ELF>@@0@8@ @@@PP@@ppppDp{{DPPPdd@  /usr/lib/amd64/ld.so.1; H(hX4s\ux](X( $ +T ~+t - 0 =2 5, 6X 7 > > ,@ G@$ b@D @h B ' O ( (H W    - F4 9`  D  0`ܢ У4ʤ`1ia'(Tx|ǩת CPq۴8nH`xl @ۼhB?>!8` @` f@ l&? $4$`mDu$_LtSA <8`+BHtD$gPxeK$DtDvL|q  L x Y  S (ZTq' 8 `  < M !A-4!-`!-!-!0!x3!u4("4T"5|"~6"7"9#p:,#:T#;#=#?#@$@$H@($@L$fAx$B$qE$IG%nI4%zRx $AC HKzRx hzRx H)0d9D!JC M FdzRx  roAC Cg $@zAC I[ A (hAC M A (AC K A SbAC X A $AC I A $ UdAC L| A ,4 AC P A (dm[AC G] A ,AC P A 0N'AC P3" A zRx  AC C ,@=#AC M A p!xAC C("AC M} A ,h#zAC M A (&AC M A ,9(pAC M~ A (Hy+AC Mk A (t#,AC K A ,-AC P A 3frC Ek , 4DAC M- A   5AC V @5AC V  `5IAC I{ ,;5AC M A ,6BAC P A Wy(AC E^ zRx $GyAC J A DyIC K A,dy/ AC Pv A zRx *AC e <ɄP,dAC P= A (AC L A ( AC N A $чAC I A (,AC K A (@HEC Gw A,lTAC P! A ȊAC N ,AC M A ,AC P_ A (oAC K A ,HTAC M  A x;`C J A$AC J_ A (OC E_ A  ,bgFC GU A(8AC M& $HAC Ie A (puAC C A zRx (AC M^ A HQSAC EU A $l|AC IV A $ԘKAC G (AC M A (ۙ'AC M A ,+AC M A D.AC i zRx "GC ER $<HAC G| zRx ?0AC K P6zRx ,AC M A ,L AC M} A zRx (%AC P A HkAC Ea l zRx $ŨAC I^ A (DkgAC MU (pAC K A $wAC I A $FAC CR G $&AC Iu A $lAC IW A <% AC F \ AC F | AC F  AC F Ѭ AC F  AC F  AC F  AC F <} AC F \h AC F |S AC F >1$$AC In A ,NAC M A (AC L A (H AC M (tuAC IK A ZAC T $SxAC Ca A $mAC C@ A (NC Es A n (<IAC I A hٷAC v A $wAC IP A $߸AC I A $qAC IV A $̺gAC I@ A $( gAC I@ A PJAC Y $pHoAC Gc $wAC IP A $޻wAC IP A (-AC Mq A $~AC IW A ,<R/AC M A (lQBAC K- A ,gAC P A (yAC G^ A ,"AC Pd A ($+AC P A (P2AC Ga A (|AC P A ((AC P A (AC G A (AC Ge A $,AC G $T{jAC G^ (|iAC G A (}AC M A (KAC M A  AC L , AC M A (P 8AC P A (| AC M  pRAC EC A ( U AC M^ A , AC M A ,( "iAC PO A $X [AC G $ AC CN A $ AC I A ( AC M A ( IAC M A (( AC Mx $T bAC I| A (| NcAC MI A ( DAC M} A , AC MA A ( #AC M A (0 AC M A ,\ :AC M A ( FAC M A , 6AC P A ( AC Mu A $ AC I\ A $< 7AC G (d AC Mx A  AC L , qAC P A , i AC P A ( AC Mo A <b AC Q \X AC L ,|I AC M, A (AC MW A (tAC M M (EYAC MG $0rAC G $XBAC G A (AC Mp A ,AC M. A (~AC K A $<}AC IP A (0AC MQ A (\uAC M A ,AC M A xqC Ej A @C Ej A((AC M| (TCAC M A ,AC My A , AC M A ,="%AC MK A 02$AC P  A   !#$%&)*,-./156789;=>?@BDEFGHIJKMOPRUWYZ]`aefghikmnprstwyz{}~  !#'*+-/02479:<=>?ABCDEFHIJKNPQSTUWZ[\]^_`abcefghijlmoqrsuvxy{ "'(+0234:<ACLNQSTVX[\^_bcdjloquvx|    "$%&(),.13568;@GLMORVXYdknptwz|}~")5BIP\ju@w@@0@2@o@z@@@b @@di@ )@<GAYq A=#],Axc&-A~.Az@2A3ApU7A+8AB9A0DABAA*%ϩA2UAS@A|P$AK`oAwA'A+AAgAA0AFGAbAlmAwcAAoABAAvA}\A)-AIBi^BvSBFB!Bi .BjA~@P@%@@2P@I @^P@}@< Bb@@ @AjA@%_Am>@U@i@@EA @B:A@@aA H@@Z@n0@@nA0@GB@@@"@>@g@@@`@@@@p@@ @$ P@0 P@A AR  @a 0@ R@N' @@ @ @ 0A p@ PB `@ @2 A;D P@\ @q =B B `@ @ @ @ @ @ @% p@N @X  D@` @@t P@ Ag @ A  @ ~D A @% @4 @M AZ 7Bq uDiuDnuDuD)uDuDuDuDvD9vDvDTvD vD=(vD+0vD8vD<@vDHvD@PvDXvD`vDhvDpvDwxvDvDvD1vDuvD5vDpvDOvDvDxvDvDvDvDvD?vDvDwDFwDBwDwDI wD(wD@wD8HwDtPwD%XwD`wDgpwDxwDJwD#wDIwDwDwDwDywDwDwDwDwDPwDGwD/wD*wDxDxD- xDf(xD0xDk8xD@xD/HxDPxDRXxDhxDpxDxxDxDLxDxDxD)xDhxDxD*xDxDxD^xD(xD]xDxDxDyDyDyDyD yDq(yD0yD8yD\@yD{HyD0PyDOXyDxyDyyDyDFyDyDtyD"yD1yDyDyDyDyDByD_yD>zDKzDzDzD8zD@zD2hzDqpzDoxzDzD%zDzDhzDzDzDzD}zDzDezDzDzDzDzzD+zD<{D,5%%h%h%h%h%h%h%h%hp%h`%h P%h @%h 0%h %zh %rh%jh%bh%Zh%Rh%Jh%Bh%:h%2h%*hp%"h`%hP%h@% h0%h %h%h%h%h %ڱh!%ұh"%ұh#%ʱh$%ұh%%ұh&%ұh'p%ʱh(`%ڱh)P%h*@%h+0%h, %ڱh-%ұh.%ʱh/%±h0%h1%h2%h3%h4%h5%h6%h7p%h8`%h9P%zh:@%rh;0%jh< %bh=%Zh>%Rh?%Jh@%BhA%:hB%2hC%*hD%"hE%hF%hGp% hH`%hIP%hJ@%hK0%hL %hM%ڰhN%ҰhO%ʰhP%°hQ%hR%hS%hT%hU%hV%hWp%hX`%hYP%zhZ@%rh[0%jh\ %bh]%Zh^%Zh_%Rh`%Jha%Bhb%:hc%2hd%*he%"hf%hgp%hh`% hiP%hj@%hk0%hl % hm%hn%ho%hp%hq%hr%گhs%үht%ʯhu%¯hv%hwp%hx`%hyP%hz@%h{0%h| %h}%h~%zh%rh%jh%bh%Zh%Rh%Jh%Bh%:hp%2h`%*hP%"h@%h0%h % h%h%h%h%h%h%ڮh%Үh%ʮh%®h%hp%h`%hP%h@%h0%h %h%h%zh%zh%rh%jh%bh%Zh%Rh%Jh%Bhp%:h`%2hP%*h@%"h0%h %h% h%h%h%h%h%h%h%h%ڭh%ڭhp%ҭh`%ʭhP%­h@%h0%h %h%h%h%h%h%h%h%zh%rh%jh%bhp%Zh`%RhP%Zh@%Rh0%Jh %Bh%:h%2h%*h%"h%"h%h%h% h%h%hp%h`%hP%h@%ڬh0%Ҭh %ʬh%¬h%h%h%h%h%h%h%h%h%hp%zh`%rhP%jh@%bh0%Zh %Rh%Jh%Bh%Rh%Jh%Rh%Jh%Bh%:h%2h%2hp%*h`%"hP%h@%h0% h %h%h%h%h%h%h%h%h%h%h%hp%h`%ګh P%ҫh @%ʫh 0%«h  %h %h%h%h%h%h%h%h%h%zhjjHHH}HuÐUHLeLmIH]H H=٠AtH$H=HɠIcH=IDHHL tDLuHDLXÐH=!HH9tH^Ht H=H5H)HH?HHHtH%HtfD=-)uUH~)]D@ff.UHATSHtUHHtMH˟IHt4HHcHL3 t u"~HD38 u AL[A\]UHAUATSHIH^LLLH=@LHcL=HtH[A\A]]ÿUHAWAVAUATSHHIIIHHHHL2,LNI$Ht|D)HI$Lc I9IFLH=*tYI}HtLL tQHI|Hu#LqH[A\A]A^A_]AUHAVAUATSH IHIH$H8H}1EHuLmAH}t,HUHuLLt}tԋMȸ͸HĝH]H+u H [A\A]A^])UHHHHHM1EnH}LH¸HtEL99rLHIuLH@L;LHtXLxLH@IEHLhAEL\HIu LH@KLHܑHH=979HH/H=qL(VL8H0ZLH(HH HHt1HPXIMPHHXHVXHFPHHHPIEPDžLH(LyXHAPIEPH HDžL~DžLoDžL`UHAWAVAUATSHHPHHHHXL(H͐HHM1ɿzHHl;HXxP HXxHX8HXx HX HXx0 HXx@8 HXx`u xpHXX@@p`IH `HψHHEHHAAAHXHpƅ|DžHtxHH|H=ѝ)h("H|HDžHQHPhyH[#HooD|HH"%H IăwuH0HuH=o)HXXH2IHtZH IHt8LID$Ht!M,$DžhLL-zLH~eDžh"HH=/o##H |d H0Ht(LRHtHS#HtDžHH|LH= .DAt||IcDLHt DhI<$IHI<$H LHHtIuLsLa LOL=L+NL<LeLH""fLH"gLmH!hLRH!iL7H!jLnH!kLSI<$0IHt|I<$H -LLRDhHLDH`!ADL\HP.hI<$Ht hxHvbDhDžH=l4ƅH H=lhLuOH=kHL \AUHPH#UhHi"H 듿IHtM HIHt8H@HHDž`HDžhLL=IlH5cmHH8萫LHdeDžhgI>HHhHHHHhH+lLYLcLHHHLHLL8 L>iI~t>HH`HHHH`3IHhI^H`뵿/HHtL DLHPL@JÉhLSHXHXZHX} HXe HH HXgHDžhIHt%HDžDž HDžH5+bHnH8XHuDžh<HOID.2.5.H29.32.0HHHHHH= 6\AAmHHH]HsLIHM`HHcHJLLIMKH=UgIVyID`8L%HHHeH@H}HHH=elH XLIH0HtFtHHH=e)HH=eHLH HA H HHcHHHLHHH1LH J0 XH=e^IL[ (LH HHH=cHH5y%H HH@HHLh[L HADžHDžHAAHH8HH8LrHHHHHs H {LHAEL0AGLLH0ALLH0HALIHLcIL8HLALM;HcLH8]IWHBAO$>KD>I׾H8IHH=bH HMn AMHcHLLH8IHEL8L8HyH:H=b]LIb`HcHANHcHLL)HHHEK2L8&L8LUH[ HcHHSHHLIH^ HDh^ H=jYLLHL _yAXHPLBÉhLHo IHtHDž`LMH5G[HxH8tHWDžhX H`HHHL<IWLHLHHNd8H=aH`HQH`LH=%aQ0LIHtsLHLt[LH=+atBIt$LLht"HL;HHDžhLHHV- LLH`HcHHLwHH JhuH=3WeLHHL 0wAYHPL@ÉhL{HV hHHt|0HCIHHH=4`H #xgHcLHHtTAdH5XHuH8H3FDžh HuH8H5xX诖HAHH=_tˀuaEH=UL uAZLHPH?AƉhH.EHoE H CHcIt$H[Hq%HsHDH=_ HHDDžhlHHH H=_UH I7HcHHHH=_THL ztAHPH=AƉhHEH1JH5yVHsH8覔H JDžhHHH hHHHhHASHPDhCL9hLHrH8H5b^דDžhhLHrH8H5a褓HrH8H5?^脓DžhDžX HhrH8H5UKDžhsDžh>DhXDhLDžh=LLAXLL`LHP{AľL{LnEHvIA>u,LHþ:LH{HAH9s EfIM)D9WLx:LĽH=H9s E/HL)HXD9LhHD)艅hHhHDžDžIcLH`LcX I9IFLH=f( I9IFHLH=ZfXhLIHHIHHHALEDhHoH8LH5)ѐLbHnHMH+hH[A\A]A^A_]DhL(HoH8LH5dqH@]HDžDžHDžDžDžhHDžDžHDžDžHHHHlhHt%HHH= hHXhHMkDžhH^SHoRDžh=Džh HL"H+ZHcHHwdHDžhDžh DžhLƻHcHMLDL8LH0L@ HP(HpLiH=VtgHH=kH0@@LLRH0APLL譺H0HAHHHS H0LALѺHu=DžhhH\`hhh DžhLtHP\DžhDžhҋ`hDžhDžh묾L HFDžhHHkH8HH5? ׌L(MHH`Dh H=K!IHt%HHhHIHHIFHt&HH`HIFHHL lAVLHPL5ÉhLHEhI<$HHAI<$觷IHsH=K6AhHa@UHATSHAIH5VH\iHH߸谷HIH5VH߸蕷L% LH5VH߸wLH5-WH߸`LH5VWH߸ILH5#H߸2LH5X4H߸LH5AWH߸LH5bWH߸LH5.H߸ֶLH5"H߸迶LH5H߸訶HHSH5:WH߸荶HOH5GWH߸rHKH5dWH߸WHdH5qWH߸H.H5eHAtEutKE@AEHdH5@VHaeH踳Eu EH;H5TVH-eLL聳H0H5SVLfH\;H5hVLKHaH5?L0HaH5rVLHR0H5"LH:H5?L߲HD5H5iVLIJHdOH5VSL該HKH5cSL莲HGH5SLsL MMLHKH5VLHHAWMMLHVH5VLH_H5hWLH_H5}WLH]_H5WLͱMMLHWH5WL話AWAWAWAWMMLHiXH5XL}H0H>H5YL^HFH5YLCH_H5YL(L HH5aHAtEutNEnCAEHaH5YH[bH貰Eu E H=H5YH'bLL{HEH5YL`AA HsEH5ZL4HXH5.ZLH~-H5PLH6AH58ZLHHH5MZLȯH<H5bZL譯L=LH5lZL華LH5ZLxLH5ZLaLH5ZLJLH5[L3LH59[LLH5b[LLH5[LLH5[L׮LH5[LLH5[L詮LH5\L蒮LH5(\L{LH5I\LdLH5Z\LMLH5{\L6LH5\LLH5\LLH5 LHBH5\L֭LH5\L迭HyJH5\L褭HBH5NL艭LH| H5\LkLH5]LTLH5*]L=LH5K]L&LH5|]LH=H5aZLLHH5]L֬LH5]L迬LH5]L訬LH5]L葬L TH H5q]HLAtEutJE?AmEH6]H5]H]HEuEulHy=H5]H]LLHEH5LLͫHAH5LL貫L uH)H5WHmAtEutNECA%EHWH54]H\HEu EH;H5\H[LLHFH5\LHCH5JLѩH?H5JL趩L yH H5rZHqAtEutJE?AEH7ZH5HZH@EuEulHEH5X\HZLL H@>H5ILHxWH5T\LרL 蚪HzH5YH蒪AtEutNE&CA%EHpYH5H ZHaEu EH[0H5[HYLL*H?=H5[LHdLH5\LHY%H5HL٧HDH5 WL辧H<H5HL裧H)VH5[L舧L KHH5YXHCAtEutNEiCAEHXH5z[HXHEu EH /H5ZHXLLۦHC8H5e[LL=LHH5[L蛦H?H5UGL耦H;H5rGLeHTH5YLJHWH5d[L/HTH5[LLHOVH5[LL 蹧HH5CH豧AtEutFEub?AvEHBH5[H-WH脥EuEuH WH 2H)H5=VH*AtEutNECAyEHVH5A[HVHEu EHS6H5=[HnVLL¤H6H5D[L觤H=H5aEL茤H9H5~ELqL 4H)H5H"H5"H߸#HH59H߸H2H56H߸H/H56H߸ҕH+H56H߸跕H6H5PH߸蜕MMLH.H5E9H߸xHCH5zVH߸]HBH5:H߸BHBH5:H߸'HBH5:H߸ HzBH56VH߸HXBH5KVH߸֔HH5(=H߸軔HC&H5EVH߸蠔H1H5ZVH߸腔HY1H5wVH߸jH5H5VH߸OH4H5VH߸4H4H5VH߸H4H5VH߸HA-H5VH߸HNH5?H߸ȓHF4H5VH߸譓LHVH5WH߸菓LH5UWH߸xLH5WH߸aMLHWH5WH߸@LH5fXH߸)LH5oXH߸LH5XH߸H޿ 辔AAAUHATSHEL#觔HLLH5wX蝔HqHIHHH5Xd*UHAWAVAUATSHILEHIH(L Mt+ALL&ÅtEI(N$(IMuHDH8H56 6gH[A\A]A^A_]AT$@It$8H}ؓA9D$@tHjDH8H5f볉HEu=tqDHH}舓A9tHDH8H5fbDfHLHH5AH}ȸ*H5/L Å HCH8H5dUHAWAVAUATSHH}HuIHEELuHqHΒDD H’HuHmDH}a HH蛒HHAHu荒IHEH莒MHEHIH9dH{LELDDFHL9uH}SH[A\A]A^A_]H=H6$HU H- H-HH5{VHBH8cHBH8HUH5baEH5HAH8b2Mt|L讑HEHt>HEHIH94H{LELDDRHL9uLH5UHFAH80bHGHEHHIH9H?LLHHL9uYDD uCHEH u:L w LfH HH5H}H`Hu 輐IHH9t!HR?LLH_HL9uL(H}H>@H8H5T!aHEL :UHAWAVAUATSHI'IHHXpHHؐff.H9HxW^vHt[MtV9FƅtCpHuȉL<MHKH<L讏II9uHEMlEAEL蚏H[A\A]A^A_]H(no CKA_IEAEID)̸(9GAE"IEIT$sQ@u-t  AM@u,FHAD"HcAD5| T TԉT fTH IMH| H|HHHH)H)rAN N 9r|UHAWAVAUATSHxHHuAIHV=HHU1uWHEHt 8HzHHL3HxI9 EHEHpH`LH譍tH豍HH=H8H5Q^LHHHlHl=H8H5*O^c܊HLH}HH谊HһEH`H艍}t0H<HMH+ Hx[A\A]A^A_]HSH<HߋHHH5( ؋H}tHuHNM~蘋HhHpLRLIH-HALDHILpUH5Hh7HiH9tH裉EM6HxI9Et IFD9huI~蔌HHt 8H[I~BIHtXHHt ?$I$0HtY;7LHEH/HHHhHH}t HZHPH=&BHHH=*IHpLIt/HjH1H]H+u?DHe[A\A]A^A_]HA2H8H5$S~A~HvH1HHwHVKHHKHUHSHHHi-HH߸ HH]UHAWAVAUATSHHIHuAH0HHM1ɺv~HEHA>u-HKH MMA>IE9tH]AE~LckH3LL}tAHE9uH]LH萃E,H_}HtHUH5PH/H},L'}HtLpYE9tH/HMH+uHEHH[A\A]A^A_] }UHH3H53]UHH2H52]UHAUATSHI~HcɂIHtHcHLH耂ALH[A\A]]UHAWAVAUATSH(H.HHM1HHLuL=FuH}nIH}X}HEH8qIH};}{.IMMHR/HMLLH.Hn|L|HHHEHsĹA>HEHsL蠁uo}/H}y|{lIL-U&;L-I&/H.HMH (&LHK-H{7{IL-%HZ-HMH+uH([A\A]A^A_]zUHAWAVAUATSHAHPH -HHM1ɿ}H`|HhDžHDžDžDžHDžDž DžHDžDžHDžHDžH;/H7-HHPH'H -HH5VCH=dHH5:H= HH :HD_[A=$F<HHtDžHHHtDžH=;HH=ܼtH˼HHH=tHHHH=tHH==nHDž=зd;DžDL5o!=ҷ&Dž\={7HDžx=yHDžH=yDžXE=Dž==L={MnH\L%*I$H5\AH)HH߸xI$H5fAH߸wI$H5AH߸wI$H5AH߸wI$H5 H߸wI$H5BH߸wI$H5^CH߸qwI$H5vCH߸YwI$H5CH߸AwI$H5CH߸)wI$H5CH߸wI$H5DH߸vI$H5~DH߸vI$H5DH߸vI$H5&EH߸vI$H5vEH߸vHٺ/H=EuI$H5EH߸hvHٺ5H=E_uHٺ9H=EFuHٺ(H="F-uI$H5BFH߸vHٺ8H=YFtHٺ'H=FtI$H5FH߸uHٺBH=FtI$H5)H߸uI$H5FH߸ruI$H5FH߸ZuI$H5?GH߸BuI$H5GH߸*uI$H5HH߸uI$H5?HH߸tI$H57JH߸tsH7tEEHu7Hr7vHH5(vtvHH5Apv6sH=Dz覂HHH5.$HwuHDžDžH5$HgwuHDžDžH5$H6wuHDžDžH5#HwuC=j H=K>sDHDžDž nH5\#HvDž2HDžDžH%HtHA HH5cHtDždHDžDž DžDH5"H=vALE5{H/HwX\H*%L MtHHLH5GCtDžH=|HxoH=dHHHH!xeH=]Xe H=zqXL%`Hq$HsHLHH5\GsDžL==ݴtH̴H(HuHH(=tDHHDžp=Dž@=8RDž<=B\Dž4= HL H؋APHL#HorHHH5jFhrDžH=ڰpHpH/L%H"HrHLHH5FrDž H=аo@L%H"HqHLHH5RFqDž H=;o8 H=ǰo<„t=iH!HqHNjlHAHH5=D3lDžHHlHAHH5/DkDžpH=ݨ`kH`H*koAsoL5HcL(kHEALLH5CvkDžoAoL59H L(-kHEALLH5CkDžn=uK3wHAH LLnug_nPR*vHSL(AQLH eLLjnH HH8MAH=Cg)kI*֮   D  X    ,z  . AxD5E7H9HHEHH(HH=BlHAH H{mIHlMHLiAƅ HLiAƅ,4mHHFHLHLLmAƅEHmL!mLj[H}H8LH5]:A`HLlA(H8H8H5~A:HDžALh=GeH8HDHLlAƅxL}lAƅ LhAƅLhHHgu6HL`hAƅHL&lL&lHHH=jdALgt"HLwkANHL>jHHtHھLFkAHi¾H|kHDeE}HtH8H5?W85HRkHHH#H=?ycMt)HDžL!hHt H kHHt kHpHtHdH HtHReHHtH>eH`HteH9tHkeHhHteH9tHHeHeHdHHt %HHtHdE != =LH=7HH5 jHEDxHIDDp=H=MboH=>(J^Ҕ̎fڔn pncn"ltH Hb΍ҍ֍ڍԓލTHH`x`Aƅ) = =tHHHQRPHČP5Ŏ5PL ѐLp\HHHbAH@ HHC(}H0XHHHHLHHH5,HH8#DžHH5,HH8#AHtH\RMzHtKH{OHpHHH5J,H[H8E#HRAH5H0H8#HpAuHHPHxXP5tLL=1=d^==ʂ ==tu} O}=bu$څ tu M=}=~t&,H=~P@HhHIL%$L#H ?L#HLx#HH=!HPFHHP=H5LAMLGIM=tE='tL-@JLH |LIAE:C   Q]H H=M|@=D-=KmHH9?HHH5=2?DžH tzAH uH@@݆;}Ft ;DžJL8=HFu,D7FuDžDžLDpHHhHFIH_MH wHHxH\tHHHtH8HtHt L@tHHHHxILHDžXLoDIH HA3` = =tHHHQRPHuPjjjL zLp\HHHRAH@HHC(=?sXA=t H~INjn{BxHt=HHwHHwHxH:xH:HHfHX9HHt7HH0HHH}H BH5H7H8! H:HDžA  6 p j €t =Yzۃ=L~5=t~  t =x 5s~ 8UHSHNBBH[]UHATSHHTHHM1ɺ9Ht IH6HHH=77,HcHEBHLEBL9HHMH+ u H[A\]37H?HtUH}8]ÐUHAWAVAUATSH8HLLH]HU0HH?HHM1HHMǾ9Aƅ ML!sH8 Hg8IHHH AxHcH=xs4L &7L>H=M4L?H=44L 6L 6L3H=4H}L3LH=3L$?AljLL?$%ƅ$ƅ%LTD>AL="IHH*6I;w-L>&B-@MtB-?9uEH@<>f)@)P)`lH\LLH=2L$H=2L-L >t u^HH !5$%HT=E12HA uHHDžHH5EHW=¸HLA1=HcHLAHHHٺH=`J1Hٺ1H=v11HE H E(PLM DEHLLH u :H6+ADHTMEDLH5H߸'DH!Mt8LH5eH߸HrH]H+H0[A\A]A^]HٺH='oDLmEEH}ԅtD2D79rEHEHEH}O*ADDH5@H߸OCUHAWAVAUATSH}HuHˋQ|PHc$HIǃ;~yAGDff.ff.ff.ff.HsH|AH9~+HHHs4@tHcA4?RA{~\AHsH|AH9C~AGAW ЉE2 A AAGEEE}@ULrH}E@M|Le]HDe3DL`iHI9uLe]H5קLOWLc}MM9HcELL)H9}}EHHcULDELLHIAGAW AW ЉEAWx&AG AW AW ЉE X A4UL8rAAƿ#   AEHL t=H-HcHH]}u }; AEXًULLPL&}tBًULLy.A>EHADEULLHcEIM9AAAAb}mUL؃ EY؃<3tAH5L{ AEHADEULLOGAWEEL|rEEtZAHHHHHH)H5ͷL x5}I_E@MdJ AAƿ Aƿ HL9t3HHH ʄxH5*LO xL}EEH}HHtfHx  HH!sSDvLDuL66HS H5L x;L}MULL<AAƿ EHULLYAlH]LALH)EDINIEuEE @UL5xjEEAAH»HMH+u?DHX[A\A]A^A_]AAAAAAAAAUHAQLNFIL]Ã?tUHSHHHH]UHAVAUATSHLXAAHEDH8L9uD[A\A]A^]HHH@H9xtHH9t9ptuH9xuHHøUH]ÐHyH0HFH@fD98HH9uUHAWAVAUATSHXIIHӉMH&HHU1Ht)AΉHH5LADuHHH|IHHHuLHuwHMH9LHtu]MnMu5MfMMLuH{uII$HuII]HtH{PLc MuݾHMHLL DLLH=ixHEIHtAUIuH AEAMe EMt2H]LmLmLLXII4$HuH]LmH} EHIu@HL vDH"vLL9HL+Mt_Me IuDHuLI}(A}uLIHt@A}PoLLmIIuHt3H^ HDuDHL&EFHtLmEULuLHuHMH+uHX[A\A]A^A_]UHAWAVAUATSHIIHUAϿHtbHLH=IHHxtUDHڧHLI|$ u?I|$t^HH[A\A]A^A_]DHULLHx t'It$DHL>I|$uI|$ uDLL.H=JDHULLSgUHAWAVAUATSHHIHHIH!HHM1HAĉ2AH>HHEukHLHt,HHƄHA׉¸\HH]H+YHH[A\A]A^A_]HHHDHL8HtH޿ DNHHHƄHAׅHٺ=H=2IHٺH=(`HHHD& HTD *HHHD HTD 'HUHSHH~HHHfff.ff.H9sHC߃A<vH]HUHAUATSHIHHӉHPHtxtfD*HHMHDEt)H IHH5ƯLjH[A\A]]H LHH }HtH jHtLH T|HH ?|UHAWAVAUATSHIIMDEHt\HA͉9HH5vLHDFlM̃}u0A~EEAl]̉D,L"-AA~uL"Ax=TtU.FLAIE;fsAIFB AL~tLuLSDmHo릃}urtED9uAL~LH[A\A]A^A_]UHAVAUATSH0IHIAHTHH]1HUH5xHt[HMtpDLLH5L"HMHvH* u[L HqHʰH]H+uCH0[A\A]A^]HMHvH tLHLHUHAUATSH(IH`H8H}1o)EHNHMAAtYEHuL`sLD)H5DLHH]H+u$H([A\A]]ÃEHuLEUHATSIH>@u[A\]fDH;@t@ t@ t@LlUHAUATSHHt1IIHt&H5 Mu#fAEH[A\A]]ÿ}H5SLu fAEƉH5.Lu fAE먉H5 Lu fAE늉H5Lu fAEiUUHAUATSHHHtKIH5HHtL%LHuLH[A\A]]øUH]UHw]UH|]UH]UH]UH]UH]UH]UH]UH]UH]É=tPËmPUHAUATSHIH5}H=κHHtQH5\H=vIHt_H LHHIHNLFLH[A\A]]H٬H&H=A4IHH(H=A HM또UHAWAVAUATSH#IIHIHLHHt`LHAHEtoEMt"LIEHt H EĻHcEHE LH5@HHL^HjHH=@L-LDff.ff.HA9tjH t tMt0HULLuGL19E}:HEA<:u/M|LtHLHH[A\A]A^A_]DA9~HcM<A< < =D94IDff.HH  „tA9ރA9.HcLaHYUHAUATSH8IAHH2HHM1DžHDžDžHHHHHDEtj;u=LHHHF?H߸H޿HH5>wtHSLt1OHH5?KUEuHLHLH>LLXH5H=r5IAL=jHHH5<LL)HR5HHzHHH5p<LHH5?;H H LLL HMtLH ׮HmLLIHtHtHHt,HH5?HwzLH¾LLeLLHH[A\A]A^A_]UHAUATSH8IHHH]1۸Ht|EHuHt|EHULL-j?usHULHHLO}ur'HL'HHHsMLsHULIH¾L7AHH5^rH¾HJHAHeHMH+DH8[A\A]]HULIHHLXAątj'HH5nM#H;¾HHMoL¾LL\KHH5=UHHA]UHATSH=zHHtFHfH=wFHH#L%CL[L3LA|/tH[A\]ADUHATSHI|/t/MHHdH=>H>[A\]MHHH=>σ=U>UHSHHt ?H=ɠHHt{8tH_|/t>LHH'H= :Q=H9H]LߘHHsH=9HZDHHGH9H߸H|/uD{Hu9UHAUATSH(IAHzHHM1ɅH}ÅH}EЍPHuÅH]ȋEЍ@Et8H5 HkHt$HH9H=g;H5'H3IHt- HHtzHXH5HHtxHLÅH} H,H$H=:H} LHpHڠH H=:5H}NǾHH5:HHH}Y .