From cc27d05c00c95bf0b162b10b4fc8ad751146f877 Mon Sep 17 00:00:00 2001 From: boB Rudis Date: Sun, 3 Mar 2019 11:22:49 -0500 Subject: [PATCH] nearly-done --- .../brieger.esalq.usp.br_p443-20190303-0827.json | 1062 ++++++ .../cloud.r-project.org_p443-20190303-0729.json | 3821 +++++++++++++++++++ .../cran-r.c3sl.ufpr.br_p443-20190303-0811.json | 1237 ++++++ data/ssl/cran.asia_p443-20190303-0835.json | 1027 +++++ data/ssl/cran.biodisk.org_p443-20190303-0841.json | 1125 ++++++ data/ssl/cran.biotools.fr_p443-20190303-0837.json | 969 +++++ data/ssl/cran.case.edu_p443-20190303-0846.json | 1169 ++++++ .../cran.cnr.berkeley.edu_p443-20190303-0846.json | 1020 +++++ data/ssl/cran.csiro.au_p443-20190303-0743.json | 1223 ++++++ .../ssl/cran.curtin.edu.au_p443-20190303-0759.json | 1062 ++++++ .../ssl/cran.dcc.uchile.cl_p443-20190303-0835.json | 957 +++++ data/ssl/cran.fiocruz.br_p443-20190303-0817.json | 1146 ++++++ data/ssl/cran.hafro.is_p443-20190303-0838.json | 1076 ++++++ data/ssl/cran.ism.ac.jp_p443-20190303-0839.json | 1067 ++++++ data/ssl/cran.itam.mx_p443-20190303-0841.json | 1148 ++++++ .../cran.ma.imperial.ac.uk_p443-20190303-0846.json | 1097 ++++++ .../cran.ms.unimelb.edu.au_p443-20190303-0753.json | 1055 ++++++ data/ssl/cran.mtu.edu_p443-20190303-0846.json | 985 +++++ .../cran.ncc.metu.edu.tr_p443-20190303-0845.json | 1027 +++++ data/ssl/cran.pau.edu.tr_p443-20190303-0845.json | 1048 +++++ .../ssl/cran.rapporter.net_p443-20190303-0838.json | 2003 ++++++++++ data/ssl/cran.rediris.es_p443-20190303-0843.json | 1148 ++++++ ...revolutionanalytics.com_p443-20190303-0847.json | 999 +++++ data/ssl/cran.seoul.go.kr_p443-20190303-0841.json | 1088 ++++++ ...ran.stat.auckland.ac.nz_p443-20190303-0841.json | 992 +++++ .../cran.stat.nus.edu.sg_p443-20190303-0842.json | 1111 ++++++ .../ssl/cran.stat.unipd.it_p443-20190303-0839.json | 1188 ++++++ .../cran.stat.upd.edu.ph_p443-20190303-0842.json | 1083 ++++++ data/ssl/cran.uib.no_p443-20190303-0842.json | 1076 ++++++ data/ssl/cran.um.ac.ir_p443-20190303-0839.json | 1076 ++++++ .../cran.uni-muenster.de_p443-20190303-0838.json | 1188 ++++++ .../cran.univ-paris1.fr_p443-20190303-0837.json | 1020 +++++ data/ssl/cran.usthb.dz_p443-20190303-0733.json | 1027 +++++ data/ssl/cran.wu.ac.at_p443-20190303-0804.json | 1076 ++++++ data/ssl/cran.yu.ac.kr_p443-20190303-0840.json | 1120 ++++++ .../dirichlet.mat.puc.cl_p443-20190303-0835.json | 1048 +++++ .../espejito.fder.edu.uy_p443-20190303-0848.json | 1034 +++++ data/ssl/fourdots.com_p443-20190303-0842.json | 2615 +++++++++++++ data/ssl/ftp.acc.umu.se_p443-20190303-0843.json | 2017 ++++++++++ data/ssl/ftp.cc.uoc.gr_p443-20190303-0838.json | 1055 ++++++ data/ssl/ftp.cixug.es_p443-20190303-0843.json | 1075 ++++++ data/ssl/ftp.eenet.ee_p443-20190303-0835.json | 1041 +++++ data/ssl/ftp.fau.de_p443-20190303-0837.json | 1013 +++++ data/ssl/ftp.gwdg.de_p443-20190303-0837.json | 943 +++++ data/ssl/ftp.harukasan.org_p443-20190303-0840.json | 3489 +++++++++++++++++ data/ssl/ftp.heanet.ie_p443-20190303-0839.json | 1053 ++++++ data/ssl/ftp.igh.cnrs.fr_p443-20190303-0837.json | 943 +++++ data/ssl/ftp.osuosl.org_p443-20190303-0847.json | 3126 +++++++++++++++ data/ssl/ftp.ussg.iu.edu_p443-20190303-0846.json | 1090 ++++++ ...ftp.yz.yamagata-u.ac.jp_p443-20190303-0839.json | 3989 ++++++++++++++++++++ data/ssl/ftp.yzu.edu.tw_p443-20190303-0844.json | 1013 +++++ data/ssl/lib.ugent.be_p443-20190303-0809.json | 1083 ++++++ .../mirror-hk.koddos.net_p443-20190303-0835.json | 1167 ++++++ .../mirror.aarnet.edu.au_p443-20190303-0749.json | 934 +++++ .../mirror.cedia.org.ec_p443-20190303-0835.json | 1034 +++++ data/ssl/mirror.epn.edu.ec_p443-20190303-0835.json | 1004 +++++ data/ssl/mirror.ibcp.fr_p443-20190303-0837.json | 1006 +++++ data/ssl/mirror.its.dal.ca_p443-20190303-0835.json | 1090 ++++++ data/ssl/mirror.its.sfu.ca_p443-20190303-0835.json | 993 +++++ .../mirror.las.iastate.edu_p443-20190303-0846.json | 1069 ++++++ data/ssl/mirror.lzu.edu.cn_p443-20190303-0835.json | 957 +++++ .../ssl/mirrors.dotsrc.org_p443-20190303-0835.json | 1048 +++++ data/ssl/mirrors.eliteu.cn_p443-20190303-0835.json | 992 +++++ data/ssl/mirrors.nic.cz_p443-20190303-0835.json | 950 +++++ .../ssl/mirrors.shu.edu.cn_p443-20190303-0835.json | 1033 +++++ .../mirrors.tongji.edu.cn_p443-20190303-0835.json | 1897 ++++++++++ ...rs.tuna.tsinghua.edu.cn_p443-20190303-0835.json | 1097 ++++++ .../mirrors.ustc.edu.cn_p443-20190303-0835.json | 2311 ++++++++++++ data/ssl/muug.ca_p443-20190303-0835.json | 1055 ++++++ .../ssl/pbil.univ-lyon1.fr_p443-20190303-0835.json | 1076 ++++++ data/ssl/repo.bppt.go.id_p443-20190303-0839.json | 1134 ++++++ data/ssl/rweb.crmda.ku.edu_p443-20190303-0846.json | 1055 ++++++ data/ssl/stat.ethz.ch_p443-20190303-0844.json | 1076 ++++++ data/ssl/vps.fmvz.usp.br_p443-20190303-0821.json | 1160 ++++++ data/ssl/wbc.upm.edu.my_p443-20190303-0841.json | 971 +++++ .../www.freestatistics.org_p443-20190303-0807.json | 1062 ++++++ data/ssl/www.icesi.edu.co_p443-20190303-0835.json | 1110 ++++++ .../www.stats.bris.ac.uk_p443-20190303-0845.json | 1076 ++++++ orly.R | 396 +- orly.html | 2531 +++++++++++++ orly.md | 1024 +++++ orly_files/figure-html/alt-names-ct-1.png | Bin 0 -> 92672 bytes orly_files/figure-html/apache-history-1.png | Bin 0 -> 113918 bytes orly_files/figure-html/cran-map-1.png | Bin 0 -> 397687 bytes orly_files/figure-html/nginx-history-1.png | Bin 0 -> 73619 bytes orly_files/figure-html/other-stuff-1.png | Bin 0 -> 54039 bytes orly_files/figure-html/testssl-1.png | Bin 0 -> 665478 bytes 87 files changed, 102354 insertions(+), 97 deletions(-) create mode 100644 data/ssl/brieger.esalq.usp.br_p443-20190303-0827.json create mode 100644 data/ssl/cloud.r-project.org_p443-20190303-0729.json create mode 100644 data/ssl/cran-r.c3sl.ufpr.br_p443-20190303-0811.json create mode 100644 data/ssl/cran.asia_p443-20190303-0835.json create mode 100644 data/ssl/cran.biodisk.org_p443-20190303-0841.json create mode 100644 data/ssl/cran.biotools.fr_p443-20190303-0837.json create mode 100644 data/ssl/cran.case.edu_p443-20190303-0846.json create mode 100644 data/ssl/cran.cnr.berkeley.edu_p443-20190303-0846.json create mode 100644 data/ssl/cran.csiro.au_p443-20190303-0743.json create mode 100644 data/ssl/cran.curtin.edu.au_p443-20190303-0759.json create mode 100644 data/ssl/cran.dcc.uchile.cl_p443-20190303-0835.json create mode 100644 data/ssl/cran.fiocruz.br_p443-20190303-0817.json create mode 100644 data/ssl/cran.hafro.is_p443-20190303-0838.json create mode 100644 data/ssl/cran.ism.ac.jp_p443-20190303-0839.json create mode 100644 data/ssl/cran.itam.mx_p443-20190303-0841.json create mode 100644 data/ssl/cran.ma.imperial.ac.uk_p443-20190303-0846.json create mode 100644 data/ssl/cran.ms.unimelb.edu.au_p443-20190303-0753.json create mode 100644 data/ssl/cran.mtu.edu_p443-20190303-0846.json create mode 100644 data/ssl/cran.ncc.metu.edu.tr_p443-20190303-0845.json create mode 100644 data/ssl/cran.pau.edu.tr_p443-20190303-0845.json create mode 100644 data/ssl/cran.rapporter.net_p443-20190303-0838.json create mode 100644 data/ssl/cran.rediris.es_p443-20190303-0843.json create mode 100644 data/ssl/cran.revolutionanalytics.com_p443-20190303-0847.json create mode 100644 data/ssl/cran.seoul.go.kr_p443-20190303-0841.json create mode 100644 data/ssl/cran.stat.auckland.ac.nz_p443-20190303-0841.json create mode 100644 data/ssl/cran.stat.nus.edu.sg_p443-20190303-0842.json create mode 100644 data/ssl/cran.stat.unipd.it_p443-20190303-0839.json create mode 100644 data/ssl/cran.stat.upd.edu.ph_p443-20190303-0842.json create mode 100644 data/ssl/cran.uib.no_p443-20190303-0842.json create mode 100644 data/ssl/cran.um.ac.ir_p443-20190303-0839.json create mode 100644 data/ssl/cran.uni-muenster.de_p443-20190303-0838.json create mode 100644 data/ssl/cran.univ-paris1.fr_p443-20190303-0837.json create mode 100644 data/ssl/cran.usthb.dz_p443-20190303-0733.json create mode 100644 data/ssl/cran.wu.ac.at_p443-20190303-0804.json create mode 100644 data/ssl/cran.yu.ac.kr_p443-20190303-0840.json create mode 100644 data/ssl/dirichlet.mat.puc.cl_p443-20190303-0835.json create mode 100644 data/ssl/espejito.fder.edu.uy_p443-20190303-0848.json create mode 100644 data/ssl/fourdots.com_p443-20190303-0842.json create mode 100644 data/ssl/ftp.acc.umu.se_p443-20190303-0843.json create mode 100644 data/ssl/ftp.cc.uoc.gr_p443-20190303-0838.json create mode 100644 data/ssl/ftp.cixug.es_p443-20190303-0843.json create mode 100644 data/ssl/ftp.eenet.ee_p443-20190303-0835.json create mode 100644 data/ssl/ftp.fau.de_p443-20190303-0837.json create mode 100644 data/ssl/ftp.gwdg.de_p443-20190303-0837.json create mode 100644 data/ssl/ftp.harukasan.org_p443-20190303-0840.json create mode 100644 data/ssl/ftp.heanet.ie_p443-20190303-0839.json create mode 100644 data/ssl/ftp.igh.cnrs.fr_p443-20190303-0837.json create mode 100644 data/ssl/ftp.osuosl.org_p443-20190303-0847.json create mode 100644 data/ssl/ftp.ussg.iu.edu_p443-20190303-0846.json create mode 100644 data/ssl/ftp.yz.yamagata-u.ac.jp_p443-20190303-0839.json create mode 100644 data/ssl/ftp.yzu.edu.tw_p443-20190303-0844.json create mode 100644 data/ssl/lib.ugent.be_p443-20190303-0809.json create mode 100644 data/ssl/mirror-hk.koddos.net_p443-20190303-0835.json create mode 100644 data/ssl/mirror.aarnet.edu.au_p443-20190303-0749.json create mode 100644 data/ssl/mirror.cedia.org.ec_p443-20190303-0835.json create mode 100644 data/ssl/mirror.epn.edu.ec_p443-20190303-0835.json create mode 100644 data/ssl/mirror.ibcp.fr_p443-20190303-0837.json create mode 100644 data/ssl/mirror.its.dal.ca_p443-20190303-0835.json create mode 100644 data/ssl/mirror.its.sfu.ca_p443-20190303-0835.json create mode 100644 data/ssl/mirror.las.iastate.edu_p443-20190303-0846.json create mode 100644 data/ssl/mirror.lzu.edu.cn_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.dotsrc.org_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.eliteu.cn_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.nic.cz_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.shu.edu.cn_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.tongji.edu.cn_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.tuna.tsinghua.edu.cn_p443-20190303-0835.json create mode 100644 data/ssl/mirrors.ustc.edu.cn_p443-20190303-0835.json create mode 100644 data/ssl/muug.ca_p443-20190303-0835.json create mode 100644 data/ssl/pbil.univ-lyon1.fr_p443-20190303-0835.json create mode 100644 data/ssl/repo.bppt.go.id_p443-20190303-0839.json create mode 100644 data/ssl/rweb.crmda.ku.edu_p443-20190303-0846.json create mode 100644 data/ssl/stat.ethz.ch_p443-20190303-0844.json create mode 100644 data/ssl/vps.fmvz.usp.br_p443-20190303-0821.json create mode 100644 data/ssl/wbc.upm.edu.my_p443-20190303-0841.json create mode 100644 data/ssl/www.freestatistics.org_p443-20190303-0807.json create mode 100644 data/ssl/www.icesi.edu.co_p443-20190303-0835.json create mode 100644 data/ssl/www.stats.bris.ac.uk_p443-20190303-0845.json create mode 100644 orly.html create mode 100644 orly.md create mode 100644 orly_files/figure-html/alt-names-ct-1.png create mode 100644 orly_files/figure-html/apache-history-1.png create mode 100644 orly_files/figure-html/cran-map-1.png create mode 100644 orly_files/figure-html/nginx-history-1.png create mode 100644 orly_files/figure-html/other-stuff-1.png create mode 100644 orly_files/figure-html/testssl-1.png diff --git a/data/ssl/brieger.esalq.usp.br_p443-20190303-0827.json b/data/ssl/brieger.esalq.usp.br_p443-20190303-0827.json new file mode 100644 index 0000000..e2782c4 --- /dev/null +++ b/data/ssl/brieger.esalq.usp.br_p443-20190303-0827.json @@ -0,0 +1,1062 @@ +[ + { + "id" : "service", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA AES256-SHA AES256-SHA256 AES128-SHA256 DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-09-01 12:36" + } +, { + "id" : "cert_notAfter", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-01 12:36" + } +, { + "id" : "certs_countServer", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.globalsign.com/gs/icpedusha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/icpedusha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "iodef=mailto:stidomain@usp.br, issue=comodoca.com, issue=digicert.com, issue=globalsign.com, issue=godaddy.com, issue=identrust.com, issue=letsencrypt.org, issue=pki.goog, issue=symantec.com, issuewild=comodoca.com, issuewild=digicert.com, issuewild=globalsign.com" + } +, { + "id" : "certificate_transparency", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.22 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=1FD68836601776E8084F582A433121C8BD88380E07E6CA455202DEA011876AA5" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "brieger.esalq.usp.br/200.144.254.65", + "port" : "443", + "severity" : "INFO", + "finding" : "247" + } +] diff --git a/data/ssl/cloud.r-project.org_p443-20190303-0729.json b/data/ssl/cloud.r-project.org_p443-20190303-0729.json new file mode 100644 index 0000000..b071e9d --- /dev/null +++ b/data/ssl/cloud.r-project.org_p443-20190303-0729.json @@ -0,0 +1,3821 @@ +[ + { + "id" : "service", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1" + } +, { + "id" : "cipher_order", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 10800 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-08-20 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-21 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.sca1b.amazontrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "-509920 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.33 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 d644e7f3f959c262b5d8dffe5d3078b8.cloudfront.net (CloudFront)" + } +, { + "id" : "heartbleed", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" + } +, { + "id" : "LOGJAM", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x35", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cloud.r-project.org/52.85.89.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1" + } +, { + "id" : "cipher_order", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 10800 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-08-20 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-21 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.sca1b.amazontrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "-509990 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.33 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 1d43f56d3213a63608863fd0e49585b9.cloudfront.net (CloudFront)" + } +, { + "id" : "heartbleed", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" + } +, { + "id" : "LOGJAM", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x35", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cloud.r-project.org/52.85.89.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1" + } +, { + "id" : "cipher_order", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 10800 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-08-20 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-21 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.sca1b.amazontrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "-510055 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.33 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 829eee129e6b5002d6c1a37f04888da1.cloudfront.net (CloudFront)" + } +, { + "id" : "heartbleed", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" + } +, { + "id" : "LOGJAM", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x35", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cloud.r-project.org/52.85.89.62", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1" + } +, { + "id" : "cipher_order", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'status request/#5' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 10800 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-08-20 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-21 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.sca1b.amazontrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "-510129 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.33 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 ec7268fa1110683dbc457e57c2be1475.cloudfront.net (CloudFront)" + } +, { + "id" : "heartbleed", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" + } +, { + "id" : "LOGJAM", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x35", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cloud.r-project.org/52.85.89.115", + "port" : "443", + "severity" : "INFO", + "finding" : "277" + } +] diff --git a/data/ssl/cran-r.c3sl.ufpr.br_p443-20190303-0811.json b/data/ssl/cran-r.c3sl.ufpr.br_p443-20190303-0811.json new file mode 100644 index 0000000..0497178 --- /dev/null +++ b/data/ssl/cran-r.c3sl.ufpr.br_p443-20190303-0811.json @@ -0,0 +1,1237 @@ +[ + { + "id" : "service", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "offered with final" + } +, { + "id" : "NPN", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA DHE-RSA-ARIA256-GCM-SHA384 ECDHE-ARIA256-GCM-SHA384 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA DHE-RSA-ARIA128-GCM-SHA256 ECDHE-ARIA128-GCM-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519 X448" + } +, { + "id" : "DH_groups", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.3" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "OK", + "finding" : "TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES256-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES256-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM ECDHE-ARIA256-GCM-SHA384 DHE-RSA-ARIA256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM ECDHE-ARIA128-GCM-SHA256 DHE-RSA-ARIA128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES256-GCM-SHA384 AES256-CCM8 AES256-CCM ARIA256-GCM-SHA384 AES128-GCM-SHA256 AES128-CCM8 AES128-CCM ARIA128-GCM-SHA256 AES256-SHA256 CAMELLIA256-SHA256 AES128-SHA256 CAMELLIA128-SHA256 AES256-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_3", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'session ticket/#35' 'EC point formats/#11' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'encrypt-then-mac/#22' 'extended master secret/#23'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran-r.c3sl.ufpr.br/200.236.31.1", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-09 11:38" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-09 12:38" + } +, { + "id" : "certs_countServer", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.7 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "X-Powered-By: PHP/5.5.9-1ubuntu4.4" + } +, { + "id" : "cookie_count", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=960FD6646E82183BEED69B0F14A5C48916E55035162F0AF2EE43C04B9B9E2319" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 256 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.biodisk.org/210.218.217.24", + "port" : "443", + "severity" : "INFO", + "finding" : "261" + } +] diff --git a/data/ssl/cran.biotools.fr_p443-20190303-0837.json b/data/ssl/cran.biotools.fr_p443-20190303-0837.json new file mode 100644 index 0000000..e7367a5 --- /dev/null +++ b/data/ssl/cran.biotools.fr_p443-20190303-0837.json @@ -0,0 +1,969 @@ +[ + { + "id" : "service", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-08-29 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "2020-08-30 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16" + } +, { + "id" : "banner_application", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=467CD69F0E79EF5F9C6190F475EADC904927A4412F043A1A0C1B6914A40315A8" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.biotools.fr/87.98.155.219", + "port" : "443", + "severity" : "INFO", + "finding" : "95" + } +] diff --git a/data/ssl/cran.case.edu_p443-20190303-0846.json b/data/ssl/cran.case.edu_p443-20190303-0846.json new file mode 100644 index 0000000..0b477f6 --- /dev/null +++ b/data/ssl/cran.case.edu_p443-20190303-0846.json @@ -0,0 +1,1169 @@ +[ + { + "id" : "service", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "HIGH", + "finding" : "offered" + } +, { + "id" : "TLS1", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_SSLv3", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at SSLv3 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-01-31 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-31 18:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "365 days (=31536000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "includes subdomains" + } +, { + "id" : "HSTS_preload", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9" + } +, { + "id" : "banner_application", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses SSLv3+CBC" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9414C8EDB80AE714ADFCA27D1E49EDAE2965A37D352F8BB97AC6C366F4234F76" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_SSL3", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "SSLv3 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.case.edu/129.22.208.161", + "port" : "443", + "severity" : "INFO", + "finding" : "134" + } +] diff --git a/data/ssl/cran.cnr.berkeley.edu_p443-20190303-0846.json b/data/ssl/cran.cnr.berkeley.edu_p443-20190303-0846.json new file mode 100644 index 0000000..07f7649 --- /dev/null +++ b/data/ssl/cran.cnr.berkeley.edu_p443-20190303-0846.json @@ -0,0 +1,1020 @@ +[ + { + "id" : "service", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-10-14 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "2020-10-14 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "365 days (=31536000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "includes subdomains" + } +, { + "id" : "HSTS_preload", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 mod_perl/2.0.10 Perl/v5.16.3" + } +, { + "id" : "banner_application", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=010DFC3A1092ABDE4444CCD0803CBD2C375AE7FC1E93511BA8B4495C0094E355" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.cnr.berkeley.edu/169.229.19.202", + "port" : "443", + "severity" : "INFO", + "finding" : "134" + } +] diff --git a/data/ssl/cran.csiro.au_p443-20190303-0743.json b/data/ssl/cran.csiro.au_p443-20190303-0743.json new file mode 100644 index 0000000..057a6eb --- /dev/null +++ b/data/ssl/cran.csiro.au_p443-20190303-0743.json @@ -0,0 +1,1223 @@ +[ + { + "id" : "service", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-02-08 19:10" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "2021-02-08 19:20" + } +, { + "id" : "certs_countServer", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvsslg3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "iodef=mailto:hostmaster@csiro.au, issue=amazon.com, issue=comodoca.com, issue=comodo.com, issue=digicert.com, issue=letsencrypt.org, issue=quovadisglobal.com, issue=trust-provider.com, issue=usertrust.com, issuewild=amazon.com, issuewild=comodoca.com, issuewild=comodo.com, issuewild=digicert.com, issuewild=letsencrypt.org, issuewild=quovadisglobal.com, issuewild=trust-provider.com, issuewild=usertrust.com" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "182 days (=15768000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "includes subdomains" + } +, { + "id" : "HSTS_preload", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "CSIRO" + } +, { + "id" : "banner_application", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "SAMEORIGIN" + } +, { + "id" : "X-XSS-Protection", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "1; mode=block" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "Referrer-Policy", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "Referrer-Policy: strict-origin-when-cross-origin" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=4820899CAF4FAD52DB696CD50936CDB81C9C6982EA18586E906832BFCA8D8D02" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 2048 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc0a3", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 2048 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 2048 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 521 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc0", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x84", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 2048 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 2048 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 521 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_xbe", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xba", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x41", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.csiro.au/150.229.0.204", + "port" : "443", + "severity" : "INFO", + "finding" : "343" + } +] diff --git a/data/ssl/cran.curtin.edu.au_p443-20190303-0759.json b/data/ssl/cran.curtin.edu.au_p443-20190303-0759.json new file mode 100644 index 0000000..1713507 --- /dev/null +++ b/data/ssl/cran.curtin.edu.au_p443-20190303-0759.json @@ -0,0 +1,1062 @@ +[ + { + "id" : "service", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-06-14 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "2019-08-01 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/sha2-ev-server-g2.crl http://crl4.digicert.com/sha2-ev-server-g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips" + } +, { + "id" : "banner_application", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=351AAABE780C6063FBC79224DEF7441B7AE747E5EA95710E7B9A238D3B4EA57F" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.curtin.edu.au/13.236.186.97", + "port" : "443", + "severity" : "INFO", + "finding" : "349" + } +] diff --git a/data/ssl/cran.dcc.uchile.cl_p443-20190303-0835.json b/data/ssl/cran.dcc.uchile.cl_p443-20190303-0835.json new file mode 100644 index 0000000..21808b5 --- /dev/null +++ b/data/ssl/cran.dcc.uchile.cl_p443-20190303-0835.json @@ -0,0 +1,957 @@ +[ + { + "id" : "service", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-25 05:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-26 06:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.25 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=7C00DC768F4615751DEA14520FC22A4B9480ED26BCC98F971450D4CBAD4F2EBD" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.dcc.uchile.cl/192.80.24.196", + "port" : "443", + "severity" : "INFO", + "finding" : "192" + } +] diff --git a/data/ssl/cran.fiocruz.br_p443-20190303-0817.json b/data/ssl/cran.fiocruz.br_p443-20190303-0817.json new file mode 100644 index 0000000..d661df9 --- /dev/null +++ b/data/ssl/cran.fiocruz.br_p443-20190303-0817.json @@ -0,0 +1,1146 @@ +[ + { + "id" : "service", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-17 11:16" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-17 11:16" + } +, { + "id" : "certs_countServer", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.globalsign.com/gs/icpedusha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/icpedusha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips" + } +, { + "id" : "banner_application", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=0CE16D5D1C82AB8B9A1BD62F52CCFDF1A6C290D7BA8DBE1444E72CA03C72B2A9" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.fiocruz.br/157.86.96.98", + "port" : "443", + "severity" : "INFO", + "finding" : "235" + } +] diff --git a/data/ssl/cran.hafro.is_p443-20190303-0838.json b/data/ssl/cran.hafro.is_p443-20190303-0838.json new file mode 100644 index 0000000..00a7a5d --- /dev/null +++ b/data/ssl/cran.hafro.is_p443-20190303-0838.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-07-03 10:03" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-11 08:27" + } +, { + "id" : "certs_countServer", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/gsorganizationvalsha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "182 days (=15768000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.15 (CentOS)" + } +, { + "id" : "banner_application", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=D3B321FBC95B76019458178B9320087F998DD8B276FB40BFAD37F33A1C975218" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.hafro.is/130.208.58.81", + "port" : "443", + "severity" : "INFO", + "finding" : "247" + } +] diff --git a/data/ssl/cran.ism.ac.jp_p443-20190303-0839.json b/data/ssl/cran.ism.ac.jp_p443-20190303-0839.json new file mode 100644 index 0000000..d65f6ed --- /dev/null +++ b/data/ssl/cran.ism.ac.jp_p443-20190303-0839.json @@ -0,0 +1,1067 @@ +[ + { + "id" : "service", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-11-14 05:28" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "2019-12-15 05:28" + } +, { + "id" : "certs_countServer", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg4.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "http://niig4.ocsp.secomtrust.net" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.25 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=19CFF323FE245445DF8B4B9EE2128319EF5938A5133DE082F6E5E35758E93BE0" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.ism.ac.jp/133.58.120.95", + "port" : "443", + "severity" : "INFO", + "finding" : "222" + } +] diff --git a/data/ssl/cran.itam.mx_p443-20190303-0841.json b/data/ssl/cran.itam.mx_p443-20190303-0841.json new file mode 100644 index 0000000..782cbbb --- /dev/null +++ b/data/ssl/cran.itam.mx_p443-20190303-0841.json @@ -0,0 +1,1148 @@ +[ + { + "id" : "service", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "HIGH", + "finding" : "offered" + } +, { + "id" : "TLS1", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_SSLv3", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at SSLv3 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-09-10 14:51" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "2020-10-24 14:31" + } +, { + "id" : "certs_countServer", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/gsorganizationvalsha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "-18 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips" + } +, { + "id" : "banner_application", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses SSLv3+CBC" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=FF2661D32B10C3CF97A74DAD71021F48AB211173C01CE1023D8C9E8BF959CAD7" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_SSL3", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "SSLv3 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.itam.mx/148.205.148.16", + "port" : "443", + "severity" : "INFO", + "finding" : "136" + } +] diff --git a/data/ssl/cran.ma.imperial.ac.uk_p443-20190303-0846.json b/data/ssl/cran.ma.imperial.ac.uk_p443-20190303-0846.json new file mode 100644 index 0000000..9ff52a3 --- /dev/null +++ b/data/ssl/cran.ma.imperial.ac.uk_p443-20190303-0846.json @@ -0,0 +1,1097 @@ +[ + { + "id" : "service", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-08-18 11:51" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "2019-08-18 11:50" + } +, { + "id" : "certs_countServer", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvsslg2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.16 (FreeBSD) OpenSSL/1.0.1j-freebsd" + } +, { + "id" : "banner_application", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=22AAC2A250D76408487AEE575F5666301663578B369A37D2C91938BEDBAC5730" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.ma.imperial.ac.uk/155.198.195.11", + "port" : "443", + "severity" : "INFO", + "finding" : "164" + } +] diff --git a/data/ssl/cran.ms.unimelb.edu.au_p443-20190303-0753.json b/data/ssl/cran.ms.unimelb.edu.au_p443-20190303-0753.json new file mode 100644 index 0000000..01b5cba --- /dev/null +++ b/data/ssl/cran.ms.unimelb.edu.au_p443-20190303-0753.json @@ -0,0 +1,1055 @@ +[ + { + "id" : "service", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-07-10 18:41" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "2020-07-10 18:41" + } +, { + "id" : "certs_countServer", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvsslg3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.10.3 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=A6069C10053D8C1ADF89F3C99A30358D1566406615BF92E92AD53CAD6EE49AA8" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 1024 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 1024 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 1024 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 1024 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.ms.unimelb.edu.au/128.250.213.6", + "port" : "443", + "severity" : "INFO", + "finding" : "343" + } +] diff --git a/data/ssl/cran.mtu.edu_p443-20190303-0846.json b/data/ssl/cran.mtu.edu_p443-20190303-0846.json new file mode 100644 index 0000000..dbb90ba --- /dev/null +++ b/data/ssl/cran.mtu.edu_p443-20190303-0846.json @@ -0,0 +1,985 @@ +[ + { + "id" : "service", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "CRITICAL", + "finding" : "TLSv1.1 is not offered, and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_2", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_3", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered" + } +, { + "id" : "PFS", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "DH_groups", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "Default protocol TLS1.0" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA, 2048 bit DH (cbc) (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA at TLSv1 (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'session ticket/#35'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "off by -1 seconds from your localtime" + } +, { + "id" : "cert_numbers", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "E3009B7FE7AC02D80A22C93FA4279D83" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "6F0D84709B307507D31FE66A45C554DDC61CCE71" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "B505C5C9CAAAAFE3AE693EC16BF2F65AEBFD6A77FDF06C17699A8482E2C07116" + } +, { + "id" : "cert", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIRAOMAm3/nrALYCiLJP6QnnYMwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgwODAzMDAwMDAwWhcNMjAwODAy MjM1OTU5WjCB1TELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTQ5OTMxMQswCQYDVQQI EwJNSTERMA8GA1UEBxMISG91Z2h0b24xHDAaBgNVBAkTEzE0MDAgVG93bnNlbmQg RHJpdmUxKjAoBgNVBAoTIU1pY2hpZ2FuIFRlY2hub2xvZ2ljYWwgVW5pdmVyc2l0 eTE1MDMGA1UECxMsSW5mb3JtYXRpb24gVGVjaG5vbG9neSBTZXJ2aWNlcyBhbmQg U2VjdXJpdHkxFTATBgNVBAMTDGNyYW4ubXR1LmVkdTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAOCvYftwxh1K8uTE/HC0RMB6j4czwJKce6iBu3u6zSlL 6RHQSb2deJaFRmAN/W94cNlEvJhxkSaPkhtpcZSSHv4Dk3dM1jmLLRETnJJmVpLF Zo1OWe1bfQA/vGIgSzl0yHDYeSbKlPtTlrRt+5eTu36cSVRo0PgYlo0gl1xixYys NNqd6v3Obi59Q2DKsglKtHcOFJ/gcb45USuE/+gJMVkxuRCzo/R+oxBDFqgk6xPH wZxjgXQtMcY9uTrfLgshPFaMq+1Oh9uZt0EcFj14pjPDJ4pD3Vaoe3kzp1fRhlGI BSCxdfbrErX+HNvfmWxEiqFl63yIN2AP1YWSKBJcNPUCAwEAAaOCA0MwggM/MB8G A1UdIwQYMBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0GA1UdDgQWBBSSa4l41iYZ FH11uc+BAAjXTWrupjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4j AQQDAQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2Nl cnQvcmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5 oDegNYYzaHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2Vy dmVyQ0EuY3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2Ny dC51c2VydHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYB BQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wFwYDVR0RBBAwDoIMY3Jh bi5tdHUuZWR1MIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuS723dc5guuFC aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWUBf//tAAAEAwBIMEYCIQCyoW+zciXn 4Rwvos/AW0LPjsjtlDMgieZw3fvxuHHksgIhAMTP0dSTyDOeh/OqaV3izdioCPMJ oQyUVYgYaoQJz5u7AHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA AAFlAYAAOgAABAMARzBFAiABLXUg+CrTSp8MkMIU7A++2uaCFlgBzdhbfqaFsVEG twIhAIt5u+rgoTA7shthZZQyO8BUIhQuXHaVD7vJdagm4wDaAHYAVYHUwhaQNgFK 6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFlAYAAEAAABAMARzBFAiAi9K1OtMm7 3vimMjhY9n99zm10D0HzDnQgdJiOaC7/TwIhAKiSe46v+K8gB1rE7LoZ+H1zwC5s 32CLKOzVEAyimQhyMA0GCSqGSIb3DQEBCwUAA4IBAQCHQAQzGrbH0aB02iIXMpj4 302YWxVnOp/U8LqJ6Ehu5Nf/sXjrF8/DQbHgvhU1EiqH6V+McM4gglK9P44RH26L 8tnFukY8jwZ4dvkYthuxREAUvc4Xq5MhnJHj5jYsKTJoIBtXwD+FOtsRw7UEMhFN yBYLujcYjpXbhmXqUW8eTCHQ8MOonvfwiFA5o3c+8oFWfKE0BOXh0Jb3Hoor2kyb 7pUXS6lnpWcMES6DMerAtjocsEd6zBJ4E8x4dCZ+Kb6l3eavtKFCj0EUAxqTlXPX MeXQlYpN9M00+VB35KqFYTYjfgsGEhjbAi/Z4p6mcyouvkaUypSOIW2Zo7mXmzeg -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "cran.mtu.edu" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "cran.mtu.edu" + } +, { + "id" : "cert_subjectAltName", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "cran.mtu.edu" + } +, { + "id" : "cert_caIssuers", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "InCommon RSA Server CA (Internet2 from US)" + } +, { + "id" : "cert_trust", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "518 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-08-02 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "2020-08-02 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "5" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "finding" : "yes" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "iodef=mailto:security@mtu.edu, issue=comodoca.com, issue=comodo.com, issue=digicert.com, issue=globalsign.com, issuewild=comodoca.com, issuewild=comodo.com" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1 offered" + } +, { + "id" : "SWEET32", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=B505C5C9CAAAAFE3AE693EC16BF2F65AEBFD6A77FDF06C17699A8482E2C07116" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA AES128-SHA SEED-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- and no higher protocols as mitigation supported" + } +, { + "id" : "LUCKY13", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_x39", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x35", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_x16", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "scanTime", + "ip" : "cran.mtu.edu/141.219.191.249", + "port" : "443", + "severity" : "INFO", + "finding" : "146" + } +] diff --git a/data/ssl/cran.ncc.metu.edu.tr_p443-20190303-0845.json b/data/ssl/cran.ncc.metu.edu.tr_p443-20190303-0845.json new file mode 100644 index 0000000..ccead43 --- /dev/null +++ b/data/ssl/cran.ncc.metu.edu.tr_p443-20190303-0845.json @@ -0,0 +1,1027 @@ +[ + { + "id" : "service", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-07-08 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "2020-07-10 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "SAMEORIGIN" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9E7C957495DD1167AAF8687C99C8A1839056609D20F04AB4388AFB85E4152D34" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.ncc.metu.edu.tr/144.122.156.22", + "port" : "443", + "severity" : "INFO", + "finding" : "225" + } +] diff --git a/data/ssl/cran.pau.edu.tr_p443-20190303-0845.json b/data/ssl/cran.pau.edu.tr_p443-20190303-0845.json new file mode 100644 index 0000000..cc3177b --- /dev/null +++ b/data/ssl/cran.pau.edu.tr_p443-20190303-0845.json @@ -0,0 +1,1048 @@ +[ + { + "id" : "service", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-17 17:34" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-18 18:34" + } +, { + "id" : "certs_countServer", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.18 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=B1BBDADD17F75410E4012C83A5026DF86AC41E043707F40DC379D9B7D59CC6C1" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.pau.edu.tr/193.255.52.152", + "port" : "443", + "severity" : "INFO", + "finding" : "260" + } +] diff --git a/data/ssl/cran.rapporter.net_p443-20190303-0838.json b/data/ssl/cran.rapporter.net_p443-20190303-0838.json new file mode 100644 index 0000000..b7bb037 --- /dev/null +++ b/data/ssl/cran.rapporter.net_p443-20190303-0838.json @@ -0,0 +1,2003 @@ +[ + { + "id" : "service", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered with final" + } +, { + "id" : "NPN", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "secp224r1 prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "cipher_order", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "server -- TLS 1.3 client determined" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.3" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES256-SHA384" + } +, { + "id" : "cipherorder_TLSv1_3", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 64800 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-16 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "2019-07-26 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca4.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "cloudflare" + } +, { + "id" : "banner_application", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "1 at '/'" + } +, { + "id" : "cookie_secure", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "0/1 at '/' marked as secure" + } +, { + "id" : "cookie_httponly", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "All (1) at '/' marked as HttpOnly" + } +, { + "id" : "Expect-CT", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "max-age=604800, report-uri='https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct'" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "no RSA certificate, can't be used with SSLv2 elsewhere" + } +, { + "id" : "LOGJAM", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_x1302", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "x1302 TLS_AES_256_GCM_SHA384 ECDH 253 AESGCM 256 TLS_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x1303", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH 253 ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xcc14", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xcc14 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH 256 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD" + } +, { + "id" : "cipher_xc02c", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02c ECDHE-ECDSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc024", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc024 ECDHE-ECDSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc00a", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc00a ECDHE-ECDSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xcca9", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca9 ECDHE-ECDSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x1301", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "x1301 TLS_AES_128_GCM_SHA256 ECDH 253 AESGCM 128 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02b", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02b ECDHE-ECDSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc023", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc023 ECDHE-ECDSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc009", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc009 ECDHE-ECDSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.rapporter.net/104.27.133.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered with final" + } +, { + "id" : "NPN", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "secp224r1 prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "cipher_order", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "server -- TLS 1.3 client determined" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.3" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES256-SHA384" + } +, { + "id" : "cipherorder_TLSv1_3", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 64800 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-16 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "2019-07-26 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca4.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "cloudflare" + } +, { + "id" : "banner_application", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "1 at '/'" + } +, { + "id" : "cookie_secure", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "0/1 at '/' marked as secure" + } +, { + "id" : "cookie_httponly", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "All (1) at '/' marked as HttpOnly" + } +, { + "id" : "Expect-CT", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "max-age=604800, report-uri='https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct'" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "no RSA certificate, can't be used with SSLv2 elsewhere" + } +, { + "id" : "LOGJAM", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_x1302", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "x1302 TLS_AES_256_GCM_SHA384 ECDH 253 AESGCM 256 TLS_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x1303", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH 253 ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xcc14", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xcc14 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH 256 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD" + } +, { + "id" : "cipher_xc02c", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02c ECDHE-ECDSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc024", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc024 ECDHE-ECDSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc00a", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc00a ECDHE-ECDSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xcca9", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca9 ECDHE-ECDSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x1301", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "x1301 TLS_AES_128_GCM_SHA256 ECDH 253 AESGCM 128 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02b", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02b ECDHE-ECDSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc023", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc023 ECDHE-ECDSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc009", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "xc009 ECDHE-ECDSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.rapporter.net/104.27.132.206", + "port" : "443", + "severity" : "INFO", + "finding" : "179" + } +] diff --git a/data/ssl/cran.rediris.es_p443-20190303-0843.json b/data/ssl/cran.rediris.es_p443-20190303-0843.json new file mode 100644 index 0000000..acfae43 --- /dev/null +++ b/data/ssl/cran.rediris.es_p443-20190303-0843.json @@ -0,0 +1,1148 @@ +[ + { + "id" : "service", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "HIGH", + "finding" : "offered" + } +, { + "id" : "TLS1", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_SSLv3", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at SSLv3 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-19 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "2021-02-24 07:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips" + } +, { + "id" : "banner_application", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "DEBUG", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "test failed, non reproducible results. 2 TLS Session IDs 2, 000BADC0DE00C030000005FF01000100,000BADC0DE00C030000005FF01000100,C014000009FF01000100002300001603" + } +, { + "id" : "ROBOT", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses SSLv3+CBC" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=6A3C0FF63D5A6C1D6BD30A735B1700BC2D68AA1F147C1352DC240F9800674716" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_SSL3", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "SSLv3 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.rediris.es/130.206.13.2", + "port" : "443", + "severity" : "INFO", + "finding" : "181" + } +] diff --git a/data/ssl/cran.revolutionanalytics.com_p443-20190303-0847.json b/data/ssl/cran.revolutionanalytics.com_p443-20190303-0847.json new file mode 100644 index 0000000..91549fc --- /dev/null +++ b/data/ssl/cran.revolutionanalytics.com_p443-20190303-0847.json @@ -0,0 +1,999 @@ +[ + { + "id" : "service", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-04-14 17:32" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "2020-04-14 17:32" + } +, { + "id" : "certs_countServer", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "finding" : "yes" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl http://crl.microsoft.com/pki/mscorp/crl/Microsoft%20IT%20TLS%20CA%205.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.msocsp.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.10.3 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=5FFA159C93531679BF4815072F784C5EC34119109D6096FAEA7246DADA331A09" + } +, { + "id" : "LOGJAM", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.revolutionanalytics.com/13.66.202.75", + "port" : "443", + "severity" : "INFO", + "finding" : "136" + } +] diff --git a/data/ssl/cran.seoul.go.kr_p443-20190303-0841.json b/data/ssl/cran.seoul.go.kr_p443-20190303-0841.json new file mode 100644 index 0000000..82d90de --- /dev/null +++ b/data/ssl/cran.seoul.go.kr_p443-20190303-0841.json @@ -0,0 +1,1088 @@ +[ + { + "id" : "service", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-05-31 01:03" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-30 10:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl2.alphassl.com/gs/gsalphasha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/gsalphasha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "+31130 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.34 (Unix) DAV/2 mod_ssl/2.2.34 OpenSSL/1.0.1e-fips" + } +, { + "id" : "banner_application", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "ticketbleed", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=C442CF931C55D5D994787840606B228A37C62C145EC21F28B174A950DDF4159D" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.seoul.go.kr/175.193.201.35", + "port" : "443", + "severity" : "INFO", + "finding" : "330" + } +] diff --git a/data/ssl/cran.stat.auckland.ac.nz_p443-20190303-0841.json b/data/ssl/cran.stat.auckland.ac.nz_p443-20190303-0841.json new file mode 100644 index 0000000..d880faa --- /dev/null +++ b/data/ssl/cran.stat.auckland.ac.nz_p443-20190303-0841.json @@ -0,0 +1,992 @@ +[ + { + "id" : "service", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "cipher_order", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA ECDHE-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-14 19:53" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-14 20:02" + } +, { + "id" : "certs_countServer", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvsslg3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.15 (Red Hat)" + } +, { + "id" : "banner_application", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=47F0F2AC02C00EFC8116A9342EEF585571C99A279730CB68F7426D807100215B" + } +, { + "id" : "LOGJAM", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.stat.auckland.ac.nz/130.216.2.235", + "port" : "443", + "severity" : "INFO", + "finding" : "345" + } +] diff --git a/data/ssl/cran.stat.nus.edu.sg_p443-20190303-0842.json b/data/ssl/cran.stat.nus.edu.sg_p443-20190303-0842.json new file mode 100644 index 0000000..07f76ac --- /dev/null +++ b/data/ssl/cran.stat.nus.edu.sg_p443-20190303-0842.json @@ -0,0 +1,1111 @@ +[ + { + "id" : "service", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-17 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-19 07:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/ssca-sha2-g6.crl http://crl4.digicert.com/ssca-sha2-g6.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9" + } +, { + "id" : "banner_application", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9B13E9B7B1702960B06E44528B4136F0E0903C1A348235AB9FDCDCBC7C3B9EF8" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.stat.nus.edu.sg/137.132.33.20", + "port" : "443", + "severity" : "INFO", + "finding" : "312" + } +] diff --git a/data/ssl/cran.stat.unipd.it_p443-20190303-0839.json b/data/ssl/cran.stat.unipd.it_p443-20190303-0839.json new file mode 100644 index 0000000..16a1575 --- /dev/null +++ b/data/ssl/cran.stat.unipd.it_p443-20190303-0839.json @@ -0,0 +1,1188 @@ +[ + { + "id" : "service", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 1024 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-05-31 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-02 20:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "-225 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.10.3" + } +, { + "id" : "banner_application", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=5B880BFD7DFFAE56FE9D814099C9A86FE5D1DA35A41C2D7308334BFFB37DF5CD" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 1024 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 1024 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc0a3", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 1024 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 1024 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 521 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 1024 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 1024 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc0", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x84", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 1024 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 1024 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 1024 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 521 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_xbe", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 1024 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 1024 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xba", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x41", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.stat.unipd.it/147.162.35.231", + "port" : "443", + "severity" : "INFO", + "finding" : "146" + } +] diff --git a/data/ssl/cran.stat.upd.edu.ph_p443-20190303-0842.json b/data/ssl/cran.stat.upd.edu.ph_p443-20190303-0842.json new file mode 100644 index 0000000..0fc98d3 --- /dev/null +++ b/data/ssl/cran.stat.upd.edu.ph_p443-20190303-0842.json @@ -0,0 +1,1083 @@ +[ + { + "id" : "service", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15' 'next protocol/#13172'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 86400 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-27 12:34" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-27 13:34" + } +, { + "id" : "certs_countServer", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "182 days (=15768000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx" + } +, { + "id" : "banner_application", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3CE6A657EF60C3BB2C3AE2F02862621B6D49888E7B518B3F56D7C2DEEDB0B378" + } +, { + "id" : "LOGJAM", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.stat.upd.edu.ph/202.90.159.172", + "port" : "443", + "severity" : "INFO", + "finding" : "367" + } +] diff --git a/data/ssl/cran.uib.no_p443-20190303-0842.json b/data/ssl/cran.uib.no_p443-20190303-0842.json new file mode 100644 index 0000000..4fe6c21 --- /dev/null +++ b/data/ssl/cran.uib.no_p443-20190303-0842.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-08-24 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "2019-08-30 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.15 (Red Hat)" + } +, { + "id" : "banner_application", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=DA0B3763D8829051F3F568EF0485915D79AC6616684ED1B164C268F5557380D8" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.uib.no/129.177.13.120", + "port" : "443", + "severity" : "INFO", + "finding" : "189" + } +] diff --git a/data/ssl/cran.um.ac.ir_p443-20190303-0839.json b/data/ssl/cran.um.ac.ir_p443-20190303-0839.json new file mode 100644 index 0000000..f070d40 --- /dev/null +++ b/data/ssl/cran.um.ac.ir_p443-20190303-0839.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-13 00:13" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "2021-02-12 00:13" + } +, { + "id" : "certs_countServer", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.certum.pl/dvcasha2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "http://dvcasha2.ocsp-certum.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.25 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=B267A516ADE5F55F869787BE193D189493B70A09A32BFC8042861FCB9F5E25E5" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.um.ac.ir/46.143.212.45", + "port" : "443", + "severity" : "INFO", + "finding" : "292" + } +] diff --git a/data/ssl/cran.uni-muenster.de_p443-20190303-0838.json b/data/ssl/cran.uni-muenster.de_p443-20190303-0838.json new file mode 100644 index 0000000..d913471 --- /dev/null +++ b/data/ssl/cran.uni-muenster.de_p443-20190303-0838.json @@ -0,0 +1,1188 @@ +[ + { + "id" : "service", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only ( Apple (self signed CA in chain) , OK -> Mozilla Microsoft Linux Java" + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "691 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-10-22 09:27" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-23 08:27" + } +, { + "id" : "certs_countServer", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.pca.dfn.de/OCSP-Server/OCSP" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "iodef=mailto:ca@uni-muenster.de, issue=pki.dfn.de" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.29 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=EF16888A30D719C052A8A1F32C890979BA7388ECEC38029C9EFF9C4BC7555B96" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 2048 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc0a3", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 2048 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 2048 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 521 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc0", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x84", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 2048 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 2048 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 521 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_xbe", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xba", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x41", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.uni-muenster.de/128.176.148.9", + "port" : "443", + "severity" : "INFO", + "finding" : "158" + } +] diff --git a/data/ssl/cran.univ-paris1.fr_p443-20190303-0837.json b/data/ssl/cran.univ-paris1.fr_p443-20190303-0837.json new file mode 100644 index 0000000..c95e969 --- /dev/null +++ b/data/ssl/cran.univ-paris1.fr_p443-20190303-0837.json @@ -0,0 +1,1020 @@ +[ + { + "id" : "service", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-10-08 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-10 19:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.10 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=69918C5A6A2AA8239A820477C662BCEB4E991E8A599C4F8DD19682A710DF18F0" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.univ-paris1.fr/194.214.26.146", + "port" : "443", + "severity" : "INFO", + "finding" : "119" + } +] diff --git a/data/ssl/cran.usthb.dz_p443-20190303-0733.json b/data/ssl/cran.usthb.dz_p443-20190303-0733.json new file mode 100644 index 0000000..5872821 --- /dev/null +++ b/data/ssl/cran.usthb.dz_p443-20190303-0733.json @@ -0,0 +1,1027 @@ +[ + { + "id" : "service", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-27 14:40" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-28 15:40" + } +, { + "id" : "certs_countServer", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "likely not vulnerable (timed out)" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=6427A96D3CFD32A58B958A75845506737D8ED757C87EB72CB2E4240E969E4E54" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "cran.usthb.dz/193.194.89.173", + "port" : "443", + "severity" : "INFO", + "finding" : "594" + } +] diff --git a/data/ssl/cran.wu.ac.at_p443-20190303-0804.json b/data/ssl/cran.wu.ac.at_p443-20190303-0804.json new file mode 100644 index 0000000..dae48d6 --- /dev/null +++ b/data/ssl/cran.wu.ac.at_p443-20190303-0804.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-18 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "2020-06-23 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "301 Moved Permanently ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.10 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/' (30x detected, better try target URL of 30x)" + } +, { + "id" : "security_headers", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=2858C9A5DCEF1C83532893636E10FC69FE8CAE7A83173323CBCE173F216705FF" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.wu.ac.at/137.208.57.37", + "port" : "443", + "severity" : "INFO", + "finding" : "131" + } +] diff --git a/data/ssl/cran.yu.ac.kr_p443-20190303-0840.json b/data/ssl/cran.yu.ac.kr_p443-20190303-0840.json new file mode 100644 index 0000000..971ede6 --- /dev/null +++ b/data/ssl/cran.yu.ac.kr_p443-20190303-0840.json @@ -0,0 +1,1120 @@ +[ + { + "id" : "service", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "HIGH", + "finding" : "offered" + } +, { + "id" : "TLS1", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_SSLv3", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at SSLv3 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-09-26 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "2019-10-09 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses SSLv3+CBC" + } +, { + "id" : "fallback_SCSV", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=31B628B1EC195E00E6FED8B22C3B00C06F31F37BBCBCB5991D7F011B38195AB3" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_SSL3", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA" + } +, { + "id" : "cipher_xc030", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "SSLv3 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "cran.yu.ac.kr/165.229.11.55", + "port" : "443", + "severity" : "INFO", + "finding" : "300" + } +] diff --git a/data/ssl/dirichlet.mat.puc.cl_p443-20190303-0835.json b/data/ssl/dirichlet.mat.puc.cl_p443-20190303-0835.json new file mode 100644 index 0000000..459557a --- /dev/null +++ b/data/ssl/dirichlet.mat.puc.cl_p443-20190303-0835.json @@ -0,0 +1,1048 @@ +[ + { + "id" : "service", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-11 21:28" + } +, { + "id" : "cert_notAfter", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-12 22:28" + } +, { + "id" : "certs_countServer", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.7 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/'" + } +, { + "id" : "security_headers", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=4B5B453803110F8B2717A3392751A933A1F57E8319A64C2CA8D5295D4A21F33B" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "dirichlet.mat.puc.cl/146.155.23.20", + "port" : "443", + "severity" : "INFO", + "finding" : "243" + } +] diff --git a/data/ssl/espejito.fder.edu.uy_p443-20190303-0848.json b/data/ssl/espejito.fder.edu.uy_p443-20190303-0848.json new file mode 100644 index 0000000..5db6bf3 --- /dev/null +++ b/data/ssl/espejito.fder.edu.uy_p443-20190303-0848.json @@ -0,0 +1,1034 @@ +[ + { + "id" : "service", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-07 04:54" + } +, { + "id" : "cert_notAfter", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-07 05:54" + } +, { + "id" : "certs_countServer", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=95862718011765E5B4FE220F0F3287EFF3E8FCC30B9E57286057330603D9F976" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x6b", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "espejito.fder.edu.uy/190.64.49.124", + "port" : "443", + "severity" : "INFO", + "finding" : "304" + } +] diff --git a/data/ssl/fourdots.com_p443-20190303-0842.json b/data/ssl/fourdots.com_p443-20190303-0842.json new file mode 100644 index 0000000..74b5922 --- /dev/null +++ b/data/ssl/fourdots.com_p443-20190303-0842.json @@ -0,0 +1,2615 @@ +[ + { + "id" : "service", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered with final" + } +, { + "id" : "NPN", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-RSA-CHACHA20-POLY1305-OLD ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "secp224r1 prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "cipher_order", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "server -- TLS 1.3 client determined" + } +, { + "id" : "protocol_negotiated", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.3" + } +, { + "id" : "cipher_negotiated", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-CHACHA20-POLY1305-OLD ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES128-SHA256 AES128-GCM-SHA256 AES128-SHA AES128-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES256-SHA384 AES256-GCM-SHA384 AES256-SHA AES256-SHA256" + } +, { + "id" : "cipherorder_TLSv1_3", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 64800 seconds only (", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "6027E8A59B188C9D71E52363BE7862D8" + } +, { + "id" : "cert_fingerprintSHA1 ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "63F258AB5BDB4217B7EA3E48376A8F2DFED1426D" + } +, { + "id" : "cert_fingerprintSHA256 ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "E511D9DB3A45B55CC3E4E60F611858E572B0D0DC7C69998AA375846405BE3DC5" + } +, { + "id" : "cert ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIIcTCCB1mgAwIBAgIQYCfopZsYjJ1x5SNjvnhi2DANBgkqhkiG9w0BAQsFADCB kjELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxODA2BgNV BAMTL0NPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QSAyMB4XDTE4MTIwNjAwMDAwMFoXDTE5MDYxNDIzNTk1OVowbDEhMB8GA1UECxMY RG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMSEwHwYDVQQLExhQb3NpdGl2ZVNTTCBN dWx0aS1Eb21haW4xJDAiBgNVBAMTG3NzbDM5MDg4OS5jbG91ZGZsYXJlc3NsLmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/V+j8+k9lQmIWbkN/x wRAAwDPGNzkignnKpr1UZ56GxzKi98hQOqC1GPnBZEK8eBf3dDBFNKcvRLz0319F 8hfBH1dPZfF336k+Wny3dZFCE6FRwGDtKMQFFmsS2pkgvuYbbOK3y34ixBOhEA22 0JjBBrX1ADaV4Xdy2DzcJZrq4l78XArC+MaW1URiPlQ/rU2Z8cclM1z1QFZb9QP0 rT1AXFIZqTkNXqdX/TvF/n4aateOsWxFvxDr1BtBA4sMLHsZ+N29LHzzhOny/32T qZsvDrI0qpGEsKRKqNEQRrbFqmhrIz2CNRKKiLGt/O09hCjGAzqs/Sowm2a7uiLJ wkECAwEAAaOCBOYwggTiMB8GA1UdIwQYMBaAFNSw9P1PnEKkbNw9Lu5bQRjJrQP2 MB0GA1UdDgQWBBStJb7Tia8xYbeFw4eQkVP6+Gn1mjAOBgNVHQ8BAf8EBAMCBaAw DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYD VR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3Nl Y3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVgYDVR0fBE8wTTBLoEmgR4ZF aHR0cDovL2NybC5jb21vZG9jYTQuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRp b25TZWN1cmVTZXJ2ZXJDQTIuY3JsMIGIBggrBgEFBQcBAQR8MHowUQYIKwYBBQUH MAKGRWh0dHA6Ly9jcnQuY29tb2RvY2E0LmNvbS9DT01PRE9SU0FEb21haW5WYWxp ZGF0aW9uU2VjdXJlU2VydmVyQ0EyLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29j c3AuY29tb2RvY2E0LmNvbTCCAiYGA1UdEQSCAh0wggIZghtzc2wzOTA4ODkuY2xv dWRmbGFyZXNzbC5jb22CFSouYWxnaHVyYWlyY2VudHJlLmNvbYIUKi5jYWNoZWFs dW1uaS5vcmcudWuCCiouY2hsYS5jb22CDiouZGpib3JoYW4uY29tggwqLmVhc3lw YXkuYW2CDiouZm91cmRvdHMuY29tghMqLmlzdGVhZHJpc2Uub3JnLnVrggwqLmph cGFuZC5iaXqCDyoubHVuYWltYW5pLmNvbYIPKi5xdWFsaHViLmNvLnVrggoqLnF2 ZXN0LmlvghUqLnNhbXVlbGJlcm5zdGVpbi5jb22CDyouc291bHNwbGl0Lm5ldIIW Ki5zb3V0aGJlYWNoYXZlbnVlLmNvbYITKi51cmJhbmJlbGxlbWFnLmNvbYITYWxn aHVyYWlyY2VudHJlLmNvbYISY2FjaGVhbHVtbmkub3JnLnVrgghjaGxhLmNvbYIM ZGpib3JoYW4uY29tggplYXN5cGF5LmFtggxmb3VyZG90cy5jb22CEWlzdGVhZHJp c2Uub3JnLnVrggpqYXBhbmQuYml6gg1sdW5haW1hbmkuY29tgg1xdWFsaHViLmNv LnVrgghxdmVzdC5pb4ITc2FtdWVsYmVybnN0ZWluLmNvbYINc291bHNwbGl0Lm5l dIIUc291dGhiZWFjaGF2ZW51ZS5jb22CEXVyYmFuYmVsbGVtYWcuY29tMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk No4e0YUAAAFngpgLwQAABAMARzBFAiEA2irRKzGodO0BVNpiqvPToIuFhIlsTldK 0ddDCAyxzcoCIGYvcdy4shtOCThcxEVjaDb8mJDHhC8YchKxZmogm0ptAHUAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFngpgMDAAABAMARjBEAiB5 Nu41Y1zONyWVYwFTU2kBXeRaEiUvHUSNkfm2VQV6GwIgSGVwPFw8GYrwwxpwv0B7 hpUxh29MM0L5nOCff+mDcmIwDQYJKoZIhvcNAQELBQADggEBALb45KLjKc4/x/0U 89GVpv6390BivfHaZcumMFZSkPGzkijzaSJujvEwnEzRFogcd88IINEFiS1xjIMp eTAO9Dl+gOBGUCFrj3ge3HFOja/i8sxTa/MnN5EkYqLupysJyUsBI9lEa+Fuo00R DkNmfvtB3k1ljkX5H5c2ex/4zD2Gvpud1xLbD+qbtMO7sLzMMzedk15Ioq2Ha3ab 6mVLVgYzIW/P2iDCQlNdqNutDdhKtco11oqdo4mY4NJzZKstsHaq4x7/75XU86aq 0PezX2R3aPesiYk2dlyX+ezwv6EfRlD55+UiyMy2dGfIFD6pu3NfK38LTYiweRSd 3OZMnow= -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "ssl390889.cloudflaressl.com" + } +, { + "id" : "cert_commonName_wo_SNI ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390890.cloudflaressl.com" + } +, { + "id" : "cert_subjectAltName ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390889.cloudflaressl.com *.alghuraircentre.com *.cachealumni.org.uk *.chla.com *.djborhan.com *.easypay.am *.fourdots.com *.isteadrise.org.uk *.japand.biz *.lunaimani.com *.qualhub.co.uk *.qvest.io *.samuelbernstein.com *.soulsplit.net *.southbeachavenue.com *.urbanbellemag.com alghuraircentre.com cachealumni.org.uk chla.com djborhan.com easypay.am fourdots.com isteadrise.org.uk japand.biz lunaimani.com qualhub.co.uk qvest.io samuelbernstein.com soulsplit.net southbeachavenue.com urbanbellemag.com" + } +, { + "id" : "cert_caIssuers ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "COMODO RSA Domain Validation Secure Server CA 2 (COMODO CA Limited from GB)" + } +, { + "id" : "cert_trust ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "103 >= 60 days" + } +, { + "id" : "cert_notBefore ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-12-05 19:00" + } +, { + "id" : "cert_notAfter ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "2019-06-14 19:59" + } +, { + "id" : "certs_countServer ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crl" + } +, { + "id" : "cert_ocspURL ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca4.com" + } +, { + "id" : "OCSP_stapling ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "cert_signatureAlgorithm ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "ECDSA with SHA256" + } +, { + "id" : "cert_keySize ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "256 EC bits" + } +, { + "id" : "cert_keyUsage ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature" + } +, { + "id" : "cert_extKeyUsage ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "B83F38066E31DE8E42D67A7889F13F4C" + } +, { + "id" : "cert_fingerprintSHA1 ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "529ACD1EEA038B8C7B15CCD60C592BD752FCC978" + } +, { + "id" : "cert_fingerprintSHA256 ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "608D7B2C557AA74679E3A7A2BA7319AE27E91E9F0BD141DF488B52435751E983" + } +, { + "id" : "cert ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIG5zCCBo2gAwIBAgIRALg/OAZuMd6OQtZ6eInxP0wwCgYIKoZIzj0EAwIwgZIx CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNV BAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTgwNgYDVQQD Ey9DT01PRE8gRUNDIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0Eg MjAeFw0xODEyMDYwMDAwMDBaFw0xOTA2MTQyMzU5NTlaMGwxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEhMB8GA1UECxMYUG9zaXRpdmVTU0wgTXVs dGktRG9tYWluMSQwIgYDVQQDExtzc2wzOTA4OTAuY2xvdWRmbGFyZXNzbC5jb20w WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ1a9liKQ56x4rTe7zBj28XJP2LpSKb bZCgW1p32gWBYSg6iUd+33ciXC53YZrhrz9Xa+2IXSiqA6j6EjYOblR9o4IE5zCC BOMwHwYDVR0jBBgwFoAUQAlhZ/C8g3FP3hIILG/U1Ct2PZYwHQYDVR0OBBYEFPZ3 LTA4oACXRKmWXCme/a4IkN0AMA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAA MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysG AQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5j b20vQ1BTMAgGBmeBDAECATBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLmNv bW9kb2NhNC5jb20vQ09NT0RPRUNDRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZl ckNBMi5jcmwwgYgGCCsGAQUFBwEBBHwwejBRBggrBgEFBQcwAoZFaHR0cDovL2Ny dC5jb21vZG9jYTQuY29tL0NPTU9ET0VDQ0RvbWFpblZhbGlkYXRpb25TZWN1cmVT ZXJ2ZXJDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC5jb21vZG9jYTQu Y29tMIICJgYDVR0RBIICHTCCAhmCG3NzbDM5MDg5MC5jbG91ZGZsYXJlc3NsLmNv bYIVKi5hbGdodXJhaXJjZW50cmUuY29tghQqLmNhY2hlYWx1bW5pLm9yZy51a4IK Ki5jaGxhLmNvbYIOKi5kamJvcmhhbi5jb22CDCouZWFzeXBheS5hbYIOKi5mb3Vy ZG90cy5jb22CEyouaXN0ZWFkcmlzZS5vcmcudWuCDCouamFwYW5kLmJpeoIPKi5s dW5haW1hbmkuY29tgg8qLnF1YWxodWIuY28udWuCCioucXZlc3QuaW+CFSouc2Ft dWVsYmVybnN0ZWluLmNvbYIPKi5zb3Vsc3BsaXQubmV0ghYqLnNvdXRoYmVhY2hh dmVudWUuY29tghMqLnVyYmFuYmVsbGVtYWcuY29tghNhbGdodXJhaXJjZW50cmUu Y29tghJjYWNoZWFsdW1uaS5vcmcudWuCCGNobGEuY29tggxkamJvcmhhbi5jb22C CmVhc3lwYXkuYW2CDGZvdXJkb3RzLmNvbYIRaXN0ZWFkcmlzZS5vcmcudWuCCmph cGFuZC5iaXqCDWx1bmFpbWFuaS5jb22CDXF1YWxodWIuY28udWuCCHF2ZXN0Lmlv ghNzYW11ZWxiZXJuc3RlaW4uY29tgg1zb3Vsc3BsaXQubmV0ghRzb3V0aGJlYWNo YXZlbnVlLmNvbYIRdXJiYW5iZWxsZW1hZy5jb20wggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWeCmAvE AAAEAwBHMEUCIQC72ImbbSIr55P98FqPlnZHBEEsN0+1Mo4gHFnMo6vs+QIgEbIu cHJjVawAMORE74CjPxBo/YVsdf/8eb4H0IBwv0sAdgB0ftqDMa0zEJEhnM4lT0Jw wr/9XkIgCMY3NXnmEHvMVgAAAWeCmAwfAAAEAwBHMEUCIBPPkyTgQzAezlHwhvz1 5xFaGCuGzDyeUaeMiLMF74L4AiEAwbKtDM0oflDVM77nTSgMNRJHm5x+lRjvA9CK fouqeFQwCgYIKoZIzj0EAwIDSAAwRQIgA6RwMe/4feAXFHmafyLoCyM08yk57GY7 VoExc2MZ9KACIQC6X8CDmKNYauEaqmhEmyP9RF4YGyRUo+6tzHd/khtVVw== -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "ssl390890.cloudflaressl.com" + } +, { + "id" : "cert_commonName_wo_SNI ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390890.cloudflaressl.com" + } +, { + "id" : "cert_subjectAltName ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390890.cloudflaressl.com *.alghuraircentre.com *.cachealumni.org.uk *.chla.com *.djborhan.com *.easypay.am *.fourdots.com *.isteadrise.org.uk *.japand.biz *.lunaimani.com *.qualhub.co.uk *.qvest.io *.samuelbernstein.com *.soulsplit.net *.southbeachavenue.com *.urbanbellemag.com alghuraircentre.com cachealumni.org.uk chla.com djborhan.com easypay.am fourdots.com isteadrise.org.uk japand.biz lunaimani.com qualhub.co.uk qvest.io samuelbernstein.com soulsplit.net southbeachavenue.com urbanbellemag.com" + } +, { + "id" : "cert_caIssuers ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "COMODO ECC Domain Validation Secure Server CA 2 (COMODO CA Limited from GB)" + } +, { + "id" : "cert_trust ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "103 >= 60 days" + } +, { + "id" : "cert_notBefore ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-12-05 19:00" + } +, { + "id" : "cert_notAfter ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "2019-06-14 19:59" + } +, { + "id" : "certs_countServer ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl" + } +, { + "id" : "cert_ocspURL ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca4.com" + } +, { + "id" : "OCSP_stapling ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency ", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirror/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "180 days (=15552000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "domain IS marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "cloudflare" + } +, { + "id" : "banner_application", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "1 at '/mirror/CRAN/'" + } +, { + "id" : "cookie_secure", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "All (1) at '/mirror/CRAN/' marked as secure" + } +, { + "id" : "cookie_httponly", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "All (1) at '/mirror/CRAN/' marked as HttpOnly" + } +, { + "id" : "X-XSS-Protection", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "1; mode=block" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "Expect-CT", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "max-age=604800, report-uri='https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct'" + } +, { + "id" : "X-UA-Compatible", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "X-UA-Compatible: IE=Edge" + } +, { + "id" : "banner_reverseproxy", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/mirror/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=E511D9DB3A45B55CC3E4E60F611858E572B0D0DC7C69998AA375846405BE3DC5" + } +, { + "id" : "LOGJAM", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_x1302", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x1302 TLS_AES_256_GCM_SHA384 ECDH 253 AESGCM 256 TLS_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x1303", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH 253 ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xcc14", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcc14 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH 256 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD" + } +, { + "id" : "cipher_xcc13", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcc13 ECDHE-RSA-CHACHA20-POLY1305-OLD ECDH 256 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256_OLD" + } +, { + "id" : "cipher_xc030", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc02c", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02c ECDHE-ECDSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc024", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc024 ECDHE-ECDSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc00a", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc00a ECDHE-ECDSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xcca9", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca9 ECDHE-ECDSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xcca8", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x9d", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x1301", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x1301 TLS_AES_128_GCM_SHA256 ECDH 253 AESGCM 128 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02f", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02b", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02b ECDHE-ECDSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc023", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc023 ECDHE-ECDSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc009", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc009 ECDHE-ECDSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "fourdots.com/104.25.95.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered with final" + } +, { + "id" : "NPN", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-RSA-CHACHA20-POLY1305-OLD ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "secp224r1 prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "cipher_order", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "server -- TLS 1.3 client determined" + } +, { + "id" : "protocol_negotiated", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.3" + } +, { + "id" : "cipher_negotiated", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-CHACHA20-POLY1305-OLD ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES128-SHA256 AES128-GCM-SHA256 AES128-SHA AES128-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES256-SHA384 AES256-GCM-SHA384 AES256-SHA AES256-SHA256" + } +, { + "id" : "cipherorder_TLSv1_3", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 64800 seconds only (", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "6027E8A59B188C9D71E52363BE7862D8" + } +, { + "id" : "cert_fingerprintSHA1 ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "63F258AB5BDB4217B7EA3E48376A8F2DFED1426D" + } +, { + "id" : "cert_fingerprintSHA256 ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "E511D9DB3A45B55CC3E4E60F611858E572B0D0DC7C69998AA375846405BE3DC5" + } +, { + "id" : "cert ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIIcTCCB1mgAwIBAgIQYCfopZsYjJ1x5SNjvnhi2DANBgkqhkiG9w0BAQsFADCB kjELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxODA2BgNV BAMTL0NPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QSAyMB4XDTE4MTIwNjAwMDAwMFoXDTE5MDYxNDIzNTk1OVowbDEhMB8GA1UECxMY RG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMSEwHwYDVQQLExhQb3NpdGl2ZVNTTCBN dWx0aS1Eb21haW4xJDAiBgNVBAMTG3NzbDM5MDg4OS5jbG91ZGZsYXJlc3NsLmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/V+j8+k9lQmIWbkN/x wRAAwDPGNzkignnKpr1UZ56GxzKi98hQOqC1GPnBZEK8eBf3dDBFNKcvRLz0319F 8hfBH1dPZfF336k+Wny3dZFCE6FRwGDtKMQFFmsS2pkgvuYbbOK3y34ixBOhEA22 0JjBBrX1ADaV4Xdy2DzcJZrq4l78XArC+MaW1URiPlQ/rU2Z8cclM1z1QFZb9QP0 rT1AXFIZqTkNXqdX/TvF/n4aateOsWxFvxDr1BtBA4sMLHsZ+N29LHzzhOny/32T qZsvDrI0qpGEsKRKqNEQRrbFqmhrIz2CNRKKiLGt/O09hCjGAzqs/Sowm2a7uiLJ wkECAwEAAaOCBOYwggTiMB8GA1UdIwQYMBaAFNSw9P1PnEKkbNw9Lu5bQRjJrQP2 MB0GA1UdDgQWBBStJb7Tia8xYbeFw4eQkVP6+Gn1mjAOBgNVHQ8BAf8EBAMCBaAw DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYD VR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3Nl Y3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVgYDVR0fBE8wTTBLoEmgR4ZF aHR0cDovL2NybC5jb21vZG9jYTQuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRp b25TZWN1cmVTZXJ2ZXJDQTIuY3JsMIGIBggrBgEFBQcBAQR8MHowUQYIKwYBBQUH MAKGRWh0dHA6Ly9jcnQuY29tb2RvY2E0LmNvbS9DT01PRE9SU0FEb21haW5WYWxp ZGF0aW9uU2VjdXJlU2VydmVyQ0EyLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29j c3AuY29tb2RvY2E0LmNvbTCCAiYGA1UdEQSCAh0wggIZghtzc2wzOTA4ODkuY2xv dWRmbGFyZXNzbC5jb22CFSouYWxnaHVyYWlyY2VudHJlLmNvbYIUKi5jYWNoZWFs dW1uaS5vcmcudWuCCiouY2hsYS5jb22CDiouZGpib3JoYW4uY29tggwqLmVhc3lw YXkuYW2CDiouZm91cmRvdHMuY29tghMqLmlzdGVhZHJpc2Uub3JnLnVrggwqLmph cGFuZC5iaXqCDyoubHVuYWltYW5pLmNvbYIPKi5xdWFsaHViLmNvLnVrggoqLnF2 ZXN0LmlvghUqLnNhbXVlbGJlcm5zdGVpbi5jb22CDyouc291bHNwbGl0Lm5ldIIW Ki5zb3V0aGJlYWNoYXZlbnVlLmNvbYITKi51cmJhbmJlbGxlbWFnLmNvbYITYWxn aHVyYWlyY2VudHJlLmNvbYISY2FjaGVhbHVtbmkub3JnLnVrgghjaGxhLmNvbYIM ZGpib3JoYW4uY29tggplYXN5cGF5LmFtggxmb3VyZG90cy5jb22CEWlzdGVhZHJp c2Uub3JnLnVrggpqYXBhbmQuYml6gg1sdW5haW1hbmkuY29tgg1xdWFsaHViLmNv LnVrgghxdmVzdC5pb4ITc2FtdWVsYmVybnN0ZWluLmNvbYINc291bHNwbGl0Lm5l dIIUc291dGhiZWFjaGF2ZW51ZS5jb22CEXVyYmFuYmVsbGVtYWcuY29tMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk No4e0YUAAAFngpgLwQAABAMARzBFAiEA2irRKzGodO0BVNpiqvPToIuFhIlsTldK 0ddDCAyxzcoCIGYvcdy4shtOCThcxEVjaDb8mJDHhC8YchKxZmogm0ptAHUAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFngpgMDAAABAMARjBEAiB5 Nu41Y1zONyWVYwFTU2kBXeRaEiUvHUSNkfm2VQV6GwIgSGVwPFw8GYrwwxpwv0B7 hpUxh29MM0L5nOCff+mDcmIwDQYJKoZIhvcNAQELBQADggEBALb45KLjKc4/x/0U 89GVpv6390BivfHaZcumMFZSkPGzkijzaSJujvEwnEzRFogcd88IINEFiS1xjIMp eTAO9Dl+gOBGUCFrj3ge3HFOja/i8sxTa/MnN5EkYqLupysJyUsBI9lEa+Fuo00R DkNmfvtB3k1ljkX5H5c2ex/4zD2Gvpud1xLbD+qbtMO7sLzMMzedk15Ioq2Ha3ab 6mVLVgYzIW/P2iDCQlNdqNutDdhKtco11oqdo4mY4NJzZKstsHaq4x7/75XU86aq 0PezX2R3aPesiYk2dlyX+ezwv6EfRlD55+UiyMy2dGfIFD6pu3NfK38LTYiweRSd 3OZMnow= -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "ssl390889.cloudflaressl.com" + } +, { + "id" : "cert_commonName_wo_SNI ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390890.cloudflaressl.com" + } +, { + "id" : "cert_subjectAltName ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390889.cloudflaressl.com *.alghuraircentre.com *.cachealumni.org.uk *.chla.com *.djborhan.com *.easypay.am *.fourdots.com *.isteadrise.org.uk *.japand.biz *.lunaimani.com *.qualhub.co.uk *.qvest.io *.samuelbernstein.com *.soulsplit.net *.southbeachavenue.com *.urbanbellemag.com alghuraircentre.com cachealumni.org.uk chla.com djborhan.com easypay.am fourdots.com isteadrise.org.uk japand.biz lunaimani.com qualhub.co.uk qvest.io samuelbernstein.com soulsplit.net southbeachavenue.com urbanbellemag.com" + } +, { + "id" : "cert_caIssuers ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "COMODO RSA Domain Validation Secure Server CA 2 (COMODO CA Limited from GB)" + } +, { + "id" : "cert_trust ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "103 >= 60 days" + } +, { + "id" : "cert_notBefore ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-12-05 19:00" + } +, { + "id" : "cert_notAfter ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "2019-06-14 19:59" + } +, { + "id" : "certs_countServer ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crl" + } +, { + "id" : "cert_ocspURL ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca4.com" + } +, { + "id" : "OCSP_stapling ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "cert_signatureAlgorithm ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "ECDSA with SHA256" + } +, { + "id" : "cert_keySize ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "256 EC bits" + } +, { + "id" : "cert_keyUsage ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature" + } +, { + "id" : "cert_extKeyUsage ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "B83F38066E31DE8E42D67A7889F13F4C" + } +, { + "id" : "cert_fingerprintSHA1 ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "529ACD1EEA038B8C7B15CCD60C592BD752FCC978" + } +, { + "id" : "cert_fingerprintSHA256 ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "608D7B2C557AA74679E3A7A2BA7319AE27E91E9F0BD141DF488B52435751E983" + } +, { + "id" : "cert ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIG5zCCBo2gAwIBAgIRALg/OAZuMd6OQtZ6eInxP0wwCgYIKoZIzj0EAwIwgZIx CzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNV BAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTgwNgYDVQQD Ey9DT01PRE8gRUNDIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0Eg MjAeFw0xODEyMDYwMDAwMDBaFw0xOTA2MTQyMzU5NTlaMGwxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEhMB8GA1UECxMYUG9zaXRpdmVTU0wgTXVs dGktRG9tYWluMSQwIgYDVQQDExtzc2wzOTA4OTAuY2xvdWRmbGFyZXNzbC5jb20w WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ1a9liKQ56x4rTe7zBj28XJP2LpSKb bZCgW1p32gWBYSg6iUd+33ciXC53YZrhrz9Xa+2IXSiqA6j6EjYOblR9o4IE5zCC BOMwHwYDVR0jBBgwFoAUQAlhZ/C8g3FP3hIILG/U1Ct2PZYwHQYDVR0OBBYEFPZ3 LTA4oACXRKmWXCme/a4IkN0AMA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAA MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysG AQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5j b20vQ1BTMAgGBmeBDAECATBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLmNv bW9kb2NhNC5jb20vQ09NT0RPRUNDRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZl ckNBMi5jcmwwgYgGCCsGAQUFBwEBBHwwejBRBggrBgEFBQcwAoZFaHR0cDovL2Ny dC5jb21vZG9jYTQuY29tL0NPTU9ET0VDQ0RvbWFpblZhbGlkYXRpb25TZWN1cmVT ZXJ2ZXJDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC5jb21vZG9jYTQu Y29tMIICJgYDVR0RBIICHTCCAhmCG3NzbDM5MDg5MC5jbG91ZGZsYXJlc3NsLmNv bYIVKi5hbGdodXJhaXJjZW50cmUuY29tghQqLmNhY2hlYWx1bW5pLm9yZy51a4IK Ki5jaGxhLmNvbYIOKi5kamJvcmhhbi5jb22CDCouZWFzeXBheS5hbYIOKi5mb3Vy ZG90cy5jb22CEyouaXN0ZWFkcmlzZS5vcmcudWuCDCouamFwYW5kLmJpeoIPKi5s dW5haW1hbmkuY29tgg8qLnF1YWxodWIuY28udWuCCioucXZlc3QuaW+CFSouc2Ft dWVsYmVybnN0ZWluLmNvbYIPKi5zb3Vsc3BsaXQubmV0ghYqLnNvdXRoYmVhY2hh dmVudWUuY29tghMqLnVyYmFuYmVsbGVtYWcuY29tghNhbGdodXJhaXJjZW50cmUu Y29tghJjYWNoZWFsdW1uaS5vcmcudWuCCGNobGEuY29tggxkamJvcmhhbi5jb22C CmVhc3lwYXkuYW2CDGZvdXJkb3RzLmNvbYIRaXN0ZWFkcmlzZS5vcmcudWuCCmph cGFuZC5iaXqCDWx1bmFpbWFuaS5jb22CDXF1YWxodWIuY28udWuCCHF2ZXN0Lmlv ghNzYW11ZWxiZXJuc3RlaW4uY29tgg1zb3Vsc3BsaXQubmV0ghRzb3V0aGJlYWNo YXZlbnVlLmNvbYIRdXJiYW5iZWxsZW1hZy5jb20wggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWeCmAvE AAAEAwBHMEUCIQC72ImbbSIr55P98FqPlnZHBEEsN0+1Mo4gHFnMo6vs+QIgEbIu cHJjVawAMORE74CjPxBo/YVsdf/8eb4H0IBwv0sAdgB0ftqDMa0zEJEhnM4lT0Jw wr/9XkIgCMY3NXnmEHvMVgAAAWeCmAwfAAAEAwBHMEUCIBPPkyTgQzAezlHwhvz1 5xFaGCuGzDyeUaeMiLMF74L4AiEAwbKtDM0oflDVM77nTSgMNRJHm5x+lRjvA9CK fouqeFQwCgYIKoZIzj0EAwIDSAAwRQIgA6RwMe/4feAXFHmafyLoCyM08yk57GY7 VoExc2MZ9KACIQC6X8CDmKNYauEaqmhEmyP9RF4YGyRUo+6tzHd/khtVVw== -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "ssl390890.cloudflaressl.com" + } +, { + "id" : "cert_commonName_wo_SNI ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390890.cloudflaressl.com" + } +, { + "id" : "cert_subjectAltName ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "ssl390890.cloudflaressl.com *.alghuraircentre.com *.cachealumni.org.uk *.chla.com *.djborhan.com *.easypay.am *.fourdots.com *.isteadrise.org.uk *.japand.biz *.lunaimani.com *.qualhub.co.uk *.qvest.io *.samuelbernstein.com *.soulsplit.net *.southbeachavenue.com *.urbanbellemag.com alghuraircentre.com cachealumni.org.uk chla.com djborhan.com easypay.am fourdots.com isteadrise.org.uk japand.biz lunaimani.com qualhub.co.uk qvest.io samuelbernstein.com soulsplit.net southbeachavenue.com urbanbellemag.com" + } +, { + "id" : "cert_caIssuers ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "COMODO ECC Domain Validation Secure Server CA 2 (COMODO CA Limited from GB)" + } +, { + "id" : "cert_trust ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "103 >= 60 days" + } +, { + "id" : "cert_notBefore ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-12-05 19:00" + } +, { + "id" : "cert_notAfter ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "2019-06-14 19:59" + } +, { + "id" : "certs_countServer ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl" + } +, { + "id" : "cert_ocspURL ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca4.com" + } +, { + "id" : "OCSP_stapling ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency ", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirror/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "180 days (=15552000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "domain IS marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "cloudflare" + } +, { + "id" : "banner_application", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "1 at '/mirror/CRAN/'" + } +, { + "id" : "cookie_secure", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "All (1) at '/mirror/CRAN/' marked as secure" + } +, { + "id" : "cookie_httponly", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "All (1) at '/mirror/CRAN/' marked as HttpOnly" + } +, { + "id" : "X-XSS-Protection", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "1; mode=block" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "Expect-CT", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "max-age=604800, report-uri='https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct'" + } +, { + "id" : "X-UA-Compatible", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "X-UA-Compatible: IE=Edge" + } +, { + "id" : "banner_reverseproxy", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/mirror/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=E511D9DB3A45B55CC3E4E60F611858E572B0D0DC7C69998AA375846405BE3DC5" + } +, { + "id" : "LOGJAM", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_x1302", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x1302 TLS_AES_256_GCM_SHA384 ECDH 253 AESGCM 256 TLS_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x1303", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH 253 ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xcc14", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcc14 ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH 256 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD" + } +, { + "id" : "cipher_xcc13", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcc13 ECDHE-RSA-CHACHA20-POLY1305-OLD ECDH 256 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256_OLD" + } +, { + "id" : "cipher_xc030", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc02c", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02c ECDHE-ECDSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc024", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc024 ECDHE-ECDSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc00a", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc00a ECDHE-ECDSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xcca9", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca9 ECDHE-ECDSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xcca8", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x9d", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x1301", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x1301 TLS_AES_128_GCM_SHA256 ECDH 253 AESGCM 128 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02f", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02b", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02b ECDHE-ECDSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc023", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc023 ECDHE-ECDSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc009", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "xc009 ECDHE-ECDSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.3 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "fourdots.com/104.25.94.23", + "port" : "443", + "severity" : "INFO", + "finding" : "209" + } +] diff --git a/data/ssl/ftp.acc.umu.se_p443-20190303-0843.json b/data/ssl/ftp.acc.umu.se_p443-20190303-0843.json new file mode 100644 index 0000000..6f65d45 --- /dev/null +++ b/data/ssl/ftp.acc.umu.se_p443-20190303-0843.json @@ -0,0 +1,2017 @@ +[ + { + "id" : "service", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-21 17:18" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-22 18:18" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "issue=letsencrypt.org" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirror/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.37 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/mirror/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/mirror/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=BD7AD8295164B32698FFDF6DFEE175CBA261976CDD4C30C8DE4D88924628A837" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.acc.umu.se/194.71.11.165", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-21 17:18" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-22 18:18" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "issue=letsencrypt.org" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirror/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.37 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/mirror/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/mirror/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=BD7AD8295164B32698FFDF6DFEE175CBA261976CDD4C30C8DE4D88924628A837" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA DHE-RSA-SEED-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.acc.umu.se/194.71.11.173", + "port" : "443", + "severity" : "INFO", + "finding" : "367" + } +] diff --git a/data/ssl/ftp.cc.uoc.gr_p443-20190303-0838.json b/data/ssl/ftp.cc.uoc.gr_p443-20190303-0838.json new file mode 100644 index 0000000..91df7bb --- /dev/null +++ b/data/ssl/ftp.cc.uoc.gr_p443-20190303-0838.json @@ -0,0 +1,1055 @@ +[ + { + "id" : "service", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15' 'next protocol/#13172'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 600 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-02-21 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "2020-02-27 07:00" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirrors/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx" + } +, { + "id" : "banner_application", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/mirrors/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/mirrors/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=2B25A19D45274DFC8AAE8915F88C830E97970A289BFB1CA281DA3FC940D8CFE1" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.cc.uoc.gr/147.52.159.12", + "port" : "443", + "severity" : "INFO", + "finding" : "247" + } +] diff --git a/data/ssl/ftp.cixug.es_p443-20190303-0843.json b/data/ssl/ftp.cixug.es_p443-20190303-0843.json new file mode 100644 index 0000000..1b0cd82 --- /dev/null +++ b/data/ssl/ftp.cixug.es_p443-20190303-0843.json @@ -0,0 +1,1075 @@ +[ + { + "id" : "service", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-10-18 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "2019-10-19 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "+555 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CWE-119", + "finding" : "not vulnerable CVE-2014-0160" + } +, { + "id" : "CCS", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "WARN", + "finding" : "Check failed, unexpected result, run testssl.sh -Z --debug=1 and look at /tmp/testssl.KtWeXm/*tls_fallback_scsv.txt" + } +, { + "id" : "SWEET32", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=ACC0FE62C79BC10DCE57EE4269491187085FFA06F178118EEADA0C82DB3013CD" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "ftp.cixug.es/193.144.61.75", + "port" : "443", + "severity" : "INFO", + "finding" : "222" + } +] diff --git a/data/ssl/ftp.eenet.ee_p443-20190303-0835.json b/data/ssl/ftp.eenet.ee_p443-20190303-0835.json new file mode 100644 index 0000000..957dee7 --- /dev/null +++ b/data/ssl/ftp.eenet.ee_p443-20190303-0835.json @@ -0,0 +1,1041 @@ +[ + { + "id" : "service", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'status request/#5' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "random" + } +, { + "id" : "cert_numbers", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "4096 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "0C5B9443A1034AD7AE17EED13393DF60" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "51CEB379F91FFF00E86DF76ABFC604773918CF5F" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "601FAB3D3537E2C66B9E7B1F3A93161F036A8D452F054887916C3858CB76A92F" + } +, { + "id" : "cert", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIHvzCCBqegAwIBAgIQDFuUQ6EDSteuF+7RM5PfYDANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xODA2MjAwMDAwMDBaFw0yMDA5MTgxMjAwMDBaMIGHMQswCQYDVQQG EwJFRTERMA8GA1UECBMIVGFydHVtYWExDjAMBgNVBAcTBVRhcnR1MTEwLwYDVQQK DChFZXN0aSBIYXJpZHVzZSBqYSBUZWFkdXNlIEFuZG1lc2lkZXbDtXJrMQswCQYD VQQLEwJUTzEVMBMGA1UEAxMMZnRwLmVlbmV0LmVlMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEA+BtJ8djne1p8rk+WNipHNiYS0/nxYbWMjfVkCG+QglXA fq+NNPfMOiH2YU7BHlFzQREALXrI7pvdwbaj5iNEh9kj1Em1RAHIr1ialPPDvW/O t2vnjAY7kG/InGn6TTbUTGDbaJB7r7pVMl5QZJfOlNaK86z8gn84MFdj2Q2nkvG/ FJ+7mQv6EPxNp4pRc/l4T6lrFuAgUxU62g3X5ObPTwrOfGkzn7PqaOgq2lhexa0d KUljUMgN6YwAL3tT+wW321hpLF9LOUGfJmnAhalWmPzpQ82Dw1TaKHjy2yADGNTF MVQXhr+M3BGyYVrjENGbucidr1CO7xU9vFKfRK7DzNE58zSwquBEB7nATHeqd0Oy 4zmkEJhm1zKvzixl6oSwynWY0v/9Lhf7GpAF/g6U5zsY87vsoLNEEx6nmGK/LyYw iDCGhbfzS+yVZeBfqIsZ8ZBT/1V/2QLdUw1QGWRRHTC+BJSDe0SEqggB0XySIN5P ZTFkTzS4MYWiGFJuUNfIw78wYGEf5MR3ttLX0h/GltbcBZ4fCs/GAI12c61St2s3 oJZkhtK3ylij05KMoylFhcB+55b+fcSfEih9PgRuMhOrokStVrxs98ApQ7tNIawh BuMY/nRoQCBDSCFoweo8PkU+/QIl80S5gftJKxC/0mPGswVrojMz0eBl7vcylEcC AwEAAaOCA0cwggNDMB8GA1UdIwQYMBaAFGf9iCAUJ5jHCdIlGbvpURFjdVBiMB0G A1UdDgQWBBQUrnngCtjEyIJN+d0OJtRZFAOcpTAXBgNVHREEEDAOggxmdHAuZWVu ZXQuZWUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v VEVSRU5BU1NMQ0EzLmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29t L1RFUkVOQVNTTENBMy5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw bgYIKwYBBQUHAQEEYjBgMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy dC5jb20wOAYIKwYBBQUHMAKGLGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9U RVJFTkFTU0xDQTMuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIB bgSCAWoBaAB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZB1F MZsAAAQDAEgwRgIhAJPeP00BrS+1yHWVzW1WGFKeDzC5vV980AvzwXUM+gKeAiEA hRAHvzKg9Bg/mlyfdk1jOU+aOCtc1UFTqsx881Q6NnYAdQCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWQdRTJ0AAAEAwBGMEQCIHVryspBuk1mimGE jLKssBp5Xu5l1N4+TmJcc/OVxX81AiATcC2eBNsu4OOYjeJwOt3sTKtOjrCoXVVY 4WXu6oUy8wB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZB1F Mo4AAAQDAEcwRQIgFNtW7W8kpMcnwZ60QyCERUxP/66Uy0Yi+1RRGqgzIRYCIQDv 31E67v1UsWovHZEM6y9wM0M8c/Tr1E0EdffbSsGy8TANBgkqhkiG9w0BAQsFAAOC AQEANHIGDZLRTL5+tO3hs8z/iZB0OEBz5ExZEZ8kh0DN8WBUoDD3EYeVdtWkrril ZpSFoDE52ycwCbiIXtQ0FXUObVT2b2kCrAXfKzY0Mcy5oiqTJQWg+KhH3lv/mhGL Fxcr/k619t9cTmOVJ/ljJ2a9aUsWITxsP+3JA3N7lJOAGOV9fm5i3BfAUskhczVE 2AhoIfwznY7Dyqe76OZKeXf1Lg8k4n6VmtyETZX4m4KYqNjZ24kTJN0/RL7Lu7Qp QPwzUCKad+ISEHW0G9oQSK+vUJS8LLii1EI+1oll2FP+fMhwgqj5RPvVExvh888c /tiL1XMU2IEdSz+rfI/r0RaHSA== -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "ftp.eenet.ee" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "ftp.eenet.ee" + } +, { + "id" : "cert_subjectAltName", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "ftp.eenet.ee" + } +, { + "id" : "cert_caIssuers", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TERENA SSL CA 3 (TERENA from NL)" + } +, { + "id" : "cert_trust", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "564 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-19 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-18 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=601FAB3D3537E2C66B9E7B1F3A93161F036A8D452F054887916C3858CB76A92F" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.eenet.ee/193.40.0.5", + "port" : "443", + "severity" : "INFO", + "finding" : "253" + } +] diff --git a/data/ssl/ftp.fau.de_p443-20190303-0837.json b/data/ssl/ftp.fau.de_p443-20190303-0837.json new file mode 100644 index 0000000..b9f5fd3 --- /dev/null +++ b/data/ssl/ftp.fau.de_p443-20190303-0837.json @@ -0,0 +1,1013 @@ +[ + { + "id" : "service", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "2014-11-25 09:53" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "2019-07-09 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp1.pca.dfn.de/uni-erlangen-nuernberg-ca/pub/crl/cacrl.crl http://cdp2.pca.dfn.de/uni-erlangen-nuernberg-ca/pub/crl/cacrl.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.pca.dfn.de/OCSP-Server/OCSP" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4" + } +, { + "id" : "banner_application", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=18A7E75EF7278D0AC0D9F9086D64D3F2C7732903A93311070FBA16A5416FF51F" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 4096 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "ftp.fau.de/131.188.12.211", + "port" : "443", + "severity" : "INFO", + "finding" : "147" + } +] diff --git a/data/ssl/ftp.gwdg.de_p443-20190303-0837.json b/data/ssl/ftp.gwdg.de_p443-20190303-0837.json new file mode 100644 index 0000000..b2e50f9 --- /dev/null +++ b/data/ssl/ftp.gwdg.de_p443-20190303-0837.json @@ -0,0 +1,943 @@ +[ + { + "id" : "service", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "secp384r1" + } +, { + "id" : "cipher_order", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 384 bit ECDH (P-384)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'heartbeat/#15' 'next protocol/#13172'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "random" + } +, { + "id" : "cert_numbers", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "1BADB95D3A39B9" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "27A291E308968B073880AD6FB1861D4FF82B22E0" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "9D66C1E08A5C85BC332647C8C9413574A9F907DF55510218AC8FAC70D3D4D47B" + } +, { + "id" : "cert", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIHG625XTo5uTANBgkqhkiG9w0BAQsFADCBuzELMAkGA1UE BhMCREUxFjAUBgNVBAgTDU5JRURFUlNBQ0hTRU4xEzARBgNVBAcTCkdPRVRUSU5H RU4xPjA8BgNVBAoTNUdlc2VsbHNjaGFmdCBmdWVyIHdpc3NlbnNjaGFmdGxpY2hl IERhdGVudmVyYXJiZWl0dW5nMQ0wCwYDVQQLEwRHV0RHMRAwDgYDVQQDEwdHV0RH IENBMR4wHAYJKoZIhvcNAQkBFg9nd2RnLWNhQGd3ZGcuZGUwHhcNMTYwNzE5MTQ0 MDE0WhcNMTkwNzA5MjM1OTAwWjCBkTELMAkGA1UEBhMCREUxFjAUBgNVBAgMDU5J RURFUlNBQ0hTRU4xEzARBgNVBAcMCkdPRVRUSU5HRU4xPjA8BgNVBAoMNUdlc2Vs bHNjaGFmdCBmdWVyIHdpc3NlbnNjaGFmdGxpY2hlIERhdGVudmVyYXJiZWl0dW5n MRUwEwYDVQQDDAxmdHA2Lmd3ZGcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDfFNxgwEBFYdFVewOYZReyjfBxC0wyWl0U6aazPYpCEP1GOYmX+qHT FPZwov5nhQfwmEymXsxJG9oS3BqCPiwINrmsAaHH9byREha/ZXTSCZrHJnP9LIRk ph6PxewZ2lhvXklkkmtm9UwtIndZeYqSVyWQAbY70QRreIDk5uifdC7yqCjziLFh TLipJEQmiQEjQcVY56rxQMhpGEO06Tk/X2dIvlSCQnXo++I06rXDeIhwhMjH1a9O RATbLcu1AaGjXj/cY49NP6gINH6j8ebpagAb2HnUEcQeswdJ+bnkHk1y38XU/lJ5 maL6tNdcvQDfP8uSCV82aKhGBk+qseRtAgMBAAGjggKMMIICiDBZBgNVHSAEUjBQ MBEGDysGAQQBga0hgiwBAQQDBTARBg8rBgEEAYGtIYIsAgEEAwEwDwYNKwYBBAGB rSGCLAEBBDANBgsrBgEEAYGtIYIsHjAIBgZngQwBAgIwCQYDVR0TBAIwADAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1Ud DgQWBBRpjFFkh2wkjLZ8JK0iK8XJrxDMNDAfBgNVHSMEGDAWgBSm5P+Y/eVJMn5c dfIWok2MdDXeIjBqBgNVHREEYzBhggtmdHAuZ3dkZy5kZYIMZnRwMS5nd2RnLmRl ggxmdHAyLmd3ZGcuZGWCDGZ0cDMuZ3dkZy5kZYIMZnRwNC5nd2RnLmRlggxmdHA1 Lmd3ZGcuZGWCDGZ0cDYuZ3dkZy5kZTB5BgNVHR8EcjBwMDagNKAyhjBodHRwOi8v Y2RwMS5wY2EuZGZuLmRlL2d3ZGctY2EvcHViL2NybC9jYWNybC5jcmwwNqA0oDKG MGh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ3dkZy1jYS9wdWIvY3JsL2NhY3JsLmNy bDCByQYIKwYBBQUHAQEEgbwwgbkwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBj YS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBABggrBgEFBQcwAoY0aHR0cDovL2Nk cDEucGNhLmRmbi5kZS9nd2RnLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDBABggr BgEFBQcwAoY0aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nd2RnLWNhL3B1Yi9jYWNl cnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQsFAAOCAQEAe1wkpGnnPQ5E70fpUsWy PcqKgyzWg6ShNG9oSomz1ITBP1pCpgvwGXk7eI3dQ2IphgBUS64p7aXFHWJJ3KoU JmGcqNQzjhllknzz3aCMkB8LqEzZ708U0+p5WlmZv1Fh3TWaSPWTGrfx7Y01rb5c zoOKgd9qp16ggiYoSHOEi3247aTHgEz0cxU9YX4Z5R5DHRLWKNQIJVm+FLUtgt4W fDiQpaZBjZK/V4dlgjEH5pQVwPvb6bFOW8BrIDB6a17ggkWCkX6hog5H6KNAaU0Z 3N4UrxXyY2o7wYvqCBdnUjmDlz/XlvieQ1+w9FAYQfPMiwyDpq6VEM1IXjCeUoM7 NA== -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "ftp6.gwdg.de" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ftp6.gwdg.de" + } +, { + "id" : "cert_subjectAltName", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "ftp.gwdg.de ftp1.gwdg.de ftp2.gwdg.de ftp3.gwdg.de ftp4.gwdg.de ftp5.gwdg.de ftp6.gwdg.de" + } +, { + "id" : "cert_caIssuers", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "GWDG CA (Gesellschaft fuer wissenschaftliche Datenverarbeitung from DE)" + } +, { + "id" : "cert_trust", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "128 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-07-19 10:40" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "2019-07-09 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp1.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl http://cdp2.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.pca.dfn.de/OCSP-Server/OCSP" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/misc/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "-69 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "730 days (=63072000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "includes subdomains" + } +, { + "id" : "HSTS_preload", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "domain IS marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.15.9" + } +, { + "id" : "banner_application", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/misc/cran/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "SAMEORIGIN" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/misc/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9D66C1E08A5C85BC332647C8C9413574A9F907DF55510218AC8FAC70D3D4D47B" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 384 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 384 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 384 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 384 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "ftp.gwdg.de/134.76.12.6", + "port" : "443", + "severity" : "INFO", + "finding" : "111" + } +] diff --git a/data/ssl/ftp.harukasan.org_p443-20190303-0840.json b/data/ssl/ftp.harukasan.org_p443-20190303-0840.json new file mode 100644 index 0000000..2c0a9e2 --- /dev/null +++ b/data/ssl/ftp.harukasan.org_p443-20190303-0840.json @@ -0,0 +1,3489 @@ +[ + { + "id" : "service", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-GCM-SHA384 AES256-CCM8 AES256-CCM AES128-GCM-SHA256 AES128-CCM8 AES128-CCM AES256-SHA256 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-11 23:39" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-12 00:39" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.10.3" + } +, { + "id" : "banner_application", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3FA92020F698EA0D051418A519F6A8C8C2828CE232561ABA25B8C721067C5CB0" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 1024 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 1024 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc0a3", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 1024 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 1024 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 1024 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 1024 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 1024 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.harukasan.org/14.49.100.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-GCM-SHA384 AES256-CCM8 AES256-CCM AES128-GCM-SHA256 AES128-CCM8 AES128-CCM AES256-SHA256 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-11 23:39" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-12 00:39" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.10.3" + } +, { + "id" : "banner_application", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3FA92020F698EA0D051418A519F6A8C8C2828CE232561ABA25B8C721067C5CB0" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 1024 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 1024 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc0a3", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 1024 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 1024 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 1024 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 1024 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 1024 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.harukasan.org/14.49.99.238", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-GCM-SHA384 AES256-CCM8 AES256-CCM AES128-GCM-SHA256 AES128-CCM8 AES128-CCM AES256-SHA256 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-11 23:39" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-12 00:39" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.10.3" + } +, { + "id" : "banner_application", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3FA92020F698EA0D051418A519F6A8C8C2828CE232561ABA25B8C721067C5CB0" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 1024 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 1024 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc0a3", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 1024 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 1024 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 1024 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 1024 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 1024 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.harukasan.org/14.49.100.37", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "nginx/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-SHA AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA AES256-GCM-SHA384 AES256-CCM8 AES256-CCM AES128-GCM-SHA256 AES128-CCM8 AES128-CCM AES256-SHA256 AES128-SHA256 AES256-SHA AES128-SHA" + } +, { + "id" : "scanTime", + "ip" : "ftp.harukasan.org/211.219.253.179", + "port" : "443", + "severity" : "INFO", + "finding" : "1046" + } +] diff --git a/data/ssl/ftp.heanet.ie_p443-20190303-0839.json b/data/ssl/ftp.heanet.ie_p443-20190303-0839.json new file mode 100644 index 0000000..c9237e9 --- /dev/null +++ b/data/ssl/ftp.heanet.ie_p443-20190303-0839.json @@ -0,0 +1,1053 @@ +[ + { + "id" : "service", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 7200 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-06 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "2021-03-12 07:00" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirrors/cran.r-project.org/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "-1 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.7" + } +, { + "id" : "banner_application", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/mirrors/cran.r-project.org/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/mirrors/cran.r-project.org/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=1BD2ABDA8A82C865EF055D5FF6AAE566F30CB81F764486992CFF624ABC960F50" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.heanet.ie/193.1.193.64", + "port" : "443", + "severity" : "INFO", + "finding" : "120" + } +] diff --git a/data/ssl/ftp.igh.cnrs.fr_p443-20190303-0837.json b/data/ssl/ftp.igh.cnrs.fr_p443-20190303-0837.json new file mode 100644 index 0000000..c88f4ef --- /dev/null +++ b/data/ssl/ftp.igh.cnrs.fr_p443-20190303-0837.json @@ -0,0 +1,943 @@ +[ + { + "id" : "service", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "cipher_order", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15' 'next protocol/#13172'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-17 10:38" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-17 11:38" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "-31 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx" + } +, { + "id" : "banner_application", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "no RSA certificate, can't be used with SSLv2 elsewhere" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc02c", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02c ECDHE-ECDSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc024", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "xc024 ECDHE-ECDSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc00a", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "xc00a ECDHE-ECDSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02b", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02b ECDHE-ECDSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc023", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "xc023 ECDHE-ECDSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc009", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "xc009 ECDHE-ECDSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.igh.cnrs.fr/193.50.6.155", + "port" : "443", + "severity" : "INFO", + "finding" : "117" + } +] diff --git a/data/ssl/ftp.osuosl.org_p443-20190303-0847.json b/data/ssl/ftp.osuosl.org_p443-20190303-0847.json new file mode 100644 index 0000000..60362b5 --- /dev/null +++ b/data/ssl/ftp.osuosl.org_p443-20190303-0847.json @@ -0,0 +1,3126 @@ +[ + { + "id" : "service", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-07-23 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "2020-07-23 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=F067BEAA02876F9FC85B36294063B97432CA1D5524868A3E31804E73FC0E453C" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.osuosl.org/64.50.233.100", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-07-23 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "2020-07-23 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=F067BEAA02876F9FC85B36294063B97432CA1D5524868A3E31804E73FC0E453C" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.osuosl.org/140.211.166.134", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-07-23 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "2020-07-23 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=F067BEAA02876F9FC85B36294063B97432CA1D5524868A3E31804E73FC0E453C" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.osuosl.org/64.50.236.52", + "port" : "443", + "severity" : "INFO", + "finding" : "337" + } +] diff --git a/data/ssl/ftp.ussg.iu.edu_p443-20190303-0846.json b/data/ssl/ftp.ussg.iu.edu_p443-20190303-0846.json new file mode 100644 index 0000000..041bcf3 --- /dev/null +++ b/data/ssl/ftp.ussg.iu.edu_p443-20190303-0846.json @@ -0,0 +1,1090 @@ +[ + { + "id" : "service", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "finding" : "vulnerable with 7 ciphers" + } +, { + "id" : "SSLv3", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "finding" : "offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "finding" : "TLSv1.1 is not offered, and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered" + } +, { + "id" : "PFS", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA DHE-RSA-AES128-SHA" + } +, { + "id" : "DH_groups", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "mod_ssl 2.2.x/512-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "Default protocol TLS1.0" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA, 1024 bit DH (cbc) (limited sense as client will pick)" + } +, { + "id" : "cipher_order_SSLv2", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "RC2-CBC-MD5 at SSLv2 (limited sense as client will pick)" + } +, { + "id" : "cipher_order_SSLv3", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA at SSLv3 (limited sense as client will pick)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA at TLSv1 (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "off by +4639 seconds from your localtime" + } +, { + "id" : "cert_numbers", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "CE67E774DAC1F696284F237ACB987C80" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "F1554BFB8F719E6383848DF5FB68B0276C713EEB" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "C76FC0AE81B0A2B5040E247890F4A049578521E4E1A350C1DF1A3590ADB39E38" + } +, { + "id" : "cert", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIGzzCCBbegAwIBAgIRAM5n53TawfaWKE8jesuYfIAwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTYwOTIzMDAwMDAwWhcNMTkwOTIz MjM1OTU5WjCBrzELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTQ3NDA1MQswCQYDVQQI EwJJTjEUMBIGA1UEBxMLQmxvb21pbmd0b24xFzAVBgNVBAkTDjkwMCBFLiA3dGgg U3QuMRswGQYDVQQKExJJbmRpYW5hIFVuaXZlcnNpdHkxGzAZBgNVBAsTEkluZGlh bmEgVW5pdmVyc2l0eTEaMBgGA1UEAxMRc3BvdXQudWl0cy5pdS5lZHUwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTT6GD43eeK2XrFHUE+Weg/OlavgJ tkcMUEGcyUjA1Z+6FWftM1J87aSWR+7w7A/KXos6BdzcToDPYx6zA9eeAFCT5JUC y0OjiLXFVIdu6mjOpZGSr0STkJDnb0r/ednFAg2V3ifrLCIyZcx5BhSukRbgj8V9 E7MYKW/TlcUQT4e7HWJaP4KFGtGH61T0wy0ZSvtGLXhghSTEFCDBOGQ/d65vAy5Z 63m74BvA8AyhoLPomAXRGJcdbwjJ799NW0WbWNSP/rRqpbcSJ4dZMOWuHruqCrcj IJfEeBYHFaISoRgCUWngZhCeEJpQ88aI4UvhkjDXU/o+a/YUZCDTAAZVAgMBAAGj ggMcMIIDGDAfBgNVHSMEGDAWgBQeBaN3j2yW4luHS6a0hqxxAAznODAdBgNVHQ4E FgQUNz+P3kzYSkzgjHbSAzh8BRPQS+MwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB /wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGcGA1UdIARgMF4w UgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUHAgEWNGh0dHBzOi8vd3d3LmluY29t bW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQG A1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9JbkNv bW1vblJTQVNlcnZlckNBLmNybDB1BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKG Mmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9JbkNvbW1vblJTQVNlcnZlckNBXzIu Y3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMIIBcQYD VR0RBIIBaDCCAWSCEXNwb3V0LnVpdHMuaXUuZWR1ghVjaHVjay51Y3MuaW5kaWFu YS5lZHWCEGZ0cC5saW51eC5pdS5lZHWCFGZ0cC51c3NnLmluZGlhbmEuZWR1gg9m dHAudXNzZy5pdS5lZHWCEmZ0cC51c3NnLml1cHVpLmVkdYIUZnRwLnV3c2cuaW5k aWFuYS5lZHWCD2Z0cC51d3NnLml1LmVkdYISZnRwLnV3c2cuaXVwdWkuZWR1ghdn ZW50b28udXNzZy5pbmRpYW5hLmVkdYITaXUtb25seS51aXRzLml1LmVkdYITaXUt b25seS51c3NnLml1LmVkdYITaXUtdW5peC51c3NnLml1LmVkdYIUbWlycm9ycy5s aW51eC5pdS5lZHWCGG1vemlsbGEudXNzZy5pbmRpYW5hLmVkdYIQcmhlbC51aXRz Lml1LmVkdYIWc3BvdXQudXNzZy5pbmRpYW5hLmVkdTANBgkqhkiG9w0BAQsFAAOC AQEAmCBD2mLatz/5iEMmOoBAbx8revwP0tdjX3A7VpXtfvrnts9sGCcnOwL1t1/P av6asUC5L1Xw6ZPEChSJqh+dGIwnprRuyNrCe0WQ/giU/NE68Yu7F3KXs+/ZUF8R PpTy1twcGg4wYORixmC342C07qrCAZ/mLFgyW7D3X598/wd0MVWM+r8DkTNNVXI7 m/jzFny/qfGSEaqELHpEgkeYaxquJbUtMyElVleGBW0wS+mF0BH5qODC2E5wzGls ue9a71KHPrgKqOCO/QvpLeD4jJ3V14xaWEb68zXya9zwqp2z/+SilK1LDL7QZbI9 rabboxpB08jAdS+46vl1GSHl5w== -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "spout.uits.iu.edu" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "spout.uits.iu.edu" + } +, { + "id" : "cert_subjectAltName", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "spout.uits.iu.edu chuck.ucs.indiana.edu ftp.linux.iu.edu ftp.ussg.indiana.edu ftp.ussg.iu.edu ftp.ussg.iupui.edu ftp.uwsg.indiana.edu ftp.uwsg.iu.edu ftp.uwsg.iupui.edu gentoo.ussg.indiana.edu iu-only.uits.iu.edu iu-only.ussg.iu.edu iu-unix.ussg.iu.edu mirrors.linux.iu.edu mozilla.ussg.indiana.edu rhel.uits.iu.edu spout.ussg.indiana.edu" + } +, { + "id" : "cert_caIssuers", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "InCommon RSA Server CA (Internet2 from US)" + } +, { + "id" : "cert_trust", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "204 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-09-22 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-23 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "finding" : "yes" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "+4640 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "VULNERABLE" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, DoS threat" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses SSLv3+CBC" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT supported and vulnerable to POODLE SSL" + } +, { + "id" : "SWEET32", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses EXPORT RSA ciphers" + } +, { + "id" : "DROWN", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "CRITICAL", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, SSLv2 offered with 7 ciphers. Make sure you don't use this certificate elsewhere, see https://censys.io/ipv4?q=C76FC0AE81B0A2B5040E247890F4A049578521E4E1A350C1DF1A3590ADB39E38" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses DH EXPORT ciphers" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "mod_ssl 2.2.x/512-bit MODP group with safe prime modulus" + } +, { + "id" : "BEAST_CBC_SSL3", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA EXP1024-DES-CBC-SHA DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-RC2-CBC-MD5" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA EXP1024-DES-CBC-SHA DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-RC2-CBC-MD5" + } +, { + "id" : "BEAST", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- and no higher protocols as mitigation supported" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: RC4-SHA RC4-MD5 RC4-MD5 RC4-64-MD5 EXP1024-RC4-SHA EXP1024-RC4-MD5 EXP-RC4-MD5 EXP-RC4-MD5" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x35", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x2f", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x030080", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x030080 RC2-CBC-MD5 RSA RC2 128 SSL_CK_RC2_128_CBC_WITH_MD5" + } +, { + "id" : "cipher_x05", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_x010080", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x010080 RC4-MD5 RSA RC4 128 SSL_CK_RC4_128_WITH_MD5" + } +, { + "id" : "cipher_x16", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 1024 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0700c0", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x0700c0 DES-CBC3-MD5 RSA 3DES 168 SSL_CK_DES_192_EDE3_CBC_WITH_MD5" + } +, { + "id" : "cipher_x080080", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x080080 RC4-64-MD5 RSA RC4 64 SSL_CK_RC4_64_WITH_MD5" + } +, { + "id" : "cipher_x15", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x15 EDH-RSA-DES-CBC-SHA DH 1024 DES 56 TLS_DHE_RSA_WITH_DES_CBC_SHA" + } +, { + "id" : "cipher_x62", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x62 EXP1024-DES-CBC-SHA RSA(1024) DES 56,exp TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA" + } +, { + "id" : "cipher_x09", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x09 DES-CBC-SHA RSA DES 56 TLS_RSA_WITH_DES_CBC_SHA" + } +, { + "id" : "cipher_x61", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x61 EXP1024-RC2-CBC-MD5 RSA(1024) RC2 56,exp TLS_RSA_EXPORT1024_WITH_RC2_56_MD5" + } +, { + "id" : "cipher_x060040", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x060040 DES-CBC-MD5 RSA DES 56 SSL_CK_DES_64_CBC_WITH_MD5" + } +, { + "id" : "cipher_x64", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x64 EXP1024-RC4-SHA RSA(1024) RC4 56,exp TLS_RSA_EXPORT1024_WITH_RC4_56_SHA" + } +, { + "id" : "cipher_x60", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x60 EXP1024-RC4-MD5 RSA(1024) RC4 56,exp TLS_RSA_EXPORT1024_WITH_RC4_56_MD5" + } +, { + "id" : "cipher_x14", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x14 EXP-EDH-RSA-DES-CBC-SHA DH(512) DES 40,exp TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA" + } +, { + "id" : "cipher_x08", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x08 EXP-DES-CBC-SHA RSA(512) DES 40,exp TLS_RSA_EXPORT_WITH_DES40_CBC_SHA" + } +, { + "id" : "cipher_x06", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x06 EXP-RC2-CBC-MD5 RSA(512) RC2 40,exp TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5" + } +, { + "id" : "cipher_x040080", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x040080 EXP-RC2-CBC-MD5 RSA(512) RC2 40,exp SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5" + } +, { + "id" : "cipher_x03", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x03 EXP-RC4-MD5 RSA(512) RC4 40,exp TLS_RSA_EXPORT_WITH_RC4_40_MD5" + } +, { + "id" : "cipher_x020080", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x020080 EXP-RC4-MD5 RSA(512) RC4 40,exp SSL_CK_RC4_128_EXPORT40_WITH_MD5" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "SSLv3 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "scanTime", + "ip" : "ftp.ussg.iu.edu/156.56.247.193", + "port" : "443", + "severity" : "INFO", + "finding" : "109" + } +] diff --git a/data/ssl/ftp.yz.yamagata-u.ac.jp_p443-20190303-0839.json b/data/ssl/ftp.yz.yamagata-u.ac.jp_p443-20190303-0839.json new file mode 100644 index 0000000..b49c59b --- /dev/null +++ b/data/ssl/ftp.yz.yamagata-u.ac.jp_p443-20190303-0839.json @@ -0,0 +1,3989 @@ +[ + { + "id" : "service", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-09-30 02:27" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "2020-10-31 02:27" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "http://niig5.ocsp.secomtrust.net" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "-144 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.38 (Unix) OpenSSL/1.0.2o" + } +, { + "id" : "banner_application", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "Upgrade", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "Upgrade: h2" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=659182CBFA92792E2A52F6553A4675E67033437E4F01B8FF5A909B574BCC91AC" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-09-30 02:27" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "2020-10-31 02:27" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "http://niig5.ocsp.secomtrust.net" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "-144 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.38 (Unix) OpenSSL/1.0.2o" + } +, { + "id" : "banner_application", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "Upgrade", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "Upgrade: h2" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=659182CBFA92792E2A52F6553A4675E67033437E4F01B8FF5A909B574BCC91AC" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.19", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-09-30 02:27" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "2020-10-31 02:27" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "http://niig5.ocsp.secomtrust.net" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "-144 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.38 (Unix) OpenSSL/1.0.2o" + } +, { + "id" : "banner_application", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "Upgrade", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "Upgrade: h2" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=659182CBFA92792E2A52F6553A4675E67033437E4F01B8FF5A909B574BCC91AC" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.16", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-09-30 02:27" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "2020-10-31 02:27" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "http://repo1.secomtrust.net/sppca/nii/odca3/fullcrlg5.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "http://niig5.ocsp.secomtrust.net" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "-144 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.38 (Unix) OpenSSL/1.0.2o" + } +, { + "id" : "banner_application", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/cran/'" + } +, { + "id" : "Upgrade", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "Upgrade: h2" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=659182CBFA92792E2A52F6553A4675E67033437E4F01B8FF5A909B574BCC91AC" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "ftp.yz.yamagata-u.ac.jp/133.24.248.18", + "port" : "443", + "severity" : "INFO", + "finding" : "741" + } +] diff --git a/data/ssl/ftp.yzu.edu.tw_p443-20190303-0844.json b/data/ssl/ftp.yzu.edu.tw_p443-20190303-0844.json new file mode 100644 index 0000000..a191353 --- /dev/null +++ b/data/ssl/ftp.yzu.edu.tw_p443-20190303-0844.json @@ -0,0 +1,1013 @@ +[ + { + "id" : "service", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519 X448" + } +, { + "id" : "DH_groups", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'status request/#5' 'next protocol/#13172' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'encrypt-then-mac/#22' 'extended master secret/#23'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "random" + } +, { + "id" : "cert_numbers", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "4096 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "03AEF449F05773F4796EAC351CD913D2E7B1" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "AB028703B32AA30447D9036F0D21C4A0DA9CF9C5" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "1AC04AC6614D691395BB838A542A6C04D6B04565C09E12D7596A7D4C5950C3F5" + } +, { + "id" : "cert", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgISA670SfBXc/R5bqw1HNkT0uexMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjcxNTAwNTFaFw0x OTA1MjgxNTAwNTFaMBkxFzAVBgNVBAMTDmZ0cC55enUuZWR1LnR3MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs/okeIhAvSF1O0qxD+FfV7i7WCGA+bWB VhTWSlPXbRYevvocCKQwMu8BNFblRI35LxxOlLVFPfQSTpllvPsSJHNhvWRq6dOA dqGk79gusU70TiiVGlMRZeyrDnXuOZXTt0xw/Zuf7T4SoaqczJUVYwAdUbdedcfy aDEedqu3OdoWLUkHtpmZR77TrXP67gtc9+ARray9dh2DhWhfl9vNGUwzQG0/z/2i /HXKfumqSqybiVZFZ/GwEtWGtFQN7k2aczB4v53BWx23wJvMi9hxNQ3LzHC11NWy wHIm6vGJ8tHyLHehZ8s9OkuwiR+dMb+ioS80ot4oj4cXqurmZr/VYV/I9CrT2pec buhFDh1V2vMjfW3Cqe/fgdrtPrBJnzxPMXXOA/8sgz6WsNkqrIt6fp8YCCNfvew8 tvnbErtfnnjy7lzZuKM9i5LpZoEwsfgEP26XX+4DMkh921mglgHB6RHSDoejwzTX U/NLFAXHyinFmfHjbCn6ojB0n1SgTf1Laap1IHnZDIsc66pdI9K5bMI/vk+zBImT 70XtmPz9QWbQ1leiXYDYgZReyJL4BouVZ1IosRNxK8bcRtGC99oYhGiLBUNFz4ko QoeMuaP4e+cmC+Bmv/gNsNJLRYeAehywDzw+TG9eFxNzQQwOC9RAqkFLexQKjtuE AZjARES+taMCAwEAAaOCAuwwggLoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUy8Im EhZgCRrtW43PMby+osWJO6wwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzCBoAYDVR0RBIGYMIGVghZmcmVlYnNkLmNzZS55 enUuZWR1LnR3ghJmdHAuY3NlLnl6dS5lZHUudHeCEWZ0cC5kZWJpYW4ub3JnLnR3 gg5mdHAueXp1LmVkdS50d4IUZnRwMTAudHcuZnJlZWJzZC5vcmeCFGxpbnV4LmNz ZS55enUuZWR1LnR3ghhzbW9rZXBpbmcuY3NlLnl6dS5lZHUudHcwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWkvr+lhAAAEAwBHMEUC IQDcqG7RVtbQZAQx7N5UUonp1aBlfUC+8Zc58uAOGc/qvwIgTW6b3xP7vBljcCXK y/JOfgCeQnZLGCNJxJZdM9QwL0kAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD DPTlRUf0eAAAAWkvr+m1AAAEAwBIMEYCIQCxC66cOvm6/IMbhE+v7X2a0nilZZ2M 4jJlXJ4lFZIFygIhAKYhxzP7gYoeRyyjkq7uiXI4wTDWmNRXFtfE0h6RI5a6MA0G CSqGSIb3DQEBCwUAA4IBAQAm2C4+6vViqpgYqg1Bjl20eiHyf2pDQcDPYPG5pYdN YzSxskD1nWHOOOZdzN1GgfFiCY9G6cy1zkOOcXzXttsRNI1S5RHpGim6Tgftfyox y7KKMQ9k7374gv1lizDeF8n91f0S7vf4/XOHkf5J2gOICGHoB+JgElDQZM8xuUDs PS0Kf/hHJ+FhJ8te2T29ffZsnGu53CTcPFL83x5WZTi/K5HjjVeBhiphjprOGOW2 AUTgj04dMgnXpRkjcj0ydfjsdGUZ6s/f+VwCmhQn14rQ8yPim7w41kJgZnZ0eo5q Uw8jDNW7A3VaB5ERaLsSf3IifabLmrH3i81VS0UXTi1e -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "ftp.yzu.edu.tw" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "ftp.yzu.edu.tw" + } +, { + "id" : "cert_subjectAltName", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "freebsd.cse.yzu.edu.tw ftp.cse.yzu.edu.tw ftp.debian.org.tw ftp.yzu.edu.tw ftp10.tw.freebsd.org linux.cse.yzu.edu.tw smokeping.cse.yzu.edu.tw" + } +, { + "id" : "cert_caIssuers", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "Let's Encrypt Authority X3 (Let's Encrypt from US)" + } +, { + "id" : "cert_trust", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "86 >= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-27 10:00" + } +, { + "id" : "cert_notAfter", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-28 11:00" + } +, { + "id" : "certs_countServer", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "+4 (± 1.5) seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx" + } +, { + "id" : "banner_application", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "SAMEORIGIN" + } +, { + "id" : "X-XSS-Protection", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "1; mode=block" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "banner_reverseproxy", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=1AC04AC6614D691395BB838A542A6C04D6B04565C09E12D7596A7D4C5950C3F5" + } +, { + "id" : "LOGJAM", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "ftp.yzu.edu.tw/140.138.144.169", + "port" : "443", + "severity" : "INFO", + "finding" : "407" + } +] diff --git a/data/ssl/lib.ugent.be_p443-20190303-0809.json b/data/ssl/lib.ugent.be_p443-20190303-0809.json new file mode 100644 index 0000000..b52e3d1 --- /dev/null +++ b/data/ssl/lib.ugent.be_p443-20190303-0809.json @@ -0,0 +1,1083 @@ +[ + { + "id" : "service", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA DHE-RSA-CAMELLIA128-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA CAMELLIA128-SHA DES-CBC3-SHA IDEA-CBC-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA DHE-RSA-CAMELLIA128-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA CAMELLIA128-SHA DES-CBC3-SHA IDEA-CBC-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA DHE-RSA-CAMELLIA128-SHA EDH-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA DES-CBC3-SHA IDEA-CBC-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-12-18 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "2020-02-26 07:00" + } +, { + "id" : "certs_countServer", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.15 (Red Hat)" + } +, { + "id" : "banner_application", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=4096959AAE2CDBAA21B7232FF34F344E02CFBE67C936BB9E2A205E955306D1E3" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA DHE-RSA-CAMELLIA128-SHA EDH-RSA-DES-CBC3-SHA AES128-SHA CAMELLIA128-SHA DES-CBC3-SHA IDEA-CBC-SHA" + } +, { + "id" : "BEAST", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 4096 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "lib.ugent.be/157.193.230.39", + "port" : "443", + "severity" : "INFO", + "finding" : "135" + } +] diff --git a/data/ssl/mirror-hk.koddos.net_p443-20190303-0835.json b/data/ssl/mirror-hk.koddos.net_p443-20190303-0835.json new file mode 100644 index 0000000..ce05386 --- /dev/null +++ b/data/ssl/mirror-hk.koddos.net_p443-20190303-0835.json @@ -0,0 +1,1167 @@ +[ + { + "id" : "service", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-13 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "2019-06-15 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips" + } +, { + "id" : "banner_application", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=1C9A1095D0EED80849B214EC36D7D60F703D484ACF22ACF700E8423D1DAF230E" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AECDH-AES256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AECDH-AES128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AECDH-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA AECDH-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc019", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc019 AECDH-AES256-SHA ECDH 521 AES 256 TLS_ECDH_anon_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc018", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc018 AECDH-AES128-SHA ECDH 521 AES 128 TLS_ECDH_anon_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_xc016", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc016 AECDH-RC4-SHA ECDH 521 RC4 128 TLS_ECDH_anon_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_xc017", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "xc017 AECDH-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirror-hk.koddos.net/103.109.101.20", + "port" : "443", + "severity" : "INFO", + "finding" : "361" + } +] diff --git a/data/ssl/mirror.aarnet.edu.au_p443-20190303-0749.json b/data/ssl/mirror.aarnet.edu.au_p443-20190303-0749.json new file mode 100644 index 0000000..7cb2042 --- /dev/null +++ b/data/ssl/mirror.aarnet.edu.au_p443-20190303-0749.json @@ -0,0 +1,934 @@ +[ + { + "id" : "service", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "is not offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "offered with final" + } +, { + "id" : "NPN", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519 X448" + } +, { + "id" : "cipher_order", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.3" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "cipherorder_TLSv1_3", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'max fragment length/#1' 'encrypt-then-mac/#22' 'extended master secret/#23'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "random" + } +, { + "id" : "cert_numbers", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "4096 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "26356A27ED83CA35E3689BC279FA90389E4DE361" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "B683F6AADCA60F8DD7858A808CD5DD69504408C7" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "0471A50FC4D923A9214E902E285AC592B34CE260EE18DFA4B3A753A32D6A9437" + } +, { + "id" : "cert", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIJfTCCB2WgAwIBAgIUJjVqJ+2DyjXjaJvCefqQOJ5N42EwDQYJKoZIhvcNAQEL BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTgwMjIwMDMxOTIyWhcN MjAwMjIwMDMyOTAwWjCB1zETMBEGCysGAQQBgjc8AgEDEwJBVTEeMBwGA1UEDwwV Tm9uLUNvbW1lcmNpYWwgRW50aXR5MRcwFQYDVQQFEw41NCAwODQgNTQwIDUxODEL MAkGA1UEBhMCQVUxGDAWBgNVBAgMD05ldyBTb3V0aCBXYWxlczETMBEGA1UEBwwK Tm9ydGggUnlkZTEXMBUGA1UECgwOQUFSTkVUIFB0eSBMdGQxEzARBgNVBAsMCk9w ZXJhdGlvbnMxHTAbBgNVBAMMFG1pcnJvci5hYXJuZXQuZWR1LmF1MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtQH9lHljF+yZO+DVoUrMnRztw4/2in5Q LN+Ex8p/fHSlQiKTs0Cst6zWBAz/UD1CfWe+rkVNEZi5dvUx5nL9+DeUMyyXZZ6m T0v4I2Iw9Jxe0xoS5Sj9IVjHphdV73RIHAO/JecZGdTO6T8+U0a0h7SyLxMl73pn NcOH1ZE03uyMkdmcd9VvPYFci+SXXkyPg5lBhTc51kbT6+Ya3i9OwSDfiOl3NO6U n6hBKhqY2rSUmsxSITE4xifyYpNrelRqf3/W9cYumv91uijfGJGEbD4zu7jnv24t f3o0fN9NdD6agjNWcf3Atf+vimURk2Nx1vIjvFZ5Vs9y8NgrkgoRrWGdZQey/4iD bgr4lqt7xjpIWdj3b91PWxhpH2eLra7S8kn+psmiUOVmEQFWyq8Ixm+MBaLAr6SI 7U35JW4Pq9YPsy9PZQDi/tl04/h0NIgRkgYaqgX3dOMmD0K5IqxYbwNA4zPMw+2H vpKJT8DX4jO1DAygE5a3DPntThN3Y30Sno33LPvfGWApXIHBK98qu1BjgIrTFQOd 6mOGxNAHnArJJ+G/jJnaNUvd92n6vDmCSX1R0gLjUirizPQjvYyW4A2w90oZZ40r pfuSrVMDOvyiQhLdpDJCe2DsC1fGLEMzGimv2CNu53oT2e+Qlrm8bXajrwrAQ0Zn rgCKshY1MKMCAwEAAaOCA8wwggPIMHgGCCsGAQUFBwEBBGwwajA5BggrBgEFBQcw AoYtaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3NsZzMuY3J0 MC0GCCsGAQUFBzABhiFodHRwOi8vZXYub2NzcC5xdW92YWRpc2dsb2JhbC5jb20w HQYDVR0OBBYEFGO3QV9aIxp1Lorp+UV4zBHUl/IKMAwGA1UdEwEB/wQCMAAwHwYD VR0jBBgwFoAU5YRU0JBJnzi68snhKgjFTp+gSD8wWgYDVR0gBFMwUTBGBgwrBgEE Ab5YAAJkAQIwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2Jh bC5jb20vcmVwb3NpdG9yeTAHBgVngQwBATA8BgNVHR8ENTAzMDGgL6AthitodHRw Oi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3NsZzMuY3JsMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwOAYDVR0RBDEw L4IUbWlycm9yLmFhcm5ldC5lZHUuYXWCF2Jpb21pcnJvci5hYXJuZXQuZWR1LmF1 MIIB+QYKKwYBBAHWeQIEAgSCAekEggHlAeMAdwCkuQmQtBhYFIe7E6LMZ3AKPDWY BPkb37jjd80OyA3cEAAAAWGxQjkhAAAEAwBIMEYCIQDhgcXQtoeLKvU0djcb+MDS +rw8vVvHam6A3NC9QtKinwIhANveKldG1N7GGtPNdze9qDtmbEjXNEcCSr8wnc70 GFD8AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFhsUI47wAA BAMARzBFAiBPHN4ROEDua8mKym/ga1KRdAEG11VCPuflZuZL/imRUgIhAJfpeceN AlgrggmXDZn7z7DJjmlLI/dbSomJCdGEFcNuAHcAb1N2rDHwMRnYmQCkURX/dxUc EdkCwQApBo2yCJo32RMAAAFhsUI7mgAABAMASDBGAiEA/FFEOTSOhfccX+VxVY+8 Bb7mp9zRyzVNQD5I2zFyO/QCIQDctkO21V3OVxzLZ0B68RQhenET6m3WGNWcxm6d CcwpoQB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABYbFCPA4A AAQDAEgwRgIhAN5bXeutMBzMHDOoeBwZSMRbrELTvT4cBPpKqbhwk378AiEA1ig8 xW3187O0W4Be01ioryA66e2O3IiZaX3vAcrefGYwDQYJKoZIhvcNAQELBQADggIB AIZQVMusuOWz/gT3Af+ya9E1Vnwmufdf40qtsQOmUh25+Ue6viNYUMQWGgBgOgfY P9EmIFibAGhhotfc36D+C63JwNCR4SjY/ckL8xiLYFqGMHAME7nG9Ux34Fx7YcvU 1rh13r8sU67eHLaieEeRpWFp5Vgwf82ZvVZAOFJlZrW/w4Mvr3r++CzSJWVzdD6w TjDmTthx7qh5IAp1KVaENw6FuEv64PJNVqL12t1U3Gy+TjbHGUg/hSLWswPH+d98 GqtW8CJcdgq7exMhFTAXlTi4mSqg28y3eU2xaRwOQuNby+ZX6SnnA7cY2mqCildI v8urvkPLzaWTaVEkRTKetQ1upxHDSLiRN/vEuJE8w6G0+BEzDgErMmHeMFN/6CZ5 eZ+Tvy+/PFA6bSL4jYryPtEoN7NOLvG7OrhM3JAnx8Ylvm2DfZRyg5S71JbNz1gX ZMiytWXgCyaR16zJ19MeeIgOnaKJT3Qc4ozvmET/RkWt3VUhCzlXz7NhXxiXo7sy h1zm2ctFJkNh2cVZ5HzJy88CM3CFxXlblRh0zV5tOhBE5FT9BqC0nQqJv8YY9p0G 2AlcC44sDEYb6rCkgdiqWtYSnX2qeTjqdT74ksh2umGXCD2ROroSd/jswR7RuaOh cOZToQNOJjltFVbPMu2bIms/Mn1WqzjRaUfO42qwLuZf -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "mirror.aarnet.edu.au" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "mirror.aarnet.edu.au" + } +, { + "id" : "cert_subjectAltName", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "mirror.aarnet.edu.au biomirror.aarnet.edu.au" + } +, { + "id" : "cert_caIssuers", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "QuoVadis EV SSL ICA G3 (QuoVadis Limited from BM)" + } +, { + "id" : "cert_trust", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "yes" + } +, { + "id" : "cert_eTLS", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "353 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-02-19 22:19" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "2020-02-19 22:29" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvevsslg3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ev.ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (Red Hat Enterprise Linux)" + } +, { + "id" : "banner_application", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1.2 offered" + } +, { + "id" : "SWEET32", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=0471A50FC4D923A9214E902E285AC592B34CE260EE18DFA4B3A753A32D6A9437" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_x1302", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "x1302 TLS_AES_256_GCM_SHA384 ECDH 253 AESGCM 256 TLS_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x1303", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH 253 ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x1301", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "x1301 TLS_AES_128_GCM_SHA256 ECDH 253 AESGCM 128 TLS_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.3 TLS_AES_256_GCM_SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirror.aarnet.edu.au/202.158.214.106", + "port" : "443", + "severity" : "INFO", + "finding" : "242" + } +] diff --git a/data/ssl/mirror.cedia.org.ec_p443-20190303-0835.json b/data/ssl/mirror.cedia.org.ec_p443-20190303-0835.json new file mode 100644 index 0000000..72f6460 --- /dev/null +++ b/data/ssl/mirror.cedia.org.ec_p443-20190303-0835.json @@ -0,0 +1,1034 @@ +[ + { + "id" : "service", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA128-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "secp224k1 secp224r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 521 bit ECDH (P-521)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-AES256-SHA256 DHE-RSA-CAMELLIA256-SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'max fragment length/#1' 'encrypt-then-mac/#22' 'extended master secret/#23'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "off by 0 seconds from your localtime" + } +, { + "id" : "cert_numbers", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "B2579DAF1112DA87" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "F92089514210213DADEB901E60B06A3755102F1F" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "082FC0DD5B2E7056379EAE85674EBC3166C3BD6AF7F37644BED02E9E69F6C5C6" + } +, { + "id" : "cert", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIJALJXna8REtqHMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE4MDIxOTE1MDgwMFoX DTIwMDIxNDIyNDIwMVowPDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMRcwFQYDVQQDDA4qLmNlZGlhLm9yZy5lYzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKzWf14S4gFEegdQSpgo/YwPJCvJhAZW1EUewAkwpathWI+H 8tAB3ux8/HePY9NoqQb4Z23DeFbsCWYOzmU6mF4CzS3ju0h+WG8UJBQK+uy0OgEF IZzM3XB/npn4nQiDTrL5V1SKjhO4EenOW1fEJbsF/hawiKT/U5fJhpZIamd2VZ48 VilqaW6uA2nl2KN5iiJwvyvS3+yIuAucAP1Zd8J1TQebHkXd9BkOQBoJTw8pbZGY xd/dFGqn8DhcXaNVQzuEQVCnRZGcujQ+m9EWCzOMIgYY0xQxxOgMxCuUUE4nADlU Fm+KDSmcj8j7yWL2VZuIlpSCfePEH6qZgVHLjxsCAwEAAaOCAbowggG2MAwGA1Ud EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB /wQEAwIFoDA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3JsLmdvZGFkZHkuY29t L2dkaWcyczEtODA5LmNybDBdBgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYI KwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3Np dG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0 cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQY MBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMCcGA1UdEQQgMB6CDiouY2VkaWEub3Jn LmVjggxjZWRpYS5vcmcuZWMwHQYDVR0OBBYEFFY3YLmn5KPbVXJqgRtOKgG/4Xgv MA0GCSqGSIb3DQEBCwUAA4IBAQBWP9qj9qCl5Ta2aKWSox8OFjqnnVjJ4RGEfPQj ORiQsL0/FuQ+EmPaKufr9fyRJbapWJi9Zgs+/r8hoAP5Y90nPQ0of1Er1TDQQMnw m8BfMwrBVCHy7psb2ovJrOBmEf1Tmff6jBVp8ywGkoNTM3NR7vv8RWq3+U6klji8 gb3Ry8+5tckMMfVTHRzYmVx9OWgwrqgyIgCZV3BLNfyzYF6xXSmym6fftSxJvPDl Fj8vVGio5d89vzJ1DU4McQUPz1j0NZd3YkH/6wK7Qm2qAJRLPjE9Ua/sMh0iixbf dEGqKgL9Jx/9eL63V42K6bc5JiW3q24iS/Xm4NlVubBZDNui -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "*.cedia.org.ec" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "*.cedia.org.ec" + } +, { + "id" : "cert_subjectAltName", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "*.cedia.org.ec cedia.org.ec" + } +, { + "id" : "cert_caIssuers", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "Go Daddy Secure Certificate Authority - G2 (GoDaddy.com, Inc. from US)" + } +, { + "id" : "cert_trust", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN wildcard and CN wildcard (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "348 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-02-19 10:08" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "2020-02-14 17:42" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.godaddy.com/gdig2s1-809.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.godaddy.com/" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "max-age too short. 2 days (=172800 seconds) < 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "High Performance 8bit Web Server" + } +, { + "id" : "banner_application", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=082FC0DD5B2E7056379EAE85674EBC3166C3BD6AF7F37644BED02E9E69F6C5C6" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 521 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 2048 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x6b", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 521 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 521 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirror.cedia.org.ec/201.159.221.67", + "port" : "443", + "severity" : "INFO", + "finding" : "190" + } +] diff --git a/data/ssl/mirror.epn.edu.ec_p443-20190303-0835.json b/data/ssl/mirror.epn.edu.ec_p443-20190303-0835.json new file mode 100644 index 0000000..5c38525 --- /dev/null +++ b/data/ssl/mirror.epn.edu.ec_p443-20190303-0835.json @@ -0,0 +1,1004 @@ +[ + { + "id" : "service", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA128-SHA256" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "secp224k1 secp224r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 521 bit ECDH (P-521)" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-AES256-SHA256 DHE-RSA-CAMELLIA256-SHA256" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'max fragment length/#1' 'encrypt-then-mac/#22' 'extended master secret/#23'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "off by -2 seconds from your localtime" + } +, { + "id" : "cert_numbers", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "06DDEAF38B017E68F75DFB114DA84EBC" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "F7D8631613FA6F11C02AA376ACEF6663AAE5C5D4" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "C5E490C714F6AFBF6A9B37CA5AD33097BFDAC2AC31BDBFC8A550B65852DF6F28" + } +, { + "id" : "cert", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIGlDCCBXygAwIBAgIQBt3q84sBfmj3XfsRTahOvDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMjI2MDAwMDAwWhcN MTkwOTI1MTIwMDAwWjBbMQswCQYDVQQGEwJFQzEOMAwGA1UEBxMFUVVJVE8xJTAj BgNVBAoTHEVzY3VlbGEgUG9saXRlY25pY2EgTmFjaW9uYWwxFTATBgNVBAMMDCou ZXBuLmVkdS5lYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMEyPxW9 d7a8lrxPqpSVHlNQdd55jSeNWnBGBzJZMKj7YL1cskSmkTBM476MIGh+tMAmLBt6 6JnNma4K0HA6MxUy4dDmgaBhYjDcwJPwBP7/MJZn88V9teVUa89QcLF/F63c3Ufy dOWGAAd577j4Kdvn1AoqDeqWpBprjpujiGBeT9v2k7kupBqVdjTnmjHIUrm3nc5t /tMTNQtO1c1MS8ZTKs00PJ4zQBp5nYfQfz8q9U6+ufIy+4pdMRyKDX4axb5Rc8+R DZm+lTKfnY4J0NidctkDC9s7tn0M5NSBipEUsokidBZ9W+tXZvLVZz7WwcVqMuNY M54ddRsnikSC8gMCAwEAAaOCA2AwggNcMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjn jUY4tCzhxtniMB0GA1UdDgQWBBQatkAk4qC7CcfJbAPm8AuaPunhkDAjBgNVHREE HDAaggwqLmVwbi5lZHUuZWOCCmVwbi5lZHUuZWMwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4Yp aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJD QS5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUA pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFh0mGE+wAABAMARjBE AiAeJd9y4Dq6NBZGxayca3HZ29kB7n2Pe4jFHzEkfTRHpAIgGbLL1UYiMK4Yo0Hh GKKloH+SS7Q2gd+NFAX3PFCYsdgAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDB tOr/XqCDDwAAAWHSYYVbAAAEAwBHMEUCIF0BVYXh1kjrASIy9XdoeexB4wOVJLGe ubjYR6y0t2d4AiEAqkI1AA7X+3kCgQRxawJakN4MYC6Ji0HfF6MT5RQmNPkAdgC7 2d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWHSYYWuAAAEAwBHMEUC IGnIUrkq0m6ZcL4k/ZO3giUSeWQLqpiD52/+cETYx4x+AiEAsCWBdu91klLoK/T3 eS2FWuzII4+80LMvuUTEyOLNoKQwDQYJKoZIhvcNAQELBQADggEBAGc7zNoUg+Z3 t4hnda/rMKtR1G1DmSbG8eVjKZSpYxvtPUa0KwjaAr9kNXuU/mij/CT91Bd37p30 wmBgZ73Bu2VJvbz1m1OwfoX0k5hHGZVr6VmfGKXT0w84ML3UYEQaOtCixs0stxDY OczPO6AboYawyN20euUuTQICDQS+GYMu7Cy4yo6AIdsjc5QU+3s7L8xrUfzBWuny CbRmVfzvwOxDPFdy6M6FSOz/Ou3HBnuSf/jOsg1zfIOS3dC/0SbdWmvVKbhaduSf WjlVsG43MiWg5jlVhq5TpXVwE8Kre1LQE/5QxjjQcnGpX5zPprTVlfSxTaEUkUAv vRgFcAHXIhQ= -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "*.epn.edu.ec" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "*.epn.edu.ec" + } +, { + "id" : "cert_subjectAltName", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "*.epn.edu.ec epn.edu.ec" + } +, { + "id" : "cert_caIssuers", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "DigiCert SHA2 Secure Server CA (DigiCert Inc from US)" + } +, { + "id" : "cert_trust", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN wildcard and CN wildcard (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "205 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-02-25 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-25 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/ssca-sha2-g6.crl http://crl4.digicert.com/ssca-sha2-g6.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "Hiawatha v10.8.4" + } +, { + "id" : "banner_application", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=C5E490C714F6AFBF6A9B37CA5AD33097BFDAC2AC31BDBFC8A550B65852DF6F28" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "not vulnerable, no SSL3 or TLS1" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 521 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_xccaa", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 2048 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x6b", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 521 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 521 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirror.epn.edu.ec/190.96.111.43", + "port" : "443", + "severity" : "INFO", + "finding" : "105" + } +] diff --git a/data/ssl/mirror.ibcp.fr_p443-20190303-0837.json b/data/ssl/mirror.ibcp.fr_p443-20190303-0837.json new file mode 100644 index 0000000..0cf6f17 --- /dev/null +++ b/data/ssl/mirror.ibcp.fr_p443-20190303-0837.json @@ -0,0 +1,1006 @@ +[ + { + "id" : "service", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-10 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-12 20:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/pub/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips" + } +, { + "id" : "banner_application", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/pub/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/pub/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9488C6E0B4AE9E4C15C3446824ABD7FEAF2A456E371C3E6DF7C0F7F0FE74773B" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirror.ibcp.fr/194.254.245.138", + "port" : "443", + "severity" : "INFO", + "finding" : "132" + } +] diff --git a/data/ssl/mirror.its.dal.ca_p443-20190303-0835.json b/data/ssl/mirror.its.dal.ca_p443-20190303-0835.json new file mode 100644 index 0000000..e967f8c --- /dev/null +++ b/data/ssl/mirror.its.dal.ca_p443-20190303-0835.json @@ -0,0 +1,1090 @@ +[ + { + "id" : "service", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-05 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "2019-08-05 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp.rapidssl.com/RapidSSLRSACA2018.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "http://status.rapidssl.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=87F5C7366A7D370BD4D1DE35DA507E1C202988475400CB79BEAC043C7EDB8B3A" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 4096 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 4096 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirror.its.dal.ca/192.75.96.254", + "port" : "443", + "severity" : "INFO", + "finding" : "121" + } +] diff --git a/data/ssl/mirror.its.sfu.ca_p443-20190303-0835.json b/data/ssl/mirror.its.sfu.ca_p443-20190303-0835.json new file mode 100644 index 0000000..b172d34 --- /dev/null +++ b/data/ssl/mirror.its.sfu.ca_p443-20190303-0835.json @@ -0,0 +1,993 @@ +[ + { + "id" : "service", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "CRITICAL", + "finding" : "TLSv1.1 is not offered, and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered" + } +, { + "id" : "PFS", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA DHE-RSA-AES128-SHA" + } +, { + "id" : "DH_groups", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "mod_ssl 2.2.x/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "Default protocol TLS1.0" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA, 1024 bit DH (cbc) (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA at TLSv1 (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "off by 0 seconds from your localtime" + } +, { + "id" : "cert_numbers", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "4096 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "04B3B5AAEDA5303A2AD271D002B88C65" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "B4CEDED4E0F11DDF9FF45B40157F3A5F358436CE" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "23594FD62F6E8DBAAB629530A2AC611E66EEABCC920C9224D8FEB06A1FD76A7D" + } +, { + "id" : "cert", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIH+jCCBuKgAwIBAgIQBLO1qu2lMDoq0nHQAriMZTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODAyMjcwMDAwMDBaFw0yMDAzMjQxMjAwMDBa MIGJMQswCQYDVQQGEwJDQTEZMBcGA1UECBMQQnJpdGlzaCBDb2x1bWJpYTEQMA4G A1UEBxMHQnVybmFieTEgMB4GA1UEChMXU2ltb24gRnJhc2VyIFVuaXZlcnNpdHkx FDASBgNVBAsTC0lUIFNlcnZpY2VzMRUwEwYDVQQDDAwqLml0cy5zZnUuY2EwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCm9tT4kc9pIPJJniWynQ/EHxSq mbbTn2X2rav6olI/QuY5YtuSJuKy+jnSzvg8lpWJQYCQMPnKr9CZ8TPLMLWugqks QKB72vWjSlPXTajPKiyALie/mjVQ13YjA/BRwSHd/oWSsRh5ql5umICNnXpdPp1L 3N/FDZUOxbfYREt6hzASIqZuo1E/bR4g4U+c5E1nujr+14Zv4fjNJb2baZ9iuKG5 qfeIC8HEqNfkFP88yxWFpzxPaSN70HvJNFLJMo93oQlYALkHO1x+0iMJqnqInouX VRObSF3pWoogDUOjklIYNNwp8WveiEjdhvq+wQXfJUUI6XfyWc5LqfpPgFhKnOy8 7ciUcqQQ7yBelLrHdawfNG7b0ftqgicIchfSHjDVZQvQBf47Q4SlpC1Tx834o97V VmBIRwnw8IToeqM8G62uHeHiVr1lkwBE763LZhBk7WNCrTpvvHx0MXQYVeZXwttq S5dVaLH4EEFRJxSfeafgj5OqkiGo6qAylUCanHkd6ifxe2ika2mk7OXkq9Ji269i oXGH0ilwTJftDeHeMpdNiR93W5EQ10dmgsfLb0wf2GxRFnp2Apns6UE1VzZH/tmk NkM1UskepPiY0V4fFYyVuLblzNv1CPlmFKaymD9j5w/LpCAVzBRMbSbKNcBWMwAx qLfe9Jxh3WhzDTWE0QIDAQABo4IDdDCCA3AwHwYDVR0jBBgwFoAUUWj/kK8CB3U8 zNllZGKiErhZcjswHQYDVR0OBBYEFPLYHRLSubfARW4fAdgnwj5/EazMMCMGA1Ud EQQcMBqCDCouaXRzLnNmdS5jYYIKaXRzLnNmdS5jYTAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCG Lmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmww NKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1n Ni5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0 cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEB BHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsG AQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEy SGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYB BAHWeQIEAgSCAW8EggFrAWkAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O yA3cEAAAAWHYjWoSAAAEAwBIMEYCIQCkZVMoLhfE1khxoqtPLvRTU2YMaLw5Dr7k VbfN3ODCZQIhAIAgovHsNf+vExQvdgjNYqTZj1XbJD8aGsEXXy7gqcoUAHYAh3W/ 51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFh2I1q4AAABAMARzBFAiEA 9H++Cm18cXFMzFfJ6hDeMXXpRTFt6N31yP948oxCWlsCIArmmRHv3Ec1mbnnFA6r D078YcrKTecMjSYS63nW4RjYAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk No4e0YUAAAFh2I1q4wAABAMARzBFAiAIzKs8Q5X4IrDv8CTU9M/LF38f3VtKZfiJ X5HSNn82BAIhANhwAPkA0xJDaQYCFBmatOLSc4Ya5Z4Q56FvkfQlW/YpMA0GCSqG SIb3DQEBCwUAA4IBAQBm8143C+8BSJgRZXCqb+C4AGdzJPYffSHmxGsN2+DLwwuP Cg5ccy5ZScacR9ay58tPrTYJMi8QEbhltjZVzYu+ga+2BuwTgLFQZ437M43AOIXl mdxY2iGe6C28iAwZ34ikAAi07W3oFIXq2gSzBpDHMavIcNt3b2C1ro4UjVOly8vR fk/ULAFsWzC+pvw0V483uMoyrUqy43/8nIiImh9RHEgHRCbLGkyG0II2kKYlv9/Z U58KoyGWxrDkPvcwKF0CFwLNtYZXxAq8w+YIxGya9AL8VoPwZV98DAZcL29Dzdba TTEwEshTBKq8TcO+4yqoGRqOd8+hdVVamO3Iw9Or -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "*.its.sfu.ca" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "*.its.sfu.ca" + } +, { + "id" : "cert_subjectAltName", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "*.its.sfu.ca its.sfu.ca" + } +, { + "id" : "cert_caIssuers", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "DigiCert SHA2 High Assurance Server CA (DigiCert Inc from US)" + } +, { + "id" : "cert_trust", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN wildcard and CN wildcard (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "386 >= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-02-26 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "2020-03-24 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/sha2-ha-server-g6.crl http://crl4.digicert.com/sha2-ha-server-g6.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirror/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "ipv4_in_header", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "cwe" : "CWE-212", + "finding" : "Server: Apache/2.2.3 (Red Hat) DAV/2 mod_auth_kerb/5.1 mod_auth_pgsql/2.0.3 mod_nss/2.2.3 NSS/3.14.3.0 Basic ECC PHP/5.1.6 mod_python/3.2.8 Python/2.4.3 mod_ssl/2.2.3 OpenSSL/0.9.8e-fips-rhel5 SVN/1.6.11 mod_perl/2.0.4 Perl/v5.8.8 (check if it's your IP address or e.g. a cluster IP)" + } +, { + "id" : "HSTS", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.3 (Red Hat) DAV/2 mod_auth_kerb/5.1 mod_auth_pgsql/2.0.3 mod_nss/2.2.3 NSS/3.14.3.0 Basic ECC PHP/5.1.6 mod_python/3.2.8 Python/2.4.3 mod_ssl/2.2.3 OpenSSL/0.9.8e-fips-rhel5 SVN/1.6.11 mod_perl/2.0.4 Perl/v5.8.8" + } +, { + "id" : "banner_application", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/mirror/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/mirror/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1 offered" + } +, { + "id" : "SWEET32", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=23594FD62F6E8DBAAB629530A2AC611E66EEABCC920C9224D8FEB06A1FD76A7D" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "mod_ssl 2.2.x/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA EDH-RSA-DES-CBC-SHA DES-CBC-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- and no higher protocols as mitigation supported" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_x39", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x35", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x2f", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_x16", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 1024 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x15", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x15 EDH-RSA-DES-CBC-SHA DH 1024 DES 56 TLS_DHE_RSA_WITH_DES_CBC_SHA" + } +, { + "id" : "cipher_x09", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "x09 DES-CBC-SHA RSA DES 56 TLS_RSA_WITH_DES_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "scanTime", + "ip" : "mirror.its.sfu.ca/142.58.101.156", + "port" : "443", + "severity" : "INFO", + "finding" : "191" + } +] diff --git a/data/ssl/mirror.las.iastate.edu_p443-20190303-0846.json b/data/ssl/mirror.las.iastate.edu_p443-20190303-0846.json new file mode 100644 index 0000000..c843b16 --- /dev/null +++ b/data/ssl/mirror.las.iastate.edu_p443-20190303-0846.json @@ -0,0 +1,1069 @@ +[ + { + "id" : "service", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-RC4-SHA AES128-SHA AES256-SHA RC4-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA ECDHE-RSA-RC4-SHA AES128-SHA AES256-SHA RC4-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 ECDHE-RSA-RC4-SHA AES128-SHA256 AES128-SHA AES256-SHA256 AES256-SHA RC4-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-03-28 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "2020-03-28 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.incommon-rsa.org/InCommonRSAServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.usertrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.34 (Red Hat) OpenSSL/1.0.2k-fips" + } +, { + "id" : "banner_application", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=DCD7A10D8D0F4412530AC09253C2B3E7F4757FB0D0128B02A970C95EA29E2920" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA" + } +, { + "id" : "cipher_xc030", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 256 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "mirror.las.iastate.edu/129.186.138.51", + "port" : "443", + "severity" : "INFO", + "finding" : "138" + } +] diff --git a/data/ssl/mirror.lzu.edu.cn_p443-20190303-0835.json b/data/ssl/mirror.lzu.edu.cn_p443-20190303-0835.json new file mode 100644 index 0000000..4a26c2b --- /dev/null +++ b/data/ssl/mirror.lzu.edu.cn_p443-20190303-0835.json @@ -0,0 +1,957 @@ +[ + { + "id" : "service", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1" + } +, { + "id" : "cipher_order", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 86400 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-10 10:11" + } +, { + "id" : "cert_notAfter", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-11 11:11" + } +, { + "id" : "certs_countServer", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "-529 (± 1.5) seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx" + } +, { + "id" : "banner_application", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "likely not vulnerable (timed out)" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "no RSA certificate, can't be used with SSLv2 elsewhere" + } +, { + "id" : "LOGJAM", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc02c", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02c ECDHE-ECDSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc024", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc024 ECDHE-ECDSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc00a", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc00a ECDHE-ECDSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02b", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02b ECDHE-ECDSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc023", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc023 ECDHE-ECDSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc009", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc009 ECDHE-ECDSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc008", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "xc008 ECDHE-ECDSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-ECDSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "mirror.lzu.edu.cn/202.201.0.160", + "port" : "443", + "severity" : "INFO", + "finding" : "449" + } +] diff --git a/data/ssl/mirrors.dotsrc.org_p443-20190303-0835.json b/data/ssl/mirrors.dotsrc.org_p443-20190303-0835.json new file mode 100644 index 0000000..991eaa2 --- /dev/null +++ b/data/ssl/mirrors.dotsrc.org_p443-20190303-0835.json @@ -0,0 +1,1048 @@ +[ + { + "id" : "service", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'status request/#5' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "random" + } +, { + "id" : "cert_numbers", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "03370ED5F4B4F13D8D74C6D1776BB00D3364" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "EC1C041FD24F6F8A3C9355D50019AA105606CFBD" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "72004465B3BF1F3A94CAD1C2E81D20C433258A4F7A8A83223317A66CA51DC7E1" + } +, { + "id" : "cert", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAzcO1fS08T2NdMbRd2uwDTNkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDcxNTMwNTJaFw0x OTA0MDcxNTMwNTJaMB0xGzAZBgNVBAMTEm1pcnJvcnMuZG90c3JjLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMR3p4eVdD0DMBRMq0zmC6qKE09O mgV/3/U/g2LRmWdfWwg6RyU00Bf7GvVm41wbvMx7H8BUPLy43aQBE4a0SbkHSymF 0TahSNbo0oUIgCqqs9FGTi+ZMzwgyV/4yisCrfSgNwatHyCXKyHGFozbf3xp444v uuz0o94LZhkjnQgdE+vIOCnUY1fCMO7BJCklEBCuHiUOtFHjAOOdCcJA1eL44yc0 xtPEwwhYh1PRL3mavkNCCj2YKOUbbDHwyX6vxSsm85QWLVprjeXUyMV1CL26vmkz Iov8BNN+SYf+RstDKOoCRLuneoZ++ZAgcF3Z+XiV2PCHeiHIhJmr1ICTKgECAwEA AaOCAukwggLlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUu0+x/E/QhFikMVAvl7iE Ld7iLXgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCBngYDVR0RBIGWMIGTgh9kay0wMS5pbnN0YWxsZXIuaGFyZGVuZWRi c2Qub3JnghJkb3RzcmMuZGwub3Nkbi5uZXSCDmZ0cC5vcGVuYnNkLmRrghFrdmFz ZXIuZG90c3JjLm9yZ4IRbWlycm9yLmRvdHNyYy5vcmeCEm1pcnJvcnMuZG90c3Jj Lm9yZ4ISbWlycm9ycy5zdW5zaXRlLmRrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9C cMK//V5CIAjGNzV55hB7zFYAAAFoKScQFAAABAMARzBFAiA0h79TsY+a9rz2DhLR y8nSAZTy3DoBHo+trHENZygsBAIhAMuqbeyh1Vml9MSvjugio4Ar5SQrKVTLy1tq XobYfp2VAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFoKScQ YQAABAMARzBFAiB54+Kh4cm0BDqE/XwuwNghuH1/V11sSWgEZAtZY8xzWgIhANuK iIKzCS8HJA7JFGNv8bvO3GxvP9+iHLqmi34fr+PDMA0GCSqGSIb3DQEBCwUAA4IB AQAyI2uslZmZFhzVzb7dQXsVUxwq0QvGOaaDwx5qQ3DCCeZqebDDZjKAD0Haz4QC yfrRaKj9B8sKx/RJfKKwX4eZGNtevOqVg0AHLHfaMN8RmhtZ1K83J94gnaujaIqW 9yGAnOKJ8fWxC0zK8OviiBPtFGSaLz7Azo4QFEnI31J1btLAYyCE1+3tJR1xUZsk liE8TjTCdrThQH8m0UYqFs/DcBNdiSebOHBSotGU87TFPUjPYczYKmXrpltySwE7 80XuzyFOrX8Tw1KR/bDE7RoKqdNpCcqFoD227PXAj5kqQ+Cz+0F5yqpl5Nj+Ga10 9bB122ynGw3QEpdtNEWvUGsO -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "mirrors.dotsrc.org" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "mirrors.dotsrc.org" + } +, { + "id" : "cert_subjectAltName", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "dk-01.installer.hardenedbsd.org dotsrc.dl.osdn.net ftp.openbsd.dk kvaser.dotsrc.org mirror.dotsrc.org mirrors.dotsrc.org mirrors.sunsite.dk" + } +, { + "id" : "cert_caIssuers", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "Let's Encrypt Authority X3 (Let's Encrypt from US)" + } +, { + "id" : "cert_trust", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (same w/o SNI)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "35 >= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-07 10:30" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-07 11:30" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.14.0 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=72004465B3BF1F3A94CAD1C2E81D20C433258A4F7A8A83223317A66CA51DC7E1" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x6b", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "mirrors.dotsrc.org/130.225.254.116", + "port" : "443", + "severity" : "INFO", + "finding" : "146" + } +] diff --git a/data/ssl/mirrors.eliteu.cn_p443-20190303-0835.json b/data/ssl/mirrors.eliteu.cn_p443-20190303-0835.json new file mode 100644 index 0000000..213df71 --- /dev/null +++ b/data/ssl/mirrors.eliteu.cn_p443-20190303-0835.json @@ -0,0 +1,992 @@ +[ + { + "id" : "service", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-09-05 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "2019-10-06 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp.rapidssl.com/RapidSSLRSACA2018.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "http://status.rapidssl.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.18 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9ECD20D34B58129EE3C625893E37B782EF002FC9350B5B74F0242B2D2D5199B7" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirrors.eliteu.cn/119.29.56.102", + "port" : "443", + "severity" : "INFO", + "finding" : "369" + } +] diff --git a/data/ssl/mirrors.nic.cz_p443-20190303-0835.json b/data/ssl/mirrors.nic.cz_p443-20190303-0835.json new file mode 100644 index 0000000..aa4a6b8 --- /dev/null +++ b/data/ssl/mirrors.nic.cz_p443-20190303-0835.json @@ -0,0 +1,950 @@ +[ + { + "id" : "service", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (4096 bits)" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'status request/#5' 'heartbeat/#15' 'next protocol/#13172'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-09 23:29" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-11 00:29" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/R/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.9.4" + } +, { + "id" : "banner_application", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/R/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable, no RSA key transport cipher" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/R/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3FC3CC13B3FBABAFC5DD186F15BBCBF5133DB9559275B0E027A8DBE54AB13F40" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "mirrors.nic.cz/217.31.202.63", + "port" : "443", + "severity" : "INFO", + "finding" : "358" + } +] diff --git a/data/ssl/mirrors.shu.edu.cn_p443-20190303-0835.json b/data/ssl/mirrors.shu.edu.cn_p443-20190303-0835.json new file mode 100644 index 0000000..23a5d06 --- /dev/null +++ b/data/ssl/mirrors.shu.edu.cn_p443-20190303-0835.json @@ -0,0 +1,1033 @@ +[ + { + "id" : "service", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-15 08:55" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-16 09:55" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "186 days (=16070400 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx" + } +, { + "id" : "banner_application", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "SAMEORIGIN" + } +, { + "id" : "X-XSS-Protection", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "1; mode=block" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "Access-Control-Allow-Origin", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "Access-Control-Allow-Origin: *" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CWE-119", + "finding" : "not vulnerable CVE-2014-0160" + } +, { + "id" : "CCS", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "WARN", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "Test failed as HTTP request stalled and was terminated" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=74CC3C9E968BC28A855ED861400635DF54E5625DA0263732DFDD3143081EA102" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-DES-CBC3-SHA AES128-SHA AES256-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "mirrors.shu.edu.cn/202.121.199.235", + "port" : "443", + "severity" : "INFO", + "finding" : "666" + } +] diff --git a/data/ssl/mirrors.tongji.edu.cn_p443-20190303-0835.json b/data/ssl/mirrors.tongji.edu.cn_p443-20190303-0835.json new file mode 100644 index 0000000..7005595 --- /dev/null +++ b/data/ssl/mirrors.tongji.edu.cn_p443-20190303-0835.json @@ -0,0 +1,1897 @@ +[ + { + "id" : "service", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "AES128-GCM-SHA256 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-25 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-24 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp.geotrust.com/GeoTrustRSACA2018.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "http://status.geotrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "-712 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "365 days (=31536000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "none" + } +, { + "id" : "banner_application", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "CRITICAL", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "VULNERABLE" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=1EABA46D95C1DB77EA9F998FCB162A63E3525DDE2E8112DF50EEA57CEC96390E" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.tongji.edu.cn/222.66.109.32", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "service", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with http/1.1 (advertised)" + } +, { + "id" : "ALPN", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "WARN", + "finding" : "Default protocol empty (Hint: if IIS6 give OpenSSL 1.0.1 a try)" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "AES128-GCM-SHA256 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-06-25 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "2020-09-24 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "http://cdp.geotrust.com/GeoTrustRSACA2018.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "http://status.geotrust.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "-709 (± 1.5) seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "365 days (=31536000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "none" + } +, { + "id" : "banner_application", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CWE-119", + "finding" : "not vulnerable CVE-2014-0160" + } +, { + "id" : "CCS", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "likely not vulnerable (timed out)" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=1EABA46D95C1DB77EA9F998FCB162A63E3525DDE2E8112DF50EEA57CEC96390E" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "no DH key with <= TLS 1.2" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "scanTime", + "ip" : "mirrors.tongji.edu.cn/202.120.188.98", + "port" : "443", + "severity" : "INFO", + "finding" : "453" + } +] diff --git a/data/ssl/mirrors.tuna.tsinghua.edu.cn_p443-20190303-0835.json b/data/ssl/mirrors.tuna.tsinghua.edu.cn_p443-20190303-0835.json new file mode 100644 index 0000000..8786540 --- /dev/null +++ b/data/ssl/mirrors.tuna.tsinghua.edu.cn_p443-20190303-0835.json @@ -0,0 +1,1097 @@ +[ + { + "id" : "service", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (4096 bits)" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES256-SHA AES128-SHA DES-CBC3-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES256-SHA AES128-SHA DES-CBC3-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES256-GCM-SHA384 AES128-GCM-SHA256 AES256-SHA256 AES128-SHA256 AES256-SHA AES128-SHA DES-CBC3-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'next protocol/#13172' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "2014-11-03 08:19" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "2019-11-03 00:11" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl2.alphassl.com/gs/gsalphasha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/gsalphasha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "-4 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "365 days (=31536000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "only for this domain" + } +, { + "id" : "HSTS_preload", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "domain is NOT marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "nginx/1.14.2" + } +, { + "id" : "banner_application", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "likely not vulnerable (timed out)" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=24A005952666ED5F49BD2FDD4F1BC19693751350FDDE82F15BF8CD488B5E3867" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA AES256-SHA AES128-SHA DES-CBC3-SHA DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 4096 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 4096 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 4096 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DES-CBC3-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "mirrors.tuna.tsinghua.edu.cn/101.6.8.193", + "port" : "443", + "severity" : "INFO", + "finding" : "732" + } +] diff --git a/data/ssl/mirrors.ustc.edu.cn_p443-20190303-0835.json b/data/ssl/mirrors.ustc.edu.cn_p443-20190303-0835.json new file mode 100644 index 0000000..f2951a7 --- /dev/null +++ b/data/ssl/mirrors.ustc.edu.cn_p443-20190303-0835.json @@ -0,0 +1,2311 @@ +[ + { + "id" : "service", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM AES256-CCM8 AES256-CCM AES128-CCM8 AES128-CCM ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA256 CAMELLIA128-SHA256 CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 600 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-03-01 05:51" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-30 06:51" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "-2 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "openresty" + } +, { + "id" : "banner_application", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=5D80A48D9047F524102B930A4F1F20A1F1E8C63B99A0A25E07F11EF9C81BAE95" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a3", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 2048 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 2048 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 256 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc0", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x84", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 2048 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 2048 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 256 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_xbe", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xba", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x41", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.ustc.edu.cn/202.141.176.110", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "service", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "offered with h2, http/1.1 (advertised)" + } +, { + "id" : "ALPN_HTTP2", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "h2" + } +, { + "id" : "ALPN", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM AES256-CCM8 AES256-CCM AES128-CCM8 AES128-CCM ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA256 CAMELLIA128-SHA256 CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 600 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-03-01 05:51" + } +, { + "id" : "cert_notAfter", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-30 06:51" + } +, { + "id" : "certs_countServer", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "-2 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "openresty" + } +, { + "id" : "banner_application", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=5D80A48D9047F524102B930A4F1F20A1F1E8C63B99A0A25E07F11EF9C81BAE95" + } +, { + "id" : "LOGJAM", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a3", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 2048 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 2048 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 256 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc0", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x84", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 2048 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 2048 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 256 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_xbe", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xba", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x41", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "mirrors.ustc.edu.cn/218.104.71.170", + "port" : "443", + "severity" : "INFO", + "finding" : "1058" + } +] diff --git a/data/ssl/muug.ca_p443-20190303-0835.json b/data/ssl/muug.ca_p443-20190303-0835.json new file mode 100644 index 0000000..2052f78 --- /dev/null +++ b/data/ssl/muug.ca_p443-20190303-0835.json @@ -0,0 +1,1055 @@ +[ + { + "id" : "service", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-01-08 00:43" + } +, { + "id" : "cert_notAfter", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "2019-04-08 01:43" + } +, { + "id" : "certs_countServer", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/mirror/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.25 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/mirror/cran/'" + } +, { + "id" : "security_headers", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/mirror/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=8093827D70FBA83D734DA04A488908DB1B0E42959326128EDB1F4A1D12CAAE26" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "muug.ca/208.81.1.244", + "port" : "443", + "severity" : "INFO", + "finding" : "115" + } +] diff --git a/data/ssl/pbil.univ-lyon1.fr_p443-20190303-0835.json b/data/ssl/pbil.univ-lyon1.fr_p443-20190303-0835.json new file mode 100644 index 0000000..974c28f --- /dev/null +++ b/data/ssl/pbil.univ-lyon1.fr_p443-20190303-0835.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" + } +, { + "id" : "DH_groups", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-04 19:00" + } +, { + "id" : "cert_notAfter", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "2021-02-09 07:00" + } +, { + "id" : "certs_countServer", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/TERENASSLCA3.crl http://crl4.digicert.com/TERENASSLCA3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.25 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=0BF81AA7096799E9B501260BFDCFD4C0928A81BC51AA334FCC42B1CED9E29DE1" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 570 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 570 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 570 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 570 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "pbil.univ-lyon1.fr/134.214.32.76", + "port" : "443", + "severity" : "INFO", + "finding" : "146" + } +] diff --git a/data/ssl/repo.bppt.go.id_p443-20190303-0839.json b/data/ssl/repo.bppt.go.id_p443-20190303-0839.json new file mode 100644 index 0000000..6745c4d --- /dev/null +++ b/data/ssl/repo.bppt.go.id_p443-20190303-0839.json @@ -0,0 +1,1134 @@ +[ + { + "id" : "service", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "finding" : "offered" + } +, { + "id" : "TLS1", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 256 bit ECDH (P-256) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_SSLv3", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at SSLv3 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-04-28 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-23 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, uses SSLv3+CBC" + } +, { + "id" : "fallback_SCSV", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=83AC422437942524837419769A6C9E52B46D46EFBDC386C0DCCF3E5FAD598A94" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_SSL3", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA" + } +, { + "id" : "cipher_xc030", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 256 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_xc012", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 2048 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "SSLv3 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "repo.bppt.go.id/103.224.137.193", + "port" : "443", + "severity" : "INFO", + "finding" : "335" + } +] diff --git a/data/ssl/rweb.crmda.ku.edu_p443-20190303-0846.json b/data/ssl/rweb.crmda.ku.edu_p443-20190303-0846.json new file mode 100644 index 0000000..fdbd1e1 --- /dev/null +++ b/data/ssl/rweb.crmda.ku.edu_p443-20190303-0846.json @@ -0,0 +1,1055 @@ +[ + { + "id" : "service", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "CRITICAL", + "finding" : "TLSv1.1 is not offered, and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_2", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_3", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered" + } +, { + "id" : "PFS", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "cipher_order", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "Default protocol TLS1.0" + } +, { + "id" : "cipher_negotiated", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "HIGH", + "finding" : "ECDHE-RSA-RC4-SHA, 521 bit ECDH (P-521) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 7200 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "2017-05-15 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "2019-09-18 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/sha2-ha-server-g5.crl http://crl4.digicert.com/sha2-ha-server-g5.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 mod_R/1.2.5 R/3.2.1 mod_apreq2-20090110/2.8.0" + } +, { + "id" : "banner_application", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1 offered" + } +, { + "id" : "SWEET32", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=D04D5320B14D0624E4129D6397C12296CF64B923690AE380C4053B3C19AE622E" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 16" + } +, { + "id" : "LOGJAM", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA IDEA-CBC-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- and no higher protocols as mitigation supported" + } +, { + "id" : "LUCKY13", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc014", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x39", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 4096 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 4096 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x35", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc013", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 4096 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 4096 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 4096 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x2f", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 521 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 521 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 4096 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "scanTime", + "ip" : "rweb.crmda.ku.edu/129.237.125.92", + "port" : "443", + "severity" : "INFO", + "finding" : "120" + } +] diff --git a/data/ssl/stat.ethz.ch_p443-20190303-0844.json b/data/ssl/stat.ethz.ch_p443-20190303-0844.json new file mode 100644 index 0000000..647ee48 --- /dev/null +++ b/data/ssl/stat.ethz.ch_p443-20190303-0844.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA256, 2048 bit DH (cbc) (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.1", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA at TLSv1.1 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_TLSv1.2", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 at TLSv1.2 (matching cipher in list missing)" + } +, { + "id" : "cipher_order_", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "at (matching cipher in list missing)" + } +, { + "id" : "TLS_extensions", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-03-05 02:36" + } +, { + "id" : "cert_notAfter", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "2020-03-05 02:46" + } +, { + "id" : "certs_countServer", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "finding" : "yes" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvsslg2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.32 (Unix)" + } +, { + "id" : "banner_application", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=D2FE1F7EC75BB356765CD4DF619FAED264190359005E8B16F877AEB37D3D3C80" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "stat.ethz.ch/129.132.119.195", + "port" : "443", + "severity" : "INFO", + "finding" : "156" + } +] diff --git a/data/ssl/vps.fmvz.usp.br_p443-20190303-0821.json b/data/ssl/vps.fmvz.usp.br_p443-20190303-0821.json new file mode 100644 index 0000000..5e187c7 --- /dev/null +++ b/data/ssl/vps.fmvz.usp.br_p443-20190303-0821.json @@ -0,0 +1,1160 @@ +[ + { + "id" : "service", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA AES256-SHA DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM AES256-CCM8 AES256-CCM AES128-CCM8 AES128-CCM AES256-SHA256 AES128-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA256 CAMELLIA128-SHA256 CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-01-29 12:01" + } +, { + "id" : "cert_notAfter", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "2021-01-29 12:01" + } +, { + "id" : "certs_countServer", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.globalsign.com/gs/icpedusha2g2.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp2.globalsign.com/icpedusha2g2" + } +, { + "id" : "OCSP_stapling", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "iodef=mailto:stidomain@usp.br, issue=comodoca.com, issue=digicert.com, issue=globalsign.com, issue=godaddy.com, issue=identrust.com, issue=letsencrypt.org, issue=pki.goog, issue=symantec.com, issuewild=comodoca.com, issuewild=digicert.com, issuewild=globalsign.com" + } +, { + "id" : "certificate_transparency", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "+17 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "sameorigin" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "banner_reverseproxy", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=2D319B29E628B7B4D96D23FD628ADC7EEC447808EFC60176843235A0B9892769" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA" + } +, { + "id" : "BEAST", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a3", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 2048 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09f", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09f DHE-RSA-AES256-CCM DH 2048 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x6b", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc077", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 256 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" + } +, { + "id" : "cipher_xc4", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x88", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc0a1", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8" + } +, { + "id" : "cipher_xc09d", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM" + } +, { + "id" : "cipher_x3d", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc0", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256" + } +, { + "id" : "cipher_x84", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc0a2", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 2048 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09e", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09e DHE-RSA-AES128-CCM DH 2048 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_xc0a0", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8" + } +, { + "id" : "cipher_xc09c", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM" + } +, { + "id" : "cipher_x67", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xc076", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 256 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_xbe", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x45", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_xba", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256" + } +, { + "id" : "cipher_x41", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "vps.fmvz.usp.br/143.107.10.17", + "port" : "443", + "severity" : "INFO", + "finding" : "333" + } +] diff --git a/data/ssl/wbc.upm.edu.my_p443-20190303-0841.json b/data/ssl/wbc.upm.edu.my_p443-20190303-0841.json new file mode 100644 index 0000000..2af61ba --- /dev/null +++ b/data/ssl/wbc.upm.edu.my_p443-20190303-0841.json @@ -0,0 +1,971 @@ +[ + { + "id" : "service", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "CRITICAL", + "finding" : "TLSv1.1 is not offered, and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_2", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "TLS1_3", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "not offered" + } +, { + "id" : "PFS", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA DHE-RSA-AES128-SHA" + } +, { + "id" : "DH_groups", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "mod_ssl 2.2.x/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "cipher_order", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "finding" : "NOT a cipher order configured" + } +, { + "id" : "protocol_negotiated", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "Default protocol TLS1.0" + } +, { + "id" : "cipher_negotiated", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "finding" : "DHE-RSA-AES256-SHA, 1024 bit DH (cbc) (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_TLSv1", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "DHE-RSA-AES256-SHA at TLSv1 (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "cipher_order_", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "at (limited sense as client will pick)" + } +, { + "id" : "TLS_extensions", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'session ticket/#35'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "off by +7544 seconds from your localtime" + } +, { + "id" : "cert_numbers", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "E1B32FAB75A7B651B2951A0F0C0DF979" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "2E7A0D306C752B866F72AD01032A508930D51DA6" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "87E657AFAF8FE0532E57BFF8F5A1EE686BCC0C63E77489C36F59E6466E659190" + } +, { + "id" : "cert", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIRAOGzL6t1p7ZRspUaDwwN+XkwDQYJKoZIhvcNAQELBQAw gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg Q0EwHhcNMTYwMzI3MDAwMDAwWhcNMTkwMzI3MjM1OTU5WjBSMSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRcw FQYDVQQDEw53YmMudXBtLmVkdS5teTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKnGyg/Le/f39QlbK3xD0d+2K0t0XJkopOXjNWG1AdeyvIXwTrnUP/fT WQLn3qFma38MpqoHXLzjqJIOq3UZkRn0oTh7h9lowo7ya+4YsTRs6sQbyJNG1IYY oztD1gVrYa6gTb7WG6uAAWtwdxhTZXLywGLKHUvW6A2ocgQRTpTVHiDjEIwueJcp Z1teFbAzo+Jcza5s200GosAqrAkpGFF+i0Cv9ETFtI5u13FIjiWxB9kPNf8yuQZ4 RfN5oARNAmahcJIZsCgoL8feTXiYVgxM3OQismo28cIzobRlw3vxgFFpn7bUc/iJ ab4AspGJr1sI0OHlDjWyPjy3iPlvOBUCAwEAAaOCAd8wggHbMB8GA1UdIwQYMBaA FJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1UdDgQWBBR9snS/z/2Yq4bdO1/c0x72 zZHOpjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkG CCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwB AgEwVAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09N T0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBhQYIKwYB BQUHAQEEeTB3ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9D T01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wLQYDVR0RBCYwJIIOd2Jj LnVwbS5lZHUubXmCEnd3dy53YmMudXBtLmVkdS5teTANBgkqhkiG9w0BAQsFAAOC AQEAbxVA/VeRIjggz0VaxBw4uF6CAIk99EZmqNtQZUsIgxghcCK9rqKc/jMoRSKP 95kQwR+ustrnybBkwXI6jQEmnpXjOoiB5RFwnzDaVLe5/ef4N5Z3WBLgrcXVhUfY M+EHSnGD4gqssCSGwrjnlD4QqjzU/xSU2YBP2mBVO3bi4+zEymPzJEQ7JUdGIumQ 8v+NcfeZY+w03SVXmW4tiBmm22QtjWbi1pNqx2Jt/u4sMR8CaoWOpUkcg8PZWqX/ lQTyH6pioQ5b+80I11+2TA427h3iz0pLZKbEoRikj2Uwzz/SQ/M6vmepKp8Pvqd0 2xKeBPkbGzwDyd4G9bO0hAH2TA== -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "wbc.upm.edu.my" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "ngkengyap.com" + } +, { + "id" : "cert_subjectAltName", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "wbc.upm.edu.my www.wbc.upm.edu.my" + } +, { + "id" : "cert_caIssuers", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "COMODO RSA Domain Validation Secure Server CA (COMODO CA Limited from GB)" + } +, { + "id" : "cert_trust", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (SNI mandatory)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "finding" : "expires < 30 days (24)" + } +, { + "id" : "cert_notBefore", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "2016-03-26 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "finding" : "2019-03-27 19:59" + } +, { + "id" : "certs_countServer", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "4" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.comodoca.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "HTTP_status_code", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "+7546 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.16 (Debian)" + } +, { + "id" : "banner_application", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "security_headers", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "CRITICAL", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "VULNERABLE" + } +, { + "id" : "ticketbleed", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable, returned potential memory fragments do not differ" + } +, { + "id" : "ROBOT", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "finding" : "no protocol below TLS 1 offered" + } +, { + "id" : "SWEET32", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=87E657AFAF8FE0532E57BFF8F5A1EE686BCC0C63E77489C36F59E6466E659190" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "mod_ssl 2.2.x/1024-bit MODP group with safe prime modulus" + } +, { + "id" : "LOGJAM", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- and no higher protocols as mitigation supported" + } +, { + "id" : "LUCKY13", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_x39", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x35", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x33", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x2f", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_x16", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 1024 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-MD5" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES256-SHA" + } +, { + "id" : "scanTime", + "ip" : "wbc.upm.edu.my/119.40.117.175", + "port" : "443", + "severity" : "INFO", + "finding" : "266" + } +] diff --git a/data/ssl/www.freestatistics.org_p443-20190303-0807.json b/data/ssl/www.freestatistics.org_p443-20190303-0807.json new file mode 100644 index 0000000..c6da3f8 --- /dev/null +++ b/data/ssl/www.freestatistics.org_p443-20190303-0807.json @@ -0,0 +1,1062 @@ +[ + { + "id" : "service", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "http/1.1" + } +, { + "id" : "cipherlist_NULL", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-310", + "finding" : "not offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1 secp384r1 secp521r1 X25519" + } +, { + "id" : "DH_groups", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "Unknown DH group (2048 bits)" + } +, { + "id" : "cipher_order", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'status request/#5' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "No lifetime advertised" + } +, { + "id" : "SSL_sessionID_support", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "yes" + } +, { + "id" : "sessionresumption_ticket", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "sessionresumption_ID", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "supported" + } +, { + "id" : "TLS_timestamp", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "random" + } +, { + "id" : "cert_numbers", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "1" + } +, { + "id" : "cert_signatureAlgorithm", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "SHA256 with RSA" + } +, { + "id" : "cert_keySize", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "2048 bits" + } +, { + "id" : "cert_keyUsage", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "Digital Signature, Key Encipherment" + } +, { + "id" : "cert_extKeyUsage", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "cert_ext_keyusage" + } +, { + "id" : "cert_serialNumber", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "045A0F6D7BFDF13EF284F2751CA1A9A4C4F0" + } +, { + "id" : "cert_fingerprintSHA1", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "4CE4297C749BC2289A2FCBF09CC3599D68C3F560" + } +, { + "id" : "cert_fingerprintSHA256", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "AF6373832492616A203AB892FC96E17B7EF71BBAFE7DEAF13D1EC736E32F1331" + } +, { + "id" : "cert", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "-----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISBFoPbXv98T7yhPJ1HKGppMTwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjMxMzIyNTNaFw0x OTA1MjQxMzIyNTNaMCExHzAdBgNVBAMTFnd3dy5mcmVlc3RhdGlzdGljcy5vcmcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8bdDPptdFF6KwHHtzyrE 4hMrntaWznos78TiutSDJ3znUNm7OaZz6BD/U51pG9mGq5nKfPZEpCIInKUqCzrd JfEd/F7+VukMT5axVrhFPP67DNC12t7ShKJ2w4MHiHw1CzT7K+FqyAfE8Ke0OTvg 8szGQOqtM+xup3uCsrbMcKRiMWbUuh8ygUcpyeLEPeS531X8PVxZ+9OGvEDSQGDX cPHB13GGSNBr9HFlGAjzubo1r1lrEDzdJmK+B96uskbA0Ir8ggFDSCEZBCTlGbFM vj/CIrfiDOTUXaG0ktyVd79zt+nytFDXCSo675amYVKy1xXI9L1Lc8fqbDfwc6sp AgMBAAGjggJ/MIICezAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBWbkNlUZpUtUzig To8+Yx03oSDPMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wNQYDVR0RBC4wLIISZnJlZXN0YXRpc3RpY3Mub3JnghZ3d3cu ZnJlZXN0YXRpc3RpY3Mub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5C IAjGNzV55hB7zFYAAAFpGrzI7QAABAMARzBFAiEAnVhUXaXYhhDC1tQ5BS84FCB3 3l5ojDiGpiFX3c2d9+4CIDgzTggo8m0cw7bD+VNhI1RGaBa8vBzX+SdJj4+HKZw+ AHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpGrzJCgAABAMA RzBFAiEA5/Puoff1HhR80s9wfOFi/NDWS9UEGh7lGeEYhyn0i0kCIDkRQcAn6bbq TqdiopIcGyTUSJR5vfshUW/fpPJN4BXIMA0GCSqGSIb3DQEBCwUAA4IBAQBOKwHU f/EDXrTTbb7Y+q7d8NlvGT8oUlT38h7iWPrH4IFMh/zhN5hf7zqFptEOl5lla7F4 m3jV8kbEYfrTuKbrY9mSg/bZSM5U5FkEIv71PNzc1oPrKglpIZTT8uZyixv4wZH8 DQAtmA5/1n5AkI9nfnIaK+1fPeigLmD6f1tzzjauGtpr1GMoctLNvH2zAPV6es9H s3z0BMDuxjwnnpdbJyk0dOhdmWxtJMQAMJu2D6aLtoUPtHB5FLpt7RHrTgDOPKTM ciCxBfT1RprZJyNE8ed7ZPU5olkOUpZtJKfQF/Uuyid3IcORy8bT5y6oGV2oCTjw mMw2EfPvyN4IW+sX -----END CERTIFICATE-----" + } +, { + "id" : "cert_commonName", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "www.freestatistics.org" + } +, { + "id" : "cert_commonName_wo_SNI", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "checkmyip.org" + } +, { + "id" : "cert_subjectAltName", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "freestatistics.org www.freestatistics.org" + } +, { + "id" : "cert_caIssuers", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "Let's Encrypt Authority X3 (Let's Encrypt from US)" + } +, { + "id" : "cert_trust", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "Ok via SAN and CN (SNI mandatory)" + } +, { + "id" : "cert_chain_of_trust", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "passed." + } +, { + "id" : "cert_certificatePolicies_EV", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_eTLS", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "not present" + } +, { + "id" : "cert_expiration_status", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "82 >= 30 days" + } +, { + "id" : "cert_notBefore", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "2019-02-23 08:22" + } +, { + "id" : "cert_notAfter", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "2019-05-24 09:22" + } +, { + "id" : "certs_countServer", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "2" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "cert_ocspURL", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.int-x3.letsencrypt.org" + } +, { + "id" : "OCSP_stapling", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "cert_ocspRevoked", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "not revoked" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/cran/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS_time", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "730 days (=63072000 seconds) > 15465600 seconds" + } +, { + "id" : "HSTS_subdomains", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "includes subdomains" + } +, { + "id" : "HSTS_preload", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "domain IS marked for preloading" + } +, { + "id" : "HPKP", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache" + } +, { + "id" : "banner_application", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/cran/'" + } +, { + "id" : "X-Frame-Options", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "SAMEORIGIN" + } +, { + "id" : "X-Content-Type-Options", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "nosniff" + } +, { + "id" : "banner_reverseproxy", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable, no heartbeat extension" + } +, { + "id" : "CCS", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "no session ticket extension" + } +, { + "id" : "ROBOT", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/cran/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "not vulnerable" + } +, { + "id" : "FREAK", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=AF6373832492616A203AB892FC96E17B7EF71BBAFE7DEAF13D1EC736E32F1331" + } +, { + "id" : "LOGJAM", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "--" + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA" + } +, { + "id" : "BEAST", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xcca8", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" + } +, { + "id" : "cipher_x6b", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" + } +, { + "id" : "scanTime", + "ip" : "www.freestatistics.org/176.9.40.200", + "port" : "443", + "severity" : "INFO", + "finding" : "121" + } +] diff --git a/data/ssl/www.icesi.edu.co_p443-20190303-0835.json b/data/ssl/www.icesi.edu.co_p443-20190303-0835.json new file mode 100644 index 0000000..8b4ebf3 --- /dev/null +++ b/data/ssl/www.icesi.edu.co_p443-20190303-0835.json @@ -0,0 +1,1110 @@ +[ + { + "id" : "service", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "CRITICAL", + "cwe" : "CWE-327", + "finding" : "offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "prime256v1" + } +, { + "id" : "DH_groups", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "HAProxy" + } +, { + "id" : "cipher_order", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5 ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5 ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5 ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-07-08 20:00" + } +, { + "id" : "cert_notAfter", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "2019-07-29 08:00" + } +, { + "id" : "certs_countServer", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl3.digicert.com/ssca-sha2-g6.crl http://crl4.digicert.com/ssca-sha2-g6.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ocsp.digicert.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/CRAN/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.2.14 (Ubuntu)" + } +, { + "id" : "banner_application", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/CRAN/'" + } +, { + "id" : "security_headers", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "--" + } +, { + "id" : "heartbleed", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CWE-119", + "finding" : "not vulnerable CVE-2014-0160" + } +, { + "id" : "CCS", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=BF75947E35178E4C7B745A2990F43951CBCB5548398941757623073A952BD09E" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "HAProxy" + } +, { + "id" : "LOGJAM", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA SEED-SHA CAMELLIA128-SHA ECDHE-RSA-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA" + } +, { + "id" : "BEAST", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "HIGH", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "VULNERABLE, Detected ciphers: ECDHE-RSA-RC4-SHA RC4-SHA RC4-MD5" + } +, { + "id" : "cipher_xc030", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 1024 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 1024 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 1024 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 1024 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 1024 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 1024 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 1024 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_xc011", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc011 ECDHE-RSA-RC4-SHA ECDH 256 RC4 128 TLS_ECDHE_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x05", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x05 RC4-SHA RSA RC4 128 TLS_RSA_WITH_RC4_128_SHA" + } +, { + "id" : "cipher_x04", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x04 RC4-MD5 RSA RC4 128 TLS_RSA_WITH_RC4_128_MD5" + } +, { + "id" : "cipher_xc012", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "xc012 ECDHE-RSA-DES-CBC3-SHA ECDH 256 3DES 168 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x16", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x16 EDH-RSA-DES-CBC3-SHA DH 1024 3DES 168 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "cipher_x0a", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "x0a DES-CBC3-SHA RSA 3DES 168 TLS_RSA_WITH_3DES_EDE_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 RC4-SHA" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 DHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "www.icesi.edu.co/200.3.192.46", + "port" : "443", + "severity" : "INFO", + "finding" : "150" + } +] diff --git a/data/ssl/www.stats.bris.ac.uk_p443-20190303-0845.json b/data/ssl/www.stats.bris.ac.uk_p443-20190303-0845.json new file mode 100644 index 0000000..75e41de --- /dev/null +++ b/data/ssl/www.stats.bris.ac.uk_p443-20190303-0845.json @@ -0,0 +1,1076 @@ +[ + { + "id" : "service", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "HTTP" + } +, { + "id" : "SSLv2", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "SSLv3", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "not offered" + } +, { + "id" : "TLS1", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_1", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "offered" + } +, { + "id" : "TLS1_2", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "TLS1_3", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered and downgraded to a weaker protocol" + } +, { + "id" : "NPN", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "ALPN", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "not offered" + } +, { + "id" : "cipherlist_NULL", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_aNULL", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_EXPORT", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_LOW", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cwe" : "CWE-327", + "finding" : "not offered" + } +, { + "id" : "cipherlist_3DES_IDEA", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "HIGH", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_AVERAGE", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "cwe" : "CWE-310", + "finding" : "offered" + } +, { + "id" : "cipherlist_STRONG", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "offered" + } +, { + "id" : "PFS_ciphers", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-SEED-SHA DHE-RSA-CAMELLIA128-SHA" + } +, { + "id" : "PFS_ECDHE_curves", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "secp256k1 prime256v1 secp384r1 secp521r1" + } +, { + "id" : "DH_groups", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "cipher_order", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "server" + } +, { + "id" : "protocol_negotiated", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "Default protocol TLS1.2" + } +, { + "id" : "cipher_negotiated", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)" + } +, { + "id" : "cipherorder_TLSv1", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "cipherorder_TLSv1_1", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "cipherorder_TLSv1_2", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-GCM-SHA256 AES128-SHA256 AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "TLS_extensions", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'heartbeat/#15'" + } +, { + "id" : "TLS_session_ticket", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "valid for 300 seconds only (= 60 days" + } +, { + "id" : "cert_notBefore", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "2018-04-05 11:21" + } +, { + "id" : "cert_notAfter", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "2020-04-05 11:31" + } +, { + "id" : "certs_countServer", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "3" + } +, { + "id" : "certs_list_ordering_problem", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "no" + } +, { + "id" : "cert_crlDistributionPoints", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "http://crl.quovadisglobal.com/qvevsslg3.crl" + } +, { + "id" : "cert_ocspURL", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "http://ev.ocsp.quovadisglobal.com" + } +, { + "id" : "OCSP_stapling", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "cert_mustStapleExtension", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "--" + } +, { + "id" : "DNS_CAArecord", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "finding" : "--" + } +, { + "id" : "certificate_transparency", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "yes (certificate extension)" + } +, { + "id" : "HTTP_status_code", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "200 OK ('/R/')" + } +, { + "id" : "HTTP_clock_skew", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "0 seconds from localtime" + } +, { + "id" : "HSTS", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "finding" : "not offered" + } +, { + "id" : "HPKP", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "No support for HTTP Public Key Pinning" + } +, { + "id" : "banner_server", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "Apache/2.4.6 (CentOS)" + } +, { + "id" : "banner_application", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "No application banner found" + } +, { + "id" : "cookie_count", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "0 at '/R/'" + } +, { + "id" : "security_headers", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "MEDIUM", + "finding" : "--" + } +, { + "id" : "banner_reverseproxy", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "cwe" : "CWE-200", + "finding" : "Via: 1.1 its-mathsweb.isys.bris.ac.uk-ssl" + } +, { + "id" : "heartbleed", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0160", + "cwe" : "CWE-119", + "finding" : "not vulnerable , timed out" + } +, { + "id" : "CCS", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-0224", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "ticketbleed", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-9244", + "cwe" : "CWE-200", + "finding" : "not vulnerable" + } +, { + "id" : "ROBOT", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", + "cwe" : "CWE-203", + "finding" : "not vulnerable" + } +, { + "id" : "secure_renego", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "secure_client_renego", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2009-3555", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "CRIME_TLS", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2012-4929", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "BREACH", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-3587", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no HTTP compression - only supplied '/R/' tested" + } +, { + "id" : "POODLE_SSL", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2014-3566", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "fallback_SCSV", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "finding" : "supported" + } +, { + "id" : "SWEET32", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2016-2183 CVE-2016-6329", + "cwe" : "CWE-327", + "finding" : "uses 64 bit block ciphers" + } +, { + "id" : "FREAK", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-0204", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "DROWN", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "not vulnerable to DROWN on this host and port" + } +, { + "id" : "DROWN", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2016-0800 CVE-2016-0703", + "cwe" : "CWE-310", + "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9BA34BF73D4CA4F97780F9C02AEB0FE14BBA0E69C748F05EFC26ED8F89F8F413" + } +, { + "id" : "LOGJAM-common_primes", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "RFC3526/Oakley Group 14" + } +, { + "id" : "LOGJAM", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2015-4000", + "cwe" : "CWE-310", + "finding" : "not vulnerable, no DH EXPORT ciphers," + } +, { + "id" : "BEAST_CBC_TLS1", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "MEDIUM", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "ECDHE-RSA-AES256-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA AES256-SHA CAMELLIA256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA AES128-SHA CAMELLIA128-SHA DHE-RSA-SEED-SHA SEED-SHA IDEA-CBC-SHA" + } +, { + "id" : "BEAST", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2011-3389", + "cwe" : "CWE-20", + "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" + } +, { + "id" : "LUCKY13", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "LOW", + "cve" : "CVE-2013-0169", + "cwe" : "CWE-310", + "finding" : "potentially vulnerable, uses TLS CBC ciphers" + } +, { + "id" : "RC4", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "OK", + "cve" : "CVE-2013-2566 CVE-2015-2808", + "cwe" : "CWE-310", + "finding" : "not vulnerable" + } +, { + "id" : "cipher_xc030", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_xc028", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" + } +, { + "id" : "cipher_xc014", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x9f", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x6b", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x39", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x88", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_x9d", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" + } +, { + "id" : "cipher_x3d", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256" + } +, { + "id" : "cipher_x35", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" + } +, { + "id" : "cipher_x84", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA" + } +, { + "id" : "cipher_xc02f", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_xc027", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_xc013", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9e", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x67", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x33", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x9a", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x9a DHE-RSA-SEED-SHA DH 2048 SEED 128 TLS_DHE_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x45", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x9c", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" + } +, { + "id" : "cipher_x3c", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" + } +, { + "id" : "cipher_x2f", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" + } +, { + "id" : "cipher_x96", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x96 SEED-SHA RSA SEED 128 TLS_RSA_WITH_SEED_CBC_SHA" + } +, { + "id" : "cipher_x41", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA" + } +, { + "id" : "cipher_x07", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "x07 IDEA-CBC-SHA RSA IDEA 128 TLS_RSA_WITH_IDEA_CBC_SHA" + } +, { + "id" : "clientsimulation-android_422", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_442", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-android_500", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_60", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-android_70", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_65_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-chrome_70_win10", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_59_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-firefox_62_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-ie_6_xp", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_7_vista", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_8_xp", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-ie_11_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_win81", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA384" + } +, { + "id" : "clientsimulation-ie_11_winphone81", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-ie_11_win10", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_win10", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_13_winphone10", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-edge_15_win10", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-opera_17_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-safari_9_ios9", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_9_osx1011", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-safari_10_osx1012", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-apple_ats_9_ios9", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-tor_1709_win7", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" + } +, { + "id" : "clientsimulation-java_6u45", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "No connection" + } +, { + "id" : "clientsimulation-java_7u25", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" + } +, { + "id" : "clientsimulation-java_8u161", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-java_904", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_101l", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "clientsimulation-openssl_102e", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" + } +, { + "id" : "scanTime", + "ip" : "www.stats.bris.ac.uk/137.222.10.189", + "port" : "443", + "severity" : "INFO", + "finding" : "162" + } +] diff --git a/orly.R b/orly.R index f0eabc1..f7ef347 100644 --- a/orly.R +++ b/orly.R @@ -1,3 +1,21 @@ +#' --- +#' title: "CRAN HTTPS Mirrors" +#' author: "" +#' date: "" +#' output: +#' html_document: +#' df_print: kable +#' keep_md: true +#' theme: simplex +#' highlight: monochrome +#' --- +#+ init, include=FALSE +knitr::opts_chunk$set( + message = FALSE, warning = FALSE, dev = "png", + fig.retina = 2, fig.width = 10, fig.height = 6 +) + +#+ libs library(xml2) library(httr) library(curl) @@ -6,67 +24,81 @@ library(urltools) library(ipinfo) library(openssl) library(furrr) -library(vershist) +library(vershist) # install.packages("vershist", repos = "https://cinc.rud.is/") library(ggalt) library(ggbeeswarm) library(hrbrthemes) library(tidyverse) -mdoc <- xml2::read_xml("~/data/mirrors.html", as_html = TRUE) +#' ## Collect CRAN mirrors' metadata -xml_find_all(mdoc, ".//td/a[contains(@href, 'https')]") %>% - xml_attr("href") %>% - unique() -> ssl_mirrors +if (!file.exists(here::here("data/mir-dat.rds"))) { + mdoc <- xml2::read_xml("~/data/mirrors.html", as_html = TRUE) -ssl_mirrors + xml_find_all(mdoc, ".//td/a[contains(@href, 'https')]") %>% + xml_attr("href") %>% + unique() -> ssl_mirrors -plan(multiprocess) + plan(multiprocess) -dl_cert <- possibly(openssl::download_ssl_cert, NULL) -HEAD_ <- possibly(httr::HEAD, NULL) -dig <- possibly(curl::nslookup, NULL) -query_ip_ <- possibly(ipinfo::query_ip, NULL) + dl_cert <- possibly(openssl::download_ssl_cert, NULL) + HEAD_ <- possibly(httr::HEAD, NULL) + dig <- possibly(curl::nslookup, NULL) + query_ip_ <- possibly(ipinfo::query_ip, NULL) -ssl_mirrors %>% - future_map(~{ - host <- domain(.x) - ip <- dig(host, TRUE) - ip_info <- if (length(ip)) query_ip_(ip) else NULL - list( - host = host, - cert = dl_cert(host), - head = HEAD_(.x), - ip = ip, - ip_info = ip_info - ) - }) -> mir_dat + ssl_mirrors %>% + future_map(~{ + host <- domain(.x) + ip <- dig(host, TRUE) + ip_info <- if (length(ip)) query_ip_(ip) else NULL + list( + host = host, + cert = dl_cert(host), + head = HEAD_(.x), + ip = ip, + ip_info = ip_info + ) + }) -> mir_dat -saveRDS(mir_dat, "~/data/mir-dat.rds") + saveRDS(mir_dat, here::here("data/mir-dat.rds")) +} else { + mir_dat <- readRDS(here::here("data/mir-dat.rds")) +} -str(mir_dat, 3) +str(mir_dat[1], 3) -maps::map("world", ".", exact = FALSE, plot = FALSE, fill = TRUE) %>% - fortify() %>% +#' Gratuitous map of CRAN mirror locations + +maps::map("world", ".", exact = FALSE, plot = FALSE, fill = TRUE) %>% + fortify() %>% filter(region != "Antarctica") -> world -map_chr(mir_dat, ~.x$ip_info$loc) %>% - stri_split_fixed(pattern = ",", n = 2, simplify = TRUE) %>% - as_tibble() %>% +map_chr(mir_dat, ~.x$ip_info$loc) %>% + stri_split_fixed(pattern = ",", n = 2, simplify = TRUE) %>% + as.data.frame(stringsAsFactors = FALSE) %>% + as_tibble() %>% mutate_all(list(as.numeric)) -> wheres_cran +#+ cran-map, fig.width=10, fig.height=6 ggplot() + ggalt::geom_cartogram( - data = world, map = world, aes(long, lat, map_id=region), + data = world, map = world, aes(long, lat, map_id=region), color = ft_cols$gray, size = 0.125 ) + - geom_point(data = wheres_cran, aes(V2, V1), color = "white") + + geom_point( + data = wheres_cran, aes(V2, V1), size = 2, + color = ft_cols$slate, fill = alpha(ft_cols$yellow, 3/4), shape = 21 + ) + ggalt::coord_proj("+proj=wintri") + labs( - x = NULL, y = NULL + x = NULL, y = NULL, + title = "Geolocation of HTTPS-'enabled' CRAN Mirrors" ) + theme_ft_rc(grid="") + theme(axis.text = element_blank()) +#' ## Look at certificate info + map_df(mir_dat, ~{ tibble( host = .x$host, @@ -79,70 +111,165 @@ map_df(mir_dat, ~{ ) }) -> certs -count(certs, names, sort=TRUE) +#' ### How many either blocked the connection or don't exist -distinct(certs, host, algo, key_size) %>% - count(algo, key_size, sort=TRUE) +certs[!complete.cases(certs),] + +certs <- filter(certs, complete.cases(certs)) -distinct(certs, host, i_issuer) %>% - count(i_issuer, sort = TRUE) %>% - print(n = 28) +#' ### How many domains do these certs serve? -count(certs, host, sort=TRUE) %>% +#+ alt-names-ct, fig.width=8, fig.height=6 +count(certs, host, sort=TRUE) %>% ggplot() + - geom_quasirandom(aes("", n)) + geom_quasirandom( + aes("", n), size = 2, + color = ft_cols$slate, fill = alpha(ft_cols$yellow, 3/4), shape = 21 + ) + + scale_y_comma() + + labs( + x = NULL, y = "# Servers", + title = "Distribution of the number of alt-names in CRAN mirror certificates" + ) + + theme_ft_rc(grid="Y") + +#' Take a look at some of them + +filter(certs, host == "cran.cnr.berkeley.edu") %>% + select(names) %>% + head(20) + +filter(certs, host == "cran.rapporter.net") %>% + select(names) %>% + head(20) + +filter(certs, host == "cran-r.c3sl.ufpr.br") %>% + select(names) %>% + head(20) + +filter(certs, host == "fourdots.com") %>% + select(names) %>% + head(20) + +#' ### Certificate algo/key + +distinct(certs, host, algo, key_size) %>% + count(algo, key_size, sort=TRUE) + +#' ### Certificate issuers + +distinct(certs, host, i_issuer) %>% + count(i_issuer, sort = TRUE) %>% + head(28) + +#' ## Interactive SSL tests +#' +#' Using [`testssl.sh`](https://github.com/drwetter/testssl.sh). + +list.files(here::here("data/ssl"), "json$", full.names = TRUE) %>% + map_df(jsonlite::fromJSON) %>% + as_tibble() -> ssl_tests + +sev <- c("OK", "LOW", "MEDIUM", "HIGH", "WARN", "CRITICAL") + +#+ testssl, fig.width=8, fig.height=12 +filter(ssl_tests, severity %in% sev) %>% + group_by(ip) %>% + count(severity) %>% + ungroup() %>% + complete(ip = unique(ip), severity = sev) %>% + mutate(severity = factor(severity, levels = sev)) %>% + arrange(ip) %>% + mutate(ip = factor(ip, levels = rev(unique(ip)))) %>% + ggplot(aes(severity, ip, fill=n)) + + geom_tile(color = "#b2b2b2", size = 0.125) + + scale_x_discrete(name = NULL, expand = c(0,0.1), position = "top") + + scale_y_discrete(name = NULL, expand = c(0,0)) + + viridis::scale_fill_viridis( + name = "# Tests", option = "cividis", na.value = ft_cols$gray + ) + + labs( + title = "CRAN Mirror SSL Test Summary Findings by Severity" + ) + + theme_ft_rc(grid="") + + theme(axis.text.y = element_text(size = 8, family = "mono")) -> gg + +# We're going to move the title vs have too wide of a plot -filter(certs, host == "cran.cnr.berkeley.edu") %>% - select(names) +gb <- ggplot2::ggplotGrob(gg) +gb$layout$l[gb$layout$name %in% "title"] <- 2 + +grid::grid.newpage() +grid::grid.draw(gb) + +#' ## Web server headers + +map_df(mir_dat, ~{ -filter(certs, host == "cran.rapporter.net") %>% - select(names) + if (length(.x$head$headers) == 0) return(NULL) -filter(certs, host == "cran-r.c3sl.ufpr.br") %>% - select(names) + host <- .x$host -filter(certs, host == "fourdots.com") %>% - select(names) + flatten_df(.x$head$headers) %>% + gather(name, value) %>% + mutate(host = host) -map(mir_dat, ~.x$head$headers) %>% - compact() %>% - map_df(~{ - flatten_df(.x) %>% - gather(name, value) - }, .id = "site_num") -> hdrs +}) -> hdrs -count(hdrs, name, sort=TRUE) %>% - print(n=31) +count(hdrs, name, sort=TRUE) %>% + head(nrow(.)) -filter(hdrs, name == "server") %>% - separate(value, c("kind", "version"), sep="/", fill="right", extra="merge") -> svr +#' ### 'Security' Headers + +c( + "content-security-policy", "x-frame-options", "x-xss-protection", + "x-content-type-options", "strict-transport-security", "referrer-policy" +) -> secure_headers + +count(hdrs, name, sort=TRUE) %>% + filter(name %in% secure_headers) + +filter(hdrs, name %in% secure_headers) %>% + count(host, sort = TRUE) + +filter(hdrs, host == "cran.csiro.au", name %in% secure_headers) + +#' ### 'Server' Types + +filter(hdrs, name == "server") %>% + separate( + value, c("kind", "version"), sep="/", fill="right", extra="merge" + ) -> svr count(svr, kind, sort=TRUE) -apache_httpd_version_history() %>% - arrange(rls_date) %>% +#' #### apache + +apache_httpd_version_history() %>% + arrange(rls_date) %>% mutate( vers = factor(as.character(vers), levels = as.character(vers)) ) -> apa_all -filter(svr, kind == "Apache") %>% - filter(!is.na(version)) %>% - mutate(version = stri_replace_all_regex(version, " .*$", "")) %>% - count(version) %>% - separate(version, c("maj", "min", "pat"), sep="\\.", convert = TRUE, fill = "right") %>% - mutate(pat = ifelse(is.na(pat), 1, pat)) %>% - mutate(v = sprintf("%s.%s.%s", maj, min, pat)) %>% - mutate(v = factor(v, levels = apa_all$vers)) %>% +filter(svr, kind == "Apache") %>% + filter(!is.na(version)) %>% + mutate(version = stri_replace_all_regex(version, " .*$", "")) %>% + count(version) %>% + separate(version, c("maj", "min", "pat"), sep="\\.", convert = TRUE, fill = "right") %>% + mutate(pat = ifelse(is.na(pat), 1, pat)) %>% + mutate(v = sprintf("%s.%s.%s", maj, min, pat)) %>% + mutate(v = factor(v, levels = apa_all$vers)) %>% arrange(v) -> apa_vers -filter(apa_all, vers %in% apa_vers$v) %>% - arrange(rls_date) %>% - group_by(rls_year) %>% - slice(1) %>% - ungroup() %>% +filter(apa_all, vers %in% apa_vers$v) %>% + arrange(rls_date) %>% + group_by(rls_year) %>% + slice(1) %>% + ungroup() %>% arrange(rls_date) -> apa_yrs -ggplot() + +#+ apache-history, fig.width=12.5, fig.height=5 +ggplot() + geom_blank( data = apa_vers, aes(v, n) ) + @@ -151,50 +278,125 @@ ggplot() + linetype = "dotted", size = 0.25, color = "white" ) + geom_segment( - data = apa_vers, aes(v, n, xend=v, yend=0), + data = apa_vers, aes(v, n, xend=v, yend=0), color = ft_cols$gray, size = 8 - ) + + ) + + geom_label( + data = apa_yrs, aes(vers, Inf, label = rls_year), + family = font_rc, color = "white", fill = "#262a31", size = 4, + vjust = 1, hjust = 0, nudge_x = 0.01, label.size = 0 + ) + + scale_y_comma(limits = c(0, 15)) + + labs( + x = "Apache Version #", y = "# Servers", + title = "CRAN Mirrors Apache Version History" + ) + + theme_ft_rc(grid="Y") + + theme(axis.text.x = element_text(family = "mono", size = 8, color = "white")) + +#' #### nginx + +nginx_version_history() %>% + arrange(rls_date) %>% + mutate( + vers = factor(as.character(vers), levels = as.character(vers)) + ) -> ngx_all + +filter(svr, kind == "nginx") %>% + filter(!is.na(version)) %>% + mutate(version = stri_replace_all_regex(version, " .*$", "")) %>% + count(version) %>% + separate(version, c("maj", "min", "pat"), sep="\\.", convert = TRUE, fill = "right") %>% + mutate(v = sprintf("%s.%s.%s", maj, min, pat)) %>% + mutate(v = factor(v, levels = ngx_all$vers)) %>% + arrange(v) -> ngx_vers + +filter(ngx_all, vers %in% ngx_vers$v) %>% + arrange(rls_date) %>% + group_by(rls_year) %>% + slice(1) %>% + ungroup() %>% + arrange(rls_date) -> ngx_yrs + +#+ nginx-history, fig.width=8, fig.height=5 +ggplot() + + geom_blank( + data = ngx_vers, aes(v, n) + ) + + geom_segment( + data = ngx_yrs, aes(vers, 0, xend=vers, yend=Inf), + linetype = "dotted", size = 0.25, color = "white" + ) + + geom_segment( + data = ngx_vers, aes(v, n, xend=v, yend=0), + color = ft_cols$gray, size = 8 + ) + geom_label( - data = apa_yrs, aes(vers, Inf, label = rls_year), + data = ngx_yrs, aes(vers, Inf, label = rls_year), family = font_rc, color = "white", fill = "#262a31", size = 4, vjust = 1, hjust = 0, nudge_x = 0.01, label.size = 0 ) + scale_y_comma(limits = c(0, 15)) + labs( - x = "Apache Version #", y = "# Servers" + x = "nginx Version #", y = "# Servers", + title = "CRAN Mirrors nginx Version History" ) + theme_ft_rc(grid="Y") + theme(axis.text.x = element_text(family = "mono", color = "white")) -cran_mirror_other_things <- readRDS("~/data/cran-mirror-other-things.rds") +#' ### What else do CRAN mirrors run? -distinct(cran_mirror_other_things, ip, port) %>% - count(ip, sort = TRUE) +cran_mirror_other_things <- readRDS(here::here("data/cran-mirror-other-things.rds")) -distinct(cran_mirror_other_things, ip, port) %>% +#' #### A look by port + +distinct(cran_mirror_other_things, ip, port) %>% + count(ip, sort = TRUE) %>% + head(20) + +#+ other-stuff, fig.width=6, fig.height=4 +distinct(cran_mirror_other_things, ip, port) %>% + filter(!(port %in% c(21, 80, 443))) %>% + count(ip) %>% + count(n) %>% + mutate(n = factor(n)) %>% + ggplot() + + geom_segment( + aes(n, nn, xend = n, yend = 0), size = 10, color = ft_cols$gray + ) + + scale_y_comma() + + labs( + x = "Total number of running services", y = "# hosts", + title = "How many other services do CRAN mirrors run?", + subtitle = "NOTE: Not counting 80/443/21" + ) + + theme_ft_rc(grid="Y") + +#' Take a look at a few of them + +distinct(cran_mirror_other_things, ip, port) %>% count(port, sort=TRUE) -distinct(cran_mirror_other_things, ip, port) %>% +distinct(cran_mirror_other_things, ip, port) %>% filter(ip == "104.25.94.23") -distinct(cran_mirror_other_things, ip, port) %>% +distinct(cran_mirror_other_things, ip, port) %>% filter(ip == "143.107.10.17") -distinct(cran_mirror_other_things, ip, port) %>% +distinct(cran_mirror_other_things, ip, port) %>% filter(ip == "137.208.57.37") -cran_recog <- readRDS("~/data/cran-recog.rds") - -count(cran_recog, ip, sort=TRUE) - -distinct(cran_recog, ip, cpe) %>% - filter(ip == "192.75.96.254") - -distinct(cran_recog, ip, cpe) %>% - count(ip, sort=TRUE) +#' #### What kinds of services were detected? -cran_dns <- readRDS("~/data/cran-dns.rds") +cran_recog <- readRDS(here::here("data/cran-recog.rds")) +distinct(cran_recog, ip, cpe) %>% + count(cpe, sort = TRUE) %>% + head(50) +#' ### What other DNS entries use CRAN IPs? +cran_dns <- readRDS(here::here("data/cran-dns.rds")) +filter(cran_dns, !grepl("CLOUDFLARENET|AMAZON", as_name)) %>% + count(value, as_name, sort = TRUE) diff --git a/orly.html b/orly.html new file mode 100644 index 0000000..e50daef --- /dev/null +++ b/orly.html @@ -0,0 +1,2531 @@ + + + + + + + + + + + + + + +CRAN HTTPS Mirrors + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + + + + + + + + + + + + + + + + +
+

