attachment-0001

----- Forwarded by Danny M Brennan/CA/KAIPERM on 08/02/2004 12:55 PM ----- <table width=100%> <tr valign=top> <td> <td>owner-ipp@pwg.org 08/02/2004 12:46 PM <td>                To:        ipp-approval@pwg.org         cc:                 Subject:        BOUNCE ipp@pwg.org:    Non-member submission from [Carl Kugler <kugler@us.ibm.com>]</table> From ipp-owner  Mon Aug  2 15:46:25 2004 Received: from e32.co.us.ibm.com (e32.co.us.ibm.com [32.97.110.130])                 by pwg.org (8.11.7p1+Sun/8.9.2) with ESMTP id i72JkNc26287                 for <ipp@pwg.org>; Mon, 2 Aug 2004 15:46:24 -0400 (EDT) Received: from westrelay04.boulder.ibm.com (westrelay04.boulder.ibm.com [9.17.193.32])                 by e32.co.us.ibm.com (8.12.10/8.12.9) with ESMTP id i72JkEmL830086;                 Mon, 2 Aug 2004 15:46:14 -0400 Received: from d03nm122.boulder.ibm.com (d03av04.boulder.ibm.com [9.17.195.170])                 by westrelay04.boulder.ibm.com (8.12.10/NCO/VER6.6) with ESMTP id i72Jk8Ku198732;                 Mon, 2 Aug 2004 13:46:09 -0600 In-Reply-To: <OF6857E722.B80456B3-ON87256EE4.005EFFF3-87256EE4.005F291D@LocalDomain> To: Harry Lewis <harryl@us.ibm.com> Cc: "Hastings, Tom N" <hastings@cp10.es.xerox.com>, ipp@pwg.org,   Scott Hollenbeck <sah@428cobrajet.net> MIME-Version: 1.0 Subject: RE: IPP> Final Editing Steps for draft-ietf-ipp-ops-set2 X-Mailer: Lotus Notes Release 6.5.1 January 21, 2004 From: Carl Kugler <kugler@us.ibm.com> X-MIMETrack: S/MIME Sign by Notes Client on Carl Kugler/Boulder/IBM(Release 6.5.1|January 21, 2004) at 08/02/2004 01:39:53 PM,                 Serialize by Notes Client on Carl Kugler/Boulder/IBM(Release 6.5.1|January 21, 2004) at 08/02/2004 01:39:53 PM,                 Serialize complete at 08/02/2004 01:39:53 PM,                 Itemize by Notes Client on Carl Kugler/Boulder/IBM(Release 6.5.1|January 21, 2004) at 08/02/2004 01:39:53 PM,                 S/MIME Sign complete at 08/02/2004 01:39:53 PM,                 S/MIME Sign by Notes Client on Carl Kugler/Boulder/IBM(Release 6.5.1|January 21, 2004) at 08/02/2004 01:46:08 PM,                 S/MIME Sign complete at 08/02/2004 01:46:08 PM,                 Serialize by Router on D03NM122/03/M/IBM(Release 6.0.2CF2HF259 | March 11, 2004) at 08/02/2004 13:46:08,                 Serialize complete at 08/02/2004 13:46:08 Message-ID: <OF0323BC97.10250AA8-ON87256EE4.006BF94E-87256EE4.006C982E@us.ibm.com> Date: Mon, 2 Aug 2004 13:46:07 -0600 Content-Type: multipart/signed;                  protocol="application/x-pkcs7-signature";                  micalg=sha1;                  boundary=-------z17953_boundary_sign This is an S/MIME signed message. ---------z17953_boundary_sign Content-Type: multipart/alternative; boundary="=_alternative 006C05D387256EE4_=" This is a multipart message in MIME format. --=_alternative 006C05D387256EE4_= Content-Type: text/plain; charset="US-ASCII" I, too, agree with Scott's proposed changes as well as the slight modification subsequently offered by M. Sweet on 8/01.        -Carl Kugler Harry Lewis 08/02/2004 11:19 AM        To:     "Hastings, Tom N" <hastings@cp10.es.xerox.com>        cc:     ipp@pwg.org, Scott Hollenbeck <sah@428cobrajet.net>, (bcc: Carl Kugler/Boulder/IBM)        Subject:        RE: IPP> Final Editing Steps for draft-ietf-ipp-ops-set2 I agree with Scott's proposed changes as well as the slight modification subsequently offered by M. Sweet on 8/01. ---------------------------------------------- Harry Lewis IBM STSM Chairman - IEEE-ISTO Printer Working Group http://www.pwg.org IBM Printing Systems http://www.ibm.com/printers 303-924-5337 ---------------------------------------------- "Hastings, Tom N" <hastings@cp10.es.xerox.com> Sent by: owner-ipp@pwg.org 07/30/2004 12:13 PM To Scott Hollenbeck <sah@428cobrajet.net> cc ipp@pwg.org Subject RE: IPP> Final Editing Steps for draft-ietf-ipp-ops-set2 Scott, These changes look good to me.  Thanks for the improvements. I left a message for Carl Kugler and Harry Lewis to look it over as well, since they are also authors.  Carl will be back in the office Monday, August 2 and Harry, Tuesday, August 3. Tom Hastings -----Original Message----- From: owner-ipp@pwg.org [mailto:owner-ipp@pwg.org]On Behalf Of Scott Hollenbeck Sent: Thursday, July 29, 2004 11:02 To: ipp@pwg.org Subject: IPP> Final Editing Steps for draft-ietf-ipp-ops-set2 I've been working with the two Security area ADs to get the final IESG approvals for draft-ietf-ipp-ops-set2.  Steve Bellovin still had some minor concerns with the second paragraph of the new Security Considerations section (he said that he still found it hard to read), but we can deal with that without requiring a new version of the document.  I can have the document approved with a note to the RFC Editor requesting some minor changes.  That being the case, here's how I wish to proceed: Change this: "Printer operations defined in this specification (see section 3) and Pause-Printer, Resume-Printer, and Purge-Job (defined in [RFC2911]) are intended for use by an operator and/or administrator.  Job operations defined in this specification (see section 4) and Cancel- Job, Hold-Job, Release-Job defined in [RFC2911]) are intended for use by the job owner or may be an operator or administrator of the Printer object.  These operator and administrative operations affect the service of all users.  In appropriate use of an administrative operation by an un-authenticated end user could affect the quality of service for all users.  Therefore, for both inter-net and intra-net, conformance to this specification REQUIRES that initial configuration of IPP Printer implementations MUST require successful certificate- based TLS [RFC2246] client authentication and successful operator and administrator authorization (see [RFC2911] sections 5.2.7 and 8 and [RFC2910]) for any administrative operations defined in this document.  [RFC2910] REQUIRES the IPP Printer to support the minimum cypher suite required for TLS/1.0.  The means for authorizing an operator or administrator of the Printer object are outside the scope of this specification, [RFC2911], and [RFC2910]." to this: "Printer operations defined in this specification (see section 3) and Pause-Printer, Resume-Printer, and Purge-Job (defined in [RFC2911]) are intended for use by an operator and/or administrator.  Job operations defined in this specification (see section 4) and Cancel-Job, Hold-Job, and Release-Job (defined in [RFC2911]) are intended for use by the job owner, operator, or administrator of the Printer object.  These operator and administrative operations affect service for all users. Inappropriate use of an administrative operation by an unauthenticated end user can affect the quality of service for all users.  Therefore, IPP Printer implementations MUST require both successful certificate-based TLS [RFC2246] client authentication and successful operator/administrator authorization (see [RFC2911] sections 5.2.7 and 8 and [RFC2910]) to perform the administrative operations defined in this document.  [RFC2910] requires the IPP Printer to support the minimum cipher suite specified for TLS/1.0. The means for authorizing an operator or administrator of the Printer object are outside the scope of this specification, RFC 2910, and RFC 2911." In addition, a normative reference to RFC 2119 will need to be added.  The "change history" comment at the end of the list of informative references will need to be removed. Please let me know ASAP if there are any objections to this approach.  if not, I will ask the IESG to approve the document with the RFC Editor note included. -Scott- --=_alternative 006C05D387256EE4_= Content-Type: text/html; charset="US-ASCII" I, too, agree with Scott's proposed changes as well as the slight modification subsequently offered by M. Sweet on 8/01. &nbsp; &nbsp; &nbsp; &nbsp; -Carl Kugler <table width=100%> <tr valign=top> <td> <td>Harry Lewis 08/02/2004 11:19 AM <td> &nbsp; &nbsp; &nbsp; &nbsp; To: &nbsp; &nbsp; &nbsp; &nbsp;&quot;Hastings, Tom N&quot; &lt;hastings@cp10.es.xerox.com&gt; &nbsp; &nbsp; &nbsp; &nbsp; cc: &nbsp; &nbsp; &nbsp; &nbsp;ipp@pwg.org, Scott Hollenbeck &lt;sah@428cobrajet.net&gt;, (bcc: Carl Kugler/Boulder/IBM) &nbsp; &nbsp; &nbsp; &nbsp; Subject: &nbsp; &nbsp; &nbsp; &nbsp;RE: IPP&gt; Final Editing Steps for draft-ietf-ipp-ops-set2<a href=Notes:///87256523005C11F8/A24CF79FA927570285256356005827C4/BCBE67C99058886387256EE100644714>Link</a></table> I agree with Scott's proposed changes as well as the slight modification subsequently offered by M. Sweet on 8/01. ---------------------------------------------- Harry Lewis IBM STSM Chairman - IEEE-ISTO Printer Working Group http://www.pwg.org IBM Printing Systems http://www.ibm.com/printers 303-924-5337 ---------------------------------------------- <table width=100%> <tr valign=top> <td