ÅuHHUH+uGH([A\A]]ǾHH5JLH HwUHHt2HHOHt&Wvy@x&HHHP]ÿ VDD9r:@HHHD)‰P@uYv/r<1u7ր<1u,P뢿 둿 뀿 lbUHAUATSH(HIAHWHHU1o)EHFHEH}tH*H]H+uH([A\A]]HuDLH?}UHAUATSHHHHH8H}1HtIHCHtsKvkoHSHVp@tc@փ@AT$C9 HSA+D$CHqH]H+HH[A\A]]ÿ )EHUHPAD$LmwEAD$:HUMH}LHUMtmAD$AD$HCAD$)CHw%| H9rT  :tzw UHAUATSH(HIAH&HHU1o)EHFHEH}u}uHH]H+u%H([A\A]]HuADLH@UHAUATSHHIAHHHU1H}tHH]H+uH[A\A]]DLHuHUHAUATSHHIAH<HHU1H}tHH]H+uH[A\A]]DLHuHrUH t u ]UHAVAUATSIII։ˉCLH5LIuHjLIu H`L[A\A]A^]UHAUATSH(HIAHHHHU1o)EHFHEH}tHH]H+uH([A\A]]HuDLHJnUHAUATSH(HIAHњHHU1o)EHFHEH}dtHH]H+uH([A\A]]HuDLHLUHAWAVAUATSHHIIAHHtYILh DHMtLH5H߸?LH5ΘH߸(AD$H[A\A]A^A_]LIHtMDHeMtLH5H߸LH5lH߸LDLLHyUHAUATSH(HIAH_HHM1o)EHFHEH}¸tH+H]H+uH([A\A]]HuDLH~UHAWAVAUATSHhAHHHM1HIHIԃ~HFHAA t_MtADLH=LIMqDLHLLSDH=bID豿MtLH5L)DH5"Lo)EHCHEH}ANHuLL<H1HcHDLDLDL xDLhDLXDLHD迾MtA<$uLH=d>LH5LLDLDL^o)MHFHEH}iEHUHJHMEHuDLL贿~AvLH5*LoWEEo)UHFHEH}uEtDLHLBAHcHHpHtDD}L}~MHHxHuAAW IEtMHEHEu@pHxH9uHpH]HuADLLHgDLHL脾HpEEEo)]HFHEH}uEtDLHL0AHcrHHpHtDD}L}~gLHxHuAAW AW AW ‰UItJHEHEu@pHxI9uHpH]HuADLL]H=DLHLZHpDLHL; DL.HH]H+uHh[A\A]A^A_]OUHAVAUATSH@HIAHHHU1HFD0o)EHFHEA H}1DHMtLH5-H߸mAH8AtAH4HHDH5H߸2}v/LmH}LuAL$LH}wDH^HٺH=LHH]H+u H@[A\A]A^] UHAWAVAUATSHHXIHfH0Hu1Ht$IIՉ׹LH5%LTCTHLHXID$HL(ML5m3L`.TLLHXHID$L,MKA|$(LMDH}ydLA|$(uID$ Ht@!t#t7TLLHX荺넋TLLHXgTLLHX)JHHUH+uHĈ[A\A]A^A_]oUHAVAUATSHIAIHtGDHMMtLH5H߸LH5TH߸[A\A]A^]ÿ+IUHAWAVAUATSHHIIAHOHHM1ɿIMt"DH起LH5H߸2M Huf)E)E)E)ELHLHuHAL$HcpH?HuHEt$DH0pHHEHHHPHLTHPDH*VHH}AL$HuHzHLHH]H+9HĈ[A\A]A^A_]DH~HٺH=8o At$HVHٺH=F)Et$DH(HٺH=8)DHHٺ$H=4)DH۵Hٺ-H=3)fAt$H谵H5;)H߸&At$H耵HٺH=5 QUHAWAVAUATSHIIIAHHH]1ۿWHMt"DLLH5^LHt\H HHLHWHtUHH'H]H+usHĸ[A\A]A^A_]DL荴LH=GmAH DHՉLH8DHhL~p&UHAVAUATSIHAHUAʼn;u>C(t.A3AL$HsH҉L}[A\A]A^]A$t,A%t=A#uNAL$HsH|LAL$HsHK}LAL$HsHuLAL$HsH|LqH{ H5&nT*AL$HsHP|L2UHAWAVAUATSHIIIAHMHH]1ۿHMt"DL賲LH5L0Ht`H HHLHHtYHHʊH]H+Hĸ[A\A]A^A_]DL,LH=jAH DHtL裳H8DH6fLHXtHPDHE{LH}tHuDH9nLi,DL英L#H=;%\UHAWAVAUATSHIIIAHHH]1ۿbHMt"DLLH5iLHt\H HHLHH*tUHH2H]H+upHĸ[A\A]A^A_]DL蘰LH=Ri#AHuDHL1HhDHLs4UHAVAUATSIHIEH>DLLH5bLADLHHOHtHP H5-ZL[Hs DH-LHsPDHYLJ[A\A]A^]H~H]UHAVAUATSIII։ˉ_LH5LIu(HӀLrIu@H~L]A}Pt [A\A]A^]IEH8uLLH=,<UHAVAUATSIII։ˉLH5L=Iu(HNLӴIu@H}L辴IuXHfL詴IupHrL蔴[A\A]A^]UHAVAUATSIII։ˉ,LH5zLAu HĄLIu(H/rL*[A\A]A^]UHAVAUATSIHIẢLH5L>{ C H!HcHAL$H@LAL$Hs(HqL螳[A\A]A^]AL$HN6LAL$HLAL$H6LAL$HLnpAL$H5LPRDL軬LH= F)DL蒬S H5 LUHAWAVAUATSH(HIIEHƄHHM1DALH5H߸E}IvDH^FHL\HIăx o@H HcHDHdLHNI<$H)H]H+H([A\A]A^A_]DHdLHEHEEDHaHtH5H߸AIt$@DHroHmAD$0SIT$(:EJHHU9GEHuDHHDHdLHDHTLHDH螪Hٺ*H=)DDHxAT$H5H߸H gOH&DH߸自I~@xAoF8)EIFHHEEHuDHgHyBUHAWAVAUATSH(IHRHHU1HIAEH^H|Ht!HHtHHHH iHEHEH EHuEDLLHzHӁHMH+uH([A\A]A^A_]ÿ*UHA.]UHAWAVAUATSHII8H_IƾHHEHL0LHHLE̅HHzLd٢HPH{L<豢LHdLL艮HILtILH=pGS1LH5*LLH=F{LH5~LGLLH5rLt6AL=}HB LLID;rLH=k~LxEH[A\A]A^A_]H PH{L:L脨VLwqLLL "LLbL ElUHAWAVAUATSHIHAH~H8H}1HtIՀ:u MHBHcHDyL+LH5{LEHsDH{LoAL$Hs H|LHN~H]H+ H[A\A]A^A_]HsDH^LoHsADHiLHsADHQuLHsADH|LeLkHHHCtt}DHnLL踦#fDžHCHpHPKuDLȤHpHUnH5yL:fDžHCoHtfDžHDž`HsDH`L6SHsDHodL8HsDHCqLyLpHJM(L_HsDLLxUHAWAVAUATSHIIHA͉蛣HH5fLE}LAHHI9tXDHLHtHsxDHtLvHtHDHtLSH[A\A]A^A_]UHSH8Hd{HHE1HEHEHEHuHEHuHEH+uH]UHAWAVAUATSHXHuHH{HHU1Ht IAHt;u3HEH0HHzHUH+ HX[A\A]A^A_]Da1HH5xLEHDHqLmHEHuLHtzH}LdHEHEH0HTDH[wLHEH0~({H]H;HLr0?X H HcHHuH}VqH5?H}IAuL+LHwH5uLL'DHvLLDH}wLLDHrLLDHiLLoB0)EHB@HEHE8ueH}ÅuV}thHEP!‰UDLHH.vH5vLAL5ڋ]7DHuLLz/HEIIt8DtK ҃,H5wLE뾅H5sHvHELDLyH_uH5uLH}Lu?}t9UxH5fL]L%H=u?L H=[!LHH L`I4$Ht!EuDLII4$HuH{oJ0)MHB@HEHE8u@H}Åu1UvCHuu/F!E9DH+tLL^H}W!G ‰UDLLH=FmAL5Hڋ]0LH5tLTIHN4Mt DtޅtAuL艝밅LH=o HEHLH}"IHHxxMt$I|$(t A|$0ۅMtIt$DHBpLKuzH}H5+H=qH \FHuqDL֜DHqrLLDHoLLfIt$ DHXL舢jkHHtKLHIHtUIDLLvLII9uݾH=H5+H=pV=#t5H kEHpDLDHqLL됿"@뿿HHt9LHqHHHsL MgLpH]H5d*H=obBIT$HAEHLeIDmADHLLHHHI9uLeDm$I|$AMIt$HrqLI|$tAMIt$HlLpIt$(HtAMHLdLIMfMtpDL@LH=4˿A$XI|$8pAMIt$0HnLcSLeDmFH]3H CHnDLDHoLLHDLL虺HHt[LHIHteH0HtDH&fLzIt$HtDHhL^Hd;H5@(H=m>H BHmDLDH"pLL1뜿HHt"LHHt/LpL MPH5'H=Nm踒H BH1mDL蒘DHoLLH|SDLLH=2,製AIt$DHgL\IMfMtI|$tDHkLLIt$0HtDHXgLDHmLLLpI|$(dMoKUHAWAVAUATSHIHuHUAͿbHLIƾH9HAHL0HMH9uHLADžDLԖHUH5!mLPD}ȃADL蜖DEAHHgH5\aL HDHRL袜H DHB5LHPDHiLm.H`DH]eLHDHjgL.HEH %LLPHtHDHPEL螽HtHDH ?L{H(DH?LL讼DH[A\A]A^A_]DL=H >HjDLgDHqlHuLHEHL臖LzAtUHAWAVAUATSHHIIAHmH0Hu1藔LH5jH߸E~DTDHeLH袚ID$HpDHgHID$Hp(DHPHlIt$ DH7DHI|$PDHHٺH=臹ID$PL(MtfHDžXXOL`H7OdLFANLLHwHXHIT$PL,HXMuIt$XDTDHKH I$DHKCHI$DHHٺH=詸I$L(MtiHDžXXOL`HGNdLeANLLHHXHI$L,HXMuHjH]H+uHĈ[A\A]A^A_]YUHAVAUATSIII։ˉHLH5hLŸHcLL\IEHpHheLIEHp(HNNL*Iu H`,LIuPHxNLm[A\A]A^]UHATSI@t@Ɛt>ttJuVÀubun@uz[A\]޶fActuLŶfApL贶fACL裶fATL蒶fAPL聶fAurLmfAwgLYfAI\LEfAGQUHAUATSHHIHiHHU1HGf)EEH_Ht;u-HHt;uH0H;uH0dHuHLmuLrL裵fD,uLXL艵fD,uL>HMHH5VLlHEhHUH+u(HH[A\A]]HcbfE,,E菵UHAWAVAUATSH(H}IIAHgHH]1HE菶HtvHHuLHypHAąuBDLHuH}wHjHgHUH+u.DH([A\A]A^A_]DLLH}XAǴUHAWAVAUATSHIHAHtIԀ:uHteAL=HLH葰HaHMH+u>DHh[A\A]A^A_]DLLH5^_L药AޮUHAWAVAUATSHhIIIAH:aHH]1ۿHHHpf)p)E)E)E)ELHiH臷AŅt/H賯H`HMH+uwDHh[A\A]A^A_]DL2LH5^L诮AHxDH"LHuDHAL藉wAyǭUHAWAVAUATSHhHIHxAH`HHM11AL}f)E)EANIVLɼtL}E H}躼IDHHHxH5FH߸l8H޿ wAuHLH5*^H߸脭Ltt EL}f)E)EANIVLtL}EH}IDH脆HxH5AQH߸言H޿ 賮AuHCLH5f]H߸L8cudEunD tHt^HMH+ uYHh[A\A]A^A_]H޿ ?eAH޿ tH޿ Dd荫UHAWAVAUATSH(IHuHUALEDM蜬HHþ`HsIAHHMHcHH;AąudLeMtzDL LH5Z[L艫ADHZLLHEAă}t;DHeIHuLHDH([A\A]A^A_]AIvDH|#LOAFXAFXIvHDH"QL AUHAWAVAUATSHHIIԉXH\HHU1҉LH5gZH߸薪AA~XDxD\DHՃAL$EH)UH5NH߸FIv DH"HjIvhDHVHPIvxDH{GHItAIHL8MAAL$L`AH1-dL責\HHL艨XDhDH??LHIwDHXHBIw0DH2HIINLH=DɥDLLH=T蠥DLLH=$wDLLH= ONUHAVAUATSHIIẢLH5UH߸Et$DH`Hٺ H=sCAAuDHDH)Hٺ H=;贤AuDHDH~HٺH=聤AuDHU[A\A]A^]UHAWAVAUATSHIIHUȉMĿѥHHþH訤IAHtLH_HHuAŅtH补DH[A\A]A^A_]ËMHULLhxAąuLEAUHA`]UHAWAVAUATSHHAHMVHHM1o)HFHH80HIHHHH<LH=YRIHHDHH#ALHH脶~HL褦qHH?LH==E5HHL55LEfo)0H H@H881GH0lAŅ0DH-zLH5{PH߸誠E|$@8HPH0h7HX80HPHpHP)Hx<HpDH<Ht`^HuHPֲH}w}+LuH}L裲uVAL$LH艸}u žA* 谞A 螞AAHH蛤AAAAAVAKA@A8A0A%HDHwFH賷HAHH+AEHHfADžH=KqHAL$HtHHHAH{sHDHRKHqAQ`UHAWAVAUATSHIHIEDHOHHU1D'wLH5uML褝EgHCHt.Lh @L{@MtD HHcHH{(HCHuL{@L-#HMo DLvLH5LL!L|vL H=MDžWDLIvLH5LLƜÉH{GLLO|ILuLH=]胛IGL(MtSAAL$H`HP dH߸LHHLL_IIGN,MuIw AH 4LSIhL;uLH=ƚKIGhL$MtQL`H,%dL葞HLQVLLLHtIpLtLH=|.IGpHHAAML`HdLpL?tLH5JL輚D`HDHLӿ88H(DH@LuHsDHLqIIGpJH;IxLsLH=U!IGxL MpLDKL`HJdLۜANLLHSHIGxL$MuDLsLH5NIL}XH:DLLyILrLH=SBIGL(MtsALDAL$H`H dH߸ANHLHIIGN,MuLIw AH LHjJH]H+H[A\A]A^A_]DLqLH5HLCÉHBLLwILuqLH=IGL(MtSAAL$H`HdH߸ɚHHLLIIGN,MuI LpLH=IoIG L(MtSAAL$H`H<dH߸8HHLLKIIG N,MuIw(AH L ?IL$pLH=m试KIL$MtQL`H dLwHL7QLLLHtILoLH=_IHHAAML`HodLԘpLoLH5mEL蜕D`HDH L賺88H(DH;LipHsDHLQIIJH8ILpnLH=/IL MGLDKL`H!dL貗ANLLH*HIL$MuDLmLH5"DLQDADH ?LLsIwDHLUIwHEH A LIDH@LoDžFDL8mLH5CL赓DADHo>LLCsIwEH L襼Ao) IGH0t  DžH(80uMH 詤u7AL@H 0XDLIZ Dž)DH(80uMH +u7AL@H 0DLIj {DžDDLLL:mDžDžpDžaDžRDžCDLLLlDž#DH @LHAEuA0LLQVDH=C<gHHtDHLHAHv땋HALH}AEA0LLãDH=>ٕHHtHLHAHUHAWAVAUATSHIHAIEjjAA3HHt4HELDHL3AHDHe[A\A]A^A_]AUHAHѺc]UHA]UHAWAVAUATSHHIHUHAHHM1HHEEHELJHHH+AHjAǾLoIHVHHdHH>D}D}(9 EHL>HHtFH{L5IHtϿ#H{rCSLtEL(H*}u}HH6@HgHH=莕HuHHbH?HItoIteH?HH޿ HgHH5=H߸I~ Ix(  OH?HMH+DHH[A\A]A^A_]HHuLA7HuHvH ?H-HH>H0SHpHH>HHtjjAALHL襗HHHt褗He[A\A]A^]UHATSH HH9H8H}1HHufIHt^EHEHuH BH芈HtHHMHrBLH_u5I$Hp9H]H+u(H [A\]ÿ褆ָϸ躆UHAWAVAUATSH8H}IIALEH9HH]1HEH}EDL蜖Åt.H}}H8HUH+H8[A\A]A^A_]I$ID$XI|$HLH)`ɸHMt$El$HUIt$HLuLɆÅyAd$XIt$DLW踅UHAWAVAUATSH8HMH8HHM1HHAHL>.IHDH袕AŅH{HEHEHSHuH @L膆HHEMMHUL7AƅHE4蠄A*HEAHEALH7HMH+DH8[A\A]A^A_]Hs(L襔AƅHEHEA떾L_HHHtM@HHH@HHH ?HLdHEHEA0HE蒃A貃UHAVAUATSH HH6HHU1Ht4AHH腆IHHH9LuRHL9t=LcLL脒uL胓uL臓tL苓HL)Hr5HUH+uHH [A\A]A^]ûHȂUHAUATSH(HHAEH(5HHM1HEEHUAхtH4H]H+u%H([A\A]]HUADDH҃KUHAWAVAUATSH(IIAIH4HHM1LFHHt&H4HMH+HH([A\A]A^A_]LL=HHuEHEEL݃IHtH}DH}ALƃEu3}t-HuALHH}s@H}e2;UHAWAVAUATSHH3HHM1AAHIAHHfAfH52U:L蠀IHHL)fD+AfDsf9CH2HMH+ H[A\A]A^A_]ÿ%̿fD+fDs밿HULu EfaoILuHHUL܂u EfC1/wUHAWAVAUATSHHHIIH1H8H}1EHuH,EQ}ḢHEHAHIH6H50H̋IHELeLuL}Le@ff.I t{E;4$uIt$LL~uډEHcH[HiD=tMYHMH50.IHt+]L AL%!]LcLeLM^LeLuL}L7tFAHEIH0H}H+8u>EHH[A\A]A^A_]EEL~H}~E}H\-thHD9:t@H uUHSHH HH߸HH]HH@HHDH wHHHDøHwHHHDøÐH,t{Hf9:tOHuHtGUHSHH HH߸6HH]HH@HHDÐUHAWAVAUATSHIAHݮALc ff.AHAt,D9+uHsLL{uMcKdHDH[A\A]A^A_]UHAWAVAUATSH8HHuHUH/.HHM1EHuE}HIHH[|IHH5-H HHL5,DDcADLއHHuL|EtJHED HEL(Hd-HMH+uGEH8[A\A]A^A_]EEL{L{EL{zUHAWAVAUATSHXHIHUH,HHM1EHu=~EE}H݂IH6H{HH+H5+HކHHALuH]EL}oA|$7C8LzIHCHPyCH5 +L)~1LzH5>+XHH0DAHHEHSzIH~:H*yIH_Lx:L yH6HCHEHyHEHC(H}xC0H5A*H}^}H{ `LuH]LyHy LxHPH9LuH]BxHa`L~yLuH]H]ELuL}HUyEtFHED M7H*HMH+uJEHX[A\A]A^A_]EEH yLyELuH]wUHAWAVAUATSH8H}H+*HHM1ɅHHHHEH)H.H=wAH)LLH=KvAH%HLv{H3)LLPAV8H5~LtwELeAF8EHuHLeRLwH@HEH9tOIދ{8|IHKSHsC8PATDK0LC(H}AHLfwH(HMH+uBDHe[A\A]A^A_]Hs H!HE(HQAuUHAWAVAUATSHXIIHQ(HHM1vIHH5Z'HxHHH5&HzAŅwHSL^HHeHxeI|$tSHH9WEHEEH5&HHHuHEHH|tEH57&HUyt?foEAHEIFLuH1'HMH+DHX[A\A]A^A_]H}\ÅtH}vAHClient_iHEHidentityHEEHEHEEHUHu uSA\AQAFA;A0A%AAsUHAWAVAUATSHHHIAH&&HHM1o)HFHDMLH5#H߸tH80Et$H|tH<HH葆HEH ~"HAŅupHM%H]H+DHH[A\A]A^A_]ÿ qrAHuH AuHuDHHCHHԅfo)HHDH-LH"H5!H߸rAH800HHHNfo)0H H@H880H0迃HPH0rIHH5E"H=vIHPHuH+L|}ADžMHIEHuDHΖMLvL6rEA p |pݿ ppѿ dpHuHuHuDH H AAyAnHpDHH5zLzqHpH0芃2Hx<@H5 H=BuIHtHpDHHLuHpHAŅHx<HpDHHmtH<bHٺH=nDM$Lbp0nUHUH Select one of the following general name type: 2 - rfc822Name 3 - dnsName 5 - directoryName 7 - uniformResourceidentifier 8 - ipAddress 9 - registerID Any other number to finish Choice:certutil: improperly formatted name: "%s" EDI Party Name and X.400 Address not supported Invalid Directory Name ("%s") Missing or invalid Subject Alternate Name type +ӊ9ӊ 0 - Digital Signature 1 - Non-repudiation 2 - Key encipherment 3 - Data encipherment 4 - Key agreement 5 - Cert signing key 6 - CRL signing key Other to finish Is this a critical extension [y/N]? 0 - Server Auth 1 - Client Auth 2 - Code Signing 3 - Email Protection 4 - Timestamp 5 - OCSP Responder 6 - Step-up 7 - Microsoft Trust List Signing Other to finish Is this a CA certificate [y/N]?Enter the path length constraint, enter to skip [<0 for unlimited path]:Type of Name Constraint? 1 - permitted 2 - excluded Anyother number to finish ChoiceAdd another entry to the Name Constraint Extension [y/N]Enter value for the authKeyID extension [y/N]?Enter value for the key identifier fields,enter to omit:Enter value for the authCertSerial field, enter to omit:Adding Subject Key ID extension.Enter the type of the distribution point name: 1 - Full Name 2 - Relative Name Any other number to finish Choice: Select one of the following for the reason flags 0 - unused 1 - keyCompromise 2 - caCompromise 3 - affiliationChanged 4 - superseded 5 - cessationOfOperation 6 - certificateHold Any other number to finish Choice: Enter value for the CRL Issuer name: Enter another value for the CRLDistributionPoint extension [y/N]? 0 - SSL Client 1 - SSL Server 2 - S/MIME 3 - Object Signing 4 - Reserved for future use 5 - SSL CA 6 - S/MIME CA 7 - Object Signing CA Other to finish Adding "CA Repository" access method type for Subject Information Access extension: Adding "Time Stamping Services" access method type for Subject Information Access extension: Enter access method type for Authority Information Access extension: 1 - CA Issuers 2 - OCSP Anyother number to finish ChoiceAdd another location to the %s Information Access extension [y/N]Enter a CertPolicy Object Identifier (dotted decimal format) or "any" for AnyPolicy:Choose the type of qualifier for policy 1 - CPS Pointer qualifier 2 - User notice qualifier Any other number to finish Choice: add a User Notice reference? [y/N]Enter user organization string: Enter User Notice reference number (or -1 to quit): a noticeReference must have at least one reference number EnterUser Notice explicit text? [y/N]Enter another policy qualifier [y/N]Enter another PolicyInformation field [y/N]?Enter an Object Identifier (dotted decimal format) for Issuer Domain PolicyEnter an Object Identifier for Subject Domain PolicyEnter another Policy Mapping [y/N]for requireExplicitPolicy enter the number of certs in path before explicit policy is required (press Enter to omit)for inihibitPolicyMapping enter the number of certs in path after which policy mapping is not allowed (press Enter to omit)Policy Constraint extensions must contain at least one policy field Enter the number of certs in the path permitted to use anyPolicy. (press Enter for 0)error parsing generic extension parameter %sexpected 'critical' or 'not-critical'Ɔ؆ ;VquTfx5Pk%-20s Specify the nickname of the certificate to add %-20s Set the certificate trust attributes: %-25s trustargs is of the form x,y,z where x is for SSL, y is for S/MIME, %-25s and z is for code signing. Use ,, for no explicit trust. %-25s p prohibited (explicitly distrusted) %-25s T trusted CA to issue client certs (implies c) %-25s C trusted CA to issue server certs (implies c) %-20s Specify the password file %-20s Cert database directory (default is ~/.netscape) %-20s Cert & Key database prefix %-20s The input certificate is encoded in ASCII (RFC1113) %-20s Specify the certificate file (default is stdin) %-15s Add a certificate to the database (create if needed) %-15s Run a series of certutil commands from a batch file %-15s Add an Email certificate to the database (create if needed) %-15s Create a new binary certificate from a BINARY cert request %-20s The nickname of the issuer cert %-20s The BINARY certificate request file %-20s Output binary cert to this file (default is stdout) %-20s Sign the certificate with RSA-PSS (the issuer key must be rsa) %-20s Months valid (default is 3) %-20s %-20s Specify the hash algorithm to use. Possible keywords: %-20s "MD2", "MD4", "MD5", "SHA1", "SHA224", %-20s "SHA256", "SHA384", "SHA512" -1 | --keyUsage keyword,keyword,...%-20s %-20s Create key usage extension. Possible keywords: %-20s "digitalSignature", "nonRepudiation", "keyEncipherment", %-20s "dataEncipherment", "keyAgreement", "certSigning", %-20s "crlSigning", "critical" %-20s Create basic constraint extension %-20s Create authority key ID extension %-20s Create crl distribution point extension -5 | --nsCertType keyword,keyword,... %-20s %-20s Create netscape cert type extension. Possible keywords: %-20s "sslClient", "sslServer", "smime", "objectSigning", %-20s "sslCA", "smimeCA", "objectSigningCA", "critical". -6 | --extKeyUsage keyword,keyword,...