Collect CRAN mirrors’ metadata

+ +
## List of 1
+##  $ :List of 5
+##   ..$ host   : chr "cloud.r-project.org"
+##   ..$ cert   :List of 4
+##   .. ..$ :List of 8
+##   .. ..$ :List of 8
+##   .. ..$ :List of 8
+##   .. ..$ :List of 8
+##   ..$ head   :List of 10
+##   .. ..$ url        : chr "https://cloud.r-project.org/"
+##   .. ..$ status_code: int 200
+##   .. ..$ headers    :List of 13
+##   .. .. ..- attr(*, "class")= chr [1:2] "insensitive" "list"
+##   .. ..$ all_headers:List of 1
+##   .. ..$ cookies    :'data.frame':   0 obs. of  7 variables:
+##   .. ..$ content    : raw(0) 
+##   .. ..$ date       : POSIXct[1:1], format: "2018-11-29 09:41:27"
+##   .. ..$ times      : Named num [1:6] 0 0.0507 0.0512 0.0666 0.0796 ...
+##   .. .. ..- attr(*, "names")= chr [1:6] "redirect" "namelookup" "connect" "pretransfer" ...
+##   .. ..$ request    :List of 7
+##   .. .. ..- attr(*, "class")= chr "request"
+##   .. ..$ handle     :Class 'curl_handle' <externalptr> 
+##   .. ..- attr(*, "class")= chr "response"
+##   ..$ ip     : chr "52.85.89.62"
+##   ..$ ip_info:List of 8
+##   .. ..$ ip      : chr "52.85.89.62"
+##   .. ..$ hostname: chr "server-52-85-89-62.jfk6.r.cloudfront.net"
+##   .. ..$ city    : chr "Seattle"
+##   .. ..$ region  : chr "Washington"
+##   .. ..$ country : chr "US"
+##   .. ..$ loc     : chr "47.6348,-122.3450"
+##   .. ..$ postal  : chr "98109"
+##   .. ..$ org     : chr "AS16509 Amazon.com, Inc."
+

Gratuitous map of CRAN mirror locations

+ + +

+
+
+

Look at certificate info

+ +
+

How many either blocked the connection or don’t exist

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
hosts_issueri_issueralgonamesnm_ctkey_size
mirrors.shu.edu.cnNANANANA0NA
ftp.heanet.ieNANANANA0NA
+
+ +
+
+

How many domains do these certs serve?

+ +

+

Take a look at some of them

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
names
nature.berkeley.edu
ag-labor.cnr.berkeley.edu
agro-laboral.cnr.berkeley.edu
agroecology.berkeley.edu
anthoff.erg.berkeley.edu
are-dev.cnr.berkeley.edu
are-prod.cnr.berkeley.edu
are-qa.cnr.berkeley.edu
are.berkeley.edu
arebeta.berkeley.edu
areweb.berkeley.edu
atkins-dev.cnr.berkeley.edu
atkins-prod.cnr.berkeley.edu
atkins-qa.cnr.berkeley.edu
atkins.berkeley.edu
bakerlab-dev.cnr.berkeley.edu
bakerlab-prod.cnr.berkeley.edu
bakerlab-qa.cnr.berkeley.edu
bamg.cnr.berkeley.edu
beahrselp-dev.cnr.berkeley.edu
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
names
sni45256.cloudflaressl.com
*.aplusacademicresources.org
*.bjjandfitness.com
*.bytheyard.com
*.ces-nc.com
*.ddgalesinc.com
*.doa-ncgov.com
*.emmabhairextensions.com
*.enovateih.com
*.enuerto.media
*.erp-mc.com
*.gaylejohnsonmassage.com
*.gobl.eu
*.greaterny-realestate.com
*.guidinglightseniorresources.com
*.hightech-store.net
*.holandacontabil.com.br
*.iabg-consulting.com
*.iltempiodellenergiafemminile.eu
*.jnt-woodworks.com
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
names
alpinelinux.c3sl.ufpr.br
aptosid.c3sl.ufpr.br
archlinux.c3sl.ufpr.br
biglinux.c3sl.ufpr.br
chakra.c3sl.ufpr.br
clamavdb.c3sl.ufpr.br
cran-r.c3sl.ufpr.br
dadosabertos.c3sl.ufpr.br
debian.c3sl.ufpr.br
demoiselle.c3sl.ufpr.br
devuan.c3sl.ufpr.br
eclipse.c3sl.ufpr.br
f123.c3sl.ufpr.br
fedora-alt.c3sl.ufpr.br
fedora.c3sl.ufpr.br
gentoo.c3sl.ufpr.br
gnu.c3sl.ufpr.br
grml.c3sl.ufpr.br
kde-applicationdata.c3sl.ufpr.br
kde.c3sl.ufpr.br
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
names
ssl390890.cloudflaressl.com
*.alghuraircentre.com
*.cachealumni.org.uk
*.chla.com
*.djborhan.com
*.easypay.am
*.fourdots.com
*.isteadrise.org.uk
*.japand.biz
*.lunaimani.com
*.qualhub.co.uk
*.qvest.io
*.samuelbernstein.com
*.soulsplit.net
*.southbeachavenue.com
*.urbanbellemag.com
alghuraircentre.com
cachealumni.org.uk
chla.com
djborhan.com
+
+
+
+

Certificate algo/key

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
algokey_sizen
sha256WithRSAEncryption204859
sha256WithRSAEncryption409613
ecdsa-with-SHA2562562
sha256WithRSAEncryption2561
sha256WithRSAEncryption3841
sha512WithRSAEncryption20481
sha512WithRSAEncryption40961
+
+
+
+

Certificate issuers

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
i_issuern
CN=DST Root CA X3,O=Digital Signature Trust Co.20
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB7
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US7
CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US6
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US6
CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM5
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US5
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE4
CN=Trusted Root CA SHA256 G2,O=GlobalSign nv-sa,OU=Trusted Root,C=BE3
CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB2
CN=DFN-Verein PCA Global - G01,OU=DFN-PKI,O=DFN-Verein,C=DE2
OU=Security Communication RootCA2,O=SECOM Trust Systems CO.,LTD.,C=JP2
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE1
CN=Amazon Root CA 1,O=Amazon,C=US1
CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE1
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL1
CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE1
CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com, Inc.,L=Scottsdale,ST=Arizona,C=US1
CN=InCommon RSA Server CA,OU=InCommon,O=Internet2,L=Ann Arbor,ST=MI,C=US1
CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM1
CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM1
+
+
+
+ +
+

Web server headers

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
namen
content-type79
date79
server79
last-modified72
content-length67
accept-ranges65
etag65
content-encoding38
connection28
vary28
strict-transport-security13
x-frame-options8
x-content-type-options7
cache-control4
expires3
x-xss-protection3
cf-ray2
expect-ct2
set-cookie2
via2
ms-author-via1
pragma1
referrer-policy1
upgrade1
x-amz-cf-id1
x-cache1
x-permitted-cross-domain1
x-powered-by1
x-robots-tag1
x-tuna-mirror-id1
x-ua-compatible1
+
+
+

‘Security’ Headers

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
namen
strict-transport-security13
x-frame-options8
x-content-type-options7
x-xss-protection3
referrer-policy1
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
hostn
cran.csiro.au5
fourdots.com3
ftp.gwdg.de3
ftp.uni-sofia.bg3
ftp.yzu.edu.tw3
www.freestatistics.org3
mirrors.nics.utk.edu2
vps.fmvz.usp.br2
cran.case.edu1
cran.cnr.berkeley.edu1
cran.hafro.is1
cran.ncc.metu.edu.tr1
cran.stat.upd.edu.ph1
mirror.cedia.org.ec1
mirrors.tongji.edu.cn1
mirrors.tuna.tsinghua.edu.cn1
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
namevaluehost
x-content-type-optionsnosniffcran.csiro.au
x-frame-optionsSAMEORIGINcran.csiro.au
x-xss-protection1; mode=blockcran.csiro.au
referrer-policystrict-origin-when-cross-origincran.csiro.au
strict-transport-securitymax-age=15768000; includeSubdomains;cran.csiro.au
+
+
+
+

‘Server’ Types

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
kindn
Apache57
nginx15
cloudflare2
CSIRO1
Hiawatha v10.8.41
High Performance 8bit Web Server1
none1
openresty1
+
+ + +
+
+

What else do CRAN mirrors run?

+ +
+

A look by port

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ipn
104.25.94.238
143.107.10.177
104.27.133.2065
137.208.57.375
192.75.96.2545
208.81.1.2445
119.40.117.1754
130.225.254.1164
133.24.248.174
14.49.99.2384
148.205.148.164
190.64.49.1244
194.214.26.1464
200.236.31.14
201.159.221.674
202.90.159.1724
217.31.202.634
222.66.109.324
45.63.11.934
62.44.96.114
+
+ +

+

Take a look at a few of them

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
portn
8075
44375
2129
2218
80806
255
532
20822
20862
80002
80082
84432
1111
4651
5871
9931
9951
20831
20871
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ipport
104.25.94.238443
104.25.94.232082
104.25.94.232087
104.25.94.238080
104.25.94.2380
104.25.94.232083
104.25.94.23443
104.25.94.232086
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ipport
143.107.10.17993
143.107.10.17587
143.107.10.1780
143.107.10.17443
143.107.10.17465
143.107.10.1725
143.107.10.17995
+
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ipport
137.208.57.37443
137.208.57.3722
137.208.57.3780
137.208.57.3721
137.208.57.378080
+
+
+
+

What kinds of services were detected?

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
cpen
cpe:/a:apache:http_server:-13
cpe:/o:debian:debian_linux:-13
cpe:/a:apache:http_server:2.4.611
cpe:/o:canonical:ubuntu_linux:-11
cpe:/o:centos:centos:-9
cpe:/a:apache:http_server:2.4.256
cpe:/a:nginx:nginx:-6
cpe:/a:nginx:nginx:1.10.36
cpe:/o:redhat:linux:-5
cpe:/a:apache:http_server:2.2.154
cpe:/a:openbsd:openssh:7.4p14
cpe:/o:debian:debian_linux:9.04
cpe:/a:apache:http_server:2.4.73
cpe:/a:openbsd:openssh:6.7p13
cpe:/a:openbsd:openssh:7.43
cpe:/a:apache:http_server:2.4.102
cpe:/a:apache:http_server:2.4.182
cpe:/a:apache:http_server:2.4.292
cpe:/a:openbsd:openssh:7.6p12
cpe:/o:debian:debian_linux:8.02
cpe:/a:apache:http_server:2.2.161
cpe:/a:apache:http_server:2.2.221
cpe:/a:apache:http_server:2.2.31
cpe:/a:apache:http_server:2.2.321
cpe:/a:apache:http_server:2.2.341
cpe:/a:apache:http_server:2.41
cpe:/a:apache:http_server:2.4.161
cpe:/a:apache:http_server:2.4.341
cpe:/a:apache:http_server:2.4.371
cpe:/a:apache:http_server:2.4.381
cpe:/a:apache:tomcat:-1
cpe:/a:cherrypy:cherrypy:6.0.21
cpe:/a:isc:bind:9.11.21
cpe:/a:isc:bind:9.11.5-P11
cpe:/a:nginx:nginx:1.14.01
cpe:/a:nginx:nginx:1.15.81
cpe:/a:nginx:nginx:1.15.91
cpe:/a:nginx:nginx:1.9.41
cpe:/a:openbsd:openssh:5.5p11
cpe:/a:openbsd:openssh:6.6.11
cpe:/a:openbsd:openssh:6.6.1p11
cpe:/a:openbsd:openssh:7.2p21
cpe:/a:openbsd:openssh:7.61
cpe:/a:proftpd:proftpd:1.3.5b1
cpe:/a:proftpd:proftpd:1.3.5rc31
cpe:/o:canonical:ubuntu_linux:14.041
cpe:/o:debian:debian_linux:6.01
cpe:/o:freebsd:freebsd:-1
+
+
+
+
+

What other DNS entries use CRAN IPs?