width=40%>&quot;Hastings, Tom N&quot; &lt;hastings@cp10.es.xerox.com&gt; Sent by: owner-ipp@pwg.org 07/30/2004 12:13 PM <td width=59%> <table width=100%> <tr> <td> <div align=right>To</div> <td valign=top>Scott Hollenbeck &lt;sah@428cobrajet.net&gt; <tr> <td> <div align=right>cc</div> <td valign=top>ipp@pwg.org <tr> <td> <div align=right>Subject</div> <td valign=top>RE: IPP&gt; Final Editing Steps for draft-ietf-ipp-ops-set2</table> <table> <tr valign=top> <td> <td></table> </table> <tt>Scott, These changes look good to me. &nbsp;Thanks for the improvements. I left a message for Carl Kugler and Harry Lewis to look it over as well, since they are also authors. &nbsp;Carl will be back in the office Monday, August 2 and Harry, Tuesday, August 3. Tom Hastings -----Original Message----- From: owner-ipp@pwg.org [mailto:owner-ipp@pwg.org]On Behalf Of Scott Hollenbeck Sent: Thursday, July 29, 2004 11:02 To: ipp@pwg.org Subject: IPP&gt; Final Editing Steps for draft-ietf-ipp-ops-set2 I've been working with the two Security area ADs to get the final IESG approvals for draft-ietf-ipp-ops-set2. &nbsp;Steve Bellovin still had some minor concerns with the second paragraph of the new Security Considerations section (he said that he still found it hard to read), but we can deal with that without requiring a new version of the document. &nbsp;I can have the document approved with a note to the RFC Editor requesting some minor changes. &nbsp;That being the case, here's how I wish to proceed: Change this: &quot;Printer operations defined in this specification (see section 3) and Pause-Printer, Resume-Printer, and Purge-Job (defined in [RFC2911]) are intended for use by an operator and/or administrator. &nbsp;Job operations defined in this specification (see section 4) and Cancel- Job, Hold-Job, Release-Job defined in [RFC2911]) are intended for use by the job owner or may be an operator or administrator of the Printer object. &nbsp;These operator and administrative operations affect the service of all users. &nbsp;In appropriate use of an administrative operation by an un-authenticated end user could affect the quality of service for all users. &nbsp;Therefore, for both inter-net and intra-net, conformance to this specification REQUIRES that initial configuration of IPP Printer implementations MUST require successful certificate- based TLS [RFC2246] client authentication and successful operator and administrator authorization (see [RFC2911] sections 5.2.7 and 8 and [RFC2910]) for any administrative operations defined in this document. &nbsp;[RFC2910] REQUIRES the IPP Printer to support the minimum cypher suite required for TLS/1.0. &nbsp;The means for authorizing an operator or administrator of the Printer object are outside the scope of this specification, [RFC2911], and [RFC2910].