%-20s %-20s Create extended key usage extension. Possible keywords: %-20s "serverAuth", "clientAuth","codeSigning", %-20s "emailProtection", "timeStamp","ocspResponder", %-20s "stepUp", "msTrustListSign", "x509Any", %-20s "ipsecIKE", "ipsecIKEEnd", "ipsecIKEIntermediate", %-20s "ipsecEnd", "ipsecTunnel", "ipsecUser", %-20s "critical" %-20s Create an email subject alt name extension %-20s Create an dns subject alt name extension %-20s The input certificate request is encoded in ASCII (RFC1113) %-15s Generate a new key pair %-20s Name of token in which to generate key (default is internal) %-20s Type of key pair to generate ("dsa", "ec", "rsa" (default)) %-20s Key size in bits, (min %d, max %d, default %d) (not for ec) %-20s Set the public exponent value (3, 17, 65537) (rsa only) %-20s Specify the noise file to be used %-20s read PQG value from pqgfile (dsa only) %-20s Elliptic curve name (ec only) %-20s One of nistp256, nistp384, nistp521, curve25519. %-20s If a custom token is present, the following curves are also supported: %-20s sect163k1, nistk163, sect163r1, sect163r2, %-20s nistb163, sect193r1, sect193r2, sect233k1, nistk233, %-20s sect233r1, nistb233, sect239k1, sect283k1, nistk283, %-20s sect283r1, nistb283, sect409k1, nistk409, sect409r1, %-20s nistb409, sect571k1, nistk571, sect571r1, nistb571, %-20s secp160k1, secp160r1, secp160r2, secp192k1, secp192r1, %-20s nistp192, secp224k1, secp224r1, nistp224, secp256k1, %-20s secp256r1, secp384r1, secp521r1, %-20s prime192v1, prime192v2, prime192v3, %-20s prime239v1, prime239v2, prime239v3, c2pnb163v1, %-20s c2pnb163v2, c2pnb163v3, c2pnb176v1, c2tnb191v1, %-20s c2tnb191v2, c2tnb191v3, %-20s c2pnb208w1, c2tnb239v1, c2tnb239v2, c2tnb239v3, %-20s c2pnb272w1, c2pnb304w1, %-20s c2tnb359w1, c2pnb368w1, c2tnb431r1, secp112r1, %-20s secp112r2, secp128r1, secp128r2, sect113r1, sect113r2 %-20s ML-DSA parameter set (mldsa only) %-20s valid values are ml-dsa-44, ml-dsa-65, ml-dsa-87: %-20s Key database directory (default is ~/.netscape) %-20s %-20s PKCS #11 key Attributes. %-20s Comma separated list of key attribute attribute flags, %-20s selected from the following list of choices: %-20s {token | session} {public | private} {sensitive | insensitive} %-20s {modifiable | unmodifiable} {extractable | unextractable} %-20s %-20s PKCS #11 key Operation Flags. %-20s Comma separated list of one or more of the following: %-20s encrypt, decrypt, sign, sign_recover, verify, %-20s verify_recover, wrap, unwrap, derive %-15s Delete a certificate from the database %-20s The nickname of the cert to delete %-15s Change the database nickname of a certificate %-20s The old nickname of the cert to rename %-20s The new nickname of the cert to rename %-15s Delete a key and associated certificate from the database %-20s The nickname of the key to delete %-20s The key id of the key to delete, obtained using -K %-20s Module database directory (default is '~/.netscape') %-20s force the database to open R/W %-20s Name of token to search ("all" for all tokens) %-20s Key type ("all" (default), "dsa", "ec", "mldsa", "rsa") %-20s The nickname of the key or associated certificate %-15s List all certs, or print out a single named cert (or a subset) %-20s Pretty print named cert (list all if unspecified) %-20s %-20s Pretty print cert with email address (list all if unspecified) %-20s For single cert, print binary DER encoding %-20s For single cert, print ASCII encoding (RFC1113) %-20s %-20s For single cert, print binary DER encoding of extension OID %-15s Print enabled build flags relevant for NSS test execution %-15s Modify trust attributes of certificate %-20s The nickname of the cert to modify %-20s Set the certificate trust attributes (see -A above) %-15s Create a new certificate database %-20s use empty password when creating a new database %-15s Reset the Key database or token %-20s Token to reset (default is internal) %-20s Set token's Site Security Officer password %-15s Print the chain of a certificate %-20s Input the certificate in ASCII (RFC1113); default is binary %-20s don't search for a chain if issuer name equals subject name %-15s Generate a certificate request (stdout) %-20s Specify the subject name (using RFC1485) %-20s Output the cert request to this file %-20s or nickname of the cert key to use, or key id obtained using -K %-20s Key size in bits, RSA keys only (min %d, max %d, default %d) %-20s Create a certificate request restricted to RSA-PSS (rsa only) %-20s Name of file containing PQG parameters (dsa only) %-20s See the "-G" option for a full list of supported names. %-20s Specify the contact phone number ("123-456-7890") %-20s Output the cert request in ASCII (RFC1113); default is binary See -S for available extension options See -G for available key flag options%-20s The nickname of the cert to Validate %-20s validity time ("YYMMDDHHMMSS[+HHMM|-HHMM|Z]") %-20s Check certificate signature %-20s Specify certificate usage: %-25s O OCSP status responder %-15s Change the key database password %-20s cert and key database directory %-20s Specify a file with the current password %-20s Specify a file with the new password in two lines %-15s Upgrade an old database and merge it into a new one %-20s Cert database directory to merge into (default is ~/.netscape) %-20s Cert & Key database prefix of the target database %-20s Specify the password file for the target database %-20s %-20s Cert database directory to upgrade from %-20s %-20s Cert & Key database prefix of the upgrade database %-20s %-20s Unique identifier for the upgrade database %-20s %-20s Name of the token while it is in upgrade state %-20s Specify the password file for the upgrade database %-15s Merge source database into the target database %-20s Cert database directory of target (default is ~/.netscape) %-20s %-20s Cert database directory of the source database %-20s %-20s Cert & Key database prefix of the source database %-20s Specify the password file for the source database %-15s Make a certificate and add to database %-20s Specify the nickname of the cert %-20s Create a certificate restricted to RSA-PSS (rsa only) %-20s Create key usage extension %-20s Create netscape cert type extension %-20s Create extended key usage extension %-20s Create a DNS subject alt name extension %-20s Create an Authority Information Access extension %-20s Create a Subject Information Access extension %-20s Create a Certificate Policies extension %-20s Create a Policy Mappings extension %-20s Create a Policy Constraints extension %-20s Create an Inhibit Any Policy extension %-20s Create a subject key ID extension %-20s Create a name constraints extension --extSAN type:name[,type:name]...%-20s %-20s Create a Subject Alt Name extension with one or multiple names %-20s - type: directory, dn, dns, edi, ediparty, email, ip, ipaddr, %-20s other, registerid, rfc822, uri, x400, x400addr --extGeneric OID:critical-flag:filename[,OID:critical-flag:filename]...%-20s %-20s Add one or multiple extensions that certutil cannot encode yet, %-20s by loading their encodings from external files. %-20s - OID (example): 1.2.3.4 %-20s - critical-flag: critical or not-critical %-20s - filename: full path to a file containing an encoded extension %s - Utility to manipulate NSS certificate databases Usage: %s -d Valid commands: %s -H : Print available options for the given command %s -H : Print complete help output of all commands and options %s --syntax : Print a short summary of all commands and options could not authenticate to token %s.Could not find certificates for email address: %s problem printing certificate nicknamesunable to create subject public keyunable to make certificate requestder encoding of request failedcan't create a signature algorithm id Certificate request generated by Netscape certutil Phone: %s Common Name: %s Email: %s Organization: %s State: %s Country: %s %s -----BEGIN NEW CERTIFICATE REQUEST----------END NEW CERTIFICATE REQUEST-----%s: Could not merge object %s (type %s): %s Type %s -H for more detailed descriptions Usage: %s -N [-d certdir] [-P dbprefix] [-f pwfile] [--empty-password] Usage: %s -T [-d certdir] [-P dbprefix] [-h token-name] [-f pwfile] [-0 SSO-password] %s -A -n cert-name -t trustargs [-d certdir] [-P dbprefix] [-a] [-i input] %s -C [-c issuer-name | -x] -i cert-request-file -o cert-file [-m serial-number] [-w warp-months] [-v months-valid] [-f pwfile] [-d certdir] [-P dbprefix] [-Z hashAlg] [-1 | --keyUsage [keyUsageKeyword,..]] [-2] [-3] [-4] [-5 | --nsCertType [nsCertTypeKeyword,...]] [-6 | --extKeyUsage [extKeyUsageKeyword,...]] [-7 emailAddrs] [-8 dns-names] [-a] %s -D -n cert-name [-d certdir] [-P dbprefix] %s --rename -n cert-name --new-n new-cert-name [-d certdir] [-P dbprefix] %s -E -n cert-name -t trustargs [-d certdir] [-P dbprefix] [-a] [-i input] %s -F -n cert-name [-d certdir] [-P dbprefix] %s -F -k key-id [-d certdir] [-P dbprefix] %s -G -n key-name [-h token-name] [-k rsa] [-g key-size] [-y exp] [-f pwfile] [-z noisefile] [-d certdir] [-P dbprefix] %s -G [-h token-name] -k dsa [-q pqgfile -g key-size] [-f pwfile] [-z noisefile] [-d certdir] [-P dbprefix] %s -G [-h token-name] -k ec -q curve [-f pwfile] [-z noisefile] [-d certdir] [-P dbprefix] %s -G [-h token-name] -k mldsa -q paramset [-f pwfile] [-z noisefile] [-d certdir] [-P dbprefix] %s -K [-n key-name] [-h token-name] [-k dsa|ec|rsa|mldsa|all] [-f pwfile] [-X] [-d certdir] [-P dbprefix] %s --upgrade-merge --source-dir upgradeDir --upgrade-id uniqueID [--upgrade-token-name tokenName] [-d targetDBDir] [-P targetDBPrefix] [--source-prefix upgradeDBPrefix] [-f targetPWfile] [-@ upgradePWFile] %s --merge --source-dir sourceDBDir [-d targetDBdir] [-P targetDBPrefix] [--source-prefix sourceDBPrefix] [-f targetPWfile] [-@ sourcePWFile] %s -L [-n cert-name] [-h token-name] [--email email-address] [-X] [-r] [-a] [--dump-ext-val OID] [-d certdir] [-P dbprefix] %s -M -n cert-name -t trustargs [-d certdir] [-P dbprefix] %s -O -n cert-name [-X] [-d certdir] [-a] [-P dbprefix] [--simple-self-signed] %s -R -s subj -o cert-request-file [-d certdir] [-P dbprefix] [-p phone] [-a] [-7 emailAddrs] [-k key-type-or-id] [-h token-name] [-f pwfile] [-g key-size] [-Z hashAlg] %s -V -n cert-name -u usage [-b time] [-e] [-a] [-X] [-d certdir] [-P dbprefix] Usage: %s -W [-d certdir] [-f pwfile] [-@newpwfile] %s -S -n cert-name -s subj [-c issuer-name | -x] -t trustargs [-k key-type-or-id] [-q key-params] [-h token-name] [-g key-size] [-m serial-number] [-w warp-months] [-v months-valid] [-f pwfile] [-d certdir] [-P dbprefix] [-Z hashAlg] [-p phone] [-1] [-2] [-3] [-4] [-5] [-6] [-7 emailAddrs] [-8 DNS-names] [--extAIA] [--extSIA] [--extCP] [--extPM] [--extPC] [--extIA] [--extSKID] [--extNC] [--extSAN type:name[,type:name]...] [--extGeneric OID:critical-flag:filename[,OID:critical-flag:filename]...] %s -U [-X] [-d certdir] [-P dbprefix] %s -g: Keysize must be between %d and %d. %s -Z: %s is not a recognized type. %s -m: %s is not a valid serial number. %s -q: specifies a PQG file for DSA keys (-k dsa) or a named curve for EC keys (-k ec) or a parameter set for ML-DSA keys (-k mldsa) %s -s: improperly formatted name: "%s" %s -v: incorrect validity period: "%s" %s -y: incorrect public exponent %d.%s -certVersion: incorrect certificate version %d.%s -%c: nickname is required for this command (-n). %s -%c: trust is required for this command (-t). %s: nickname is required to dump cert in raw or ascii mode. %s: cannot specify both -r and -a when dumping cert. %s -%c: subject is required to create a cert request. %s -V: specify a usage to validate the cert for (-u). %s --rename: specify an old nickname (-n) and a new nickname (--new-n). %s -%c: specify a nickname (-n) or a key ID (-k). %s --upgrade-merge: specify an upgrade database directory (--source-dir) and an upgrade ID (--upgrade-id). %s --merge: specify an source database directory (--source-dir) %s -S: must specify issuer (-c) or self-sign (-x). %s -%c: cannot use "-h all" for this command. %s -%c: cannot use "-k all" for this command. %s: unable to open "%s" for reading (%ld, %ld). %s: unable to open "%s" for writing (%ld, %ld). Certificate database content version: command not implemented.Could not set password for the slotOnly internal DB's can be upgraded configDir='%s' certPrefix='%s' tokenDescription='%s'Could not obtain chain for: %s could not find certificate named "%s"problem deleting private key "%s" unable to modify trust attributes%s: certificate is invalid: %s %s is neither a key-type nor a nickname nor a key-idCould not get keys from cert %sCould not get subject from certificate %s%s -%c: --pss only works with -R or -S. %s -%c: --pss only works with RSA keys. %s -%c: --pss-sign only works with -C or -S. %s -%c: --pss-sign only works with RSA keys. %s -%c: --simple-self-signed only works with -O. Failed to locate private key. unable to find issuer with nickname %sunable to create RSA-PSS signature with key %sCould not encode certificate. Could not sign encoded certificate data. %s: unable to create cert (%s) Notice: Trust flag u is set automatically if the private key is present. could not add certificate to token or databasecould not change trust on certificate%s: no batch input file specified. Missing closing quote in batch command : %s Not executed. %s: only one command at a time! (orphan)%s: Checking token "%.33s" in slot "%.65s" A random seed must be generated that will be used in the creation of your key. One of the easiest ways to create a random seed is to use the timing of keystrokes on a keyboard. To begin, type keys on the keyboard until this progress meter is full. DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD! Continue typing until the progress meter is full: Finished. Press enter to continue: Unrecognized elliptic curve %s Generating key. This may take a few moments... p2X]bc yAdLc3|C8c^mEg=-NY)oTq:~{Gz:6p/ѽ:A|0zog[󃝠׹(n.H}H~^9ؒa-?