+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
valueas_namen
222.66.109.32CHINANET-SH-AP China Telecom (Group), CN243
200.3.192.46EMPRESAS MUNICIPALES DE CALI E.I.C.E. E.S.P., CO30
176.9.40.200HETZNER-AS, DE18
137.208.57.37Wirtschaftsuniversitaet Wien, AT10
169.229.19.202UCB - University of California at Berkeley, US10
202.121.199.235ERX-CERNET-BKB China Education and Research Network Center, CN10
150.229.0.204CSIRO Commonwealth Scientific and Industrial, AU8
130.206.13.2REDIRIS RedIRIS Autonomous System, ES6
192.80.24.196Universidad de Chile, CL6
202.141.176.110CMNET-GD Guangdong Mobile Communication Co.Ltd., CN6
45.63.11.93AS-CHOOPA - Choopa, LLC, US6
64.50.233.100TDS-AS - TDS TELECOM, US5
119.29.56.102CNNIC-TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited, CN4
13.66.202.75MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US4
131.188.12.211DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., DE4
194.214.26.146FR-RENATER Reseau National de telecommunications pour la Technologie, FR4
200.236.31.1FUNPAR - Fundacao da UFPR para o DCTC, BR4
130.225.254.116FSKNET-DK Forskningsnettet - Danish network for Research and Education, DK3
133.58.120.95SINET-AS Research Organization of Information and Systems, National Institute of Informatics, JP3
142.58.101.156SFU-AS - Simon Fraser University, CA3
148.205.148.16Instituto Tecnologico Autonomo de Mexico(ITAM), MX3
155.198.195.11JANET Jisc Services Limited, GB3
157.193.230.39BELNET, BE3
193.1.193.64HEANET, IE3
193.40.0.5EENET-AS, EE3
194.71.11.165SUNET SUNET Swedish University Network, SE3
202.90.159.172DOST-PH-AP Department of Science and Technology, PH3
46.143.212.45IR-FUM, IR3
101.6.8.193ERX-CERNET-BKB China Education and Research Network Center, CN2
128.176.148.9DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., DE2
129.237.125.92UKANS - University of Kansas, US2
14.49.99.238KIXS-AS-KR Korea Telecom, KR2
143.107.10.17UNIVERSIDADE DE SAO PAULO, BR2
144.122.156.22METU-NET Middle East Technical University / Orta Dogu Teknik Universitesi, TR2
190.96.111.43Escuela Politecnica Nacional, EC2
192.75.96.254DALUNIV - Dalhousie University, CA2
194.254.245.138FR-RENATER Reseau National de telecommunications pour la Technologie, FR2
200.144.254.65UNIVERSIDADE DE SAO PAULO, BR2
201.159.221.67CEDIA, EC2
210.218.217.24KREONET-AS-KR KISTI, KR2
62.44.96.11SU-NET-AS, BG2
103.109.101.20AMARUTU-TECHNOLOGY, NL1
103.224.137.193IDNIC-PDISBPPT-AS-ID PDIS - BADAN PENGKAJIAN DAN PENERAPAN TEKNOLOGI, ID1
119.40.117.175UPM-AS-AP Universiti Putra Malaysia AS, MY1
128.250.213.6UNIMELB-AS-AP The University of Melbourne, Melbourne, Victoria, AU1
129.132.119.195SWITCH Peering requests: (), CH1
129.177.13.120UNINETT UNINETT, The Norwegian University & Research Network, NO1
129.186.138.51IASTATE-AS - Iowa State University, US1
129.22.208.161CWRU-AS-1 - Case Western Reserve University, US1
130.208.58.81RHNET SURIS/RHnet, IS1
130.216.2.235AKUNI-NZ The University of Auckland, NZ1
133.24.248.17AS-YAMAGATAU Yamagata University, JP1
134.214.32.76FR-RENATER RENATER_ASNBLOCK1, FR1
134.76.12.6DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., DE1
137.132.33.20NUS-AS-AP NUS Information Technology, SG1
137.222.10.189JANET Jisc Services Limited, GB1
140.138.144.169ERX-TANET-ASN1 Taiwan Academic Network (TANet) Information Center, TW1
141.219.191.249MICHIGANTECH - Michigan Technological University, US1
146.155.23.20Pontificia Universidad Catolica de Chile, CL1
147.162.35.231ASGARR Consortium GARR, IT1
147.52.159.12UCNET, GR1
156.56.247.193INDIANA-AS - Indiana University, US1
157.86.96.98FUNDACAO INSTITUTO OSWALDO CRUZ, BR1
165.229.11.55YU-AS-KR Yeungnam University, KR1
190.64.49.124Administracion Nacional de Telecomunicaciones, UY1
192.249.6.222UTK - University of Tennessee, Knoxville, US1
193.144.61.75REDIRIS RedIRIS Autonomous System, ES1
193.194.89.173ARN, DZ1
193.255.52.152ULAKNET, TR1
193.50.6.155FR-RENATER Reseau National de telecommunications pour la Technologie, FR1
202.158.214.106AARNET-AS-AP Australian Academic and Reasearch Network (AARNet), AU1
202.201.0.160ERX-CERNET-BKB China Education and Research Network Center, CN1
208.81.1.244LESNET - LES.NET, CA1
217.31.202.63CZNIC-AS, CZ1
87.98.155.219OVH, FR1
+
+
+
+ + + + +
+ + + + + + + + diff --git a/orly.md b/orly.md new file mode 100644 index 0000000..b08b88c --- /dev/null +++ b/orly.md @@ -0,0 +1,1024 @@ +--- +title: "CRAN HTTPS Mirrors" +author: "" +date: "" +output: + html_document: + df_print: kable + keep_md: true + theme: simplex + highlight: monochrome +--- + + + +```r +library(xml2) +library(httr) +library(curl) +library(stringi) +library(urltools) +library(ipinfo) +library(openssl) +library(furrr) +library(vershist) # install.packages("vershist", repos = "https://cinc.rud.is/") +library(ggalt) +library(ggbeeswarm) +library(hrbrthemes) +library(tidyverse) +``` + +## Collect CRAN mirrors' metadata + + +```r +if (!file.exists(here::here("data/mir-dat.rds"))) { + mdoc <- xml2::read_xml("~/data/mirrors.html", as_html = TRUE) + + xml_find_all(mdoc, ".//td/a[contains(@href, 'https')]") %>% + xml_attr("href") %>% + unique() -> ssl_mirrors + + plan(multiprocess) + + dl_cert <- possibly(openssl::download_ssl_cert, NULL) + HEAD_ <- possibly(httr::HEAD, NULL) + dig <- possibly(curl::nslookup, NULL) + query_ip_ <- possibly(ipinfo::query_ip, NULL) + + ssl_mirrors %>% + future_map(~{ + host <- domain(.x) + ip <- dig(host, TRUE) + ip_info <- if (length(ip)) query_ip_(ip) else NULL + list( + host = host, + cert = dl_cert(host), + head = HEAD_(.x), + ip = ip, + ip_info = ip_info + ) + }) -> mir_dat + + saveRDS(mir_dat, here::here("data/mir-dat.rds")) +} else { + mir_dat <- readRDS(here::here("data/mir-dat.rds")) +} + +str(mir_dat[1], 3) +``` + +``` +## List of 1 +## $ :List of 5 +## ..$ host : chr "cloud.r-project.org" +## ..$ cert :List of 4 +## .. ..$ :List of 8 +## .. ..$ :List of 8 +## .. ..$ :List of 8 +## .. ..$ :List of 8 +## ..$ head :List of 10 +## .. ..$ url : chr "https://cloud.r-project.org/" +## .. ..$ status_code: int 200 +## .. ..$ headers :List of 13 +## .. .. ..- attr(*, "class")= chr [1:2] "insensitive" "list" +## .. ..$ all_headers:List of 1 +## .. ..$ cookies :'data.frame': 0 obs. of 7 variables: +## .. ..$ content : raw(0) +## .. ..$ date : POSIXct[1:1], format: "2018-11-29 09:41:27" +## .. ..$ times : Named num [1:6] 0 0.0507 0.0512 0.0666 0.0796 ... +## .. .. ..- attr(*, "names")= chr [1:6] "redirect" "namelookup" "connect" "pretransfer" ... +## .. ..$ request :List of 7 +## .. .. ..- attr(*, "class")= chr "request" +## .. ..$ handle :Class 'curl_handle' +## .. ..- attr(*, "class")= chr "response" +## ..$ ip : chr "52.85.89.62" +## ..$ ip_info:List of 8 +## .. ..$ ip : chr "52.85.89.62" +## .. ..$ hostname: chr "server-52-85-89-62.jfk6.r.cloudfront.net" +## .. ..$ city : chr "Seattle" +## .. ..$ region : chr "Washington" +## .. ..$ country : chr "US" +## .. ..$ loc : chr "47.6348,-122.3450" +## .. ..$ postal : chr "98109" +## .. ..$ org : chr "AS16509 Amazon.com, Inc." +``` + +Gratuitous map of CRAN mirror locations + + +```r +maps::map("world", ".", exact = FALSE, plot = FALSE, fill = TRUE) %>% + fortify() %>% + filter(region != "Antarctica") -> world + +map_chr(mir_dat, ~.x$ip_info$loc) %>% + stri_split_fixed(pattern = ",", n = 2, simplify = TRUE) %>% + as.data.frame(stringsAsFactors = FALSE) %>% + as_tibble() %>% + mutate_all(list(as.numeric)) -> wheres_cran +``` + +```r +ggplot() + + ggalt::geom_cartogram( + data = world, map = world, aes(long, lat, map_id=region), + color = ft_cols$gray, size = 0.125 + ) + + geom_point( + data = wheres_cran, aes(V2, V1), size = 2, + color = ft_cols$slate, fill = alpha(ft_cols$yellow, 3/4), shape = 21 + ) + + ggalt::coord_proj("+proj=wintri") + + labs( + x = NULL, y = NULL, + title = "Geolocation of HTTPS-'enabled' CRAN Mirrors" + ) + + theme_ft_rc(grid="") + + theme(axis.text = element_blank()) +``` + + + +## Look at certificate info + + +```r +map_df(mir_dat, ~{ + tibble( + host = .x$host, + s_issuer = .x$cert[[1]]$issuer %||% NA_character_, + i_issuer = .x$cert[[2]]$issuer %||% NA_character_, + algo = .x$cert[[1]]$algorithm %||% NA_character_, + names = .x$cert[[1]]$alt_names %||% NA_character_, + nm_ct = length(.x$cert[[1]]$alt_names), + key_size = .x$cert[[1]]$pubkey$size %||% NA_integer_ + ) +}) -> certs +``` + +### How many either blocked the connection or don't exist + + +```r +certs[!complete.cases(certs),] +``` + +
+ +host s_issuer i_issuer algo names nm_ct key_size +------------------- --------- --------- ----- ------ ------ --------- +mirrors.shu.edu.cn NA NA NA NA 0 NA +ftp.heanet.ie NA NA NA NA 0 NA + +
+ +```r +certs <- filter(certs, complete.cases(certs)) +``` + +### How many domains do these certs serve? + + +```r +count(certs, host, sort=TRUE) %>% + ggplot() + + geom_quasirandom( + aes("", n), size = 2, + color = ft_cols$slate, fill = alpha(ft_cols$yellow, 3/4), shape = 21 + ) + + scale_y_comma() + + labs( + x = NULL, y = "# Servers", + title = "Distribution of the number of alt-names in CRAN mirror certificates" + ) + + theme_ft_rc(grid="Y") +``` + + + +Take a look at some of them + + +```r +filter(certs, host == "cran.cnr.berkeley.edu") %>% + select(names) %>% + head(20) +``` + +
+ +|names | +|:------------------------------| +|nature.berkeley.edu | +|ag-labor.cnr.berkeley.edu | +|agro-laboral.cnr.berkeley.edu | +|agroecology.berkeley.edu | +|anthoff.erg.berkeley.edu | +|are-dev.cnr.berkeley.edu | +|are-prod.cnr.berkeley.edu | +|are-qa.cnr.berkeley.edu | +|are.berkeley.edu | +|arebeta.berkeley.edu | +|areweb.berkeley.edu | +|atkins-dev.cnr.berkeley.edu | +|atkins-prod.cnr.berkeley.edu | +|atkins-qa.cnr.berkeley.edu | +|atkins.berkeley.edu | +|bakerlab-dev.cnr.berkeley.edu | +|bakerlab-prod.cnr.berkeley.edu | +|bakerlab-qa.cnr.berkeley.edu | +|bamg.cnr.berkeley.edu | +|beahrselp-dev.cnr.berkeley.edu | + +
+ +```r +filter(certs, host == "cran.rapporter.net") %>% + select(names) %>% + head(20) +``` + +
+ +|names | +|:---------------------------------| +|sni45256.cloudflaressl.com | +|*.aplusacademicresources.org | +|*.bjjandfitness.com | +|*.bytheyard.com | +|*.ces-nc.com | +|*.ddgalesinc.com | +|*.doa-ncgov.com | +|*.emmabhairextensions.com | +|*.enovateih.com | +|*.enuerto.media | +|*.erp-mc.com | +|*.gaylejohnsonmassage.com | +|*.gobl.eu | +|*.greaterny-realestate.com | +|*.guidinglightseniorresources.com | +|*.hightech-store.net | +|*.holandacontabil.com.br | +|*.iabg-consulting.com | +|*.iltempiodellenergiafemminile.eu | +|*.jnt-woodworks.com | + +
+ +```r +filter(certs, host == "cran-r.c3sl.ufpr.br") %>% + select(names) %>% + head(20) +``` + +
+ +|names | +|:--------------------------------| +|alpinelinux.c3sl.ufpr.br | +|aptosid.c3sl.ufpr.br | +|archlinux.c3sl.ufpr.br | +|biglinux.c3sl.ufpr.br | +|chakra.c3sl.ufpr.br | +|clamavdb.c3sl.ufpr.br | +|cran-r.c3sl.ufpr.br | +|dadosabertos.c3sl.ufpr.br | +|debian.c3sl.ufpr.br | +|demoiselle.c3sl.ufpr.br | +|devuan.c3sl.ufpr.br | +|eclipse.c3sl.ufpr.br | +|f123.c3sl.ufpr.br | +|fedora-alt.c3sl.ufpr.br | +|fedora.c3sl.ufpr.br | +|gentoo.c3sl.ufpr.br | +|gnu.c3sl.ufpr.br | +|grml.c3sl.ufpr.br | +|kde-applicationdata.c3sl.ufpr.br | +|kde.c3sl.ufpr.br | + +
+ +```r +filter(certs, host == "fourdots.com") %>% + select(names) %>% + head(20) +``` + +
+ +|names | +|:---------------------------| +|ssl390890.cloudflaressl.com | +|*.alghuraircentre.com | +|*.cachealumni.org.uk | +|*.chla.com | +|*.djborhan.com | +|*.easypay.am | +|*.fourdots.com | +|*.isteadrise.org.uk | +|*.japand.biz | +|*.lunaimani.com | +|*.qualhub.co.uk | +|*.qvest.io | +|*.samuelbernstein.com | +|*.soulsplit.net | +|*.southbeachavenue.com | +|*.urbanbellemag.com | +|alghuraircentre.com | +|cachealumni.org.uk | +|chla.com | +|djborhan.com | + +
+ +### Certificate algo/key + + +```r +distinct(certs, host, algo, key_size) %>% + count(algo, key_size, sort=TRUE) +``` + +
+ +algo key_size n +------------------------ --------- --- +sha256WithRSAEncryption 2048 59 +sha256WithRSAEncryption 4096 13 +ecdsa-with-SHA256 256 2 +sha256WithRSAEncryption 256 1 +sha256WithRSAEncryption 384 1 +sha512WithRSAEncryption 2048 1 +sha512WithRSAEncryption 4096 1 + +
+ +### Certificate issuers + + +```r +distinct(certs, host, i_issuer) %>% + count(i_issuer, sort = TRUE) %>% + head(28) +``` + +
+ +i_issuer n +----------------------------------------------------------------------------------------------------------------------- --- +CN=DST Root CA X3,O=Digital Signature Trust Co. 20 +CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB 7 +CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US 7 +CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US 6 +CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US 6 +CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM 5 +CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US 5 +CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 4 +CN=Trusted Root CA SHA256 G2,O=GlobalSign nv-sa,OU=Trusted Root,C=BE 3 +CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB 2 +CN=DFN-Verein PCA Global - G01,OU=DFN-PKI,O=DFN-Verein,C=DE 2 +OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\,LTD.,C=JP 2 +CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE 1 +CN=Amazon Root CA 1,O=Amazon,C=US 1 +CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE 1 +CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL 1 +CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE 1 +CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US 1 +CN=InCommon RSA Server CA,OU=InCommon,O=Internet2,L=Ann Arbor,ST=MI,C=US 1 +CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM 1 +CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM 1 + +
+ +## Interactive SSL tests + +Using [`testssl.sh`](https://github.com/drwetter/testssl.sh). + + +```r +list.files(here::here("data/ssl"), "json$", full.names = TRUE) %>% + map_df(jsonlite::fromJSON) %>% + as_tibble() -> ssl_tests + +sev <- c("OK", "LOW", "MEDIUM", "HIGH", "WARN", "CRITICAL") +``` + +```r +filter(ssl_tests, severity %in% sev) %>% + group_by(ip) %>% + count(severity) %>% + ungroup() %>% + complete(ip = unique(ip), severity = sev) %>% + mutate(severity = factor(severity, levels = sev)) %>% + arrange(ip) %>% + mutate(ip = factor(ip, levels = rev(unique(ip)))) %>% + ggplot(aes(severity, ip, fill=n)) + + geom_tile(color = "#b2b2b2", size = 0.125) + + scale_x_discrete(name = NULL, expand = c(0,0.1), position = "top") + + scale_y_discrete(name = NULL, expand = c(0,0)) + + viridis::scale_fill_viridis( + name = "# Tests", option = "cividis", na.value = ft_cols$gray + ) + + labs( + title = "CRAN Mirror SSL Test Summary Findings by Severity" + ) + + theme_ft_rc(grid="") + + theme(axis.text.y = element_text(size = 8, family = "mono")) -> gg + +# We're going to move the title vs have too wide of a plot + +gb <- ggplot2::ggplotGrob(gg) +gb$layout$l[gb$layout$name %in% "title"] <- 2 + +grid::grid.newpage() +grid::grid.draw(gb) +``` + + + +## Web server headers + + +```r +map_df(mir_dat, ~{ + + if (length(.x$head$headers) == 0) return(NULL) + + host <- .x$host + + flatten_df(.x$head$headers) %>% + gather(name, value) %>% + mutate(host = host) + +}) -> hdrs + +count(hdrs, name, sort=TRUE) %>% + head(nrow(.)) +``` + +
+ +name n +-------------------------- --- +content-type 79 +date 79 +server 79 +last-modified 72 +content-length 67 +accept-ranges 65 +etag 65 +content-encoding 38 +connection 28 +vary 28 +strict-transport-security 13 +x-frame-options 8 +x-content-type-options 7 +cache-control 4 +expires 3 +x-xss-protection 3 +cf-ray 2 +expect-ct 2 +set-cookie 2 +via 2 +ms-author-via 1 +pragma 1 +referrer-policy 1 +upgrade 1 +x-amz-cf-id 1 +x-cache 1 +x-permitted-cross-domain 1 +x-powered-by 1 +x-robots-tag 1 +x-tuna-mirror-id 1 +x-ua-compatible 1 + +
+ +### 'Security' Headers + + +```r +c( + "content-security-policy", "x-frame-options", "x-xss-protection", + "x-content-type-options", "strict-transport-security", "referrer-policy" +) -> secure_headers + +count(hdrs, name, sort=TRUE) %>% + filter(name %in% secure_headers) +``` + +
+ +name n +-------------------------- --- +strict-transport-security 13 +x-frame-options 8 +x-content-type-options 7 +x-xss-protection 3 +referrer-policy 1 + +
+ +```r +filter(hdrs, name %in% secure_headers) %>% + count(host, sort = TRUE) +``` + +
+ +host n +----------------------------- --- +cran.csiro.au 5 +fourdots.com 3 +ftp.gwdg.de 3 +ftp.uni-sofia.bg 3 +ftp.yzu.edu.tw 3 +www.freestatistics.org 3 +mirrors.nics.utk.edu 2 +vps.fmvz.usp.br 2 +cran.case.edu 1 +cran.cnr.berkeley.edu 1 +cran.hafro.is 1 +cran.ncc.metu.edu.tr 1 +cran.stat.upd.edu.ph 1 +mirror.cedia.org.ec 1 +mirrors.tongji.edu.cn 1 +mirrors.tuna.tsinghua.edu.cn 1 + +
+ +```r +filter(hdrs, host == "cran.csiro.au", name %in% secure_headers) +``` + +
+ +name value host +-------------------------- ------------------------------------- -------------- +x-content-type-options nosniff cran.csiro.au +x-frame-options SAMEORIGIN cran.csiro.au +x-xss-protection 1; mode=block cran.csiro.au +referrer-policy strict-origin-when-cross-origin cran.csiro.au +strict-transport-security max-age=15768000; includeSubdomains; cran.csiro.au + +
+ +### 'Server' Types + + +```r +filter(hdrs, name == "server") %>% + separate( + value, c("kind", "version"), sep="/", fill="right", extra="merge" + ) -> svr + +count(svr, kind, sort=TRUE) +``` + +
+ +kind n +--------------------------------- --- +Apache 57 +nginx 15 +cloudflare 2 +CSIRO 1 +Hiawatha v10.8.4 1 +High Performance 8bit Web Server 1 +none 1 +openresty 1 + +
+ +#### apache + + +```r +apache_httpd_version_history() %>% + arrange(rls_date) %>% + mutate( + vers = factor(as.character(vers), levels = as.character(vers)) + ) -> apa_all + +filter(svr, kind == "Apache") %>% + filter(!is.na(version)) %>% + mutate(version = stri_replace_all_regex(version, " .*$", "")) %>% + count(version) %>% + separate(version, c("maj", "min", "pat"), sep="\\.", convert = TRUE, fill = "right") %>% + mutate(pat = ifelse(is.na(pat), 1, pat)) %>% + mutate(v = sprintf("%s.%s.%s", maj, min, pat)) %>% + mutate(v = factor(v, levels = apa_all$vers)) %>% + arrange(v) -> apa_vers + +filter(apa_all, vers %in% apa_vers$v) %>% + arrange(rls_date) %>% + group_by(rls_year) %>% + slice(1) %>% + ungroup() %>% + arrange(rls_date) -> apa_yrs +``` + +```r +ggplot() + + geom_blank( + data = apa_vers, aes(v, n) + ) + + geom_segment( + data = apa_yrs, aes(vers, 0, xend=vers, yend=Inf), + linetype = "dotted", size = 0.25, color = "white" + ) + + geom_segment( + data = apa_vers, aes(v, n, xend=v, yend=0), + color = ft_cols$gray, size = 8 + ) + + geom_label( + data = apa_yrs, aes(vers, Inf, label = rls_year), + family = font_rc, color = "white", fill = "#262a31", size = 4, + vjust = 1, hjust = 0, nudge_x = 0.01, label.size = 0 + ) + + scale_y_comma(limits = c(0, 15)) + + labs( + x = "Apache Version #", y = "# Servers", + title = "CRAN Mirrors Apache Version History" + ) + + theme_ft_rc(grid="Y") + + theme(axis.text.x = element_text(family = "mono", size = 8, color = "white")) +``` + + + +#### nginx + + +```r +nginx_version_history() %>% + arrange(rls_date) %>% + mutate( + vers = factor(as.character(vers), levels = as.character(vers)) + ) -> ngx_all + +filter(svr, kind == "nginx") %>% + filter(!is.na(version)) %>% + mutate(version = stri_replace_all_regex(version, " .*$", "")) %>% + count(version) %>% + separate(version, c("maj", "min", "pat"), sep="\\.", convert = TRUE, fill = "right") %>% + mutate(v = sprintf("%s.%s.%s", maj, min, pat)) %>% + mutate(v = factor(v, levels = ngx_all$vers)) %>% + arrange(v) -> ngx_vers + +filter(ngx_all, vers %in% ngx_vers$v) %>% + arrange(rls_date) %>% + group_by(rls_year) %>% + slice(1) %>% + ungroup() %>% + arrange(rls_date) -> ngx_yrs +``` + +```r +ggplot() + + geom_blank( + data = ngx_vers, aes(v, n) + ) + + geom_segment( + data = ngx_yrs, aes(vers, 0, xend=vers, yend=Inf), + linetype = "dotted", size = 0.25, color = "white" + ) + + geom_segment( + data = ngx_vers, aes(v, n, xend=v, yend=0), + color = ft_cols$gray, size = 8 + ) + + geom_label( + data = ngx_yrs, aes(vers, Inf, label = rls_year), + family = font_rc, color = "white", fill = "#262a31", size = 4, + vjust = 1, hjust = 0, nudge_x = 0.01, label.size = 0 + ) + + scale_y_comma(limits = c(0, 15)) + + labs( + x = "nginx Version #", y = "# Servers", + title = "CRAN Mirrors nginx Version History" + ) + + theme_ft_rc(grid="Y") + + theme(axis.text.x = element_text(family = "mono", color = "white")) +``` + + + +### What else do CRAN mirrors run? + + +```r +cran_mirror_other_things <- readRDS(here::here("data/cran-mirror-other-things.rds")) +``` + +#### A look by port + + +```r +distinct(cran_mirror_other_things, ip, port) %>% + count(ip, sort = TRUE) %>% + head(20) +``` + +
+ +ip n +---------------- --- +104.25.94.23 8 +143.107.10.17 7 +104.27.133.206 5 +137.208.57.37 5 +192.75.96.254 5 +208.81.1.244 5 +119.40.117.175 4 +130.225.254.116 4 +133.24.248.17 4 +14.49.99.238 4 +148.205.148.16 4 +190.64.49.124 4 +194.214.26.146 4 +200.236.31.1 4 +201.159.221.67 4 +202.90.159.172 4 +217.31.202.63 4 +222.66.109.32 4 +45.63.11.93 4 +62.44.96.11 4 + +
+ +```r +distinct(cran_mirror_other_things, ip, port) %>% + filter(!(port %in% c(21, 80, 443))) %>% + count(ip) %>% + count(n) %>% + mutate(n = factor(n)) %>% + ggplot() + + geom_segment( + aes(n, nn, xend = n, yend = 0), size = 10, color = ft_cols$gray + ) + + scale_y_comma() + + labs( + x = "Total number of running services", y = "# hosts", + title = "How many other services do CRAN mirrors run?", + subtitle = "NOTE: Not counting 80/443/21" + ) + + theme_ft_rc(grid="Y") +``` + + + +Take a look at a few of them + + +```r +distinct(cran_mirror_other_things, ip, port) %>% + count(port, sort=TRUE) +``` + +
+ + port n +----- --- + 80 75 + 443 75 + 21 29 + 22 18 + 8080 6 + 25 5 + 53 2 + 2082 2 + 2086 2 + 8000 2 + 8008 2 + 8443 2 + 111 1 + 465 1 + 587 1 + 993 1 + 995 1 + 2083 1 + 2087 1 + +
+ +```r +distinct(cran_mirror_other_things, ip, port) %>% + filter(ip == "104.25.94.23") +``` + +
+ +ip port +------------- ----- +104.25.94.23 8443 +104.25.94.23 2082 +104.25.94.23 2087 +104.25.94.23 8080 +104.25.94.23 80 +104.25.94.23 2083 +104.25.94.23 443 +104.25.94.23 2086 + +
+ +```r +distinct(cran_mirror_other_things, ip, port) %>% + filter(ip == "143.107.10.17") +``` + +
+ +ip port +-------------- ----- +143.107.10.17 993 +143.107.10.17 587 +143.107.10.17 80 +143.107.10.17 443 +143.107.10.17 465 +143.107.10.17 25 +143.107.10.17 995 + +
+ +```r +distinct(cran_mirror_other_things, ip, port) %>% + filter(ip == "137.208.57.37") +``` + +
+ +ip port +-------------- ----- +137.208.57.37 443 +137.208.57.37 22 +137.208.57.37 80 +137.208.57.37 21 +137.208.57.37 8080 + +
+ +#### What kinds of services were detected? + + +```r +cran_recog <- readRDS(here::here("data/cran-recog.rds")) + +distinct(cran_recog, ip, cpe) %>% + count(cpe, sort = TRUE) %>% + head(50) +``` + +
+ +cpe n +------------------------------------ --- +cpe:/a:apache:http_server:- 13 +cpe:/o:debian:debian_linux:- 13 +cpe:/a:apache:http_server:2.4.6 11 +cpe:/o:canonical:ubuntu_linux:- 11 +cpe:/o:centos:centos:- 9 +cpe:/a:apache:http_server:2.4.25 6 +cpe:/a:nginx:nginx:- 6 +cpe:/a:nginx:nginx:1.10.3 6 +cpe:/o:redhat:linux:- 5 +cpe:/a:apache:http_server:2.2.15 4 +cpe:/a:openbsd:openssh:7.4p1 4 +cpe:/o:debian:debian_linux:9.0 4 +cpe:/a:apache:http_server:2.4.7 3 +cpe:/a:openbsd:openssh:6.7p1 3 +cpe:/a:openbsd:openssh:7.4 3 +cpe:/a:apache:http_server:2.4.10 2 +cpe:/a:apache:http_server:2.4.18 2 +cpe:/a:apache:http_server:2.4.29 2 +cpe:/a:openbsd:openssh:7.6p1 2 +cpe:/o:debian:debian_linux:8.0 2 +cpe:/a:apache:http_server:2.2.16 1 +cpe:/a:apache:http_server:2.2.22 1 +cpe:/a:apache:http_server:2.2.3 1 +cpe:/a:apache:http_server:2.2.32 1 +cpe:/a:apache:http_server:2.2.34 1 +cpe:/a:apache:http_server:2.4 1 +cpe:/a:apache:http_server:2.4.16 1 +cpe:/a:apache:http_server:2.4.34 1 +cpe:/a:apache:http_server:2.4.37 1 +cpe:/a:apache:http_server:2.4.38 1 +cpe:/a:apache:tomcat:- 1 +cpe:/a:cherrypy:cherrypy:6.0.2 1 +cpe:/a:isc:bind:9.11.2 1 +cpe:/a:isc:bind:9.11.5-P1 1 +cpe:/a:nginx:nginx:1.14.0 1 +cpe:/a:nginx:nginx:1.15.8 1 +cpe:/a:nginx:nginx:1.15.9 1 +cpe:/a:nginx:nginx:1.9.4 1 +cpe:/a:openbsd:openssh:5.5p1 1 +cpe:/a:openbsd:openssh:6.6.1 1 +cpe:/a:openbsd:openssh:6.6.1p1 1 +cpe:/a:openbsd:openssh:7.2p2 1 +cpe:/a:openbsd:openssh:7.6 1 +cpe:/a:proftpd:proftpd:1.3.5b 1 +cpe:/a:proftpd:proftpd:1.3.5rc3 1 +cpe:/o:canonical:ubuntu_linux:14.04 1 +cpe:/o:debian:debian_linux:6.0 1 +cpe:/o:freebsd:freebsd:- 1 + +
+ +### What other DNS entries use CRAN IPs? + + +```r +cran_dns <- readRDS(here::here("data/cran-dns.rds")) + +filter(cran_dns, !grepl("CLOUDFLARENET|AMAZON", as_name)) %>% + count(value, as_name, sort = TRUE) +``` + +
+ +value as_name n +---------------- ------------------------------------------------------------------------------------------------- ---- +222.66.109.32 CHINANET-SH-AP China Telecom (Group), CN 243 +200.3.192.46 EMPRESAS MUNICIPALES DE CALI E.I.C.E. E.S.P., CO 30 +176.9.40.200 HETZNER-AS, DE 18 +137.208.57.37 Wirtschaftsuniversitaet Wien, AT 10 +169.229.19.202 UCB - University of California at Berkeley, US 10 +202.121.199.235 ERX-CERNET-BKB China Education and Research Network Center, CN 10 +150.229.0.204 CSIRO Commonwealth Scientific and Industrial, AU 8 +130.206.13.2 REDIRIS RedIRIS Autonomous System, ES 6 +192.80.24.196 Universidad de Chile, CL 6 +202.141.176.110 CMNET-GD Guangdong Mobile Communication Co.Ltd., CN 6 +45.63.11.93 AS-CHOOPA - Choopa, LLC, US 6 +64.50.233.100 TDS-AS - TDS TELECOM, US 5 +119.29.56.102 CNNIC-TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited, CN 4 +13.66.202.75 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US 4 +131.188.12.211 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., DE 4 +194.214.26.146 FR-RENATER Reseau National de telecommunications pour la Technologie, FR 4 +200.236.31.1 FUNPAR - Fundacao da UFPR para o DCTC, BR 4 +130.225.254.116 FSKNET-DK Forskningsnettet - Danish network for Research and Education, DK 3 +133.58.120.95 SINET-AS Research Organization of Information and Systems, National Institute of Informatics, JP 3 +142.58.101.156 SFU-AS - Simon Fraser University, CA 3 +148.205.148.16 Instituto Tecnologico Autonomo de Mexico(ITAM), MX 3 +155.198.195.11 JANET Jisc Services Limited, GB 3 +157.193.230.39 BELNET, BE 3 +193.1.193.64 HEANET, IE 3 +193.40.0.5 EENET-AS, EE 3 +194.71.11.165 SUNET SUNET Swedish University Network, SE 3 +202.90.159.172 DOST-PH-AP Department of Science and Technology, PH 3 +46.143.212.45 IR-FUM, IR 3 +101.6.8.193 ERX-CERNET-BKB China Education and Research Network Center, CN 2 +128.176.148.9 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., DE 2 +129.237.125.92 UKANS - University of Kansas, US 2 +14.49.99.238 KIXS-AS-KR Korea Telecom, KR 2 +143.107.10.17 UNIVERSIDADE DE SAO PAULO, BR 2 +144.122.156.22 METU-NET Middle East Technical University / Orta Dogu Teknik Universitesi, TR 2 +190.96.111.43 Escuela Politecnica Nacional, EC 2 +192.75.96.254 DALUNIV - Dalhousie University, CA 2 +194.254.245.138 FR-RENATER Reseau National de telecommunications pour la Technologie, FR 2 +200.144.254.65 UNIVERSIDADE DE SAO PAULO, BR 2 +201.159.221.67 CEDIA, EC 2 +210.218.217.24 KREONET-AS-KR KISTI, KR 2 +62.44.96.11 SU-NET-AS, BG 2 +103.109.101.20 AMARUTU-TECHNOLOGY, NL 1 +103.224.137.193 IDNIC-PDISBPPT-AS-ID PDIS - BADAN PENGKAJIAN DAN PENERAPAN TEKNOLOGI, ID 1 +119.40.117.175 UPM-AS-AP Universiti Putra Malaysia AS, MY 1 +128.250.213.6 UNIMELB-AS-AP The University of Melbourne, Melbourne, Victoria, AU 1 +129.132.119.195 SWITCH Peering requests: (peering@switch.ch), CH 1 +129.177.13.120 UNINETT UNINETT, The Norwegian University & Research Network, NO 1 +129.186.138.51 IASTATE-AS - Iowa State University, US 1 +129.22.208.161 CWRU-AS-1 - Case Western Reserve University, US 1 +130.208.58.81 RHNET SURIS/RHnet, IS 1 +130.216.2.235 AKUNI-NZ The University of Auckland, NZ 1 +133.24.248.17 AS-YAMAGATAU Yamagata University, JP 1 +134.214.32.76 FR-RENATER RENATER_ASNBLOCK1, FR 1 +134.76.12.6 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V., DE 1 +137.132.33.20 NUS-AS-AP NUS Information Technology, SG 1 +137.222.10.189 JANET Jisc Services Limited, GB 1 +140.138.144.169 ERX-TANET-ASN1 Taiwan Academic Network (TANet) Information Center, TW 1 +141.219.191.249 MICHIGANTECH - Michigan Technological University, US 1 +146.155.23.20 Pontificia Universidad Catolica de Chile, CL 1 +147.162.35.231 ASGARR Consortium GARR, IT 1 +147.52.159.12 UCNET, GR 1 +156.56.247.193 INDIANA-AS - Indiana University, US 1 +157.86.96.98 FUNDACAO INSTITUTO OSWALDO CRUZ, BR 1 +165.229.11.55 YU-AS-KR Yeungnam University, KR 1 +190.64.49.124 Administracion Nacional de Telecomunicaciones, UY 1 +192.249.6.222 UTK - University of Tennessee, Knoxville, US 1 +193.144.61.75 REDIRIS RedIRIS Autonomous System, ES 1 +193.194.89.173 ARN, DZ 1 +193.255.52.152 ULAKNET, TR 1 +193.50.6.155 FR-RENATER Reseau National de telecommunications pour la Technologie, FR 1 +202.158.214.106 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet), AU 1 +202.201.0.160 ERX-CERNET-BKB China Education and Research Network Center, CN 1 +208.81.1.244 LESNET - LES.NET, CA 1 +217.31.202.63 CZNIC-AS, CZ 1 +87.98.155.219 OVH, FR 1 + +
+ + +--- +title: "orly.R" +author: "bob" +date: "Sun Mar 3 11:20:15 2019" +--- diff --git a/orly_files/figure-html/alt-names-ct-1.png b/orly_files/figure-html/alt-names-ct-1.png new file mode 100644 index 0000000000000000000000000000000000000000..2631f095af9cdc5b80f14754824bb17f6f832973 GIT binary patch literal 92672 zcmeEu_gj5|YrE&l&zXbjMM>I zGwR%xgSlF)J4kq;tN(jR)vNV-m z`w4EQ-tBCI2CzQDQX%DP1>$dTOpmfYlB+!ldc7W=zm+U4oNUunHD|f&cbJaO@ZD{+ zLX)gF7V9U(+`U4RQqD&!wB#BR9V*N7?Q=*bEoqkC8zvrLks6VhCb?&w(fsqDzNS-S zvzL%E=nJNMtj;WEHEV_Bq0v|N3UuHeSA5Q5SmZYinUBoYp@IsX0zM6k<`W&Ra{iGv zA69smMnXw+v}{8YZ$q?@+KlubDFPlbL;d?*C4GQ z#4lK^BoN$6QA0-ZDCtQ^%MEq?tG6v4DUi<7Oj;KOQIZPXExSwi)imn^Ed%O@%z;#G z@<4m*&$!FpUeln{hQV5Hix9a_G}ZLyQKd8^mir~a#^%)W{=DKu@|<+6ccy|6CPFGl zG0s9)*u1~Ws2{~LR#RJ`&n92lE1AfMk6$!L2*1rwRhpHog=N0O3v;U(YfY5$Qr3TA zhd;)V09($xO{*mkiOa>;DZQ*Dj0vWPQl;$jJ1vukYe%&i!xGExy`lXJJ_QuD! z$4t6T>JqI_sUsdfw}^-n(>`v{JIrE>*Ia#Tb4yEFi@K<4^eI(HO}!F4Bzx1j_S!;z%I~X#Mpyx2rm{cJc z6}1t+avJXDk5>8pZ5;nnR4pKZF(9yq-SIx+*R?qkiNnv+)yQ_Hn3sO!3!}%|M{Q?9 zUj7%O8#A4*r6|6DI&tarwt2MMxSRsM1Yi{jzLE*?)46I)js^e}04j=4wY{!v&tCJI zQJnsVZ`}D#)f3Ti{=)@H=;3_GiAJ6`%&D_<=(51!Cd83+E}X^4mIHYg3sZMng} zdhQG>zfx7@L!CYr(&dpKlbqfBU96Kaa~O@ZTpzkRfUx&EjgmQ2Ouj@$>{)BhZNg&KF+ehL>vs`qr&9v`$fU((E}=D{E`raVCh!aR$v-yOUMI`IxYW zw(sNeqTb~1WwuQ%6(#bcF}{_#xr#T)#lKW=F12Ve8`ay#XJ==JS{D0!HkB9G0l{8h ze*M?$wtnS6F%jwL1&{_5!*=|D2ZT9(ol|E}ovbnsDFwnbIL}2?y8Ur2e!@r6!?8d0 zJLY_`38|Mpz+hOY-B>ZlgfS>M2BnxRv4PUBDgM6kUoUR`j~5TTdK8b_ZQ-$9TZP#G zLcb~!5#K6g{jr}%bj|5jq4pK|4A+ejsYIYl)=kDqQw;PAP#;>ZFz15;}`J$U06Ll1u#fVDv8{g6hm~e;F2*f}l<~1SyM@ouKifo(XWjyl!_&N(q%NM+t zQz+BEU|Lh=+vvNC7~hZBl)7sC753cH(*DQf8*S*;gKj$k{d{k1o%m{Zs$*4}o(}uP zNn=ql@{RW77ohCC070Z`}ydg`t`bk0$*K;}b{l zZ8)O<#@l-pfF4@BqmiwyD9O3o;8?DTx%Yl!L4SEuZHYobIKHXQ#WfXfnP~FR)bA`1 zvo+B(Mp4+)Nb86%C#qP#qe7?}l3K;^=Cn7@V+Mu-+j?iZ& za2l8XVdbXybf<&;5mdK0L-1F{>kpeCoId3V>t}2?G>D0Gj03m;#V4e>Cox3osbVom zrxpVZ*;7SH+)TIyc2hJa?3r2Zm3DrKff^&uDXD=P zUW)kxV-_|c<*3a}QuMl&avg-6C{;Jr> zxbrbhHIeVBv_tI%T{_7KTXW;&~s&_P7=22nwnMCoZ&@yMK^KwcmFYd**Oq8 zDEDw*i&O(bQQ++_l*wO2{SssR)5g>-C2_qmMJq$&@GaNIV9K3Y=H1eCk|Y}l9>cCvUm3|) zPxPFN#Ai3jjXiNWdD7#;XB_nF`evZW>N5z}&>KJ3T z;R}&r*E+=sy|H@DY-CRHSnL5OzXGj77_!RZ-mRg)!VLe-H|CW?KJ|HHvEAZxe$r-_ z$}C`RQ@>Mp#pZdo|Ju+4-BV8f@Oq~aq z5ser<6Htd3Vvi1sy(u;n_U3wQV`ky?=8gAb(kCuGP?7Q?hS=3JB3BTVG z677HMqNF^lX+l0@CrU@ga5s01rC2>hq^jS(Ib8lBpPs@)qU$Gy1m{#CE)ZX`M5KdF z+rr30?0umyk5$*TDHJ?^X=!16n0(R{bP+kMG&pfEo?4;L?>nHQ*Et4wV)+XbIg7PA0iz@xToL}K-ZTs#l?0F7T0hR1zD;_^YLM3exS3&_e)9xfeLD(lu zz*_6J#TRZm7c<&83cUfq(v;?`gkHE6Xv|*g^{g!$L2<_{p5t0ll$4ZQ7CFE%A$VMa zgN{JsIuX*lUjYz^p(zBy5*)5T9grWSqv`%Y8Idbd0>ht^q5(wv*GG%Alr^L_h~Y}V z;PBORa)A6pxU00$!E->M$ejgazDO}rrJ`ygnJcd?#hFN; zcf3wwdRDe;G@#o-2ZiiZv2AmH;r3J2bw9JG5v#Y%0gp@e-~w&Gs#keRKaecD4V7G_ zVq^ot+=O84n`Uk*+Hc=-lhg7gbal@&E=MsJCUn^gOeEh*f@8G_xRFkGDqTw=O0(^Wi zh_+D1*r(v@J9ecAZnYDe>{5f8@wE8Tnh#4~;vK1WxZGDl->)stotc-Hma5&jA=cY` zdbn!0yjxK;;x7zm+<~NzZBMy=x@x*bCDhWP3JsGxX!*I$Z?#rB)eZb$ZqfcpX;?RA z&rf{Q0O|-NJAd6jI9Sc6+7q?2da@ivHfUP;F6;b*%v%=CkLLJLOVC-;*=5kRJ_Yks z5%DP58dSfaJRAZ#%Dd|@eOHyHUBqX5<9A*SMub!bZF%$aM2Q~NV}W^xwF0F6anR|P zu5uvk6a1m{B38~S5nK(yE3_PM&cbChuFYLDx!R)&ny*$WzxgBzcoAW~C5PMQK-N2m z^SPJa$KIrp0xS+Iv%ELqElLGWNUR}Zr@BWzK>Ut^_Zv-EGGxk+`xsTrbXUgZVz-Z@ zbf%WVN^E;*3z{|rn@s2Be%IMqEz4xr5YX}T`J7>sTO+SQ(4Y^O>`V5GR-g!oA}#d==D;GLEkzR9l|6MKdsHav72Ae9-RUak=5t za*@F(WBb|i`&{?2e(gMG0{Isu0)$LBmOt0mkjAc5O8U-uhz{x{@EbWw3djh3ET>_1 z!nV3^>8_owM>io-#Zk~(i@n}J@9C82rnU{Q4Way_1WWv48y#sfSkTL~g~Oa}cH4-fE{MD;>$h(| z-YpYN;Z4AOE>qBXZ`1OoHBz`YeNm8w4SRrw))#r7ncr=Q+u=*qz_RfKLRdGj!K z{cQVFg4RTV{B-)yiZ+dS>D?w}|5Nu@iq)Z(TyVq zD?l_eJ!n_yU`9Av@8otC?Ny}bCSAYa+?n+0(fX{WW5cB_9cY}c{rou>=Gk;!qN$DC z5+gl}R2dQo>6KgZ35dPPd0n!|(4B_D2;o_5*g!9SC>0PvGJ zRIfsgVkpG2Hfr0~1@N9_r9ddZh?Lp%;AUSzMl5W%bz+jTAe?e7-*jm)YqY`cGC$SH zeWtA=F$~*cgtbTJM@HbC)k;e!@_jcqP%DFAeKd8u;(KbxZ59tCdnMY$eRb6Z8xJNk zI?RBktS!MW5%!O2)NaufQIJK;pM4t!3_Z5j=z>n4cQobdkD}!P4tXNa&?7zbrRxt8a%FCH5pb2h29R?53f*@uFF zj4AI|gT3A!UNpIrxP(=yV;wb07O+(!e(8?8!hQbe&xw2)$2$8bW;*hqxQkyr{G!Lo zB^P{^5p!9%QDFp}T2qe42&&s0_~0AoIGR&D$~DlP^U(HK(sN7Vj-i-%y6C){)R)iW zS_QM`5g}_k-Hndc{#6=1O{UilR9F4)=@-myNm@Z3c+OmU!l$5fmsH-n-dpn$fg~7- z<0&pQ$(*hi2vfzint@}!-fi=IpAc3s`>{yvw}(I^q5{|4)J{+>_=Fzj`9lzGO2HUr z!qne>7rc0gVa!Fy`GzRNpW{JlyZGbhxAzxsYqVYK7;zNIAY~EpN{UNJ&`lDxz_1#J=>-<&kCWCr~jH=en6BhAVuQG4;j9H;G zqwQAkg>nW#`@-sAeB#lEVP_Id;@g|_K0D7wI-4L(SfeN7*s1vW@STnE(=Y}kd+nU# zu6fp}?s%i3HC+--5g8GYKlRB0503oHG!a_20ktdL|Kh7PE#4h;afXdKo(Da@bVijq zmdV-5Nrg_VCIYn=m)iJqqnUm0VLs)~c7cIby1MyOs6vz4634}~VXI%)&@FV>rM9MZ z+Lc5In3X+3PM?}=AVo9=>DbtJzjKEM9*$2bkee%`;6kPQda#vL0y*QcwS0;x14FRn zOWaVKgTSSoGd8NhbKYm5S?iJEzNYM{=D~1?lXA;R#pyZ~8W9;9SDib#&Bm8=bTBe>wtpl35PYX|wmnaQCo$e!QY zJHjSl^vUW;HDv$pr02XJf1-&?*3M-SEyfdU%aq% zn#ZoQ`f^l`XuYaZEeLZB`5{W6GWA}BX^jVBq@+FcTUd)f*jC~p_o9kJVLiEegfo#D z+0G%-z~p>_>n1aJi4M-Y&(9+V~RL4Z#@4n1BQ$3$8c#^h{y_?|$2RPZe z>MrxC%%>pl&3$|dD$eH;eHQ~w%J6N)9oY%GXRVGo%QZ)soPDm~nVt8olhyL}zY|@h zhf87^A`TTFU*XZ@;h-}G=d`;?rSz{O!>|N zNk52Yo7`iz${U5u`hc)zJHUN0%#ToPu=4usI@JtV^BHZ|&%b0x#C#rd#W1b?nJDFqNS_wYQqgDCvVP$quu7&BJ z)e)8(XT*_OLkLXUE-qv$U^$N8Erast_#hn7ySI2P_ytS~Xn;#IiXYmg$Lwb4|5O(@ z;i_mmXr7AKtHspWP0)Z2*yk43szl;(5sCBC{*tZhN?BYH-7cUN>5RQ&`GP9Kl{_~b!*2u_hu@n;mDJLt~Yoo%9@O{^!kh#4x8 z(_v&Dly<6}(q~~dr9<-^CM~=G#a_roTb*iy+j_L>y?C*GLz;4a%9Qfw-@IsqVKyx& z7EcNOu*(B02f6vB?rpzX0k^l~lfOQ_6;k!mkj8W}-m@KF`oww&qI#L1X#8{VYem{Q$*S2msVF{W&=NK+65g*){Bi^9=ED0U#eQ)=|yq zL2)f1jE}924p(LkmCt(0aL=v3wwPu{hO(S6E-lD}-o3951X@s`O- z0q+Kofn^4LCjHGJ{4pUB2q5`Yei4bt5S}-9sIZ)o|AEkuzKBg!fN6_%W82xG3T^e5Luw)@jcaR|dioYii1s0nN~)>+tn zgiQF`@BGYG3J==A2%8<7k2rcqYIa>#!S92g!|N?JgbK3nduAJX!re|SX;Wvd4fskg zLO0);HOV{7w{~!ct-mup>n%!r5RXgK!zKxPX7oeQ=gDM1=q~s$+il}x_r|`wVE)$2 zBmES9oLcp~w9duJok>%-Z*O6O>>j%_k6A$HMcxw?yILNLdmT%#nkOOYkWi9vZ8Hoh66{B&sQFm)wy*aohi%rh$u#i+wDuLp46#4EF7saP9k*q@3v50q?1U zd-aDz!nJ~~^Zw%$OUn_Y0E)ngA3}i>9h9oO&p;|FMa}02TY=l3DrikUYJ8Lea=!Ie z+iM!^^M`~8pu3KJvq={%!?_?45mGM0!Kf+zY8$Pp2nPA5ZfZQRk0ryP5;;kF=4PqE zkP5D8T!1Dwg5&L}(UaOs69-L!LCu*-W|JLrf0@MVvzo2lnX~Fj{<5;@GE^Qjl zirZdBGtUle?17>4Sk0c;FMF6pG&woBrIkVQXq80Ob z&(!^QjZTo>D?i+DX)(!+fHsUArTR7iLwh=#!11*!@a9^ z3jv^k_QE=+{k@NKjaGe!0?oWzH*Wm2nrelJU5HB_H>-YvuLD=5SZj66Kg)eB!`UQP zfgj#!E-sK8puWFngnK7*bbpJbc)1(@Q2b)2Uhyllarf56@|K|a>Q|nM_<>Yt(w5BP ziTP?4eumZEelbOMKJLW--K!aFAFAN=dljl#+h0YZXbI99@8 zWbQ$aAME_u@~lKceuvz0_i+?Ult7>ZvS$hQPjHEq*8G!fzqMYunQI$Ns2s!Y4Ic1!!!kSlq4NPASCOE;b_ z=o?ft!?ykgk8bHrf2hF#RVR~>ZSLwww^Y4C=6hoZaYO&QqmT?{3)$m$!~NonVzI`| zAOBOeqPL4ST`wzK9kis;V}ip@6bYi1b$)8IP&XHctfg)rH;x^cfZBSt-s#kP9S#)~ z9U9hG8gEx|WhD4UJguv{{kCJ?v8mmfH`Fg18svOA*XYVcb{;ieYr>2Y#p^$7_@{1; z{w&$q=sH!YMs~nK{Z6PmS-6)v>1$*G#Z9Y^pg9T)yZIzB<|v*FU3@8S=y0=FytC83e~BsCRX_v_w^#6&Oeexeu=rg9K*|4i1+=Z`x}F zD8<$SxY&XE^797^K;Hd$upTA zP5D;*;4I%O1{rAHm#=y@qo2C$-a6bBY_wdjt^c0B*?CLit-)Xs0neS%RoJ4MG+-4* zxcCvN-|iV6py{6b-z4@5Jh$w?{Rp{>Bx5Z2XqKqe+z--qhq7+tQrW5h`ez9Ea_pc_ zaVKT(TaYs8cMgo<>q?V3Uwlrer9kVCOO5T&PUaW6XGsf6Is_E&Y1mrbHlO~BrXr6y zy6n?jItUG-A|^r||FpaC5dOqX-&kiF)Sixxd(P4%E=T64?H9}l%? zp&!4tPpqIbZ5SuYM~n&itTRMzrzv}391JT|hWN&emg$MJH6~Kr&EoOB7=Uui#NU!a zgl{w+(kNQMJZ7bqvnP$KY%$hz%?64-@=9*j^K;cw(`<|gw9rH596XNKM}KOwIDcN zcNT^d@19es7tWTs*EV|L$0p35$EJ)3TMbnCeN}~24)4xyx61z%c3IXpG{8k533yMc zbv=3ml>wIYb7jDF=?)jrKJPfA829Y5g);3N9xBP>;&0bJJ!>$J`szJ4z4~-P1!_&+ z=+0Qgi_&I!-h3W`WGeZ+Z!E5Z)2YSgE}sWcGP0e~Y7QOt(3<*)ZnB-FixDESgbj=< z%XJ@nT$coD7L30jdecsDM06Y#EthQzI7QA3|26MnuA^r`VrnZ4;`O}1dKnR^)sZ4O z&IVvR0fOZ4nI_MphySeh?1+d@jb`RnnnK33Ry&n^6m3W{v4oAzGUHNX*GI#LsLNT=+s9+;^T96@!64V#6RH%#vf(-szpks73%ulwyBafzH; zi(JB?)(%)o2Nl%|7S`T%<2ASEORLW;?j~9^t0p~MjZapcE?Qru?NO$!koXqq= z{OJXAnf<=LZK5e5Dy=i_bew4weF1IM&C=4p8j#rIU4p%~G=m{qG0-t-naS92^S?vD z2fOBDi^gmV`Z^{yfI@DguP*tK0dtK^QlU=P?WC0JPDjX+*)o~a(HbG=--xUlExDGC zh7MMyXK#i%;btO)6g|fA1&sd_FKsbf3?XeU=0B=$stuLi7%46@Y3Z*1a(Wu(IZWOA zF;(z&DX_9B$tF=uM2=~T&al-jV?3~I``L#{l2)_SNz36$= zblKh3_nGV-jJ<{j20WHO!xS8WSmk-%k zzY?<3oXOVHS#;YY%RNm%JL;0yIC+(Ih1RUC-%oX^m_>h{kLa3!M6k=6a>uJmyF)(G z>WOiNo~gOI11Vznb~t;Tp5kok$%EUd#%)DS1=bCNX&M`|Js*Ddq<$YS7VkWkmr*1_ zVXF7y1(VGbo4CxhANa_iApEk6`t20pmS*Ei1|aLWd6DT6oji*v#>;h{60NGh{G>i1j;Z#10)H5f!J*;wy9lZU11*(2@jRBJ1gH_JQq! zMS=)*Mk5o@X=7*`0VwLPRcMl|>jV0}P|2Muj+d5ARy4`U`kq(yJWLgZ`?4-zfZG_R z-9MA2D!$eKdjo1O)IycJB*9WjO#SpqMZMKK5`tO${uLDA8ulYWGg@y8nLCnWA4e4U znV4SO)&geC>$!vEXB2ymbC%zT6J9M9zT~9^dS%qwn1g$u{KcMoCT@$3-RY0$Y$PA) z=wppRTce4#LY^-g3|}S+BW-W4+tIqQRFW@(+CuVOe+i2KxeL;NtrYm=|BiEi@Q&;C zY*e1VbZf2s)U(}F6q84)-iN_7zP59zF2(?@9>9G;vqFdIUny0Nz(B^2Lxo9tEC^ti zpcOqw7E4-=wxDH=Hgmh1VWhe3+*Zxn1-W5RgX)z%mc5l` zYSL2liDew;;(ijdPX@y13DJwk3gr>d7H#mqw?J1!o=l!S7mpWV%sRJBJuJh23P zGUZpzEdt4jmXg8njo7d)6reo|=BuZHG+DM}UX8LPTc>2GI~#{|nO9gr^&}k5DhgDk z9#3&0Zo=!cNdnE7;%57_CoI1GZ(KGwXkS9h$2}W}$9<2I3kbXxur)?SlJC|kZlY<* z-C?VtmGwwD%0XDAgAN{XslD@z+I-I(HdI*Uesx^KT)_%<<%j>0?;?}=DzXMPt-ogc}KJvgY8s8D=JT$F>R(ksxuO?t+wJz=&O9MhE zoDivnH(p_t3DPqKYw^P{&#Ia_>g*B+g$Ni+$npI1UKe-syl=%^_NuG!`lJoGTHibfrLAmVi>Xmr^c!Ux9D6;pVQb%@gP-E5$ql zv^)5D?sb*pJX%v$T4T4yF?-W)ODijbal4)c%(?nA~6bTzrN=B#D6U#-f zOON_Kf1l!d&I?Lt|I&=>V8k@wW1%y&75TJ>b8`Y3eM+n?p8WyET%kcna;3HbVPB*S4BJXziEW9bpr~G!Q;Et z3WQAm%3cRmUB8ZinC9iw>1U)%y99fW-(eXeXj{bv$>fQg>$|h_I8Z__`KT{d)b4}9 zi;~ut;!aim_S3sR6D_-KZWUeqQ3kXEp*#`?)9ndFu;4D+($g4> z|D#_M-t%d;B7n)@7%|%U=Odoh^Kux6;0+6UfJhFlsejos|1784_n8iMzPm{ep_XL-e8ERAGDC1V=l@)-`LS=>$dMUJ75e7;L0q`_x3$I-1YQ& z^M#@h@7;JCIpD9OYZL@@r<5a6!tEaS;){JM*OmT69D6O=xXc zGaG>C!OwDg|B`~=O^x8rnj#v3Do4Qjh?SH1li`^{gAD~Qod?=SDEZmQC4xXLA^Y(C zJYQ&eJuFejyuo4VZhv9vavFn9$*aM>@re?Imu1Elr`>mc_?8#**-D1a{pNYrVOPU~ zkJC0>$ia+c3(x#{&~Xs2k>hM+qFkO|z4QCu{Iv)t+PV@gm}O2E3~SMTaF1uD2GJH# zFSS+>7+~5uk0o<}IT{{M^)x955Ey~42-Wnc6J(XEaxfnu8r|?o}djZ#^j9qFw~>kgRtpULce9lE4z>bZR^On&xs4mO%2G{6JFTtYpU_Dng7QTGAJ!=pYz>`bMe+#~X8k;~-{G&w=ZZYZ;L|0+-Q3?ao> zZrN6v(icHj!+ZEDhVSu0x4OGWzos?sXjEHOVbbtcVZIAC7; zcS;Nddp4Z132dPev5TUDbCqg)$9$Kjm-vN_=vO!m*_=y0{mLPiS*B?eY`kG_WdvbR z9@LAuvj;zh6%Qs$Bkmk$Uj6cNB>x_4uha-yev`o`!18Qw{{|sJZd5K4__8fS)vHQY z%h~^X@6nzu%d#cvsncz9hUxvM5$&q|)jv{&fVP*>p59 z@1?qiO#9faB?Y67moZ;hlu!3cYrYu7-K&AHg8NAWow)FNf=8f?f>N6SMeZY&vCN(gC82 zgg*f59gzIww7lQ15E!E)mwwgOSD!aO&>7T}IgLp3n0}m~nYYfW;In_UtSL`>A?S7P z+|$cJo9<+Aj}I-~eV=-R{#+NKy~DC^kC-sULnM0}#sJwpES|Mfb-jdY!~=2~exYc- z7GG?f$qV@o<@>;Fl3j^Ld@HzDuqWN#dpoRv*Cb!P3pEcvfW<=@dfv8e3ll0*{i*Wv z_9qntMnk8gko|h#8cGLEKQ8^Tj)9U%wU>XiJobFUSBe?6y~&{I*Cg4ab>ubTgQYt@ zGZvro(H+B7(9a_Yb;GiC9yja?)byy=w&`9#~TQ|viZ07uwC-H z!1ue&r;Fj87yg^08!w<0ZTB_DUWk==8D&JF zpmf3m^L^l!eR@J2<-=eK@Bw*6)Zsnd@0|?)TUo-W5<%`H|t~Vc!XZTCY&ay>yI4rUC(yR%)+x0ABKMbf z7(osOx3g#x8Foj(DeQRhUl@UA(Y}EcK4}*>w?gtiMZEHO_ z*ZMp9(X=Q^9KK;1F1M`))(9#;RuZokB6t?szEU0Ep;Xw<9z!M5CU zbV_T?jf~*;oVo7v{;asf>6UCj$h8(bO>}3=PC{zGbmI>H<(A5ExPU=4MWw~Y+u@*( zwXaP~u-BkI$1PNR0=5Ezq_B&VSVZ>ihobWFgVC}_arV>NX&=3@D$&Pt_$Q02T6LL_ z&E#Jf>=`?U-vvKHW^)d!)?Be;dZA-l#8v!g_a<$>%a-!z#fMPo1Y5~-LWsF~a`20% zLVB0^tX89zzzlfmn$ylY^{u?8(PAqPUJzTufOY=W5sqk>Amo9u`^aY8F8Ij?zwf9b zF1K~D0vx_UiPNVr_386}vOu6!_Fe`ZmwX$0(0!tFX4J#2mWHWWm2A})DCE7nz2&rjw=_wIb)oKu#PV&eon5o!VbIsq_Zh>q#}|12Ct18$ z;>+qbV?G|e@@iuf1{!9+^*3A2cmn%y? z-09-?XyJ7ec%9n$ajy_vGhxjS0y z=GmvPs&m$>O*=A*$@nWDv&I-168c4G~P`#E$Ah1`*=|{E0Q^g z!Y7C#97{`y{CH-M>&}fXeu+rochCr(=F2Fr?mRBe(gUtRrYmiJZ6#k!e7(5a_qld2 zCcyR;243!Ip62BFTTYzfn`>Q1n6vYT!#j&(glxxW2H$L$H=$#=oU1V}Fo4;bzxhPK zWz!}{Nt3(z`gCwN$qQN;yNR-JNnfU0C%;O{6ImkUgwj9BF=fuuNCqDqO!7xbuPz?R z?ARTq9rAyFyWA6{rElxz>UJJh@U?ZCWCwo;Ii6v`YH+C+cyru&yK#O>YYJafW_I$R zx@Tw5c6P=fxl(DqWXL(*-0})Vh+|#wp;o@uZS{l-jgVP$jJ5arK8jH3_|^k?*-Bn! zz4gk&pIZ*!moN-pos}V|@}F$U>PfcdZ7HDJh(o@7r{g7Vr#^BMXW%B73GZU~jg_Ev zk}dsBP-vagnTS8OWVNw86{~sN?8e$jAW8uVEJS!i_}NHjpUe7U&sV*m>DHA!?cWcs zMaPLb7^Yf|KUEFcmY=LYm+u}1WF||9-e>gaeT2kzN-u+*TI?cJ>ILVzUP8?Nh@JoCDaS~^A2TZM-Nnv zr~Py=1;dS1$nmAo7e+GOmC;PSI{4I>gJUf$WCJ~v6MKJV21=bFa6<6F1x3RFWzv;!T1+h6(2`?iKSiYH*BUb z^n(;}4DM&nB_Psy%k%qmf}7V*F*O292I_hF*t0{^qWJJ?7ie@|lhhx8AkoTeTJk z>>2SFEq3K4$(mdwk^hN5RnoT2kc37nv+($lc=6nm0^rcI%yspG;XL{k@XChSMLVvfLe+r;3XDU1Y92{PY3#=QlZ~Z~Zx)j^k601^8f;pX1Wg zE$6ygKQ1nPhE>}Th>e)-DPW4Y6X!?);tAM#o$0${@UM@9y@lqx0xdpA-*%)udI@x6 z%fS86hE%KzoGaPy{59g&r2LZT1merl6msgmmtVN^`}bqTqTM;2aCTDaaPfJ!muM_X zo@sMkn^ZhHFKcVRLr!ZfTAzR!%mWryQyPa~IGG+9!}=bwzMds1K0Ee( zha)5(7=o;hV`gTIa~4};*42Z~jQsn)=aJ$0DObuWOc+tm52HP&2_m*#Jo;nZ2rSse zu0OflW(e=`?-9U428ZN>e|FUUuj3cKi4nP7i4#lx^yxny%)q*kLFi}MHTX{be;?fN z=SCZLg{unF_BU>P`VXf&um%M95{UpBtW-4q*Bt&ex!g#?gKTOZKf3;(pR`LxFxdaU zS0b2`f&5I?|NNu|E`_TBz6mRz|KoHOrmqhHzWptj|D_gx3+6wl)!%~o&w?4%Nd5l$ z*1y}u3C)`cMD9X0xz2Fix8emcql3M1)#=i?7Fsd(#;{i&jyz=voZ9sN=&Am%+r)`& zYx~em$jFG^WvW0zXVc39N~S+;W2J^IQWETKK!Ga&> zUrvH4)F2|bvAA)d?<+@t<)Syj2a7AS-Hk5o)m_zQb85pj|KoU?PJ)S0@H2U%1+_!! zzPQQ6Nnn~LkWqubC)Ze|!ZGV}z%Se44L=X2ukYveGt>-blsw`rd&jdQg`5r~9?$FOGFcb0|7DnR zvLTXhc5!U(5#g8DcI7*pPujft?ie^2FHF29w6oBSf&(OFLESeAoy0Ym-7zggLerYu z?aFt<&s>@De|>X)qMhSSE0c4CU9E}6BwD%%Qpcx{UF+7y&D05Hjxc&V{eD{gHbph0 zgtB1={N<>gz|Dt4nJU6L2>kf>*cK&?Ik0_jI6jLK8}TAAmNYv4 z1y)QohsOK+2(P%C*vMZs>DHgVv_}g2{pETU8OeS-XwS>7R4Mn(m&cB?{jHbaWFd~E z^eC##2h!3!_j`!{B0j<@7$7M>h=v@caT?G`GnS+oSQXsdX++61c_WXaY?A-9=KagS z-6J6|E7oI1rFW*4pNG%L?{3b+Je~S_d%p#T)AWs(83mn+i)YXbRoZAdKZzpyi!v7n zDQJwWy)9Ye-}r6otv0sv9s1UGf;*P9+lBZqm)!~l1_%PopkGs}-(C1jX&dvVOS=o< zF6Idt$rY#_*PqVsqBeE$L_~kT$k_$@5$Jfsyw$YTMQPMeY3XX%X-TZ{ins=&vt8io6eH(>F;OW9h^Gq5`)T$pEy+pAHUOPLD#+d4#@h z!_`$4+_~RWi!W3yNn*HR1RUGQ*>VWp%e;8V!=t*^pUzVyG^|{AaqVNE~i@o)ieGa*9FEGWOYBw4?kT=yG3&?w8r&BGfB^E!L$dt$N zV)+UM;7$9>zewW;nt&_3DtW9Y+>-xQSn%ob@#OL)1{rUeMH*k}+vglo;#n=|F zR-#+XRp0Fm?vbLo6ph?3cj@4_{~{;_R*x%9fUmRMw!g-`%T|)uqv9?|Z$_jf5dT|M zu50TBx~tN>@;>E1wK35&Fqj;Td9VJ4nob^?NSKEmt-wb$xY}QrzVH#jnkYrD%#9U3 zAdt;}S6jkY4&K}RXPRA z(ll}SHqj%YdxC$N4eL8DLNB9-5Lsu1NsXb{U7A-l`RW6L0NpZ^bOnCizhJTeJjsm& zzVC+awyGtAvMbA`UwWfmj}j;wOY%%U6vf#izISaMSS*h-Qk#u^lC1V1^Tgx86`5cD z{V+%JQR~?Gu_Y4*sGgSW0eo;UArN;&DDOxm-!o~lPhR%|XuJ=L`7m{0siBe-@^8%v za3a|hcjPXE9o+>{P#J~a7?8$`)0R^~x_tj4g!{eSGeby!qg`#(A$ zC5WJuiiDz~Qc4O4j0Ff1f)bKSNq5IED)1=X0#Z^U-OUiv4bt7+ImFD_Jn#F+#>e@7 z&vmZf`Qw}m{@TpUUh7_WeC}F%Z4)VHR_B4NYm7$&{eIOh43K<(fZWpaE>>pN{3V!T zrunqw>5_hg)ncEFoZQrCUme($9lJk@j|d28%e$7_Qi?Vf+8zOoa`Hw;z^^&%)YVMw zeZeE1Xnjw@y^B&avbe~}``Hx?JYcm2PTv?f|7})Icp^(AN-eUKU2{c!eGHwu*spcq zx_OQ>u0OX9csx-vO|>LWu|xaZ`p2V%|9(ZU2pqWKM{!0`uzzMPK`l}+b1;7e-5ab1 z)XWe!mSG#uML!An_tCWes1ph^=Chh1y&FkzY+2y5KydshfR?smxzA)6x9*$LFkbuI zWaS)oP05Lg-A!EWSS$R;zY}nDdzm3XiZXdqZS5WN{#-|;pURuMSj7An3GRKTIQ`rD zkNzE_0%mmL=)ZpGplrkWECPTGwkN*hBA;lw>({TIQ%qp@_}lCzvQfEVAuqR!KXDuS zT^A1)15lE8HGf=dXy5j$>7}`!sVpgLYq3rxyN9``?%?-8Ub(V;T%zy%)SDtllpnuZ zfkp|3?WYzA)aLbRhlGUOdPH(h8hAE%{%v~Gg_}EWrb6}YS`C*w?g9s)9IfNn75p*I zTZrgm7FVscS5r^Jx>63CqZ2=k=>hQfqv5v}Tb+8-o1Y=7-4f2gZ?*8(6-K{b&h5y6 z|9eG>0CKI>une%j{Ow1&Y-RLitVUl8E$8c1fkd^^l~|=QF!>lw$B6w)&G~`zI8Ts@5;Ksx`)Nyri2<97;{Y#KUtj;7-9%`+Z5X}5?V)Qx zM~dL=*<=;$V_xj|{U%Dzco3>5^PNeIZeDx}p`1pS8*_?_mF3bDvl3d+lMR}(rluye zWSAvma~;T--7_y*vNr;iv7DAqflN>Ekt!K)TnvUYDywpQDE>j^;}Sg-bsO#loO^}O z8*j05a5UjLbLn>zs_gw}6n=erb=|GIG`11jOYo+j4|@~v?% zRaJAo^9MdT&gCQViLzluKuk>SXXwjZgik^Jt34-I9-R#Y4lAnjqT#>Xo&G~K%K*t< z!`b*4(-2U4RRH@L8XYe;XM|_a!&1r&x=K7-Dtr2gAQv{U7qLF$2*? zg@rFsP(V=ak9+uNl_Db*P2nGyIq4G%JuJpqGlt;1V;mMZ{~+}A3XZcIb*zz9uBJ{m z7b^2Gnmcco2Rk%J;9Q)_9DgoMiU75wjKV5=pE4YyWIfv(I_wbA%=1{(*6ff@Fu_1)72@mW7*6x5koTp6}rZBA=4qZZBhytOtZ*z6rII}2#{BWNerQ9 zVtmN$Z{+Ytee{QM4_hp>UU?&U?$`*&pzInG!1>H~R~mQ>+kZIlm~R;<7U*f!eyOe7 zoF{4&T|E02CYb?oegC00-wXwwm!HZt+{^t|FxP>7$%>uSC2#>?g^FnZ_MtvLxdFSvD^Wu~NGV^AG;)@HQ%J zl8Wyqs-=}$%=J8fm8YlWMR5mKj!h-LA|gjj%^ff#U?*m4Tkz~N=c@O`yU%i(^{)ea zsQq1u%{|t-{G|{(6{d-JoAV7(Sf}C&GM))AIO^&q-rZTnLu%EhO(l(2V77vl#{h5z zE5a@aNgkf~wb+*%2tUBbF*hE_&$w(l^SXSy-vj;*c40dv-~v^{;2FbLc|oexE-=T= z1X4<7+ZtGmu;=;utS3gPmu-7SwZ~nw)AhSqZw)BiobOt^nB2qK z;rqxfgbK}dkS3c@8=5o!82{1Ia9ZTdX95OSVt@HzheuYIEEzEqCkYVeoh+ZG$g&&! z>5k0^{p?VRlF3W`uGG6rrN$Q>=nStmlo|GFW6yt+M^hcb3D6qlm=pmE7`L znz02s=JkLSnFp))R9FWPA9EE7-e!-q`DSS0__IKkF+@Pei`N^5QTr3msgtS)f0+l) z&|2)v4s_+^4dUg#TL_s0Dl-=I?VSruLVfh*K_T}Z>#3oMC|Lr4J>t@W$bECS0NaSPLo#?}nu9yk9bq>fpuZ38e z3_E%*8QEDazaDyk9wZT}1rC`}PwgXahCgx@b=%)6zZb3`FHJvuiK^e7$2gTVvNo(r zJh(QkBVO$3(~ku<_dSXF9Hnc{(lk!WB`aS64hi!rAh2cGzOR*T)_J>)5x=5xjiMng zqwTscx09x}b|^9KsIJXXV)C1fk9b0)AlGJrLnZLVmLp0Uv8;K>De>4U@H1(wMjlL6 z!AhW|P6u`|Xtd{4va-g?zw0e z+nGaDYq-)0!+@0G5|_c-zz_E@x>Ik!ozkCHD6tuecC=q-MX@1J^)uT}vMvJ_sztem zO-mMnduv1*&z!lY97-6RKHRl2(iqQ?t?|lKAFUv4h+FgIe*Cuefy1fE4);A`kJ5u~ z;~w>Dr9ei0CjJX0jzyd5)zPcbv+s%6F#_#K2oOI#ZJh#4COG2GYQkUcXucSE?}#Y} z8fhLAQxyh6&jiR}4e8V#iO-Zo*h{@r&~ahUCUzqr#E}T&^c{WVc4_>=LV*%YDyB@Y z&Bzl#d5#WT)a*zpJRR`}pVvNMf$gooDZ{Ylow=4NevRp&*iJ}0CpDk@I(vnb_#5KeG-#kQ~i z4Jd>44z|QbGB!BGh<`PRaX8rB2;4#Kwp(z2Z>dA1+JV2TxE~?xd8s``oa(T$8lpXwtQe$E zU_p}Yl zPWbyr_#|5vTAE(RoaGTEI|@LJ?;7_K0Gb|7DEq(8;yJ9HW~?vV#Qpkyt}87sK`Bzv zd`h%@ce9*pCVY{_!w6nzxp?~!WhAPj%84jn4nfMe^t;Fn(_5oFFT&l?aO~jVVE3-o zvIDojteQFsE%g;MEoPUqbS;VQt$xBlMr_QXk{SfEj~nfzl_G^*=`4IW^?r&z+*|K9 zve@uKwzdK=*lRpO&+#3|JxUKo_rx3>uA8i?5ovOH!K>3=<%p>@wnjOA}!Y^M;7h5YhL9$~Zw_0J@Ep3je|g|M%1a4_6a9OYuT zCdldN^0@c`rWo^Y?@Fbxd36^^(wc-47POl}0Ouk38h~&=e}9cL*!wkAjzw#WeJ^Rh zyeu?SGU4mcZXIg$5W0kSA%(xT3RCvza~>XgOOc4_sS=z;_>{Bj?v=s450tq^R#q#E zK`deKJNisW^OJYAFEY6@d2DT;xH*kB6Ozq}!S=Vj&-A|MI~LsGpOnq-ozZS2i@7}Ka*k}qVmZ<7^GUwL6= z8z?UY0ntDh6^aWkDTSJ(x^?%`MFPxDo&xZ(KkX7G`+(}!bv1{Bz(%!ndK(c0<%{K| z$h+q84!l$PZJcrsBC&Ti+*{&ywjVfcroxE(v|96o9M}*|UtZ^2FvU1L?ceo9%eK=Hk=Em=uda53II)_tf|b5Z=#<(5S~w{pDe#? zVMkR|o^zvN#hoXbNV=<0p|eVhDcy%)bpz!_(RbO}o}ulz64bLlGc;V3EldUgH@2ip z-t(68jKOWfvmQ!Ut{7u3sH}(r#Ybi56ksd7}F?Upmst2tOXN-03nnS(CYX3 z5NkCMW4)*3iFN1A%pG&-kupd*kl+xcCR+4!-%`nXB}aX{V0)B=A6^xcMiJ3dz2E=} z4@JmLFVv8L{ZmOvubC%Ki`X|gKWjje*{dNtC1{xA;ExNC=*Q16CcpXD081A4fg3!m zfe>(>nYjRYze{qb2GRpOyrSvGc?PKNK>r7X=fR!9u9av?FU~a{W(7iWF7)o^EcNA6 z^uQwuJvP|RzlDsTfB%yfGV>W$8?zgiJJcvYqQ<*S#{NIl32}hAZa&Djp-KXx#9mx! zAc81%_rt8K@O)e#J~YbwLD^GauJeW{lN^)kK(J2}{CuWu2MYQpclE!F?~IT zjqUt{I`;n2e8&cm7KTEkg_|y8_}VAm8A88`cgq`0Flc~)bEJ@f=NxVrzP`pv4-qYX zP|tv2Z6`}Vk@~+B_e9}OY#juTCop${@c+Vy|0>0ab35_t$6~2Ny*LSJPNKPgDaA=3 zdlJL{H{Uu*Uk;qSBmfgSZ8_RQ-B zGs`6M2?>=hL{t^_%V-v$rMech&U5z62jKVxK7&D-u%g$GK8J=9PB%xA7$f#150+UN z`7ulzNMNzhmj#RVL&XVJIa6_IkSp>@m_ zbc%yNAy}E}H%_y-X)svGwLcaY>9XnQ$U_qu9!?CiK~AnruBI9BY2*KCl{f@1m`11| zox7>^y+wtE6{YyJ-(ce~8=D<|6?1f{rFgyDT3g#c|bzszM00 zjHdW>r|jXMIiAEgLIX+CQRxkgaNG@9+0SZmsUks3Me@>Erd++Z(?;T?Kxc2eV74=@ zc7QOMsU0=Zw%~NwSgje&L!bxSZ6kK<2HL&)#8!Kv;C+T`Om9m5F?(PE&EJ==VhNy2QGnL4!CZnZ<(9HY8YAExaPGcuB%M?TF zVHKD*?C#D%9}hYV5vS%b4g;QG-7WZJyvf5xBD5pz*ln@sh$SL;V9`73pCIWnMul6I zdC#a9Lj7-3KKw*F(OCrYvc8CqQE0a+W2M<1M(pqJzez;dg7Q{$#d8aC_3SF$M6{cY zj=7k~FY=;GN=l;Bw$f~PSH?0O`*U~oR{cg?T*B0@ufAODMThBmU+XK@m34GFN3QVa zL|xqyC~+r^E6=|CL^9IAEGwT-G0Gq^CtH)Ithh?vJ(b$IO+~lT(%i)2IlH_}A|N2J zxtOt<5qIFpG(J8q9#;A2(WVFy%VIhPNd^)UKyFV;>`jPx(-2i5lvo};dcRpoMn)EG z)3!X8S!#SRruR7_Lh+TcvhKj}y;4&T%Rkq(AM}^vG(>BYAoG10>4L z>$0kq(BPnocz^el@jkn{u8v{cD%Ghf+c!a16=oI!#H$o8KKi$!Mh)U>Ys)$9iWUuT zhZhQAm4*8mWUZ64Ejdm^yUkl~_D)B-xd*dy4Za?5cco&i@?srgY3=ULyVs=lrzLi! zm-S}p%&SSOR^sGY&SN|GkLkD6Rq?E-?aab=^UyjvI+bC@h!Q;>K5lNxPcX_q4MISg zFM!qZsz3md`{iIfA>wQm8|2eu4r2fMvuBdYCXqx;3t8@e1UVcTpkEN%{_*i#zV-6Z zN^NB~-GTW=Plm}(2LqE_?gA1O&LlL9NP3MP$O#-KOCPIS{HDlGP(wsFI&T*WS>apVQ4oPN!2ALEv zkxcey@pAzk7d_=H{`o8^Au?fZHLo@V^?)F|YBOdZe~I ztcd0p6r_!hkC(fw!H5BQ8R#M3s=30l&Jq*5Oh?+MsxBh|7Xm!GL8-FG=ytZdW@~fP zMPPd%%V20_#iWOwU1r#Nrgqb`0k7x3D-EN2>H5!E0Kb_!Tnx96NubD|kwqG|geJm& zB(+$81`e?w9e))0p(uA~)02yhxzVjdrrZ_Z7rs1R423sCeJ(p6%|7 zgXa(Noz^;90pBwvFMWFqIQPfxe)IWm? zW7A>O>aQ?n2fm#^MsX4fh9vJQv+Gi77U@KikH>ja+7jIRoRRE{9 z%q%RN5lVF|LhQUO6KfF98Hw6i0ZygS&nYnOoI>#x@9xgO*4B=9YNk?C;8jqVRo?n@ zal9;?Z06EsTBIAlHJ?ts#E3nK(B-AUqC8cr)$#*;I>!q@8>a$jq*ca=2Uj|74^bBu z7Csaa(Yfa|_9L^O$%%KR_7O?<_5m_SzEXq^=HO_w*!Dn2AH5~80u_LM{`}>ekmTE5 zP0S5iHOPzlFjO6nF>NB1qQiT1tM8;Yk{4*3jMfJ-ZH_a90VfV~{N4N={?+_lJ#790 zy}-_G7B404GCT~Dx(#%J0(cJmNl1u0-I)bv*l4kS7AqGz6qM?}HAzQG_mmncISzmH zXRNHKXiD?jnVZ)^8xLjQ+Su9};vB{#AW7gcqHse>orprdmuXosTgm9apyp<;-KE4N z`CuB>q0{L*?IS=>SF47Sr@E$wO1|<k1nUVT>dcve{ov2Mp8$y@L46!!0P+kIK7q_wIApgB73$Te4u$5V1U5 zu(p0sbZM)FtC&Q+_oKm|35H$=nzv#K>-Thl?psfZzI;hfi#ILt6N1)!@|LdMiIvga zR2HS&52Ml1ah0BI!!w61W`wDhN+qiLe{Tuj(_gI^Y;K-MQ{-D9+dpyfEYV#qJ_mWG zQc}oSnwMv-TVfh#J?N=EqF4F9_Nx`YcA}b3RUN465Sr2GBcJAJA+!}jQ>OS0vK$q^#vz;FF!Dyon|Y2Atbd*5M3$a#VolR{O6{u+|wwH?uY{> zp?$|dLX(g#qT-E;a+Bqu5^)!DZ`|7tovXAgEI9Yq)SMh;A<~zJ?OP&DR?6VJ_~rNAXrR#WF|x7b>@}_YAkGTaBxtZ4%PCL zc5i(N*r@|^m<*%4KHE(^VSInydDTg1KarS{sSPtiQ{cJfZ>)~ zshEbp4Q!ZrAw2)%kFWu3^{@mKzN@#09mDY7o&oB0F@+2hbzK0Oz0z5($22@Uu#@Cu z@xRIJzc_Is`4hGOBWRr1{Qs+fH<(hCeGG0#`f>UA_$x}RBY@C&-tiGiaBx=hvw`F`OgJOH?vuVQdpkTiEN53yAaYXOe2_fk1qBZQ>) zP`hW}ahLxeUjU#aLG+>9B%%j>MDODV)seTh8TqJFQ4MTq<>#NOJk{^*HpmbYou_ld zL&Au_O=|IMOfZidaQ3RnSgYG;V}_LMZ8er7)b%4Jgq zCaA6G&aaWMu$fMiw;ZqqsX3sV`WRr^@|QBRjh9stDr2@U6Auc^SJXD!2W=^VwxH4D zU^$~HL96refUZ7pLXVhSm_wZ3G7unp*}c833PYhsf{J3QsgI^tPayzACYCUGv1>L@_J%rMZ@ubfNn(BYZrf{-sC!Dg5=o{uWS0E?h`z2+V9Q{N<-ozw zrd?6xs2zIPenr6@J6rRe1bGryCiy+NQs7OrG&f@jRLIGDV${C`nh z_KISr2VkbPO;Oh?EwkaHNeGhTq1G*h>C1J~57DhAGfSaF!~Kq&3$z!BO9r!E8|Xc{ z=b&f3Gq#Xx_cTF}|FR@4@-0_`IcWEwA|SuaxBgd;mYFO7Z*ERa*BE~EdOl+BVa8DL zGbzar<2lACH9qr9q>tedlW_E~u_0(KP-IT83r~%RxRY(Eq#%@j*TQo9L+@*6go=A8%T?M<@3cKAWXaSN5~EU6elI9--Upd1!XOeN{G$r5uJ6!t|O+DzCJ15B|J zH=t7456A|we`(F}i?_fAUQYKO(1=IM2XNXD(6G1fZxrH!RtH9rR%YOP$_$BPHysJ0 z4+_MocoG&wM<0RjhDIp@-!s1n`z6!k7uj$i&Lj?1ytgiX9^pN)4!BU(`n<_;H^6`VlAK6+%x050=58S|4knsRb=aS%*hVu!Y$|bDtF=Kt(}83+B)%-KjPe9qxuHIOFh;> zt)SM!=%Xwhv=Or`oZ>>EzEaO>*`sKfiB0cEs;TM9xHj3*AEVwC8xub=HMl_zA)f>A z(EQ^w%pe!dNoZm5!JZcB)Kh40?6_Q8-SB$5Hl($igSt9?w{lv?>Vuade`RY|QDqyV zgp4(uxA$KEQR0P#Z4Ldq21#T+a$oW&M{|b2ufu_(tZA3}%++R=!wF&NAM>NAqF`8= zkaY@2vD1Y8XrL4=@E{J+Xl+=U>nhQ7&=fe=7}>%t#@X2-4hOk=I364>!LUh!?oKPZ zgxZrrZ^o0L-J=Ip)<=<*p1+@|VLh%3ew@lA4B%fs4rlmL2m+_Z z4p&imJwC+}y|aa`SC6!O>)Ns3)kH3E|E5w_TAZWB-(fe%`52U7~KsEI*bM{Za)(L@&!p+ralDzj1 zh9k}p5#>c#=)QSmGv47=S+VbM4>s1IL}C>H`uXxTddQBXG9D<3UopgvQFEe=PxWxq z(8+UCD_J-AT$H8 z+_EknDFvXWp-^MAYdU&%y0Wlz^R>xA;7ZIMiOYY|er^wmEjNY)YqxDL0n*eaYZq}H zN!OMk$M@8rxYb$#5UbmRa4!)3^Voy)c9jt#FjCj$zS668`#A+ByXy?2KXu&X?i(E? z!C2UN0I%`|gtEZYQo>Q?(RUoSz0#f3?^sw`yY+_50+kS?$?8Vk9eJfZ5Kv2dLan(H zEagBtO`uHm`Et?a;}1#7$*WK1nWh*Kr-G8{zX{%lZ7t0gEHaC)>|V9N{`->NvUXunyw24dZ*FWE(rxL|S>6lL-Aa|jG}zElaB zWY229DJv6S9Czkcn>`8kwft#iLUK{KFuCZtvTb2e9N5-S%d!Y*@ieOW=zL?*ObC|q zwfAP24}-_CdJp_$(1haKDa^-wKBc6G_-IO>1--!Qw==WLj7aGr>C~y%mQc*ceAZ#( zK>W_sk77RJwucz_iB;vxsI&jW;j)U(5UAe+-piQjEdr3T%qXAm=dm}@9h(+@jffN? z%6`)g^RcArJOreW9%6YoA3f***5eEJ(Zs@rJjI(d!A$Q0(2|D~joy~V|8?l-zs@lA zV}?TL>!L27{nt1D5Dg!sheFhOlyT=U(&7yD!zF-RyBJV;1>(Yc!3WX7ZimEk47^M_` zjvlwQ`Ch_L#qYP7w4@$Y#?S4CZ|GtG<7In40QJS%+^O7#(~uvPQ&cROJek zl(6%0PX$%wDrH~|V?-f?Bmlw82u8U;sjn=zExrp*vNX(wi^P3{+)o=W&Uig(Xf~{n;dnl)jNn1A`=IaYZOdr|4L_X^u3$1QtI3fgf9}=-Iv;yaW?}-j&W7; zWa?*~<=4fLB~r9PtU)a>Z7VsW!P0~Ci;4~(4SUHk8eIY)n}zHhRz9`o&waC(_072o z?G{6SOfL+73tjEE%Q`>3?X4zA$3s^pT%#>;%+J<#Tsia4SpXm}Qc)br-m(ex0;dRkgdLn`zWUVQO3kw|DpPb$%n;{jHC=S{IK^ z02&l(cIeN#IkdbeTc5(h!a|iDOH|YLyX==!6t~B|zCkYKAr`yP!E|T^S64Spxl?!< zZ)(I|VE4A1Iz_1-h0$IXz5wEw>3 zXVyzY=7#lkb-vXC_Hx;57tV;;DuyUoZKK+)n7Bu%F=~n-1rVL36wf-Y)To3vm}3=h zH{0rdOQH&sipu=@a0tC+9n^t8SOgO)x$>3wseEE zx$86xfky4UF~{jC#*$mutZE3>a@`P0G<%xJ_~(IQeS!BM#kN&B&`4w?K%92VTQtXd zuOTv;(IFuhkuyAzwVPo)sv&V=rTxG1?M=!C|m_ie3&gwLYH!&dIEPf3AaB0NjT;2^MJ*W@<&B0Gvy->HNll zNpT?9)Q4FB}O1sf1&RIxL6I|+3=NnC~cje_#CJv=X z9%jGB_2SmeG8!j;UZ z2K;_h_6N>SojFEtcL;;DUq*pmNMVc*?QWJZ;XR~Kv_2ea6Tj(oS-+4?5C;9eof~J8 zl*k8C^fXo|WTcar_t*=;3}T!mcJwEe`z0ih{x%b^{n-|}{M)orFBl0^z114^K@+k| z0svR7Vs;4xa8SL|yaf`4W;|eQjm1mZAhd%AoKr9%L)u*zM}OkLZoBIlcax}GeHJF`ukPOLIz_PWr0 zj*>*j9)ctE2f{S~K)vJxxj{a|M;KefQ6QCzYKhLTs>+kv3i+U@QN)p*yEUQT_>G$< zNgXAK@Yq;@@PJ~27hu90&t0IN37lPhK1z~K=8JE+qVtD{Gz4Y zWYAk-=?8I(pOk0P#o06H(t-F!5Sv>zQR@@X$t^l;6NrZ`7ME%BVh!88!86o-XR=`r ze=;)lOUHAx>TIFq%NuTZLEYfc9sZ1b>NA5IssoASQ7D16Ep<9%$eTh(42R$u|777Tw~w9Pa{pp^YJ^# zN%*|LQj_tnE(fU@@Cq85^9rqAussp*Yii&>uoXX2WnqkwfuLRHu+Vf{O<)ewd+LC& z;u4@#UCyuXf(QqR{4fGdJX}X$8m%R09lvD+>coI0=$EBmIMTP@uHY{YD{%Gl-i4sW z9_jYqSLv>ResQTQfW-HkCx_lXta(i)i41}<=r}P7j{yID=??S%;J*V8{r6gD%+hZw z1^t_R1@Pa*7br1P>r;Q|zmap#twH8^Ol(*SBNZe9JJ(-vkddHv5aR z;ONEpUNF%smvD*&BVTamiaxbW0nGAa&A9JdiwE&F!dm%zA5rrT#5rRDpc`TnoD)hj z4DSkr2`7O$tIl(pJWyV2y-jwk;cUJh#YCg1mk_gmv~q|$GfP*KCzhF->kW_tMVOLSSY&To`LcI#pY&pf-Z6zy4bVG%K(o$4rThztDVgB=d znp8jJ%9jDun8s-`9MKf_XNE@-wF-C6yQ#1hqax3A`&jiwmtmx#IcO_u`g%jyb)kEv z4~BS6RLrs}8x}j5p)vtH3?f_i0}>0AFMdf5c&DCtM&LS4EBkqHC86gX#2;de<*9OP z@$1-~_WeI@>X?^$01`4M`B8Y0e*-BW#--|P#O9Uf#O4iS>PCun* zQ+xL^=ZzHE{bIA{4?D!y@ssVLa$rw43YZrAK3)_Ov zv3y2(AWa}tQ|HH}yejU0AlWjRY#$11^+k6fVTCEOs2bQN8E0W!!|1r>3r54h@8_o)2k% zj`}Djq84s3OMot1dyY(VTIR`2pRo>mGCeJCVC0Vjn{TDiO>w#kgdQ?&`PNl-rNM^eUW1nI37(g{uTy4!2`61f zu79L-?U)C?b_mfuE^#2H)B9Y5m%43N$zVCIf0IZRG_oE2HpoCR=KF*+Mz4J}Z9}>Ya!7_jrbbFe4O|KRQ=6c=#tw0!!24N7M{ojOY~aiBR_wdAeXm6jg3ex z?&Jb=%sM+i*Dd$9nZg{xCqaCu>FMAbgsRpW#}pirj5yi_l2G! z)w_1w13_ThtkuMdfYeSTN%bFr6sb)U_H&v=p@G3$z{b_Jbc7`9KvwfXPQ$^F9rF9Q zb3U{pCXT+MPbmwWl{8YWP~tW?1@z)%AA8%LYF^pTnZFK0wQiFX4+$z!OOwagsOee9 zhoc6_h341Ds+^8joy@ititM2&8hztvyUx!}nui`A+i0fT2g zjC0b%fUsm?D(TT67-)|NH$8`mI!i?cHJHNV0~IMc^FplFJEM(2bH#phmKafzmSIIf zp%x1Ka8xnUOtp!TYbr=^-S;lmM?pzRqf7!=Q)aSoe71%kpY9sgaE<2Uq z5Wclm`h44`Nr(5~5Uro#?=*HG;*t3aupDZy!PQ@Sa?%N0S5%Fhm~Ir+x6H#?kG}?h z$C5AM?4|EAXT3d0wi+s#s5a}IkSU0dFQyE1-jZ^w{9L`Ru z@lmoqWaRZ>Ayi;-r_;DgGwc!I%lu)hOKvi+?kvgR1a@(2Mo_STc&3hjC^UNR1W=Kj zo(5NpbJKegWelXm;}SIU+;>O3YnQ+5v>VC}78?&5Dt-hrE$zl(61(3+4N_(gs++0b ztng~WmW}JbmKsRc6V+VHOBc;FU+2ytp$1z`SpyIf+t_k!fhqtH_&qpOwRA7_#=XmV z76-wd<>&Gq&|B*cZ{}&UfHlVe*g{e!_p=B8Xlg8+AYA5cL}2nue-x{+&xi|;emP6d z)A!&EmOfnoFqGVyz!y563uPhZsoTawXJbmlJ>H(D>-9u$X19!hZ&(3Q(1eeXVUt3lDly=U2|? zou{1e&W}BDs7Q*i;Wp={PdAOua}q%T!Q1auyftH|>w>(Syg>8By8kE2v(P=Wc#PBG zR0rZ@ zAK|Pl2{a(`=zU(mceftNbQVi_7u+<=k%}$J6@O7vQ< zm=1fw1Lt6tCK0Kpx`yv3aJ47-MOYi01VrSz)`fH<&b+K=OO5n{ugZjkTn;Xx67-$H z27Yg;ZU2kI@C_iZ@uBVZl>#=1i-kqY)P8T7b?^NPqWk3WW zpOma489tCkuu2FP+tJy#j|i#k1X-MwE3$y9H!*whb}+i93kR zFic4S=wtMd9@!k+;yl1lNqPTV5I=q5u~iYnIm|V5Ll#7*T5>mcgSG}YyukJZ4Fxho zQGcSR93b*Vb>PT?xTo(Kb=J8D8|zxzbCp6&Y&sZUKl&vlann0~tiVlM&n z>1Upv`BXHHmYMnayn$Xrc6p;edse2b)R{o{wgXSGLPJ%gLqX6F# zK4I5AL>zYS4sAgHpl2rO>4u%MscGV#l`;cR!Ve`p4bUF#{^TV{9<`eA1Z(5D8T1q6 z%G^a;PU(^xRkbgo_Y;VgXLA+XJ4{8s60PeSH4uWyQ7ls;XWo0x$K#U=21ckI!Q+Qn znRkTPTqe29=AZgMb1{p%qa(L=>dLCkzYvpDkB$3*OZGe+F{|02 zhA^Ckz-ErRpF8A%IgyAC6=+gYC{Xx}FYw5b;gZmQw4=oaHc^a7_F5 zOzFk|B7B0w9K3N!MjYUro(h|uI~Wshk8JM66_-AJ7ue|+9>xf~-S~VLBhC$1Jk1&1 zgvO?4{s!^*pOf zb~-ly>#H^FEHl+@A?fa0Sg;?495nU5`r#~V$dXES#E3sigl27H$&+Gl9h@14+#X>e z3_7?eOD$Cd@?lVQd)%#XTXC~Bq6vi#M`R3-V4&ZA;v^71WC@&3N2H3I?Z39=RA4Os zbo-)R`|LZc+)}$`!Nk^Vp*Y;}weDrdsPgw%tF|$@^??S%#hd{oVnDVuFl!X><*Qgo z$OZp`*~Fe34&Yve2Ck~%REmdI%;+)h`$7-PtW?3G5+k*kPPwuptk!HC^NnZpDDn7GPb#Q z{d|P~Y}>huOSV@#PMb{{TVV4`Dh|@#VrHR&(Th-0PF;^>n5@~g*Lv(-kiX-gc_3WV z*SPB!YM0lmv}c^$kEG-8;@?ZF+e|Hy>CKma7s%xo?mvHnh_x|1pe^yCBcVEbu5Lvd zOQ*nLIaKhL|3Jl?aCMveqgH8|ty2u?A3ai>cyV1`2}M4hddSYp&RjXD(r?x*pUAd% zWHXw%5Oav;)@H)y5kH@jrjv7RF5+Krpr%$Mqn=$d6;b=_{Z@51EVOTGHNIJ!rorAj zyiIc9>*S&U-|FJn*gC$A$X;RGdNmIagdmEWUa{SeVAj27^0?meyvlr8Zsx8HWwMO} zP$Tg?n`ZerSk-BwWcjI;QR+Sq0*y`jRX+~}vH zaZR`-b+|lvKrYXa6~pj+1KtFXc^kDWH&_~nPtZ7S^693==eH%C0`z}!DL68j8YlfM z+A(1`pdyp7uIX%DL2g*P>fYl|W(it?bAb`QW(6DS2!5mfki5xq9<};>!5kltH&Ra& zjL=8F=iW#<$<(CH)mBL*q~5B^qwHhSz!|dVh1fw2Qth`!PeG(I&x!Ofry^2;g4d7377E5T*oigc{O)hcz|@oUyGsguw)aIy+NHK(Y=xA0C# z%Jug3gDL3R-a$BcEtbX(wi!?LGA;%FXqvcSVzMAf^ z+gqBx-&^3_75;ep@w%h!Bas|?N2f&H!N?UGwjvX4hi8l;xj`KCQ^26`Sz zfc(lcCc!>v#FC(RH(|H?xqdUKxK*Z4nGSKLnC}@j&`nY8<3>zWo!bl2uD%hRa`TcB z2jXCE{YP_27a4?2NrdS3!mVX%|BE$J(Bj?Vumh*q?Zo)ei@{62V#vu&+0*YKK;ywL zMT&DF@lrSMSu-wF#?8^ztfx+!x13iNl3CYkeVP+UJD>XW&*5`6wSS?_azNVrUsRoS zSd(qo#sx$LRHRV^q#FdJQyP)(77&n@jsX)Tq@^1~O1gV6=?2M>qdUfkjWGt_-tUj^ zeZT*=<9On}uQ-3_bw888m4mM@jZp(5ZtZ3MLDKw58&RC4u244gYTyJu-c3mMm_d+# zyIGEX*ACeycKR7H^6rrl2!N!0+{rxc5@GvaxH9xlXZ6w1gZtm;5JOTUi7_Db%=0#I z`?ak&(G+`31CExd@dC{Y!w=^ITsZ7O#zf++r&FEf&Cxj}T5LBf&K$$0j`1?+ZHW=G zoXz!=>a8z6e=LJrEW_ENw?W0iQAKK*mV=3>Aj{$Cl8=GKe~+cHbYgKD9LP@ezz-8l z5N&y_)Tk?CIZa0~KIrvZK`z0W>gCnaYM`c4Nz|L!Nl>-}fPHK`{-W*uNOn~-3YXXW z(>tao4~(Qvf-m!FWLDox~j$!|FskXv48tRSyn>s zQDw9GUB+8=5t$3;r7#qV3K7W@?Q-7zfPm8I;kDdMIft7Z!CVw?{4BpI8_N7$dD7>e zmatT})pyRTE&8Sb4rFwzt*4O<*`i$WMM`u)vjV1ld2#x#iXBArpT1wCp%qLroD9b| zmfyK&{ZSuZ5T)m2KTFfJ{KiYEke*$;*8A(GJs!+gFik0Xy4Ty4bT+YydG8_R?#cgY zu^{S~yI2+3gS(@wdXLQ^3kNZO4Obw-$+vUcv*Mi5fS!oexv95FJ$2n~V#Md)tp2Ei z66>mTBKojUhv%-`ds7_$JaJ~b>&@sCjLf>rCA!C;RDwy%Sj(g*^|?= z+o>z6cUtcoznfRho3;1xFngd35|FMe{n{`M^lBS)Nyw671K#fN8T#A~AZDwf6~AxR zwy36zCb?S0AIdA*Y!HNQ`WOd`i3o19vIL8pCs-vY(C zpU6?u3g%AqSBeY!&+B~gD2Djyr`=1?a`56FYXr}@sm$2;o?Zwx9e!pyWD9>_LH<|c zq&7slHu4LfjB^?`XLYuWm9bcQzw}a5LIVscjjw$gs+BouOw9*R(h6ZWG%(v~mY9|Tyyk$vFZ(DhRU!{RNRGVSd==?4>dHA7b-^8^=w%=16%+oO<9tx$BkgeQw)WZ&|8jgLlZ!tw+^|u|<=!9H5+=h#-m#J-%Sbk+ON zv3qkt7hjm<^Nbbmz}6BYe?MyF6|$$rbv{5{YiAL$r`x~PP&xVZhn2BUVE$4IPn0OjQBx%k zx8~FotHUT?W?=)EZO;&&<-eI_+#PM@qws|syZvhP66KSE+H6y*9dj=R1|G$;#w z$zPUv@ypE(VlrSKC0;4fwOrX2AnNPr1WPX7pE!rE@TtWI|5zg|XlX5JU(S)htxUIv zo*BcQ5a9iHb&QX z%Wp(C2lyU5;tup9*(N>!I)Qm?i?x)ylSZl31}8O7Z4Ddr@qh zM+EVC!9g03=9UsRao(WZ27hv4UFD|#uBn87*yl0Ik}R_6!~Yu_sNh(;L=~dupL5KS z^J6ngNu#IV=+5sH9NHmQ4)2PXOXP5YQ<`~6hiT0?P?)iE{f{<$kL&@o!oQT`dFo4` z5$mN9#-^yPM7cuu`kzAjVt!9t*~G+_Y;SR^*_F}UT+c$ZI3$Wg1R|S9Hz9t@qo}$1 z4S>~D0X>^6Hs83bHJ^emc??VBpAc_9w69Xpt~J3HOlpv%*aZ(n<=vh%o4s25fMM#OYvq0Q zc{3?5T3zc#peVpCYvx4a=jHkLRT_5)%aRD+rXcF16kj5h_Ph&X`Of(^EKN-M|4|QT z?7|zO-1hr7Y(MAF(lOsXJKlY$X7;d_!Kmc=V*dMuQzy!(S@48O)zG)xpEvX}0D0x3i0$hE8Q-_bHy=umWRO(=k2T=c zAuus&ZR-qCZux%v{ucNyYc(Yy5*Kc($oz6BkqdkinYHYD*+dhRXKKVO#BH2@6JfwlFhGc(1thLH~{clXx9zy?x zL&4awp9Qdq=8|4b`J8j0;VI%M`=xqq{VPhX@7tTe6dTu;>ZSs%U8X@U!nP(o;S-8H zKDFCpG_YEeX%tk`K5*zALQeFH+ffP_xX&ZP_GL`-14mS5TyCO(y354?Z25<8oTQhg z5a{!d7W}+b=hVAxw%rv{qJGJ%o${7OzPl-0a>|MtHd#hb&yz*ajrRP%1@FC(V+ud% zkG6n`p2`2nBZH4Z!cgCffsxFWm2)`KB{>(?cZqt=xj5)%-M(D$ni(-+E4RQ}v%lP#|I6xzL8B%`8t zJDyX`r1Fwm<3=|0L?yYb(`4Phw$**)vi|1i>%aN$4;L0b__0X){D0Q{V zF6W%Y_{I>SqH9}CzBQ)i$Ing-P}{nle)mrmIg*tB4s{E!Hsk!MFu=u?{W;oYrX#i! z`4Bhr)?SCQC$ouNt0IY;%3-(DFv{!cgLpP+uU7(O;|U4-avU7#DP3?}0(G#cq3kcu zy2t-{-+EM70(4;btjbEnv6cm3v1V`ychlDFLlp42LpB-~aM1tnGeM+VY_zcZm&zg^pqAC?L+ zvq@BtJ>pZ*gDh=zQBv1n6|T;`&dDOGoBueKWHX5*^NhL1Xx^Rw8}FaVe%QUw4FPYX zCg2fU)lgKQ$1ZsGkH@ts!36pvu;yKK=5F;iP`fB^{ zmVb0q^N$PQwP?wIu>A)qoUEVCuZ%bm-d57w^+{yyytc8iO%puqCYkpPcS+OfXcJH> zev0*+StiTOoiI8OXCG?Of!^@fi+e^f2lso=gOSz6&T_YFl}=}O!Cof3GM^xNvQ(Q* z76Ja-lhR1*z@NbV!w+Dh*JglaPPe92ueV`;X9|s;GH9k+1}F{NdU0y9iCZLhXLDeC zsOgrssWFGa?fLUtU8sN@m#_BcH4O@aWSQfi^lQD8@mbo;U2};7=L4Tj+c2FFeAmx9 z`!9~?!_qvzkWl>p-ZV(oLc11AvJ(5jH$ah#O!{BA0-m-G*;2#dObS~--Sqz-TJM~(uvN8-Nmet#BqKNV>i zP@63L>1uydf5aDIdN|ljkf1g@mDG3^;w-oi_^kOLPjYH4%F@wfu@IEMfN!$l)cUh4 zHDp{FOT==C=z6O+|2rrI$A$j-un@mNb^8DO06qpku{g{`BR2)>JmDD5O2E6!sjI%; z*C}b*sU}v_!nVA9)tdOAIFcheTK!e8t-=TFPutkY%D(k@{H)SN7+k8nwp6Z~*nVg5 zQ-Sk<#@5wN$vL^r#nj|AhrJ1mxi^M)G#UbfINt^nDApB;@-gR`xw-q_tU7|N@KCmI z&u@XH4k5wbo5|ArHSEM-)Ns*hEuP5)7orZ-^f?1~BL*v9tWS?Kkqp(#O z`U#di*Tyh}P_})a_n<}$C+f{>elf|tDSVcSd12m$H4St|^U5Gl&40!K-HR#bc|L{U z9rh|TisC9SQfV%CboH*rbpCE|{8E4=_b-MYu&fb{DEwAgGH2*2d*Lf%6vg!4(Xhz- zez>m^2uJ?2H|H5b5)VukJonNyOlVTv=v&#@GGS_|SQANF1V-o|(3u=1HRjrjoNgD{ zFmyv7hJPCaMTK5Z;mG;?79EAYz!)GX~SL zEaZ@kx&L&fV>$f~`e0<@eIhwhLi=`dc{jQMP8%DdvuQqJ$C{t2|0w3Jz}p0@DhrQT znuD~4^-Yz%&BazF&`%vKZZI(GLZ^K_sf>i@ol)e?Cd6&u*Vc8YGm{tfkMs3MeO)e@ zp#O^_Y-?F)fXE5ZJu$m7npPZhbHa#;{-63J>qvNdU)Iq=#PMHb@Z$k)>W*z*+#_T_ z#~ItMbVARQ_?1EAtU4D*x(8FAo3ukJR(DTxwJ#B`cA2@(#ZzXHdCdjHROapL5^R>2 zm*5a3T-Py(Y}{G66_BTXvhOU$&y3$0%t&2&v267GuaWc@-du>-{WoG*>)GxwAJ}zT zpUz*>s2nH6BP06iBenp+Bc!r*^z!p>zM>M<C_J-xprIi+}+OcF*@Z7q0JzK=9x1 z*cD$WOix)Ld)1#xzR~9h9_x^qTO|Yjb_wc$U1agb-vJ(i6V4x2vAwB{yVX6G_o!}H zVtYM4C)?$+peubP*Maq}0^St@K?Zq_I*{?YBBFqXD!{Wo1xUsA@|^av68B5Oc=e~&4`>RVN!BwC@hLs zxwNMJ?o&BBS9tvo+aK1v#=N+_2TTJr#Pkp|4C>5o=?TPvHUp`ufyh3* zung+P3JcG3xf3TB2u0dfsRol0Z&XVO_O|Bz^EAizdu0 zEuSqO5>!1jwWf;olWm+UZRa4I1gPSoe6^KF`9>Yvem*B~6909zYNehMa`Ace8E)YO>j-+E$bAOAmN6 zxE4B2q%F=apVTJ~4rz@@%X?Z&uBuKEbQY@-m#u45W=Gt7Y#*q|l5`r|akqeOUok{j z*zRXHmA9bHSM!#chXWFi19cb?3)o^J=c4}oO;ED|n)`{tk#Eb&$oV=I5CK{AWlQA? z^5G0FMF*8%)*%LhBbMy5iqO`WyvoX4uG{))SFcsa_M@Pc$Mu#Q_0t9ujY;V3t;62) zYrvtcw8Zh2{ajANni)2w{V}+YoxY_I`d@i?O7D+2U0J4ymrmc#woI~(dJY|ZQgDv* z=LSBp0+wT9=s|}IZ&9fC%|Mj*ulKQ!Rbk)S1xhWGv@4ien~KceIUXz*M%CIZ((k6K zwU=zhjcRm?{t{|ham8fPb9*PbQ>LakJsdvA7MZ%ig}af0?+ujY+!Y)34nHQN`dF&! zS?#RJ44z6I&j2=Wi^avQ(Ur*AsTe(>#yhJf_1DXHE%M=wf`Q&c#Hp(JJDCub%s>xx z@0sI>JlJxV!>=9FhILl+@->6Hm{~_B|g7XdPG9o}EAI4xOzRSH1j_YtOEl^wxB(bt=fm@!jcygC35G(8axb zviDRK-s*9y>;Ga?Cww=uf_|SL91F~=eRcb}`SvN$&({=>iHleEs~dLl?JQtibGB=( z@r0baVMP-fWVLqI{lFme8e!4}ra$|{F82qYtB_1yytMcMeUr%%amQTJ?s9M1T%>t1GPkiDYXg^1 zej}x#$2L&$JCPA%A3}5ZvB^3|vN97-LQ^>$zmCdF!MU17)%=Gb*R&^!l%3rjB3eO~ zWYP)G;T0yW#w`0oR8P*AFw(z~fIJ!sT8qCL6qdDE|9Z=xFGb@1Db{2WO<;JO##0mC z7dF!~447*-S&5{};P|cYBFZq|%Q`PEry|{jBNUHTJ?z4CTxtpY6H+$OSot{x@X^O- zI;S;D3hCowpYs{;lr}9KPuWa4*Sls>>Juzt!3P{cw9;E%)OaZ#dGwb{%Eg9ukcSQW z8Kyp$doblLwmicHC{wyn&Ha55Puc!P6iZOC`XEp0SzpxHlhc}N1J+$aTNQ~Tk@Jr+ z_&MBTKh)ni(~hR}F`Zymf}5OmmcNs?4}Bzhv&Jv|w|N=IiIxu`ZNuvy^8Mw)5>I90 zx5ah(sf7KoDG3u^LkZJmg+Ad0w~G0XAj?m?ZQkT2yE!soIl500N5P|zr-!qBXV5z! zRj?Y+;@nI*1^=~(E;h6WH(_0niw-U9=z|B_Yji;q?77LM3omOgL?P`aLQk|(0WgRi zciQJ(*jI8&>gCai9L%j#{SZLtkt4D_7Sx=#-M#$0gYV3%p;F^Z1z3%7(Lam*k3lKz zBqA7d(#2IZ9o))TZeb*Q6TO7qTE*NnC{P9_W=Ziyyg(OLY5?8#nTO=b@W(M&Jynl9 zPSqj5Nhq0%_+ltBBNA?S+iIboQyAnFvan-gZ}wMQf=!t%F4s%ORR6lYw*)6+0mYbe z)uIFIF@dy#GSC5)!wXWbF!hudM`xw>ij%+FEquVH1bhdWsu21^zh?Bx$#f-Udod!{ z35<7KuUpw^IFD|}+-5?C+6$o8R56W{Bb3Zj#F{61*wrlbx$)v-EIuH!{3yt75R<)x zj=_f>N%=TB8!_gmoXa>jR`J#6;a42hC*i-XKdw(|Dt#+cPSJ{%GQ4S30~=O;3l0dx zlmLXqtMOS~Tpt5|u@1=asbA-sR%>=_9ZqXZuLnL^o1ZW!cmTN&+<1Z06gy60>PD8d z^l`^$#rg!HH$G+0=E(;^s$!1bh@ZX7%dy^FimVp?*}sERizA7+)vkgO*|nV2Cuwk3 zg&gy@uQtOYp&y$dP{`6Hj1>J6e6hfRXzng7j-Ccn+*~iH0+lMpHYcX?TrM)ag>|lO z1P^P}?}INVDu$f72L5rm`^c@K{-)%J((L}PBXB+i7ctkSJvoj?rzW|zjB{muhF2nJMshwi<*1wZU&5tPvrmrKpg^NL-gwsl z=1({NKG%)jw@Z6MGz8bTlWGT7Doa-&NLX&? z!=r{s88GmM%c0Z)b${^cedo=_B1c+cuQ-t_5MJwJQ1S8!D5Ku^q0M2bXO-ZLxYLoD z_lv*Z`MzzwMXepsOz}`unfvkvZiu^cUq-|tf{=eiJleL$qb8>k{Hp_J-DRcQJ$u#P zx6Lpt&;aLMf{t;W4y;Q*A|O5o_p8$^sd<8`OQ4M-;>5?|KG2rBB5`BoSbVvo-SZi! z#M$`mA+Nd0(Fbi>+8}iaC!jZ`aOPNIPyCnj#{+{X@9@PAtCL-%Wx{l&Z?BU6z&izr zPG0XL2>Nud4p5g%7nNfp(YdGqnp4d!X*~f0kGRHK@4WgPSnWKwArQ@dfL=kT{UUQ6 zy_<_(nZ>8Wo93q(XB!--o@Te<_6S&&sNuxt+M7K3+!P7Tvh7tM!W?A?!#JY?Ouqby zGCz!s!hhl1ZHl!f7>fTqZu?EU#g%t&pN<22u)oNKR?5llDbz48%G(IiNIR8R;*aWD zXg?cIh|tl$0TsB}jq}}Y*V~+R6@5F);{&k);RwFMb>pgltkL;g>Y6uJ=Hi*FB{)(E zFHoyM44y-^|Au%8cgp02Syk~(X$rdIvJJ|_)S)S~J+Z?o(lpKh0M^HCC-KB@q3!8a zgHYdZrHx;(I1|$c2G=XzBB<<_Re(VTauTc6`~IoJBh-t!xMKqv?Q0{Znbv!;*mCzh z6g$Pol1AS&!qyz8TJYe_rdbI-OC&0Tt5>!d`(;?vPfjMf|4fAeVfQNP(XfL zzq|-|EUFjCH|ix3?NaG-II6YnAvu z*a(Q9zcKP9$Y*K-CKUiSZ9j2r_W?ZngZswC#1MepK%1Dk^=iXFpE@wb$>kev><{lH zQlQOk@C@F0%Z6d-u3UohR4+0v)2=0MIyHFRfYHvEf=(d5>VKM6J(4woFM6#yGh|q4 zbzTWaE$;&p$FV$uJ`dAdL~9h(_A~CLDb5c47qrJmr52X(DS7h%V*qpmIxjs0pue2~ zt_SM8J$k9o-=;lOmK0*KBPpssYo=m91uiIqE6M&SZ7L#rh zh4SF}-b{R3{VF_12~U!NW^b-)my6Qa!N&2se@2H~XBsp5sK9P-P0HK*#53E%oxBCc zJ<^2Pg0sdzP06a1&g{cEi9l2(af9Ht|E{I;-OH@+Iud-v4NPvI%iifmlZ*GvUylVh zUdU}EP97`@yf2`pKrum zHneGQ+?duYrsr~BQ8x^%HTGDuy^D@@oSAt*nSPa%WLdSR5Sat6_}u**I)`3Sdbcz& zn;qvBm|=~R+*A*1nXFo!y$6**yR~RH!Ut;5y}8RZdfYzX-88-Zy(4HEUEc|A_;p0R zxA1MLh6$izzl$g-BeUK6foTN%_(bV=uWIT7FQ@v=lyE1{5`0nIztV|=sXsiL9k)?!OsEq03#U_zwhQVBYa%l1N2p#j-u|&7IC%7q=;XG(IhY5( zeCl#uTDS}n+(bt_gJqSh#xH(0zAC`?4!%0!+aByBK-Sx8`u0YxQl&7BNnLvlRhaqz z{i(^N*M1=^ObYy1rqUTabCTOqo2**Uv2vmscC(@LJcDEUi&Y1dO8untOG2qNWDQ=yOr;CD>u$&tTImp0OWNVYcArs0-i76{^~jRME%>t1L%gZ9E5-;wSCr9RcyWx99_9N`#|t!k|yt9 z`UPJcYZDtyWdSPpL966K=7F+I)_juC9LkLnfp)lreMXzj6w4e&zi2q7t90M3x!}Pr z18HBZ1kri7l4SX*#>rM|<=_K0h+t~-N3q@)2Tt0K)yvYHv>?YGoyQCIa%kFHsuzRe z^M6YRf^X?Q?bdyeEs$m~DbtKuK3pl#j59dceU72MO*|Jd{<0i<(>$SZ04*FaJH`ek z#H?4lxa8!72BOukJmg6^S|d4g&IfrvU#joa5O!mhS7D5<*NvC16)MQf;by-n(}cMC zE}3X{?(57htmUjq!)J-GSGJgPh#tIMds zZpXZ&|0fDP4Ox+R|53tZg#Ujjn8mXi5>zVJvUo>DLEt650$gIAz8MU>7Bp|z6OY({ z^jVlzc^MdKl=XgD$4f1>R(!Mb=9t#D zO+~LNnbXgjO&n6tINXlkI-SHnq@hjyJ+C4ok%n;xt@KTK®=k`%yq%Y*IUF0@Z< zLlQ5CTboQ5TmSB!(VIpL9$4q}BObP3>LKN7l{*Q|);aeMw@;ePk4s6^_CL@b2@Cjo z*EShtZJe(TG}U?wixtP-yXg_ktD-ihSz<-ZisJ>tW_Ee+S;q%2(bw5~U7#$~^J*+= z6PDRB8#Xmy6f_Ij6?K8cCY?F@eN(6Ny6gzi&R7f6YNN8}XjHv53Qb0F=x5pXFo>^$ zw{nFkWI0fs;#^Ppt~$?V8CMME@Pf2`rxv?@a3JjuxoAvtHaW)B-9m~l-~BeQ(3GbYZD8!cqDv&|ln)A*miEP~ad^@om9* z1^wYG;BS%4}F*?rc&2MM-j3`wndLZ7nL(gPs+7 z!CJ3#6ZWJaUz1V=m!YdiLA;a=IZqCI7ZLMDW~GoJue-CQwB^JJ*h>ow8ypcXGLwOA zw3I6^MYGOb`6p+ekS&{7THY%%)7-uCqAu~JfTh{icdOGI(K!RdDFc-P{7EHUH7S=3 z-onERIs%xXc1Tfa!24qPg(^W0@1M&}L9kB|*$%*pec+i_;Z-8Ka2!s;MR~uO?FYA3 z+e#laVg-}ChV0A%?E7B*YJW)Poj7n{4^}%0`YRnjZ-#?|39M`52Jf<7b$~B!s~mtA zr4;CeI@w{9zOSa>YGk{JlLfbTRHK!*F$~$c0%Xao8qAHWPv|#5Hb#w2pQ5h;Bkxjt zv`lJA_TUcn%ia2S3%jI;^Np*elt14qE&TIjgzkU<7={Jn&hkl`93-NT50jFGsZK^F z8t6E+`L<1@ujFRjS|aY!Go!t;awX;uM?9Al%SBF`Rtuj)(H)!*w*vz zXL2$@F2`|?vb?}BVJ^?j#M|GRmOO>iKL&g;!978*cZTc|^O%67<*b12Jqy+fN|rY) z4AJnoCOkw zE5*gABe$jEp)|GR$=1!qBf5zR-(AyH8;O0c1XCS$*uEethi%~H;#qD!0go0=hm9DYB_oH_KsaFs--9EJ+lB8^m zrEf+KBTXlWE;I2XdcMD|+m#qjX6w-vz9`|8vz%X~KYs2KgX_`o71t4ZCN%U} ziGE0q8(u#U|DY#Gl|c-^zQ0RUj$mf7fL71CrIt2^u%`HMrB-;RA~`!9dM@dgIf^L)@(`{bQ+C! zs0$Wts`inYLTZ`4k1s4TUijm^7N%Aw=OG!W+imnV#)16OjO*)0wg7cjOWyi>ohh+t zUTJcHpT<(BIz{FL<$pR9rSZpO&tg)zmnV!>xK)?8$sQt#LkFjyPgqMDlelBxA3)wV z&W^BXNO560L@ZlPI@qHZ3Op>u^i@j(>gGM2RTC&6A~qCrWNx=xA)%cW$s5wUZQor+ z=fez{qd)?EPP{}thX<#UP#UXwEl#U9@L zwk)O_vg099V?K`ihJMR=@p*P%-)7#%)d_O_-uo8AR>8c+CT^<(@{sJ839UORykR0s z^vKDkx;*Po3hKMVoDi+^&~v?H0O;~9>^&YKXiB9cZM}8&AP7POXpPNfGz5S zR_BwY))B*}V`#xMNNM%6ljvIw@Vdp?Z8sBmfwOKMFXC1}5RjA9h%8!qEKj>SHX51sqS7-%(3<5QSAfssP{?ceB$Fln1O@e8IvZU&vVd6N z!4C5U`(47WwW3N!K0{jAz|F7kPQVLix6yUTbXhg1a@H-poXQ4zJuv20EUnr3b&?P= z;Q3;B_9Z9h7&>7j^#0m{QCc-07&z@lpifro5*sY{uRS9T_*CmC-G6VKX?Zu zYfLT2HL>pQMnV}0IQ$sn9^*p2=Qo~C+UisHBjVev%f;J%g%h`2K~`mI9)k?MgfxR= zLYu>7Jxa`1v4k4+t$JT9&D8RBs$DEEe(X8H z_}|I$C@W?E=nMr>kK@Vf`dlv`$Qbm)kNl)bhkP|<3{e>ryP>NtKz{cfG1-JK_nA*y z$o}3tZD~IB4Gh}cWY{v0{KAC|cDv7HhoXOs)|7Ea1@Yf|ANQGWkL8hPH<9#L+@#O= ze%4QwtX1XAFBHz2ZjVh92UyX1Jkbw<7U_KErn$*xq36c%Q6l-_Apl2U{}zFW4sLI~ z_FVVu;k26l>fD5mv0okOMoHAOMZCVb$aA6Xm(U2cIhhplE%xpJ`?ef<;?&c^DsrEH%hv*v4L3dSOZT&qGY;4vJ;UARAOuL_5{PLl z3LFki7Z*|SrvBNTy+=)|qNj3n+!ZYtU8U8Q@3$F7Y)c}?*jc7yNjZFwGSQJJNA+0} zZe%||h?B^e+eRHVH^}vc3KrQZrRv@z-OEa8 z^gd7Cd5cP3Eb{H1#fFH`Mju&j*lp)4x#yF7Pn}oHAgfC)RV~fq<{2c&xrU3x_wNJ9 zU3wQ`Iqt%#U8|hDVaU%UwmcRxf+>wM*B?6LTP@2T5po%9yo^Mr1AH~uwN8I1SbbMM zTHgD{&NyM7LAN@l3iV@eCU%Z}t)$(&Kbaf*Zq8tPBVQT4+AhK~PBCP}1ZN?n2{js( zayPG$^mMS}XHC{)FVp({+D`IawsrFJ^4uUX4iI~^PbMwlt%UDD@$GofA7Ul>-u{SpldHX#gC5G}Ot{(H8#c-(hsYDJwXlP-D3XIbtq0NI@z zwB1_uw2$x*?0;Zgm$$cM=f2KBN4rEcw+ z*ks3agLfW0$`ZQ%D#7s%QQ0%Rc3jQOU{XB$V2d4;x(lHjuo=+DEH(4lNZvRZi{`9|Z3G ztf=@kUwDhUK`oY<>0+cu=|`-g_C;)Ge?at@4leR8Y7H&!%^O)UN#NR%wj!(gTE=$Z zGTL)v-hsbUMg+te<(`)k;%f~pA^s(4KdQ(dk4wMp+3VMhSC*80Qxy6Q|h{Z(uf`tf0e? zl%=2VTB8Bup*XJ$-Y5ghIsLP#k2~}mUm}zK34cKhKXKO3Q>3(J@%#CD0oz4s(a_vn z>w}rnzD6fVRF|NA6kn68Dp=xbs-o@wE%PIX(x2UG&5GH zU=n>u%Yt6y{$RFZ!Fk1n`@?5=IGl;?z2n^dR=qvbfNT-J(8QQl{O{ci_A)-#WPVBt?XYWRG46-F#0T>DRijp z(Q4x6F=?E&=9ceO5VJCuoOY;)Xkt8le)>biF=5f-V%q9^z8&@q;LQvbG3aMvx-Y;F zz8<2HwILPT;B78XK;Vg)Cg8joxb*T?j|!foc-Jzw&XAcy2x}A~sis!!o*qF^RaY&?Y#;vcCI5!@O#yXpbg+(j;Qn;}M*tt`YebHj zUPZjLO1JK{(}~2`!RpmYZ~hI0uRD+thO7KiHNAnI%i7N4Yc6)T`($`&w%!Uk1Jtj)TCU6HLziKf1He^(a6@kj@LG zs7cLi480UeF^VZCMTXghg&0?rTU#=|3cRW@+a;Lne$SSY!J(zf-y0>MrQ#A9nn8aO zz?o<+E#+)hZtu6bm}32YMofibU?QT6#kx(CaFbOjz1_E6uFI6BMEkbqo3zUJI1#2~ zlc3Svkp#))&&q?5NvW!xMQPC*^;z=aqGj zvvM=@bA@zM&nBYimMmQ^DK4!*EUS+!;BL2Ztm64PH0M^<*y&grI#AXjqH-+^)&|}p~$T` z6{S=y!gwDFa>7aP1h>K_N2gcYANF#CE%%koGtOm}ni)9Mr^{l0t4KU%dmIZRW2|^S zwBG8LN2KW~S3fg>rbE+9rw z5k*~Acj}w98l79al~fcX4LCb4fvtSru{7pJl#i3ls9FQlqX|Y*VJ<7VxrZ&BiIW<3c=sFnZw!iX6b!;LG(y~g?U2!7&`VMi+^`# ze#qhFpJ$q9+w{`#ZM?{_>eZK)fzam8D?eD$(5tQ}_QIUQ;mdA#sKRJW>u7AKZ5c7i zK*u#aw?wYAlXY8gz8RI&5am&L_^FAOiQk{ahywm@YbZd>060UV{GjJU4=8@}2jKL5 zMS!A`r};D!8$mhr^_NbHeCQ+hIZ@c1^fel;^76eg^9b!RVFZPhq?Hifx%B$83?%MrHpK4&BXLIzqV3a~mkLp)$ZEDyV#YD!u>02-XQEYBhh%O6G6@O1q+edNbSI<+eUy38v4xpiZFm4yIW zy8{DSK~lv{*>o)Q1R3Rzf^hL3m&+ykLT{M*z(L0=56P3WBdBBy>?-1pncZk4@^^}2 zex;r==oj8?ecg~{2NNW~P1wT@s*7gfzH$lI&~f`HQxP{d;$8!^5Sk9}olZdCOXRe@ zG*RDS(^jk{m~WUdnTvT#^0Omc3kZw)7>8%&)e4I>1HRu}HI>(XPx`+5`A_OQk*@fr zVwpK2HI#^g=}L=KzNkAx_f?Ji===p~o@MAE(hVU3@2`etCtvsVzLrhU3-AtQ80OnS zQ76-eW{W?EuB5plLgik>Z@Tw!Ir$iD#3k-yUL$H`e|*Mcm%rPoG)Y{!_StkJW%P8* z5A9f)O-lZ`Ae(%syDee?3I)Gqz<%}bj&~feAJW#H`k6UKu|1xbtBrLoxq3O8MxMb; z@ziJFM;JfBw#;xoH~{sHyc&G#7bBq7eVEvplSrXqr{9ka;sS)xrw)az4OHY;@K&=&H~`K8yg=d5G^fuO=3 zk>rS_v2IB(ao8KHut)R)#ZG~K<(ewq1#u-4ntagJCeHnecqM^VCV+L3ydneN<9B=q zw=n39OT*Bg8ae5_uZ5MN7{>b~1lA>9Nb0t!~=SBXn1$}*RMw^7I|Kld@s!l`^~ukB3_?M>|xB0)`~rytGlT{msab2Y1)kFx|ll zB^yT#xja&+WfYp}njRCgwHRZne;;3Tlid@4sIdIeIS$=Y=orICH3_*-RFW+jrguBX zKn)wZpw~n|vhWywUm&$5EH=Kzh+k{ErTb(FTkn-;!<8jt zzMIXj!$lBKm_@|yWwvM~+x2zF)qa#hkN4*L&7nhSPfe@dC=T`&D(bM?jlTFK_X^i$ zJvTWjfs^B?x?+Vhc;@=G4>hb@M#3dlKU~sxBla$-M3~A=2Ckpvf9EqC)+6Y$I>h22 zgrD#E$Ynb2@7-(bgbygo4ul0YNRDCkHLU*YcN78M8l32S8q{<3r$b3#pR;@U-Pt)o zf-J4(4LEZ5Eh)W77LtH=pv7xliFx~}jhS$bJ_j32{*DR6!u8f~yzljpkX=6UcqA&L zHe2DWxxZIXDRggh1y>%&s;z90>fu~5D#U({Ee&BP#@sP*IvRkwSs)iEn|gb~j6>i>$m_|UrU>IiooaK3)Nb(2$`_;j6%0DGH6yZ6i{d}edV`?K4jBt7euhTO7 zNWb0DKGxm?yQQ4_=Q{@Wf<3hcd5WQ+XDlq6_cq@i zzsRB=^E(?)GM&EarbElYzaworo>gaN6NywQ?4>?x{enx~^9O;q;vkZoALAC|Y1=KT zD&yQt>~VK2(IlF4eK0nZf742Dn8mlB1?d^dz27^N(xyFd93-^Kyx#Mj4H~zGnn+jk z7#Co|AND2hs`xOB!qFlX8D7!)Ksxa}j3YngwMn*^Op~a%C{rUp`mQgUUUIE($?s{* zCm`w!%^$p?@fg-G+H;W1De!Fg(8J|}8Q<`HX=D!@aVc7v!42%}I zuyDUUOa29XWx(DCil|*X=<{^ARBWTXmcKa_fgopdGvUc75@MJo=u~y4`SR89aB`k> zy%; zuZ9VAHT5lAc!xhpdXVsUK=oz+W-A!@f&ixdTk}x?{Zs|9Fx`N?0qteZhf(I`g_uX@ zdJ>%rotLZIP7c0MYmHZLo`g&Gch&jR_nlcP%JiLsgwuKtlA|Ux1}4Thc*973q_Xti z-o1>p8+rVYS}hnJ=mOncc#5~1AUKVtsO2V^*xXN;dUd$5FG+&RntRF!VvvIIOpm*o#Ncb{aDEWh%CT7=k{Mzmx(syb6Fi17j zL6W%t2pkoZj${k3#bF>fr)UlKlyl!B4_^l)EEP#?`NAdkOjw-#;>`QYV&**o0?v=v$iC+Z4)AAqpRTPaE+Aa7nMyTVQIv zfXoaEkE5t0(Hn_2ysH}b8 zYPsH*54-bAU`)nk@HkCUqSk7h-^wHRt8!)~ z1%}Jv9|Gxh|I^-ge>K@P?fTfLf^?MLK}smnqzckIN~nSmdT&Cgk=}a{P#_`#N^epm z^d_MS(vi?nT7ZB7Ldc2lch36O`Of=3|G;_jQ&!fx_nx_D_RQ>=YbJ^bcb_nhA-GR5 zW(#TW_97tJCajHoTIclxn>aJQ2;&Ofxhw1FQ01Rd(FNr^8NzajR-8F*MdoX=c8;i} z;{v9pOy#>Vlo*}7NkO&&++dhyXTRZNxn%BW2aXNZ-^cdM&L{8O11K^95*-u3ZIHv% z%ndizg%rQ{mxIL0a|H@SWwh8dVMeK$?`d9?ELIpb4>);=Z$4%3ZOo`<4=&C&-oBog z!{8?%r6(-)uWPq{&r8f^F+9SqoG+x_jbgj;KoC&QEu~SHo0ZjbI7KYcD>JKWSeV7I zaWEfRUDg`pJ*nX2bB# zhu@nKsoTrztWQLV3p>8LHqtr7eehr`7{d0VAI3iGfu(TM^!ydGE&JieF6XL3#X4}{ zLEc3zxC+5-b9cavnH_w9j5LMxow8|x>APE_LUtYH8^WnM^3*d=M((436f8C;`tb!V zoBTP!@>e$z$OTsXE{2pXqAT|0?$kGFmA@Li@KMXwgQ;wQu>vJn(>9K^h@Uc>aAwu6 z!@F32BvFUx9${b|EP&ny%hv;Bw<#B*0m_H;mXm(6BEpPzzc)<`XH@SgA2`}A{+eXZ}_)KEK7-cK9T zNuQ5e3hIwLPSW(Sg_;1nJ8I+*X1Gl8*`l5jIY`eG{%RU1ZZFa+mwlNryyk$FUbNOO z{8km`M6g-&Y@=K~H?u>#5BJtSgkP_CONBfpxJYPhFoJYp9$*Te-I=6yL z&HRv9%ZBBG=T6dZi!_I4sAZh@N1SSX8yrUU5ZiVq1=5+*+j`!;xJ6ppnbhR$a8ub9 z{ni7Z{xPz@$i8~Irl85<(RUlKn6=CgY522qCSlX~THg&esm=^2&8(_z!p4_ULLRKy z{bOe{#B2JXKeRL1P&-6!UVN1)g)l=I-I znmB7xTNH6M`?HN0L$rQ>-IC50Zof2AQPiT*0YK&v*#VvZ+)J}*-ek&&yKTy zf<}u(VYufbvm;)zvQE>A#M}2#Vgm98AO(ct>{eCCud{mGvDESFk)%Uz{_G&nmGjkI zYBip5HVFQgrH{eQXmyDEuEd-Zb`6n;n?CEr2KS86xfUl-W7DQxnLLc z_Z5lHKn#b)``j%#M)phGmc4EZNRhOZ-plf&~;kA@3 z>QzQ@dWUKA&HmzE+fYW$4RZ^zN>=QaqQ7vmW3=@L;rKG7uILwh@Nk8|vzfzo$%hP* zi=9VpOGq(C76rNHGt@WhDsqI3&t=ZX;Z{M3$#TZA?CrP#v{d*2|LaWr036Y-@|7WZ zvZ|%{G7g&p4p1@D4=;V7?uO`}h-|+6Af>Qr{&}FBSH;xCC;wgL5^%))1cOHn=jf!s zH?r(P%ZGAT*W)_)aoJex$L+PIix>Mru_lhqK>>-auQxiXq77p$xt`4ITS{}fV7Il3 zIt2)&JxU8LoW$-Cjv$g}6*!#rpESz4$~(sZh*kB#?wLM`P_9kLN5$Yhv*1H#q0kjg z@XN6`CL?()bt0f3`Pl1f*Qw9KsoAyI07={|I3*<396WYlz@htP-61vyPLl!k-R+jt za)~#!#y1HI)ZI_GD1U%xJ>E+R5rEcmf5st^IEJC&JjP$qYsy9;8}435YG61^3KA}a zfwW8V)Qk=SIpQNhlV`+P-XXrm;cNn1bogJ*kixZ*wfQl!h12+=P-kyzaF9px=9$D) z5(nVAASb=#kaPuNqbSVpXGHnn>UpB!czNcq%8-=gLedw%JAks|sfIY|dT%$k06n8_Q(U zLQB^0vQUjaAsa;uSd2%7>K!@XvT$Ke4yTQ(v2%E9D`HcrmXgES@V&lgag{5%XDny9 zFF2>)_v$Mq{UQWBS(W70+shJl3wN2+@lq=xvTpP1^7H;Ua}P z+nzaGNZuG`z+rR9%9Hv~n_Hd=^8|vI_jRo`USCQm?oDKcJ~82$-L>aG-4eEWe!0FS zo%BP4LgQl=Zj~pfiBSiVCg!36=7Z3w8>(36%hUpR1PdQtSvaW4o)%U56)7qBctiSZ zt)E}ouwAu)UFRccy;}KHyfajzayP(N4W#5HbE^e5C4Ea_mWnBG2Cvd=3hu~o*@ax0 zDJww^rTBu>9HCWD#w?1M$JNh=JhB(RAdZ4W*pn%i(IY%3-8rTxecKoDsI;DRnPXVL z3|O2z8ax4$eRLOYs*tW5^5NLm@_Fj+TV~8`x1BBYl;Kln)Ki@Wc8YD5(${CyE#|M?PkM?1y*~~KR6UYP?eF!qhJ}948kxkKX zl%0aL#>60nb$Jvi zL7jBQv5bEK6)?WRjy&C`WUAwpBdd%kCYbr+9rK*~2>hSe$e;hOJJ(niydit826^HR zGEMk?Fryo9j>z--SHUwQc~q=FzaKi`323Vh$j#dUo@5S)?8ufb?v%|kBTuU~W9Eg9 z&n^A|wPuY0ARo{Y6#O{lNgSO*_EDwEMN>F^oy#ouCIg`B@*!e6iJ@oW6@%+&@ue}h zPvrx!-ddja-nIfP+)(JpnXZr5YUYRUs&%vc{6m!L=CaH^n{H3<2fCcg+Rzlf+9!Ug zs;O^o0{-;mFt-;Q);|TH=SwYIfTrPWTwVH3I9I`w^C&A(2oLDozoTdn)J z2C?4fPXV;J{z&kV&EW(Ge{~vWUpL{UsXW?lAzXkFNFvuYmWP=){8&hdx-2QWh79u$ zx^NL9H&Cr60o{nyKpvza1z#)B?cdk3IRbj}^1D%n;T(=B+?v|=- z2?z7|Ek*o9k(t&2w$xxwlDCvnA_sY5KkpH&+~@M|a2Qvp-br^mEQ~SnRaq7_w!L6n z4gA4ECiB8C<5|v?{(DDmbPcj>8rdk=vlG!#^)_+S;5Npd-F2+sLj>c|7ls-5l3%Cm z%c~2NA4KijV(JF&lbgBj`GwzBaCdCS=gVK)Nrnu3y}G#Y%M?Cz!i~11b=znQ>@m~P z=*f3!-qcR~(iB)1w>@$ zI>S&ZQm3Jd1;hjBa7s^mG__Jqy6xVN(<3(H$Yo8s`>fMS&hp#`aq&*!jh&2htqMLt z&T&*7UyC+;6*T4)JjVR~!nJ!1m)ad&lqD{g2pY$;_MAK<1u+u-TAGvj)}%gU9Q%Gl zo*4)JMdPESCbahl@)CYu=YfiO$orqj4xX(h$#nYjXe$s(PQP0cZT{lX) zo0x_{3O>*%;eRDSw}&z-G!IaDgb6@%L|dT2I3obLkcmpWw{94uGvLTBd3v1J={k@@ zlC&Z>b$`)1pR^vNm_sNf=zCk8aRN-e6}Picy^ixWV%lk%j8=V;JZ-EI04)hh~q22#2^A5}uiCmWchiMOnLUG|!Q)y%k-xZE&Elqg#y#23C7t$7?K4exSgh4W<&3MLZWEJ5@M zJk4@iyik*La5p~!kFN<246|wr%hw&|@21upj@;#=RTEr1${o|@A2TPjm8f8MbRy+? z1~hc)Y> z%C+*dgz(5KE@r@$2JvUsL7Z)&*78bJscJ>FAyXl%MN)vZdJ)aSuYFTIB8q@keujCz zeKy4HXztfsJhggq6#K(SQ;~cHt)bICFjo|Hg+;8SF9C>2TNaA604K? z&wrw#AFHeo2cAt)m;lie)x;Pj($tPBSm`uRgQ~zIhk;6eFCVsU?9x&3kOaI5vVZli z`VaTF`XIftlHVa{3>U7nDmaO*$esWYcn-Gz@FUB2Te+iJ=5jq z@&HXXTe(vt2#?eBv?Pc+W)Zzh{BFa5b3<*V86!Cl6pI3nbJg!9yDW_pW7aBL$tH0s zKWj6hMFlsa-&KhW9hOGi-+H{E!kVt}4eDzP1 zbd8MxuAr5hY0&nO)LQ%Df0UQ}%<{X!;E) z?}Us1hH9BHJgbBT{70EfUKI;Vi40kPAYn(A?Ilaq1mNyKcLw#`miTW8?A(@Mj8($X>dmJ1;dOglHdGRbFwPf|kJ zW?<2+F?GM~E1UX1eMsc+YN4b^k(5^zo%sfon6!$l>o}Mf7;qg>12TQchPy1+IO=xb z_sn;np1uTNLs}@+JK0-(=!RNdj~RpAk=6FsAS?3%TjW6hdQzxtl@WjQj)dEKT{yu; zaUaV3L0ZZ*A2fqKxG|%X4;sf)z!L~@5o>xnLUBie`0zO8I2|Vb=^iP48FzH_y?X-O zT|{y)t+Mr7N@RfMLG161G+_w(IL`N|{rNa8{$d(qaWHrrel6j1lHs5bzm97w#j!Lc ze#-%xvruR@hWFuq8n!)DMTvTb89j~f&Cl9<@9wMtp08+^57anr%C57=D*sw_645iz zX$gv0FX1Btgqn9}ce-7s>0^~4X;LyiFT5@U1T#TfRc22^@8Zt3$HRe5ZWa-${;0{0wUg<1mwO$X-J9XFjg7+t!ulb>rt^wT?GlRve2iaih@0_s~m;?Np^Dj>#UM zm5MCC-tk-g{>|`s+4HmI6v}o?8=A)TSf~iA{sxn9o4ys(B?ZYPT8|xh zg&)Q_wvj{PRAg(eKB7=oYzd!qvYtvb_ru2@WTx3kuBE{i#6y=IAusws%Njc{F+)2L zv9t6C;xUR-3d&Ig^Jrks*qzd&WN-I4E)3CX8{%f~nlhtNOHREV3@2vH+TPf(H<3%3 z+OM6@msE3M$^cN4Db6^Sx=Wv6qLkC~m84k+YH1U2)o~?_i=<CT&Y+v+9Qz zr1f&KcC#1U0_|vy>yP{uy}?A|M`Bw_OlQW+$PLy96_&#=!>L1yjC^ALbqELiky`)G ztBZ0f@~~5 zj*|nm^)^7%6D60mIn-2;!bG!t4y-yaj}%=szzJOyzt&O;-MBnE56bXA)7BYRgL8A3-Z$t7R-* zp;oU-z+5by6w{*b@yt5Y`ZTM~Cp9x!2MTh%259BI)e|bVjD@G9FPpG3WMj*D(ArlAQZpn#=!I;dBKjOiRWr+UI{N27}r_c9a z5@`8ZM{PTqT)3vmAN&ioZW+C~$U;&Ep-Ct_(pS2BZYb(WFpnuFYJr0<%a&xJ)2_>S z`*E5K07%t%iz-q8nPW1%-T`ayHuCx9Xn>$>gcA;IyH1b23hDC%6Z=YH7gJZzLH$}^ zOpw5sLMzFep%lw?PL0t;fizOYYQPkufDvi$94e!qhC!VZ2X^FRz z-7V0BGOWPF_^H#lUQhyJD@+~^p&N<#urwdsAl0Q;Vm?0C`*9D3VH z+3#~E2fek>wr(dr)2(5Bym zWJ>{<(YiiYXve*Zd9#>a_;^D|#q=E~k?F0lV{7Jl7IgU1aN^B>)lD024hUH{{l;R| z4@a#loUpe^gc6C4m9W1IrtTrb@a^wWUA=`B=uHHULNKXjH!^P< z6j~{;{*LGKCn8)gEO{pAbP_^l&+5z0|P($>s!l==crZgpA_WU!11R8 z8y*S9Aa7*qn&(?Yiq%Y?nTKe|`GVnLs(_TpJ$~!w&CO;q+wR6^)SNFc-_$+{LA|ZU z^Kf#DK+lc((%&NhMqKoEjE!*B4BWb!;e~MvzzCtZu;=Ld1>nFFUN*xY*pieHc zTWa{dem5@Udaoj&hwLfS(rq&_#}F$YNw_ND36imDBvocF%W;gP=91|fu#Jm$c-3xU z!y+WVLzF8MP$Q&>?0n$A{=C1xI4)7Jj@03yO61RjX{Mwjst%_us31Wn4uoa^i8s5c zv~RX!>l*wL^?Ymy0S+~+SFjG^-LnK%J-8A(Bcv;DlPti3sd>_FEP{L7oq zytiXTJ4REk?kFnjT$Xay5-ZKY|@RxZ?}LL{2eoVp|9I z&8*;TVd*W?(!JinyuPW)Gan!0i`fGDbFq_eaQ$ept=}UbtEgLPK?hA&4lc`_KEFR7 zYAQm&_>X|Vtx1!9=)8jM*ETxP!NJs;>mQP`yd=-aWKYqT<A2zGc4^Ijo)IN zO6(84)GftO1_jTa9!j7jmOT>`$L;-WS6=v>x}TRv15eqHJTPw<{nlI4tyGhvcIjDk zD*pP3)Ucztvd4VUTqfxZ5E*e*d<3I2j}T~*BF z$=OZXYGMvqViv!PiQd>BjjH{4!}mhVhtDil(+5uzz5&d-BkIXGHYl|i-}ZY~nT-T? zF!_8ieZt1AE|!U97gRZ*lPm>it<9UU={r88;~9`ipmM9L_!SkXIz(T$zI!3ZK~51f zD{9@9#tD`cNwA+^SE)-re6Q%aSMU|&-APIPeoGU)(cBhUR%hK#)e+Gb4o>FeFHID~ zOb#o-jLJW^FTrjw@f7mWSA}uL{Qer|ty1~1g-OdlfiATxC0nKVh_?nnaci@l52jb) zevCN@1iGZB-R$<0J9!yBjVEQL);T+i<9$0jE!&e4S(I*wQpgG5+sxMIF(%cUJ6uT#IO z>1r`zVrz*bF^}q@v%O-M|KSYGm}W>ZhH}3f;WKBw@7K$fFYET9*5~{T*g2?|o1W=T zjq2c~9LHADccJkXZ-Z{%AI_I?u-HLuJXSu=wN#>@zDTKGc-}o_MlZ`f30H#d?p?tR zIzP6c6{DG) zQ$i!sfX~2Efa&4GnFQ~gVOUVnYf4@zDZ;qhxIQa!3y`Tu)+G&hu*h3X9+SBV`s09z zin}m*vEJ-lW{}dcUjE0s^bco|NJ3E-#`+gf^g%J-yT4wX>|K3GvugCVt-N+-Zg;3x zeeEnOcBfzGT`x(x;hp{)+MkY!x*oSC^}rbO;mQP7E;PiZ z=bQ;VRe3z$U~jHHAuT|CvdP`nXRm(mk#Xe$aNC2BJMAVj)=&PL^axPX_m#)ow@v5x zZFWZIxWJ73VzuK< zQU7m58Z;E;CPDdafkVfd+FEOipNfR;Ylku&Arl1UjhE1WNW`5P)|S-UExl8EFZ6{f zEPd|RNw=Q~Qddf$aK^w9yZ@V(U){m%hao2w$kW>=O$5YT=aDqr97SIiL|1`)qao z;7)-EbB__8dGHB_0J*AQKNm-U$!C#J?{EZX;aRlVFGQ&3@n#aCO?FAD_Z@UP>FU+> zrWqo>62(BS>RYOUenZ9gD|d%^jY2T*v1moa^PZo!%ub;f>f1O*FD=%Qd|$|NO-d`* z=FZ0&v?fFXL!B6t?sbY*MB`o%id}UyB~mCr4NrVZ5F5u6Muh#q<3i~U0Skx~4CM+<~)=zX}=|MJxJ+ z?L>)5DU=^=ytP{k`WH;7`sTxH^3}pvVH?vhFbtz~Sv%K;Urnb?qL0p4agyZfW>W-r z&LL+p!n24eoj(%?2stA{4NdcZd{yQ(v`l)VbZ&W_j%2A?$4c7APFP-fy@+O~qXyaO zqonjV&vr>0DBtLk9zQWyOP;lp4S1bE<5p*Z-o6a6>mwTVZTG}q7IgCbn@#^WDJzRy zgjD<@2x|sA*Y5Kgv&KzvHF-+pNqHJY_zNfv=?&S5QR4a>@ZuqrG z*vf_D=o^z0|G+ZT@4bqBOczD?e|UL+h=}mYes%km7aeLn?D(oTE-{~MWnX$(=(UiA zRWgfQQ|{uT<)wkrg^!ryNbcIfkGB5hFf6OrUF(AX$W{c3BSI`Gr>Y&JP?=-0bNBji zj)>rL5O)8=Ss4Oz@IxmNe~EE|L9E@8M=#^7Ql<%6gMTO5KRlk@CGdFGxXHG!y){~3 zS$qA(K=Qrbmo34ku1CMN-zIh3Ad2loQ~p0{@!u<+9S}QTJ3BB_`pu)4FH@JxQilhq zPuh@Q`>&hR|J0}ddXP|ZPR6d&c?_j7MKDQw((>sShAxQ=@BV2K|M&VZk#SS^`clTI zW69qrjPmtOg4#pTJ{A9InLmra<05gs_VcS_!{pycpFP6&`u%H&^A?l;cr*yK5~zB3 z&ELMk+~sfHP`a`#p)O5mb$#&v9&$|OH{*HD-edQa!E+r`ZceL{p+~B+XG|Rsg4T~0G zKMkq3*?+Rr|6a(1U!jDowc*%c)!&LHm7B01*V|F;zcD_qZXyU`=HFfi{;g;;zZ&|G`bL3r{KQN-;wb{i*kT-sgGV34W&}O@K#^hlYkmAS?4$1r6=40U8=+ z>m3~6HxMoG zq|w=&_Qe3mhWoQiz9<15L5w@2Tcye#k3^9_^J-GT2t1FyLnQ5njT?|fcu zB@_Q_f%-pvc|tfXQq3NRM>jR{^rcAkdEmQ^Z@Gv>L9Rs0hKf1UU7sV!UaI$Qz4;#Y zMtz}Xd=xP{X;LXG8RwF7P{dbZ=EzS$>0~$=8tWmv;lo3_LJSKZqazW-C4vp%+hRy zWeNTjTMcCOHQ_o~RZc=|Aj!|buYMU);-~9N*A+8z4=|rtk*~`7 zu|;Ry|G>ViYn!_YI~)nHEmb`_M4uDc1Te#KrrL0WzO7 zpU=ES0e&!os=L@PzjFjN<0)!lJ~VkLhBHq(VNnoxABU5;g!oB_eufzt#d@pIp+I$F ze;e#a>~(jye&9vjKsA#|kjO{UO7g4lVp6#2LD6R&VHeYq>SLkfA@V&2HdID+C7`V{CKwNR2GGAF`FZiu!96+7Aw0|{LDztCgXga&A zk=x=dlkN{Cb_91&9XTGXXb?*I#`h$ymmTX0Y1y;gmnu%czO=eff1(ujw)i;kIH;PX znF0I~)!Ez+?gjUQ2f%H*7*T?KkY(5+n*)ure&?yx5xMrfH>u}isQG5Rb+OztS{o8- zQl}rhi|-9N4;k*=F@E!YA|Sp5fh0|1PZg%RZ%nh6htz?wsiOxYD=>}~uhrC4HyvUb zsnqQiU&F+SLSIOjgvRo!p4Dj_Wjv2lURAMt01^Zd6;zCf69!e~x~1Db;{KsFq6~Zk*K~uKc6xe%n#}UWLoQ;G; zAK0W*koQ_)q6gbZwx#fDw0KJYfG%3Q$Ai7NbJ(wsK223lw^2pO_~0*$oNb@BTylE& zqDD4nemWPgv-;QY2|`-t_guzA#BPev%)|W9)6;y^Fm>?v(9p!tWZ#ObdZ2I5VmA@1 zAzKe{BX@x>Da)U4-@d_OL?^+=*9V8SoJ`FI1hbOj(L;ux$=s1~&%1NuiQ_)o=xt_v zs^@k(H-F({V6OBlc7sae3USI~5Hj5|;L(f;N) ze^xOxQZkIcdG+mG7gYSwSP~q#CI0Sf0oUDWT_XS6!vL<=!F%Ap`Y7D&e;5cFx~2~1 z|8Tv(JUT|X&X1vce{*tgNBb1*oAv)N>IV*tVrcR5ualnr?d3qjz%pxVY$KQ@_|74E8 zodo~M9Dg?n{sXK2HqQMAR{d?9`%lgBw{h=G_syjDh4t9gvm*7f3jMP^(FZ37CVla0 zAtcPCYN!|n<=z2^;OhB7OJ?C-u8Lz3yH<$^b{-0OCePB9vr}b0NH6(~lwdBl+4p?k zaI)DuqJo8kYlinewa^Rivt5E>>LaJR9VD;Y_Qb2n3gbL`p2G2&dT05zkJvxPT(@ra zGXhOVcKGDSit`5B=lyP22ZfNCLPs;-458A7hj`g*;Djc;T{HWo}GkQX|q&sRL@)tD_!{--|KpPm+me(W2z50VD5U99LBwj&Kc1 z-;1{zu8ZFc~Z6Kb$?^3oNSF9*kp7U`Y~{cUtMD z9`?QZL}NNJI{tYjsPFefbC;DTps7mN>@0;h2<^@eQ)B=Bup%$`~O-88P^YTGuc2pN@Manx- zWh%s)%n2tAZ_EZ0DN_2qqVcm&!3isrmcyuHA&jw$bqI4A>?$SeLkn|I_X;DNvJVq~ z7iJxMuL?s0g|a7DZmkKk@8)>D=x=GgV{V`^moL zUiXFj!So(|_vrZCxqYXod`iTFN1T5=?;041x;2>(G1##1NSI#kh59Pa`JE|xlNUL( zX*66Ib%gYOwGQe#n+MZ{k@GlINUzfi(COA!no0(?;Sg+?`yGg!RuN{~L8b=6GFdFg zPi>6%<9O}IYr}xqCI3#cnk!Kl$MRl>4Yu(y(udt_A-8sDqQ1d_8NB`WUI zZ)Hn!1Bnx22z6GI)xy#DJ93z(R%6A~YO@P+la;3U1BYcn%tsnV&o;3Jj=>2oVlJC-E@vGl#fUQBIU?Bxs@OcWV#SX=BJ z&P;;{)Fy;eO+Dd5Z7eHy3F}rmwwwH6&}bM1FAS)k)5q}+m_2xhj(Rg?yC0|gPMV9{ z6Ye@(ZV1*_Piorob$MG%o#5tN1Ev}+GDf-?PP++1ohJ@8@vTP-pV?|RQZO=&fjd65 zxZXqAOlH=b^v3p#vY8KFk5*8@2?d5<*or^jZOrb-Tn@(|Vo-Esv7SixonUkZ6HsvH zGiX(ros@iOdgM>{9fMo=pHSf2M^Dk1qaUm~ z;?KAt6icOGcykpv%R(ME!li*uAE9J+D46$Nw2|buFGWTy){~iuD}!l+nrnUABNdS4 zV-J`>1?+y6RGZwFkxb93{0QOH^h!&(d9O5$AL*OJ{<^&tB#kd#4+CvI_9NGMIw*NF zA?Y15N?>!a6{uB7ImASsIDklYXQ9e#?3#~<>9b7teNM-otowK%e122>p?;LnL(hGx zFz1{=EL^5qkg3CCl5VW;r(Z88f^sQl(Q8m}+nZut?Tw3D>rc|Q#d$1EQJ?`0*BOFB zn?%=WyKHgDuIdc~e|>*7omP^iqgJe`w>45qCqS3ZNYb6APhEFo_r$lKAlIm?$pM~z zK~BP=`7Y@LT&F+f!amK%)J}i8M)*UaMiJB2=4y7E<;m7q{O51+Z@0}@vP=_s-KO&! zSAgI!F%DY$mAEoqf3%vH#*kDPov?xt+^`p&61Izbw^;L_(PpwiQBE7QmK2Sn!CEm_ z^drY?Otn_YvNzV!>2O6hZ|Pp#;L+rVyyTM&Gio3b?8z#D zS@ay+AdX2*g-QJ-jr%x*Vk*;RL@exfxpVACLp@z$=#``TywA9)eX4T9R!gAsT=AB< zB0&^9RvVhscAr?gq&DmP*Q=mPZ0qeG)&uAM058Q3?{Z)p9zv?JHyy`{wQ|e{<-<^; z@5M^Vd7n$}s~L3gw+zIj`6Uv6U)5(*$u5s&{?OU7>t;BZD$IFaShTvo*xsqQ@+*oq z7qzjWLnj~4VaNRXNQW7XxdwD5&la62`7Qg@35Ba zGw|I{_|aA~b?+wvN8jIp3tM$KYai7PY3L&znBU>2Zp*znuxtS%xx!0rCbc% zn88(`Zb#7Vai33On(ygnm)(&zXwp)R5@hOd{Yx0*;Y{)Nyq_5C$}8n~2i`Z)lyvg> z@=}!Vao-RKUF*l)D${Rf!$VVfO8o@^K@3VMkyL_iJ-up0D-71zbuzTU7rY5m zsJ>{rZz*6m>jL$fO4R}ttwQaa`!piYt*9DoNunkP(K&8z#@5xe5T)wR;hE-PzSRyxMp|_a6~CZTXVZ=D_73o`2=dm+d_&9v z^^y?N50bY?@k0sY!C2Y+Q^Z(V!k*uGkHC!}tzDO@co|J|yf(MJ8LriqYm?^@sn!8f z?gDkD#yQ@=?xKG{Pw>WSw6dPNN+Cr1Z1IqUc?CMJ-hF-`+C2wG8cj9nnX9n|Y4cdi z>}ZdPB7|30dO)YA@u*szcy|3;j2P8&b1j&=^QB10cIqBdL=aK@nWwhNr49!j zxRyUh@>@bTn|0Exg^CpwRAUdRnKnpYHR2NK8x`H^VFBF*evIE$MvZ7^{O6EyUF*(5pAebH$i`;*us7s9tr^}P=5hZd+bM&xbV;4_vN
&J9!fUl6r$=L+ z>DCTF%JwgxZh>hKNBqB~6F|rd57gHp$u#S>&CzkGzCc1zCd`ucR`A&z9l6DdJaD#S z?a1_>diBqHjyE4puIpchMDOyX9z~Jw;o1&b(%zU~NXebe9_LuDcx0|V<-;+DOL485YDraXJBE7_5>T`RDC!cW}3pANl4g_;1dM#x0e_J@K*e%AfCmwH0k{Rhh#({~GEd!Jw*t|uU* z?kPX?$!Yw}$ekr?H$_N3p%1%UGVWR^YDH}&%!?|V%L!E5Q+%g7aVkc6uPh>0V+iMY zaP+bFs^4ef9Ij48tYqNs60phDoV=ZJ7eE!@tYG8nV^gaF1=q?fR6k~SmJRP0FB`O6 zia+_P53Bw($uOf$L!8xVwbvBeDl9V1?=ged?sK}GE^BsC_Om%uTI52}LM{2@f|E|) zQ}Gc{!DVd*ZNJdXcFeOj4VV*n^!-hz?`426o`wO;vR=8YZzZ`*lnZ#H@$rSRyYs$L z&(GQGl!_5V3`%Y`kL+TLauvx1Ym;AFh8QQ7EhtdAbIzZcA6{r?%RC!OPs1(thqo>; z&tD8{G~1{89=?CV=^9%QqZN1+Rc)U$rZq<;oxr%9q_a+M7Hz)Dz=oijfd$DBCMn1zVnf%T9d4+*VLOTDhlC3uM z9st~vdtJ65Ir1R;2C18Y=PasadTMr!tGSWdem7LQXzIl~G`{;H^*68^se3=~ZokWT z^Lb@ws7$Vf`4Y=ax`tBzhWqtO2&_44%FZB%8F>~r*X)I5mNVt_d{+?i@t0*w0B$a= zmaui$57O7#AcJ}~#E5>GW|q+Av023n0<+8c_8YQV+55~KE7N772}c8nN40tm8PxN% zgtIg$RBp|h6`4-5Q2h3>p*I90_vEd+<9gDw#Ko{VNEn_~x%Q?0}zl zO_XLzC!M{>?vPCoE270K1)eO)m-XPY!^jW!X3s=qctog%IvH)JNlnq>+m8d`xr4-1 z*w#Sq?bLls)NN>U4ghc>hMv@BZ;P&HqwgSCofoKNh-31%(X4fLp zXBW=vtdT9nPm8%Ahbuj_iCjS<^vbDMf`z3&hxPIToQU4$P!0JvPTNy3F7EP!g0gnf z=4j7mk$cC=xwfDC;OUhBxALiIsqmNOWm`3DFLS3jH9=5nc1aU8X-*yU<1;>gd=PWp z{>P&qIKr0YIvpV-KWu+g6iWovz7JDftqb752J&Ho64f+?wT0M^@{GVR(ykyM3Zm{(*J4+P7Y}*NjxbA>db6SjIqoJX!k2<}lNjM!_o(e}TvCpXr$O z1vW}t1}{NlQG|^Xe;$(?FNFkF8EK39oPTXPn+tko`-OmtI65Iebh65iVDd!E975Nh z%tO#K?oR?yXMc?{QoI|_tTC{#{i#G+5IX~etGILHjARX`O|S%0$=U$;DutI(0JXx? z9wZRorSf2=1)p6=-)Wr}_m}X^4`wGNr1R=_Eo2ow2;a+n2VQ1sLvhhAq&>jY+`JT%&Dn(G@j{_Ng#WVb~2Naq-BvvLxK=CP- z2cOF+Or+%pT^S`bVGsFMgofv_jx?usvzKBW{3V!ukEB*8^$pdDlAqq!<3Zw9%0XX6 zTM!Z@rhCihAmNO{ zDes~6NPfVtv=)x7oouxZASF%(NB||YTm?SFYJXjyKBv1#w-~)Jtw`5MrOKw3EzdZKRksHm1Saff%!$&h9b=caYu751`&_LFTUf zdO{w_YqB4AI5xc(tOQ=6=RYY+J?SWC?7wg=6*~P1zs_vj1GnC<=EU9|DKVb=(&8A3 zAKbLZZIFJ`nvpqpN0CmBIN`Rubd(zcXj2)7R)4q*Lqqek_R_duB4u2(&6oZ}FqDeb zcxizoW3-a7m7KsMW!WO-+~Z;9vOd}fkxfE!A z$v5LtMETm`_uN>{Y-3NAvM6b#ZokC?VvlssTQ0W`c|6h)S#5FfXj9Z6e|xg3i>=7u zWGCyD{WqK(th`$`Q>*HY^elcUnI$-rgnJYk!JjUbcQ;wcR69iRb(nvSxMd7OUNObQ zZ~U&E6QoGgpmg&o4q<)gjl$^Av{cJM+?WO67e)*RWYs-1Do%SQz$f95iWnHiq(xfMd# zu$;3mgn@j+M2z9lsmb@y;?HOeTkEmH|~@#r05Dm&sb_Bx7%i)O$vIMZP3q?^GsE-;f_ggMkoRbM%bI%;7OmcmYP{PyG2DXoP?&7VlM zz&WWDOKcKjK`mBkRi^mDq$Pd;5u0^dW&FdT!PF6%%VxkP=Vf z4nA==I|Z-Zv3=p2&ra8?t=I%G9oW@bD~tC95@5QzsKFdB^tt5XnCOsaLA9^c-MU8% z-VmhlC2aAC6owC9UU=*;JR3^G{s_mg7SPOl zh<~)&PoyI}TjITg5(^-54SVZMvpL8?rsts7?Hb9TObyT;AvYJZ)v~>*3`68dc(C`l-n_khlj|CiQmT2ZWUj~o!+Cik1R9zMkk zJBEjw89~(Ftf52I?sz}WH}mvEkz?$w=2)TSq?)pM=HKWf;VmT0>g0R{AS3YAqM%CA zSPMvM(?T?v&;ITO6u?l+yfY?Vt1$fCMjXmSm7Zw2H&TVe1^s5fQb-Q%GYqjRVs5Z5 zzt>U;S;Z=$3gJmfD*N1DVFCgl6Bx0TDXa>K*zCJbe=m^eqh`bhh4RuX;>N1_W8L=V zXa%&tGsdx4ruq)4^68|4_Eq=4YA6K|HQ46ao}VV?FDvE#D*(@X;`#7kn_l!fuPfc4 zYwCH6zC*s%r5&1)j-gjP(WQP?1}m^A(uOyavS@N->u|XUs6P5rk`4l7z#hlcjnyZQ zUIW#?j(a;Rr?XivV{3}r9ydW!_^%AmI(F`YKZ|}M&bw;+@iFMurJD3}Jf&uDJtm;u zBpeXQLev*C-T`NAW9_|mIOd>|l)|LIh{4g^Pz@KTiNUd;drk$Fx)Z`6X{De4PMjHS z@G7SnWDt7V#h6~;b1{+I8Zsg}n_x-I);~T{Y)O>3zmvdu8I}-+?viJnvwNf0u!j+$ z5cp9+Hjn@^;OKyA8oMJw)ZiAiD1qCj$QK&vW;=MdbgfRWQdPFA5``pu+?VRL zhHW{uloIK8c0DiAc{yZ8T`6_sBsUqDOTj|KO_xyyNg`#{{&{Y{2Wy5|G3v?3x$w%o zfAvGo;hnX?2|aq&=xar)T0r=6#Pd3`Wq#iUVL1b5rbWPxh|j%_H-=hAiTlhUrqp*? zC39ZrA50;|pO-~h>}CNhW;X!#!pxh+QC@B^IM-YJcHy8<3Ob@c$gz*;Bfo$B@`;K~ z@HE69=Y*L7F;Ae@-n^Jo*y5PEq`I4YQVO$)yY=~N*P2}X zE3+B*w#io|*8b!6EhRFq$fIz$PY~nMz!so{*Q!)G4fy5WzgkV`89tdAVC1EGy=t&v zp$U_#G8>Gdl@6D=_POxU+T5-2@jM!__DXL&`;O_g%^75nw$u?49R875C`?z#!C2&6 z^YR#`ur*d-I}!P?{cE__8#lF=0Rkw<+ zq4(^PJw8?&T~nYkJ$y~Q_rXYRmR^`ILU$+%hk~crep|0D%Dy^4BVyW}L$7WxX7OU< zNUm@E;)twQI?adFkqo$hJVj{>y-~9VlgDDioozo(9a{3YIRQ0ovY3NBiBdNsJ_OZz z2aTRsa;yx0@HP8Gu^yxMeORZ}J?Y%+^A(oKvqV0+n@%gaGf~gH#kO&5eQ}hG8JMe- z{IC)Nh~ptR#EH@2{yAAf9m#s$v@XQO0hpJvwc7{w)3)mtIM{6H; zBZa;DY42m#-lB!3{TUD^xL0|&LZY!XQ&sD93A`>?9w-jCxjZ}>-Ao*B)F4b0Se33n z3jbhyABHyrv#+m{cp4K=BWRXdIXKSyzKooMgi?l7Ss$oD$(4_YZ6Q)=2VwqdSyDV* zL;WdJmu?HI%VQ#5i!kLc>sfm~xvK~o>+zl-8Zi06ygLz0xzBE5`t*nELyyQFhp_Ly z*F(nndd-C=bCD8Byq1(6GS{oYF?r_+T7Sus0e{%T2Ym7<=h$lD8K_^2@%+(RKSDEp z3cE}O>w>-4s8|$#N*0;>-h^IBh^m@I zh{tfBH`)`$V*P?AFI(S5Fvr1kv39e%S>{3jPdcHLtS?1>U8>M3A))qT>zvmS$prw& zRa`G+*yr3u9uQQz$mODC;ScOFDGQyJ^IU=)^UPkYBfcsq-KytGl6U*ZEj2-0IcqLC zO5&j(8;ZGO%0cr4fhEZ0O zYIyTBMP*JX1HO+vJ}UNcH$jIu#kLGl>vw)&Zmi|7X5XjLO&cM+Iw<0K7^~wqJ9>T6 z`dJ(k*@rY1!TaT;BLa11=&Ga-qu`I{Cvn*smZjH%kNk`|mcJRYZ#Iv}C8~pbV-sR` zI0$VpA{`|dQW`KDz)TSbLS?uKdaekb8#dWfBmDBzjeIs%6*kJcl1YS!_8j1SDFE8x=0s-4XF? z=kex8doOu_KrCa|bWMJsh{^-s<9i-zX_7i3RGNa`1`^0IaM=G)6yLvtR=fbd%%vH* z(y4dCA6jN9w}D{I1-;LZPL4w$ikyf`y0EH8u}APer?@6%aDZ276c9 zY?iNDW=1{P4{bq5A$!U6eOd8ISq@F>y-p6ndAPCcX`XT_tkW=X5bPWd$N`Tarz5e{ z-bg}oi(8OESmS zKH~XrKCRM+REmSd{-f!>&8_VR>_9fs2OLH#`sV0=NU}}rKp)H5;QQfIhl3@$;iJmk z&g=04UC`PRIRX_#Jm(Lq9ronfr8vU_ih8-Rbr$GdBJeg-~|aY@>NZBnlgc zV@070T@&^m_6Dsu^v&lK%yK*dECbu>(me;zV&dsCy|VQ2V`PWMX$xSu=;=-_jk!G8 zBInC#3m?}LR{e6nWk8eKHaB5UQ22|_#V=6NmaymXLg60ZpFoc)*(`dqQs^1jj6n6-3X$Y;rN<3=&0? zcOR~?UXKLV_joM#yT5IDaPkH(s*6ak^Udd}}y~Meh1dIATF%vP>l5JZ1Cl zKz+(X-FcdRR1}~MP$b-AsDpL=(2F6nt$aBFk^)8&Mx*r4c?(7T$Q@+ApDN}YRu z?nzt=pZug{OhTx7*oXUe;n`8fJfDYVw#jN$eWCtVCNx|$4s5|%z(Vqv(6}oc!gy${ zS{834>|hEM&jCfR*sUY8;KZ>fh-B%P07aLv!L8YL6Mo|=w1#T5Eq8!7I3l4M5au z-QQWpyMM~YP(?f|7Ylst2bH>^{R4IrbGrM$KTcJ&_oaIRH0^I_vV;)@)JU>w6&`PT6_rAg(efbe5@_ufx35 zGFmkL7^++G=0X*J*X!hDs1y7`02D~{Trnz-*1{ya+N6hbd2y{jxeE_xn@ok*X2W1e zOdO=$aLfm)MKqOsfXV{g{hR9=OL%WxKfrcAK8nx+?RRi7B`54Qc7~CEqFgo=W{XPU zcmA?s-I*jhmfJ1rv|El2NFm<9v8C=Gc1RaR5(iED-Xo``hs@ck?tt3Z=_sZ22M&qqHu?@0Zr zFEhmv{fO_}yoq9)qZu#sVxOqXAi2TSs*exwx1G&8=jlu}Cj-_FalpREU?1VDmg=!> zC>?E{=H26%93FNLn+AN9NGWJWy-4SG?K2F3y)Wv|7jwmdMDm5oBr|}1@mewY6}-;2 z{~npe(nR;Wa)(8u3)fvC30b46)9p#xDX0Tuyg`t|v}}B(h8|cVTod##Y4}#MrYLQc zVp1!7$z!b!{rKK4#`=rCX(1B@uTAV=3kR++ImO$k&EpQYo<|*$f#DxPXLe+`=97qT zr0ih`*vT;Xtkask*Z*2W<~BWlB;hU?EWzDt>GGIKy67=C2E~@>)bzf3Tmq13Ie??Z z4NOpp7_QF>ZQ5)g-oexu==D-xC~Phsk73;GwwyYmDeU@>eSK*$MUIm79k1UFyIn_|&Cz1ZVKR_uDnw3#~l< z{@6Y*3rtTX>Z_Bh4LAqs%c!9myWXzHhexlbj#Bita!y<`_6(Ia$CB-1%@irVg+F~P z6k<@RLwmHw9t)Jouc=FuLv~%gwK`leDZZh1ltV-A3rZQ>!&%bHjyYJHxYV4 zbzs@OfZoXo$_?*6yiB%F4lx>li>2FlDM!k)zrqc@2dK}TK9NqbEL6g|6+F5Lj8yzi zZvkhU2@_sVvYlcD-*1k}DD~~Bnku2QAAQekXH1$dr!1@s8-71@ov~r&ncjH$Anab& zolTKjyNN)rl$6{DsBHpt&R4m#*~_Ba5OGHuI_njKV$bGyxg4CADt}Typ`n#k!wOIV zTcagJ)qGL6>V1l{8--T2M=&uoHyB}r{a(FPhcP?Vj75i7WMg1rBTb=f*1g_&Jsy|F z;eH*S5GhrdmH2OGaZFKHRThE;JSFlMJd4xplGAaFx^jTXN2Ej7(O~IPd~2^ttXh-l zBkfli8I1#QagU&VGifwU$}8hemdQFtkb_%NiS_;{NEwjA=g;()MO?hP*7|=1n8I+# z-|_zPD)U^e;R9wde`kvCo`|yuCe^;9oDxEWx^0 z7kQpm7ALkdbs0X_o4C9u=XXVW%ZqLZ6cmAkgL#yvl*~q!GCz6{Jv3yTr{sKp*xg3v zPiOXpj{n2*N4|K&ez*XLORUSgr%DH@wHxufM!a?krRZ^=7e<+;7TBIxspY8kkuruf zxNL2_{?WV5@0@ktH<8~teAz-wfK#)81GJO9@$OR`U{=){EB!!|F_y@FpRZ$Kuth=S zi0ZJFTHkAvXA)}Pf=IP!9ROhEPD3+D0!Tb7{aK+|9h-L)1q7nPjqM6xrzZkagYSBio4!Tc;$1n0HH*+iUHh>(1-4<_3Il%)S0kUbK(+gCuF{y;kFPcRI3IAb5y0t zCTG`H0S`fjuhyj$Q`qCR2`w^g`2-aGG<1)nc4Vl6(`eXwX>9t27RXpYaD{5pewp=} zhGeb_vJM0Gv(;dRG{+iCf)q+eR6k%kHPhIsd0#o}4#OPvzJjN3;(|@>n~z`?zs;Ho z-dr4ZDk?y8`N2Ct8mp8^j1al5zItNT%zDoG|9lnzQ@PB}Y&>FvgVw%T;@HbAIn{UV zb3VrF85>cRg->?y{t-hx;oZ0MX94ToeS=-CzGk0RtDD$dTw2Xj!LOcY!OF1mfW$$s zm_$BvLW~#^GFRa?!2Sb17or95xw(?$DSM!dEmK#gi?)_3N%N8oD?{ zZ>JU;4W%+Sf#@2`2%4IETdGr^?OGHco(yL!G?HD!sBLiDB<{-v%o=qKQ*AArdyOeBjX?~r{J7gzVo~nf49Z5R01Z-6SlZFXA z-MhI_&<}9N{yQJobu!5I8gFJ?%Y>

wK*p)a;q}j~B$(qZC|BUO}9=bcPpF8h5Wn z`Mr+6S7_t6a|gmg2!)RG?@@`oIo%Uo=)*%6p4hc4x13g27&7M?E&>Hm4k!VCrE0Jx z)RNt+grH>&$MYg?+}Mgtel_@^6!g-$9mg7r-94c5c8X`ua*vi)*Ru**Hu>3E%kZgK z9WO%W+Ycc^miKv;z5qB=!d1XF&*XBlyMXQDPfP$S&~4u2Dl+V9@3u3=+Fn|(=XJVk zj%)Ne*+>!-om5l*=e$kWm&_B54t`d(*Ao@`K0B|sB9$t}pvvrxo{hEU^5K+|VaZcf z?qw`M&Z_vu$feV&US+13Ef#>Gq-fkb{;>N8c49|$g=(=)(iexr70YlCSME}&aC3nx z;wE-im@Q#l-$T+xyA81Od^*;UzN^(_QZNG^L;;3WYm+ip6eO72@JGZjY}xbF<>QB1 z8`qhfImC_kv8*LniQ!_Y$et1*30mkt?jBX>%eJ6vJdr+`s&`JX_-)*B9k|*Wu%DG^ z3jpAOmi!=|hKVYtpAE`^@XoMglkVTvl6m>b{LbnQ70q*nrp|!7GrdBAOBwft&T~zx`3Fv<)zkJs^>nQurS(4d}rC;1pN;1k|$*AC#wrmwLcjWzCy_&{sUk}x{vk}ANd zk_m$Oc<#W|iqt#scKPY8$4e7x5Mw>NvvU-Vtm;Jow2{Wq@%&t&Rg*-p(j7(Xrd6Oq zmtz?t70vHVn#gAlLlht@O?sZI6{*Gp3h%@;|3&VwKOtPzTaWA}2Z7Sh-yQAjnEFf*~1M>PzdwWm7!zOXn z<+EQgYe6CL6x*Ms%`)yI$`9suw!0|p5bB)1xgn7{)M)F@dtq8=g< zzEWsN`+s}&G5-*=q9yzp@5C$%4axtzxFutRPQ_TPJMH`?e4&o#hiP3wfdqMEz#nYU zsYJjBM>ywwy8rJ5jhGiv-R75v(X`U1k?ofN&gC~zER*|_?`ehPHM3`<(%^qqn)Y}r zz@iL@mVF~;)9I$Z*xKeT38g|^Chvt_{Hdcu?C^HFgw{h+|Gn))Ecy=d%Se5I!m225 z76w9IDALVmLV)<+ulcW$`k!Hc|M(lZ{+0UQF9Nz`JOK1#a&wKjx!?Wz5Aq;qJRnm& zLHIaV|9fy-Ko05tA;;Xu?Mzg#DBck&!^=!lTMq{_K}o; zsq%}u>R;Or(9p~9QdUR9huHtmQy$T!XGQ-?;h(NU#xUIQuEhlZ>&{~7tpKmPvd|U? z7{sUrkt;nhl|Xfy$Z47+bp4ad3E*s6w^(TZut6W;n=pZ3Qw1+}MRleB!wn(C7)d8j z3NTPjRG(_RPRN;`A|e@(vUz_UIK-Zc0O5Y=D2wM03gCa8788SjUr){__+9=moBuVr zVo%v_AG4J8>VJ5Q3GgqRfDL!zKX>Y%p8C&Y{+YD@kL|R8swFE$<3T*2hfIHKq?nFD zIW;!X*(_+sJnDyJHlR}(A}kiGpKzJ1m+C%5y#Euq{U2c{8k8^QeTLJ znf1oXs+VaI9ozw&8_eXNNEl7~lXz4}djIzM>wX7RI5~lE$ZZtT&Iu7-QVYPqHWJCC zp*XTT-ha3jP0weao1qw5nHe17MY z`>g_Y*qUJ!q9Q7;fB#Lz7HELzGTf5`z)#r=<5_L32Ajm~spbz~?md2d61Dm(3SJ5r zDx>nJ-wlp=vMa%|_T^NF#A46gitUWI%y(Yt8k_@d?+yV@{?Heiit4jVz z4gtP@|CxP0D5ZTxG-!wly{3t!75o@Ad9Za9>-_y{o#T==ogU*(b`IJge8Z*r()Y3M zUcqNH3`^G5D%DTx+0#X#Xe>}CYAdK4N+7YtB7;)IXJS_^SD|9|0sr+Abi~F`7PUa( z@kAV)5HT^J-%-eaEeQp}RVSe%8xNZ=SxPOiHAX0Qx8>>pQt2HJ__ zRzpZkk>OO8o_(Z#o)=E5*>X9((ZCj&Y_LscLD?p5bgLZzE$Vz-HNh$TH^9K|pldpc zf3f}5F2JJvF2ncU$|%jp=F^924~wvekhp1BV$Q`_m?))Pv!h7^u*d)QmO6f^9ss8) z?V1X?WLn5!mwip!!`ceoxW00vX@F+s$okJeRAd_P%=6ci&hL!;02lYzu$i8|DqNNBJ&ZzqSCN$N~O7OW1rQYrdG-V-@A6 zMIYoZ>KvdWdc~d94*7)M<3ujg`D-x1%R73%WodjGaI<=D zj>SS%Uxe(K&AwR$uMXQKbjN|qB99tUm_41=l??Wxy~n{`y7W|2P{rLq8IL_8mjr^_-0BvI<xgt!!toc{+{LG;TENX z!&{?8UghpCcLPFc9ZYXv!?`Cdej7=S;X)|N&07+k4I-GEhAGz_wXdc4W@3^NgZh!h zP-Y^)NY3v*Y^mz>HRAX-8%la78*pWgnR8!y`=$zcUKG;{r!HVo5}|7reAUaAd5FXh z8}%!WN@Gxroo#fV{!j+0il>ULaXMj2EVPt?Y$|FXecW>3c*G<8_~D7(B~t^=B@5T3f37d@SpuRx7?J+S%5mgqO}#|BSd3 zEuP0BrJjel#^!vP{ZE(*5bKAP(mktkosPN@a64R^C+Jwu@l*>{-`lmgX0Mb>HPSuv z7c;tb)tk=;0mYW00`7$M48~=U`z1?>W(Ee$ug;PloCgl<9DojCIloJJM$x^%s_ds8 zGqC`<*3e-i(@YzWoVn|b6Z=RRUzH`~rvwCgDy_opnU zZQ|B&b%j&KNXo}|?+Q24`N6JKvb1?_>+Y4xYdM(O(b||x@G=TT2u&B)N#r7$&XXel zncI1#Lb)4qS6{um0jJ7Db|#DILv3+1BZ$7oNEZ&I$b0iza$y*N`3#!+c{0@0{5dF3 zZIoT^cpkvs13%f|vm%G9{R~?&Z(2*lQfKOadVQY?pt(H4VRQ@7;dc(+Gw+}H0LMU& zy1F=;yeEJ$HrMR^%<);I@CV)=b5!cv+kZ1exKk+dWBL-hHvB|Ho+(ltlY)>lR z=*7_Dic&N-<8XZtB?8>BKW&|-o*Ce809#0qDGgfR@)TJ6l;4B)gS}Q@Gb@M$m_9`y zZo+`$EF{=g3utvkRIS7PG$9kI#s|_uFenMy3!V$B@1fUd6Q;k zi`)?a>J`Vk#OLc=a2+gz3o0(H7Rv*ohBVr>&kCl!8tv?6yv~7uNvlV4UH@s(cyW|0 zC~qQ;oX_SZ0fH}5tw^J9#S(-f=!<1z)fIG)>QHZmr+7M}E($8r+n!6{+^gmznIMDL z)|8$$x)cmoc9Pdy@4>*=R+GgvQ*0YvseY=(Wi3<;u+~?8bnPFn%k!q`f>rb1>4j4Z zGa<&yg4%QZaduyDrkB|ya*iecV$?F89e?4D5iAk}v=To6r-#AKDx+8@$!~)(C)2*(5R#U@ish?=I=#Dj zfk9tS9K1CE_mcX+Zza*lJx5u0>*IW%+iZwTkfEwo^4oucJkh8e#IqZ287NdKh^C6o zp``^28a4r~?xW>AXIhti&eiCeQKu@UHvF5z69*1oQ9vy8rhtf4L3&l1fJpBpAWcd@I)rWkq)Hd0 zcL)%AZ%XeifOL@(2!zl=2?XxuH+P;hXU?3tbN}%naVOb(fA4yLxyjFL{(z*igw-)NCxwz##MzHxMZz~#=VC{8$@b8SR($zW|}BkujNvOY{)*n*R^ zdOQXuR)=QJQ%_IAbnoLYW+oT&j@-^m(Hxo&26vQ>yGvB#vW-dq;yxtV)VW=4kelTbC-+Aa_N

