'2u.§׋Bipzm"5,1,iqF2L?,WK#<7kPYI=5]*ꎱb/PI=JmI$Ucl*j2SXʕm.J%W(=}^ƂikKr&:?P6//asd~*,ɼtXSk@ +KBSrsd}z̜%oE dKFwdC/cyu͎[]Vn]%{;x%N&Ѻdqkv^4AMm҇Mе;/^`.х.eZh1צJ\qŤ#Fml̋f+5m#Yq[EF%-yn1m%m\`j/ڊi+}<*28R{M}mSqj%<9˰62yuQ3:9X\ h1ڤEl.F]I[5Z E VkE0n8OoGvoG%tebD-rwz)Y}$V$mnXksnQ$,^|WMs٬Hʟiäc30D4}?X!?]j4q+em á-8|%ZǸ[:Bs[>慜z9T/;?XtZ>yP۷ +endstream endobj 350 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] -/BS << -/W 0 ->> -/Dest (cb9-238) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 349 0 R +/Resources 4 0 R +/Annots [ 351 0 R 352 0 R 353 0 R 354 0 R 355 0 R 356 0 R 357 0 R 358 0 R 359 0 R 360 0 R 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R 373 0 R 374 0 R 375 0 R 376 0 R 377 0 R 378 0 R 379 0 R 380 0 R 381 0 R 382 0 R 383 0 R 384 0 R 385 0 R 386 0 R 387 0 R 388 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 351 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-239) +/Dest (cb9-237) >> endobj 352 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-240) +/Dest (cb9-238) >> endobj 353 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb9-241) +/Dest (cb9-239) >> endobj 354 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb9-242) +/Dest (cb9-240) >> endobj 355 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> -/Dest (cb9-243) +/Dest (cb9-241) >> endobj 356 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb9-244) +/Dest (cb9-242) >> endobj 357 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb9-245) +/Dest (cb9-243) >> endobj 358 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb9-244) +>> +endobj +359 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb9-245) +>> +endobj +360 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb9-246) >> endobj -359 0 obj -<< -/Filter /FlateDecode -/Length 4962 ->> -stream -x]Ms$@CF'1H㵃`!?5k$jYd||(\5~a_rFcpח/\^ϒcu$_vQyCןY@Qm {쳿^˿:jUgNrbQ{!)#IW1Z`n1g) f"p9y) f8k`hhL0F$aBѰX4#+=Hi֨bZDVJ#R!:㍔U') d @HZlM$.x3I\I#D'L(qAvE` ,[pM`NǛI7ыK(.w}3Ii]xA\ ބg+#391qę [% l5 I\4,SW 0"hq@ᏹnOU"&3w_cv[O/?aˏYV_ X{"6AWj) e2e a{t؈x_tc#1cY fgf3׋H(ȶyTCmYp=z>!^0;SW$:iRs*I2µz"Ve.H*1Q0L{{yd UA֠| Y:PzYE8:l5sl!b.tQ<QF}e7(#Y^Ajt,:.tX Oc9"ĉ- s 6xu6zyEDj6tȏ`[L-yu/NWh`.( O90A d5hA9sPZ^A9>B?-n]x#9qh>#%:AFz[ŬVu[,>B'"[ہy ia<.tɞcχXᷤt]́N}5qԞYM8ViN˞'lه[ >FCX)?tN8LF+\KMU ;P -\Osڨ$]I`óSͤybjL\=DVuwy}5sƽ1Fڼ΢]vi D3R9OWy~$'&?ׅ{~t^ۥ`ҙ7, 3Yg( L~J|9h"oڎ.㻌Wcʸ^W?W -A )uӫǓ:ӼJ7#?&Zutw>+oʸm)0G`2s`{+pݬ<6Σbyf׍+.ǖʄ 6yǺAYR<(k;yHPFm3wE@霧xOuoE7ԮxTh D6 v1b35֔4ٳɜi5&8ߞa]huWFvXޑd>(#g!3r+A 372 ]=++=pRg>Q 8dCz~9t?@inzL\KbZ~a":e3D0 -= ߾7n+GǞ[0|Ԇ -:Yr`.tf7E2XoUg"7APb.07s@y&o }]}F+,ǖ-9>E mU ҦT4ϯuDxVk^~]Ӽ׳6ak&̨mSɤy:$gnZ?sj94 'QkdgPo|FR:R[օ~9Wy-FcpouQ:=LLlBܠ.tY+VnS.׏,5/e숗2jRvقC6@L~񘲼[zF<=Z{1fF> l-I@2^C)>B?>>M#-Knbz&ȡ#ڨ}W8O1½|F16r/XLz*e{u[XBЊ9OUBuc 3ǧffmڹ9J )YF BmiyC[҉&{b׵.|Y:O -3CNǽ>-'PtR4Ț_p:ț3V1Чlϊڸ_d !|ڳRޤÿ́ĺвܿt_ #ҍ'm|\r]is-?#[I{y$oL)١ Οc0{2sxzaSOZg]0|\Xm8^݁G[n9s] ϒ'Zq@ݶ dD|6s '~&W,h:LwۮQ{Ʃn=BDxogR4pZS5}>6yt%^#/g}dgA}fr|B4cqT[ĉ(A[e♯Wp*,)\'@3 V{1n7o\-{ܿ\rY:g&qAO|Z9Ҽfis}Cs/5O~{_$c-\G녿18;)fW]]D0aT1'yZ8nX5>#7+bA`F1߽V.I*TS|(6C -t}V`S+MGkb>t\jztƮ;/TKWQ_)Eֵʨ3*W/9kO"Хhw" Sr'^.b{iTRSͥ) j ƈZJ_— oįܾqzr8醗&4fI*|2,W!_chWUn^*8x! Rcl^&i!?n][l%횬\c*f -+Sbkb_7;}^ʂkM*wX{5ELlQO&XV a &n4h{MʯmI3eCkWdKQwdE??/m4mܺ3W0M;EXM'&6 uku#T55ֆVZC] C+VGMoTn G-UoQ]mJG".BqUe+3}%~w?/:7/6Er]_;WWF{x~`i*}XZ Or֗uΡeJjYԍ=NN͵p45{WlUi(*]@MVe$R>EoiJmDJreƫUptY}$B]"vl{n5CBLuSCw{Ma@U.+&`'38'Kݒa5q%q5;#e^We5~Pc ,4 -U/ȡ"Y׽RBFm%e%O{ -endstream -endobj -360 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 359 0 R -/Resources 4 0 R -/Annots [ 361 0 R 362 0 R 363 0 R 364 0 R 365 0 R 366 0 R 367 0 R 368 0 R 369 0 R 370 0 R 371 0 R 372 0 R 373 0 R 374 0 R 375 0 R 376 0 R 377 0 R 378 0 R 379 0 R 380 0 R 381 0 R 382 0 R 383 0 R 384 0 R 385 0 R 386 0 R 387 0 R 388 0 R 389 0 R 390 0 R 391 0 R 392 0 R 393 0 R 394 0 R 395 0 R 396 0 R 397 0 R 398 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 361 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] /BS << /W 0 >> @@ -4199,7 +4194,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] /BS << /W 0 >> @@ -4210,7 +4205,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> @@ -4221,7 +4216,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> @@ -4232,7 +4227,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> @@ -4243,7 +4238,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> @@ -4254,7 +4249,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 496.020714 99.933071 477.270714 ] /BS << /W 0 >> @@ -4265,7 +4260,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> @@ -4276,7 +4271,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> @@ -4287,7 +4282,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> @@ -4298,7 +4293,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> @@ -4309,7 +4304,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> @@ -4320,7 +4315,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/Rect [ 99.933071 382.338585 99.933071 363.588585 ] /BS << /W 0 >> @@ -4331,7 +4326,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/Rect [ 99.933071 363.391563 99.933071 344.641563 ] /BS << /W 0 >> @@ -4342,7 +4337,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] +/Rect [ 99.933071 344.444542 99.933071 325.694542 ] /BS << /W 0 >> @@ -4353,7 +4348,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] +/Rect [ 99.933071 325.497520 99.933071 306.747520 ] /BS << /W 0 >> @@ -4364,7 +4359,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] +/Rect [ 99.933071 306.550499 99.933071 287.800499 ] /BS << /W 0 >> @@ -4375,7 +4370,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] +/Rect [ 99.933071 287.603477 99.933071 268.853477 ] /BS << /W 0 >> @@ -4386,7 +4381,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] +/Rect [ 99.933071 268.656456 99.933071 249.906456 ] /BS << /W 0 >> @@ -4397,7 +4392,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] +/Rect [ 99.933071 249.709434 99.933071 230.959434 ] /BS << /W 0 >> @@ -4408,7 +4403,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] +/Rect [ 99.933071 230.762413 99.933071 212.012413 ] /BS << /W 0 >> @@ -4419,7 +4414,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/Rect [ 99.933071 211.815391 99.933071 193.065391 ] /BS << /W 0 >> @@ -4430,7 +4425,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/Rect [ 99.933071 192.868370 99.933071 174.118370 ] /BS << /W 0 >> @@ -4441,7 +4436,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] /BS << /W 0 >> @@ -4452,7 +4447,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] /BS << /W 0 >> @@ -4463,7 +4458,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] /BS << /W 0 >> @@ -4474,7 +4469,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] /BS << /W 0 >> @@ -4485,7 +4480,7 @@ endobj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] /BS << /W 0 >> @@ -4494,157 +4489,197 @@ endobj endobj 389 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 268.656456 99.933071 249.906456 ] -/BS << -/W 0 ->> -/Dest (cb9-275) +/Filter /FlateDecode +/Length 5112 >> +stream +x]]$9r}_Q `20{a]ۆY?GfFU05wʐB"$e=|gN9E:_~>)9OMl )9)RJ4.[\5 iʸ'!;iiL%d f ބG. ěI]. fL@ V 7$gz"Kꊁ̭ꒁbJꚁJ.LDULHF]60_cSD9dư x5hl&_wJY(u!2t5HJB1"f-.nb$bL\?صɰXlpf;^D +]n:Oo#do$ +|aǔ~mfR}\YR1 y08^1VeJ1>LuE7]yJՊJ_gnyYEReun10\ttP qhr`S~ e 6a}"Ve*,\:]=i,z Bp<-~1uf ֳbPu^G9v'.) r,DnAQ/^ + +Lpb1<{5>Fx~.d͝Lx1ׁ@ +<.tnfnDVG)00 7Avywv DF6eJ$@g3ÚxArLu dS{&$WT`ò41 Mzqڏh]>1P=[ Y"Ry9YB9[攷9`&7٤Tc⩱'i|N8r~_}=8{<>Ve||9fgduԹy޷l3a*Z6| ;/m16Wzo#^1WZѿ\MBt!ׁZbdB8D6uC]m#OweVܫpd'cޥ$>,G@@Nԫ*zkqͽPY1Pk#!G'NΎY2hoPuaBc9ĺй}ee .xpc5FyS|//p8fC$M{,͚){ϫM9mePud V~&Zy8Xdَi]Mȕz mǰl+{푉Y_k{^,ojewP-(XBWP#r][;^ Z}^fɓ6*|R_.%)Q~VrtKUSp`GPZ|s luK;\]0ݱE/vtP\mKhp7cVGɏNM;c0.]sg'-Y{m.ΈrW*Zyk;k?/ݫEoI{ܶݴ>}V[mמsk5鿥b.r헥ftޯnwi7.}b +v++uWu%9`/ſcYv%5[7M;70~i_)Wol/Qz{v~ӛ?ʣzmZ[ g?pqm[{6۟!_ ?.76cpܥX`pP@+ɖEo0>0Ѿ= oG2=fs{c[:mCh=S;9nPu(S&K[~K SI~!PvX>c'k2"ZAPR= rO2vf~0>(t^q~S%\ӽQ6`2"8=#y< 9u_!I,Ks:;ِD~]å?] '㰁(-;ȗ!o+=7n񜔳ߺЇYl`߮mz^{ǘq)29(t G?۝\>vjk\MU_An,1<: Xy73 gI + thڝ9 Ns<^YHbg7)WpяAd66?u }j\axgoCdxbo-HRv~t>""2v$t5VWu"EZV> !}eA+e2kga mjejPFVsQuXgyTiy=Ńڡ)YZ-$Y,ʑS/0=t=f!!Ϧ=q]R6ϧ8/;6ҨN ጀIΜ|k y |Csk. 7MK87vr27]h|)bv@,壩eJSa2vY\]?M?5ӕ+bEhb{3E,__b54H}V`S<bt5~̵!Mg/y]rB~+}WRTi]gwF* %g.'E)E:w& +j\)IͷjOj.-LiP\^]I#Ɨkq(}mÍ /@u$6)$%wh\aB^/]U̦IeK CJJy*%U"c׍ceZ@f*f¼ҭk]uyBR8qwdD?':Xވ{ǝl*L&_gÃbz"æ:h-u|MM4b/9meP[S{ahm؉]kpGxٴbud~iߴ zI( R.Vᢿ\rKmJ>wEJ):E\ⲫ07Vf + JjӋw!Qfl. \`_++{?<~q/&2DZJ{i1Vӥ~:9,P-wcW' Zh'妶d}TdJDQ2SdTlZiYmT}&[ҡڈ+zK:@sjwgZK"vRl_7. j晚v9?;TZ3`XnD-u[qw8Fp7$nIakׄ{|n;qBWTG]M[z%FsoBNL*[=DXuIg^jɫ]@_ +endstream endobj 390 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 249.709434 99.933071 230.959434 ] -/BS << -/W 0 ->> -/Dest (cb9-276) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 389 0 R +/Resources 4 0 R +/Annots [ 391 0 R 392 0 R 393 0 R 394 0 R 395 0 R 396 0 R 397 0 R 398 0 R 399 0 R 400 0 R 401 0 R 402 0 R 403 0 R 404 0 R 405 0 R 406 0 R 407 0 R 408 0 R 409 0 R 410 0 R 411 0 R 412 0 R 413 0 R 414 0 R 415 0 R 416 0 R 417 0 R 418 0 R 419 0 R 420 0 R 421 0 R 422 0 R 423 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 391 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 230.762413 99.933071 212.012413 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb9-277) +/Dest (cb9-275) >> endobj 392 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb9-278) +/Dest (cb9-276) >> endobj 393 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb9-279) +/Dest (cb9-277) >> endobj 394 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb9-280) +/Dest (cb9-278) >> endobj 395 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> -/Dest (cb9-281) +/Dest (cb9-279) >> endobj 396 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb9-282) +/Dest (cb9-280) >> endobj 397 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb9-283) +/Dest (cb9-281) >> endobj 398 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb9-282) +>> +endobj +399 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb9-283) +>> +endobj +400 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] /BS << /W 0 >> /Dest (cb9-284) >> endobj -399 0 obj -<< -/Filter /FlateDecode -/Length 5083 ->> -stream -x]Ɏ$WY@7`Ѐ-FCcUUYZs3sqwpFVu+*Fh\a?Ȩr t}|UJEI3~MQyC,pQm \_/:jUGN"bQ{!)#I'$yb>I( ؂HQ0JHcJt-%(qA 0R ^pI4C [T$.@WEd.؂ [DH3Fda A Me-qzh%j)43PQ44blMH\ 61`$qAJIₔ`V`ǛQ€a "> d @HZlƛ$.@f ;&xB.x3J\ x(blAДv Nx$b3I\Cfaƛ)(Nw}3Ii]DA\`Vk#$hPG*Nhp/z(h/Ie -U$-Nh/1qmi -CD"?dF Dmѳl{t׿ӯLY1P |Jy&B+f!aᛔ،ĸLk`Ff )Fc`P[.>5ݻ]Y-闃K1Dhl|/-)7ڛ1HpF|%OK72G[ZDHRVǽrٮl)ܿltp!a:UQ鹄荵'.zO=קza(g’l=!yᖯcHv8?5_?_6`G+/tC -*f|z[|Z뢴um'gmy 6]`e=/N2*rȁ~ cvGIcʛzե3U:qFUӮzV8_ՋRٿ*;Ȏ -ᦼaXtIkh1=pM{sOak#Qo5,Ky~ -c5rJy\2 Q 3ǤDt9qMZF%mD 5]z4æA\i@un[Ic٥b#6Oz@(dA[ &%:q\иP 2ЛxؘАxY3yfA!pem6 -{2&{fX@Do̜TB{ -6Sm}`"3eNUbhM<w7fJ6ZbIqPa6=ڗW`:BTgqAoo -l?#.kH{GL:Jc|4:2ypt6q:D^Xm:vC'(Xu>K/ 3 DY#(#Hyd}Zåq؉~ag7-V|/M< N+=$g٤'LFx,O ,D3|ɸMyu$%p$hOMSox r=ѪzQAye;Ttb4"M1ҕO`~{Ri\!ETN|MNxU*yahxX2j~!4ΑZl9qM8y%RZ>N HSb~3F3?@㖝[Ņ]ACD $s:Σb\.%NB嫹;=Ȯ91D(&f+y>z"A8 hό^Y{]H2 Rtt5R޲p:OɒZo -Hq\axxV5MG<x6Q" j'>ܗw^0,G>y*(8MNΎiQu{`!eonS&yꎆ?\VYKayxJ[P[ЛyN t`yI{fz24|phZc"^9吏_xNSl;OQHgo##c#;~>sh= OY@;< Pg$hW7aLRPlz=fg#K{ǖ| FWA<aRyyz4F^H~[.K6紝æéM= (P6O"m <ˋw:4pMhu5,&l<^}y3^?640G/۾l=٬lgױ4oSX`+ysl'ޙ(.QL6%~mt/-Hw T3?A]mto@Wd˚sW f -+b:Ovgv~16ո!(0eL4FnlMZqlN!i]yw|m|?|ֺƩ9gt@!ϡO֮[Yr khLi.@;Z^NzmD>yRYe9Le!sp$>TnҘz@&MaՖm%S M9VS-} 8P:Ts=,_SCyhsŒvD32vo}"N^t{'A̽G"46J/c|#}UsHLDw f0{1?VfI*4S|6Il@⩘_Bv]lcЅufơ: _.J_E)]qVMkV!I\7M̖>wz -$jr'^.b4j*\nJKe8/ mDq-5V: ;Sk]zQ;W{m;^hn47MS>j_U &^;i:$ye0;$-gmVe0_/cM nH;qmx}\v)ݜurt\<^}=֏[6n]Ǟ$ML5Ahi.6 F{i: -} ָ3e|ivV]>8Zqpz]u(WwFq1ᆹ[29ޤ*kt=z7;]e),^x1Lfi^#j `i&}XOr֗qe'xmC,7=ׂ4zhA4u%oJUi(]@MaQn)OD/StFOVX+a˭=^\ ؟N-L,MJ=i}^ǠnH葩j~M#s*?eä~`8:j2YWN!_) Sܟd9NEhd^7jY)NsCi92.yoos&ҙ3jTK^M~ -endstream -endobj -400 0 obj -<< -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 399 0 R -/Resources 4 0 R -/Annots [ 401 0 R 402 0 R 403 0 R 404 0 R 405 0 R 406 0 R 407 0 R 408 0 R 409 0 R 410 0 R 411 0 R 412 0 R 413 0 R 414 0 R 415 0 R 416 0 R 417 0 R 418 0 R 419 0 R 420 0 R 421 0 R 422 0 R 423 0 R 424 0 R 425 0 R 426 0 R 427 0 R 428 0 R 429 0 R 430 0 R 431 0 R 432 0 R 433 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] ->> -endobj 401 0 obj << /Type /Annot /Subtype /Link -/Rect [ 84.259843 724.970079 177.650223 709.970079 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/BS << +/W 0 +>> +/Dest (cb9-285) +>> +endobj +402 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/BS << +/W 0 +>> +/Dest (cb9-286) +>> +endobj +403 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/BS << +/W 0 +>> +/Dest (cb9-287) +>> +endobj +404 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/BS << +/W 0 +>> +/Dest (cb9-288) +>> +endobj +405 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 84.259843 443.811778 177.650223 428.811778 ] /BS << /W 0 >> @@ -4655,636 +4690,464 @@ endobj >> >> endobj -402 0 obj +406 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 696.273057 101.433071 677.523057 ] +/Rect [ 101.433071 415.114756 101.433071 396.364756 ] /BS << /W 0 >> /Dest (cb10-1) >> endobj -403 0 obj +407 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 677.326036 99.933071 658.576036 ] +/Rect [ 99.933071 396.167735 99.933071 377.417735 ] /BS << /W 0 >> /Dest (cb10-2) >> endobj -404 0 obj +408 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 658.379014 99.933071 639.629014 ] +/Rect [ 99.933071 377.220714 99.933071 358.470714 ] /BS << /W 0 >> /Dest (cb10-3) >> endobj -405 0 obj +409 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 639.431993 99.933071 620.681993 ] +/Rect [ 99.933071 358.273692 99.933071 339.523692 ] /BS << /W 0 >> /Dest (cb10-4) >> endobj -406 0 obj +410 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 620.484971 99.933071 601.734971 ] +/Rect [ 99.933071 339.326671 99.933071 320.576671 ] /BS << /W 0 >> /Dest (cb10-5) >> endobj -407 0 obj +411 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 601.537950 99.933071 582.787950 ] +/Rect [ 99.933071 320.379649 99.933071 301.629649 ] /BS << /W 0 >> /Dest (cb10-6) >> endobj -408 0 obj +412 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 582.590928 99.933071 563.840928 ] +/Rect [ 99.933071 301.432628 99.933071 282.682628 ] /BS << /W 0 >> /Dest (cb10-7) >> endobj -409 0 obj +413 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 563.643907 99.933071 544.893907 ] +/Rect [ 99.933071 282.485606 99.933071 263.735606 ] /BS << /W 0 >> /Dest (cb10-8) >> endobj -410 0 obj +414 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 544.696885 99.933071 525.946885 ] +/Rect [ 99.933071 263.538585 99.933071 244.788585 ] /BS << /W 0 >> /Dest (cb10-9) >> endobj -411 0 obj +415 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 525.749864 99.933071 506.999864 ] +/Rect [ 99.933071 244.591563 99.933071 225.841563 ] /BS << /W 0 >> /Dest (cb10-10) >> endobj -412 0 obj +416 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 506.802842 99.933071 488.052842 ] +/Rect [ 99.933071 225.644542 99.933071 206.894542 ] /BS << /W 0 >> /Dest (cb10-11) >> endobj -413 0 obj +417 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 487.855821 99.933071 469.105821 ] +/Rect [ 99.933071 206.697520 99.933071 187.947520 ] /BS << /W 0 >> /Dest (cb10-12) >> endobj -414 0 obj +418 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 468.908799 99.933071 450.158799 ] +/Rect [ 99.933071 187.750499 99.933071 169.000499 ] /BS << /W 0 >> /Dest (cb10-13) >> endobj -415 0 obj +419 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 449.961778 99.933071 431.211778 ] +/Rect [ 99.933071 168.803477 99.933071 150.053477 ] /BS << /W 0 >> /Dest (cb10-14) >> endobj -416 0 obj +420 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 431.014756 99.933071 412.264756 ] +/Rect [ 99.933071 149.856456 99.933071 131.106456 ] /BS << /W 0 >> /Dest (cb10-15) >> endobj -417 0 obj +421 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 412.067735 99.933071 393.317735 ] +/Rect [ 99.933071 130.909434 99.933071 112.159434 ] /BS << /W 0 >> /Dest (cb10-16) >> endobj -418 0 obj +422 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 393.120714 99.933071 374.370714 ] +/Rect [ 99.933071 111.962413 99.933071 93.212413 ] /BS << /W 0 >> /Dest (cb10-17) >> endobj -419 0 obj +423 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 374.173692 99.933071 355.423692 ] +/Rect [ 99.933071 93.015391 99.933071 74.265391 ] /BS << /W 0 >> /Dest (cb10-18) >> endobj -420 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 355.226671 99.933071 336.476671 ] -/BS << -/W 0 ->> -/Dest (cb10-19) ->> -endobj -421 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 336.279649 99.933071 317.529649 ] -/BS << -/W 0 ->> -/Dest (cb10-20) ->> -endobj -422 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 317.332628 99.933071 298.582628 ] -/BS << -/W 0 ->> -/Dest (cb10-21) ->> -endobj -423 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 298.385606 99.933071 279.635606 ] -/BS << -/W 0 ->> -/Dest (cb10-22) ->> -endobj 424 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 279.438585 99.933071 260.688585 ] -/BS << -/W 0 ->> -/Dest (cb10-23) +/Filter /FlateDecode +/Length 4783 >> +stream +x]ߋ8~Ͽ"F+)B`eaazjw9jfiɲ.