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~.................................................................................................................................<   U   OIWSecSIG MD5 with RSA signatureOIWSecSIG DSA with SHA1 with paramsMicrosoft Cert Trust List signingMicrosoft Encrypted File SystemMicrosoft Enrollment Cert Type ExtensionCertificate Policies (Obsolete)Certificate Policy ConstraintsVerisign Class 1 Certificate PolicyVerisign Class 2 Certificate PolicyVerisign Class 3 Certificate PolicyVerisign Class 4 Certificate Policy`HE`HE`HE`HE`HEU$U+0+0+0+7+7+7+7+7+7+7 +7 +7 +7 + + + + + +  +  + + Variables are random strings of characters. These should begin with alpha characters, and should not contain any spaces, nor should they match any built-in constants. There is some checking in the code for these things, but it's not 100% and using invalid variable names can cause problems. Variables are created by any 'OUT' parameter. If the variable does not exist, it will be created. For in parameters variables must already exist. pk11util recognizes *lots* of constants. All CKA_, CKF_, CKO_, CKU_, CKS_, CKC_, CKK_, CKH_, CKM_, CKT_ values from the PKCS #11 spec are recognized. Constants can be specified with their fully qualified CK?_ value, or the prefix can be dropped. Constants are matched case insensitve. Arrays are special variables which represent 'C' arrays. Each array variable can be referenced as a group (using just the name), or as individual elements (with the [int] operator). Example: print myArray # prints the full array. print myArray[3] # prints the 3rd elemement of the array Size operaters returns the size in bytes of a variable, or the number of elements in an array. size(var) and sizeof(var) return the size of var in bytes. sizea(var) and sizeofarray(var) return the number of elements in var. If var is not an array, sizea(var) returns 1. C_Initialize pInitArgs C_Initialize initializes the PKCS #11 library. pInitArgs if this is not NULL_PTR it gets cast to and dereferenced C_Finalize pReserved C_Finalize indicates that an application is done with the PKCS #11 library. pReserved reserved. Should be NULL_PTR C_GetInfo pInfo C_GetInfo returns general information about PKCS #11. pInfo location that receives information C_GetFunctionList ppFunctionList C_GetFunctionList returns the function list. ppFunctionList receives pointer to function list C_GetSlotList tokenPresent pSlotList pulCount C_GetSlotList obtains a list of slots in the system. tokenPresent only slots with tokens? pSlotList receives array of slot IDs pulCount receives number of slots C_GetSlotInfo slotID pInfo C_GetSlotInfo obtains information about a particular slot in the system. slotID the ID of the slot pInfo receives the slot information C_GetTokenInfo slotID pInfo C_GetTokenInfo obtains information about a particular token in the system. slotID ID of the token's slot pInfo receives the token information C_GetMechanismList slotID pMechanismList pulCount C_GetMechanismList obtains a list of mechanism types supported by a token. slotID ID of token's slot pMechanismList gets mech. array pulCount gets # of mechs. C_GetMechanismInfo slotID type pInfo C_GetMechanismInfo obtains information about a particular mechanism possibly supported by a token. slotID ID of the token's slot type type of mechanism pInfo receives mechanism info C_InitToken slotID pPin ulPinLen pLabel C_InitToken initializes a token. slotID ID of the token's slot pPin the SO's initial PIN ulPinLen length in bytes of the PIN pLabel 32-byte token label (blank padded) C_InitPIN hSession pPin ulPinLen C_InitPIN initializes the normal user's PIN. hSession the session's handle pPin the normal user's PIN ulPinLen length in bytes of the PIN C_SetPIN hSession pOldPin ulOldLen pNewPin ulNewLen C_SetPIN modifies the PIN of the user who is logged in. hSession the session's handle pOldPin the old PIN ulOldLen length of the old PIN pNewPin the new PIN ulNewLen length of the new PIN C_OpenSession slotID flags phSession C_OpenSession opens a session between an application and a token. slotID the slot's ID flags from phSession gets session handle C_CloseSession hSession C_CloseSession closes a session between an application and a token. hSession the session's handle C_CloseAllSessions slotID C_CloseAllSessions closes all sessions with a token. slotID the token's slot C_GetSessionInfo hSession pInfo C_GetSessionInfo obtains information about the session. hSession the session's handle pInfo receives session info C_GetOperationState hSession pOpState pulOpStateLen C_GetOperationState obtains the state of the cryptographic operation in a session. hSession session's handle pOpState gets state pulOpStateLen gets state length C_SetOperationState hSession pOpState ulOpStateLen hEncKey hAuthKey C_SetOperationState restores the state of the cryptographic operation in a session. hSession session's handle pOpState holds state ulOpStateLen holds state length hEncKey en/decryption key hAuthnKey sign/verify key C_Login hSession userType pPin ulPinLen C_Login logs a user into a token. hSession the session's handle userType the user type pPin the user's PIN ulPinLen the length of the PIN C_Logout hSession C_Logout logs a user out from a token. hSession the session's handle C_CreateObject hSession pTemplate ulCount phObject C_CreateObject creates a new object. hSession the session's handle pTemplate the object's template ulCount attributes in template phObject gets new object's handle. C_CopyObject hSession hObject pTemplate ulCount phNewObject C_CopyObject copies an object creating a new object for the copy. hSession the session's handle hObject the object's handle pTemplate template for new object ulCount attributes in template phNewObject receives handle of copy C_DestroyObject hSession hObject C_DestroyObject destroys an object. hSession the session's handle hObject the object's handle C_GetObjectSize hSession hObject pulSize C_GetObjectSize gets the size of an object in bytes. hSession the session's handle hObject the object's handle pulSize receives size of object C_GetAttributeValue hSession hObject pTemplate ulCount C_GetAttributeValue obtains the value of one or more object attributes. hSession the session's handle hObject the object's handle pTemplate specifies attrs; gets vals ulCount attributes in template C_SetAttributeValue hSession hObject pTemplate ulCount C_SetAttributeValue modifies the value of one or more object attributes hSession the session's handle hObject the object's handle pTemplate specifies attrs and values ulCount attributes in template C_FindObjectsInit hSession pTemplate ulCount C_FindObjectsInit initializes a search for token and session objects that match a template. hSession the session's handle pTemplate attribute values to match ulCount attrs in search template C_FindObjectsFinal hSession C_FindObjectsFinal finishes a search for token and session objects. hSession the session's handle C_FindObjects hSession phObject ulMaxObjectCount pulObjectCount C_FindObjects continues a search for token and session objects that match a template obtaining additional object handles. hSession session's handle phObject gets obj. handles ulMaxObjectCount max handles to get pulObjectCount actual # returned C_EncryptInit hSession pMechanism hKey C_EncryptInit initializes an encryption operation. hSession the session's handle pMechanism the encryption mechanism hKey handle of encryption key C_EncryptUpdate hSession pPart ulPartLen pEncryptedPart pulEncryptedPartLen C_EncryptUpdate continues a multiple-part encryption operation. hSession session's handle pPart the plaintext data ulPartLen plaintext data len pEncryptedPart gets ciphertext pulEncryptedPartLen gets c-text size C_EncryptFinal hSession pLastEncryptedPart pulLastEncryptedPartLen C_EncryptFinal finishes a multiple-part encryption operation. hSession session handle pLastEncryptedPart last c-text pulLastEncryptedPartLen gets last size C_Encrypt hSession pData ulDataLen pEncryptedData pulEncryptedDataLen C_Encrypt encrypts single-part data. hSession session's handle pData the plaintext data ulDataLen bytes of plaintext pEncryptedData gets ciphertext pulEncryptedDataLen gets c-text size C_DecryptInit hSession pMechanism hKey C_DecryptInit initializes a decryption operation. hSession the session's handle pMechanism the decryption mechanism hKey handle of decryption key C_DecryptUpdate hSession pEncryptedPart ulEncryptedPartLen pPart pulPartLen C_DecryptUpdate continues a multiple-part decryption operation. hSession session's handle pEncryptedPart encrypted data ulEncryptedPartLen input length pPart gets plaintext pulPartLen p-text size C_DecryptFinal hSession pLastPart pulLastPartLen C_DecryptFinal finishes a multiple-part decryption operation. hSession the session's handle pLastPart gets plaintext pulLastPartLen p-text size C_Decrypt hSession pEncryptedData ulEncryptedDataLen pData pulDataLen C_Decrypt decrypts encrypted data in a single part. hSession session's handle pEncryptedData ciphertext ulEncryptedDataLen ciphertext length pData gets plaintext pulDataLen gets p-text size C_DigestInit hSession pMechanism C_DigestInit initializes a message-digesting operation. hSession the session's handle pMechanism the digesting mechanism C_DigestUpdate hSession pPart ulPartLen C_DigestUpdate continues a multiple-part message-digesting operation. hSession the session's handle pPart data to be digested ulPartLen bytes of data to be digested C_DigestKey hSession hKey C_DigestKey continues a multi-part message-digesting operation by digesting the value of a secret key as part of the data already digested. hSession the session's handle hKey secret key to digest C_DigestFinal hSession pDigest pulDigestLen C_DigestFinal finishes a multiple-part message-digesting operation. hSession the session's handle pDigest gets the message digest pulDigestLen gets byte count of digest C_Digest hSession pData ulDataLen pDigest pulDigestLen C_Digest digests data in a single part. hSession the session's handle pData data to be digested ulDataLen bytes of data to digest pDigest gets the message digest pulDigestLen gets digest length C_SignInit hSession pMechanism hKey C_SignInit initializes a signature (private key encryption operation where the signature is (will be) an appendix to the data and plaintext cannot be recovered from the signature. hSession the session's handle pMechanism the signature mechanism hKey handle of signature key C_SignUpdate hSession pPart ulPartLen C_SignUpdate continues a multiple-part signature operation where the signature is (will be) an appendix to the data and plaintext cannot be recovered from the signature. hSession the session's handle pPart the data to sign ulPartLen count of bytes to sign C_SignFinal hSession pSignature pulSignatureLen C_SignFinal finishes a multiple-part signature operation returning the signature. hSession the session's handle pSignature gets the signature pulSignatureLen gets signature length C_SignRecoverInit hSession pMechanism hKey C_SignRecoverInit initializes a signature operation where the data can be recovered from the signature. hSession the session's handle pMechanism the signature mechanism hKey handle of the signature key C_SignRecover hSession pData ulDataLen pSignature pulSignatureLen C_SignRecover signs data in a single operation where the data can be recovered from the signature. hSession the session's handle pData the data to sign ulDataLen count of bytes to sign pSignature gets the signature pulSignatureLen gets signature length C_Sign hSession pData ulDataLen pSignature pulSignatureLen C_Sign signs (encrypts with private key) data in a single part where the signature is (will be) an appendix to the data and plaintext cannot be recovered from the signature. hSession the session's handle pData the data to sign ulDataLen count of bytes to sign pSignature gets the signature pulSignatureLen gets signature length C_VerifyInit hSession pMechanism hKey C_VerifyInit initializes a verification operation where the signature is an appendix to the data and plaintext cannot cannot be recovered from the signature (e.g. DSA). hSession the session's handle pMechanism the verification mechanism hKey verification key C_VerifyUpdate hSession pPart ulPartLen C_VerifyUpdate continues a multiple-part verification operation where the signature is an appendix to the data and plaintext cannot be recovered from the signature. hSession