6~-0Ja5_gzoZsgNMlp9?w@?R~ zf7p~AJ%1cPZWyq=uV<#wTY2I9I%82X&vv3)6KYL5(_o*3Npj#^!#!i_2Y?1Ik#RwR z(?qd*QqPmgXua|<;&$Fm8>dvJi9l~Jr8sY(*-|2;Bbcm0L5=Idk?#gN4CE)sWdgQb$4G*Pe)8}d*Xw7W&a-bTJdpz$ z4B7XA3qM^XcU>RkkiAa+6^q$YBC=*0x0~b%BMv%aVWGae{_Xunb=-SjPj@f&(+?a zz;3z)U`luyrwpa3OKS7aRl;+Hee3|132w{VmfT01H_czY;2~=RMJTu3QLH0XAIqgr zyU6k35lVa&XvG@@Jrjsv;LymfZ$3Ms)67x8eBJMwN;3I)gWNM!nLoX@HEomlJ&U3# zF94$XDeVS*Q!!T7(a`$zSqp@{UkH~W>zCt)D4j;NLx0B|j&?-%L18TvsSJ~12tGEg z+_O0L9a~A4;caRCdd%h{IW1pyC`=5=YiTBo<%F_#MB+KdxH@o zx9Ec=0O`VE^C22q8qcz2ux;e3gjjLpCv@w+G`X0Yn3^su3gt?Ho)4i}p?{Nn9*0{? z-1NonOI@4@G=Sl0t&^d!MbQw7CS{_LTb&+E$mPz1Du~^AD{B4t){^b-gW8F^eQspZ z=f4@oq~$_|{G^TmeV+r=n68c8x5B)_P#J|gp(x2`$?18mReDVxs@`jB2zeU@k~dh~ zL^%`|2avA-l9n;TW+GHhTZWn7X6F%?YWK)%_x7|NCLevCtue{f=CaEJwM~Cpr!iZTu;P3cH&{(esTA&FK$^LlA{1x55dTCLRP|?O8cMoSp*h z-@Zbm@7;Lz)bcr={@!B88}@0yc8Wq)*`sA#Bvcj_L-txjLd2uzLzdm1gsU=R&(!P0 zcfMB~6&5#^1YG0u!@k}^5HX}xG{y7yLA2x9Ga$O@emnA|v5!pN`|Ek1<{`Ev7~GLi zSkFul)k34m#^tEn=x_6*kuVNgLr$^moG3HF_htcO8Cv*Sxz|c~d;A|knCw%`BC7@M zkLWq9aSs8%lQbh;fPB)0J=ncc%WxF>!+&fp_von{_ty)w?7gnJ98eq?!|Z7|zveYv zekm1<9In=_RgxCFx6*?e8^f{lnk@s|$gh`+eju4QC-Uie%YIKH<(X@3Y@4N_JqKsC zb4$Fww7!cThL2{3mjNVO5|F8%zRB4W1hqDg=eu(@Z7-fNR$EJXP3w=u_Z`4oW#ueK)ywdgyXiD>W2=q|qsU*gBlhV!R+#15VM_EYnK6q|Fu1#X}gTKiG4U9Yx zv`vZPo{r*|?LP>*UHG-sWD1mN1d+Nv9|4GJ0%H;;fs{^ob_;+^DPF-8>K4St$wHeP zJ9od1y-yK#vbzDY{n*18pls^9>BgK?wgtkQ_v#=%yY-y3*RcM5jP;q81lXO0w*COg z$$Rn1CZPd4Z+ zC8w_TPNQo)uFJNht&?@m_Vuc0^Vaa3)k!%Nn4Wu}5`TWaBz<>CMNRpqC4}@l>#d+q zH(6KwsGTzI1rJ405VK_Bor~qwJWhMMy~mz@G(A;R+T$mw>&6;FF-?}_SxS+27)^*D z7ZqA;JCQ#$o`YCB0;z8{z9Bdnn$8H1A}h&}v@7>Fd#YPq_&VjJC4j^YH)C;mf$P=~ zBbeK)d^5Los}*wo#iqo+Z576EJ*c>Uptkho4NXpt3uep8Pb)6?hvQBi z0qLyV5JA2W|6vsu-mf!$T86>I`V$r#Alu(VO~3{IGJq(sR(r8~hUOH|-c1l=T@f7wgyjx*+><>({s592 z-~g66&DZzQj{PArss30#TkUAeTY$K{>rLjD)5Be%P}a2EZM1rRi}y>4*rJaJl0kza zNPrnw0rO@*DT0!1{Ge|{WzG9;*CqiuJ)AW8iBPsTtpiMnAO)#Efk&9%Kh;|Zs1Mdv zE&3z;fM2tASZGvTytG07a4jh!9Z2N3_e;AHcaYZ>m5Uv2LaWRjnOM%(t!TlW4L3)# z(oCv7(WYC7-g%`EOhQK5{^-Eh5Pe<_s zBZc-znMx@YzopNcHiWRYJ>4+bX)`X;x0CQfjgI?PC08R5TehzeZ3vLFJX6464*~hb z2$OG~0#>nZuGXopfu|+c$gsld8|rRgLRbN0V2XR{m1a|3DCVI~Q7oI5^MGv~$I?)| zq>o3DZk}Cl6cS#%He%G|pB9k(xtgNTI4?G!Bd%m);aM}7gV=di26VMHL)qTddDCHBHQO5k6s!+3`vPHsm%3&-+_T$7)qRXg4!_$n$ zRxzNzgW)!0F;+d~J)`tLwSjZu0AV!L$ez_4?5ea^Wb)BW!Abjg;xoy63%@_l_(=GY z7%x`lXRPW=;!lqrJqal!#?SV00wbq>9>HldHt9Bp2H6TGKnkH3 zjzhKdP2~U49mpRtnosnu5)y+NY8O;Q+;%mt+9X;Jpx`v?UfJ#JPAMU^f{95oO8M&3 z$#2%&^EA3>F_=?dm~-K>a%*={-?h`k3uuF?eS2SP>Iy2W!!-;e{J#&EU5=E1y_&C= zPQzbSeY{Qz_XKozDyQ&%eE?>Cg!=6z2+bZRb0Q+~w2!w%-U0CQLTS0OMe(1aM|)vc zN2s(%OrNsbE=f*i??j62M2q>tw+Wn@$0R=d4y7mvrKR}Z<%uU|cIr6&G#}ZStH5q& zXBT_$ID_*Z0H3SsP9NI=S+@=9Zhms7vGTLXh9;nrW8(;@rM40bz=B+67?yG8h(u1#Y>8X6UIUQz79(Trfxq?(kU zY|ox)MCT}^yVQx)LOF)u8`e=>8TC&|1)aR286^)_OQuedKW^;Aob5CWyqH{u(#(xo zZ*7$T&)(-@_nt6X4KT3u*tyh;nW&+BZxgq<=+!SEX{57v$7FDEAPk3bH>g3nMh_r~ zH_*?vUxnxqeqhTK+vEWuPsz)yCCG3buI2MeRCszpF$IxdJ(o;*7NYz>ZVL!U6O*~Z zD7B#_)ixI@Ie6ro9+&F9LJOS$9Tu~qHJ~M4>Aof8w}1)wF2r=%3i+ctK0eOx_Y^#R zXtGjUCuOltPb1_TZ|pbZTlWKrOc76jruFspId+s&1ex6|Twa`X7UAO^$>AD=&^PM7 z$ym1>d+8UK@(7qfyG$?S8%2k2<<>2K8yjLdch|-fs54hq4y%Hk4FD9dFF(Q_5}Nw& zi8fr!LM3^^rI#jgEsIAOF_6x1|M47Sz&3?}@AlFSHQMnK@GsK^KqoW{tvlfru=`@` z2IXw{fE3_|WNsP@Iz@4vPN*3>eeLB3Ux z0;S)KUq6af&DTt!xLDtb?0z+tv zx+)6C9-U#THk~Fn7PtTeL|`4hNzJeVR#FQbNUKI!Wr{f7Nz2!RmHHGQJb7o}(?)HdvSocdZS>!jEfHhQ~7Y=_*J~ zE-O%DECwW=Xh)r{*l|t2?-08s2bC{EVZn_R4+`1z!5eC)=aRv=zVG$KUXL<|1=v04 zk62BO%p<($Yjt#cj*j}bi90y)f7~xDD;iU%=K7k$Bm5LMNV;Pz(;cOee|l+>Rze2mqz(8^g14k7os$kb6JdS*u_md~tx9K1f*YFw7; z+Th;;o899CukIA2dz(sK`l>2UT1ex+pioaMJhrd8LuhAPmgvN(<}tl~wxj zCqKP~3pqePAXJk}B zreE{icJX*U*als;0pOm+<4TRKYg!WI|A<4t0T$#LmHiv?SmmaCJ^^hl&d#u$j{{4-*L9HN`pvU~Q&`IpARET^lY^Gvi1Ga>wbolT^)o=UM& zRJ8k+PygnopCz_>;E-_9cuyBfq0#7Odr@XE(S5A>prW?c`+mZ38o{*2Y>k3RlgFeZ zmm3v^K}WK)eB+2HyS6Awk6dE+tG)UZ1@V_a2p|$0)d6jlR)aUZbnofe>*&Bs2c#ZhlF$eJHx5E87^kvW@n%b~MP#01nEe z%t=?7Ea8N;95oiYB4pd@LHzvVn4(HJ^R;4&M8ouHg*hA&>Vz->o#`H1ADkHOxQwEPhJnRMM^uBy1;E1t&p#X|f)X-`*}l0+&a>-BPKmjR3> z#(P{Rdc6pt8nZUAWH%;+>`QVTNh@>$;PZ<6cL#+IdnT7Geq}U&3707(ih$79B1Scm z=dOZl#M9lXjK!iz4_cUKHWsBdQp=M+5WimPSv&t{=um*$qV{r!A6yN+!Bk%-p9!7~ zEfrqaX93fC~OW?*h?O>L)T3P=~k7?QcQL@&(}H1i}KGSOc%R0r>7su z>wa}#Y5g)A<14fbgPI)EB4`AZE32w3M>B&eomcWH<(4u$*Y=KYkGjtP45?X>Pdb0TLP9wm`J5;)9G2z8x}nNdnMt zhh!8N88V(>?xBdtH(Q^edIYC6ZtYxb`eiH78#Z~Qov)xgEq9vj(%{E zA4n4|E08GqQ`%a4i6Cfzr$s+MU0R;}^c-yp@Y%y8Laid0i)P*Wa}*icgaj0do)F06@^tC5syZBd02jU7pE;-& z!hKwPiS!w+nKsRX9Y_-nJ~3NGBj=qCw(nW30^atzfVJ`CVn4c?q8~K!<=kvn;r9vA z;CmiP_s;jC7&wKafp!S~WOCpYOr5wcFa~x2npC*!#w8u_o3UjiXa&~=Xh=>QOOEX6 z(mCXfH4KLx!+|(O^yl6D48_lpN?XU8s6 z%yj76qD16zPloSfATM;KiU421Z(k8b`19y!S+|^zqYsO2w4FHudenl7!K6%Vdc#c$ zBpy4lcmytMBLTij*uzZ*O=144N68rYR2s~hNdI*41|&u?-J`hqc*iJPVGANJ-X?Y0 zX@PZcjKb1`C6M}SlQ*skuD~hX`|jovzQ6cHv)!Aqi2j8Af;O(0Hkkg{)B2R3_Lvmj zLlk(ZYUb%(x<|S)3xj}AaFl5PMjK87{uSUEj+9u@H%8dHJ7~cw(xOJhilqv!>Zh?W zjVMdYp_EIpX%juE^IaCi+@QY@0+L%o-9oA(UdX`)cayNQ)5dfT#B;>0A))JEQvB6b zIg0Y5wN+xiDAbSMqR+hioK1@3D37X3im_9w^&Cc zFm#(!+#25@<+_fzWw0ST_;});_yri5tLi*IHLmnM(S*BfNo9^?Yv2fpwDX&FbpN=V z=BeA?l{EOC4A!!7^cf)B>Vaa}$neb{@O3!X|5mJfm&59r=*PykA3~h|p|zAejApjH zv{JkldH^V|wZhs|)zB=@o;`~)X?|ozi>KBG6>ps=4DQ|De{b13Ad_feob zDyG#>;Lrrtws_uN-1Po$?vBkY*mW~a+BA15M8vI7)7sQOuf()PfhqU5^yR5OAfJ=7 zkRkG@sEDHyh_zX7S(vVppwEE@Wd}|T?m-@8IAdO)H*acTWRb4p_<5-J>rB0obnGmal+IFZEZxJTzh4=HvlDwsNjQ5~UGj{{`vigA;Wn!6 zSKB!^FnW>Km_OS91I%yOefoi5TB?OJLtk%3y`bO_OJfmT+0C0n6L8V}_su&Cp69k@ zhY@Z)>!DtPvUFm!Z`b;dt@=-?wzTd<(R&x)zrP(DfZJNyAM45JZ?B(KdeD`4^J zYz{6a#o=KP)JN=~KacJ_#S@?pVK?;BTEDll&xn^pGJjCjWYzoi2V`#tyV+9deUK;= zZfLR~VP}23)6*7^PA#(e%To*E$A3SZ_VWqQ-<&Qu($#vG;oQAxc;mym?KjyNX>aB` z#CSPOA-FR{Z%Oh5rr7@kec4-XE^DMME>M+mfa{Z0i#2V5^e_HtsdUxLa&4N_i&zX! z$D-$JRLF~Wh%9ppRF-!Z(iPa~@y)4r*P9^qWpxcpQx`p*x4|1_*Q>0DMuqisbo#`7 z$=ww@g#f>p6-YCjhr}xf;1(NCow!UM7vD?Vs#H5e*>)LSjw(_$?|vw9L6{s9q8{>2 z`x;!qn2m`BUD9A;xnP+4sQ>J3E?`>mcVDYcIOqW^hjTUNaiM*YPGIwh!*X1es~j$Kbdg^~8nk4hF?QY|=VLx& zV;XcDTwM?!Zz`qpyVWP)>Bk$w0dFWTS9i$Tp6`sOQi2x^?tW-wH zloP@Un30=P8&A-@c#~h@(GrJ&rq!f$LSeMH;v7Ifn*nmiT}v_XP*|Vd2>S@AVf+}>yVrvNUyY5mt0bmnE!Lg`+WQ~vKSx&pp zikv>71ciFW!0IYvIwAN$_Z%9z+`L%3j}yX}s4u|wte$DnHBO;p!+G5nL1%MxDCxo9 zw9)Q=)rLWb~27(A&G`PzAC^5Ae`sl=o}RpnhP2Qj+! zfD9M%u@?Dj>PWrL+-PmrvI(#ScJDja@d5~~N7C6im%JyoSO?wc#hxNmk{O)6<(a?X zTPQ@wM@t!VC@C$f29=3v6>1nvhJFLO1=zw8fa||mUI_BX)CdgDtPH!9iR;oYsZ5^1 zS}(dQX3*0>4mR71e{XHxmAz4wQ_F{Ts-hZmSYja!BPKMIk^Gh&)qy5uT-6!379$Hd zkIPWj9nKWG^xqrhO>>vF89#;8-|)Zq>iT_54<2bS8EnJYRC`q2Y;7m2!!DRG;EhOw zUPjUg^n(S}q)u7=d~9uLCYtLXytUvXGBw!`n?L`!)iV4u>F+jDYm)(a32f3+u{Jka z^C5}@;`xBGA314n3}jnC=lO({@3IkUH8bAk#W4N)lF`wfW=J{Gam~@$L66+iVXk(_ z!i2;$N{@270;Ep$i|y_3jqzgz znq)37L=8hS)+w$}m7VGC1pIyx4Xs|CoIWfsURmm$cmt+zTJ4>Xi|oxy)C2jnbV*^l zGwNZjSYe>yEfH{0!#%E>!zdyaR|>jJbC4FIeHku8>0{9?^oWMI?Z#sT{T&Hbk=CTQn4AUXuITxN**HbsLyvlT@%36VP<

Q!1YlQ5a4*rI2agW<2hknw!elY} z2@0{_aI_i~$T#T1qbCX<_2b%cj-}|&gTF=$%Iyx*r{KvmKu|aCMu0!8)n~GJWUb@! zOwH)U%ubd}NyswsdR8EW)_3g&S_P8fR)Il5rOnghf2qQ?3EXE@FJu!!a+{l93OUR^ zad-En*!?n=rf+qkmoQ9#ee)sNOIZ5;5KR|ry12m^;F5kP?_#Q7@M_dRm zorlaHOf=;h)ya7yi+a}bzxzJ{+2@#~NgT4CqT-@Am#_Bya>A`-42wiP09rz}L`y!G zAb#(0QGVC%=Nudy35bB>>|9&fFH7!-w|*N62_pg{xW$+>ThpYr)5IytNXDe;67WXh zZ%c4zs5v`%!owvxuHxxBELYK5oth*kpcqla@~y~p$>cQXaC`F0LezcLZfd-WSmIKbjC<1G2J-y360)r!L*U z)?*AN$-{$;({U)7dyh7M4tBetmfg-YIU#~q6(f;E=)uec{pL>~5S&d{xMJCv}e z8Wqr!hGL6;7!IdNDAA=!g5bSV1UJ?~v07CfTl-pP)MYeOLPV)JnO;;AotZT2bRt&+#*=(Qgp31nl_ zWTSM?duXSz5Oo2m2}xJ6649VDk9!y9P~>)J+j7}ydi}7oS2i))k7{>YM0>OCqK>Up zK?e*_g3Ho*FR{lV!_0P#9n#I`A4KwVJR-i)KA1dT*csq$OZ3(=+0sxf1W9;h7>goE zBvC=9>?*3_EH^K`_E3g4(9>a;LUel+y4x-X61e5z%P+*T# z<9z*MxekjQnha0LEE?MH-Y&25@8U!%kip2XC$fh#|#Q8FBZ+`l)Ttl4vG zEAANR4JND&=xwk#6&=DeXg_bMg5x!6c&T&LCC__dmKTwAq1X#3r6Ph8!}^_e@*rC! z-)G^pUytC=!{4w#gJ{`+EpXn6wWBPCWeR{A$Q4ILmSheW6bqChMLaPz!d}3^$|z-% zM{3N*(^T_Lx8`lQjlm+`<8mzr3B`R|FafO2Z^QU_phrlLzbuwC+=LWsxC{cl%W-5H zhob6-d3kx0ngSphYH6^a%Zlm5%x0u`0w4s`9t%uN4O+0Sen%g+$}WQj8}{vN5S;ea z>R$Fgi1qOf(J}L~`6e!3(*FP(Ct6PLyaZDZzHA{NNu$Ci2KVPmpatoAk$Jg?fH}~E zA)ioKZM?-?l-m5p#ygtq$WQLS+wp7^`JDDWNbOTiYhxyZ%fP?UV&IK4=Z)wV>7Ly$ zr?ds6YFsqvA$GG?fb$h0N)|bOSNDmcSCp)~s~hlfvETWsMu#y5vROqJlG{ttibu9u zttfcDxm(1~HI+sBkk&$qo)#HPhL9an-#NR~6~4+@^#x;Ht>)ak{QlrbI(c{EJ@;pC z=&*(ae`pk$C3>=o1DIiTEqkl}--QiPA*6bAwV?AWx&^S@mx08;-=D3XM=>uZ4PiT-(LCXY9q7p1#4 zzwvb!l|ZK7+Tc#jsj(H9Fjf$qd#p4qW{HXEEE{5|JTzbE?>~&GfD;?oePT|0b?0|3 z%AS)B!Ky|#9^6XuO*-8{Xr!;K12YlQXZ%ArbI~lI=|k2fQfRfY~0Ao=2z+dvRdtudWiX+V}XWDtOx=eke3O)V()!`QYe|THZVZJRMrPG@f zKO6v!SwHZzmDE*R;1~7q4tfNJo!|MZ*tIvnr$?^!{I~l@575de`tJd!q82~@`Ps1Z zE4oH|Cbe2%5hOXd%_D&OyrFhRjnL0!@B=HZRA<2inHd2D$D2UcB3L4Dq6sXF_`3Ij zrFy3`97%R_$<)FxT!G7p5bpM=ctvOF@U|c1r6K})C8j&M+_A_iuMZSzK-=Sg{KNc{ zC_7i_ELy3N<=jFB^WVvr0BV+%?YMDTX01XF7)|YPCF8JtUw|H{tv$Q2H&ABWB5n~ z647ZrK_}6N_}38kWPyAs7)1xtIb0E@4*@BMq~PFS;_2N2EMSEj@{oDQg}ZCPr_-;- z(%%-9ltchPVkA@R3g6?$3XTn@*F}L%oZ?YSBgeEEM$de~8?G^5-aQHOcC`r?E7*C; zwJLI$Wfie2cXnu-6go7eR|{SO?0G);=_7;|(@E%uKr2FpXhsg?;_);npkt;Trn_d0 zq+*Jp;A;rP0{CNZ*XpG^!peRoX?^zhdjGgO9_k3pPKN?d&nVF2Y}o#zVmZ8~*ZaxY zW}v-ULSruMcqd`feyVpVu{8_FJvlvDo1ee3pki3iP02}Ic<;zt>#ww3RHltS!$&-NG} z2%v{T#|)X-*^PGU{eljWGb(hPKof`X=fkh@@wrSP0F-D|9puUR2>B&VPL_uDjGpsv|ls;JO8Ik$5u@$i{B{gt7r(n(R9Z8=n zhYswSR!5&zXL&7Q=zBbtzsITqfwJl3ZL7{gpbB2n!bp?T+nXq#zomm15&Wc6lfkLH zYp(jZmpY#i>O`@l{cF8NM*DsS8+wx7hG*Nig5}K|zA>m8yyB>KAWUq*5K^7hlxXKe zw}d}eYaWdTJk{b1&7Mdu>CjT};$+|`a0Om?7>1cpo0InG=er!VTi8dt7#4Zp^0fnf z^3#oB zrM-L%c`9EYMfkR6EbjX44c^b6oAQd0<&>!_6vY_3vQX^b)UtR&nn~ zJ(ilR8(nOnKZsmhU32%<6Sg@y#+3UT;1lcozZZvhOyS0U}>2Ya%!`R@lYEE;fD_?~UOGtH|u+-%sYM65=h=4bJW$9QL{O2})s@l-vhxjEDz+QCU$s^4?0B>DY$2?8B z?)1VAkc}G7TX&M59X$uXA_ZpP)WGqPV`TC8c!Y!8fXkmpQ7w*7;BkJv(9noYOnf}{ z>{-z3gzEp{fB%(F{_DN=O#HFy+({haI?Z+ZM@%Bj94!zf1xO>umQ2=v_tO8n)dgbd>))Irx7%?+6Z= z8zt9jRS+k`{LI4B$!`-Ec8s0u^D2wO$n?R>qSX`KLOkxm(8@qDQjvEpcnFS~Es)Odtq zlwPM@h}GaN*ro{c!`qy@Cl=AYf8=kG8cC4^1D&vMFMbz$yIS^TnDWbNaIgRkax?uP z^NwKT^eN6ks3S4vL$V5>e)r**=}nWyS4liKXF)baFc{VJSlL?(i@dC?hoKE|)f9in z#SzPA-IgK&N?+{WmW5k3jZC}sz*h&9zU7N+LAy6|b8}z$U$pN&2u!7rk-2;Cp4IN} z7k8F8J>TLoC4>y)o17|Z(y1_V9Xp8VD5w+<@1Y4RPN-0eE@d{EUqd3!VP z!KeH|CXrXy5eSv&RZAPBT`pAkaxd{hN~viEvXiS+2`yLuUim&!;5O&fyV5)zM;rn~WscyYJ1r{TR(3`Cks z>Q4J9>b``7oPUE&g+QT0Mqh||z5l{U0sT}8o);JjVwg;phno9k5WzAxVZ#}ly0$S_ z9-Eba-U~~>*qFzO$l{X*fK)qXSO$0XfVC0Y*+nl1ltK?U86L6xz7twGbC5#s=D48)WN(H&&;UReG5|Ypx8>vH7lT4zyB65#%cYY1LW>vw{VDjD z$=&}w#Fgag8ADA$ZPX-dFmyt_>DiJffN-x{jMkf=sQf3voqzK(P?TsR@IkvrczF1P z7F1Gm&b-*JnyUsb{M?N?@!EfOjaT==>@_g;CMq`}qZi36n35J(%+Ai9RrP-F-`d)i zo!z|fe*20D_)k9Pe|xz?(n(wQZk^NM{|*c+XHfj8SQV>-#32A9m8a!Uay3zWJ1w`F z5y#>uz<(tlR%x}Rd!Q44_umK~{nMHS^4zhiLI|2uhy{_K@y@}i~7aW<#Vj0su~H0Prb^i zEiEg1L#Csvyw}~~Lg+7^Am62)Epo(>!nQiv!;BVjj&?p{kg{ zDqC44JQv)%9d*N!@CEa4d|b$9!5zR#vusg8j!Rv8B}v<_HRflB))<0^q(< zLbzwjw{QAIrKRASXwvmNuYh?x&^MmiN!Iy`Ex0Yt8o{{dAKNk{8$r+6wAH^RF=1Kcj1mfDx5NBTze=2s;uN@Ot@hP_ z?}($nBGSFbf&T>bHOzq(aqYv+hFE+qVGG@><JaKd5>VpQ%I^F!Xd7J@Zx*zgp!&zCE zH3!eymBHTT`1_cHy3*l3$<_6Tw}(=6V77cQ?ew?sgYJZq%00?`82j}rGl!&4-w)Xv zHEmNZLq10v4<&sL;pxL+F$8Njavd%K=?BEekN?_k{^w&B*mosnHgbLYJ{>2Enxsy5 zhTt2Qv*V=7N*v?{r(z|LZ@L^A*z|4YD5xYZ@Ei@krim9;ckny2o48LoKmoRUNx4PR zY1fejJ3BH0WKx>kIc@h+ir&Q034>z*BAG#R{#2={n_IQRQiUuqG?{8l$h9V>Hf9!k z3hZ6ZnVBNU16WT5&>au73wsl{Nl$jGeU0v$6a;AIA%*2 z*p0>LV*=6URYy3HO8vOyc$*`UxAkOv-#zcc)tCYpt~ybLkn0T;WR%9H(B_MfC%Urc z(E$%_(U~Hb6iKS`!}}Erv00SXHJ#D>MT~^#YXw1q*+e+fVF`CX*U0xd6`LFVUotI?N~W$ z3X6!;j3Jn94nN58lwzA^2^qAkA5az{j?lbu zk5h9zTZ_xe63L~p(a!}1Ylu7O>~9)Nxi-G0mL4`t2rHj8c3VDm`2jz8R5CSHyp#Lo zo@Mu;N~sQq-N(Q_!eDZy$HK#HQuK{%->q3B88<){ueu?j;-|3$L zUI0X>H?SYj%ywDeUM2=Pd>0O`Z z@7L9x`Pb#Ib2KR?ZnCnmZT6TuItEN6q~QzSatn)`oO{2aB+CpW(R?I>Z5OnRUbk}s zm@Cu85hTgQ3o!G)7IfF-cZooE|B&#|u_WHxzhopg1k#Fp@&T;196?avl`hRSY8^$W zNz*M%+fl3*0}Re|>p#o{0V~v(W$w2gu^^MMuV$+O0;z{bB7AB}8OV$Y5~Ch@Kl(Z| zlCS#Usb;-T9s7@)7BWE*5pG|?!{a`DNW0F(Apeq?pAbI5QpCYg={&LCTgX=<*B*%f z<%>yP#!-v)))Yz;1afM>tI0}O!g~iAnf}~NCV+!$o?AyJq!eTxKBcZIt#4ed2l%h* zccev>_}x^!LqjqBvO1Np+|HBFd7m7KDl4}&_4L@~<+~h@t0=C#SEfY}9DW}hzqJEo zShZ0E_keO3D2_{IUcUVB3x%_st3}NoYwaXA%D>IgyTYl4g}49bjw!I+IcQ@ATJn#I zr2qK1{>yLjVgVe4Q#En;|MSTIN_^|DJQdMLoquv*|L$cw9pE&*bN<&p>%Yop+vNkv z^m(XD{<59_`t^VN*W%Tw(Q%Xij1pgYoh%B5K)(Vl86dqaE3K{ikLCD)CI#n}-<;j? z`FLaCq^i5GJd0gLH{Ya@olOboZ@EofyfGfma7mA#k;HZmHP_X*YpF>+zUA)~-eqr# zLQ0;rOS&vcdKxsvQom0n{%GuL1I0aiJ1lBg_2STXT@lMSjDhrP0g7Z0d~918u@mPV{^*-5c7 zisDzqXiWnBJh7*S@E^aV*$d?V0LUnQ|9O$3!osinE-19wXE}L!z-xZ*z0=z_oCwhK zdJ9YB?QQF9l>Pi#LO zxWA?)uxX4*&@t|KFb4p6Vx3INQJ{{gX;}m3i%p>V4C1@xrn)ifJMui;C*RzWWWZ7l zSgsV81+0@ij*XS|RrF3@>^zIXb@KisR+M!ycMj}u#Bt^s)YH((ud{@tR93eEnVN@V z5OaH#l9F=%gh(TjtGuA_Re%2xT|;PmDM8SmKP}^ix=2pLEN*nF9%5@;t zH<58y=6&+Z7GtL=O?aDI-9(E;+~fW$KLUmU(gpSV!{hj*7*edWSAFB`IHuZVjrKb& zMyRBuq|!yOhz>uP>IoNDJfLty-I{v892}JW=Pd^}hrReUpT7z?vHK$GraVm^4?L)& z{#G%9Z~a9QGSr*)U_N60{aGe{C|wcF#M>@LBIbNf*!M~;Nt)}liq&oNkz}mTJ2i#J z14SJnTMVVNHN(1PTK6xGp)eq0Y~6WcaPGpgsxP3e_Fsk!6P# z3{Ebk|9K?py`c_7^@L-o6B%IeQR3c@%yJ)APW%``hW$V6eRWt>Tf46=SxOi*Dz)e? zm5`8SAT13_2#QKbBc00tX`~yZ8|e-uqy(kALmH*~j)}2xf7|_W&U4Rs?!M3WAFMf; z%r(ZFzxVgPQwA1&c#TE!fRuUMx$Hczgok;%V8XckGe`{Y^>z2)KO5h?^h~!WJTZ}8 z>lSBju55PxZP#2u!oRaKzuFP@j3aW`$D`&(Mn_jZrMA6Pynft4%E!m&hFO-Z9Ci_F zuCOPR>__uH@PF(uy)yLr`exg6K&AY3knis@>;30|qBf?Axl7B#NnAa9W1Onzr4o3nZ|k1Z z89pJg2C?zdGgq`fam;vg!3h5gJ~K!TSk$8i`G#d`bfNhMI@}7Ko_FSsKcG9j+dZp{ zpk*lREOlaiU5BZprp9uj-(5G?c!{=KMj8Q*jy46SdPNvPMWsgmB^9)$Mm~5+d=qu0 zv^5qCEjL+T9A*!An!1A{A}RT5zTY=CIk_IJ0M5rA{fU&A&+?VhxRIf&g0d8hfEGs; z6@NAVTk?H{vq(?}hv+DpE#6BP7o1`NIZu)#Uni&IgSZrmU68A_-fC}ecP?edKY|h= zkRH?l@poKa9+xbJg!;nr@|Bi2aV?p(7GSD?h}hzZ+`1Le=7)bTo^){gB|yQ^=~19K ze1Ar()&4ragy88bxJPkbo)%%GZh4KgvlHOH%_pCA*O4f~L79+ES-aF#NZP}GrNMb@ z*m>S7>by!uvc;g4GyhtnZ%4{m&TADnVA)#DKK=_OI?=dt@@T1a?2nd3Ha=JS`@D)U zD6N;FLX)8UC_Lky>RFkY;Ke2C!Z6_io32UKtxTGfx@=6efP+Llhh?x@2^o}bIAKqS zD53~0SCi<*=8FkW@ZM>G`Y0&HGQ@E%Q+o1J1iX0Az4lQ;%WK@1?M~O#*XHuG%z9U)ABtW%N+{j>T(2)j zh)b^zf5=aiRUY=~)2A%E_owd^&-X$r&=E#Ykx%6PW_y(wQxqNS-;oUfl29UAbdJNB zl$@y(f;&(Axpul=Nk0?^YlkSKc1-C#go(#n6;k3#O8Oq2NqK~$-GZ5%jw86Gm+R-} z7ZTUyhj+9AqpGH+R%tNRAB1iJDJrq@BH`kl8G{J$t^p4}MmZ_yn-9UJ%hnzmM{BQqM zS$Im19p_ZX(cRKkWhy}X_=4+iqbO`71nFV>#{R1N4rp1XSr4|?FYbs^G8+f7sJ)g< zQp5=;sl)$mvWqgpy5U@W1Ol1=GNAjb@F++Dh{7ZN%k>_I|D$_EQO6X!LLFg$b;G~@ z%<&E|<_|jpV)_pKWC(0?urV)6G3Xur;ZQ}K)}35yoKd;VfJn`)2sALC%mmOw8QO#Hi_d~j>70;3fO@uJ z<@Pq}YU7Jo9Ap#~RKspKr}_Q~zWdH`!k{a2xWW8WB*y~1qoEL~hUlz-b*!pgyXq*B zA1>s=juXD=-UOuwFp}UnD~-@aUyzhFwki9yKYriuPD zt8$k?h@p_rzvoq#ta_V&)Rg!4e4W*(K0rriZP*`cL+U?PtaYBr4doZzlRr)2zX^}Hu9 z`~sDNqEqp4QAQY5x-oR8&VE$K#Ig`qXdgBrcxJnUFWq{EkZ8`|_1TFX375~nIHVvA z3_Rt@l6^pfQyJ~m5_T*Auf_qu*VWavQWZA~^3aV3E3S#K^`QO5!Zlwa{4lv_s{G$5@mk799uE3G)R0J6gA7?KB$=U2u3{jV@O za0C^1eE#k&-UlB8JoAkpAXt>CZD> zAvxb8Q3pm9Dx*Uh&aA$v?51Dx4HH7Npn-zocz=Fi1HdV6Dz~%94HgvKvL=q;vxra?tD!M+!jG4?mud!)2VhaqN7_+1A&c= z>T-;|MhWCi5kbeNlAQ9mZ(cLzGTQ8_1gI)<3*TdiQ#l&Say=_o^A$u0q4W0fp#+41 zN~I$vH}^eh#SvI|P7@yhvwRHti_S$|!hcKjN2L%qoCj1+5#K9?o=4(tUKqx%ZL0T4 z)Q&iH##z9M($Ucj4a`KLW@GE*C5Wa4Pl!B=Rz&**JmToc=sRz|JIXTPpcVBLrXQR| z2?zWh4^)N%3 zNH871o!lY*{jdkFQFjZ0?A^Qf{6?ft|6T^KF;?)DQ;gGI{QZ(Yi}o8IAf~BpA#G3} z@SlR3-~D=x5h$v+iSN0?E8T5T=qz+4r$K$^U*sM*jKBJff&lnYk;1x@hkvqE2()F& zr8WDe1%Df|egAeSZ>WeF+xLJ_2X^k|RLQGh`-Yc|-45%0x!ZEJ(-T0Vf`!m3vEocHlptSCp_%BrgLqY|%T0Zau{ zAuVJ1^QX#Q?dROyjzv;2fa&zzD|rL5F{scF;vv8geSknb@$~9kXa|8?Gzy6Xc9sD9 zChpaW(h4llq~%7$@}%51EgpOQNAnQ=!#MAG_&jJ6vI3o4{RuWgo zbswVOZx&NS9(Bdex7xZw4H{;JL`KDitmi~i95U|J_*MZ$8tD1|L*NFze*YE2-ZFmkh?+$(hm~6 zmmV(uW`p)j;N6Gst72igA>JOLd9_X+p%Ti+TuDhuS$ZvIy>n;E;NVq7@2Ig!323%f z{p*w4Bb}4b9=JJLp;<4B1kCCcTVdL!#u9Vu1@!bNxB7>|sIbM3&P86=;qRf3Ojl+Z zA0L0+7*YbG{umn<^D}HdPOkuA%7zDOMYjxNa0d{uY1Jb8o#Wl$Jct2DR(_>6`xUS3)SdfS-TG_`3!FdLyJIq!VNo zCWn`?qgW8M3G)ykaAz{wXq>umZ<}Y7(A&q1-ssbd$p*Mw^9(!5QFkVG&^{2%u_Fsz zqrg52t8_l&OFXGge3UcJ_1lBwuzXBYiSDy*@bG!qtjC9KbCLxc4=*PFp8YQJdZ6z+ z3JtR#k@D@*kbv|-K=iB~6P>(WC7#QrakKGDDVSmOaPRSnz9W`i_ms`NGlEWv|9ZsF$ z-_+Lf(>9${rI5?r;)F&n9f6f$g_+gdF5HOUD5FD4>m10{#owVog% zsqk>Lwx;H!5#loFnSI0-3O-Tzu05@0z6>280i+loCy1wKdT|5H63OiOEPCwta^Smn z{jv&XJgU_QbwPOB^0R6on|+i-j*=IkB#hpnp;Z3P$q&>;T{1+m*&1PY?wAAans0RU z2z%i3StvJD5>icftYB=8=gh=>SwacLyzFjU*JS0mz;X;Ri((w!a!^VDNB_SV_#0@$f6M{A7Rpcvmmm5*&W|Zd$LF^8PcEJl zmz)WpYY@UN#;Y?n1eSH&CpP?M#9m%P<+RB|b%YDLV@ajul`k!OG0GJs0s=bkL&4 zg-G%Sd1V2?w`#!o{H-qS(?O6C=qLc=X#MgMXQR$XlaxPfoCURJTY zBSm$BtKPpSj_1cmLy6!gf@%lAm0sO8oBkHMI?6@8F1uC zxxNvAl+^dI4_8-LBDzD6karbtpD6b6JAOV|zRNKi9-eW>g4hfFw ztU{Djmd&7Sa zwyrk47=ygVW30yVdEGmC%WNI#)VUDm{FIsfewEP&X)S2};nCfg@qed zN%4vK~}D^ zRPxy+w=+NL_6FQd&TO&Lm>?LjiE?CgUH68PV1IEeb#;jjM}gUi1; zI>?A0h@=txkREyQ6&}9Y=Lm{(dXlMtP!XN{~-D(X2i$MaNG6JK+W<2=~Vvv`oh8vGP%OdIA=M(Ub<5-q&SNI(&yVg0#6tlOICIU5`d z@STji0-ulw1a#2oR4#`;Ge;yf=8f)IE6G>4ji=p_^uUp4$L8fJf}x@iW{mz630i+H z>1frx>o0!h%`5734JsIpjEuxaX=nl18AK#T;9YlQqLQMoJVLpOyBlc1Cj{TM=Slwq z*A-Kk{x-BTZNU4R18p?o}P|POyp^#p|F9}yaWcOTKV*q7K8Wwd?@jc z8Utd941$B93RMORbiH}{on?_7&V`pA7{Z~T_%%V&v4c+WHdJ*B(7wrt`kk)?_$a99 z-aB>6?C=r|+AqNogwZe@p4$T=au8j=J0CWEc>M(ZsK5jBh|B)XD~o?M0!L8jP;~vj z82A$_qY@%)B?z|{13o?yGdN0MxrnkEE3=u$)DEF0R7MHq?}$XKuf)9m;MWJuB&%?r z3atMcmy!EzL?bX_l#&p?X28y-(EYrXZmdH8g%yweLDGf3bjtC!gF(Eh2dHTjmU8VNW7Hiq4c=v|L0?b)>XV(F?LvyxN%|krqV-lw;-lhjz5A1!Aj5hv`JfKGM8TS5 zfd1(B4EiR+>G1=u>d&4l7UsT0{C_vlMD1xU+;vP%Z9e{1(C)R$yyRztqi4bl^f+$2 zjNgx@*1e$L78T@nRPyQDM3*2BWtXw*$?`NGc?2Y*0OW1OuJYcZI9ak%9^m}e^(8S)?e@-GkG z@Rz5d7Ogm<=wmL&cDUt!@?g1WA&q!wMUIYKOre!YPtPs+a=9iwkBcfQcNiYd=v|TdmZz}uWr|{&=fHp(+?DYpbW({K8E)mfbKRe(dwBce(lfA8ea$VCk?O?6 zTzaYAu6|b?kD#XUYWvp)^3v!ctR~pnl}cPOuo2P}u)^}B|Bk0s>L-EyaBQ4?szRO&A{e$n|XIItW1>4hBx7vLz?8Gx2`kHj`eIT-T#t68284M1uu~V<;G@h!CbnPUe6#x^G%aa z!tiJ%UfS#q&wu{RQ+%>Jj`?{-;^yWyS;StG1wLiiSu}KaX^lGleCx_l^f|_d-6O<; z=ax<^bXr3DUr`Gmu$ZDTem@!L&hO|C-4eU|+{LdMOLS89#HV0z9Ck+q?3-5)n)ZYH zeL#l6--^T_C29F)Zl5Rayoi!T&&kiPuBbpRFVE5o@m_XCuxnb=dY;<#o3)>cqr5?s zg%4|um-GOmA%JozyFM|&MzB9e&i7NXeE5)Qu!D6y%~1U@1*g2af&mWB=Z%~70dYs*fX{F&DL?7mOH1*vb*Bb}!@#|LqTnc_b)&uR1)2qxCKiu+Ru$-Vt zmilnoElUfG!9(J7wZkpPqyxslD1Z{@;1m8*gRmN~e1)3G8HEnVGGjlXP!+mLsHXkQT!`mi(> zmM_kO0%Sz$%jr3}5kdCE=WmX$Ek09HdleLM=~~ozxczRc@aSr8y-n_1M4UH}3H90ex! zSx%l3(*Y|(FYtCeB_yZVSr??fq`v)`&=6YB2Zfwy==dU0F{86xC0637Xbid2sMWl@ z#H5vhMU$=uQAeZ+nzD+DW=E>$*rixJ@PvL>HD-e{H##>?d7OG!%lZ%(eo}+RSZPI` z1I*Ge^y)8GPY<%jzhH}sh#)lvjkUm|MBhiVwwUv*si|>I5~e_Fq5n8INUo-)(%MxN zu`isUiG#}7t15s+Epx8|HTs@Ei4_&|-g9EjXkoyvU7fH&LXtar%4*in*?n?OBbE*)c=I0d!hTz zdsjj=jb9|nvH>=Cu{Sz5+;q#Ey2XQw*Dc;bF!^cNNg1ZtDp0e&hMe!0(Y z<<5s12(oB#64Bw7i!lO0j_va~q##oRK^E z`i^>l6_g|TdG}Tr561w20=%_kMM_!eYWZEQc7vdxM)-7o6SX zdgiY2L+0(zW*l2{hF&#q$t3R(keFkbON#m*1trPQ8qdY-hNV?(z)#QCJ-I?VQh}U&a<3 zR9xkOCxg`8l_2QCc;k92d8E7e0AK$7$MRi+M78}vALfR)A5ZM;V1?5lqY`1|_OnFB zouv6hoX$hl1nZxu&Q#m2v9cN9eggXFZG@tUETvIQUsrfn+(rh@-Id8`_=PF((AnMR zswJtdbfmj0oZUHl{0| z)Blow*)$qVs$ks%vnh822e)}olV9QQ`GzKN8>U{O=p)JxzQd3FEFNXPcl>s`7v2BpbTJM-N(2elRXZNbN# zr|qAw?RIgl8*dgmm^@R<&CLb2W_Me7_6$K~rY}}oXZw58#~oEQlA%)euPzd>coQ3` zeh>bmXXN|p;3k5V&~U2eEBO;+M3=8SB4yyZk9Cii8|WzUmu@x-eW2n&QKOHQrDvB4 zsF58`9!broPOlm{sf^X!J8{q1G}7N1CV2Hdu2M)*6gFH) zhutJ}J%SoWZ|m%=R^MCIdtw&89WiM%Qkb_4D~yb57A)uD((AgtId%cWya*8LZw>V3 ztyEoX-lm}-)q(6)98v8~ztH^5he+j>CnWrz2OdpXAgsk+Vl8JgZdt$C#lVn zp)>rM`a>R_MY&v)XR1tOduwzaqi6?ALIT^zE7>f(d~AF>NE**Kz>+>YMzcfH#7KHz z(Ln=}c=D+F)!XN`jFc7hx_by5HhKl$gCX8ujde{7Q|#QllH}sYGWzoDw)WU<{rNua z$XeJRnbG&971Gqyw3nV?aWX&mn>+tvjZsxtZM0>T_?Lo+BR2P(Gn`uIgE%zrgSRSf z&}7WpnbpRD>G}fpB_IeJZ5E*TDRY1K1LEBgMOOzR_bZyqU*^?q=01Lzq`PwY%eqTv zq@~B?!7usCqa1wP7GUX_()a|sEbMm5ZI6vV&M4)It$OUdJ8rp?=ul{1>qbibcaQKx zYd|oA$H~yUh}WBzk-@jy(CJlXzrEoib=P4>-LtcOr(uQe?$V%Ovt8P~4-O6=GY-Up zJaNb!mFO1ql5t7EbVy4+OQT zloo-lOH5lC)=k%|LgTkFw}Y z=P{q{5(!MO4?mjPwns?MUy^Anz~hMD@n#t?+2O(pru0-j>7prVE`=T3Uet z1Ec8hvj^=Bwr3~zEZ@mULA$TP1Nj`|eqllUz4ZolVTW>?(8^5HxsR}cX#N~=G0zZH z=GB`HoAJb>(^g6Zd>-pU_yyndGlu)eU%Rmw&23v{uFJW(?&o;Bo)y(ZrF;PccAbNT z?-=&?*V`7=M_1jybjCth_rj4HGakN>;dx)- za%{zaBSov3KKXTXCWD-?-I5yDoMqf;~sWTU#W$+{UOOAidmX zpst?C@{_u!{4Q;H^t-uUn_I>&T0z*YGBh5zc4MCW%(pXpgz5_o=}1?LeDw6jvcVZV zkl7`gpgf4Vm8?$GFHHAfq99LsOHQLRz5mtL`|sGD5g10grhBtVYaAO^_S6X7FNdV3 z++pvF)Z6od2HW2HUc}t<>tB@a+O4dcO8rGZ`xmj}OLj;9uY>T?V(TTC7Dz&4tM0Tm z)sqhvTNsk?TN>3qCOMpGQUu|tPX7k?=H2|=7u(qvn|P?QE)5}VF8?F!_YCED8J?{3RUuMi>;J7KGNR>0zUP1T$tGQkZo;k zRi9#nM_-&GmSv5z`%7!{=lk!)Ab0jGYhPW$7;{S5?Uj=fn%o*BKXvNVm$ytA?wapC z$4_LKoGzT)TNB)oBUxN|rn9O4TImqCM&;9kfN+3P-iNKh4zpuncX7*drCn)Bf8xpt z;~J0A5OVvA)E-TQjlJY<=kCAY*?(#OQQTk`th0qF?ftjfk{x!IBFFdYPDz*gzi%2C zSm$QiRofoTAamPWBzGY4+6f&T+w0D;T2i?)AL5J7|8?=1@fy)Qf88DDl&eF;>g9rE z)_bMx(#hwgDBsMAtGhdwtO2#Vv(h7wV~K6vD5osRyy;Sbk{Xa=AMIk z)a!fl_Gbhw+X)=@u4#dQJh`ITVN<)$zBf(i1BInAylihM|Ncf+T(u-6FF0mgR-+|J z?i$VV?K^)2mv7;dlj@UF%@15dMV8yp0dCQzx1#cR8N4FPjg-%#EZ0rVObkkapG8ue zFMdPQvbxV1gVxG=7U_ox__Yt>g|>#u-N-Pjq~TO=ZJ9 zHoBv*Ivj0%eUCfYygseow}28!A4g?s)=a2Ra$n-|qbT+h#Rn==rPeN2jjq>QCSbl` zUwD67rgjl-ZEarlib~k2{G+QY&gcGIzVpPyOz~tdAlS;m!QqLSzNF@iHSPXMzlVF0 zT)|bzds4l7?1U%zQfv{LCmCPJU}dSznu5}BGL1JoYJPs+61cACX8!5sd27p6=>z>! zy2|+=+4gxs`)~AiFFUONSTzMpbi89 z2;>k8R!*~?TT@fRz}FRjli_*-sT=C*4sm`l-%kBsr4S^NkzmrULEYiZiHHvXmZ<0A z?;dVBeG*viV5>N- zwDM|#)6!g~8T3B@GT-~QB)OK3JbMgzKPY#NX5ov8)|LI1Ueo6y)zs8-avy4fo`bks z0LFov*zg$ib%D2PLD>Q3g9}>Kv7)|C#f>Wj)ZWEXzQyXJ`?x+8kv3>`m#gBBP zAWx)*xe?m&M{MsHiu;J;ezO5dFuC}!a}JxMzQ%PnlZv`7)4VT`^EG+~XC~DzF5oNi zN;)Dr;PyLRY$NG>25gToGu@aMV}!|Ex8~LEjxoQ3oN6~r{ECfus_K`N2i!?~;J)~G zhTdUKj;T*-m7+>&Tc$7!k1z??q{$t^#sV3^WR~WBt@Bk0lSGaOhBknmn33W&*^%l3 zSQHnNWC1k$JXNKfq9a{JJ&u&V81zSfPvedsKMH$@o0yj563%B)-I}te8jl%EBP{^) zrR5Z|vB|T>w2x^qd#wHvg+e8#sJulJV_;v8tmN6;{A4*j)eev%rTR7#0+FFEjj#iG zoDhK%bW(rhar&h5vYkpVk@H$pOU)S`;N?DwB0}}Rr6E@^#^!Addpq!&`IiExneJ8t zMNS0eo>tPgB@=9I0W^RS={-> zApLT~KOP)F{f@vgpy@>u9@3C_f#qKd8pM8k!-HFZgh7S`RJWuHVUY#*?x_xJ?0)kt z>x<6mE{`YG?doS#!9}IJ##WGPgf61VBG|Q>;9m-9B1NwzD1Qr!=!nh=+N<`NO-=&U z9tBW=+$Wfsnc0Rwn7~$_Yr32xhu?6wQLDb*Rg{;qX(h8U-bL#3un=$Z}T` z2Jx*$7mQC-SKp$#0(KIY#k(%d-ywXkt(~COcHNLsY_as5Kt1tjV{%4M$G>#wpU6YTaFz{%r1on(9o;(RtbDEVU zyrv;z=*Xs8R+;02laB+{T#rBed)?Qj-#G}q8KB34C3Gc9^CI=jeD$26ev=fF?)E-1S1)M z_wBu}p@9J2(~mNoLGLjdpnaR)K;@?}|^XskP!5K?#(Od$jglm*mz(6P^6L#)le z3YeI<4Ps4-CSJg7bNPYo;+;{bUh-#(cv)7qo1Ccd3ay?-T5x?zbTZ7;{E0<5{?_Uo zo6@N5`c$bmjzKlaOPUOU1oN^MJz=sQ#MjXg$twy_`UgS zeucPGKysx^VJs{kK3y`tuh&(OWF0Df85~(XGy9{)ATU+neY|Aoi9K8Eg2r}{NHhqr z?Gh3=5P^E5gU?*LZb}~b?10M!brxIry?QRy;=^qu{w+Wx7-klNlAnLCgNTPv@{%{) zLvyI*QAS`nrWOP4zrQo|-x=_LF~~aA$$GfuFTipI9`RR)({7Pqpxsb)OPmS3pW{qT zzj{G-j_5w)phy2VWqfAlfY20r_<;8QAI|I~1IIHhG@PgDIKN*|r4V1(oKRst~ zM%t*Tw6$3qT3((Vr$!9 z6zk-(DE;32_w)U1N)iH?=gN>$&7J@buLT}Oh67ewY%UDox9YYSY?u!I=Y<8Y^z<|x zJ+_TKXqGmtCW?=vZ?|q1Hg7N{7l+@=LE$VhfM9o>sbzkARdK@ z;sQaA?Qg^S<=_6b!h$bCLjVN%9~~ZN3g)}(x-h)`B z;^j3Q1iLCqVj?x@l1__JU}4!)G?O(QlRq4aq@*N=fbTi0BTSIgBbv1J8V6HAQ+mSH zCFbj*?e>eJJjHWlCEC-FA)dOcgizy0SuBa_wvQ{MJ{2FQ3nllWoSv zfL!o~#;0hn_rB$O`l2SH-%0v=cNQnc{evV#e$X7VHhOD?!Go21-k9ipXd4& zq7vT$W2K7P+$>t38I14%I$o(Zy@`oayTfd^yOEoDud)U+N#q<*!Ne=5KD!0|Uh9!y ztzB8W>XaZL{{)oYTg7fWTW6}|QX)K`o#^jP_0~_Cz5vx=p+dv~)dk-3(Rby&6P$9^ zeiOLqvn2FWgx& z<7Rem;2TsggeTAX!N_+%avINVr$||aV}XnHOsrlrM0b_IMRz17+C*a^;!6J5MTXDv zZu?t0GzJ@e@8woJzpV;XJ8YX$i%}UWrRPnZy+19k2v9T(!H zhgt#uL8-Zz@kKaY!Z>ldIyTmo)mLMe{NCM44;N%3bkLQ-dl1Uf!SCTe2NM17 zB@J~6v+Y4vwr5c%?I9Py!M1boPu4y zr%hX1`z27WI1xJVK-ba71_WAK`bcIv%Gs;#IHP0p$VAyaQh8#2*L>u4vSrzKasojv zqYttWZTf_uz*LxNljr<=;Qhg}opHwN1FiVAb~_pX*#5Lv&y;Yk&ICm8j2}O7TwE>gLP@)t7-!54xDlYDF2< zw#RA>Z2A?{#Kc4pNO!*yATI8!PvQ}j%(F_q$?&yRkR98?%1V;K%PUZ z@jMp_lH!kD(ja-Il>vf)YoQ=TK=np{YqhI%YaAjQRT6!k>c#b_;xSnl(F09tTW3gk>>GWjae1s~we8QW&G##* zy+{c_zC$Z2E*>2hu)*z6DC+4RXvHhGwn#|P=?4|Rs0x_P=H^H>Q85;Y0zjhBW5tI6 zWeWramCmQ*QjGfvCHJ%3RP9gjZ;+YH?%CUbOQEd=f^Qj}i1JscMd2?;y__cGx1;(0K zXJzPt3NQgIhQOCr^8EaTP9<;T{1wUhpAIDoRJP)^E>NA(pn;^m>YRtih7IS+%E~3c zr%J*Ps-e*4+&GQBB)vZi687VIZc>l4S+Q(Tn^F6aE@_*{>C;&%k)gU+nH z{KfL?S~-g-tLVNoAmcD4f=wQ6PkBkz&@60~$IgTMNe=-8Imqsr2+M5tub0$NF9tQg!x z9WTpZ$LV&lft|m3)ND^rPglu9asI8o^MESsCkirITJ!ln0;!B$(_lvL0OSg~L`WO{ z++6oG!@7r9XPOL%=i&Pt z*_N(?2n@e#QKh9UKSWNs0Pl;&dW#7U*2LKeD2lw}u!FetbuV4IbVI4L z1BAE$wxU2YSs>HVG4M2-Q9nD9dL7W4>3?v-zDO(ZLoFr{E(6S*Xp|~!A29Uhs*B%I7`Bv>lyUd#|)mo*%^lXG*KcVzc8Q+Z@OT7r8)v zj@k&Q?#LH{a;sL3@^80Q$BSaH6nCpb7%MCVtpkw&D5gguO-)T3L8sRS zruVndP~Nd3@$GQi zG6B6Pxk8d@YfgcccW=Sae5gM5^qkLrWJaAp5e}m6sFN_w_wFCcn+&z}=&zeI_|k(k z%B46t!4;<~&(3CcV8;aDtlq;|pqJ$(cxmfNht~uIR3D2UTY%RiDFSeo!uuv_cXt;w zvV_!htbAiScw&)Uwx!O~n{oxy)=2~>M9nZr1k5j$I|GtqO8Pqmal}1Xe}Dg%uMq+m zGmL6;dJ9u7YNf@k?KuWeB|`%xU}yJb#H}Ch$q4lmwa^$D4S|WvyTjL=TiOc@+-Rji z6_Qsm=Q9jw*dG#Aq4J}dtaN;aY5d*yVv87qFzEqBItZA85cA4p{{LH4_y2T){-+c4 zKb@fee{_OkGiuHKm<4da)&F9R{#jk2OP;+k{{TJ#z?5P@HyNlYW?{o(re~IHEO+?^ zWnLQH2Q`IjD4P8K=~G@*IVpY*-3+%MG?JJ6iJ?K*${e00j=#~|DVxG^@Y(84R{68HO}6}FSc9Tb3gi~qe}I@~gmF#<4c zZY-~?D1qj8YH3!~=36N#-pR1+nBuLtu6#p>!g}wuOCaqP?8>$iUM~MyuX8gi>fpWNYQa^qZU1P~-7C*69OzBlRe0H#m95c~wLz7SK~Mb^HM#@K&YrPb=mi&v zkHQRbp@!}+>#l<(Q$gzc0S+n$BPTDXirjw9Qq}fTaZ88w{Y`!Cv;KpXXYQH_-M4N* z2c-1%4JmSuUc=(t^WsWN#IQk!MU_n3ZrT0Pn9+F{_uvyv{?&%a@SAAj(6=3Wiq+H% zR3W0S0@Ni?n@?}xJO>FE{83&$)HCDEKdE7c{vi7zn95bzE|bdW{2xN>e+aREgy(;4 z3ik0P? zcd)_5HJ9Ve73ucYE#{6{1Vlj zTaFbXa9-X=H3Ld()u7wxmD8K_Mwq^SH_wyL(t3jfauZ^)5OZJ!6LdKUw^q4i-W!dd z*1t9mZEki2XuG8h4JQlb(kI(qni{^KL}iByajx$XtsDsIk(AJ9_lY@w!`)-RTO@c6 zP4D<0g*5-cTm_c23aT@LXDu9tn_6i7)1qL5>zg}Y+P4;1v?bn(G5u`w0vA1wptv!9 zw0R9YX=M8r67+zHAIc+V%5C^r%RZ~=JQm>C;kx8rzc73vqll72K<7D<6LWhz!K-F2 zzhBuSE@k5sYC&*44OBE4_FEZwPN6~#i#W)(#+z?ZJ&l8MZlj+aUK*e-fwa3CjegCs z!W(w6w|BGx_3V0t=^I|O?;Ty!^osu1L8D7+wB6#M5V&JK-N(K@5{P?L27BL15~99M_oU5TvSg;&o&tsrzA<8$zvdK-bheX$+TJufC=HnlfdTm^=0H{ zN{7ea1o|F9jiKk{<<+F#A+6I9q5G!%T^yQV@CxyH;(EX&q6X96#75GmlkTJC=?{_> zTa>GEtk6GLhY1MqjnuxP0_8oSYV_s#9#YWrNg(HS4INO}%gY6eit^$!%>?$*QPe0* z_%yi-i%QXb@RFJLURJVdFkvs!4-3NsrCZ46^PUc@{P8EC=c;*w<$rp(-9MPC&_cV<*D{C* z%ge)SU+}xAGTPYDabv|V?-7{bq&eNjpz~Oz9F0*-W8^so@NzOToD5F;*4=NPItQ|R z4(sL5vIzkhj<7-j5^e*%qg0qejul1_F%FC`5v^34*u=!G?N6xd|LIV`8@#KRB_91K z?(xKAayVqfmz6~vXs>W0T(9$Tz-|a+AqA9I1&YP~1%B*7+o8wMyeenHf`x{)su)3A zOE9z#7a@&{5^}pjCbhepPg6(p&Fv-1qZs6x+y!^O)D?`Cnlk0yFbltiu+ZencV5Z} zw)i$DCFqZdAs1hC2@(FB7-B*=3=&jty`K|9vO?RSi4U&KKPH9@An!hyT7J&$=pRwq zu}_Zw3jzE?c=tsTPM8?_@zMqp+>-&6Aq>GxjGx0fg5{Ht^N+7}qzz&}?o7*QIqj#W zqCy;+ujc~n!!b~Xynq2{MPTep@yJxW1FIao1villCF&az4W@Dkz{_Q(igMYiz=*K+ z_B0Jx9RAtu=6fV|JKFp!%hS*hn1{NBnAApk?6>AQN0Jp%V)8ANP|=vzp_2kL|3@+$ zY`B1qpSDPvVY-1>%U<4??5uG*Ma&dS`4D`ss7*j=F3s1UanXv{5MLq4xDOOr9<+Wf zu&yo$VoRl2^PVPqVwim`FD|(O>c#&ZM z_NP7isqz@uz$5;T54SsjG5t-D{Qo3ZAyE}2)%S*-b-~tQoG>v<4%2r1dS_McQpS~W zGgfesDWiZNn(YNHUVt%R2VIxu;6InyI76fpUuZZ&YLmLmvlXQ}FR z=wF1Z@;TgP-fi1!7$`+{Dg?N_v+q^yX;BetUB1>68%OB+Zo-k!^QH1zO#Ck}AqL{A zY=O@>XGyGY&Yc}OOJc_JG3{B}Gmk9N-b(Y&iZVLz?b0C!u1zf2K3KF!l4{6Z5o;;2 z-b<1#6V1v<;@B%nnT4Wr$af30`E=8(t4AiOeacd0{Tqk zOklX*re>mS9h?X!OqXQi1l*JT`b z@pAYP)LYEP2mvPZvMeSp{Q>?ihA^cEsG1t5&$F}c6B7ZH!uO#WDzQp{!{3v5PVh>E z!*KO7Ed}86LT$3o@ov3za+(4)TDFzlot%`~Pq)kP(JpEDUn3a*;mv`eK#HPkS1`I< z5c>@bTrW|mji z!C(yV)v}+8A2LSY2FvRs(ec=Ximhl)m1r_(CbECz7$`)o%)vg+oRVA>8Z zhg<<7*#6QmvEwUTdy7{~f=7 z8~57FdHekzJC6yFSIML!!&SuZKjD{zsjwJ5blHuKuAdk8<`<}b`F(a)R4Dsh3yriE z-)+MU_uEimE;kI+-huAYkTDc(gTuoN`U93aG8NM$$;Db1a6RgY@iRsO*tcpgBQs?= z7I(&EF7H2J+-RT_!lvv;=Ns-;!#BF9E#~Ggb*lF)otWk`07BplYIjdhZ8S%&81;=v z=)F;q5~K)X%GMcBDaoVmMr~?i|}= z2TtcE1B~ao%g4TLjhL9p&?0kmD#r8*9Z9KAhHOlK(r*~b+EeLu5qt-TGl5b~Rk+P0 zFME3n-ajM%Cv*hH_edktj>5&aPYGZ^1Cev0Y11iTsBhqYAnNR)3loM7yvScEDBSN$ zsM}~*a>oZ__qb-+&z_3RL;RkcOSeg}<8uzU#&wrjLRrW~UP0lyh0pk@IJQX?Fsw=_ zm*YorA%E^i+T%(7=L;~0zYg|0f2VIhJgyUa<{$nE$pSx*YhNF}-(3WMb5WBcV6DXft(8rW!vXQnkb zt5eYgRJ|9;X9C!MV|11ZNXQ>Shl{^oo!8Ynhx^5^f-WyFFQ}&{@RD$Smeol`?>+mr z_{I8{S7XL7o=KAKA+4`d*MjI!XPod=qaf!Ps

In@BJ;-zFtdCH3`Tx+57KW-VV5 zF_G=6N*E+=-d>#vA_3xL+gf~`j$F&-d^+e;k)M85Gg`UcnpF>&{58Rwh;uiWLmA-2 zT4j5-XNfG7u~2x|W~6E>UB}xfyr`&<49K&cR=mgJwYa74Zi|K-Zs!D61hat+VxteU z*4c`OtxsoHmNdv&=dN7!^KkW$r^e5P-`b(LFPB@@OR%|?*sg@@it zk_DB5{NIo>555ZN)vhk#Tb^No%H=SS+jw`==k47+wMZE}O)({W3A4TGI6BhG_6G}H zHjJx8?c$Mv8~P{i_&a3~#18YdX2m{m9D9fLCFnx5^UhVKcbkRmYye_z?rwU!rI96W zUSTfFhGiSL}B5cGE-!P?!t5v)Xk6jDa zQmHXNGE7|QVs7A+`=)}q;5;oPQvxnUeVPqzaPHIG+mz8zz-3@#6Pj{(hAqX-6r}>Z zfAfJd4)@*f{u6ZSH7tQAe8Z8Q?%xWfVS3mEZlBTW9q!+M7b{47Ce*^Nl8`LFqAN~=iNSAL#?^c~op{a!mI$MDK7oCTJ;&%ek60AdtA*{w+| zbw>$wAKtM)KjPp5kfTww+J9f$-*M>AQ}3jBdxln`=ay`Gsiuoi8UQrHqd{su^mu-! zfWK2H!bw1S>-SR1$SlAM8LqWw>r`XmDiJ>2UJg~NDV?e$zZmbkf{GMgzWKVy?pv)8 zyQw1~@`&5FQr!+*5@CT4x)jnM!T23}L)Wn#kDL7nil4gj92uj-d_>WTSD=ty^-CBA z8x;%*7Z-}kR=Mrt=TFST>0&;e86!kA z&Tk0|RClolDf_2G=NBZNSB3h~2R8FuTyO5(IMFVGXx&1QWSS44?Jbi#wQzgIYIeS=RpD|Q{C7K11ysJG_8Q+HKK*Q&gs0rT5B)xwjV@cqfe@M;QNy4Ta9PW#|}dL2h+oMnhlhy+)!=Z(c|mC zifjX1nkJa6WNB}P773V1*N^?bSjCV`f3E?pZu?^3e%QyPh& z+BrJbgXoVKS-6el{fo`TJ2uq(q*_S8HC$s2bp}^S7a*w>nESVQABI$c6;NJ2Y{u$2 zZEJW5XnYRoCKIKkZ?kNHh`aP^PA2l3cQwk#5o_ZMR-iBR+THm-s@r0?#&hbGh@C8d z6O#Xh?_f$OUY?}c<@v0Or3chG-zLLz39{I1((B<)8T%MUOuz* z#2!_+n76g8xrf1hU0Pm2u@2ZbWVU9{dJ78XZ=*H$2#)+NYmPEspavvYKD$fsHp$ke?D66)S(4*x2Cp9j&q63~haE{=&w^u0eT2guRO{aeTkX&Kt$FAEs_ouI*Wj>0ivhUNp z4&Pnm@m?rAJmz!skESAx^Z~v*uow{(W|#|L(#8!qUW!=>JMk?X^4nDDE;?9y>9VgpFV^+E@|)rVfrEq`c}o_CuqrwKO65 z@N$$V2#DVT6I4(qaGU_5UV-Is*jhx)%;h7mZ3a~_gaZX=R6_EHFB_a&K#9B8!?zh3 zx8JLiMf*8b=Fo1|?{NQ=> zPdE8T%UU=dkTMRQM8j_jJXz^~{zD-ER0i`b>4o24=szzz{zUdBumYYxz-Io_1{{C; zA1iFU41#bkIep#I>ua}ORo08I=vA7m0PSaA5v0Y%&dccp{ht|3oerjy=);S;>Z zR=1EVRwoC?{R%zkadR#(7gibZ?xk#nTMb3-zAZ;a#duLQR!idR?Y>eKlx}e4aHoQx zJP1|2mB*fR^k%PZFyXtR0J0OW$}Z&9CFpedJ&+vX>-k$P8O=M_#t5KIBYH5p6Xl0n@}S_?fy>bl$8Ye! z0I?luH1-@{s|o(zkWd!ZVsSrKZO=9RvE_PDrdbXG4Flk*YpUi_?f;lIT4hTC;VyP6 zD2`K`B%!7|IbO+^w1zTH=m0tEne;;l67%@;X^XLI8M{l6-sqG76!YYR*7)^7Lj6N|!tk z5jKomO7z%nPIcPf#>c{X#RyI+h!@r}H^NXk1bWk}gJ;k+Atn^|;h%!jJ1kiS!g&gq zH|AFc4DUC+o@MmvVQXnDbN|bfq6c^p9BE8b0R6l{hG=*7*aw=Y<~&lHH&tM1cnrQW z2@jKQRrZuuKHL0GPAi9-tNkYxM0yp;@?Hd>+kc3M{)NtAI2VAwtJCr9XIIT%zWonQ z;b#U^Ncn%axbVfo-8!<~69jW<1M}!zmME=fKKnJ3_hYrL4&ztQ;%ThFuv#TmkvnfZ z>QynSqs~0=wnL^p#D0SSRCDy|Yy8<?j~?x^Shn@uz7OZ|)iuCjZ{LGF+mZ1eVi)`R8Yd8z0!9{z z%s5*O`AYS*__uFXw}??s(&B3nhkGo$B?e1hHM9W>9eY!$rS26e770d{v_)=)Dcdwl zG@=O~O&>!=8n5&B1LC1(zMmRj$6jno;BD$hX0>V-Ne?;RBo@eyYf>D2la}TCygch@ zQqd^N$bP}vn3t3$-xgZ*A*^Nxqu#>}PLHt~Y?I3kP#CR@@y#hALTqpd6yc1?$wb)U zEU@^?AXdQyjO=%b2IJCnM*c{sEfJa|Jmql8KC7?NPx>V|e$FZa1E4@Sf(xfv1td3# zkRsv4k@9NS+B5de0umgqkbY4*j!#yU%I1{oZhLkN421bAqlkdv7NO-!u|K@nqKW4E ztb8;|9q?%}=7^K|r#3uqw_Z!Is1F#AZk$0D)f!E$^#hRjuTn(q)@P^3JA@RIZcW`e zH~97IWniOs3=O@mTdoDX0IJKy-^gEM9j~unVF!NeGgz#|*_ z@=YTM-c~u^)Sd%7L~zkm8OtC9v}8WOTNbluVCz%rr1ZmShMoT~n5OEG}D{>A(^ zpVl~7yq~CDp5o8(`}-iqfAH^FkV;~`OsV%DU;Mp_4T4naC7jYzUe0(K)&#>~{+a*B zQ5}t0YY&|1lDhSS**V6eK0s*W5r9KZ-|vF^)C2+2G3Wdu~Tz z!Wdll3%2Gh3a9jL*#f)ZtvL!L2#P$m%MGF`YYxRM|HHSIo$t3M+ZO{tTJWl{C`xKt z+DBH`_NVA_Z(!Nrnjj2V*2qeta)F%)^V2I(XT0pKN5g=hH!EDEL=*7uf=^!G_+=bZ zlatE4*Q_cJmesnCMxmnJ+Y;F^QbFB#!*}5((#4A`@6yudZYB^x)j+U)(1&TJw>Tts ztdTF@bpAc5p|)BaX8N?+`(k@r8N`^iHoZ5`0#Rfjtxtm|H99#p^|i!aZ3QWN)fycn6<-3<9gnSt+!H{@ z1qB6wXVuz}f!he#bsfV!*UftG)Glr~5Ypg&h3E3ARRhe~#5-qofXD;NsrB~l9D}u9 zePnXTYv??x*w0t(FF$y30cs*LHKPtQc9?wC8`5acRGgW~{W=t~dM{8gg84_r z<`FW#dzFBr!OR0D)9w#;$aGE7NRfmAS6MixnGPd5+S*6}rR0T3u<7}`Ujgt4>g5I+ zX*oIUuDLl|;@n_p_2;M%e5-ZR=ZBBV{e5lx+eWp02d2Gd> zl>)xkz1DvcEesj$nCPlNJ{!M55yS1NQLGn*ZwPU{^)1oWz?&*~cJSxb@3qeb4NEj~c3HST!YkhlO=wvc|t`VhBAp zStrAbUP3xi=%k2-*ys-K;du$i{a!=^xlAg*qR4{KvPapGGmCdpm5Y|&jYoV+fwp0J zqc8@a&2{xL6xShrM1*va#Sp}ps3o~q*bS|3!91ZuQ2lzk*x-{YCNz2CE@MwL$b*y` zu@keivm@%_I7clu+EqA$$HUX;D{==sNI0qr)5A`S8?kKFiC5rsNZ0(DAiO+4gic>U z*P8_o>T{O3Yln2*Wz*2?YiF7Dcf5QkgfA*RIz<`h+t${G)gmqm?nJ-|bE(*iQC9zJ9I|>aV%sA*0Jkxo_dQaM|H?xI5COt& zUKKb6X9DsC_B&y=&D*aJPI);DFejnU>z}|>|Nff>NEiLjFCGNK9fzHTKtG26_M0~D z2bZ@#Ph0u5k2siJQ7oW<4p`_Uh{}o9_|rSWxc|F}=zQ6TixLf~r$?cmu)^rma}iV_ z42YyMs+5+tWa-pODDqd(p~#=e<)X!bv~d@BIW=0m4^)Jhg3G?v!U8HcfFhKO@~jG` zl#Wb)Bq;DU581Fa`s%`hizsahb8}L>&OboV?jA4g4>?|tEbYBbIx1CLC%ExP|#o&qE` zzk|g2y3g!yi3(kOm@8TtC|p-7v~2FPo1%HjF9wElFD}x5ZVH1m%nWK?e*Ocwu7OSw zVJe7m`L!=24QmYN01BVCv?8hLmlSzgwI93JPq;W#OpEsI==F^)OTgABP`=>BX^dwoJ+y7-Zy zc__XhVGYwqb&7-kj~iV7gs$}$eL;ish2D67;1~UY99A^RtM_=LUzX9MeBbUQy&1u3Q-vyup7J&XTj&@ zvOuACP(KM!m}r9MKq^kRYpNBhuLMMM^CE0zybhG6uy*7*XqZq?K$zwrsi2|~xfk2l z9wbPdn!38mACE2vjLoj(J_wFpuRWIMxn>&z1q(nSelM?s6P7wG(0{p*1To4Cx_AsH zB>*{O^$2%QF%X8vYMGjv>dr?n<+xXSA!X{Cf+vI&R5e^7*A-oYOR$+caqMn(b+#!w z2;3OOdnOQX?*9>YtCy{kxH*iTW)LBEVK|ZqqIe`TsDzmF9xE%1je7Q|h7lFkf}R^mNMAPb?q2i)4tVZmCymj?(h9t| zV*CC%sl6i>E!x*3@yBhhPtt!{j-P z9DRPMm}L<$U8*P1H9(GOL(zexQC`^G)VMR?nH6l8lUXwEg+xK@eKrm ztZk z#fx2Xp*mBwpC>nqGgMQ3sUY8tLj5={^i0Uv$q5Ra?%sbe`0aetqjnIS9~%=Ji79FE zSXtA0V7pd#7zBm{aON?C2Vc_;Xiz*#kQ~|DV3CJ%3Y^wH%Fxqn4-%o%xnQJ^1c6m5 z^xpd4b=Xh#-9tC7nuXWP96#^m!GHe`kqod(ub2@1h4+sZ`yapIKLBcYXVdz$R;dsU zpdLZO^M`ul*CzbOeUHBSQVEQLeK#V?N9sr<6|25ZeF#UQJ|ao_%qoMWateA4Cu?iZ zY-kvkEd5C!HN@x!G_W0*Z>|6rD&WO6t1YKHcU#yiUPNo$f%*FSnqQo5<4H7TQidS5 z6G@M)(ziIWuOKipU#dro#cN{;eHwCk>$jm;oh%rH!$;#1qa`ONcVVXC#u@O^SklNh zLNcp_GRr}!it)V}D&=#L8pYpNix8emw4UOLU=BU(Gum-+!-c{pNAm|RAlLa{!w3BQ zqCZzk@?PHk7D{OamB@^5SCcDgK>gXF_IiTUr|zaer|#78htRdd;8rp6ar`uHF31gf zJ4Sw(*HuV+V^hbnSFvD_pKKP80spk2zkOA81?5(tQw_K>Ky5UbZ5ZqN_3QOKfoQ(e z%QI?LezCD*8CFnXYsk|R<5ctpF2|v)huuT}tu#UBi!FOj(TQ=IQv_3v0V|-vFLG{7 zeg~xPqzWq3Yg&t2G(8A^fy?Low&>o`B`1XmAx30~_mG+prL2*8jRaymq57JWA>Et@ z?6Q)RVPI+w3f9*G3m1LfL!7cF{2b^_AVKQ%dTxLka*>gozAA5v)6|L^AVQ9%gEi?tCnrQoq+~RkYB9Eg%c+Wls@(k< zz)WlT7zWKoS*4W*Eljr4v9IAGtv`dpvQ*MNgJre@CdqYQbM)l!iXUm=6Y!cl6?n0- zj%&durJzG1c=juT`LvA&e8NsDt)zr+JJrIwJak-WbCT01*==kCJq<^p>K{euu1%H&u50kvl{PTo8FaOHq?~=ATh+_T9DGjNkxDl4J}Ps2E7%xwrzQ|2`nG zva&LjS5$mpQidEr6MO;=UBQj~H%(1VdC6q^&md_leB+tS8zlJ7RG%JT$HYkWNd5KW zB5H%z8FwH)CxF%Z@!??Zjln*PTPhw3wIHlNrTFErau_jjPXe5rKY|WtH$TESN%04K z!w`ThoKb1m9N$KVat>nGdvW8iA|>G7=zMNFC^BT*LRr<5X367&PI!j>-;z2Q&aL zznhrj5w$6`INxU%+j=1jlh%-+7Z5-H?1_cB?hF(=1PXm@Vd{EmTYxQjuc=+_brJZA zy}iBN(_}Dx)StfMOX;71{zP>s_(4-s~9OVf`b8(s8P>@gk#;ewq>=Ng(e>=K3pt z$*lnk&GOz?h~$2w^8Z5I?C*fdMc&DND)K)xU+-wI|KH2)Z$BPX17?53eP~}oSlWpC z>Pn7SlV~+TSo4UB$UGd5&9~>_u32-FP6E8I9eT8VZzR)Ft5N+h9HCf(eFd8PfEofa zTuce$WovDXE}5aYp-ctmHIRkL~D zn!IKJ8=c9%Y`H8c@M+aXWFAQTLxsAag0tsIPko|v)bkxqI{C6l=R%8N&4!s)iMRTP zK~`hcLdmm=jq>tjpfXTkbis;?A+v1NlQ7#CW+egQTo2#s)IrTy?H((%7nLdHdd8^6 z@SfGK7edDUDJYi)Z~2lk4SnpFV20(!D9ab19B1PEtVUKnY14I= zD`$)vlY&F==n|>Dl^L+=o%K0vlC(d%ps3+>dn^M{l-_g`QIma77$kOuf$91r0^_uX^f#a`FR|sE zZb0)Hq_ZH{z)DKxd5VQYFZZYj$gXOM`5QrOu+qgcazM&;Wvxc<;_;8;s&ii$%pZVv z3kj-vN6UM8lcBQk8T0E4KlcXIbb&DHN^{&W2`ER^;YeaI0+&umjHWrd(f}%dUAQd{ zIx9g--Ekx}nMf`in#!?C^()^#Z6S#rTF7tUoXp^Y^c**W)z&btaEWG~%#h*3Q8(eO z?}Sv4%1%M=1{0`;ijzYgzga!X1Bt4GhMaHKz+QbQ(Yl4zF8>(3+0FD5`xIZXe;%yA z1ZtaZiDW75?g}9RE4XlrapzeF&_ABIdK5XO1;Nsm@T16S z8?fksG0LxU;V5$Yu|)$?k$^`)GgVujhYMP@)#G}MIS-QChw1ELt8@;{C zg_dqJ6cpIt0|2EXRUZptw@OAvR}>5NX@K2zt2VWXh6#zJblTy3qcRA@A2;JYczEjS3Z;nc!{pS?#GE zIe^;BNK(ApLVepmE5(=AqW-UUxK6{LfaU&QdW%5}hjTnE7HV82jAF?^j8Gjvcy8AB z#F;zl<4X(<6936>u#dQqy$R|`!!7o)pabDWKC&@?Rj@!2&BtzT{ZkCq5VHtqPxxGU zRos@9p59V#H${4xFxwUD^3Au$Npz7jN{sgLD91IWnO~YCpwIy2NfKSUlSA|<<9gE# zidt6gtqbHVzxEU5Q@IMn@Y^RRHsyt)rzw!u+d=B{m`}*j-QE=AlR3J^D9%lBgR}Az zLlC}naamID69vunu-ky_P9aL1ah5eroonvk!URyXLw#EIv2^1=_qnlSTq1xFy*2f&UI&$yM+txn{i-(^2=mUtOltD!$L?wf^ z(6#L6VD*Z;#9WRGoL(%46|LZbC%JMS$cR2i`Sy&Nw7Dc1BO}bpV;X+`?w1cW7ZBg; zX|b+FRe`$(;lbbs)7VEb4(R>ft7yY3+*Sg$wv+E9lRAJ;DDIEKD;=%K#x6s+{GD{m zgF^23k(h^lYXB+$48zly#{A!m-G9@NC+S9zu{#b#PMC47;oLh;j~AiRszC+xiR34N z$djlDBxgZa>|sgg6bL=it%ZZZGRUix$Dv13t*%H&CmPV4gdW3+#h?`VHr7e#F*u8+ zRc;C>&?W>n|ITyVlZ^PGYB}k$dYY*NAsmF1RDl)?EHTUClp_@Zs6~1VNg*^e$9(2B z`}hyGP^Y9$D1NSka-0VLOs@+OOi0lQeuNme*bJ0K&i<7N&&fuQEH?)cu~3N=%G0^w z{1qs-)_CH#0nOh$HqSh{%o8P#^57}xY7p>}aL7rh5eqk1`-I0tG~y{2x(j?fivxk}$ddjaSZLV>&Ams)T-7KFn6zANzdyPc z?OX)P1&J+nF`-4BBIs}qbPt;Gi=R6zy7~9tj6MPuop;pN(R^YyQEi-J;n2%z^8|0?))vBIrGL=! z`p)wVD0q&ArEFJwer$hoGfeuS>``pAN#-qpeE{QucgI0Ik*@y7Bov=7JHdKby&Lxe zEDKn2eHt$Iu1lqxA$qemkPAP8d;<5dQ`TzoZWZqX-O>*OsZj-3Zre^N0f(vn2#4yR zs-ALfw$q&R^n}}@g<4@fNX<^WjpRu>?aWxc%o(qn;6d=XY}V}W?V`(8D>;;5wR7j* zT4IU{;?F^r8Rw0*x!`Gm>rVkHmQ5L^C8Y%c0}$PpN?y~Mr9@` zT#V(@{$fY{8nLY^bu^d)3rY)vN|q1SHl-daDJh+J`EqYTJMRed(tO!@B^8+~4C&5H zvs6;I8sKKVWqEf&sBwzN5*w&R?QA5Y{cx7CXV?!fZu}sRE!3N)&B@xVykBNm;^tz; zT{xR1q+U97scc2URu8ddog(T2`i54f`SvIknDCjua@ZOQExdp6T%Bym*3oX>pE_`as3TybKfr&-z{+Zn%f8-?IN(># zHOx4d&KpP0LO4slhX28p?~R)31;y&HFbROKqQSU^3k|1jv~EhVx@n40U*a@{a^s@% z`5sg1o`*Nw4Hw{*4EtNje7O3H;y-{(()$Rsyg%h2QKvjmlj7OVJC}~geFN3E89>#- zD%o+~Qrz3}@(TEd`vnEpfe7BnRUAWpO%r57*r2XAv76&CTrwZ>yl7v&(4icx3ndB! z-bnpP+`<}mr@$B!5F?R^ap>%hU`@+ukDaipSZ$KLsO;7hvhC=1-?eh?`@D~l5|2_) zF-s*y@|ij9E7ZM`bUtgJa4+PBrsyO^wvoRB^|rUnB1}d)o~+LrEl1>liH6lJ_WOAw z5Bpn$Do8vu_MV~v*lq>uxLrAhkjbiyh~ z9muN24F87H$Uz|gA^+_ezOd7&Ln2|G|PV`{W1MmDB3KsF{L{%e*nuHDw z`20h0!C&481o1#L^?$ehFWUmP`hU0mAL#9Wsr?_={QrMK2Iuxi0C4aw!$Rj&qRa&A zi%D>jDK29#fSRb`u!_V7&}w==zIWspwa0!fu~6e)=??DaLodpM{NsO*ZZxKNb_@($lwZqPf` zbLF-w?QSgi9k`BRu8g+3<5j8^GXp@6gw)hqBkOIBh6jSDE90z!gP_umTHr^QFz4_z zrt(6P7H(pVZDsDgX}> z?`CsGadPyVR+pub@)ZO+1H%6v$iwCp(9>sWJHZl{lY0u2AHyKkjGcFLmmC-K0uZ-K+){q7L|MfdR~aX zYO%N@U>4U-^Logrf*>9@-u_gETV?Vg=h0 zNFbi=Um7mmta5<+m&cq3yM3Jq?)VZ)g#A0cP2PH&kfcrvk8(6HsD;gMF2EhNOPA^@ z+`xV0iNJkY;s>jlxx5SxJif;x^GT_dWyxL=i?O}IhtjE3EnZ`)+|d3aK2q)CE_?D) zGvl=~LgI8CQL*nXGoP?F_O)krDR>4WvjnvKvU+I~DO-A_E^4LeJofuOx14VkWpZ1` z>P*k_I$=_tPdTo9b)RX(0N-Q2O$0Z$a(Re5P3pH#SV^|cec#}{w-dE|D#G_Iu6AwE zt(hcyxus6cWn(_%WRp|hStyAG@y3JD=&Y08Pa?^qUVh)O*j!cgf+bW62FjFqACE0%# z-*Z@hGqDSRAJZEUZ=F|aS+`?3H|F~jyximmRUHL^UlGT%-EVFlafSS0fDh<)Xm5Y! zW;ioHFJH|I(3SJ+{TL<=%o5wNoZ&5Z2zNCf2j$yZDcv(=cec^UTASD!@ABX+QYJ3! z&c>YDzbSliH(ffY^#!%$%L@Mk6cq}}U`0hm-1lBkk7qx1yRXsys=2GTrZQ43?`khhzk^jr4}5?(>t``oFkSA&v+L5G9cW5e8E&}Gy8w=mEK{v8o;2%9 z#frbJp3q>x*JYcvPqnLgp~aaB)t(X8qS$ITEHchJPMFMva9H`2mwQlK0F0^RtC*6x zW_^~d+znUM3e5vIhFx~%MfMHrV=uAJ%Oxo}%+mp%X@~CBW@{!rALj16MUy4)^2ri0 zSlHm*`S{ktE1D+_Tn_g4DlY8`J2)=Tf~}#G32JRDKhR8jHKs72BNJg(^Asnu{XMm0 z#O3k2fQ8&-SGKgYRPtKmXf2mE7y#AOPA|TskrbsWWZ%Tc`s`HNl$(`4w`!Mp!$F^GeO;q%crliO7*-Zpjt zo(XUn6y%xm7pU*ZZaHAH)(Ixa=yl&DOgK>1^TTERDt0H#7)xxvW`u^U6L+Tk`sC=7 z1O$AV$FP5JkgH&*rLApWldp&+mu0PO*UfO+&@s+U3;8ntA7_645frX!TF%vO9bi=? z%`#~IfaQF9ZGIKB=?crp$aLE)`}~1~O8Vp!fB2Iw1U(5&c?ItSb&T%Wa`~n`ukU84 zg?BbIHomGWE_UcIBN6MR%|~K6-TlBL^^5*MQ@-ksM5p>u*|)%|@Ip1_b*hZj)kM{N z)6P5*Yz~`=E3%2Axc#|Cfr#btz^n8R)~=kq*{^r}+y8FTN>f%!B$pfD=TZbC4-{CE zlY3znzEB!i1jjZ|Lu>T7GlYg&ueU{K$)1_dDsoNXbV35bJuC3{R5Bg-YwX7qXV0cl*Ftcz*`YB$u zQ&zubKA*z${W9W4;$(b}K&(BrNb^D2{PI4gZk>850+)20r2$G%+2)whKl8X%9GT)K zlle$`${owjqHZ@oTN1hQ$M#)ZHZo+~6$5p1%EfN201hj*oT1-hgv5L(Z{|raVg3Hz zPJ{5;h;?}Jxpa-v#V3PX7SF{4YIBYCb!eL6V4ogmO&iCOxq6v$(SF`DQ5oIH~kO3 z2@#Q_3v5|()0G5c;!tJBzc{yA(qGG{aft>x9b6=JE}&waNct?UN6*h z%Z)u!pT_wJeXO6If+y%7C{hg;$eYLc5}0zuIn7(ywSk1bQjorUg6!HZ*;;h~ z?$mif4+2Mj(5K9U8~>uX?QJdNE0=JsShpkuJYOk_#Jva4U&A6;xX@kb zt}d0VDR$JbC*$DbH)}1GND({Fix|nI2r&$3rQXLkEHn0u(<6|ao!V1$;tAzhcz{73 z*w4@>%R|4H(>5N+O)*?@9gDMNa>{*5X?kCAs%`g1UQ0XnJzpKNzD~h{6*X>8oNE1_ z1lB(jrclO&(R4^)&xF1*Fxdsr48zGe7e;f^`FlS4DL>_3Mt*F!M1@UUBIU3+L}L`= zmT5QJDb~hypd0n!J;~c2bA!pUgbNBhd%K&VSCa6po(572)I$t-tbma1vJsThAET@@CC6Ty&0Rx05 z_QZSaz;J6Nb%(bSZY$hOI8k|P2wSN}68cg>fKeXDtlQ1hnPMxoJASE>T5CoG=RJX` z%UHSNRra@W-|cm#()(=?FOo&VGuy?+YeWvmK*{9FZ7vKf4Zs+KJdv zeRHy}yh5x~StA`tgSvF3+9Hzv_M=g$S<$R^A|w-<>_&`6MuXWxo2D6~#^gA+8vx~M zb-xC4!fNWF7GE~+-jAl4GgWDid3OKiXG9N3a8UB^+H@k*4AjSLU#JvnL}Z8;SfmV$%n_Idrmzh^ zidnd*4e*geN5&;ev{OSx&r&?ZMaghgBTW&z>?69FbXG5HGO)@CtDg#3wQrh>{%JtBQ+tzk+Q z%VrqWG{a@^3t7n@lgoYMZHL@T!)CL~JW;iEQIB|6&Bs+ZF z(`%$BUc)tv`4Alp#l0D7B-fkj#XL{!pJaYu{}35*9`J}J4O?2x8DQk!uH@JxN-=tD z)IB0Md~?RVRlJ4*=&$$05_K==grZ_e^Of2QM&>QUsAG%;cHw}WamU!; z?tLS3FNvI;QYPJ_8-EbYe!;-s-{2msUhHb;p02-qeK~@e$IITdFXth8tI^$W2H!r{ zIutxsTwkuOh~8lKx&RPd#lFC4LmZKudn|z+V;tw#c925BVJ~p+-qmwi16oOAqUxgx z*ARqYV13}GT3gQb?;U9bob}%d%}kO5&i4!Kj(P@03*-eZRj_sJ3kz4i+;D*m7|szh zlXrt#G?{=AoS8VjI6hYw)8nHp&-UF=rDO2Aw~bMswtLY(53c*69_QJn&%h;7J8(Mh zO0(|>AbVk4HCN+YD4oeH`0DrA3xinS>&)^F69Q8+{jI;oz&{&*Nej{)W}8=)+uVCQyfhnf;o1@F?N149Y7Y(nwQE;o}k5 zRM1HxHsq@#x3>BHqZmV2=@PNklJ$_Wg>+WrifW=QMne92x18kbr6doA=I|_^4Lel^ zTUtf;GQ$G1zB>2#^}S8X>Ni}lE={MrJgdGol@P^1u##XYLNh)_cf<=L^FV|0$Lraf z$tJkjH_u0jFd=^Awr5mbHHy|09cyu0Ys35`$`g5x#j^H`pG&xLSx%V}!CiA7#7Zjd z#D<#HYg>=K<~#ykW>vN7@Y>GB<#p^xhdFgLKD>oj>tpB)K_Fh(bkJgykb}oCKr)v@ zQ4))9u`GwN=TsSLJRiL<Ev>xG62)!j#IWQpacSKM zz+$f~5Cns7YosmowtotAom=U;FLdiTlXsRWdUq~&^0io2$k>=JLz+WIrnq1HzV0_jlVVG;ONP;_ zQMJCg8w}S#s6`s{BA0!43{UKlc4!lMCBoE=nKIjxMh&`of~VtLL@!;t+s$ljGj)+| zmo&LJ|od_WBLQ9fh*A>dR{Ob|+^Q6j#--BhVzq6!ZEg?6GD zICO>a)asaF9j|j}y4K{1?&XGe&3felEU@}i--0AV>5eOBn7D6zFhz1!b7U8_*up@* zMMK5bDsA!nYMR0N8`c?u`-5pp29*aJb92kBg(IQBk!ivWKhS)L!6#l3$^GCViQD^$ z>HItaQF`?v9|AA5BDW+v@WL~6N75|d$3`*Z?c7_XoDUz_}zliY;K*X9_Tx!jSqq2zQ~gm(t; zI+j4C=5#Pxf*RA0@q9aAT;CO0{XiZVbj_+npA`-xna#w9R~u(l>!~z|S#En-42B`Ftmaqr-s{z0vKd@(Yy@_s znU~WrmE+#JVh5&gX9jS=Ry1>g&Pr|bbK=qEX?wfJ_Q>jN(SLf!AR))y!=W9hg>AUgU&WI-Wb;)OqPpYDr@!-v zXS`vJNp5!gk-9fY%umVv4bTUUK;?)PC7~pEOdry&t@9s$uq%rQ-jg?*8OWcTh(`+? zFq=}+a-|s0EECss-8U&lbi(^zk^b;r-5Ia9yLIoyk>8JB|3FD3p(JNoBr3#U_^Pjso&)^7W(HwE! z+!O7$nvg6@osKk$3(ujBHRMBXO4ZcZ-&y-9vm^3sIDN@yCTaUlSY+v`Aj*GkDT{-(pHFHM*(UL6CjO*GU^n=FO{vD^tfahc6SzM*khk#iECy)VsSseGL4%k=}W zFqgMOvZevK0~*qC9@$zNT#Z6^r_PFe1_qFpSG819@{~9R1D9lBF5&^PI#{?`pTI;0 z+y3n|#f(>C4A-bVF|QvQ$9cvh>Lc!Re6NFpu^T7moC|e7_-~AjP!h5AZeHk0k_ex( zDyrRAmUJoWg>1_RlDVPV7sbiuQmEqyD%9Xo^#hCg*T$xb$A|_~d(7tZt$my|B%HRa zSunnB+w>GQ$0R54KJMB75USL99|T2`33j&KXz4|%6T14{Aod=S93;HbG zf|{zX@sTM^>cy!OoQ!6@L}(&C#vez~UHK7Hh|;~1Ur z1gC+8^%Bdv><4~RooPmxDh1}nWqVT|_a)5w3jF0+M0T}YH(=t7o7FqtB$+9Nfv-yR z^m28B!`zoC4Nj8(r@ilrYO3AZ{lu;a3W9(Ff*3YUiWCV_6afPSP?~hLUg_(-u5={U{}lId?O0fKEC&A$LdM-#@lT#Y1w!aWlVc^ zc42N?{VI5l=ecF`y42i369Y_>{cEDd!aTLi$8yPr7B^|QH!`jH?ht2A^stJJWT%V$ z9^pQV>um{56tiAB%NINuT4kyhHxBZn>Ojv*1TPx&{~K{mKZWT&0rF4uYUbo8-Vm~vTVB9Hn!rT@G~V;&Yje;^RdICtM z{lOgrcV8&T*YD(9%&XaLy%kdpCx*C*dp|B8h0aC@&0Ltzc*sdv9u=62ih*<)g3MCp zF#=UU4L;npaf9EG;{%IwZ9nPTbXllX)Q@c}Os@agw>|K$O$qmjCQhd!V6aJ>-|FPv zHfqy-{y@vV-prOEBDfc;?&7B}@8TQS<~}{qeXRpjnm=^sG!irf7nKtD2N!(Fw(BrK0Ku zLWWTwGg$ph?8TM&d|)cXTV{=NbQ|Z~@=YYgQ>miOZfU9dQ7xZ~nW-Q>oOZCX={G_N z|GELzX|pP`KquIn^sD-czBiUimv3{WX7u+0G#KLRkIk4}h9Lf3CvdXnPrh@fjItVb z#-d5Tfv?S=DChhrzff21&HnCJDX5V!M6nt6TbigviCKdW2u8EwPI0LY~2^8J{tqJ>PgA6*+_w(D#bg6c9V{kAmeSQr)7?Bzl5Ipp{TXYV@*PP8honWU~$J&G-g?)1u2 zKFmnk^W;XA`4px3SR}0iv8o5KGH(YDisg`0@;q#uCNk7RF zH7H;D64_Bw)VtMsO3;r*#ZCOh)?qV0tB`gM?`@Pg=V?r@c&|AyP6-AM{#V0);3r)A2XNXfW5z+x|AQSZ$f zcx2+X5oS5N>>hB7GjPM;U%`7Pn}C4li<$3(xvq5Hn9N2V+~F_q zQ|WZ|>rLV2rQ19VZFc1KF&8Dm#FBLfK!!;S4L?SDeS-@{NCbD(ev|$lrwRUYC^X2G zAdL1)s~M?_>Zm1XimK0eCjF2MxM%|;!P@wB6Ru(G0+FID<86rw-!@Efq{Z#ty&=5H zdT^udW|PYMIZQRfiQtOal}VeX(uKxSoTEnnyg*FPV4hv3UNZJdeC=&@6!V9&+J zg&OP+mnh;LnzQj%i~U>{X*rys4y}oFtc(U*`V|%Xo4zuBU(a#|2$}`#q6Ug}aa%o} zOTO zyIC@W*MA1g4bMv04~VoWdsJ@&uZ-EPwxw_w*evd>rMiSHMyB;iooo@|ERr!9jgmAe zx^~s^Lx;9%uwbY$QFt>TDjWQ54=!LJ)y!flyGmcsNPV)=a^!Cpa9b1uqQG(r8wN@Z zw9C<}%Hw4fYGR`AwF!ZA=Unn@qCDULqd%yUewH4f zDtxpGHJo<88OSHRX2TIu!2q{2Ala_{ibb*Tpp9N;fbM9021i<7a-aW% zL8ycD)|=_lEMIJ<7+}WK7OBm_1tD|6m)srW51_qzDPOC)n-V0dECCqWlRcus-n@z$ zJ`#|ZIk;+I58oZgHtCUDq9sj~l^6%M2{mgrtAYS>r>+GN_VooGNy=F}Xusi(1m35r zR7-idl1}~2QoMb~tiO{{J(WHZ!1?h zBHAo-^P)kWGkO=Xyp~a}eMPZ-Gy;+6Lll@v;WFC3xam^p&r4KK;jXdmjRAWug_0$+ z+FmZAq}T&avAQ(23A6sr&eHl*yNw8dk?H&-AY3D>?YGe}FNWwbX7yUQ%zAgu4l&~W zh*eoSnH*x2=LY^e0YmI_axl5UrJgdm> z_%321-?qN^JJ_pJD4~WNG@Pn49NSEKn?-)EjNyNaiK*&PsG4zq%{d$ZcU*1!SV z8^3Zjf1IAr6i~8(x3)#a*A??<_sW|cCfdD%0zB;Ok_!lPmecPBDgz)Xb^%`Y8g%2{ z;U~-G%Fv#0Je_|{HG&xJ*|XsR-)hxrsT@I-j8xwMdpu^%_)X8eI(-o%IDC3NjlSV< zwB;VIIc5M>_`9O;aw}uq`-P_Pc52+cp@qbLaxFLBY!}FP9&aF%a2m25>ci{)Gzmn@ zqNJ+k36F6f%X{mu>1Ti3Qt4E>mcX;LAcq7<@epG&X45g&s)OO^P(GRE``>ZC$j$k? z7UgKAjyP&oB!Az$X@7c@*E0rPJK^8!+|UdjnI`n`6Gx;(xXWdvG<&iJ7_Ax9H6+a-}Q0BU2R9j$QF!qa+6hRjT{YhuX5 z0@)^GzmD12=1khMq^Yp1Z(7pRXzyL;J=*#oUl)ZzCzif1sljt_2X?d-VilUu)(v+E z;K*%df7|v#lr&0eLt9h&NhJGS@YQ0p&ExqNd1}*djQ9|w& z(ZmZx$#`7HSCNe2$3EAm>k}5e0ALnV3smOMO9zbhXG+R}P7C8|Dv zDcR)epH`!+G=*lf)f+^S3x+1M$XFn-5*WX2Gk-zS>x?q1KHwkeEnse7L=S1s|7x#VF`Xhg~-Q3*x z?+@wRHyBSdo1A|(+by+rEq6!P@(EN_IjugF|cdiM>ZHDz^tBkG!2^pr_s z<#|RH#Ih^4k4GGuPA*eVm6KggK8Q>4^CYv{hJ(z|l$Nk+kJ0J_P56C@y&t)GN}F>V zt6wSBqZ_jv!=?eAye#cGD@q$=#M)@Q1{>nlRc7W+nYF~O#FpE=z!?O1WXrS2XwPGK z1#n5w%L_;++)%ALLc@NrSXaR)*{6nC*uYV$rxzpa&Fd><1aJpHsyC=|v#wwAUH{rM zm0oSz%aN)zujF3^(5N92c6|yLE=b}Bw~aC7W@Z;86S~@~>4!c(d&yDBPo6Y5UNHD9 z5mf7he?uC=l&b_~~d4fUU1V8B`W|(3`_) z0l6Hi?NG>|0of(THa~~AbhH9`8e18tfCG3k`C#j*X<2t)R65w>!);6go&(w7waRT& z%iO7w>BoRKlhsyPGerY6tz{~0ZT9om>PLr&Q7tWS*vCL(K#r^iH1#mOlvv4yL~Gc! zn)Eu4=U0)s)i7Xp!Mip+(GjVVqrUTjJ?nzT$RE#`9#hK4-@7vM;Z2*XYRWc~;^S{` zcZ<9>G!%Dn<^-r<{s=aSSmy4uU3*ZlG_8`IXDpTT{IibTDv9Go>gec~clWbEbWVI@ z7L1jEfRj<;L`ejMq1Zh5CoZsTW7DZM23jNp(&5@;2|G#(2xf2XR?=q_fkJgn0X5_Y5T4 z6O;PvYQjsVdX0bp$eKQ&!K|jz1vV>EU(Zx3(xc966S|{cj)J%#jLFEux(S57>_UB4LplBtE&=$L64a^9{23T2b3f+(ccIZ7&CcCJAS!`4*r zmO4m|V&ub>Fw&ruX&qW%R+wZ`8X$_hF;J5C|euNd)qEPUk* z+=CSO$>5XbL^@7eie?}@UEKqo*01C z{DAkK>FU%KaB|a42YWiAC(#iz;)-W#1-+v< z1IaKuyTZa-$H!{#b13q!@a7?6lG!Cvz@emY^b z0!{MeuZH3y!#D%%82bQi@q!K`o7js;2(x>qRh&;jo7|ANr(LzaQvN$uY$aglpk{#? znY;VhLqPBi&2Qtd?`ll3LjGVVah>r3S2!hG2fs;^wT*=CV;ejJR-1fpZ-OQ3Df4>*;AcN(l1V(4OH%T8^wH3}zeLCQz}U1)uy410=Im;v&Sk zI{4O7vi~|dz?U#cd;A392no#4J=bvZex7wbr1QKmped7tsKlk(ryhhPqLzjT@O109 zZ{K=7jZzFz9>|f^gSo}hMJ(KR$rL#^d^{?H?dGKYh` z?WZh~`#ExnaX1A|D->&rNK+A!*}XKyFCQKKHW82%kD7jNO(c25K#*9hjTtsg!+~b- zqVSRS;ri4?>tMNo`8G9Y=UXx|M}?;+-%*699dhCle%8oZ=tPG~(5Oh+f zNg%W2L*&l#H$>9iF6z+ObJ?7WJtbh<$lRSuFwGI~|EL@x7?!Y*i?)Wj2J?8-4z^c7 zqn=bcSVRaU4}1WVtR{lIiJ`laX1MxPAc z69ODULrVV)Rs46L7kkwX*MM4iYga>xDAqkZK@_sf6#%+`vES=-@&db>A*5S1pz_~=VtGJIBwxXL92$D`KK=0C- zTZLVef02%m?AeNF4{yLWztt^C*jhl^_8y)p4m#K)%#;i|=wWQl{I0Ntzu0=BGRjl% zYXU`H79ydG?FSDa226w3mfSVi!H<6Cebml%)-yJiSzREFabgljljH{+0SEM+Ivw>VXrMdTNp5=kVN*DH!5q%uz|(%i9|>TD z>oV$=z66pRZxs}A=AEF%vR5((n!jWr`nBR&dOlR+p+8kQ-3$f4bpBbs6+nBP|BUWEJj!o2}+k?7j)_td6P26sOAdS#7@+tO>OOOeQD<; zn4;2V`#I{I$N4W+Ur*w?K%rzYIiYmgT_FI`VLRo1Hd(P*hJuYC7nK=l!vvdrg?pj?4^q{;^dyoIQPyUaCSpYi(F zSJaX!uRlp7)DS6!?Bq}B+Fra~K^Tu<6MYIC4!azk(4fG0cp;)Y(I!+)DBhp~P$nHl zohqfhbiZ5qSP#B-+OW?4Huw=BHxRJKe&~2Yp9P?qr*+OIFzlzQN1)|L&RJoy;IW^p z^bOQmt-RV2rhzIV4Bt7On)h!IU2|AOl-IUt3q0c(@%7)M3ib zhLig?IGOl_<-O6Iwgb{Sk2X?hNu5U9avGcOeyvde+6k6ubruT&K7^vn{W zr0&jzcwl%XjNFrV{^9xuB`QNXThdov=sf|KBxPPvHS{77c8kLS=X$)BfmRg~aIqm91IGK30}bGBxOt1i7|!JChK z9ggG0tk1DDBu_g}lqQ!N)alt<4PIV3uO4!LAS2hND}}XI>02DWJivc%BwqXpl)zCY zD7Dg`haB21o5`DQ@2sB1k}R!b zNMBUrQpA&?amiag+z8fpV?o@1>vA1*; zad#6FUiqJYcFA2ecKyPI$DhOBKdIj2d45~q2l;rTYznkAW$LXFAahc*M^B|kzob#K zMLm=j%kdt0w)oQN)7gV^I}5j1?>&EcPuAQ?>iok@ze8XhjNs>*gqsgLK^I^-+Sl*q zWrNsA(IMbdCO|Fd$oH^plV9&-BLg;{y;f*5@aS#&DdYj;lo#%z$puS>0mF~6&1!pZpN83CvMJ` z4Dk+*I*#54D|kYoH!xd5OiJoXVnxsx&IAagM5%wqW;381^Ujurk1)W?RRdBr`n69m z;@Pir9mhHW%2KEHvvBWy44GwnNguXg z5}bkiDh$=(7ZjuwDtRAPS}GWKFJ4H-Yqe<0pL1ac@OHtt{ergB-xn`CWrCNpR#oCY zd#z2dJH?;8gY(yskbOsz``4GtS!YY1e~r;QR`I5A=Dg#0twh1l>PS@^oeT@Eld6Yz zgfF<|+D+m1E-j6ZY@eXi=f}pT^WWkt6C=BRK2!6mkVaRwETZ$jBb@*EH0UpYwPnhB zj=g$J)Ch1hzw};mokMRINFMJiH=To8%ihMKZm9u7hu0~!j==t`UeM`q!G-A;G=5)Z zKOWuldj^w+|MTTHCoTzgA2VnFepJfo$DiGZNo@b|*#GsGH?sg%`m}hZ_{INv*?(lu zv1>O^VEirZ|F4sx|8eC%zXMQm(|2V@RkNM*x!15KyXg3q`tg=_$jr*#YwvYkzqVHBD>Vh`ON^Ju$jGP_U&?Bd zk)3}}Mt1i7g>%4vSe0HG0v~SKym;}-?uEh&kUhvn%jvC|g@T2ng^P`urowYFvL}&| zI>y$_I@hI}U9H&f4Qbg61-X5dp}tQYrz`ZOwh4kniZ~`JicH^KH9y!KO70zcBG^p$ zqAvH!@9}!t^-dV{{p|<)v0fJu=MOtERInzh*U+s(jb z`ffH_;V4%di(eW4ZKjVKjtNN6R)O=}PoK*OB~X{Nu`T(`;2+O!4Y+&bu^sWOkJk?kzFPp~E_8 z*Wr61JS9u|Bkrvco=5mTdS0Vbx%hLI{ON@SI|pz*^Bf{EEtXE^T+GaDYDEDZPS&Ut zalW`ME3d3B?2bSBqsZ>V1>O+2D7sIpW3r?;t}DI6qZ2A@u(Km^wmr1TFm=1z1@EAh zxr1I_7f$W>^_D$7Y4Lt}0Cvd|!>;+Q?tV<fMzyHwkF)=eTDwH5{-yR^=aP5b zAx-@!_I@rrrE%-&57R26wTGe_^$WK$n)HT_O^-3B0tY;&ws~`qCB1E^OSi#5bG6F% z4g1%wo;r*U=N9R=hEuviyI6Lex0m#2<^2YtrX&o+W2(IL-ADkngx0m9sdBHW3o>#HGOZ+_}giL%xTo^~)`qQuSa zMen5vG}B%)RYY+5JUUp9tqBpq)2ht2CmO?N{5-?W%NauWo+*JqbpCz z$j|=GpLT};H5Np_FYdB?^DX!~d{bXp=pz}$h1>7{_Rm}~8TlJM?;_^E9sKuCZ>hZ} ztMnYN{l5oo;C@Orsbj*e@b^~?eA{yEHrYmoFz=nezewQQ@=I69JQ9-n=>CssAS1_} zy+Gz`rKlWH2$SK-q^+&J%GoAnYgZgJW|9LzAc5(i* z*#D`We^)^NX+{6EqQ3z+|8(|$fYRTC*?(~7|7S41XU$mazq*@~IMq^bhN11)S3Y4o z-K48s;r-(d2=k6_a@E$uSH=8KkJePaSF!)EI5OrDfVD5?=G{Fza;er1AuoOM#%nr= z)WY~=Rr;3LIuFAAp-Sn~hK;QobH3Vy^Y2CN&~e)UOO>1F9|hdj!=XldX3q>@jaCXr;U=_AsM7s(6zB4s7RO>u}`ZqMSiMVWyY1W7Bq1 zEfvXIr$)_e3I>5;o2(f!`%opu%|`bs+9W#dU@Iz0+Tk zb-DQ$u2C3IMn0#t?q)$8qUY9rWl(2-XSqKq>787-lBOn~evM^DsZpJhZn+UJM$|sW ztUJnrc;-v6{_|`QF4G0o>Zw?6)L6PG=Ck*;%)sbjhyntRsaBOMdo4!x7in~2=a&F49>Q7YVPG%A*)~VnYF4l|t zd|#L|u(AI~lBwUup;Y#KZiDDFNz-c@#SiLFG4?`NUjy`6d; z`WI&V-tIS{%av;7b_B^EAjPw@gh1o6E=xW0UR%L5ET3Tor@Yb9#CUg&VdodRw`0@- zK2fjt2hz^OS#}n+iJnKgH>(is!c66Zem;QMJ+9LM;1}xDACx$RXkN+60LPas$^Yq0Kl}fre!CaQ3TY=f6Nxm2tP) zc2AI;qS_obScTsUn5{fa+3E)gtoK(eT>5I=+7)&q!S@`J3&{u5-dXB(n21lf>o+*< zzO!Be>MP8Ou0?(dx^VkS+WV-ltWL^oV!Hz?Zz0VNQ`I_cH;?l#dv7O%bWDGuX6#wj z$dX0UQBzbH!e*Nkox1vTb|y@fPmjP6$zY_CRnsxJpJb%O5I^U2l+_ zv0DD2nwGDV76r@{T{pp9Zr5^fX*3#DgS71I&gv!5O4~N`O$W`Ntd_ihTh$06j!fkD zpIFa1jNn&T-$DsTqwwW6Jey(-HLPpIX^Y~oN`g9NweK`zq=i^Oj$GXGV)SeREec|2 zAlvZ%>-nts_$)t%OtvR2B)a_>=qW8jfu*GQut`uD*RLo9^Pn#Rff)Vab82i>aWdG31ilQmk zuKFM;dSr8K-r1~K_1qi94QE|sDcaOOZ}UKz>fR2a5QdzESS1Uq$|=Xy-Jgl{4Kt`V zzj*5>tm5>DaMNbG*7m`fbd|&P|~DVK_%2lhSk=>U=1X zpkLs|wdT?*cd^d7L_jJ_*iJjT=w!Ui;74sM$jm?d_@0;SU-Xc6UvhaeUr?rn!I*YH zR`ML^SFz4JX%6bMD1QX6%eEZ4Kgg1(uIc+j#cO)wXQS5nwXv#J?6x$1hAL|9>b}&9 z_O~+E>EPw6i$?BU%bHL}>{kzQOHEfTH3xEP|JBH+Y>=Hs$?Y*g4R8TW!tbm5i&v!z zvjy%v*PMvs5pzH-BVeOndq(@>jhj8XTKOgJ#+U@iwvv?6ASGE*Uh2gNh=)e{A_# zubQdX*GtWBaPQJDJpH>CunTKAT7rCfEu~RCT?==7XPX8GOx6QFx=hTpP z>^tymcLas>jXvPFB2JD*uZ^uhCyTZmv!nmgAN6(KU;nAUKhWf50e@lkQFqM$XSUuIdNq$1!uc(RT8^vD@H9o% zD>LIbHNv5lsDjh?bNgiw2wUXQSk=(n4ZHF31jV?5BL>U^6t@nyBEiR9PGKLBa5spm zKTcipE*R8^bgaWxJFR7bCGK%@DpR@E^ey#r;uj5*G8Hm>8*~R5b23vJt>3r24fGMP zJD3SUMp)EV8e5#w*J!=H^;c%TNd*Y5s3-k(PJ_SnLe4p0`^t@rMsoFJu34vTnwGgn ztXabl=M=h=A>G9@Om!?5 zPG2V#rg*V!(h(7&OvOIv?LEF9IGqg4{44XNWRk-V6 zjT(<5+ZxJ{01xhjyhl^4fl0ec>?XAgn3%9QgNH#7mhr^|- zk)A)>5%&|xwgysM?Pb)3ZkCXK>_fAS*M5G<5S~6d+FtZ1d6AgmsfLcR@Sqx!fx3P> z(|(dN26RD}!&cg9;gq68n>V7GWDWLH0-E_Q`EG}4sCR1|c>rAcQy6H&eVeKRr{1*3F_-q@q zlziq1{7rYD%_xW4m?Hp$nL#u_QOFbOFg5K`h-OVd2e&Nw-r7n2x_03?H;qBI=o5`A zJr4r*T1YO-efRZDyc-=RqFE$3L=SJpa2zo;%#Xne`{CF8sg0H(CM{l%i(Y?eA-T7x z3pF5jSNy9%C}{-u&Pwk!cL{NUMwOJ2`u(%~lJK+dkq?rLeL{QvwPqrVuNhcjbYs!v zj>z@WkM)Wce_8MsZqH@BCp=QaO&8{CsXSGn&~|E=g!&$`9&dMVxt91JFW+p$3?b~J zoBRn)pdEnC6iBdMwDL2V65B75&4{$5iyGd)49QMT$~o&jMeE zo80@=xG3&!56YJr3r|ysVt%})5AFY)udJ#xdXY{+xpUgG0gK#>X3b(P8KNv?;E9V1 z@A*W{^lwl*TwAvt(KjAmp_(R?m?~VNtm;}Ww3@qLYSOB!TV~=g*uj*%BQlw7P*=<$ zJRhp@!QFP^k_i?92I_oI6bq;PGOtN>rw{Fsu5GbPVQtXppmUji^ANOX(d;e(F49rC z(Dj1<0tTb>o3X;H#e*9^s^QrueB4-&HoxN?zPw(%}qcM89$^tQ1IJWVv( ztY4=@H?f}&yI@*jvw%*G&yCm8np;$tPI_jU2MVD0lEUIPmTVdR6aLC{o6vmFO5>N# zz|mUo-v&a|BTt#Q=^MiLTRf8CAu*AQM%gIPuwUW5bvzflH2(;`k%hO+zpc)C*vKG# z*r+;%uBgTmUR4m0EM`|v+LfGcTA1R~KtE`3*tZ+64HdGPdBrGV{|1a!O*w&{67g9Y zVARC%Ev>Uol8Z~xXT~k? zvOh7X;o#7=aAh#HT%%z9?V>z23x1bCE7KPcc%EefbE);^S69h( z>!`V_e2?Z3x@aBW#kwRFvW8SpEJ=eu86RfyYW#RXDEXGdu-K{z1S{9A?a7c1iJEaX zgkYZcIe5(?9VU7KaZ8Rh~HQM^8Hc`8@Ef3_FXOX&q>`9Avu+ijDL^U=^E z&3gMn>@uIVlBE_1i65`W25-i_1;KbgG%S3+hnrH33t3j!>H1iRjAfRGh|^*>n^elX z?F2oP$~Cfbt-{2X(*@UnG<+5rCWCN0%y~`^(Wye@o=@-0Pr}SLO^cRr`CNM^0}wk zS{sc~lX$y6)JUUNa7-q~O8FOe!r-7_|0#wdu!9&xlI%r4I{y{aoKT{x*yi_T_anXN zTET8I?z*T#5>6#FohTNIQaAB8xwr0$@XSnSbzSOl99*6z{J@Ob=eQQwiaE_?@4@zm zzB-;&)_QiC|EhNsMOy3HC(KePM27h@$MHxxgCQyxiu4zFdZWR#7M|-(3Mwg4{D^X# zKltTt_kHG3{%+4Y4kmlOb$g&_H4>8gSzOaOm81t@m?nIZLY>wtyOF)ddlB|0dUz^Y zx$uX$=&|L?h83``v=kT#^ zGFhP~X>L(z40O-5HFP73Sm3uFs!+zn3*N`GA~KQFhhwRC=R*rKW7h;NPm;FJ{>hi- z_O9Hf+*@jr!FBZ4^a7%1=2CQi3RJtEwMTt^ypW;UXSIwUtD^_Hp> zST9^8o@0wPVIIT&<};n~VOA-zqcGK*JOt31nSA_NN=P90_;8Nrtn^cV*2A*vTt-i< z9e%*vMrDpx!x;Fv8GHOkj5?_<6VEvoqUVE1Qar6bv)3D*AmOc&LvEglmjue5HZVE3 zjhVbj5wvog>lcC}Ql7rqoEgeuNiuaV8!JZKTdGhaSYD(hvWoe2UYfDqk|&9PXdvIC z(@^RGFGGnfTRX0XpxH|_#B;2MnUalV-ft>aJ#6L{K1z9Fn2`{i@o!N0=_~}yG6BcE z1-0GPGoBiRK3Fg-#lc?Q5V0L=caF;^7qx!kP;0YmS*SBImu1fq#nf5(uAd$q+aot9 z*%7O>taL*z@U%ltfdRI?g6Ie@o2ZJoSzp%v_DfVl+w>i5{dc}{erd0*S1*|yzU2j! z8`Oox^XYJ#XT1o1j=4DXpo3};x=?oJq~Ida_FC#U$<(WGq6twxtPTP{MPEEVjia>> zgmtj0rimn0w4G{a`tMZD>9olINe6otC?d#)7C4^_2U{h58=v@b0MXn&F_Dm(bv0dz z&FH|-3a+X(66y^ZkBEqoRz1_>6kf${OcVK_=M#aP&F^lp2oj8hF|A zI;_C-6bB*lLN7N6CL)cH@by&RCQSFyQ63}#bEcy`}O z2AYX^V4Y!kx3bm-shNpKh5xI$89NO>q}g5Jy+Y0Hqi_4G_)e;{SOc>ZqcPc&aY8FG z^13o<&oU8H-YTAacLBo$YS3L7$l%NZOLH&O+y6!Ij1fLNVnW%=*xjko@ZiD@W1Cyi=aE8Bcti0oD)1Q)?3c5ts;VbIaG#XZLZ9=0ob`o2z3AB?Fhlgf%xp%R zJSx`AuQnc~OLE_s97^S%bo`!V!p!WtHK7OZVlcj)${{Ft9ZJAP4cm-WAnV0RYYBQr zj!^Cbi(Ag=kKJP;)wu!$@|7hHL?01qK)F+I<;hL`_4RJ;cZD>_6#6-M?XRvJ#vvcy z+u6NaL0u?8&1&DMr=;?xxXu?a1*URb6fLSQ|WJup#tFU4<~~RzTjYMEo)+;37J%ArQ{s zQl6O&bpVsBAqtbsl02|V388Tu{U`fO%uw%vJno?sL5Bsh4BtjojBY)iS=#S)8$j6Y zmVSoa;BkNs2LTYkG1VP-rJ*a$zr;Wcd`9t>#&h9p{x{JmK04Q<#x=G{P&3*m08Bg$ z%IRh;H^Ntxd@GBx&0y+o^hBAE8gK6Idqxp{9tLFUp|VCPy}K{v7=6j@cX#Z53GrZP z$hH4481epG$G7|><7y!{H8?;F?#*k4*!~E(CB@EI_B#CsM-VHewq9#ryzH^;?nQAGQqD;#f%P>_@3#2&ipj&6D^23Tie zj;Yl=4nIenUnJ?R4pJNQHTF~`2)|vqGoB%IMzN+q)&4NcnxfsnFS>(i?NHXIzYUCE z{!S}%u}EGa)GAS+YhZ%aXiwBQTo8W2#2#FaiRbLF0A7u$p)S^z484k6RdVbYTQdQ9 z6uC6!pSRpWXg*q?x)1TkzbEiiv~f8|q;pz9B^26jicQzsW_(z#R_3oV?tcC!>k264 zj1l=9w;vVFu2lJSbH-*AL8%M5t-|;d5H7q;>g{hGPYCNxZ|3CoI5rePH)a|~4NMzd z?jO5#`sM^=%?Y#*DC3h-JfBorGq%vs>>jQAc_Ih=;@YU9tTKmH0Gpx#P`*SfFJZhZ zGDZ8Eao`7r^^Vl~4E+>Pd@j2}e>_b_zbgLdBn{Ln2q(g`3by9Y;{-bverinUL^$uS z|1ytl^uqB(GKuaZ4d0@kl+*3X_Z&tPrKyo8hsnw!JJ*>K4`Yu_Bg+ zY0@c5ogix8J`H<&U47<&c7hVjf4JcuPLdh}^g?emR@5G(_KK(VO^MCTMJ`8{LQArn zfRR$7EDm>@;5%U0;Z!^6SIS^jN106(<~OdrAU)W;WaQQ1t$U)~tSjO;bFbMGcTqoI zRQ$64CZ+e$mutAB80rBEaI~p+m&FKnr(9sOFl#yT3#dQhR?UXUV5Nnlzf6$CS6M%k zhV4d{a(I*DV!@z`+2Je^7yXUn!SR=46Nh)ZET4Jw_%JiHz8K`oU!RO|D`HLCCw44| z@xzVxhUb4H>$2;l)aB<|hKR^FZl(7Ecy>M>W9uQLfV1`2Av&Hjv#7_}ZH`DE!2R)< z?1N)xddKxfL-7K1t1sU)$0GqMM?Y9u<$yS-bdWVTo;}Z|2y1J-$HmnPE1Lb8v-Vl= zJ36TVHIc>`2r3=chRdiQ{X$uRH7guhhSQh>`_I-Oh4tiQvfQ_bp+2qOXWWX}V_j2l zVP0XQL`MS9*`w76c9Yqe4mw(-Ou!?6big)ayEAJkT02A?*3VI|BPQliDV%?y!TR#= z>Du*Iv@K5qRzvb+lS(Q!5?7uZydj7uRq`K|^y`%w@bb5w`pj_<(c*`1oGx{yIkpVJ zq>p-e3AnxU5O*X%)x%9xs(2W$x9#-xZ|HW_4q%C2^Nok;3gI-Y3$(;_5pmL+Y==4j zU&Xo?{kS3-MPBYsA3jHaPm{C>!{zTE^;f_Oy|KO;y?KfQ8TchiEtCsC8}h(YJQ0jP zP>ePqoOYNZ9Z%t~o(dXW#+!g5r4$J@A9MbJFg@r`r(o(ibk5@ zWMV#J(m{53k2RSI$IM(02gGD12X*!F2Ut@8E9xtMcTays+uLTsTJ0mT#t!w(SUs@O8E82fg5A|^a zRRMK9NQj9vHi{87H5sOB>Bz4eG=h0dJr;T~uy9}be#I@hR1GbKhv1vQyx z6qY`>_rMjBB?fbwe^&a!SuyX_-so}bmESxXAsO*MVQix`=+c^ z*-uq-+*s@d7i*WNTejl50B}-TJJL4M)(vVSJj?W3(CAI$j0Onha1kHroQ9-xF}nuA zSxM(ON%7*%^ml4ndc6noVI7M=xA5}a)W-qopvm6=tT47A0Kd1J2bCcH4p~NoDJ-h~KFqkKGyxzSe zu|91T=3qL!D}YpC8Y%vz-zG=w-i2cy{`Nn9D_OHXc;iNK>yM@93VBkPpt=?MOrW}p zQ~aj0e!650hl5fhV}&VlLO}-ySk6M1DymC($Ax~YIBHJSAimb4r5gT`2$#sZ6zc^T^dq=Z!})K>w85PQP@Vj4to~7z+JU`)Xg~cuIEUCb7uM1_JoY zpwZhe3~U=s&U>p>F2Ebw^x z?U2QT1gdUVH^$%S3_Xt~u>9!umf29=V(5rt)KoZNKOFU?{| zS#$MWDV=)9K*pB>q=Ny>Zk~L&z62YwY`fq&`J9&8~fck7J*7|L9y{f?U=JRuNdU;ZFqbroG8N zP*n&%H^g2dI=32vs(>BO7H@X8v=6>0KFALp_YugEB<#((2{R26Zyhsnr4o4!YGv1x zaj>}@Efc?kUc7F74xmx%muPuluM%?qT(=j}+W=Ikj&g-4F?$1Yssp|#z@%{a8CSDr zo?GV6M#ug{uEh#v1>E%qZ`fpAFZrzxi5KP@7in`5<68`}5Ckr>6-^IrK;LrEqxRm` z@wPkiy@R1)mAqa(;21D;rlcs0NB1XeXWY7jBa&&#A$7ig<{%nPM$7zUuEB69U5t4m z$T0R+w4f10-_!QeL*phRlh8ZJGD{}wiFv=q&FPXnz34Pqv_qt}Tjmdb1^>I~bk8aW zrHPk#&UdYbDD~|7CQ)A!J3*=Ny!QtdUc+N20dfkj@D%MQhP+2Bs;!Nhqc)fx&t`9n zGZ+`l@t5zxqdM++1i=$g%{<~-hq@s9B!BbXRm1axpC2DISCrbwexhOG(<)G_K}P+x zmKH_>0g6$yQL}&EaNbr#{xwC##ymGJJl$Jy3Kh~jF5sdvT*r$xCL2d>5`@1^I_5_i zjcU|;*sx*iX-!r&HB*wb*lX^iAGT-y*|MW(74*5|rfq55>i7ikIvvFs#46`ei)N(F#7O*HOL9 zNGM@iYx&A(G@i!tq5qge$Mr5nJEQryMsh&bTgF$d#1lL7l>xDiL7xKytwp<(H!I=P z7s<{KoUs=r;Q+eZMbNP`{#fgI`%09$ zdo6nPF{;O#!Q(~-?A4j$c_k7NoM$91?fd-~i(>|$7|ls2ec z%jdbvZ1ZNiXd`s{2Unrb)yA1Md47lQT<$J+5z%$!zuhw+o|HSSs)eHGvuBGR+o0%J zo~$y<=}>9TVSk^o;!%%~o~Z^D)@#*Gc-0AIO-FoV?h6r*w*mavU49smUbA^f!>H{v z6!pVnm!x*I+$rth+V@G@BaH9K4S)7E&n4r)&7=%2F1iFJVf))akVuvT2w`}fq=ww6 zB>$72wsY~fUzpP(Uia}OD=I3AqNazYRN#o`S?gA`sb*|CgK@ILD7zf=M`{)Qq|u0* z&fN1Os-FxQ%GC<%{rbOSnaT&9Fcg@vV|04o_F{L2u3YPB4i!8JeV)X*juk|F3efEU zQ&}-P8aIdsBDU7u8>E9I5}h#Ley#m-9*%-iFjg8?y~_tIdX>af*!}**UK~vQdIqOd ztQ;VHid8=qC|VltHs3bhgya= zmf9ul>9QOWkBPU)TWod{W9a$}Y?$KCo&0tj3RIsLVvf2P$VAvvYHTka`f|+RvVY(7 zt%}8*F6E_}-R2&#8_TY67yHfUFGTX;-KS(v!qZmFfqx?CjmgVOi=S?z@U`JA zr(8c_@H-!+wUPX#6q5A(>#oydDvOhdlxo0$9`;@q_pnDdILMbdA!Kr+cp8wS%TEHM z(5Y4D;7Nmi-x>$v$pC4#y}mwGxH$MBs@kHY)&?PF-Z=WfT7gL% z3n}J>t7IYOSA=K}kqNOY^P1`BXYCVX!I$j~wOAz*K2Sc_x^o^>65v(ntx&h=EJI*! z3CCh6sTg_%1A~ty)^HsNM=Tn`a+IfV$dp4xmbG|_Yw@lr2+)z=KRtDo;Jimx`m7#6 znm_x(u1;>1@`cn(FgCdZ@7UK7^izEK3O% z3wXp2^-RElGhPH(9w^I%IE)xqtUivmKsr0@0uRFYOx}Xq#j#@j7n%O+&IoZL(YHwwKhxX(YD@k_Ff~-30ug!Px2UqU zGVT{F9{ts@YY@i?Jz;(gvOJj?N;))u#a$VF;)fVt9U(i9E380DDj3#3A<=Wcx(ze- z6mUy97oHv#MHZ#q7th7ZPjkz@IVI|HqzDno{qPM+DxH19* zab*Vel@#qA_!EFS?f4z54X`t}sOoxwiwW{08y9ilN6)2&*q56<8egBFMhy3SMT{EP zKG|99>6xZAezgilM7aNz`N+N}bD|fEHDQr&$hK2G6HYipnO z`^t%ZS|o3g&3ZrfTN~UD493LB(l@Sx3<3g!X%xc+v7}vG~!P7=7}4)Fz=Kr5O}DFvjfW12m%T~cwkL<@2*r~ckb-^D^At*dl(B* z0S_W=@Pcch=It=LIyHP#o!?M;qs#J*q$yofm26L9QB+ax}xo-4QjDyJ;vsB zbPZ*QPwEcWbW^`Q(~eFVZVKfC?(z{=43lAs@`$0Q?YiUf#;(RlO?Tv48TTDLUh}D) zg`nk7^-8QNpUchyrXJXSu~m6~@D9 zyeEek-d6mqEj0B{c0op=uX5X$UV@dT+ae(4tvs^c4#Dy6QuXU*sLQe~!njzk!m?R% zI_NwNbIc$OyO-_9qGsC!?t0ZyBByXBw(kLb6OxVP;<6B0&p9|2fdsXvwcXm4>p_7J zXO?Ah0C7)gs@meT;!M`*-tNctq?D6J1TkfKPCaRH;Nk2Zd)fPf08j4azC?F}8_tch zesS-M2H5MbwFCgLv;%wZ#N84<<8eYW-3C@@qD7XuUUzhJ_7+50TJqGW0J#S@mkVv@ z98L3GmfMqTG7CA$N^i81=DTgysr-utvk{5d?m9+iU0Y-wN`pzA zf_c~jcIju!E~f9ikP(I8vGAB5foSvDX3vUK;bjoXL#!ITB?Grrul@$Qr-}tDPVg*m za}pPygh`D&m@oA(5o7(MsL#34-zM`D&mugD0;7jAa$K9HZ?u-Q;3FpxWnsQkeL4r^ zb3Y=Pl-4xAuy=f5s%GL{LHyvd_Ekfxjav(#JleV!y25*J4Pw!8uEqUOkWjRm`@I|) zpD&=rAFB08>#-jH_@|=BQNxO5Lp$%SaMpj#xynAS|lt5_Y z-n1&|rGsxH(M?Q^U)6?3oSgdJLy;+_jWGYVdJt;dF`-T+F!8=}e5ElA$Vm+gotiKJ z@AiyjVgzx9M!J4wF!d~dwFxE!w?_{hiXD24)t;`kS+3>&o`}JT41Rs5XOQ{p`RDH{ z;4gS1U#yNtvqAp~e+cAkrS2921nEhwJ6N0E_gq$8u@q_s?DejYHAn10xTXGG1^Nmg zo&w~b`BE*VP#jL?6^fs`lc3PL{{LcMWiMQtva_-K*ikLk22jkCK{MS}A00uG z{$B3+#D~U~zBd8f5qqAkVZtMWZ;XoR5apY6dW`o1#EC?#hbwvrYHU*ZhTOH|u}}=M z&{G}Zy-G~)6q1A4W%2d z#H(UTE~|#PN#VHpet+SP!X<+@!HQ*AbXvseQ7x zH@ooqk3?ob#FaNRa}lp(x)98SU!ptj8(*b+LW3SAMWC$3x+JdTdxpP-t`q=1qPYJuu$6UShTc#hOg`G^NRofq5!ravb zB5nDZDe%p2R72NL4+_!eWq6JGTDh0*PNZ43E!b7G8VDsb8?kz?O4}VnQPDSApZHAW z8!sgS(QS}rt4Xs*MudPXC?DE@WGf@353#&xDq_dYvL2)go8o4?ck}I21XfOIT$t&E zARWDQbIOT)b$oXz3vTQQ|7=4}jW_;`RS*wT&=Om3F;}~9#fLu(IuTE3#x;E(z8NElHG%TOHSkT}05np5`N%|nuuqVi94Px_HE@0hWtEvU<+`FId~L36 zy{|vN|2{*IJ;rd(?Myrfe3w-r8Kngn^5(wmhJh#hOKBAfeP^$2q?tKJAzFQ**4!A6 z72g)E?t`d7*xnB24y=q>l%{536fWPF9RM|iK|hG{7&XKkAEI>R{nABVGV>93vmk0= z-0l15yxs+&{E&0W83OcY4b?E^Qn<-94i32*Vm>r)WBUFJ6R)oAyUyW)Y0BY(C>n%H?kDOz_@LC% z;M?z`_R!veaQvn(n-a;tb@br`gU{oG%w}9I@wx6fUN8Ti{)>vyXb(sMQOcNuB&=hQ z>2CRxE(F*&pbc=<*F8IPlyMw{`vJMtfS_})U#~PC0Ndw5+>EbT0bfSODYk~@VR-d5Q_DLD+-2t=U~uJFb3?(Tj=O60ZD7N?BZIJVZ1g>_#{OB zX3$_{Kt=1V-T@B958#%1!yDE1If|eSA@|UsGp9QxppP5Za38*WpY3%ceO9i+v&8PF$Ig%q>HCH?Hr9fl>e=8lSW`Z(eH+S_qJIbXsxD}rM0p?TF zg=d?DQ!^WJ{xwUl1_m}&6%xe;D%l(Gndh%vJv-jMz#c9AHeb0`A~{zfy05(%mlVmt zV%@SF#9&%SeRoqy6)1h+r*5pxufq=%sP{goR%O zT}oBHCj8Zi%WX)uOpD*G71*;xR}w80ZQOZj;G82~Ve~wIy_j*-D3$Vbi2B^|9sU%z znl&oEmctH(@zuH`pP1xUpd2cx&|>YJ@vagLIxNTFx%Q5^uKEh7Bhu0WU1@x)`?)B5 zm}KH5wvM7rReOzI80^WpWmJAL5t)-4u*mCknRJYE{hey|Dyc+*06v|=u9l$`y*Yu` z3sNSP=KAFFo)~}CGJTTZw0l_syI5-k;c3grrW;jr=&bPrQilsddZke`(k#jVjHxwW z6YwTN_U=oQiax-^y{TYod)$DFZpKVV4#2d~Oq2b^g`< z(;uYMa5qWxU2pzx$W?I#eY7k8r4$tR)lVj4>%RTiogZl+F-P%(?roP2xg>p?QD)Ig z2HT@Y7hN`wjo(dke!bM46 z4@bkdXr*>Q-M8EIMT&~R*fnd)jB7$hVjd442Y5jV-&q2aFltGQdn57nISfCkhDG-` z%tq=_96Y+E5&jA_%PYKwOPRiGpA`nR&!&87I3_HuY&Q}bStdO*NVN(TZPlo=x4$R+ z;#ekGAj|2%D(21@=E3C0%H=I5pF(nf3LEz5Ow7b^jjXNDOe4#i)clX$8Vz(pRF4gZ znzKtTNAAj3zoZto_%KWuk}8ag=QmYzi&_S@#faCi4aPrMM@M7-60F{! zyg-I%t`s^KAo{6|w`^$h-fv33nz0re7WLuQ=_%F7^u}ne9!v;O=n#5mV$YmMa!P^P zx>EZ^X5@r2(l)uSt!_*nKR*VNK;L!j%0{)LlHBo0?m#Z(peL674u18ec80IA0*@V= zrl#iedc`ro+;?60HlD9bHp`cg&Khj;m2}X|miMBNYAH?~cEQ)$ZlWxXihs>g{(g(O zZ-6P9dh=H^EFsKwX9;GHvHevY1Z4FQ<)gd9`Iv;Ari)963?`(_;U=;k|D)!o1Ig=T z>4!8>kDA^pWQ5Wkz1?_%;mAJE>N9XcbYi?yl#3RzpM1dIvR9mr+%!7g+l{?A*cLOJ z>kNcCTEVW;5*DrAv{s+0k?GOW&>71Q6BC93bASUX?xBpdOikO`6i9jP=9>{b zR+du)%Mhrx4nqLRUZrWMgyHW!Y>1$Y70;3S zzf(4vl|OnWF_|Ag#6o3QM$I_CPN|rx0&7pmV?%u$=i2&AQ}E%F8w4m3WkupFLwL|< zv;}|oQ=E44xo9rPFn?9hp6^3#CWCKm(GFK%m^nt*}Dr7JXbY1QV9nnL<2 zWteK3sDjjv5M$@n`(fcj)OxK3I#XtRZyYBpd-J$VnA~4Y6-DOd85PW?{*D2Nd9B7g ze8g})DJ4EsJWQB9ERE2cCR!n6H~m^E@uAI-9vwz<%^Cruw7YM-0hGevv9Bh-Lm3Vl zssvwy=c9u*F%9zj#hPWdI=vYZib9py1XXpV{+H;nKlz;qIpOr{>#7g?Ddo8Y5zy>i z9^LY4>1ZJ@7w#L-wyc>)PQObc{6uVa#2nlMB*POF&5m~xoPS5KnJ^gHEOz%&z?%ge z@}DZEPOktd@R3)zF(F@YdYhRoaqvOFl4fTRZ1XZ&yQ;r6gpuMI8HqKUhw#0 zj_+Tjp#S(dm-$qeiY$&|y7lmq@c+K+_uo!>CUDHpL44YezpU&3;o~82%ulnG^5B2` z;=hOb_ZROAfg&xnT=4kM`}vcC{?{=-Qb3p7oYEBh6Ndcx(*0}rx&PXwWpnv|80AmF z(n%fgMSbhXBL0U_{=8DJ-=`*NIWoTZbAUg0j{IvPX08FJCS?N1>dyiGVr%~X_|J6y zGo63;ivII<{?A2bx z7sG2P0-SBraGgu@we5H*-*3Y$@H}nrPzKj$USE;n{S&H%;<40H(eTwMA7fAoPEE&yU%g^fPt{O|RC zrALxtxi6uLB8;)pVY0HV)DSv*iDUe$hH4_eA%~%e!{mpGbKNFpXHZulU7I-wzH><;v^E&N=<7tSKujJ#(X%A8{COWKvHPv z(o@^p4LT))W#XzWQ)i<*dx1C^Z#;W&bkDb-@G>;86R4h|J4Jz~DRZeO*7*0nW+2~J z`(duPH)uKLVlw72pFu-sF~DtHG^^f;_51IxlvR6=(yw{Q>FGl)%PuzHVwRQZmDZ{) zEb#Tb0^oIR$g9IG88u4P?4#_9KiS0Hdg`?pzpD3TAkHpOy`1$s&iAg7AGbq7DlT5a z&9+Xspnx4mN9(m^AwmB+aYdBXDb2@&%L%0#O@|viK)77kj`^}ez<;;crynSV$X-{Q zI~VCR7ibr0D#}L_bu~TnPYk(CT9Sn|p(X@z0nYcQtEt zc~e9z!b***W?-fW8kT(fMwfAnMi#_Uo+9h=)0Ke~EjMtlX8w|L%@9NSmy?D8;FQwob_l+oQGnb6H<*2PSZh*@PNk!P&~Ir}!>X`*-CpJ6XA1^NRDS66 z>KzU0RcacZnb!?LTVy)Twx#bmM|9fseaut_y-BgqeCrLGbq}U8N#{SLRjY`ipKLk7 z=Ph=LgoKuzZm12w72an^W3ltCe0#q%(Bfk&g?*S-wOBQdjsum)VN(TBMst?ktq}g7 zHa6t5MgfGoxZ30wS6)1eyvc@gMnXpYD^Phj;W;wO>BBe+%BlD`owK*T?Kl8S3eCBx zRIamBJJ;GA*@^|cvJxvI6et=J7Akbag~0A93w57A6LZ>9u$L>dfB!DnWb(o{yY0Y1 zCF;>lGc}W7K*N0b3Sk7ItHak5R z`dl6txVSJfHa0d_X5d$y<@F`#kGjDZX4WKq36}n6Y@K$`+7t!@;7vgOeo|JJEld|; zE!5+OWJFi2gR9r(fcQ#A!C(iBYR-Et6r-f)@4vrC5;6 zbs$r3=EK4#7#^Jb_g!E97o-W8&}b<5OzJ8qdoxz>={|AsjPMtY zyCVuB?Qu2QjdOAvHP?d&-aIq7s2)QSVN2RVY9;pmeIS`jl8_< zED_&|vps98!=;!r{@jqgzcJ2#iJ}8x$s-Wr@p7dbVx$=Fpyj`|R*TxM04^>L#5fT) z4(;_b%{$cEvf>0Sq|zv6>r#bqD&7jQXK6d3kJ9Zrk4*6WUqoPzDq#_3U=lhf&kGhz z`OkE{ofwR;mzBk<$64EefYF}0Fji?PVHKC-Q-f6mTCPiav~;hjpUmVHmrG%?arpfG zTg_t2IG?K~Y#871ycW$fhmvikNPe07l1J*)=xo(uwR|y+qB+E!qsjI0(^gsL@#Vb{ zjW(5yM~e#)`zP&r1v?R*wC$2ZZ$WX!fi2Z>_zKekXsh9uE#LH8*_8 zIBQ$uzOp!}aoFXjGYPTvHEF<@b! z5aG9fsZ^}3X0#=mw=G3`3G&(N>jbOXpuqCN^q6JK;c+UX#AjN&S*Yy;MOv6Fd3@#@ z4Vq%^wTDTf zJ;Yg3?U0Ql=$z{LPCO}SdpDKH9tp^#I7yqzo?Pz+mxzxvTRgSs zxNdKYR;uYC%$LtJO^3wQY}(DS&*Zbuqa@jV6f}B;nX51{U@t$1)@d^DoXq0Y z(rvM}gqPRK_VG_=HK5Gqc1++p<(I)?_qtl>r_ni-n5mpjtO=2jT1M>|0lOW!+nF80Bs`tRanenpwV6p=k{S3p?W;0blDN@ zOp-Ufizo9qmyb7+s3**i=Jw}`4{w)7=W=LD-8P=k6ew86&0W4ErSE6@f0E&ip;eV zexM+h1ajvlm9d7E@V^uD=A%fQ=gHSp#)(IYQ=S%HKkT9ATQIUqtU9+60-> zs>M>dRJp6EKdh36zfK`Fmx$Xjl#{^a?u1w2qPZlM*e@TMFvh+S=8SKyT{ihiQ^jYo ziqrKMoI>?tg~Rj^SEWIF9WIN$_HZD$7VkOsu44nJBzU{hoXxSo`|8tTn0=UKs~gW2 znaK!jSG=>QZJTlk?Io63#{JFjSvI=fi8>FrwsFjQOPN3fmz3nH^G0(cg(LR_f8$o+ zu%>y?&6xf;%}1%%?wAhAqhrHpw2sj}`ql*O>uxzF{dT%}rTbd7eKLYZRj4hEC$ zFQs{ubS4eCXaGU#vt_s~T5{Dr*r|{0x-Dx{g&2v&8m68vvLViUqwQ7# zcq9Y<*=z`#fXArS_*6bpbX3hrQ5mpQV0&D*p$Xilme! z^dfA#na%Hc))=~vh(X#0^CJQUzhye+ytf4Uq3iZ|bdspq%s0pa3SN;Cvo*NPgH@v{ z{Lx>C0@CFss#1+S2*fw@vdP@tVhu7@-+L?#FBFR$S#b~u&T|6D9&;fdS z`UC!nl4p=csQu*=icq(5wKlMw8@9lV#_jec^{S~Lu zd4qP}PT`75n*vUxuCYm35}tC0PFIVX?RtbO_q@$PnwMt$-t9h*2~8Xh<`49i;g*Se zludyfzSVJGVoAVZRWSrCEukI1`3!$7RDNG^-Dk`yuokqNk0s&C*akU5{?nQ$x~wlc zpOFYYR;HlhGMUHzsa5Z6VuCch->#s5++mAbWAcwaNvPMsL{n?7%WIIXSWgWeu)wRSzP2$!?4evmBHH^XeN-uTxT znZe+6J5;acW--KkCdh#Dx3O8R>LfDB{>(uKIk54cy8cW-J-z-KI2XMR zu)oWs@KJKZ2`w92Qr+iO__a}!uoaYT9-Fb`=CQAlo<(tQiKDVb1sMs-z9H}IO{6Oy z%m^py_Go~bOI-J()oQGMQaNcsg|aK~yegsBEDL_Ws-;Z>T6Va|hgIy~x}A$LU;1|R z=?r`hBSeLsJ@bIJl)qV_22oPfoAi;yWGGa8qj=%%sgP~rr=ZNQ;(>rrh#lhACB?Q0o0EdIwaY?e3nK5JlS?q`f**MXo~$FH|l z@bqxSGyp^?Cqs9b69Jc$AhMV94cctie&(B(m6h6X;&uxblkx%h}oo2 z)Rmomh|T5~=;yUnX&sB)QjH$QoPciMuIf}}C2c}1Y4US+-;^YZjC;#Sf z*5Hp!3BIvEW50-xK?Mb8!AU;O5V^?{J}C|(qv}jYUmbL7B6m^Xr3Kxz{F9ZFgF_m8 z9ob7hYfgX367W?<#5ibolu%k2$Hl`{f0TiQ7J&x!%Nky4S{ltMr+hR?-<5yDz~XjFAXo z{&~5uM)wF7ls?r-`k{{EH!$5^SB78W@ZrQ?4;-bI zl&~q(r(zKzgZ?f>V&y&g%PqmiH}Md8JFDs42%nf}Ig`#u3E91l2XA|R!>rl%eYS98l+oB^`-ql5;jE*GQh4o?p75&SfSu8XtA6Rg6d-c`M>8j|oS7HCZlBP3lyh?xTJh=u^euo4CZdX^znsczdxzuVr&Xy5@bO^-bO3Qfg1iAw&lFebV@Sv`riF2EWHJCc z`IA1nBJsF_FIiQVq#A<51BUuds!sQbz^C# zYl*lx!RMjQTjWTn_yFcdxOe~WB_uO?fC)|%(=(Iov_1&T`gpo`bkxY+M)2<^pG+Lm(13~Aq1uEA zC=Ckk_rHAPmQQ*=!$`Cezh@2;lk!D$OlvvXKGshJEc3cilz0$9ClRQw^-W}`jg z8=qiE(eLrTv<i4i=;>H-q^gkouUnK6` z+(+p5?~2gR1Xnv; zn3LXHhI~X%-<3wMZn}Mm7Y<3iQ5+keBx_}5y+-Y#`%y6MNM&E^C!)DEa{E+8jJKHo zvR0myoy**^RL=hMmlS303?l7{HLHj#5_6%>{40w-d)Mq15QwngTQ4qn0QEDob@g$w z$?{*v-x#Tf4zA5%gX!%79MoU2*n4-I0rSvG4g>mkq8LyY5B_mprU)`=)u)em^pS%~ z1~_vhb!E5Lq?5sw+o^DKGchR)4i4SMUnf9$w#<$i1sfNXR@r3ORU zN_0F)pi}MnJrtfo^o-9FtCej7@R5hm*6K}2jaWinQlk#xTvnI$2jnV|yovmAS=#(E z%l%^hJ_?zr;@aj?8K_9n*+8-N^|pR}v&S9ITL>{STuxh}KNEV`dQ zeY)LbpUXoWx_X^0Mx>DBH@~Zq&N6qy@Vs%C+BOh;hfLq{!^zP;h1AJDQ6Zt@@lkRo zx+J3Q&Qr0?rot&fTY!MFm{Qb`<=2$HKoGjDu!U_kIW~Ts$7<$}>n>vE8`R5nZ_-$l zqx$|QLu`T(dH+Fdo#3opfam#OS{{JK0B6Z*yWHe~1VA?gT#@D|~gE5kV zFC64FQ`6ftN=QhlQ8F3@HU=dSbJB3>rY2HL2AJb7#;WgiQF%`V-%02iDzz<18)T)G z?XiMN55fR?{eh`_>yzr#>8R?X`a#NG^-L1R0Y9rWTrUUl&{DQ~Tnw6Q88~>9U~bu7 zW#9y2z4K(=zD&!f{^36lqG;*1+!g|G=+_2TSKE~~{E0@mlBGZxQsM;g;01KX7X-z( zv~tL(2HrIU;_dCDZ-fT~Mj)v~-D%P@Pm)M=T;vqN^g=USe^GrJ z<*V)?lfh5EKtn=7AlfTRn^Owbd! zO_)|H!wBNlQff(EaF#iBvWJXm6FL|2HdUl@g>Q!EZOz6e5Zw-(R%5a}>3#3PHz}Qy z#-f-8v^9pt`xH-#*Z)eVJb(>{hqs80hsV^Y4v(qh}liWP?Pep)9dHh zm`)lcz3uIBW9sHSwD=n0zw$k_xG^Q9xC>yl*c<-q7a=wwBG%RoKZ@HN_4N3W^q(>2 z22k4uGaC*7-}yADW^d<1j0#1r#J2nWFdru@va!}*w}%3n{C`HjYLE)Mnh)-=5*)P2 zgw9>@d}7emtTAK;kVm6ji8d6yS@-t#zMMaH;xnw?3q8xYx?PL%`F(e7_9bi_e>9Z1 z7CGGq1It7^wi2ZV^&q{Gln6B`qqShxICl2=SS9!Kf)+0DA!xXkTU zVu7QiEHZS7u6D4)QST!q9jeu%oddP(A7RG;=KynOzk6zH?UKHH5uT2Zs+l;* z^+ED3taEoA$3Ee)O{FR1qGl8EtD!T_nQ_&={_7*`o|FE-kB>jv1woz4Y2Js+`;6Gp7n63zIG9`%iyJ*lzb zcBnCC2J6oFb&dMql?a#qThael*n=SsE$qMP)`b3jvTvvwc4KQB0G^4E*5fX*=;8qo zvg*-oV0RRFJ%ypNc=s*lqk~iTV!z=C$x`lmg9#cEP>e1IUxr`3p`{A|Eh?{Cm8YAP zE$YAN#`Nic5q6cn(xxJjm>C{ka_9W8T4IQF!SGZ{#oyY@_+=q#S4FB+{8Y2l12@~) z=&2^QN)hNf$K`9i)@g-NQ({#O6UQ(+9?byZlRB^|#1E-`n*HucT+eRkZQzdX;X3?+ zy=litv56V>Ei70UqJ96|onHUI{HoU?0}?jscJ(nueHG%KL9O!37l2s9=jHj4jx{#HB_AW+McpVn` zV-5S};v$;-71M`RkhMMmvKYBGaV^4X!?Eg13sTo#@wmnz}w zkRPd@)x97+{ZugaqU?F1bbQ|25yV*o>5ofr1Xp% z$kcR^sHm|oP}_A;W`;sYm?e*&)()~eq1Enppvz@+T|WLcAZS$v$QoiN?V?)Qu;k2h zoUEm>C}(Dt9O(4+?_^8}GmiyH)8)IWtpT6@*VI7{Iq?UPt3>EPV8E5&DW47_7YCCB zo|gJfRg%|x@Z^5wD|KO)&4gwqs@iontB@9@?MQaFJK9>i15D>}@$qUkMI{Z8@LL}2 zm9eU6=-xrFh>TuYH3i%Fc~KD+SWA}wPqhkb?BdGS*9y7?!AUhgt7#*H&$Lcwn^ao? z*SB9|k}rCL`U$uuzE{*|S6%D(IYYxaJbt|vcG!u`f3182RX2FnRo2Z72#h6}MPiI) z`)!8q)P1hAT33h30Q0JKdw|-O3T`moC0>kL=UTizKVrk(l4Vze#ORKnLht#$zxvc7 z