+wQ]V>²-~~p/395)XJ.&_YN&s*J&S/zqwoJޅ?I9%V:RX!| ++:[,EcA󞕠4`P89ڳ +ɱƂ[e&\05w&K5]pcK(i]c0"tHVAi]`&9*P` r ]7e4,( Ӱh$Lְ0aƥ7,֛X)PfҰ0t QTtATq Lz"t5,(1z3kX0MDjJ z3n(@&Ed5,֛lLgfYqf5c`s2^VIXԤ2G5kiLgմ"&JWba 6iG%4}N#D; D91Z^O7 G~]vjc.gtO~OB>Ap?:`IaUR G5yu2!\-n_돓?M5;#\CGH:2YD/jc"2V[I!޳.Ͻo& ?y4"i#KR׉&L'F2 7ƗQ`˄jt/,EE BXvLجhQJΗu$io/b9ziֽQfDW!lS"C]6_2;I,ed.|)ESGif7[ͷ8N6]iwT_Ni&=pI?(&G/j7$vA븠DB4,Q\قkm>upCH<ϡ\$IXo}\s`P;O4(Ss\leǑ6wEG,I6OgP:U»ͳ;33n ݯR]I\0[:-`Ȼ-tgi1tla +󁇾+3y9yA|Q8y4i9aS+\ƌ=>>u#66tӴ.7]sݳŽ<[K?lQwălF^d0*䳍72qYy"#[o֍|>PB.[sLfEzĥc_JE.WncvzJu\95}W]5yN4cԿ"5:ml"h#]afAk0 "C N`NR;͹ \ǽ]v[^FrfE\!iX{َnN'oeSj kള˝LfzW?ve8/)6y)!*<ۘ3(s B鼫J'=_^hzw-e$K0r|;1tM))hmhp[Ox=ul]Pn9ڶQ/>ʦ69hxDH\Y6Y9!aJ>h4;(sӹ:$~n]`ET%)"Gz;Ng\II_}~ݶXVOGE7YnE4(snD)Û_R3yu>n{V~f%wdx,Y NC1f?wH`j/yƟP䓎Nא)g>xqŞj|!m-@:d96ȉE.TO͹Sql7r?vu3?}. kl\G9@h*s e.1v㶻 F7k4,Ǧ%,7sC@rzZ)$+ Kxb.d_oNQ|q:Ȳܒ_or:=+dL#~,mu ؐLٖ`)ԏ>ԻP@:rC?n|ǽmhL&ߴ+؆MGBvy)7yy ג!kܞ>ȾwLx|m qIٲ[E; )U+)LqWˮhRSouϽ)H.0B.i2UWt]_-+}=ʱ6hoמnL t*Mq}.PG-YZю@J[5Z'Jk5SjLw^J-X{:Viz]Yx-Zޝrwv)bɬb/ݨJ۷l{nEE,J 3v2lVL 1QKi:c|Hܥ4y;DZdGa&'= +F9gtU%drKuY`28ӗOߜiI]s$AoI֩))e>~A +endstream endobj 425 0 obj << -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 260.491563 99.933071 241.741563 ] -/BS << -/W 0 ->> -/Dest (cb10-24) +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 424 0 R +/Resources 4 0 R +/Annots [ 426 0 R 427 0 R 428 0 R 429 0 R 430 0 R 431 0 R 432 0 R 433 0 R 434 0 R 435 0 R 436 0 R 437 0 R 438 0 R 439 0 R 440 0 R 441 0 R 442 0 R 443 0 R 444 0 R 445 0 R 446 0 R 447 0 R 448 0 R 449 0 R 450 0 R 451 0 R 452 0 R 453 0 R 454 0 R 455 0 R 456 0 R 457 0 R 458 0 R 459 0 R 460 0 R 461 0 R 462 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] >> endobj 426 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 241.544542 99.933071 222.794542 ] +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] /BS << /W 0 >> -/Dest (cb10-25) +/Dest (cb10-19) >> endobj 427 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 222.597520 99.933071 203.847520 ] +/Rect [ 99.933071 780.226036 99.933071 761.476036 ] /BS << /W 0 >> -/Dest (cb10-26) +/Dest (cb10-20) >> endobj 428 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 203.650499 99.933071 184.900499 ] +/Rect [ 99.933071 761.279014 99.933071 742.529014 ] /BS << /W 0 >> -/Dest (cb10-27) +/Dest (cb10-21) >> endobj 429 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 184.703477 99.933071 165.953477 ] +/Rect [ 99.933071 742.331993 99.933071 723.581993 ] /BS << /W 0 >> -/Dest (cb10-28) +/Dest (cb10-22) >> endobj 430 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 165.756456 99.933071 147.006456 ] +/Rect [ 99.933071 723.384971 99.933071 704.634971 ] /BS << /W 0 >> -/Dest (cb10-29) +/Dest (cb10-23) >> endobj 431 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 127.862413 99.933071 109.112413 ] +/Rect [ 99.933071 704.437950 99.933071 685.687950 ] /BS << /W 0 >> -/Dest (cb10-30) +/Dest (cb10-24) >> endobj 432 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 108.915391 99.933071 90.165391 ] +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] /BS << /W 0 >> -/Dest (cb10-31) +/Dest (cb10-25) >> endobj 433 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 89.968370 99.933071 71.218370 ] +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] /BS << /W 0 >> -/Dest (cb10-32) +/Dest (cb10-26) >> endobj 434 0 obj << -/Filter /FlateDecode -/Length 4531 +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb10-27) >> -stream -x]M$ ˒H}l"9,r{mXRSN\vK,z"Uڝ-~>wٙK|~xdM -=pv @ɤ|~.ϧvRƝ)%zο(,&rJ6(uB0)VtXƂ!-+A .9h,gqrec5\ Ia9 =VAL^`"=j'x xNQxʃ.6Z -P2+ٜm0!Y MRyQ0RL -ChCQy% G'w%t>ʃ.0>BAFpIYp次pJ/p,I<4 ]G AFUyЅ -kX@D3iX@@[hX@[iX@[.jX@\i5, . T4, `.;5, .{Ұװ9jX@]bg5,`.$UtkXt42iX]r6iX]t#ajQ9[ e  iX] z G (ch  z8]`ϓK4,]W0)}he\.QÂuSyŸW-Zٸ4,]gְo0z pFjuX pqCа` 0g*[rְ wK^f K4,8TÂ^4,]4,]{Tt5,@\ҧk,֦aAʰaALBY(h{ bfSRbCȧuа Y KANakSd .但C  "0!VwQ.5,\5,H!"CjMNksIÂ`(v 2^pIc R.*`(2#2x ְ.xiX=tA4aAYf`F.xl%dFBE Mi)UtLhXH4,@diʃ.XÂYÂ^IÂb "> Fd YaAqg /%7)P|3iXP(* h*J&!:i]|a Jof f DDN d7:] Ȥ񀻈L@V-7$g:3Kƙ [) h9 I4,sTg 0:m`x ٧~*̜! #o9\n̏w|?i88?q:H\v C;3y ->"#J2+I7QC1rnReh,:;3ӓq_/2SQu[SJ^t?3Hp;#Þ/;EZ"JQ x-/ - ]Zev]vZc$g47O_|7/͇?h7ߞz|VƌUbDwZgHyVA!*=E܆,ƽ˭>͗/W!z×m~F*l)yA"޳alIZN"4.LVMW^->\[zs9Z\ޫyK -Tcu2шٛ"=Bh 6NkEZKIu%90A\vL8. vwwE%eG{M:Hgl*3t(fzSɔHE*nrDt#;s1r-Xdr1_ 3"1v]-l -kOu$3N7+KTq2q//Wte%/Wr(:lv%$2e73; 7fD79IKN5-*y[]*tnT.za5H^");֌~[}὞zJ61ˌ 1n3&s qyӷ]z"v$q|y.wL8Λ -3}J]t8rhuXeqmj5!soye -!vL0E!q@e%5mkg0J7\[ȫK\?IuhjrӋR=ބƠq\cckܢdp&ƝnS]N @ EWCq / Y$mZ)+nÌi,(Nn4>承O8/SZ[&Ez}WB][p`#1"qupwd^S[qu)Z~ZTidY&ߘp? ," ON XA֞&O>w,BcT]<&sSgnHx񈩟^}rYhHKd㘱1D>@Ke4![uRx\BӅz쎘73~7$q -)[n(/@yP8M彯X(O;^%q\[@7(s&yc0}wӹ1}s`Mc21 ɪ$ ^eX;,'o21kHnj(l$c,kwZBbY΄k9$r)VVtoǷ]nA$9G9&rc)e%m5i5h޿WackU&[bQGVuu憋¸N#@J" gL8ҡk\VԍUU51(9\Ȑ3rļl16!9~ij9lacpJ{v\+*=.mW>&yVD+-h]2qͯpUK]#?X0EIM7fRʣSCqQVOi~[d-Pq9)bx}1YŐ$wO_5IFו('[sG/%J[2m#k/n麹917#i,6N,ǖeKjAt:/bjZ0Oa3_׵Y0'9\2?Hm7+ -.InN~>ȇ*&YV+K -mWP ]bS%Ī3 /;p%>DU7TZַĦzt3-SgΗO'TKkJcqj&+:JZI!~n%njr#q+Wj9tR]R+gR[~VevuʭFWj>b~\X 7~C|:R R:XaCuH}9_f_|B׬49M~_"4 qs)9^q+F鱡k- QPqU ҭԮ:z*U=Kk^a}VD[@u394W~^g=Cʢ=ذ'fq'ge6}};ħi`5Y\?JfLTiuY1Lay"INOO0)x #99?(-Yqۆa܏dEy,_PtDd粡zCǽgq;{-anÎzG]˄OVlo<`_.>[S*Vy<$[JC:;A\7eWa5[)WҚ^$uu]!4xf[W]_7fWZ(J?ܽ~ݯ*ڠQ{j{06ө4]esh[;B^=jA5Ђv<] REuhpvTuW,gR)f}K*Co)+#^@w4?KX2+K7*%Ҷu:ڞY8Gv #}"-J՟it^ yp!,g'ݔ2/qlg2G_a&'_ Fgt_yke -g9;92I(_Dfd:3M[LL? -endstream endobj 435 0 obj << -/Type /Page -/Parent 1 0 R -/MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 434 0 R -/Resources 4 0 R -/Annots [ 436 0 R 437 0 R 438 0 R 439 0 R 440 0 R 441 0 R 442 0 R 443 0 R 444 0 R 445 0 R 446 0 R 447 0 R 448 0 R 449 0 R 450 0 R 451 0 R 452 0 R 453 0 R 454 0 R 455 0 R 456 0 R 457 0 R 458 0 R 459 0 R 460 0 R 461 0 R 462 0 R 463 0 R 464 0 R 465 0 R 466 0 R 467 0 R 468 0 R 469 0 R 470 0 R 471 0 R 472 0 R 473 0 R ] -/TrimBox [ 0 0 595.275591 841.889764 ] -/BleedBox [ 0 0 595.275591 841.889764 ] +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/BS << +/W 0 +>> +/Dest (cb10-28) >> endobj 436 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] /BS << /W 0 >> -/Dest (cb10-33) +/Dest (cb10-29) >> endobj 437 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 780.226036 99.933071 761.476036 ] +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] /BS << /W 0 >> -/Dest (cb10-34) +/Dest (cb10-30) >> endobj 438 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] /BS << /W 0 >> -/Dest (cb10-35) +/Dest (cb10-31) >> endobj 439 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 742.331993 99.933071 723.581993 ] +/Rect [ 99.933071 533.914756 99.933071 515.164756 ] /BS << /W 0 >> -/Dest (cb10-36) +/Dest (cb10-32) >> endobj 440 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 723.384971 99.933071 704.634971 ] +/Rect [ 99.933071 514.967735 99.933071 496.217735 ] /BS << /W 0 >> -/Dest (cb10-37) +/Dest (cb10-33) >> endobj 441 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 704.437950 99.933071 685.687950 ] +/Rect [ 99.933071 496.020714 99.933071 477.270714 ] /BS << /W 0 >> -/Dest (cb10-38) +/Dest (cb10-34) >> endobj 442 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/Rect [ 99.933071 477.073692 99.933071 458.323692 ] /BS << /W 0 >> -/Dest (cb10-39) +/Dest (cb10-35) >> endobj 443 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/Rect [ 99.933071 458.126671 99.933071 439.376671 ] /BS << /W 0 >> -/Dest (cb10-40) +/Dest (cb10-36) >> endobj 444 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/Rect [ 99.933071 439.179649 99.933071 420.429649 ] /BS << /W 0 >> -/Dest (cb10-41) +/Dest (cb10-37) >> endobj 445 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/Rect [ 99.933071 420.232628 99.933071 401.482628 ] /BS << /W 0 >> -/Dest (cb10-42) +/Dest (cb10-38) >> endobj 446 0 obj << /Type /Annot /Subtype /Link -/Rect [ 99.933071 609.702842 99.933071 590.952842 ] -/BS << -/W 0 ->> -/Dest (cb10-43) ->> -endobj -447 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] -/BS << -/W 0 ->> -/Dest (cb10-44) ->> -endobj -448 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] -/BS << -/W 0 ->> -/Dest (cb10-45) ->> -endobj -449 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] -/BS << -/W 0 ->> -/Dest (cb10-46) ->> -endobj -450 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] -/BS << -/W 0 ->> -/Dest (cb10-47) ->> -endobj -451 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] -/BS << -/W 0 ->> -/Dest (cb10-48) ->> -endobj -452 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] -/BS << -/W 0 ->> -/Dest (cb10-49) ->> -endobj -453 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] -/BS << -/W 0 ->> -/Dest (cb10-50) ->> -endobj -454 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] -/BS << -/W 0 ->> -/Dest (cb10-51) ->> -endobj -455 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] -/BS << -/W 0 ->> -/Dest (cb10-52) ->> -endobj -456 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] -/BS << -/W 0 ->> -/Dest (cb10-53) ->> -endobj -457 0 obj -<< -/Type /Annot -/Subtype /Link /Rect [ 99.933071 401.285606 99.933071 382.535606 ] /BS << /W 0 >> -/Dest (cb10-54) +/Dest (cb10-39) >> endobj -458 0 obj +447 0 obj << /Type /Annot /Subtype /Link @@ -5292,10 +5155,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-55) +/Dest (cb10-40) >> endobj -459 0 obj +448 0 obj << /Type /Annot /Subtype /Link @@ -5303,10 +5166,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-56) +/Dest (cb10-41) >> endobj -460 0 obj +449 0 obj << /Type /Annot /Subtype /Link @@ -5314,10 +5177,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-57) +/Dest (cb10-42) >> endobj -461 0 obj +450 0 obj << /Type /Annot /Subtype /Link @@ -5325,10 +5188,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-58) +/Dest (cb10-43) >> endobj -462 0 obj +451 0 obj << /Type /Annot /Subtype /Link @@ -5336,10 +5199,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-59) +/Dest (cb10-44) >> endobj -463 0 obj +452 0 obj << /Type /Annot /Subtype /Link @@ -5347,10 +5210,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-60) +/Dest (cb10-45) >> endobj -464 0 obj +453 0 obj << /Type /Annot /Subtype /Link @@ -5358,10 +5221,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-61) +/Dest (cb10-46) >> endobj -465 0 obj +454 0 obj << /Type /Annot /Subtype /Link @@ -5369,10 +5232,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-62) +/Dest (cb10-47) >> endobj -466 0 obj +455 0 obj << /Type /Annot /Subtype /Link @@ -5380,10 +5243,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-63) +/Dest (cb10-48) >> endobj -467 0 obj +456 0 obj << /Type /Annot /Subtype /Link @@ -5391,10 +5254,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-64) +/Dest (cb10-49) >> endobj -468 0 obj +457 0 obj << /Type /Annot /Subtype /Link @@ -5402,10 +5265,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-65) +/Dest (cb10-50) >> endobj -469 0 obj +458 0 obj << /Type /Annot /Subtype /Link @@ -5413,10 +5276,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-66) +/Dest (cb10-51) >> endobj -470 0 obj +459 0 obj << /Type /Annot /Subtype /Link @@ -5424,10 +5287,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-67) +/Dest (cb10-52) >> endobj -471 0 obj +460 0 obj << /Type /Annot /Subtype /Link @@ -5435,10 +5298,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-68) +/Dest (cb10-53) >> endobj -472 0 obj +461 0 obj << /Type /Annot /Subtype /Link @@ -5446,10 +5309,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-69) +/Dest (cb10-54) >> endobj -473 0 obj +462 0 obj << /Type /Annot /Subtype /Link @@ -5457,39 +5320,39 @@ endobj /BS << /W 0 >> -/Dest (cb10-70) +/Dest (cb10-55) >> endobj -474 0 obj +463 0 obj << /Filter /FlateDecode -/Length 4945 +/Length 4628 >> stream -x]Ϗq ,M{`0I :Jz-G`gXd,~UEQZ/0/kro*9^ DWBlr>.ϗKw]Ga2sQa#Ǥ3R4Ԉ9ee -G5jPȎ5|vAcA WbVXBUyPĆ@^h:=iAAFpI  < XCńI_ d :Ӏ,t!iH@\] Cа@6Z4, miX@`]ҰPjX@@\4, @.LhX@\vjX@]Lau)&av)pҰհ w X!ǤaAYÂ4`T 0iX[1jXmа w} Py`#nA]װ w}IX5B@yҰDÂuO@+$ "p1O2z\eR*D.iXOְoQZw/VÂE5,9@7,LWc  X @ iX06q ^4,H]4,H] xzd6ȱNՃ"o)X /؉ ׆Et47[mϗ;$;W?P'$ŌZ)ĈoX;;-ݯod]WϏ˺'ٗo9R5$3v{ /OkA|Fx-V._[+VhnwQ !@9Q qrɜg,H CYY{?o{Bپt&Y7^K+\]]) S31Ә"\McTSjVΌ!<d'~ -?o|7(sC- ^= Fkp&Ƿ^֑sHD y@G.CxG7Da dM'4&sSp`1%sPC9 -0M_90voFzV0~޳y5d: IJܴz ʜ@<\{x[ YtoUV7blvphH<e8WQ"C,+"R/C",sHfΫ~>0Me_n{kl`Gm -| sH4 g+;Rw&6H~g%Tib Gky *;ee3Jc<>VVᎢ[5NC7&(0C _v!qxRyh$⒕ M!Ęy "¯q@9Pb1]g(hV^G'q>O%uw >$/V⸻3$jE@e)_{fP<&)K"z\(wKʧ{:a OOa.'[鑧gudy_81hp<]*Q7Elb>0`vH1"=r׳VZem -5q6OA_4Alg!.XdeҺeŎ+XVnaVu[mbގy7 -5}S](c\CQ綝#QVXԩ^W7ń1 7xoG1nzCD[]#yVz$"LY:ދ OQfpaפdcQ6jglG^(1ו7tn};`3nP=9eI+sѤG9b,ì6g݌l&3izPv9!;_Hh_M維#Vz:ȿn.T؏Ab7 ly;S\4K.m]G\VTZ?:sr쀐#b{V1(s3clkDld{^y3cp-LgDʙ3A .Og8qlܿt.i֋&❈GV#[cJoXs)$w21aAr4EՄc3osdmn%e3Q(oh~۶u$J{?cF_9I#((-]`ٚcEAjՕ> en^ -cW0I䄫a9i+vV۶VZm叡Uq8$e21IגRNogNC]4ԣտMEW5Qh hP~@"H"0?vRz)K r9f˗LyL<%Po㦼hT{Mg옳xF^M_;|‹|$'&AbrJt %مo:7]F y0Mqw;E9INDž8|UG_["UPRމ/tɎ[࢜\}@ӑ[T۟kWf"8r6K-cǡ^Q1tȗL_Ñ_0ۣmf2d2um-FGnԘ|s*?he}ouT&vmQ㦻0n7})(,Cr7!ȿw:]HN߹A5 E1uq/40?_OQ&35v"\/򙢠A?mKǭhOP,rnD>V19>ZކWb"$ےqw| ݯRS%3s/;W8 D57Zַ9M\7pD|YZSU|`VU{FNҨl8)B֪FMRhJ-.j{mTnx-gUfS'nЦ>S|#%9Աٍ.Ȇ|Y)g^OFf;L| SsQy.4竹줞*t[c je=T%5kd? +{J)?/ȳMh[cu[395|ɹN4}[Wš,ϵ,P5XG(F'r B9O2>]v2d/A~"'Q#w_%\ -|d=$'*MC3\6Vkh~,ng`%]CP׸=1}ؑ}3]iՋ-c3;%՛$򽇪.