the session's handle pPart signed data ulPartLen length of signed data C_VerifyFinal hSession pSignature ulSignatureLen C_VerifyFinal finishes a multiple-part verification operation checking the signature. hSession the session's handle pSignature signature to verify ulSignatureLen signature length C_VerifyRecoverInit hSession pMechanism hKey C_VerifyRecoverInit initializes a signature verification operation where the data is recovered from the signature. hSession the session's handle pMechanism the verification mechanism hKey verification key C_VerifyRecover hSession pSignature ulSignatureLen pData pulDataLen C_VerifyRecover verifies a signature in a single-part operation where the data is recovered from the signature. hSession the session's handle pSignature signature to verify ulSignatureLen signature length pData gets signed data pulDataLen gets signed data len C_Verify hSession pData ulDataLen pSignature ulSignatureLen C_Verify verifies a signature in a single-part operation where the signature is an appendix to the data and plaintext cannot be recovered from the signature. hSession the session's handle pData signed data ulDataLen length of signed data pSignature signature ulSignatureLen signature length*/ C_DigestEncryptUpdate hSession pPart ulPartLen pEncryptedPart \ pulEncryptedPartLen C_DigestEncryptUpdate continues a multiple-part digesting and encryption operation. hSession session's handle pPart the plaintext data ulPartLen plaintext length pEncryptedPart gets ciphertext pulEncryptedPartLen gets c-text length C_DecryptDigestUpdate hSession pEncryptedPart ulEncryptedPartLen pPart \ pulPartLen C_DecryptDigestUpdate continues a multiple-part decryption and digesting operation. hSession session's handle pEncryptedPart ciphertext ulEncryptedPartLen ciphertext length pPart gets plaintext pulPartLen gets plaintext len C_SignEncryptUpdate hSession pPart ulPartLen pEncryptedPart \ pulEncryptedPartLen C_SignEncryptUpdate continues a multiple-part signing and encryption operation. hSession session's handle pPart the plaintext data ulPartLen plaintext length pEncryptedPart gets ciphertext pulEncryptedPartLen gets c-text length C_DecryptVerifyUpdate hSession pEncryptedPart ulEncryptedPartLen pPart \ pulPartLen C_DecryptVerifyUpdate continues a multiple-part decryption and verify operation. hSession session's handle pEncryptedPart ciphertext ulEncryptedPartLen ciphertext length pPart gets plaintext pulPartLen gets p-text length C_GenerateKeyPair hSession pMechanism pPublicKeyTemplate \ ulPublicKeyAttributeCount pPrivateKeyTemplate ulPrivateKeyAttributeCount \ phPublicKey phPrivateKey C_GenerateKeyPair generates a public-key/private-key pair creating new key objects. hSession sessionhandle pMechanism key-genmech. pPublicKeyTemplate templatefor pub. key ulPublicKeyAttributeCount # pub. attrs. pPrivateKeyTemplate templatefor priv. key ulPrivateKeyAttributeCount # priv. attrs. phPublicKey gets pub. keyhandle phPrivateKey getspriv. keyhandle C_GenerateKey hSession pMechanism pTemplate ulCount phKey C_GenerateKey generates a secret key creating a new key object. hSession the session's handle pMechanism key generation mech. pTemplate template for new key ulCount # of attrs in template phKey gets handle of new key C_WrapKey hSession pMechanism hWrappingKey hKey pWrappedKey pulWrappedKeyLen C_WrapKey wraps (i.e. encrypts) a key. hSession the session's handle pMechanism the wrapping mechanism hWrappingKey wrapping key hKey key to be wrapped pWrappedKey gets wrapped key pulWrappedKeyLen gets wrapped key size C_UnwrapKey hSession pMechanism hUnwrappingKey pWrappedKey ulWrappedKeyLen \ pTemplate ulAttributeCount phKey C_UnwrapKey unwraps (decrypts) a wrapped key creating a new key object. hSession session's handle pMechanism unwrapping mech. hUnwrappingKey unwrapping key pWrappedKey the wrapped key ulWrappedKeyLen wrapped key len pTemplate new key template ulAttributeCount template length phKey gets new handle C_DeriveKey hSession pMechanism hBaseKey pTemplate ulAttributeCount phKey C_DeriveKey derives a key from a base key creating a new key object. hSession session's handle pMechanism key deriv. mech. hBaseKey base key pTemplate new key template ulAttributeCount template length phKey gets new handle C_SeedRandom hSession pSeed ulSeedLen C_SeedRandom mixes additional seed material into the token's random number generator. hSession the session's handle pSeed the seed material ulSeedLen length of seed material C_GenerateRandom hSession RandomData ulRandomLen C_GenerateRandom generates random data. hSession the session's handle RandomData receives the random data ulRandomLen # of bytes to generate C_GetFunctionStatus hSession C_GetFunctionStatus is a legacy function; it obtains an updated status of a function running in parallel with an application. hSession the session's handle C_CancelFunction hSession C_CancelFunction is a legacy function; it cancels a function running in parallel. hSession the session's handle C_WaitForSlotEvent flags pSlot pRserved C_WaitForSlotEvent waits for a slot event (token insertion removal etc.) to occur. flags blocking/nonblocking flag pSlot location that receives the slot ID pRserved reserved. Should be NULL_PTR NewArray varName varType array size Creates a new array variable. varName variable name of the new array varType data type of the new array size number of elements in the array NewInitArg varName flags string Creates a new init variable. varName variable name of the new initArg flags value to set the flags field string string parameter for init arg NewTemplate varName attributeList Create a new empty template and populate the attribute list varName variable name of the new template attributeList comma separated list of CKA_ATTRIBUTE types NewMechanism varName mechanismType Create a new CK_MECHANISM object with type NULL parameters and specified type varName variable name of the new mechansim mechanismType CKM_ mechanism type value to set int the type field BuildTemplate template Allocates space for the value in a template which has the sizes filled in, but no values allocated yet. template variable name of the template SetTemplate template index value Sets a particular element of a template to a CK_ULONG template variable name of the template index index into the template to the element to change value 32 bit value to set in the template SetString varName string Sets a particular variable to a string value variable variable name of new string string String to set the variable to Set varName value Sets a particular variable to CK_ULONG variable name of the new variable value 32 bit value to set variable to Print varName prints a variable variable name of the variable to print Delete varName delete a variable variable name of the variable to delete load libraryName load a pkcs #11 module libraryName Name of a shared library Save filename variable Saves the binary value of 'variable' in file 'filename' fileName target file to save the variable in variable variable to save Restore filename variable Restores a variable from a file fileName target file to restore the variable from variable variable to restore Increment variable value Increment a variable by value Decrement variable value Decrement a variable by value Unload the currrently loaded PKCS #11 library Run filename reads filename as script of commands to execute Time pkcs11 command Execute a pkcs #11 command and time the results LoopRun filename var start end step Run in a loop. Loop exit if scrip does and explicit quit (Quit QuitIf etc.)Help [command] print general help, or help for a specific command QuitIf arg1 comparator arg2 Exit from this program if Condition is valid, valid comparators: < > <= >= = != QuitIfString arg1 comparator arg2 Exit from this program if Condition is valid, valid comparators: = != CKF_PROTECTED_AUTHENTICATION_PATHCKF_LIBRARY_CANT_CREATE_OS_THREADSCK_CERTIFICATE_CATEGORY_UNSPECIFIEDCK_CERTIFICATE_CATEGORY_TOKEN_USERCK_CERTIFICATE_CATEGORY_AUTHORITYCK_CERTIFICATE_CATEGORY_OTHER_ENTITYCK_SECURITY_DOMAIN_UNSPECIFIEDCK_SECURITY_DOMAIN_MANUFACTURERCK_SECURITY_DOMAIN_THIRD_PARTYCKA_HASH_OF_SUBJECT_PUBLIC_KEYCKA_VALIDATION_CERTIFICATE_IDENTIFIERCKA_VALIDATION_CERTIFICATE_URICKA_PKCS_TRUST_EMAIL_PROTECTIONCKA_NSS_TRUST_DIGITAL_SIGNATURECKA_NSS_TRUST_KEY_ENCIPHERMENTCKA_NSS_TRUST_DATA_ENCIPHERMENTCKA_NSS_TRUST_EMAIL_PROTECTIONCKA_NSS_TRUST_IPSEC_END_SYSTEMCKA_NSS_TRUST_STEP_UP_APPROVEDCKM_NSS_TLS_MASTER_KEY_DERIVE_SHA256CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256CKM_NSS_TLS_MASTER_KEY_DERIVE_DH_SHA256CKM_NSS_PBE_SHA1_TRIPLE_DES_CBCCKM_NSS_PBE_SHA1_40_BIT_RC2_CBCCKM_NSS_PBE_SHA1_128_BIT_RC2_CBCCKM_NSS_PBE_SHA1_FAULTY_3DES_CBCCKM_NSS_TLS_PRF_GENERAL_SHA256CKR_KEY_FUNCTION_NOT_PERMITTEDCKR_SESSION_PARALLEL_NOT_SUPPORTEDCKR_SESSION_READ_WRITE_SO_EXISTSCKR_UNWRAPPING_KEY_HANDLE_INVALIDCKR_UNWRAPPING_KEY_TYPE_INCONSISTENTCKR_USER_ANOTHER_ALREADY_LOGGED_INCKR_WRAPPING_KEY_HANDLE_INVALIDCKR_WRAPPING_KEY_TYPE_INCONSISTENTCKR_CRYPTOKI_ALREADY_INITIALIZED]Error: notBefore or notAfter MUST be present. 8 Password must be at least 8 characters long with one or more (%d least significant bits unused) Error opening input terminal for read Error opening output terminal for write No password file "%s" exists. password file contains no data Incorrect password/PIN entered. Enter Password or Pin for "%s":Press Enter, then enter PIN for "%s" on external device. Password check failed: No password found. Enter a password which will be used to encrypt your keys. The password should be at least %d characters long, and should consist of at least three character classes. The available character classes are: digits (0-9), ASCII lowercase letters, ASCII uppercase letters, ASCII non-alphanumeric characters, and non-ASCII characters. If an ASCII uppercase letter appears at the beginning of the password, it is not counted toward its character class. Similarly, if a digit appears at the end of the password, it is not counted toward its character class. Enter a password which will be used to encrypt your keys. The password should be at least 8 characters long, and should contain at least one non-alphabetic character. Passwords do not match. Try again. Invalid password. Try again. Password changed successfully. unable to read data from input file Warning: ignoring private key. Consider to use pk12util. input has header but no trailer error converting ascii to binary (%s) uU#eUHash algorithm: default, SHA-1 Mask algorithm: default, MGF1 Mask hash algorithm: default, SHA-1 Invalid mask generation algorithm parameters Salt length: default, %i (0x%2X) Implicit KDF Algorithm: HMAC-SHA-1 Parameter Set: Invalid Params Parameter Set: Invalid Params %d 33C}unable to format this SPKI algorithm type unknown SPKI algorithm type %d }Serial DER as C source: { %d, "]{EIs a CA with a maximum path length of %d. Is a CA with no maximum path length. ;;|    - M m m m NWICert cannot be used for SMIME.Cert cannot be used as an SMIME CA.Cert cannot be used for object signing.Cert cannot be used as an object signing CA.Cert cannot be used as an SSL CA.:"q"_":"o#:":":":":":":":":":":"h":":":":":":":":":":":":":":":"1"Unable to allocate buffer for keying material upgrade/merge internal error unable to decode trust stringunable to allocate cert trustproblem printing certificatescouldn't open source databaseVerisign Cert Extension 7 (?)Problem creating %s extensionPROBLEM WITH THE CERT CHAIN: Microsoft CertServ CA versionCould not get password for %sCert cannot sign other certs.CKR_UNWRAPPING_KEY_SIZE_RANGECKR_RANDOM_SEED_NOT_SUPPORTEDCKR_OPERATION_NOT_INITIALIZEDCKM_SSL3_MASTER_KEY_DERIVE_DHCKM_NSS_PBE_SHA1_HMAC_KEY_GENCKM_CONCATENATE_DATA_AND_BASECKM_CONCATENATE_BASE_AND_DATACKA_VALIDATION_AUTHORITY_TYPECKA_OTP_CHALLENGE_REQUIREMENTCKA_NSS_TRUST_NON_REPUDIATIONCKA_JAVA_MIDP_SECURITY_DOMAINCKA_HASH_OF_ISSUER_PUBLIC_KEY%s: PORT_Realloc(%ld) failed %-20s Specify the batch file %-15s Validate a certificate All options under -E applyunable to rename certificateunable to delete certificateproblem printing certificatecould not decode certificateUnauthenticated Attributes: Recipient Information List: Microsoft Time Stamp signingMicrosoft KP SmartCard LogonCouldn't get password for %sContent Encryption AlgorithmCert cannot be used for SSL.CKR_USER_PIN_NOT_INITIALIZEDCKR_SESSION_READ_ONLY_EXISTSCKR_ENCRYPTED_DATA_LEN_RANGECKR_CRYPTOKI_NOT_INITIALIZEDCKM_TLS_MASTER_KEY_DERIVE_DHCKM_NSS_PBE_SHA1_128_BIT_RC4CKM_NSS_PBE_MD5_HMAC_KEY_GENCKM_NSS_PBE_MD2_HMAC_KEY_GENCKM_CONCATENATE_BASE_AND_KEYCKF_SECONDARY_AUTHENTICATIONCKA_SUPPORTED_CMS_ATTRIBUTESCKA_PKCS_TRUST_TIME_STAMPING%-25s g make step-up cert %-15s List all private keys --upgrade-token-name namemissing name in other name Signed Revocation List (%x)Microsoft SMIME preferencesMicrosoft NT Principal NameInvalid RSA-PSS parameters Failed to read PQG file %s Failed to open PQG file %s Failed to change password. Digest Encryption AlgorithmCertificate Revocation ListCK_SECURITY_DOMAIN_OPERATORCKT_TRUST_MUST_VERIFY_TRUSTCKR_WRAPPING_KEY_SIZE_RANGECKR_MECHANISM_PARAM_INVALIDCKR_ATTRIBUTE_VALUE_INVALIDCKM_SSL3_PRE_MASTER_KEY_GENCKM_SSL3_KEY_AND_MAC_DERIVECKM_PBA_SHA1_WITH_SHA1_HMACCKM_NSS_PBE_SHA1_40_BIT_RC4CKM_EC_EDWARDS_KEY_PAIR_GENCKF_ASYNC_SESSION_SUPPORTEDCKA_REQUIRED_CMS_ATTRIBUTESCKA_PKCS_TRUST_OCSP_SIGNINGCKA_PKCS_TRUST_CODE_SIGNINGCKA_OTP_COUNTER_REQUIREMENTCKA_OBJECT_VALIDATION_FLAGSCKA_NSS_TRUST_TIME_STAMPINGCKA_NSS_TRUST_KEY_CERT_SIGNCKA_NSS_TRUST_KEY_AGREEMENT-----BEGIN