0xbTZiqKkR*`XJkz0~? z{~pqzL_X--p?o#K%iTdhP(U$*;ZlH?;WpERW=&|e6ctl3IFDN)uPF9LCKknB=vtsx!2J5)))f}Ot^u^~ ze|8s1PWOK8f14e_?x)jCPM{nNvjDZl${~@@yP2h74N`^hOP28td-W{U>vsz6pL=|U z^8}UsGw&(5!dd=C+#a3Hl-;~c?7Cm>e@TD#ytuL0(-Fgr^=f(Oa*RZWd z0TXd-0$*RN61u$3p^@g{U5}nuRSB#_7D(Gl&d$ho_D%qt8X6T&K3+c_lhx8FS2jxm zOqnM_ri3Y=ZgmeQo)oh+L=T~NBHF62Kc0R#MoxaFW37MRF`9AiBT#{)B&+i-2J~J7 zv$?zcZir(lE&Dx7Y&b zNN@11S7tc-uj3b;WiZo3BZj(f(mPMde1ta0;HL$d$%ST1@^en~YdI(OKJW=%1mfTl z7NiXUq;$fb*cOiCq)M$#O?xJXd$V~qyB06~a!phjP0rq=$@?R-23l3fyT?PwgIt*S zjtmKyqmw;AT6XO>Yyd?nY*&y8xjNs&Qmbr9oRb_^hfiPGn}Z zRby_bF0p7{_ZjvN+Cd0Z2{}D*yHV79OOIDEFBC6+h%?6df0rggL>LHRnHKc?(m%p> zxRCJ^X}i)TrzZXHc~e0TPG;QK$8T_HMfo(gvv`(GRSXXUbSLP0qiu)K*4ipsipQ`> z!B$Cp9CFOaMlV}u*b6-|bIf+B6V=rj7$~HI%qc%UXP(=SK3*SlICF~_Ps&(07Xxj< zjad#Ezm~=T0-k549NU*UBmpb;JaxsITF~w zK%-WI)6US9k3<#=VQ~V|FbnsqM7c9G`T3p4d*KWnm@#ilRGeHjHLH7Y+aqLuti&pS zcT|(BVn9ippzt!5oW4#fAs%b!1C1CkFxWY7sw*4^WHRJZwLzSq@_y~)Mv>Z6L%N94 z+z&1>*gs~3p-{$+Yb)2+7eXa6Ju5WCjY-L=)ipLd0@21;SbV=#w9zi|qP_`!4{8^6 zw6r=r;v0E7JoWMf^@g-Zj>LDKIIK{l_jAE`8wb4@$1CTY33tSsrwL)lk1_W3Z8lv` zoyw`tONM&P_doc*4M^rc3ML205MGf9>yWUS45ESM#9AsEB%)*FBL%@UW^X>v>+ARo z!+>+0BIxp38tvJ(Y|S}$B8u0Z^Iw)vp3>=>u*8|LS>+KT#UP zU6>0n^h4m`f#ip6?d5+(9dt;q)A<|)3uvN=^yxMu39AP5XEH1L`fyyJqJeP1Oyry; z#o^5H%$7<)64cv$Us4$rT~OW*+36x{lvrj??;t9hr{a^H>mxokRrp;D!Jo8kM4jOJ zT2ouRdyw*G<+o94xT1a%068k^ih04~9S?>BI(*)csqdeAs(`yMgO9NW-M7`>?3Pss zxD_s~E1bS$?bju-oKom{o&pP@ZKk!2w90>=%N7O?P|%g?sg<^+@_I?m}!sKAbgt`(tFJh^Dw5ckkev?Gf*i z?+JK0GB`-2K(~UN*HvFO>FZZ#fK~w+Xb@gE{q|4d7RPEx+7>KcYJL64XSWH6d#6Uk z=`AQz*C?%O<9;(pkNHwZIw!WZ57BhePT&(C0zeb{J(^M|Q+F}vfKNUlup-SL$~0s7 z2|K~CT_kI^EwDz4#BWo$vVp{@_oi{lW{U)d6&5;g&Hbgr^RX!yVE!m5TH=iKnFT|1?lq3C;9-% zs)eDfE3%Yuuk-b^vuWvukUO~9E*X%%>ubZs#|pPPrP0m$f&wH!Q}PdLrnKz>idxoD zzBqLTp^#K_4GU`fvNshheuxh{_)rUIg%F%8BJ=j(kZ)Q;AmNUFe3=Ag*ymq~%_Qvq zc1;n%da4qp5_Y{S{07gJx~Q9;G|@QA=L3r4-uqJ@kXFd%;vzT5ByUu>HLtdS0a)AU z7L;@4=bwR>1u=PbbyEv)AjzfD)Ml?O0nvXNeSJL&eK*=`swg^B$i|-PGo^-3ob;(s=iTxC z9Sy}Va`PjDT2(njSm4lg9^tpA<-pgzENfAs@2SgcQhlp^imr!4YpTTl=eYaNZ6fPI1i^n8=t=X{ zx=lkp&%3a|BbeT3NFRNUBFWLm%VO+RK23cf2t_8aysL!wlQwsUmMBmjwo#B@{ zGt$v9Xjy}} z*yAHxBKaq{dA##LsATATKy@2oMj0h<8-+?3t1B)O!7nb~LE@ z-t+q$+`t#&U0mS>0QM?(RiH2$W&u$hu2Z_y3Ejpc-c(fbN`m4WV!GUhy;+6X8*p|u zRf6wt$z+x0HE%7;no}q#COz5NKa&aOEh_&xIK-19Uhrmfxs>a1&Vww!7>{r}G>0Gk zSZ8KktiiF?IbV(?(N`W~wKTW?I;#sr)l60=lN=c~B@JjL;uk?`G-|dKOstAVS;(|M zHezNrtQJY*CvGRgBBDN=S+Z6%q1G`O0=EnceNI$>xAM{|2i_-D#KguAwNSKPIM~=o z=WYq0IbsOlE9#?Gyev;Gtaqo+gCI-oj-#(#UCoi1yloa0@M`&M zTI{OqRPwoHladLy>~pemS~wY{NV=)#&` zuJn>NKd`_k-f}`g?Gt9SmS*pIg9}=li_vsmXTfpj@RM&vLO>z9VK8xzjqBb8vH<~z zCh3`(l`&FmNu%6_3?a!(WHaf8&;QR#gUB8$V*F?{-h??DZacuO@@b>R0#tBDTgvoP z2t1l@bTZO2LCqp0)#Rv8V4Bv$p#d~LoOC$d1h=i*I;AHS4ZiLZ)v(aB9KQ){asxcF ziNUyEAPu-JfuhF;jbDL*uT74-Qk7M8q!K^eHrx&-zYwp9gDBJ-M)|U8CjRW~eAD92 z!3a^|HA*dd&N0#c*6zf$wIEVZ-7Jpt;b6)u38#N~G>=#?D4@3l$bD!@gS0_>3Rhov zFZ86nHNO}fE4OiNr8E(}Xt#%sRINu5;xj|}I57;DM3K-7D7AI~Q>DcA2>bZ>?ihB8 zxHdQcPQa`~#_z#!Bk4K6*c`TaAA8#)n|JY4UiA?4_WIZW+F+~iC5HJ-8j_Z#X=7uP z%n9P&5g-`rNEEc}wH4Y*2TWQ$2VTrw1ZA@_fXjm(vx#dO_>EYq7z%hEPyV~N>&9HCnps%XR z{PSn2t=pteWSiZx<5#yh_OBMKF0eev+$d{Oe&W?FKn5rD%Q?% zmq_Y5IyF0NNo|EFP-Pin+@-6h_v@w;eI!NC8yXvDP*nd*M1&k#9jcwO^fvK(q@v=% zRH(9j{$#O=B@5K}uPLn%cc}<=VJrP!N}D6bMcEGwd}aNfHUu&;x|pK`(|ORDt)iO& zPW4Iccz7DVPG!X2?C;U9Of0|;vu4x*Hnrr)<-v0H@#s)k6(Q4LS0&H7rMH&@(D^Bl z`p*&sV*;QyH@Ob?29X#yl11{}YMD5^J(#erE8=eh4OrX~R4(D7@ZQtz6=-rrNpUFy zOnCS|%oa7)v)p%Zo3oG4mC9y`+)aeQUSZzT@=OuupYIrCb((^5DG_Je{hBP;X# zzL=QS(WR@HO~PukH-+U<2MhLYE@=4^TU&J#HlAnTKhWSni-<8k45zz!Hva#JK$}L^ zHk^MAW(aW4&;BMF#1&OKz{e&oC$z6JN!|8+eSx+y@8Mly`?Zc7x{U$w8@TH|ozAN3KuSTzO5dc>6X%`vx zVsj5=IZR0JNyqaALjdY7P?r)DADjR;@K51J}Pg+Hf)y_gHBaycu_pt!P)wGSq zIKjPziwnj*zR*t8#H4Yj(`B9yP#He4oR2Xae@3eg`V#)7l5rwco}jd-=H1eLVHU?c z_Z>=dab%!IB(7uT$R9}GDVdCLG&tyr%LEp^;)X@17OY6zL`FpQ>d5?vMN6Lc+~aj6 zG;v5QugzrCh<)uo@qwpX`=4eyBr|fLtu}j~Jm~G*rg>KiN;zBHhTrrrqHy5)116N6 zIl@>`ff}fHtGenlkd?bIt-ct)HjJa-X%gAv*1tfB8cWVJ<;O<}Tnb486%r1~+Eg9# zo1yr-%E7R<;TpdQku~Ah`8W3~m_t6WTHMEe2)y0h zU5&ARa!{R}om4U?oE)~VcY{ieH9cxw#%8BHZTeWux$WmG0C*LEmX=0bmm}EJ@`H%{ z@5hd_`!heS3dciU>gjmI>8n658>x}#6Hs?ftCa_{Mz-lY+b>r=L;@o`sjPy8K#Zb4%EcKNYvFAf4h_D=U zq~QWdHXNAl4K_Z}RZ}n7XMQj^zH;ZGRhQwyPLZKZcF&7HBuIwOT<0P;V~?xU&0I%- z$f~0sR*ClIpJ8Aj`jmGmI~{_?pu44iN}44K1oVR@>lnb+Obh)JP9#6d}f!`uQ3bZurXK5DUQ{k=p{waYt2On0gsi=oI zEudLrDjJV&j1Zfc@~32}T5LfD1a_a442~^np!&*4#U0x6~MDXuGzS#vf0LfrM#xOMD1v6nUng-Vmh7cDyWHB{`ITen7B(I9(FPMwQsWm3R&ARcD%^w{(XXgb;p;5qy^j1Z?=M2 z3H1}@!h2kWvH(FWRz$%_6MPqZWmT!W)EF4t0dc~<4=SmH3hUcY zQJi+&UELOsR~(8rPp{qiEniN*lH^q$X!>r2Yycu%d$ZBSHa zJu2K{04OB>_UP9zMN_epR#q15+)+A#o*D2<8o?;HP%ekxYZ{d*NayeYIy3~8plcL{ zZa1qino4Ipt7q57n&i(SJlqOcVH&?3mSRJx-z^(wi z?N2N5YWp*qy8290v9W`8nfKuk&DG8;Pfmt*I3T&@#$8e3_e)_{6>$`gQj^1)6t$?# z*Kdo{`TYQ9=33ju86VQSHh(8`B-MtyDopJZOhm-kMOV^g*}JKAWT&(-8%E6%8&V@0 zd(}lD!*ZCelnY(E3i7;dwRpZ3*tK7W_37#DaU>bv(z4prcXo>Q4`NB?=CsShX;LdC zA9-J7aZ!J_h)T!tQ-o}&fIZ388?C1GRZzVc)OGB%mA4WcArtk{3N&~y=na(r zwCqU&%~M6MFQWb_<6!p`nL4ICJhaAw-|LJLCWmbYfm+&8sjZ5&sPKoeN;7^{E2`DZ z=s2g{2lvd{JsKWKjo}-o?R#!JlhmBxu8hN(oRF+C9Xt|sH~SM<@cMte*c*jYcUk|5%Gor<)pFNJRdvYIB#;#SkTse z{lEjCcvXPG(*FKA@1Gw(rcegik2F3HEK|_^u})Tm-+)~D6D^4Nii0bqj-Z;`gtF(u zj@wHc|E6jcw}yd^j7MPn^nis2(Oh6CQiQCe6`V1IrK!U=T#2LM@itOlZltxO6U6SZZa|H26-TC>}enrgem%X8|}p2*saO@p$>I7iUQiCg+1I>RQPHLl0Y$S`a&GMcC; zmtz5udnkr>vt1k&yJqz!VXjg+ufD$wu4(4 z?dqzkqqnSOsB@#ZIg}Tp=hrV)ziT_rfNQ#~Qui{l#Nz2L{^$}#lV!DfiO(8QcAkZN z-sYD2Uj8o&T5+|13b2XrsA8~j+&AS3>g8l*S1W8+%Ilm_g2r}t4-ZjI3C6yvD9;Q% zgzo0}dHJ<``#HVg_tDWVVa*vp$IQ6g$hg=o(3Y1+X1O6C87COO9Q1t3dNp(}Z1?g+ zKj-jYZg1e7h;bKva4b|FG;Qr^(cb{ZuB7o=n_^O8Vkv+s%8)#v#O?6=6{b0@tUPuh zTI|#np=SwzFk5k4%W2He?fLHvpt8>CF+kMm?lbvhR%S+JHUFvz| zgAd$$1KJ+Hz4l1G&pFDa_ll%S4n%hKX@1Z=t zhKYxQ33^?qUBIn^o1AniiKf_9-D(yvD6&)5nUKyMGh#7m%-AC*@B{YLb}KVoF9OV3Ak- zy&}gr;(Etm`&oG;ti?ipza6KX8eYzLlQm;fwEE@ZD-y5I71L<3XGO%ki!id}&QA|a zlDrFT%+4?1y@9kYCQ^V*DlqRVufy$-YXSByk-UGSepz_&TlI3C7T9~!4#m0WSTqmP zo?BAF_@DLPzpfF|KErv~7}XlmXnRwAkB!nr-OxTZsiWz@B&RV*_~BsVNJgNq@MXu_ zss^rcR&&_SdlBdX3BA%fa-qOiiePf&F=wH4E7M|0w~y~_AUjE8O1d6ZUJzh*JFg&8 zA6kLo%%}&&r2tEvB;~i859<(0mf7<|B5rHDs@l)2|Hjir7gmNNT!W5C{~7yuo73OZ z0YEIc72>a@THe&t@@_n(b1twNuXXmUGPE`knj|6pUEFlUPs+6jH!IQ@bSj@^$CU~O zE^=}wjUryl=Zj)5ja+ucs0xYDAfJ!Sb& z(=&`vqPxr?6(lmKmbzpZ_7F7wDY5D|9%DLvrvkrKl_RTR2W3sEenNWraWVY#b!k_V z*fT8l-uO>cT}J2auDt!;Fk>&KZaOwBXjQA)M;)W(3Xe4TLPFmqO+&-dJ&v%NmV$R* z#9YvA$)@wrmWY}8`Hhl9UtNM^X;gprKxuD$8P9~)t*T_Rq#!Muw~9&U>6baGuvkM>b6^6I}F@Ga8I*W|2V}pg-|%&jdA=Y1jij z!#d}4Ssy+oV{SJeW80dstB%iBe6kQjMXnsba@BZyZFnQ`5H`7*SE;rdai!{2iyH5@ za_ITOYQ$4NW)4x)Iy2g&N6551Z4Y^IbUOUW*wblePfequ=OHsqSo%#y5n~k=%o>c= z61JT$2j)wDl8d>%gKV{sbp7d&;wP(Y#Bfh8FlXL;nZleQtG(LyKOkZzY#`??@=ky; zLt%pK;fP=XtujZ!psDX~-OEP{tkLjKX>jnen%K>=6x1>(Ntid6w;I)lT|nJh)y&+~ zO3@iZI(5Q<_ds8hiT8Md4KOvMupu9`WiJ6ayZU--ju`BZPttz0ij zO^w6(Jvn*x+U4!_XTP!M_4l$yohTAbs3`(k#<`>{7^?Zn9zlmwRF9vur-n|wMNLiz z5*R4SxB7?wIev<=xriU*JUYbxtmn#QqU^s8`H0UKXT&Qq2&&bYHU|G}Z;`A!& z1(fymb8fXC#4A^#YKrnCt|o) zWfn|p8+}DK09JWllf!MlS#$Rk2l9irwV0FZ@(upUygc^Q3y6j+CN6AyihC-rF_FVF z*x7+=%`dayhWtD!fYD zN6X0}_|rNHvMynpni#G^nbAtyMvDKo0LtGD+1vZ++j~uB@4y2CSsff|(bB!JxHNzw zEShZdr%x=Mh@n5TLn`%N#4GE!T_b%xc1Tth-)dJtj6mpkZ&#IAT6wwrbCI@-es+Bm zYa8?bNPrL#clDAJKdbuP-IO3s_=^n5O|q)Kg{1G`=wwY-$NTF_K$nN%CuD~#h^ByfowIoFF(nl)6G2`c6*=i2H#VI5smhgd=RJ7Kt~vSnwLma_Av}R!eY?pv0|)ON9NJss)rFgV zynVknEkc$`cU6Sfk-&_qqa_;`zPPE|_Xzkt!=dyb__)m&PM&{QuG5D%$*Jj34LPY0 zmr?W9d6I*pJr@_vsRq&Zt$Cd-+|$O9K@Z4OILZ50858vZ(6cq+qF+GSV-@5C)ihuarYWxK!brG@6FFgDIe8} zQR)!W?$K|HSikPY#R)AVB=uEJq{%bI(Vw%ImhMy44wfmJ!r^x?CCCT}hlRo#>j+4n z{U+{#wGhe|WH%5TnS%p(Jm%0gg2Hs0YG~!jQH83#w~C$;2pxePN;rKF-}Z0!qAeaE zs!PXQcP|fQoK8dOT@TrI?6e~1pPa&0XYX&=)t73G=(Sj^zR6>O`JP^i+Q%+wlVdX6 z)uAJk%5&G=9=2E$pa|)(uuNoh-DZV>0f&bN#}6MV2Bg>5aV~p&DQX*5oFb1??v+g) zPH!m&{P5#RCMY1+++|#wuJ@j9Czt1m)~fznbw4U%H4qQX-wXg9|AA0~KU@@HQZ(Y= z;!+?ZU#jG5h>j5>lvcHy>-Sbck7aZS?b}J}5QW;-CN+3BA}F30ZJvs8do47)(^_N- zt80-0*h~h~z}8Ny)TX7Up@XVW7o62?m<*F@(wtY3P~Hb6O*BemO2^tH<*zaJuuRXP*~gxe%5G9HgsATb%$X@7}~ zv{p&t8ov&{L|ZT{i+=Ewj+~Sdwpo-5%?K!?4E=rryA@P!&hJ34!@59l3oR?*)(5%X zK+jsgN0Z;3n6lO2!fe~jX_G&lFBo%rR{_j0?}b;$C)uHI42@8Ez2@6&@IjqkL`+Ie zrIP=g?Cda=ygQz>(822XsUJgzjS(gt-OntHSzCz z^*o`=ONWtTy}$_zwAwtyw+U%MNg#=-$2Oy5^+MM_JI2kmtO{s^Bvbt#a5wsG7W``Vz9DSg!a0B z(^U`e`s1wF@E4f!1qy4W&7=8w_xw%JVc;YDMGJ3A8`VEK@MAKTb_<;nGAwpj&GPsF z0rEnmNw53Rzg>9y^_OjEarL ze;W{qijKkpX4b)s9b4BjGs_X)E&mkXIve22v~8IsmQ_UH`~R3atEf2CWn1I!1Pc%d z8VF8+;1Jy1-QC^YgEj8%+PJ$nlHl&{?s9wWv-Y{?wIAp)ni^GqRn7SoGRA3v&b8$1 ziiys;wq_ndp#FAogBXv~m4Q&s7W zBXWZ-Q}scLt+~m+3g2S~enx1{KM*dL(^mN7NhE|l z@?o*vODdbN)QXxxd;)?GwIu5Ky-T#!>Om9Eb&`0$M#!d@=EwAU8_vkZple@UTxiV1 z+^Ma|qsKKSdUPzoEKgVd>D|F&<|5TZo^0r#J+$d(6Pt~B?pBOV57{Jx z*L;{f15@N=X5A(~ySfb?XjU-ifXH3^meb#W^u5Y>%$O^Hc!=6Z|h4A`Mu zVU<;&cdprP@;isoZI~?W)Etgdy*z_0usoe%aM0v>5AP+3XHJ0G(pnK#IW?!EkU?Vc zM2%r|IXa_(QJWxQXYZ(NJL);$pE;7~yWaKH)S&!}5k0 zp9m$%nK!)Lled^$W2tN0r`AP|2r~NytuOw7-fFO^xtTmkD3|>#k%&l3H>DDIh*s29 z)=M38HIq!*q`cwf-X_H~+mi3!7EE&frp)Ks+xPf0TgbcX_bgd~k$e}aE>f<)i*`Tx1P5_3 zCL^Cz0st#un74H;Msrc_%Sa;#51#jMO1A2>a_){sDll0u(2UJ^CE0@{r~rhJrn}^RIS6(P%Tx+|G#8`4UXzCU?+pJ z4L9!7$>MRRmm6El;1n~n!uAhz-0o83QPPDNj;2y#N2~8pWpWmk^eq=_yz;x}3Q$So zao7lY)dhqBCzCM@N2llU({(5P$M;;SUT2n}JM;(}k?#*e8-I$Od7^1G++K0;a7Viy z_?7E`UDdLqhhP)4j)<&mwx(!(7ekQSa4eB(`*^^K*(M_jTg(#vh!ODwxc#Q&hM(lP zVxc>oI9_Km(ueYXjgkEp6$s3&nEiK|sA#h#*FQHatp8 zT}(!0FT8gKZ^=z-VE{9Ct{H50nH5Zu!=lAMBT)kef3?fts)6?sh1paFnj7zNH*CC(w6oubsb~AXluB`9xwNuMG4&c zty3>F5o=F32NqySg8_UiNG(|*PYNZ0$vb{`==0gyn%gdv@}Tsu+~-xoNjiL%II$uXFDH{!GwGmFAuc%|543k3xofv|F)1=Bys)l@wCvAQcsXW3<<{< z?&a-G7pSmai&O=e-p+TZi3>=?saVJj)eoHyb*4MqJ45ZGwp}em3o=k9$pY;(5Y|fpcXuA(-0{%Sq3?HF!Y`EPtpuH}{VwPCZZ4d^ z7?8G;bl(Df7Ee4Qgpv4gb(OT5X|0ZSPxDB$5q&3#j|6?yH{i;KG*8IuO(X zs5Cb>hx+<@D;$vLv*!WY!N$U>WY3~#pdAAhcPiR^LrZwNY2t7t6aTpmKNC169UBH);rS32^Q+9 zW>M#J59%oX@;%z;WO6w`Nr*+y=-P~$U4UIo6232IC|CmJTa{a6U`>9Pq1)XwCB>>s zZZb0fBJkJVb&(Zz->ru!mBGW7*vqVF+MbxY;lNtI61MWW!Rp`@jTSame;c;~AJh&> z@-u1KFf&-vTB@K@+uf zNT7l^3R}DGDhbR4{e}O{qe?^pHd+%p-_9`NJ|&en2qtr2oi1hW}N%?Z`b>=7K|K!+&_Cw*D1B!;;O$j;q;?=nqQPA z`tH#_kuB8dDkL!l$#x>3#mtK$e^!*xh_&H~qSUvNipu1B%BcKxwjG@@4|<1G4K29a zF_Agobb?onc&!K`d(!yKtRKz$o|K%7oD|*AK*vZw_ql&6@NfNXe=-4a0JztU@DqT* zLZ6p(bTY{VYzRos$Y_V@fyaCBY;H`)P7?R0<5h+C{|f z@me=@9P^Yw76!?gyPWx;p zK5ZS9ir`U1RZCs<+05sJwNTCAgxbP0X6&aSCq4&4XX>jE&3aU$q~~?bH44O&0ZIvg z$6Fhg*I!aT4YF;tOw+|fQY`2UM>RZ(L=O*xY+cIguzN8xUx^PUOq-iz)J3&&--8qU zXf!%GD`kTl_1j$Kv3R}eufWSMtEPPN`2bLeh_JYbhQ$YMse5rd+SzED`r!Q1QdM`> zVRf%C9MzlxBDIU_@k>}!>R<{rFAHGOu;}vfgX|F#;>CY;O8mo^Lp;{C@{uF62mD6 zj9d6YV_La)=JnrhL!XLNA89kqKGBBczsuSHObq zg^rXoSxQZpoGM)x^C@;&Se=Gdklh#i63l-YZj))Grx*5ehOzkQqpp$o{rm=QdGG>i z;Tq$AM@K1%oJ{c(Pj_zK3EnZ{Xq1&&NU_{E8;K>2P-=95?K$>3%H>!WV25T7M(@e- zarufqhJ6Dr6rrWvw=igfGYOWLZ>xkO3ew^w6$zpETJO zy^yw5WczG@eHt$^qzR1mR90sx314hqMIc_#~`pO#~vZk?xqlPKoonGw2cWZBQhFEbzYfR-OZ))Ej%hpp)d1BfmuB+ zWkyfYpwgt|`9bjOS1e*|>Vql0fHf9zsnrCDd=X*M!)gVB@xpR1(g;pdgLX)_P$G)o zakabdAx1GGh`?>gZ6~y$=UC<}Vft=rf`j0zNh1nO9`8p1Lqnszo&Y`Ns`BrIJ2|O~ z-&}&t?W~d%GpDdEPFKL@K85mr5n{^ETXfg7r=TaT{d&I_7^60$T3K`@vS+aUc<1<8 z;5su>pFM^!?T^FLD<@IZRs^E66C!HtAK?D$lWghMY1sm=%14@g=GH}xmbm$0tCJcw zZjP%BlSIO3bA@V&k@i>}QA15vi62ikPt%P8py=Wuy&@*S%;`;j*iqBMB8}E$xUn8P zGXjkpXAj5I_Agw9L~4m#R+0%wQBZy=0fj=@k&aojZx@DxWBYVq8mCCzT~|eIPLldO z0rqLf4LoToV*mR;N-6!JuS{#7dPE_nT9g)D7ytc`id;Z3>KJ*Rywm$B9pHUlT7*l4 zg}|n3%>Sd(MAC}a^nkT=fMgcsGc(f+^mL>ouk6a*{K{kASvmh>L4JYrlaZL85b@%d z32QT^;pLmJ0u`;`jz+%j86=2dEJu!-<05sF>#u*N33#fQuTHXiAW5z3HGzjy79AI> zjZzIli3BolN@)Gkg|CzY34AF5b`k1nwA<=yb@8Zd;|(5rOr-}A$bV;2|4c}NjuTch zIVLbK$M0P;1J3|@P)^RZ&V;ij-uO%V92Cp{H+IAK&cttnXyayXVoe9pbod7x9<^oj zsk$p|$Mn1t^6bwLSdUWPm6DNcq_^yIpF$C;Bq55N*H>uc`_(5$u%s9f9X-jW6j27* zkangLJZtEA#9Zt$s$UI_c7s%omviDJk)4J8y^KlauX94Qogp;E#S+! zFw?QS`dU^|F=po2dWc$=A+=kS5{tnAWSQD|V)0tX)qegMD|ZF}>1y2$Dh(}N(pb5r zO58P1;T}Iu1wAQ|m?dJwRh{b@t;4G;zD4%mVh18z+%ITY>8hiUV0ji!)d$z|E2AaX z$y;#|J*>m>cM#J&Ipit~<+1SRtMyuwit#?b0S@l(PODL@n7f$auWtO07{?!cPy7+~ zjEjnHZfo(+&!Q?ot{6Or{31t9%{pfn*Kb==4~bVlz8JN^GnK{pp`uQ_4ZHDxV%@&b z{^8^^4>)uCJ}DIQ6_=WFw5FSA4)`O1zw~sEQ_?IGsJyVVc5Z$H)V;aq*qE)+sA(-N zHEz(bY5Q-XXF>qm&f$BRTlrq^>^>;Fvv_!0xlB5l|ErPFWrb2ch4U9SJ`*rIcq$$K zRK+_sJ|d3;iMUo>ExXkDU_;r`cGcC`=z?Lvw#>k!K9GwE{V56yPm0cZt=vG02T#=^ zvx$NeZ0&5VZfYy2>MxFs>4{7N>05=SyVVwd2Vcb5yE}A>y&wbt803T8b5#jd5Gt2M z*+zxp3YDL)+!dd6G!=_+Yj?Cx7M++Ead2>|BmFs@OhI(+dZHpCV^>BcRKm6_<_8hJ zZf>69#PZXO=fd6TTp3FJ5ZB*r728YJjb-DpPZGZLr!Ek(Covq#KVAm8FV_zcZ_YrM*Fug4X`2ycEldD z7UlIycAx6EIkLOD8!vQZ9QQi(e6Omgnxf4(Gyb(&=Qg82kV=+gN$_k?XcX7 z5H8_e#l_>^9>z!nd@>33;Mzzj{)O2lUx$jpYL(V1?MXp^h^yU zNIw6Q{4Z!(U-`!$+Sr$Vrv=0pQLokw*-YYM{o*m_Ia;hbIpw*@QYv6ekN|mv);wC5 z_fs2ONvS8%cl^EGAA0S>E=-t#3#;DJUbmN+wXP~E(bV=eWo0TZh)_fz&{P8Rz&K4## za{Pm;zH8bG45DZHqvv{YR8cZEHS?4f-{r`5YIPyb39$XiXJB-_++>pxH+%Gn`vH##89|H_}k$pgGrx0`l`>lVdWu8BLjVoM%XgE5ieC&BYQKcf1$j%IKpGgFieA*a;M5@6?OH>#uRaPl^rn->|KIy?%4tp6~`YH>oMGx^}ytG zj!$JS@=bA-W?6e?7LWk}q-@ZFuV88uN(T^Y-sSxKd|I=~&Ffr$tyx8e$^K0?H7wX# z%&b}S&)@2*sw!etXH01p%bj(9zVCIBy3wL#VjIxrdcwea~;l9#Twv-|?^+xRulc4e4r3vjZ*vzrAlp@s--f5FsoJU>J z3~Nf`OKYT~_^@JO=GmH7h&)AbleTzd!5N_V++9=7W>ouWv~$zUgM6YRV*=iqqLyV6 z{`lSEyX0-f^tVmN$8SAzll5$f(T+V6@gG}SDHF>orv9AHGpAErUKth}ZmRT?{HA}q{L8e1L7l0v@{iM@x1#)fuukc5<#uUyg|V}~>A!fP zg-~!r)}THEIjmtW7x9;f{vAXqp+my;XW#E63IjOkyo4~AB(%DetCY)FJTwO8+%cu$ zIXMVb|2*i!H{-LN;-{wZ!n51;_Bw74SdkU6C2Zz;uu{Om6d`J z#bdz7+6BLt2RViQYN)q!5#j*~PVY<7K*j!1YE9f}_Ot_U6_duyus7D4w758ZjaEy7 z<8?NFYhAhxznex{=};R4?9y!$Vjgz5tc}G+Et?a3qR&;#al({LHG;Moy{uMKp%52N z6an=t)jR7<&zx7*R?S7(u#njc@d%0c+s{Te`*#`aLiCC7?NjEfYHbSS>q=k~=p|i6 zlL<-yK}b(}<9AAChxp$jJ+NVYaCi#@7hyXNL#eW)aIo-WU=ri=sN?wxn7H}dxN&Qe zZ6GYU#lRl(>h4a}eq&4+e0_b}9kzRTh*hGhvm@F8 zj!P*R+IY0tw)j(Z#;6hURFv!ELi@>uEKuoRl4J zz()0=uZ6{6OX5DG<%SLKzd@Hk@(-)-ikSt<9gBqMO zMp&>q{N6!gfwyggyIu(qClBG1)UZ=w^CCE~0+{)#n^cIWVc6xQ)oLuN&gM6Vlj)Ix1> z4K^>E9eQ%W3pd$Jrb!Ip4~u(C9D4*p!xvspD5SmnuU5^mMqdRQ9~@^rUeSc#`Zq=& zfyuxNJt8P)wA{vLx>+c_=x6^1@b_6lj$-9c!ZgsB*$jDp^EZe7`~{QJ<4Gia^=8}C zz={Q?7!OJrviswm+wuLBV79VzuEvzOC4~s@=_{m_g=V_!7pc3S_DkUXqbvr|&14pL ziCjbk%=Z{C;^+unU2(3hdJbG$nr6XAKqDAQ{sK=0xo8F-e$G*r+n56SSla8$lW$gr}7uE)RqX7yV|=D3E__P{qr%!aSbZGg+{f0VD6zy6WKUasOr##D{}Plf(x z1DZ_;S&pO;Ma#tnRk-XuF>jWoIKPqagNy33roG?KcLGV5T~WkTGxdJo%JGV&*0YH- zs@J3%=Rb^DxN^16AR((8IDVlDW8qoU`L=W#qi5KxH(K8Pe(a?ZSFO{m7%|Ll+!tG- zphJj@NkciJ-M!+3M{)RTcHk~yvvI=GwPf0>3o9pVz%S>d2 zQH0?x0ga+gH$KQGpSa&ZOaBld9-$!t36iL6$0Qr~om%NlC@{6%tK(yT z)0 zpF}W;h2Vvb71eH31VPu9zXZ5_J_k56{nYq|j~B8c*W?S?3An)F^LOkaq@ zrPS2$hLlC>35SmCns->nxIZeE{5S>f3%1{OA zw7LtvLP0hB7;i%*bdh%bB5V&GzIim==5W5+;;OR0)$FFI7$__%B8f^=ap-A0@!v>I zWk4A3i;c2Sy6pMXGqcyw@b({2u)ZmoK+?#1vm5fs9xfhkFI?lV(dnZ|IGkR=T92LY zK|iE&nckjCgh+$o%?{-j-bmW?P#!y5tunOzB}W94(X+yGEL4V9hA$M-%Q4P-AVxF}IYrkOVTsg;-A zmkU2dk*z;nK=vAvPmN}>@5PYo54Dq^lxo2VZ#_k&gv6hGk2~n3xz7kxaEGqv>p`Cf zb;?`zp0-a;3VM4OyB}30RNxRb7#}Tuay_uPKVnSMDg{+g=g4``UcLND+2)?2a#w5UYW$B|pj|>PEGA3{7hDOlitfFS z)@nLzl-n*UF3#Ji&KkvdP#}+cpyQHNm)Tr!sE`}w(6?E(M91^oCoe&YX-NB+BIrs%MTKn=870)u4(Py)g+mbP zaBDG4;pGE~a7)SgEQLU~5Y+|y_FonNo*+Glg&1!t%Lmdb+q*(sE1LmqXK6Iz&wanO zp)k|@w}(#kK#=ButpzhEFNm6W+5cxSlsbSAhobdcv({)XB4eQaa$KhXcA@Upc~++r z%FymBlpp$>YU;g>vNTtvPmTw4f_Lxbr97&(PP=1ScL}mUHcP35A|O&5kkg)RPW|H($@>Z$eUMAy>C(s~CMjCt1RN#wwJ z7doG^%0&%7$sexu_VwlO9}iPCa5Ou5I#bqCp*^!Aq-10$cZbjoT~Fd(g7A@)G*WDc zhfrAMhlk86ggQEghU8b{S>zg}E1DV_yy9h?)4rHFHY*(bGc6oEERyrpdgxYXXf7l) z!LUp@-Sfp9P(;wvz`=zn65OdyMJ@O{j-gR$*+OJcL0IRpIBTbZJFl16c=N?74cM>N z``G?`=e$j6H-}whzrK2-`l0&%6wCOs7W_=T{4aMWz#_WGncV;2mA~Q0aRBZ07CA64 zX~x9On*U!&hAAmj!>?>gpC&U_n}-#BSRF-ey2)BeYsjzecmrBaMnU7*tjNb{Hj3KX zT)zi081R9uj7*J>6Mb___V?!F&VQyNqt)ax z2-DVJZjpnIC9FT$Snb3fu)qs!X;!)VwVe`a2zO6pxf1}A#~kqVM~uQN@Xcu7H9n{a zao5)VF|ur^GMOO!_BiGDSNa{60hvwxF!H%iIa6$SfF^s8bXrPs46a%;D2!t6rmnuW z8emYahc$dfTBftcL&04FaX|H{ua<_wVJY~gv0$f(77#iw=xR-Y2IK49NA|WD>gn9@ z#dwGLI7Bg(EyTia4SKsBn5U~MK(DPbm|pSV+;#LgHIdP3={07we{jJ)a_+@-eqp>y zJ-^}o&>wrtQ(03H6k1SXN zfq6fLeCWg=$71=A%|XGs(?-P_-N3~+jN1=MNxnmst&<>hMF8~>rJwi>L3rY&y87H9 zOKhD_7cA+fQaQQL)vd^AC#*Ci6eSWu83>sF0Au@}r4N4ElSLcB@p*wq8H0$DhVwT+ z=1zq%GShFszyPfxG#F#*Nk|fkO%dTxa^@*LYy_b#V+9or=IuuZ%k!(?>wcBzgONfDGba;ia>7R0xp=O&uoTwe#{oX~4@+Cua3Dj=)P|GD`^^@6@} zP7 zvtxmBud1Tj=lBFH?>{io^YQ6a096R%QR}KP=m_icicDsz7oj03{`yt@ijtV}L&*#1DMs|-;;<^I$TcEWD2V4cPEgHCY_DZSIl- z^lsaHX@0IsthYpqr# zEkX)?=`}Zk`@90EW24gm0G0`OYEQ{Q{gKu-i+E?{;Zc;Bq>?{xnsr`KfOag7q;4C` zKB#;se>Et;AA~hIiQMo`M~^{HM&2l@#;Ck!Gh*mA+vHP>hNd1qU;E|!OKoU2tRV}c z;DUFR9k)KNkCYVX_?Sy&AMMTd@Sv>?&Z5^rr`ea@I>Bieg|=02uiooo1(2gh0hYD= zN#U%6yFY4VQ<2BqfLc0%apXcn+M;xP{Dat7yZ?@DhDD)FjcPr>OixcB32<$7e(#t+ zBYx!FP?DJN4C4RrR_|VZxo1${%t|K1XsZlJ_fI##*$bK*5L)P+YT)vN%JRdvECYsq zUXW4&#?~;7c-r~!6E>}&%R{I2vX$o=$&);2OjX4{Gc6Uz^E`sgNT9nNN2f;F=O&SP z1W>|b=M)uZ65Tm{PZP6;E33c=GgOcVNm)Q6*t2XyLqoriK5JA3>hgO-SPdm+z?QD; z)P*sf%BHLqw|xFM?R3*qUTUL%#fKafbe!ZwOm&(+pPzKtsGsuv_^G$!8+|jpX139; zbYRP!=A?=tJj!`M5gBgj; zhsz>VdZNft7+b8rNH-1zx2{06Ew^9|c3 zt!8&}7Zp_DJh*zv^UTr0!n!4z^IgtEs%)SRkMOV~EJi_e^GD-o8D2b_at8I7!z^oR zxkyV6J$%-@S3(^>ObfAI;D5%S*noo!@)ztOWx@&=EQVl*xg2>|cm+$V5%6J9px^>H zh5WJata3XJPmWZ-uX3J@@T>wEtr5x;3+8Oi)oWp3o_o(1)$Y$$V7WICXdp3vVn>$` zjEvYX!g}?WH_N4}43FMzMGqu}m2i*r^I1T*iWiM5e~#eul2|@HMTv-r01Ts(YKIsMglh^Aa4MwOCsOxTCS9*ZQ-^9IwRw6-hrl_Do%~pHL ztH{L>Vr1j(#VzPJZ_Uq`?967adK4c-1QbP(`92XlS$#`|Q@Fa>`9%fzu0$7fV4zCY z^!hp_Wsym3>^l7%J7y~AX;Skk$#asO5 zW2uQ`y`E!ve`ClyzrVmfgLpd+J zK!ILg;yu+A{Od2qLew0+zS{FVT;Kniv@7Rx6+-JETqQYt6=Vr$1-q`YEWr!Xc{5vy znBlFhuK+}|sHAVSJL>X?!{~h7mPrX`U(8ybFE}HUR^<~#4`N#$)fbs-ge&{s5F=Vt zCM)dyZ~_9GWhH)L>U_F5{SC;;HOmqM3L=pI1 zfyfLAO?2D%o#j8#5d|4AC5|Nfft0hlqHq)+Z=9ya(lgzWI4l!a~u z1KdkUKTx@^uh89=>h=JMfP9L@stgV`y*W+Kv(RYE53LB4g?WRtmiZH-w_?lWWBKy% zFb-;JF-jy(0zxDJ2Mx3C=lFmlSS=G%0h7wn2Kx88l#O0TTY*u1u)S9z$cFx<=`(wb zTJEL?1m*dmXwrc>nbR#x!qdx{+x=)GD5bXMNn-4DxgEXGgu9ZM+U%g+K&VMMIY|KA z<<-Bgb2+O=p05hBI|j(o!G{D(N@}KSwqy53U#*qaJ(1g zOd7(5(Ff2k9VnK1xGc`352=#1g112w#3^?EeYsuL3K0Q=e7(CQo7C;DHVGMESyF#3 z83bYYes3bi$oN?3F^?`7W0QLl=Ks6R;jEm;hovhhP(;$h^JOGr$E>(PuO1+{DI?}T z`H6s_EZq*oqur*pdeIHvXji(wrieN|uBfYa?RcYi=OrIEGIWBa zBaxY@y5&1g=o5mB7;`ift<`egwAeO8w-Frtv*R6Qc%O0Ht)}O0(sCeJ#EJM@vJo>e z;&t`;mtxgJw#7C%&4eU|mLHY|gf;aY@4(!NAO90VBp8?1_sP63=!9N3q}|@$K0BWpIYrGdxlMwRdjY?J*Ys%@$kKkUYgg0oV@|@wqzncICZFVR z3Ou9&DbXiHj4Epq-uF?tw`roXSf`1JRJ7+I&ft~%`UKwW!-k8@Kg1uJ)>FxqSZ!e2 z4EOe82K&&Cj8{t}bgweZ3E}=tOUo)~cO3MHYjo|zYUerM8I}W0Q%X@HV-I}4)NT5~ zF?JWD`t^v25HE_Zx1M}G?CKfxz{k!mIhn=B_Vo#LXYn$R3fqE5x9s!Q;qu}AzJC{S z6P-e?_6QcdY~?SDKNc5Lf|gyD6m?a79_ zN^*Qi_59xY^BXgeQBdN1Ufcr2&B04|ekk~xFdu}=RYPA>xd#jbqbd~*1++bnIP29q zk-3w(xjR5oJ+21G!}7wCet3hzSHrtU6!}T1Buw1Mr|;Da{C|{2g48wI#x`v13D1#> zTD7*bs<)vwlEJMupuY)yH5qnC<@4G8DZcEg#Xs!138w88e0k1WKKoev>c8+F6Z5^! z0|ZB`$8NXo-xEan&9i(~CXUqB!glD6L2jMPTivFB0Mzrsw%)uNWZ8l^;G|&@BI^72 z1b_HUH@$S?%QWcV^BmJRAk^CA4FnEg}e z^nXBwLVSr1e_HuZ5dKr-octlWf0&w-^kdnxQFX5Fq99C(k@9WK;$q>V5%#)ELnVs~ zt&t@6^j{r9DiC6)x^y*|Te6@b0y%tO>i`?Ghdw0IN*k&ZT^0C=ql@RsWbvoFYR# zP7hi=b5MI`WoGUs$ZafiKW!v|u(3m$V9&he0}GVX^P@x8voJ08z+e)~yC-3bZs&ojuYt+a)U-wWZ< zmV3(Seiu^p7cL4+Z)$AVr0SjMFxel}?RH#h%E?%$k+@%W;qtKda?FI6CEc&rFYviN z$gvK-`5ATm@?tp3A`!Nok}&_oVP~$F3|25ibji$Sqki8lt*Kbp;l5sL#v&j_rF3e` z7MeQeRTIH^$quv8qJV7H($Fo&-m$8ypVM^$?nPhKV-XV4(3lqb2m=SP%BpNq=kt@|dD;C4U~u`NUNeEEfkxaa4@PXh_xF8}fg%?D z!|%Z4tf~Xgc*xVettUySmYN#18ilJX=5LRmkF=ex`Y;g3UuwWm{{Fe0fFD7JrUsvr zdMRR-z*|o+9#0wh&3&Wqg{G}cSTr;re^4R&D|T88$v}iUII$MTFuAbJwV_=gw`5!V zPuwwJkRp!XZE@=2YF$@tqP4cA_6vN*Xk6>~ib;GOC9b3H} z|MMd+`1o%kmPZ5CD$od-N~=bY%^NBqI;O`{TtR%0?krehEacaksG~Ezwd<1jz9R4N zJUT2HHAO}qiw6|t?>R}S$UNt#9p3tEvw0f>gLqmS3z`mO_9hDXQpc;?>tu2<-?=VW zIM^Oh2l$!@ycHYYglNmk3ADn{>aZJ}w6s$YrWHc%_K zD2L!}bg~-qtBmZC1>l5BZ>a6<6$^z(Noh;j@E8geypzuJ%G=!>U?MnwpGZuTx9@vCF3O8I&Knw@T3N7;vU6b!!T6XC z9X&U-5+DJ4ZftdFP=wzr1QvD((g0v*?`%zX%~fw>HAqQ;;CF0!LV-u?vah6daCY|{ zq>q>d;TD3DIpec^-m3kofT5tI6Gb$Qw!%IR{ZG<4MgU{QEbyvh0Ji4Tw9eRJV=^|0={?v0xR@#g0fR}KL0mCZkm8cs;?|m`vm_f z;Qv%=X+%g_RR_aJY!C3WB*e3U(0CP_FwFs-y@tZGAoty<{yLC|NOcUXqq%K$Ed8;v zvZCx#F4rOW;UVAvfUAr82{xuKSCf|z>!XKn9v<3DNXj-<&G^;GjS5A*7X6A57MB+f zAMmH!dif<~%C|5#SC$ada5Xk)Y=c9mG@LF@1l}>BbqZYH_cz5+P~I3{;Nl*$OVoim z@0cAQQ$OJU%(*0G6M_V87509ST?|C9CZs>=bn}T(D@tesGN~foP6>Q-o#7rT*cU)R zpV(dZU2^^qlS}fW9%F_SJ4@Rn8*aDqJqNIsAGPAhb2FN!vKP@&#+<<@HOSo>n?zm~531wU1aGEM)Svv&|>FUN;Snh#-NVV3KR+_KyU1BLFL7o7K?Dg2F~tx6W> z&X>&~A@G?LP7AB^1qAqIE~kzI9|FY9t>^{!W%--zxCdzig}e+qDqG+EEZ^KUmq6qI0-w@yqTp|eIlS?a@u?_;*0)**Q5B0)f= zC(Zgl-6v#Fk2YB?499%b5bME|-xDLJ&;F|Rw#B{8f13*kC|u4hIF^)T=ZZ|Vvg1Dl zwBl}%4B%pZ%lh&42AXt3@v9&I2-HRl(`2_De zvW}&3xly;-x2DI7UHi(4_oIAce8xHO`p36#7`w+7lp3v*cPFhs`I#jA^C19ZcP@=h zGQjTfBo}+fP?y^|H9(KH??d+4_33D?cBl7fQ&z;6KhH~}ezCu7li3*i{%3XP?~B1ZJ&EILum3aq;l?54Zhw>x9=Ng7x@i+Y5l5m+j!0R)v2ve_Ko?2u`+_u`w zVAs2bIx{0dtQ^yYs6+a-e^11o% zgK(b&irdXPq5JKw`#^8Fc#*sSBAd+Kl64tb;~1Xej`P8mR15I-sfJ z5^{ToMnjouBw@1O)8mgy0Z@`kW=J{kc@T^12H%Hbzi#fVLOr36Zz{%>kd&pbu=+@kY2wi!Gvm{(SU) z1Tpg7=bv5mK*z1zn<3t`Jk3P?o?0@W%H~yZVNNQKSJ-lVupLFfF{5KitFL2e_+FsW zWpo#t@GT6TWHwU~gymSd_qh5(;+LQLvC;i@l9ZDn$NwT=Q~rJIyP&AssE~ex+l8!( z?Tl)AQzqnyGgbUPS|DJeu8GHI`|&rp8QPEo(=^6xv3e*F&jn@n&(9euZFgW8PrPkISB67q)){7skJF1Q{Iyz%qUb3A@zHioImaf7*h zdw_QRmS`Sc zE=HqX7;iO)y$T}2^=(0xbdzHm&AR1Q$G2v4v}QsOTAQi=%+Gp$lQQ{V7#3*#GR(g$ zX>61k{wY?Xat*cfg3kXM=$S-$o#Xce^|W`i9e9D4!l*~s+4g_>57wBTx{qk~9j~+^ z;#c=wyt1;gtfJ1ewf_v@z<)d=6hg(V;f5Q0=IR>jdl9%HK06YZjW@6V9I^E`xrTz0 za|sWRq+~a>q$KRm^8Cz*HO5EX zmKQYRI6em1&k7@4t=CVnxg-s!h76a|U(l93yjM(*q}-K__h$T7-Mq?Q`CV_6SQZVt zWi47te+-g#`!j`{?Vjbg^cq;2bn*^an6KhisnsalU#wLOAiXAkHO?b{W{KXQluK`r zS|JG7{gs?drMB97!cNI8t}7rw-V78tQ)oyF*dt#(m6nuFOCCi}qX5U}hUIgqq{b0} z#}SHBOwXeS$1r|zd@tz_p5MnrLtaltSR;Q-Zh9!Qj%%3EIj~M#^rfU)VsnMh1$MI& zehjN8Mfk;Qv@vC%q;t72fBEv2`-+RYIl)A6%bqSGK*mc(nQbsYfC6-s?GA61M8~^( zR8`q1Zl9Objg)zW3J>$q8oP%=Kob5F!Fy%q9(XP1&+Q!pX{|=a<~=ricGz)MDE{|d z1LdCDPX@Ulz+;i3u09*k+XaLCM)f)UbnoWw4mCJoOmA%cX|$4Q5wP1~p2+tEwp^gO za3OTP?|6Q?w0E^U@9z*4@g%)~a~l{Nl4$=fh>d(h#!aCT_Soe8W=-@nzzlhzB$U7!;wxPF(x7GID3=&e>)kqlJ=0WXq< zUv;(*HgWy^F29A=ryUKG1iG6sf-dm}k=$s8(;WZ(2%nLn;Gi-DBX{tDcrtVNKEog5 zKrC7;{G9K3QJw~>^`-mx)X-prxzI6x0?@*lF^(^*7SVt&+l@E)rc*#yxZ!55*fAlynmLu} z?@!8~HN__3TJ9OFDoni?Tw`>VWnGX6xq5yOy?Jl0gsbajPkH| zzGcyZDa`Zzj`Q7AmiMEMr1UAjpJMv4t;6>d&RT8pa;p$|N5-5J>p%Jgck zIvITK-&sc}yI|^q{!YwT5TJ)kVXIdo<(;Uz=c}Wa9nKmfkQ0~VP5Br0N$Hr?tJjVb z+pj>usc5hi|GGl*&!2L620>+MJipFVI2HdK^8r+G(V*@$+<@6QWZ~E#4d=l$c#xsB zygZ5)`}01vmMAcPnKG}xzVUY~<*%09y~k&^h~t}c$DH!3>^XlF=Lg!Zq`+AGULhgmMdu2(d~a^y@Ayw; zK%D|uvWHy%e7=CLZ8Zz5=^!v2Sd)z3dH+M=;Gt$`73V8C7#PH9y}TiWn6I{tXp3EE zR$N!%ynJQ9Ne(0#Ft&h)Dfn*@TE}z5Gqvf(d=0b^=_BMCPM80YS2~D|4u5e`nartO z$)#A|(FvbGLn(QbtM0l?W+|y=chgwZ1}}zoG5y{ieV5iaY~4lBl%_@UdSYsdA&I6~W8}=?a_QRQdtscujo5 zL#n=>2(rrzghXa~lh5&Z{^MHAe>$Y$p~FAqF%rKI72P#t`FeZ%kaXVWwDx8Nqy7Yo z1w5d?KEa#J3%~*Z4kHxUCA<)XB;NoKxy1f2sjFDBUSYCSwx{J=Y`lgCC|Fq$ukjw@VF{{CBSwFWt)}ct3jSbvj?NF(&`=b=?2*nDCCXDqJs1?$4KU57_NLdD`2 z@O+jYjd|Eyy^;7nZt$ir%KD9%wzD_&>E)D2z)9mE%uMBQ?^d8FhVRf4Qm6-G|NIBu__AiwRIdA;$mb&-UAX5ul&0}ecL4T9*<_US| zgKs$=sb0HCAW#eBCYDND8NUroC-lODzh)jv{#9%WM=WW-6Z)mkZSkLl>KXM{I6_i$ zvnj^OxcandVUxc@aTZ?d@O=(+v4x|m_1zQUE5DNYZ)Ng*3hCA-^^y5- z^};(PUG+cIlYn>|S~zU6rhdy(^n&r$GooRAe={2_TIKh!Sy@G;aM16Kk&2fO^fJ5g zIGMb_VCYE#CmCY5cY-OMo;cbG30mmAd%H|&4Hh)y|B#Xyyk4@@fMJlpZArB!RIJc} zj)PfZmKrj7OTXrP%!8hloL{qZ8)|l^H|>UD>%5VR9jJDP6=^v++OPSTWuY_)6iz~QFug@ zSmrq-xqMOeDRtFsRBvv4yy3*`!JQk4M8vgI?;cLSr=6i8S!9 zQVbaaFbeuFc(oibF(dfYa3O$x8Gz;#E*i{-UDJ}Y)7BTUFK5XRPR-2!3~`U<3B1$I z*ut6NAO1cdrjzEpUSnJwb9yi29-8nR&UK}xnZ?J?Fl@*YpfI`|iAZ}YbvPQ--$O5` z%aa*tp20;9`!!!=I&}<7!j6aDK^BjMx10y8^sY#2r??%dFGE=Zb4N5|V+TkU$y`Eb zP>y`KQwhidpGUp5+r0Q-uZmhXfXwsb(?xHxHhted7HKkUjP;o3)(>s;g)I?43mUDu zwE4HPnOJ*7j0sv*?qkCjFbqv4GIPAG|azYR#phi6UGiLd$H zUV%@czP%j0gW~QZOCNx`)R3m8q*cs0*B<-;xTvVa>%xw3!4DtJJ$|H}MC3x20pZu` zC(K^bO5@#A;8oU)nIfsCe+dpIQdlaSkHUXImtKBt;?0JJ`6Poq_}`ID3^_jLsLkI3 zt?(=N6S-yIwA|N)(8wqTeSJJ>5`d1t^)E9=D~-NO9^H7_s#Ni$c?LVPJB&blUr({` zNF&fm?6?FA4ff=_dw-D>NdI^HXUI%XrGeR6Es842dmP>5 zPd@l}jx0mj?s%cbNWXC(2$D%7C*g$+jJnpaP*h#|`Vy$xTn zvKYU}f1bi2!=?3DvRuzET?&bhcXBrNr9XzETio9Vi&M6H>UEvC)%p?4#Mmme#>6fl zJqS4A#x~l>fm(ZFNFt1%?_*~gu~mSrhrAk_F5<~0p{|Z!ZcP#yCDu#+F=+4Q?nWJP z_ojqSvj&ZQVC)BL2ioW^k}rm0Y)*2HrGbu>?^*A@0~AHk&p9cv%PTC%)1y<>%3|TT zk3TL>PZn@vy-yos%gD|Ne8vsBmWx@WWn{1bsV$fDbG)pLJxdz`6bq;hjqFC#8d+x9 z&NViPSWgcPiCj(~UgY$etF#nPp}`8sksI2BLt8_fS{UXDMk?O08zWN!&VaVua8K4yUd!X4 zj!f1SN@qh^xY=c`z>zyu$%cPIPmCXyuxG-+Y;oo9gExKmcwk_05W3NC!@F$u*3fGb z+!%Qk6Ah4(w8g>BXqwpCl2hqpZ^uiCAcJM-jZN+<`Lxz)KwIsIMbq)KV4|kEtj>Ou zU`)%gye?1M&9;-x*XCz&+1%9b4JMKXLicXKOqTY29C{Sb!`T9Z0D%YD#N!#Sr#=bd z;R)XtkoF5~^|oJ2l$cn7{3a#v4U8cp>mQvsU1DaT||%Q=^6SZciewBBp23U zN`4+`zIpZOSBhXoLxD02>zs0e6Z|!TtN(FI0ejM8|Ci5QHVkQqIs1~K56(Mk_@#K;My%UVFyv3uc9L}m#POADPP9x{|uGYA;pq zk4gfBN_RT#E@C94y$1-%HL;X^6qqqEFsJ~Iz<<^` zh2ML>&01nvZ*Y*Z_#3DD2DfL%JO0!45;JSCC4Bhp_S_Wzbhx@k-S_i-F!HO}1KRjs zWKMJtaK18M5|+r8GHloT6UhEFn74$ITJjJgt*f3&>0$(~w>j%ttq&`vb65|$!vt1} zp+wC^sPa!tEnIkl4xSgv6cm+9#&|?R#(U$ziqD?B5O_a<37uD5K5*#1XYb9>a`3{y z8yXq;EZeBg&O(cQR4TaLC;6`ML70=51Opnf?0OF-7nE=N$O-udAejxeUaB>^2QDuF7DIV>N!kgjaQ(c zZ;PCP0c>~MT5ez5*lr)Fpc3gdLzx+*l^@FlmBe%9kKwA#i>p*s!+#CKu6?HK)xVYa zzO(gqlts$_-q~4J(18!FHMgurBwTjFU|4Ov(fB%1p#_AL%4nQl!uMtu6~SO62?k=*Zh5(jUfdy4I~1YQTN5&J zIUEzkt4=5=C{&(AHUY|TdU^Tj-g=zSav%ik_xgd~GS*1(SE|Cx^-jyLY1HioO3_6o zmEWPa7HB#CyyWKIGyke7k^K`C03`(k(A5^LGNnvgj`ib$t>7dj=ZCIFN24f%oE#iP zHZHPHG&095>eF-(50K9FwX>^>(5NBemMpwq1-zHG5+fKxw%5~|49{CFJoz665y_)K zLZ8DINOE%zW{7HCa}JG2doZDD9Um^v?cTbO_+UC-$9zyjuCW>ErDp{Fta4Xh-V^;Rd&x6=Z<-DB%-wVI&hacfzGna(t_ zOB5VNGnjMe*{E-Fu`G#*SDsY9Wo4!NJ$*f{We|nX4>Uyyu~|tx!UuvRoJft=j*c=K zU-!<>bG{vkDb;bOG`$uWAqzrJ<|24y7NhLD%eC2J;iK>{YPokl1D>sIdm}Ff@26`R zwdk&LeoEBzP6|z+&Gco~>#z^q_L|u&#U1A3D+woIGCK#Xd_h)fYC!uR4XWFwVr6pH z5r8fD6`QC-6~5B^Gs8je?7(GZdO5(h2+!aNZ30L?(qSy`xTza9&ms-2eSA86T!zJS zJ+G{?2Kx;XzJv}UT*&Ez8Ne}P);XoIeLVwvo7+G`+ckU*!h1T&djG^MyVgeN?2No_ zKvpIK8&)!#?bW%oR#M90-lUiK@8%MQ=?er9@3^Z+t<$&j?V(q z#g${e;~u(0xtFeQ%pkgAy=c@FJH8&8Xw~#* zdSLk)r95JhiE-(-HJH*_p|d?^I?56RV?9XBGav=B^z4AY#OM6vOhrtdL+M$X@K3BTHf19WJsexJgepe<1!Yk@lNSJ%xw~W+e|SjI7sOg!khpP zUQv(|3=owxtwpn@@Z9U-sR8hHx%SMPECF9S1|n5~nKSX*5g&#%Im0n9}^ z`@6JJw?j3+2Uu1b-@hk~VLP#KJ@N2*gSQ&w$E_p4IoS!?Tsz^+&XU~kt35tY(dj%} zX+xJq1UI{z%FUSF)z@-PloZzYBkL2=U!WPvxkg=ZaWMUTaglNv%y06#w>)@?voQBE zf%kP&mHo??lYN2nSBa(wD#2FYQv;rLE|;w_2qJC=CMnO>)m!YTh2Mn`5A{>iRU?f# z<+_}QqN2xaDMzyU3c1Gda!#7YuKyx%%P2qA5e*z;73btdPa+@FY_3KAAi#fX3;(?lP+qu(b>5lk6F`a#NE)* zwFBBje^FSN-po z3iO)^`SS~?owg67Drl4)@`bY>`RMuZ#n5yVG&GRfw!z4kel5gYcE**4+D()eX0RmG zztDX@=T1C{MPE?bw{7dYg_Yz~R$f>RrT?m>*f2yA@?)9HerueraDZjaOidGr8ZTME zp)XG%d>JXaEX!aEF*Uwm8MCH4$h87{AD|%fQ9535w6|jca#$$s9-P4MZ~F(jT^6zC(+8y^9K(&<;pO=Mp8+VGa16l?Xm#_`rZ*vrQp6oMBZ^i znLMR^5LNa{gB-c?xg|B=ST*(F&OJv?ArX(d(7hY@`S??a?1z@tYc1%|@FD@N!ATG8 zq&_JTqqc`+p$s2yE~!u(m$$ZB`1#RV%$JNLWhXz6sJDG^ddM`BN>9e9(k?44Mv3+L zroeyLa2%+#*NTcu7+h0?kG^1;8q-O^BVk|k8|*J0@8Qw@ov9uNnyFc5r&Wafl&^S6 z#@!Q&hPKRT>#f60rnIjic7Q;qd9g|}%m0)$Y|zD0jq9ReB9nj)TJN-dRA@seQ?3Rq z*b15sObr|x5pC7s_*ZynycGsDGt0og%FnApl4*I>;9^37i9iz%2^pD=RxT!;BErC~ zsq2o^y~2NGQNUW;21~~d;X*}c<;48O{r?gF;lzUaVf0+|B9z^xJ=}9A6f{wDb8!cc z)@0rwClUSN{ABcD0&HyQL5ZNBhZX`# zLjJ=!g%Hu-Dkz1jc`r{O-VWp!$-cU%QI!r@i`=zo-8lPJLp^aGO&$7*cgaucQZw=yp4J#Bq7@z;cwakfm~vr8-A)G0MvLhIEg@k< zUJtsSoSjuhS^1_0XDO>q!qM%l7-uoD^TLVKgV{iM?%%wd{1ASA_1$~NGjVpGRFZig z=*Aq;R!=!BW4NPhvGjNror)9n^JH#ap4$7*S)PT>pB}OUKo4D=-wSF3aVyHS^}_H! ztgl$JuQuHM`7?s;{j7Gv+=3puRH@TJEJ>tj8e+j?dGa)eNOdG5T`VCfr(JtkP2 zDc~$gx#Io!X0iq{*EB^UoEA@ya4O5qR&@f-5+Dmf417S1Wm}07RD1}5dAD$LJ%KPZAo{@B~-%n4YtjWSKU3{+?F&9;r zgk$kO722){7-){-W^i$9HuIeXBHGERxrDreCO9|Xyq@299BZlvH)><`OQ>iU?AfU} z)gT}}eq>~k0=;2%#P1fSa_2(c@19Rf0$nkN+g*S)HG&urBPP78r`4K2uq#i@efK3h z^?WVQtN&gN<9b-}Kw6f$h595{kIOM5pPdNtJ9_mGMq{{||}nCc5GVO#P3J)2yfeX|B54g?-Qy%A$kC7vx1=0LsIYqDEhQn z#S3(|pZ`@fHfKDHuG3u=&!*@JfRTI+ffCRd`-J%P;x=yI^!34@n8rGh#F3p+uTGEa z+%FWJ{CbX?DCl7eC9!^T%t6lP8XD#da+8^dYC_YP-Bw;gagsOkrebi$YOZu~VoFuxXL8DHd zo#*@8M)ey1$1$~F)V2 zXsR{!vm-qbcm2;IO%YSm==EmqcwEo3CEY*VMwruT{ni{eC0vu=h0M78>c4P^#GDih zDpr`yXH|JmqFw?3`cAW?YBb~9AGpdpOE=G*$0vZsDiP(c3Za9l8|B0Mt~Mx~4(4qQ z^j^%r?A+foI944CgD+n>0n8Y^jz${;ZY5R%6$RY<^)pl`fy9;wg0A(WLF|Bbvv}|x ze`*aB-MEGIrKpfva%Nb&giTL}h}+@k{>JqI*FB=|%(iYw%(t1g2z2SGa!d6)LnZ|O zfOx(oMBT!FvqGK@PYH`^Th;#sOa3YsoPbEbA8kKa;Bo#{7Iq5@`k;Tu22$^5l--AQ zWy9TEnn{}&WZ{T4&RK@y(eugbIBf|&9S4uxGr@^fQYtIf?-!tju@^Wlh&28pb!s1e z-zKx8p$kkAas`&ThCr?T;C3RUr~o2X#g)Ir{Od*t0(EB5eZ9$4<~PR!LYj;5a=ND| z0dI<PBFP$xa@*JW*!XEMGR2994hvv0Zmv>Oix4O{?jg% zY#&637u%l3!MxKUYDPnw|4{(F!B5lGtYu7VM=Gf@LM@(aL`hd!MQLQE4qF1_mpt@~ z_xnBL)1NxzFa8Okrp9TTqZ0|p{7*{7gY7PF>%Y!r?xVW1e;8W93>VUCUcb$giaccQ z4&VM*+VtcOn!siwAChK2q>iFEXt zsu>1i`QT9#szH*YwHRjCf~gDvE^e@2UR>(Y>x@ZOUnlMoO!PR}LotD+xZY@#z)Nm_ zT?4_;htltqc~Duq$p6a%plVoT>k3BMer2rc`)Apw{Dh2(k6CB{E~$T52Jrkw1ZE-w zv2YeXAF;EGYP>>%SJeBS<2gYa~IDxVx%6iFtsmiqYa*35Ud z*`$llqJg4p`?fB&;?r&y+oOboEG++m8LG%B?n=tycL5Zl6C&~}&T`QkAePIY7SvjN z{my^AIbQZJ@%~2I?cM;c#+T+-{PeDqLh#QW?i(2HGXkbFe3|*X?LSVv9Sb7;Dl|}m z1{z&wWhGh7&r!!zt(ivmQH+inE`Uj?6FEBoh=Pu33v4RD{ulsy^&HkJk2@?B&rqtP z5Y{bYg*P=a*>^ZB*Q|ni1hl6X=sobqC|H)NCB1-VNo?@UU}E{eclKKf`=H`aBhE|J z9u1XDfdm9YG)3ye(^L9LBw8pE(Ft5KxKUv^+1;XoqT2;!0dGHEx!eg zV<#({INyir6S|Jf&l~PI31F-du|@{!%!&<-N8Li#x5z%vrh!l&f_=(eNV?waUJC4A z!6__9zr{qrK{R8RZq1wvyx#U1eEhy!ycSmKL)^3TwLUIoeyIZX-(zIhc6tMC60H9sW6{EV^M6%+cpvFro`!v zHzM{duffcw_wRF4O{n>ZINmqVCY|#$9=;Hnl zdW=>1j*;=(U&CL+hc1r&i?9%{Q-x-etib-}ydN$r=8PVJQ0%MaajRHonkn42)#yP7 zEu2`9P5wWWTs!o9=gZ>j+M|rXQHR2;sC@Wh)Th+^fj%pBUwdDJu!4)j>*#t5-NIe zA&tQD!KdFRhYSap3)PaIL7-r$w#c6hHXNWY|ELb)08jD&19S7@;bb1@ZsgAvo%uiH zA{H$~7(Jv5pfaVW%!Yo?e0^ekCoh^x*Ss3iL;Bb01&A@Rz|r6@2(Zhq$N*E^I1LiO*zzWI)Mxb)w0Qv>a(W+@|Dh&)pV zV~N8FVc3NQ?quRaq^5Z}&-(76y&*@8nNs?8p{vzJ`4nS}!$JG|R~p4mK;l9CV+Udb zr6l;hYpa#m9(r8=$cnOxuL~#SU2N8t8HST#=>coVG||4lYGRVUU7NiyFUt?HaXbxU zyt=OeqBtXKAry^6Yd@SOKPz|7#Cp+}=W?ZNPES*Lb#~evIf1jF+V8)tu+GlTf7zrM z^mvP7e9NCw1pj8&lGlN_n37Wc`sTJ7rLJVD=(+5B-GI$CQr~lNa-j^7vAAL}?$GJo zrCX`f%4vBNZ1so;iW=a4(fUIy#Y#*qS*K~915t332^Ib`3>Q4IDviS$j2MSn%=zM& ztNXfFVehuC2>}|K4lUO{AgQTI%a7K#KvV-R31)27l`h|u*5kP2fsHg-lraqHE5WTs z&$^XW)KrZcF&-4tB_U^FE#HTyHE?~FPxsH`g%2VZv?F`P$)8$)6M{AmUopcD0-Q&L zt%tn~YXU?ld$^&sKl*euH3evc`}k4p%dWYbEkRgRj@FWVAG0Xdl3Ax7VxW1*?j-4) z9h^wtTVy%JBv7z?V;;R&9_6ddt5#u}`d;j;i$~O(6THjh;kNhVMO~j=z^t$u7%h7@ zHbioTVmZ5?@*rHV*LI3~UVfZvdH#gH4fy9Ct%d~Gsd_=#nGFWXZ8}dntyTXFQ&L_k z5gD?$TsxckPwFx#@#84c@}{Zl?cougu38lVyuEvqX-@kez~u)@GB<=sN(Z>GLQn*{ z#FppX!92%fPz4SSCVkAzOm%ff$zq=M@($y#zKs?W!r{e*#!jFZN6*gdo|Rvcf)2c9 z8qzNo$D1stID4bbI(WU^3G*ZaNt3W>4_p$8a0{%(&SCQeb2jpJ^U^V=7VQWo==iQ09%PCnV*Ijhu&vBn0+VUsLxQ_X;YFC)Jr z?~z*Ue%^evB+zw`ri*v7HKUaYyd8i~QeH7x8{zfZ4zrIpyi|*Ocmwyc+wLaNyzF{D z5KA#5~KYAAN^Z(>{T>w*;J_!;3FW?*9s`3`nY%VSmJd^B%5QWd3{meefOd1H0|>iw?v> zL;EE;NjdwGM?;oBliLg7ThL0?AMIbwEatJLy2w;a$?D%;q|>rs)%F=B-46REp`WA- zO+n*><))=S$L6i(p&Q4vSrvG<56(#ojJyq>I$tNf$Pu5Os(dv%YHE5aZ=HT|-UhaI ze83vrTZ>lUlMK`#r=t$$s3gR}WT=rBotaII+Z{)knp~l6vfhfRug3tqd`PIN0QBK? z?O9ryoW2@iwtrKrK$SDPzc{@Mtxg)%r#pU)L&|WNI z(=9<@S=G$Qa(s+}Awc?S>XOVqw2L>WSuGRva&RNZjKt1?WHfwpS)(E1*#RYVo&wzj zxf;nQX!R13C&4DNm}nVsWM8H0|E)!yloN<$fbQ%~)zs2dEaR%qkk4RI<+GP*#lTMZ z(c6hEYJy8K5qxtrwEAEnFl0;5ZnYt`q>WayGpv(Ye7)LZak0Ei1@{qYR?Pe5Iw?e@ zrXw*mvApJ^Dua$_q8r0mW1bC?2Zin%NOK+Zp{J1R`)xWU=xx>M3IsWbxh_)3I)$ye z96Z-5;Bf0kZ(}CWSw}kG5@%WQ3*7YQ&&0w)V=Y=3CAcQkl>0#Fra`*pR$mAfV{l6H zp}o)7>niO`E3c`4JASvRg1#MdGj}3m;4Cy_Y{5W=RsS)mS)*jA!dwd>7 z2g8@>&wfw;ySfk{<^q7xF_VI5!uWq$tv6y6THATQKkz?h(?oW4!=L1sbvvs&elJLf!$hL9~_d@wPJ+kwPZ+dL)FmMeiO+7LlR3Q zvPXr7zfnGC+kky8zxS89lgBFO-H<8T*lbkkta2EWay_;@Tz&4LM!aa)wTg`pE^^#t&a zi-918KCpG4?L^^VAI_ z6fvBM&snGt<4z{x?vu}VtsC}5a+3I!MnE3ZVDd#+Zz_eBh+DRelX62DOs$zD6cSJRk)we8d?-C*d%^6i(&mm1-hnlEsKJ&xebkdPf0|C)2!LVZ`xrj@qt4S=1377N zTRS5o6}R0iA+LO7R5Z)Ie%P*-Cl}wr-JNptQb>!@Jz-r=N-oaI!n@pDP*;~Rl2PIE zs7T+OZ{_VDv%K#>h#>352zp%Hf~~JCcYESh=bxd=&Wr@ei=lL=2g0CTLNCf>#93Dr zr17)EDdnA7%_5Al4eG~L?DjWY078Ql5v75nVix=<}^lL=?7Wx#q zox-gjPBXTPtR`92Z1qLL2mMAVa8|*d0T(W~2?;;wGrI=mbqcwpa&^I%w2RIe+4+$X zbyK}ogCS$`50P&-xADJ}X{fX}*4g5wH@&#Ixrc)Z2~+~{7ux%VlC!r_u0<2NIP5Th z8zHda0A1PDa=BUOqYwfwj>ne*FAdK;U{&OCLSCVe5d0~=HXVX7zSwGiohJI!cG*ck zm1S4kC89zK6TAFKg6-N+6?M1(RLzEW+b}%0MBo4328xWlUqb%)eSJS)LYJR!piZfc zj_mp4Xa;+wLkWP41idN#>U-`F=L)B~hf^%4DF&B7l|-JHP$H17i(FB?77-G*;0KN@ zCr2$oEJ^is2U~vAj?aBH6q8nn-Mx3T({p{mQ&2;EhkJT+u~fZlkAd?9y7b-NT5Czm zHL_?t{HO!geoCFGZ)?KFNv(As8l%oPRiq80pAw#+d=IZ-MDkS<-prUx0Fsy~Ww0g* z36*S_5P>&wcUM7q7^#awZB4UApX*~}ui#x5e)d=W62$^)obN?f>+F;LC8xT)wh)_7Rt34~?rLZSc z85I>h;Qjpk$-$LJoUO6-b6tifokP=D$|gu4Bs$+^F_r3?$C#ass5Q7yFCj3mq)kvw zsR> zL73Rskd8;(8#X+!%QVXpEDuSEx092Tv+L_5&W7)9Pf zSc%tIBZuSH;fdIl5JzFs&;I<-$GY*TBi%5Q0wa|sFzZ1BKKu*aX+SAx_SkkEXB8Wh=HJ&>xUFsXQX5)i;XyuRU1 zjm-?nowQqHb7*(eeQ+J5nwIH7H{c74{QsQu+djU%sfmY zEAd{*FM4+u5oM|-Mz!WM9YS4%D3%`#^i-uF9#;>>svlUnM&N&U6nY+dn35GP-&n0D zCrpu6WR_It#+o{ig3Ijc(?KsD8%YvD2?OP<;{!8{5um29usRLvND6PsuV?FRa+O-0 z;ANvQH*+ytI;-Ml8nJ&6mx~(Re;(+`$>U2XBs^snMG_`yyFZNfG~NG3Q~IXe<~CQk zN7y)m<7#T8RG0NqQc|e`k-pEkMM(34<-TWPP-+ObkbW^-X7A{T&hewsETQg;-?o6~ z$xD0FtIpZwsRh9npbwW17?kR%&;*R^)DJn!Mtaa|fNsjh=QtRB)VO7Jj@7Cu8J!T9 zka5fF$@)52!(l12gB#BCWSM!T)u5>Tb`zwatW(*~L{FoRA)=!LTK6jz<0bh!Xq_M?oG88%9laZB0M{1{_aj?!77>y;a4kO9FrLeO>C5luer)DDEMTaptTbGgz%->rr zYDfdoDqL@CRn?E@nF)Ql&Wv=I^9sbJi5cT9 zat+#_SRz577y}Rp$&~mU3L<&mTBPqWRE2S$V{u73iaRV$^@+%l4y1_2cyU3H+L00y zVsYHw(qLQk%)!H>=*4xD7mG)>_9OzYZmjzDJcp{eHRP6sHD*s&ox|cmr|Fp)rji4Z zu)|QvunP^c;YgROwgTX0uclK+rvAfIp<290ZvS0(P#a#HVUeCzAUy-*cH zRamX@?VDe0Fl7`$1FGJd(|MxTvU;q=SBj1&|q6`oV+oH=c2%RC=Kdba%d0YsfPok!$hPl=V(>h=qwjrb;+kO0o`NiH;q_5ZLHOQhx zQ7wFYE2&DTk9o(0AED)FGt(;8`S$r&P2>_|Y?sCQTZw_h-SySAPZYNK97%yWhixZ+ z1HQhXPnSluh80O8_MpoTEwe$e0p7pqXH*bER17Qaj%CKvRlTp=RrYk;)FR)fjt>Jl z(b!cvR6{}{5&=}dXF#9+qQx!0`M6RXEnLTh`|XhJapZP@XHX7C+!*)2FWZ&dU&`<9 ziq-r->9Y?$Y`G5KpTNK;pqZW7eHYG;CFw?k1`Um3qPl*y0s z3nv~L0?m(Y`#qB>DG5_qT`0BP3v3ak&l#q?cF--@I5@Ox{2p(39jQZ z7GT#CBX^LOc(H&~zJV3r8Itu;n2CiOJ$giTK~LHu-NnC|hMFd}l{QJRyqT(Idy~{&_UN zWG}46Tc~yBS{S;MAya+B0Rl12ofOZ9M^Yg$5Wquc$T0Uakr_6 zjEX`#b?f{TIfv)}SE+6nN>Ra8IHPt+_TjOY$ELrxhkZ_5W??69@6{^#)l zJi*ccySAMoylAoX-|%h$yAHwC%UiEXO=dwWeIvx#nOsxjml)xijJ|?)B77)-3o(8# zHKmpJs2rcPlF5M#h(N)8wX4+&(JJekMJX*@_yKE_J0s1#wN_iHSrcMf)9|6?+QAWF zrz-i04`{Rn2#b;o+Rti9QDee)GeA>36t7 zt9%#&?_eOwUC(>B!S9N<6UgIGKXd!Ubo`5D)9-787`86ljaPJipZu?*? zX-u+Mq9f-sBQ1mQckr*e;jHzvm1QN3zQgWhgS<)+IpYV*dMh8WvC5;7`QJo$qYd5; z1m3JPy;+byk$zYHUJ`dy&sNyl?3QQ|!u5Sh(xWuxsqa+OQwDSRmMQv(AISaiGqHyth?}DjG+|1}GUtMSmk@zyI*wlbf7C zgE-C(kqBW)13KXBmVAXjVx+YlgnO?xVazt3!a9Vohw$Pm&p0(Z9oXnY9Bpz? z_O)dxZg2navE_nV^;WK+Yy9!%_AX|v$xgX~1E=iw$VF8_394D$T6L|x|E+MGVYzyq z$`ct~u~oC%-Jl@{*YAU$Q(Y9aGD~@}S9IkE^l0&y5x6%NA>eS&j=1b}W)R6Zr7^=# zWWW322HKoMg$}udbIxfvtTzet;LL}&B(u!I+yc*e8U=+>XP>5 zyq}>A3!7HCs_yT^n0*B(;&B~nQ}&35hG(#zzTHF$y+wYA0fapAU*bBPDm?zI9N9rl zLPQY?5OgflzEkXs5$XzfPv9TA$~9bDaKv_7&=3DXjQTb2Az@8ujWLL~G_~*YN~|Y{ zS8?d`W|Ey;0MucfY?ogh&+MVb-IEcS&Yd3}K`!}gIjZ1P-q$wXQoK0@?e*Dc9?57n zhWh8lVI+jp<=))h2Bvy0NLAunlNcW+|INq)p=OtT%rLU@f5fj?Y|ye(d$fO9{`qv3 z=gf9f++Z}E5xz9~n2&*f8N8Kc|1>9$I5X827t8B_g5p~I~t3*r&ur|4eeRBNJ%xNE#>Fns4 zZ71Q-(V&$gBQo1@Hc&fdl~*o0+HxvCgVjhD`4Wr_OE1y9_s1*2iRpbcQbsI&@c+I- zNF{*(B%`6R`ooob*3RxvW6`ZOR_WPFok(sjNx(|Fzkigjt3_3txBlGBW?^H&_L`Q;0uOhkQv37sMaP8|g_Zy@v1}rPYo#GCW>|f0!)K5kAyz$^IL+v2en|}~O~il+ zxQv3;)EneiMQs`*Bjv{@|Kn{#vZ*!Ij3X@L!-uqBu=BYRgxt}Gp54e3Z2)Z;}w#l4rmCV@6DP7(r;ph^Qp{bwd_F?_~1CmCrEfdCG zG;8ix+x(&5Ka;Z)qq?5@e(RrHXp!SN33}!(&gU^&y3n?RfyUWmlbww7Il8ep<*=@JnWg&-L{Dv z88zhZym6AzDY56G)U?+lh`CvVl&Sv2s5Gh08LkQqWZDKd^`fq^h z#v}S)gaM3uW{UP_2p3};HchsFF0~K7OM=}nq2WNv;Yiq#oU+i2ca;PtpM9Z#1IYr4$W6TpIAwK3A z`-?~{HV*Co@b#8Kac)f)DDDIc7TkkdaECx}cL@#&?(P=c2MO*lxVyUtcXx-u{mwaW z&R4hUR^6X7H8szVr+4q})vMQ1WWl6@eGIPoIZB<8ZEJ0VAOZv#;&eVj*Wq?^(4y$g93`0|9&P>!8>kF}ABK60%yDL``vS-A7~N zFSC}n?3|nx0k>9WX1`aPJWO-Xk1YAoa3~%}SzQjm&E1s-%85vPJGgG74uo*@*3ns+ z9hg>Tw)bXcR%mji{1I{!Tx-q}=Y^(zQ;;J30q{XndtOz;vKt<8V!?VcODI8D*1)x{ z9_ZM8Vil8ceOu2#`dX7+qn$fHR$1G=pyvv)5Iq}-!Yx(?!y|B4?+=!Ks#Xde#v}Lp zsgs_RS$OI(f9qcrrTR-Cia^M$=#aL{GFXpn|_gzmG4JGODd7gp0a z4JWI%**UH*mo|x3QOonONY!SCqkwTnqr&GO4YuH$ih&8{Q|wu*^E2m1;Ref&SGRB9 zFq=wBv^cFppi$EUL`B8&NsL|YmKkVUbl8mQv4_r3QEn1y;;$lt%do+=31s*1#AJ@# z(ie01_rcYt5XEP>Sz3(nhG8Y5|I2qhsKcp zE#VEmlcPh_uOiEGuTM-S;AkfE8q_eFzj`b(XJ`bIFg}x$_gp?Po(VCg!HJwYxjN?_ zb4lJ2b7v=H@1>xOx4VlG8$-?2k->!S{Z6l!CjZAt*jZT=0pQI#R`re zrtQCql0SZ2RqI!~YjIY*#_gCD*dI|A-#;J;T}UccGf{UbRR5De38tvWv3zcLdGRi2 zX;ClFl5~{F(FD* zPpc%DHG}9(5yT<29cgxLOy>hC8ZH`|f*Pfx zxV9^r--CYHIO_b0=Lf>Xiw*&(_)^Pi;zFJZdp3~B1yS=&#PDkLX`;j&}HW3-x`K`3A?PSo(4o52N;rI|?hl(bp z=iONnpvrT9abf-rbZh!B;HGyF^M5?%`+s=MizX10uRNw6|J7G{=!eIrN##0R-Aof$ zcT(*S+qg-4)1;ti{r3?ADKmys%zaULj(vDRm!U>&Cc@^@&bvG!{D@s z!D%XdsYPII?TPEXR#IJCSO`A#D-;dlR}8goLJjj8R?CO}Yg`MS@mIUC52(nv+RCkd zedh9xe6!&ZGhU%b|Ksv8fw6TTh2uSJ_CNUIJ7}-U~QlQw)U?c zl9>?nP3O@2J*&36sy~*1T6UyVVvA}hdq)?0KuWQlz^`BPZ14YGLH;FVf0mb_zU9DB zIcUZHP{>n}an*=%ddb8U@*>jasO*2(2sU!$#fh@H3X}TmaPvpB#M4e-$S(o%V(uTT zjEVpj$e_&lYfeB<;QxhTT2X-ex+RI#|Km1%4-;m#%2Xf}D*p;M_mk55fiR7oVfV+C zwvHMT<(CZZBSfR11gUi47N0$&(41q9bK^qXY@-;MUts8MHyRGPJg?2$YnCncx$w+j zeLRiR$g=QxXYVYJ#}X_mSXnohanzA=MgT)CnvF361TSEP2|0A}xYt-8$dCUj0F>~3 z%m-A3TQM;JUg2G22tv08LOk5xcNFS8vL+yCqO+!uo-j?mP*V<+K)L0<%H3Pm)!x`S zx-){3y&d`%!TSf5LY>5q7$g3in&E-~9e3E@&+dnRMC$F$8*IQU67@gUYOK>fZnX1J zL)PJ1s5W>k3T|}13wJz$JPGW}m}Reh35&RFmq@|uvAxgmvX|?uc}~6iCR7#j8Qg;9 zbp1ci-x9gLfs&JIqN2(@-sIiI%)|r1i{-HfCdepAJ+D)WWC+8Om<6gCDy*{K5|6AX zrIu1Mo_QHR^)cz`P?MLO7;X#?h+^a1Fo=kc%hHSTG)$8P_Xo8ln@|k<98(T3YX)gE zGB*l;AQH?TWmEP`c&yv}fQTB%>z2wOrq8#MR!~#+L$_7IQpfh#ww~j?z1Wf)j-Q4h z?QCl@ZSa4WM-9Ry?+hF!x1it${0niH%88-i>QBanNT3TzFnJL)T-jcSPzjd7M+MHH zclw?#HmfP4&)7YJoL_07nyrR5k`34u{u2XZ_^0vLf?7Tu_}lnX{}QG+-6|WfA}nPs zDlaW1kZzL9z}vNy8zm$@UvhB@Y z83TLvSmQqLD}YHT%rVseuP3qv14x}3o`BfhogFDvW_ve^DKRYH8oro{vw zuNh9WVZVg^$=)cG2eG1QQBmbA08*IS zVClmdhClSU%mJI_-anr);*_2Uu}kWD_VFy@2$>oAQ59I;<99FaH@q0@P6Th>;D4`u z*VCc`BFdrc5^0JEUx8LM#{i6>oG2Y_<34vEaFt99vim)16 znpuVf86N5U=SM%BsIpc1F74y)b7)geN#r50;G=t;3adVLFdWv>;5zU={cQM84*!nq z&&nFrmeTqiqt&2to%w!y(;nv+FTn3(i>=$^v`Syam8182-*5EfEfl*FIo^fD9D^>wf4JM5){^YRQ_POGginijZL1l~z0Ku#qn`jar+Z{{V1I z*r$nas$Xud#hq1VA|v~N-w7)Xj5IBh1$i)r?p91N5owtHeldN|&84_~bwh4gt-Czv z)ATtXhfTH~*d{#juCi_luPU5zrv=v_U*|)gG$T+VbHMNfL zVuoG0t}Ep389Xek@u=r=@H1ytHvkTr&i`+@$(9W&Qr!LK@Rsf5*UsSfXi}1kq0-*r zkAP22b}aLxR8&gr!6brT)F*qZ*<=2;)dn^gEMWh~ZQDDWzranUKLpKz>&1FB;uFmf zO6$WXo!>9Ov6)@UQu>b_W5j2{Mg?Vc%3zCEQo(iN6iP+{5zP9Ax>EL1y>V(7c zi==^Kw#j~30^~;sR)xE*F6hMzp?TJr5nXy{?=o)|(V!6{E>{Jfkdufx%^R$byUaxj zgn`Jgrwv;OuPDGByN_hSzkZQr2IU8&t~Oq>b^aR|U0z@P#Pg@Bue7_w?n91#Ffx|c zn2tUrBN*7U=5)wkG=gPwD2f!a8v8Y>(b+jTq{8iOU+^|?|NjaOa8AJ_d3!6pGA&gH z#(8q3MRCrK&E&rtDY!CI8OYb!08CpM&CJXsbPRNos8q(}t$y)JO*&0JU%o{>a;^V5I!gU87?z4} zlE@H|nwrWm>f@OqJxorq&8uf>OlTjqwKi!rvWf)zWUX^}(>i~xPbeN!_JPEbA#&kSA zF}(Vmli%LnGB?Tiw3VY%e-B$%5!XtMCz|7&?qRzog(GuZonQWnMoqufz`ArN-?|vT zAws>;VV^O*gobZoarQ;Zuo!l?V}b(9I7*+2&RWU2tXw*Hbu}{*!%!HOZpPY> z!{n{gTg>RF_RpHx3^W6w(^oG!k?e5%njo2S$!-X0OiaS1zy=^Ngjmq6hq%s67jRra zIh?E<+&ufbc6!p<#61NbZYRQ5-aSm8v&Xk99@S0nGW)z&)i({lYD#Zr=7$!%x>6QZ zQNG5Cbo5A`BcdRYQ=IpL)woLP%L92e0Xa3f;n;8%bB~K7Bk^S^ZT0nyO5rFzkepsV zU-rYx&BRf5?!&yR>g!d8Jvkfhj$L(BU!)&%b{Zp}xzla8N~3oqG>$*@fhy_*c8~W9 zB`*WoxMciA=CNU5AVq}HHAP_T-j@auWkf_ERl66$_Yn9=P(GkcEUO~Zc%Y%8PN&uu z9Tt&Hmasx8Fr%ptAm$Gh+qHO~2FE6(q4ksK~psz>l384{=ec|STf@Znw6?lFu(q(i> zC>_|pOP@Wn#1lVcwA z=}=r;8es6928AkVexOaa`#$a?KkeMhBw*9dG(sDVv6F`Cws{?$^}#18aTT&w6rLIr zKy!K0+vKInYMv7gK9rwm9F^L38W)6rSgz+2=WvcrU>tbHVeaK?7XmfHLB_^&A2`)+ zLjctbPtZT%NC^49GuK04Vv~xYiO0|J&MQ>)bcqWJF;QhZD34EHev8h^mN|GQr92Sb zgJV!eTyY-vZ*Z%@=&tF0d`uh9%p&zwiZU`Yo0w}NqMt_N^YrwwyH+-VeeodkL_})} z2vAPaN8Rz)Ft*r*?48by9`^t01cS|Mb51-v0-!-qJ>cePwJVTePH6dHA((GUhT*&^ z9HL!F+8Jup++$(lmZI!(RtPS*YUp<0gXXfV3~g?(lKEK z(oBAj{ODgiI2zd5MV$}IuMJ9jyxo1DOn6x#F3z{4GG!fhO*&I$qlI<4$snCxNA_SJ z`R5nr99qS6IZka@AS0zEVmpg_vdVu??J8jA#L_Ra6yJaz+11JZDEyfS4$QeG6^IJ2 zTi{_Y9p5}@y^oaOCH5AEl3ZSIcRFuG20qS_2Nhn7LL^KL(|SI7BCEmBPULkVckI`? zAIsYsm%p9AI|@$@PAWJE4BV1bkj(sUXYMNX%E5Fyrm?rchtt{5(~R z1A&rL)L%D0-8Odmjt*)Gt+m`IlB>APw4$xd0zdtZ9O@Z}K3(H)J_bRX_VvXD7O?6W zf{3lZw|a$nz4svu!@Win*DahCdCkXkx%$3JQ>E5b->`bw#c^NV3}e+_LMC|+aDmm6 z#}S$7vo3=#UK_J~OicY{m-{=~CNuffcdxAuq+dO6?CIe4!72((K>i>kkhzBZV^hdJ zRt4@}dLrx40e)jl4w?u~|tp_VG*BsRB=d=`(0t%H8;a_`H51LdOB-#k|43ll5* zc=+Z$vYIU4`SS9srBQ#RowdT%+Z)=%+FGm@qe~c8O8XMnXt)x2s?iL?wzx9*3v`WS zF4w2?{zDq=Z#Z+(K@GeQS1a)ewQt}ueK$mGSUyVFv;8;JVf^L%ge8BlP*Dyj(P_MM z&Mr7Q$0NEwKgH8yN!TMIGR!OpYKcG{?Pylyt_{2kXCA@O^Y z0d0@aIC|KjMZ`dcP=*7={hd57Z*D&_N)EtJO@e-$f|s@bYJqq$JK3o?3RWUk#*;}72@1Zx z>SwFbo#NpBG7v~14g?Y-Z)wW!?yRq`tE(9Tv2S1C*^pt_paKP!?OdGm?C*rd`#Z?C zhKBJe#GrNeN~Bg(I^;j!&n3i6@^RV5MwHSUk`QL3^DOmdn2K8iR#_2x_fRA!cG|YV zB0`XFKGHR+tucxpARghG5A<4HYph(**P36uHedB7e2yD}-)3j$=_jWJ?+kjIQDE{L zHd;n2_RNbJ7nk^A)6)28h#!iNf9l_TKR-D;*r-Ov`i4DHOLTBQHPz^JH0?}BORIKp zQh(amVcjbM(c#EF00;MUv|J!_e2<8DvMow%cY2fq-qN9p(^1pvRc?&-3ieXiSs5Ez zrjHe}&Lh32UM6`C=@_!gzDbcr+V7N;lPhkXNqUl?QRVYK`)v&E&_r~0h7^&%OG$;u zxbE`Qky;>ky`TTlt5Gty$!m)r0QgvHp!=LL@E!X`@Fq*DPZOE4@4j#;jFa9YYw!_eDnPE-FBz>)4&Dc!G;gD?=MYMLsoyJ zV+Fw_h5j})=X#EapQ7^^e^cck!lt&rIY8_enlk!|v71{{i6?3Ld%d(S@{!8VC8^iF{~@c#qjLgt|3oAPBvc_^fZ|n zfL2ytUk?O{lf&>gGu6*C7WIScWU7~TFvo?b zEf9~#X}1{o75WkB$PC?u)O==o=17pn2Bzj67fyeF^l2~~CBIOt>AkY426ry*P8Jan~Urwlwxi?N{VkdJ0%_?zJ1&t`uP*V^Kd1bG(Q~BCh|J<^UqV1HGd?e;i zlv=1<%bd1Bz0f%m>NpU5DogXHa&%;;4u1mg>OUtyn{@c_Uk)I0bh(s6L;LzbLZ(N~ zjE8^d_sYOC4tNSYriZ(aO<^DCRMU_rAM#WY2AsOLeusXB3NyFPW&?W*%Nsyv%LR-q z`U;N^bP)6TXiD*-#YE49*3;^jh6=8v%3)-hTHw>O!vhqre9AKU&rWDp*MfaKlcbm+ zx4!T$euE|=!J_qlFPpY{HB*4?C>k=PnX zTn>&epVN?v#bjf)d!PgtVm_Br4?R*e(=svwzIS+yyTH`X;AUOhewP1;4WN}NUOm;Q zrRL&v+}^p{RRuJKouFV2$GtF;{jUlpMJVHhT5%&qnbb`qf4d`jPd;DwtfIXWcM$~_ zJ>Ux5fDVe(9Ajz<;{}3iARNs(0h@XK^a2O-bP{uPg8$GukIw#Lqq&@4ijjdKH8x!1 zM3fUFF!2fM%$Rg~aWUw8&GQQd#p3$9{BV_ncMfpk%*<9E9quYD4A>kFlCD6ZFS;jL zzwX^rC23h){E;NKCQsFGnwX`}ZGMY)N5xMb2?h1?nTs!to*W+gCv3B&s@=~$l_`DQ zp6bqLG#}9dDsf#ht%3YH0O;q}jigpgB@!DpIrKl|5RZmK`FWUJTr@gVrcSxj8SvU| z%@#PBxy+fJMr=7&^5i&!5rKiI_0?V;t{Tbl3cr%eI*yfwO2{5}25wjQi`hnyAo+?L zTO+UpkdCe^-+S_H%gNzIdquIslJmYvJQ}}`C+71mTc>z3$|j2`T7uPI)T>#+6Jlb&{I*@_?U9BpQr!)X&TefT;FF=ydU23 zz6tdXtM_+gn9xdIx^`rQB5t65X*VSOfYFCJC#n5#n_Pc1>0k&^X{nnBo{5Y1Ora+P zCcSuqH<(OJLoMzAzH(Wauez^-WUV&+Quxf_mcu>ksdxQtg&BraDlK{K13zfy>)iiL zYQg{Ta!LVaZfqHAs{D+xENl+u$>8;tU<^N*et)_C);?I;!04Vu0!f+F)Y4MbBgr8% zmdxJFJF{;@L!YSX2=MS+0nzxRUb%ZQXX)fPUGAWD0-u?@+e4%S`7~6-#e*HOt=9vF zf1vE&Uq7~2k?QMTJIafxfn2Dw;z9#A+B*E$BI@e_%2FxTixh%PAqhb*i!0hYtYwu% zsnma4vj&7sLA;s~h1&1M&$je}jqncQl`%1m$9M?pn$3~ytSFs&Sn4c4P3Bl&Fq`s> zb{^MF0zw|Y|3D9;_)iN!kd-zpYw*|M965r)9O--V*!M1L#wh7wQ9kP@K1`A`BE8Ri zd>ZEwg@F{l$p7|((HPuSLJ43;`1i(W&!(yhDcH-N%lLwS3#P?*1QpU7&M0 z#GenVA^}=l!ae!tvPL~aBBt}(hRnQl0lI7LUogx0S+rF2~t+j(sGaVcp%s zyPzPy2z($B>;jE*CM0aRF3wMlL$3*a7L{D-9ENog1Z!a02W!Pme0(KAt47JGtmL|H zR98ccY0Drra+jyb15^Buzk+pwf~<^g&?x`3uQa9>pR3@H`-^l-%j05;6q*$RF)`l6 zFax?Q$o!UGtc}ljcLGAO@EV4{r&Y(jzC}n2n=Hmhrkei!4 z!0`+e3!l5C-OOm}yVIOl-y;X+cop#NpJ9rFOPwX?#$H#Wl4h zjmD=_3zd^>QD3KBfsE%z8mjkbX=7D2CJA+W37Uq>AWIF~I9z%%7*qs4??**8h_HW-znSkzO zS8bNAbo917#eKw)*rc&29w+;H4x2|puWs^cAD9b_)zs=gVqoyoK&~q47h%@klPr$z zd{mgdM!XZ(S3XgGB0oX;4+?Q4BZaxtJsjfy-;*JUQ?3glBL%{B^)y9Mz@#GdV@*f@NS9yz9juPM;K6)5p@~-=FTF~_0To3 zU`Pd4Mge-H0e0!1*cKt(Z@{~g&gmjX_=6O5W9ufJs?QKYDnpWJXfevxdRXQU3IIXz z5P|5pGb!5Rhi{@mXyzL$i^~|%mCaCJ;epAwRDNUi#QTODKrQlz(#lDP;L>`KbcSt4 z@C27(E_5HQq}6BAvU@x8RIe8}#n)`W>CD~ZW%bU@GqVu0REye5QqDyz@!$m_cIjkh z`>se6;w>M$)9Y>9D#B>-4&aqe!x<|u;tgyYKw5I=0p%R}?f!yx1q$8TV` z9teA|U$uVrw{1|-^(Q1W(vKpe&p$T*-q^IVR>*pb#fFOg3= zkwV0NgdDa|s$X}AU5U9g(TVX3Lf^KwVlrn+mtp|R>Lw=KT(AE0x}vHz zm<=jAdUu#>DOqA;~=nvKoF-HqesEfc%5a2E+qgLxB<9G)g+(J&eQ7E$!LRO5C zQC?yn8{Gu1gS;5pCR&WYy)KuXLIa*?Yh6=l$IHG>z+P8$?4`pRdDP znr_Fzwcg>2kADpBS<)T^&wh5 z==r0iB>}a=U<%%u>2o;xCnC?H{T<$`(qwV%{I+-UF89a9NH8#pi-F2|bRZdP-3KGYTr+q1$Z#4`!9O|Oq) zM6;W(cD1F_V3CUjJ88wE^-Yv(OcOji9ZW#~gVER!f0sU&KCzGVX>6zqy=V4|)x?Hj zaSQZ!{mMAX8DrPa2nTk)FRKK$}TmA0#YBzz7XK49Mz$!Rq7l)%KE#+OWYe61){+hYd7f7E*S-*B1wmlx#36 z!Fs~$5nB&zK2vjSQ}1e!C`IH};`_8@|8(H{UbUR2Uw!8PWfctE4&!fg&91Lc1bL!8 z6A?`1!QX4;x|BvID zjGyYsjcBHbk;|=ax0+Yu(ZcV*f=13~qsSGRSA&`^j1 zC)5ISEV>|r9?>ZA`TfPJQb$~i^^p1Bce^J>%D^9R7S(XY-b7UTSf!2NdwzD5SBRt9 zcSpOlpP&EL;)hi(o%(!gW*d)&GA(9k%_0e&lA>bS#~?e@x$hK7D(fU+%8-ygUX=ur zlA=BBdtQ)6d|c1i?Zd-n9C_RY9#<<0LZJ2;L?4{unKVB^{WLcH|D{4YgtH^~<;5dY9*1C3VYnhF!b%u3lpK%hAiOG1YXT32Kn6?Szj zShF&maA*-crCJzJmrcw^%WkwFY`XQ33IPx9iTJq@VM0kH?Q^Fsn%Pd3)+);{ zvsTf4{W>*VU74{OIi=@u16jbBoNQ900u!e`6+YbwA(7P)2ikzi=}P5%yU%NMd<^}j z^mG4LHB*jzxgAG>kw9JMOtbN26u9p1Z9__+B5t2&Zuh;Too}^F@3*eLYWZw95cbuX z(138}CMf89%9pQXr9jkJol^YE*M3{fVb)Yxwk^J=otV+mrC{t09J*~^Ay*|S@>~lQ z$MM?2+ALpbrZObMNdO0)$t=-}7hl;U@uyY}w&oBg<<`>`GP#0EmkimvSJ*h0odF_? zeGBQZeliIBp;lLtX@6*ZAS4Ql@udgvV+7sPM6?U_4^#~eP01LrSICcV4s0}oRek&X z_r3#OOkl!PO$)r%5NF-!b|&)k)S_bLd1oE;?eb$t$NSYv(AfB8kxa^qJM`}V^My-iY!Zu zd^Nm^jP*E)a+tL(md=i#WyU+ZLGN>;O8Diw?80hg$jL1tDMT0oYOx{xHJ?p9efgabt0Eaxyr|e_b7<16Gu!Ok<V{ zKIiZk=)j@TQJuK8FexdEE|u2EHe{#}QortNZ+NsgE*hn;65mScbR^qzwQ)MXq5C42 zL$I5)E}PnU^_)!2%m6SO2NP)D-_9QKqQj#p74EWTzu{OeWW0TFASGuDi1F2FalME; z<^$U4Jib&diqQB{=dS5y%=)3X(HS=G7v;L|x?CoFVsVa+N90@$v4fwkG8A~*c(eBi6^Wz}N z_Xh%>;@AW6S#=FsHl@~$9b<~!T_Q>Eyt|J_DhlfR#>-kB;6L}IGRNI&ujh|h@0_93 z0bieqk@$%K@0QqL_!cv{<7JP%zrn8i8`L> z^lWHsHU%p1WzIP#>2=zk$->4$O-ityAQz^C+ zNdj@+NwDn$$yN7qw#7x!Sw2FdtaJ17(6fyv6$p~7`i_NtyiHe}8i77Vz8>XpN^2Qi zT3TW|A{gW>x+rcU%}NlY15}m~-NSx8t}ktL!sR-2q|ylN@gy)=a)5#J?^z6-3z(!g z&NG(waBXk_qv+f_LRxW$;Z1MCPP>arce#X$>zOTq`X#M1DTgkK*cg@i2h59EZViHE zyEhL(cyx?(`RYk-bC_B!&vo%D^VS52tY_Bc7Je0ZrN4aH(?*{)T=na-;z(i3w&ZZT zDfx55V{jjwPT-hD=jG3XM%I7m-_5a4Gq*?VRhV4lCJ}3VI{ZOCYJD-ZFqu`^4{0)> z+zke^v$ogDTTvga@Sx`B)o=Qfi?m=jS=H1MCx3tT-%U)~rv^0PWHn`s$RrEl!%#Xh zc&6?USLNhLU3?G@d0V{dO?>9{lnAa_$KFp3-LTY>3Txq7%E*)tetf(xV|C=5=q&C# zHq8=O{YX)LF;v}4_Y>|Iy`6y>$rOQ-vA=IXQB3b_Ou{7mf61wjnZggfs2uM z*kOsUehBXBCCbxT7rxP+0Bo*hvDsqNhbR8+n-cCusl`QF@^VEP^Iw378-|krk^%Ei z#52*5_TK@2X($9-wYRsoX3J7Usa(k1<~nK;Vc(`Bw#J*N1vcj71QXM74&roG46&eE zjjv$GdYz*=TjhzslCdgMPZ3sNx|{#daxo;x<2f2e4K>K$kgEbEV8hrz5gm=xQJfvC zgRA1ZlAvUk?<;P78r~0q`)dUP=j4Ko(nyF<{a69MnQ2u3Go>_HDd(3aP=2M0Mtghv zgDdf1pRGT+&>tG+B({6dogq|920haGxOB>ol|T2%)GYSzGG@wB&r>V=fYB1u@lJiq7)aJnvYf;-r0Fo+6fMV%@>C z0~jG0H{FIS)=rFVMo;p*ixaX~2rNvT9Dd+}n6G*Znm$_`_mC8RtmHS{m)CUijzZhU z*6MJp^tF;G-6LNTFVSy}ousx!B{)z5Vw_GVa%^gi?)K;XIv@uF+eKEsw~R*n?cg|I zO4fSCOFIjU;#O8tlC-PMy1~zb56-LE%Ond9Yj*a|RIUmN6)$JTKX=S3a6sR2Qf1ey zH*3+dE>>1rOY*-aXmWZBo~ONm#&K^h-vsvb1-;*t-zJPJziYVOn=Vy`*C-DFlP@CD zX<7cnT-?i+gkj^xrh`DKKBKV(H+uhZLjJ_~ak_(ll0`=+NNsbX@A0Y-EX2yd)$ssg z-!tad3$tSNgrGg#+9D$c s(nB+&;3wwIvO=XnzWV8OStRMe}5t6p!nb`h6q+5mD zU{cxV1H(08pRx~;ZnxUy{%sy!2I@sUP{=+JLxXXhLuzHPvloPvVp z9(VxTI0HNP81zo@OK{>D>UUcTc)H{WqzFK={XS$A3H`1-YZHEVe0A_CGRn`dr}W!z z87qmIaXkIV4ip!iH{N>~RaI50V4x`|T)$0SNRTDfv^1W7Y;0^OA#5WvQ*dO&BPY2F zRs_Xed1#}2(%v2*>pf{qE|D+>zQ(iDQ0hX?&QH!$XSgGio1OP6YR$U}>yg z2EFhb*w@5Z)hGn<-ZXYEqqLOHybNyR{BTi|*Nr8?=jn>j`@K^C@Ni13Elb`Bbc5gG zaTNfX?B_wAo&+f9kNq%imlxhM`1&;z#HlkXxUC!GNP%#4=l&wQP?I&EX_H z$C#+EuVBN#*c5@qoeecLzYHAW*n=M%7LE#L9_Hgs<+>Q4yu@&*y&yyTWz!($rl1FX zH#@s0N-`AMAQw5KD8sl1NE*I1=ILaxIRS%<`5Kd1rN?TxxEe{rtNqyTcTSHl?&=zU z+&F9%r1vjoBPLDjy?l2HcjIe`1+?#^=_su?iMQVbUc>B*fpQzIGOrEG5BK%yhG0U) zLHkVNHK@Pl4AhsbCo4d}&N=i9__G*MD#kz-QD+k+!iW*tYW?i(}biFgU3(t&5!ph9>H@&OXEA6orRHnCn`rQL#`q#Rf+qWfpkgl%Njzrr|)k8N-JJ(Z#H8=T39n z4iFoIDne^F$<}^$udgd)b?h4Z$THu>s>|=4K6acljd*6{4e2mKMmi2n8UHHIe047! zkx86oizXWyFgGcr#a~(Au^kG(CsIBR)u{Yl8|1}twh9mh4@&d(eILaxT-9(xVpAHC7;>*SP2oNqSXJOpw-R*r*b}TyY`$}cP?(@m1 zhDGY$%j8=Xk(XIae9{Xy?cCBBX~$n6MI3+hmIM8b;Jid~oXxuwW7t3`aDy z9hsO|W4o^&_0OyOJFUCKfV_fu3k~-AZ(a=zBfRfcP3idcYYGs@(W#DN$NDmWUfo1W z&Y3D9*#+jPx2_#u7U}s<>pe+vM@1N&n<7bHG*cX+k>g~h-s$^^aE{>?f7h#s07J7~ ze3Tq~o_IHn)1#@mnWY=M*QXd8I0B3Ls|!h~7gR%ZW?h%?DuxUKEnZZ} zWAwRQ{Mf)_t08!OUMhb5re@)>FE}zhtN}8P75YAkM;t=q-U_liHPNbD@@i4axI1&z zR}!;kRI7>EU-y14Chbgl?etW=zqe2F@w7w+;NaSe7l#PXKS_vsFjBB5Y;PM61=HK* zk@qf%O-J@LhtJLQX3%F@ey04Ac&eFdP(gR-?=K>L=-1@^${Vw{Dv|Ps#gu$4{MFn% zo{seJxT!O>?QD6uWjNdny@NX$)$W$%rOWJkTX*!rw8ENVs_$39vskaFd)C10#m|Ca z+*k>CG?LVtU?HcQ&opm0GuC&-YtsHfCB*Uueg`FYu#>!!Pus2t!6;Z*?DDy6d8}_X zb|{gkcT;`BxZ=TZu@M>A0Nh_d9ra4nVOE;visAL-pChit!8B28FK6 z9ogZso6ImsdPBWJv)%PMN!qKnw$Xfe`|Rdn%iH<8R+u0UPphJla=bD{lg}9^;A8Um zVq|kOzW3uCzDFj2LrQ&8^G6ugM~v@EBHdn@sEDX}_VV(69sz%QzpjCA5J0^stAqf@ zSF>>ImB^tL0wDePXoC)E($&l6*^Zc=73$XZaT%t8;Vb3e_^JXSz`(-&G0)1>eMBvv z#>t0r1NbG4|0PezibFV57;bf&jAkaq23ZuBDuaG$B0*<%yu>14(or)-3qSaky=Lrb zC{ghXzS&q9^ZIsIva@_PaF8~ztBU`2zTTs$5NcVq#bPsNkvk9FncIfl*tg`(nH#g$h0jc8F?R$IXs=Fr81syehbGkH&>OW`U zg!#bl{t^kgj#$*0ki_VoszzjpvXnPIJ+U@6mMJ_X@V(fVJ2ujC3fmLwnjVRt$P_3z zHw4?kU>~K$*N9P>_YVxtgiXpT*qq+dt8+g%`gx^Kieq72s0ShR3j`_)Eq3ZtA-$aV z`evR&3;qzux1R*0rx)*&VVF@t50g*UX2#~#viDO_Dt|TkDB%6_14P&szmnAOm;a^y z0n%-?cU~&1r*FjCc~8gZ-6sH1JK6NAV&Tl%*A|=`8>coe@lti76KZP{&aEC9{^JYa zMS`m)I58^ZzvCo^kC3tT#eMywQG1`2_B`(=pl=%k+ZpHPRaKNl5xAxho~vWqYuA_<-NUnbG)iWmL<#sCw zHHyE?MxV3C{FKY*n^p`lUFs9yuy){+0Rh*m2-U-?Aqcd&)q9f?HW5Xg){gmbXsL2y z97VSUu4dO~pXTF!%7}H1&giM>?(m{A>r2}0=mt3=0YmI2l)u-%sKDV@M(xgKFf{7& zrh;eq9kZ^hSt1@_c}8rXhc^v1>#~)?s3=tLtG%DjFD@=lbZJo=zK^C8*G1<~GOw$> z2gkoowc06of&~ShdDfck0}~+ml9tQR2LoaYx$=_+wJw-^2Dq;%VTC&k z`#?CBUpOG)@pwx6yb?u=**`K8PQP(Vd))BT4Po)u~o|ElC+wuG52an39-JThICreDlR*Ws4yNh9X@MFtLmKySu{O z-69r0-AeVr+-TYZO-ldG0_IIr!f`3aak;2biH;tRomwz6@gOaY>*ClNH-6(XDmp4k z`CxR9aCW{it5$Aw%i@RR0SUiD5ExbI(fyB)V@$3%fuvgU^T9pR_JDD*%TioCqx zwcZ5&Ht(VJ?yv^@)Z)ivrtf)XNnbd>2(vX_ikaBhba=2>SZV51DvLe0>yBn{y9e>| zxxLrwvm#oJYVuaimc!n%U_eRf#GZr>q7f_7YjAlyJyfM{@9ZtN)zu=R`w@DoTJbwO z-F@!Ve~`D{?P?Y#`Psrn5fzd$TWq`sRxYRVRDF7Sq=#Bq@6H6k9pkPNVk&Qrhj&EV z2U`tv$Wpy~-5$%;9PFYFQRmU&bqo^ltb;oG`^9U^I-$X(X!%fu-#^A%JB}F~?(Uv5 zdoo;!7JcDXvY)VFaQyrtBG@%vNl3Ah=9uVdm4P(fWI5pN1o^r2P$NmN&1;DHpJpU3 zZhXufqCGvdhR+{rc0B{j$_^YqbfwkiBE9^%{(ewKdu7o({UG_Hv}Bzh+gRq6*wp*q zL&QlA)dW}H;9~XgtmC~Xw)}~clF6oGq)}so4LKvk98y#Cbgea6n2mW?5aNV<>ti_a z6=L=AdQYs`=T7H9#96Hqc_1~J@wjW|- zB)Rj9Dr`Q1cVS+XL_aws=`c!!{8|!fR)5^Ny}S7wro&9_?wR@#F(Nc22u#EbWod8l z__@1a5(qL>A>AAf((;g?UTbl;6$!&7us-O0crob@!??HE&~;c~MGrKdn3__`SV&qn z(6Qvpc;5-P7?>LmCfA}P!T3nXa=@d+SU2%bfKQzB{&)~`bK(0O(w<6`%6+dwJU*IX z@@Hy&LM{Hv>EP~_763RQBtBZFmVf|o6$uIqj6k39H$7$kKWx2KR9tJ*HHv%C;O-6y z1b26LCuneYCpf_^xVyW%JHZ_iTp9@OoRz(^-|t-fjK1l<=*8$qs%qA(IZb!^X&HDk zs&qR9H#6?dhRdjZe6F_YbI`GskL`w2#Vty0wc6XR?YxtU^CFH-&67esWI$ z6yY)FXAq~rMUb+d9(gX^R9LzG^RxHL+EiMVLA%_@w_suuFIZliws)JDu*r%1zRwtV z1UP9zVEF4JRJy3X!#%87&+68wUe}#5>@#X=R6il9=OgKfiBD*nOOnA(uEfV-5bDWy<09u}NW}PJon%s% zpD^dh-f3pT#l=--L(JtX+^OLJ%~pj!j_d3FT3%UNJT$bwXRW@94uu6kW?T37IC~CZ zqOkbt`}QtQDxi+h(VtJ>!EdjbNHO%MW@glnaN3@&$3g3v;<2(4g6Mu-U_t~vv)3fG zOLV%r8*m4G@p*lX$AQ)we~AUDsN2Kyqhl&Il*cS=olI%HPWLAnywcLrIW0k=V+K@f zg+fj9bnaJad3kxQo~z+yoTWs@U?EVCiQ^RZN}oSMLp|2BC?FB?-NFmGfL0rI-s9oP z;^KPI@cD4OTy^_>D3H<;|NE@3e<(CCPkjaL|6ZC@5G3v!-!BHsOLMbiQ)NpT=*6?p_RBfScVk^V~wm^xSaNpd+86}khq6= zf!?6wNKe>@$gyk*lx)0D_DB#oPjj>LqEX%`Evui$)np=2 z!*?St%cO9BMYVI(-w})&aFGNk!B0r3j++|HOy9Lt8*~O-WrVNZ(<4Y zH0bQGaM&L1w%db=Lt+$j{vd1ffaj&w*PuzF{&%&Uv8;V|i=PPGnpb}He} zCNjRyxKGJy&G-ulmaVsWEcsJ5Pm$q#nVMJ^>6g71#-cOTNQ+-~b#%<>e7dDYQB^e* z@OloDot&WMOr)>35`FbJc@{R?QXxqHQR|?pq}5K#*HUv33eewUXTDRs~-?7*^)W+@pJSyc)G&UmBntfoADVtH z2OHYabh7efDN({*#%XSstGM0j)pD)1O?6^`neH%dJ=kg5XlL)rJh9FxrS98@f_JLe zd_aj~y-e-PXauxLlTs3CtRfqiyR23Io{|UDo*S!g7!;&@9V?LVmn+qdw5d|tIjH37 z2W6VcdN3md5o6l@E7FY-MEx@TC8OK?X)0}8k$&ll$QIs zeC~gF9#5$ro!m&^=Xq*9tDy7~SN2sC<0>cUR6(DTu~o$TOFv(phm(Z9D0=lYJ@^MB z{T|^T9v(jS{>JRcklu$W3h=$)r+9syzXQ$W#M8Cq?`B>@ z8Ht}wOsr$qk0V^|-{DI%_LZk_nFJt6RV7!Irlk+m8%?{@;Nzg*-XhZ-nSNYA329&+ zuV94Wuv@3p(7@*Q{q=!9x`CCHv!;nK&GaNr3C&V|=oRv~v%Fl!gJ9Kh@3b}BFU^#( zpIT>anPHp@O4L>k)QA3CTU)!e&4b#*<4MtJu5Xde8>N`(=-2Vs>$R`<+2Xp0d?vl$ ze~E-D)T5`@$i|#ozN=sF%Mjm1r&kQk$B)rQI~bay`LPR@n~W`l8<;s2_4JIH1Y8g8 zosCiSWs}b4<9~@N023buLKtk?UzF;fYqI7yTF+N-I^mD@5fQj1Ija|7zkvKAtInxJ z{sFXf#p~B+C?zPF9)Z2~9!KL1C3yzo;pzS-WK|hr(H%o&)HybD&{)!iA?wN z#Y@LRbc-)^Xt0un)?mkYm4s}8LI|lpMMTJ>IGzc8*bN>re}@J2IzCKO@98d zg!93<3ezJNblFo*57>b()N76mRI>M3q%;&ktK4mBrkBEH;q~=fGyF}-_cz1D>K%@V z2LWG0V`iL&Y@JO^KDN`H{EaLXDu0%NmVr!KEA#rsLe+E8LL;S7r?vH=OxcZRE%`m> zK7PhwNi{}t1p>>IF%MAInA77q9fLM-q&BN;nZ~$_v%BvquQyJfkWJJ6IbG#Z031>t z)ncviPcDZk+VkBsX@V2c+1wJnJ3YR+nFBW+=gR+y=ko3@wQi4yC^j^ksLTT!J@Tee zcZA(!r4{W1+nmW`k+})oFLGv%6ka~Q#C68!7gQ37IwC%0$kL5+LI24O*7-&Xn1%Swd@2?re?Qt%W?J>#i0-vOm?B{7x)ls36SST4PtS& zeD4Y`qNPP^-0X9Da!?&j zvOPH5I9xVaf-)|D-|R%pkRBT{dxlR&_OSCOKSMs3l(aZ+ob3V$)*qG|wx56mNx<*f zce*jTT{GR1l*l6jB4)lE)RLd(7ihyRHg18o^Xq|+h?GMrX{3S{FuwzL&mLXzf!6DE zzIc9iUAA#yLFJLe@4pnl8|uT^%)Fuk5z(1WG*m@NNuF<$SwxhA>g8l6VdT|%uypiC z>eRjvnCd80#WWs|%aY^s`!$Cy>N+)cBl;h1yjR>@Jn`;$)lhA-MZiK?t3m~VZI*0h zT>nEu4X}U{t-mu-Rc#>?b2g`>w$t!ysuP{r8CF=Byzop?ng=xl1D{|-mQxvArDlus z^R!#NEkRI}97kgdLT%vTwAAM2L=004nGD&@BoJ{wK1LYQGqkk*ydz?{CQ-H9>MC|K z5NujrTl?EpOcLPrD=yD>f4Emh9H%bCKIXMP=X0XVk$LcN_dL z7|JBa%F0qBNaWnCkDx3P~^tp zsO#u88e-zFL#AIk!4+h4NcYhs`rA(f{q7zIhmYe%@0y%6SoXT6H171(bumFlNAhZF zY`Z51BB`lfhb#3d4c`lzD{s>iUjRjbfXY8TTb&)R)x`fc^O99PJ z`=_*Y3=B$L5hT7U%C03hmSt88?BnBfwEUzYl~33w#ltxE}6|SDP$_KT5ID(GK8n8ntE!3$~tJO%Bm%c32#m85XjNU(r93qruZK} z90KElqHeYV-_<&|dwP-hIjo)s1u1Zp<=PY(WMwC501RPI=6HW!JcgLBaDP8})J*Z_ z33hxBAHA0}AhC%@Esj1}*3re)mj4o)^ILTE55NYqs46`vX(8fb=o&C<>LZbt@Pak| zP%)4AfscVK9wxOU@Vo?9gGjp`;ODwEKl0}r@4zj!=DIK-e)EadB!arot6uVdCOd;h z3ugcw4vx{^S2BI7AkZBd6!=y_pm&e+Ax-xMG=h55G_T|)f(hX5KVYk}v}KhMr@o4v z@_n&vx)}B|uPV^8;4-5K>ZubR*&40Z=l?f6(V~4|nWd1j9m`}jEWVg{y*`qOh>FT< z833t{O&`u-jO<&&sLh*F4mPA`6B6-_{i2u)E^VD$xRsuQg#V^taU}7JI6}(r>8Uxx zM7`MB8LRFE5RL`}}4JZ+=}IiieI zxKe#lOqp6s$Sb$vLUa?TVhq;LpGh02eNx)Op}|k5&{N$d-TU=fa6ZL+L(*7@+QUpb zEnlv*iFaJCmovH|^|!W&m5EKawzAUbhQ&yJ5QqM`)@-MCgVgc5zP_~bnVPUAK6QRyAE-p#EuE81!Q9DU-ouZ|Uc=l9C8qy+7C5u?#jYDrK?(gU0a zmup<+PO-(g}BH?3X(O zaua3=9L(as6@|6SpHOhz4YuM3z;T-IA*khvQgu-{vfyI7ftN=0rmFI|>#1FQ3tyJc z)*}~r+^80jV80yAu8>0gxAUa&rG6H{RoY63x}&46p|7FX9vtz zVTcz#k7FEq9!|RI@v#U;HurjJ@~_n>#N}^Tv-{!(SW-%g75DpV%%vX$3`(&$Ik{Pg zs8qG|hejDIPl+>x`pNT!Uv00Mz1}^cj1Jg!KS`^F@w#7_jPeO7LspG;c5bL@sh6p8 z#(q=N&?#SCq>7kmB8{nWcf3X*p|4kZr1*&`=DtMFqT22~o%3#EN+GXI-LC8l@$Nu1 zGN=N&yWj4^RgVy!$y-lv0BO|wPv12lNA%ootr}`;_q^tVMgDy6 z=$M}AlO7+$-ryE><1(OO-(~k2c(&y=p#I4vq^iv}S%l?qu9z8Xfw%;o?XnXxe%?7B zpz054y1+rdcPAyqQS1A=Gfe;NjIph*({|w2V88>n2_ePfv?mc!6TkjF=>;p}_Dk=i zHqvdwwALFK2w17%&GGZk9+MsTG;#-^`;M)%8p5bEVm;&IDjpd|tNE}f?iaUw!Q!Ij zV}`L^8yVJM-QAhGQg_4E-86kDkkz9+Za*^dmt4~0r**&r0DT!XwXzpR!xRu9!4caN zl}!ksn)CURBR&M?@$m9NK;1?W-dDxq=%~!oB{ylPlqcc+1EPYWCJagJ&?u!K>{0? zqewlJLr+_}y@iliKX1AufowhK&*G5W7}`48G}Sp_My_YM0k!a+Px9pWTvM2XFPS#; z`WhnS-b9&1rKM8d)1MWn`JZGd%l=eyqdUHMKcBumK#Ve7aIGiAmCjq`D8?tYsjR4< zN>3|F#qD9LtuN9*L)A4RP%i*uixW!~6Mq#{mi^&K;5QR6S%~=GSG$3hmWG2NBoAYv zqKa^C#hDnHR0|4SUv?9PT z)BdN$5>OfaC&hTdCVBe9Hk1+HKHCUIw9G$M*h+R~&(KWv+ZrI4&O9yt(*{hFO13uCG0+hZ;S^ zz|)QUtnxGbb@b=U_2UBl9%g&m)`xh8?fQ3brGSq(ZifZxq9*L`J&rATX((fRz^ScOZgX&r$AExdM%on~{?}*>rz_QXZ88~QY|PzK z6I+okT^grtE;upx5(sfXo&W}X{anaW=l`|lz*pCNMis<5`MncL{S+x=rn>tjA83Ok zTwS{NunDV;v$4(BpEqC^o~_C$5b-O{HH?ovEeZ+BJX_u^uPj8tg3RO5Rv+;92$ieM zr?T?!HL7b4_WMR-3s0$^J)@d%?WngeB zf=+(^l;T;gZ_jJX@}!n6DN{+9sheC+W4NeuBcrBD9~KWO$!+m}!71sqe~qZC zzqq?IEFxHr^}77@s{N2S1_bv+uj`VuL{H0TvmVTAjF=u6N_G(pG5c|iT$ zTu_-jw}g!}qpA6Q&Y%Em_0~c7*p-BU9*nx=fQ!@Ma+^md`Y;@MR#p&^B;*f z9s6n16b%S)U23$V48;#M6PSg7Jr5a%3dU;Iv%_{{QJFL?l%T7Y!FMeS-en)X)tkwz zkM9m*6%B5;CaGqtc#LzksFqtFV#yP_W7A$;&j}ryKpHZRRnYW8Nb&gzxS*{~@m?ai z>#KyX^E@UZS_^{>)UKQTPihwG#&$`yq(`Z0wvW;y*0_M8mt?=`sVm zWfr89%mWI#|Kl=n1CW}6gy`!(y?{S5UyHO58@hX8utrcYNtG2g^X5QKXh%$p0Eb}o z*1J?D%>)n_*a+W*zvGc(qeHW)|!XQkMOw80&y>0V{JmKiy$@LiPsi9k;oMM zX@m4!l7jt0$J~{OA^as|)-S0c(i|;{ikigFpCy}UiLQKnVp&?~aXY3zazV}@JAAM) z!CuI|Ee+bhu+##zT~*y5K-l&w9nTfhDgX%3hD#iY*)UP}rtR9H^O(rv!Ari$(W(5~ z%a*_lY|Q|{@~|$E;UWxgB0hdPb$KAr5MmxP1A_#aVI{v$YKobTqH3Tfi=j`6grkH1 zf(UO-guL+{q$7jL$nQ+c6Xi{2L^DDee99o3_{~*H>4(XnorOajSvJQiSQi$x$KODG z9|l&%CP_8>?tY7`7xr%M>9&ydw~ic8<0s34`MEv@)v31ny`gDfF`v5_G{4dRZq3e~ zGi3gH081g#d*bG~?TO%mBqJkZiUKW+Gxy(4`G22VQSlIk+lr#Lh+9HlNyZG&34kd8 z-Wl)F2_!X`^-Rc?Q;-QBMc)ktB4Hg3NG&%#!}25_oSrYKM%%%BSY72lJgQG|KAzCx z1}Ofl&jZO`#6rTl+;8o8-%=A7)%DHHOl+*Gc_$TD{QX5;lrLQ!T^A*LU26osyr!o@ zeM}Y$gn`R%YEn;5a@8Pe(e8GiNcq#|EhGm_1f&7bIrUn^z%!Cq2ksqWDuv(2g~<&O zHCDMSYJR3N{!TBRqRpp}%Hqk-TUO@gNhT1jmO)94Nz%NfR*OidmP?tnd0Ftu49!Tb z76K{imu?FJV74}sbrTh~GkYRDp?w;! zyG;3|+w1=}jsFnR(azST)V~d-zb7=-XXq=_=AGG@u~dl}&|__1R8LO4xknQl9#ZlK znqv0sAG{xep7n|i_VHY-?Dl;-7rICAwn~&#^vVmS*H_#e8-?9^;8Pz;R&Va^)UpP$ z^obJF+P+2;aE-h+QYGG81RO7(XfPj~Zcc4jIG^s)^1CvYv`TebpJu!pkp-&8@7MuF znA}Y;u%E)&B-`4&Ur`X?5%Xs*!nB@PXSez>YcW*k_NDB$a21$f{q#l{`=9Uvt`J97 z0s?&L>~7WOLcH4N+ezQFRxQyL1J}*7RO~n1oZP6bnxX}NjXeqYOh9gYN*Z5uO>=p- z677o1qfX&)c|k>g)$IHsH>h(qZkwgTd-dtb)1$}NpS~_+WPad#c`^gd$AU=VPVVJU zcYJ8^0n79_w|_}n0diqrXW8`zygMggYuGDVwG$3VTwJTOGlD3cp063M=kn?UwjNrP zT-@9xRwRZWOw)tk?gjh`6B9vnQY`%ZX}2JSV*A@NSlkNc*c?@DZ7COPwb-%EmUg$| zV;yTf1xS65hv4}+4oRMPm6f{Q@N2&My$jZm&~(JX0nw_Hm$<3FeUOTG5X#^k>@DN! zf5|FP0np@%x~k%AY>m%7?J0mzU1@B+_s06hNEWeo{zHHrAb`X+^2kdcN$i@kpWd)N zHHvUT6aeT-ADeWqPE9e1sT=h`G1FVg5Z%8C#t`up{uZF0T6~$3Ju!qmPw1@NYbd3E zqwZju26$$>Ar%!BBg5mFX?Vva+j3L8*AHb0keb4HmmoNDDpO#x9WLJePbpYq4|NIx z9rpCf{^4%?bkfW8ed`Er=6%A86{)JMGE9dd=Jt5}rd^Yq#BGKc+x-HXY?$m%$x0ql zH2Wrwer4QPPDKm*wYwx4MC?+qo~FpJ(VhPqU9^&x`H?WG1?MVH4Xh2}rqbD3?~p+N-;`dIDSa)s|&nTnpn7 zTJ2IJlAkI6;fw5xfKB5?y?d-4C*jD?>sPC@6dxkm!+f5L>Hd8+%0p-P_ORUY#q)L- z9@CNXql|QHdolJn#jui&7xf=nF<3b;;#F$;qT^32CK^&ZE6=0G_(R8iNL>B1u$Tv? zi?g%R`}42aZ%~-~2M%l(5_ZOt0s?-IqLlGux#b-lj+ma5>HjqiY5p_~#UF|avj3*% zIz$11fn-UTJ`b}lVy_Uf7}UrrkDD7~eyFc`({)*J5AAz?v?|~=KaZ=byPxQ76r{=Q z?3g3qP^ftD5%EsXi|T$scn&4)fNU7A0Rmgv`i1~Hgo=*VOZNx3AZx$a+$(69gb6G` z^@*iT?*IZQ(6)NicFwtVX4r>)@WmXP zI!X3D9+s@BDW>H|bDe&leZEY#per4s?LVR9k0R-E8(az0{@uBxl~<6Jr?qv1v@;V8 zjd~A7VZjH|XLUW}6Rw{Rd-V);A6Sb3_M`7qYAH;R*9HEPUAfE4OXo@!Wt@%nr=`}Y zAZI%TX1=}MndC)e>E&7xkGJDnVv37ND~-|dgoJ*s2f4q@LqR}Qiv+Vrn*xw+`TI|3 zn!`bbLd_nI;Fv$V*74?>p<)-{5M7`S4GpOpYzg}McI}>=$Z0U?YnpqJY-pjtAt58v zIo4*rm_9u{QuztA`IMK@6f@nHM1A{~=MUzWL>MFevk{3SnMLINE7vxwhJm$>&6k`l z`@YXrP5bGg#`b}u@zf~9ih$9}yN_LAd4Yi*og-#ePaEy<$*wX*ZE1MGUtR-Wsq@{G zNaxmqwath#@MDn>fo+a1i4a4JsV_PK#tb0uD%rr4-0JKYyq4(jnBv)AM#n&Yw_*fH zW2Hqnj!;ttGj)a)M_}1W$JmhQ7_0Un&jrO{V{+Wj_InH9;dA^P+cG<@$kh7zN$2T1 zKlgIE*;0eo>{Lz6rhlvtJ1eU>?i88}^X~xqs79snak7vnwiCW00unN4g|=*@H=&+e_)s!JH-GLE&qkl8_{U!X{i8Hm9d{E28b)fE6$S_bYY6ubPTE*P zPjB#Peu=)+Vnn35VdBiG+QzH1bE&R?Z3y}ox?9bH%EudfvNCo-*CkbrOCL!bKEJHW zOosm|Y#joCG1GjHBIx>8w!qMb3{04VW+uDb&w8ZyhmsWk+Qk78k>Ql_gE^FBNd@)v z=sCWDr6Db&`$J=MW92kqynZDu1g2@>m2G!3_N$J<=w@#~A#d{>&3H6_%bUsOjk;w( zQxkHaUkd4GV;eC-oB9OIkcQ8PERsDl2bGmc>}(B$8+$O1Plrpyeu_{CCIvBd*cV%G zJ3NnDZx7-71jIZc5B~0~RMfIcFi#mgV!hPsNiNR|@ygF)>l7k{kO(8ka6d`vJ~gRqX7_ zK{sAqF*8ZVX9P9*vt|Oxw!ShinV|Y6pP$c|tF`1=M!$Zk=1D6m`j?4cnkI#R)Gsd_ z_E>arG2iAd%GKN1;+&F(`;X3|gAcxLzSZdyd3!pUlQNyHDKAzFx$;00yZppJVjBrzl$=0#>2x?I<{4;#Y`2Go_4&d1|p7xL_Idx+BGQ;Le?{K zX#(VVo3pJazh#m6<+_{N+76AD z{vO*uT)eRw6VY6P)WEKdi$k-tuq`^pp0@bnKl_^&I<(`l}eBOHP?ASoxJbRAM;pg8p zvA+J?uhGrJ#WPoIE>Ij+LKDofyYU3f86speFvD4MLv4Tb+MkfB+O#P6p){X@PRQk` zs6|Y|HTL!8Og1&~6WhvA5+8XG-6M5OHhrEGTQANI9l4VeBDdoyjmFNWxsj2JjC6(d zxB=hperM1zqszqCdys`qQFI8NWp#N`Rgq^z6kOisnY^u)$yC#R8W;Pr1lD5Hb?-!Y z-8kRKck$8DqHNi3YzIrf;f<5ikP9NKXG{GCLOj=WN^?bbtg5Q@V$WewOv`#bN=Uc) z2gg>^&eppW^cg1MX%Cca>%Eqv@_ekmzt4W*_3bv~QET%2!T!3bT^@05BmX}Jun<&3 zc$|AEhrNg%AvJTOQ~az~S#^0PHd@8O-i}Du>#H>eYtJovBTywcm^SChbySp9C_2vF zBHseiI9zt=CpO?EUm6-3lqA2vrPdob5|?w4c64-FxbHIREL22u&wBQYJ(B;E$0?)1 zAt2>UyE9nV2aTGop#4=(0K&Z?E6MioYXI^ysSrH7=s1bk>db1=kfAQeX1N{Z zYp@+%_+Go&=j(XTI#c_> zay|RqZkD%J(QjZq#j@7KIZcVe;PhnB#*tCdHMc$KW;@v?#Z(jP?mhj&)_7=W3}{4J4H9%B5d6c-Ddy_ z)g+3?+~bGKL0=_h1AAN@9O8zCs2=XReRCyGtGk}%fd z@y6cOn#8X4zRGV$kQ%)85au1q%2?F;r_s`H@wIWE;q99e(Rp}qg^$2DK0)AtNBN5j zk{d?&$04!5*pi+jUS0)FW461VV=>z)B-uAI(uz6OXO~~X>e}626~||!QN_jmJWll@ zJz*>M(4^b{y>mb_9*aPE@qK<#wVYzJCCG%9e#8BCaX+Z?EE4$Y9JFNyxGxay^`}yN z$p1VH_~g@{)Qnzud~RH)uHJF?;R-v!*!W$(O-C96CNhL-JWrpIOJy2g-BM+x4HXAAAtCMHU|~XbaW^~yLM%9i2;fyHm)$@r zAn*d>5Cf~f^6`<;c(xhoJ(0J9Dk8l&^D3U_;6?eZt%0b~GbVzUZf~P;-23zZXeW(Nt~9>9Lk`scaY& zjeu00?AT{6e%GWr{>3lmI%X{_y}7y}N&&T%ylm61Q<+dF8hMmmlV>jAa}&VUVYoZz zi|>45*=x6(?*6GdNi53T*Kqw5TgUSo?00gpkyveIg{YP`W1)w4<}ICwgljuD}6Wo4y? zh?*uJiScWY{#d0 z(VEDfqzc}B*Bg4daNwu2NF&@&zD>kJad$4Dd{R5Wm8cduEG}UffJ>I`dmsJSg$U2) zgw~T09?q3qvq4ol>C?AeZ{g%nmx5zp?s3nnkkKLJuHjWCu*17!oIeZrvQ;SXa`Tp` zu4N28k*G8_IQYJl{rwT~0`^D**A8pK;O2+ewsG5K0s}>;DhoU|Xz7`fzwm}O>^yjp z>xV9z^K$^5@DbORV$OC>W>}`qihqvK44gF?)F<$caMvQDi2pvZhPux&vofb246ZhT zYE)2KJcwF^g;sQyZE$vRm2wv?AdBLhE6ny&H?dc=zlfj--dwJEHIgBlSzIO4@av@L z>hi5~JC~=Wp^4w$S2w+Bo%L_QMPjXTWPhqFD6lER!l^9da3p_tI?8^n2(kb9%!TU@ zZE5Y@q1*0iPL3jTr$=7H09A6v(X`flCWXTABlX(ha`z*Rj&$sMWuuG=Nf9qEFAHlr zv}7fmK%-@tg58UYu(l%Zer`{GVJAmZ`uh-hLV(_QZ1=GoP_2lgC~?mc7>D`HvFXUM}JDSo>jL(?ge6dE$Ozn#1y}VBs@H zS2e}o-s&VYO$&Hm-Gm^uDIjZi|M+*`M}uLM9li*B+s&(7CR%StY(H>TQ}08Y!n3id zZ0SB!R|LAfVNsQpCTE+Z-F%*b=9w!eOX=jU9d7ne4{I|sL66;ES=zv@@Y2bv+7$k| zX@OX2cw;cb-Y>`*awVW2>&W}%xafadBq~f$`H~&ghX2>mUNCnLOsnh7K7Q{EFcyJn zQm8zO0De|sK8>o-*avAHSu>@iWl?%BwS%s@w%*|5r`Hm{Dy?oQT6lW^ps&y9gD7opJkc(Yo{K|@*M33sB(67ox$}`;VjZxQ_{`ICm{ZN zJOrEiUZQqy(b~c}+rQz?&;jluYh`U%0xj#u$668r6-vl6r4B4jqcm_+cy8`h?B>~b zyc}wE08xE*ZZ68}jMKq|b$c_g#aClMptc3fwoNpIy~>ltGuhiFw^S4Dsh4*loepa29+3$J?@7b@jzaT1%FlOA1M46$~L7=f1}W7aQxH z>!?TV7{kO`K94l$B!h(C`MwKq)?85TM1~t%Kpq@fi~K<-EF!BW?7*W(^#wSigI%u zfrH#J?z=%JHNVU&CANi)4az6Ln|7`FeCK7rXXIj}#@*c$UIt#)E;Ex5PTH-cx|P}Q z{uZB;*g8SQd{eJ!;pW=rX!_q%Mo-qWTQacw{_|yw^!`BW>sTS+>>wW*7NHJ5O#1mV zNdV6PKHJHI_h^t&GVz!Gmsd0E4lLJ(=J83ZB??+fwM~yZK99@8xWqhLCj88n@39XD ze)px>=l|8;LR9t#eh*9Cqs-V$}FTdtO@sKR*kJSij*ZXNTav(PdB1N0YlvpI^kNBwOA-Q};LDs!!7!8y5<+$2e6u zE|_WQRMi(6ayF2<6ia%akirS>n`l;o!;>m{)KJHWro+*nJ`+mCvyr=udz4l%+h&-y$>hSSGh;Ql0y>`)9oZ?!+SbB+_ z`A};2B@q~M8_D#Fp`c+G;)M_%7@CrYnQ6TMg_;o1Rc_vzS(Lg{zUYAvj~$IgAm`h2 zEjMRpm+s&Q6@!1snFw=zx_ejvn5w91Sq@&Z$apw7v5ARLVyJJ|{ddP#-&m(F_DF8s zv}M1|2l{_0G4QP1!Bwy9p8Y47>Og?&>wLL-2F!s>T{>cg=Fn3?jSx+!<2rQc4?RE0 zkA1sMFsKeb2z`r^D)xJ6?k-oxz~y08>h6;LycDPm%~7SB+^mothr?;F+v+VsTd*K( z_MH6=eM}*PldN06h2#l^IN2x>lso?2_HRv7k)XN8Qc##D> z42(P_`tN>QzD~BY$j-I+W~lU>6p9d#F9k3zqy~G;lef;bYkJiW;f(2QmR|L^hHqnO z#cdW)O?VLeoT0n>yZOkrk$9edZ~n0b1>=G!iA8$u(_4t3ZwFSrHBAikl^J$TY}vjS z+xn(=6Wpy7{#xc6%ih~i@!19x@-QgjvRlw<$%OG%LliUlQo4j*gMG77K)pB6H>Z*D zdr4V|W^xaDXwclpCFGcco7*zNhuyrY+A8*B$(C_spM{N4sxFH!l?`rlewpOi*wBYc z?6xAaKL`P8L!`fdZ{~+FpnT?+?Sk)ADWWj<@2cT}XLzN`8dJEWL_k;OJn%|A9RhZg z@9CClS^-&@>zf-!mn5@hf?>_5fx@65P7h>i0QD9wt*B5oML+zce9uBWz0P;Jp zMVsw(vt6|Kgve`jp>Sr*6)o85)nLRl6qa%Az=nz!wzN1`tt@)u4Lg8A*&8ax zws^^E9xN>_$VXEXjp}B0enm&kCR=20ihr+6M||Ezi5n+|j<3k*AcX1YX&1?<*(~Le zpR(Ngh``$W$V~-zl?o%;m%-+`wyIrNQ=$qTDt7>6Lo6?xCr^s=Z+mQpRF|1+-=nT6 z!#~Wi%y9se+NwufT*68Q&SHh7Y&HlPA^$z)Lsg@%S0S_>A_oN8JyWjhOr|=XxKTZx zWZS=vBg};bDCRp{Jv8P0+&7s3g%K!wOYxAIx7=2TJl|)>MJuN9+raIp0Vih>kpyn+ zSl-IYN)<}9zF5H_D^?vy%ato!UM7BIc?w2LeJ9+0*_Umf_n@3|y7J$;O*JP^vL`>b zEdC@wKxh&ab^o5>b3Rdo`x-Q0IEN&GBKp6=6CWE~heyY>mvag3i^?AHcClrMV;7JC z7vxpQZob_c7fxhYY4ORC13I#?85z||FN0vJ4x`WDG<5n>mx>z)2M3T44a5j_;vUZz z3(1IM=sJspD#>SxCpWjYM1_Oi!{4&1(7wY5goS-r9&0Y!rIFui^{T$_VSi{2y)#eK z^T7r)T7W&suDO7Fcq~6R&$R2Ls^MqC)V@VVt}(Svpil8lolSxzY3+9-ic_kM7m;E% z)!3bnM+LMt`_kG&XT>`7s>b}P5+tqpZ5lLGNuo zxD8y%@6b>%(yG=BmJ+u#<>v7#6nn5Ru!?y8KBqw{qS>7JR2Q#bLwC6=KBa&D$!GBN zdQxq#a239a%vk6$2giU3PDN>Qx=yLDuWwI&l;u1{%fygKvm8~=96q=~9bPqfl*sH@l5^N8X0$=xCBKOp?};nAI&i zeHY{dyvVF34>U<>sigg6gm8kNw&>xnt1Bz?PfBzRl9r04rRm~^xp16ZT;ru~TNoS!b__a7Y5`Z^ zs&N%3xPetj~bJhbwa zBH~vc*-E`%w=xtq*=GmVPew!N@X?&+4e5#cxlxYFj%4VK+Emr4e0&=$VFMJtTR(o3 zqL)wLer?|54>6%@AC1S`U)R|9chL>yfpW)=3A%>LfAZ*X*5}_!`p>OR05`+#c$cLo z&8QVFh-HJrm}`p@0I~&iTB-aFdgK+fd7%1~s4HM^3$IqHJpFql#liN*1`SjvCF8pg zYvJ_T<0__;y@iqqcpag>f0FX_EV~!RoHWBr)XvU2s+Gv4ZI{>n;jUN653oz zWoF-TA&KNVmaYcVm zKnH`Okjr=oC@&@cYQZeqDP)hI#$B5OE>M0`5Qf~4A% zK973P3DvBuuKLHa3UU$TpMs=lzO$nbO9*NvCM65@5>{D4Bv>QEA)(tD5LeV|11gz< z{5&II=$lx-BtN(LzW7>^^gQiN@Oi0T_V0wE6wNQ2X$7a1(Ghf4=cp3@e@vZYV4UsR zwPV|8Y&GfxP14x58aor)ZqnGcZQDuXHnwdW-*msvv-kHi`IpRn&vjnwTzuyVdOHUX(VA zYl4nN=hT_kK)b4+Vn_bV%fTZjqqG@}FfhTC9G_t(d70v;Xy01q@0?uyq2!d{wf0Zv z`+>V%-tC2-M(maq`!k}r)^I^eV$UjQ_Nu|ZAk%?djBt%QPy6R9fRWIDhbBtG+`Q(u z?gCgMCUAFfXplh_2^$$SCe0Iq!k#6wz%D9RzuTVjSa-krC%T78T! zJy6l`5IQH+C)SaEr6w35>fDCkBLXIX=JrKPxR_H!M8w#E0k=DzOTh_GBZh!PhWMOC zxo%gr0AXP&E=rNP4)&JTGN7rd>O{u@#m@8mcB0z&A6CUMFlum<#m6fLU!dAB><(QUCV_c@h7coRkk`BClk@=*`_J!40Z+iMo!MKYS=cD`mt-j4p~=iqVy~~E9XXSSsT{}< zl%A;)y}MBI8hkXA)FV+k?E`<7H0h?w1@9*p=(p%&;*z3(Oh1WAz}53Kh5dbBcO_MM zW*g2gr7Et6 z4Xt=dSYS_X+lz}SGZdj$|ICNoAXhDb*tt7 zb97s2{pBB50KsgRg;h~y{yEM$2qBO$Y*1%rx%ZGy=TzUKJKeAVZh=@Y3VhDh=iju#m_r)fHIh+pKJef zqA%#N;oyO&Dj|94g*98pqdxO1<)V7Bu-fpxD~xfn4`~D%^^1UUasy=LvVEjK>vb7$ z9OF`G4*K2Pily(ONCPu4hX?!hA?ISLs-CLCPWKoHAC3s624|g)kfCSw>E{*$S`d zHi6oA!kI0bl>SH}NrF^0s+X&shmBJATVHKha9oY1x~9h7%_^8P5HBO@hgi!FujjSf z^`j;nId67{+q+DhAOy%REcaQO5cH=sZ%G8LKtr>oM`!b^3^9mzFd6fD5J&paL1<28 zja)U$(=)s!l3Ti?OnN+vRNfF#>aDf93sXI$*tq6*(rBJX48%IkLYkIBMa4$ikb|sf zu@p3Nzf@<1IFcyz@xxBds*LU%ooOuR?Q~iP$u(<-U~vb1`T5 z3Fd?g`k(*zVqAlcrq3iyZ`SqvYD=#%3af17=R|R<_h5fRApmW+a?$(pB)0P5sUxii zCGPAQ2{xifpSIZbu@9WJ8B<1Rt^H&0^cY`%eLu3}=B+2&901*6L*PFV;YVlxbgJ1z zK#wWr;HXEx$6SdQ87Zi_3=#i*w=vdtiPTv`{WaS6Sp&K(@}}y50kgSe*IB4iduAxD z;2j*C4T(XjsmTUb)i(L=r6hw0M3-?UvN#yu_?9@3goAkyHrW;G?CjDYMLRoPKKIi? z!z~3$(4=#9NUL`vpy47o?`Z*%zueo5($`GORn$H8^?vi+Sm9mOr|UJqxTUuC&xqr` z%-GQd2MNS$WsH+l05UIpB{ij_&f8twYP+{|Sa?{HlkF-3)z@fHJ%rV|0%uk*g*X@1 z-RlHF^_XMs$n%^h>ZhP(HhB6cLqK_E=Gph~Lkj|bRq-C|1teWg^{`jK8Ozj2^rb7< z2$#=0cu_pZ?n|DKMt?NY$cXar+{HTA&*Z0SI~%%0EG|V2&CYp6^ch^usV&PtG^y>b zCBSxjd`I`fL=d_tywyqkLHM7ya2_072hxp5U?F|>KNq~eC$k~C9aOE$?xA3-^I4fz z0zC~(8E8~Y!Gx%_UnwBw7}Uwsxp86O;Ls8h3JB`OQN}P^hi>jck~ufGu~fQ)=lxBW) zn)J|Fqe^~Aw;R91cz6`e$7V)h`%2@GO5r!09Uf+UbJzK{Fh46j6m?cIagyhA0xF1- z`UWbVTvCPL(cT_Y!xNyau0?kZ z^tn0>!iCh$BZqA?L?D^WdBKN5f>seN2O6mxcX&TBmSe<4L?uDsP^^5pOP58-8y@QN zD^5TFK?#Z1b*V~T7r-~U=xm_W70dtiWKgdFp=tViu*;szW{yb(=mEbI@EfRr#y}*r zBWWdw4CSFrVShMPefSu9zAdk%SgKYc z<2P<(#d+czo>g`9zuq!FEOVLcFnTj-qA!BM{a#N2 zoNw^FM3Lj==aC0B`dajYloR-ca2xwz%lVlZ;jXv+jN2X$d$h({hFk=|@|Q`#xMB|~m?4zFFRDpWlQYHB>+59Vu`D>aB#@qmUD%D`2kz-% z##zz4zZY^g(d-BKLVXo->eg+nH8VyJe_idARfr0E^UbRM2oKH}Ah`&2dn*kQ4zo#z z1ut7&Wyt&k_g$a#CHA9-u)wSyD@jAS8D-+7Yp4%UkklVSENnaq1 z>1{|Xy5^%|k|p{GRM;exBz>pmfA2Rt_PU!v-H?y#+$$_JGy{e#&#ep)jc)5wmMc6} zf#!N9bp5wG5CUBzHo0oqR68x*AbUM%pomC_iWk^!yLDtVV_mO?^|_Dd7f?yGv5 zoF-I(E3n=m1I)3PBbsL)ZgDFXN3-8JnuzWhXUZXOt-}2V-=u&_-nm-2I6lX;)#D$T z9MwU)0z9PMsYLcXQ}k$Mk@(zZwQ#M-!{f2Tk4_E=S(c4bVUH*@u)JP}UtpmVAP1yC z#gvXF9$?cemm+1YgH~Gt8U#feU*)pRD*1;8#OO>&U#!D@;*qHSoEX@ld*a8vlkq(H zG8ajjRU=E}li5Q{PCjvU^GFz~(R5^W$~rIzCs;e_NRnaw!8}JqhSSy7j}i`fVD{7) zU?*eMeZO21r$6*Qxc3${1Vs*Y5D<04kX3%|80{#4l-Rcr6lOP1arq9aECtQXmwUoi z=eOm6WcJM1rjFXHD+wrC&Nr>@4FR}IHxxJorC|UjqC``j&-rln8~R98v5JoEy!ZRx zD?9&pCQ*ew7a@DD8mTZXYSomo5y>>rL5-<)4YU)5DlzoDxv_O3EVPayqIq zKZEQ0euNwV3SaxzbU8CuOu8DMt692IJA(Fx8Vpb=13eo{LRRC+GsQ(iFeYPD;h2@b zQ+sL^38%m-n6lI2zH2dRLMt-^L90I5rz{eWOCB>Nbq(_zme`5!S`@#Y2xi&l zW&b%Lny4YPz&ijB?Zl1$%(DNr|f4FI;n;^LR#= z>0v)WSIYixY$*P<0d(L_>?B3!>(qjN^M$&B>cQc%)WW>G{0BOL>b=2ZhQtC>4xyval#v0#Eh=Q8yCr=W$H3We^Yb zORi5(i74?o`cg@wwlOj0o@Kzd8siR1*4KRs16VVgh%b;~IJtecf7Zn#1%=H+WFGoC z{0zcK4+)3-xgltA(U@Gp=3_>O(ge9}PQ%8sP0Gx`w>vCup`?IGolnuP^m>|$bk|)K zB2zxfvDnY=ody8r!NG&)SGs_(=RqMMQcg|j;shm=9*_UYNh<GJAI&hP6-;- z$kb-L4I!d`UOiza$c|{sqJQ%`*rVxWpZrxL07CT$VzSyHSspFJacgwXY; z!80)qn`+V`huND2@0hb?8DcW(2^vGx9g&8dZ@$h?uNGK(aB={~;Cx<&=2utqvSwBc z-mIL+_3LIw*e}X%k|QH49oP*52(v?OFIInMfHsYPH(`X3{u4!DK02K~Mw`{1rT_f~ zV)FOH#PS_-`Isb{Z7vsy;Zd2Mj*HMMU)Y`fqG}Z3e+FXr?;-E?CZyiM{*{1x{FL++ zSdLe@^Y?X1%f=Q~HJCxT;L)&zbgyel>8x*KS*vZ`*{H{SpV!YF9iY>1WsOxDC<}|E z+%;Pf=o3Kw{N}Xm3vD? z67M`aIgUYd^@QiClLxIESxneMS5pZBXV1@VFc6{HP7v5bE1C!dJv3&z9=60WV8|a| zpAc&- zZ0^5yA&VR}SeCXGuY(%d1YH_983mhSuBwK3<>V$w*Mh&;go8CBFZ>oLnOi7RRqxxQ zX%qZ={r2g!6Qts*oNH2d;8BrZ*u>{0-b=~i_hoH82ALb^80keze?X0R+>7Y6^Ib9O zhEO(oJ`k5ad3k%Qw5FFF!nwab;*U0AnUlL=2)>E^JIi8#SAywEH{3P-?=}JkrJ;8* zpe-&KlUVX>==Iaog*C7Nl+Km15MCJ|^BV4Xj490Qpe;j#Mdi1@LBtUcq-ioF1D*MZ zi)mS+6g9k18aMQmj56k-L(dHj`jzFC;H_vhg@u?+8RL1JrjzAbO)G|~U{3DZ>%7wK zZLK3OB))mG@5#QM)SngjHMKRR?r+Sb<~E{wG8GkZ5h|3Y*|E5HP3=^J)O63sCLn`} zN0Nm6dR0MWx5A=)`h>ITAK8QKv_f8a7=!%OsvUiXgG?;nzdi@YYGBY;Utbqqs-hqJ zcd0l#WmB{kfHe;H_X}UXjY$F~ok*W}@-m-u`(ageR->FNro>epRh=U{#+m&_`BfeC zj3p%%W9t$N>uM0fa>K&t>4Fk>xA^c$dsgfxNH8#p10}$YY^>vIiP38Lh(;~r010og zEK1*bT_eTkRjH3`Y=MD}W71o1(24bdH8XqMMO965AZI6blboC!2297ybez9>a+&<8 zKf(C-Bn1?@i*bF#Vt6563do)px-?b2sX z*s2De@4l*``j2@=7#H|ecY7~8Do>OK39CKEG+Q1)@7X&JHHvZ!&8ghZTSSd+&d9$d3AJ;Oim_( z&#q65ujW=2a&teWL1l?3{9^{%5AQKm1_MGYdPM`)*#DiQ^WeC8p0UYELnFgQy?Jd- z8qF<<=2lkn*-DYYbCu>;DRm%g0-fzJ2sQMVbHr*o!v$Bp0te=31fJV@jE(K|!^ulS zI&t7wVve@9ptp0sOG%9;+%0vzy(I2wdVB8>>ez`zj{W+@LaPNt3-Yioz8{LvK19Um zL623G8a&+857BoZREc<^KkCPVA*6lKz>GckDUM1k!OFN1sPCJe6XV* zstakk0Q2}l*B2wGtjDis!Z(g`^VRig+5}!|ouaBG_{wA7oRb!&n0S^s=wR85VzcahK%N{B$cGx%gd zDxk6Q2jMf4Ts+6i46JBKFbJl^eRD2ZSml$N%${!qw+5Z2z`*jExS+k9-Ht>Vg_1JF zLKA3Y#N>i<&jri9{rw_u@&N{|7iQL@05g;dL;btp>Clj^vef30r2z(qZMUNqRr_L& zF<87##OU^sx9+%^Ziqxq{SbZg+Vm>#QA$n9-J$yeF?gAQj$MSOhsV}qoxcgAB*l$w z(Zinf856KbYx5yJB_r?rBvqk!xmLnXM>u}sBq7#anW0~z9nvYUq zyrP{LphTetKHT4y9JtPSBDUGHNG26#xMfyVma>2D+OKYscqbqfjuHHKzmkIKKOqLD zy*cDOlkxU(mHi=Fwb24NK$*q-$LIv|^`67kd?s1pf4j+^0|M$AE!fSLw_S*^5XD_< z8}O17F4;m+8Ix1&wDE}><2ttO-F0!8=9s#E{)m=xJ~ukD_Kg3@u9NLk{nvSmM9hsC z{A(l=v_W2~nk_}zeTar08QchF=#L#4tCK8z}RGk@GTbEkS zvBerT4ZVN*<^%B=8e0Jwx7tErwL!j0;XLcxThjNJySTb3&P=iNLsB%N_J^~0-;WdA zFfUm-$%KIcYlnwiibc+Nh-l8IA@4Lj;`!kKEmi3u53s zlkF>ADL#JLIK%~Dp-psffcy_DhUA1Mp&I)CX8Q<=>I$X_0fph;cYNhaZSPtUnE=x!O-qy4X3G$gQj7%P0e(EYj) z`DY3GR*At67c35Rc>e1bKJgdO@(5e5APm4W`L$?j%9@_;Thj6zB8(3p{dgN0j>CFY z%InY6Kl*9)&}DjMXBofyo2|APKkm9n!2aq!zG_GdpU^$CwnDAoV+O7Q3<74+zwUlJ zJcAc%ai5yGwblL=5$RGG%>0dQQ(b?Np$UPW71V{AxOO9CX@-J~+-2bWD`)oCuadfA z?b@g#YzrtgG;mj1-<@1~lgpc{epq^NN`6lDQt3n~tf14F_-Ku##gW)q1nw*+#9f=} zwCqt=ZAw0*JAhPzZR?^Ys;AM2Zt; zA>Yt20h)=)N|N3tqTiQ5~|qs`Q3af@6FQB3Q;gxp+W(&O^?TVh0_qGz&L= zZ7Gx-ebNWuA#r7klz39lxLXjd2Y(&+GLdzsM*G6anQJAG^89x5nv#)LR&m^X{ANZG zSDE58P%u$8ilF?c_Qv-xL5mTC5mU4K)0hd!CH3e(KDAg2xxfi4`kS3Ke8FZupL19& z{pweV1f_n{mh1C#+H^1ma(=#%!uwDukkxnWYGpeSGwukGX{2Qf?Zjk>#R&lHe5$`* z&~;oj`_~#<3TMUfcX62PL3z0MzmaYf&h5pG0UDK4Sx>##iis&F4_2|Zfsc^RGDZDYW(}@$<7s++hR0kJCk-ssuK_VjD%~Hdn zZe$mdRLOkfu%XaC(YR`wE#{nm<=Vbjt8@i2u2KH@F{lio6s{AUrAJYd26x$fad48a z(xzf2tNwr=vpCSLZ~^1aW72mO;I9|lXJy|(=NppRDVnwn1TxX9=3>uVL~AFZz*&>8px&HbIj zcMQqc_(*BYm>{Q?9P0rWCLo@977OQ{p3J%{D-PoBK*30K9D0M_yl8 z2;T@H`l*j-(c^6kDX~>KUE*aEMD=CFHmchj1vaoUU_@pIDg5Vv`-;+Amsy(4GZC=p z=F_hM+^#x~r*%kJEXDD*D#FUE8LNB$ zVjP0Q!Z$h<*~hY_4it#tV}LM&`<7t1U?NfRw8QdCZcn@^mwy;KCfsA z`s>$s3;YsJPC*KH&4~eR@%k0hg!3z>$3is~#jc4>IqK!;8s8u&9V#m-XT#3d+n$CH zbi5(vTwk^w?R7l)Qo+@C>L~iFfx#D%V~NRtt?eybO5{S@GAMl7>~bPM>{`MEV=KN+ z@9W*G`c_lD`352$_8h0GB&6A6YVHyKEW-3$atFc8wd|?49JnpMm;14h>~}$*$NO|i zXsluR#8aV!x(1F;_p`D(ag&LSI~z(Jkob`pkcu$XXeBoN@~MXRWlQ{egye%#&%26= zdBK5%(NtT8Jm2u+DnG=M6~k*^?48k+S2{C!cN&Bd!|X7zkY_%k9Z)(-7W2B*++DT6@rw6+#K zX0fX5HppT_1ND*hoa(Po=kRf^1CN5DB*OX-{;$~&WYCoV8<5C4JhA>?BnAiS@zUpH zUx(ZMcp!m0W3_Yk;MN?i4=xTwWd{|_K#F>~nc5j)(d!%4*AgVsc7GkI3_}y=L_M;Y z0|-SfG9Jt=&+B&d?F>wC!rdVkugl%Jx=KhtG3Zk6 zTUB5`dG0)0Ki$rt?vB`YODbNa8&7zhEX-_(^dJmp1_pK-3ys7kX1?qrJrhRy;gfA1 z9g%@3!ev9nu^H@VS)GU&78PQYi#M|2hLiF_3khKNcIPqw*1 zVLso=ccgKB)acnT0xO6*l$glKbYI`RDJj2*P?^NE6rMFg!s*R#bb6iyFDKOQ)A6%x zg&TEvzTh0corjQfsYoTeWf|MGHMD3{I(A}Ob5YN`$jQowkiVQu3G!ZeH08hBV!`Fn zL=)46+k0;M9_&M%-+Znx)4+u?pCLlWrjRlIBEGkw6(EFYPCatE~>Ad&&C@>v9 zXYiXPq40L-CgiW8Yg3G3w-`lO9N}9=+%*CWjf}z%!k@;zR$%QrRt^sh!Gv0{mlwZm z2H%20AxW7MuLJ>oUqN z7rzWvA0Y{m-bB4vUUE7Ww?xTx|P#Zl)pPTZpc~301Ov_CwbGwTTNms0hK_%IXvNuWxfS*}tId zn=XoyT;^u&J51<`z<%WkG?Mr&WSG39qjFQ+57+&qjuP5i^fZ_Kzr+8Ni=y&~?&u^UT)9N=$nxCGBlm-Si zM`&;I{fwv>jvi>Zca>F5jM>zX0|KpMXCuxK>m+n0U2y6cftca~6QZArHqsf5p9Uw5 z>|Al__pT6|GTqhZr~wNEIpxs<12}Fz zluM0FtdhJPysFy~)c$(;8w%>opwgKB);gWJ@7{bS1{cScmXy3~QcKngJ(<0?pLo5I z8F6cX4>n8w0~jFly}_FSXCO};cE+41b;|Fpo-a=>&tH>nmT-(8x*%ayF%TXrkwy2KF7V_m@y8=UIU2SY&DCL)EabaM^VO5j8+n!yxy|pJyU|GcC zR-$OZw+=}BmfIC2iX4K--L9H0yK2%+F_u`4@7Xl1S|>mu$gf)+>?`*DM*da2U0v&= ze~b^Rh?Fj;y=Gq(?TqpOjZFc%=dn4-AR{Cc2Rj7%mVv{4Cwsc-Ph~2GbW;rv(*Hi3 zi;r+Di!-ad=y2bBt`k}W@UP06kRj`1a}5}HA0M`O%og2bXKVAQ@XmIMnsZ}A$KFyx z+1#FapKtoma-^8>04b$hE5uJy_qJo`p6Oe3h{<1|ehr$Xl7kyS$O#f4)ECQaRFI^o z5)-3;=CoZ`79L;i6yDx8Oc<@gDY(?q_OnsTh}O{g^*z95n1b&O;`RFCvaB~wt* z2=KEh^tvC8PM}Yq*O?D7AtWM>`^LZnWmft#bJ;#lkfUZPd%f+2#wzPco0f?YDwKzs zIg4Mh*QU*ovEb_K%JeFu=lv=_v@Ax zxzkTN1Dsz?u06Z1?60ut#z5$sM8}96Y+540@!Z&7hR8c5DH@dEm01%__7y4usHmuc zDe&r5SRJ1$aafI3i+prIN4J^W=C|Y*AjP~X=qL8-El@2oLh_pDL$A{P+R)TSlFoQ^ZM?YSTo=V1WD61uP{0|5CH+3k7&Whd7l8E%Y@x0x7^LCv;+je zDuQ`b*0zsM^7+_47HNzEW})o0g3SheXca;R2;Yi5IMCi!X?LrSxQ@(w`KbdsKmH6K zzY3Uz{@|ci92giR>n#_iDpt~&I+=DL0Inz_e^aOE{mNnEFH&K+rz=EdHyQqFV(VFD z{n?3N2Oeasww-0wJ-qh#_OHz424@a^IkaNdHvG?XR`UZb$Gd>yl&%zN(&t`gx!vOj z$8X SovrW*4}$Kj+~t=15;J=ZH~@yto=0>s2?_Cc~2_zlk4NizV?u%(O8P`Nz!i z85$jshG1ro^#*;?Nb15D$pKh=S19bLK*3}Xw>`SBjNf{1tn_WUMgMFqxjd8U{sGx| zNgFjMP_h{phq1fD+^rzRt4@2J_3d32b~_p7B0`$gPZbec8f(_MLa%I2kiD;<`wKf1 zUWuHnbP^~+QsUQI>*=Ic)8rbfa3N;znC8(%NoO1mc263xG&H|_MvfXDH?Y2p0q{eN zVVo;CCb@PM=yT&RiL!U!DKAb=J`K?-%k5HZq8gC$>n4FifK1YR{Mu4AK2F3I2CQXY z`0&6W^U}OW*PVQ}+%Q($*M>tYXvKnbcM1X3y^$HS zoJqnsY5tD}YAO30F=NY%gh&suVDhMx%^t^37gzl6r|ehP_pvavcRt$#(^Wp(^rPru}ed3yuBYChg*w&(&sVoM+ zFg2c^A4~6^9-k$pEYry4HRCfS#V9B+gFat$YH4fDa(A`2OaC?5qORy+L{`Yk0FPBp znX^1oQra{2p$qA-hu|e8M=K4RoMmagfF|LbZ+G#$^Z`JiV28S-pbv4vE<>{U7i~SY zlNZGnORPK>J9?{J@0`QElzmIyrs?L3n8io87?5LXhk}Yp2egUqQ9arF9zMwvsdiV< z|0O#hsR}pL4ToNU$;cCJafGhLtoPl@B30r%%T>7ii?FP9rV9C%ERA?2Mvq71U+JPq zK);^O4`ha*Ly_i#`}gS{htnW)ON&dRgsw&y{L?Rgn(@6Le?ykd5NHhL4~K{-ZCn{G zO)}f9qRDpR1qCP@5*se4nj>9sYzl?mN4#-XM(x`|N2k~3W1$sUN(CVxdndT#bJXheaV$;V9Ajcyq*736F}5zuE9E4{T#-A(8wEssxob*C=>}c{xxn!Olun zuL;opT|Nz0fdT<4xmK9JWK^#KP7%|_QAcSL&wO5gmr!$vD~P$Kqt}mv41_C)it4Dc z_2qLd{^E*Xfa-h}FSuH_PX-U2Wed8Z3__P_iw72KP#BmQn}bQJR3|q&+u?A2pxv46 zSjDh1XkQ6LZkKnzA|t| z1pXNM8F=RB)$x#w)HHugE_}>oobT>d%&v2gx=V%4SG~V*1>C>{rvE;6_MjlMrp&(WoOE)U ze|I!=2>adEjz|A)X+6icgR<$)hB2Z`>0?peMPyu7o}R8$0jk5MTQ#kl*nc{_^)&OZ zhE@65e~j-x{H_I{F6?^g4Uve#kHFgJJ` z4MjMYi(cbM9owE_5{YMrk8yJ6+&Jpej(=yCYBx|Ym~navU0IJi(wIn^uUVb?M#|dp z@!MdQwo22EEv}Z|3jjulD$gtl0Z)X1Lk)_k=wYSG3>SldadWsccQ&^VpKw`=UM6U> z>{oKevr1!s^LuPFiEi?XbNi_!i0bcrlj^Y-Gt7GNDxH8>z}55hEd~8$3Ku_+Z&}W@ zm8O+;sU$YlS|T5X+zHX}{01V6poz4l&vw3#-Q^A>fPB_M68{8y$kV_$cJeo0qj3v5 zI{G3!OWOaxUXw z(U<|S(Bh$1yu*pP^<9svLg!qbmjB!?gwnhKn6b ziu=8=v&jnqoOPp)(E7PN0HTmF1+Jix>=G+CfC!02!8s@Jl%ZZ+GVX~&pCCErr${ub z`#Z0AR5lm+S&5F8npPJZ;UC~1xC#siiz7M=Lfp!ExpYHnI@Xl2n*n{>OCm_g%?5m-Y!27fR>s^3$ zFz0;eK;|Z`C=@E{ZQ0R#ZRz&u76nSp?E$y9-MG^7i#V43>cScsQKhWZ95yClxeD7& z?-u+uUb4k3y%U-%+TX@i3@mi2Hx3&^ARqaM!?8c57|IUsPavlXuqZMLy@DcJ8=vgn z=G*q+dHzqkB*IO1M`OF=*P^k>`>f+H7z?l{B(a7uRVs3o;znmf>=)grN`*qi6}8@# zBr%;PhDsa5ru=IO1fHQ5(^j|W;$!; z8iVS+Y(A`0I2p+x))>kxWH4~rfl$&UOE}r_739wBlk8KT7F4MVwnbbBv7cHnca(vJ zU6$kF<{mjqU-+@ec>f7t5J-}n!CF$WVO5FjrldGo`^VnM0}u(PAx zIx95My20cE26WlPKK`d3h@x=pDSUolE~@p(uh+cF%bwp02^*n#j_IjGrZ!o3n3m0pC`-vQQj7fMwKW>&n)1flCdJ(g=I-xm_krQs^;y~!HBE4MtBU-5 zTxh+ghVF^k)p5~9-*M3fsz+XA``A%NcjBxiJRFkWuDCIXW?|WkM9?83iO#QcSQNvK zh3#bV6Q?USV#1Bdy!&@B;+oVM87l`TYQ?t=dM}QqL)|M1z{jv=gTh1wQt)1d6O4kx zy-6xkq!Ta}mMyUsByrtC-RaZcC~4`G)1>}%CuxoIu%nyy1IZJHD2apZGL887zS>dx z2OS+9se!L0Wf?TSc0GQ#cg>R;VWB_=S_7GLdy^b!D`l#_MWWM`Bt=fJQ)+<_-i2K( z(!tNVn43dKj-AuXU$6^)$&~f9CTWjY&`fodp94~$8j>PIt&nc(=MURSymBh8YwJ}u zGe6Tz<($^%-7((pY~>H{KCy@6C-woC4(=9lLI+}gqlpIK!52LSL5VUd*|#VGWN_Iy z%Cx#ao*4>rqQ$mFk$y?Xx%29&s2=W8Qv`!l{l6I;3c4A25R|zr%5mAW-uv;0WS6MK zJCq7Yf3xlnnAZemR(|3b+KP>p!hbsKeN$BpnKtDF@adSYpk(70HG|CMBj_a@rFfGg zlS-cvRQA}=lZ=eo9gZ+g^Pjv7X^2WF#*KocwBM5=n_gxX+I6!p*18Ix@xx!5AP*@X z5YK#DZQbO>@5-d$`b>h=1{b=H%~%7o`3A&x!UxpjH77!0X$LVtro^d}B{IZ7Q$TZjb-F>a1~rD>z#v zOF9R4`}HaD<7%A!%C17$GHJ-g>}e%Z#w6LogqxaGP}b0lo&3(aYI^?1>BpbYPt{xg z-z;cH60`Q_$hIpqUGaL6V2to)bNGlLS&jk<(4+??~qC1`*or1AOsz1*4muq%Y8XFa%)P(K%53y zB_)ix6i{qe^|*Qo=5YUrsmmVU5ZW+dV%eBa2Osh$iuzfpqLrt08(0l~zzeHTx@ z9tWPcj!xwMqkkmn>LL)?S%2cpSvB~+Z@fP@arJ$Ej_>3wteTL{N*3+kU)C8?@T@x? zgq)4n`|kG`DF03M0r780!#*DPJo*B;Jfk${dR0tf@UaXqd6BWxw7m2l4U_p6)Fk5@TOHHL6sW#cQTETmtIm)Acx{c$(fHq5I# zDx3ghhLmIx4Y5NdHa0BMxQ|*ZFv;9qOdU*>z7!4G04w(o*wKO4O3)K8Jgy~;+$d%d z6MuRYy-Av_)4#WSY4TxKigc%d^?S6+U@cZe4zIwH_y+7UOPe%L+`wcrXeOtQlmtTB z5`PQ?An4O?YnGXoZe1ocAdN874zYq_i5!IU_bt&I^=32}F~p_21YezEknTk?&DJmU zy1aTcO{l5E4U}Aq#Ux zQTYshdzKl7-k}9zx|a6XuZflx6~IORW)wy1 z4h8`hriYPZjSSc}22hWzAPv44X+}j250tM-cy$qHvW*0)8ZXP)yJRaIv~l0&APKz3KPb~zJ)SU^)5>jdFC zf~JVJ&CJCkHw|0g*hGni?qp0Hmf{IPLd2HPO8CK)F)YN|$()<*<>{5t9#-GiBzJD^ z8lCmRQ(1SS18=bS{s?e4`udWum6fGxIP+_yo;dkJd)!WhSQY%eI16}>W)s7$1UmHQ z@KS{=p$^0$+PRAGqxTFF0_v0mnH~>1g;4KTFBh{9DwNZ~^Ixa6=3?cI6kn+3T& zFYc|mLDcH9P%Utbu-$j5PcJflWUMd!oO;Yp#F@i*Q{a@%?$$Y48;_o*ACaLHUZz|Q zuR*JAE)x|adiSYPdeka-+B|WLk7mmnA8u6XKYr}xO=dH+o;7OWM#o-ke(E_G8|1}o z!$%s8T6H_ql=9V_`r1SCK!-@_2MYsJ*wiFAXIj;NHL)991D6o?s3Y|HXV`47Z>pOf zaH;gnzQLw4+1%J9NOtDGtCS4=;MsL|eDtpz#)<|aO$;r{w-X7$=wS(a5ajMLo5%Dq|KXCD9vqC zM2GJb3i47}y$F_$w=oCuWdfs$ls?EWhub6_0Wg72r1DgOm1`G4pf^c>3+yfd{0=+u z?aR<4X*_F+Ic0b#s_H->DX_KD=Y4A{t$NJbn~15*##qq$FaU1z+y}PQ`VL}=rN;ba za_?T1xw{ta(x2_GJPxXCxf7dEgy9BJHIRTy#Avk4Dwpy3grb|}B?>Do))jo60MD^! zR})end?^0=d&xo=0C}&`2Pis0@5aN$MG2z5$Pt~8V~(I^L^pK~J%@s_QgyBy#D%($ zf%M>#xuh~HChE88yVVX^elzASq6v#V$4}XEyb0@MW{fZpc;|Tf#F1+X)fxP(9kK}e zBPr@z6#4V_hVa*9K2u~G-{fhXxsA-a+21oL7t4j^&fMsX`iZWA_i{2<$vFd=N|_HD zl~bdmLUWmWcWD#mo@G^z3f{H&BYIuU5VaGORkilgy>qgqPbgF!J$Gv;cf0w6JdAP# zVY)kgCi|8H_fPROjuUm%GZKrxlTs;BPWm@Got1UsWwCo1dA5QJIBji7(4u`><_QO2 zO`t$dUowTY+_>Ra2#AE^TKxH->VrtxR&q~>Zp^)<5CD-eb*eY){LeuLKrrS~(>r?OVIWj0}VN!1;z2Q?}8$hW