%<]WRtv ⢯]eldHz?CAVwхrI3/nҦ 8ѲGQW]TgP7sOm7&x:˴l> Ju=nQ r1aqhGY^ J[4ZE ls)jLwj/SԿ=QiQIRox-Zޜ|wv.bIVhn0J۶mWo{n#̊92Xܔ|fdVZgZp<:LO[N s9pqX5JF][p@dP* +x]ߋ$ ~¬g[/8,I`N6!.yȿOeZ=Cv..,dD# FH 4`89ec1\ Ia9 9VAL^`":=j'x xNQxʃ,6Z +P2+ٜ-`B&9`0,ц K 5AƏNJ9+&KN}bY| |,6E 0>%ų>YCH_Xdxi@@, ְ4 z G `(ch  z8Y߃Ix%+pʘZK԰ w]T^1.Ǖq^6.ƢaAQ  <װ wSk#ˌVxhjV̬aAh$T԰&RAЏ$A$?H6 x;`'GQuo\O' ~rޔ񷼐Ϗ?ѳsWƇc P79k!gzBce,; +. =#{E@qztF{ڕ蔟g]zl) Už*jFU EvdsA.㙼;6+-(&Zn|>z#UѲmGƋ2M1=L U֏|!9Rnq+"۸R$oŘJ~ckah{{=o,KUHϓD RN;;]>X8]LŒ%G9auʯLH`<,3V8u ˏvpe9Z 9ĘajZIfgdm18jd;Bވӻ 2 w;=$Xttf;u$mnz[9#/J[ (UaeU92L }eQ1#LISh޿Wac,w*ʻzM*m'MVx"2*S#9$.~ o>FOt}iQ0s2X, ΋hvaTVVb |jߨjDܦѧw|HA y~^oRҥK_ +0o]Yy]b%r*ZH!JO& eal5vsuc| ϺቬW'Ir}gmвΥha9`Ks-M佩S&PjDu~85'7gl}B8hgG += zЃ!et>mM8Gҡ1_*;hw'!,oO8F*/D$SuXtMp\-^)a3-2:k:uwyMz u${?):r웑|^OWLapMXFv6/f>kВsc>{y_sut:|6KTۙ>o rW~TOv+޲ᶶ>eltrT@~wxq/+1 ox>?{?_t)g y|ÊTs[\ 0?y\w(ʫNv6XCݢRכ̩koۮiԝeRVyO;rȸy9y+F}a#n6\vMyɖ2-<+$ `ߘh@gLΥ0:ԗa| gq#3:zC=V2->2Bi:uuՎ9j쮕bҺnt2e )OlSIm oeZNjl3rd2'yz5̏m26%MAHwaw:%|gu!3lVV, cgrnJ,#x\4[dGcI?g9YG4gb.Yfܯ"߯#6dy =ԭ:e1?s27'.R&tmkݺ(8_Oq:gMg8E%ѐF\O*g9.[bWMwjNGJo*zSs_'r7*'0ۉ/l/'92?Hն{f HlKR0vZ)ԯ>ԧV&aݒ-,gCUlXeq!e.wɲb![[rM-tb:שSk ҖRzڻ6uBF dS7=)I!~k+&'P^rSHZn[hJT^(SnЦ>I,C7F,կkr T]#cX/'ف{C~9 VPM'RwFv*]ahV'PUg⸙lg\Fdl6zzlZ")5 R^@n=v]S H5X]FӰ'*[ȡˊP 5]gw!dž/=95;9P|%^&[~,d :"@a!/02hm$[eirirs6ȝ2??N|Hy6 [Wޓ_ȃd؆MGBvy)54?}׼T ג!kܞ>ȾwLxxb d>W7þ^R}84Cri +2/jF}OtחtSK{Q79XB ^]6QRm.FVVG4[i펩j['j/S,Կ=zN VMYox-Zޜtv)bɬb_Qy)Iv6ۮ=/%2KpS]s-J՟ig8jvdL#0+$ݔƛ>q;Q8D69j/`}Fwj^Hoe +g9{33'reTQIЛπ$)iy5}2 b endstream endobj -475 0 obj +464 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 474 0 R +/Contents 463 0 R /Resources 4 0 R -/Annots [ 476 0 R 477 0 R 478 0 R 479 0 R 480 0 R 481 0 R 482 0 R 483 0 R 484 0 R 485 0 R 486 0 R 487 0 R 488 0 R 489 0 R 490 0 R 491 0 R 492 0 R 493 0 R 494 0 R 495 0 R 496 0 R 497 0 R 498 0 R 499 0 R 500 0 R 501 0 R 502 0 R 503 0 R 504 0 R 505 0 R 506 0 R 507 0 R 508 0 R 509 0 R 510 0 R 511 0 R 512 0 R 513 0 R ] +/Annots [ 465 0 R 466 0 R 467 0 R 468 0 R 469 0 R 470 0 R 471 0 R 472 0 R 473 0 R 474 0 R 475 0 R 476 0 R 477 0 R 478 0 R 479 0 R 480 0 R 481 0 R 482 0 R 483 0 R 484 0 R 485 0 R 486 0 R 487 0 R 488 0 R 489 0 R 490 0 R 491 0 R 492 0 R 493 0 R 494 0 R 495 0 R 496 0 R 497 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -476 0 obj +465 0 obj << /Type /Annot /Subtype /Link @@ -5497,10 +5360,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-71) +/Dest (cb10-56) >> endobj -477 0 obj +466 0 obj << /Type /Annot /Subtype /Link @@ -5508,10 +5371,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-72) +/Dest (cb10-57) >> endobj -478 0 obj +467 0 obj << /Type /Annot /Subtype /Link @@ -5519,10 +5382,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-73) +/Dest (cb10-58) >> endobj -479 0 obj +468 0 obj << /Type /Annot /Subtype /Link @@ -5530,10 +5393,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-74) +/Dest (cb10-59) >> endobj -480 0 obj +469 0 obj << /Type /Annot /Subtype /Link @@ -5541,10 +5404,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-75) +/Dest (cb10-60) >> endobj -481 0 obj +470 0 obj << /Type /Annot /Subtype /Link @@ -5552,10 +5415,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-76) +/Dest (cb10-61) >> endobj -482 0 obj +471 0 obj << /Type /Annot /Subtype /Link @@ -5563,10 +5426,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-77) +/Dest (cb10-62) >> endobj -483 0 obj +472 0 obj << /Type /Annot /Subtype /Link @@ -5574,10 +5437,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-78) +/Dest (cb10-63) >> endobj -484 0 obj +473 0 obj << /Type /Annot /Subtype /Link @@ -5585,10 +5448,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-79) +/Dest (cb10-64) >> endobj -485 0 obj +474 0 obj << /Type /Annot /Subtype /Link @@ -5596,10 +5459,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-80) +/Dest (cb10-65) >> endobj -486 0 obj +475 0 obj << /Type /Annot /Subtype /Link @@ -5607,10 +5470,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-81) +/Dest (cb10-66) >> endobj -487 0 obj +476 0 obj << /Type /Annot /Subtype /Link @@ -5618,10 +5481,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-82) +/Dest (cb10-67) >> endobj -488 0 obj +477 0 obj << /Type /Annot /Subtype /Link @@ -5629,10 +5492,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-83) +/Dest (cb10-68) >> endobj -489 0 obj +478 0 obj << /Type /Annot /Subtype /Link @@ -5640,10 +5503,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-84) +/Dest (cb10-69) >> endobj -490 0 obj +479 0 obj << /Type /Annot /Subtype /Link @@ -5651,10 +5514,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-85) +/Dest (cb10-70) >> endobj -491 0 obj +480 0 obj << /Type /Annot /Subtype /Link @@ -5662,10 +5525,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-86) +/Dest (cb10-71) >> endobj -492 0 obj +481 0 obj << /Type /Annot /Subtype /Link @@ -5673,10 +5536,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-87) +/Dest (cb10-72) >> endobj -493 0 obj +482 0 obj << /Type /Annot /Subtype /Link @@ -5684,10 +5547,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-88) +/Dest (cb10-73) >> endobj -494 0 obj +483 0 obj << /Type /Annot /Subtype /Link @@ -5695,10 +5558,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-89) +/Dest (cb10-74) >> endobj -495 0 obj +484 0 obj << /Type /Annot /Subtype /Link @@ -5706,10 +5569,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-90) +/Dest (cb10-75) >> endobj -496 0 obj +485 0 obj << /Type /Annot /Subtype /Link @@ -5717,10 +5580,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-91) +/Dest (cb10-76) >> endobj -497 0 obj +486 0 obj << /Type /Annot /Subtype /Link @@ -5728,10 +5591,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-92) +/Dest (cb10-77) >> endobj -498 0 obj +487 0 obj << /Type /Annot /Subtype /Link @@ -5739,10 +5602,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-93) +/Dest (cb10-78) >> endobj -499 0 obj +488 0 obj << /Type /Annot /Subtype /Link @@ -5750,10 +5613,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-94) +/Dest (cb10-79) >> endobj -500 0 obj +489 0 obj << /Type /Annot /Subtype /Link @@ -5761,10 +5624,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-95) +/Dest (cb10-80) >> endobj -501 0 obj +490 0 obj << /Type /Annot /Subtype /Link @@ -5772,10 +5635,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-96) +/Dest (cb10-81) >> endobj -502 0 obj +491 0 obj << /Type /Annot /Subtype /Link @@ -5783,10 +5646,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-97) +/Dest (cb10-82) >> endobj -503 0 obj +492 0 obj << /Type /Annot /Subtype /Link @@ -5794,10 +5657,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-98) +/Dest (cb10-83) >> endobj -504 0 obj +493 0 obj << /Type /Annot /Subtype /Link @@ -5805,10 +5668,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-99) +/Dest (cb10-84) >> endobj -505 0 obj +494 0 obj << /Type /Annot /Subtype /Link @@ -5816,10 +5679,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-100) +/Dest (cb10-85) >> endobj -506 0 obj +495 0 obj << /Type /Annot /Subtype /Link @@ -5827,65 +5690,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-101) +/Dest (cb10-86) >> endobj -507 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 211.815391 99.933071 193.065391 ] -/BS << -/W 0 ->> -/Dest (cb10-102) ->> -endobj -508 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 192.868370 99.933071 174.118370 ] -/BS << -/W 0 ->> -/Dest (cb10-103) ->> -endobj -509 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 173.921348 99.933071 155.171348 ] -/BS << -/W 0 ->> -/Dest (cb10-104) ->> -endobj -510 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 154.974327 99.933071 136.224327 ] -/BS << -/W 0 ->> -/Dest (cb10-105) ->> -endobj -511 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 136.027305 99.933071 117.277305 ] -/BS << -/W 0 ->> -/Dest (cb10-106) ->> -endobj -512 0 obj +496 0 obj << /Type /Annot /Subtype /Link @@ -5893,10 +5701,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-107) +/Dest (cb10-87) >> endobj -513 0 obj +497 0 obj << /Type /Annot /Subtype /Link @@ -5904,45 +5712,50 @@ endobj /BS << /W 0 >> -/Dest (cb10-108) +/Dest (cb10-88) >> endobj -514 0 obj +498 0 obj << /Filter /FlateDecode -/Length 5015 +/Length 5118 >> stream -x]K$qׯCkI> |.MK0z t#3*jzv -4G ~ e??JdTJ9:_~:|*z%⡐џ!Oࢊ'Z=O.˘U9k_DN)Hޫ).,diK`r lI %(%ea!6LQ  >ZM@3^ zh֨"-fhΩx#Ѳ -!$D"- %Z/.8-MI^,F' ^ ]Ih)HˠӖfW>9%1C6HÊ$(,x g^V9Bh bJjvFybm$^0^t `)% l% lr% lʊbt %pڀfNOABg a42IX,xA /hK t68-i$,p\%,p@\IX,a:`%,p@]烕v a:2Z:" @%,:*g(awU9 @VMIKX@]4IX@]DZTXNZ.Hkpג @PGpes`%,: P0K$,]5 R& aiY-FY E$,]gQk4D KXqPohHJ$,]ZX$iQAcaJXPY‚9 pW^\ VX0V@ -3,рZ,aAڔ DNI0`[ B"c A'҂³ j$x@H/I*$,8k%,dַx(aLL$aAFUR\H -HX_J%,z % h$,`HXUe. x-a,]Ќ YkP‚d̠%,/hL$ -ME Li)ExLHXagKX&^' Rn& R/V[ oF /$,:(6%,$$,d3IX OX7" ,[`MD f ffMXbH ppg D2 &,[ɷ^ag#[ŐB[E1f#A 21j -b@a -"w2cYslJ)>~{?Oo*c ;֞͘n* @tC0Hf"ΤݘIb|n̒ep<3g4 O`\yLj.qJ)hٱ>L"(n]m pK"lPYY#8EClgrٲ^дO'@n߰kO_wßf?>ο\O3m"OӢ L4%?Ü7}oy~sI Í L;eu*O˙N^Ln&rcEo!Xo" eNlCO.]7{ˍPNgb8[oѱl^<ςY>~A6(."ץ0|\cz棏IǼ$DO@1'kfe -Ų1ќazdmy:Ty)¤!$Mi!NcxpJe+4gݒ0Av`оV&rNv6^z^4u<^2Յ%<j>`v/¡T -2#*'YhQ~Ky3/Ut6Wkl9Qs\P|咒 -^J~RDZ2O#֥O(9yj8L+'oN23/=^6z ܾ!Ffڸ{I嘐Nh761oKq566ٽޯ:~Ġ]:;ިay󈧇"΀<.F Uhnrluv5c2J* K|7nsި Q*}$DK66-yлC"zs|f=c\дߥum\^gvx/It-?P>чx XF֪|qh^m%au8 . ?/bmjs+}fGh * \< D!UВ ȡQu'I7esj\aN PBB8a!f=X{;U"v 2Jy֎ խ:\ dWkf|!Zv-+~lˎ?Hb~ElЭn7x]tH n23=-0eP/,_н O*nNx ̅TEPȀ&}à沑Ixe9Ǻ$}u2SN˭XXNV:*y/.[\N|ڶ:f4f/=џ9c @mjwdmo]9-'IX.!~dٮӖ{z ;LK*,}Jm{5Lv`)巋R03XP͑W4\ [՟/-u 9Gg_8%"cR Q)v%Ѷ( "AαR0S~[aK"asHJ5:c2bSl":=jejYBMN+~lZYb2-!,` yNZY->zke 8NV]ʲBf",pm3aʬ2( RLJ-фTи{k\h\AdոoبqLqzqJYN DqzqzFzM ok\@]oMҸFNF 1 ؐu .@-K׸.4 u8 E ch + z8[@ߣy p!,Ѹ wmS4jkç&2o˃1k\pT^}i\Ske]Ѹ w7 "иmU`2 Zr $jY$qx0C5.]qAkaZ[<; נ VVZxXV5&e "xWܦ10p@4.LCN)j\AB>,8$Aeei\z>  "EpQ-5. 4.H!"Cje @j& Rj\\j`Lz @K YҸ e؂q\Vfa l Z Dcdh\\]<5.`` Se4qGq$Hs2i\$d a3N`SͤqA6Ad @(3Fl# 0/%d 77)6(fҸ l Q2؂)+|줕E2i\c|5.@|$o&u2I+"2&"[-7 ސ,'+[%JꚁJ.LdUUZ./1p}]C$1-}9jAz|ݸRVZS:q F aktĈg#-hqZt#nb&b"v)X uV_C)o0ݮ +7Ty Kѐ|vz -*ۧ }6vÛ:י_/OO. ?ޟ}DNMMi4RO,rsypO;=1AY~kZ؏p݌l\>WG`.>Gߏc@b49 #6x5sCi)Y%"ۦ?V>1V25E=2 T, +Yrvةs4"KBqǥ'~)X,V1*'l +g}iwm0p*֣;-\e4vGO ȶuԱA'K4)+cB;uPdގ3ɗK#>O\t ʑvض}1 +=W=;m$Glښ42 >1-H .X"9j3YqBӀ4@Jخʍ5r}+7P籛gIg#,ڧs:YB9} xFk7~(ܶs$j :'ZT(J +z n:灢<ڝ /_G|rHP\ ;odݕƲP2xt-7=ht.Y攣q+hg֣G%``4ؽ9p'#t[ #߬c5p&&ں!MҴ{"q$k8bFIv!ݧsH3!4b D +捛,p>` piȑRִ{.$0+o&:灱C;:e?zfɶI(5{z9xztHAn" E2J{Dnvq#Ӂm[Gҁv7n$r_}|fكbyaD]9m&v@ ?1ysC͙f@V{Ml@:̲ŒDf}:hYٲё^y@l} bJ!FDzEKv[D{*:u1tC8HEݪR$͎n{ңEy¦h$ ;u3n5F?㇧&jb +7ERE}YڛT݋[,~l-~(=H s'=N@Xv +~z=vWSS2pSm޷->-ko,ܟufЃu#-[߶mY6j?-9Mq:灤]$ӿ6ݩsfyG kK#>~mzkϑߵiސC@6OcPi +m0?r?ʊ!Q܃ײIuĉ+Vg|O8-vuR.pwV<MgA=\tg oШb`G7_Mނ8]iD3G)?$Ͽ|r٪z$*(Yĝz%$0D&S=r_~d$3Nui5Tꄦx-č|yݿ]] ;~1ϲ 1_ʷ4xԽv{}9~2ZKȇdTq`~Xp\0ofv"_#EPuE8jdSJv!k0\OCՅr5|Ag(G{ÊnrsXȃb5%b3 ;pV[oa +M,CXMo6_ KYʷʩJۊ7F* f㤈nE) 7&_ j\)E7-ԑJϪl uϵG4g`9b|u)2e 7q"}lϗa + +Zo[lfR" S{!*B +XoGs#27xITm0_ѱZ,,h6g@ +xQ\fke'y:O2.n z+#l#{' B_p~ܙrBz2z-wkEXM#t,<  Տ;5f&RVu7=^VXa}8yi|:Xrps]9%QJQA{R6 ٲȶb?Cᥭ #e4E6^ES!om {_={'c"^ϭ^H+R?a9~|'KssfSc-hqb6UmTdFt)zTlZYTcYC;*C;*qSW[<^| B 4_kXYl暾ȶmӲmelH#S3MWk]gZ* '&/$!$rM͒a8+em 1&Y (ͩjrI:@Y™ilVpzϴS!]5d3.'v endstream endobj -515 0 obj +499 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 514 0 R +/Contents 498 0 R /Resources 4 0 R -/Annots [ 516 0 R 517 0 R 518 0 R 519 0 R 520 0 R 521 0 R 522 0 R 523 0 R 524 0 R 525 0 R 526 0 R 527 0 R 528 0 R 529 0 R 530 0 R 531 0 R 532 0 R 533 0 R 534 0 R 535 0 R 536 0 R ] +/Annots [ 500 0 R 501 0 R 502 0 R 503 0 R 504 0 R 505 0 R 506 0 R 507 0 R 508 0 R 509 0 R 510 0 R 511 0 R 512 0 R 513 0 R 514 0 R 515 0 R 516 0 R 517 0 R 518 0 R 519 0 R 520 0 R 521 0 R 522 0 R 523 0 R 524 0 R 525 0 R 526 0 R 527 0 R 528 0 R 529 0 R 530 0 R 531 0 R 532 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -516 0 obj +500 0 obj << /Type /Annot /Subtype /Link @@ -5950,10 +5763,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-109) +/Dest (cb10-89) >> endobj -517 0 obj +501 0 obj << /Type /Annot /Subtype /Link @@ -5961,10 +5774,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-110) +/Dest (cb10-90) >> endobj -518 0 obj +502 0 obj << /Type /Annot /Subtype /Link @@ -5972,10 +5785,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-111) +/Dest (cb10-91) >> endobj -519 0 obj +503 0 obj << /Type /Annot /Subtype /Link @@ -5983,10 +5796,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-112) +/Dest (cb10-92) >> endobj -520 0 obj +504 0 obj << /Type /Annot /Subtype /Link @@ -5994,10 +5807,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-113) +/Dest (cb10-93) >> endobj -521 0 obj +505 0 obj << /Type /Annot /Subtype /Link @@ -6005,10 +5818,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-114) +/Dest (cb10-94) >> endobj -522 0 obj +506 0 obj << /Type /Annot /Subtype /Link @@ -6016,10 +5829,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-115) +/Dest (cb10-95) >> endobj -523 0 obj +507 0 obj << /Type /Annot /Subtype /Link @@ -6027,10 +5840,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-116) +/Dest (cb10-96) >> endobj -524 0 obj +508 0 obj << /Type /Annot /Subtype /Link @@ -6038,10 +5851,65 @@ endobj /BS << /W 0 >> -/Dest (cb10-117) +/Dest (cb10-97) >> endobj -525 0 obj +509 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/BS << +/W 0 +>> +/Dest (cb10-98) +>> +endobj +510 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/BS << +/W 0 +>> +/Dest (cb10-99) +>> +endobj +511 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/BS << +/W 0 +>> +/Dest (cb10-100) +>> +endobj +512 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/BS << +/W 0 +>> +/Dest (cb10-101) +>> +endobj +513 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 552.861778 99.933071 534.111778 ] +/BS << +/W 0 +>> +/Dest (cb10-102) +>> +endobj +514 0 obj << /Type /Annot /Subtype /Link @@ -6049,10 +5917,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-118) +/Dest (cb10-103) >> endobj -526 0 obj +515 0 obj << /Type /Annot /Subtype /Link @@ -6060,10 +5928,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-119) +/Dest (cb10-104) >> endobj -527 0 obj +516 0 obj << /Type /Annot /Subtype /Link @@ -6071,10 +5939,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-120) +/Dest (cb10-105) >> endobj -528 0 obj +517 0 obj << /Type /Annot /Subtype /Link @@ -6082,10 +5950,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-121) +/Dest (cb10-106) >> endobj -529 0 obj +518 0 obj << /Type /Annot /Subtype /Link @@ -6093,10 +5961,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-122) +/Dest (cb10-107) >> endobj -530 0 obj +519 0 obj << /Type /Annot /Subtype /Link @@ -6104,10 +5972,10 @@ endobj /BS << /W 0 >> -/Dest (cb10-123) +/Dest (cb10-108) >> endobj -531 0 obj +520 0 obj << /Type /Annot /Subtype /Link @@ -6115,21 +5983,357 @@ endobj /BS << /W 0 >> -/Dest (cb10-124) +/Dest (cb10-109) +>> +endobj +521 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 401.285606 99.933071 382.535606 ] +/BS << +/W 0 +>> +/Dest (cb10-110) +>> +endobj +522 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 382.338585 99.933071 363.588585 ] +/BS << +/W 0 +>> +/Dest (cb10-111) +>> +endobj +523 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 363.391563 99.933071 344.641563 ] +/BS << +/W 0 +>> +/Dest (cb10-112) +>> +endobj +524 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 344.444542 99.933071 325.694542 ] +/BS << +/W 0 +>> +/Dest (cb10-113) +>> +endobj +525 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 325.497520 99.933071 306.747520 ] +/BS << +/W 0 +>> +/Dest (cb10-114) +>> +endobj +526 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 306.550499 99.933071 287.800499 ] +/BS << +/W 0 +>> +/Dest (cb10-115) +>> +endobj +527 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 287.603477 99.933071 268.853477 ] +/BS << +/W 0 +>> +/Dest (cb10-116) +>> +endobj +528 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 173.921348 99.933071 155.171348 ] +/BS << +/W 0 +>> +/Dest (cb10-117) +>> +endobj +529 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 154.974327 99.933071 136.224327 ] +/BS << +/W 0 +>> +/Dest (cb10-118) +>> +endobj +530 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 136.027305 99.933071 117.277305 ] +/BS << +/W 0 +>> +/Dest (cb10-119) +>> +endobj +531 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 117.080284 99.933071 98.330284 ] +/BS << +/W 0 +>> +/Dest (cb10-120) >> endobj 532 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 177.989606 101.433071 159.239606 ] +/Rect [ 99.933071 98.133262 99.933071 79.383262 ] +/BS << +/W 0 +>> +/Dest (cb10-121) +>> +endobj +533 0 obj +<< +/Filter /FlateDecode +/Length 5065 +>> +stream +x][,~_Qφu Â1p]8CcB[fFUfxJ.!EI6W ~$2*]o?]