CERTIFICATE-----%-20s sect131r1, sect131r2 --source-prefix dbprefix --keyAttrFlags attrflagsunable to set algorithm IDunable to generate key(s) non-alphabetic characters malformed extension OID %sfailed to open noise file.failed to add extension %serror converting der (%s) database already upgraded.could not find the slot %sUnknown extra data found Recipient Information (%x)Microsoft Enrollment AgentInvalid IP Address ("%s") Exported Keying Material: Certificate Distrust DatesCK_UNAVAILABLE_INFORMATIONCK_OTP_FORMAT_ALPHANUMERICCKR_USER_ALREADY_LOGGED_INCKR_SESSION_HANDLE_INVALIDCKR_NEED_TO_CREATE_THREADSCKR_FUNCTION_NOT_SUPPORTEDCKR_ENCRYPTED_DATA_INVALIDCKR_ATTRIBUTE_TYPE_INVALIDCKM_X9_42_DH_HYBRID_DERIVECKM_TLS_PRE_MASTER_KEY_GENCKM_TLS_KEY_AND_MAC_DERIVECKM_SSL3_MASTER_KEY_DERIVECKM_RSA_X9_31_KEY_PAIR_GENCKM_RIPEMD160_HMAC_GENERALCKM_RIPEMD128_HMAC_GENERALCKM_GENERIC_SECRET_KEY_GENCKF_USER_PIN_TO_BE_CHANGEDCKF_RESTORE_KEY_NOT_NEEDEDCKF_DUAL_CRYPTO_OPERATIONSCKA_PKCS_TRUST_SERVER_AUTHCKA_PKCS_TRUST_CLIENT_AUTHCKA_OTP_USER_FRIENDLY_MODECKA_OTP_SERVICE_IDENTIFIERCKA_NSS_TRUST_IPSEC_TUNNELCKA_NSS_TRUST_CODE_SIGNINGCKA_DEFAULT_CMS_ATTRIBUTESAuthenticated Attributes: %-25s R Email Recipient --keyOpFlagsOff opflagsunable to retrieve key %sfalse (attribute present)false (attribute missing)couldn't create error logSubject name not providedSigner Information List: Signed Revocation Lists: Parameter Set (test mode)PKIX Time Stamping methodMust be 3, 17, or 65537. Error: missing qualifier Enter the relative name: CK_OTP_FORMAT_HEXADECIMALCKT_NSS_TRUSTED_DELEGATORCKT_NSS_MUST_VERIFY_TRUSTCKR_WRAPPED_KEY_LEN_RANGECKR_TOKEN_WRITE_PROTECTEDCKR_TEMPLATE_INCONSISTENTCKR_OBJECT_HANDLE_INVALIDCKR_KEY_TYPE_INCONSISTENTCKR_INFORMATION_SENSITIVECKR_FUNCTION_NOT_PARALLELCKR_DOMAIN_PARAMS_INVALIDCKO_NSS_BUILTIN_ROOT_LISTCKM_TLS_MASTER_KEY_DERIVECKM_SKIPJACK_PRIVATE_WRAPCKM_SHA512_KEY_DERIVATIONCKM_SHA384_KEY_DERIVATIONCKM_SHA256_KEY_DERIVATIONCKM_SEED_ECB_ENCRYPT_DATACKM_SEED_CBC_ENCRYPT_DATACKM_RSA_PKCS_KEY_PAIR_GENCKM_PBE_SHA1_DES3_EDE_CBCCKM_PBE_SHA1_DES2_EDE_CBCCKM_ECDH1_COFACTOR_DERIVECKM_DH_PKCS_PARAMETER_GENCKA_OTP_SERVICE_LOGO_TYPECKA_NSS_TRUST_SERVER_AUTHCKA_NSS_TRUST_CLIENT_AUTH<%2d> %-8.8s %-42.42s %s -----END CERTIFICATE-----%s: certificate is valid %s -g: Not for ec keys. %-20s Cert serial number --keyOpFlagsOn opflags Database needs user inittrue (attribute present)bad certificate request Microsoft SGC SSL serverError: INVALID RSA KEY! Could not find cert: %s CKR_TOKEN_NOT_RECOGNIZEDCKM_PBE_SHA1_RC2_128_CBCCKM_PBE_SHA1_CAST128_CBCCKM_NSS_PBE_SHA1_DES_CBCCKM_NSS_AES_KEY_WRAP_PADCKM_EXTRACT_KEY_FROM_KEYCKM_DH_PKCS_KEY_PAIR_GENCKM_CAMELLIA_MAC_GENERALCKF_USER_PIN_INITIALIZEDCKF_SO_PIN_TO_BE_CHANGEDCKF_SEED_RANDOM_REQUIREDCKA_X2RATCHET_BOBS1STMSGCKA_VALIDATION_MODULE_IDCKA_OTP_TIME_REQUIREMENTCKA_NSS_TRUST_IPSEC_USERCKA_ENCAPSULATE_TEMPLATECKA_DECAPSULATE_TEMPLATECKA_CERTIFICATE_CATEGORYAllocating new ArenaPool%-25s J Object signer --upgrade-id uniqueID --email email-address %-60s %-5s %-60s %-5s error writing extension[Certificate Authority]Subject Public Key InfoSigner Information (%x)OIWSecSIG RSA signatureOIWSecSIG DSA with SHA1List all the variables Enter CPS pointer URI: Digest Algorithm List: Certificate Trust FlagsCK_EFFECTIVELY_INFINITECKT_NSS_VALID_DELEGATORCKR_WRAPPED_KEY_INVALIDCKR_USER_TOO_MANY_TYPESCKR_TEMPLATE_INCOMPLETECKR_SIGNATURE_LEN_RANGECKR_SAVED_STATE_INVALIDCKR_ATTRIBUTE_SENSITIVECKR_ATTRIBUTE_READ_ONLYCKM_SHA512_HMAC_GENERALCKM_SHA384_HMAC_GENERALCKM_SHA256_HMAC_GENERALCKM_SHA1_KEY_DERIVATIONCKM_PBE_SHA1_RC2_40_CBCCKM_PBE_MD5_CAST128_CBCCKM_CAST128_MAC_GENERALCKA_OTP_USER_IDENTIFIERCKA_OTP_PIN_REQUIREMENTCKA_NSS_SMIME_TIMESTAMPCKA_NAME_HASH_ALGORITHMCKA_HASH_OF_CERTIFICATECKA_ALWAYS_AUTHENTICATE%-25s w send warning %-25s S Email signer %-25s P trusted peer %-15s List all modules --source-dir certdirunable to read file %ssigning of data failederror writing raw certecdsa_secp521r1_sha512ecdsa_secp384r1_sha384ecdsa_secp256r1_sha256Object Signing Flags: OIWSecSIG MD5 with RSAMust be 1, 2, 3 or 4. Mozilla-CA-Policy: %s Exit from this programError: missing method CK_OTP_PARAM_MANDATORYCKR_USER_NOT_LOGGED_INCKR_KEY_HANDLE_INVALIDCKM_SHA_1_HMAC_GENERALCKM_RIPEMD160_RSA_PKCSCKM_RIPEMD128_RSA_PKCSCKM_PBE_SHA1_CAST5_CBCCKM_MD5_KEY_DERIVATIONCKM_MD2_KEY_DERIVATIONCKM_FORTEZZA_TIMESTAMPCKM_ECDSA_KEY_PAIR_GENCKF_USER_PIN_FINAL_TRYCKF_USER_PIN_COUNT_LOWCKA_VALIDATION_VERSIONCKA_VALIDATION_PROFILECKA_VALIDATION_COUNTRYCKA_PUBLIC_CRC64_VALUECKA_NSS_TRUST_CRL_SIGNCKA_NSS_PASSWORD_CHECKCKA_NSS_CERT_SHA1_HASHCKA_HSS_KEYS_REMAININGServer Distrust AfterPolicy Qualifier NamePolicy Qualifier DataPKIX CA Issuer methodE-mail Distrust AfterDigest Algorithm (%x)C_DigestEncryptUpdateC_DecryptVerifyUpdateC_DecryptDigestUpdateCK_OTP_PARAM_OPTIONALCK_OTP_FORMAT_DECIMALCKT_NSS_TRUST_UNKNOWNCKS_RW_USER_FUNCTIONSCKS_RW_PUBLIC_SESSIONCKS_RO_USER_FUNCTIONSCKS_RO_PUBLIC_SESSIONCKR_USER_TYPE_INVALIDCKR_TOKEN_NOT_PRESENTCKR_SIGNATURE_INVALIDCKR_SESSION_READ_ONLYCKR_MECHANISM_INVALIDCKR_KEY_UNEXTRACTABLECKR_KEY_NOT_WRAPPABLECKR_FUNCTION_CANCELEDCKO_DOMAIN_PARAMETERSCKM_XOR_BASE_AND_DATACKM_PBE_MD5_CAST5_CBCCKM_PBE_MD5_CAST3_CBCCKM_KEY_WRAP_SET_OAEPCKM_DSA_PARAMETER_GENCKM_CAST5_MAC_GENERALCKM_CAST3_MAC_GENERALCKH_MONOTONIC_COUNTERCKF_TOKEN_INITIALIZEDCKF_GENERATE_KEY_PAIRCKA_X2RATCHET_ISALICECKA_X2RATCHET_BAGSIZECKA_WRAP_WITH_TRUSTEDCKA_OTP_TIME_INTERVALCKA_NSS_PQG_SEED_BITSCKA_NSS_CERT_MD5_HASHCKA_NEVER_EXTRACTABLECKA_KEY_GEN_MECHANISM%-25s V SSL Server %-25s C SSL Client %s -B -i batch-file problem listing keysipsecIKEIntermediatePublic Key AlgorithmNSS_NO_INIT_SUPPORT Enter new password: Key Encryption AlgorithmDistribution point: Certificate NicknameCert cannot encrypt.CK_OTP_PARAM_IGNOREDCK_OTP_FORMAT_BINARYCK_C_INITIALIZE_ARGSCKU_CONTEXT_SPECIFICCKR_STATE_UNSAVEABLECKR_OPERATION_ACTIVECKR_MUTEX_NOT_LOCKEDCKR_KEY_INDIGESTIBLECKR_BUFFER_TOO_SMALLCKM_X9_42_MQV_DERIVECKM_SKIPJACK_KEY_GENCKM_SEED_MAC_GENERALCKM_PBE_SHA1_RC4_128CKM_PBE_MD5_CAST_CBCCKM_NSS_AES_KEY_WRAPCKM_MD5_HMAC_GENERALCKM_MD2_HMAC_GENERALCKM_KEA_KEY_PAIR_GENCKM_IDEA_MAC_GENERALCKM_DSA_KEY_PAIR_GENCKM_DES3_MAC_GENERALCKM_CDMF_MAC_GENERALCKM_CAST_MAC_GENERALCKM_CAMELLIA_KEY_GENCKM_CAMELLIA_CBC_PADCKM_AES_CMAC_GENERALCKK_BLAKE2B_512_HMACCKK_BLAKE2B_384_HMACCKK_BLAKE2B_256_HMACCKK_BLAKE2B_160_HMACCKF_SO_PIN_FINAL_TRYCKF_SO_PIN_COUNT_LOWCKF_REMOVABLE_DEVICECKA_VALIDATION_LEVELCKA_PRIVATE_EXPONENTCKA_OTP_SERVICE_LOGOCKA_GOSTR3411_PARAMSCKA_GOSTR3410_PARAMSCKA_GOST28147_PARAMSCKA_ENCODING_METHODSCKA_CERTIFICATE_TYPECKA_ALWAYS_SENSITIVE%a %b %d %H:%M:%S %Y%-25s u user cert %-25s Y Verify CA -k key-type-or-idrsa_pss_rsae_sha512rsa_pss_rsae_sha384rsa_pss_rsae_sha256extension not foundSignature AlgorithmSerial DER Base64: Re-enter password: RSA PKCS#1 SHA1+MD5Mask hash algorithmIssuer DER Base64: Invalid Policy DataEmail Address(es): %s Digest Algorithm IDCould not find: %s Encrypted Content InformationCertificate SigningC_VerifyRecoverInitC_SignEncryptUpdateC_SetOperationStateC_SetAttributeValueC_GetOperationStateC_GetFunctionStatusC_GetAttributeValueCKT_NSS_NOT_TRUSTEDCKS_RW_SO_FUNCTIONSCKR_SLOT_ID_INVALIDCKR_FUNCTION_FAILEDCKM_X9_42_DH_DERIVECKM_TLS_PRF_GENERALCKM_SKIPJACK_RELAYXCKM_SHA512_RSA_PKCSCKM_SHA384_RSA_PKCSCKM_SHA256_RSA_PKCSCKM_RC5_MAC_GENERALCKM_RC2_MAC_GENERALCKM_PBE_SHA1_RC4_40CKM_PBE_MD5_DES_CBCCKM_PBE_MD2_DES_CBCCKM_JUNIPER_SHUFFLECKM_JUNIPER_KEY_GENCKM_JUNIPER_COUNTERCKM_EC_KEY_PAIR_GENCKM_DES_MAC_GENERALCKM_CAST128_KEY_GENCKM_CAST128_CBC_PADCKM_AES_MAC_GENERALCKK_SHA512_256_HMACCKK_SHA512_224_HMACCKF_WRITE_PROTECTEDCKF_USER_PIN_LOCKEDCKF_MESSAGE_ENCRYPTCKF_MESSAGE_DECRYPTCKF_EC_ECPARAMETERSCKC_X_509_ATTR_CERTCKA_VALIDATION_TYPECKA_VALIDATION_FLAGCKA_UNWRAP_TEMPLATECKA_TRUST_IPSEC_IKECKA_PUBLIC_KEY_INFOCKA_PUBLIC_EXPONENTCKA_NSS_PQG_COUNTERCKA_HW_FEATURE_TYPECKA_HSS_LMOTS_TYPESCKA_DERIVE_TEMPLATE-----BEGIN CRL-----%-25s c valid CA -m serial-number -i cert-request -f password-file --new-n new-nameupgrade-token-name --simple-self-signedsecp384r1mlkem1024rsa_pss_pss_sha512rsa_pss_pss_sha384rsa_pss_pss_sha256msTrustListSigninginvalid input dateWarn When Sending Unknown flag (%s) Trusted Client CA SSL,S/MIME,JAR/XPIParsing public keyNSS_FIPS_DISABLED Invalid password. Invalid IP Family Certificate List: C_WaitForSlotEventC_GetMechanismListC_GetMechanismInfoC_FindObjectsFinalC_CloseAllSessionsCKR_VENDOR_DEFINEDCKR_SESSION_EXISTSCKR_SESSION_CLOSEDCKR_KEY_SIZE_RANGECKR_KEY_NOT_NEEDEDCKR_DEVICE_REMOVEDCKR_DATA_LEN_RANGECKM_SKIPJACK_OFB64CKM_SKIPJACK_ECB64CKM_SKIPJACK_CFB64CKM_SKIPJACK_CFB32CKM_SKIPJACK_CFB16CKM_SKIPJACK_CBC64CKM_SHA1_RSA_X9_31CKM_RIPEMD160_HMACCKM_RIPEMD128_HMACCKM_KEY_WRAP_LYNKSCKM_KEA_KEY_DERIVECKM_JUNIPER_ECB128CKM_JUNIPER_CBC128CKM_DH_PKCS_DERIVECKK_RIPEMD160_HMACCKK_RIPEMD128_HMACCKK_GENERIC_SECRETCKH_USER_INTERFACECKF_VERIFY_RECOVERCKF_SERIAL_SESSIONCKF_MESSAGE_VERIFYCKF_LOGIN_REQUIREDCKF_CLOCK_ON_TOKENCKA_X2RATCHET_NHKSCKA_X2RATCHET_NHKRCKA_VERIFY_RECOVERCKA_SUB_PRIME_BITSCKA_SECONDARY_AUTHCKA_NSS_SMIME_INFOCKA_NSS_PKCS8_SALTCKA_MECHANISM_TYPECKA_HSS_LMOTS_TYPECKA_BITS_PER_PIXELCKA_AUTH_PIN_FLAGS%s: no keys found %s is not a key-id -v months-valid -0 SSO-password %s --build-flags validation failedupgrade complete!unknown type [%d]secp256r1mlkem768Subject Unique IDSigned ExtensionsPolicyConstraintsParsing extensionObject IdentifierOIWSecSIG DES CBCML-KEM Public KeyInformationAccessEntry %d (0x%x): Encrypted ContentDigital SignatureData EnciphermentContent Type: %s Cert cannot sign.C_SignRecoverInitC_GetFunctionListC_GenerateKeyPairC_FindObjectsInitCK_MECHANISM_INFOCKT_TRUST_UNKNOWNCKR_SESSION_COUNTCKR_RANDOM_NO_RNGCKR_PIN_LEN_RANGECKR_PIN_INCORRECTCKR_GENERAL_ERRORCKR_DEVICE_MEMORYCKR_ARGUMENTS_BADCKM_SSL3_SHA1_MACCKM_SKIPJACK_WRAPCKM_SKIPJACK_CFB8CKM_SHA1_RSA_PKCSCKM_RSA_PKCS_OAEPCKM_CAST5_KEY_GENCKM_CAST5_CBC_PADCKM_CAST3_KEY_GENCKM_CAST3_CBC_PADCKM_BATON_SHUFFLECKM_BATON_KEY_GENCKM_BATON_COUNTERCKK_SHA512_T_HMACCKK_SHA3_512_HMACCKK_SHA3_384_HMACCKK_SHA3_256_HMACCKK_SHA3_224_HMACCKK_EC_MONTGOMERYCKF_TOKEN_PRESENTCKF_SO_PIN_LOCKEDCKF_OS_LOCKING_OKCKF_MULTI_MESSAGECKF_EC_UNCOMPRESSCKF_EC_NAMEDCURVECKF_ASYNC_SESSIONCKA_X2RATCHET_PNSCKA_X2RATCHET_HKSCKA_X2RATCHET_HKRCKA_X2RATCHET_DHSCKA_X2RATCHET_DHRCKA_X2RATCHET_DHPCKA_X2RATCHET_CKSCKA_X2RATCHET_CKRCKA_X2RATCHET_BAGCKA_WRAP_TEMPLATECKA_SUBPRIME_BITSCKA_SERIAL_NUMBERCKA_RESET_ON_INITCKA_PARAMETER_SETCKA_HSS_LMS_TYPESBuiltin Root List-----END CRL-----%-25s L SSL CA %-25s A Any CA -w warp-months -o output-cert -h token-name -c issuer-name -7 emailAddrs rsa_pkcs1_sha512rsa_pkcs1_sha384rsa_pkcs1_sha256dataEncipherment[unknown usage].Universal StringTrust AttributesTerminal Record Printable StringPKIX OCSP methodObjectSigning CAKey EnciphermentIssuer Unique IDInhibitAnyPolicyHardware FeatureGeneralized TimeExtendedKeyUsageEntry ExtensionsEncrypted DigestDigest AlgorithmCertificate (%x)C_GetSessionInfoC_GenerateRandomC_CancelFunctionCK_FUNCTION_LISTCKT_TRUST_ANCHORCKR_DEVICE_ERRORCKR_DATA_INVALIDCKM_SSL3_MD5_MACCKM_SEED_KEY_GENCKM_SEED_CBC_PADCKM_MD5_RSA_PKCSCKM_MD2_RSA_PKCSCKM_JUNIPER_WRAPCKM_IDEA_KEY_GENCKM_IDEA_CBC_PADCKM_ECMQV_DERIVECKM_ECDH1_DERIVECKM_DES3_KEY_GENCKM_DES3_CBC_PADCKM_DES2_KEY_GENCKM_CDMF_KEY_GENCKM_CDMF_CBC_PADCKM_CAST_KEY_GENCKM_CAST_CBC_PADCKM_CAMELLIA_MACCKM_CAMELLIA_ECBCKM_CAMELLIA_CBCCKM_BATON_ECB128CKM_BATON_CBC128CKF_SIGN_RECOVERCKF_MESSAGE_SIGNCKF_FIND_OBJECTSCKA_X2RATCHET_RKCKA_X2RATCHET_NSCKA_X2RATCHET_NRCKA_SIGN_RECOVERCKA_NSS_PQG_SEEDCKA_MODULUS_BITSCKA_HSS_LMS_TYPECKA_ECDSA_PARAMSCKA_CHAR_COLUMNSAttribute ValuesApplication: %d 0123456789abcdef%-25s I IPsec %-20s Time Warp %-20s Self sign ERROR %ld: %s -q curve-name -o output-req -i batch-file -h token-name -7 emailAddrsobjectSigningCAkeyEnciphermentfunction failedemailProtectionSource DatabaseSet System FlagNon-RepudiationNameConstraintsKeying MaterialIteration CountInitializeFlagsHigh-Tag-NumberEnd of ContentsCertificateTypeCertificate BagC_VerifyRecoverC_GetObjectSizeC_EncryptUpdateC_DestroyObjectC_DecryptUpdateCK_SESSION_INFOCKT_NSS_TRUSTEDCKT_NOT_TRUSTEDCKR_PIN_INVALIDCKR_PIN_EXPIREDCKR_KEY_CHANGEDCKR_HOST_MEMORYCKO_PRIVATE_KEYCKO_CERTIFICATECKM_SHA512_HMACCKM_SHA384_HMACCKM_SHA256_HMACCKM_RC5_KEY_GENCKM_RC5_CBC_PADCKM_RC4_KEY_GENCKM_RC2_KEY_GENCKM_RC2_CBC_PADCKM_PKCS5_PBKD2CKM_DES_KEY_GENCKM_DES_CBC_PADCKM_CAST128_MACCKM_CAST128_ECBCKM_CAST128_CBCCKM_BATON_ECB96CKM_AES_KEY_GENCKM_AES_CBC_PADCKK_SHA512_HMACCKK_SHA384_HMACCKK_SHA256_HMACCKK_SHA224_HMACCKF_ERROR_STATECKF_ENCAPSULATECKF_EC_COMPRESSCKF_DECAPSULATECKA_OTP_COUNTERCKA_NSS_EXPIRESCKA_EXTRACTABLECKA_ENCAPSULATECKA_DESTROYABLECKA_DECAPSULATECKA_COEFFICIENTCKA_CHECK_VALUECKA_APPLICATIONBasicConstraint(not specified) -z noisefile -u certusage -t trustargs -n cert-name -@ newpwfile -8 DNS-namesx25519mlkem768verify_recoverrsa_pkcs1_sha1nonRepudiation --empty-passwordVisible StringSubjectAltNameSecurityDomainRSA Public KeyPolicyMappingsOut of memory Object SigningOIWSecSIG SHA1MechanismFlagsMask algorithmHash algorithmEncrypted DataDirectory NameML-DSA Public