FYGt8NHrDYic;)^9Ws_EhKrahE@Q_sJdct zGtus)5@DsQ_nX(=tLw(+u!wXEPcf7FtEFBi;+-$+Cwi}I@5@eYKK%Xy+Q4vfzgFLH zU2H2$4IJTj3^?KwlD92(ctq6XF!#71Q^=_M-I3BGB@GSU)PXN69YYu4;nIl+i<|4^ zQkYmcNrG={VF%ikxzcXED^LLQlyW}fvoRj7E zD?miwN(Fy}%cbo*e4;$}#j_uHBD%8rTPT%19 z9^7h6F*%=IQvs05>K3#3wYks>aDIP)g3a*$AP27VCqm9Ck9o={^KR)eUHV)QHOyYd zYzj{T5ZC>^D?eYja;Ses`ZXV;kf?C3d03zo_?AYwe-XR@3G>xax}wzo*ZfaKB?0&MxB6Qd9FlTm)7{0Sy_qh*PDMZr$Q9o8mL0kV{=EZ|#Ict{9M z)d8k+awLM_j+bMnL;I5gHO)sC@}xAw`yg%ffmS!StfM3QuMu{$+0NfqF9ucb>!4)o znmmzk=KSVw1$YD$m{x6Y>4#+Hdu<`5xJOthdbZk%1`&+7IKgv5tfTbo^!yAxkZ>xd zplW3mT9TWYl0gnaVdY^wt>(l~Xin^+uc;A(?_5-Zup&#e-O$>HH;>+BZ4K1vMzZT6 zH42=vO)RMu>(}2h5Nz9C?etJd(S@7u#Qg?r_p>_fxM{Ogw`9}JsTc5w=(Bh|THcBD z0*PxriBgVYGA4rUUlbrGt%GWy5UWbZc7KF`_)DH<@}(zoGBO3^ejw2Np6$n(^i#;k zW$Ni->}O6JnU?4ZN~B7K53S9vKsl}ORB9 zgJ7*k!=Iv>Fq5K@q~cxyP0KiD?pmK1tD@dOFHl?5g5d08qf$H*qn@@P1N|hlg3#-63SCs7_4-4XwVbQ)6{|ZS4 z%VkAErcyziThzN>KMT{nUN%c!uQvIv?9P>DBEz6ujF5JF?lPR*p$l1P;o(s)6Vyph zWe+q3T<;i9g8W!n`iz1?!G@+7)`-fAeL{~g@E{vc6(U}9KrDH_Jp^_MTNyI$WL^)E?XVMbP4xzg&_y=fP^ zGQ=VG4YhB4moo3wh~fhbU&K6C(gsIi_wdUE4ciVmDNQD+-BRvPQDn= zD?0n7gGVzpiOuR1BIt462>49_I&|^Zklpmg%!&mlZDW3$@fpq&7g2HfZop&|qmuAM z733Pu&Q_{TaqhFmC0;-#X|C2kgdVlZqEV9&RK0eW-m-Y_( z5MB}000j+Al2C>sElGYewB3_XID*1x!hx6@wmj+gRw6hCl+`#GzUQL@6%gDG2Wk|X z|2GUBfE?vd<(85iSHu8b-qz(!lqH1Ho+uF9ICQ__<%PkVE(8_TvxDyMVdSRRMqXkv!^!N*i||Humi8vdF0lRVMekEtDlU!;)Ov8Dy#N6j zRn$vBm9b*{-DNI+q6cOsH>$Vr7IAXn_7mRTPh^*H2vuB^V{T7C8+sn{-o5*ecgdSK zk7hCp!h|=2?-$SbI@X2C0!QMx!IZ!X@iK%5$G?zT0k=$nITU_nj-&zRKUwO0_nKxY zI4sA_URjtUP;`|G46;h^C$@c64I181%`XPZ+hoxwbOrrRt)Ikx!M(2?8sGK`L>3@&rS^9nbz!rVj@K8hn721G0ByyR7-c`_ zKb_o8l=ZdNyPJRgGdLuXJitX_P%G+ZmsszcLM{k!5}_w%(@v!f&26`RyKygeVZP^E zA}0*p3k5$?g_*>j$6??C-L|nKiL<%s<0|tH=V|)kg-J=yZt@1Eyf)R3-&^utA9PZ{ zz7U}QntnAGe37abVogF?{~I%smDkgwtfC)!e(8umR+KlBlk_O~p@~G|uXUMHWJ56~ z^cD)LFyxc|z-uw3@QcZ7Bfi|~EK9uBTnpm7QVrGT_On$d?1>5#j*YOQ4M7nws) z!w}zPPRg%9h}Lgss+K;9J!mw1{bEt-txP!Z0IJPKkwuxsk6fQu5Gq9$gd4KaenLRJ zp~QDrah(YNpGXHA_bJQ5#6VpT zau%{#n*!Qq2y7kr7QdMEBY2iG*7V-|re|0GK47%}F#&ha<)b6om81MfCmT!1PsW_9 zP^wovQz)2)3IR%=If6JRXKQqtZ7H+E?~ zHA(RMg1)2=kR78NY^?1Y{_)s7^IioXC6y$8glKsHb;N<3Z zuvQKj7hEd44~n^#p!WBeRPK^C-9E?XD%u=0TIYTMcA_(vOJwx)y%vqs#vC-4c3+B3 z9foi+t%Gob6qnB(f9ig%zmWC@vk3&@%qR`#ZnSzr(`}3KfQNij>#hXva{B~#QB+Y^ zrURLNxTeeXr;xy@CZYPJ1IFJ@HLCx-t+TiJi3;i6c$%$AS>D7!ee#tyDX>13I0<$p zEEu*=O86+2z?oCn|@3sAMRtWjRu z%33sp_m}{8=m^LKqowADQs(H){;tirO=Z-mX{;12McILzjE)q#WX^P?%44vj-CDi# zwjWC7-vn5+K(jfcy!=#B0E_K%sWYkJP*3!E8HwsJu(}!?VVD!diSR4*+8BX{ci25X zN31xc6DPw?Q;lRx{z(yZdlMzZE-y>>O$$+ttH4lL#%H*uOorlFM^m%X_w&uR7>u!J z83YMS`4S$7l7R9B(1ZCT-Kme|i;eTn?hut%fDC2ZgR%4^B_9Q@F$w>AP?xYn3%KSI zUxtP0%G*Lvn>Px~%-Q(WVw}C_F>?<1^+iD^- zmX=w$V_Pp%HLrcg?<%9Vc^7i%cl&o;hY;%sxQ=! z(Yc=esynISNt@6wHmR7H>=Dyl6Qg*P5_N2AeNl!$Wd=@2^vo}LK33O_Nl&Ai8aOmWBNv&{yp)Q} zA6)`Oobl^y)SLebUAEZ0a7=r^W^gGXI*XmGS|KvF246H#qz!bc!=eOlc&7nt+H?&$P#vO2!fs z&9jvI+NQ-yXXJJxkzs z%-NEu4Qa{(;$q^$@9f3Cf9E4JYmTL7DE+-c6la;(eH9ZiFuo^rcVkziS^!hi)AP?H zA>X=$ZiZ>Zzo`vS1jocA8Bzr1&a3cB+a73`fu&LizdYPCPs)L_|cO z(*@n$5{vfDl5cL-Y>m5o7~B!Y^jb;u_VwunzIW!E*`&I*YGW*j$y%BK>0L&8B6e6ruBqM5m zO|Igc{h0!|nueo;eMP!iUNM5;!vNpl`1>ojzFx=!3yx)CmdS*%Ia1QT=zCe5vfr?a zyOk*mBkXRZiJu(&%dNGS_f-G5cIBU?*|j6ms;*E0Xlm23{gv>$mZgeY)W@9@;_^{_ zjaS3c1gAlG*OftkV>oFW*(ltI`-+(%-=^G|wfLq+=fcaYt6*|vafAVlAHYjm^wuG!n$2h(sKph5kU zMxfBgm5VX3&I> zkR367Y0aHq2Oj_Ja9Cn2aF>sTN2~1KZO$%Di-3IQ_^@_BPZ2+OFQ6i8q%-E$vL&HO zP}I>00R#N)fLI`*c$jL?1fwsp!>uVx(}4#TBVPHy=g9RTa^eK~-#OTv+~8W#g74tV z%=;UDGS)rcf&HDszt0f-aQ~K;G_ese85nmYN_ z`tMCbE-5zr^|6MaZb>m?3WAG~^Uo-1y5Jft;BHv8lm=t{?Ny;h%api(67}RS24?ys zr481G+Sb1jPfyP>mY$&t%ZmaU2|aE6b2?n&Bp!CpS+*9CIR#(SCuzsOY{`lMnEQfn!5!JvR?v*TAZ;X`J2EhJG*(FK}hp>Q3qRIvH z56IYBHwmI@$qLQ%m~rm2&5{yn^sKSpqrn^Q=#(uo=qddXGn8R!QDOAdQ&WS}o~mfW z6h4d$_SHX3vQ`%ks1z+B3vOBx%W&y&ZSB5rffDM2-fvgA&Rpsf6w_1R^A!7GGWMC+ zLRH8o3RZlK0L(K%7F3)M3Pz?!Bwyz_Zx)+OvR`cmXPR^f3e1SI0)T91hdG^ZrmZ!y z5WC6?9KE0R#b4^szLx(EH-=u6`~G>gA(}Efxezb*9|3thvHs&4-UyUt$2vO$ zC#~0n@1V`mI*=$4dVvkB?e=>_sb+hlpyW^k8NdO57O2Bw36zc!)NEy#LHHDZu#vC4 z6s_%TyLdp%5NMn7UJ4c-Xyfp<`WwC4K;K&9FC@a+Ix39OveHwdsy(Kz<9*i~e|L^4 zb8~acuRy2iK>*qI^>rC$loYnz$qS9YvCP#t*2yiCT#K%oqVq>> zBP#eS`*@uVDy4jt7I%ZKU+nbh1eg*>!{^`2uf@x`Uv{aGq)!$Vl>%JCJR)(mv_`eO z86Gb-Qbi@>eo30$Ow3@by5eBQPm-g+T_rUTcbCBBbAF|)KV~@wwbJGUf-RwMp+|h1tB-<*I=W*mO;18L z`)h|=8WbXMw~&dIYj78TBDk-hQm6Dyd>%811bLNAc9tw@Jb@elEn zh)pt9nQGX_5v-_@ccq_k%5B##Px`hz^*W58|SBu5M< z7W(uf^mZ@%)jOZiR@hu>cOnnMm~oTxly%|X*SC`WhrK%k?tYtUEMQU7AnIEsEO@L3 ze1tTeWMf5x3J>)a+b~3H>t@G4xa?x8k}Dpz{puQXV$YnaAh3~dZm6i&qF67vMHH>m z&eEbjguC+J9X4@kK#n$@k_P70ujc012dxdc1O~a=QveJQO|zv~4}+gp=_tnMbuPe) zyjv&2@%7Lp1-{eEE&Ii{?&{7olkz4cN#(DjYAb2*&BUE}&418?&G-;}F- zwynWRCL0|k=(fIfNyR0bm{MQX(Y@QYeE+ou3tZug{?k3SX(1?`E#2f)?qadMvasU+ z*dx#I!zZ5ktn3CarYkEez=c){LSs-%ecb&I_n+Y_>Lh%rmE1lV&8V83_0z{anjZRM1sk1|E?Gox8c&&*B@95-m9wJj-JvuA1!9Zy5p zcv(9#hA4%xW$+{szQ(<2Wzv?x8=%-|k^i18X*xZL;xRNmw{RS3lPPT?l;-VFsaaX2 znNEgoAV~lD_fgZ=!+`2J#rLF*B+d*YzjB(Fb)kYVmW-5@lLK+WLt7+@7dyxE(g$dL z9=w}^up47ZAtfpzda!}IT~X&!*!)V@Jn%TbBIU|B&D`z1!xgW8od|xD1`Y50V30~a zbKsW1DE;e9jRTz%#E`1}+r`>5A^Gevx41~#%$=vEramoLb7=vk9tEb>BNXL*J0e=+1=BGW+42FFp^~3^QaN8M|X20IZ8-k$+xcG zP7PZ_gO-jRgU@N9^T@_Sah1jf6jh^TT zu*IO1xs2~3*t!?9K((=Ma57U?B_>^tR8D3stEfhzD+1q}czNI;`^Nn(-@4llWLv9; z%2<88`tXTRT&J#1ke0c&G8CW(C*t2V;G+~ZZl0UlBQpjW%!Z3i6kmL4$Na8jsMGby zbx+qg78U<-wb{H6JPLy1OXZrKo&1#S>~Kl+M1c8Nq30#0b4FwtEvt5N>J{cNaWNSg z8M6Ae+{vChxW&6h;pj-Dq`xaaBB63|h#`OSLE^VHnFc7?$kDg*aoN!w^c)xcbW7{Y z^h60Eddt=f0Ms`&0`~3bsiNNA-v^hMVS_b82n2mK%YviNTW z)9BfJ6G+d}F~~Az-B?HVG8<@P8{L*nhtXU;Vg6j_BJRIf)vdC!;ebqRmi+K$m4x_? zd^F2bmlW0JAOoBT;Vq9cwa%B!8BxsU1;Qnz9s&uuhG9H`oR^{Qp+gZ-iX?F6@uQ5E z8YhApBT63hO(H1N>JgMT0l0hLIDe8Ce&vLN<4j|Fl`Y_P4Z#m5Jgd|Y?6a~nPM52$ zu1bm22DZt~gdfXBf*MzWOCa(#y=iy#ij zUPGQY!aXe+P1DSQnPyy z9yg_6Xz0TAcKUQTA?roW&3awb!}qBjE{=}LL9h*jL`=dI0hgOT{tFPvblz}2uLa**9N&kl7`J3M`TzIQVi5CBTGrA!p3~GXT<}$|Z7uT1 zFN1L3!9yfo6{W<($tzC&b!f(h{&$vf`hlF4#gtKgbCfExUMVSg^Zwx1Vh>{7x@BDY zF-|RC4D>-F=Bp~oMK!vlmnNDqS!iBZff9Y2MmH?ypV`QbtH$ia%zA388qIA>*lzfD z2Umv_O_~PF^3!h~a|nxpQBNesd?ddWUsz}be{WY{EHJ<1ITzNre!j=x3=mEM#T8;L1|8hVF9z8P7`gVUKo6R`iYzy_uMwp72B*{&IKSU?tbK3s0{KR!7WIjZ@Sp88+9TJUU9 zZf$0v4uh+FfVYIB(+hU8&nwq%ieSzGEYHI>HLBvuB1Eidir`Dku(5+q3;0{x6lRnS zZ`)O1uDdEeWg6l;80e zu=&RfOe{JDY&!X59p8~}GpLfycI}#mI%7s4?QFdzC2F$xT*~e#M#MjF2ZWMq^VxeT zk6WKu$A4a-E&m%7!p)#p$op>I3I-spSzi(*!B}qVjNMNc{QkXibeoV}?Tz4%*Ul0^ zOAn<55fZ!u6y|WrH6k6*#)}dQ+Yu1KKZ>z%e!RAKN}b!KwsiWA%I392$TQ?}FK-`V zsh0?cGI&3sV@C*L&9wAP;I^V&bIqjCa~Uk!D62K25iYF%$4w48rAOij6Fy&%OvK zsI$l@W&=IZL!Wvrlg@h4(3?cdF(GVxNh9T?&y&zgK{nS^SJ5s5ruvEC$5X}lyGg*% z#s-r0Vtf9uXY0u&4s{Pq{H9!r?L2D|jjB#lHMv)sWrw05Uj@~w)QMxi4RF|cq+c>F zx50qIaPMLV{`L5l-bMs8->x*n0ced?Cn^s}($nPW#i`>vhr|)jW!rMPypr;LU3&NJ zax`CpBPl;t`;}kL8y!pSP6yX*pq_iebu66HWO?cmf8f!z9rTg-@tfK&D8$S+`naN^ zCdUc)E-tBx=37+{7wP-HDDil%tgMU&dAX&XbIvR-0Vo>I5ss4w?N>yM@?<&I0I#hN z(q4HTP#*Y>uzWBZsoKtCN0xkVi?@?>dX=Mvk@q*y1Kc9A-sOE#hxP*Mj%b(jVAD|` zZnhp4xL#K6@0exb!otFeHG-;{8uI@Bl?USQMb%0(BzD<63#bhZG0ey7jQ;){2yq^S zW7bZ3ipzGp+)dCZ8V|+5!awv<1O=&0^^MBV&8pw2i;Mo?723(8!8udb38OqnG_7Uw zUXQO-On1ByUAM?%MwVI&%duHfo&6TrXL*$N@BqH(-ME3{zY2z4mc+%iyyV{0QTcJ5 z{Fq(;Pg%n{F{uC3?(-2q{6CM5G1S@l`4#yBvAW_jvkL}Wt!Cjp#b>&PMFeqSL+w>2 z0ik*ebCW~Y4ZUzLIX9?jjb1v2hAX~@dBw`ny@}obuiqL09p=3ndJKXytQRbY$8F%E z>w+wKda?=UrUT7ndxsK~l3GZ1y=6Q~T`fUODt%gwtcW)Om6TXH;9y2Nr-^fIM``H3 zsP>6RXR66|qV@avs=)i1+u~)H*SL{O-DZcw>QGB|`d;48*Ih+Fb=1$(9^WQIANI}e z?i#d}Sh&GKF=<6b=HXBxkJEGG@xWwp@;*{wI;R*=;d41oEAoxRYpX8_?)Qy#Qm1rwPR>|hw)Y{9mGz|b_s4fP%Ss;S zI~r?xFSX{g5796a3xh9OA%!q%i@(2E-)s(9L|N;8%6A@!buw;{X8+LTe7}12^ipLI z6EesLt+ffyxr|{M94l!2B7e2ZwK<&*x1;dBUJy3r+T;>O$_OaAc0A^*F57^rC0NRd z>)1n}p>+yHvo@kYcx?wF`_%R2nu-~+JtN)CO+YrFh3Y14(zj3$uW2&Ubrn3v8_R`@1_5GAgklLkjZt&>q95Eo~Ck z-QGT*o5o6IadQyv#*^^BxADproaWotwFiM<^De>1TRUY9jn6Z9pZ^pL{3G+};DCRS ztizfb*{A_QP;gsKMV<`45b2fUF$dGHord^J_-m?A-o}Xrdp4BBrdyc!6)DtTbqPa( zwM;T*hB$g!>GWQSi3@{5ZY`u-t}1*T;+%TQsuXX=-D*n#koEKe;2BZxa}gW##Kej} zODmKHubwWS^Cn!fPEvpRaK1RyI%b3<~?rI zXG#?}>4nB*1teTSg}vjJyZ2{`HHBy^OmOjcK-RpZJaY0vBN$l!_DnqK87XWxxx03+ z)`+ighB|!s@W{wmiu!`M4fef{J_;Xc%<&T!_Z`MCx?qQ9$PviYZ44oqP8N z#%KN89>U^?f>KPccdI*<;v%qZ@@q(7Jz$_AvsO!&sII3UMY&>nB}l&oZ_|L|%&fo& zV^p`)8Gs%LVsnqCw94fT#>Q1|%j-2^@7I@v(iu*kt# z#$z6T-PGkz2=}a>fcDpa4Zl8UQc^3FUyaFYE!NUE^3S7!FL>0<1QM=y55G~o8t1jp z{6HX;Tz3EwW|DZE@Q+JrRWkfo96G)!U4rplV^{R1u5G#c#(qt-wIv!aUIis-n^#4Z z)phSgIz&(v6?txFM*vWv5%?D%I-#*q1F=|4S5Yq!6Z>~v5Kf)iw4pg+g`KP?Dk;A) z+s4)sWDc;|%qjs|xSJGd=dB~6q7JYi86_S~d44V<=j%C)ko86=`p$Ge-F!9iZ|Q|t zL$u69DU;}1{L+1tlz!FJ&;)~fR$k8tYhE=pJ%+s6jqK=X_k7zL4=0fdyk?%Pk-fkY zA0KS2LV9#A4W!?bQK9K4L$hW86!?%c0^9;rO%0_XB3&%FY%F!`Os%Migx{EEq_=Ck zIzt3B{iA)AK+~`QwceU%wyCSPX7Ln3Q4tFSrLfcP1vkagD3cj}PHlpu%j}J;zzrd_ z_4Q;W1=O;P*`10sN<|_d&$W&{FJTLf%fTOEb$C{5F41)&rb0uN9l9zyhI3jC6H~|3z~_J7^Kep(5R-t*#R{Z2+pE1j74C{@bvKOVPwSg!)PKcj}*iYM*= zMimeR1RZ=00P3pkdwHI!U0;(rbKPxb$VWFezS!5!tXia4(0#DP{J8Q<_fgc`w9QDT z7*a%7t}nCcVpvqeI36057<>0}16Bb|hxY2gca(o{`H_8aIMtEZ%7vUnwWqAC zO-kBV=y}IikwMS(X38ut#<|=BFke>JBQa2hf$3h)J#1dJL_C ze42p-c8hS0$t{XJ+0)hA!b5EegUW)3^YQVX95Ge>^U(2ZUq>cGv_6^VaM;&Lj##An zTf}C=tNwSi?UiGyxbpa;sIk}b&UJK*ESgof`!&OHcDO^IRY7v-MsB@2C@ z*H0V{O~kqexOrc6sYj@-_G?<^>au$pk>nVp*Ai9Di>rPXLX0;ywKUPXT)lzw)05kLt_ot$j&)RUMT{}~@7mRMzpGJ0 z7zMh!t(wPvbjly5-n`lq?2#~9+ikaYA8*GD`TUN{BNgJxO#jib4?eBJ*HuRn8JW`G zNTZg+!=*)A3Fd#*9zLXiqxTEf74VaR|6jbNF6!Sbhqgm{17d6{x?4AK9dX>7<3+M? zBz&_ZanhKN$T3x*ueAFgRk}%+bl6q6VPmi4WlqB{e`S^g5HDOY` zNqb0Dz3A8XXp;|rz7*#sVj`blYIuU?qK2&d8RAp3kj^+ta1+?6I~H{FciBmh7I8d3 z{!0@bIlh^>xry1597Dq8>wK43n+itVnVC-ekNwZ551iNu-LeexgyVHUB6E(S)6kfu zLgnO?iTk9)yZmSMl2c<={O5I71v;KV!HoqE{KffR;e`qh-iaXj=eyT4Ndz^}%U!vW zFgtDYQ-=AsVL?-y7GA#d7EP8$_sn|TJy}{^S)I}x>w}Hwqs||?*(d^ocAenhP@9*J zI}}$K2nxTS%f29S8ECQZ-h17*JfojZJ;lNfS~=k!?Tl~vkjG{=&tcDe7F%DdD9>{m zC3)go3Hc96d2a`aiX8k&AV2ZRxB1NajiBWHP9sR%wuF1KwqqLW;cS8vD-g@v5MjCu zYEJ2YWOiR&PV)*Vas@4+prD^8a`~^vp$|3`dl*|<|EGv-fk8DwJR!R$-IM<7=UNi> zPonWc-!1B_gvt;-Z2_$FN)~z5lfvc8coDQknVDV8t(`J`Ty)XfHa8ETngoPIBQrF< za+FThr}S4MKi6k_Z$-pBj3msmjAlD0`^vcsPR}GDeJOBha+!m0bZd$kj1q( z>Vb873FBOL8wu6b7iu=48NXCi=1Z4|wOyY zWIPPK>KB4^Xgwb`1Z?K@`I(e{Q{ml=2Q+8U zBnLJ0!f>ojY`3|n2)vxJnKZ@y!LxQjqrq={<#J`~w3V9}9c*GHVE%T(9KQ9N})If*BKe)BuaMoH-%JYf9!YVZw1CQb?iC&C= zfLN+JCkKs(9DSnJ53)MEaDAsXm1fB*f!`nA#a|=D70f0lMeds+vnsMW#Qfh}99*Cy zcqzq0;xO9wb`BUn0))puGA%KiLC85z@%nsJtnoI~`jqj5LXd29+4Jh5mUKu#UH@P% z1@cAew!5E)oZ8Q^f8!P_LoV&KhkBmdTB;sB(dtwb4T6l6BBkBCxCrq69;AJ?29({s zI414dlT=(Bw>bzx0Gb?-%RZ8ZjDcrPgU8yDoP~1 z(puzySn?yrcL^v(%nAIYtPV(+VN}+{CifC42X;>=B3K13Z109J#IIU~GU%^~J+v&$ z^bmmGgq{n#axVPHB~i#RvG+y@zRVtc5~PnN4Um~jl~33%6=hM-yF@5Yt5AF(LtU}= zwk)9hK#U8=!2YtDa&WMV{U>g+A7vFbQQh=Y1oM5`>ykbUde1d&Ww2h+!5SG3A+Zt? zHf4wk@lf0FeCF}vj5-gYAzU`$w);o80T%2mT{5(G&97^`21Jw2xEkVJv_rk|!#lM* zjmy1zvffj1Uqxv%%mU56#@RqletOxP9o^al5Zp>2ePle_SspCwSG~t0k3cQ=9nWs*y3Nz7kj_0l8c)vC?zoOcnjWoOaPt2jRZs^78U+nTXBG^H3($%xYYCZ>&$!gz4cPW+~3F3<@C%f z9~zrbte5TIms|Sk;Nbp1sEg3seU3OxC5^UK8Qc~gzn8(}~N~Laj$8XhAIPCHhDF2HG>-ETdXFLRvL<3e&>Z-;p55Frq zB!n{3H!wL0vd*RV`BWUY0>8^Imw21sNj;&5Vmznd7l_)fbh#;UDQjonoxz4sb=xsSYNpel!i;AN(Etzsj8@03nOK~)`fwh{5A z9&mn+xlwC&X;8BvTdM}_x3jSgm>)eEJ@~8nMwFTR)rp?3&E=M8 zIt>zkiMfmPUooW{&H}>ywcD-z=-+8I=8JuATw4-InU3oDxY+&8u1&`z1=`kP%ZuuzQCdsl3$wCwEKG2RPm7LLSq;9QjLW!$ANf6d_!>n` zga(JuF5;-oPH-sFgvI52hljq%-{^V;Fq*-#y4YeZZA`2XvQA{3mk|4lkC~zyY3-~;vfN=%5ELd| zMv&8!(=AK6_rnXYi3WoYeCr$$k&MyS++i|4FlT>o-Htv=b8T*3ofk|2@kp3G=^Lkwx1FQI zh2iT?mfgaN^B2xp>&dsX;|q258naQF;tFsb`eb?CIFCbHd$%hg!>FDf!7~eDgKR4R zf-zly^cR-(c%GEELh&lW;Qz!sXn4546e*iNy+sB>AJjZR3(=|I3_2iU!8m`IHC(tgwvaP->aBJPicy471uVz0 zBl7P)Qk0+W^F&vGz(m7M=21w7*3{L`N+ieWcPVlqkRtx zhpIW2=^rPQAMb}4%u8-UPw^0Ou4~NA!H&c85&cLJ_V{)d3@)rXGO{C<1llbhF3dsm9*g@zs*e1zt4Kjs-uj z-mNGb!gK0ox6+^?yyoZChUpm_K?UhJXzAJh5IEwPH5JHr_c8$ct4#RT<;Cr)c6}^? z`rpMQTp+Otb%>q8@$TUP&8l9cXTyTdfU6cWeL)YPJ{ceAclgyG9HEwXdTNP>iXw^YvdsCNYvqy;i; zp2WzM0lxJ7tVIKEI(S)Cs0LaCcyvk^xSEqnwgT=Q?jdfLpE9pg>6#9U7Y{rf9lcH5 zF^Vcm2>4y$nv1)XHFWGY79v|NNI1~Hx&<|&1l|17Dmzfu{W%Mv`jqJ2jrxm=$288_ z)me(vQQ>FXOG{0+3g-LQ^dk8gsf6FZzi1XpjPZOyBFfDj_2NvrDS^Sf`!#hEh8I8> z0=CHc77P02SVo*6_|GQ{tkGsx@Fsx~s6@Tu5RwZ1r;IW9vWX7bg0e7R(}?)Tqg`B7 z!+WcH8_M3RDU%KVG-#Rr^!#05A(Z@zn40 zEX-c=ZwjKlslf*${<&#K2d`Raje`dfB%QZjI<~HcMn(9&G|qH>uTV=)KraS@cx7dk-g;l_uGf6DRd>}DzlRNpb#Lr3ckeCy2qAiaO>5|3 zUL9^8m%vgB3{C&sN ziE1#O*E11JSa5lI&_}nxpx#sIHk4?PXe*4RWT(h&;0iXc0BC@ge!N7%Ki%xn`*+Xc ziUsRxPjH4J$ccQh=b;au2ae{{(eBKSw%|1A; zduI4nn*BJmqokmU;K1m~*6jwd=zn9`mq`Gb(rU^zbFYdvfrzPNUKX|FKP>r*XB_lt z%Z^DVa~9@_0M+N)d9*+PSWA^Zq4eIPpu1$XUVG^h5Z(RBZC!rer_y5^bq+$7!yN zpU%MLOw~o`YR}R`?C$9jvp}_|k!gwU+b zZg>(&*HHRUEpv<`5G-H_IS%}Dc!9!E)q}^@hQ`%+47U9Zt{-kyT<0Q4q%_%oZ*75}o)Z}^ z)!Kq~!|k;37M?$YrArh-o;6Nxfm`4Fg zPLD*tXw2bw`oI(8J2gQ3FrgbRM0lgvF<)N+(C7Gb1kCFop^fN2R0onu+bH|*AU6>KUg}0CH9g@k-yh_)#%MUidGUd7BPTOsV@hRD+n-mW&!AyYZd#$z zBe1#fCgN&_-~!RL)+RS6CxNBZ*TMV;&Kk*M+SIa-uIVPLPIeJh4RWZkh2z{-sdq!D zXVeh=7J#T>m6toRcP$61B%yQP-FVXVfR(}B1C^)u-UUV^dj@wM3S*#)B!EA#5F~{w zj<15kWchkU@T38>o z@{{#_d&q*mJgyOZ55E;@@BiD;^LgH8ZM4Uf!RGz6;!wbGE5U_Dl|XQQ!v3Y)+itOl z-*HuCUO5?mM7_53(4oOTJdY=_SA!{6-~XVXaK!!sF`kbbR!w7(COut^_{*O-r|gR4 z48sCCV2dTdEl1jEU7ps?-pCse|E)acHwHEgC zBc4v_vWyn=xAtPTvwJ=~B~IOblI?UnKVjr?H0hzc+BehIUc1tn2Jca#GrZocXx2qc z`^Ebva1FhK|A#mjqIUDCYL5CXX8{HACsrh=qV-=~B-#JPRiGoC1V2N+8oVp;5cm-M zZx}6_qIaHva)WiEnX zW!jqOpq@cQE6UgD985L6j@_@x{CAddY2|Q-Qp(Tki0I2BBeHm>r9%uM+PdY7MKOK5z15_tV-Uv&4>VZH^D*M+1!vot4Xr;IP4|&t94b5#5 zXpgqqC{CJKZmp{3Ae%b((7ku%m^yIvW>+KIBT8{(w7Hc7a#3T~Il)7!1Nkk-HWHNA zNR54F%mG!NniiJrGzFB3F?hXG0T@_Vp+FtD8OX^`jwWDnAP*~@wrO$FAKmhVeVI_8 z0An?FMR=OFFYpLQtCuW){?gCC($nqvSaMpD{a1L27#&^t6)w^jdPFu4BrDs*GacZp zD<3yI#*@4>WHqX0^dH2K%iMhoaiX_nzjqll;^KGHX-+oUXLD~G!kFtp z=(831y1&B7$47nqTAz#`^Aqby{p|AeBncLQH!h!q1`ot4>f9wx>EW+cY#w?}+^56r zWn?_>7nzX8Fb(a;@`2}rFw(tJarrDe2FXXOSn$3Uv5zC`m1-8Xv z2Nd}7?<0T?uC34Y;V8ef{m}z+ppt(k=qv@| zNd6ie7N>6_!ltPE#%E5I#=H%PL{RAWem)8S4{qy zG85ajCKKD9OeVG_wrwX9+qP|VoZIKS-?_K;uT(0jx4ZVc_gc?-P+dj?)7tlKOw(Db+68abZcZn0NbELv zKrt#xUd3>Wg4=H0yNbrRb&@r7c7_%|TT#}h%9Z%qiO2TgDD7cgNwatmG!=-+_t-0? z)A1mB2W3-t=hrYIW-IFU>$j8!{TvCSO;Q}c2`NZ+lB}&m1$m6DR-!*XRWjn*yQWL# zR1|2fuIY%9Qhn_tq2aY|AX>k(DwkvJmNjXW{fG$3^^#sp^| z+$AB9)}W@QHWnSXXtKf#g@PeBe7b~)oQWIlEiEqB#|kCli4FXlX>lULIyrnj?8E)E z@jXN()gQ!~`)`xqg9(}pr03=S%g6|j*rr5taHvU%5$4UW6XAS*jW;@7;Kl?i3*a3Y zf~#Lzkka@m{;e$BbG1s_nC*&6O0%p@<41#Te&ve2aJH^v-t)L534*l!9Q-qm?N;xA z{w#8KER)=}vr2KRzus(ItLxdQ`j;86!*eTf8p93;b?q7_-FEk(FNROK4t4X(lf4>= zt=0`-3;%>?dvwA&ur&}pZ@4x>6RbsDMpfpQLtc)c((k`AeUF~pJ>DVrn~|P1(5INx zut*I6CLG>MFdR~GUVNbMthE_o&A~LB7n~j&NOyRxE^TO|cfAF(kSByN0mcm9$E4h7h@7OnM5yC@o;&VpfEQ?usZ75Y!WEE8TBz>W4Jn zJmYNe^+fY$oigh~d=TS|zhyHL90+y-_Vz2zZ)E0c9!J@F6pwo<$gtTe$%j z<;~sO2+VlaD${|B6}SY@&m!E2-0s{RC{u~O%&X0Qwr8Y0wZZ%TfI2x-_X~|GYWb)r z^q*(!Ws8QAd+u(Grd$iXrB6)l-d@IXgzA$33I6w`na|1w#Vq#A^^PwM3q|jO2nnvb zzXAF1-#w>r1DiK_D|d0w(J>Ct2Onv9$Qc&6(%%k*q<8;8TEs89(4V_sQOtJN`66zb zR81U+`JL`__WPnrN=jTxnNE-XyP-hl&VaxrZito~f|q~Ej^81hguxrg_+4mZFSpv8 z^TZrqNh*bcE`9;1hte>f`6}_PhUC0C(IFcqJDl$h5xVIc&&lOYH$EZEc>H`lN+lOeXi$?>2Ps{)ykBv>qh?8fOQHy>wt zt*E*-{hY3C4e>6n5=HkhkdaWz-|pa0`v=Kz4YF%kicq-vRh2kba{G$`b2{@$e!n&Nr<4jLhPb!}C|4yyN( z2QlFwrmzWn|JvKWT%OG@z}Cd%87Rsa@L7^9`20v~F8n&dEzG2(5AyS4;)kSHz(#U( z`k1WLO)m=KdOS0?x4k&e-F8jxSP$Y%=pOV{rIggQ+h~FTXCV7>a&~@BhT(u!Qd*Hn z*aAz)>nCQT#L#QaPDkD>OEBmm8J{q;|8t7%Vn>>ko0G#P-)ax+M+MtxIU-?V|Fm5Mz04%d%A5A@4&vDCb>I=g-=Fs{)RIz-QN~ z<-g$M7f=^%@H^D6;NNmE(3L#kS%Py#W+BWDKd|ywKze(7WE4|oM9YdV1{Yy}fKMqxAxpyfJCVEw7@G0i7Yh078M#klmR8Yr&vBEyL`^ts5 z^|jKpyk|vz_L+%UU;_XJ!$8;`k<&3UKeW^>YLBZ zH^EdT^3R=b(aT!Q4c+g%Qe8gI*428VO_x3U6^mt*3d|$A zy{pNvhH_pGzP+z!v?exDjoClX{2+w8aY41zm5t=ij|a9$`Q*|y)ioMUzX#sn2|%mc zTre#vkcnOrJHdu`0PrIE;;nb7q~#ru5>34>To?vGzvk+^@QD08vK zq((vUROija&n+ydUyR0{$qH?Xyxop8jLVg@`H4m66=PyzmYuK4VP4}Bj2M^shoMX< ztDz$!BjXzyIHcFwcY9@*xN$bF>(xwOq5M#GnVy@Ye+637apKjdHJjvjUal1@%4%vh zW8$P#wnrdGBhPN+UbrtIZPV+;QB3mfG=z%@ zPlnZVc57(f@jjzyTu}cpzE(BVyy?eIM@q?wwD+=2Pmr<%N~o?SzANzDH2D@i(^y_w zDvj1-x<`)#-8m`*By;v~@{-W@@+NENp)M8?dU^6~k#i~EB99>!6lKML*9L)||El28 z{{hM2lposuu&eRrGO54z|*AVoL~6&+#h zh%CQ`PWtU4NjO8kI!#jjTn&5Xuki2qctL8#E2hss3n)gWCPK&tbkq--EeDz~?HZuX z>jT@uq6$E#6NZulsNgMS*kaXn7yqyrY#bhf88eO&EPk{NvoU0^cU&RRC&fa-x&=j< zvoSHLD5)`QbYn>2czf^rqEh`LtTFa{B2|2OwIUI$cq|4bz=BR>XmA0Nt?q2{*T+J7 zN*W^6MHA+>d1c5;1x?e@z$cyOsp9$+9mvPW`rBd*PX{fo1liVFHq#?2m>fCKq@>!v zIS!cO-|i|S*6B^b<{(wUNL|>uCRerwZtgHnEKW_R%8^T5*lRoa!o85tymR-lBTz&jEBsH}A3v<)U@3eGluz%jIMjR$SkP zoXas-bfb9;hp28oc%&&{1<;e6mqm!+2Y)zhE?yjg(SN*633p3}cAlDMip62>VS9PC9W6OZf-Nl2a~u57 z%h+0m-WnP6rGP=cOgKN+!^Gj;%is(kt5#S6slfcWYXR#223SwSGK7E>iz#B_!v9j( zK#6-~+mR$DSv3)(t=$f{j#23|5!R4gNMQD6l*yfBlqxjymT0L)Hlmd8Uui0&{yN;w zfETb_Ks`$aX>EMICzo-^%F?Ut_5H%bceSg7^@DMZD*okb2=+P7qKxIk$$e<*L)(PHi9f3T5oZ>h-p zCN3j>vJ6tTrmL>^5f9C+e|S^6sDX|&o_3oZ2(#p3Dyj(v;ee)Zo7G6aF(ljJP&;^; zg>)i4{RNaMcol;S?S~E8psD*ILU<-9TX#=!$g*--Rkp(34BiB-o!Pj-5RQ`hN-u1Z z*h%~#t-W+<{DHqio+~n>r;?WgLNu}_AM??}8ahui`IJQCBErm^?9j3Cf2+|@ViVFvFXyecqr7$jMc}FTy;sn-+bzOg2RVEaXB<_32qc%Hs3-AzDTHFOJ@5rW&7L| z()F-LYYrZ`-7+E=foKzr2`G;GpkQK$XvSz7^zCJPwNEEgw?{Y9pN4vnja8X;(=xzI zp`K-HT0@`bF#KT9z@@OZR$ELgn39f9?AR+W{l5gH?~vH!AV$c*@8f?1&_HJ?47lhU zn1*3;07la|OTopFMf3RkD^^_k>-I+npLIR3b^ei`wO9W2c&)jPHBdN@ zs)E-_UqyvVdPvc9)?Z_Dj3%x((2vt~EwZP@Z5fp-Z z*!|`sO8X~j>_ivTf*YNYZC~zCg(90ve|;ZAld=Od=8F1?j zBsjh^Xg+++d%NVarR>M(q>htMo8C+ZsL{o}ffpFTL zr)^vz>3Wwiuf7ATH1*BJH*a@+=VQ3iU3mW+XJXW^@(0?vPh z4AMEfMZqfFEdMUSH}wDHtZMbe`9w3-W)Kp7MJD`~_0p+66lSwU&c(BJ?QO*a{3V1$AXd&^9!pC)++fY&uE6b8L6-3&P+^BZV%b zqtnQs*n-VSwI7riQ?Te+5xo#8KdQNgE&P_h8ohW9ycAR#Q!e#?2?iFFS*wY4!~*%3 zAo#yO#K*E2tRt40$x26@s6k#oWrXOpIyr+`)q$V@El?-B>;-!-Hgnfdp|{IIyf0MK z|I{EvuVlUNQxD};X&2;bXQv_7fwcJAq=fA5?iwh>rMgmoiJN_zGr7CW8DN_{5h=6S z`&F!v@y>h2hA?Abaz(x)ks~hxkB{RvSme) z<#@?|8_g#W4wCgKRr5n9?(?U702*=hFqAJTE%&zLM8+O41(KlKS> z8OHe8w|{8a0#?HvdtoD1BY_+25&jxKI^0YZ?&tSg_67Ayu(_&a&oeUh_vfaB679P_ zz#dy4WlHfe2}{^qTGt5`s4_G4(J?S69~$YqH3x0GM|H8G1SB-}kB^uCxD()GlWEj& zO!>xk25@}wqflQosUCAJ`O6+$C}FBECbMdftA6 zR_ZBSTSdbq##bpDTGnp|MH{+Y5G?<)PE1J>Wwm0I_EuHT1s~eTT*s{!<0jfr>Tx-5 zA(N`V+EkttGfRGp`_~IV6SX|H_7mX8FDGp~@waxB*p#2BlaG(DnZreJqf=%g+xG~0 zaF(3LW>^AKKAX;E?+P<(@Bd4|fPW~J1aZ^N|6d7Gg9nO&DSca(mX;sjYtGS}gSBA- zZ#X~yYIkA5p)=lzl-EOen&X|CW4^dw{v9n&nUt0-DT?-vMw-w2@8RmihCGvDTNT4B zAz>yZ3|?r%{#&U3TmI={PpW9+(WS`fz_g9+MNVv!c+o*@o%}&RoHTA(A5W>RsU2x( zF{@!qvb5da<3lCrfW3Y}E2*kdg=DF3=T&a&dX!6RS$&AIR*E_Zle-7;Q%cq4ZK7rtG$_?F(vgH z&3Us`CTMkh2#*wLY*!MHbm<>1Df1nO2^wF&=s<6NJjO{)}Y#@Yq=tFb6P=bL3O6BxMY8 z=)CgQG1mnePM4N)a~Q9-d98tt`GeJ69~s$Yy!uu?2KmKX&NA=Jj0|-b7gqjw|^F5yLHiOpqrZZ!ELEsPQN#+r{q6Sr7;S{y? z5o5b4+y|@(u945l+At`iDQCec`y+wpH4s>Pp6~zip)1bB(D-rYGfDE?*7ud3K2QF2 zd2Ov2*3^Qseuup7OC{U@^0)z)-{4}Ma@Abq)ZGQaQXvMEWt#Tu!t0<3$A(4>z;@ee z>%CW!q}s2LsK(6C4*6E)D;C-~t35RbF--N4CsKN9oo0Nl)1>#ckt}vz$B&M3`f?VF z^pV!9?yrXr2+9iyggJZ(hR_28^+=?B(GVmlg(ki#ac!5cj&cxXQwAxN=&lk-x^qkkNBwgGz ze?eKS+ZVpX;eKlRlI({FP2CA;9Y%1f}DiJl>H9?y@mnC&8FIDC~*3*=yd}h5%>2LfQMI)2Gbsf6T~WLO2vDS`y(wa&abfG;riZVhp&kF zHlvS=v-5t+t;}$RPt*&4gk!I6A_^(q_lx1C(0kT$Z(a)5pxOt%uFQ`zmWZbm692>v z??>>{xpAPa@c{!+sfh|8yI~iKoQpD)U@MO?5 zD<_LvopOS?rPsaWdl8hYkx~s=mUmk_>euOCuT?ZsI+-EVaCUs+H6R5A00PGoN9O2C znWdqHRWr*G24n*%nRWa{yhwPkwWPLIdL6Y96`e4^*;cq|uF+#*=_NHp=@o@YrHrd9 zdvIzrg6|>4|5FDX{4KGNQ#w9Ao^9l(?J0*%xBu(&dRbHL`Xe3|TFeyT)XDm$7rrz~ zSzUTMJ|#%7xcPZa4vM;aU$S+DeS=gv@7W=zL6lyd311%guE*zZFsuA6HAK!RK8T!r z3}>0a0O%^*^mT?T%)k&6$a45IYRd{6dBmTUEe%dhK}mn~ zE1mnQYqaXb_g@Q4>~BUVhVi;J`E9cQcWEw%!=A4a(Stbu!)XMopbRBn9dhtwE;sZB z%k1U9e9P-L5`TUF46GHR0FMf+ht+?qzKbGC{!U2A=D-q642$dKyxdt}R?t<@$*63K zQ(A`d7673_oUCHrk`@FC!N0eC722HG(&(y-X?&J#Zc|?K8t-!RC6CH)(u{|tfs!ry zrRwVHV|oMgK3&_Gu-joX#wV!mCj=Y@Odt9|$!HB<5X4D8!9E+Sv_x(kq>>g>w z6frYyJQ30g!njrKv1)`4;Znh*!o>RWA%6e*6sr0LY-rz+#yB$rBp~Q<5c+ZQpf_(n)LTh z>N3wc1f8iFI7%Pi%VcHx4}yr#^2*ZW`AEcv`yWz+183DotiU+=t{N8W*C#DL$KCAVT?J(HPZf;+0#2}rB*Ha)uk?EibR5YYD<#Pv)_ORLQxjTq|RE6jZOvQJ`ZRxpXf%jn+m z;`#59yYe6QYj;EK+;P=8KpB-dl`d3}9GPaQ#oO=8==c&|MSZ zw(TAXYMcGj1T|V~qvSfcXaP95ngeD3IuJ(&yv0zVsn-w6jjIC`a8JkACp^oP23ZG2p2|T&d*ERmp zCGNd_#n3f|C?HVvNqt8>Fs} zg3aE#%k4aEp~3^OSz}0+GBFO|1{DV+uXwdW8W;FxdiFDfV$H-y=;faMfJ*f4ScxW7 zHX>r)sp!*Dth1|0gO-h4v`&+pAa!b>|3YlgZlEYWSAt+X_FAg6suV}Ztg1N9CYK#D zjF2n-P-D^Ub~{j%QUEzGG^&N!E;#t>?FF~+XzgBTuAFUeD?KcH-;#fnlqJIB$zc?~ zisn*H%i5R_)ktQIWplXu_R-m5WBDn&jan9S`!1cqF;w6H+0PWpfT(s8N2t3-?EobW zy}E67TRn*_p%?(d7BtL@dIro;Fn6gkm`om!V%-M+^h`aO<8H@_dXlwgbX5Y27{A*0 zx%G&%hW7({yX=lf*zlk#furc6gZ%a&YLDt}QyaC<=RU>CaH>C46kx}b+yTS#E{&8L8Go|Ql$iV;44 zTy;zRaDcs=7GjeHmJx*m4VawY!WGqm8WIl~4Qylu4)=xBbx}n2yGllV9W5uuClc{( zAQL*vY=wr}TM+JI$c?D^gjgv*KkWStag_Uz9#9Z_>0Sc%8)EZOk3ZvXC`+wnuY zM5j(7>xu?bMpf0>smmx^PC-{%Q?;@|BN-kkFa6ISN**4mi%E{5470%*3~Kf6|-;dT4l%}%lOn)D%3r91?{cvwV0$yASZC8{Af*YecudcKVC-XC#t8^o!R>Q(b@gN{9 zMXjH4FpB5xqWsFp{(|ncZq_&#nUk+e*t)eyt3!ToPhuZXY;Hz}m4DNk(s^-t8V@pa zS~!}7Gt;BRj4!uk(7L|9j~9rwA#n65-?-Ays=A&rRX>hR&B!wmY!b^hP$x+}(^pk* zEwYx2MjMna#yz2bzw`FmuZixE zWdlmsI?_*StJx65Kq~Z2nt?4^n+E2z7IXC;Sc^d^T{#83Y!aa_@6x*){gCN<BE(}K!YDR4@&$=9xY?KR~`9HcW2Bvq5$`= zy~ea?BPSk{x*rdRR&bB!sQy5^TIkj-?p?_CD*#?*gSz&VtKzM>nbFBr8yTU7vG}_R zOs?i4>^T6EP;b4TpF=D|uru!6YFIP-m-(THd$G&n((v*2EyfA6_YuTZPP(CO>UTY= zADX@)JT2a``A?%;mszpy@y`8Y2Wjw;*oBpXZnxH#j={QM3}w1>W0{+7$KvwwDeq?c((`qYp&Z>mD6kJm{*ZDy>pbP@F>T;C3R#p;ea1;>Afx3OtBiHPGAsgoKSH^=N`DY6q@6 z10O6e8W%aGGS*Bys`CiW*l4HV?n}+1s{%%v|Ge@_^7q(^;CUS8w#_o2Tpf4ln)98R zq$Dkl&Flf`n(z=1JcwPKor6&rKlRKoU%#802D`Ys(HSMI1^f{FY6QfOpL`qljSI(` z+H-Ssa>U?%!cy#W>%Fcsq^(Zw#<(}%BqMFlPEBMm49K*bDjIMS8UsqkbW-Ff|WZfv8f=6R^k43NPAIivY2FQsmE`YRltO_)H8ZP)7SsL^P*dX_0AohtCT zK>zPDs6gcT#4stZxLw-vL6OcMtgPen68!hKT*lB(EKiU8_S;~a>O28urq*UX+&p@3 zeWoBkB59{xd<{KX%VMas074gQe_S=LAv33CE}j;XuLLZC<~dwAoEsrbnpSns+?l&SewmzXcC@yM66lWY^}x_?(hg~>sohFp zCkA)FUoggAXJIpUgI+gefCoCAeCN)rASNVsW<8=?qpa_aVEcA;<-y6-KhKP984$cy ztL=#%Dy(QY{6ox1aMO#U{iS)Nfiog}}dk;c49-9}h2PY*3=uO~xAm!@N&Y z$PJvsN}BAf%82`Y)aU~udk~$o%K8)=jfD~6!89oNXn0nSsso-QY_Lk550~w`2-xM+ z&=YCwbpvWft7t60JKuuMO?oL%wxtbFgkK&5jY=F zj_*zuRZ4&ufcy~qVvC3LDI=4hp{YSrWUUI)7LZb_W3tuPhsbG2inOCi9bqsOaod5~ z+j!MRN>!^BP4BCbZREh8jc^R|*jtXV27&IWfk2C$xS2C5N9lmjbIlLIlg8MOIMBZ` zGHIs0S}#bXIM{kFxL6&Vli5n3Y_|s5fjqrJVjS!H#`(N1oP=d$6jW?>lalv_ufD_v z6cwL(jjh&Y+g387o3YUfTaVr-$Sa7Bwtbb3Yu;^E7;c}Xrdf;=S*a5AHj>_f z@n7{I#84hxN@i=hX=!#Icqcu2czo1$A$DI$Av#`>`g>?CIzTO#Dt``m^{z zTFR#kQiAF?+$mOXE$!(G=c;8Bhl81KiN^L%_>7fMBXc{0tQuT%)Y-M@eo$Cm?=kmC zb!^B{t2HMY5e9u0k3@Kcj3)aUduB2e{e5*zbaVr4xgr6;9mRb(@m1Ep+mzR*h`s=) ziaiIkt|QrFQ&E|ZHof-nfF|$QF>Izpd=US?qAf_-+2z9#5N<>aj*b~X6JSyZNO?T8 zKwo6wV(Q|>P6zT-iztTI6O@dWN|Of^WI1IlkRYo~zcV{MEgn>=oY)WeSwjiLCdJ18 zp~^)=13|2e!hWw&azV8B6+yu!f`Yy#EK7^|B!q~EB3+foR#iA3ahb=_U?g?OMZN0; zM8^=n>)J%gbuZ39?~1`aBE{iFTtJP~jZ=24X;uIdc#QLmzHqF1&Mtu*+UXwIUi*x8 zXz}9kv{#m=XkUe*gQ7hSTm^(#n4M{UoSh%Xj)pt2WCr&W9jRnpbvPPw^P|KPjoX4> zw(`4`T*>snGSIVTH|Hs#{@wd?R%yD&F2d{f(P~UkSWrCjP_Bt-oe=o|v3%9iy`Z64 zPWCJ6YT||A3k`G=kF@sT9p4|sM*<9clqcDkc6xru>}?il!MC~wP3&O@%dt8Hb5WEC z+}pcq`sox5Z$QV}JIQ7!$*tS-WjS+7W;Q6fGi8ds+F*3v>BGR7qlGLS#H*x!$zFHepO^I~O{O@IvwTAc|@YK5D(zf^SwpZkbfE*19 z+PQFlJ)ARWFxZ5)G$J5=!edgfQ2HA;z$<)jybgWXUmqRtn@4Tke#oOOA@xmylD7jC z+9qNCV-Txi5p@_(Qbx}I0kl(%nE;|7lYr*J?#{DN;S|W@IF854M>8$ps&n zn!;hY=B4#<*wVPO{)qk%B}j?yfjk`Pr?$@Wr4r!@J;3jM&x5P$eY*>g0SH!) z^jDj+hNws8DE-xl4Uv&H2LA>VgZkY?qpr{G zz*PWuOlL|H>Vpd6ZQ$X%p+tU%cZ<^BVB)Lbi4D=)l?5UdH5^K1JbrCYioOk7xAtws z2yCy?gd6LA3f#9uzK=O!pAvXZ?F?gP*pH^B2AU~d@44ldtfj=IO&{6!dx2Vi#-+k) zdyx*Mdt(Ful`Ib{tuoe1a#Cli(^Yco?3L?(N+p8=#P4v&I9AqYt_yh6|5+Y+h}Xs- zWgmEC)JHL!2=H6x0(&(bgxSr@uWwSMX3}uqc+eY(;%29bX!8Y$aC`g&ST2S;&Um9x z_RGoH-TS(=_9uKPow$Hy6hB>qCf1o*i-<>}ZIe3^?W``5lTU1W(eYAfc&%c=A=3*= za}8KU+S=Q&ks2y2KQ-nw#7y$c4)$pP!NJ1+sphh_5Nm3vJeT|s7wsUPUI`|v^JO)m zAvW$e?;kT#eg`Pf{*ckIdAp=yKeIhSw0`|Hu4!n<3{_WI8S;=GVKn9Ek)i6v#UUU@ zM{oUQpgj>yJZ*4r5PM{DQstal){U4l%aUqvo@7h)vJvZC4+n=@`Y*sQ{_y#U4@%mV6aqj)H1qRlZ9hcR1{t5Jl}ni zxSU$F14OEZw)UMKfEu!mp1z!tms1-QHJ3x-v*-98A*zgx&r6|KvaDWW~K$*?%owQc2>Ddbl z_k6ig7b}Qket`}U>vU>%HW)NB=1uw%qB@%f&{A|yF>jvtevG=C-g05=y^wSTBOY>I zhE7y3hJwX{=MtkdX7ruE6ClCMId`_X1XG{Bn+bcpeZ_d*-Q#U6x%=SRA{n;{Xbg{- zZwLvmrWJe9J$1-RH{{5?353$MQi>qWU%-bwYRpi%yc+}bthBBz)bmx>mcz-|qaa6( z#t3H^PS~XX&>;rBpd&H|y&6LvnXTD|EwloYwhxN_#s4WtYP8v6Q)?P2ayS7U+K&ty zD4AgYS%F7n5XQ#2Y`=P|Xr=m3m-+Cv0bVToV-nOIW|}HVJfdk%g-?wh&5;UT(u%$z z<9x@p?JDWz@0sU&EgfHX5nCHjV%C!qYh)0K({*=p_|quO7QEUNWHjXR)fxabS&xZj zvt*^!45|>#i^25e7kysxiV~x>7}SNixzc4UEL{c=m1hgW8_|;ilRc+w+a%!K8Xm7j z;!WEfZJ25lMv{v~2xXcySGZ`W46e4DY#eaBZkP>_Po4-c-WV8rSW2b)D`0xd@N_N= zL$Kk$VTS^4#@l2sp#xj-5Ufy*;!{OsY19V^$SgF@Z?9 z+aPk5-(ojj_Q{bf7wJ2>m6Xr^va#M!M$f(W=rkcdKJ?QZ9TwI?o#hnMKtUm<)z14X zAPYPZhbAKET%W)oP?BFzlA4+-X}@9y#=AN=^LC=&U)DLyctDLG-1*>^|- z{?+!HtH=Q53p#P5)LD|mx-QmQNBH@y?DV0>8}%LsTmc=pmOr-e*bod7Od5BizU~%o z2G0^z7D5WL!uo8>a2@IzX6p6av6oJl?Q6 zK~rCae(Ba?_tC{VEzoX5B~mx2mBE4ZtOcoJfa_@>{+S>7P`G!yXi#Ecw$W}+T9`fb zeve8@qRGt7jw$*~WVmlp$ZF2(1BV7;hW9l@yuo`eeIJGTlCk}82!6+pQcNlE)Q!7X*0!cfVRVc$bOS&7}ALW7o2!h zn96i4RYLyP**T@!^9F)vQxT7fr_doOJF#NI2|7*mAVSgyuoAJY=GJH40d(bH0Ky#l zE;kM3gwdy$$B2>lo`jpNx@`iO$7Lt*A38f|PI57AG*O0~L%j&PB|J{?K${eMi!=fJ zSfJ$eGn@he27^A9 z%=t|W1!v;F5JihA?C?oOgKNenSZi;GnA+T~3{VOpgB-g!ALeuJw*6tFf!N8;oUO4r z326zNr}c8eH;Wzk`h6IsxoH^)Rupb;`-F)AM zC?sS>zD^xbUuor)G46#ddKDpAXfL|RIx7N8_VV(CN3d;cPr+8e^YtJ$&^7{@f*lE; zebg;e2-2(S=;&M={`De$*R~V^t!?q~9u0_qMwsh}7MwHJfA-ryOG_1+=lJC0q}Hs) zLO$vwjY}W8?T73DeGkPFoznnTSE6?UNxc;#zwRm_voOy2K=56Miv}}MPECee{+6>t zW*mVo-1L$n4`3Jagaf>bP;DR3ZH~H(e2bUt2ZxHo(q*wD+(f(+8SaEa;=e<`G7mZU zeENOdq~{J~Z#=yD4pUgsAjVeDw!gXY8a-K6JO_HF<)3&Cz0UzV2NoLRq(*zlMb&sB zdH^Mk8dwI3r{lT_#9#L)h1&_XVxjmscSma$QDZrYP2ltiz02T zDB2>Qw_BfxE5{yip^yw8U;zFyt>nZR209NTxv~O>kt!3lqQB`*JfO$#-wiHlWilJ{Fa_c(RKug$XnwU}TagFQd`? z7%Q$}?sPeAhzC$92_q--1l#D?AsDDuz9&{DIFX=lGIa5I-lo32oKc=-6TQgQfHI`l zsClS-DY%%Rw{0R<-Io<5^FevzScEmq=gpPdj*7{`g%N82y$<+n1@Or&|98$yXNv`I zNiDyoRkwZqLpHuay{GNr`^Ta$Jujoy)#V>`9zhJ^GG%KBx`;yFb5#f4SrOW5v5E0y z-5+o4``en-Y3<48r=Cp;&>7ncvLq)WTaICf271Fr_Kb6;{JGGq^r{H5p?RiX0zttM zWj(rQ&z>D5LUo3GHcx8B1%;)iVc0MrvrA7%8!qnV(NL1kauNNPfx8!VhtI5y-8^Cs zZMs!V`S!C*3j-5p?TJ*8b8$GF0lPUQ;{x;cTB%(S=sU{(#iBW2*raO^~ zT1Hi|1z+#Dgf216^7wtstX0e{3hjI@0t~4K4VP3~`jTPZU*tvdy$Af!&jhgChvSqR z3%rL%R5pq{Mf})dW#gKL@H}@)BgEtAGI&fP4iLiqrXVL1n~@<0g*@{q`_D7?+@*o# z_n6s?s#c09ImE`Z5fRtBiDq8vjDF) z;+(HK=o^&;Vy5nk)S5)Qa00^w@6!X{2OeT%#h+nQV1+ z^Dl8xqpqW1^iLqPEw;o~nf5ev{ayi}bstd4z}(l$ukG7yx#dSWqNlGL`j=D~?(QmO zepusy;N9Odvkoh8Gd~_flUY29c9h(yWKM|1Vtnd>4A6pQg6uQ}LF2P+C=$@!arXh^ zboSypaM+|LY?n{c{SN(_!<~AS_M^MY@u6&02oe|Wl$9CeOvyw1C%Kc_Bi3JWbHHi1 z#@_y_K`*lJs?}e0u&tp$uQmvUc%6O`z|!2xtYu}!y%r9K>EO^^f3za~iw-Cq)DtEx z4GPl}9#OzFe!I+%A%)Sc!~~Oxh~TOaNvN|xz{x2-e>-E?k_Kc z02mL`yK>#7|NIO(b;vvi^Yrx@#Wyf`b^SXP%PZ@p0Vt_D&0V{tm|viy)(Kt{fYfOEOqeuISY|Xdv@?DOJ+z`GX*}#iA&$GpY0{Tuqo)hsR_ix{%_Ad>SLb0fNGm*Fo-cgOx=O zn?2VH( zV9OuC>GuA#ZFRXRyZu&tUMLJ*g@KL%@Qb1KG>VW;@m)i)U#z)S^7!~8s_TuB;Ol!b z%jtR1SRXDr>bec^_M(FK0cic>YppbMOI(7tS@4E{5EBcMfR{US1yW$&`8*8?k5ok9 zJt@MTDMcW`A*ok)c0L|(Ca^Gq8DZn_f&-@VV@j<`jixr$jT$>2yf?eLf7@QcTRhWO zXDJULH&G1G9%wrVlaTu75%T!pj-T=WC4*(FfYXZCmr=^fIY`O=*r3{Gg+SduV-|w( z=zx$JU#rQSSo=}=ynAC=6W6*mO}_l|!mh@B#m>`e1YP(nHy4c3+7<~ghr&xog?+xu z(|SGTIc#=hWM~JO;3H;d&`qUoB<$_sC5A1eWZ=6e|GZ}S(Xm*?%uf;n#a8LubQIPc z6SLm!Es3SYz@M-XgLW-9s8ANJG`#t7pAeJ1B9xvS_k|yj!yYQ|%N2BxQbMR=bQns4 z4Y#!S)lW_Ek1Q9YPxxkw6JK81xvk-g<-$dL1I@*A-1aNr<+TW%&NM#q@1h^Zp`XUC zU|>QMJJ_rDe7UN=GElvo)=yDj%HXP@!69)sWzk=Tbngh_WL%WFZzhw|;`@`eGLOWYI^!)8} zpsz?YfJw(Ay`E0>*B%j7HPKdYF*R~=a}on(1NGX3P>@64aD5%mQM}yrn?-PQa;bS2 zbsg(^j81)rv@Bj^3dK*W#n|kt-Q5+SuD&c!6trT*jnoD>7+JXGDj8lThmK4=ub?Mq zK+sNUI_0s)rd3}= zCQtT~0)7S?ou>8(oHWDLHQoP`GUfI$ax@?yaXI%n{BA)bJ1z{aEKOS)8|$n347s$Z zCM&$m2Duzf=r7HRnof{jP+z}6l|GGO&<%n6&5c7xSK|mzrW&NgZ7uV}fS9nyI*^!O`L&xU%&sP2t{(OeBMP9tvTD-q`HVW7zSX8q%KtNTix$rqTr*Lp zsDh*O0LjW2o0Q1+gfdCe5^+#?c*>um^7)`Rd-O78augt?;kRi~gjIZG!~uGlL}|bO z`a)u7&*wMw=ytwIe&pX}gdwM8w|TU~EfcGup&`oyU-$?A)YdIcM6g$Xj3of+@(NML zb&1PENQIB{A{3d&&yc_qm?J}xZHcZueBA#+1%G8?KeY{><* zFif_1pB2$@8Kv9OunZ3Z7qDXRZbf^k0Be$oh`ec6of{iY2fOwWZAKN=!aW&;AS152 zx*cQPw(ox)UZ#~aVFEgl4SI}?3@j_*0h{jEs3NBTC_fAjMjriim(bTe_pKd5OT#GR{MX#IEpR-gigjK*;=9C`Xd~%Jt(D-;79kmnqYPt= z`uU(==;O-QPgJp1^zaDb14C;FZtTSW!_!$swYhd%I9MoN+^s-yr$}*VDekT*?(Qz7 zI0T2{+M>bT-QB&#-Q7;Q_rK4`UG9?c$-Cxy=A7==-tNZ^l_)PumPW?Ts7&6)w2N*1 z8?AuEPj|`wuu0Tb{kHIV&!9Dzo9!%ReZnDa8YGv2hRYgxg%iqirCu z6ziDhw?y~`<4C9j{!s#m3L{{LF!t*=h+Zv0UB;fjH16Raf{Mi7QoehqEXD?2LOg>C zv5J8~aN9R!Uf~~-{U95$Eoo&!d;e^AGec0b>EL_GUve;~0C@J6s?G3-4Fg?IU0B?P z>!A>D*F#=oO1*-TLd`;n`S+Dg%IX7Kc@Tz0Z)m)LBM$U3QtImJG9l@htz}GB0>_mv z#3y*31YB_tc1yT>dV~++yelhX%(9E}An~Dbzd7-;6OHB(vn(#LZ@bb68oQ#hwzY++ z{wY6bM8@Z-IS88G^(oi@xl#i@J-l~wTP8cJv+f3cJg)@=9g~6)%Kde>%2)YuL9@`9 zCF(3b1*V16RKUtWDD~kb-oiHtw()Kw>_5aAvT?Z!4=cYedkrhidyw!P=J+%Nwsa}K!*R--j622XV=!J<)sq^m}=dL+&@Gi?}BuKl{6g9AszG%==HxOX2uHK~ljiO|UW2O=7Fe5c1 z?9gjI?;Xjo#g*58+7iw#P0w&+{n`RY(FEWuX)(d`^M8A;Iexe?fQJ#M6U}?4<`KSb zjnRICO6L2DLwq8dfY|f!!7BBlq3aWf?YJ*6JzYqm$j5K_QH!lkgEC zyOfxD$eqU`WG6Fi{k_4u;Ja?@wW(=M`uOe=@}4tfHmOe!=)EnT9tw@=t9m&dW>n%= z(l_UQfV|~=S=q+0_ERR{PQ8>$y;PvM81=%s#{2ibHxbv_+8pgu98H?tP8EHVs{v^G zzV`{xe9rD+D1 zMEC)2OpZ%p`HlG-;8`hg08%T^Mea0albHFQO|llU+=bk!6Lgcd>7-iZvLpDwl=d>4Jmz~|v>%hQnh6n`)EzOr=yA_J!*pb4xX zmyKeT|j21Dx-aF3&P&QY*rY$a%Xzh$#p@t*4`d6+1L_9v> zV%n4L@esc0$n@%_LuR0(Aq&rq08g;_zco$r*8KF%FrP4+;ZZ78gA675lb->3bQHnt z4H&K$GrGpYj_BkyArq=#X>uXKs1Ik8*U?fJ(;LX`@H>g7p3tWYySGJL^8Pm#;{ zbS=nae0vQ9$P#+S3YV5hoa!*k@~zF!wr&)!My^iXK02wV4&eG+@u zi=d8STYd@Mb5K=Zj`2D*ZalIfg~@?)GUZcy?;SZ2B7&i1QHtMWB(C7c?xz*$D|}AU zMLLsE#>&_oDvJlKILks#BK{rUO$Ysf{yf7;6_XgFfVx`YPu{tw3mX;d}xA#)HS>U|gX>~rl zvkCe3-lPZySw;7UVV)z{)-kwqJ8Ex{o7U_chB&E|uB{1%;CJ@M%E%HB3lCsEK05a6 zxuRGQC|e?gbf!O~oSEXPvSFu!0o0^)ScRS<3uhySmhx`gp#Su)lSWVX=*W!6$^v&a zHE}|=;HsIiahJI4i;-hB6WItJiAv?~q4h&3dmP~(`hy6-b{!?%6j^0bdN!W}Jrq`a z;9y&rEeF!9`iSS(QR%Ya_I2)lkh-wq+_Lm2=WVU=G}XRK1{{8_6pE-nM% zPWr70YS1YB2fv3C9RL>}Se_K9O!V81={&3=MN7AC@X%wO9rbL?Cv%)&woA-OpSE>VB3M?da` zkPzZB(~f5buh`)ME;;edhY4)o^)}x2;{2uzzV7JdEnsbLQM0g7EGf*lmn8q*GI<2e%<<@ zVrXQPkMGZr+FTMP$v$e?;ms{Wc^u(94S5C=SUAIz0&-Lmmwc-#<-Au>b9+B{$3<|( ze$Fwo94uBx%Q|JB-ySWmqOAK~74_@+nDjgdY_r45kziN>Pem(ACQhP_m7ZNWu6FlgjR$?3B%#8`r7a4iA({?Cn4Y$&fJ zTnt1@S;NfxnRA02kLvfn2bjWHViN`Hh@bj|g|iE0$7VUOXIS_RmI2a~wqrljcI%6t z=FB@pp1@6I+&6OERW7prQ8F7whUV8o)5asQO2ap=p3e!?U$f*QECZ-7f60zENLv~F z!ude+r?pu&DoWCd-5aKidc5?}=&(BNXFd42{9>QyJ&e$t^`;HMowHiCraaN9ZHN7d=|!I31A#^N4L7)mD^vOWn2NMT_Ro3o~Pz`a}w`?UxCrzI&p7P z1xOmQR|vV{o|pEtjDrt!;71OdMVD+R>X@w79OmQ)==g9JA!Mijn2Q&Mdj(89Pi&bHRS&Sh^TRR!`{m1*-)txyzj7g zgrhsmaa`N<|8zAl@arkY@9~qq-zJlP3FvAX7jzPNaL6kBN^RHnjP5NjQ_zqtA|-(# zHzqARCUk#rLq;dA3*G}$a=N2xNz1%Vkv(IzB}FJ%{QQtsVvYBio%XclH9&j(Py;f+ z){+9Xio;akjc^`uj2|20AJb?@Ak+c> z%A$9tMkgnWboy698|~Vs3zG*f&K@RHRQ{mBC=Bo1(j(;+xnT=%WSNFz(&v~a7)q;h z6Ipv%eH=P;H8%cKuG>U+nnP}8;DtukE(n4TDZXzwb@Fw?G4lPZ&8)v%n9cS%zS?L0 zjaon_=V$3x$W*S{$ONmI#p+cI=8GtJ-o;_IlAUkXuZz`vM5A~B#|0I(aHh`E%4exR z7h2zPKWXT+I(syN{`6&cP_a;c9c;>Y{f*cgeIo|bI}B;h*;?MOe7=o&&2_BOUEgQ4 zW(!GeX9Ea8wMk-zuvT5aD?3&Rpn3ds_-4%K+}X063qM~^tZ{(TpJ1_xN-3W7c_rNN zlzx}m#yz}DmyrWP0n-8S&%mHOQK`-L=WCSopXvB|;v^Ya)0G6@!jW58IMVHHV+L1$ z`tQx(s12kcM*P-;J~D^4RVbJADD3nYy_65PUSDSLSs$XU1~*lX9Po;K(>;kB7fb&P?O)7IliZRJpU>3&c0-G(Ubz< z?`_;CkLubb&QdG8w&*5@p06gU4-1@EVWeiS(R=vfW8%%CDdmCTR$D9@7Ijd|3B)tJ zL=W?GM+GwBQ42O{xl+$a0`J0NYl^`hE2j3T<8i7bHieIafg{UfwrHQ*1Ocq}aqL zS>2Vm$)elvf${uqr^-iTRdL&dGjJeSbhuwzjn zEKV{@0c7OBH$2AngD(Z^N2|;A-3!ajl8@VCz6gT z!s|5eAI30slb?g^VVUl*B)WKB?^;(&sPdMmIRAa5aL9b%tJ37%bwX)6?z0_5e^T}q+r=)Rnc+K zmufCt-T1|#{$3Rr7#MIphCizFcyY4{L}V!TyEjEi7FsYOS-k)`d~ad68z}Th)+SLn zvjuS*La4^py{?Ix?>+6X>g1{oUbPr?tcMl4R>?eLyh(hK@9(tw@=*7~;+JYHI)Im3 zNaDwjjjWfq6Q<{ql9Fu5`$-xqe;PxkJ;i(i5I+7t`%h*@!T#0C1Hf94EugRQEdS3= z`JcUV@CcyOps#4fE9Obg$H!*|kkU!F9Yl+`D(l-_Mcb%st7d`{(68@aa^UVtNFnn< zz=gk~-{XF@a~QD4pXB_Wp+Ujd?~3RC{6&b~LOyO_L~ja}uL=z*(oiDkc?+q}K~*uP zrS=w>(ilPWBgPnqk#FWQ*h_WYjD0|0>9!$mdD0gx57w{YCutDDSqUnD69sF5Niv0q zSRHG-njqUZ&OV@&vU|}&{z0N8p)@U`y73|dZWI+3?&{OlVM|378565J03*u75b%bn zG9(Dw((pM3dQ9m+NeV2$Ce5O?Y_-oW3tL8sI!%F8%&daY zz3fZ3@QV`eKx|l(|Eomj0ri;`p=y0Lc@Djh9&{I(AX9LuxSi7BVu&{nw7X;c5klRf zheu7zDGDT(R^v~Cdop&!%Fo|Av9imEKW%$ZW)1`~X6 z*tdpF`iy{)knHl2pv?g0$b{H9*U}Siz}HfhC+#0UHL%vbs(tcjELJ;2Qr^F zujK50S8;duP~5`J%>_zppv$u6`1S~RW5D}b4Qqqssh}We>PGBC;r{q?`kF0t1KZI4 zw2ZL%lLq3IL-aQ0xZf-;F8AG{-&ryg*Xy+h51Np!dE$gyO zo=eAh{7>9B9=q~w$6?$XI(P+VjW0d>oV=&&*gq#UnM_3277Tz^X@oBF_4S$>Y-!`9 z49anHFFC(?Arf@JvaynV*RDQ z=FH&Kctnr8@3i~jnHvAQ6+!W4BAos__rR&u{}f*LCPMoF5<}UKno?`sjshi;%qycA zSYesr*PWstc-UC!s&}H0{~)23do)K420d_9&;guty0rSMheb3k%iZsQ1C^y>gHhG5 zY%(nz^euA5ONPdC^qPH?U+OTkMMaET;6Kw!Yl^f#{oX?u$YC})s9^mKRVbmzQ=-i| zato=s___u`Pkr)sY8X2qVuWQ)y?Eb4GftknV9Nd#W1*Xa|1F(nt3DR~9Bpi8pNKFa z|8fHAo&W$e>vrV_oPE8uGAw8iQvUus`NJ71z#d61%^yD*pO7ATS+s~fi5X_F^NmTa3f*Ya5LaauAaTDe zEvjx|WfcBTJNQ`4nd=jSe6yz}Lv zTqCf-5LHenP&CsQDr=z`PZumZ!K9}eI<|-)9C?Y2lG~}BWYw3sC0~Gx`7N%jr5+v_ z#Nd7&U9`@JCh7{*$~C?*-QL<@#TS9^@b?!%&~Jbpp)nux(g7Fb6p2X(=%*kp1>_2R)R82GyiZBS5c1Z5risS8dF>KU5H6?-je#%jgPq_T`?5WlBoTrz?OjtfB zWAxYwe>vdt4zB0ClM|>F(l4K`I!^Eb9Mk5oUA1cK`J3-s)%g|m%gr$BjF2oIPrctu z2EQ_LjO__O^qs|R1Z-GWf%f=vh-EZu^=y2*Bp+8}8p(ORmw-=b9Mz>unT&vsG?x!dvip`~W`X*dTU9PQa z6aB&D=0{b1WX&&i_gikbgy_$HxhB7yoN%$hQX?JUP|xS9A^E}RQ<2)I(vM_!1vEwx zS&02DTk}t;>qe zqL`({T!(;+lb$d11CNe6gp)H1bY3^7JVGp9DUEE*N)x_=>C1^MI|Niu{kgZ zzPN!OWZC>Dm#3M1z>e}ks+IIT@Z3i23~$VBEfZGHz-`FunmWI?x0!7~XUaD`l@0x2ZUc&V`0Kk~{=26=CPmPtL*9{2`%&oIPTc`7IMUgQQa&~my`OM0~IDh2aP z7d~sxjPg=GiBoIq>fOshwSq?V$C4jORb$@jq5j4Ki%Z7)G(QXJ=iH%{UpQO4!%)LU z0wPC%cb+*F+rU%l`EZP|2yEN>3CArN8@@F7S_hat|3=#V5X!6Sb96WZLa>4OvA z<{_7Qv~8VFA*KaeY1j!V(^TlvlIaKut(CON6WQ1|*4v4nG?q$pU}U@{SMVR_h%!v~ zaM3rNjOBb`f@BDauQ|4VRM+-`wYOF|9*|mk{7%jAQCX1i12>cJ*!|Y#xT;ce<;b;f z0Ygtggoaw@1m>^LiUpA)2KsQv2(v@(?NhVnANl9( zSFLtbzzUk&z*}-ai?Idgx^ZmOjf;$eINz4A*{nY^qJ3TvzdF25RCI614-;5H@24op z-0|#ex6DfC547vkN&6XRGvet8Ta)9p_hDI80wP^7QO>U=_G0+S%#2btfZD^do4@I2Ehs1Hiz@x6RQPZxQn@ zKY>fDu~kqISu!u5g)ly8s`W|MmHRnm5x=&4YP zY7JeT_+pjlY=dZR`0657O6O07y)SE9(BG!`wm=QEhqFgOL29R-|%vIN@&Z-}kc_ zUqfMq?TwsP$LAlZGhQi6xlXk4 zF)DIrM?EYA@eJfg9^URMW0c{u!Og|40@Yk6GHetb4wCa4UEm6GVx zm~*fae^8R0@z^qP8?bU$y*AnW_wM@{4}%5}&JZ{(_z%qype0P{^Cv}&X#O5}hZ+j= z*{Oe(47OwJS9xvpn5a|j3s=6IOQ|1lAa`4wk+3c4cccv#&M{Sh(m7~nMu;fk+SzI4 za1Lzjs-9hCa;WgKhRcy0$@VH5LX2|BBSVQLuqKNM7#Bq^rT&g6ec6$Jh1M8IBTS7u z`un2&`I67W!>-o2uP!ueHy<_1OHxWa|0ymjtka1nwR6M4r?Yjm=3^7P=R8HDc@+RuvFm)zIt9oYJ$F1|*ka-2^YDKJ%q7OPG zM$A~>a$>B-ed1?kxaq?rb)I!kPw8A5?Ow_5FCy$r9&fA>UVI-0`-kAJplAL>zgKcU zz1es4h>!CMLK>G~o7DJt8g>T&YiIO_4k;b9Db^$r>VgD0%A6{%TUYwvc6$tfiH;~> z!c*tvYPJ4i?2&u`njaajnvf{E!=o#;h_^CcKYU}n=F=(Q=;EaIQfmA(Wz;~nOvxo6 ztvt<%yCCUd#$g>LCU`?H#E#_emIV!C52P7+tVcjy;16&KzOj!HiRqWGhX%; zVbkr40h00MxO&CMjFut8ku3MI~N2)P{f*JFgD6 zKu#EnGcyKuwAfXz=pUc0tul#@?LE5sY!D#Q>?+x>?baGU(a+30y9P7?mNY3ZmQ0<%=^jmV=m2yDm6iC zETqEpv~7{3$^Jl~`ZThD#;CROrq}bs7U3I()pCHoI^)k?=gr?W5`UD+B1b7l^+X+8 zxugQ3-U~PrGp$WZ^%pcmS?m^)%TNk=Kt`DbN=ZcwMyrydYlg3t&-bFJoNQLOuCN6> zb|Nq0sW@pShSkD{OFmIha`On&JLI&2U=fFRH5@09UbKJ${;~5_hxi?im8`;+d?CJn z2fK<|PLc6xhXIjgWOU;>u_?S0FB#t(jF%+pP^7}_bIv|gz_hB~Tv4?eh zvVo7>9z++=I7?{#a~4SWXFpX7Jbt45sL0zAkw!!gw_mqJyhjcTw?dskdR*u0Teuz@ zmRao+k{*D6`WXjN6K+>wiVv2d?`03I(N2Q$A~T~|Z-_!v&O?hOCUeo{><|?w^OBt9 ztNM68nJhnGL&7tR&}obZviGV2Nra4bsE>9$d)?05_h|}~X>4!fa&UoIWdBs!WAp=J zig7ZSSp1-vn6<1Ox3Cmpo8Xm9aS zYY{NZM;gz^bR#lEX;@e||9%4vE(L=BT zpZMPM)vjDz+wGv9@EZZdER+0hzu2iC#@m>0_j*9|CWxnc&vG#AUzHOk zJE^enO9VyAE|S4=QIQsctnkCvL_1j6XPQ@i7|qtsxWo*!IqTdD1bz7~9(q0mRBfK3 zvT|6EFvDNsEYe)Yz_7|14(mpy{|w?){s;{&?Y-ta?cRN8Dh=tBRHq zgRx{Pp~Jdq;l0x)R%j`j+W`R$ zf6A?Xf`EdYLbCn9<}`ldt%(*NU$Nw$ld`muxKO_-m+8wxRDomEvj*?&T8;b~99Lmp zGDE{WB{s~^%hXiNk(V>weprr&qG@qoXXj6gh&6RJ9X!6QPdmg(t%cQR{7fuTFwO7V zk!WH@Tp`H?gTaVJaU`>huaB=+Y3>c9(zpJQNRjsT;1R*b_|4e2Txc>#D7!8;H0Q%RD6wWZ_{%>fj&?ig@ zWKD0T^=D?q_J%j=c-Tvv$oANtH9`ILTT5l&>G}7IuRDTGe02CD$A`KUtt$Oz52fX> zWsgs2p{;JEieo4GLqqHrSZEXr>t4td_K}|U!2oKq!1~`XuJ<9Q`&#(-J13N>KV0I= ze_-7$vykO;FBu#%YC(+4``ihvmiiVZf;&@%3yrkjj5DOczodww}WdpptB`pWUN}z5T?TpQlp+IrQ?!nXdzhQ zGBNx&DPX~yP*O%FsqaC%8MWtVMHltYO_A{MTG}7wMBziJ3NBLmliw|)tzV}&NhrDn zkB8b@)zld0A?y0C*$bX+*LMPNta^cNkLX9qmW)VHUF!_hoF6E+yk^=w5GqtwIAQOv(wyLSNB{r@hOipFZOh9;u}M8<(OuQu z+N-1r@02Xkp&9@gS5A~2&PPJ+0%;xH@3nu7;g7@veg$X8$Cz6xG7!Fkz+TSlaL@m1eLnaJh2*ZOZ7#pxQkl zutJct+VgwO~t#zZ%2`%ohzpez9f z54LiF8fDi*DD7Kti1eEo+5>3ddMVT)ns9dquWOc@k137ted>GJ%2|WaWVsz!iVP|+ zf@X**?6aP5+uDPSGB4VF?X|p>yk!aZeur$Z2CVO&_ajhc+D=;vWH<7_zO1>If1*T( zIjrsZ((Z@BKq}55@T3{Nq|bjPeiO{&rST=CRf?J#CbO;W#gU>!)U|LSxktZ)lccOX zCE_=`o5`iPe`EXVi-0SBvERRMK=(1uidg`N8Rj|t6x{Uq-;$p=KA><)jE0r&EbFm8 z;%CB)jpY@1WOO6IdPT;v^NEz?wzuP5O6=@s5O~S&Y$=7z_E^0&NUV3U7gt|4@8X~> z4p-ym?#8lF5e(Eacb^qgK9!gIp7I2w;VJLjY2gIdKRk?mCCofi+UV%1@Zpn9L*u>M z7O`smRq|W=S>=@Os^E-2OlwUNv9;gKFW-L*68a2R@+Ff zQ*hOdl@5dB-U>d+s*9@SZT~W>y^hPAp zYTgzye1Yl#vLm+(i;6+KQ-#0Tn8|hGM)b`y+U%%f1|wpGQ!_JvewS;=9!f@U;CJ3= zy9)*RZ6`v$e|9*6 z#M*n6=VI_oulv@mWMNyr7%O^H5~KA-d_X_b`OwTlPTT3*b~o(N`@Uf2nrr}WIwn=t zI*_I}IM@*o_XkNzN?BDi8{nveQpn1Z+GGP7*8hwdeq8tO#2mh6KIX z?HR(a=2@l=z!=IkzYKVtmxsh*%d}sFWG|d(;D=TW;kfbF8;xPewO2*}b8-M4j!Z=g z&6^H8w|)ZS8I&ZwFU2I^zDPiQ6)ft6#ML(ZUl%2zY9H_KMouOnrE;8t4OT*7@j;|g zEq#3AkAdWJ@@Hlx-pJ7pKt%Dg8I0=4>)}hRLJg?M^N@c{GuZqy`g@P_0&hO>_-!yue^;f-kT~>qy z{5N+2js1g0uY+%?d5dM<#ZMO$E$6>5;eP;*XP-1pnGMa<9F41co?_ga^+hMBJ8&~1 zLmE7rRnl+)0({)LPyT)les7nVbZ@$*S(!RU3NuojlA59=8^aN=+A#f6iO7|vRvEe5 z`jCK2L_HWx8|p}j0qGoUbCg8Hwp(iC zX(*d9&yN_WuIk3Nvt0vU#tUhsxJ)V?3=G6-_AhAlxPLBR^*|nI@!A#AERGHcty`iZ z;0kss=FB&Y+Tcrqt3CmT>Z3GR)EGTWizLErHnU60S2Uu$l-hu$OyN5t5;(@;0fYz$ zri$qm1|SM=4E9!He{a(SpNE&`EE-xKnKkcSy?f}M2f*6~DXhF%GSNXjfrHNok`o2R zyGl|njW5TR_@aDMI5!Z!f5KEbY+Y|fkf_LdI9|5%RYmw>EV0_=u!*VIM?P4k%{Uz% zY)V#cw3nZF1r#A@=*%;PE zBUI~-NWI)TUMXma(<&8}GL(6nz|m(l>O`Be32AYZX20+1>gFK@jJTMoswV_7FHk^v zXG}ZEFcs4|faR!4=@YA(%D@s0uMUEQA2z}KGluB;_6|2PQKSWGcFNRQUEs?S6v&Ha zXsB>&S^V)gm*q^r6ofoZNb0J}*dU}jwDG|LBf2$p(c}JT8ZvXwK;4s{z(k_8J2!+y zcyN-?kWMO%6nP2%7&Ca3uH;?^klI4J4hc`9kpp_h{Aod%V=YH}0qc$-hvUKiy4;(G zSM36J{yDX=(yp}Mix_X$nyS0TPq1=z{B!M0B;u6V;`|Vq{t9i<8=NuojN&vkO`k2f z78aOSc~~?_i)g|yR6_RgC$tjW)nOI)`!7tuy^hfR>D#^aV@~qF)7C#2C_U%I{2bGx zo3XT;L0XO2!VRUSs$V=CJIHx<-(NC5uqyQ|9RxFaBOuYGp0f zQtH$3ed4Ar6Y~{B1Z^-nP-RTtdc9Gn*y_NsUY``kz!&TR+zN{%>M{HQ#;l+Vm~=`}f-6D0q((RcGJlYp$c~>d@UEZs_dqgD^%nm_-e$ za_(DQz=NN%^oG7*pfa5peaNqNa;i2#e3B(J&RK#hMH)yJyWz(0*yS=N#6U%5m`K&{ zNV@34Aj26x-vm$hf}HIjgfrF_wgG-uQ!iS#^ONJ%3p{=40>-w!%T>svNykyL?m{Hg z_3Z{)@~=#5(^Pz@(qwLStARCVt_Ue#K79_f`B?H457BEwWnDBngO^WI5Wd%RallVm zksp(nZc3Z?t*VxxWYyM&_S_Kk33fm=m?0j6WivO{`f?@~5IbB18Xe}CSNJG_z|KGe zP0+`87vBuUZVj_I{jU=rWXJXKrjA!yiIpod9Ul@kwl9KFc*~ROX|#&;4%g{v<-oka zNS{oqmX?-{#MQf*mM>+GdBV_fXBhR2cVM{@yWgVSJEV&muHk53E5oNt(k~`K|Nir! z=+BewYcrVME~AP}5q7*Igg)A2BW!V8SiDapj35heNPSvEv+VFyI&mpbte2HnwJTn^ zAcxLC0&!%%W_BkMnGA-P^{4;W^pq3|^4D#Z{T`Q8{|b~7CDhL_!>&IiLVBSArw9CU zNe05cuV;8hnU?e&wTTxJUZD>@$aru6AD+s5{hM}ozy945?f(@!Hn{R~mOlr7n6?q_ ziLRD91ax>>&lHL5Jp0ad66xI^IOqm>xhJSx>irV^2iy^eMm!#e5~_cW1e9?K&Cmvs zj&jVco3t*V-3#yw(nsAwq$Ldt;d6yC4yI?awz~>9sAlza-sSly{8UI9-g%rK&rmT? zQ&$~$2{L|%0<_QxUUQe|p`rd&PeP!{Ox0&D-VP1GD@5&~?J2tatfDe(dN7xCgaQ-3 zkU~fA4Q@An_6BfIj>k<^-*kM%>zn8=FBViE(%GcuY_gEz@5A3zvAuBmt$$q!Y3#f6 z9AqreM&hl5L)D}AX4`9Wns?oY2?~iT|0&;2tpQm9leY?*~JZ`xij+h65$?S+j= zX%)y+I`pwRJ^>S{l2BlqY|2J24ob{a)6mfB>P>v~g3iV{+@Fz9k;TT~5@#H=944s} zk%#w5e1roGh48TniWE_#kPSS9_lQsvCZ$-_H2u@WzTjV~{zQoh#d%!Hhus1l71PYig;%v|c}ecDw;1GD;u&L#-P#prHR z5btg5bsMGw?(!vb#i@tv_Ie|g)){-@(=o=nZ?%O}Gp2|8{jn8$~2zno|zSd-wRFWaQ> zDk@XV)yH;L<9$*=@ZzjS&c?D!4{~QQ_PQu(X z(?gzoVNbL$$oc#qe<3Pk6ePsvi1InYJI*VrZ8Ub^-3{M7Xj}H;B)|LY5ONcI?B|ls@WpVv;P0sr47DO|4U)Y%;`4P{hNPO zxvS*=_YpvKVR=Fjf`g_e-2&|@M@WD&sRAt=*_!Vk+_y|*C)HKLd6PN8`tD##IXzK; zt5*l!VaLXN3sgCSJF>wF1hht}O~r(4Ks~CdS`t_@Il*O)?{0$qFGak9WJPm5Jq>YQ zl)A%b=b#27K^K$Zp@ecrhmy<|eB6ukurRT+9E^)t<2Xf6PG~L6kc><(4p#006N%=2 zT_?KEHS9I&N4PW!IAfdd-EOs|HHO$%rdDnNpk{vL;-zIW{6qpP*^YOd{5o$$)*3y! z?>x^Lfg<#ar}%hLFf#-N*>5oyLOM@-<6U60AFp;~IM{X&KLm5TtQiROZYmIJ@j;U} z&^D}0>~~`P9u%dz)Dx0r7@yvVcXh#()-vocw7MJzq{JlGT{NFnyrm(uLJI8f=|w@o z+1cqBStW@Rh635p!OeH@ z#dvis=JvM4C*l?-z8h{%*e-lLFOMn?8a@qAZwc6NY=&NxK{>5D+btWuZAZd@2voq2 z1S52e7{$mH^0xa2Omj&E-N3MfFS~*w66$pyC5S5(c)OD76GLx(-Q;oc&b*09NWMKr znIEx^*1cclT6b7K=y2$~#Jd!I{X_VxuT;WO3zrEXc_MZ`Al>Q3I`q*gEtYb0eml?~ z<2k%UspZRe4wwUIOZzsG^tdXi4kH}AuXubF%}1-4yG`vqQi4F?_`4tPsG-YFf#;wE z=1Iq5d>uxrom!-r4!#j#5nT$8^@WA1y{6i^>+S0iehSHSLD-%xerihJAP$K{R88EG zT**aG*^bp=4HjH8NwfAWl2N)O!NJ)SQxXL3Ob%!}p>O799Of$1+DW|fIw>&gP|{Kv#|t+NJj|uykxMKS{3qo{{Gf1r!v%`Yacd%zhk;tm)bPei=R8vDVdk4)b6v%=PxF8)}Cn}hK- z%cViwmkWsrABadn-`g0ab_B-R1YDHZwGoR@34(@WT!29a6kW$Vg+Xx7Dp52J8qht)!+B^oy8&ZOVSTW))l#mQ=BSNnS2MW}(3*SA7Es>P&M;ic3O2tNT>jwHZC)SXDF4 zS&0$!n+P_{Jdgk$ef;&V`&|V)j~z6WMUgThvHeRf!O>U-;+c(pbL9EfOoFkAiKK~1 zZB1RB3@{x1jiwMrr%&9Y4h8^!Cr0@i-u!2!Jd>;@i+P#D)t!u(g?U>&zO@;vzeh3T z?(s3Gs8yqwkx@h7#=~2iEH5Eo+eeqSrPakc1GT}^UFs>C>cD&ZXPRQepHqF3QZdK4!mO9iDcECz0wGuEUW2dKvzYXy5n^eV$}YPf2|9NyBDeQ7 z{$UjY@M++P0Bb!u+EB>$yl+zPU&z)yn)59oE~N^1_8nc}=DxANNRgW&L2+Vh0lLtq z5XG{iBV(@$7uz+dm&18hDK7)SLTw(%TTLiK-ZrN|7DPeC@74_KMUUk1I48KjxA*DV zqed|^(J#yIrWRJHZo=|V4SJhyoW72)>6G`!mW>8NdPhb^j7@h;*RGCF(>a~soZv16 zoG^CBpHf=K>&FWv>Q|4s>j+JTDNIdGfeJm!$+~gU%89CCknJxl(wc;+iK(@JqC!9L z0{3#+1Fg&jOU;WONVxxxr*8_3MC+Q3ZD-<4Y}>}fnAlFowryLJWMbR4ZENC*o!ma> zKi_@qe(0Cpd+oKVYE>!yID(YjaW6%r_5Ch{eYX6^An)F-Ih?9 z`@5p)r()Pz&qEHY7eJanPm1AfTG6bFF2Cen7b9MWA)agg!6`H`E&9rZhG)S2o z2-qf{kbNuTivgile##=v8u4~9B_I886gNQ<3d#B6`I%7b^u&y521Lo&?7PW^jMx^W>$j$8uej!cZ_skB!wTK_-BUtYV;w z8WqD1PR*fH-h5c8h}D+4)cyHRLXF!t6<6F{EuUkqVKTe2VQqB_xpRJfuIBpM=-4Dy z*0~Gz0DT?{645_;88(ROz;V;}a62;4A_TGmH#SIIV;g}4NXTI}>OVC`QbF#-3?aSyYOj_-Dm4)4>40j9f2?tLe4)p@Zf<9Uz zpBR$VeEzgcLU!fvbGC!$fA0ESzT8?%4RJ+2Lz_6*HzcQJO>^uLLUTaUDt5!yxp~c0 zQ$;zGt;T@d3H4*&bA4qF;>eu~?qu_Dd4g-KLWIG-p{72x`;|`o)5j~U(fMFK=8l!V z9NKHgcBE7OjPu_ltzIliA@p86cW7%cckpZcE%tvCw`wC$|B8@*W^tmA{?+7Lu|>Dr z554g8<1J4aDE;f0v{}v+fd~xKX<4&c`z@~^{+YT6Sx!{B#CTl+x{lZ;jMu5s#ot9E z7!~wjT6-TI6{kdlVJ5uY>I=Vg)lj#yn^o9Rf?CT178{GyASH;FwY{Ay;;7gXf(jGl z*xXetJ>B`#Eha803kyg-X--YWDy}Si=%miFI5^EX+FsGBx%jXgn805V(0FrOP9>4; z64EsIrqDC%be!+mpXpLv#qacpL?l3bid%MjrnX(V=0OMm05VHo8IcTgRCVV) z`j)122?aeV#D|J0U>7kfhYu@NYSUw5qEhux!pQV2NiL2q3r9U=W9`rk$i@|Nd18GC zz~T2Gs7JG63J6A7%;p{aGtc*L98Mm6JZ`!0f)10=u&_vhxq4APKukhaRW*ViLv2Zo zy>>rGk>;pAaX$mp&+Q8(Vsw>Kbpq1UW$ZIpWDQ*(p}t59jL)msZ&jQEP>O&gDJB-j z#OefBZm=Gr!puh@puCAf9w)0pUP7vLg>5SGfcM>JpqeER)FZLSSTsviQ&M?nWkmt# zl45r0lvv~3cq#$K1S_XfL~fpMlrD3*<@H44y>+uyS(9bACt$sY)%o}CPTb*$=|U-u zqU`S4skYTP(XLYF=LTlE{7R`iOM<_p|*~x43&tF4DfL^~Do=Q;O7q5R)6?{3NIDs6pK(>Y7xocX$rT zwVC)#sc~8GjCzYchWO090xk>`0x)HI76xDj(fkdR z&*rr!<0<^Ax=#~T%NoI!U7gX=uetjai_3%XNd#De;GfOKvu zpb^YvSYJ%6m1p~U+atU?LtVedRR5u!4eT74EZo&m)cH$!enD9%acDFS+c)*%TXKg z!d&oWU)EIo?UEDQ3~N9~OMy`Vfx>*Ivjt1x^HKjR@qjWmyhh)jXE+*Dw4%!wiI|s* ziw5(G0mXL;Xl;A3ChL-|-EPYxi6d2-$MDW%=W2@`1tL>2XgpWYt<@1L5TX&nbL#kGXC zX!{kLNTHr)ykv9&Ef0dG%t$uRx_mxENLK6A-pCSRLbkswqLjFnEg}@B7pe@{zxjQs zo^-`;#{w6@WzpRIrHo66)G_%Rc(72Fin|yK+>iNzcMZqJz}znE{Li~n2`@{)+J(aw zK|;%kIhIri$=lP-N5|P+$S1s*>l^S1EW*^>i9tjZp``rjy)z-Zvp#&%zLYJq47itz3mHm+h>;SO9}MzXeQ1`BV4< zvq%^C|Mv~Mh(EZwy!}TsR$T0x?i^HqKasApO#j zU0bA$4UwQQ&3-D*{Ad);Ywe9q4C1L40JYln-!kFY1G$jvIHNT%|8NyDXyPD2v+At< zYY90~=5(@{Uycq1CgonI+x|S!j#OK{?0SA=1u-e!ySyx+Ss+Q0rxqV2hxTuRde7(4 z_3gxwwIblv`qmAWNmHO69s=ponDPfk+p5v-eQ&|Q?fwg^3zC+RgZf)KnJE%XHF%go z6|9j1hDR=7CjK%jHI)t;=^_Ps zlC(k35>gJ#807{bbQtui|DA8l>qAC!+w5|+pqll7*pT1gCOaOdq+37q6frKL7Gb-~ zE3AG`e(19RE_v`9tgsd#^pH6*-m1F1+2LsQD$4+%fzU>g&y|atC`5tdwulb+;|oOv zyYzEAaoJ*@HX+0KX6s>uye?Y4pEouELB$)(P=R|R*WKa*m%^LyL6tZepSc?C*=-BR zL7VqC4ta0Qq~1@2T>gA#dZl|dgUI7M{efVsYOHP^?H`|lpLAZr&CP7=GL$TlY1Tl2|g*p_DRzyZ&<%rMSTsf{6zWB@2$S1jhxDNg{J&(EHJl%bg9gN29I+Oc#{l^SR-M zrt-71qD=4kB*0qUbJ-O`ntd<#w*q&3a6x*wxTqa~4`|>Gy0&ZF8p~5E;Ox?8X%yR^ zMuZT@T|SesXT6DI#}vGu6QbIcoq7^}P$DlaCs*YN2Mm}G+>pSjwzga3&KzXK`%ZAH z7gqsrNSv)v;w#SjujqGX0W(RTw>GamEB?#O>ji_@+}va$Hq|ON=rg)6nh*yGx<`Cj z0B=-1;SxC#-Kaz;qe%*<3MtV zVOHd3ZeY-|W)*GdY;->ETJjYMOe~ks*7kZ?5$wq#@k2cS*ztR7QKrMwvwIl1y@iXn zM2vL4?Q`i}CFq~Gc^YyHiOHz>$FX6?68sXLG_Eb8b2`3s-wSBMFn;@n@;LOUn{mZ8 z`ads#j>XqYAyg8ShY?gb*;*0FhnlzK;xz@P=GFKgu}KVt=_B7wg>m60`1m&M>9ZL!9bBA-*iqm% z$86?75PmD7a9XM24~fL)*bj{QJQ(%Kje)#O-suVZCKMHy^rrTpo;#rU`T2Roj7Hkn zYct#O*)iquA;jXnUse+2M90JA!~UekaGLszvqRKF9(hH3FncAcJv`NFi#i zh2H7LlLH=Q_5KY1{W*4Y6Iq)>@WvT8-q^ARc$%xGl0^(5z`wsVF^>{VqV$xCsXgpy z<(h+vq{@xs_tt#fxN$qa4rzMj*h&rSjX7^gsk*(| z+F*v^_QEBjEX_9FHub$~bToa$SoRqbo-L%5mq7=_avNA#2_?gIf|lBI7#|R`L=e+h zZfx-USm%NcgAh((t6sdE^fE8d)^rHS=Kjj%^LfPwUz~{hK05kC<<1G@{VE4~oFfM} zST!**`#|Vpc9v?{MX%56;7m>YIpKYy&72Xc#qgzrR#vZjG^fcfJE!E*ftTkuy<7&# zMD#)$_skG4ojN@&d#Bm_VNXR8JBxqUgcDQgExh5Pd{8Oak$5-pMAff_fBH)I~-Rs zePwD+sV)-nIYQLP8d6&`0;zYU37WxIN}*WPlbf3+lF=Ww!M;vwFgOfp(cR1~0mrOv z^J*Ef({N;dn(=o_eZ2dIMLMqaL}{vNTGFr;DIFo2w~cga{R>YrM-3bHj+s@V>?KZ} z>UZ9aiPovy=gdDul{txf720>@Q3%ix!J6emcg2n{(a2l$#m668)mL2xa^S=m)moy- znAqIhI3MoyY}2FVxTF{XwU$mZ5=VC4B9*VXNI060ciF4+^9WgH*rqQ(phM5Y310pd z-YKgpQjxT#-errD^1&c|BM*VJ@(BIX@Sfk?WN5JyWa}&@`mc`f5{UIaehF{TZ1~*F zn*t@eYcyGfEu#M&d=40}&*y?Ld-bwVpDcE$E{;*NQ`<^#u+O=%(f-JI;u`svySXg1 z{Vm9p;f;WANHSrs&Vd-V@%y1tbxseGF78AZbLuNd?R9maG?@_W{%B}ul`L2*poCpA zF}|zKaMgv zJ3FY+bVwuc*)M3gmAg{X&mE2^)Tc)Z-HqO&CWj@?wyEuY|nUum`p zLLXA*jerP`ZPqC-LN2fELL*n0K(IAGUtXEJ22F^EsR)d%$COc1V~6Q=jEId%C`!h_ z-8v@bK$@;cKhxKDyQ@y~5v>M-LBCmiSEeYIl!4`{ySiCj6C%l{i!x#%WaSyQiC2O={|+hlx6;lf8m z=;|$^kXE%%QHckbuStb!CuSEPuRA6{Nzy@twWvzu<>4__k&Q3jf4jMaZ0f|_Y-nMj zShoH>MR`pUm92_vrt4{LYyuCmh;IHxlqTgz>Pu_E}dJFpJ#)Jcdf|xiIspk?G`YWddJyG6cP z{Jz=rC)0Tn$JhCMKKF|4JiLFqT7&~~()hgp0&5^zGI*e2S9j~qDG~niQ_;lQnkOL; zAKJ~4Ag17v5qNnXpbrXA2eHf0E#nmX?|P`i2ZaA+VkhS3EHQ6dE=lWPN8KfkRS?6c z8K69D@Oc`-4f+nxuKy(PV*m90<#?4Zu)WnNs|s>sZw>bU&Ao*hj4 zTY$X|qkN7)wG@aOihUfRK+635Eq&M2u`NFAsQl{av`r(OX)YyvW$7QC%VC{$=qIAA zu5a2JXwVWPQFc-|;YF61H0HS=B+CoyWK$`oEF63$kGJYhB1j141M;bm{A4Z}c;Da? z$7e=Fj}F&)d5w16rPk)=6FIC;81VDd5}S;HU01i;jJFQfIuhY^hURHvN=m_}l#Z#O zN5>`w2L6qmeZKx90Ur$B0|zVu0tjk0h_Zu>?RG0Y>gb!?kLaHs8#_L4h4)Vi=z*b< zTE4bB3FNuCSHvVGgOFq(>^XMZt8|N19@h#+Ai0-_u^my1AI5>Gg!HBIB(ayLo1Kd?!TRne-!t#{Hq+ z`%+CDUaoofjjvmCH#s?*SdEIys9@HLQ}1WlUsGOaJlAIHm1`*j$KQvlgHq;sN%#sr z0jNxub&LvnYT*f{yc%E%r zONsaTuFcN915wIUHXK306TYg3QVF*^Gv?9qMBrIbt+6MNzTEa3XpH|6%canLPxC<78#$?E<+yb7~TEDgY8Xa-raJYJwib zp`mfAE-NjL?24B(_cOrA+KzHky(kELNn_xkdh|o|3LusoZH(gD`gLhgP3}{F+_<+_ zpa{3z_l-p#F*r%}+QLqyNXyO+8DPRI{9FDhNyftM5KDPVjNL|4vv>(=#?l239X;e) z2rs+>#RR3Bd>CP4;*%*%Aj#^Yg0o<^TzvXbmT zOgn!w^Y!AjC&UT8tD8^wAVy&ie;c~9${W>!=V%J9g;=3+f8!$8+4%S@<>pisjc6+` z5)G$C)2geZdjwPO)YX--11PKvebJSXQ~0^O@d*lwMu;2X9#$^S%zQEciZ2*BXlD`s zt#n7K^+K>!e|&!PT%EaPHb`(y1T0uiHOf@Cb5l77ld=$K&{;e=HWyqt!{f2OFO zj&oA<)_pPh{d9U-UYrmb0@Aw*9%~N4HHt9caPYyyPB&W$hdg7nTg|}lv1=Av`zz$oe5al zeu|Sv^P1^H6^LXkVM^pJON!{lL%{+wsIb072ncacD2 zdTEGz-}xk0YX}5J7TeC~5i z%ujkL+T}fkD9ik$Hu}!RkE=r&=yLKI?jux!m1HUqPUNuUq z;>P#5?l^Ll32S{k!EX96~_kL>0G+5BC%z^u@hJ6!eN zJ0oc&61Yr0G8zhXWo0ybpFfHTpp)79F&u%NHx)l^%f-JAu6HIYfBo4bzz7kKvcsv- z&z)yItQN>}MX-!dEoZ?E@nMBe`{Q_Xu?CMB@^^0JTA?GRfawy*`Qw=XQC?7-o45vu ziY5hzLebLt9lTNb4m$}GJC2l*ni(sttgg0thu(=p0=+%P%a`6>1^;^r+}%)Tv1YHY zx>vNTfds-okf|A|{ZSg8m5jN`lNjmA$!Y+&OxYljU%Mp`y7b4I1*pbmZ0O*Z#4!(a z9#5NJIpgCT=TlumW<-n}UtgPFU3l{R``ZQ_U}T0rPQA(k8zcpo9xV8f>BRu)UB9@| z=YKzT#R(*yuhnZeFzVK>_o5qUcI^Q*BJ@V4l|=W`U>s)>JQw%zRJABFUZ z?K@er@);E|{ch;B*FWRc)=n#==>3T*`H)rW+I+lT|Hf(TU3<-|=XK^D>QU-0r zD(tDri9E6aR#l%r)stzLZmM-P6*HS?*juP+)e|v6X%4tS)Q9wBV&va|rtqw9ZX~z! z*}k3uAZENdFCqy&XG3;haEX76b`YbLita@cB zdB6!-HHQfMyWf-8{)Q4LRP*=RZwM$gN7 zY;1I(T74Bl(kZBzW(ATD@e@Ffp_?SR38%ZZg=TwJp2y+)UlvlaQ* z6cE%BSCh@}B|`0LY+R^Tr($Tx4CfAJigAE6d}znk%*;cft^s0VZBF~}V5in?YKm#K zMpw^_A&XnHlX${s?)P_(`{i8!({>EtsrBD^UKIkup6=k62wRx{`^FvSV!I1mu=Jbi zFt(ZyetOY589BX=8q^#IAy~WQvWNkiM*<+|`@+)AG2IGNm7$)~ah*wK=^vb%5oE9C z_jgk15rg1=8yy!E7zDW9e7%-&!=`C8&L`#m{=nk;PF2L|#6Khf;=dx-@>J>8Nvt_R zfK2^Y?KW{CYyG`4@D}e6O<3utN9EgD1aq~w%KQ*2l)hbY=dKHov&y72wM4^6B6bm{ z{izqyH_pvMitr3bdJcBy_PmH+TwxytF5oPdUm8kI;p?c_z^IP_IOB`)@UZD&sV(Q1 zH;YC&XoL~T_P4Zq#&1+gs;oW$&nA7+?oXSM*8z}K*qy%FX;QC zz3K>bSTHc9F+f@7&i&XM>fBIoAZAQo)GwSdrTg6r$=XzY<|q${bRC{_>!moM*@RkN zPhSeS+sD;wTwh%&4R-TO{dCjtdfWSK!=^ckeN?Arq*nB?8me1cn`17ta@bVMPLZv3EqiwG~fStt2ZYqn2c!gZqAtSpzvwP0iXoe3`MH8Z;d4JD1i4orl+!~65&)n31)G4%wN zXr*FKekbE)JqI+gHCUJZEqo!7&GmK9VcdxPQ)FY*xU;fRjE84EK@_>^?cn6By=C^k z;^C9*wNFqbW*Y13^~BA}dk?reL}YKLTAkZ6ko&QHsa+c+KqaXEu9UdIVn6K|&uT8e zPdJ7ZxvhL;g#yFt&grJm28LPR(UIkSf8#YDzMmBv+cNmo+e-}RME6s5=8_Ti@O;HL z=dIbd>c0Y>1p`d-?Tm0uy(<5Y45;J>!>{CVypOLpG{VYZrK7VHP0z>(5N=b9h>T2a zU(am1PS-p5E!v9&o_sY5;#!NB7920p@ao6w7lshaBkSdoPzeP)Svgu(#yP*e94d3) zm?3bAu!~D|j~>%okNUiIEilkITC%Wat;k4Ph_Rx~%L{GNA4;1zIyQz2p+V;;eO~nY zw{V%Nh4FcC-*iC0Cnl;$Xb#r5Zxmf0K-*|LmQK@UV=3=QuD15Ew#&8s)B1Z5nudTp zHL~w-vuaw_QgluxvQE^ZG%#1|D9UeOwNqwLN~8xO%ZWh=VuPYQCD@w2t2KvSMC?78WR~X8;(^(XEg?|^yOUcheGbKN{ zM|Et@EIE<~uhN-ON7sVj?DVK=lwGz#Dao(|FYq9mrqTh!Q_16P==zIz4>duiP8#ho zC{6(Dt5?W`l(WJ{{)c>OWAu;W%%iu0)s}J`FdBV@_^3LEo5bYIa+rXUIKpyJzx{!1 zsi3zXQWm9J!v|r=i_XK(xPp|Y+|dF|-N6}sz!+{7tBtnch8w;KA9=JA=s~J$de58i zEqKR%wdS#8gvTdoaZT8IC+%eRR>Kd`pdeZbc7kl(Azn5u5pNzcAb#9;<&=Z2sB*jN zR7;@tc)6jtxu*HEdza5ikPCvGAujDiA#d`-Vo8sP$MXjP(Il##<#+Dki_0y0kbGU+ zZ*V5#d0FZYwk9gbxcTL_E0W)dy!qRQ&q$!^^&_ zTJ0pgxH$w;&+l_auyo8;r;CM^d*){H+NJkeBKM?F>5ppAkKOTcD{hb1WQ^mJ394#0 zI*?zyFk^@Fi7eS(UQ=4vlaX}p^;!<7SkA%<<^SHVWsHFIKU6?>GUOHKoQgIUIglEP zcF(nc24UcBt35@{hYJacj3W|ETB*4!MuNjfGD%HMH72f6V_{jyH!5o!7kc;&Eo;~N z3nn@a>AM|+1kY<1IeDjgHUZX5F^x4`(n*S<5Aj=C5YI9|byEp)7!)39`1Sb}wqi`u zP+H=gO%6mG-KMM34Ktv#Q$&YyUHykG0P;OuQj!i1UN)H@z%Hc^jnex-Y?fgonF2>2 zB%Nw*GZXlF?ilZ2N=MKMniXWLy2HtbZz>SWYo zHUgd(;e$gXQgWst`24=ATWPg!Z;zK)HIS8r5r~+4Q&UxcI)dB(7#cL`319QklK^>yXyx28127CLg z)ZF>>i3`kuUpU!6JNw174#c1ns`1}rVSJwIV>-463&`Y-XUeZ@;ISJ z#M|*IitDH(QOU`Sw6%DPai2WV(N)kQe3`Kf0RUCRa=fRp#k;{n)itwo5Vv$FX?ZzN z%gc)6Ya$$F?pW9xhe(X$y0fE8de{hQ4M{ebE#Hd+Y?&o({irukl!onXfyknhhc@V< z%L;66;Gsuq-Yq?q=0iS#?rz7!LFv}t5Tgp%z8Xz7 z%u5OLMqG_1X8WCcRV@B;a>ip`WW!Pv3s{{EU83?i{IreZCvAam(Q$@U2D|)wB5i<(H?Fbbb|#7_y*_jRnz=V@Q$ws;?i zIfUlgD&GL7`iFgV1lr5XOJOCo^!87j3S-1P?eiOCzju*#-i@1;f@(-IvotGx--ohx zsCm$W>fca1H*{+0rnNKX!l(r37GHU(2^3FP0;)sC;8ed!q&vTM`!aT{>8$qh{%yyA z*Uf<7AHh>4eSVdb&Y$9c1s}jM9ZSL=eEIh`=nJ5gN5X>n%*4`!U`D1`PYG(eus?SY zL6a#ON)qYLcgEYeFkehg^967Y`mJrpmmyzvJME+Qi?NIlhC5grVs7GzfJtb#>(Y}W z#f%4G(pL?86s1xfvuQcZ)w&o^#u&K`Xg`o~TsIcujD?8*PcHHo39~LG2gOx5bN`3>QhWJ6Pmipe?H}nu39q9A1$Yr;HyK z3MH$l)ZNIr>~G-5D>WV9iUrLinI1C)LqZ~qhD!jwbm6Z&{_U0RiJ5@}6%r=)_Wecn zL5VkU_vLTCbR2+A*AzinwV*O)qFd3t9%#L`OC;?u}bK_2NYR`B4Z`Fa!f zc3ZMbE#{gbLIv&BdW+%nFMs&g3^^Z*^5s`b^^O6m{A~nW|7C|ONsG&mBe4dUz!L&r zLErbQjg)GcnXg!q*9KS1>FpOyuzP@ zWk%QLg`f!V0r^@~xkP=T&sc?Z+Wyv(GP62yhI3XkIa3pxpKu0}lI9*kBB9wQH3qbv zaB++w<8E93C)D*M7BZbc!uU0*1~L+49~Bv!;-7EO=JVE#;jdU(Rwn9eMNb#tWnipD zf{D2_PSFaxVqPBYrTE84y0AQ1eJED1o8@I#e)_@|?WehyILm@(hS(()9Y@(@0WXX+ z+Q81iJR2^dQ}XyGAYKW*l@TZO$c7r`&o<;3;4x-HmfQ;A)}UqpDv_+UOoE)y$=PxP z7*R~Du=~TvqEYO(Xasi*8Nfrc7-(uY)u6{={+aTFm5Zy$3^@#v<4GI$H6b2{QjYiz zQ8T1jQG@q6WV9%$q}9`twzw6svc6?+W@tb*eTEMzv8EHHt#x%~GQ+fRzY&t=M7^}8 zK?rQ4kT@S~(8^1t5RiqRbU3I%Ws8T|jWk*m6ZS1F=!{Pu;bY&?!bO_&`FYG(CTB=T z`=A*yQt2v)zjpQmGh=c%gph1$HE(p(zUga2ODnn9NkTo9)PuV!V3t$wH~GxzvT(@l zrf)_E!gfWyV&L*p6Z_J+h*{>w&xVqLr`fRqNkC5L;6@V>cdxA9wH-DfEmnZhAw9TV zkHQQlt?j%>jwcGl1U}Q3#s#PZ<<#q!_&iu~ zrj%@7I5$41gKp*RStK zlWR$})!r4!hM#(#66J@7oyw^x)MaDyiw4`f=U73KcCjHa_f71PIYCLQ?a#8}vgv&E z3aOi!TztQ&c>CL9iA`13)HTD)-S5Q=i$l^#I}d9p{Rao7wqq=ZwtGZGoqm5m|^Gm{($h=>VkIBb*w*3eOBMLv>4 zQybW86CX0%t`v6}_zGU+9S0SIJ6$U6@#nm@2lS7&dh=WB!58y48B@2Rh#Z&AW%C#P z%=1fYRRZ6I1z?X{X%^KQwPO7don)<{A@Vn{8hgzG^jR+2o&x{aK$qc1><5khv51iU zq3SwE=7(L6RWcs^6w-Lj=X;yX*Xs6DlVrx(8B!rV=Mp}|%y_^Xva2ns*v8pgInm^D z6?T&n1$?hC60a4R!y1nW7p*2O(k#t2 zx?843VvKCI#kx_G2aL#27y5^1sO4i-+<7$5;t&X@6>)N=r7+=9c*-?7<@A#d6BDJC zm8Gd1ot|YFx=4`AY%i^|WR=vehOGM-cWLXIIOj*N@zvlQ1d_X!vghI@CqL{nj3~`gXG}y(f}_-5-7dz*WpDCrzZQhCLrx{!bjz z2E&BxesYyFp2>zPhAABmFZdp8eZ_>)U{^&prMqpk5E2X_Yo?xw;QvfdORY|ZQgf0k zj5-?gkUUu`Q>WXn{5U@0LrlRh{HabiF`j5;q%Y`K7Q7w{z69T7j{t{_r3`fH8$s2Q zLka{ChPpgTSdiV8rB2P{Q8ezmUa6GtwB|#-4D@NEoh?wu*6u?o(7JLMqwTH*eJGK9 z3^2?y;}8>e`_6AG@-|T82ggMtBmsd8(<#6Y3+0RnoncfB0hNzQYkg6lgUL>(Jp1^r z_I4~9M-3(DFe!f3J{Ol5<;VaxnqX{Nrrl0Did9f;-9#|PgfBpq1f(69)E^EFuDe!E z`NHu|1UOc-KC<^j73CDtb|yhT?x+ovyLkKhfWYZKdZEZ~q(d`ZKfO22{S+ul0Aw9> znzo(Wh-l(Pb${EU5$=UG!;GQ0fV=Wi7VfRe{KNjgE|@~nAH3@6 zia&EL5}h(`oM2VK@$c+xDHyW`C+_w_+_!)s6r9uRgyY213nBLQsku=#fB+6vNyzEo zV3Bf0T_ztDmm(&UYCne>=l_kiN+^Gz$6O9xZPq~Dz=%)^*VeezufIhZmj0d`l}fmv z1O~N?8;jxv^H}C5LCEIoObU?YU3kFA?zOl^hn~8xcdLMS?Ht<|fYrgTHB8uah8fuY zHHs+IjyE(D`$Syx461r&cfP&~_StJ_N zjq~n&>-)jhzbTLqE!e`Z-44A~1o}3@$fnGLXHAZPl^GKwS6lUvK-;5}XL=6kL^vkb zp0}v#O7G%WIs=-M%Z!LA@Fz56^K*4=E-`pTtHB_gO&ZiptE zFvlF;5D~Agk&1^tk=;$q=*HvJRVKYxr?v4rtpjMc#5-J?!pJ?HE3m(RMEMwAp8>YU z7rN<+wIYv0{e1Fk9pVJy_`d#cIHd6ToW|he)QVt!?f&Jp02b9pP0y#Oz}NeCoeBF~ z5#idKrxaVN=+fGzCM8>}^EtaN`Tv3Bo&Uh*cUQbyPXB$QK?!_kNexg>3RFo#8QeWQ zWMm7QrC4_hi0H+7El_&8HLqW$Rfb3YXZWz@csQ)vF(sU4B zfA%#|^>iqt954vU9vO9z?g%KgK~5|&rJkR~C03~=sh%-^y!K99t?e8lv;i1!#~@5c zkkh$m%)D$%5(TxoCZ{nvVQUwS&2asB@7VEU&}$7_gMp}Zpv<_Oa3y0WdXtFvvv@zf zIN{jXrt(=do)9Y->qqyGRK~Rcz#(YL^^1Htz^XS)~ zPu&Xq2B((ZtpQOQLnoUU3AEfZd2@5~V&9fwmK7&ldegRY_W?m3X`Vq@Agp87UI;ki z%`B=a$1#~}*x1_(@!4N-9&Y3L6y;g{^B?