~hƿcPwW)*orH'b6?6sus*`G&S1Ũ@ i*F@ +F9K$#Yړ"ؠDdmH l8IlhH" }HFci`D9+ЌW$5*lHh%s*D2HB>I4/>k#X `Q +8#%, s() Xr&9 댎pJX*alJZڤI ҢtpztA]뵕l?Z/+a=hIXʔ["a 'i2) OQ JH‚1D Vi 4%,LJK IX3xTH% \'[x#aAޠ&DAKX XC-Hs$,H` R4`KX&^' Rn& R/V[ oF /$,:(v%,$ě$,x3IXFO7" ,[`MD f fnMx@x3]L 4HXěl^x}&GI\1Ѐ^*.h`/U 4c$ql"LA\5Yhq@էy*@"lfɌiA{1;ٖR־ Q\R!8<,s ~ 3`3 S sY ggv)w$^c] S4~V@.-% " +M/qap~/?zv|_>0C^TCoFL7&7|׏|OSVw<> +*)%q4u\QK8h67/1rhy7=s,>2#Z C c?ް xiPLKYB^F0V9RY F!6C&f+>{7sG߄l%̒Փ7"Q!#X\QOpTUE@/Sk6*g՝\V˒ۤ$)}$x}<P( Q*}bB|Eu:T`M9*)T\Q'ܱ6tb*:/4`]j&IcCmp2l>2#z !Yx 7B4RTAWqV<[KՔn=F~Ym\y[d7n]80zs&je,e/>crʿ,~.rdž(dQn[{pܫF~Mn!RWn~ =5!(ftLw/8o\QD +2wFMaRWET#oU`\XOw[T">۴ɝm/}&yWjLQNi[޳Xd?|ӴZƞ_~g^*\TMaQǚ3|fakkuҦ зjK/-)sOZ.{Xݵsaja%` pZe>bSG &ٗcmdždmwPTGAgik%_))yB4f4?%_i'g~1O񻍾OK_ N}nE?ƠF峭9Ʈ<_&nȍ"=o%-`켖t+GZ˩gʓM啗͗HF{csjҐ /To½N}i[ n}{8ӵ;/Xc;?ЏI?(Sǫɂ^Gzim\W5uKÇq۔+1s[<\EL&{9s+,Z7>̞em1gm[yɽ:YF3|}0'C>^rۆvO2Xw4Kф6 =Z.I0|S2#>m')^_Wu^J.;LD}Me 5al+`VsEG19F&z>o8$ny MBwیseFI1H䣽#u#_;(ϯ7> Yޝ/>Y,<" N>x*l\m皙G/ȯ]'QCVLy[hΕyx0 *Esf .N.cO6w_޷Ӿ%yI7%|/KKBy>i7ר\Jںu*IH^S[fmXܴs1{h7 _db;XLsegJKV|cүпlDpֽ}WIIw[Wݨ_eIo Os[n('oQ'-sjg_ +5xDTeB;" lH6dYd|:M'kܜ69e\t2O#ް(Mރ:LTR/]'ג2>yt|Eq`)WGx=Jm%8 r Ew76[nϗшt9&7ڶkhgMcp| B,S.E{q&SxF⨐漣Q0[F'꩹̷#]HCg&pͺmꛘʗZT.'!vӭj0;})|n1_wIŞ+`e:Ә iHb9dhiK].⣐оޜz{rC_F*:T-/ TS>*ŗ͞9=t!i őw.cyLB~ݞ*u)=TuZדtuc͍dUm<}z fRwɡcۜ N:oŰ6U?FF2X5M1H0Vlį[cIv9e/58ޑsŎ[vl]%ϖO'ا͔hil6t;n4-j:uNc dU7xیbwd~l^]C׮P0wi0שJ~Jzޒ9鑳IH sJ#kiivש4 3գ}d,e6RUV0LwPκt +B||4-i5JF[[89?%B>&LU?%Z@X0w+8/_]鏑CE?|3%{QqI^W6/ +endstream +endobj +534 0 obj +<< +/Type /Page +/Parent 1 0 R +/MediaBox [ 0 0 595.275591 841.889764 ] +/Contents 533 0 R +/Resources 4 0 R +/Annots [ 535 0 R 536 0 R 537 0 R 538 0 R 539 0 R 540 0 R 541 0 R 542 0 R 543 0 R 544 0 R 545 0 R 546 0 R 547 0 R 548 0 R 549 0 R 550 0 R 551 0 R 552 0 R 553 0 R 554 0 R 555 0 R ] +/TrimBox [ 0 0 595.275591 841.889764 ] +/BleedBox [ 0 0 595.275591 841.889764 ] +>> +endobj +535 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 799.173057 99.933071 780.423057 ] +/BS << +/W 0 +>> +/Dest (cb10-122) +>> +endobj +536 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 685.490928 99.933071 666.740928 ] +/BS << +/W 0 +>> +/Dest (cb10-123) +>> +endobj +537 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 666.543907 99.933071 647.793907 ] +/BS << +/W 0 +>> +/Dest (cb10-124) +>> +endobj +538 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 647.596885 99.933071 628.846885 ] +/BS << +/W 0 +>> +/Dest (cb10-125) +>> +endobj +539 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 628.649864 99.933071 609.899864 ] +/BS << +/W 0 +>> +/Dest (cb10-126) +>> +endobj +540 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 609.702842 99.933071 590.952842 ] +/BS << +/W 0 +>> +/Dest (cb10-127) +>> +endobj +541 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 590.755821 99.933071 572.005821 ] +/BS << +/W 0 +>> +/Dest (cb10-128) +>> +endobj +542 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 571.808799 99.933071 553.058799 ] +/BS << +/W 0 +>> +/Dest (cb10-129) +>> +endobj +543 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 101.433071 329.565778 101.433071 310.815778 ] /BS << /W 0 >> /Dest (cb11-1) >> endobj -533 0 obj +544 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 310.618756 99.933071 291.868756 ] +/BS << +/W 0 +>> +/Dest (cb11-2) +>> +endobj +545 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 291.671735 99.933071 272.921735 ] +/BS << +/W 0 +>> +/Dest (cb11-3) +>> +endobj +546 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 272.724714 99.933071 253.974714 ] +/BS << +/W 0 +>> +/Dest (cb11-4) +>> +endobj +547 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 253.777692 99.933071 235.027692 ] +/BS << +/W 0 +>> +/Dest (cb11-5) +>> +endobj +548 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 234.830671 99.933071 216.080671 ] +/BS << +/W 0 +>> +/Dest (cb11-6) +>> +endobj +549 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 215.883649 99.933071 197.133649 ] +/BS << +/W 0 +>> +/Dest (cb11-7) +>> +endobj +550 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 196.936628 99.933071 178.186628 ] +/BS << +/W 0 +>> +/Dest (cb11-8) +>> +endobj +551 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 177.989606 99.933071 159.239606 ] +/BS << +/W 0 +>> +/Dest (cb11-9) +>> +endobj +552 0 obj << /Type /Annot /Subtype /Link @@ -6137,10 +6341,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-2) +/Dest (cb11-10) >> endobj -534 0 obj +553 0 obj << /Type /Annot /Subtype /Link @@ -6148,10 +6352,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-3) +/Dest (cb11-11) >> endobj -535 0 obj +554 0 obj << /Type /Annot /Subtype /Link @@ -6159,10 +6363,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-4) +/Dest (cb11-12) >> endobj -536 0 obj +555 0 obj << /Type /Annot /Subtype /Link @@ -6170,43 +6374,43 @@ endobj /BS << /W 0 >> -/Dest (cb11-5) +/Dest (cb11-13) >> endobj -537 0 obj +556 0 obj << /Filter /FlateDecode -/Length 4885 +/Length 4901 >> stream -x][$9 ~_H8GZ!-1gz:suRUgw[t\N%iwa.9w'kr3X\L?_ggC6ѕ(\z˱?;s)ޔUXLmTX,Hahr1) 5b>lYjQcA=+,-@ ]XPÕykU!Wx.FO;2x.{GdR.:WLJ) %4^.х`5t Y%Bʃ.3i ]>iXG1F]@Hհ=x4,@e#,Ѱ w]iq\SyŸW-Zٸ4,]'kX7Q#:_!jXw0ߌp]W-D.`kXQXlHNC5,H] EÂܵHÂܵaʃ.^5*}Hkm.$ ,@A(kX8sҰ  B> قY*4,@`m -ְ {BkX=tAȠa"So5=.p5?@2% rLЪ/yp<5,9 NR5, 4,๠aA.]E E="s l 眆 A 3d5,\M<5, R<аd;jX&]( a3tkXߔ|3kXP,tAħaAHa`QrR@z{>>~im| 'pg^?=;>rۺx?qY"w|5 ò9OL!ikc"oa$mfqvYh$2NPEnK3c( W4tPi:rYh&;n/+T㮾} (@+W_w2&<R/yy}CgQiUd7m?2"씔{o!ˀ0Ww? J9Qǣ2|Y^ -baۂc:"RGCm ŲžyU@a8ec&|͎8@c>8qJL:,;De+}$>sX7&m\8]vvobN7@:4 I=sw{[4y1'VdEVlz؞o彝HqwBJ9(33^ޛb6)_ *ow4} -q5H}" =:DJψz:7lz_Vh# YϾot4B>e,Gf֎@lٿ2hV 1[ee9o0Sou&W;s,wn:i%OѴ<y4Ns& d266\sINYgy]w<Ȣ> j,*`aZ 5oABE]Vs"7_M*ǞyC7cγrm( I*z4Y%h+Vw~:G=YNgxPyQ0X#9]s"h Kgt 0O%|چp!w̰VߎdluM>8E6O,*[j~<^tkzlqAwѹ﵎t!pCHw"dxYM(k yyOVvM'Br0׎TlXqZrA:Ƶ hWoe~k~9l@H\(H_v#{utv#ސ2|FLTINH!=Y4˝>˓K^ktJhnPΝBJW/0+wgZA^=k޹e}'?P̽eɯlBwtR4z|_ -s;OADqo#$ ,3{FO/Myo>(SQ3wcX@ea(ಷT|tMˮ?qw|Aɻ{E+~?/fнQah -t$d311@B ~zM~WTE'7c㋬ %'wExJew97MoXBcɯny]mmƤ4m=eǜresq,,O~0q3L|LyL1RuOR)؜UzLiL,þEeoX^;K7=-2-stct|sAR>yr0J{sG6nͥEpğwy瑃`A=gQ鏻t{G6n\ȿqsiIrDNvieRKʼms鶎[K g,M^yN[9$ va>T -gEh~FU3ncnu EFN咰Brj+y]&IåӆڤBSYYb|ˋ+Me֯P>پ1*Nẹ;?7jQ -N@5i?)ڼnjw!9]+%d]7ۓ/[(l;e__OrzP!,mu!+XXheRC^}ULU"J|zcdyzkL|*K# -XWw2܉qK:Y+e}ZAlMײ>Gp[ZS_Ub]mѠTiXK6f't9)/l:?Xͷ7\)rSHZn-6KVh-UN^Mm4S>G,կKr T[[o6ڐ_O1+c -Dmd_:5sm*tJ+TF䙾\JCW&7yH#=5 Z Ȟ@ώ*t[b d=T%5kd> +GJv+.]غjf [v,dۦowJL[Xޤ%n6bN0:kom$QNO0)za99}?()'^qoZ 8zA9[> Ɏ{Xx^KqGbm8}s]hhxxYb dm}pbUΔZb|\rQC}H7AcnXf 5!Ǜh -y+4^ a\R>̎UWC4^7޴,Q~svUNA{`BmSiL6д#vB. wZ\ 7 i(\f+՘Ni2=1[Lѩ[:ViGMYx-Zѝs:KXZ5Ti{h{#tERLmo¿j@+UN3Yiy4)CEl+2;sIϗO?Iϔb0)d+1BdR > ooH0p湁>Xaw=a  w!A V{ ɂY*pb XB%kXcK5[gf 2G#&i)UdLhX`;hXH֡dΪȀsl*af*ͤJxjŀ6 ?!*dـ+~u,!)*8+"/~ `E_}:꯳qq=O~z=}ZBorw>Og~('%_nc$bEqAs:|/#yߞ~i #Y?l&/yUfDNfXJcFyN}HH֙\zHJ煎eySIx }j>vFjqa_2ZT6Ŧ Ͳ,@d 'MlvoxYFK=dwazwÈoV1vϲyh{.T{y#H=;qTZ@$bt{]*ZJv @A]W68l{6醟ʢ)h y4VY9ϠGe,fnl׆T ,l]psT[O9e=eW @zkdZk .1(:Xݷ~ە(-<^NC|}FLI Ji^jz7V>,t8FI9+5ɻHIS 546sY +4fZ5}}Y??헫"+24Y0wI͟AIfH0}u$ߥ<ޥ;{4_r[~>iThB?MRr0m{os;ww`LRng<<0\;|wckgQhqI\}8]^Riq6{/>A&jos$9{(bxv0atƙI-jBƎ꜓cCѥ0g8m7ԋ!є_4V~Ypeik\60-A+Atr;8yT4ϱ8gg\䦓Dyw <ϣ\ї݇RoE4q;y)oN?Y)YRzhȝ4ſm[ǽmh.ȣ'Cغ@<~'ӆj ͏{?5{M@teeՊ-Hd/V0sQwHy{ h{Ԃ5zhFja+mQiu .@JLU8g2qV[)S2t1ZRnx-ZќS;SX2+8nT)Ҷumkp$la]sͳ-Rտ 6j8jv> endobj -539 0 obj +558 0 obj << /Type /Annot /Subtype /Link @@ -6214,10 +6418,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-6) +/Dest (cb11-14) >> endobj -540 0 obj +559 0 obj << /Type /Annot /Subtype /Link @@ -6225,10 +6429,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-7) +/Dest (cb11-15) >> endobj -541 0 obj +560 0 obj << /Type /Annot /Subtype /Link @@ -6236,10 +6440,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-8) +/Dest (cb11-16) >> endobj -542 0 obj +561 0 obj << /Type /Annot /Subtype /Link @@ -6247,10 +6451,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-9) +/Dest (cb11-17) >> endobj -543 0 obj +562 0 obj << /Type /Annot /Subtype /Link @@ -6258,10 +6462,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-10) +/Dest (cb11-18) >> endobj -544 0 obj +563 0 obj << /Type /Annot /Subtype /Link @@ -6269,10 +6473,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-11) +/Dest (cb11-19) >> endobj -545 0 obj +564 0 obj << /Type /Annot /Subtype /Link @@ -6280,10 +6484,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-12) +/Dest (cb11-20) >> endobj -546 0 obj +565 0 obj << /Type /Annot /Subtype /Link @@ -6291,10 +6495,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-13) +/Dest (cb11-21) >> endobj -547 0 obj +566 0 obj << /Type /Annot /Subtype /Link @@ -6302,10 +6506,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-14) +/Dest (cb11-22) >> endobj -548 0 obj +567 0 obj << /Type /Annot /Subtype /Link @@ -6313,10 +6517,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-15) +/Dest (cb11-23) >> endobj -549 0 obj +568 0 obj << /Type /Annot /Subtype /Link @@ -6324,10 +6528,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-16) +/Dest (cb11-24) >> endobj -550 0 obj +569 0 obj << /Type /Annot /Subtype /Link @@ -6335,10 +6539,10 @@ endobj /BS << /W 0 >> -/Dest (cb11-17) +/Dest (cb11-25) >> endobj -551 0 obj +570 0 obj << /Type /Annot /Subtype /Link @@ -6346,109 +6550,109 @@ endobj /BS << /W 0 >> -/Dest (cb11-18) ->> -endobj -552 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] -/BS << -/W 0 ->> -/Dest (cb11-19) ->> -endobj -553 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 533.914756 99.933071 515.164756 ] -/BS << -/W 0 ->> -/Dest (cb11-20) ->> -endobj -554 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 514.967735 99.933071 496.217735 ] -/BS << -/W 0 ->> -/Dest (cb11-21) ->> -endobj -555 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 496.020714 99.933071 477.270714 ] -/BS << -/W 0 ->> -/Dest (cb11-22) ->> -endobj -556 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 477.073692 99.933071 458.323692 ] -/BS << -/W 0 ->> -/Dest (cb11-23) ->> -endobj -557 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 458.126671 99.933071 439.376671 ] -/BS << -/W 0 ->> -/Dest (cb11-24) ->> -endobj -558 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 439.179649 99.933071 420.429649 ] -/BS << -/W 0 ->> -/Dest (cb11-25) ->> -endobj -559 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 420.232628 99.933071 401.482628 ] -/BS << -/W 0 ->> /Dest (cb11-26) >> endobj -560 0 obj +571 0 obj << /Type /Annot /Subtype /Link -/Rect [ 101.433071 292.842585 101.433071 274.092585 ] +/Rect [ 101.433071 444.418756 101.433071 425.668756 ] /BS << /W 0 >> /Dest (cb12-1) >> endobj -561 0 obj +572 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 425.471735 99.933071 406.721735 ] +/BS << +/W 0 +>> +/Dest (cb12-2) +>> +endobj +573 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 406.524714 99.933071 387.774714 ] +/BS << +/W 0 +>> +/Dest (cb12-3) +>> +endobj +574 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 387.577692 99.933071 368.827692 ] +/BS << +/W 0 +>> +/Dest (cb12-4) +>> +endobj +575 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 368.630671 99.933071 349.880671 ] +/BS << +/W 0 +>> +/Dest (cb12-5) +>> +endobj +576 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 349.683649 99.933071 330.933649 ] +/BS << +/W 0 +>> +/Dest (cb12-6) +>> +endobj +577 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 330.736628 99.933071 311.986628 ] +/BS << +/W 0 +>> +/Dest (cb12-7) +>> +endobj +578 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 311.789606 99.933071 293.039606 ] +/BS << +/W 0 +>> +/Dest (cb12-8) +>> +endobj +579 0 obj +<< +/Type /Annot +/Subtype /Link +/Rect [ 99.933071 292.842585 99.933071 274.092585 ] +/BS << +/W 0 +>> +/Dest (cb12-9) +>> +endobj +580 0 obj << /Type /Annot /Subtype /Link @@ -6456,10 +6660,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-2) +/Dest (cb12-10) >> endobj -562 0 obj +581 0 obj << /Type /Annot /Subtype /Link @@ -6467,10 +6671,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-3) +/Dest (cb12-11) >> endobj -563 0 obj +582 0 obj << /Type /Annot /Subtype /Link @@ -6478,10 +6682,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-4) +/Dest (cb12-12) >> endobj -564 0 obj +583 0 obj << /Type /Annot /Subtype /Link @@ -6489,10 +6693,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-5) +/Dest (cb12-13) >> endobj -565 0 obj +584 0 obj << /Type /Annot /Subtype /Link @@ -6500,10 +6704,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-6) +/Dest (cb12-14) >> endobj -566 0 obj +585 0 obj << /Type /Annot /Subtype /Link @@ -6511,10 +6715,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-7) +/Dest (cb12-15) >> endobj -567 0 obj +586 0 obj << /Type /Annot /Subtype /Link @@ -6522,10 +6726,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-8) +/Dest (cb12-16) >> endobj -568 0 obj +587 0 obj << /Type /Annot /Subtype /Link @@ -6533,10 +6737,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-9) +/Dest (cb12-17) >> endobj -569 0 obj +588 0 obj << /Type /Annot /Subtype /Link @@ -6544,10 +6748,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-10) +/Dest (cb12-18) >> endobj -570 0 obj +589 0 obj << /Type /Annot /Subtype /Link @@ -6555,51 +6759,37 @@ endobj /BS << /W 0 >> -/Dest (cb12-11) +/Dest (cb12-19) >> endobj -571 0 obj +590 0 obj << /Filter /FlateDecode -/Length 3690 +/Length 3157 >> stream -x\K ϯE 0t`0$F` -*C~>t=XIV L`ɏduK¯"J9]s<"T8\ct]sto1ZSxe \r`U<b2X.V1b 1h P V,U!F$ bP`7yċp0x]¦'ȥRC5y<1"YRJX<,zxDldAP2[ YvY`]AX#r&%ldI>VY"`~,p"r.֠͞EBY| B,>' ANq€PIb@(Il@I^ C(B&"\Y :XX Y X _ފdap!\XX\R 촰plau9`avYJ,-,.3F< -[X ]&-,.(XX:aB)` `Enn>XX !YXCqof]@H`2XXT Z9*5YXT>WeeG)U "p-,]gQKHm w7D `XXtM^ubaA DGjaA"W pGf p Y ׀5|ɪHa񀻞a>W pWæ)+! C,,HE\9YX)KhaA D@Ƀ,$֮r-Y8 r,H,,@F*!6s1,-,RE,,1îZ\ɀkWlaAR-,;M,,XX+dXXPJ@fn ɶ.xDY ZXPBAШ%O֙‚"iha&AЏ?(6Q&p>}!#fY_v>Wo|夬%iaEBWnNP 8W R !njQ!rB`q=tS!nȐXe&$3˕ɼ.