KeyC_VerifyUpdateC_GetTokenInfoC_EncryptFinalC_DigestUpdateC_DecryptFinalC_CreateObjectC_CloseSessionCKR_PIN_LOCKEDCKR_KEY_NEEDEDCKO_VALIDATIONCKO_SECRET_KEYCKO_PUBLIC_KEYCKO_HW_FEATURECKM_SHA_1_HMACCKM_ECDSA_SHA1CKM_BATON_WRAPCKK_SHA_1_HMACCKK_EC_EDWARDSCKF_RW_SESSIONCKA_VALUE_BITSCKA_START_DATECKA_RESOLUTIONCKA_PROFILE_IDCKA_PRIME_BITSCKA_OTP_LENGTHCKA_OTP_FORMATCKA_MODIFIABLECKA_MIME_TYPESCKA_HSS_LEVELSCKA_EXPONENT_2CKA_EXPONENT_1CKA_ATTR_TYPESBag AttributesAvailableSizesAuthorityKeyIDAttribute TypeAttribute (%x)Attribute (%d) -q paramset -n key-name -k key-type -g key-size -P dbprefix -8 dnsNames--upgrade-mergesource-prefixout of memoryocspResponderobjectSigningkeyOpFlagsOffYou entered: Unknown %04x Serial NumberRegistered IDOIWSecSIG DSAKey AgreementKDF algorithmIs not a CA. Encrypted KeyEncipher OnlyEmail Flags: Decipher OnlyC_VerifyFinalC_SignRecoverC_OpenSessionC_GetSlotInfoC_GenerateKeyC_FindObjectsC_EncryptInitC_DigestFinalC_DecryptInitCRLDistPointsCK_TOKEN_INFOCKR_MUTEX_BADCKR_CANT_LOCKCKO_NSS_TRUSTCKO_NSS_SMIMECKO_MECHANISMCKM_RSA_X_509CKM_RSA_X9_31CKM_RIPEMD160CKM_RIPEMD128CKM_CAST5_MACCKM_CAST5_ECBCKM_CAST5_CBCCKM_CAST3_MACCKM_CAST3_ECBCKM_CAST3_CBCCKK_X2RATCHETCKK_NSS_PKCS8CKK_GOSTR3411CKK_GOSTR3410CKK_GOST28147CKF_EXTENSIONCKA_VALUE_LENCKA_UNIQUE_IDCKA_SENSITIVECKA_OBJECT_IDCKA_NSS_TRUSTCKA_NSS_PQG_HCKA_NSS_EMAILCKA_HAS_RESETCKA_EC_PARAMSCKA_CHAR_SETSCKA_CHAR_ROWSCKA_AC_ISSUERBuildTemplate(indefinite) %s [Len: %d] %s (SHA-256):!Invalid AVA! token: %s -s subject -q pqgfile -d certdir -Z hashAlg --extSKID slot: %s uri: %s sign_recoverkeyOpFlagsOnkeyAttrFlagskeyAgreementdump-ext-valX400 AddressValue (%d)%sSubjectKeyIDSessionStateSessionFlagsSMIME RecordQuitIfStringPrivate: %d Octet StringDisplay TextCertCategoryC_VerifyInitC_SignUpdateC_SeedRandomC_InitializeC_DigestInitCK_SLOT_INFOCK_MECHANISMCK_ATTRIBUTECKR_NO_EVENTCKM_SEED_MACCKM_SEED_ECBCKM_SEED_CBCCKM_RSA_PKCSCKM_RSA_9796CKM_MD5_HMACCKM_MD2_HMACCKM_IDEA_MACCKM_IDEA_ECBCKM_IDEA_CBCCKM_FASTHASHCKM_DES3_MACCKM_DES3_ECBCKM_DES3_CBCCKM_CDMF_MACCKM_CDMF_ECBCKM_CDMF_CBCCKM_CAST_MACCKM_CAST_ECBCKM_CAST_CBCCKM_AES_CMACCKK_X9_42_DHCKK_SKIPJACKCKK_POLY1305CKK_MD5_HMACCKK_CHACHA20CKK_CAMELLIACKK_BLOWFISHCKF_GENERATECKA_SUBPRIMECKA_OTP_TIMECKA_KEY_TYPECKA_END_DATECKA_EC_POINTCKA_COPYABLEAttribute ID%s Subtree: -k key-id -f pwfile -d moddir -d keydir -@ pwfile --extSIA --extAIA Enter data:ipsecTunnelipsecIKEEndunextractablecodeSigningcertSigning--build-flagsUTF8 StringNetscape Trusted CA This UpdateSetTemplateSalt lengthSSL Flags: RFC822 NamePublicValueEncrypted Private KeyPolicy NamePRIVATE KEYNext UpdateNewTemplateLength: %u FingerprintCurrentSizeCertificateC_UnwrapKeyC_SignFinalC_InitTokenC_DigestKeyC_DeriveKeyCRL SigningCKT_TRUSTEDCKO_PROFILECKO_OTP_KEYCKO_NSS_CRLCKM_RC5_MACCKM_RC5_ECBCKM_RC5_CBCCKM_RC2_MACCKM_RC2_ECBCKM_RC2_CBCCKM_DES_MACCKM_DES_ECBCKM_DES_CBCCKM_AES_ECBCKM_AES_CBCCKK_TWOFISHCKK_SLH_DSACKK_SECURIDCKK_SALSA20CKK_JUNIPERCKK_CAST128CKK_AES_XTSCKF_HW_SLOTCKF_ENCRYPTCKF_EC_F_2MCKF_DECRYPTCKA_TRUSTEDCKA_SUBJECTCKA_PRIVATECKA_PRIME_2CKA_PRIME_1CKA_PIXEL_YCKA_PIXEL_XCKA_NSS_URLCKA_NSS_KRLCKA_MODULUSCKA_ENCRYPTCKA_DECRYPT: error %d %-60s %-5s -p phone -i input --extPM --extPC --extNC --extIA --extCP upgrade-idsource-dirserverAuthprime239v3prime239v2prime239v1prime192v3prime192v2prime192v1nsCertTypeunmodifiableextGenericdsa_sha512dsa_sha384dsa_sha256curve25519crlSigningclientAuthc2tnb431r1c2tnb359v1c2tnb239v3c2tnb239v2c2tnb239v1c2tnb191v3c2tnb191v2c2tnb191v1c2pnb368w1c2pnb304w1c2pnb272w1c2pnb208w1c2pnb176v1c2pnb163v3c2pnb163v2c2pnb163v1c2onb239v5c2onb239v4c2onb191v5c2onb191v4TokenFlagsT61 StringServerNameSecret KeySecret BagSSL ServerSSL ClientEC Public KeyDomain ParametersNot BeforeNot After NewInitArgNested BagNSCertTypeKey LengthIterationsIP AddressIA5 StringCRL ExtensionsEnumeratedEncryptionC_SignInitC_FinalizeCRL issuerCKR_CANCELCKK_XMSSMTCKK_ML_KEMCKK_ML_DSACKF_VERIFYCKF_UNWRAPCKF_EC_F_PCKF_DIGESTCKF_DERIVECKA_VERIFYCKA_UNWRAPCKA_NSS_DBCKA_ISSUERCKA_DERIVEBit StringBMP String%s Attributes: error %d-----BEGIN%s (SHA1):%s: %d (0x%x) (encoded) -n name -b timevariablestimeStampsslServersslClientinsensitivesect571r1sect571k1sect409r1sect409k1sect283r1sect283k1sect239k1sect233r1sect233k1sect193r2sect193r1sect163r2sect163r1sect163k1sect131r2sect131r1sect113r2sect113r1secp521r1secp384r1secp256r1secp256k1secp224r1secp224k1secp192r1secp192k1secp160r2secp160r1secp160k1secp128r2secp128r1secp112r2secp112r1secmod.dbipsecUserconstantsValid CA SlotFlagsdigitalSignatureSetStringSequence S/MIME CAPermittedOTPFormatNewMechanismML-DSA-87ML-DSA-65ML-DSA-44InfoFlagsIncrementEDI PartyDecrementC_WrapKeyC_InitPINC_GetInfoC_EncryptC_DecryptCKO_TRUSTCKM_SHA_1CKM_EDDSACKM_ECDSACKK_ECDSACKK_CAST5CKK_CAST3CKK_BATONCKH_CLOCKCKC_X_509CKA_VALUECKA_TOKENCKA_PRIMECKA_OWNERCKA_LOCALCKA_LABELCKA_COLORCKA_CLASSBag ValueAuthorityAttribute.netscape%s Digest%.900s/%s -y expnistp521nistp384nistp256nistp224nistp192nistk571nistk409nistk283nistk233nistk163nistb571nistb409nistb283nistb233nistb163keyUsageipsecIKEipsecEndinternalexternalecdsa_sha1not-criticalVariableValidityUsages: Trusted SubprimeStep-up SequenceReservedPoliciesOTPParamNot!UsedNewArrayLocationextKeyUsageHardwareExponentExcludedDNS nameCriticalC_VerifyC_SetPINC_LogoutCK_ULONGCK_FALSECKU_USERCKO_DATACKK_XMSSCKK_SEEDCKK_IDEACKK_HOTPCKK_DES3CKK_DES2CKK_CDMFCKK_CASTCKK_ARIACKK_ACTICKF_WRAPCKF_SIGNCKC_WTLSCKA_WRAPCKA_SIGNCKA_SEEDCKA_BASE-----END(empty) %s Value%s : %s %.900s%sx509AnyunnamedunknownsmimeCAsessionprivatemldsa87mldsa65mldsa44extSKIDencrypted25519decryptcertVersionUnknownSubjectSafe %dSSL_DIRRestoreReasonsModulusMinimumMaximumIntegerContextCommentC_LoginCK_TRUECK_INFOCKO_NSSCKM_RC4CKM_DSACKK_RSACKK_RC5CKK_RC4CKK_RC2CKK_KEACKK_HSSCKK_DSACKK_DESCKK_AESCKF_RNGBoolean%s: (null) (none) (empty)%lu %u %-20s mlkem768x25519verifytls1.3tls1.2tls1.1tls1.0syntaxstepUp--renamepublicextSIAextSANextAIAderivearraysUnloadSystemSSL CACKM_SHA512CKM_SHA384CKM_SHA256SHA224S/MIMEResultQuitIfC_CopyObjectMethodKey IDIssuerFF8192FF6144FF4096FF3072FF2048C_DigestDeleteCipherC_SignCKU_SOCKR_OKCKK_ECCKK_DHCKF_HWCKA_IDBag IDNested Bag %d(NULL)%.900s%-20s -e -6 -5 -4 -3 -2 -1 %s tokensslCAsmimesizesnone new-n--mergeextPMextPCextNCextIAextCPemailed448[%d] [%d] UsersUser TrustPrintPrimePoint%s: NULL LabelFalseErrorCurve%s: %s 0x%lx(%d) %s: %s/%s%s ID%02x:%02x -x -a -Xunwrapssl3 --pss-signhelp%s: [%d]UTF8KeyTypeTrueUTC TimeSet SaveMac SaltAuthSafeCKM_DSA_SHA1QuitP521P384P256NoneOther NameNULLLoadC_GetSlotListHelpHOMERevocation DateMac DataBoolBaseArgs: %s0x1D0x1B0x190x150x120x0F0x0E0x0D0x0B0x090x080x07%s{ %s: CERT %d. %s %s: %s%s%lu \x%02x"%s" -%c%s %s %s rsa --pssmldsaanyallCKA_URLCKA_VALIDATION_VENDOR_URIParameter SetLoopRunRDN --dump-ext-val OIDMacCKM_MD5MD4CKM_MD2CKM_AES_MACCKK_HKDFCrlCrl Bag%s %s > " } ecC- 0x%c%s ( |Raw -r-W-V-U-T-S-R-O-N-M-L-K-G-F-E-D-C-B-A%s:,(%s) "%s" [%s] {D&@6@PBF@{D(D DV@f@v@@@@@ƾ@־@@@@@&@6@F@V@f@v@@@@@ƿ@ֿ@@@@@&@6@F@DV@f@KAEv@@A@A@@VAlA@aAAAwA@@@@@@&@6@F@AV@f@v@@@@@@@@@@@&@6@F@V@f@v@@@@@@@@@@@&@6@F@V@f@v@@@@@@@@@@@&@6@F@V@f@v@@@@@@@@~DD~DD@@@&@6@F@V@f@v@@@@@@@@@@@&@6@F@V@f@v@@@@@@@@@@@&@6@F@V@f@v@@@@@@@@@@@&@6@F@V@f@v@@@@@@@@@@@&@6@AF@V@f@v@@@@@@@@@@@&@6@F@`BV@f@v@@@@@DB@@@@@@&@6@DF@V@f@v@@@@@@@@@@@&@6@F@V@Af@v@@@@@@@@@@@`C&@6@ DDF@V@f@v@@@@@@@@@@@&@6@F@V@BBf@v@@@@@@@@@@@&@6@F@V@f@v@@***4)*R*_**s* OB PB**'@j@ -=@ `@6@`h4``(@`omUo@oX~D`~D(@@P  o``>pD@0@XM /dev/ttydCdC3mCUChC-mCiCLC?`C`C\CLCcCUCkC=CiCgC\C3CgC\CzeC eCLQCLCGCYC\C`CCE`D012345678abcdefghiqmCjklmnopPqrstuvwxXyzZ@kCkCkmCSmCYmCemC_mC+jCgC`ChC4`CTC)`C=CYC UCYC`QCKjCkC(YC`CEmCwoC$nC,=CACDEFGH-nCkCKLMNORSTUVWYBMmCTCkC\CjCpCvYCmC#GCnC]CbCA]CaCHC(bCeCdCgCdCdCgCdCdCvdCgCldCgCbdCXdCgCNdCgCDdCgC:dCgC0dCgC&dCgC>eC4eC*eC eCeCgC eCeCgCdCdCvgCdCmgCdCdgC`Cv`Ck`C``CU`CJ`CaCaCaCuaC>aC3aC(aCaCaCjaCaCaCaCaCaC_aCTaC`CIaC`CfeC\eCReCHeCdCdCdCdC`Cc@B B BoMC7kCjC}cCYCnCBC)oC$oCoCbCoC\CoCoC oCfhCoCoCMHCaCoCbCMnCHCnCoQCnCHCnCcC_MC *B,C %BBC B)C BfUC BXB BQC B)C BB B,C B B B C بB &C ȨB ЦB B 5C B B B C B C xB QC hB C `B^HC XBV/C PB "C MB B JB@B @B wC 0B `B B B B B B اBcC8BeCBkC B9mCXBYCxB bCB LfCB{CCB nCBVCBSRC0Bo>CB>C سB ]C ȴBBfC BhC xBUC BRCHB>CȸB*IC8B,9CعB9CȺBjCBhCؼBRC8B 0lC(B MChBMCBT9CB 9CB CCB >CBVCxB*VCB MC BbRC!BVfCBFVC"0B MC$BRC%PB`fC#(BYC&`B qRC(B]C)B8VC*BulC'BbC+B YC-8B]C.pBiCC/pB UC0xBlC,BYC1B DRC3BUC4B8C5B MC6BhC2B/C7 B/C8B8C9B/C:BCC<B  VC;B 8fC=B ]C>B  ]C?B  YC@pB;ICAXB@9CB(BLICCB\>CDxBhCGxBPbCH@Bq]CIBeCJB>XCKB \CLxB eCFxBoCE BmCMB~lCRBnCUhB[nCNBwjCOhBfCPB.fCQHBnCS5)CkCVBoCTBQnCYB@kCWLCoCX@BnCZB )lC\BYC]pBnC[-CiCjCECi6C^C/kC\;C@C.'CC @C@B C1COCE.C..Cp;CCT6C?6C EC@G'COC`'C-CRSC@CFClC;C;C(KC@CEC 9KC@ _C!_C0cCiCKCcC @C@[C2CwiCcC;cC%cC_C ;C@ECECOCOC OCWCCEClC iC4C^0C H0C 20C 0C |9C iC oNC RC _NC RC RC $1C VC ^C ^C jfC RC ^CQCS VCRCS VCSCS #CTCS 1C fC @C jC kC lC fC lC J[C kC p@C jC jC kC JiC AiC \iC fC fC ^C jC /iC W[C fC ^C SiC 'kC [C ^C! ^C" niC$ 8iC# [C% &iC/ eiC& q[C' 4SC( ]@C) J@C* OC+ OC, OC- OC. lWC0 ^WC1 zWC2 ~[C3 d[C4 ^C5 sEC6 aEC7 OEC8 =EC9 *6C: 6C; 6C< 5C= ^C> BWC? CSC@ ECA oCB H;CC 4;CD +ECE kCF cCJ bCI ^CK iCG bCH PWCQCS fC ;C iC 0CXCCCCCCC/Cu"CIC3C3C/C1-CgC fCE_CgCWCPCfCWC7C gcCFC0XCfCTC-_C(CWCoC0CuC]+CPC[C 9_ClCWC_C_CiCQcCiC}KC FcC AC rcC pSC[C_C KC!8Cb+#Cc?Cd?NCeRCf\4CgCh0Ci0Cj0CpiCq#C24CgC DCNCCC/NCRC>CCCCC0C>CgCC0C *C)C"C0Cf&C"CC+C8CdCH-CJCt0C`C)C)C"CCMCCIC CC!y#C0q4CP%*C`E#Cp4CCCpVCG4C>CMCQCS"CRCSh9CZCS"CSCS0CUCS)C[CS]CnICNC1CCC)C.C D(! @C=QCGCGCGC hC,Cy,Cb,C7C7C7C;jCwmCx=C e=C R=C hC `C `C `C#jC jC jC nCnCnCskCnlCglC`lCYlCRlCQC[BC?=CkkC!CCMCHC3CCtUC8C]CUCUCbCbClCQCohCkCeCoHCxH0 x'mCjC jCkC`C `C dC @dC \C \C 3jCCjC(nCXC zkC .QC@nCnCkCLCnCnCfCeCaCiYCQCOMCmC\YC6lChC@nCMC2gCeC"lCmC3TCYCQCeChC]CnC0hChCnC;nCjCZCbVCMCZCZCCC3C]ICDD DDD@@@'@@6@=@j@@ `@ (@ @ @ @@OBPB PBpD{DX~D`~Dp~D~D~DDD D',E-~D:@B~D")5BIP\ju~D@@@4DX~D0@`~D 2@o@z5@G@U@b^ @o@dyi@ @D@ D~DHpC'hC(PBu\CPB QBPQBC6>C CpQB_jC(gC#hC)QB/RB5HC;RBA`SBGSBMPCSSBYTC_MCe0TBkpTBqBTCwTB}TB UBOYC["CVBVBHUBUBTVCfbCWBBCXBYBWBxXBxhCM)C[BYBYB(ZBPZB@[B HYBoCxZBZB%QC+[B1p[B7[B= \BCBCI\BO]BU`]B[HCa]BgCm]Bs#hCy,C C~QCZBpCCAq A=#,Ax&-A.Az@2A3Ap ПB U7A)+8A<B9ADD(UD@c0Di0DABwD E  D``D`DB,`D@DPC^BPC^BC^B@_B_B+C LpCEtBLtBSoCZuBa\Ch\CohuBvkpC}jpCuBuBvBhpCgpCPvB[QCvB\pC[pCvBvBACwBepCdpCHwBpwB'=C wBbpCapCxB%XC,0xB3kLC:`xBAz7CHxBOxBVroC] yBdhyBkyBr_CyyB(zBpzBckCzBVpCUpCCzBcC{BlC8{BPC`{B2C2CLCGGCYGC e7C +C !C {B! A(C( SpC/ RpC6 {B= {BD |BK PCR 0|BY TC` TCg p|Bn |Bu |B| 8}B ,C x}B aC }B Z(C }B C 8~B N\C x~B MmC KmC ~B ~B 8B xB B _pC ^pC B TC (B PB$ mC+ B2 lC9 B@ lCG BN GCU QC\ Bc h\Cj HBq [\Cx B `C B _C B _C B `C HB XC xB `C B ؂B B PB B ؃B (B B ЄB B PB ЅB 7C' (C. K,C5 M%C< )CC doCJ ]CQ ECX %C_ Bf M&Cm ;Ct B{ =C +HC 3C (C B UoC 3C AC 3%C :pC TC  B C PC @B B hB ioC HB pB B 4,C mC =C# B* iC1 iC8 hC? BF BM @BT B[ 2Cb Bi `Bp Bw B~ 0B `B B B B B PB B B B @B B B B (B PB B BC ؐB B pB (B B B& ȔB- >C4 G3C; noCB }oCI &pCP {oCW oC^ Be  Bl HBs xBz B (B PB '"C xB ,C HB .UC _oC pC B B  B `B B ЗB B XB B BHB BBB"B)peC0PB7LC>BEqCLBSCZBaPpChVCo7BCvC}YCC!CCpC8CpCBCkCXCXCXC(C8B C`BACCCB g%C%BC=CiC%B,ЛB3B:(BA!CHCOXBVB]BdBkBrPBy=!CpBBȝBB8BBBbCBBC mCB&C%CA DDP-@B/ B BCBPBBРBBPBEpCpC B%fCCСBCC[BeCeC1=A*D~D3oCnCcCmCpC_CpCiC UoCmCZXC[mCcC%?kCCkCcCCLCqpC_oCMoC5oC#znC)lC/ lC;lCAkCG:pCP[ϩAhEuUASA|$AKoAA'A+@DpCpCmCZoCBpCpC)pCYCpCpCCmC }mC[LXCKC%[kCNoCpC@DX*B%B BB#B0B8 BCBSB^B cB hبB mȨB rB yB B B xB hB '`BXBPBMBJB@B 0B  B B B D D1@CmCW8CA"CYC@/C*/CM]C:bCEbC CNCCWaAsAg(EAAAFAAl~D @E$@ E+( E5@E;AwQcAsAoABAAvA}\A-A`D@"DP,BiABYSBFtB!Bi .BD8 E D(E 7kCHnCmCmC3oC;7CCnCkC kCkCkC[pCCPpCJpC%(CPCCChC_CqC5HCMC#xC/\3C) C;8CAP CGx CY#>CSCe CkojCw?pCmC}IoCnChCL-CShCE=lCZOjCacCh7Co9hCv(C}HCmBCBCIC CoTCCHCC`TCq3CUClC_CQTCKCbCcCu3CRC hXCcC]CeC%\C3BC:nCAHCHbC,e]COC( IC/ !C6 C= CD !CK (CR CY C` 8Cg wlC| mnCn gjC pCu lC q!C %C W!C ,C })C C /C l/C C k8C  HC 3C WCC  C C -C C (C PC+ mC (C 8oC$ ILC C2 5GC9 &@Y&@p&D@x&@&п@&@&A &D&/B'sB"'@C'@T'u'@'B'A'A'7A'@(@#(D4(P@J(@[(@v(@( @(0@( Bc(A?(Aq&D(@)@)@6)@=) BW) Df)@&@@~)@)) Ai)D )~D)@)@@)GB*A*@AU -*~D4*P@,%DpM*@d*{* @* @*@* @*! D*@* +0@&+@-+A;+@f+P@+@+4AT+@@+@@+ @N+A +p@+`@,@,`@1,A@,@V, k,@ %@,@@,xA,,A,@ -D-@3-BH-A^-p-AR~-@AD-@-0@-@- @* D-`@-0@.@.*@Af..@?.r/BZ.@b.Co.AAz.`@.@@.`@.C.@.@.Aw.