{LY#As)uz_|`@x6-vcRXfc zCM9?0hxE-7dK&HPTUv(VxbN;hj~Uf^3Q;u(Aar!MOt4uH7{9#bO1((~`ZuZn8xtfX zh#@oF#b4SI-+oCp2jv&s#=P`S*pLY|Uyu6dG)Sp=P>;qFQqzoT&#os2jj%IbNlT5( zSF%X?dN>GGtuLD?Q z-lL*sw#YcNA}Xq$*v-{7@lU#x1DK`4Z3_t2vXeIEMWM<9E1BTa!)BcN`#Pa5;ehCJ z!or;6`%)A>Mno5-{+F>aAzmt&S@>G5n?q&&Juh5c z((d0tYeK6#G*}pf3ux-UB=wWjz+7rb**F&F`$d(QN zA3xS*RMPSeSHvfpccqFEswaG+EplE?q_KP;ppZum#YoxMTci-DmnOq^U@kG?I<#g> zfFPc5-Oz%j?is-DXY*VpNG@cQZ^8elVd8vP16HB=r2pO+e~Dh4faz(5gES*!Yg#3o zAC{7YD;!xiI2QE-dGyp$JvoLf4Akc4#3-ioE zAIdzuW<)KrljVZT|MJi0q5eR&WA-XNwFrP|TI{&nOE}2Pr(>U=8u=p;|98D6f$*Zw z^Bi}I*SIO}x^i1;lIr6zzgo~(uJGRe#a@-;MhQi{IKqBQTwACOJbH8JL;Bq)-wLM$ z*`mmu{hJicZ!;5mwz1#det1_oo7s{k7PZ)L=9D)N4@xHIWLH^$07Jo)*GWKAqd_D{Qd#Q1*xJ)pepo0d zRPu_JDrHmN`^A}*%@HU3gp_pIBz-nqdCS7$0Luf9u%hPyFE>-!Eb9%W_hIS>^2?D4V0jvW5KIHaiKRwKFEr22IoaD|$n$+H zP)$ywCDoKO+4B?SC+P240!&6d+&+RPtaTn*l`00q*Sq(Qx7D=Rjh%81K&U>)Mz7IU zXeFvODjs(&;w)w)i6+V13>op*nY<@L7~>Iy{bVBw7^%fAO3z#k{3^Zw7$E9Vb*d#w zNx=k~JfJ@WUwTN6hF^_QVHOPa0Gka zG5{=QUO3ljDMJP)eVi#)M#>{*M4G<;1)rk`)G&owE|W+@K_rn#z|V@tm6g$F(v1E) zEI3>hbuC6d}CHs0j zcX^}izp_vf+KT}w)M7T!R?%(x!(&z9L&ipj03Il+3{Sf1?(aE=`w;dGlod5RJUTJH z)}H+jJ^?y8GLe8%^NiVaHRb;a74g6VcH@Pp-9H@F_0J5sd4fwrgjVB+hb3Ta@WaAh zO&~OLZL1k>Y3sdx-rtYz7zLEqj!8)RYC9N}$(YBgVsf>mn+TzcrYsqV2THbo7`|2| z4RN!~LKoM>C9kYY`I{r-s{t0f?`|H3KJgVHY6-$+no&_If(qs5*>`_Kot>V|^1VFYF)lKz`yWiK@~paNkoifgst5xv-}q^Gz=Hyd3c9!5 zQzkqKW8XsS6Wv&`ej!ft1Lo@L@X)~Z{rnDHyhyIwbRHTSta*k9HV?|`3iKY=2$PWo zUQ}hGqEePxv}RepjP=+sBTh3iZZF1?Oc}&yexugngL3u|7ZiKxC=LW3))MEtyt+2mh>@-@~3GZ&4$$`U(n+z@eG-1@%u)3F3F;b(b}A^g{o; z)1Bb|ERYebj(MX0w|HRSg8E0)RzJVzDUp_1#1>n6pHAZv=$^wQsGw0$1H=`JVP^jy zQQsJz*Vc6%H8vZkQIp1LW81ck#Ypsbf#~Aa@ z>Aw3_eza};uO^21&sgFRxZ_=ez*cp;3kY}Zn#idQTb!H*$E>gUPHSO>~)ZghxX_HI^9{f^+? zHp3db>YM&-L5z%oM5AS^Ntb9|G!fzd(yqksxobVYux{)(bQDYO>!^n_8k*w+4La2} z!6FC{?4D0>NPg{Dgn=GjZv*1RW&C zZ){A8yJidr@-AsbvU2h-gUCCUC5_HpQo7ca+%@6}7dwck{j&4QynM$xbc^Hf$(X5S z6!ZQ8_X3T@B|0oR*#}pPtF4VvVaXkZI3@o*&P)REOqng;P4EA!+$y;sl-)i;lcydb z!e9_@_texkxSVf(4j&u)g6~%Lc(ae^AB;-!m>EJl+T1MLb~S-yJ<)WuAPX#=zU!R-dj$41fdCcgSVB zi>{9^ICRz2xC+^bdRx;)aC7U=cx%|`c9GtnZ=~#rPB4#H>t{}@>T+&FyK>;mkY;#u z0^%+Q)0JyLG#2dF^{4T)rzi9=c)_Pf#xgCHX3zbas9TKfoHuE@&)(hzY){;!C|Y{CjQ)1XEu!_4?+>z}$e($zOqR5ks@i9a{Naw;|! zfXRYt7;qGLa{hT@f2ns+7abkvw<(tY)!E6Y`fo%qcPFQ(`*iU;1lKL*b!HnD@^ilT z%QY6L_dnwc(7~jn{$jJFy?>4?_}(OTMX|9p&Fp68c@GZ%eWp#QcJ}tex3hAZ8MI^^ z(p5RepR9Af_jSyHei@AnLBDECev;hXFKgJ}*`44v{ zW{_fGX4Wn>eLoyQa5xM-r{HB$(DoqE=7&X&A}E9WNZmsL_dC9 z9p74hg;!I0b#}dvYdG&hDG5FP;+t}hIvKDjS=G~^^F_~Og1q_ET_oaVrXpvehbSvS zY6fL|C02I)z4I!Vn|5sQ@>0~|N>5Vldbo++RQ9XNfmP$Bu@7T%;>7pH?5&P>Klw7x z^E%Xu+G+CHwS^vLi~Bu)ektD&dU`;YOQ7$NXJ2M~Y< zjo0g*y*TdU6B5QpQdy9=SD)tY=NIVJKtuc)2(+lH>XH(p$6emO12u-YBb|46JVz2@ z4%PWbqo1u*XR(EZK->Qy>Su9QhK30>ws06{rxs6DJ?<`jK&Yu5?+F z%&k^WOC1`?)#u}2r(`H{si+-9u^c_Qh$<&hHCp# zP;N%Xnjkx=-vwY{`Gss%zF%F>l<(2$=&bSWl`5A@wwkf2z3imS;doeCsc*CW73V)v zG@S}CbKZ$^;vW~n=3Lv8v3YuS;7XnUowg43&Dr;P4h1&{j#yiGgpgB|h~FiC7QFvx z$*Nh%=bI93HTHEhC94^}dGCttseagiZu(po5PoHGxatxRvgx8x#)2m(dGk!Pl-Yc@ zK{t&W8Ps6tNZnrwdEz9U6&aQ^>i_pJd;9s|q zv`D|~HjJag{~il~aHBCs^8~&ud61>gG8)d_{yxKV9;=O|B?cGbo;`nTpx6=GjJE*1 zUWhZOm;b%e`4}e?68vl=Zk7=fo*=%%l}KDgWoqxB^{nWhsHzSHj!i|#=c7Iz5s6J9 zh@%lS7F(K7bd_K+39imoQyMLTy(|WSjfc1?l^+nIwV~_it2ck zN2k$kus&YTT-TIN|E0q}Ypr@(c0lZW(1`0S)m=|TLjio`M|45yK9exWbZbCOMHMzu zBo)*uN4(L6FtNA544w%xRX@pepsRO!1OUX;zqE8F@-0eVNR4)Go-R@SPf*aDTJ~?} zYQg+%EKCWwO?FI^JBzGsR}MK5a0gbUSuNsRFk-hqI<99sXWYCEWNS-GQakOP<3E-9 zuWe)(6C+(uXWB<^W~v`k#+v{`bgkMfBnM0C<{U z&pAMH<1(E3@Z>}>$NqwYp+?>W;dHG*NJB6c6Kgu7rl&?u1A1Q38qgRjYUxx}LZ-J3 z_2I2A+4Fls%sh^+3 z4KXjGFX@m|A&ARGtQjkh)zipp zzWT9%AW)e1{kPHX!R70HY8?JX%i>Aqy`%m&PIi(Mg_7f*wzD%E_Pvm$SKJ20NISih z_ot>c!U7{{3(=5vm`YkUZ$7iT{>ijjpJ#lD|9Jsa7OHc1ajSISplo|tFOedCRqd%x zoW&hknUOo&ZtJRkP3v&j6ItkfyBZ?i_i3zLA&;xkdlbPUC$QtC{o7kN`0%OM%fEF? zNJ|0+4t4IYzk}=jebTQt5=0KZvp}SL^0O3>II0<*;eW(5K;4xA#)|TpC;7kn-W&>B7{F$gEh@(Mz0Xcg zNH;gHu{yoIU#~6(T4zxFd$@AXp7La!kc=sR%B zFS<=o)~zpOmNx(PeOsTPN{z!~VuI#}b*^+j&0s<8TYO6>iIJ6MuIt0>-B862arb=Y zH~E%r+q!y}DoEI6Iit(ry_c2|3qMykcj$jIw6~B`#RK8v(>;24s(@Rj{Y-M#z%g!8 z&YP&H2=t-a4*FBl6ziHz04Fh@Bv0$^1jHam!~?A8t$y}U*B;B4*uJbS!oaUp=ED#er@-<82dbqoKaJT%(}n&?PdbGM=U0ryXZ`+03e>Undjs5aJcIPOcEonI zK@^QBizBo2NtJ}G-eY+LbOFj3!U1UUf{|`Q6~}4K+C*o1JpmP*s6A2HhL>zQx&M>% z0cdO+(3q`i7ydVv{u_4H!Tf=iMnX0wQO&Vpn<=j3OQ_5w&c}lqpWdaF<%|cXC%S}o zh97)d7mfokQi2nJd7GQ;D)+RtTmon42JuK^#mXJyv z4)JJM7Ez3ISvE63;tJ_IoUHsd=EKP)+h6(NFkBT2+}4(1<4q<&db8xDtAb`96gPe9 zM|Sqh{PDz}D$ZbIqKe|t@&MtQL1>^qsRAjs#@tp|loOBF zB~w4t#)5?vr0D=RzF78c33!Sint)OX5NJJRJ#h$vwzYTHR}R7(}tGRc#_)Ve!} zXjH?Z6Mw4*T6nJGFUCjFRWE7Y>Y~FZLrY6CUKg(|4NXFq)2s#p$laLC>_=2MImC+Y z{Zq*#$p#`-{~L~)L$Tuj#Vf5mrSH}LLoithAi^asYp0I0Rv27Ywdj);$`{*B)p@72 zO0l*+_JI*we=aaGtg8Li6}H6hw{xEA`%pmYYpdN;1Vi8hxwbT=@)rAkJtGKm{yWz2 zp9Wx+p5o&iHg`iq_1UMw6<*mjC zdfHL3x)mtQUr6ZqI6bqp6?eSh0(*n?+vK+~KiH|K<+E&WMHNfxJGIf3Oe^4496Kz_ zE6CZ&ja540;+u3JAOru346!%O&>2kM>$3&x{D2d<<=6LellRE5%)0}OinZup38$`x zCk=yQ))jG&4&zdY^d3Q**NO|c)EJ3M%zoQ@TfDmEU?tTwy57qyKdAu=Xmzy#536F` zlK)FAs!@K;e!5IS9^n5apNncTeuRUY8>cqc=Ve4pqS4drEH5%L1S$t$w{4Jnm-1P) z*o4T|@3955q*L-G;dW~RsM7w27uOy&!gk;H%i+US=mQBm`CP!wR>JXmSozu-EX)b# z8^l*w05PHxti^7#Cr4Omczk*i7d1VqJl@f~4gK;byW_rc>4;WW&ReJI1rQ%|c)sx* z9v>_1Ie(KN-J6n?i5klj@+^Y7Cx?U-8jZ+Fnw>>uNz>6%f=P|jZLrpz(&=ei zXd5tHo}Na&%dnyP38%2b05=>TuTWNAF0y5~k}}qOAMom^WJGo{b&M5`kB--_pJHjH zO_0=Im+-n1KI^kK>o#e#-J})44_hPl=P`ik6B?ByyWInu6t zKS<@=K64V$zHcYf+S^MfkmP(yPfJT`CPKl*4Tb+W@YWd{)JwGDi%j52qGvajT)SgFbvz~2* zXsNQ(^kEcE6?9@W+&=Io6QMr9k5m4n=$WZ7T06wRgJn6I#|#<{viY%6_4gGL)k0->C7Nl9{O>_Fw+sOV_it>suC&A@>1 zJv?AgHDnf6Re2M7=Bxcx6ak)+X@owPzfHmcy!x2!tP)f#e<^X*LUP|kO1)A**4fR( za33hgJ9N|{fg6#-YFJTIC4zkNiJJOLV^|XIP*(__m3A5DX{bXTBcJWo-mQ~s#eLd2 z9^$+`;GC_f1tQ_81(u0@%wp?e*{W@6N!;{w8JG91A@!Eo4Py39@+B{9^#!(B<2cFI ziRLUD;sUm;=ot7k95X-sXF&z^6uu98mJ+~%H6^nd>fjc-THIia$v{t68JBQla;(0_ z6$*)w)tFn0NsppU+mBX@z^Y(q(B&;xP9-Zew_0WD?k%`6f2fFX>2Gj8Utho)X27*T zC{51lbl6dpg|_%RxJ=Q#q$Y990-=0`+36}ZPWP)Q&OsHFG|zcE3FGV>=?f?%z?>`e z@Z>gp4oy3>MA`Q@I{FgJILhURZLimX_8Wzo|G83qgP;-Mm-0~!`0?X^sc6d`iaq!6 zWQSJCkvWt-7ngv*7@b&6ZLdtm8g||pF_52?q|O=i5%y%gL(X{z5c}d62({w?akaNt zB)6hL>xaociG{w~W^*5agC4L81Rr^@qMO$^IOq#yxBb{uciJRZ{D?1rm7Cr5n!kX@ zyW>PeM1+ots_$kwCr01XUN5MbaWphDqlD}SYg)}o*Iu=zPH^8By3g-`EUEE5d^}Od z>XCd)9c=gbnC{Nh=GkyUYi35gUa3z@Lzi+bmY7B`Hf6jbO9aA_J>U9 zXommoN^@9{s5zCR#!i+pftuy)(fp+SP)bDb8DcEgst zx#^LS720o)NA3I0c=u9#|N2T!i1cFZH^#>|k>$E??X@k=%_$5UV9ordRVn?TwM8Ch zo*LiO5f9>tUQl}w^iGztF~O%hB@_sXfmdZ7u$TPK8a(9~?_ zcDop~;OPAReN0hFg`#LkgmT69XiAS>NBD<1G;M*Ay`CXilXG-!Q+4K+@3bs4;t=h* z2CIjoqpQk_9r~K>#SDABpQKeFo@d^vezBvnH0_2-ejL(^dg-zgfHPi%iT_NjHZ5RI z8lP$!3?hscLfNxv>C}yEZV~<&Lb^CBMpJ+xOdf+x zyn9HSCyxyGWzxs>lKTk>1}=e_D*SRv=H7P?{I0IjshRv*jv@6jV#QIN6F73NNygDD zpdv)}oskWOj+#Pcx7PbLwx?pO)7y*x<{2KQqcrOWSC@eXz>Els5|k~fX>4)T^j@1d zP5kk%rEVpZf7~qp_wpK@G1AE&E8zRLGuV@oHyRVzVl zHM)}DV0-WRp47YFpSHgi#@YM2oNm$p?XUx2-t;{%!-*o=VhLcCie#W@`Ja%UDPNiL z`IsxTl*;0@&{bl1%$+WnL2DSLr5k;zP6`Y&b zMF$HLlTDR~P3i7znco*{fWmk={JN#!g>tBGhlG8#VPnaHjYGuiBE9DC*hYRc5mDkx zrfx|nMOV^RrXb^x!TLwuwWbgk9u5Bb8q5AHBp}$Sm994I7j?u()ktAIiJaR`Ja9*} z1CdX#UuV}kySfTJA@u?$Hz|3t|2xZ0t-mwH&Gl^$%m2+3;h>NSHfSg)Oazam9r0o4 zBBjRv0=eZcG(tbZv91M)Bgn?Br^W0Qnwg`Q6Ha8rFk1M# zzFqD3U4FkgDr?3hqHegRe%)==kXg6S8!(vSC^gfSQV`(1dem0IX0EFJKC}|k=Y(8K zNlsCAW~aYAHK2n`_8epFWu=Wwz+3s_>-l7D&k{b(LoB3ujo$7Q0U3>Y(hrq?k}5Dc zgA2E3jv?Slz^~X8=L`{Q6U+a#*Hm$>I&!>eI^I#@K##{!-)Me%bduG?Lk=eqqxzn<}`DI1?;K%|TEozQwC0>PV{hfacscT#t`K038&)e#%f zF0QA-@`-mg!LVz#R(?aMk$>)c$zpQnc3K9rj#KX+CSE292na}(ctLNSY{d*ZlhkRW ztb6)sq}zmyAN0RShOh1UjHvjvtw5ERxc9ciu=;}I<*Zs5+N%w|T*Pw{^~?+}DFM6#`!NAe6lQ zig2FA$`8xwCeu?qK|*0UITXB)ACbcsBFfk_0!udXL#G~-r%!2y`$=vYs_w?AyKlB z6-`u-05TGs>UNX@CrC|Jwp%q5s;)*vL*oMnds}^#4xp+tqykJo&_+dOa%4c;-zPGj zBQ#^!`N*Nb1^7{GU7@_ZI;qLoDKf7NDn(qwv3r;O-DCAj=SB| z<`32X?0QC(?~Xy!Ul+X}`~l%Ca&jexZKLIbZpM*g_wK1TZ`j?GmSdI6M|@Um%0;{n zb5Z+2@o0a-(^Nrq(;@OwoPNh4dTa}vx@H*H-9zUWzg|5X0rKp+>p`t#wXhzp|2AC$ z@k1~t2=vHie9C~bQqM#(Jv?I%Zd)oKy)N(1v_r-fW&w>L) z_KXen@0Uh_3Ic16J(tj=hJ}R)@FS@eh6RE>WBl`AeisWfTvm2AuMC(G*~eNZJEvmt z>IRm+afLykM;P;mnb}Zxw;0RKSr5Z{>w~~m9j>JgN)TsbWN%D_Nx$p`^{NK7`ybYR zt1PRY&+eo;zsyC@l3PSyFg*7U#GGtekY_*zC)H9y`t^0WkH4~8K%Z(38XAVm7KBY( z4iS+(wj#qFh9}GC_5PKHiL$h;EdBJ2a*0*pHoou+s$?FXw~fC;dQ{ghiDTU}nNK1vx~9f|&ztFSm3 zVRB=y=8D?cSEwO8V%SmAn&K#Tnv#hgIDXGdKq;%h-4R`$J;y z7#Q!Pa{2yZHrrbUd3-JM2CfeYaEn-@_^~SZ=?GE%4WY_sw|<;`zhWZ)76lx@;fWj$ zFiR^v5O=V5kw=MJ!b;}0Hh}a+2(Hhomer8(xaRk;l)ApzW7cSb_+6hBKD9QtzA=eC z+L6|IrqDEJI@7YZ4@eIemOHJvOP^FVc7`a)9Xv6XTpLZR5*4*!U_xsJ+k|-H2HGDJ zXL@o0PXHp+)1AKkw!odHrKO-hqS1P#>bY0I=#9zS?go{|<3?e(E|eC26{g zL91X&zWV9;S;0$?03$fu$gCSK?l4CHuZNPI@FDGR?x zF>I_XOe=5YWk@*WUK{S{YI2@_%lkQGU*w<%4n-fPA_e)X%HDM2a$if~g!lmpS|OBZ zx2_1ZqB9ekNI%;Wz5ljqh(6W+tUY}XC++g5yGYhGob)Q(9Z+LtD1X^p1)%2Pq z3(Jy}>2CBs8F^!&naQQ2A^}d{ClA0zQBsxP7qI4h{W7Pta;nc!8}AJd5rW#=w7xVI zxW2w#l5>ef*O9i+Q2%xD>xHANI5SJ18xx2O^iN3BFCs<7!51o#>vDx?y#J$Zc@9Hz ziu1pVYX#?jR!t;0#YTsBbUc~~^R5pb9rbI)iiTj6br4vHASsYX*P>lRLdQ^-0c#!P z0EN;@La(H#v;8#L;uw}vsXT@}V>vrYG56wB6KTwXvz95%c_08h4~)8a7V%JIEqN@h&Av;pHQ9hUQY zKof|@#=;Q7Z?RHw&YAIYO_7xRa(FP7NNJ6|KUxu9)B^FX%)UPEpXX&t;%9j(2ur8r z60F(!Lsxfa_^3YlW5iFd*AQ-Qo~2*@!r;_ViqMg02L-+PO;O2Z$d7uo)vQl!tx&u;=K2Ns1BR9+5U3{}%du$GVG{+a$<9qjW$00U#zG>+HY()pke`B?s zF7EPlEjQxVvDkP7)RL%2FTxi>?kMEkb5G=E#6mQK!Lb5OwoRmhk0OHEUFZSE;Eg` zp0-)IE|FWR`|YKD2)^V^PNOE(x>w(n-_#WRT>NQyJ!=i*FG)Ctp02TGTGJ7SCEv0U zoNW&b9c8k!)WPqGpp&^Cf&CJY2KMG7qLhbEwgVRMnBPl7GO@n^4K?6bUMi~M~Xw{mxyNdFnhetI%nh&(J zd2=p8mphkaEUjUE6GP>Y`(uGy)!Yvu?X9(iCnqQKAOd5f0-ukIJ;!c#hr3eEmZqd2 zz;=;vA>Fn|;n@FSv)_4xw4lH}?zt_)W&e)nmS>lbzAyrQg0`xTcn~1VNrphv9oQ&zUuKS zGjs6=n7>!-BDW8+WwJS4{Soivv9@o6O`0n>fnVBtofV z{Jl0~Q)B>jv;FS*TxvaN^2AEy=Jx|WzUlJ9@HcY$++p{#=2PX7+js>jf@-Kcf>Q7p zkAu?SC_gM#+L}wm`pg_$)b+0sPbBYF=-@c1&Pgrap%$4GWBtpVROI^JFJsi4zGwAK ztkfX1e`AU|1#B3ETe8=jL)w2gWm$}bg)ZHt;fp9+Zf`dRL0%#UzzbqkSAEzTEy z#tbxm@kl*39#0NEZ9casEandj>F3JU^hT%t%y5Ceks@zTFi^8h)mY6TFqkv1UUMXm z6;1Y5R$0dqszZOlxFDtBTzKEp+%7HiCwNsOo;Zu{!~h&^!G zHK)A{z13*HWp_XB;~pIx{!t(C0KTvF?FO|3?;osCy9h)m|m1b@I=^i6XJ}B#Gh|c6-s|Lc#TvKFnv_4yC;lD{Ru{!Nz#;wc>3i=w6USpjOx-|u z=tz>_>&@q!FD=+{x|-%OH0x%b9wOUJ+{^)VeI@A7RZA{$e&TVAH=w#@pBw8D(1_a7 zUbn-qfcm`UmPtctAqcpn?gu1%grqcgxAPwka}qO?`ISic(R4u6iNnO3p|G^$>9sWi z#bi7E97R(JD6a3c;tYpr>Zh>62iJ!Ac^AZAmb)AA_6B}yg^z_*r!5or3jeoaCV^e0 zh7be;9pZeR`md^1*M-VTE1j5__~lZ;c%;dxRlig-U+P_h?WyVccK`Her)mdAay)?#E9)@3%+Q;;@~qg2 zB!21a@&A->y+6=;y_q5`i#gd3KEu%Qu*ON0J|d_X2|HnKb~!6)%n4FAD;8uQw_2D` z*r9}nM`yd#s#hDG8I42-jG&}X9vY4$%6!30e4b}L*^I#wSu;*O_u&-OyDTM?FR!t^wWn2C60R>XAIbVE!*x#cHf_?5JTTX zl4*Sf3!KQO^rb;_9^u}*0quK;`I%q7tFDm&s#;#7r+2!4k}W&fZM%^(^%CqRVyx?Jm!seNZxy9r%EHWY9lJIl#{uHIAm-*)FN-pEimF zwvri&Us7<)GZapgF28_mY-%a^i&SQl#E~-+h|ksD`sbR0lF~$=!+COF!#?O~-<~K; zgz%?LvsxoLBWiM5R)3%Z&le1$h_KZMVF!J!nf`tptKAK=G1HQjJ}{icmeT9U`v*%) z>(A<L+STqzAWXgcurIkO!`}#J+FPVzq1wvZ>{crCg zz^V=G4E+`$ps%XXYUz0%=SIdkfwC{?95;J;wQ|Z9QkWtP0+lK>#*3eYg+;ZgKnE7A zG!!<#@%fJ63w4!z%B+Gye52zEYx~8uMn$4@o;20nEnTHvZQLIgXPwfhycf^DCI=an z{+jK^@QhV#9C&d{F+QWapIbVbJ@yzT4f*I6MpAJ6arOrl{-eV4>mO+b1Ypnk+`@9N zgh@AMXBmr3jhTP3NuqH4qW}6ev1+2K0=k7&w4o)`7?O%jj6(x#WNAZw2EO;6^=CtB z&bgz$JnGPA@&v9#ywj?xn~9>xsD-4eXRl*T$L_COTR%Ouj{I2KX|z6NVvub4F93o= z4vo87&Y756?<-q1tL-=J)5@BPY@cR+Lc5nweL@I}JT5;iJ>}&YPkHS8eBO5>SOLO0 zqW=gA(d@-4d8%y&U;4;!hE2;9+@5f~&PM9P$acv%``W3$_`ts{C)(f6I-Wr=91JCQPG&5G4qnO&(a|Tx3>QuG!uY3k7LHR$$cd*^%{y+k16}-W(Hh&nNCa_PsN;+awQ^Uu*-zPGk$}6^JNA)V79~8h7Cw(*8(?8I` z{O0K0mRlmW`t2|54KBE8l3faRV?ee5lmWfnsODDY`Q$W|>_tp@$}`TNuG>V9ED+Q! zh@XB^rN$f-lUAQvNcnrTl4+N)b1=zn_B^TUxSf>{SLH7*@yL=#`76I}LXQ&P97f%) z0OrXDU@Jwc@N&&mBljgWl=NXrtL~v@CPyN(o-^WeyddRA( z8_T#PC8P>wYZ;5ogCqf5gc%?dV8L-u0@$)PvXGQMJ`I7<#P%nVbwcjO*aY@9l)KeC zbP}KQjZT3~hvs=pN>T*`cB5Ah%1h`~_^#j#Jp9Ex5{`k9l~}CpEy+uygqo6y%#{fR z^2cK~>E8)LL^gR8%@(=#MYrDQ;-2$e#q*RgJ=b6u+BpUMjm0!$*X+M$M%%Na zqp*ZL_6ZoctPX|>d1aaE^}82bFd9gTI4tYLn?1Hp+h3TH>%#O~5EofSSY)Lp{dB%f zS9!YH9Cx{V+^n5! zZrbnV{{;=}PhhtP$AB5v^{w&_gJwz1GQM(sl{Je8{`-jr(_c{Sc*I2!ZUy)FcZU0N zAN7XaiX6YrqSZkvc=}jyg;VxWMMT^1A%djzMyTk zdL)mrfRuakw+m{{jbw7?*ba<8m`Ym_EG;W*IWCx5Bd~7Bcj&&Jsuhqkjy?fvBLodo zd9QG|HYY&#`tvZ$txM8)f$G|mU?D{mLtaF;N<@LVDr_g8wWdW>WO~7wmDp!|ITZ_42MM>bz=vD_B3QCbm z>$#sOBMk+D;@jjl@nYxei6$hC)#?yyea7=%&Wdslws23#ngg*X1PJN98BubfH! zW`p2LZ2-RK6P?Xh>K@B;-QiohuG%`|w5(2Uhn*l~a)(~{t)z2;LR(szse*z64qSFg z9kJ}Rhv=Odc3a-piB#=BZ=Z{VR~X|~ip0ReWyi{Jvj!Ed=kMEZ=(N*4zonQrF~_RM zNdD~~{D*}2VSf${s5aC72ded>`E^~y5VmoftI3+Fuc2ZQ7Nqu`99fk-Jbd)%XYn-? z1BMnWn4AT)m?LWtt4ZL2YasRNnP6@bXsth?R&?fH>?7OlYB__BaF1{9It%rxUkubn ztf{xUyLq{(ELN`=DCl&`EF&T$X*Yu_KmYx!z4c^%{+3C?R1DP29dx?dT=qyP5kfM% z!{v3gVRiwaK?WR#`q$qy4J~HpG)~Sg^IF|%ni*Cm=OZRBE4>aO9^wJUkfN996eZM6#iojoi$|Z->0RywhP>PhF3u zUt5M<;jA8_NBZW|#`Iq3e+3y)<@$6vJhDAqRm>b*Jzh^3dIK8vYnhRA6brqo8qj3( z{zISx{>K9{D*pOo^z7#Oni+j5A1}3n%0iu^15*Nlr~*o794;b(DN70drneD>9xAM7 z9KHACgNl|7{5QQ5j+U zoAzjFC;qGX{(fOksN5qedip>9dD1MXg-B6ddWJ_jG!>j%-QH8IbDtW_%4VvokCSvr zj~dsMa)~nVS8fEMJE;A^lRLAyupSXk=yhL$r*nEbPf!+%8#nPL9v+{sdS^E@XV;r~ zxVaa#P>0a}Eih>y%F4#9zOGv`&p}G*P|=`?$^FQ;=5np85KU2B&!hYT{qmV|tD^S= z3rA`_`cJjV@hV`FC#9;VaExe2JeGc3M{nlV(BIHrp5pZy)#1!vWgR6PVGLUN97{w8 z%DbsUVytxLX`{3z0!>Zh9OSTbaL6WVJs={O58C$VWU>hW-hNrtx?N1CFU;F-R^NGH zITv|C1eFj_%brH{CRZqYn|4#LvGzY%ust)c#b&fmpvn8{8D8-L1DPdEed3-4Z(d(CTXmC|!B0>z&Uya(88bak87`-573-Gccg^+rMEl}G-r3ZVGwRSs zS21_2Cipr^Dk3u)8a*i(x$>TPs;Bap1yBKlSD#Svu=`kgxl(Ju&+oDl8^W)y98$Un z=fVDIX`sNLh4?Xh@9wiDBL7Lrs8Ck0;H%o49nwg;_!H%!Luwl7J|ID=>}Ae0(fsw< zyo%z^46h>EbNys9TDzz=kgGJxwAb?#?zD@qkySDl%S`C;K%2d{o)LLZ39Da|U;8)> z{5Ot|eP>LNVCWSG z?@_mE@F>qg5)A4J7X7B@ki-#w0;IYCXO8^(PGF8=OaAT$7C`6>FtoNzNtmizIzj^k z1z~5BOcJp1*Pw~-^c1x!uyow z^Y-icyNDmzirsvZm9UG4u`!g2vhq|Pa?||ACJ#0Fx5?_Gf?xdO5fRjp#|4{zq`i#F zVGzfAEl>mTwtcQ&%SnCxmALsD*%nvul(~+}vGpVA{;lk~KKUK1OTug2sNy#dFU7zG zmS?VQF_V%CE;&HK`8`t>BRp2*-MlrGR7l0gRHTDJ=%@81tSZFW=9#|W8>yIEsMHYT|KPOvTLt>0fSbv6Joei1K&o9d; z%JTBZD?X^<;Od~tM-KYP>soKk5Z1x-j8ZyN+tKCpW=845rLlxxa#GpU4hRNg{QU)X zpB$cU>_v$1HK(yl$bNwplAO5pysxydUT&sGBnB2h(ny13biC$L1Easfs>RiW#u63W zOiFX!|A~z-ZZh6ytJcYOiGxKzDM69VQZA&UUB^(jj}nF{JvG>^`rwmeZ}mB6ta%l7 z(Wcw^Rj&Fvqa2;^Y^%Mjn2&~5{+`_Iv)MX8q*OqU^Q>rxts|G7L$pEokO}z-aR5@=n0ulz(uhF zvfKN3>o-xWmCnC$T3>{e1nMHj8uNt|Xl{RpMXcDTq$H(FM0t4(xeW68+_7yjaXO; zkifa;P@GR$LB?mX{;VgXXfMH0HM7;bGatyY<41;3IEh~F*cqMN{UEf{@Ov2>QuVkP zI*h(FWW{!)@To0%x2Vxai1IT8Z${w2i8X0oRYips+8En=C#z?(j4%D4^=^^@N7s|w zlwry@8_!e0c;a5?3NdvaTT5_3Bxjojb^i{d86wpUY#J5rGl9JXYa{I(EdO;7cx6^} zWNb<9PyOUo`M&bkph9wZWF!@O;Rocd&MtQ9flPiPvbJ9zQ;A@AG_Tdg?mKB2=(0nq zgiBOe(ZPA2uV_RJS1wuF9)=uM)I2>55VlF+;Adj7OwR8kWdyuq@y3DWwom~NSHaiV zX9B8UvB0@ghX%XVHUO_ePp3|xBql|ccdq~-A-eosjN&cG9p~jW7+dweB^b= z#cKQ_v_}3<5a@OIWS52!-`_7Zwa#+}&gHUGe`G$N%g)M z-rP59Ass?%gAcyq>K{2AfYjpRCLtbHFfRF8B9!tET=Imqus{DX%2JDZLXbA82tPn*jlV1!t2rO#L@%5|c zVxxeAV-F;-F>vNXPpga{gu`O4EX-qO??Y9d>Djtr|6Hm+^m(7ashRUn>0fwb*|TwKqZ( zEG60XocHIGTw+pk@^oO}R~RaV3Ap$;)QP6;^*zLSeIjVW`TBWS=QGA!V-zNU+|#&+ zWntnE2B>-R^YhaKaqsNBmd%aCMiyN)`d!vC=4G~B3{DTnTz>ysY^6o^zCn7zV*B&G z+39NNW_0kT=#4m!dwX@29f;H^vSrjG#dROAm^tW78o1OlR@(sT4yE$GW3{|?=94h} zaUV4hGYJ8I<1v}LDh4(QF=3jW_H?hSLVrXLQl?{Rb+rPTRRi2l=VNV^oM}wv?;Np1 z^WOLOx71oXFU2EkuSKy-wRLq0%1TOR3BjH!CUji;L5|;}IHfXct&UaHRM6gXmxCzo z?y|Yo`X68-YdR2kP+y3U9gxfxJG%PE<+B{+zYh#^0c#@8uZIQizn|Xzg0_F&bB-{8 zz;w1@t8FJ(=}=I;+v;)j^l)9jMH#EtMA|w`=d^Vi)02iyUy;|VX@Dxbc8a?X_PfGq z@}ilTFrzg(0IWVxkwpALytP5=)6emfqf*NN1 z8GuTJO98A@<*)i?YiumMRK@G_B;?|7wP(Cvc0DAS$!7WWv=R(R$c_ubwHh=N{r_d` z3L@aR)n2Jd!2V0>>InXqm(&QxhpzJtW(=yj|9*)pbOwOtdpsSGQxt~L?@B^4Fd?Fzj4JgtRRK6S}l zC)4{G(p$blw*#1c`8E-nWGw=jXHtkF*IHFi7fBOixeG*3J(!v>f&o zJw35lhMNl{g6?q6j7K%qi+$r z+A74s_P~0g$o<5=-y_#o@ob>O{}4{XSxVn zP(uf~xzY{NjB_TM9cm zYNMHS7sB}9hfjXw@JS32QsRYtHJjS1S880SG9N0vQ`G*ezXf`gp-jgUrFEoIF#b1! zg#r(RMMOrf8*jlgEZiT(OUg4Zld4v(OBsQ2vJOoW?cS&WG2E)Oa=x`Yjs zf?IEVb8({#nR^PL&Cmi`eP2bzMwF*I9xIXcx-#S~La`8o2{M2XL5mJyZB59n&&_QV z$DC9J@pprYd%&i4e(y(nXb}~^9%2@IYpGJ*J%mNp?PhD5&2D>d-77Wg$gzp1cFj+| z`;aa_9xJlJL=%$o-iEnnHN0IYRt~lIPYRWL<@NJ>3W7U2VD8@u%)_1oD=0EJ=9qYS zUH%_Y-yD}``~RKIwY;#rxNNP~TDEQ5cI#@{wyi7MwXkes+17LJzJK@k`M*D|SLb;i z$LI5A%ev)p(`M@Q>}+2A&w)zG0kA&Z6`;$fp)niTHRWE~IoyrRyu7Z>!+I zvfAR4VPhAuJE-MIFhO#QXI)X@bo<1rq%5DKbbI=&HG_CVmz4SNGGZ){-&o$UR)An2 z8HsL0@QxiLMqXY*cy)LvZDT@If))q=4(57{P}Qk#n@?G@7Q({*5-Dze);X)I>B`dGS-u_l^h`Mx z-RsBV5+Ktp*W?88ZYyJ+T@z+c{1Zn}BQEdP{y`;0~!aCM0|bFbepHzLPTb}$PmjeeI zN-r6{u}~fPl$84T%%Ul@-sF;S5@XsTL@&8rUaj~%KtOn?EUg#ajcsfU`V(U8^j#ja z%#MlH0S`&T5n5%W`?-8~fZa8RD&!qeSZnn-TnX|ZEX+Gzz?W2VsJ-2SHDu)LW<+7V z3YMM?5PMsTeKCCUTzJHPs;n$!D|@h8L2y&m7%Im$){ny!N&$u5ola$>aXx&oPZJ=K zTJxi)`4?US7$}Ut4Af-ON9q4)Np*y-DfgeVSsJ9C{2xC?3cTLObC?g5l~RLU;Y~01 zr|SZ!S@#w%;f*Hqd=fi^i1>=9RO+Ph%QJ*y_jjzf2@KcZ;4wen&&Lw+5_&7Itc5a8bRdzdxnpesu79{_Q>>AP~Apb!>b*JG~<9V0MQP zPzR1&JDo(7qW-!$i;crF-yi2gLPg7_!(~cV9&|lfVyBvgo4x&1<%sDv_WjHFGg0L& zL~}v8CSYdLSHbM5`m z*EcZiF&Qgyl$(G zwk~r0U6@{R4bb~#sW*U5t8gw6N8)cx@pe!jMMqW0MZJkJtnbld*38NR*ZQf+uR+%C z16ct|EkV5pE1L~>NJQ|v@NgmiW$Q*Z&I{YLKZ0+!4c~{`!k5VwTmJhp_3)uWD8&=4 zW#``g@8tA%MG%5y8BUzgaH~~jnc;oATJ3E3&Z^Vi{Cb8#M^j2Wl4MM3E@t@a{=7ch z&*gYc1W2K|-Z;&`4}8Yk>9TM4xFLpTD<>jC-hO;S9^J}myQ+HrLBPQe zu*}30Tr@-yG*(s$H!IG}%}liTR25h+H^xGjWe&(+)fc6WNP-py7QHkzX^Qq*!4-RF zlktY%vY`6N;uFibsi<^H{N19d!5GEu9!W>#mFh=dIBnMoM5Jy7Jnn;@L=|0XUtXXO zT@!|o=8?b=I>V5yn*ra@XPxu%^V3^+*5|)+IIW0#i2%sxPJS$-#P{z?&YS>JiBe&p zIGv$(gIYvbEc5~m70=@QiQor8^8(2sM%A8~G5awfg2-MuSw0x5*`8UQ?LS-)DhSf) z9mo3Pn1{mxwd?G3RBW*Lp6a)}B3|bhfxy1dV~&qvo10Npn-JYb*wblELAX=B+*_e}c9dDgLbGG{e^}Hp9%Sg- zUiJ3vgxTW*a#Ay#?8{H{OX2_UMm0v5FJA(FNHe)(_*lphFK+i!V$ZCu<~4o?sy?+k zEz_0BEX^tc$;VV#RnEi`^~uWjg*0r3$COnt=71kr|4TYJ`{ z#>;YLlPnd%Ui=&7RCrDUpKsD{cpjAOzyb`wS2jN)4wKO&0tu)wsbukLMB zyR^vaFRC2-R*(|^%-V3oq2t;vcYZczRmUcG7(9amjvDGh5Z{-%={SG9N&6XGxWh zyX+4);^p;*=@k*U%ZadAAh+96=UhXGmC7K!S0X#sKdqB!YeLB}vry3A?`4gbt?hYt zSr-r8-`8Jf?O09bd`HCd>ux~)#yiKx)=7#!_^T+!(6yV&Eyw4Fr|yewC7|j0UFP|7 zA=7W8+xDqFnvcQMnzkS8i9uqF}KI$ z=HZc-&>$c&C3|3bKz0tGMh6KncnLh&sm|_C2)>D9Hk0~VmR^@>w6%LLOpQfoXs%;X z0N}XOvt19kOaGUGkMF0n7MSyi}Yi#R?fx5iuVa55??DrQ!>3qWj3aw#Ra{s5h1VQ#gh zF-GpOUzHf}g?~EF z%kNJej1A}9ycU-qMTpdUZD8=#@pldo;ZqQe8+g~@jBm!F#*! zmRRbCUd$ID=V#}N^9LC#i9m+B#|Rti!hlDsG@N(+#;a!8fNuF)ELJWs$&W}%a&Oi~ z9$Huo{T_~)Vr40bmOS3j+1c6pWsLE~jOZ@!V%gf-Mg_@+uak?J`KRb871$Zg)WPj1 zq9H@rNa`S>rhXH3PGU{7f6#9;f%)YH2k!>nFUjE<+@pD5&UdbopwZ&&jb;hr$;Q_X z@7DW=d4Hru%%hD>=$VBDD?4@XBg<(a(x}S@h0Fss(H-T#2ZsNyh+Y9^mjPtE*M97= z`oCw09xORTnwYPzZsl&8pm#i8kjIsY4Jw^ABu!vWqPX}^#XufBx!OiI6}2vl8mQUh zzZM=;HrhoKmF>(AmPw$*5*g}1kr_)j4oXRqzwN>9n{f)r%K zO(#G!4E$f!C3Rap6w~OdfK9G?1f#1R*0&I5rn4}JGl|}Bw~jscEkhwL0)qm_&#$Zu zXf8~t`k~duXzifPW!A*ix}dadC)??}k47Zu6ZCp>g6?smAM?EbCtgT@6SLH(SemGd zj15loF3a~>1|I#S;Aq}fR?{G@mX5~%t<5DI@k&lY>N~k9)%j`77&ymo>FzJqH_i>L z>|vnDLf_{X!T{8pk86VQiS7K4tF9>4(<=uy~^4Mi-If~ zaw_LmOsW=kofFpOZnx0w_m*urYcjY|VpeSv)k( z`wqF<4R*NRoG&l57qR7y)u$N|D*LTW-KgpCgt*4Bz);E-4dGIH|ddZNNn zT%e_UV+|W0n^`-y_XADL_0t7)(M-c=`i+tLe;bsZ0LXWsl1fO2+%3Uf74aU=TP9SfPt-1*a39e&1 zNrQoVuq4m0lBGC3Y#nzZ+%&qgizws&L@aLglCk zOVE$8!m=tSF|#w~P5<2wdRzBx{_>>$vC;cmCE1!3KT5O~LwRwB^A)kXW5g<;=~fg~ zsxL)H8GO$$=?eAm6l)E(uMn2LCY0hLKldD-@GTv&G#k}?!UkZOhiJ()w5|s4pDp zh~C%H0F84?lVZsD5bn~o^`U0zNRSQ#=YXW+tsNdsPEIac9+qo`CM2}z@OPClF1gtj1#G|AsesgeK3XE1@1bWB8)w6?-t% z)sFk$N~hn)Iw(@luY=A3*45~mrfa+1M4l*WMK|auHP~q{YU)f><8fMdOzDwiH&Z z0)O{^*8OxE+3 zBsjDCNLr1dm(!*T3UX7 zXAdceo6T^L#AnU_vA)%`z+$C|Ewh;X-?J6E-V7aVHd!p=mXO70_0~$FW#hBbNd}Ti zW?3*}Vn$iA*=(Wr)gk7LKI&sSMV*9G7GePF6}l`skHay{i^s#(&nv_EHE$(teq&iv zBptcHkDn(${mUe=WBxFC>M4ZVR>{@h+=RKzOFW`eQC6Y(N^Zr*%*D^fmVZdI2JE0> z$;m=SCRO`9*}Wqn*wE|6=(-BmJ*i_l7t3F~M=>ftF01KwZbi*5K$3Njs~~Q4`}?Sr z4B%M`+|(-E?2bYz_tt@zyjW)b3|Ko+J$Bl?KUepQt=KB&vUo@<9VFy0UGtHi)%a6;M4%^s$9pZOMRnyMFlZ&X1PRE zK0rgKwo4bU3tulArjXX5y8z|TwjR{;CN{Qb8=_5&r3Tb=BAA)+Vv+taJ3}QjXqLKh zo%@m+t$V09sGgXxFfq7qH_r9)tKm=y)w$O2-@j1Hcx6{gFR{5}|F=HjU;*GFE|&Hp z_}@p_RVoTJ??xD?mqa&u!ip_zVAy(&`6cdCFbf*R z*yx&0i|-v89VsUb`+45e-HeNr`LcyBoCWjDv(^b@51dgF16=%)VP3C9MX99PxXsZO zZhyVupbFLJml<1w+vkM)hw(8&r>*NyB|zC^G(>oK$fEmF9FA<^xFxGgLD47wp1L+W z2o7OmX$ek3{72D#aN%9uwY91%!H-;$*B7R=kJ_6k7oQ*(LtE9mfUn^=z~ruPYWHZwk3ho{(ChJ(wTs*1Rq>n$91e#)QY~jW=uk z`_M#b1k03F=ig}&UVl~6;D8nDpW@k9t*5*BWGprxTeq!5Hp0UxOIvzVAeiO&sYtKV zu*02DS)gOoyMWU|(Je$oJv$Wrs#$BMxMOUT?Z3;hs}x~jFD_0QU7mvq_&4v7V&LNo zhoYV2p+^$4nX;>^0E3VdhTHR>FpuJIW5sHf?#01^niAcWu3!b>G{Glq_N{D(8cxYZ zJ@D%XBBFia;}DTd6`YQdaFq)P0Ge@wpW1h z;VHo7z7(F;UivUX$+6|0ZvQzST1hFhLVAb(Sij0`Re{mhPjz zV~Jicpp*ZF^K71yQXhv{4&cJe5_QL=L~^rxSM31d9q&?&^xmJRi_vR>*W;3+yPb@R zF%ogpX=G?bff0{z5s{pnPIDE@-<$2N@HZzXPLr!a%65?~p{CV1-wON&3^UoCKlg%~ zAynqXMAl0f?Z}8S(ZzD(>A`Bbt#~q-@2a-g!JB|j5=XzPbX=!e_pm)GWeCUg+tL+b z@PkWSXcb8?Wr2(>@{ZtPJn{oCYFOKU;FS@~&pRm`_x)OT;7M1b!kk0IrnLrdZ5tkJ z1;bIl!L(*)AnBGZ!u=eXm3x zzLqNx-cjK3*pav?wf4CIo~wsEueh?Kn>e+F-ulV9e{w0&D9rM50P*qjS2&cD zCSq3FRF;~2Uh6dJw-*s%1@O8ZJ8g9{14?nBCQ`NOOYV%PC*)={GRXbL(WGJ^FM^+y zR9_UhQ*(0-n+hF~G(*s*00eNFF7SO@57K6LH{|8T#ja^nL+Kj7)tF~XtJ;lVkBmUW z_11wRNLD=C8yq|ZvP-?3fw1nxa7K2dP_7YKDfm6)Gsv4hBQ6zrf13( zxub^G4eiDa?6|tTm-`Q}Gsc_8=5xLyfg;JjnI>_Mj==o)`RaYbs9vQmD&X>13jUeK-y4vP-z7FD^sZL&@sjnrah>N*-xF4za+){OqpWhrcYVBVXoUo6JX$1LG zips3Hs9;%q)$&a@c3 zWLLp!opw;}0s0w9g`$&&H94H)a&-LX@Hij-?)1{ng>=_uS)j_n;`Xs@(-D9dHCMrM z#_o$2Tr2KT@}K?q-gON`QOvSsS5*M%#-U?<%#=}iND|XER~(QFr)6nzvHt%5y`lg=H?C}s7i$U zTxksJ;cQ$$M$51|ZlQ&~5Anghl$#mRh{YUXbh9bRAwGv7?YlnQ~frZ zjsp8FT%XY!BF(4iSyT*P_E@MSXjA=Zay6^tZsAr^g(7byAm|2DD3^e~OZat5Adg9l zzulb3*EOg7I0E@3m-Eaj!#T%kKYb=z(RV8W#{F^!MkdG;^BxaUAUwR zV;zyC3VK#wF{~{>u(f=FS6aG@Vr7P zod6jtR5uxOun^&LtcmSX`6*!tT!AW<3J8M3KVMTuN~q7-A&Y^5Aw{Q+hI!$=uC6ZC zCw?{iL^1IYwF7xw%{(jH&WC;1ok66Hi;I%S)O(rGZ&Wx=_oPZd6@Bh&hYqcWiV#UU zSII485nV*F_iLNl33Oj;Xc6zkU0#mAJQ(D%8Pq1N71jK0)|mJMp3;quysE2RcGeUN z%OVcgs)Z!-4A)qrzN*``6z7+N6cl2)xa|nFJ0C-rI>FwKx@D!b%__$-DoNiISm^>N_r5`Z z%)P3dy&^RTxS~9{ayBn|L!UiQKeym_`a!rjCkq}(xRO_+46sAf?sN!zub=HV$vKO; zk4eoOn1_|+8Qj(n={eE<;^L&&st_>Y!qM$#7lCia@*S0i932AnSV4rD9NDdbg7mp?&{WT&} zR9!7sT3nn9#CUb?GjdrXSyAY}9E@8e*3{TnwyKY@2d?Wj*0>SJ^Iz{HNO_}DV9AeESad=%LA_sou6Ox)UEr8GcqumKouqd z(p6=NvS5_HiM0-X-;ga!KW&d#1%>xww_fyfX1tGb_tTWOB^m>76{>$Zm=Rd;k$)LPFj?Mg_m_$7_y6pAbbmH@Mxiwl!9lhNT3y;DO# zxTHW{R%Op`ZfjitB;q(%{u&^9Iy&iIf7)Lg7@)emyDOTiB|t(rC;!Gc9bl=hC(h;U zZ=<3%-9H$vY@_e#K6t4=NVydI7eE8vAE>|Y z4^*@V-HD_5><%C57hY5Z zPsCLn%9!z#l54Of~){0vrmEcoqToVdr7yGO;h(=0QRvF1nZ6wta*>ZHSs>-_9@Pq_Iob>xf zK!6a#%vdusPT7j^24&x%f}+TY(>hXEVs*x#yTJ&%rI%Mg#avOki$+TNTyBmJ=!f@h z`H$Idf%il61rbum`+|(5>wbC($*OAi>0xs?079PvoOfw#p)g)=$+|-~Q4Quxx2B!B ziMD>7RbqxtBgzr@{B(3aCmfTy{;IU+TOXt4rHvHEfEeluO%@WLxo z5+lenM16f>re{q{6~A+yb^WF9E?z!QGui8I6)mE<#&LwAs?p_Y*KJ#J35w+6B!xlkdf0ky*Nx&QQwCQYlqr;3y!2*D?2$G@78C)=5v== zf4)L_Ie(ep>#}oMgA_U`&NVEw_|Yvv&&nIl@VM`?`g!vDY9eU?TDlIV^@t||Zk3O4C zzz!n#g;%U|asfK?WVEWYJc4W}ZfvA}bH}$j%nOxO>fE^4{_=GWU&{`5%*@jABmC*a zeKjmA6gw+?O8K?v)^zOs#vfs-qk$spdRd?Anid;37JPV3V@nwEFEk;WYnP)5g2naq z0hu@**(^TZ1Bg?kzL@tFWY?JOkA)?{&aVyjf;<64z7CgQI!>4jb(2m8CWeBUpFi~;=(9~Slg^(my#qBlG<)$L@-e-A6ld(7q(a{*7 zT{mT&0(o*Tk^AJnHJ9RV@fNL>SKj>Vi+4s^&`w3OPExa+BtDI&>0(3we}s*}Oy&hO z4e`d0Ap>Sm?~i^z52znxo6DC8Ji49ZvRT4^Af#17n(BTdufT>$#Dy$&%h1+RB0slN z8-Qlbv^ue}s0TYcFl^kRrx#W>z8}q5TWoQ*Ve4|9rZ53Glkd{f?Ozie`o9*G-yRkj zQp?d4Bi~q$w+aP7pTC!9vhN}a~3N$h|$zFpH*CD{xnYCYo$-Dm) zKb%6@TN%E^&Q^Y%$fPyWD?+7Hm95-G)YMX)FY#$??+OW;$ePf}x16_$5hOttw{nD@ zM@;A%OWwjBW_x!<4smoW05NqW4w^G_bRh@->3+EVdUC%@)_X_Hg@sHNc z7q(KIg+uF&77Az4)Cp|;la?;zf6mw{ItyAE+?oFQ&VXY;4I03eD*SV;L@?Ag5!&43 zrA&QWgsK~PF1sOloZJLoZUj5BqbE18eRdq&0G}vk7sRhWyp|=|8yE?n))s#oU&<^s zgBdL(7Y(`s%IoSRtG2pvmMvwiA5Z2#E!&}(nV1w3T6=hF2c|O7>g9bNmJ-&RC5JG8 z!HKV)VyDz&<{m;6sG_EpR$s|Ao+Mr{HOSU_IxxC($;>S|!+tlctifPciyeWL`g zrPtmzgkI&emc@NXz*R$oLL8BOo&dH|b_UP*@Qe3m~NahZgCpA;>`TvNlwX4E9p z)M4mFU{M07{$6 z6gPBb8nU1yL5E{5IyFIs3H;>5*wheQL@Z39tq^W!Kiv!Oi;;e0wu?x!!58HHLYuY? znBb5{kH5IrYP+{&iHq}o+9R>i?%0uUsiT%A{M=NhPDj2~jy;KXDFP~TQHA?*qJ^v2 z9rPuqfGJb+6KqVUsbI#6L)2>)mf+-@=b`80n@mQ|1b8)D{0&WGfAecinoCT0Xk+Pg zT4GGeyRSm|X#`^litL%b48IDNa9nSW!(kv8&WSdj@jo~h)SA;)Ty&vLGnbt|8nc|B>h z5X`yV4-bW6@5In$Uqs!gw576|dr$cO6D4ZRh{?|{YOrnn%t=U>Bx%lPTIIKlgD&uDFR-~q{eB}> z+)MQzo?tL5KYdFweA_#%3rq00(8{|-ObYyrBU2u-JME(k^VoTJx}suatg4C&)R6p2 z6D{^!MM6Qz-lmSU3yXNhpNFPs%qF@1^ZHWqD(8${V4p>3L;Gk^x5Tng9VjCOA~&Fh zS?yvb7Vwb5RPD~m0l5YBPL8e-OGwD%XmVE8K`n)I*sMvZGHS`)zO)>TdTt|ZxTALV zKlCK5MrALUl+_=2CIG2lMBF}Fvv=)Yo6k?HQ|EJcP{qN-b|Am@jEc65eptzM6)*g!#=2OrX?-lY z^d~Rs^_J5~}F|Nokh14aY|a>getnBx!r(a{*nl8ESs zBG4}YWWiYJt0Y=cVeR5$H033%cY)c}h4sFTICIVE<&mfkJ~vug3$XcKd>>Yl*QmWm z<*-KwmJuV*$;wJxs>+YyDdB!`d06iEZi za>~XLWaFK$NBf}bZ{mLrQh5zKgy!90u6YHSWtKH0|F4x%U=zjZ-Ej?$a8UA=zf z(%syHhFVziCm5&>iVO=c@&E@7oOPvB7&SOs)_ z!Neon_NN6;mY0@--5`)?^%kDM4d7p8@oHwC(%K{{rZ%UUGb<|=hqSfnDF`SR4X)`E zS+%twZc76p_vKry(kfe}E1{v@4mAHORHS$RhK8`gJiojw$Z&^CgoEPgf;qfzEdihJ zh|GJJI3SYmQ;_AP2;$GXaLlzefgq2|46XG^IlyU3YkUsCqs3WA=P8Oszb83P%z54o z1F?;t5@x4tY)+pAgw&-YBT{sEXEP%`T{Pv_XIFdUmX?o;)*+QGz8H{EkAVp(OtQZy zhM}34Na#e|6@<5YCn=(Rf)aqbkWE}fPRFG3be@Nm%ox;&HSI(i1&YDqatBst1yf%WEeRW z;B6y>!osR5Zfy;cCP9)nfRTL49yS(2r`7yR5ZrFm~3M2n)lH0FFKJCKzkJeQ6w&v#?-BwW;~1tV%F% zWaQ9%ncMql=r7%)mVt18|2P>+LR{q8XoKGX3)_v*1L+LQ9*ceRDmEylp3%e=IA2YF zW59_>!G#|#pmGf?U2=1esGxhl9$R+UeIndTIy$>-M5X6ko;s zSDfU%Q#+DYXMQz!={oqjnpI~FUo_4vP38WW09{UTBSOf%W^&!+kR96*b=Q)vVg6z5 z<={&gcE(*3K&ZI5Kuin8oGT&Yh~beh8C>A_`B8{e7sPUc=b7wo!EIzC3! z>Poi{0?z@2zHnO1HH7DZ4kLb@{T0h5^2AD*gph-oZ|W>H#CxtK^>4P{6Pw@HWW<8bB!#!pMutQZUo{8<4k)`No5?S)Oh0K4=Xxcd-Z(?$s z-_tyKSO=rYE^`VB=Fux>CZT);83id9SuiW3j;lOdf9z-iY2eq-_ZoxXYPj zrNksvjRs$iB1jw=p{$yM0_7KM?1U-Zw{2t(4Y{GPq(>}hhLwnN4rG7HeV;n}wx? z2~o^N6wQ_2y3FbAiG?uD{>85Vqrk~?gd5^{GLgCQrMd{QOmg9Gb-^4R`@v(*b}k=P z_YuK91MCi{Se-|OzJq3QbBwF)ZY_~=>($iU7k4ZIED033yz2k}Re*iW7A^k!cg*p< zG4X5Ssp8!K%prRsdM7}~snCh9N><^h3neC@v1Ou&fMxhT1;mRpV)>xkE9DnR{7`0Mdjt<0>|nSTE< zY0{Ji2ygRhCC>VCA9;a1Z{Rv?nq+E^f%|%Ek+o%L7;D>$ubBM>c|KkMaQ>F!uvknG zlKGmRnf@fI(hF^We-Y9dexWLpj<8#VV0DajJMYFZ8-G=|%*?@j({`OY-(a%A*W~cv zdiZ%`$!N@b82tYgs()>oO8G|Iz#~o$6mk>A6a3>eJ+AG}cfZGD+9CB%e1>orP-TNk zK|ek>woD7hu0r?_F07^tme=kSh`R(^Qw_4)7MJA(mo7w}ubrd;Lvjx^g>`8pWxQIj zRov~i>suk97%H&rd>JWi2zA=%vRP{PY+ZtT4>^Z4gD&b_*4O8z5>Qb$XJX6?oC$h^ z2&BwAqg4XR;F48sEs=R43aX+>_(55kt=-M`C&$EqtxHs0LmWDxLvEf_SANkiGjV|W zT<h%$ODK{)h(r(}xi}eS@7tl6mQYOGMssCnqQQ&+{8P zsF2Qr^sf3zmfy3ZtV&sMMugN>1?b#zkK^Uny#((jtoSESV`Civ0)9_p!^R^m+$i%V zttn~*CM#$cp(}uohePEIPUuI#A6R*hptB77bie7D1*saV;V20FACAlc)?@Z#2A@j1 z&m_;#a6V&B(Ar9?={i1`Srw}eE4fj1KR5%f1gD2*?#i!g6DkLWBQ1}g-ejaAygHZy zF=VABIi0cVl6sjv?8$&VoZyxpKIL*5yesG7!Gd~yBljBk1S2_Uud-pY z;SWBJNHgbuGd8L!N^i5Cb}5v@)Qg4G3$4 zjND=b`T~vET3J>Wq$3?MNppX3x&j1IhcR)Oc;^tZWJ?^IrP|b2XY&T-b& zLT@4eqp^r5v%m{>Tyr8t-v+VL^A`8KM1?XtlJ{bwV}qFT*Wgm#=BX&(*x8)KbULu# zC|;S?>MyBu23lIfceIh|R(&tVHTI&H9}c~2cYWfyAvJa2Wl;Q_D=06Xm{gOwQg;-H z!C9iem#<=p`G!1yIHHPzSaWW3EI3hRiVwWnl1$5*KN+a5{`;K$u>-rFbhbd;6xp zdH*yyQ88IpT%cx6UTEWx$W9aKmoZ6zUq~0lyk32Rzbq%`owA}OP8d@t+F4#l5`X!j zcOTfU0`wfYEu7g7k3KbB)c>q13RoVLG?)88enLyWf2waA#@t{(qUX%oV-6<{J>M{VKa}4hf^b>)d zy~e{t+TjR^2ytayn=6m~AU!3}!LfZp7iAarfy-)tP$-7!^D8ZZo@A1J#ieR{togzy zbu-6f2k#E)Pq|xwRRqKr=rA_ZGSUM7p^IGs{ewWQ5l&{y6UQ$9yZ3WTC9rJb*ehvc zh%|^thiNpY8MTw?&L_@`MY5UEg!9A^vgwwcmVc6?ho3vw2zq`&1#85q#tZ9YqB z_;BMMo{?npx)M*p>>pXJf<-?0MAaqOdMU81Hra>9862YMOefW?g4=9m0is4z$CA8~ z9o5VB`>5Nxtf0r``~KRcJ9cXA#F``YSfQOg`Q#MoL`p~GH1-5 z5ohYmOfEiI4((oQ$tq zdRRX$D+j^f(J;hRN-G2%n02>!yevy%7$#IaD5$Axr~Ts;QuY0M2IrFiA&eP$*`Cki z1r&NMDs2Lj#S;-vy=;l9T$Vze>U1bNT*PO!lG$NUSQuHc|BKpgd*%@mE_MQ=xc=&N zZxDJTI~$wYO^gsyo_E>zh6;4o6e@&rDi{EZFD}VZp-jW$v6=Zq&qSvTz0@))D*E+8 z$c{s}U|LPL>I1sdzUCFb60e-}tct2;+oC>kSIC$%E&7~cbaP$a>X!B5G6+cSJNUv=+upCC62e!hgu!wdBVu-4Me-&KQB; zbImOgj7}u%@+2b4xWaXZv6yr|bD|KI>=s2yEo5ipl67=Qz zW)htQ4=>jR+zFg`ImyZ50;;JvfN27D5?MrhyZ0a6b)TwCAnmaepM=u2lhooEEw4i#9qHnL61V8?j(+C3T{Tm9 zUdKx1aJ>Z=mTjf8+6c2k`~L_y(&|f$AK?)>(?v4n$ehb)`jC;HLV+UZ+~mB^aP!1iX^m|H zui}o}4}0U(o9tw}VRb>&dRr_!)Y0Js_O;9dWFbDK;Q7`J6o;{rkr9ipJAk`f-asL@ z_DAb&>+6xBs%dCx!*1XD!I7$slDtk1oS1?_+=1Zhye@);jwCeBBw@0+Sat~M)}I;? zDVY0G;nK@m33lmM0DS5i5hZ103=s=~`&qgrRIC^6oURwr$hxI%eCxDa^ZHA@aH3oU~SBL^!uh9oUbV8=*<4J#Rw?2 zBqT0}h`E5jN}hdQ_3P>m&?<)CXA2z%>CDc4m@f1pQT&7X51K+ndA{4N#poseerV2$BnWz2SyuJ}>E+O73!ERU^Hs%i}$Kb1QG$yL4gJYz8Gc>hIB z$v(3nm8Ue2Am{$Xl1MEdk>F56jc6jwr^Tvb$f1`c5;U z;SW}11xr1>VH!~jELqgQdtR(ecv&A9+#$$1SAF~9t0)5f_40+pVxM(gg>$5SEspbiAXwP0@(w7k7oe@22 z^Z95A%~!2wbWD_BKj_kxl|6BPr}7a&1DLG~U3yrLo0!2Cd4dePoN*srW$JrWLwVhF zrrQYuyZ^n?v=|t$=cV_lyQHv?M`RlZ2i-gVoX&PC9Pvg&^*a z_ZSGx-u(G7rryoS5A6tEt*Qed49XJ7YIK8xgP&kSINac1;l%Y8x*mYwd_6hRvfo}a z8^LjP$PJD!PODvA@8FJ}+~k_Vu`SK<@oBe-M*?mmWeBz)sU)}RCIoXYFC|*sHj@r! z2?+??J$o&L3PYEv|89JAxRAQKBpUl$eWj@-Fc{w72ztOJk#B;YXF0^P4OYmw2o&*- zE5@Cw_s*CDHd*145+WbAL4(9xtLFOKn^}t zX`E44_R4KlO|~4bY1!8(6Pu-RQE8M(Nm8lQkuFK+2BrEXD!B>|*u%s3XA_@)K|!+> z*8}2)N~ChZ;5pcs5#)n#?mJja$b)$o#_w`U(N)ern;16c7pp%fULAb z0+xBO{Q#j711a=ccTn)2Mu=*$QuYgm%TSd;>^+0&H?+E+H4Uhjg`}T^elDfmFn2ed zZTNT$_5s9BWA|#P=+iCH^7|6Db)H5zl3!vRK`=}mogz||{>lA!SpKL83SF*v!bs3B z-h8G%OHjUGNFA<)Whvqskp7Ck$;|9f`9AIHqL$gjn*Y`W>=By%wX+vHy;EDt*aZ?L zkU@ESuH|J!7!HH#shrW29;|iqSI=_!meXGwKJ3saVU4J*EgA>YO+*NQVBmB*_++=# zH>Uc_V2raHd&z0D-@!a8iJTahpKVz(Rx;6~xmY|6bbRCRHgEtbkoffp zR$eqV3)<5gM{FR%__<##$gRPJ2)H^qRcp1QE32l6(c=3PEOR520HXiOXLk{PPMI-A zF*yroXNCy7MbM8QpM8iecC8=(3|%lOeO{{SOqcg>Y=P=qV-;SX?OT7kklp#UZ*8>_ zUgytmZZ;#G(Mdf1qw3R8!KT0w|5G*vdL|~WhVJ6R71Q$H6$3!A@Ir;O%8eihLzAr- zfVT`S6evUu^0*gcqq5KqxOVS%X7X(LDmJ(&14bD#!92gc&2Kpj=5CZ?=Hl9h3Jg#J z2Y*^(btWusZSZ4gtGX3ie2fW5l{Dcf(ZiIjHI;qGM--QO=9|WHbvpx4Uqyc`}FMfA%#0UM!_f7 zsg|BHL`D5@#)Z)R)Kn$MD+W|P`yF}G*MX-{@;$P z60e;IAdIGHqVq`79|e`st<)e}!9Xe6#Zq${ESZRj4wGkJ`rq2nI}mNoQY|%gbpwi# zZHn)5iT_toccMXwK`f)i8x#JWxC99qL<`n=;q4J#88o|~-ZCCA&2W}|`$td)Lyks- zky~wRL+*};k2h#uHUL=`fhVc&g6fh0k4}g?wq*B7=b0{^j-GC5YA@Fvf1)no+xt_N z{w+_GaHd|1vvf?Ky^IV<&cJ8(#A`q<@Bk3PFN2C^ozGao!*2-!atL6|_CU6Pi(yQr z`Kg4*@GLzA#w;vsB-A33*VvHCsb9$5l$!VFyWIP0R2EGJ3y^o zxZjOettl5}4TkxRkDoM1CJ`~1xNllAB(mckdQn)llf_MK+Tj#^;`hB2c!ly~zc^fykJcQLy(ujGz~TpS$yCoa^coOY{w44baygfDrq;V7nc$W|Dg$ue7fGW}9cK_9a_Zzs1nwG>zdgXkM zyj%YGD4UT@=KE}*pp^R1uf)WuGH6KZg zxVf2v3?K^JCz-%-7K?H~gWD}FH7R_okIjH5V~vZ$d|>xy733SV7@~3hj#VvVfNkc7 zUF>cP$xwBgV@VEEJ<}}4{ef(zbYk;!R~9ve_i;TCN}$1E6VAuQ`YX3l$3$6Hx8jVy z8rsq_T9su~lZu?7s43N7RD?Dq?*<)zV;BV#AzY6=?kuTmXr0Fpm0w1hdKTfe=3~Ig z+X$iI-mK5vM7PuhaZvQv3Ao4!G3Y-sC}~t(<33)RqA`AVW^nXaw3L+`*H6|mjAAGa zytD#;1Pi5;r-d+_tJ4LHnG{iRLHK7=d~K~3tP4A5Tj6Ift*y{w3(-IOZej3$e3lf= z;W*RLRBME}tyU(SgD0TI-W|St#9SIH&!glx;vLkYbjo*_0c23rVRoxd7 z0xv~?eNXs=Wcfi)kK~xM#IB{U6(!{?nq$DTdQ#?SFd5I%(pL4yFGi!{++NKkYIa7| z*YblWl5Y%Tl*0XU%zojgDo{is`x>HP%U7UDcRR%7s&`Bgt|;?=s@zTvbToML6+WhEAT}1Qk_;l6o8RjR z6_G>{g$g)%LSUMLKpY{RrR&FqmuhHH=M>xp=!V2HorKY=5x?2x+1}}!h+;LW>V@z4 z>D-SDc0nDx3G^12n2jbTGdatkvl5%f_m^v2DJiL6%ga1DkcO9=QG#MqJ<%2}hnE7_ zN999!{f-f}2V}4tp7*Z{HzOTBSuTm6EE|1pZyn}fey-1S4C$bR_d$Vw5douv6MT7K z>?%V1t&k-=y)d%kp_btwj&Q|3FdgJ(0bN3#+!MWZ6VGb8kY`4Vfqj8Y{&jRJ>9H1n zK<<9=!8O4lY*bsBuw3{&on2tTMZ!sEP~^aYnz>z+zKO%0=>CjdUpr>W5j9-%p(n61u}RtZ6>8^c(K z$#Ua`nqcfRTTgmdw#lv?cz=qz0OTaE7u+35(cIWGQJo(BaDMQJ%+YdkBZ(`rDLJvR zN{)_N#nsOj8%_KN_k|@jqPjFs&%tvp)kRe?j+#@ZRhkA0pRuvxWng-e9bckf)>_>l z`8}>QOrF!K&mQad&ISIg*1OB5A_UFxIhh~7%h}*A?6x%6PM^QRHjdx%Vw3&o%$n(V zNdu%o-6n8`hmUbI?o}t}$G-^@dnLAo5Mh<^Fw7CEU;pHog<5+*9g^GZEq9fu7brM5 z9L=6D?LGUvEXX@A*&WpaFYDji=#>JvjqW_oa}WNh%-|rxkigZ)zl&o%%??^S32&Yr z%Z=#hSiJ1Ox(l+5vM1EW73ZV_*9v%~oHXxrP4$fC{!$z>(=!srCkAYFjUiH3W#!m+Xx;iArCqB ziHv;A#NHqW<`dkA4TI0q_7NtqM;+g`F2SbPNys4J$MyB~L8oHcuE zK~@6;5RBwP1eeky1s?4(;3AVHyxp8#Wg}vmbOL6D1%7k3V}4>!8VUB*NyE#FazdG2 z(~*0K8qQ!eftDPs`u+k@}hT~E~UYt29us2i7< zu)yDjmxl*rn`0wRC3s?OI!EuLM(6%?nT=rWi!p8Z5^34 z`1@j`3yHlqY-IidR<_fc)Q}Mg{`o<8CKg4GoseRaC4yGi1I6-p>GxirZ z!7f}Fo2%cQ^=!Yxl;*!aw)%engb29E`#y%1- znq#6bF2@I1@z!-ryi^T#6N<(T;^ORGUAZHZ>pm|B_n|l9^$xxw)`gU7*6O=-?!v+JAgkrHZ3-&gCeX8- z>OBU=V!b(84|zw35?Hh+$3UGv>p4l{nnaV|BVKt=Va00yRrW`j;q%3sq;)Lp6xDpZ zF0;VL$JxF-41>_ar?AuMXgy{9g7&D$kiF$3^?g>AnsZ2{m9;flCh+iBLRxrmxBH?l zL({WlVvfiSIsJ>5yxl*qp*zb3sOKx=Uca*ovctc!0M=QNATx(=e&cIoUg`0%GErH( z({Te68s%KEKqj6_e!+MKk-fN+5u}OTXm)Y2rFVWZ+{@>^&w!h&49nY7Gq%+QMHNMv zL|t3kPgvNpoWbL||L_r5%&If#r&@DF2N)Uv&hm7(^W1B<(y+WdMfoKS2)uz7&m#h2 zZg*cp%-F-_I&Ca;bO~f+Stl3{8E2(+I0!@`u!%h*BctJkDqmCM|AQEoM*8mcG?xh& zAN{NU1onkKaGm6eN-q*~i>$$ri+yWhhBYoq2G$619rU!T6>(}`=9QE*Al;fHqtoQU z#LHG>$cIkib+TcExm2`M(`d=RdCM8e^7gj}1qCV?dA+u>Xew@;PFC&Q?8`RE@=t8kHdK9TVhi1j?5!{*y|rl zE2?fy4@I~dlX^2eRd^DzpA)f8wqiVR2)a%CEuxi>Dg~5K__u^(-ySlVOup{9oTm4Y zw)2vS{Rw{l@Zy);Puf1w*l#Jh3BVJbzFTzJ+_8Sc#~{dUAPz67Dhg~soM~Az)C;*_ zX6ZQa=m>AJd(9s^_Wr8RQO{_E6quGblCDbqnT69#Yq)qWJt0-Z%v-R+8#f|i3=0FN zoaNZe_T(^&`3sT*^sBX@5OMU8OB;=05G`Et8&EG%KH z@n}?tDW9d2D=IjVZ=CVHXt^kWeC6Lny#SsmJL?TJe8@4{Bnq(g9-p2j7kr*0iQk}y zvm=`OmX95UXYGu}O)U+-*o%oZ7W;&!cC&U+{>+RDM>=5k`PJUu?#3%N#%*h%4O|g2 z0lu&!8t$%*Gy66x2?6*E$ddd~PH0nyhj8RQIH3^U=^;=DmP}?|mNoL8Wm6Ia<}35@ zBSPz%v93YinJroK%}irB7eu^oSr+1ZQe3oCmQE6|?!pS>Rr9Y}30VxkNRkHNb-HD_ z5i|eBuPc(kAz%+9M?`kpxtiwe=g4vKkoHl(aqbtRUs+kEzU>uLGseJrk;7ZiSYx`dl_*ZHQnq+vWC!0sDi?@(o+uQX-=9zYvd0X5+ zc5E)yZaihI+&7IEpF#H|KNICSm;W^fOlJc$XUEFX%-&q8nZk#4o6h{bd1>74E=9feRrrNLJF6!m+)sDCGBVio({`X^PKo4z+H|UJ;4|{>mPpWuEdSZDFg0 z{OJV23c|XMJdU7%!sdK6Zdb*7x0U)bm2Ra}){Fxqoto3(ys%=N?5qmdzCLllJVl$q z>+%(SHTA7Krb3=Vt0vuhPgFhfz)z$# z#%E`@NrrJZU+gFUGGX_~YD{tMXr_-k8ZilrqM~VzQ(WccIiguoNY!Dg%VV?F6lR4i zpn>LQeEO%r7Bvt-QsDmXZW>TaU~3A3+PF6;@eF(eenjItAM8g!lOo*1sOl)!)-?s1 zWUJ4}B?bl&+0cymrFKugRqu`Gn-7~V3w26Zd}X#VvbZWyw{w{6FPv|`y}YOV#1V_; zOT$43zRKH1=)vg`=qDYW{rJ*k6fKRtr>Zm1n6t_G-;Q zECD-;yJkldX<0_<%4V)&{(dknT60H8$Cva;kBatMta6p(SVfe*E4`kBKfr3eLM^zl zyUqih%jqb}>6ldos+;Si#S0e>VjMtzgGb1jKM)=TQaHcakpc0D^aUnkV6wWS$Fwuvn%BdE80Bqf70ayzZD%O z$A5*u<0ZE;AvRM0QVnE19u`(M`PBW1d`FK8W0v}X9mT22ML~77RJrux*TNjLk|3wD zDqzKtPzKv=x-WVtsJzbK7$LxR1t8h?`oqJ>_ABR_+? zuNj8oq&oRosay>wsOYKnQ=uHQ0S-3zi*cJ}AlTbX=dn=hS3cLnPO7Mr^s&+ptBdRF4FU?gW>QX4BveogNSymr{qrKk;sgj z!)y~veivtFMJhr1zFvu$uAG5c?k4-Y@UIn|Z{XlSZbfoU7%OItoyz6ds8iHqO;%0! zfmM|bs{jj6(6YAnP(n@EvqqqKG2;Okak$IALxFA1nHK_Vbr(R2t1HW2e1JkxLR9HO z(&DV#3Zzw?oSU=h;g2sr5;5T3&=-}J{=eJ8Lu~VUri1@Z?}_1`h6U(b7$~4FJGuB+ zq_&6@ZRoC%k_*X`G8D$;?k5yinwO(cEfkIaAjpq@aB|34MXJ`hc*vd~TeERYXo~B;efBXGImG5D;Bu7y=Es;{8KvwyrV{y&?HhjY`syxRPAHeb^lqgqEZ@K zu5K@EKunn>N}R0E%`-Dm))9f2xSc4Kcr$FZpQVJv#y4t&Nts5Yg&9)z?5ICq6)qHR zMhl=M-i^q?&ov}GCM--eQ3m1rcZDKIa~XW2+Hh$)S+<_~?b_dY z>8T#j&x3qk^f!u-L~{tL{zM#5Y+t77_uobxERXjGTiD-6KZeE9lhL7fT7L9+ys8_n z4iZ6qi}bl=-%7PXK!iiewJ9~OO0jx7UvJ2=I-ssT7HOGxA{bn8uc=n~Ed5Su{Aen9 zM`&a`uuSy(E=RQ+qKVo#`LsO#G)w2Kks#CJ=*6pX<4y$EK1`@ASM^zwqOacIyt#D@LZ(phXC;aDPd1_I*cBQtX(g5DlJ z2#;yp6tK_yrlNK>C!B+)Tio{e3eTzw_Zu z^a;PN^>%4<6D>}S9g8sOmtBo`(|FHXz?>pdg;nSyb@HBl3-_esYfuChG4a2?))#pc#2vP*Ydt@VR$j zWSI?WnuW@p|Ett=v0F>8TWN9Ak#;#-FMo<)!D${%3SfJRcf?(;#qrYAk4vI{!r;4O)j{y^4#yV-J{hUKXwQJoH)5Rt|?)4558jk~)t>L#+*7q{Ux!A_U+pf&lc;`v%HxOv2l zDN|X&9dHsZH=2|MUR_-CxmZgF-WU1x5r)&aJtXeSDvZL&t%bEDe$ZPPwoNx z{^+0buA^1)(U=gnHzqdpq2nT}q;H#e>V)4S5$0r{9q9$Dy^B)3uN92 zFW;P(X%8#bSSaJnRXbfXnl+rRHAoNjn3$IBX&JoIDL0puW$5j<=SN01WeDZ>N-qBe zvjkH5x@{iMX~);NL1yESeQ-G&`fNsNKcEHmd4CzWAEpz}cn=qoXbwk<^v57btIL+% z%F8Oss_?IHA^UFkrym71B)%8KPU#Nv_v>_mY8(FC*ND!2hgxTpm6h^$FMq8h>E-(% zK|BSlxfWo@?K4L%b-mvBq9RFn3yn1#GO|AQ@Te0;)|1@-j_wkV_REIB*Y><%pB^}P zZ!A6ULR#BUtcUbF1Wa4BJt^!cqxf(H7B)5qrz_f87bRwA#{1B4&fRqc#vdz#rzgl@ zp~nV3lX@EC`y^r0Kcvi7p57J-b4Czd#&v@C2d%Ph-d{aebQDfQ6LKlkRsT+}FsYkq zChmoDaO=AW@h=w|2ODB=5P56#t2BQ4vzw0K@q}Q-%$sO1w;`{= zda(D(M%f*sT?kuYMAiLBVL4@d|Kk?uyM42Y$zvMEa+6bu;?*}8;&@JfQ6?&?m=iVU zk2E3K&)-^rIGei1*XJmP?bDEOqyqc#b=@k%=5Q^uFSxHe9o|Yl7wbnZr`tq8V{2%^ z6WzHysE>qTQ(p(7HH+c6!d>~5nJ6gjE<)`NuwsfAzbfl#i3sS~>KJiF)aWMCR_|=B z@!rtgb7#DsVS((4D=5F9PA1VrPE(Idq5YNjKZ}4l!5oi@iw`WT4>UCxox-_*UKt$h zBESsXwZ^t`Y3a6Jbtgo~7%CBI!C2wwKJM zw>`yERmRA|Xda>^?qrPE+kBrz+H|?#c8aX&Lt>6jBx4}ubCvjpt|&#`AN@*XLpU1{ z85)vD%wQIly5FB%gD6c}(;V6l#24Do(TdJ6Id$AQpph9@@bgg*1D&O7qAe-Q2K1x& z_uFCQv=kS`>*uW=n)HvnitSVa%of6x;niAblDm%@fG~&LgTy$G9EJi@m?p~YTmn87 zl%i?r19jT%{^0V{jKT=1gP(MKHs~sbLsUWASS5EjcdmY2EeY60$Pk~Ey|mu?UOi}z zEDQty<=5c7c}%S(C=>zW^5&*;?p(U#->=Fk5qMAesk4COQTxB+Y%&8mD4}CbO3Q|f zkPhXJ%)Ic^Q@6NsNa8V>eeYijbs@9-Tn#;&ibn+Q_usgYzq2{CZA8r&h~MzA1bV*8 zXuGg{{_Is$1sNVjr^Mow!)@mGU(#9Gv{);Pp1Qp2B@}dlqZ4 z{z}D&m8E_%-x?0<${M|iHQhnMX9qH4Vc|ckgxaoQ#lr-}J1n0n8-GCE@@%}XHaS0d zvi@X_l99xUA_Tb_6AEsUDV=rzJFeyN4sjP3mrv5lU)tN(i$}w=k+(H-OG<+MMNQ4X zMMdzZ*Bb0L8t@@DCLM$w;CJ~xKXp!M0@0`{x{4BhZ|gd5WKknLbCZq-dqEsDEB{TT zCCE2#-WS7{dxAIxe735Keaw1vEA!jq1gZMPl@%*t40pZOcg1m$ zi2WyL@l#*UdK~ifK6}I9FA_@f6TVBiMP`NyK#izS($re&xKCH&1ry_UA+@|bM^vWI zk+K9q;ok-@x!GFgiSO_Y@tXk<%6FBJZrhB ziW&Kx$NsGUx#i*blzDs{-b1?aWpL$usU>WL-xZVPiD-^2BP}{zrpUsIo6JFHF1p+Z z1G-Kog5A!}j-ViKc0c`36>PzAtr0LD)HiDcntChs*278ZctVVv*DvmJqrfBQ zpWddtluk=aKafgJK8{)kv)g^?CTG~=32C!gg zIu!Z`J@VGlf$H2pv9N7g{0PvjzgQigNO?K!?&@NJ?|Av$u!hF6a=H4*>A5o^HuH7?>kZ9gcU5UnD8Nl-yy^`(>j zZ)}+;24-v|rV=0fHFLtD<%FIqry=Dji2sPR0d=Y^wr+O)U?in|#N2f@kWQ=nXd$@e zQ0-gd@Dudo^EYd;lk87UYn^})!r9o^zPCZp3)p@R$5eoJJ|ea?I@>!sQkad_8mw(irc*VH_6~+*ure`H+}jvUR;h#^pPOo z0~-OFf7E=#J74likw8A7dV6~bR@I(oeu8xB?*mV`CsCWB!8M6E{mwz_GHYmUZ| z?#~a!JSFvuZnQk)R=6E&zyM20LT$b^^C+4>{6t0x0oG@%N1+Bc_e2M0Xd)e$KT0Hg z5mJaNNLr}X)pCoJ_>5qj{_O5i6oeh@{qRRyHP&=Fh(`d)o~-|(U}EMH4z~NlhnlM% zj^X{$?JuZV#Tb%2&NWAUJK+OL#MSeM58CYozT2_?fr|}Lpm6f_O(IFYru|!q0zV9} zAfjKbY;AMAbWpjnOmelfQzMp12{~Ddp3l$F9=}jc&RnV7a@NFDH3ZBmJ%viZx|@}! zzJ$Yi5Bds=AYD8^cKIxnmwi85KC^Jt1rmOA#ctSbFiYO>_qpLl?2bl zl2*^qpK!`@>qC%umoNho5wv*e82tRNL=IeK90+)8i55so6^-zj|C`lvmm{Z|V>1+^a0 zrjD|Q!aMQ?9dx1iepBK8v;Id>K2u}8pR0^!o%=FKwnlHoidGuC!enUMOrB&#Ty0G$ z@ns<%dXj@gnlXTZO$r;z{&Ffvmb=z^$uV)Pv~qT<%$bPRIov4)*|-S;(#Xc%{wD&0 zG;LxH3H`8C#M&Bl!+;Ce&Y$gP9^?ECLpNt-{LgnLn$A`5PzR@JA-C$z~ z(cla0BRoI#G!+*YEBcHxL=X`XiA6;83vP^qh@{I%5B@OBQT{>NLqtuyfO%y6JM;PH zNF);gC>z;`!rFh+CIGk%xSvS5g{rplmyq;4{La|6HHMFYNGU~2nNFaRn)-Nm?c+h- z53#FW5auaiC5}S=cqFHmd0pc;i4`m|=NRKicr31bd~LL}T+zgk{8$7yA^_V~r{tUw z^QUOs(#OFa>Jwl7p?|gtS_t1Dxe%_TbP(@>WwDp13nNDGY)SVOd#%W;UEh;&5`rFMc|~m>e`T zX?lDTle*^$FM82&+>*3Hv`okC+C0*JlVC~BS$Harza8uvX>VGb=W*@+$JM86 z_?J$dnL&^TW#f00%svIFg9mkeCy58Vtp=s>50@-&y4@<5wE89F6Qo!~A}3t*@8@M{ zaT6KP75Y=LdD7=t&JE}sVd8lo5HO``qe zzUuW&7?m}1#O(d=uIOwiofEvB#zV}#S7%Fl;o z5wRIcp4fN$=T;FsLZOj4k1DS;*ZvcxlD4uuWU0C1{kdpM8og}Dz-+z57YWtPVbAlP zf_fvw3(VM9?w#6|e5>+_UU&rFFG~tP@8udQ={kMg zufL_YaHEUex(d`qNQHcHIh%dNUC}jjCV=(g=K6lZ;r{)7-Pq+%nr^f4M?sI?LPr*| z$O+c8Y11)s!6)q8IDj(=gWk`&rL|vAhj`!|NPuCA;9n> zUrhP$wBY}aj5XL_xHdKaO3`n_rqEuAwY?M&J~V!7KOyI8B*wDY}F&o%W{O z2SZ0+lCC1j?0h;V%UJtOG)NY`vvK0m2n3<8FW5eDsn9{1KL7USU5>llBOG=X`XDYV zvkEH$G9Ft7^`q!s+>y<%^0y_3gz`h19umjHt5f{?o;<{}3cLL_p@)3cTmC}qaeLUb zh73fD(W_JAiGvwM58k=#Z-#6}qhaq_oOb?sE;USfowJ&rWk=a%@}{iN+s8P5od@y? z-%6Ic@bajrYVSLRmuudA-BD(U8X7BoogHvKmmi5kKk9@n1>c=*$o>`d5>xc(u#PwB z2`As*BVXDLM+Bf#V^x@*JMGU_+?;LrD1dkM^+l4e2|9(}z2SE`_&lG}Q!UxrbtT+I zw%zCh;}V=8;5Z@n$ln39)_;!^4)|EWP{s->7ojVqw9}fQ(s(_KI}$jm7_~8&q9FXZ zkXYjmHcE)YcsO#{&tJ2(Y_`Xkx-FiXUmpU40_in7tklmaLkTd}xzjj5J1m!1_q%f` z697VqLfv}MiA2Jb$H6#coz9AnY63e}r`#N{NS=-hMqPBPNffwzl%R(Fef^wyQ;0-p zTnG&vTwHn?etIiajf~G397TMfHO(mV6r`wU`$@V}ToHYNoY3}YR|bvg`0OH2Vch=t zX~pLF@?cyqeLliGLAO4W$|kWR=6`9?#79+Y48$_m86SLb_Eh#XOR6QxUv3aa+1tU^0w$#N*S-S zxU z8*E7C>)9;Z=_d!9t$V%#bJmwcTfLUz;Y(kr_A&P6Dcn(EI6nUIrQXAZqAVXJP=L$% zs?<}aMJ;j9dJ_4`(!fAcfSyM!3bgAMxAXJ)+6SmgwV$Q!Xa{h|s;=1o+(ez3X!cJ& z)_1etyuA2*wpixo=Z{vz=KpJ>!%+Od6SeR5f1ca$)+<|lty+ulIav4F9lu@TYZORh z8iDjjLNPwjHLypMwhf{yFi?E6!me5$>$RXYD{Cjl&nb|1JnKhCEjnm!h5_UxxN|iO ztdh2aE*@2-hX6+95S&+j8v~;-fi-o2i&s5~ot@oDx6FIl#ej5y*JBuEoHJdObuc!U zM5kmrg{Q?m1?k){_(XfT-KoVfpQB350&C%m)!rVk_Q*LWkz{7do1S(Q!69eye_pik z3y+?k=LnVmsq8o%5h063h$~7XN0hfvf%wP;i8Wf63FP2moe%m3h*^GBjN$pR6@wn1 zS(R9mLdS*K6bPfS{HN=6Kz(#yC;a|!mX@Qgpj)D=aIRwrHiR&{=j;9gZj5*CkHWs3i)!N9@A^($9L zS&cfbq=XRmrz})3K94t7Q4A=tob4vT(3Ww=xi8-PPpYrGMvd5wcGlLG4`Lv)}p|@HZWo$6xtWiqQ4XsJGiXSX{Xo7SvnJ-)u|ve;4Yu?PJ;#4e{_bcmOb8%dva6WtX||JjxOjcx^| zu0w*0(#<$GA}<%jE0oBn-@me=U+E8n2qdRigM)KL{qd*?JQXy$^u@&QMf#A)9K0CE z9V*6r%whS{M!Spj)j>-Pzms5<{3sQe)R>fS2vt=*9}XuFrmDiUZ9i?y&542wcL6qH zO(k%IPrS|-TRR*xJFxc$uO7BWSG0k9p8Sn`Fvk!~y+Yl8LzC`3JjutnUfTJIkPeTV zrw@@-w85x31pMeqEUmNY5sx9qg;i7@(rq?*BU0y)b(l1iy*K;k=#LxjV`>ggPLB7j zMQgzQ707!8y1VeNnRPnohev2BtzK(?8O=7f*`G6<34Tw$kY2y?w3p{+vR+LFSfy?0 z6WOP>q-MCQGlwYKeZGl~zcBqbd;k5$0I_<1g`pp(;{QL!girzuKcie`@@%n9J;rC+q+rX@`K`razd``Q0Dqy$fAx~gjJs#kla%yb3_d+CHKr+2NDZY@rl3s&o3|9W z_}PDxHR$N-mQXxxw0_JAKjk!LAb^c-x7m_`)#KK#pE_H)KS+R&%hDHn2+?X^z})l$VpwsN?4 zZC0$(v*Gg)B=_F0RQj^QF?-BiNl$OZSl3Xm!RBN^x&T$SpPD`Rp#5{JK~-H_v_yGf z^147i+?FmL5>hu^R|N-TEW?(Nq`EY>YIx%-TM7Bu&bSU|Hl_i@4l`!YEJ(!V`QswT zihIP9;#s9;oJ9Z2BMDwtf)oBetYm40QOKOR0j1{=Vgx8t?Yq z3e)!xv#O<~Zu5JD`-?$beMeJACT!e&`l93AT`@YQirLfi$_i3Jdo)alv|GGPk6>iD zySbSkrT^8SrsS2bp@*Xc%?$r+VE!&*fKH}D4|{U01=S)jjV8~`v_|J@HD+&K2>xmy zIFdxUF6=~OSSHEM{!9xkiXh;01#U!8G!<{D_D<~0vfp=MYpWp?ZXOLGb)jg5;l@ke zg-N%=S=t1a@_7*}$XUohl%qDoWNmZOZ*+T9Chg{ijmOiqV_uYGdk>fw(}lUwJ*Fij z$N}n^`Q|8wzx~x2oTowXjuOqY$F69Gu<@sr1mr9T5x3EEF-69Cp%4;TN7A(O;gA# zN|M=75KwZaTy|zBSMwp}(9k||a6%|p{@LN_yfYx1cRpV#0Ax%M0}9c8mgCR&K}7~^ zm3%zs4XC8N0&dMhjq7cou<7|S&S0Y~OwBvSsigHTALNBrs)D-X& za&n?yYX(hh+v@=O&bL4Mf)@Pe+T}%V$$3Tm`~`7>Kx_&Y33@(=RP(Rssu_TgDPj2W z2N??-5!9(BI^Ct@pmp+Lq>X^}b3=cO0A`eypJXVYf`f{AW-^tfKI8erN={(wd~vmL z4(1Oku4*u{_cAJGg#j z9b9}-cdJdR`NL>J=Ekhv;uKxZadL99w_#XtOf$^CE8rnA#T;`pw~#etW%Imr!U9F_ z^L`%(CDM^K@(2YTd`Kh(H*o>(_r|j@g7Ckcqk#Yr`^`r>YfSpTf9V8AJ3KzlU&XEX z$VV5%QH5lGRXispGO8A&rmZ{X*!{NJP{z{&6|&{$_cnApqH&Bh4#oT|zPaA^B{Uue zK0O^seTWW5%{=@NLBkpQmxB5k8JsIv5RV+2*T#(ATLEJdMp9p^Dy#;@1|=^@6Sis+ z0?oBP5j;G5=P7a;HEgPzlJaPzLVg-APJ~@G0gIH>2n&fT3vjmO{gIcp04*)4q{Z6w|6JP5#xXU|WBGeqz7cTwVnR zZ`Td_W(FS6!)A5YA z2v2T99+Nq`vN6}^2PHGJgIyjVLE|q~|AoQs6w?o;TzzqIQj9xIU_{ll8tR58F%su* zIoyNpTZ1lzaA!*9tJ`Rs&A&ubE_gwU-`VJ$vtM3@f36u$PGM8_etm=rXBYiJyWv71 zrNhN`-N3OfuvLSqXGYm0D5HF5v;Fw-I!OkP@c@GiJuWTqN1!4ATg1X7lm?{h;@m{8 z4OSNd%RQO_fAjl*c*hwW0f9uSg3{cqSt;dEp)nlX;#^4v@2{U6e?b2EiFRzSL%I@#+1pduHVIOi#xclo{$NLka zTTOKr@O?`Z5wVufkODc904$|&B~Dn~4%esn1au0xA1^Y}k}|)`&jp&l9}ytmq;c4r z?pN*BSfFt|j^W0~m+}vGv3-eF`{yZsCI(Uh(@>->zW(1%A9$|PP@4*YI=H`IviRJD z^YXB3dDv})(Yy&`5=hXYuF2Vb(6K&r4)~ z3o`4GJNv>o(kme$F8c}4mXXJ=bG?pqe7xvGB-k$P89*hSTubAG|8adrxG+bbYn*i1 zrY>agtC?wJsX2nfcIo%|y)z3pQo!kz5_Lv@zXZ(+=N_TKW_7nXeGGIp{O)&2^W;=P zj7Ag(#Eq5EF;YJP>M4L4w7=mCeP_M<)NnGrps^{L$S-DK0CszKV{dT&X?RwtgRs}u z$tWjQOTguBd$;ZlS#SW_5v`w${)0vJMi?Su{LN(*le~u58T_7(9-r6mr}C3$<;$lz zsH2gtRzglYwGPcuPTcW~Jl&QCMUn1P8O@PQ@EIcHdjt8beWmgFG603Z|F_UqUFq9!sMQ_RjG@ zu259mOPXa1@}~euRJ(cBBG$Y%kJ$?f+}dm->~S;rIe~Gdp~M3_dVS%Oe(Iczhc^Af z^;mA`Rk7yDcShe_2BHPz)7r=|L805aI++g*)zhJ*dwcB)2dzy-F;*cQmNvhGAh~ z8U&5&9|m+wBQ`VLT>(r*nny7ifcgaHK!HF;+wAM_vRj+%SA3&K$3b$+O7PfYWn|%s zB|=U`U|0M)A?TBG7e2Q#BMm?>cel7R8hwCP?`+pvTN-+b%;TGDqnH)hz(TG7vZSG=E@QR!7R~z@wN2#g_-$alkY3cN{e!CIn|Nz*oUS z_rGtdfiN7|b+vDXIiLpI(h~neH-ZBy-26Ff68%wTOJ)uDthsJbAfTX70}*IH;O+qJ zTm_5tzPp0IGK6L;=|D=aNdZ`WuoIXuSZ+;zDlhMg1b0twLXB@!jq$f{-!YTt`hq)MHoVF#j~^db^4X~2 zatjCT>F8Wdl4xM@SqphB|iY6Qs^ zu6Nhh_v*!vsi21lN;n2~5S8FYf;rC0Ej@%CL=L8fxIw&<(&aVYuiZ)1|El0HA<9|CLcuT-ST}YD(w41>Ts}yVemNb^+&!OH`5jB3koFpsLi_4c>OHExa zDlu!bv#`k7kk3*d*@Dt-_e`NktOAqs2v;AyL*sf~X&RCvCj;MzTg7#Y8`+H@GeCy= zE2$;qFpecP8+QW?Lz9!0^R@=IOHEGnX7GYjghDx>189ccR$jJ6dCGJ@qbO55sLxUu zjn^Q{_^;d^oSZH$?h{>l(>xmH|BtD&ii&I7x-|~L2?TeC;2Io)1$TES9D-}%8rL&{=*Y7vq5 zN~KZ-_Ju3mO7ya_7>@BRSRe^|!trYY;qRvGipP~zRFHstc<|1(hp?+j*?g~hP5!yz z{rbz1^z{5omWNHOcpk$g|9DVCwa`4i8I6~(XEEquT@g35eN$nh zWOT|`@_R6=BfNh;pk69pV!QTLY#S9Vq&J^%At`%WqnjmC6>No zyWDUbwB3i9Ir)Mc$$wG>zQ3miAHU_4>Hh*n8Nm-r+^n+ydp<=o>a0X^$X8`CLc+e0 zWF8e$QdW%1a*#N4Vm>Gfn|6aRigOzvq!2)oXP+lh$nMRCQf%tqPo!8UFX>72tak`I!J;V8@1G8d($c;DnU+O92D8MSTBy9L ziOI&gG=j~~GM?@xE=G~Mda2Gb9TYUYRm%$C6$Ur@~zVH)Q z{AR9pjk-1Xgg=%^QT4#gys8kHbDZoA*;qNh4IP+A^5|Ai2NzQ4xW5J_($_g@ z>u58~G6u$6XRDF?b_25-MjnsAyMmVM$&PtL3%!&wCg%nXHV`8jsSK>fuD{{8W)Zb~ zkmK+s*cxs5eL*`mz+;f(Kr}o)&a~9w9g*IeE#NIez-@N*{6TUeM;6`6iOaYTg%k{q z{9u6i>CMZ0};SVb{qUn-{-ulGCq82WoV4xqx`<&2HeqW+Y&{5fV_CGE+ z^&Iisyo5qNP6#L*c7Cpn$>r=@y3+&3{FrFp$f_ z5P$r^o{v9?)e!!mMJt+Xbm}kembUx6o>18i4;A@!kscjoo-H6FAW)*W0113*OT^lp zJ^F?}{*E2`h+MUPl5B^de&!IHm#QX>%oG;q-=k>-eALxb(-Uax*lamlZ9~4Q8>}Kr{@TF# zUNe6H!kn|<>uI- zm`QI{k8d)|kQ6C|TU8pH(cyB6@3QFLZV&RQ9vdtmm_JvP8M*N+>5nvM%p!rRtUT4V zxe^vQD-e+X!!O*>f!*0xDMO49gpnp=K5XT1pJ?ZihyLfa*+YW9UD9h$Gwt2~qO z!>O|o&|+K04{`d|mFz|B+<*ra9ZU4QJ7hQWA~kDZ1%*)7;(o>ev_A*^TN!12I;R_3 z$C$6*p;F# z^;xw;4D){k83Lq0*HIvo>i^`Lq6o-!J+*B%t|-OLE#F47G(3VCGSa)pBmJd@xIiA2 z+Vvr8Sia*N+2xECq3qDUu?2xDd4ct&=>*3#VUcY(6EqqA+mOqj1##0%@kL))qN3Qk z-CqGJ5x(8vqU^h{OH?ftS$2Ie*u`|Ktf3(aaC4;2n!n|OJFMO&zu0<^`L!wV>RVq}ix%sQ^c~h69)}MZ4M2(t}@&+Cr?qI0rQ1bZvJYNrdJGCu| zRysZE!dFb9^+p48p2(&YWurQ{vBX;&J}Qsavcg z5lujFydk!&?Q71C|Th3Q%8``<2)U&;|)YZV_H-H4?#j3qb#x= z=Et!0JJNNxpX{aI9MLbOq>i+;_0_E|jW+O*=P&&QSDi5T?tn%NR_~EKJ`^rd@D>`V zf`Wn~ai_J9&n^Jk6F#Iwed>GJ;9{S+k-s1RMgW-IFz^X}#x(@i6HPJIj=RAg`vQ^r zRFVg*GwO=I;A@CBJJ0@NIJGNfN$8?2U)z8Hcs#RqzS zH`?<2NVXmiUxb4K28{)PJ99a*A0+B$K$Cp}3prTnbA6hEeaw^@9y?r7TK1hdxl0m` zg)njn*)eX{~WLoz^@zIq*XYZcV&%3$tXCCEO5=?ra|8(>b8y{a5m`$nCE)A^Jg2qMrTI}D&g6FSvAwY5!5eSUbbTN>^Z+(@fR3!FCtbnSe>A+Qs=HrzQ` zdNg|r!qvn8wxZlel=L9a!k^R(25D>QDXd{`-4TzRmI&5EArZyl!P=k|?}Yr|pwstN zZg5@PKHKzLfFA`J@E%fR$>Bx(`&Qz9N z?B$bnHwBWnj_v9T1}M>KX~zc}-R=FZa*f>3P_c`TTO$;@2`yq)92t-XmQ(x)q+eiN z{FUmbl=rskGKCQVa$&^7_2vs$I+!euJxEuVx=xF6)BEv;8 z{a%cHGD3msb)(u`=;3iVii_xa-}v}mNE;Tzy1ZEo;gA8MDvi{X6ua6EcMne`8I^?Y zfu79J(cE9p^Qu}(B1){2aOc+JC`uVvb&ZW*fBKLew;06yC}fO*bn(?m!-WtrjKBs` zn7GNwGJO}UawizLWjpLtvip|S)&v6c9sIKJsqU#$5-mhtO3H6jKi6nZ7HR{ra?q^@ zHwQC@wjhZRA>lX;{iB|rp=qsqBs?EJgI^SpoJCMCaiCmWP-N3MKg@jMWRzp6)0ewkFYHO* zAGG_HdB2h?oA@7@=xvanuE@!ujg-Ov@(g$p!^Hd?0{nD3KtoO9yn3+LP%aV0z{;Z) zSI^1NY>9}3n0~4#fzmOnn}O@PRc=!BDe_0HFid6&Uws1jwprV-zOI#YLlFTu#A*nA zuG{*9MhU*KkUyzs{2dlb(LGWTiWrK><5ObWbcp$9gtiU`P0pd|XoVo}ib}>TiYM1` zjVew|C)LNw5`8H=)$C_-a@3Z{_zC9>z~W#-gOu$QxaV73@`}+&@Rt+yY|-lAq$&Fs z4i0p9yR4`Hmo2L%Y1FzNkF1dkKHmvEb4Ar!HPM%OZ+J9iDJfV^&SkUMfJ$TYXrG2A zmzox_6#5k7=v(uKp~y|IYO?wz?I0vl?lw>uX64u*DOwd30k)9`)CWpIWGl=LpN<4` z$X!?aYWs~rC6{RSy83tYlr4KgGpw$gjVHCJ&%zp^_-+n8`(2qv;t7y)GWYAs zDPODr>aFQXt*_%9T*~!90iY38lC|O3BvvpfE&aIL`~^BBSl^##SS;+HNr|BXf`xBg zQ!&Pu|NmS>x|lFZDl79(m$}Oy+esE7EhFW`;$jHuBgSp#P0f^shm#nlwet%UM0;zItT!?@NA{Aix_Sq1lbdfk4MXke{XR# zqum){H1+p~+-X}GGJM!id-3d5{%zp>#JvQ*KwoY16d%H{YSc<<2|3P}WT$(IuGf1i z1*Cp;fag(xuA2sq$Qp*@tHZl@Rw;VA8n|gXgDfF<+r4%c7P(3M%tGGJny1zu-@5&y zSideeWJoOHot_;^c`!Sb)>VwEw^*nO*~^beuWPDds~Us~q$0Qb>`n~H9a&jXuk#%d z#BzvcHke1MX{fU`Z}oN)EPAc8l}JETJm z-h$Sg1`YFw(RdA`UJxpE;`oSwj?#;M2gkLdK zZtob(E9AS{;Skt(x+1my`U3x}UJqwohGS;l`V_wdTsbC3$WJI&XgA#O)ubHhX-WIQ zdy1akF6{eJBTG22)vYJK$IK?p>KYYQLwR!^qkO++`ObssP3)sav9g*eEYL*%o|%av z>(@$4cMELv59{ZYo>c-xy!hCA(tQ8l71e24hly{V->}&?uw+VUZes{)?s{OPxym z_X-2(q|sdiG21f>97-|6ipCIVLpqJ;hFW_pYSq6l@-5fdsJZ0hI=NF1{3xIn6>D0# z?Ua3eNf@_Js>XDh%C+T|bYcsEb%M0*Z+^b^Zs(oQ{+J5ozze`%U5g5!ZsXcgsFt|yX9u{ zYVy3b4kEMtBW3FOPc)%nbTbO7TCyD-H}OPu`uc0CV|9zS769WuJhw^h(0t}8xY?1K zhpiJkaMKMN`!#=Wa;AU~pou2c{7FH@p~O z1%>K(0yuyD5fP4972oHL4yl3$hY6?q1qW2;W0hf9MNIoW($bc6D^53!#1uNt*wv?7 z1zjPn{!gSVu~M=c>hzYIh7GQ~Ps?<}#x8MfD>#IzjbX_bf7DZ4TwMRcQd%ke^5|z3 zwZ$$Ej}N`h)E~`s$f!bR>z}VbJzTu>f~f<*U{4FLF!(I*#xVNy=b^)CNqUdhZ?5Od z1BLNkKh>W|;d6P)A%u#lat?aK^25K~T;7txyuE|0IMy*)+68u(ia$IP;ry$n0xVpz z$CGc={+)IJ>>>J(WzA=k@X~;x7~;YM!hVb3vhM*4A6znhu{h!glpwgS=A;INhsXKt zjOatH&-rboCC0)5JbAr{@h3j!;<&hp$;HP<+T+nsVe)z1@R%4i-@lr{U>GivnW;Jq z1iv3VuYE=>F4s)HG*UeKb5%N`+*RvE80zn95~*lt*p#?>ueIg_P{U4$Ku~sjyvM0; z!#tu`oL?n9c=iq;$BF3~Xmj;s;{o1F@){e@yrM=^uF3dH^G1V*m3Kg|oU~Rc;gsl! z?CIH&x_e&Ht`70X!BxGJlCzzbvca!UU0OUpQ4LpA*qzO8=ZS>|s3?_v)?_kHJ-v*- zD{pHu>@ds2beIgXoSP}DXKX%|9t&CqndU3JJSRM&lJGl5=87q*sg1zs1vVB@1NyJV zi_28QZ5thH80g#(u3`J1EMz-BY@?wA>W3-y4mi!3aQQTC z$vODbgCMez=uVF@7Sx8EM2wZ$K781@W{+aG1**3RVj<<;{M&Y9o$!{E)N1<)h+~VK z*gOrA*GIJZIf9CvjniXE#ViO9V8tHcOvLqqbe>ewmF;A;m34Mv&g|5b!M<~H0_0?G zPYSe_UtM6H+z+ko^7`w@0fWLqgEKQln=gcY@UyW^%MgrimxV=DSi|MW#c^)q9K8Hu zGNHUl!_o$J%x~i%mU2t@pAYk|xC?(6U7LA6?!fl-ia9De(=u95MW=X^ni#Za9;aIw zJ5f8kNVVlLQ4t0Y%8T0EPckdm z@7zcZdz<})A(MyQ;@oSa-! zr^oY_6aLVdJRBtm_~)@D8BorNo(lI@iddGMgi()Z040-PM-7!vux;3Z>{v00j#&YQi+8Xwn3g@#C= zo9Ii>ZKV>X4cbAIi*te%dEW24mZhxD?cD)6y6AOZl{3nc9*h_CHO!}Gj)|^x>JY(P*TDsen*-h{Z0+0HpwYajT_egJa(>7}^8wg><5)m4Sbd?i_) zfxUfxeGVQ8@(lRT%~y~hxr?1^4ZOI_F|vej9FNZR=4wk zMV>{Ffgi7host5UF9yaY;ET|g7D|E2tBjW{K=!+zlG&>v3+<;=z(pv}t%GCMVQf+!Hvuc7$yQ|^^UG^~ zGD88Kby*p0d|_oy4dGr!yfHl!gKB)@-a#N^Lo+XDRCS&jBAU)oN)huh8{4c0of#cS z<|UeApz*fcK-dpaUbIL6*&nG3BJCJKQzs>D2-1>5nu&vxQ7);^V$X(WX5JYf*x)_7 zi&N{FOTs@m)y#B2gVo@Cao`Ir>NoR@fHlPLT*;t@pa*!EDM-{`;BiQHU@EP1}5G_LP)d9 zsx}PX#_yGICV6pavkAT4W2SV8s8sJSInO-~Updn6T32!PWa7MkUq<=8p^{{~xw5r& z{cE7`z|S9I=Aw+=o&%jERp$I`3z8Cw#Uiy9vJh$FUT-J|&*bYsl|#$Trm=4cWZT-;>d(J!F? zufZfWoJUaAn4e;Ih3g>NJgJyOWANvchZM>CVY|G5wG)3Njx6kV_%B&)b$PX+uTzZG8C`h(C)8a@s_7U z@W2)y8xTib05>`_Ij$%IurKlTlB?>nU(dPtl>;ytM7i} z>QEgo4`V*d_nq};;w8v zIm`y1It@LPb?{U2yz%yI^wIT8D&LVm_j0etGsE{W?p9bNw)>rUdYWOI?~{Py`9tW3 zrIQHxmST2W#s{;P+kHD*>^^hhQHnZrVq$Gb0(21VR@VN-7t$z3qu5$`IUO1E3EkXV zF0va2|K{ds|E?f^f3mAR?Ss7^#N�cXw)?@0^GSCYRxiNX8)(<@uYsvTJ^Q{;QfD z%;I$g9efV%PC0(qYUdKoJp;zwHIDt}rs%fIW9E2+Mzn%P#4~2AdV2Jj>dU-f?YVxJ z<(#z^5$mmAC6(X5eSN(oSlt$GWo~Y?latFLcRRKs0JvI;urD`%05-sBQsyba#2p8M z=UNS`%zoQf1GBwL=dbAI+tWuj?ky}W z>+wt3HQum~A6;~HKE!XvF8w1cSJvv}BowZf&O1j4)FF!21x+9%;i_-&mUGPo8hASp;^V=NESL zRBw zy~ON0JtJqZ3`uG=@$o&_t?N z$`=Cdk}@nPt0Q-J_Y&=Ki{+@<_~@*AX;U4rrz2fNv^-P8HAvlqn51eS>A_4iyLfNf z9A<9w6%Yqz;JHK+b$f!J4sI*KKTPh3TO1Feg!WyP^=ui1?n0){i{DZSw}4S#X*2Pz zotL-w%pLT#kCO@}k$|V-kdchx38n6p#DAWzAskdZBtJCz!++3e|6CxA!Cl81ur~wE zGJpb6aH%_u(R!MFFe~c=KJ)`pAeNT1EV4_@PG0}YiZ0#TpO25H>p~x|a7IXKXNt+9 zKNtx4j>pC`sGuY_ULcyQO6>8rj)?t$Jt;toj_FzjqtWrR#m5?%(~HX8uIx`(K$}md z*XgPJu`}bNeOKdg%taM}^!{|Ry;YS3p6oTYNu+2u{6li3KX3hc@*{um5niJg6PX<$ zF4h-7mePnt$>lOii4rLP|%#w(Y0FQilmrRCHun9l^9Z6EF}oU-x=*OX@?u^4Q+1WDr>H z8m3<=G{ABHw780haKq})*&jq0Ks{zk`c%hdliNTDaWEJn9ENE?q@tCzhi{HK5AEja zpeDu~?JrCKjB{N+J?m>YdiV)38)*2N`*h|8i06Lim=57lER5MFLvPq)xq-b-opjn@V*mEAY|E__L@o#9xcIxYbf z0m7cR0Bw!7-v{~I-T3mFLyD~Uy!B_f4ji1E+C}ntTJRJ=(Mv4>;li&JgBvu$R+VQ? z4?P(a`8f)DO7%3og($W&ZE-OOzjHR}gX;Ly&%xx(5f-Lr%e|E5MsC;kJ$%y>pS>kw zEuHLa{XHw6?$fVkNzs588kIuJM*m3-q#L)}xGM-KY!G$A&( zwY0P4W}=oXr$$JEz^Lw>$RS*tuElljP$mZ9_wlj90rfeq6iH?BS=#Ys(%|!kIjHl8 z_+avy%Vt8cO*hnVMuyLnlp?HsQlq@g9ICNWU%)XWzV~wUACGt73a-xA7_YkA#1$6t zp-wH5Z}wjrBerJCHOd?kP6l|KitG>*)&;mqnCy+%r>gXpcRp0@(^=vjt)>T`cXa>Q z<;h2rYq;J+VYSopGwoiWMbGGHR|Tbqu1j~5krhQ`-MSOkr6M3)FDWBC7&^2s{?lWLnh|i6dulfeVB=evfdLAR3;L9pS-`rKG$=1 zPqhj`MMaJ0Z06|^_i+<)6%dN@lMtrJ#jqEEn!Y<5`m=B-U;)Dcg%A19-&uwbE<%}o zZ`N9pn6LMkW8LppcLS7ueYax@?=~OT4WiL!h{w4GP0!he#~B_G*c>|#v7DWHn;jo{ zwo859=!-}herrPVvF8Q8(Z3cUC?pth(Vt-<9WFuuPbOJ6 z3jw#t6zdXRkAi#T{zWS1z(M*&mprcDxrn=15d9WGe78LATz!b}_0q}Wo;NoUPi)7U zeraW?(%qMpSHYc5^9fHHV2NHaI9oizi;@@?4x6;46&$K%5q%P|?C#-FKJi#K+w6FH zB-iX?`$aH0$}2HDyY{?1-_Ntl)jRfDf9H6qDBi&LSwuTsXU1a|n$*D}{Q2vJfv#7D z=<;$M#%|#@t6)TnO`>;bK>b}na8E{KQ-ib^=>EcqYrexrAUSNrm^Gu~VDT&*SNK{+ zv1WIRjbNI^o1;-S+O7Fx^rZ9Xlw?e>oLAxt2_c~{W*5|-tL{MX2a4x>XfP!^yJ)Eh z!>t|z;JsM}A**%s>lgXu=Wc#FI_%>DX)oP^8zC?~`0i9#SENh^UtK!zYp9{n^d^71z^-Yytd}-0Q=upxIT`+JSza+tnA2r?RpaO9THLkpoB+z z(q44gAVp!X&F%38Nsx3-}S0+lqGL7-c=cIssqrepO#aXsOOhS?(ji8h= zj^g`wO7yAQL_U33EzL5*8coaSRg-Xvrs9~Yc4V<>R^5k%`3VJ7ujjBj2=_2*49Nht zNsyGXpeOmsA#!AQfE@^wSOA!Fp8zH_A5mOfEabxz+JACgx@1pK^DV%j=cK}fO~}p? z_VsqO!lwBo)@KfFlA!0}zt0SVOzTVx`D?#J&!U!VKRq==3W&v&g4Ydv1iz<-mMuc( zVCn=$igRJsSWNW4XZw~?J&bW498q}j3f)Ki!-b(ed!M{(OHd6KS-lxpDz;RJx$1D8 zy;l)9+c)s4s2ZBD*14_7IUqb=p^M!fQ0T62*6}t6DiKO@dPjH7N60(DmyHQIDW5vU zeK5)g?M2d7hzUG~XO)1350jC{5a$96eTbRn#>OUC$FozsXC3^AKQnyHzpf3dj2Q#o zM{pIfb-16vjITC~dP|*9dae0d_u=lLPt%oW}68g_M z@EhUp>%UEUaeEr;ypJ>(6i0-QgH!3lA;jcOi53yDxw*_bj<9ENtG~e*;r&urSUCHP z=y_N`(N!R6rCp~wKl7c>r-ETc!@#$QzvgIzxdaFZ6^sj5c1lJ8ajH1c-!KXB=|!3) z5ph3E^HTH=+YMoqvpLP>m{NVi-lxRo#(x8aq$3Tp#P8PQB3H}bpEW}V#)z|pKTXpx z6G|Cl=V;E9l~=O5A#5{IWQ5gC0#{5O6ztVh{QK6Jgy2<0L!ZkNElxCP)kY5Pk6c`) zDQUlbpzsWQeSMAmJK)|eO?HE7+V33+fTdols9{?V24J>!uSgXbpEX~ti$VP`#9!EN63+QZ&<;ttgB0IORJgMDqo&;@FvFx%<^YwJAOHY3T7gcR`k7O~ZLoPt&L_0|ZLy-jRV&G#GVL1t zmeGzX94iD6fg^}vOjSG-{P2L84i!_6 zxy@So2v?V?=gNT|$0;i@RlDvZ>R@aW7|vQd|3#adi{l$fd>hE3iG#Z|Ww2Mj-jxXP z_sHf8PUY>`-MDgrzn*Nrqm_0`d=+W{8U<2lqM{l3IvT8_C(jfY87q&ty2;5hw_Qol zMXQ^g+Ga|yI@{48vP+5~YsQJQGy2-s? z_8NkML(#aqrb63_isXk!$}fn{m17>V3_2W}TLyl*yx>>qXdS(-OcpIq4h)6V+w!^5 zp&4Scj=^Sht+nR_uUm?qXgVGLyk;BTWH#uKm5UpzEG&#kLKHO-O#mDd!=RoOyBqPM zAOr;3%W!3pC@C7hE>i~Ig@^36?2l*Vhi@8L94*#ZQs8fe^y?hdf5}E`Q>-vD(RtAT zvX{T7R==cS%Ll*xXx~9kl>gpw|2fRE{UHQShCh~d`;EksfAQpf?@vqLn>#qUXet1C zG`QeNFo5BHkt_C0_Q#5j)~NKK3(OEYh?##~Ki9qgb3C(VE6#YfQm|m%t!8H4XDG}L zBcsg=$Pts z9->$86;YR#R{V$vuqc%FwmpR>lN5_?8@a|rDz52>*inC69Jz%Q093f?X-HIf zunpEXIkf2N+Mfnqo%Vz09y8$0z#uygToK)vtE|Zj3PF$O1q5}Ph}9drQSFY;N5@vP z`+nh%~7>8&*`- zN8!4TRB8@aO%n-uf3DwVulD*P)S=eMAfUIp%@tLGVtY@Lk*2;^k^IcpwEJ!kRGJq= z-0k0O#1(mvUEbCQ9(&^CTAi8argyDoRe?4aG=M0NCgN)vOd6RltgY3m{B_=)HodQQ zjS_L4h^io?5R7vH%@SHY6yZ|7JI&k~pY!%dK=YwGQK*Ks@wNP)u;GAW$Ar{_$WA+N z6}0+a+{o&{WD7U)kdq@bRH>Gh{m3bm(2@t;nJNULJY|M7+ zKl8#Z6GNE%ckCt%f`vR8(NIxKwrsG%o5tL82B(ZSDZGc2`!+z6(S4tsCfDBxrC!)f z{e`JDh$uPIYDkFW49Sa48Igw5ddD0;~P$>zbWtFm-WhcP$i)qBY3{btz&rg@BRUCFlu6p&qO*d-ZNm!Y85Xu7!lr-Em(<|^9e zyEbxj6#f8f#$u-Dp2qrcM#&GF*CW{6Te7AJ~Gp%|rq?#WhL^L1CeZRUI3z0cWPtaNy=XH1mdPim|SX_$Coc|Yo& zYvY}YhU~fdQA-g;4BV}ihpd71(%?Bkz6yAE+wZaz0;rNPa_gqp77y7$`S(SXIb<$l zP=kfn`!>8^iIEZ>Brqlj?K|1+c^*+sC6z`mlSkdFnRz+iYO-{<&grXOI5YjbdlLM``2F^>vbQiLIhpmJ=cZ zvNG}JbvurRfh!NXKS zm`8_ktvX6kZC!isZxITyuiYsoXL>aIgVg5C&#$HoQi1fMfmaZXu8gkE5@>*3$Z_a| zpb)awrundhKdkvMw>i^Dzd)Cc$SFEK#I}sboj;x|-CYkYQgh_yLvm0V+~Vd}UL z#6E#GX-%xxV{gt;Cg`!Hd7uq@Jh;hLO)aW9MZh@CO3~v^f5=jTYHhn>I`#In$($pw4yE8A= z7ZoW2qMTXxgUcXqPRbJhnDnD;%s@2iaR-=zBf+1o1;Lg#xjjaX zDqzUUMJ;x5X6837L8DFF$%l`mleh?P+ctw{8bbtZd2#_xOHY%Ky3E>yR}y<246qa6 zMANU`Pr@X6B%}&=v1sl4tZu?an8^lJ~ znki~(E@h;B;4%^RBeF)q{PKA+%*g?B|C`O!