*8ٲ>{璕ۺp?Hގ5r9!CR,@B/A˦^FޜF4ln_}wXO_kzKzxBWtir:Ωk7{\I dNQcC>J=VPk"BQZ_ϲhv|ɻ#[!4DkGdŨ52QɃc^NpыP9FlꀵnaBv1/Gp?sZ?NP]WSxϸ+֘ՍTVO@rI\Qf$ 1/@(@T 4>ؔ7š2tL6Z6`VW7!SYWwF -)(&s4beES4-^EwciIncc^e,j`t7j& -o&(;~{OͨHNnj$,'=Н1#asF6Kި,ُ&%r{q!/T4a妩L>K3m滰/fx=]΂ ~zYrv{r^Rn34}8ޛ/-}qyD@1e=F. d͐ey5o2!ubʠk.y -%;Om`(ty=amy9cJM].xwh(L -yZJSf˄*YO*qzl̋Q>R"2Ulr*ä=-攷 JyƔvPo.R =doǩZ&M-CFjYYnݴdžH#J@&q3yn),9&'!gwEQhρ -fT^;쐢yC\1f񴓩y>0^CUizcQ{s{=ȐE.occ^Af}5K}lR\Eld75SWv݌sjJq)bFؘc)O?l'۠.WﳌzWn<>1A7oθCŽdׯ#'Cd0q5Nr ? }Pb s eD#)v A{C}qJizRn~3kBJNش=ӣv'ڝ#ӪtĔ-@5s>ԿPjxV&Y7^/]yikՀ}VZ2?˫v82Z-A_>:&qW,[,Զ 㕑+[z-.vC}WâՍo\OKO}F ~}.C}Oί_kcb0}J|˳@ "F&${G+YZ*Vꢠf8&p K&1^ 7.u4E5"X'Ji< U;5]!dNoS 34Cޯ~t0Ů{1 S7ޠ-{R9uKNk_& !JA~:l+|l7y2k6>P;UgBMJf'o7i:b - *ι_C -w߱ uڲkOAǖL:Y!OʙXnc7 yFK4{r4s8]>dxZj-2h7C0 }Z[;:Kp2+08M4gGt/|:9"tlݐHo6i#vA&d*olx^:w&Ʊ9t n{"vqz^]nR1_ex4%Zutp%Lј'EsZ6bA΋WeVZScJ#Ƀ'#S7rS<7扅EFCvO*rj4S)M奙sxy9ء>O=1R 4fe [;yQi͢-Pt7Z17:mrܥsAm8kob.-l{gssbwcvV`Pl P e_RHLGs$q+AN}&{*O`iVa՛ %COpo=ͬ ֤kٓyd/ +x͛[% ϧ8a`00$kfvWKήװ;̞n.*կ:=|%|*Z[z}|B$¿fSߒLZBk7PZ%_.t5rtGSRKTR +ĔUGlST4꽪 m5y*1VGUahaW5 RqTL#!*q +=]kDO'rQNZ9FlIJ2l,`KE<]-]-` ebO$VU]]jH)*B9$:(LR..–L:ؒآtDRZn!aO`KE]l{Pqc@,%hA V Zz-E< ĖV<1t=#0lQ\W[<@@[x,Vo8{,fqfX @.\y,0WNbJc5{,pWc"` cx,PpWwjfk% +J@Xc1܍wrpI~8[XcAwas4h \1}.qgb<$px,H.Y=;jX]ԞcAw7$p<` Lp]WZ=$pX  + @C=dp{X]J" 2Kcl5`5P)<Kt.Qi 2kۦǂ\LGjhdt\]O +A,W[֡I J-ǂa BBcDnz[.n~,Ԧ걠| r ׮BcA)Rb{,K `t J-X* {:-= ҅cAѠǂ+L C#P{:%3ǂ9X&H` 0cvX&W[$ǂZcA%RXߴ|x,h[y,h q<47z,|z,hB79I|x,h +[BW[45g݂I7A'OaKl걠lfX0&"zHZYp75ӁL DdWV8{b@@o؋ݪgZLd5Vdr EGTPgbٰ,9f1y|ן._{鿗wNE%ɖHln*l+B5 a1#JF2؊ݶɰlf3ۓ/2TIm:Vb!}@Lv+rs1#|KёEc'^C?=\o'vbp#]_~>DWl?ɼg'z~;Z{Zg^~s/zi/GF??7>|{q+B> ep {ʼn]Oc"C6<rHd7ڲ$'WXO(Ü)s_nTS?u7熯pEk9> ;YZsz_"¤rضXE]/laUb9d>m;N(sЈX]?4B RȨs@JJOz^='RctxZ- G9V~9{}>WyS|Rg ,RH[CΗžIpCcm c$ɎrtC'أrr9֞ Q6K^vb m38Nº~88ɽJpptùtѝm|ζsr߾ŮlAUqV8~D loS9d$'(>mutӶ7wK"%a(%&Ot?gkO"TT7 aT3.Z#>n}^a'8ۻbiX[Blgtp|L endstream endobj -572 0 obj +591 0 obj << /Type /Page /Parent 1 0 R /MediaBox [ 0 0 595.275591 841.889764 ] -/Contents 571 0 R +/Contents 590 0 R /Resources 4 0 R -/Annots [ 573 0 R 574 0 R 575 0 R 576 0 R 577 0 R 578 0 R 579 0 R 580 0 R 581 0 R 582 0 R 583 0 R 584 0 R ] +/Annots [ 592 0 R 593 0 R 594 0 R 595 0 R ] /TrimBox [ 0 0 595.275591 841.889764 ] /BleedBox [ 0 0 595.275591 841.889764 ] >> endobj -573 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 799.173057 99.933071 780.423057 ] -/BS << -/W 0 ->> -/Dest (cb12-12) ->> -endobj -574 0 obj +592 0 obj << /Type /Annot /Subtype /Link @@ -6607,21 +6797,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-13) +/Dest (cb12-20) >> endobj -575 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 761.279014 99.933071 742.529014 ] -/BS << -/W 0 ->> -/Dest (cb12-14) ->> -endobj -576 0 obj +593 0 obj << /Type /Annot /Subtype /Link @@ -6629,10 +6808,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-15) +/Dest (cb12-21) >> endobj -577 0 obj +594 0 obj << /Type /Annot /Subtype /Link @@ -6640,10 +6819,10 @@ endobj /BS << /W 0 >> -/Dest (cb12-16) +/Dest (cb12-22) >> endobj -578 0 obj +595 0 obj << /Type /Annot /Subtype /Link @@ -6651,379 +6830,319 @@ endobj /BS << /W 0 >> -/Dest (cb12-17) ->> -endobj -579 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 685.490928 99.933071 666.740928 ] -/BS << -/W 0 ->> -/Dest (cb12-18) ->> -endobj -580 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 666.543907 99.933071 647.793907 ] -/BS << -/W 0 ->> -/Dest (cb12-19) ->> -endobj -581 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 628.649864 99.933071 609.899864 ] -/BS << -/W 0 ->> -/Dest (cb12-20) ->> -endobj -582 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 590.755821 99.933071 572.005821 ] -/BS << -/W 0 ->> -/Dest (cb12-21) ->> -endobj -583 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 571.808799 99.933071 553.058799 ] -/BS << -/W 0 ->> -/Dest (cb12-22) ->> -endobj -584 0 obj -<< -/Type /Annot -/Subtype /Link -/Rect [ 99.933071 552.861778 99.933071 534.111778 ] -/BS << -/W 0 ->> /Dest (cb12-23) >> endobj -585 0 obj -<< -/Title (Hardening Guide with CIS v1.6 Benchmark) -/Dest [ 6 0 R /XYZ 85.009843 502.818898 0 ] -/Count 14 -/First 586 0 R -/Last 597 0 R -/Parent 600 0 R ->> -endobj -586 0 obj -<< -/Title (Overview) -/Dest [ 30 0 R /XYZ 84.259843 272.631496 0 ] -/Count 1 -/First 587 0 R -/Last 587 0 R -/Parent 585 0 R -/Next 588 0 R ->> -endobj -587 0 obj -<< -/Title (Known Issues) -/Dest [ 45 0 R /XYZ 84.259843 799.370079 0 ] -/Count 0 -/Parent 586 0 R ->> -endobj -588 0 obj -<< -/Title (Configure Kernel Runtime Parameters) -/Dest [ 45 0 R /XYZ 84.259843 539.222079 0 ] -/Count 0 -/Prev 586 0 R -/Parent 585 0 R -/Next 589 0 R ->> -endobj -589 0 obj -<< -/Title (Configure etcd user and group) -/Dest [ 45 0 R /XYZ 84.259843 283.686971 0 ] -/Count 1 -/Prev 588 0 R -/First 590 0 R -/Last 590 0 R -/Parent 585 0 R -/Next 591 0 R ->> -endobj -590 0 obj -<< -/Title (Create etcd user and group) -/Dest [ 45 0 R /XYZ 84.259843 169.788971 0 ] -/Count 0 -/Parent 589 0 R ->> -endobj -591 0 obj -<< -/Title (Configure default Service Account) -/Dest [ 53 0 R /XYZ 84.259843 561.590928 0 ] -/Count 1 -/Prev 589 0 R -/First 592 0 R -/Last 592 0 R -/Parent 585 0 R -/Next 593 0 R ->> -endobj -592 0 obj -<< -/Title (Set automountServiceAccountToken to false for default service accounts) -/Dest [ 53 0 R /XYZ 84.259843 522.092928 0 ] -/Count 0 -/Parent 591 0 R ->> -endobj -593 0 obj -<< -/Title (Configure Network Policy) -/Dest [ 67 0 R /XYZ 84.259843 599.840928 0 ] -/Count 1 -/Prev 591 0 R -/First 594 0 R -/Last 594 0 R -/Parent 585 0 R -/Next 595 0 R ->> -endobj -594 0 obj -<< -/Title (Ensure that all Namespaces have Network Policies defined) -/Dest [ 67 0 R /XYZ 84.259843 564.092928 0 ] -/Count 0 -/Parent 593 0 R ->> -endobj -595 0 obj -<< -/Title (Reference Hardened RKE cluster.yml Configuration) -/Dest [ 77 0 R /XYZ 84.259843 191.441066 0 ] -/Count 0 -/Prev 593 0 R -/Parent 585 0 R -/Next 596 0 R ->> -endobj 596 0 obj << -/Title (Reference Hardened RKE Template Configuration) -/Dest [ 400 0 R /XYZ 84.259843 799.370079 0 ] -/Count 0 -/Prev 595 0 R -/Parent 585 0 R -/Next 597 0 R +/Title (Hardening Guide with CIS v1.6 Benchmark) +/Dest [ 6 0 R /XYZ 85.009843 502.818898 0 ] +/Count 14 +/First 597 0 R +/Last 608 0 R +/Parent 611 0 R >> endobj 597 0 obj << -/Title (Reference Hardened cloud-config Configuration) -/Dest [ 515 0 R /XYZ 84.259843 385.582628 0 ] -/Count 2 -/Prev 596 0 R +/Title (Overview) +/Dest [ 30 0 R /XYZ 84.259843 272.631496 0 ] +/Count 1 /First 598 0 R -/Last 599 0 R -/Parent 585 0 R +/Last 598 0 R +/Parent 596 0 R +/Next 599 0 R >> endobj 598 0 obj << -/Title (Reference Hardened cloud-config for SUSE Linux Enterprise Server 15 \(SLES 15\) and openSUSE Leap 15) -/Dest [ 515 0 R /XYZ 84.259843 245.434628 0 ] +/Title (Known Issues) +/Dest [ 45 0 R /XYZ 84.259843 799.370079 0 ] /Count 0 /Parent 597 0 R -/Next 599 0 R >> endobj 599 0 obj << -/Title (Reference Hardened cloud-config for Red Hat Enterprise Linux 8 \(RHEL 8\) and Ubuntu 20.04 LTS) -/Dest [ 538 0 R /XYZ 84.259843 360.287606 0 ] +/Title (Configure Kernel Runtime Parameters) +/Dest [ 45 0 R /XYZ 84.259843 539.222079 0 ] /Count 0 -/Prev 598 0 R -/Parent 597 0 R +/Prev 597 0 R +/Parent 596 0 R +/Next 600 0 R >> endobj 600 0 obj << -/Count 15 -/First 585 0 R -/Last 585 0 R +/Title (Configure etcd user and group) +/Dest [ 45 0 R /XYZ 84.259843 283.686971 0 ] +/Count 1 +/Prev 599 0 R +/First 601 0 R +/Last 601 0 R +/Parent 596 0 R +/Next 602 0 R >> endobj 601 0 obj << +/Title (Create etcd user and group) +/Dest [ 45 0 R /XYZ 84.259843 169.788971 0 ] +/Count 0 +/Parent 600 0 R +>> +endobj +602 0 obj +<< +/Title (Configure default Service Account) +/Dest [ 53 0 R /XYZ 84.259843 561.590928 0 ] +/Count 1 +/Prev 600 0 R +/First 603 0 R +/Last 603 0 R +/Parent 596 0 R +/Next 604 0 R +>> +endobj +603 0 obj +<< +/Title (Set automountServiceAccountToken to false for default service accounts) +/Dest [ 53 0 R /XYZ 84.259843 522.092928 0 ] +/Count 0 +/Parent 602 0 R +>> +endobj +604 0 obj +<< +/Title (Configure Network Policy) +/Dest [ 67 0 R /XYZ 84.259843 599.840928 0 ] +/Count 1 +/Prev 602 0 R +/First 605 0 R +/Last 605 0 R +/Parent 596 0 R +/Next 606 0 R +>> +endobj +605 0 obj +<< +/Title (Ensure that all Namespaces have Network Policies defined) +/Dest [ 67 0 R /XYZ 84.259843 564.092928 0 ] +/Count 0 +/Parent 604 0 R +>> +endobj +606 0 obj +<< +/Title (Reference Hardened RKE cluster.yml Configuration) +/Dest [ 77 0 R /XYZ 84.259843 191.441066 0 ] +/Count 0 +/Prev 604 0 R +/Parent 596 0 R +/Next 607 0 R +>> +endobj +607 0 obj +<< +/Title (Reference Hardened RKE Template Configuration) +/Dest [ 390 0 R /XYZ 84.259843 518.211778 0 ] +/Count 0 +/Prev 606 0 R +/Parent 596 0 R +/Next 608 0 R +>> +endobj +608 0 obj +<< +/Title (Reference Hardened cloud-config Configuration) +/Dest [ 534 0 R /XYZ 84.259843 537.158799 0 ] +/Count 2 +/Prev 607 0 R +/First 609 0 R +/Last 610 0 R +/Parent 596 0 R +>> +endobj +609 0 obj +<< +/Title (Reference Hardened cloud-config for SUSE Linux Enterprise Server 15 \(SLES 15\) and openSUSE Leap 15) +/Dest [ 534 0 R /XYZ 84.259843 397.010799 0 ] +/Count 0 +/Parent 608 0 R +/Next 610 0 R +>> +endobj +610 0 obj +<< +/Title (Reference Hardened cloud-config for Red Hat Enterprise Linux 8 \(RHEL 8\) and Ubuntu 20.04 LTS) +/Dest [ 557 0 R /XYZ 84.259843 511.863778 0 ] +/Count 0 +/Prev 609 0 R +/Parent 608 0 R +>> +endobj +611 0 obj +<< +/Count 15 +/First 596 0 R +/Last 596 0 R +>> +endobj +612 0 obj +<< /Length1 9900 /Filter /FlateDecode -/Length 6558 +/Length 6559 >> stream x:{\UU^py? 8Tt|:)HZj ->2%S35#sd9ff͌:33^Lfn3ݽkǷ׷Q%CBzzCksoCCӆK/J{Sfll) ;npԓ`yaԤ?Do6wz1ispܓ.i ̐S4sY8%E`YԷL8Cj~xjF^vnZ;ΠI%=cGǷ@"|lΜioθ~HZz6Q? {n^{bQa`拊BMMvT{Y ]_V=xC⤮ -_0WP}Qc󚬏L8@/ 6];':fꆶ?/9hYATeI ES8\v% Xmڬ|;!U/]6O~8Ock||)5Pr瘒% g_ٟ ̞|Jg>#&ׁowQ)N;$ GP? +>2%S35#sdy5Ԛ;cnh6ך{0m{݋z|[{}lU2$g>6g694<4mH+?uh/@/бL= GfLMZNCc{'W`^ꏟ67g=iop~8 I0E/>w^]R*E}97DnGgfe熝߾3hzRI|GϘ;'H͙S8-;zs+WK&d͋~q0]**,!L=|Qq^@÷Ԕ d'MpG}}a*h׷Uj?xC⤮ +_0WP}QcL8@/ 6];':fꆶ?/9hYATeI ES8\v5 X'mڬ|;!UO]6O#&ׁowQ)N;$ GP? 1 -{U0@MNo i}c!`&̆BXԦisv0 gt mmmW^[:bP:=<3zB[#zA7f:޶ rXǃЭO'={̘^:$됬4;Zi|H>mZ7<.|ڌ'lOD x–7'xrO-No7W"~WZ7jſ 7~kkZ 65W_ ƫ?OjO{+ioD~rG5R| (xP~i)^~/]Vo']ksBD<+ -;?o)'Z o|]q lxLQ;Wy@c+)1ʟOV|.k  o>ȷ3[l@b&$pc(iQu nXoz+>݌]3=k5O)#?'^Ջ>Al>q?V4*'4c% TbI+\qre=m\Rҥ$K3]ԍ -\,+.B.8K5cBDl8S8: -&0G`jƩ"pI'N08??Oc 28q?>Z`&pC6>JC6|PH)ppC|pkpH |@h*{>';ȗA} O/S__ľf׆fI>x' -nj <{WO#eÞF쑈<>9xw79[wc6_t1Z`H_ >#aJ,b5cH@]r1$ ПKS@8ډW`-E\ -sYɆF* NTrQI,4K=2/]$pxd9*'`/lehV:+`dXԓv @pF@\dpp0'K1.cd|2~r|^ΒKXnSMgBxǔ/1 4 -y .ZstZ{ -L*~P)l@e%؄4 K9L$)?C-P"L x#i^n@ ;4D.vIYpB`M0 -%-&޵RaYl/|)grG!i r)6i [UD6 #޴0@yG2̢V)k` aUoiVy {Rceu-ߢ'&JN]xaV6g3EzQ/v* We>A~]IBېcة&RCy(;r)x\bE4%>pAU/ <`Zjj̶#|3'ĦSHo6]lJeb$;䋾4_'F,m6e^dwX󥽔i"א͘!&x@RVk\m4cDXnxo64ڮkHI83yE|?ؓl1aB,pd2FsH )읋MvO5l!{:{g -BB""Sc=!PO'ψȈ̈-]RZV^"rmlmΥ:dfegEEGt+%G%E&Eh R1$k_: -7{ +kŤ6f;>?oHI9%=;^{QW-kWIV -RV4>09@cgm\O}lAAkj8CI #QfzώzhהV{֓)v㯜?%>~ot4FE$Il =]jmTiaB:I*Ӽ&۩ BCkCQ IB6 uD&z\[۹%yy4f4RIsW:*#i9!ekz4u3}ރg&pNm&`}kHL >$rS/.iwI`;UL vm9{P%ﶴ`W?|̇~%>_ڣkO0d23mfG%>@4ZRi{-MLRaN-,&u0˥Qvd=K.YR~ NvBڶ}񝭕u[^ךN+{qh8SeHWm-3Nf3Y"#׏uKuVq~Vgڹ vEh,9\BlF3Y!3tSΨ,_3x-_leɤKRWKtDZėIU)uT7K#7*Mn+wJcY*\!W'5-Ѱ_ o~oow yǒ%h4Fz2]iٺ_j_C_$L(c_PB .KeH8zmaW}3]ӣIރ5t)QW/!:#(zmt-ף?n6vu}v+;n^>^_`EOO[>ZO5?USm3?Z)g~Gey ?nyw(Kۣ5kF t SPo:Vw1:|G5|:6R(U ejTf.Y|leRGm@yslg#Ta?z/:Vh(PqD(MW̤I3VZIQAMwhDт ~Lb~ 6]+9玷$qOv+  W;:dgvƹ;cTAuFQu|"7ڡ;Lw Vs`sƁs8h_ogoWwn"c+L -K;&II1}Њ]1clԸ݈2PAb%?L4Q{&UUlH=?N:9'ty<6Crn23=#7Wm=u<9ynejVޏ_6r:\JdLgaլ|)KliK:cNEa2:)H,bbȒ^o^Z[5jIYk}Z=@v>A/' aM鵐9ͣ][Tcm7+tvþİ>ʂoQiwkwJjO{4%/@[؎X$=PR@ave:l1n#뜙#\7O<(âvܜb5<5L%JeRT.vJd.10NW! rl80ţl"N3|g3qNFQg28$clRIzjg!he4gV-fQmC§]#왓G9ObFYG}/wĀg{Sw%iJ6 t4YǙ2LR7-&],eR,mL RW:.Qܤ@ 54,np()#d7T" n5m0GYRWM$Xӥa.{ܣx 5͘fJ3{R"/%) eRBRKnlM&fӻƲݺvN'/*/;-/[%ǸtߑuXbx]3_zlgiZiJfIڗ>HN ޖ@emc\͡ V("X 0 N8z&B$jD8 &PBw1A6̅4: -9Tam\%z/yf!չi k&~, hlZFYn<, icWd&$pZ_Hgs?3VRB;̦Qm-1%ItܹsMyh?zIڗ6R~e6c‡/v*Le;j n;錑tRFA: zmZ7<.|ڌlOE xʖ7'xrOmNO7G"wo w7ŊM7~ԃ7jz 65o_kHkzYoT~r5Rr (xP~y)^/ +] +|_{/ssn"xzƷE o |SqolxLQ;Wy@c+)1ȷs[l@b&$pc(iQu nXoz+>ی]3=k5ϸ)#?Ƨ^Ջ>El> V4*'4c% TbI+\Ire=m^Zҥ$K3]ԍ \,1+.B.8K5cBDl8S8: +&0G`jƩ"pI'N08Lc 28q?>Z`!p#6>J#6|XH)ppC|pkpH |Hj*'?ȗA} O/S__ľf׆fI>x' +ό <{WO#eÞF쑈<>9xw79[w{c6_t1Z`H_ >#aJ,b5cH@]r1$ ПKS@8ډW`-E\ +sYɆF* NTrQI,4K=2/]4p5’ 稜#̣Z 4rcURO 7"AV9+I4 +pKpe!‘œ,@$5<%9K.aIN)9 aePp$ld+|p/|NhY9*vi'+2TC#gB/m"Qw= a0._{x32:| @@ 23ir:{z es&TEhN&e=E +9J#5,XChk|xJ]Z$ge!okў1\^؈lVl\0{z`XJ\0ZpBO5IWǿ[O5i{iu7|֚(92N9ӅYĎ}_Fe2$۩,_Wh* %U/ nCalJʥGIBtnJE!rTy &x\Vj5aJ0B3.͜PON#It)r/Ҕ~vNG"!6wو{aa͗Rη\C6chSJm.[*r]j%aAn"VS}`kh#%$d xA>)C)l +T\Nľ}b+&&*R¾}儨p "_ڹrt3=E߁gʸh7X z9xt ǎ㨴#"_cO, +ղX& +vLDBXxU^ U/05؟2BC [HMĤFJAHF,#t4D˩"zϿ(Xu6$_k._RKܼtUWHyEzj3ܦw> 5]層@^:`}uWC$8m]5t}#oPXDiRd~.E#VmY`ٵYחW㬂s.?:UWę^6mg }hUHbT:^pU[שC%mD[Kc˩;ԉK7)) n{Dr];T>)KZC,`ge!3?昽2[l8el?<%*~'sk>tmZ-"&ŀliWl"tP#5fB-I(ξ+w[#[Jҙhn^GUICG>;Φyާ/$pY|  ;a%|J$XgEаP(LRXX`94Lv1pХ.W7)[dȠ@kOC3SM-Mmj4:5;#z"Dƀp#"cb;|366&&OtR<^_ >f}S^TJCe|_޿Kº|k퍲Ig 3rRoW WX Us!1jBtZ 2)-$$&%'D$DzB<0O'["2222bE؛K;u. + + +ϊ( +- ++ +/(-+/rOKgJ&$IM"AbH™tOnzSV?zI/m:w|ҿߔKsJ{'vlU^{cc[4v!llYi^-8|`s `nؾ1قʃqv:AdG0kx3Ȯ)'S퐓_pj|h6 4HTɓ' {փYV/ۈ2P<$tvTyCSMS7gֆ<:&m< LxmɹsK^k=ҳ/ai6fiL-\];G7tUFrByŌJzz ;֥ᵬrIKwHN)rv\OԐڐ߆ ᩐRTWja60B!+ +]A)4Gߑ,3B7e--:3-qŵ| ^i-Vig9нLx6'1^D<3btTb}L7XFא@P-C#|HTO5 ^\8J!w/^]~!&w$ ]vP+Dsѣ͡Kkiyot;}Ι>Z|& + }G7ޜ<- `d6 g^͒K6}ݢY-( xώJ[o?S*]?Mܣq?x +vb&q큒 +(%7)`ĸ t'gYYʜ ]Fha,T**riSRh$+vUqr ltHgq·)u3|.Kqe`UXE1BQڂM|ԩomS(GMeSO_5Y-v-Ih< $da_{q +78Ǚ&ifb7NSU&8 A,Mt)$2YgϜ<ΡU~Zen&W6B>ڰh? ~RwMMm\y)4\Mdi2g0H<ߴtJio05H = CdDE6sj6_ʃ 첸͢XFcP3M I0Og) ltKu,`[^orlgiZiJfIڗ>HN ޖ@emk\͡ V!("X 0 N8z&B$jD8 &PBw1A6̅4: +9Ta\%z/yf!չik&~, hlZFYn<, icWd&$pZ_Hgs?3VRB;̦Qm-1%ItܽsMyh?yIڗ6RAe6c‡/v*Le;j n;錑tRFA: z-yT/.˧R{zqlX>#`flX>'0\͞?F +gυ +r~~tghϻegdڠ\8 _nw_}6=g(Jx k]8tWYڍ4 P endstream endobj -602 0 obj +613 0 obj << /Length1 6944 /Filter /FlateDecode /Length 4153 >> stream -xYyxSו>Y2/l%,xӓ]-YWxȖWy_pb2LiI&MB)k !K҄44̌L &:m:th$'ۄ|_{='#Ftba} 59W>h)Ŏde@B NOOynBC{gKpso B"BM0v:Be/sG? -bݍ3yx_Mt6,BK艹H =GE缿[?a~ =cxed4op7s I -\0OA^2f^H8-y -$>/0 -R }@kGi~ӗi,F?CqAI,B@Lj5?Ϙ>}u^ߛ~(P&Zǯ:XI.bI!J%h5Y&(qHJP6ـ,.rP!#@ <*$/=/Bt -xzgCd9#Gc(@on1X̯ҁIQ}A,!Ў%0 sQ2@1o&h>BQa_x3Z %r|;0PZz^AO(%Iu @ñc~DϨNK -C6Tʐ'v_O}Ϳ+ Ef^j܇)tG܀S6aIXE&#g&/ b J*yԅ2OÈW4r5Pub:rUlq8F3bZJ^XBڸɆMOk~UoGk`"e3 >{Iq8meZlr׸]Ul 8N:gxEYJKVZ 1l Ym-kN9!7YYZcW+cF 2*SJWdS,\UVqIA#fLos -<(=@I%V2eO(Y֩T:Y\[ɫ)wj[[Z-x Sfe1=7xQ``&R`E+)ϵƭNv6\>ph)܀2@5&fyOpQqÂ쒅 ; T -e#]l2Yh;ZV]r@dzZY)8nrYK - _c"l?u̓Mc$!ME@C&aSICyI)aK]iIōm!ɦ,p#w0fFd1`1l]dkNǗ9lS&o;+Q2#nfXF q놊; ^Xo @}a&H$Ԅm0RS[ޟ[Wg3Qz!{ߛQ]f2\KHXSVQ{ ڤ@^&_A\X̛)if\dT_5yL~ϔ̞  ϿW&h5WXgrPBNw@Q'#F\wBxen }tl>#6]\m~9G2Lȏiz3K LNH -c$y3r~5UyqB6;S@R :|v5@67~y>r'>E{,|2RT4bWJ2,uطs[Ahy6cI;?ߝ׻y y: ڤѷkY9q5[|ɷ0YswmI}EbyVbY\U? rV.9-_@.Hfo +xYyxSו>Y2/l%['ɻ,[vWɋŘLiI&MB)kMJ/4!Mffi&I6i:COsmBso=w߽{s9OF!!LEBQmr6+3Ij]ޘ-ΑDB'ۚ=M^6(61{`(Gii՗`G.Cu*OY&OgZ}O ^FJ9:.,,xB {A9ZT^n2!DqGP@軁sJ|e< eB_0 +R }6kG~3i,BD1z@4BOLj5Κ}u^ߛ>(P Zϯ:XHbIJ!Ch Y&(1HJQـ,=?.rQ#@<* /=/t +xzgCd%!Gc(Don1X̯x҉I1}A,!Ў?QDQo&)h!B oQafJ4c&:8vZAaDB-`Xg-JdbTFWF|Qdl"O +:v[WZ]j ܇)tGd܀S6aIΜ~>Wp_svSF&fpLiaN⭷`gOCYP$QRY#$b%o_{]o΍cOxϼv:L)̬ϔ5ajQ0q%zzgu}{8Q-g('?ۛmCj6ď'nhViXe8B(+ˣd˄(9-th&r¦Ic8YP(dZz{p/> 1 &dЛ$dk<*F֑Vj!lS. j6TwMS 1bQ0 )DZr4BT,U?Hc`c*cͭ# [}j\[wcp=COP|@HWT˫@ԬF3O?bhdMvU"hij,uvQiKq!AKj.UOKݒa˳LZ~ǐJr͇R՘ e2Lkp]WSSn|;N^t02[ ~ KŚi*% Òj-ASھ}QUSWT\\. ++/ףwe:uuezFyhɧr,,&1S/*#%E`/*ě׺I&b;=(. >3tGqOGc2kVQ Cw;4Xj)}Q(<<5HvRwV|,daJ\䌄*MP(uOk{SE7dZؘ_;>uTm,MVh2*u\ZׇM3䧝&/QEQPF{rসgBTW,ZG7d۳6?