~D.A/@0/@B/p@V/@]/ @q//&8B//A p@/@@/C02B$0n7B10@N0Bc0`@s0@0@0qAy0P@0D07B0@0@0@1@*1@51@E1@X1Af1 PBs10D1p@10@1`@})@1@1P@1@2@+2@N2`@c2 @A 2@~+@A 2@2AB@2"@2B62 @2 BAI2@2¶A3@t@3p@3`C03A2F30@M3`@n3(Dv3@3@3A%3@3P@3A.3p@4@%43VA 64@D4@M40@b4CBCu4.Ao4{D4@4@4@4@4@5@50@A5CL5@`5٦A8~5@5/BOB5)A5 5B@5AB5Ag6@6AB*6@86@?6@d6Bz6E B6Q B6p@6 @6HB%6 7@7@ 7.;B370ABxN7@@b7,Eg7@{7 @7A7@7@7@7@7`B$(D!80@G8@X8@ 8A n8cA8QDB8@88о@8P@8`@8 8A9@19AA9bA/O9@Z90@a9@@|9u@[../../../../../dist/bin/certutilcrt1.omach-crt1.Scommon-crt.ccrtp.ccrti.svalues-Xa.cvalues-xpg6.ccrtstuff.c__TMC_LIST__deregister_tm_clones__do_global_dtors_auxcompleted.0__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entrycertext.cGets_sPrintChoicesAndGetAnswerparseNextCmdInputparseKeyUsageGetYesNoAddOidToSequenceGetStringGetGeneralNameAddSubjectAltNameskeyUsageKeyWordArrayextKeyUsageKeyWordArraynsCertTypeKeyWordArray.LC0.LC1.LC2.LC3.LC4.LC5.LC6.LC7.LC8.LC9.LC10.LC43.LC44.LC24.LC25.LC26.LC23.LC27.LC28.LC29.LC22.LC31.LC30.LC21.LC32.LC33.LC20.LC34.LC35.LC36.LC19.LC38.LC40.LC41.LC37.LC39.LC18.LC17.LC42.LC16.LC46.LC48.LC45.LC47.LC15.LC53.LC60.LC51.LC52.LC54.LC55.LC61.LC49.LC50.LC56.LC57.LC14.LC64.LC62.LC63.LC65.LC13.LC66.LC67.LC68.LC12.LC69.LC70.LC72.LC71.LC73.LC74.LC11.LC58.LC59.LC75certutil.cluCommonDetailsAELongUsageoutputCertOrExtensionPK11_ListCertsformatPrivateKeyIDListKeysInSlotorphan.0CERT_ChangeCertTrustfindPrivateKeyByIDCertReqobjNSSClassArrayobjClassArraybuf.3certutil_maincommands_initcertutil_commandsoptions_initcertutil_optionsfmt.1certutil_extnsnullextnlist.2.LC76.LC77.LC78.LC79.LC80.LC81.LC82.LC83.LC84.LC85.LC86.LC87.LC88.LC89.LC90.LC91.LC92.LC93.LC94.LC95.LC96.LC97.LC98.LC99.LC100.LC101.LC102.LC103.LC104.LC105.LC106.LC107.LC108.LC109.LC110.LC111.LC112.LC113.LC114.LC115.LC116.LC117.LC118.LC119.LC120.LC121.LC122.LC123.LC124.LC125.LC126.LC127.LC128.LC129.LC130.LC131.LC132.LC133.LC134.LC135.LC136.LC137.LC138.LC139.LC140.LC141.LC142.LC143.LC144.LC145.LC146.LC147.LC148.LC149.LC150.LC151.LC152.LC153.LC154.LC155.LC156.LC157.LC158.LC159.LC160.LC161.LC162.LC163.LC164.LC165.LC166.LC167.LC168.LC169.LC170.LC171.LC172.LC173.LC174.LC175.LC176.LC177.LC178.LC179.LC180.LC181.LC182.LC183.LC184.LC185.LC186.LC187.LC188.LC189.LC190.LC191.LC192.LC193.LC194.LC195.LC196.LC197.LC198.LC199.LC200.LC201.LC202.LC203.LC204.LC205.LC206.LC207.LC208.LC209.LC210.LC211.LC212.LC213.LC214.LC215.LC216.LC217.LC218.LC219.LC220.LC221.LC222.LC223.LC224.LC225.LC226.LC227.LC228.LC229.LC230.LC231.LC232.LC233.LC234.LC235.LC236.LC237.LC238.LC239.LC240.LC241.LC242.LC243.LC244.LC245.LC246.LC247.LC248.LC249.LC250.LC251.LC252.LC253.LC254.LC255.LC256.LC257.LC258.LC259.LC260.LC261.LC262.LC263.LC264.LC265.LC266.LC267.LC268.LC269.LC270.LC271.LC272.LC273.LC274.LC275.LC276.LC277.LC278.LC279.LC280.LC281.LC282.LC283.LC284.LC285.LC286.LC287.LC288.LC289.LC290.LC291.LC292.LC293.LC294.LC295.LC296.LC297.LC298.LC299.LC300.LC301.LC302.LC303.LC304.LC305.LC306.LC307.LC308.LC310.LC309.LC314.LC311.LC312.LC313.LC315.LC316.LC317.LC322.LC323.LC324.LC325.LC318.LC319.LC320.LC321.LC326.LC327.LC328.LC330.LC329.LC331.LC333.LC334.LC335.LC332.LC341.LC340.LC342.LC343.LC336.LC337.LC338.LC339.LC344.LC345.LC347.LC346.LC348.LC349.LC351.LC352.LC353.LC354.LC355.LC356.LC357.LC358.LC359.LC360.LC361.LC362.LC363.LC364.LC365.LC366.LC367.LC368.LC369.LC370.LC371.LC372.LC373.LC374.LC375.LC376.LC377.LC378.LC379.LC380.LC381.LC382.LC383.LC384.LC385.LC386.LC387.LC388.LC389.LC390.LC391.LC392.LC394.LC395.LC396.LC397.LC398.LC399.LC400.LC401.LC402.LC482.LC483.LC403.LC404.LC405.LC406.LC407.LC408.LC409.LC410.LC411.LC412.LC413.LC414.LC415.LC416.LC417.LC418.LC419.LC420.LC421.LC350.LC429.LC422.LC423.LC428.LC424.LC477.LC425.LC426.LC427.LC430.LC431.LC432.LC433.LC437.LC434.LC435.LC436.LC438.LC439.LC440.LC441.LC443.LC442.LC444.LC445.LC446.LC447.LC448.LC449.LC451.LC454.LC450.LC452.LC453.LC455.LC456.LC457.LC458.LC459.LC460.LC461.LC462.LC463.LC464.LC465.LC467.LC466.LC468.LC469.LC470.LC472.LC474.LC471.LC473.LC475.LC476.LC478.LC479.LC480.LC481.LC393keystuff.cCERTUTIL_FileForRNGnameTagPairdefault_pqg_paramspadOCSPQbasicutil.cnibblewrapEnabledderprint.cprettyIndentprettyColumnprettyNewlineprettyPrintByteprettyPrintLeafprettyPrintStringStartprettyPrintTimeprettyPrintItemprettyTagTypeffs.cmoreoids.coidsoiwMD5RSAoiwDESCBCoiwRSAsigoiwDSAoiwMD5RSAsigoiwSHA1oiwDSASHA1oiwDSASHA1paramoiwSHA1RSAmCTLmTSSmSGCmEFSmSMIMEmECRTTmEAGNTmKPSCLmNTPNmCASRVpadCAissuerpadTimeStampcePlcyObscePlcyCnsvcx7vcp1vcp2vcp3vcp4pk11table.cpppolicy.csecu_CertificatePoliciesTemplatesecu_PolicyInfoTemplatesecu_PolicyQualifierTemplatesecpwd.csecutil.csecu_PrintBooleansecu_PrintRawStringQuotesOptionalutf8DisplayEnabledsecu_PrintTimesecu_PrintDecodedBitStringprintStringWithoutCRLFSECU_GetSSLVersionFromNamecountItemsconsoleNamesslDir.5path.4initted.3buf.2secu_PrintOctetStringSECU_ExtractBERAndStep.localaliassecu_PrintValiditySECU_PrintSetsecu_PrintAttributesecu_PrintPKCS7EncContentsecu_PrintSubjectPublicKeyInfosecu_PrintGeneralNamesecu_PrintNameConstraintSubtreensTypeBitsusageBitssecu_PrintSignerInfosecu_PrintRecipientInfosecu_PrintSignedDataSigOptsecu_PrintPKCS12Bagsecu_PrintPKCS7ContentInfosecu_PrintDERPKCS7ContentInfosslNamedGroupStringArrayunknownBuf.1sslSignatureSchemeStringArrayunknownBuf.0__FRAME_END__crtn.s_END___dso_handle_START___TMC_END__SECU_PrintEncodedObjectIDPK11_HasAttributeSetCERT_NameToAsciiPK11_HashBufCERT_CreateCertificatePORT_ArenaAlloc_UtilPK11_FindCertsFromEmailAddressPL_ArenaFinishSECU_PrintCertAttributeCERT_FinishExtensionsPORT_DestroyCheapArenaPK11_GetPrivateKeyNicknameSECU_PrintMLDSAPublicKeySECU_PrintPolicySEC_DestroyCrlSECU_AppendFilenameToDirSECITEM_AllocItem_UtilPORT_ArenaGrow_UtilCERT_EncodeUserNoticeprogNameSEC_BlindCheckPasswordPK11_GetAllTokensSECU_PrintFingerprintssecu_PrintRSAPSSParamsPK11_IsInternalCERT_DecodeBasicConstraintValueEXTEN_EXT_VALUE_ENCODER_CERT_EncodeCertPoliciesExtensionPK11_GetTokenNamePK11_FindKeyByKeyIDPK11_GenerateKeyPairWithOpFlagsCERT_DecodePrivKeyUsagePeriodExtensionSECU_PrintTimeChoiceSECU_PrintTrustFlagsPK11_RandomUpdatestrchrPK11_GetFirstSafeEXTEN_EXT_VALUE_ENCODER_CERT_EncodeAltNameExtensionPK11_IsRemovableEXTEN_EXT_VALUE_ENCODER_CERT_EncodeInhibitAnyExtensionPR_FormatTimevfprintfCERT_DupCertificateSSL_ExportKeyingMaterialisprintPR_smprintfPR_ErrorToNameDER_GeneralizedTimeToTime_UtilSEC_ASN1DecodeItem_UtilCERT_HexifyCERT_AsciiToNamesecu_StdinToItemPR_ExplodeTimeCERT_EncodeAndAddBitStrExtensionAddExtensionsPK11_SetPasswordFuncPR_OpenCERT_GetGeneralNameTypeFromStringSECU_GetWrapEnabledCERT_NewTempCertificate_finiSECKEY_DestroyPublicKeySECKEY_GetPrivateKeyTypeSECU_GetOptionArgSEC_ASN1EncodeItem_UtilCERT_DecodeAuthKeyIDSECU_ParseSSLVersionRangeStringprintableCERT_AddExtensionCERT_SaveSMimeProfilePORT_Alloc_UtilCERT_CreateCertificateRequestPR_ReadPR_CleanupCERT_DecodeCRLDistributionPointsCERT_DestroyCertificatePoliciesExtensionPL_strlen_constsCERT_CreateValiditySEC_ASN1Decode_UtilSECU_PrintUTCTimeCERT_DestroyCertificateRequestsecu_InitSlotPasswordCERT_FindCertByNicknameOrEmailAddrCXopFlagsCountSECU_PrintStringPORT_GetError_UtilPORT_Free_UtilSECOID_FindOIDByTag_UtilSECU_NewlineSECU_PrintCertNicknameSECU_FindCertByNicknameOrFilenameEXTEN_EXT_VALUE_ENCODER_CERT_EncodeNameConstraintsExtensionEXTEN_EXT_VALUE_ENCODER_CERT_EncodeInfoAccessExtensionCERT_DecodeAltNameExtensionSECU_EncodeAndAddExtensionValueSECU_SignAndEncodeCRLSECU_printCertProblemsSECKEY_RSAPSSParamsTemplateDumpMergeLogPL_strfreeCERT_DestroyNamestrtokfopenstrtolhexGetAttrFlagsPL_strcmpCERT_CertChainFromCertPR_GetOSErrorPR_snprintfPR_GetEnvSecure__environ_lockstrrchrPR_NetAddrToString_etextatexittcsetattrCERT_IsUserCertDER_UTCTimeToTime_UtilSECU_EnableUtf8DisplayCERT_CreateSubjectCertListsecu_PrintPBEParamsNSS_InitializetotalKnownTypeCERT_DestroyCertListSECU_SignatureSchemeGetNextSchemeSECU_RegisterDynamicOidsPR_GetSpecialFDSSL_OptionSetDefaultPL_strndupSECITEM_CompareItem_Util__iobSECU_PrintCertificateRequestCERT_CertificateRequestTemplateSECU_FilePasswdPK11_CheckUserPasswordSECU_PrintSystemErrorCERT_DestroyUserNoticeSECU_PrintEncodedIntegerSECU_ecName2paramsATOB_AsciiToData_Utilsecu_PrintPKCS5V2ParamsCERT_SequenceOfCertExtensionTemplateSECOID_SetAlgorithmID_UtilCERT_GetCertTrustSECU_PrintCrlPK11_DeleteTokenCertAndKeySECOID_GetAlgorithmTag_UtiltopicCountPORT_ArenaRelease_UtilCERT_VerifyCertificatePK11_ListPrivKeysInSlotSECKEY_DestroyPrivateKeyPR_GetErrorTextschemeNameToSchemeSECU_StoreCRLSECU_PrintPRandOSErrorNSS_ShutdownSEC_QuickDERDecodeItem_UtilSEC_CheckPasswordSECKEY_ConvertToPublicKeyCERT_SignedDataTemplatePORT_ArenaStrdup_Util__stack_chk_failCERT_DestroyOidSequencePK11_ResetTokenSECOID_FindOIDTagFromDescriptonSECU_PrintRSAPublicKey_GLOBAL_OFFSET_TABLE_CERT_GetStateNameSECU_PrintDSAPublicKeySECU_DefaultSSLDirCERT_GetCertKeyTypePK11_AuthenticateBTOA_DataToAscii_UtilCERT_CheckCertUsageCERT_CertificateTemplateparseGroupListSECU_IndentSECU_GetPasswordStringSECU_PrintPKCS12PR_NowDER_AsciiToTime_UtilSECKEY_DestroyPrivateKeyList_edataPR_smprintf_freeSECU_cert_fetchOIDPK11_DeleteTokenPrivateKeyPR_ClosegetcSECU_TextFileToItemSECU_FileToItemSECU_SECItemToHexSECU_PrintSetOfAnyEXTEN_EXT_VALUE_ENCODER_CERT_EncodeBasicConstraintValue_valueStringCERTUTIL_GeneratePrivateKeySECU_PrintDERNameSECU_GetUtf8DisplayEnabledSECU_PrintNameQuotesOptionalCERT_GetFirstEmailAddressPR_WritePL_strncasecmpPK11_GetLowLevelKeyIDForPrivateKeySECOID_FindOIDTagDescription_UtilPR_StringToNetAddrSECU_ReadDERFromFileSEC_ASN1EncodeInteger_UtilSECITEM_ZfreeItem_Util_topicsSECITEM_FreeItem_UtilPORT_Strdup_UtilPORT_Realloc_UtilEXTEN_EXT_VALUE_ENCODER_CERT_EncodePolicyMappingExtensionattrFlagsArraySEC_PrintCertificateAndTrustprintFlagsCERT_GenTime2FormattedAscii_UtilPK11_GetNextSafeSEC_GeneralizedTimeTemplate_UtilPR_GetOpenFileInfoSECU_PrintSubjectPublicKeyInfoSECU_StripTagAndLengthSECU_PrintDumpDerIssuerAndSerialSECU_PrintErrorSECKEY_CreateSubjectPublicKeyInfoSECMOD_OpenUserDB_constTypeStringCERT_DecodeUserNoticePK11_MergeTokensCERT_DecodeCertFromPackagePK11_IsFriendly_PROCEDURE_LINKAGE_TABLE_CERT_EncodeNoticeReferenceSECU_PrintCertAttributesgetNameSECU_PrintNameCERT_DecodeOidSequenceCERT_DestroyCertificateListPK11_GetAllSlotsForCertisattySECU_PrintSetOfExtensionssecuKDF2ParamsCERT_AddExtensionByOIDfputsCERT_CrlTemplateSECU_PrintMLKEMPublicKeyCERT_OidSeqTemplate__xpg4PK11_ImportCertCERT_GetCommonNameexportKeyingMaterialsSECU_GetModulePasswordSECU_PrintExtensions__xpg6CERT_GetCertEmailAddressCERT_DecodeTrustStringCERT_SignedCrlTemplateCERT_DecodeAuthInfoAccessExtension__fpstartPK11_FindKeyByAnyCertPORT_NewArena_Util_environPK11_DestroyMergeLog_ITM_registerTMCloneTableBTOA_ConvertItemToAscii_UtilfwriteSECU_ChangePWSECMOD_CloseUserDBEXTEN_EXT_VALUE_ENCODER_CERT_EncodeSubjectKeyIDEXTEN_EXT_VALUE_ENCODER_CERT_EncodeAuthKeyIDSECU_PrintErrMsgPR_GetErrorPL_strdupPK11_NeedLoginPR_IsNetAddrTypePK11_ListCertsInSlotSECITEM_CopyItem_UtilPK11_FindSlotByNameSECU_ChangePW2PORT_ArenaZAlloc_Util__start_crt_compilerCERT_FindCertByDERCertPK11_FindCertFromNicknameSECU_StringToSignatureAlgTagSECKEY_EncryptedPrivateKeyInfoTemplateSECU_ConfigDirectoryPR_GetErrorTextLengthopFlagsArrayCERT_GetNextNameConstraintSECU_PrintPrivateKeySECU_ParseCommandLineCERT_NameTemplateSECU_PrintRDNGetFlagsPORT_SetError_UtilPORT_ArenaMark_UtilPK11_GetTokenURIPK11_IsPresentPK11_GetSlotFromPrivateKey__PK11_SetCertificateNicknameCERT_GetNextGeneralNamegetObjectClassPORT_ZAlloc_UtilSECU_PrintPKCS7ContentInfoisspacecommandCountGetOpFlagsfgetsSECKEY_ExtractPublicKeytolowervalueCountstrpbrkPK11_ReadRawAttributeSECU_PrintEncodedBooleanattrFlagsCountSECU_HexString2SECItemCERT_FinishCertificateRequestAttributesCERT_GetOidStringPORT_InitCheapArenafflushSECOID_FindOID_UtilCERT_SubjectPublicKeyInfoTemplateSECU_DerSignDataCRLSEC_ObjectIDTemplate_UtilSECU_PrintPrivKeyUsagePeriodExtensionPK11_GetInternalKeySlotconstTypeCountSECU_displayVerifyLogSECU_CopyCRLATOB_ConvertAsciiToItem_UtilSECU_PrintSignedDataCERT_GetOrgNameSECKEY_GetKeyTypeStringSEC_CreateSignatureAlgorithmIDSECU_PrintOidTagfputcsecuPBEV2ParamsprintflagsSEC_SignDataDER_GetInteger_UtilCERT_StartCertExtensionsPK11_FindCertInSlot_start_crtPK11_IsLoggedInPL_DestroyOptStateSECU_PrintBuf_lib_version__longdouble_usedSEC_PKCS7DestroyContentInfoPR_ImplodeTimeSEC_PKCS7DecodeItemCERT_DestroyCertificateCERT_GetDefaultCertDBCERT_VerifySignedDataWithPublicKeyInfoPK11_NeedUserInitCERT_FindCertByNicknameOrEmailAddrCERT_DestroyValiditySEC_PKCS5IsAlgorithmPBEAlgTagSEC_StringToOIDPK11_ImportCRLsecu_PrintKDF2Params_mcountSECU_PrintCRLInfoPL_strcasecmpmkNicknameputchargetNameFromAttributePK11_FreeSlotListfclosesecuPBEParamsTempSECU_PrintAlgorithmIDmemcmpPK11_ProtectedAuthenticationPath___ArgvPK11_GetCertFromPrivateKeytcgetattrSEC_GetPasswordEXTEN_EXT_VALUE_ENCODER_CERT_EncodeCRLDistributionPointsPR_InitDER_PrettyPrintSECOID_FindOIDTag_UtilNSS_InitWithMergePR_GMTParametersPK11_ChangePW___errnoSECOID_AddEntry_UtilparseSigSchemeListSECU_PrintInteger_DYNAMICfilenoCERT_StartCertificateRequestAttributesSECKEY_DestroySubjectPublicKeyInfoCERT_CopyRDNCERT_GetNextEmailAddressCERT_MergeExtensionsSEC_GetSignatureAlgorithmOidTagByKeyconstCountCERT_GetCountryNameSECU_SECItemHexStringToBinaryPR_ErrorToStringSECU_PrintSignedContentSECU_EnableWrapSECU_printCertProblemsOnDateSECU_SignatureSchemeNameSECU_PrintGeneralizedTimestrncpySECU_NamedGroupGetNextNamePL_GetNextOptstrstrCERT_GetCertificateRequestExtensionsSECU_PrintCertificateSECU_PrintCertificateBasicInfoSECU_DecodeAndPrintExtensionsPK11_IsFIPSSEC_DerSignDataWithAlgorithmIDreadPSKSECOID_AlgorithmIDTemplate_UtilPK11_InitPinstrerrorSECU_FindCrlIssuerSECU_NamedGroupToGroupNamePORT_FreeArena_Util_endPK11_CreateMergeLogSEC_DeletePermCertificateSECU_PrintObjectIDCERT_DecodeNameConstraintsExtensionPL_CreateLongOptStatememcpy_startSECKEY_PQGParamsTemplateEXTEN_EXT_VALUE_ENCODER_CERT_EncodePolicyConstraintsExtensionPK11_GetSlotNameSECITEM_ReallocItemV2SECU_ExtractBERAndStepparseExportersPK11_FindKeyByDERCert__stack_chk_guardstrncmpPK11_FreeSlotCERT_CopyName_ITM_deregisterTMCloneTableCERTUTIL_DestroyParamsPQGPK11_ListPrivateKeysInSlotSECU_PrintAsHexSECU_PrintAnyPR_fprintfmemsetSEC_IA5StringTemplate_UtilGetOidFromStringld: Software Generation Utilities - Solaris Link Editors: 5.11-1.1793 (illumos)@(#)illumos illumos-d6004f2d65 October 2026GCC: (OpenIndiana 14.3.0-oi-4) 14.3.0.interp.eh_frame_hdr.eh_frame.hash.SUNW_ldynsym.dynsym.dynstr.SUNW_version.SUNW_versym.SUNW_dynsymsort.SUNW_reloc.rela.plt.text.init.fini.rodata.got.dynamic.fini_array.init_array.data.tm_clone_table.data.rel.ro.data.rel.local.data.rel.bss.symtab.strtab.comment.shstrtab@ p@ p@\!'@'('o@6@@6PN5 =@=-="j@j-Eo@So`@``o(@(q@(}B@( @@(@OBOPBP PB P  pDp` {D{PX~DX~`~D`~p~Dp~A~D~~D~ x D D( D   ] Џ90]" ,