&quot; to this: &quot;Printer operations defined in this specification (see section 3) and Pause-Printer, Resume-Printer, and Purge-Job (defined in [RFC2911]) are intended for use by an operator and/or administrator. &nbsp;Job operations defined in this specification (see section 4) and Cancel-Job, Hold-Job, and Release-Job (defined in [RFC2911]) are intended for use by the job owner, operator, or administrator of the Printer object. &nbsp;These operator and administrative operations affect service for all users. Inappropriate use of an administrative operation by an unauthenticated end user can affect the quality of service for all users. &nbsp;Therefore, IPP Printer implementations MUST require both successful certificate-based TLS [RFC2246] client authentication and successful operator/administrator authorization (see [RFC2911] sections 5.2.7 and 8 and [RFC2910]) to perform the administrative operations defined in this document. &nbsp;[RFC2910] requires the IPP Printer to support the minimum cipher suite specified for TLS/1.0. The means for authorizing an operator or administrator of the Printer object are outside the scope of this specification, RFC 2910, and RFC 2911.&quot; In addition, a normative reference to RFC 2119 will need to be added. &nbsp;The &quot;change history&quot; comment at the end of the list of informative references will need to be removed. Please let me know ASAP if there are any objections to this approach. &nbsp;if not, I will ask the IESG to approve the document with the RFC Editor note included. -Scott- </tt> --=_alternative 006C05D387256EE4_=-- ---------z17953_boundary_sign Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIIUNAIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIISVDCCAtow ggJDoAMCAQICAwMUtjANBgkqhkiG9w0BAQQFADBOMQswCQYDVQQGEwJVUzEQMA4GA1UEChMHRXF1 aWZheDEtMCsGA1UECxMkRXF1aWZheCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTAy MDExNDIyMDcxMVoXDTExMTIzMTIyMDcxMVowaTELMAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVy bmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycG9yYXRpb24xJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA629xc49NpAPz cAsuShTImLRYMkyepDEkC1UrPbsFRyAFZKsv3pw0MGfW/+7glzJKgPkPzlTZZfznznGbmAWVnNBQ lyPasOtCjif603euRXReHcKfHMPLItKozibWIPHJuOnwNclOnnP2sKufuPzbTImQTTi5c8JZNZcM J0YFzTcCAwEAAaOBqjCBpzARBglghkgBhvhCAQEEBAMCAIcwDgYDVR0PAQH/BAQDAgHGMB0GA1Ud DgQWBBSuVA6S6qgzqSskLcfIbzDc3vNKQDAfBgNVHSMEGDAWgBRI5mj5K9KylddH2CMgEE8zmJCf 1DAPBgNVHRMBAf8EBTADAQH/MDEGA1UdJQQqMCgGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUH AwMGCCsGAQUFBwMEMA0GCSqGSIb3DQEBBAUAA4GBADJye3NmC8q2PzypRZfu7JvDRDX1rRcanZvu jQupk2oCScMd3FIHLE7hOfu8YffvxtLU3y8wNamQEORjTD175qAffryXypwtiVjBUKSDlBCQ14ke McF9ViNdewEoBGiAycUq8R3Lrlf4TCDvW4GeguNTFFZnS0ygYATiJk7iDyvEMIIC2jCCAkOgAwIB AgIDAxS2MA0GCSqGSIb3DQEBBAUAME4xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFcXVpZmF4MS0w KwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDIwMTE0MjIw NzExWhcNMTExMjMxMjIwNzExWjBpMQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25h bCBCdXNpbmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEkMCIGA1UEAxMbSUJNIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDrb3Fzj02kA/NwCy5KFMiY tFgyTJ6kMSQLVSs9uwVHIAVkqy/enDQwZ9b/7uCXMkqA+Q/OVNll/OfOcZuYBZWc0FCXI9qw60KO J/rTd65FdF4dwp8cw8si0qjOJtYg8cm46fA1yU6ec/awq5+4/NtMiZBNOLlzwlk1lwwnRgXNNwID AQABo4GqMIGnMBEGCWCGSAGG+EIBAQQEAwIAhzAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0OBBYEFK5U DpLqqDOpKyQtx8hvMNze80pAMB8GA1UdIwQYMBaAFEjmaPkr0rKV10fYIyAQTzOYkJ/UMA8GA1Ud EwEB/wQFMAMBAf8wMQYDVR0lBCowKAYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYIKwYB BQUHAwQwDQYJKoZIhvcNAQEEBQADgYEAMnJ7c2YLyrY/PKlFl+7sm8NENfWtFxqdm+6NC6mTagJJ wx3cUgcsTuE5+7xh9+/G0tTfLzA1qZAQ5GNMPXvmoB9+vJfKnC2JWMFQpIOUEJDXiR4xwX1WI117 ASgEaIDJxSrxHcuuV/hMIO9bgZ6C41MUVmdLTKBgBOImTuIPK8QwggMgMIICiaADAgECAgQ13vTP MA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQL EyRFcXVpZmF4IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNOTgwODIyMTY0MTUxWhcN MTgwODIyMTY0MTUxWjBOMQswCQYDVQQGEwJVUzEQMA4GA1UEChMHRXF1aWZheDEtMCsGA1UECxMk RXF1aWZheCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDBXbFYZwhi7qCaLR8IbZEUaJgKHv7aBG8ThGIhw9F8zp8F4LgB8E407OKKlQRkrPFr U18Fs8tngL9CAo7+3QEJ7OEAFE/8+/AM3UO6WyvhH4BwmRVXkxbxD5dqt8JoIxzMTVkwrFEeO68r 1u5jRXvF2V9Q0uNQDzqI578U/eDHuQIDAQABo4IBCTCCAQUwcAYDVR0fBGkwZzBloGOgYaRfMF0x CzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBD ZXJ0aWZpY2F0ZSBBdXRob3JpdHkxDTALBgNVBAMTBENSTDEwGgYDVR0QBBMwEYEPMjAxODA4MjIx NjQxNTFaMAsGA1UdDwQEAwIBBjAfBgNVHSMEGDAWgBRI5mj5K9KylddH2CMgEE8zmJCf1DAdBgNV HQ4EFgQUSOZo+SvSspXXR9gjIBBPM5iQn9QwDAYDVR0TBAUwAwEB/zAaBgkqhkiG9n0HQQAEDTAL GwVWMy4wYwMCBsAwDQYJKoZIhvcNAQEFBQADgYEAWM4p6vz33rXOArkXtYXRuePglcwlMQ0AppJu f7aSY55QldGab+QR3mOFbpjuqP9ayNNVsmZxV97AIes9KqcjSQEEhkJ7/O5/ohZStWdn00DbOyZY sih3Pa4Ud2HW+ipmJ6AN+qdzXOpw8ZQhZURf+vzvKWipood573nvT6wHdzgwggMgMIICiaADAgEC AgQ13vTPMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFcXVpZmF4MS0w KwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNOTgwODIyMTY0 MTUxWhcNMTgwODIyMTY0MTUxWjBOMQswCQYDVQQGEwJVUzEQMA4GA1UEChMHRXF1aWZheDEtMCsG A1UECxMkRXF1aWZheCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEB AQUAA4GNADCBiQKBgQDBXbFYZwhi7qCaLR8IbZEUaJgKHv7aBG8ThGIhw9F8zp8F4LgB8E407OKK lQRkrPFrU18Fs8tngL9CAo7+3QEJ7OEAFE/8+/AM3UO6WyvhH4BwmRVXkxbxD5dqt8JoIxzMTVkw rFEeO68r1u5jRXvF2V9Q0uNQDzqI578U/eDHuQIDAQABo4IBCTCCAQUwcAYDVR0fBGkwZzBloGOg YaRfMF0xCzAJBgNVBAYTAlVTMRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNl Y3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxDTALBgNVBAMTBENSTDEwGgYDVR0QBBMwEYEPMjAx ODA4MjIxNjQxNTFaMAsGA1UdDwQEAwIBBjAfBgNVHSMEGDAWgBRI5mj5K9KylddH2CMgEE8zmJCf 1DAdBgNVHQ4EFgQUSOZo+SvSspXXR9gjIBBPM5iQn9QwDAYDVR0TBAUwAwEB/zAaBgkqhkiG9n0H QQAEDTALGwVWMy4wYwMCBsAwDQYJKoZIhvcNAQEFBQADgYEAWM4p6vz33rXOArkXtYXRuePglcwl MQ0AppJuf7aSY55QldGab+QR3mOFbpjuqP9ayNNVsmZxV97AIes9KqcjSQEEhkJ7/O5/ohZStWdn 00DbOyZYsih3Pa4Ud2HW+ipmJ6AN+qdzXOpw8ZQhZURf+vzvKWipood573nvT6wHdzgwggMkMIIC jaADAgECAgMByK8wDQYJKoZIhvcNAQEEBQAwaTELMAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVy bmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycG9yYXRpb24xJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNDA3MTMxNDUxNDhaFw0wNTA3MjcxNDUxNDhaMIGEMQsw CQYDVQQGEwJVUzEMMAoGA1UEChMDSUJNMREwDwYDVQQLEwhFTVBMT1lFRTEXMBUGA1UEAxMOQ2Fy bCBKLiBLdWdsZXIxGTAXBgoJkiaJk/IsZAEBEwk4MDUyNDU4OTcxIDAeBgkqhkiG9w0BCQEWEWt1 Z2xlckB1cy5pYm0uY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCKqHS/BO5L6znaZjjN czij7mK4H42byl/0IixyxApQIWBhacad/Xnretrh2wg3+f60O+V/tlp3U/UXXRg6xMGhy8YPeHn/ /7nHapuBm0PVBaKWktVMnKNDNozso58QXESIhuwlcjKZcT+IwYBRD+nW0XXNl/7sg37rCegrGEfL hQIDAQABo4G9MIG6MBEGCWCGSAGG+EIBAQQEAwIFoDAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0OBBYE FNS39nc17S5EJaktIyjmx7u6f1ItMCwGA1UdEQQlMCOgIQYKKwYBBAGCNxQCA6ATDBFrdWdsZXJA dXMuaWJtLmNvbTAfBgNVHSMEGDAWgBSuVA6S6qgzqSskLcfIbzDc3vNKQDAnBgNVHSUEIDAeBggr BgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEMA0GCSqGSIb3DQEBBAUAA4GBAA2f/1/fEqqMqJlN WlcMCNkgTUHryoGYFDYOQycX2amj4/IAPnNheJNNy0sdeEEUn3uAnU5DmdaEeZyeveSWFELpreZI ohqAGGltQ3BRXwVWcWwmCHCrYIEYlK5oeD2RY3J9J4wWOpwZhvsP1RkLY7LpyjVMeXgUbqqrgMk7 KrjpMIIDJDCCAo2gAwIBAgIDAcivMA0GCSqGSIb3DQEBBAUAMGkxCzAJBgNVBAYTAlVTMTQwMgYD VQQKEytJbnRlcm5hdGlvbmFsIEJ1c2luZXNzIE1hY2hpbmVzIENvcnBvcmF0aW9uMSQwIgYDVQQD ExtJQk0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwNzEzMTQ1MTQ4WhcNMDUwNzI3MTQ1 MTQ4WjCBhDELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0lCTTERMA8GA1UECxMIRU1QTE9ZRUUxFzAV BgNVBAMTDkNhcmwgSi4gS3VnbGVyMRkwFwYKCZImiZPyLGQBARMJODA1MjQ1ODk3MSAwHgYJKoZI hvcNAQkBFhFrdWdsZXJAdXMuaWJtLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAiqh0 vwTuS+s52mY4zXM4o+5iuB+Nm8pf9CIscsQKUCFgYWnGnf1563ra4dsIN/n+tDvlf7Zad1P1F10Y OsTBocvGD3h5//+5x2qbgZtD1QWilpLVTJyjQzaM7KOfEFxEiIbsJXIymXE/iMGAUQ/p1tF1zZf+ 7IN+6wnoKxhHy4UCAwEAAaOBvTCBujARBglghkgBhvhCAQEEBAMCBaAwDgYDVR0PAQH/BAQDAgXg MB0GA1UdDgQWBBTUt/Z3Ne0uRCWpLSMo5se7un9SLTAsBgNVHREEJTAjoCEGCisGAQQBgjcUAgOg EwwRa3VnbGVyQHVzLmlibS5jb20wHwYDVR0jBBgwFoAUrlQOkuqoM6krJC3HyG8w3N7zSkAwJwYD VR0lBCAwHgYIKwYBBQUHAwIGCCsGAQUFBwMDBggrBgEFBQcDBDANBgkqhkiG9w0BAQQFAAOBgQAN n/9f3xKqjKiZTVpXDAjZIE1B68qBmBQ2DkMnF9mpo+PyAD5zYXiTTctLHXhBFJ97gJ1OQ5nWhHmc nr3klhRC6a3mSKIagBhpbUNwUV8FVnFsJghwq2CBGJSuaHg9kWNyfSeMFjqcGYb7D9UZC2Oy6co1 THl4FG6qq4DJOyq46TGCAbswggG3AgEBMHAwaTELMAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVy bmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycG9yYXRpb24xJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eQIDAcivMAkGBSsOAwIaBQCggaIwGAYJKoZIhvcNAQkDMQsGCSqG SIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDQwODAyMTkzOTUzWjAjBgkqhkiG9w0BCQQxFgQUIqpp iDJhWSvTCuoL5iU2ztEYwlgwQwYJKoZIhvcNAQkPMTYwNDAHBgUrDgMCHTAOBggqhkiG9w0DAgIC AIAwCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwICASgwDQYJKoZIhvcNAQEBBQAEgYB2imHek4Si39QN Wt+VXJ5XzQKt/uQyKLW+PUv+gVTJ998gxLor67BfjaSBAs9e+ULFrr5fXLW4GoevQsfJi5xu+0oC LxZf/FG9GV7BtRJvyFCcLTbM1akX5E4o0A+0R4Ozbv17TKBKwNIFzxIbJeu+MgfpYYXTyZt59VYU nhWhVwAAAAA= ---------z17953_boundary_sign--