ܗivN;FGinw_=V]a+͖Jzr +Z +E4'> dy z#+paɴwKGG'/Mnz20~ֈB2X-4tC,̉մMMJ}*=3~t^aQZשRDRR[VgM}Kߢ{M~M^G+驣Hds\F*/}ke27hë~A7>ݜc0lq:9M]#-? e> +D$e'N_w?ػktL= Sn۾o*Vo@ ~0\L%Px +n7&=F<gK;nȄVMk[osc/"s 5+-!~Ҳsv?9yV?뷔nol:@8$BaIZ\ 7&ŽA& 43hq%ekiy4 ac =s{z빣ܱ?9!;Z+b hIe8%}.n"S3S:xWh5|>Bg`kxp݇(rV O:Jqim=*2:[x5e5_`@ EF^,kBVodæ?ܵ ?>}H&eo0R2 Ӈ=KpZ-]x%wLhܙ0*ndk N:h'c=y"LۆP%ō.- yǐvCÖ kv9>'=YYRe( r+Jdg㒗- -c@ؤ۠Z3GƷϹ^KzX@J w`Ӟ72[`<+32+˰B$}X!p}v+ϕ+~:A /0F11n92|xˡ'9)SvN[$44P$?Q7 [Qnrɲ'e,T*,[m[ڤ-9lwJ[SR-xӼfe1=7xљo`&rA`E))ϵƭNv6\>t'dk)25&xOHaq⬠; G T +e3Ml6CB-{%a ?d35kpyK1t۟>扄1Rp֠fsfPpѰĢ|W㐕%ĢF㶲|ðdSTR֓|t3K#~e2յg ˜_)e$g+6]Zm~9G3٨ϏiD7eT䛜rwDI:rg*~3]yQ|6+C@?:|v45@6? ~y!>2'>E~{,|2ZX8jUCR2۹-?l8ѝNHp Jxl]5I~Ĭi@-]vGu9Mw퉺}bVbY_V> rV.9-|_@.@o  -Є7u4;#p1L:9˪JW֜BUL. _$S5q$-*k a#t/2Rq!"RBfx6nn7\{㼲ZZh,z۞=44.O{]Xt]sIWK&ԆZP+XD)|ENi.ϷyhVW+ ~ +n)QJYݨzi_3º^; }y]<[yQ1z)) -84lA?B.`DHg~ ?mڠD+9i_me +dSS+OSeJwWbr)2uRUyʵD\D^g\.WY.,YU&(F~v/2Rq!"RBfx6fn7\{㼲FZ`,z۞=44.x]X4]K&ISWK%\5@XR,56ex.u\jpI@4ަcl:*ݹdwkr/pDΩۓDק٠!UJRY&{o;}uN_#/ǑX#}8Fbv~|"&8> _.>pY*+2R +_vhjGŊF$s5>l%<F.jfyL&Ve6ޅdR&Jkf|?F dj|ÏV@d }ǐ x._\]Vہ 4/ *ԏQ+jC (/ =PT@Ӎv?tX#?# A}~A12 v%<j@0uA/k!X @\^kkVDFT2 \JJp@A?C;.>:p^yP `;Q09ÏG45oPUp7Fe endstream endobj -603 0 obj +614 0 obj << /Length1 7204 /Filter /FlateDecode -/Length 4874 +/Length 4875 >> stream -x9kXUוku}.y\^ jA#H-QV1iK'!CmjhjR4k&~Ik-vZ˜~68:1t:c컟k^{`BKKVV>QD -,@ˊ*.ܱ>꟣gYEY[>br~KcE fl-;=g6qWR۸=;o+|4 چΚ߇~ `JSG~wv[_.kohRc4Cg+vaToh=/ K --mӗZ?^V\d 8@pkl)3hA}R*/@/H݄UP>iK%OeH$ -/g,u5 5BM0ht( +YRHN!;QM#{3?XW9GN7ޙzPOySԧfk)?Kr_fƚ)P.m<*(RvPZtHJ`3T@ ltNOF -)V![ Z{^H\DA:$xW ֔z~!6-3]U!SgxzTxzC7nGRWz-)ƊKhƗ0e!!ϖ:σV'g2|awy?~ -Sv6e <:h~݋}n$#2Sm=]؅G#|Ȋka?>hCC20:SWTVa TVq2VtaV{|8p7 .,uqXRl%V,65.YY.WpUqw.;p0&pi.)%]Xh;ܸȌ | 0obq9ns9nvnr?UIL7f(Di(=Rm<-ӆ@@'Xx S^l3O`0;Gْ6a'p,t#=Gmh%Տs)tzR4S4 nF4ւ5C5uu\ң4EC> &}c4ȈFA6̪a)??\;e8v_8[ `^&H"0ZPFo$ :0;9%\߭k6HMIv[uI+ -g%Y'G&ǮB裣vcƘuq[NͯSs%$dg]Y - u1vVBNHd~&W#Z>}Ru;44,Z);_߱t}т5=9,d wTG){[sU5CZ*zXfLЩgh0)#(YV"V%_&ݲ|ʒ:9cs ˯TK& >a1fdPCQddm![k~#E"M:!=]c~?IIѕk3l@ZvtFL';>:A}5l@7?8pBܮ2Wh#IqHsbH${MΜ9YpWaqU߿$3Ok-vE0ԬS]w䅑3˖O$%J +vACM:!l +ckH -+zSxlmѣ=뾺8/%edyS^<#1"aN -܁ufG|c.osE؊ap3#`(*'f !-e$0˿}ŷGoؼi|U(؉J,eɖc(+|m"H/+qFq=&[ta*H fWKJ$^5fϛΛ;G[ޝ\TW\!N~E_}Jǎ>V=#z!wl2,- ѱcv:Oz]rCv  V 0k]zLv\Z :2Y0'+\ zrbIײĎ+uf-?ݣhI xD`vik{Wzm"^cVTTmO ;-DPꔯaR`(a^X>=:*  \j zIKPI\R:sP.bǮFV&K?-rE.eUe1yuN-rMK67Az]ۣtKjTajTe}f96굕G.яi -Dy/i,j bP"$XCaV ,m4ߒo^$UbPry) 񟑢).~[r<֣=ܾ0_/Y][_hXh\h[обQ]6[MGYN(<[s#š - [#*Yk*S8k}ITX޾xw02Tg;d3q(grL7Ɣ=&#>ʒw#_aq1}[<&=,bOjRt%fZKuNruttݪ `x'8;/fPWsg֝;zY,LO?c˯Pzͧbع@v=QdP,{k!6@ebƧ͘:VyO KJ 5e[Q n%fY1I:Fc[t!3WNp̛|GA[6.Z45)*TN!VLMFl>:&ګӋzCtȜ:#$y'E 1X2j\Y9c c T,3<ˠ,ɺd}!٘lJ6}3ՕIOtn.FP!$*"ʪ5 |k+^v#kOCvN"?:o1/ț[0+$ccH6tnFfN Ŋ[C̟c7 -|fs(1jn{'C~S+>  6YQt%8'nS$Ir [x]Ko;S%u/xDYEZMkJPJ4EΨȨSЌ#2y!}Z?4>P<іJ\qAQ4Ja7HZ%Vm].?ΒX>J,̓KG' t zH-rlhl"`{M 1zfQђiY Yo -,sW{$%"%^=OKR\z -T, Edަ|MxEf^-~5FM/`[ͬ3m XA -P uN` $S JYԪ$ ,&vzv5T@#\=?Z|MZmjj*C!pal! -Rbz&*[7Ӻ*tU* -UDy1<0׫fuu?psifc? 7u唄iS{Y? 1ޚa b(J )1C<1Zw1,`#uMjzK -,!>DuI'TVTBƖȨm lo"l/ | +x9kXUוku}.y\^ jA#H-QV1iK'!CljhjR4k6~Ik-vZ˜~68:1t:c컟k^{`BKKVV>QD +,W@ˊ*.ܱ>꟣gYEY[>br~KcE fl-;=k6qWR۸=;o+|4 چΚ߅~`win*р1+_E]T,XƊ-b"{`*gEKsKs[e֏W--+u^L}j+)a,nfσ"eLEhMt6C@=v@4i)V![ Z^H\DA:$xW ֔z~!6-/3ECNtQ7 !jDo_(* [R8CuIy!RS0/)TaʢCKC-u?hOaaO5ϜW' |e32(9{$D@|&9e)\ᓋ ?߆OqyNc2>_b"?2T[yO>|vᑇh~؏3g@_}? Ypo> c7v +w>/.ˏ_$/Ӎ;i`gvȸC6o3at*tl!hK6 o7=bC7aC@ܶ RgL{Ua-UUXC+Dcd"c]X.U$= i!| K]x7e\u2x v5EVƅEVKի>\U+e\!>\n/L \څK +|I7.2B?.3/c</0<>̛kyGk1wbnsw3 +tJƴTO a!Љ)ja2S,2Qo8{ -&$ &x7OG/UOwcgE:,?zyи'c"<&1Pp;J:1<)Lka6 Sx[t;0tE;yfsZ j\-]hMDF`A=k5F6C PcDC(q( i3b`M%2B GX׎bY,bGe4V&؅ H9<[ bm1 , A%d +&%H>шTU!ׅ-51%8YKo0/˄~# .1=˃J| 8|;$h_7`ކq~? +Ǩįv*QҰΚaֳ*_Ȗ T#մf ]QI*9hpiW!+cDIG0v)\=X 3kIf4MqEԿV&M͔ hoYM(bx]Γ+C)EOM?Y<.\hL"bY1uH*_!\L@/C +X&ƂUY+&F3Zł12bpӹD+K + %H7÷(V(pQɒpס^K/ݏU:j$5z`bH[bHfcD-0wXhPpmr,$/bUڜG6bT7 ,Cdh5,z1 m\e c%$f9VϾ"Io'pD +.(tד%BK`):!lBNjӀjm wM-RSxkRV]R+4YIɑɱk<(1fh:SԜhk 9Y~W-!!ntBC].Chssr|zH}O$jݎ+ ;V +=wtWw,]_`MfNjN6,YeQ^);\U͐-d##t*73!L(o3AUyAɗI,/d$N'>k)1$ zO'AXL(6TPYwqneHA#9:91ʵAZH_F -;:#&Ó{lu젾6Пpp8\nWSH4k͑Y$9Y$a&gΜ,K8{8JΉ^ǵUVf"KjVn| ;~șes'~Hx aUNk]Fȕri5$K yfՁw_-<ўu_]2s٩y/W俑G +0'f:Nj>1T෹ QČ"l0\S0S@`2njBo_V};?#7lԴys.yDE%fn2d˱c6_]88 :[St+%%Gwctf\U M#x-eUN.rԈk.+â>cGRӐ;{6@BVޱk;'.U9!;{ܮcf&;.^re,?IRPSL9kYYNbGxʃe:^UNv?z|4DI<"uL0;4=+ =6 A1+K*k*6si{XuWB0)Fy0|Y,QON juZ.qzzz\@vwc.)r9(Rcf M#M+ɥ{\y9"sY*<Ϻ{ r%ZJke=خk :%YG0I5my2ҾHd^a#^foc'4sZ4l|5P( Qiࡈ0lHw~|6_oɷY/*Y1d(MRtOIє 棂q-XQl9 zDHGysB}n_/,.-/4,4.- Yh_X(cdf.-Φ#, +^ ~I~KaM-x}Y +w5)ߵk*S,o_j yڻn@L2\839cʞf|ETFD|eOޙJN~ve5o+wt3jP إ:'Y9[:WH:nou:&ګӋzCtȜ:#$y'E 1X2j\Y9c c L,3ʼˠ,ɺd}!٘lJ6}3ՕIOtn.FP!$*"ʪ5 |k+޼v#kOCvN"?:7-p1$f:LO7#3fz'Mbŭ!Zt>3W9c{AD‹lܽ|G/ʿG{ѩFzOGZs@6YQt%8nS$Ir [x]Kݩκ~2p"YD5%x%"gTJd)hFzD<㐉> ZFj( hK%.븠(׉$o+Ѷ.vˏ_gq],dMn%ɥē:=X$bd4Qd6h0& +ރ VɨIZh4ꆬ7+YQP=q`\Xǎ%).y=*'"2qQC> +&MXi3P/@ i#̦i-f֙ , ]lNhz:h'IC,jUN;w *^XMNE@C>&6WMu5AeaꡐZ[z0nQU1=V{J-SIt Ci +tU* +UDy1<0׫fuu?psifc?s 7u唄iSwY? 1ޚa b(J )1C<1Zw1,`#uMjzK +,!>DuI'TVTBƖȨm lo"l/3} endstream endobj -604 0 obj +615 0 obj << -/Length1 16252 +/Length1 16324 /Filter /FlateDecode -/Length 11592 +/Length 11653 >> stream -x{y|TEo-w۝ҝI !IH -"  $L@ac' A#A#s:;uo||^ԽUw9uS|OBV (phg&y{lt= B=h5hO[P~8z y`PƤ[킁CRg~A*Bx7M=a9LEӓ\w'W DR̛:{y7=S'̟dPחm:kWύqB6yBILgM/Mv L)=uІ&=k ȸD O?59fObs ͝h'~}<[ꖎ3@ -xəIpDslt&1z];3"QkdF@ñ%@C8W ~+T(sǡSx(Â.Uϥ@> G;P)zCKa;} jF5h6ע@MhٝA@P(v4ن.)P;uEEhFAvP Eݽ{oɒ(PQ8^)*}8iƙ帽hސqw*{ԣlrKHXrhQ*c*!|>9='' \7 ɒawE3bSlRZ -x[F1Zh!H7ׁٜb*.ܫ@l:؀P,MvEiUXgLtTd#,j1!Uxd3;tff K+P7WK+M3Ȟi7Lξz]V3톲8eVn l&leD/xV$n` #J$RP7Gi-Ş6bV:mp4 RRT6s:LTN5w5;yfk0n^3_;qŚcɱXPr@YY-d3̎Yٙh%,nd󾚶p<Ē3= DXMC 1$'IgtӲlN¢lJ GI4^NY]Z-XˠIQ&sTFD@D641yp靸rK{8rR!mz TGc *11[Ý(7%͠0@`mfs 쬬l5 ԧomӀ!g|ʾYWzoVv^s¼ܬѣQn3-o9V5-PN|_.C[]Iu^ wտʳE;09B&fZK4b} 5 -w)C! AWƵgPL&mGی!2V Fx*­̽D6Ý@2;ZUJk|7$Y7^č@w4Ml+s2+(\ꁮ9>݌0Fdw5#55@]6X^W fT `$zmE_D -(ZT%wvCv]0lpa6;뾛oCգWj&vS`~{hD$Z77ǷN)gJK_*#w#q ѵBV^:@դhAÍ8qN[ dkZ~;qR~=]fG^vXlu6Y -s)=r 7V/:iW9؝Q Eś60cir篥z?NA)8!ELR%EQ>'4_|9_h H88 g[Ȟkr4w{!hNE ^ 'O%'A~MA Edp3F^ŃN,~}n7rTݠhIQI ̖C|*2NG1#G^͑>"=gfhg$_xgnZ1ySONGtj=;t]lCAү}5Z EP]- -Iq}*JPDmt_`|s3&7N!$yF.wvilξ1SNLܵoߖ[˷o\=a}ŵ46s>ͩ̎UXkK۶=śK_ a.萀*( )@T/DLAENEL6FH5=S SRn`ZR-:9XGX'Wqcp&_ J5q =,6Yr1ixa3ˢF^~t+n-h6k5OOۻfh0 pc#|jϬUd` 2W{(!$^qh;怟6k8kh rI\a8>-Qz1C#'Rk| 3vc[͛W^FГ.oKf_3@Ѕx#^Ƕ:K_۫{AMK%=D@yRbǣX8mԂRIˈx$t*{Z(-bӰ+$ -$2@nݽp%J>g -^7pCG6NiN+6֬iˢy+$ܝSdIub0HANf{ 'Sx#UdB @ Nx-QƠ14Hy'Թ9-7f-}v.eKyƣ (TϺc-P ӣtiMuNm7kD[+?~쪕Y|[VmzdBrϮ%SXy/u͵/֜(R̥!o}*Zn@iRj$g -Qtde iwb1cFߧvůek<<Wkw/ A%n $d4ݐ&;ͩV`~@<0][}x.W\fE,ku፻8$ RF`b҂Ԁ5'w*&{̙OvRr;lR<T%*;UӎM2x ʁc=1B:E8 簓 ;kk()R<:R_*3n>p%P4bP%pXWB:#-H"2)Ql/% J.-^(:\,L>%;̀p@@5,vElF_O_j|{ a'MC%Rdmw}rMA> [ PC`!@ E -Cn|JJ(5$0[xoB<@rIh:%\. ,haS)$@.`0j{d@Yna+$1 Y1j3l7Z P,&[P2<{Υs &8H܎$ȝᤄ̐%.R!.xC v ;w9Fֱ)Ħ;d'[utk Lg2UtCn טj#5@-Z]VV_ZZn$*.‘g\Ė٭ex[sP(}fHXͪB$t .EjI~ A.+x~zᅪ {bJͥv](=B7 1U%Z NO  ZtUE.XlӐp%K%Yk1O=cp+,̡Eˬ 0g_:3&^l g;41-kŦ>|h+a]"KgSY: T3V7l/, TY:U}lri69'>-G+|SB\΄pSTe$R`893LL oz}􁱕f?7#ߟV]p!5;Wilgr'E=.d\DJCͻcO==(k$U{n"ggXxM64pVvHূk!na)Ƿh,qp -x# !G̨f~`ѭ6C{o間;aliN~pR\.K+dED -B66m!*e{sp?,5H؃%g~wzVfZSZZ^^Z#m^?d8 gg?|S r?= `\^ -RE~'"!:h.LBEVsKD.+ׯiI ̛|쭒#Z|dc9_ꅍkJؑ[vy C{Www;xD[(R3cR' -(UItb {tn咳s/$dYNz VIzr@tXogTZCtΰ -4k{$zIV7LƠW4&|9PT̠#Vm\ڷv X5nYU)$'=삟:߹WY6v42VpQPvQ{uFʿ4Av!>!:I_hPy -X4 D -kC|kKdkyiK\jПmDO%FP֕{7"{"ΰgS*+iA6dA1"j먹ѸUY - U[kl Y`NK>x/}Q̎o}7~]yGۗIʥ ۧy\V N ٙ@&EۂYKRnNoڮ8' -9,E #bI:YJ!B'Ep#\"p-Mʝig![̑>H!gti>%.ѿm^]b6H6R|l)$+Y>ƮJ ȢU i I~:^`)HK @iQ#>7g"z>tgw'0џVNQL$ q!hYF_`o?]]t#4Ÿ.Լ+׵,=+UHST9UIե|G~x~D~d~T~t~Ls]!WH+ - -u2Q^QYU]St1ZH -<8=v?Oݙ:SˮI&k{c[?_ury(_xo,~;[z?Va -wJwn5eRU8YM=5\s34<*Lx晊8;q>w0a(`7^l0Vch ^Z4|! -=FaEPNO?BSZ9d8;xpj8 l+, pt4EJ/@.]9z09JK׮---#ՓO]i-$uCFla8w_o -ddAA3" tGeU>Q[kο =1#36[PTaNxw7{- <ԩ^G(VHz^yJˑL;ر ^:[ˡ;ZRMΐkF c3U|g|ڬ3T4L8V?s8{v|IOٹ{B%la<⓽ n@$$aB "SiNʷ/F#_0Q""\]rą?@$Jܩiсx{!l:|U`KML4+aVT0p#. -xa2#~C!&R` AF]|b<j1BʞU{;6rZ|x:Y7I3Q,5`L0uY#BT^(Ʉi2p}^;y{p?0;`ֱf: ,L,]썦|&(Qe: -KHEHr\h:)Q{}XLg( E?U.edY0q˪Z..}:`6h73dK]\tНׅ1TMXQPbCq]T.kGOP@v ^J~!UԼu@x=]ʯŠF͙;򱊆g6_ѷ򉪟.l"6lU9 abe1A ~_: ~GCqfz &%Jo0 bEuQ}"ꤩ':"n#n"c]H/h#O{ 5 ?0,Uߓ}a#5l}]?s]ھ!*bWnS |?^ݬFtPo1VN`_uou C\4-FOh*m$șP:26Cp4h2ȿ=-BsPfߣ5_kMdxIؗ*@aZwL{'ڝqPσ{&p_KpS4qw;럗ͭԎ֎*msFԴ1K#8(>6".¾=B ]OĄ(u'fԩOLRgM n~Z/?S +x{y|TEo-w{;4!d# K a¾*/$@D0M%2bQ1ЀD@ 9:;uo||^ԽUw9uS|OB6 (`Ġ}~8շw|P^ 2ҁK= ڱ}??4cmhv)s>0!#Λ~^ـ"Θ7̹߂{gL^ɰ?@0ck.dDB9s @#\Ϛ ' ^bh9oSGe MousB~88oS ŏp?iQ-Y0 -9 ȯ/|bܓGa&Br$"1E7&Q]R~rd=XpNMEc9y:x=륝r jQ!ObX MWH?AӉ K:~ ާyQ,Z)ٙo+tRmwrsDA@i%[|-q [CPJ܂ r(k +܏,z[h{˃4N@iۧ'PF] ^ K%/G|6x6vD%tVCՠyP_z<57dw]_DPQ@+ +P4 +V޻ǭ Dаىݻ؋{SD:ZOa>EKfE݇3.woh)'Feq_;Z[}zN/*oi8ߧvO_}SgnlpnLM>HVcŞQ؁j$`;bP6dU[mIWFZP#z{UR V{D.hvhgw4֕]Fӟ+O*ğphVZْ MozSߡ?fFO7* ,63\m_zZx^+b#o:~9 +w_0^}?cӍzSd%86A)gG]ѳ(PW3 =IFevqF1GQ;=b o}ۇ۫{ķӷa=*Z_S|:8ݡo^Lӿ>}WѽFk}eI|%1їw[ŗV?/%?2.ӝ/Xĝ }^;}:yFZXNhճ*Fz0}viu<0 0}C+A=&&;ݨp=tgRFוXuX1?X? k]]*Ft1D3$K] .1%y/ tQa. +O08 ]0Ο^?kO2:'ftV:y8L3:bFNqS,$F'2:a^`Xh1z +]dcct+PF`Fdqi06-e h>ab?FBo1-Va'i|F{W'4V_OzzMbO3YB˛g&ǫgЉyWb݁wh7F怀sihV]b4s!v@3h:ܘh\N4j)a.Tt&w 4n;Zbڑ[%$=}|C;\Md4L=mgnFf1Ѹd1n%M1 zv1h6HJd8`40F@Y@Cbh>u-#-4 SGғ8juJC{~pPPx%^(t+h-1xz +W@ *G2 (P)l[Kh9gk*G-h@8@ J;jvP"A(gDBSI&PT/e7m7~ #x~ADp Ok : Fg&Ɏ*e7e$m[G&Zt hNF2L,dA; ̈́~B̓++hO&dZ@3h1Zؒō +k;ArHs퍲h*o$D&'%~0zC#s6H;CS"l{?19J.π,V+ǔugtoV۩^FOO}C>uRvƻ&){syE̳n}`m[a{3uN`r䎤SΙYbZcmIXi0D4->sU٪e#je!;).}9NQ"%Esn@D641yp{֍buB([LAAǘTbb;Q!nJAqa5dd@YYčk(~ڦ}<=_z-躲䅹Yƾ#:F-\Z9}576zq }^ s;뚳;4; % wQ~E]JPHCЕ q-.l0I;s&MBa Jorp&t'ζldڒ֭>vu+ |pc3tʜ + +lzoNnFa';˖ٙq.ٚYKYw\ݤvcE-F=)h5,*o-~QZx\:G{,2@^WK-Ǿpɟc.M'p}CVn~Z']ܓ/`o{ 9rnO)sWIՎW: jw%X\4>Ʈ盭hɡ7 %g*[vooxw޿;60sۅ$|o&;ٹjw/hEbc?cK1V}xLBDdrQi:䲥Lmv6k1')@*&J\~}U/g֮C_^vSWl|f=z,\xwX=laGᯣ>j|ݰUꈐtJR#8k6TXdΠh#+[Hk,̎<=vנ#O46(z0C\Cݽ2>`cz׃Ć%|23KȬi!MvYRmg{ҳ85$Kw=4Ľ[}}RLa[j@1B?/7T)>*ui2 ʸoK[GMO#'y,)maBP֡vސ e0!4$F#Z;ma((uƅGPzHOpeK..FN<,v>tј՝' }Rv5b/w裵O8ni>W }xW\fA,kÛws I#P*X4Ԁ5*TRCr{3Ù3UN9ٚåx +JUS.d3|2@b'NqN,ﮪ֠ 4>o)0e@KE$׵$ 㖣WS;͓w@Y JdrqBg"veID7%$9AɥWKGERnU` +}'ILGC|D: 獒n>}ebd+JU\Fߜtb' ;<\V$`X*(<ϔx>na.>~1t7CN dK`kN!:U0nȒmaSm0"efB۫KK~Sk뭟\_Å8}dk r22\W;jK4?agfQ" 1Ŋ\ {`F%g"pW^x~F6 wi1֒-|~{x_@!v@LUC*zKrP/ 5T'QZQ5ͮ YXh8k|-g +.:WmhAۃ;A+sҋ^ܼ4yǾ`78u߷&[oaݚxth &RtDV=11|Uua>+~,u;,o4#9W,\P'S@@2򚤀3Ʌx+Z"͂SE, Kzmu2^ڐuj .s]4ugsQ|f&ot4!a9vQOř s +kgϪ'tyûv5|\z?wvqsDئeB0τGHRCH(FD"X@xܔڠx8ϱ7ـsb8wg<0UtNPuTիz"ÜE&J Ȁ=ȐBQV1UI/K~aਹ[{_07 14FQRʗcQ'G %|Dl$<C&ɥBUugFx )Xi݈L#v σY8|;;,Mge[X-}xmptE''ĒN[ѡ[.ήǢ-\8lXށ`Q(f +Qmn|.l} Q #KO,Ijʗ!rwk4RiB"7ZUVnÆu%eW:>7)T_OR>y/.}N8ɇoxԂÏVPKU6 +",-mYՄ(x??؃G.2/gNRuy;=s]{p>lS&{RmjQզ\8@4#c;Uv\VRR^^RRFϑ^?7o> +wl٣ _oB?E Ǜ Vu:,U;! hJ,P F,A%rSВ7A8$ +F&yYDze%{-d !؀^ٷiحYC9ڛ•ȃ_S^_gџ_!uIoӛn-/M} u+uШ>INXle] /(\غ. 'x>.za?^| b#1"+V+\G-1M1 ^66MV,0D] +ktbӯ*VhJO׸4at5v›8٪Sp!;"8c`Ò1۲·( mpBje!IDQBIdbR@%dUQ{Rb{+*d9rҟʣ:K%͒ѧe29Wmsl_ϱ1$ ˃U)$Yj!I?P',i)" 3Y5v' _UOy̳xGobͬd)CE,m<nլ [G AAת݈{Gw j-ڋ7UHST9UIե8=~'"y)~V{2 vݓӿ0 Fos]j}nъZW5?,GaҤnyg+׳Wluf0iD{WOpZf,UP#ܛ=4gKf_aO?]7^knK>n/`g'm`#/ިqTcj~(e<SJR5jkmz=dk,űT3,V/^u(ZZmq¯,)poKN|~G¤ϟ\ߎeX$%^;ihW;P9>*G*BR@*>$R2ʒ=O@|(o?z o[\U-=xU!5Wf>nF,_wS rtݦ+wv23^FL1[VZt-]_ 3 +dȊ)u0J0hn֨}!g%.6a’r!UnʖgȤJ#O# *>f3?L}mVWz[Ep&L{{>'32e1p0 ri7 s?a! F{gWFʷ?F_0Q""\]|GA$Aޭiсz!l:|U`KhAp1JFc (w bV:rH#J7CPWoFGYt0K_JO)=O6/1jDMVgYLuYE Ujȭ-<;^uξ>I[5dzvՁ D2?@ +O0uNuTzdsdUY')T$SAr55,A#Odzx,xQjY#TD D&V6z}' +ZZay cs|3!zPi2r#.xi ~Z&i2-!FdUǭc!VWl''؁/?#Ֆ5XŦ,K-D*pC1`b-FU^(Ʉi2p}S;muޣ!@8;x `V: "L,]䍢|&(NQe:KHHr\hG(QGQHFg+KrE?1]ɭ+ZaYaU\\di `vh73K]c(P~WwQǠSv(ZCņwW͢wX; +~j[ml =F[p<ϯ̩cW~T<6v1U4<ŕOTpqKMiʑ& Rt7v~ɽRm{7;j0+zGYc) +Duw#Oox#f~= ("݂6t^hRSM$} {o9f#79ލsܣh"7={cQ喋?T=Qŭe47zQ,u#2X( }KhzB3LnB)pG,ʇ{EP@dl!wZO4X4>EZk3Ka_ w7fh 1 TfhwBӏ*atg}wvtkT8Ap|(P9pZL.2PCϷ=, ާh̯:'iwj/.Ԏ֎\7.Moo/e\w # @G43xwзw/H;p<#i&?1y +J쉹(uԹׇ~ mZD endstream endobj -605 0 obj +616 0 obj << /Type /FontDescriptor -/FontName /PDIVRQ+DejaVuSans +/FontName /ICOIPK+DejaVuSans /FontFamily (DejaVu Sans) /Flags 4 /FontBBox [ 0 -14 472 560 ] @@ -7033,24 +7152,24 @@ endobj /CapHeight 560 /StemV 80 /StemH 80 -/FontFile2 601 0 R +/FontFile2 612 0 R >> endobj -606 0 obj +617 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /PDIVRQ+DejaVuSans +/BaseFont /ICOIPK+DejaVuSans /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 3 [ 317 ] 17 [ 317 ] 20 [ 636 ] 25 [ 636 ] 37 [ 686 698 ] 42 [ 774 751 294 ] 54 [ 634 ] 68 [ 612 ] 70 [ 549 634 615 ] 74 [ 634 633 277 ] 78 [ 579 ] 80 [ 974 633 611 ] 85 [ 411 520 392 633 591 817 ] ] -/FontDescriptor 605 0 R +/FontDescriptor 616 0 R >> endobj -607 0 obj +618 0 obj << /Length 702 >> @@ -7103,20 +7222,20 @@ end end endstream endobj -608 0 obj +619 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /PDIVRQ+DejaVuSans +/BaseFont /ICOIPK+DejaVuSans /Encoding /Identity-H -/DescendantFonts [ 606 0 R ] -/ToUnicode 607 0 R +/DescendantFonts [ 617 0 R ] +/ToUnicode 618 0 R >> endobj -609 0 obj +620 0 obj << /Type /FontDescriptor -/FontName /VMMSNF+Poppins +/FontName /TGPMTG+Poppins /FontFamily (Poppins) /Flags 4 /FontBBox [ -27 -260 122 795 ] @@ -7126,24 +7245,24 @@ endobj /CapHeight 795 /StemV 80 /StemH 80 -/FontFile2 602 0 R +/FontFile2 613 0 R >> endobj -610 0 obj +621 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /VMMSNF+Poppins +/BaseFont /TGPMTG+Poppins /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 3 [ 266 ] 10 [ 158 453 453 ] 15 [ 197 550 209 ] 19 [ 627 319 574 588 628 627 634 545 630 629 212 ] 36 [ 673 612 771 706 512 503 777 691 245 ] 46 [ 598 431 ] 49 [ 702 785 578 ] 53 [ 607 586 540 674 675 975 ] 68 [ 675 675 606 675 619 328 675 639 245 247 514 245 1029 639 639 675 675 372 521 363 639 560 819 478 562 ] 206 [ 379 379 ] 209 [ 411 ] ] -/FontDescriptor 609 0 R +/FontDescriptor 620 0 R >> endobj -611 0 obj +622 0 obj << /Length 1248 >> @@ -7191,7 +7310,8 @@ endcodespacerange <0017> <0034> <0018> <0035> <001a> <0037> -<001c> <0039> +<0015> <0032> +<0013> <0030> <0032> <004f> <0052> <006f> <0049> <0066> @@ -7207,7 +7327,6 @@ endcodespacerange <0028> <0045> <0037> <0054> <0010> <002d> -<0015> <0032> <0045> <0062> <0054> <0071> <000b> <0028> @@ -7216,7 +7335,7 @@ endcodespacerange <001d> <003a> <0039> <0056> <001b> <0038> -<0013> <0030> +<001c> <0039> <0027> <0044> <0029> <0046> <00d1> <2022> @@ -7235,20 +7354,20 @@ end end endstream endobj -612 0 obj +623 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /VMMSNF+Poppins +/BaseFont /TGPMTG+Poppins /Encoding /Identity-H -/DescendantFonts [ 610 0 R ] -/ToUnicode 611 0 R +/DescendantFonts [ 621 0 R ] +/ToUnicode 622 0 R >> endobj -613 0 obj +624 0 obj << /Type /FontDescriptor -/FontName /KLOSSF+DejaVuSansMono +/FontName /WKJFDI+DejaVuSansMono /FontFamily (DejaVu Sans Mono) /Flags 5 /FontBBox [ 0 -14 584 759 ] @@ -7258,24 +7377,24 @@ endobj /CapHeight 759 /StemV 80 /StemH 80 -/FontFile2 603 0 R +/FontFile2 614 0 R >> endobj -614 0 obj +625 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /KLOSSF+DejaVuSansMono +/BaseFont /WKJFDI+DejaVuSansMono /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> /W [ 16 [ 601 601 ] 29 [ 601 ] 36 [ 601 ] 54 [ 601 601 ] 66 [ 601 ] 68 [ 601 ] 70 [ 601 601 601 601 ] 76 [ 601 ] 78 [ 601 601 601 601 601 601 ] 85 [ 601 601 601 601 601 ] 92 [ 601 ] ] -/FontDescriptor 613 0 R +/FontDescriptor 624 0 R >> endobj -615 0 obj +626 0 obj << /Length 674 >> @@ -7326,47 +7445,47 @@ end end endstream endobj -616 0 obj +627 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /KLOSSF+DejaVuSansMono +/BaseFont /WKJFDI+DejaVuSansMono /Encoding /Identity-H -/DescendantFonts [ 614 0 R ] -/ToUnicode 615 0 R +/DescendantFonts [ 625 0 R ] +/ToUnicode 626 0 R >> endobj -617 0 obj +628 0 obj << /Type /FontDescriptor -/FontName /FEHHOP+DejaVuSansMono +/FontName /TGTVMX+DejaVuSansMono /FontFamily (DejaVu Sans Mono) /Flags 4 -/FontBBox [ 0 -14 585 699 ] +/FontBBox [ 0 -235 585 699 ] /ItalicAngle 0 /Ascent 928 /Descent -235 /CapHeight 699 /StemV 80 /StemH 80 -/FontFile2 604 0 R +/FontFile2 615 0 R >> endobj -618 0 obj +629 0 obj << /Type /Font /Subtype /CIDFontType2 -/BaseFont /FEHHOP+DejaVuSansMono +/BaseFont /TGTVMX+DejaVuSansMono /CIDSystemInfo << /Registry (Adobe) /Ordering (Identity) /Supplement 0 >> -/W [ 3 [ 601 602 602 602 602 602 602 602 602 602 ] 14 [ 601 602 601 601 601 601 602 602 601 601 602 602 602 602 601 602 602 ] 32 [ 602 602 ] 36 [ 602 602 602 602 602 602 602 602 602 ] 46 [ 602 602 602 601 602 601 ] 53 [ 602 602 602 602 602 602 ] 60 [ 602 ] 62 [ 602 ] 64 [ 602 ] 66 [ 602 602 602 601 601 601 601 601 602 602 602 602 601 601 602 601 601 602 602 602 601 601 601 602 601 602 601 602 602 602 602 ] ] -/FontDescriptor 617 0 R +/W [ 3 [ 601 602 602 602 602 602 602 602 602 602 602 601 602 601 601 601 601 602 602 601 601 602 602 602 602 601 602 602 ] 32 [ 602 ] 36 [ 602 602 602 602 602 602 602 602 602 ] 46 [ 602 602 602 601 602 601 ] 53 [ 602 602 602 602 602 602 ] 60 [ 602 ] 62 [ 602 ] 64 [ 602 ] 66 [ 602 602 602 601 601 601 601 601 602 602 602 602 601 601 602 601 601 602 602 602 601 601 601 602 601 602 601 602 602 602 602 ] ] +/FontDescriptor 628 0 R >> endobj -619 0 obj +630 0 obj << /Length 1500 >> @@ -7432,15 +7551,14 @@ endcodespacerange <0007> <0024> <000b> <0028> <004d> <006a> -<005f> <007c> -<0054> <0071> -<000a> <0027> +<005e> <007b> <003e> <005b> +<000d> <002a> <0040> <005d> +<000a> <0027> +<0060> <007d> <000c> <0029> <001e> <003b> -<005e> <007b> -<0060> <007d> <005a> <0077> <0031> <004e> <0033> <0050> @@ -7450,6 +7568,7 @@ endcodespacerange <002e> <004b> <000f> <002c> <0035> <0052> +<0054> <0071> <0027> <0044> <0026> <0043> <002f> <004c> @@ -7460,14 +7579,14 @@ endcodespacerange <0019> <0036> <0032> <004f> <003c> <0059> -<0038> <0055> <001a> <0037> +<005f> <007c> +<0038> <0055> <0009> <0026> <0029> <0046> <005d> <007a> <0025> <0042> <0043> <0060> -<0021> <003e> <0008> <0025> endbfchar endcmap @@ -7476,654 +7595,665 @@ end end endstream endobj -620 0 obj +631 0 obj << /Type /Font /Subtype /Type0 -/BaseFont /FEHHOP+DejaVuSansMono +/BaseFont /TGTVMX+DejaVuSansMono /Encoding /Identity-H -/DescendantFonts [ 618 0 R ] -/ToUnicode 619 0 R +/DescendantFonts [ 629 0 R ] +/ToUnicode 630 0 R >> endobj -621 0 obj +632 0 obj << -/PDIVRQ 608 0 R -/VMMSNF 612 0 R -/KLOSSF 616 0 R -/FEHHOP 620 0 R +/ICOIPK 619 0 R +/TGPMTG 623 0 R +/WKJFDI 627 0 R +/TGTVMX 631 0 R >> endobj xref -0 622 +0 633 0000000000 65535 f 0000000015 00000 n -0000000227 00000 n -0000000343 00000 n -0000027063 00000 n -0000027196 00000 n -0000029848 00000 n -0000030047 00000 n -0000033640 00000 n -0000033990 00000 n -0000034124 00000 n -0000034260 00000 n -0000034422 00000 n -0000034585 00000 n -0000034741 00000 n -0000034898 00000 n -0000035055 00000 n -0000035215 00000 n -0000035376 00000 n -0000035537 00000 n -0000035688 00000 n -0000035840 00000 n -0000036015 00000 n -0000036191 00000 n -0000036367 00000 n -0000036539 00000 n -0000036712 00000 n -0000036884 00000 n -0000037057 00000 n -0000037230 00000 n -0000042250 00000 n -0000042554 00000 n -0000042804 00000 n -0000042940 00000 n -0000043103 00000 n -0000043260 00000 n -0000043417 00000 n -0000043578 00000 n -0000043739 00000 n -0000043891 00000 n -0000044064 00000 n -0000044237 00000 n -0000044410 00000 n -0000044672 00000 n -0000044932 00000 n -0000050113 00000 n -0000050368 00000 n -0000050623 00000 n -0000050756 00000 n -0000050887 00000 n -0000051018 00000 n -0000051149 00000 n -0000051280 00000 n -0000056287 00000 n -0000056584 00000 n -0000056717 00000 n -0000056848 00000 n -0000056981 00000 n -0000057112 00000 n -0000057243 00000 n -0000057374 00000 n -0000057507 00000 n -0000057640 00000 n -0000057771 00000 n -0000057902 00000 n -0000058033 00000 n -0000058164 00000 n -0000063163 00000 n -0000063432 00000 n -0000063565 00000 n -0000063696 00000 n -0000063827 00000 n -0000063958 00000 n -0000064089 00000 n -0000064285 00000 n -0000064544 00000 n -0000064775 00000 n -0000070434 00000 n -0000070787 00000 n -0000070920 00000 n -0000071051 00000 n -0000071182 00000 n -0000071313 00000 n -0000071444 00000 n -0000071575 00000 n -0000071706 00000 n -0000071837 00000 n -0000071968 00000 n -0000072100 00000 n -0000072232 00000 n -0000072364 00000 n -0000072496 00000 n -0000072628 00000 n -0000072761 00000 n -0000072892 00000 n -0000073023 00000 n -0000073154 00000 n -0000073285 00000 n -0000073514 00000 n -0000078930 00000 n -0000079367 00000 n -0000079605 00000 n -0000079739 00000 n -0000079871 00000 n -0000080003 00000 n -0000080135 00000 n -0000080267 00000 n -0000080399 00000 n -0000080531 00000 n -0000080663 00000 n -0000080795 00000 n -0000080928 00000 n -0000081061 00000 n -0000081194 00000 n -0000081327 00000 n -0000081460 00000 n -0000081593 00000 n -0000081726 00000 n -0000081859 00000 n -0000081992 00000 n -0000082125 00000 n -0000082258 00000 n -0000082391 00000 n -0000082524 00000 n -0000082657 00000 n -0000082790 00000 n -0000082923 00000 n -0000083056 00000 n -0000083188 00000 n -0000088237 00000 n -0000088756 00000 n -0000088889 00000 n -0000089022 00000 n -0000089155 00000 n -0000089288 00000 n -0000089421 00000 n -0000089554 00000 n -0000089687 00000 n -0000089820 00000 n -0000089953 00000 n -0000090086 00000 n -0000090219 00000 n -0000090352 00000 n -0000090485 00000 n -0000090618 00000 n -0000090751 00000 n -0000090884 00000 n -0000091017 00000 n -0000091150 00000 n -0000091283 00000 n -0000091416 00000 n -0000091549 00000 n -0000091682 00000 n -0000091815 00000 n -0000091948 00000 n -0000092081 00000 n -0000092214 00000 n -0000092347 00000 n -0000092480 00000 n -0000092613 00000 n -0000092746 00000 n -0000092879 00000 n -0000093012 00000 n -0000093145 00000 n -0000093278 00000 n -0000093411 00000 n -0000093544 00000 n -0000093676 00000 n -0000093807 00000 n -0000098938 00000 n -0000099417 00000 n -0000099550 00000 n -0000099683 00000 n -0000099816 00000 n -0000099949 00000 n -0000100082 00000 n -0000100215 00000 n -0000100348 00000 n -0000100481 00000 n -0000100614 00000 n -0000100747 00000 n -0000100880 00000 n -0000101013 00000 n -0000101146 00000 n -0000101279 00000 n -0000101412 00000 n -0000101545 00000 n -0000101678 00000 n -0000101811 00000 n -0000101944 00000 n -0000102077 00000 n -0000102210 00000 n -0000102343 00000 n -0000102476 00000 n -0000102609 00000 n -0000102742 00000 n -0000102875 00000 n -0000103008 00000 n -0000103141 00000 n -0000103274 00000 n -0000103407 00000 n -0000103540 00000 n -0000103672 00000 n -0000103803 00000 n -0000108729 00000 n -0000109224 00000 n -0000109357 00000 n -0000109491 00000 n -0000109625 00000 n -0000109759 00000 n -0000109893 00000 n -0000110027 00000 n -0000110161 00000 n -0000110295 00000 n -0000110429 00000 n -0000110563 00000 n -0000110697 00000 n -0000110831 00000 n -0000110965 00000 n -0000111099 00000 n -0000111233 00000 n -0000111367 00000 n -0000111501 00000 n -0000111635 00000 n -0000111769 00000 n -0000111903 00000 n -0000112037 00000 n -0000112171 00000 n -0000112305 00000 n -0000112439 00000 n -0000112573 00000 n -0000112707 00000 n -0000112841 00000 n -0000112975 00000 n -0000113109 00000 n -0000113243 00000 n -0000113377 00000 n -0000113511 00000 n -0000113645 00000 n -0000113778 00000 n -0000113910 00000 n -0000118245 00000 n -0000118756 00000 n -0000118890 00000 n -0000119024 00000 n -0000119158 00000 n -0000119292 00000 n -0000119426 00000 n -0000119560 00000 n -0000119694 00000 n -0000119828 00000 n -0000119962 00000 n -0000120096 00000 n -0000120230 00000 n -0000120364 00000 n -0000120498 00000 n -0000120632 00000 n -0000120766 00000 n -0000120900 00000 n -0000121034 00000 n -0000121168 00000 n -0000121302 00000 n -0000121436 00000 n -0000121570 00000 n -0000121704 00000 n -0000121838 00000 n -0000121972 00000 n -0000122106 00000 n -0000122240 00000 n -0000122374 00000 n -0000122508 00000 n -0000122642 00000 n -0000122776 00000 n -0000122910 00000 n -0000123044 00000 n -0000123178 00000 n -0000123312 00000 n -0000123446 00000 n -0000123579 00000 n -0000123711 00000 n -0000128310 00000 n -0000128829 00000 n -0000128963 00000 n -0000129097 00000 n -0000129231 00000 n -0000129365 00000 n -0000129499 00000 n -0000129633 00000 n -0000129767 00000 n -0000129901 00000 n -0000130035 00000 n -0000130169 00000 n -0000130303 00000 n -0000130437 00000 n -0000130571 00000 n -0000130705 00000 n -0000130839 00000 n -0000130973 00000 n -0000131107 00000 n -0000131241 00000 n -0000131375 00000 n -0000131509 00000 n -0000131643 00000 n -0000131777 00000 n -0000131911 00000 n -0000132045 00000 n -0000132179 00000 n -0000132313 00000 n -0000132447 00000 n -0000132581 00000 n -0000132715 00000 n -0000132849 00000 n -0000132983 00000 n -0000133117 00000 n -0000133251 00000 n -0000133385 00000 n -0000133519 00000 n -0000133653 00000 n -0000133786 00000 n -0000133918 00000 n -0000138978 00000 n -0000139497 00000 n -0000139631 00000 n -0000139765 00000 n -0000139899 00000 n -0000140033 00000 n -0000140167 00000 n -0000140301 00000 n -0000140435 00000 n -0000140569 00000 n -0000140703 00000 n -0000140837 00000 n -0000140971 00000 n -0000141105 00000 n -0000141239 00000 n -0000141373 00000 n -0000141507 00000 n -0000141641 00000 n -0000141775 00000 n -0000141909 00000 n -0000142043 00000 n -0000142177 00000 n -0000142311 00000 n -0000142445 00000 n -0000142579 00000 n -0000142713 00000 n -0000142847 00000 n -0000142981 00000 n -0000143115 00000 n -0000143249 00000 n -0000143383 00000 n -0000143517 00000 n -0000143651 00000 n -0000143785 00000 n -0000143919 00000 n -0000144053 00000 n -0000144187 00000 n -0000144321 00000 n -0000144454 00000 n -0000144586 00000 n -0000149623 00000 n -0000150142 00000 n -0000150276 00000 n -0000150410 00000 n -0000150544 00000 n -0000150678 00000 n -0000150812 00000 n -0000150946 00000 n -0000151080 00000 n -0000151214 00000 n -0000151348 00000 n -0000151482 00000 n -0000151616 00000 n -0000151750 00000 n -0000151884 00000 n -0000152018 00000 n -0000152152 00000 n -0000152286 00000 n -0000152420 00000 n -0000152554 00000 n -0000152688 00000 n -0000152822 00000 n -0000152956 00000 n -0000153090 00000 n -0000153224 00000 n -0000153358 00000 n -0000153492 00000 n -0000153626 00000 n -0000153760 00000 n -0000153894 00000 n -0000154028 00000 n -0000154162 00000 n -0000154296 00000 n -0000154430 00000 n -0000154564 00000 n -0000154698 00000 n -0000154832 00000 n -0000154966 00000 n -0000155099 00000 n -0000155231 00000 n -0000160389 00000 n -0000160868 00000 n -0000161098 00000 n -0000161233 00000 n -0000161366 00000 n -0000161499 00000 n -0000161632 00000 n -0000161765 00000 n -0000161898 00000 n -0000162031 00000 n -0000162164 00000 n -0000162297 00000 n -0000162431 00000 n -0000162565 00000 n -0000162699 00000 n -0000162833 00000 n -0000162967 00000 n -0000163101 00000 n -0000163235 00000 n -0000163369 00000 n -0000163503 00000 n -0000163637 00000 n -0000163771 00000 n -0000163905 00000 n -0000164039 00000 n -0000164173 00000 n -0000164307 00000 n -0000164441 00000 n -0000164575 00000 n -0000164709 00000 n -0000164843 00000 n -0000164977 00000 n -0000165111 00000 n -0000165244 00000 n -0000165376 00000 n -0000169982 00000 n -0000170501 00000 n -0000170635 00000 n -0000170769 00000 n -0000170903 00000 n -0000171037 00000 n -0000171171 00000 n -0000171305 00000 n -0000171439 00000 n -0000171573 00000 n -0000171707 00000 n -0000171841 00000 n -0000171975 00000 n -0000172109 00000 n -0000172243 00000 n -0000172377 00000 n -0000172511 00000 n -0000172645 00000 n -0000172779 00000 n -0000172913 00000 n -0000173047 00000 n -0000173181 00000 n -0000173315 00000 n -0000173449 00000 n -0000173583 00000 n -0000173717 00000 n -0000173851 00000 n -0000173985 00000 n -0000174119 00000 n -0000174253 00000 n -0000174387 00000 n -0000174521 00000 n -0000174655 00000 n -0000174789 00000 n -0000174923 00000 n -0000175057 00000 n -0000175191 00000 n -0000175325 00000 n -0000175458 00000 n -0000175590 00000 n -0000180610 00000 n -0000181129 00000 n -0000181263 00000 n -0000181397 00000 n -0000181531 00000 n -0000181665 00000 n -0000181799 00000 n -0000181933 00000 n -0000182067 00000 n -0000182201 00000 n -0000182335 00000 n -0000182469 00000 n -0000182603 00000 n -0000182737 00000 n -0000182871 00000 n -0000183005 00000 n -0000183139 00000 n -0000183273 00000 n -0000183407 00000 n -0000183541 00000 n -0000183675 00000 n -0000183809 00000 n -0000183943 00000 n -0000184077 00000 n -0000184211 00000 n -0000184345 00000 n -0000184479 00000 n -0000184613 00000 n -0000184747 00000 n -0000184881 00000 n -0000185015 00000 n -0000185150 00000 n -0000185285 00000 n -0000185420 00000 n -0000185555 00000 n -0000185690 00000 n -0000185825 00000 n -0000185960 00000 n -0000186094 00000 n -0000186227 00000 n -0000191317 00000 n -0000191700 00000 n -0000191835 00000 n -0000191970 00000 n -0000192105 00000 n -0000192240 00000 n -0000192375 00000 n -0000192510 00000 n -0000192645 00000 n -0000192780 00000 n -0000192915 00000 n -0000193050 00000 n -0000193185 00000 n -0000193320 00000 n -0000193455 00000 n -0000193590 00000 n -0000193725 00000 n -0000193860 00000 n -0000193995 00000 n -0000194128 00000 n -0000194261 00000 n -0000194394 00000 n -0000194526 00000 n -0000199486 00000 n -0000199957 00000 n -0000200090 00000 n -0000200223 00000 n -0000200356 00000 n -0000200489 00000 n -0000200623 00000 n -0000200757 00000 n -0000200891 00000 n -0000201025 00000 n -0000201159 00000 n -0000201293 00000 n -0000201427 00000 n -0000201561 00000 n -0000201695 00000 n -0000201829 00000 n -0000201963 00000 n -0000202097 00000 n -0000202231 00000 n -0000202365 00000 n -0000202499 00000 n -0000202633 00000 n -0000202767 00000 n -0000202902 00000 n -0000203035 00000 n -0000203168 00000 n -0000203301 00000 n -0000203434 00000 n -0000203567 00000 n -0000203700 00000 n -0000203833 00000 n -0000203966 00000 n -0000204100 00000 n -0000204233 00000 n -0000207998 00000 n -0000208309 00000 n -0000208443 00000 n -0000208577 00000 n -0000208711 00000 n -0000208845 00000 n -0000208979 00000 n -0000209113 00000 n -0000209247 00000 n -0000209381 00000 n -0000209515 00000 n -0000209649 00000 n -0000209783 00000 n -0000209917 00000 n -0000210088 00000 n -0000210242 00000 n -0000210357 00000 n -0000210523 00000 n -0000210712 00000 n -0000210841 00000 n -0000211034 00000 n -0000211207 00000 n -0000211391 00000 n -0000211550 00000 n -0000211729 00000 n -0000211906 00000 n -0000212098 00000 n -0000212316 00000 n -0000212528 00000 n -0000212590 00000 n -0000219237 00000 n -0000223479 00000 n -0000228442 00000 n -0000240125 00000 n -0000240357 00000 n -0000240747 00000 n -0000241502 00000 n -0000241652 00000 n -0000241881 00000 n -0000242413 00000 n -0000243715 00000 n -0000243862 00000 n -0000244103 00000 n -0000244476 00000 n -0000245203 00000 n -0000245357 00000 n -0000245598 00000 n -0000246199 00000 n -0000247753 00000 n -0000247907 00000 n +0000000235 00000 n +0000000351 00000 n +0000027525 00000 n +0000027658 00000 n +0000030309 00000 n +0000030508 00000 n +0000034100 00000 n +0000034450 00000 n +0000034584 00000 n +0000034720 00000 n +0000034882 00000 n +0000035045 00000 n +0000035201 00000 n +0000035358 00000 n +0000035515 00000 n +0000035675 00000 n +0000035836 00000 n +0000035997 00000 n +0000036148 00000 n +0000036300 00000 n +0000036475 00000 n +0000036651 00000 n +0000036827 00000 n +0000036999 00000 n +0000037172 00000 n +0000037344 00000 n +0000037517 00000 n +0000037690 00000 n +0000042711 00000 n +0000043015 00000 n +0000043265 00000 n +0000043401 00000 n +0000043564 00000 n +0000043721 00000 n +0000043878 00000 n +0000044039 00000 n +0000044200 00000 n +0000044352 00000 n +0000044525 00000 n +0000044698 00000 n +0000044871 00000 n +0000045133 00000 n +0000045393 00000 n +0000050574 00000 n +0000050829 00000 n +0000051084 00000 n +0000051217 00000 n +0000051348 00000 n +0000051479 00000 n +0000051610 00000 n +0000051741 00000 n +0000056745 00000 n +0000057042 00000 n +0000057175 00000 n +0000057306 00000 n +0000057439 00000 n +0000057570 00000 n +0000057701 00000 n +0000057832 00000 n +0000057965 00000 n +0000058098 00000 n +0000058229 00000 n +0000058360 00000 n +0000058491 00000 n +0000058622 00000 n +0000063591 00000 n +0000063860 00000 n +0000063993 00000 n +0000064124 00000 n +0000064255 00000 n +0000064386 00000 n +0000064517 00000 n +0000064713 00000 n +0000064972 00000 n +0000065203 00000 n +0000070823 00000 n +0000071176 00000 n +0000071309 00000 n +0000071440 00000 n +0000071571 00000 n +0000071702 00000 n +0000071833 00000 n +0000071964 00000 n +0000072095 00000 n +0000072226 00000 n +0000072357 00000 n +0000072489 00000 n +0000072621 00000 n +0000072753 00000 n +0000072885 00000 n +0000073017 00000 n +0000073150 00000 n +0000073281 00000 n +0000073412 00000 n +0000073543 00000 n +0000073674 00000 n +0000073903 00000 n +0000079315 00000 n +0000079752 00000 n +0000079990 00000 n +0000080124 00000 n +0000080256 00000 n +0000080388 00000 n +0000080520 00000 n +0000080652 00000 n +0000080784 00000 n +0000080916 00000 n +0000081048 00000 n +0000081180 00000 n +0000081313 00000 n +0000081446 00000 n +0000081579 00000 n +0000081712 00000 n +0000081845 00000 n +0000081978 00000 n +0000082111 00000 n +0000082244 00000 n +0000082377 00000 n +0000082510 00000 n +0000082643 00000 n +0000082776 00000 n +0000082909 00000 n +0000083042 00000 n +0000083175 00000 n +0000083308 00000 n +0000083441 00000 n +0000083573 00000 n +0000088687 00000 n +0000089166 00000 n +0000089299 00000 n +0000089432 00000 n +0000089565 00000 n +0000089698 00000 n +0000089831 00000 n +0000089964 00000 n +0000090097 00000 n +0000090230 00000 n +0000090363 00000 n +0000090496 00000 n +0000090629 00000 n +0000090762 00000 n +0000090895 00000 n +0000091028 00000 n +0000091161 00000 n +0000091294 00000 n +0000091427 00000 n +0000091560 00000 n +0000091693 00000 n +0000091826 00000 n +0000091959 00000 n +0000092092 00000 n +0000092225 00000 n +0000092358 00000 n +0000092491 00000 n +0000092624 00000 n +0000092757 00000 n +0000092890 00000 n +0000093023 00000 n +0000093156 00000 n +0000093289 00000 n +0000093421 00000 n +0000093552 00000 n +0000098511 00000 n +0000098950 00000 n +0000099083 00000 n +0000099216 00000 n +0000099349 00000 n +0000099482 00000 n +0000099615 00000 n +0000099748 00000 n +0000099881 00000 n +0000100014 00000 n +0000100147 00000 n +0000100280 00000 n +0000100413 00000 n +0000100546 00000 n +0000100679 00000 n +0000100812 00000 n +0000100945 00000 n +0000101078 00000 n +0000101211 00000 n +0000101344 00000 n +0000101477 00000 n +0000101610 00000 n +0000101743 00000 n +0000101876 00000 n +0000102009 00000 n +0000102142 00000 n +0000102275 00000 n +0000102408 00000 n +0000102540 00000 n +0000102671 00000 n +0000107769 00000 n +0000108272 00000 n +0000108405 00000 n +0000108538 00000 n +0000108671 00000 n +0000108804 00000 n +0000108937 00000 n +0000109070 00000 n +0000109203 00000 n +0000109336 00000 n +0000109469 00000 n +0000109602 00000 n +0000109735 00000 n +0000109869 00000 n +0000110003 00000 n +0000110137 00000 n +0000110271 00000 n +0000110405 00000 n +0000110539 00000 n +0000110673 00000 n +0000110807 00000 n +0000110941 00000 n +0000111075 00000 n +0000111209 00000 n +0000111343 00000 n +0000111477 00000 n +0000111611 00000 n +0000111745 00000 n +0000111879 00000 n +0000112013 00000 n +0000112147 00000 n +0000112281 00000 n +0000112415 00000 n +0000112549 00000 n +0000112683 00000 n +0000112817 00000 n +0000112950 00000 n +0000113082 00000 n +0000117606 00000 n +0000118109 00000 n +0000118243 00000 n +0000118377 00000 n +0000118511 00000 n +0000118645 00000 n +0000118779 00000 n +0000118913 00000 n +0000119047 00000 n +0000119181 00000 n +0000119315 00000 n +0000119449 00000 n +0000119583 00000 n +0000119717 00000 n +0000119851 00000 n +0000119985 00000 n +0000120119 00000 n +0000120253 00000 n +0000120387 00000 n +0000120521 00000 n +0000120655 00000 n +0000120789 00000 n +0000120923 00000 n +0000121057 00000 n +0000121191 00000 n +0000121325 00000 n +0000121459 00000 n +0000121593 00000 n +0000121727 00000 n +0000121861 00000 n +0000121995 00000 n +0000122129 00000 n +0000122263 00000 n +0000122397 00000 n +0000122531 00000 n +0000122665 00000 n +0000122798 00000 n +0000122930 00000 n +0000127159 00000 n +0000127678 00000 n +0000127812 00000 n +0000127946 00000 n +0000128080 00000 n +0000128214 00000 n +0000128348 00000 n +0000128482 00000 n +0000128616 00000 n +0000128750 00000 n +0000128884 00000 n +0000129018 00000 n +0000129152 00000 n +0000129286 00000 n +0000129420 00000 n +0000129554 00000 n +0000129688 00000 n +0000129822 00000 n +0000129956 00000 n +0000130090 00000 n +0000130224 00000 n +0000130358 00000 n +0000130492 00000 n +0000130626 00000 n +0000130760 00000 n +0000130894 00000 n +0000131028 00000 n +0000131162 00000 n +0000131296 00000 n +0000131430 00000 n +0000131564 00000 n +0000131698 00000 n +0000131832 00000 n +0000131966 00000 n +0000132100 00000 n +0000132234 00000 n +0000132368 00000 n +0000132502 00000 n +0000132635 00000 n +0000132767 00000 n +0000137769 00000 n +0000138288 00000 n +0000138422 00000 n +0000138556 00000 n +0000138690 00000 n +0000138824 00000 n +0000138958 00000 n +0000139092 00000 n +0000139226 00000 n +0000139360 00000 n +0000139494 00000 n +0000139628 00000 n +0000139762 00000 n +0000139896 00000 n +0000140030 00000 n +0000140164 00000 n +0000140298 00000 n +0000140432 00000 n +0000140566 00000 n +0000140700 00000 n +0000140834 00000 n +0000140968 00000 n +0000141102 00000 n +0000141236 00000 n +0000141370 00000 n +0000141504 00000 n +0000141638 00000 n +0000141772 00000 n +0000141906 00000 n +0000142040 00000 n +0000142174 00000 n +0000142308 00000 n +0000142442 00000 n +0000142576 00000 n +0000142710 00000 n +0000142844 00000 n +0000142978 00000 n +0000143112 00000 n +0000143245 00000 n +0000143377 00000 n +0000148406 00000 n +0000148925 00000 n +0000149059 00000 n +0000149193 00000 n +0000149327 00000 n +0000149461 00000 n +0000149595 00000 n +0000149729 00000 n +0000149863 00000 n +0000149997 00000 n +0000150131 00000 n +0000150265 00000 n +0000150399 00000 n +0000150533 00000 n +0000150667 00000 n +0000150801 00000 n +0000150935 00000 n +0000151069 00000 n +0000151203 00000 n +0000151337 00000 n +0000151471 00000 n +0000151605 00000 n +0000151739 00000 n +0000151873 00000 n +0000152007 00000 n +0000152141 00000 n +0000152275 00000 n +0000152409 00000 n +0000152543 00000 n +0000152677 00000 n +0000152811 00000 n +0000152945 00000 n +0000153079 00000 n +0000153213 00000 n +0000153347 00000 n +0000153481 00000 n +0000153615 00000 n +0000153749 00000 n +0000153882 00000 n +0000154014 00000 n +0000159201 00000 n +0000159680 00000 n +0000159814 00000 n +0000159948 00000 n +0000160082 00000 n +0000160216 00000 n +0000160350 00000 n +0000160484 00000 n +0000160618 00000 n +0000160752 00000 n +0000160886 00000 n +0000161020 00000 n +0000161154 00000 n +0000161288 00000 n +0000161422 00000 n +0000161556 00000 n +0000161786 00000 n +0000161921 00000 n +0000162054 00000 n +0000162187 00000 n +0000162320 00000 n +0000162453 00000 n +0000162586 00000 n +0000162719 00000 n +0000162852 00000 n +0000162985 00000 n +0000163119 00000 n +0000163253 00000 n +0000163387 00000 n +0000163521 00000 n +0000163655 00000 n +0000163789 00000 n +0000163923 00000 n +0000164056 00000 n +0000164188 00000 n +0000169046 00000 n +0000169557 00000 n +0000169691 00000 n +0000169825 00000 n +0000169959 00000 n +0000170093 00000 n +0000170227 00000 n +0000170361 00000 n +0000170495 00000 n +0000170629 00000 n +0000170763 00000 n +0000170897 00000 n +0000171031 00000 n +0000171165 00000 n +0000171299 00000 n +0000171433 00000 n +0000171567 00000 n +0000171701 00000 n +0000171835 00000 n +0000171969 00000 n +0000172103 00000 n +0000172237 00000 n +0000172371 00000 n +0000172505 00000 n +0000172639 00000 n +0000172773 00000 n +0000172907 00000 n +0000173041 00000 n +0000173175 00000 n +0000173309 00000 n +0000173443 00000 n +0000173577 00000 n +0000173711 00000 n +0000173845 00000 n +0000173979 00000 n +0000174113 00000 n +0000174247 00000 n +0000174380 00000 n +0000174512 00000 n +0000179215 00000 n +0000179694 00000 n +0000179828 00000 n +0000179962 00000 n +0000180096 00000 n +0000180230 00000 n +0000180364 00000 n +0000180498 00000 n +0000180632 00000 n +0000180766 00000 n +0000180900 00000 n +0000181034 00000 n +0000181168 00000 n +0000181302 00000 n +0000181436 00000 n +0000181570 00000 n +0000181704 00000 n +0000181838 00000 n +0000181972 00000 n +0000182106 00000 n +0000182240 00000 n +0000182374 00000 n +0000182508 00000 n +0000182642 00000 n +0000182776 00000 n +0000182910 00000 n +0000183044 00000 n +0000183178 00000 n +0000183312 00000 n +0000183446 00000 n +0000183580 00000 n +0000183714 00000 n +0000183848 00000 n +0000183981 00000 n +0000184113 00000 n +0000189306 00000 n +0000189785 00000 n +0000189919 00000 n +0000190053 00000 n +0000190187 00000 n +0000190321 00000 n +0000190455 00000 n +0000190589 00000 n +0000190723 00000 n +0000190857 00000 n +0000190991 00000 n +0000191125 00000 n +0000191259 00000 n +0000191394 00000 n +0000191529 00000 n +0000191664 00000 n +0000191799 00000 n +0000191934 00000 n +0000192069 00000 n +0000192204 00000 n +0000192339 00000 n +0000192474 00000 n +0000192609 00000 n +0000192744 00000 n +0000192879 00000 n +0000193014 00000 n +0000193149 00000 n +0000193284 00000 n +0000193419 00000 n +0000193554 00000 n +0000193689 00000 n +0000193824 00000 n +0000193959 00000 n +0000194093 00000 n +0000194226 00000 n +0000199366 00000 n +0000199749 00000 n +0000199884 00000 n +0000200019 00000 n +0000200154 00000 n +0000200289 00000 n +0000200424 00000 n +0000200559 00000 n +0000200694 00000 n +0000200829 00000 n +0000200964 00000 n +0000201097 00000 n +0000201230 00000 n +0000201363 00000 n +0000201496 00000 n +0000201629 00000 n +0000201762 00000 n +0000201895 00000 n +0000202028 00000 n +0000202162 00000 n +0000202296 00000 n +0000202430 00000 n +0000202563 00000 n +0000207539 00000 n +0000208010 00000 n +0000208144 00000 n +0000208278 00000 n +0000208412 00000 n +0000208546 00000 n +0000208680 00000 n +0000208814 00000 n +0000208948 00000 n +0000209082 00000 n +0000209216 00000 n +0000209350 00000 n +0000209484 00000 n +0000209618 00000 n +0000209752 00000 n +0000209887 00000 n +0000210020 00000 n +0000210153 00000 n +0000210286 00000 n +0000210419 00000 n +0000210552 00000 n +0000210685 00000 n +0000210818 00000 n +0000210951 00000 n +0000211085 00000 n +0000211219 00000 n +0000211353 00000 n +0000211487 00000 n +0000211621 00000 n +0000211755 00000 n +0000211889 00000 n +0000212023 00000 n +0000212157 00000 n +0000212290 00000 n +0000215522 00000 n +0000215769 00000 n +0000215903 00000 n +0000216037 00000 n +0000216171 00000 n +0000216305 00000 n +0000216476 00000 n +0000216630 00000 n +0000216745 00000 n +0000216911 00000 n +0000217100 00000 n +0000217229 00000 n +0000217422 00000 n +0000217595 00000 n +0000217779 00000 n +0000217938 00000 n +0000218117 00000 n +0000218294 00000 n +0000218486 00000 n +0000218704 00000 n +0000218916 00000 n +0000218978 00000 n +0000225626 00000 n +0000229868 00000 n +0000234832 00000 n +0000246576 00000 n +0000246808 00000 n +0000247198 00000 n +0000247953 00000 n +0000248103 00000 n +0000248332 00000 n +0000248864 00000 n +0000250166 00000 n +0000250313 00000 n +0000250554 00000 n +0000250927 00000 n +0000251654 00000 n +0000251808 00000 n +0000252050 00000 n +0000252644 00000 n +0000254198 00000 n +0000254352 00000 n trailer << -/Size 622 +/Size 633 /Root 3 0 R /Info 2 0 R >> startxref -247994 +254439 %%EOF diff --git a/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/_index.md b/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/_index.md index 9ec9b5338dd..51a6df997f8 100644 --- a/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/_index.md +++ b/content/rancher/v2.6/en/security/hardening-guides/1.6-hardening-2.6/_index.md @@ -206,6 +206,7 @@ services: extra_args: feature-gates: RotateKubeletServerCertificate=true tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 + bind-address: 127.0.0.1 extra_binds: [] extra_env: [] win_extra_args: {} @@ -217,6 +218,7 @@ services: image: "" extra_args: tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 + bind-address: 127.0.0.1 extra_binds: [] extra_env: [] win_extra_args: {} @@ -393,7 +395,7 @@ authorization: mode: "" options: {} ignore_docker_version: false -kubernetes_version: v1.18.12-rancher1-1 +kubernetes_version: "" private_registries: [] ingress: provider: "" @@ -530,6 +532,7 @@ rancher_kubernetes_engine_config: scheduler: extra_args: tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 + bind-address: 127.0.0.1 etcd: backup_config: enabled: true @@ -541,10 +544,10 @@ rancher_kubernetes_engine_config: extra_args: election-timeout: 5000 heartbeat-interval: 500 - gid: 52034 retention: 72h snapshot: false uid: 52034 + gid: 52034 kube_api: always_pull_images: false audit_log: @@ -559,6 +562,7 @@ rancher_kubernetes_engine_config: extra_args: feature-gates: RotateKubeletServerCertificate=true tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 + bind-address: 127.0.0.1 kubelet: extra_args: feature-gates: RotateKubeletServerCertificate=true diff --git a/scripts/converters/scripts/results_to_md.sh b/scripts/converters/scripts/results_to_md.sh index 388054cd449..468fed07d79 100755 --- a/scripts/converters/scripts/results_to_md.sh +++ b/scripts/converters/scripts/results_to_md.sh @@ -53,7 +53,7 @@ get_id_text() { get_section_ids() { id=${1} - jq -r --arg id "${id}" '.[] | select(.id==$id) | .checks[].id' ${results_file} + jq -r --arg id "${id}" '.[] | select(.id==$id) | .checks[].id' ${results_file} | sort -V } get_section_desc() {