`>dPphvNKpr1+9PiUL4S9g`;bYK@f& z0Q-BFtvjYoR}wb)UVc^>Yj@^YTGCxWL@Vxh7s^cMAuAo-#Hez4nQJL}MgKAqbEkdE zEI1vC-FJt;Z(9hO`n?cfJ#o+VNj2HfiF(4QHa11xpblmj5A8Jlx?4d|O-|3J#+}aN zLYOz#)kx-IrNQCajH7`6W^f%r74&#?JdxOBM}+t~7r^#=ZSDFui#qk`#aEg${#T8A z6v=gq=)QdrbhTz$WyqG(a9F1oXK$*)#Fqg9*~*61gZY004#xjb9b)eNZ)&?LpOXJx zhd?NH-H7-NMQ9mb#n+mZHyJ5AhC}7L;C@FyPT6lAb@eJ-P6k>f{Ya79i+stL+3lfwlEnqzw}E-X&m2gm6VCq>m=uaC zdWD+pI&Nq0K@zpy3^n{us&NzXx@?P~H~NM9z)Z%w64!6>BJ}j+1pRSYIr);4@|$-T zIjRVx2ewxbBc~Y*4BRk4BadA;NkB3mFX`R6uP63J!G_KtO<4)%Y39{$!%f`od<*%N zniH>IWMJp)9C;)*4;m(hc_?QE9mR&`vnYJS2jR(vQnFN9AB(jzmy}GFyusb+C1hyyL)iInSJZaP1lnpY(71+<@42v_y{ox`z>5p{)?mLD-#YCt}K50 zxkil_`f>M^S?VumE9@_=BCjOlWFd!k50 zi^nQ&I#|JNhtB0(KJgdi0^T^y6k>2^t+*rZsvVn zSV-_j3T^o9pIiE{ox~ZAzS~XB#64Z8e%8)v{&_P-gQ{@%#8BN1`T=J*OwUncYgrqH zXcI~#x6gsvi>a{YTxg7X$%XM-HxDl-Bg|^uDUM0}`uZR7$!1SVl?*hB+rF{a*Qs5m z3~#%KLl!>C93Z{^(w&cltsg!geUb zRUdCl`j8|e?whA8|4_kGef<^{fyd;zz=q=qswWk5!PI+hfMuPp5G{|6z^NWyiprRA z>B0l&*}i+}E(ZU`OvXmxU)yJj@9K2@Q^eo1pqI6(SY@H&_?zMNO1JBrh=9q~=qG>I41EB>%&U^cBW3dZa zwClP)gZ%_$I`rS9`)`b#A}IDRnq%xL*6$cOO#X}{$CewiIzA*ecpSael6_52G?oc^ z=1gbkXVsIl7_0a~3iXQXA!jV8Nwic&_vN zmHQbY@b$;DIsPPTZ5=s{BsTM{8muWvj`)R6jG9ja2qS@Rlr<(V_Xol#F?ApfJ_w6h z`v}{En_Cas?0Q9cJX`FUG=}{LN6zrB8zi5YfWl(9iNilG4O7rL z!k!mb>|Nh|p?6Y?*#;ZU5=5X8XU>R0ZA$oA@7%WWJ)Rz27J)wHViD5x_PdC0ipM{f zuIHU|`nM@{&ol5t({YeXPZxf=&w?C|=VrL{yq||4Yu@WnQt?14&x|Q+9r6yjL8HCQ zdm#MonOj~)x=Soo_IKJ53xxfJ!yHmzL&KZQXQ$8y@mSZXGE7vJaTt7^GV2k#{)9r{ zI2%o#|2;|jcSe&cN-cBb6T&c>Mpv2N_EmNdHr%K7qbAYHotS*dkcphR+wraas&?@1 z%#aiD@&N`eR_+-E_BQu^?0sVc1@@n`+_n~sk51|z!Nk6u;_nHOAAGQUmNzGeQ9_uJ zhJl6FSke+ccM$O6IU2bb%;! z>P~4T-|Bf;i8YDiq;*I~rUis8sCgf^6kNQK$IW#{5jnR$O5`8@IVWHhQY zGs{KlfL@+_zSJOBmtsCVHHu7$9e_n)I11SAifWmGY@u z;`wBx8btHHIDfk-$0w+5k0C9TeBa&SX%EHYX|FQVf5*XGGPIzea0uY4?&ynj7~{DG zj5%#BD0%o7Fd6LsOx$$i7;M>f5R(ueiUMp?gXo5uue~0z`;>+S*om=LHTu3jQca&P zOb7Oj__%*o-%Q6K#^c-#b-KNwQ{&&*A6N}^EMASZ^`4uj0UCvICWgP+`&(m3r(;mw zKcC6Eiuvn}?V;y)2acY{p!zc8VJKZKR}a|6SGmq+HrcKt=ZvV+wPi5Fx_#}QW|R3K ztlJARN7DlTs5U^;TY5YsHsE-7TH4~&l>57Ix(PQK^XS`xv!%B}1yB>^$BYc`GUvl#v_aJ5-TO_YgVJh!g)nNVG zXRjoD@M;TZ8D38j(P7em6BNTGazgHKa|>A4o#&J_`=~KZL`{<W(oGj{Sn=Bna9^Z7K)K(lnA$!CyqF;r`3i^$V zjEqWxk9i!?6^)97lr*NpHMrWwpH#sLGTbK@i9;trS**os1~*wq44$I|=92)qF`<9s zoGaD!+UzW2-X=zmq!Z?-7{%w!U70t5e7^_$;O)zRzAARwdp24E5@HMpycGlLqz{`PlR3t$|%L&!Z~mcPd$J5SQ2}(Qm+vnPK>A~ z^6H2G&GNUh@j%t8v|4_1sT8N$!*gK=sAcV7z()DcHCkc>PL=1gd2VwvEVclh1wFXZ z#xq;!IHj)cYBH4nxee2C6=1)_e<)Yq;#12{zUx5)qu-gdg_^MDL_PtYn|KGlr3>9o z7f(PBfN^Y0TE4TTO#Q>Mc|hVLi~Zx@m;7&^5Se1*e%9L^;pIOc|DAO{QJ@oHGJ-JL zAi=i4G!tOKLRXK9C3$(@=W5ov?U5Z4V&Rg?Q3or#@z(J;nT-sqeT=QKMEA61C3D+c z!K1Y4QN41lF^FX#dXHst8B82ht=}2H^>jx?&HFygFK_-A#jn_Vsd%?9_bQLq3SX+@ zUO0KRbAIF|2&tkHtfS*9X{*#2?P?2b>X2DNP`dnKV%qUQvZSF$t3U-TB&|gDvLu&aN&}BT?acb_X1AHf8OuqhKcPGjVL%7w0A~} zIfd`{)<`iKqv#1dfR`89D6bYu5PJJ$n_ymAE4oxuP(V#jh1X-;X#y*t zQ0xSmDmzgq!@dJ({%^ZX?ppFJoQ(e^tor?3^TtTB5=Ty}OJU+hTVT!ij)~$VF z`1rhLJyve`UI?XuJ%zpXW=2jmwIhD9V+5{6wPFRMA2X&;b>x*W?p5F>Wuh9Vy#!~YAb{bf|mh%{Ksgw$r z;NKJT@UT}9mKF>u>q@WV`D&qq;CCYaLU5h_+Z*Mt6K{|5MrCis|F#~H{q&YJ|a z|JQmP{Q^VY&16)Ua1}X`BOvP7Eu&tkUr8y`^Q*`7W7}g{+&2q5JGC__q1TJDoIhg! zvH&t39Zuy9AMP0vy`S9Zs>d3R9Z4q$D^evur*RE@ybJ#80b8(X?U99PBOtl2(W4oB z@Zyo&%C{Gg;T;o_c3gWrFI1$B1P+*WEr7HU+N{{xr<-m@<#{#*XuQQt(g7B`Yt6++;!;wIr ziC?k$ppl}e=WgGQc0U?j`LYF8^Z+oFZCz21{@F5zgZ>6i-;J*BNbELpH2X$zk(_YK@-G2FTE86v;aBQ0!8mDP8x zPS09m5|8VL$@--$<@P3InZ1}&d$!C#k(%g^-0qYm8at!e5byL z^8!HM_wU~qq|-k`d7F-eep@_c>|w1#Z39g4wg!tD`#NR$9z|@4}?n zK&=r@k|<}<)OJ4D>Vy+H8};iNnUV1R>F6E4al8>8M)bO_t%a)TWlDDuJ@&UKatB?n z0Fasa$7Yi%QA?{w^0$j>0|5z)U-*6uy>){V)F3Xs7gQc=Y^O@t#SV$h}R`o`9VjdRy1ArnWSyuBtF-dJO6aq=>nT_J6Jy%nHpCgxkIr-d5|d=VdczK z&;+R~o$P4~dq;=h=$O*&1x^jZM_1hnTMiqXM#&Q1sT=k#^TqOTyVI3h=7owcw{_W79j$PTR%&eLF-8da;o}m!Z+n%5VG)@y z+!*(|PgQ(5$Qx_zW4!5?Tjiq^IhF*aXHJ$oiK}E*{rG9k^&94w*MpbilMAQ}v*mHU zsnyv+#O+gClK4{sE?eb318mZP1Q{EVYq{HDwbbno<_eR$+qEp6fI=>~TWe6OUK2BN z3%Z)<44vUs59-N{=i*P0VLles$p542EZC~-+N~{(ARs9r-HoKc0z{;{8|e_FyHmOr z9nv8Ui|+0Q=?3ZUTEKVv?Dzflvwr~`Fpqg(bBuA0Yp`H@*{wD=zLt825|xyRP+oMx zCz;8Hz31-Z+ul9kxC>*NDBS60<+*7Q9+RH%a|&>K*F2lh(>**sQuxd6f?o83S^AqUyzQ0Z~8q%Xd9xZ0=WYDYgb6YUw`N!KgA2mv7B)l&p$u0MYXzNS=}5XsuAb9^>`8 z9NmqPZq5yB_snoPq(Ny6!b4@)h>cZ>aS1L#N6ODOGBi47dA5H=W62-W!-0lpG$^H4 z;~G1H*ycF~k3|qHV^uxhZFnrrb{CqG^=%GTaLl-jyz+aS&E{7Yd-_2|#lq3d(;#!@z zY=jwwhJ=A7DwUF3%+6ETp>>E}QvCe<-xGc0eCPh8)>;PVyST0Hy3vCuK1*Jrucy}_ zmx|LQ-D^=o&o{BLehZC-J_mtV??s|6rh+cF@O&C&7jngib``34W%DfWQ~8nXvP-XP zhm-u&r_WT@TD$`;PZc`7T{ozN$Qa#TIz{NdTrv2Vu;(ueeB7;xh%h+S8cUk{G?c1j zy243kG;GP)j&WUkQ}iu4iX*lkH+tCEWb9i$-Bi%&yzVmV`{yGLdRAh?m#Qjql(m(s zD-}0rL)TIH9dTGxs8St4yakPA%e#wmY4$0ynL_|)b|I&Il=^@wj?qB_!prJMjgq{{ zL?0LRMZvMq_phd(h@~Oh8d#91GT*q%Brx)lhf3cZ0iARSQe(y=?QPkLYP(G0)8c7? zIpp0W(Yxn6{T>e`>ed6Ep5t+GSldWYlDp`aQ=10Tkl5m|Fw8oR7Lt5c&ElO-f10iN zN$i-Q)1PXhL%_=3<$x-4et8l>*FOs9JczqGS{r{>+9Ex2#X>`+6@s9<`mY__?zj3Y z^XX!aE9C(uGYJJ}!fkx3wS(xElhsZL2a(_zc^gLedEOmv%=NU2zirG?4O@klb7_Hi zjaYydxZU&_Feeb!i@tn4)&7@#BPr~w)HD8&!BBu5S8kku59!IJop?Py7?`JmquoEm z5UuCJo^cuMZY0u;Ul5W1h0qI6? z2k*1`i|gw+l2T=OQcei@{Jx&9Cb?`3o6%>Df96197@DWMan8N8r&}M-e5`YW4a~58 zv(v^7N02s&@=a_cPdtH~oMfyA0)i=z(IxWuV4FTNfv6!(lx#|)DG#S6KK8rton-Bg z?N@Iyw=}GbV(T!TbFS)4Fb%tRMlULV;X~pRAV8|O5sn)@ygi;?_ABIzwO%{TvA*3R zA(Oq`a|Vv0L|65^r51D>8mfz8%vZ>O1qM^Othgu4n=0CK91-9oI2Y3xcYAAAW;IEu zir(8^!tfY%A2gTm(CbG-^;jkx5e3C_bs~S3&s(ak5*71I8(> z1|0;)Gx8Qq`B?J1g}3|t9rBr%wYmA{NqViH4*hF}M})6KCH3>i5tI`$3Z{AHeSagD z(oni$oCfWT0qy&qW`}w2N+)9`kPA;zPX&l1=IOdl*^ixO|CECRGCdi9WRT(w7gY8$ zhPxI$@T3v13ZTz?IhZ-LP=!)gN=lv&^*`LMJ=@;ZN3f=**nCDS#{8zxcgnl!Q|U@d zL`3;+JVWgUEyuLq5U#{J2IZ=Q1D|po3Pib75Xyg zvu3MwXDyt~bS9RA0xp9KAf4~&a|Z5J;K4!!%Vht2bNJz|N0b5MO8HJsUM%Jq+ZW!3 zALrEwLR_*XkJT6ON3mAu^z9m286w(By}4EuSMo?fORI%Lw4w}mUl#QGe9cE4!SE|5 zTrB2j9zT(E#*HJRq#k>~aVU3Xq2U(x2s`mHff;0$dR3CHZ%rI-Y%gn#y@LNL_@~wB zcKWi8LH6#*Aa+>QXrt~&2SV==ekyJjZw(lutMtMLUM~*%7ag9kQ4i?A>CofD-xqhN zk@yT}?gVlt;x8ch)6mzdsx+xA;Bz7bWA!NL$s-fco92PwcDAKc9yZe||7bjWr1@FW zWl>V4!`~kb?v4BFC8GFrQ_LYPn0eBRNdr1#=+;`>52QWT;uwQd@2dyp=vPnTa}{69 zQsG8c__fjuZo(28Y($OTp73kVPj0-2|0fFpH#0L+vIY+&xmZ3u(m!82t1#JO(ClpK zr`@V=EK<}BFAAx2TwpiJue2Lha}ucg{paB5UUt?s{_Ba)^PAOnCsQAx1wIV-VlxwF z%wo>7_oHGIq)_g|y-&&*^IJe~#usI|BpskL8P_M$t~qNnP)}>2#)7ysijRqbAOFzf z;OkcPPSNGuHX1qp1feAxZ_Wz^W>*k)#G!Re_5O?{Db-=Cy;nTL9=KkfWh zf~|PR)U0&pQKpr^Y&l!{g~y!}-(~eI9VHHpXtu-hz7d@2c~yxodTdGQ{4|X50#+G- z|IraJC4p?S*rLa6rBedJZDdDP|Hnq{$J_&4eXfrfj!xtRA)CX-y=0yyNle2kGMa$; z0?#!+luUW#JBZ_8OHA3uP2#v{%LdN zMV1=+3NbVEldRymCbYEr0bsA=c8#H!YoHU;JpN3;j^AYGIG{{E=*{ETqNAZlEYM}$ zTwgO>zu_)ul-6ms*Yx*gZHFu9>Z6C0MutSZNos$3lHMwse!f_&wm0F1u8gBc53cDj-Ie=2bRQG( z>4xc8hfJwSM)(A2WC$rZE+zlD)hfxUqx)c+hXK%fU+z;!ldf^7eKeY}BB z?(w{TThzK(?nF$D|D}*}Yc_kYcwxpJ9zJ^j&=(f?7jYh_hYExOx?f5d|ydIqC`Y>WV z&5M5|#9pyANk49ABP9i{5wuW!led@rk)GMhswvd_@38yP_mx+p_7We}2i{)4GUBB` zrTTyvIwtIb z^Jyw4m$W>_>~^E31KD4-$o&K{A}GLqAnY!UEc)v36@K2f#^O+|8PvB>+V!Y~*BUV} zG#1~}Eh=!>KD6hL1D0gDXt&5#A*p6cIL@}}l-yg%GpaL` zVOgNtbO9%&);TM52Lx=l9x9r9Np8Vv-Jiq|0PpE-`?+^gQvB`DY#E3b+3B^EuuE10 z(fjv-Yg!@<41IS{H0effF?o!cGCVqy=u5!%r7^Q7m5`gAOE`ZNqoXv;jt$!-VsgYNZS<$IMWYfaN zw(l<6;xqVc!d{4Q;qfL)S$!^K^I(9g({+pQg0D5cB&KG(*$J+9?NR^2i%u$yr~(F3 z67Q{BGaz1Pv&O{lVvS3~+toqR=6KE*Hvca66TvWqohMPR0QjXe#Itf*u%7e$F0R*J zvVUVTm3^l&9Q3DBPEtBn^pWJ!UhJE?SUmXF`-y&FIBw1R0aNA=15S3F>IZPxD=XLR zu2%uO{?MiRKRxG0`me_nN93fp2#3>%h_XJN4Y+>0Tmx@XB;e%ZaOR)vW4AazA*RJ+ z4cY!Q_qu@h4l+Vb;+EIPQvdTvKt#&pZ$k7IpALrRNXwmCJuzuGpu$=jWT^Y|PT6brsngNtVa{xMkz4tEF(Lfj@AueoU|N$~ zroFK~k8jMbGH~!=od?Dfr!%uzHQuVK$7cd(FZb;)G3n{J5ZqZhgN^Ju^xU~> z-&Yk*Rz(IPNbQzC^?&vC_7~SKL=0xB`g3dnH7%wy;!r3wdtj2L9qOqPF&@To%dcwW z^{_zxE5*3j@|_P-Rpm*}>Mq$}Ap&|-I&)OME3kzsU+Eq&R zKcrgyd3z^x_@D91FU79|DKa|6uH}L5Z^rLGH&${dGF#{QlZ#M^oCU;S3)|3SuI-6o zK^JK@#$qBkOc;-Wz@b+ZQ&n|tyB;&z2qu$@F5DZle)fqL<=co|v62C=kcD_4Gu2`lj+KIlV8HwnjK_hNzQdg zB1(k!J^XZywEoN_!U#&uf6EOWNlPW1$pOw*{`%O@jX#3#zzD{K6&u<*Y8Mh}pHUL^ zy87ptOCD-X$n zHb#%5nN%RNnKd;Lt|_IeLvGXE3n7px@r%uERMnnm?C0jb-9A^ZmiBb@&q`pOMq3!H zBGx~fjn$u7m5M_+{ZdxfUUb+KnN%|ppb=5;jORXld~wJX+}iriuUUbe3*yv0T5Xnh zb7<1ad0+;`^v7kJ!KL}F7;j|VZV|$p3w20{z?mM##jY7hd*r!zZaiVg3W!HT>5SfPOS!XhA~nL6jFd2(29yHt2BUh#YENy$T1s=;R22n9*JRHU`gNdEiohIdyHPp6lVEQzb=Zc-<~WCx zmiyKH6_9=yirO8n5LDb<6ysdHxy9JfhPQZ8Et&f)_b^xkUUFvWaQ~kVCtKuO;Av}d zWqKeo`7b$!8-A~|=cCs_%N?K$SF}C9v07tGfc~+EJ$f6-r?bBXgl52 znw$;iVUTar$>x#+z|9C z3D#{t*RZ>>vJz-;lDuty8)-nwd3O9bEsg86b8Xo+3D-4syKE`AP zzQ=jfhmBfi+!FiLXIQ@P%=FQEp$c2pu=5*HH*LyCThgoWv5_IA$9DVu90m~4WA#na zxA!gF)pwm9C@zuKIGZJmjMRh|3syb$CN14hZ%>_=5QIptUeA6Ic)RZMtGtc`Es6Bx zyp)(gh^Wf03Su^nP7O0wAUia_+NkSGVG_~w?0LT3Kh&S7)HlsM;4J8Kf>ru9RoB@Z zP34dR|KF@ZG`$1}(F8fnlPOd6H33WlVW2o;~6mAHukhxoL&K|7YTQgB2 zt_1&cC+c6kt@P{{aC4aO_?I&HiIU9(IY#wi?FFib?gNcAjF0sjBAt)BF0EzyrL{EL2y79>d|D+wRq(pwIotLLbeJ#G|t@lLwJOa2(-S{)S4ha?;}p z;F0)MV&bb0Wv)<-26R-*Iz-f(kC=;14dH* zH+mJy93vi?@{WQks+;$-M6w^f#vexUd{p5=0&Y>Ue`a#j$;-=ko>q}81d3Gwx*^?< za*jSO9x;7=Ur$GU3?@`WRpEx_W^qHqTxtPk(GP*AUBMYsO9fS!2h?pbE2h(N76$W< z#7`Rk5%dZ$U>D(BA6k+gB>t74wS5bNX9gsZgN@J9c}1S=0Cf)HaH^L8PqP#u^ee^l z`S#_`xkrxIymV}A zN|CYs{>veKEb3RIwmGH(4%d|ipJ?_NOJkC-&Nu>ki~X34RThMp`MQ#c2>stl z(o7{UvKY(_KEK<&zrX$cq50xd@wxYzOF(0m%9%gH>VZpi;~Xs{qCH<@9bl3YIMWR9 zZI)}~W^D$34zLt>F0HSB8q{jjSzO}JFDMu@xeOJ}c3FGYwSOAIZFJg7wOVYETY<~Z zHfU@t5xd;=BeQKt zCl0>FmiujlhczE0$Gd9?RcHhDs)9i)HEykW+105+HBV3PBsW$(Ev&5+Lao?i1%qXb zfvD1QlWG>eSUihKS2yzWo}5HPZ=Hx0qLG{Hmt-m1lp!*ripbkra;!Sz+}QJB_%w@j zaf1g7`9i4O9~TQ7j!Zfp-L(}G4n>(ABy6R4nBRZnkssgros^Rlm3@D;MJpnB4@E7a z^8xi)&NxQP&_R3~nE00*t7iIvm-Ng%CpY=(fqPWjKo?E;RJF`lZC!-u+J@nPq)SK1 zcnE;cN!|PHk~o|{%veS<$ei=x;p0#xjb##juyMBoaB?a4J}ige{of{5tK?hUcxY1l z(uo6TRHd2z2CtZ5wh}TrZ&5C0 zYFDQ|Vr!1^&Z(#`EdS<;_2M;J0*EQzsK=oAD@RE=S*N}j%07)$VE66X45eT=rCJ9z zLjhpwM(LGida%JlNdR;3bDUwzLhkxK|3@m7D*UBI!Sv{_FTD?DxiqKKXioU(_OK*t zc6J}65IT;s+_OdDcSeH`dg-(grxV%R$<%CJxFh$&5{#!m&K`tAABRLS3W^i_U3?+{0!{c63!eYZ#xghY!Djy9JjC)iiwX;wW_zOq@$8kV6(m# z+MlyqifOA3kC^2i^TS`>MLh}ZN@9~?74y2oWqMY>D|WR>dVT8~tMpu=*O%U&Uz@(Q zfpz(I0}@A%()JmLl?#E8%MyFF=!HLLW|@qp@(#*d$#ct2Fhp^B8XsSFMf%cK8;p&3 zIq2qOMZ;z+=LYM3HXH9|v|=IKtY`o=+Ua-7sYg9Fy+a97O4Bv3WaRbn)QHjWVw%@I zETInhI5ZXA1(EtuV{VYT+~1E*l?C^W^R+IdC}@guit8H4(rD}zMWu%H6uCxuKI=gj zp0zbmdM7E!AlEYqC@k!x74NLkPskNqOcmEtR2m6&g6rM=hsa&?SJ@C*#FGuD`QVPU zIhz?5cg})7x+~L{t7;K&GQJIy{m>c!)4KAI!VNc%9J#7kS6&gYHTw~jpv?m(RZ5hgK92 z>d&8llxy>07@%so6T66f@_5y}#GkX9`(L#J$lk}3O~9m-2i|G)ZtB*$*IxMN3C--S zV|;hkNJGUF*~wMVR00b@f%Wvm+tFKv#!EM{_IuOgDxcSHfwirI{xVHg8trP-yk?{B ztUMi@&UvmMS~x&iq%{18`-jFQfi?R#Cs!Xq6iQXI0N_!;_T~+WLaBxOhw5a<)762^ zX8uv#aZ$>33*;I>0z;kJdLMl~P5vJ(+B_zQQ9ozZ2rdazGW)$BuLI^zlDXc0op>WJ zk@2FTu~##VI*+>ho!wYFRj4v{fRpG3{@GG1zJg|W=kBzfS8$Sk9xQmn2IXotqge#{ zl~@5SIv!Ue|5v4L*PsiY>2wDTEn`|8iVS;oRR^cycV~7rJhk{FX+R|}#yq5+-(4bG z7`ZLQn5xWpYoquo!-$sOt2p{_dpN1(QL+p< z9Bzsy&fBeMp8y<9`Xu(H|I6UT_OQzNt)1q!EsraFGN&=K0wlaG0S!%7A1FR;xEp=~ z5B{F|%`~jen>1?je%koi5J#s5m(#1Yb6dN(6t#@v677 zM*0>~>O0mT!Nb$t&zwgEqtOV^{Qz%RSV*Kf9q*_i9yHERxavn? zsXpZ@tQS|55uZa0$s)mGS3hVeo;C#NvEt%PZrh$dw(*rr3t~8-;@wY?A$@PjRO6|< zpeRGeFL9VdF)7fD$&@%xGEy9Zz-^tmL+Oo&H1}S%gMBs@_fx6(Z}&&^MTB3W%x2(0 zNh%xt@$j!w{nOuazRX0f&&Vc@<9CJzUT9VtVYe3l zD@#l0X8^w^J+rVtO?*r&1->7eA)@<@PBut@pt-%EPgmzp~Ia%!?H zMgnSfJG)6s0_lL|APrZYW^)T0r0W&nKR0Z?DR*wSCjuzp+S`-e!QIL^FE;uLm7FOO zGc00u3-6fp*~tXR??_BGnp73l3Os+7jiv+%4(V0D8YxH%#ZjZ*mKxW4SeZ`j(CoA{ zRuv6OCEXo9^yTlDk_fQ@IB$*Lc}dnt^Vb;{3m<|R!{>pv{2}F(h@FNzc+R%`ZjU8t zufkE>U73Dh4E?;gw1k6RFf25+lk--==;1byY{X8*+)iIx zzl=}JpgBErp*8N)&ibsVr1Z^B=j4|69(j(54GfDi|hGjFQmhxjj3ymiW5L%8L7F@Zjf7xJNK?jcwFVHw_g)h^zoBA zU_m1jQflA0UAg0QuJVCc&8!D@^!mPxe;7-TqmAfwU>NrSDtrVCnn-y2f&6;ODav=l zyZf4L{+(E)V%oB|5;7r4(HNxZ+~($pXEkn&*M9%a;{peCoe5r}^y#FTG}ibazOD|P z*Xbf12WL6yp-Jp+U9@Bc;J+9WJuy)U_v_bac7%*kgQhg=Da+?qWXizCbq@`i2_RYewX~bE{h7i-AHj?~H2?3! zX8Rr{fXnvs!D-;yIf`Gw);0t_Acz+!q60}(R7pvvG?_N7bK^RQfBb6#$=x2`2V+5f4Nnh#L?ti!s%gBrO?>bwtlR12sG^G&?Ajc*cGFf6*B!%T3 z3*souN1J__C2b3GG2eDN_rkHVp?#4$-O$&6^QL7cL;~X(9h46)pfBKJphBM9@pHnGx3TftqsM*qQJnA>cBh;41*O-{ zMVP0ZDBR$@K1lsp#rxI~*HPjZaAWW7U`AFZP25QQ!EuoIAJ(xE!wo4w*`*Y3Lg>Uv5vM(isq-%{xsLX9;=%I z6PvRtnmzF1Zy?p;9!bySBI=t`;C~HlvpO=saX~7?m z7Y_Q=^^6j^{8=Fyo}%LRi|I8F!PDGw3a;#7B;?pRIHiRYHiZ z!6lXlb~bpFGpY&SQubeffDyIJ3ZF@K$M~z$r=6D>WBsO86#;MmLz+jN_W4RWMLLjbvVPLpoY)f4v&x9EW@&;2m&2P%y_N!81a2=i1@d6Gn*;P)^;UaJ)r~?M4g8ul1Fi4tm zwfY+uL$asW<<9l5{F8e}!DM^S=!fhaeVa=1P+9I=)DB}?LD3I!yE-)49336h&1o5B zI%3ehPH2DZ+VM*M%Hd^`2i%czAIm`hR5;(u4fC~U@k@V>>sTt6Io6|5aUpxrquFH0 z%RF)nqJ=qibjUbDn$VqQY59BY2sWC5(-W(^&e_j9YQbV1?_rs&f_~hkc}OznQj9Y$ zYm1ADXPt3PO|NW=7$w}FWnv*1&1 zoVO6zqQBvfc_Uh|wbxJRcm7s?tJb=W1cUmiNlgC$a{_BZ`GsVU;NM>l804enTG>%Z zb+xwl^F1=i=aNjDhe}}oRGxLjcz{f+t=5ntXo(PON{?=8waIyOzxS&gI8?>iNxnWL zDBS`Z>KhFtWs^m=&JzVa$zH#%vZglSHq8NOv5rwp*QbX_tEEQiJFnc4tbAmky5M!s zB#B1k*@$jLS0!eAkcn`_o1Ea7FlW_L-FD%ylNIIHmf|;^4g=qmYv1F58`;&+|187A`I`5JXFq z)?d>Dd59H#s3g~iq>$})B1R!%3vdY-xwa|a`$p_(&s9jWfVg;UmdabI#C_@t?7hoZ zd1m0kPS@1Eb4Fvf(U6hjJrM4T8+)eO_AM6XZnN=CECgCTcPKh?X8aKnDQ+I2m% z*``se?2n3&K;tljQm{T~~lgHx=-KGB|#v__EgU&#(78xo3XN>p|oV2~I3Qmp9*65~R)m4c@Oi zRMv}M%?^^F&_ z+>YjUK6%TxQ#UjGAN8}t0Z7&Ak9(b7jr_*}`YUZEe}UH%CW%+l8yyuvc;jxOsx~{2 z?zU=w@kf)|hm+(mbg*P`5z)fJ4K_t(&Iw4OBuK3uFXVhVa1WgNtOU#8-%vYg9JUF#3g9{-3AV9HV@-2=X1M;Gs2_m?`uB}lX8op?mTAekp zz-`r`^gZmiOyTf|n(_G5)$=Ioa>41;r`^AX!PKUdA;if!PavX2y!9uvdTMr-8<;x2 z`Y56a9nMwwEq=}`)vgzt;!q0yI*0M&ZAfIO5(<87jQ-A3_nt>c=qAp)cc`apa+(m% zl}!a*-4&^#K*(c3=bGFw1oCI)(Pe67g%Z~oqurJMvQ=kEL7xu^@J`lWBfDHOa1eLq|D43seO z-+N|T$(0^oF}GL=lnqWUp5s?+Z?7a|t?Rp*jDNsuJYvQD;O_1|Q=3`G4(&%A_PBSU zVyF1BsGUar+Penm5n)LSC`22vL?^;*63-5aV3y@&Q^vHN(0R{1nGj*2T`@l-FJ-7i?Ul zubXbjU`Eht=KuM>5(IwI_9&E65Q0NZ*7GYzW+!_Fxqq1=QI%$^*#_IC}xLIF0v>PlQ_%i%nB%!TRszm|~U;_ z!n8$%1qB0LNMEUi!ExA~Sm$6eHWB(Q&owE#SefOujcMXA#Q4M=@{}&_%2xpUkwE*4 zV~5*4!aPDYMM^v%RFQ;rTO?8+%jJX)5p8@fSCgynA?`luaufP7sWk@gd28TQsw>rD zy=vmo#mTxH=;7!)u|VjgjImmD=P|llv?pWYc6N4@P`k0;w$so&Nv3LGeuTIXbJOAA zuEwpLDYiLWBF>kS&O6;iZJ!(}dj&!c>aBH1)wLYSQ+YfM3KdmU4o-secXttyueLnC zkgj`k=4znewJq{zYPl~MB~>q6EiZ)Y?=)r5lOoY?l^&UNYgCbWzF~OVB9{oFQyX4d z(#l4>hy}S#g_%}h%#CeCn$E)+-qaLo%YC|exxXX_AtF9(Pi%PEUk$vzCNj;5Nf&a_ zbUs;Ro-1F0EV509KUUh(xq=u;i>A5`w#go*rnW)=`salv3y&8}erq%K2I3&~K1lM8X7IBq8{u5ad$ z`SP!gZwTi2!HrDA1kDbE_(!%ccbBX{&QUN)R=Zwu^64?m&(y+<$v*hUkAa*ZJ&3m# zdYIf~qT0;g&nFDg+r8uCIDl7O-%bm0P)l7FQ#5OFjima}I)H{)hLOieAAA@V0)#oc zXVujCL7srTJET5YLrx2iaKuybH4>i#zjsm(N4=1}rKQE>cGc@3y#cBBO9o}pg?^>q z?57O_Tic23P1fk}Xa7DYLx$+-NiP@Yn&EuZU1Nf<4giX^bHq=w>OVYrYIfPkY}J+| zX*Q-+2GJ2!{^C}0Jk7X3Bevn&*uX4)Ymm;^r~S2Euo}}`6f^#LXO@DGMlD0O+n=hP zQiUXEt+gb8n}_K}Egpm33nU^Od%KB*?gR2H+qed|ldF{vsi8@hXT8qny&tz5cWSovyK2vGLi6St&_Ji2?;(` z0sZb?P2JGVjrw~MS6x0AwXqBkxiOYjcwRgX+uQ+JyBcg!6G&1n?46H~kY(EcRQ?dX z{phiiQ^_dE%Qeb^ca+ZSK<>B4=tW1>OhK`(EMqYg`bGCUu*HtsU6s!#J_Yc8l6-O+^A)(+a6T_G{s%Ex2Yc;$;YIdG2L7TfeNoL^YZVNVABMf zR1RDpf~i{tWJ3sE?vx3to^!F{-#wNFUSxO?dGS`=&1Oi z;+FU$a!^q3LCk{fbcBP}$)YOw=TF`h{mOe+CFQvDrCev3Y1Hx1@V%8cKR z1br591}J3%{bPV?(IdWpl6Rx6rnc;5aQfPDide?G+Ug;+g?dxB`D^Zf7|CgbzaeFo z(>y`+e~qFb6h9yUTOX_IjoipSBwXE~&yw5`A}#T0gK~a(m_=8NUP(%*e%fUk5o7Wb z6{2;5FToArq^|X zWA>*d^x05p*fx(RpFw6mK0(b^LBVjgxr*RmeRh}5t{}>=R&R5f{ea95DH=?$ahRg= z_EPNQX@Q0$;XgnXiU$qZZPxQ&uL0%a8@h3ey*0>&4~w4eWO~hwukyo!x#-|_gv>3Y z)P(r`>pzo}WRtu<4M&@Fv_=f$J5njxoRBQHYKI2 zd;0q&^?fUPdVMskTLiJ6-C56m1oh0*@aP4D!ExIq6@sckI*S(b*!(Wvm1S1;_UK$$ zgO{p{nxfX4wW+RS+<}HHnOU2~K(Ttk?UzSHSu9|FIEnK0@oiVo(*27_vDv|onBCI| zmXiqo%N6;bS#k11tdcU$OEAKMYKa4G31Tbz&{8cPd(2o= z0xxga&&MTsp(ujX%cGMMwdY-+hSc$w@30{cHKot}##f`h+usOGBh6Coo;k^!*%E{> z&JbF6<}`k1yb#k|`kdERpR@yR3CEqz=hPam+?%B6W}rf zEv(=q7kOMdGYSm@19JUojFo2ot-G(S?va~YG0RtsZ2s>=R-YEC&4yO}+A+Gix)X-{ z2bi2z7+IPyJknIBresnMQk3b_=~-A}oetF)`F{c(M|@k9IsFsJ4LC5Q%Son8 zl5r32OQ}OTd;|gwVjbQ8I2;&4KQ{JB`Mp1XvpoEfd5HA?!?}N>yUPG%oBcy%tfZv6 zo4H{A_e2&-A_}jnYi+F;g!xoVK{MlaxY`F?`W8m$k zO8R?K=u^Qy(KRW3AY-N!na?|~DfIY*LNiV`uA{EZ$aKR5804dXHKxYL`0LH59R`zh zS}f37EOE8>77ZZ9C1l0C9Y7M7-~bl}1XL*Kdoe_weFdNhm2ck;0!chDVidg2)?-;6 zXC6%A7v2)W23L0(cj=jbs{!c#+(wzdu@5$K3py44=HB$MtYw*F8{8PhgEW+*Ec%DV z>fIjEH_O1T;p^?gdIe&SNqh zzQ^z~73Kd&NhSb-JSnlU6soum%QOZvuTFKIjW~1k`S{ex7vg+&Z}xgwJjQa6@}G+p z=abDV&9UCSi^MwBevN*Ugs_UL0y{Z3u8xTGkYB%B#3T`+{F+Is+1)LeeoYClq^T)G z3b0!ConnLczeLO0RA45fz@wm`s8TopJWH{~Cd|B0;wCRusx%1>D#87N1WBBMWl@ZU z#T)72LGNuBXUyLy86rjc6rGn}fkx?z`_W;>_`|u&Qgrc5foUMGevzx)aS<9C-tSg3 zc4ZPwGM$vvTRTnr{GLbiXac=*vY5*fC!nN~Y;BT!*}3`A1=SeP$uHh!wnM;J_4HC_ z)m^Y$CYAyz2r}Uz+l=Z(r?;Pc+D9|ttltq3Q`TGK&bLJBDN^c_O}t6mpUh?MnRLa*P5-k&y&e=(S&udFm67u6?t$}H@}n! zD4n)NGsjMo!EB|pfs1boeAAIqZE{&n;72(O>@lltMRZ*ljoo$DLe z1-;g0x1eP#W@Oyv4dXYql?8a}QGe`k6>5ntoIfi+aE{>|yF7+HDm{m#r1RcNmKBHD z7cu#i&Ng~&rK-dWfd7&RE^Bf)KfttnXsxYc`dZ{2#%KG=yC!2G*4{4S)Ajk0$@zJ@ zOrNJnct5Va(k%Ig3Q|qzO@EGPI5{bbj{sB~+$b}+>hrQPj%`T2+F&P6K_)4+=19tx zNsCp*L?z;9@V0-iI7@~{QzyPX!+H{(=4Nuur+b%K!}(;zZ1T{XA*#9kg;$U^;}|X- z&dmjn<8C|yIRNUUZWawbt2N^XS`z>Wlf=*Ia85$n=%?#wCNq+v@Agv}2L&CS0?@k` zWVt}Wr9)e)@BMU+qywxV^Qr~96mC>iHOb4$V9 z{B`#!AB~%q>$lo)6tVV?Y{_wn1e=!|YMk)RA4&WFd*LS2!8W}DDZ*dh{GU7c=!b3-t+nt59OM-KxvBP~Cj&}dggX68$v^C-oTc@Y;RLGH;;=fZjo@{#)~(1V=R zeILrJ`Dcqcjk_!Xml2{c|GKgv(p#94E$*#8d)!Daf?zl`_o_Qg>>=JK(Jb^g`aXC2 ze2lKvi!I-q!6|i4G7o9f^^SuOCY;K5Lq~3?d4;!)@A=)kX33e##ZB3$b6ifBXpw~O zRX)TsmxIPouRht-bgMh1Z;Z6b;Bl>CKhVqfyT0DJ2XOto(|u)Cc;_Ue_YfM1yJ7KZ zT~m`sP>zvd52}4mw6yg1wY>_i+>Yn6vX>6`YL8c~et$<2SU*~Y;_Pk7-Ys^{kBI|* z0Umad(*CuQm0)^32q!VhM`3WI)$1dL7BMT!t1JSOy2~ffl@}G?)ZMW7!*1vsijTcTznSFyVvr)K04E|ZGVpwQrIQ$;ZJw>bo z3-;=v*`pr0t&hGJMEgCz1fhZyF8Q_5jRXB87?<|A-v3CC1aTB zQ;vR;w)rM)M>>^uz{a?-h3cmUhJ|}EsBTJ)5A&|{uw7L zf~rjb*;k+6c$bL%zgdv~j)cS}H@35rk_(r^KI?dB>(O&^G%>kC8J7xFU+D~hRi`4t z1`Bqyt4lB!2r3|{8;}S)hgJDJMV7Xq(u3<99S>HNgsa?26U;Y6TnD;mBd6Ryc!T{&^E30R-2i{dINMi6)zUBUcNqXCFsK@|ASoq2U? zyT19=Mc8ko{cl7Fed&`Isu1w-~HNpPv za8@I}!t&g})!OU(mW(hTn+f`kv`c0N?)K=fX(BPpECJ^P05@uwXc`(Kdp|8CQ*UmH z5QjLa9xjv%U%u?)DagxLt+)aXgmVhA|4r}$Hj>P*GP2~F=6`?rJG>Jfj*&@_hM(HM zSp>*maZ>qa5q!$CEraka3RyRlk~IPG0{Z~N_aJ)9w24+Xr*zG8T% zpf1>#FPDAId0w&=W*Kq#c(bbSZJG6!dse&CNLqt|+Wp;5RFu{Gyodi=$eUIOjFCdr zInY`}{EXYkC-*KvRPvE+nP8MS_abx*E7tu9g*LTcsH%*J*0=20{RK+wrwLmq2Iup_ z8{e}P!}6vcx5#6#z0rnHCr2-qDpO_V(HoZIJOR;E785f`Z!Z+B@U2X+(upK&!P(PN zJ!|rdzFgS2mh1-(p_uek&s$nwb9G#!mT#egMiz*i+*bT&a_}-T^CMZa%9ehx*MPkY zGgOd^Yp||ZR8|*HqmeWxHs`|_B@Fg&lzkEn-)wWD>Cwp8;lO@qTD6D{QZJemWA|4t zr(s7mrJ*3<=I$KQw7vdfohs$N4iv-X`izK$wRy|0+zh8CCfgbt6wMPP~xsnpC0zo4JJc)#;vg5yes7)&MeXJ;h$SVixi%<#j` zMje8;$^W(&i7_fhJYw*3h_rT0AG{fM$u_z@y4mJRTtV(zd8cLUuB6Nf$ZJMG)qIjG zxhF8e_wVDnL<#i~Vs&STJOCZ|0-_>+2le@9Ms=?d%H^<;v5tnrDKej#4uvmI?U{f1 z^y^jtS2Tz8$(Lb!>o-N22}1bP`S=k>5C3`QoiHh*VeczVdR<-c zB!OvfBZ;rFqpk4EH3Lggs$r~kiPADNoV6>+yvX7p1YE6RZcZOx@2^j_RCDAzm59ME z*}^8X7*7zWZK{qax9zD+!one3S(QIqSG;DMRc?%f$ei?1fh?lqikzZ%c%vtE0SZ}7 zI6k$KX=2TY1Df?=b!Ap@7pswBgfu;fwJIIyCeoY;r=OZ$M@lkSqma^6fSW=$EsfSs zM$IaSWt00-yCwJhx0nQOfBojA9#DuRpNYpbK^2H~E%+?}SrYU-z~kc3 z*ig9e=a*14FctXrI*LpRR_axcP=z=rhEhtS73Zzm@L?}*Ii&yf^_e^P2x#vnf?6X4 zb#tSTkdQVx5-tG)PEE_#6!spy8xsSu=&Ah}-`Efei=3D{v7M#BbP^C)Q}}8X9(lgL z-R-~Y#O!k|jfCcuSMvi-h$T9aY&$KgfGwskW@zXc!rv34$%>dY#6NSK1}KB=e7@8x z)U2Hy!4`Jdbs*tMk+Ko!N=vKjXgR>{qX@zIdm@bWC`du)O|SQ+=hg3^d`_aVF)$bf|*13#N zJd-0rEB;Qwh+On#%2YwJ3q`?Zbpkvb>JM3Bz1rDO{w~75Jdoc+DLb_pE~B$^$PGV` z>{)%t^EZoveN2Yeqv?F(OtVKC%6lB)o@G|D(Zk@L)1<@9nX1Jh;cmQ zX1}M?lZey%nRn%fI0cQ>)zPTkzwWnVh5m^pHDsVbh^AZ=v0!qz12Ix+uC&{e5lkp; z5}rDRe*%q7n24JyJ}>N0$xIv1q{`1XQr=~j>7@o(=jeMi5qUQE5P?PqXXttwiJ-Tek6Z(T)n=nc_SG_??65~j4I zfl`t)4ED_o1SwAamffX&{-(^i4MlPRAq*6XIWLMlYzeO*!5V?-G?Z$ma15 zrpmXYrBeq6Ukwgmn2vjTdK~m^dgmcuA+X#NT-E;~8q=+gS5-a4d$UVO7BXDG6c?k@ zLvEjFf*z+Wd5edBCCtdoEUhdw(^!r4f*iLhFOQ_w(fMoaQ72v(e?}Pac3-f1fB^x;E{ZpS*avR{SiJTIVG?z@e^qcJBRd^V8ta(80Fw zb1X(&SxI9{YAxcY@$51XzULqeHkQRh+G9rb!*6{~eQoWJcVL{lvN-cIV;fUOu+kN; zb9iCoF6n62zxNmI-}~zTmZA?G!~vHeVbhc6Ha%u|i6pE4?jtLbjRsLIKee`FUP)0`rXoU?g8&q5Zg5nUA_sj8|etG#6 z+8aD^Q!l&&RMcuxQaEEs%wyNO1gQ69D1E$VmK}dRoK@s zhFeLU5(yr8aI>q4UR*ddaI=IIRuWl;R(liRky@>$8Vh>93Otp+RnR9e@)EbFu(zxn zZk+0QxP~ygxa;5%331bq*CZ+L7;ONEvV^qFCZb?g?rsKbaP)y;D-m z=I!xmwDp=gQXWx-Nvrg9l9Z$`*O;gO^2(6hSrks6ImfzOQy4HfF%`FVaf zqnQXQK3=cwyz3Mq9una%=rYcSbGyH%yIfp$@PDmFh#p?gO&%Fb-eCzo-Q`li0f1EX z=oflx>HM08j`_#?$)qea0eF?5hNSVLGtx|;$yZ12cO*xPXyP@ai}{5rL`i5uO4izg z^JiYlJ;HgDu|gK1#Wwpum$?%q=r86-tQDTtj4RySocLZw%^jVKF7ij;e++(aukFV5 z`P>U4E-IdE@7d=QgJ%?79oE1_2fm?SUe11dw?K}M?o#yP!bGB(SKH02FIc>tnwt7> z&euogZ&iOWtQ8I|A_unv6e>$hpPkZXo|S|ImXT*>iU5i#+sqQ)2=$UHMc&VIG?p`P zE+8W&p)`*Bz${)CW9`cFEluO{FNNa>|3t~D!%=+-iDts+C1uR1*qRF8RU)pgisPKm zE(BC=y#z)JD5HJ7^mNU3U^-!WtVPtPL(6*{v0e{B$mOZEcJHuf3CFlx5v)|(ej2J$ z)3UlDs`8yV=hZ{c$gs~DN)X%dET&$AX%J^aJTl=wMeH&#IPH}>oUZm-&(hO68%Zv7 zTI*e%c*lC>P6$EvHgPouAmTM&@wZ1i-#pPeUa3M1i61wm54il}I(d~^T@@+!jNs!x^p?GggLjBFJ%&dJIbS`nWJ8!S- zt~Z`=wBad&&8qcoGQ+I@%e|M1;NT$J6@+>4n*N!h{ZA~k76yI9P@T_F0y7tpX2U13 z-%?4N9F-sO#;Qo#yz7~ld)+z1kyp#m=t}g5c2_U0Y@E&&92^OS*N_46s;R4HnlDdj zCe^85R_p&(AI4HR08_>n-8ehXk84Pgs(7}xHMY$>5$fEMT9W;SztrHSUS35EUp_vgJ&gbP2%X<1dMl9xdM32C&y=;*F{N*BvZgW z0mt;gqhEY?F6_NTP1;-tuMLq76nRD~oq^+BE=L?8}&bBW1AMO4-)`WN81EMeaJ)>72FU4)#{;KhV1S zL}@ANfw3wBTvsrfUqq$)8~&h0`DV|}O*uUHVC z-V8}25pw(y^>dIUp>V8{7PGHig7Mal zAr?5Jm@O>E?BF0ewPB+P+!J?`g@xr(_m-pD_J)KPMhfXwBPWe_7={f_LHK1wq~R@^ zB7cxDI`lFQQR*^;g&eo(rT(Tss31lOh{YJPTeJ4wL@`odG`u!f2FLkXp~V%H0#PNc zMcoO+&gho~=xJkw7dy)z8Uo*A+8J(Y+j4hU22(Q9ChPXr%X*iVQg#LZ zP2iN{+9pD!+6Xfa$J6cT^f1Jv{0-zt^dJdGgu6GrjXdV8R-_8eV)MfZsDhkl-yU4Z zBtR9nh)vCUc@-(7+YCqN?MkxQ$|?WSF?8)b4pz+poj3<+q;`N|99o5v^7M& zEWj`!Ec$85kH8v7Q2Zt9d>@j9mGPevkOqYNr9W9Um_#COto4JUIzJ!V zicx8LeI(B1U`SXGd7NSyOW~L#K7n0UqL$a z2k$8(4KHPivU}O2n0!S2{pU=E)K5^~{P0ey3S+*@VSSN1#KAd@#&^o0>@0!|)~#ZJsF?DK^gZixfx_wU@Dv)_tAK~z@Mu}jyX?Rx>?;gPxF zV8bO=+8?0ns0Z3z@&9p6kfPm5Xf@kmWP$a4-*sv4{){g6_$SZmJr17r8}`6G;XEB# z)u*m1uZIO$sUKD)VpR(=Gop%`*g86X^sFzF$3Fnq{}}&a912+Vz!gVIcM>W+Vjkf9 zXq`c(2oF!s6du;izS_*th=vFN=@#keFA6HcvGj_q)TiQHbNUa^se^z+4@5v?c&OBN zh|QUeD(s)dOCi{c*?D=YvNBQ41^n@M{`3+9@ob6rY#eUh3s7(VeNsPrIrXW|MOq*i z3Z-5Arx>w&InjuTb9dr6t6h63&fJ9!JMzxxYH&n?*q}^#gwmUt+w*@cc)Hq_pWZ{W z87$7>2zB~rWHfa1=%M4n3M9?I(#Mhsce_#pNxsn9tcC)Q&H7qyWT}XZ=ed+Rn+tLjufd@7k6%}eJNeBrq{Qoe^ zi8d%}VxrWEAlpI9(Xzgt-HMqxLaD9XJ8QxQh##eX0pn`{qgB7S>W7U^UvFXuPqE!l zzP4kjTr_CTYiiVzfQdB<&EX*l32>wY8AB~B{V~G9hpBB^v0b=xPKE`|;(Jb&SFv}{ zkfK{RBBV4l;rPo>&fmPkaFmk4B#}r8I|GhsXpDkuBO`PKSbbt*Kz*`!$Yu2Gx*oR{ zGRF8q=cduC%R-(2y=&BdS{|kFYc`(A+=A!r5*Xj#zGG3<4 zva%!1SC`6PE#FMp;WFH}DWPFuLs4obyvVIk3W|!dkcrpE;K>ant3}zLUs_AHAbr78 z28vLZ*Q%LPFxN~Zf$<74j61`N7~Y@{_!7`{f2Kef-7d&5W^u{qLR_k)rxEjHlI(Nm6b_@YFA+3#^QQE=EHNO`54>03r{&JR^m)I zbnkybn_W5AIJ19-+lf|5I&I^^V3PMqVVI@{@=dBK~YnD zVCU=!r@WeH#T1{)@=T%3*WV<{eat4V*Y920fvlQAjf)ct5W7w&WMqOLmJA6D(y2RU zc9kt#!uoeG@qf$yOxi2bP}r*e z0ZsQGU=ZCp%Y>Ev(_C8XzHkN*sAZ2%3xh~*GyOo_!^!6B1<9+lVmoSd*c?zN)PZm* zeI~kqi*B|iD4<=$Ido3-HqUDB5b>1I zk2yrIlt_R6-d=4N1D<eh+~_|gx`_&Sl6jY}7r;3&Uf@%L9Cghm z9R?Y+QNcngDoiY_$vX%fXIz{l*IyukqtjEQMa-T-nA-3zxz*GyPvlu%3JL|Pk=Mmd z;cd^bFN?Gmzw%$t^TT(*;9|U$v}m5Y`FYdPv9Y3fnkzbLzKlUhn1c|8`-@H#YB|;HxFND~?G$Tqeg?^5MMhrR~%Ka%}DoI^FV8 zBwz3~0{~hE(RjReAiS?HB&gNZjJ{~A8Au6rzBbUff*HVvw%Yn$l7e1>t`54?9yI1_ znrZU#@^R^H1VG5EvYzwF`@+x4Cf`=iHh*Kwf>HH$3-$F?sJgek7lj7LX;qKbl3%;vL?sCMGU!u~6igUH*u`t_HJe zJ4kTeC2IZBF8?Z7MSVWbWOdNOORyUQ0 zG(40E&rks+&m(FR)b5yo48Up*qGWf#6M(gW<`uZ2eV^csZPb@232T4gJ z0F7ooB9rtN)&e&APY>gndN1KlC2$D1ZCLV%xKxGE^Hw&41DGcJa_PeMgGbbHfrF3$Do1Cp~dCJ}}x&=Z=v zp{awqwpQiacCu9k`6uE}ww@N`6#vMZTQ_1`3yBqrDDQYb|5dj9R@%DlL4Dktad^xY_7Z=aN)(=cyIbWC z!-XLeSX-7q-9>TlFmoypT6{!QhIcs(pQ59q3NqQ=Ui|tx`g9Ia#pwGHenjRZJyD9} z`7B;*C8ZUz|EsEOoz7)yj3W#yB)TpJp#CHbnY~_Ye~Sv;Qog0NwYJQOx7f&0dcC#? z`vHt5x)pHwJc}!o0-*80_cWj^i+V3Z8;!)GHZ9^INvRYF!;XVnS&HR<^E5m-H;>l2 z@$0WTmZ$5#M@lkl@?Ho}8Fj9MzrPchd5UCo5o3iE>N&1`KP`l!=N;uqb{0TPT>WU3 z#=b|VnS_f+TvYQT8OwR^#O{lpoX}fi)NW6reX7p#x6>8p3r~FnMt39BB}x#`0_||{ zX7$Jt|I6o+*`2fX{5Vl;ob0(&C%e*u@y1{dAwGFI46%%gBauzaEK-XpT8TW9u6-|s z6Y#MXd=iixsV`#5a5LPM92vQi_+G+CQqyRjU3|-=a$SUW+_kch)+aY3&YP$78K3A280{{eIlt*piOO=wQg>|IhT6J zsj8-KRTcmpQj^q)j1FN>|FTgM3E~n%%7ATFmzK}@meG@krSyoJ(GBOamWJB!ta-L4 zoF?GiyKm3)Up$&>q$ehr^qDG*WOZGI-I@ML)P+DIduNlQ1%dr;Wo0GGixk#sah+{H z;+@ck!v(+6P*Y>VpY(^X*E0%+N<55=z&Bb(TCrevaR&PB@tjkOOJE4hIrjxTS=)Z) zXf-~YLg-VgnDn#SQH+P(?;7X}7o@DgqJnS3vjp_z8WB5lzzfsXv~>=hJY4Zpy=0r7F)v-0>autBdMx zB@8V}Pm|sv0o#VxZ$2&AQDEDGf@$-xQ2XDqOJrqV916m2<>{@$c030h>tfrk5O<3; zl)s7-wD2&~a)w4_NzmIw6$2n8Om@s99FOMcQ>vvEbR5^|iOb>3q#!r<(A|&>J^`lz zo35+AbYAKHS3@T#?DzXD?fC_D3=Bv#QE7Ag<_!`WcOfL5<-hP?VMCU=`I3EJcK6H) zb)(4OtgS$#jXp=$tSeJ&&p?K|`lxSu&i@X$lwAk+X)P}BDeP~KqOZ@|_7h2l5*dU$ z2c?Hg|HU|-a6f;Z=kaSj8hvq|UlDARrc2LCut(x^=_&E&BWrF+j$a}1{_>Pp)UKdlY5n^B4f5>6AbntCaD8Pq zl-NBviI7JGAkxl>4X)1mX*t?U52y8q7rq>?+TolaYX9==_}z=;JyLqeF?F}l+dBlx zlle&sn7PcHDt+|JmNo)y>T_?HU?Yn5gzqn#TKK3p0qi zV0vd5RRIwNU$BYJ4gdkOE!Iu5{9xPhDlh6 zt4TmStA^BDn3XrkjHn(ioJd7~_Z_^I+unD??gB|Mz7$8pP9L8J@Rn$qo9bXV_3@NX zh^vVJM(s^|jtQeOQ3&hQ#h>u%Y8D0d7KA@LfLliyK_u(>fe|le8RkMy&!9tfrl>SR z?>HsxBIhNb&Gir%$;3!;TJ}7{H5;Jfr2h{f%M9s`pG3V)L+J>!x$S~fTPb&rV(*u_!%%miPZ*`+H9i)1$r4&Da-p`yfD z9djWC27HX9jv3bY~j3H#S9Ya6!JQCoR)hnYmzo+ z?LBv|yCbiP42E)?!5{lR_{irx;rsN*^ThQy*JrS?;L`c2+e=&{`KYt@oe>F-S4tZG zkrB0mj#pIMa4HoSHz$v~l^|N*Cajm&OUqHSIu&e1G0UVN@Pr;jV#P1`DNzV+_^Ijo>0)UO$4Ud_U@b^CaP-zQ-r;~+Srm(Qb#&D zI}kHmG&DNT)^1B3JhD_%iv$G*qoeD&<%ygzk{M{9+b0r1O+s#?z#~vle)=?NYP&_O zqk8`%{u4?$C4>5ct+}ab(FHG44N7gb?9PG$XqpJ&Rq}(mmjy)W+2Nt6j0`;E1Bq;x zejC}MuR%9}&~pMHUX7x5Nc5@ts^`QF-$SJb`=NHH!!!~~1B>t$o{3>FIuoppnLV@Y4z@^+j zA598$PV0UTX{Gf&i{CX2eg!`uM|6A{x8p7Y!!su=2cD%fYFqb50q*)VW!JO)E?bb4 zcwJZdr!J?H@PP{pgz87w8*>aDVCWC&5wUDwT35a#n}@a&O25T4#3BS>0LLf zUMA>c%dqjj(zr-UEXrQeEEw(K9D|)(8ykioEYdX!RB1NohYDU7ePwPW1ve*+T5v1e zR$#yO*RpaAndbPDE6>Lh-p4=LZ^}b~HVUTS5I6I&55`-PS1+gq#!*NFWe4OZd(p{w zsZzg-32$9JYS02ro_oC;D++$dY>8QqZS~hpmor%+-lV2r zR_`Gv8M#q4$4&2SouR^wP=o{xa3Ui=ON1onQc9NQGs!`yk8Ner84v^3>x7AC7Q>F zXDT~(6k6ua&MvBUuFd4$mG0v=*U+=1q(2xCDgQZj(;v40Q#e{XUL>@%iM}T%R_o)+ z_h(McAOyPoAH&is@omY^FE1KcYNTU_I9K1BSeK`&CXu~E^p^J~H8izJv$m|(6r--! zbpkz&zsQWVD$PY-ggnB)-A=qm?Jlver;O1yvjB@n6JxE;doRQ}#d?GM7qKAKom=av z;7?=}vxO9aqR=aP+Tai=o!>)4rcm1T?3ifwB=$(5YU%B3`^nXuUK66|McLWaX|ST- z-CbN1smPc4m*&Vlf3&qRmaFnqs3DQDvig@9y5VkiIIFp@kO(@&ofBpaA;}|ib8{)n zuU+DDe!koHv_cwVw~F)N<6lXgRxALF21lL2ym7(OlB(rY3tefS$siGAw4hIjqMvHk znfc2~OXu1v?=E<>m^^{3D>vY2`A<*Q>ua;pM4DP}wIGmlJf5yh?fm&8JE8Ax9p*tw z?+qyGm=8om7?tQjo+;9IpV>AeM}B`|V{*_2%Zx~hZgGl0yj9!S40Z{3!F(8|TY>v) zbsB~x>-&E(0I=%%i-?P-#Qo|u@djM0Ej(BKPxtVxu1`ri7`GE2`x0@!|H1f^s-2Rb zlw^Lp%f^Tj#@fTO7$E4U!n-%V&&7RL=P1985Fuqc9sp5I%Tjza8ivH5SriP@Xz3Id zog9-OulPGcw|2nHi@%?k2^^e7UdQ#ear}(v$>jj>%a9?xUfMiu(Ti5-lyB z2N&Bk3{rS_c!edy%13{|vwJ}81qIcU)Vb}gDVVT(qpe?~K0x-jiLtSAY-fo;lf{FD zg#`)~-P-D$)SMIZk+SkgEypy=N4<$Zvp~8^n0Tq9jL;j7$$T?$uL8WPz3uO!;*yy^Bcw(9yut34>ltm9 z3>LnOW$xCq(l|Lga#)+S@Qnwsp)j?ji5+8`C3EPqSqv|AA-1D-71Rw-$$*rZ@K1NS4 zHTv`=>?aHWN?2o%1R(y!%m3XEP5e+j?L1xl3;}|WQeRB1zn>+k$CWFAn123Ld7EXH z<-g^ch(J$ztKF*T;-}8|g?Gu&qdMA_j;etq+R`mm&hX^$^*X-j2J3xIeReq5qqQ zcC$e>a^76e4B^nR(#hC}aI*N2K2?0r2GxQrxXVd!->bh^(x-CROb^Y^V@gO$s7ZOI zo7d|^OTWj*tF7t{(0RACHCTJ%i7@+I4zAMOC64b|Xb=+<`>Ns_5Yk!ZNlBWT{yoq$ zIV2fnz2(JN!|3wwDm2kRWg4ts{|*7qn!Pe-H`0WB@I5@%Yf|xFw33tzlb{I>REAB0 zg@M#x-BUQ6A@zMp-O^Xx*{!#j;_(N$Kt{>_5TQf2KmG-29>!a=$ja^b?ORUWP_&VZ z@8!~X;7^Q@*Rk3nV+{=Ew+tjLB_QPG~3BQ3Z27 zycelEjPFWM4`kTyP#;}M7!6_Xuiva=RIT=);k72e2K779uo(9b_GOo;XuN(8d^xID zioC5wvsZ)8V z#CR}GL^Ajs?B&!lx~CemLY^3dMV#1K7D&f=n<|?pmeYseRq2jiZ6iGq>A@x@CI>K2 za<)DnUOq`ee<<6{OMRBytqufk%o9Y=;Lsp%?zT|or(Htzy^ps#fO&U2DooWb$)9*T zP}2!&p_a2S2(y+ZJM4)3@S82Hdp%}D#|yK@Y53Q9cxsy14;($j9d7IM1d=bGeKK(Q z73<@Z%B5+)m2eIVsQY#2yUKq)&;~ z=an}bj(AAxW0ju^8q_DoR&G^2nQHZbSj3x7U{iIS?cs z`uftJ8!3ZqZo^Tpdc+LQ_!0bOiDkBy2kX7VwNd_ANtYZA!kFn^d=!skt4{ve(*Rp807?vBsTE3 zh6)%YQzaIg8;cyF+Us!XX7;MZIbt3sKm9Z)JG(H zV`J$N@^m?f&-)j#Wca7HRNxxi$5ocL!#B73h&BBzy3Nf}8O;h~C=9H^A3g9akG0o1 z9vchFmBdUhK_EKMrpy_fxw*OPoBixVPpi469+K4ID50n8!uf{WfRK=oQcsXTI86%f z-SxGqslXn_88NXeHvSb;%tp;h4`)ZwQE3@W@c8xoe8HorV>NYMU43bLyX=+YgcR!a z7}n~PMi2+Ok1qfW`JDF{A08f+Rc5w1pJHJC+pVSmAOmQ+(ixWiFT4XU#_8lAScPP= z{2AkMiKT2O*{?&M2`~>Db@!In&61EQHPlqKVZ9yRknr4dBjS1GH$qA-9bQz zK*)%TsyCer`0X|(E~eD8LqkJ5sPyzo~0SOL{PCkGA)3kI|RbzgA zIKo&^Q60Bs%VSiHrYAr$1JRrWY7?-xJwZ&Jdz&>DKTtA4_9mO9GVzvY1;2N6yvyUd z%ztxt7w%|m4o2_W*RtGeftE@{^{l22-^=Dz^|iu?ys54(`<7Lhkt_bG91W8&4_$N- zpG11&{$9JR++FrOQ_9(1#2BvSCr|m)^v({Z)_p78=9WR*iKWk{Ech*hFm2bJFcX%l zwGIGW$*%a{(bD_o?tBnpHJiO?9D*H7dwveUBt(~`QOqtX8l=9(Kg)|4=lE)4W8rHt z*2Qi~B9--@hss(2s>w5C?cOPw;{SQ?{vKK^P!do6IuotzjkCjMfEM6)2)G9y0^j6w27AzQosRKAvZkY_J%d-^fDTsws%G;aw>nib26i>HLPWrEc9}-_g;ie`h zE8Bkw@OoU=q)EBBxXf^9>E6|U)UeVkCb#Ca8F#O!s>-joP*RnVq0>`taDuMmr>dvw zUB#K4+0Qmog$M0j)7Svck-ug{fO-IwR~T2`vj1gX=PTq8Q~AO#4;Z&-^hHNyH%gB- zkkU9w`*lv=ic0(p!;nw(oTSNw-X);UN)DNN&m%E z#~~2dc4!n7MI-OG`H&i6^yQ+6g%#s5FpjDHW|G6p%QfI+)bW1%G|rJH7uE{4)VU|s z8rl7{*RatR2d%H6gN^2-NU~G<>+`5I7Q$PnYVJ$h#*MPt|MeEcfwWOIo_a1-0L z zHaf3MjIAik76YnJ{`wb^DC{pyg%*BsDjS?$dV%U*wW^;>(6K2}KxdX#oGn)a0~XIO z&0h*%=Iw<~g}nmFd-D$Jr#g!)uC6dK2o#uQ&@fTAESfkjWQX{afXbT%Z2h4}52MG; zBaYSU@L0{~mhRxyl)O~Tkk^{IjT)jaJC&uwb*q?Q{7n`q_ zp1WAjhr(T|)w$|GZ>*6c@-G5IVC7AutOVg*adsJ6RfrLme;*k*$m5h{>zS?Hn*VMw z;HBmT6_*&O} z>ho3*%v5#eaI0)y9GJP4WNF4d4#$wg&(0)e+?|Z#csCv znALd|_ty_m!v&?_rNrlT-_3xOouHvCZMnp-s<7_YBB`m!?Ecepdi#&6#H-0>#rk2H z$8}_V@xeF&jl$`qWgFnyGb?20G1eQACY3 z7p-WJ{i-^yC0IEsRB?JWTfR=cf|%(GAZ`!dDpHhe_MZ-02_Oh@-;G1{&n<{O#?dO z=)J;CHU-+-q~q$aTWlt#CRJ;YA|ZV(>#+AZeP|u1vVENkNAA=whHu%j&3#- zUZlH?9S}g$XngVRFsJx#HHrAt=jlE)2Y4HGidurBh=hAbq+ZoEbrn_Q(YbUEJ;7B5 zE*t^^?U(B-Cq1^)$UlWmCaq-0Ylu+Eq@;YaqK=@@XW-!-)OB>sWRtNQc|Fe>dS|jQ zG;?R62|z|h*;>{NBGzv=!f&;X5xr7Wf!=^UY@vyLf1^O+^=U@);XN|4`Znwrpu=zf zYd?{|KIa7T=UtJ@|GZh)o=0~iAh4g zM~wJ89Bx6oJ12&X`N_?%5!)J(P3ICyN-TvI=Cf=4m;H^6!u>ll4akhmnd!K5ZBsW! zRdnFWrF%ESn9Lj?o0piWt;IyeEottcA^;}V9zHQ7Yh=eTCTWvEozKaS4e!XilYD19 zTIWZ(d9?cOHWSmu^9O3|w}BBp+ZUx_O{f82O*?9hMm)?I-A&ne*=pOdape z-FCgzxN@S8%2u%Qlw&j6KU@BPOr2w3o!!>8!$ytmv}v3sX=AIg8{4++#SplKiT`nT62v##x+%7HQOIa`BA$8PDeVR-Xs{9M!c5Iz{CdI;PZc; zQv(;6@n33gZN;^C1T+d$YpsSF*hwoWuG)F6!TFBGlL&5N;|1d{C97LMHXa{^Zy}rt z#>eaTn(oVplepwG=VoW8oRz(EiM^T{KI3L&#)$8&@$|2;9~Q5_YT^;%t(%=INW(^b zVgX05p6fO%|tQaP6sCu9#U;`rKb~7p?2Yq_m6K1DnY_ z6|Bd@PGcz=dOZkXO>6@(JvzB3wj+PhI^~++u41cD+WxO~vzfNMW+|GSxVRQsy42w~ zAF0a6hsVdsv@)af6J_m+hm|EhR{R>=E%=Yu$}9|lNIqvT?(@9P!IlBbD_Jxl7M@~) z(VCfQ>e2+g8g3zCb5NPQ-A)CYVz}*htI&^rOFBfRrgaVVG|+j^`uz&nq~Vrs!til7 zU(JV9^`#$P?&e&y*t_?1M7FljxA*oWs<~#%%04RLKP2+alFBL~4W5paS!D9MPO?d8 zKRrH-PYvNQvnoc^d9}M=v@J$bZ)sPosLZjOInu~zqeBs}FW}iTm*wypnnOBqeB&O=n%#ii!aLsz@;CTS^F-x05*;!GH ziGAyb_6lgr^LQR%HWCdvJtyZ@7|){8m~b>nqBcd<-39Hq&>)K$C%iW4c;h*5dS+tm zyT+rKk(9bUkz9Gp+qiCv-GRBiQ(OZF?7DUHy&O0N^Y6*OoA#Gm&{?+)^<)_DR;#cES%)r&mIenyu&357x8uGURRr3bC^NO? z24#aPTZB34>KQHo71TlOVaq^inUpnW4xsSb|z}Rj_n>{OP$KX%HJ)dDT zunFm)fPaD5;53G(Xz5%Qfm74s!>u=q5Q=}S2u)R zGkF;+^d~sDS2``ecsn<@nU~S!82&g)2|`dLfuWse$l@YLI1zZwprGjajwcYu-lu&c z)oyKA%-lPVffUzzSOj%W0RDsXz3DEfL$EkC|LswzlG-@Nn{!v7+9?YoI5}05hDXpT zw)*kbmCbQ_#`ECwdUTeB%Z>a+1b{dcE@E8l0nkPMt-QR@{r2nLy~=QeyZKOx{6j{2 zC#RhJ0Co<~UAC1L*QA2Nq`k>5NbjWN%Ezat;xhu1t0Q_=<(0e$B*|5e6I7SSx<1;E z(I!4U;kb!>jYhz9#NyMx4^N(92^c74>^ukN#-DZGhzU4%rYkgFeAU#{oQDnuT>q^- zU?Disz!MGz;+BBX;Zv{@l9*hyN(jZCo-Z`$H>=p+e>GaKFeb-zB&;8=q)CCW_lnp5 z_$P$y(GK%*wz^N+7lM@>27glCQ@y++pupCm{P57)WFX>52!7o=%FV=eDh;khia|Io zK{~~=y^H_DYW07m7u5HJbestJw@2_VMA(ULRVLUlyb&1v# zn~L&cRd!nDyI)IWnCQ&d%%`oahRUw<3ej?5U{n8r*dAEe|dUdiX~p37tPy#p~< z=$ortDT=tK;5|^%^cqhr0-wP247S$u z4~TK$fXXahdK}Ia1;cP?%P*fdIGkS=K|}Vod42T>FMb#zXo%G6iO3 zmGTBA4i;RF4!7e#d?+4K$~NX9VR4a7*K1;8wK!I~zsaxB?<<5^GdzL5Z){SvsJQg{ zQ+8O10n+Zb(jRAQUS!MOb?7AyPs!=Y>+I9PsYf56pydT$?9l!aCDsR0*a`_H;Pr#W zO-M^4rHe8Pe){xjy4Rro7fBT=ECE||;qKK+nTGMG4~2`ea^vG^e&x_wYJY48tq2Jn zOCVi``=3iB3k#WIu!d^nAAzL6Hug{X*@grgU;PosiwU(`b%#QRNHfM=*l<*zM#A4T z(lDaGpa3iLSO0hZ#umMT(w1LXSzl2CddH)pkS8i-ZsmOLnCPE*fXab2RbA!QZZz1U zfYlz}71cFFm>h5g*bqbibUD;I^iV4b+#gXC2td|OnDJ1P8&f@5aRBMkb8wb^_H@geWF}~PL zEnfmhZl$%)&v_m*J&*V}i|`s`xB21kUANPW$3iQD zs~X^KVQ7M!`^XP-2Lf8YpS`O)EBk*h?jG?-XZq%BqoS0w1W0Z}84DgE40!Sj4-Zbr zef@l7u7Apcl7bGzQVMzpmhl43sJK%Cm`AbS?Ck7mP~?wvU+I1y41NpMBmVS7W}QvNAqJ>Jd@};T zsI7D|d~9@(A0mQ{+vZCy2w7)&Pti9}W6V$&Ra#G8GfCIf*E;Trwk#_Z2x5~NULJzZ z4*DuPs|@T~#80cQ32e2!uh)4fK2{&|KIsM8#*Q2H#ZC50O8&6H)Z(BK`)EZC-k!2Y z)&FkgzCtlEKl%+zejKPO%@#u=1B22LMu` zZ|IEDQ&dERN3`cEvtcgux_JiQ)6_G@x4!oJ0-|lrs$-NE9{anC%5X+)byY|T3A_XU zrEZ-BcTG<-X};b*Su#3^s`I-I$&Q30qJPQxG?$LAEb(@yp0w}Xc17mta!w}%Q!!Q~ zLj2A(;W(;39Hajnxrv4bN90+=_Z(1T zC}R1Wsi6cAB4#VyvGGp7qCqrz#2yH<=Wlgf;r{*wy7Gvm&5F$k?$0#X?V?c ztwFg}qJIZr0PMq70Q;1vfqf+DyDqA8gwpky0jm~u;#+mwxcMsv(Hx;ZD!^%seH0{7 zrt+m_`C@8)jI(smE=X&O_%;BXF{RdQ1VA&^ouB5FM{M&QTve%t?T*C27`LG0UM9LQ zn*d+8$}VFH_RyXBb#toiKtchVlZZP$aD@G-zqLqoL&G_Q{=UUdz+T&bKi!m@^QV}dA~b~4owvGRE-}yXD%#Lc=j5ZhV6%+4va5Suu&&kiD5s=}$jsjBD zQ@ClQdZPboTTd?$h!4LW3Tny|^k#0MSN3^p?0nArOiKFEvHEKxCmUPQTTD;Sy(POB z?zI^d$xI|O1025&BMJ)K{wSX+U_Sm|Sp^S1pz~)A8R0@jat52|b-2gE%7eSPb>zSt z=r?-Uur_mo#_hAf;1RD49`@WzSLg0>lXpl#>F#lD?d<>nX6Z3Cxo$MUvprhwt1c0Q zAz7~(jA)^Bjdo(i7d9?p&lisa#Mf}Z2&?#kYv5%tgz8e)n}N21{qnQAoY*IBR}DQm zGOXVx0JndPryGb>5x*8u&z>%O>8yr`ngh3|$`nf0HNeNCAjds22c2(cG-S${jeX}J zG^^Z7U6e4*4!P^5)Spbi*{-VOfBQI|lI9L)7&CHtYn1UA<{AZ{6piic+ z4|_DCeMA=*M$T`p05n&@0FQZ;gyQ_+24~F2aN?6EKW_K&EH-;#D&!3gq!d$?KiQWL z_tm7+{XaSi+_3t)t^ny8&j10eh-dw#KC7~lYWO3Xt4meZ9xeLN5)Y?4>xz3!cmcQ5 zsJ&>gU^&z_?eDbyeu@M9#7^N&u;6>(sLk;->-q?E$>*MzLW08!9s>;zOr_pjxJG6M zz`#bk802zdI&|x@h9=&h{AU^_9 zob&|~T5D@-uZLxLYkrxaxw^Se>W^&)SukO(%hjh1)yVLAI47+Cu`u=F8;AN`=xl6Q zO6z&=`=1jYAK3SCmGu!`uk?=lJqfBG@?%KfZ(ck-hXn5dyHGi8us%Ol*j5ucKRNnk zU*G41($wR7Vd#{n41zEXS164tlX7}K*vdu-l~(O9NQ#O|=f=~e!H_Ck3W>ZER(c70 zB#5g|>w>8U-*akeQr%j587HW_!~q!wNg%tiG0W?D16x|w!3ALUnU2}+(24e}N6U5u zwq55iV?%tA=FvAN&f+^O--+`U?UmY_gUdtO>-SYkq+4S@>!&gp0YZl?2chhtK?p_UR@ zf1j{C5M8f0)%p$Os^+m5vVhJU_bmaD(v^y_64GDi@JV3&jpS@N{%fHzD1+Puo|UD( zCdoQ(w_KTMi?8MTA9Lfzuul13le}*i`DS@yD%~DM6%D?B1^fpi<0hGwv=4$=Nt*FO z21%S8^QxdC*7jb|t4cx${?8l8Euo{iluhT-ogWKP)RN@7D!{iK-xTcLoDtH@w=(1@~7 z8qFZW#2h6p(q~<&T*@di)Jp?S~vbSI!MEd&Z3fglfqZRq@y^nc*SU&ic(o$d!1zJ2oZAJY6 z6wNAI=Xq28bsaIlPf1BJ9a_2tdTYha)pDqgTF0hg)FSrW#y1gpnQ+71B2kC#=G_hT z4NUg+rll>)$!;hkR4>VO>FKFVEfRWm@MML*Wxr~7)(>irN;A(mUQb1Jp0|65iJ1tB z<9}mf63DT*ijIyKASKlo|BMgSiL5Njy9M=|N*X7?n7+iR9@2o9D?BaPq1;VPzs~RW zKEwl$7+yKefLTQ=J$+JsO;(x8g^t(9)^ztqYwF6GyndugSC5k|%WZp)!t=eMoAD|X#e9py z>T^xRtcZX8A0#B0UAx(2|81}SQw8ZjMP5LmDat0RnEm~Os-;9v6NqJ0F!*OMAdtMR zsm57jYGgf+#vT4P!p&|5RmLOY9^vQ+tRsBE{i-N{Y=I$%U`O(_4H8D-1M}}zIt`Dg z^rl5~4~y{Cmvu-ob~t1{sitr24DEe?{R_&uQlq*Ej62L>s81pMAzb; z3e*1WK%zz!{mtRB4NGJG-1ZZk03BZf28mcsbe*wllcjBy_47FIG1%XG#^I&TEVwtM zn+4S^m6+pBmGi3L!=r%b`VX0tK_pdEsN){W;lZ%lJJ^vak&qzfS#((*9|38zN2|x{ zEbR&6x9e|;@x1x+#-ItAvT%R>Egr*?po)&_b+<)O2y+^yCFX6Hr(%ONf%)ep`VV5CqvxgQ`Ryd3B@2_f^x-nN5N`IdAac>TMSW> zQi&%YiQl-82avKBx~*iT+V6aQP5H^Z*grV#e1_AIV`^$yShkXKz5j=s87pG)1BTeS zt7~<>-0mr@+WNOl4$trk%~t7^^zdx_`&O5qN;zKVL>+nCyQev;t3>VItR`=WrC)^X zbDgYCtrRDg7j#{rTTfkRT|GAqc$UD}&mSDAOwGUWKHu<;%DYr=Hvz6UpaYQ!JO2jL zFU@`fz-(j}lsI=hwz>XWas$N!3#y6rS@vJD#XmVoF{xX`TXrlutg3~3Lo`@l{>h(4StcT+-hjKF>na#0^*wxU05euc_c&o`lF7tgZq7*2{ps4^jC3C=$DbPnSjG}6ZbUVIi;8@a8L$Mf7dR{Z3p9~k_{iuFK+T;H@}O4)l779<0g{mn8U7n zL9U$#pI0eDF$53APaEV1W`8;#A>m~HITe=X7B*PFc3B#+`ICl5WF@Jz33=1^5wyZBa!u*be? zuau0Zy5-JQVu{M;tl+pMcXwsC>src+9yJ>N;s)^|fY%l-ruw{s6KYBn7Z=Bv!DSzs zz~a#i!4m!Xo(PiwuVP?fJ6=IL8u90vYGyq5&Qq0bEX#LlKf4D`R9eU56KA=LJcv9q z@;p*ft}z~QNy%)VE-<|HZ%2B1CdaeOr)Os(Pj_dAhDE4krV-ngqBeQ(_^V5caJ#cy z71!?_kpfZ_YE3(oJ~pNBTd6+SWD!7L*HV5C`s-!Kv^etbVLFQkzMbdAp2QK8&4 zJRqc`rKy=CK5Ho`4JvA+sLM65f1y4_CRsjlS}1mB?r>h$vXb^`0-PH`@bIC<4Fy_c z;K{X}bwE4KcMcz1L0ecz1TAoL;8>$T6^n`8vqa|#QiFgdlxx#@Sao-2!uFxFm4+QcwfXOK>8Js|rFUT>rhmZI%gXy0fs5bg1lBczoVocpS6Dm*T!APNq zn|eULrV@I6bvvNAA*coNY2p$Ra)$<*q4U3fvE^fltn4K8kWdUU+fO>#PS6PT3GjPd z-=pULt=HEhs*jPvl@;GoLz+~z=be~b7JhgL7}nYX1d09Uhp7@LrV<&`SI=a-w#f#P zstFVoYpAMeuvL>aos`P|on~<`!AHBDU0nleZf307Dw~yNz;EHA@`$sD3T!&9#3O*w z^I!d$*lI!!IX#PWnd6DCS*Ap-De4n3O|q;e=X@| zHkPikzP~RD?dqD&t=(xL4{VbbG#vU;S|dtTS{hH20W6gB{*ao)-;>D$b;;>;HAJj@vyprc_+Xz0lH{#+zoN6x2P2 zkAz;d(W=3>k`|9qI0g0X{oTYL~oQ7=ZEN!={~-EHLf2i4g?~IQPxG? z17+!Fj6hz+tMdjojo`ielNjQo!l%Bw_c`x>QxU*v_`%G|h#IWn5fF1)QV*dKPV+o9 znZ9xHNfWIyF>OdEjPfW<;z-V%@K1C98o8!Ate`2p9ZC{UFs(2xG&U#^Iv!<7YetGC zHrAd?D>Xmp{{gGxix5Udrg5||j6#i$HLxA$UpVWKLLKhvRou50 z5mtc$|CZL|dhq{Ey0tBEiRkRE5{r-#)q#nsF>LMndvL zHkT@XG?+%j9AB9ba8AD~ZCQ&Z=E zXbAdn!OHxg7SjX}3gY85tA4lgySU&`Fjy(x7{$rUyDFtoQho`4izNT~(+)mvn6&IZ z{nHeaJdg7RB>78V3RJq>vRMQD9VZ)8d|c42oV2vBmH}n35U-M5L(R z5Qs+MMh9{sK}7K9rb;;SO>9oGl_m3uBW};;Z8%c{IPw?e29w*XD{yPe4#<8sSm)^5!cl<3DImnX4d7Rx)6P?ZW9O)Zi5C(f7}Wi9{z4( z7Mt@a2Dj()_&!{*sDRIs2)|XNI112|+&+6{@=dP)@)=W_EFod$*Chcxyw+qUH>cvt zaZ?kHP@jI8YI>FJ<+fZcO&fDo)-x7V86mhFnEDe1<(9TG?C23T{J_x;{4=9;4t z9V%U5vUwt;hLZle;Oe9b9RSv8Hi{oJr`ZZMx9XeRBk>3=HCIz4VYY15kV z_u$yavp|8H3xFZ`$f5$hU3pK-2s}5+Ihmf^!#|`V&999cgCs4xXCqkSd2I}xau5c0 zOiQaEduKNQOuQPD!)`x|*GdNpj88ImBZ=qaaJM9{R3|((S9A-mHek zd!y8i#`v4qNpvp-v{|5Z@2uDR7uFNalCxTDy2+QN#^iY7--!jnEsA zh=>TfWNvYG)u~fHF{@yZ9;Yt5{3*Y$M+h;niAM)NJaFt8{I){0`Y?3A2QpH)etY6w zD|YKT(`FL{_+nW=j!5gX`s=C+nyKYE)D9FNDKSt(=z&`*u;qWVC-oWOL+SdzCSsQw ziO-@?5YpM+$9*xkn5@Qql!n?xEY%UxcFpPGTYYoFZ??82THpFMz|zLyUa)9p-Igcc zCSh^(FDws;g0Y1P;$KYc4wdp@i^_|!na}OA2fg^ae!*%O;*WKU++OLK5L@mAh->rm z&fsGiRYx~3b|N%1G-xQZMH8*I8vj*QQJPX=S{b>aswe$MrK(Bq{d}9Is9&;D@u?C9 z=7Wmw-ayIO7o`WAuXjR!BhOg9( z-G8RuD)bA@_8v(@euYtIPN(OBC4^^AAHypWYs8phe`1odoRkzH(0G$`b=~28{hC%kxDa%Z58A+0y|w8z@ssj^f2t^#0nBp<)vc=j$J{ z`IgxwhV$4SGNEU+hyLp4{vjwxs?Hr0gT2J6{cwZrC)h_+0eS-NUG>p8rn#Eg>cYX&^R0EMsarc|kCJNgL3B=WBR0PIN+oG+_q!uRS8m{O^(KM_@)(5}lV%Sq`VqRF9j( zQ3scm$_Y{&eNL}0Qwm-60rj14=G;aH?-81jur2{c&#PN{0Bck#0ERo7`>Kig%dX}> zbyF8S>iOm6?X%`kqr zP_|-X3nha_McRzt85ispLo&I>$SJUqhYX*LP)z*+>g4sHeMzNtc660!i}zU!-cfH9 zj~0WG#rgFmIhS@$;BjQx$Bh1wH8vI&X(BBxi!Flw`W@t0bQ(WqUq|VA^DVXbWSoAp zb?VWIg|$fOF-cLUO86i-rI^pEAMZYr3|;uQv=krHLbRSBXlyM+49cMVB`oV$t+r44 z?ES5Sv|nbjg4-SLm#x6}xE)#*ubxUt~K!31cDJEUFh8OC#=nU{-#jJqJfQhIPd^|L}!4$wXuMvmu`+{ zW#m50{d5}_6a-^gUB7i~wly76_v>L0XC#P^P<`yPE7+Iw&euEl1S;!})%y$X5VXUXEpB{rV7OG#Bcam8U`QrN7@X4X?@DezzHwO%C}ns0LtW|92R9u~H6a~}}VSDHSMG9ayg*LDq0 z?ZZRRIkCmR#JlmA6VA;d{GpbbI$bQk+}Ik_T9X}!c(dBxisR2JdEQ4UfCu9V4D6)# z#bH@wZw{bd*bk%U-FRr7D8+_8{;oLKFCs5?!3kma+LTSS*6>xRK4fp3kNiy=6Kjk& z{G_*af6+Q=uzxOUC`>z5!?Uy;Y?kPwLc{w=bT1AP%484E<%4$l{-T=PP{mPDJ+kK1 z+(X$l;g0dkK(Op$W`|<&fcKl_&D}3^4ypqUU~y22@S*fkM$BQ-p@L<)$_5DPE$s zEnH3p^sUKYfeMx;e`8PEqb_!8hv5CiMT3ZP0iT>$NDvU{{%9q)1)Jl!S!}froAQ_-Da8AX{}4tzem%{^FIJ`* zCG+%r^NcqqOnbSsurM{qXk1*M9}s=4C-!Zmp1d}TN3J1{N^Q2(t1VhfQKCIjogSYT2W9S*EOzQ@ zP&Brm5Qda`uG&>DsVxmo+3%*H^*`E3Z34!9M?6@ic|B{;GCv(%MXi)CN_lB_fxDdCFAmr~uP?A^SL1S71q7!P|f^3Z0=57S1!_AQ6W0tpJ|!IwKb4Fl;hoje(!wO#`>mXO0P$MC6aFZ9s8nZGdbvY|;a*O;rrHI(GO*I5|ik+ANq=LCj}!EGzuwC!(g4YPDq!nu6b2^)Q;&fs#4 zl|WS(BR6t%s+$^HX{EAMr(W}inItC)>cE;_Bo#Q(UgoU(_7J()vj|>#h+2X9(N8(6 zOC`tegKfJ)mu?RTloX<+tTYj5)4piOtWB8bY}2dMKqQwNU)kU@Dr%?koV;x9f0 z11L?Gw{$W@Q$>AL=<|~GxHxF=qaR%}Grb%zbb0?|e!3t~_{eLFbQSZ`M_q5j;TL{B zjK}0%6O{%myT%auO4_yo(N>nHfsA?T_>(W0@J1R6M->$-A`) zMJ4*9Ct2%TG0`9;f3Ob0d)D>SU4bmGTi+qJ#?(KCK#+o$Ygfe#x-_kM*n4dD)&2Y_Rdpo$lmr<7NAz&@5n5fqn#wa~xoT>Wd8y^CwYI0Yl_ZDgyUJ{f3U;9U z^Cv&heF{Zk{Cz|9s@{RIa+$B6$l0nbnoV>97%{e9eKll~LUbbB zaDU%j?YR!6x@CL&Xkl&B&&5yNlEU$~cGP}COiI9zXMc;wzyz|t-ap3ZcD--sn6*$2 z<&XDclW~TRP#IY^?>kJ(MjSIpm);-OmruZ8#K$K|Lt($JSlC~I0ptBy8XA{43-3AF zcO9AyBF&NoWTd5^vpI>pCT}UlTcph+G)V=|^D++~Ivb_n^>a#DkJX6Wb+0Ree1 zKX?c1Cw`}^En>*0t2w|3buE%)PNbrsI&21|xzhBnu+fh|+4vm%4nlf;W&9Gi{u%gR zyFy@xX~2M`#d>GrgoMOcdi2!WwyKA%#x}BR_9G68gG36-1;aY+ndC@$#V|GeyqHpIBL=Por~{th63k9%sp3FvD`d&(T4F zkc~}DgilbC`Y#JWX)+*+hg?KNq#e}j2-6c!1~UX%*XWGn8QjpIZsIk%`~X!I6x3Sc zU;1edj+d<<75;GLs%Cjx}+@G{o{kI ziAnGf*WLA{0dpHZw4G-eF6PTTgk!e_ef1FB;Bs5!W9)2$&kZZ6x-_OCkS9DLfzb-C=*Ze zv}M8pSK}T*z`5FJf3z3BgR zU*Yt0rTz5qMDxA9)!wi^o%tl<(vgklo3GQ^Lh;b%NaM^bf${MgiKk3DmjD%&g(4B2 zBxg;7yrW~eUEBWAiIO3out2YL8)3-$yR4Co4_@sv8xdylo{FOp;FFi=2@Rwb z{3j#VrH4ZKm8Q@qTgOi-zQQM#`sqOa#zsqCv;I(0Pt$XM@dGC)t`IcdaDwZw6=e>j z41XUnERe${L;G?l^oH1F@5A+nn=VnA85Co7;wkZ-5CIdo|k8XlTnFPCXK z5ULd(C9_ZP6=NXFJPqGit-CJcJ^PpUp(AtrB|Eg3d3ug2jn1AwKz6*i?!ePS41eyx^zNOV z8RuMFg5zDBSX}<0n?6X4i#o>QyR+E(4}Ba5&UZDFr$(Y$nR=a030iDF3M^h|sx0yL z{QAomM^!f++lAFtxtZ4+BeE3yxIci2DUrtlHw*YCW%f{N>P!27UMS)-oBc2CGE32* z!lZDw=hIlN2N_9%xt{$7e6vhhma3S))2Iijw9hY1ilXZy#3f;wgHju|teb=*;0Qck zAd5=KjmI$7H}_7qq+0I?bqXWpIJ}-==iWSllRRwDufU(q&QW3t)%G8%g{@^*!N4cc zu(oc>(15{C`~lBIwC-LNRTNH{c}9tLs!D z74+|xWNDRC6k_N6_CTe`7W+Ztp+iSU$0V}EqngE__5C;TLjC^mzKyVsgpXzL3RT-q z)LyOBo5Q^HdwVfIX=(kRr>=kxtlj}Ib+S)At}u%#^X`7}p5PTVo&JP%sXSNsX^9pQ z+(Q`>!XtsOEC z&|bpBf1+STwzF~iq)bl?A1ao;{nAg##*?BVT+D8$`Rrs{dI4j~5<1OfE_ zmeW1RZ#;@gI-^6wB$82fpG+!hCmH1G z>CM!hw+SM;g}E0{(dp`s6jhdQxWhT;cX{5QhkQ$$UBIHvJUOjj{{_yUGOlZ@~_rW zh7LYW1(a=-L&wZQh`9;bo9pW)EUgC#;WA^WP<5!unVFl=6`vZa?ezn4cW935`sn~k z${YaW0N@%r3?d?7U?^i@S2hW=#XRI+GkJX>*qMoYoVo4Y_6BtzFFiLKBMVTlf>?`w zk*^}9?MI+#YCtl4=SV%;R#bhCmwRh0YfA+Nb`&)?C!DT%TU_WTf&+HOu19{70L$Ro zn(sx;#Q|2UZLKnFDGF|7_4IVXb$))n3hj}QrIzy^$f`xT zwI*450&^V}a&m(z$J65585T`VP0834Bd$6kQ0}!Hog7fp>Bl;~Q)`?~a<#o5O?$c40O2 zSQS~5h%{UyBEb~^=VUiUl>suJ^n-185mihLVJfN+xAMXYW-Zx*z`%fW4?OH?P8I`; zCT-srfJN|x4{w0^*bpvB?RxXmv+<)TOn<5$m~g98gA+%Hp^gsa#>a{2AmVlz zks3Ot$_^TlNP_i?Zp1RN6=aXw#>%2lIPEXcBsH~H)7F}A-FGl24fR7DesmrNX(Uxd zfC%Bj?Gbupf&|Q){{>8c`e(8{u(A9^?do<_Q=_(&SQGDjGh5`~dDL6qJ*}weysDX# z5pL_SPueQO_MM2)z1-liey;{}@Sw7>>~!lDDCY(Rxtkhh6EW%Q1TddB3bW)CEXvfH zSVx1u7Ah7Mxv6Rz9_U&dgWykX^I;DSm&`cbIVFf|!exNRYW5R^;&9nkL{+)1p&_FB z1bG~~I%huxSsXSEE2qfnIMc%9*geN$hOBfYg@garE|WO%S%=7*!C#Gv=G=Qi!f0t6-R80UX=vP(fWrk-mS-4mqAOHn* z!7e444tdi$mmR-z=DJZSzfu+U^$7#yQF3+r3TZ?C-Wgy$icTs_+JLP7%UH#B(lcZ# zfozz6cG?%pAYy0Zpm0e4teNmnhP`VN#l*s*V6d1K0}W4-ogF$9g(%an#xZs5%u;r? z-==sR3B@qm%l9Jr|2n& zkf1z0USGQI)|5iwb8_K- zm3X|53%ha!xI4{mj0PL#b#WbL@(z$@m7G467Ha)5>RpDnElx{?z5T00K423nUtT1AQC2|>iYkfI0Letgr@Z&X?Nl;;A zV>1{OOsodnU|k=6fH}1{mr3@#5Npk`)cw@6Aqa45oE*@Bd3bcIg}7&y>P%4*m;ORz zil*k~{3sb{R33`bD$Uf#wJ2OPctGU17nu@P^DhIQ1Qdr`{^H)wL^Cld4FGR zwO1HCU_%bIguB;VGF6|t_Wb|2`s$#n;;vm%KsqF)8)>AwL%O89I|KxzMY_8~>2B#m zcgLZ-yF2d2_x7PG0;Pjl=<_4Ap@D-_#ZUpK zBuzIsd7S;TP&j#Zp|{$d$m!ICV4HC-5=FB>i%%38Ia$1NLwR)wNpxXfecHW+2 zNn-u%4nJX$qONa@%j<`SUDwskA3}6>bqk~niHVu6hheI3)^b|Y|LpXOH8E{(Zx#Be z2(-18ZXvImmk1|Nu;>f7&9$uA{UW{!ar`G!c@PDh6t8bn2E$?eVBwFJ8@|jW_79Be zS1NG)w^qZA1dWd~dtF{f)!J&mw_UE!us(_}Ne%tgV3N-E?%e}zu(dEL0j>)KCGfh1 z4Qy<})vQrwS#|IVNDN%y4RX-2$9qY99~!DrSueU+?JFvw$ zGL~i@og65iE-&%N=T+=ZBPm%A(McP_9*k=#`>sLbHBS20Ihl&rDR-9FBCBKt-RGE9 zxsnVtwUoy4@#`c9XDEg`96vv_ovd|RhyjT83QQ&cC(D9-xl5$wzHN##=%mQMcVZVC zVhqEC(jKW6Mrv**sy`o6a0&9#d~{S?*T%afCHfrv!CW)yUlo-M1+)u!OMEahkNPjp zRtT@{%@9lc*xXKXCnw*l6Eqj&ccj)QJw`ZVU~KMn50HO5+-aR(=p4$RethduJkZb( zEe`KXP5$_ULeYJdku?MVXDHq)YG7pKU(H>WpI0Xu12SAk@3mg?O*~_EKi^a+%xjeH z*N1k96J>z*17mK|1uU~lkpBkm2x2H80;8qyK2anYM$Z=MY@-EPo5I80v!ale{@^!N zRa6ucxR`xq<2m$Q&9Job@82?YH9+RVdn6RSoxQqc?F+3 zUndU^X|=1LKZSf4G(huI+* zHZ7BPyFNa~6I=Ge-lUijZo7p(Ea0@jy&g zL7!YH6!GpK@Yg_Cpsme05NLM1e@C2^@>mo*=_LLDt`^}6pXuCB(S*6cK|oK~Hl0?~ z?|Z)vd2J8))bwR{e}B|VweUh+xC3(NBSZ7s zlLveoq2}-f+3{-L+FM2NHZ@k)j@glFI8v$@D(d;B!OSh9j)s&;1Lp2W!7!GVGCd9DD9izEoEOGp9tKwpf z9E>ve67VUI_y@=&Xb4RctR&R23Avnp&QOJTWHcwj8OD5=jetWXCZ(6qcDlOxrh>_Y zW_~6PbKml#G;T7Fz?gZY>bo7 z6zFSmc^hAu0QKsmj;@TLzpoNH zh)hA(mLcvF8={AVtq%TMemL-YR5Y$;^KNPP5Z}jU!rW z{Vjida-trVDrMqNhiiweu~%DbVQ*_{D$6b2*R8cMjvZbQSXRtwzaZ->`{y5yOJXnp z4|>N*MVGE~)G!VT#^h(zc@aSS;b7>aI(RF6kYN3fcRDbDow=v zd}ykFr_(hHC0h9P@$s6P32YRezlX{0vwWYq7N8)IclQ%Ugtj?BLf>9+F?8(Nn|=m6 zQ}j&MsC;k#Bo`+g^bFvfiVL$QM2AbKKJM<6A3h{ZoOr=m@Rs-)LYEO%j*l+XX&+nL zSr&X{`l9|Lij$8|w6iWk*5vNcI?yz%x-OV*Iucs$|7(rIi+0c&&%vK0E8hGtLR=n2f z#F?$?YeXx&2~nyiF~S(@qPuU26(L%^`Hc}QT>-~kmoSLf_gkKIc7iMHDH`_nS=A6X zZY~82nJi68f8#`+B?o58-TW{#*g(zVi$%_$FbO!1qKdK@`7B$Vq;|8|>79;j?@{2RgxW6XwXC%5+A7KErGaWVD zyTJYXk^In#zyiGD6&f!9WJBLBHW?wFB!mkCtvC$i6d4IjrR90TEb#9B+gcbvla4Ph zccD58W1(Tm+Lm^+n6CLbvYEej-t6xXgJtIvY8l{@u^?$)dnHDaTEl;A| zZ7#@dYoK8z$zq|2yslo0e)D!i=mByh{MFc2I#?u|9<6v2>ckwLr@_-&i3)MXxIfMa-{4 z(Ud9IZ}`@GbiBFNcMwM+$pQV@e|KFesvp(pbVLXWCpTnzy;rkV?O%`kuZPgm67=vE zq-z89#)``S&YOL-y}i9$fNuX=L%0i@o0KKxhep-na^2tDx#eZinKNrE4R3Uuu=Wb~ z_2o$*hn{+JenMWjgA`j9Vv)s=#W*J;HFfxXPJ`-j*ec-5VTBHH&dbg&H`>7^;$6-Ggxmu5WVs%8B_(A!4e4jl z>=uKwWmfHo%?yBzk2tt|Me$Vl9S&B@pZZzXxR`d56vFw~zm5CLIy+;At*t?nTvp>m zJRb2fUk3MtujAAd&{q+;!b!N_N0NsH0)a0Fo+euvDg#D+_}09!^=HdLx!}>2%=l8b zklrAT^+;kB*!VNkyboL3`^6Zr%ZpmHB%myO{8ZVQyxO;m#Y{{H-hj=YLHB=UAfN}y z?1JW`*w~E(WeX|Pp`rw`jm^yx`k^xiAfrix4eGfC4ekO?-4dL*0MvU3+ifMdC=^h8e4x`RQwz8%0JNH92=8nuQw?rWQi6UITn(`vsOF0H_LVwp zFAXm?n@;N;E5Y;BVmcrYK3JJi)X&%wQZgElkS+|?!LYg6?0We2Byx!1MSUPYYk$2g z`w*q~%MKa-a}thJMf;rbzD>K5n01d*U)x6#Q2 z5FFSaCT%Gi7iwd}QPNF;JkgG&0SMOK?>;`+iN&{S~8jb-=-YcEz>jX${OD(60ll7&(oYPwFvJrdJAQF-*bkQrdU*meCaww zfh^>#+#@p-fO&tRUmXkjAp>_gBI}{`-Y;>7<2@=W>wCzhrRnbXMW5AvL4^HE8)tbX z`iM(1C(zg1QxYgQtv^jorHK#_sQ3jL4FTX&A;KHvC2tp1KRiCrFi{7w)>LEt3=9-c ze4iKopE#flc%<8F#feSNbeo!}!>Y*GvR1-*mJqJb<8q?M*Y9H5d3eXG&wP>wRBS*JgM*D<4E&Urkyp6+~WAK_jL`vKLU>!h{OzbzC$RVSkU@E@J zrS>(IQMSF-a)4n-z;bu+NuA_)Xt?(}X;hGE;bB(Ln*)Fbh<5-r8oXbqE+!z;n z%I?Da@{Ba3uwhuFX_;$ymE29jYQ}z6h_#P7NRd<fv7upGTWrv$#qnHJ0oQC@X1-Zj*5BNg!hIttQNjelXTCQ$t`5PxjSSMtzmjx-s@YR~;|U%`+~noV;ljX>s4~!6gfF zDNl7JC5V_0r19||E8w4hHSrXeY4Yt)_zied5YgwO&9WO%=;ArGxDx#B3sI2KR8A=M zYT?%3TkPy>@2$aXZorgCAD5gt3%9!#_`g`ik)&& z)V~RN;W*rbio~pZaZ&LW{Uowsc6s5^kl3N?EW5Ek%}PSOL>n6_4g$bwEvL_Mfj)YTA_aiNirD+ECwl6uS7}<>r{l$ju!P0!tF;qCdEB|OrD}kDjbpnQ zVGTnLDYpu8gL!{t^%6-c4C&|j$!qz`*>b8;=X}S6U$4aV>DSfsvYWrnZbXbUBhVOg ztE*|9Oc36N9RQK|W~sonpc*p;Mcpxo|5uu6K-iE;J)#`-1u zB7Y{ASFeeeRF}VR5t?rvohsbFmcipKmo~oocYFKlRYqAh9F5hA17Ta;d$ditQkZ}P zH7NvX2$yAU?daiDns@Nl0H`u@g2sg(Jg$mw!(7!V?Y&Fj_S3IweAlg%iT zadZ1APT_1Z1ysL7-C_TJ0#Bz2maFu1@zGE{z}yPwp$%Iid7oTZX{>#+Mnh zg&U*?z@nU%MDg{}51>Niwe@;M<-rbKd~I?Kwo=@OkCp3x*KwsQ3_uC%34`UG3AnkcwLHLIX>$x1)otk)tKrmEyV2k^VSPdN zhrs67(a|ZY7-JnMM806@|I7&w<><)b`Eq2FALEz01y08BqV4~p$*b)VnLpReW$ z;ExAA&I?U%i<^gIa#Be6PWfUt|UP1)*~^7kYc{+W4! zCed;6@pB6ls%gns(+{WnXrQot$UU2zr&ld$*r}=YF(U&yac+MDwWvwo>}$lei!+8V zkeWtIL-8{``Khj^W_v4(wdt;dyQ!B^fiQg!5yJ(5B=Fa*ziL_r`oCMmz}y5#Z0|o& zN~&1~Jl+ybFvo>^>6m}tEtdtnq;s>Fo;lzK@q!{7oFB5BeP`493*mWwd>8b3t{^s> z8DA05o1Ws2Qw8|cMK*wT&hMwVGA7`6%n0r0(MIB#F%R`{vfSqkZ~x8DQD~q!`IsHv zX*xB?y6@?G*P~E;fNHDT>G{(#l~>eQ^WFBB>*2C}8V-TXiV)KSp0fF0t9Rj_4|Ky_ zx*?!&cLm+=d~b-jq;Lcuehx{@u|=ZNI`^Rzmz0}XU&y3xJo@M5HWn!*Y{H|U{4uL% zYnTSPb@&Y#3HkYC2`Xq*L7Qs?TSJBZSPMCge}l6%sDR1f|EJ3HbMXg2km$}0W+D_x z$rXNjJZFzWmZzfuV}Gyh5y6TPMi|^0RLd`D%p6dD!W}JWGbLb=q^ifn8yLTcU!b)$ z60j0|W(~8IG;a1gV(jhfI>pbkb5&=k7fE;!bi-q8h4VM{98EWiraYG~u=P!R3fgm8 zmk-3?Y5#U%WW0R?`f(mEjmXJisi|1Ae?1H{E@X7POWpMWoX@Tjcv%n>H6TZ@V6-b0 z$#{Z=jVH$;tK+w2Wqr7|TOeH@wIZ(e!L+7sFC*RjCI5!meM#|aNoEzJ{zC}kk1Lkv zF~Rn{%|2A;4MnCvnESYfB%BXeEn8X_((&o(h2`dQ5fQQ=6xvB}LWl%R|DGgj*61h# zOe$(zgS7NH7B*4uY$rQFj~zDA-aKNt)E8re4FCT6JQX@Eexd3lgTcbr=g0npC;9x2 z%_XDr&@AlT2CYV9o-~Gn^WGhutmgH7T-TaoW2)q0)~+vaEQzV#03Cy4 zw95PTkJjK;N6)sWMYR`ERr@80Jof)RH~`jr2*d${ySw`^BUNcNcSeC|-RBO})HnWs zVdI^@-)NlaZxRDDm`dEY9K3CtnIH;;w?QT|15{TjL}*CFj`%2J>Q0a17exBPPK>ts zVQ@wCxMJw;;m&FM6JNgNTf zii)*)o-Mq$Q|Z5wbVmq+Vhy6iFb5PUQy(`l*89sWAy`9KSCWu014g96#~^s1lk4LA zTCG^Z&CShYFm(Q`U+TT7NLAEp{VBkgc(0FDWi%K0@yK?6JM2fbA;$brUm97bXi;O4 za1n1tdivaqQM&TfK4=V-;oj9E1)tghFPbtSFW#{7lU=@4oyzqIt-0! zpw8g&inX#jpovFVzWb?RdWi~auMWhovq*HjGa^WwuGF)$wA^O-RcMWuiAX?zui1Fi zz1yfLEuEqa(M3i;!G)DZlG)nYYVrD_8y}NWjy3XIC$2tftOs|^s7?da3P)!kCq((s zgF{@>z-hn4?&)MMCdLJxAxxum0$AvKXH~|<_4eP8Nb3XIRgW(&1_AcW@gMeN96NF?Jgq+gWbR6aEy#LIWOc+f5I*AZ zC?BUzmcBJZaz$-L�(i&N{k{pl0(NX|?Wuu@yu}8YXsi&>RxMBH&w_n(E!vZH-GU z-$Mg+J$n3TbKMf5+>pnD$05h0vHiZ<1#mLWVE3S9p;SXR04!6L4Ti(@^-=a+IBvtjH0doUb`(D9&iS`+h=Cme9*-w@ea_y! z>pNV^s$yIhx92A>wMLlfI#^PqTs+6a9bI*FYDGJF$cP99MgGO>*;x+e`6b!&^Qx_W zaCUz`Gm#r}$xl(5V6`E;a(UH(P;&}2Xt+7_fM6T@Q$^c@N5SX?!XKle>KxXaMW^>A z{C1MFuDvE2GY>AeCd!ZFq%OyS&HX^1Re01qG*nVlTMPK4FHN&?_l5^YhL|3ndQfrh zQvJznc2J@W_G5lmgn+@#MW4P{T|fXnRn)d_9yK(6QM|^+NhscZx$A~;vClpQSEMa+OO@P3@@Aw67o5kYjE}j>^{z=FAubSTosh8qe8b9FWqq zi+u0EZQtC$ob#wrr!7&R>NDE)=Q_K%+2M&ZRt~dgiT=l0gNO1U@dfx)vM{K~$SUHd zbuxR9km|a+CGnk#Gr2eRg5b!gFH)*9t2rHh+>F?S$H!Qhm}N))N|Ib8%)tpQ2r%Y_ zo;qx^K_9vb=OaB@1q8geKx0mToLN@KPFakgJS@ne!;P4hXR-d3gnp;bhey zJ6lR~Ute7ToCZJqPpZu%#5wPNG1LMDzV6@eiB=^g$y=q{){4k=4$qoTBtI3^CONNx?5-i&=AhTCb^?N)9^LF-^FBM}01!t4_u)TS4kEyTtYa+M~_9eVTF+Z0g^`hQ1~#nP_T8-EQS!w6M7fkh1ir>2 z42ARa*$6oFubfe!o2(7JPk!2mi4d)^2bcvyJUq4fsjjXj1gE7}o1N3Z9Q1*1)&re1 z*670V!P`iZ3Bl(p=$Q{znvXT_TSZHLeU86ue{l+A^md4hvd{S==IVj}QC%87|6>*~ zaDaz;0CWPC-dqE3B>GB7G$9FXR_z@=uhcTTaRckzLkS0HAySpM)&Y|QqS`u|?KgjG zOJPIbXS%iW(b4%B@T}^TxzA&$fmfbfr%1?;qgIuJb)?5|^vb%cHCR-dsA$TFrZ0sl zYMM&&u#Jtqdm;-O)bKx@emzc6&zCA!@*ys`Kvl_#qG@13(vMgD3_OJ3aezW=udf8T zd`iX{_4@HVom<-Yt084Zqt}&u?`ZGtaN$uMyOP=YM!YG>sKL?q z@p^(zc(AUs9k~DRdJQA@P3^c77Mel)vRgR!9Vl%TrMXhQ!Wx)sBt`W&IL9bPTpbAA z?1}l9ZfGyiW%NbK0n}MOi#tbN6oE_wnfxQSFb%scf%XH>?zo`EX8i?ziOODUoI*vG2*9fK8qq@h% z9k(m(BwskgRE5sHvl3-3kKzk8@aCw50US0CL>KYqDalTTHpIbvj!>n;S@LT%(=$pY zbclwRcMQLP%=k@OfG7@;sN`sKX-Wt6{iW9MG9jfdj&5l1`-l&ww$TVpfT8ewZ@qq- z_sgXM%Ux?$yC5OAx5&J!tBb3ms23rV$JIsGy7tBSCEH(qZo_A?HJ~aE&L~ho*6-J9 zFYF%%EU!s@1Bdb3P{bu9nVQfn+a~r-5Wwif`ua5(AlK6A)C~#-V>tNRRydT&3c+Wt z#c%csoQ)2-@kL~UoIy9le6m@U%Da;aNfGikX;w><<^Sr<*>H%T(C+R`SE>FrVKv2& zHqAYWHuZB3x+@MIcWVRb&Yn%4yDi{dWGOMU06e_Kc#prCS+{Ef>)Xe9@KO}Sjg5^{ z&U%{%X4Xc?jYSHJhsU^RsfB7`JY!uRRCy?8mkdXB_RjnkqEL1Io13{f{HFe=A42uo zvUQu;_9wc`J#-rkjgd{O8as!ERM4k0=~IPsp~=X|(!KBRZ@EQ%kJ&H|{O2!pwAF~P zut0}s@>_?8znRmWV_V*)fN|u&)*2v9M0o=Tw9tgSq9NOn;*H;O9c#c)x(~@_q!Pm9-2CXe_1IH-|#89*CA{&rAZId9*SO{P)paqigsb$d#rFHA6Mxxew z$K_6}@+9j~2ZwKp*wMWwmjhjJ-`0OeHJ)4~&fgf0AVICDvJ8YR0KR&E$`&WpL=FM` zZS=g5<}%SfZdHmEZ0UJ^?SnAOg+8*17-$BFT$qzedwaP18tO{8K~lG}3kLObJP_k1BAl zn(^>h(SEVf*_kTAk;XZd)?lwb*^*u}isnm3>b%QXkCJ9`xEr{d;KHGs5=mk(0UsV2 zsq|@4rMH(_QBAzDC*p(rhX*YZeCsofKi@X1VS7<1^wcV$;f^@;x5oay_p_<5t7CWl z>bxM@&ZLhu-WW!#=;Q>|`a_e?y#3#T0^WfJ0Sro&?P-KyxufkJUZA~;X&_ye^TU!m zun{0<*wAe(*4$B0Tt^}zut4350laR1>rYA8o%lVb8_Nm{H4VVl7Q~0=-=_tCAp=PK zPi3j7v&$pg5-VF=1ve@lf`fy?->ngcEYwpw46ZtKj6qF2=B2gBJ-^G#V@CD<3IWCT zCadfSqP%2d{@*(;E6d~TGVQqg#|cSPVgX%;bTjCq#4P@yiI$8@UP|^5ggK$6E*Vqf zgxUaLhz@8^SG<}F_tX$zVeYCzmo4SnQ#q%m>~{)%stCvY+m4Xbm9>hvWxd~QH}KFk z=8LoN;Antp-w-KUPm1Kj3G} zne{lla!LB%#!7B=V zln&GP$G=4fe+xX8C6JfV%xW2Z9IW&Rjs^m?4XPXL9k0j%$XDsc$Bm$Af-jj1tKdGDAY|&~BpX#%tq)KnTn5_@;cPo!n;neQFq1mo zLt#fk#NR1e{B8C;Bdaw<4`{wU`JKKy7B7P>{{cQ;&Nmd{+BqtdtEgOe)yKAFOMhDY z$HQHWk{~-1Rh2?Ik6cfMo|4N9Zx152dlhpOu`yivlm?%?jJ(pZ;9t)mAgK!*yYlT1 zd+VELi6CjDNc9|@-G0Z%i!D@Hb8edo7CbEAmy5rqiir3lQTevE@)t4-x{YqFLBu3I z`pd|yP?C&r3#|;3G4t_l$^%o;ughU$2zB;3-s}>er#WM4Y7oKtvvU1_v0kAa8QJf` z5X^?pTNO1mn8)+YaYl`iXAy^PiEsSyIzEAy$l;Zk1mT>V4jJw;QeT#L zfT|HNPRc^)Ys*MgwEL7C#eIlFuvruLW}zf0q`qDHj2VCawvCj~aSaZ4?>Wg=R`kB@ z3?p3J-m+QgPbLG`tBnp!Hk7OLc>BT`Fb2&iDs;_vUx%ivCm774IZ>ky8&SH5f96opxtDd?4}3R3i}$Xo2k=t|UmD^@$uD~{^qX~PW8z%V7)D06PIre6EqUm?mLKUQv)Itp&~twN9RBTK3NY)<<`$X%V~dNkLzbuTsj&fNXk6YK@ZbiA_#VuX`)-qLf8T8&)f12|Qi_ZBjejbiYQSb0fvE(dc?fy$iDqV| z9r*jdvm?=zS8DL_@C*u)tLkb>547x^^tpI?-|zR$+iY$3@_pt4-6Yx%1mbY~3JOZ( z)w!u)gVEvEBr)zodALscbZBG7N+@jLMFIgUQ4=GrU`(Pi;1VKy_j0w|U_-c7cJLcC-)pwqjx8C=d~4POsW07sH2ju%v6Seg0gCC05uTwD7YMKyoNt zNx^utnL~iv!lxwqFYEk>KU;v4!4Ek?NK6cuklQ2LyX}gAR|&~ZgC2!k8`u#f%A-}7X;ch3m1I=~N!P(_^>H&`jsp(hx6W;4o+dN=X{l%I_ z*|x}StVj_YpWGmmS^MJ)Jc?K!-}YkuaF4dPbP$+oNSST?j>bmo8gFKw($rhDiEJuI zRV=UyAW{*<{nR}2*7(rZ+X5U4tsy^Q$j=-C()aF6p9==mttLTP|HjP?E(E=Wp1@hxa9@e|Y z(c>ZiA9`oy`8V~mltB=m_V3rXHv!AN%_n1I_pEC62)@>q9Uvi-*xAzBHt%*cQ_aPf z-Bvfw`t_?f z5#q$k=SO@OLv}k1Kw3XN#U>QU^yTMMhIs#lo>0+p7klQpO{)ed;ZL~qT5b{(yw&{A zJB`lvq@i{_wY=noMf1{J99|!W22rj6k6Fr!_m)4t1-l+E0MeI9wfUH%qaXDk*L*4Y zm*}@E=o0V|GPvAeXidTM0}M(qE7YfKM-yWKggsQq)pbQiA>luwLJbT*!+Oz+>+4M( zLF6w)=Ajwi|JncpHo=ACBuCv1`f^FNr|Rg`wA5*6tBOPq>BqS|J>!@~zZq?y54EwJ zt)0%PwkIT0)Kl*b({wp>Fk_|sw*mbXRrE(E&0vzkd!Q&RHKkejz3vo?0{S#8!+gb! zJS3<9$=Y76vw+hR%p&8%)YC$T>kZH{>9(}@^j0mo!col;5Mb*q##{xacH!OvW_W6v zu;Cp+Ar=(!YVk>zx%N5L9r9zte_q=3JnlDO@9!RptuF&S-HOWc#A8+&7)ENGXQ&2P zIEF2w6Q=BJ@QNw|^U98~Wn^R&`%u;P6h1Nq1^yGt2pb4M-4U2d`42u_f~PzUCMGBA z4P;JqsPDR>%#P9x_e%&JeBpOII>6<6yC#b)+gvO>R_@Ze3&!=oz@$2T*atv%&iw$z z?K_Zx#dooJ@2)E7tY@QJBbp#TEl`8qhz2cc^`o?x7rCw67bWn)r1DV7=@I}`8RqyE z=d&-#9Q>_kmvO~vrAw)!m3+4TH_l*s+jLATlW8gFe@Ad+NPR|-9(YbrWDuq+e7!>6 zCU0*QM>as%RGyrSKTcvA%E4vncbY~bVI6WM*kHMq91Zmw*j4AzS`_}&S_ z5xny2fhP~5`RS6f$>s7LWkLQVOQz`T$+GOXBs8m{tXDw%IX#x!+(Nv?l$+mVmH4D< za~3I!7G4>uwF+9bjrXlwu69^@s3-0FFAR$d2dQEFRaJFjguu;=p!=GagCkYo@kz9f zA(p`{C@5%tLb`udGg|#THz-Tj;S>#buRT;fQQ!j#U@S&ndkZ4H#ze#YBco+;0=OqP z)YU5j8MMbsDJCUXl4lAh)?kA@#{EDr0Bi?Og~p(pEY)kIsn z6Hou~0=!{39P_5Ao%%?rB=uIA#`h z-+f{J)#>O^0s0U6ZK9|l_+1DUV`R2qO`nlJ31Rqy8B>pBncDTS#S z@U;wFVX|XO4N7`w%1t#i^~`QwTwH=ZRORF%O66B1U>mucP$oPV(aiHsOk!ZV4TVgMt!VO-+r6ty;6P!+*4rukG$OXLFR*4da>YO=EyDqVpA3H{jNfj&heg z6+ht`c2SsHSkTPOPSYrVm>uxZxzCVK7ZCMMFPsLrt(BIM>pkj)&g-F7u|R;4zAsCB zubrJ;ZD2wNsi7fI;1tzZZtYq3>wm1oxWL(6pYO@UNxDWhIA49eOMQA;nIV(lZ?7?5 z{cR1lt4#ggYp1<>lgKmL)s^RXv}Mk5|qT zxmzN^7-{G(PfiY^kmr9@-Q6-4Il(|U!;OXuQf zbmM)2dPeX5OTo zkkAm)7S|H-;(jEp!G=4fsJG4;jN+uUn&NiJ-0SO=Vj=)=F<{}~@P2b!{)_PSL-vDs zk=Qla)kMBO>$9? zre0OqCgR~Wo30`M%?7^e`6xz@x61G7MyC_gPyHr8+7TCenMuL1-~WFI)^D0MlA*bo z8Mzr6ol55j4k7NJuvUe>UojOKpI;7{Y+5yCPMrxwrw!vZ+TnjnO3;cwK4jz!%f6l4 zicBcoMAKD@o?6C26Flc0Mm?fIxwj8>CEreG&!a7){J4bLkB<&jOzKoR+=Gcq|3=m zt0EZOp7JZF8LC(USrAAC2K7H%IuMLlSYigLCN*ro@cugu05fDs2ntJC*=ZX|C7m$b z#NJ>C_2SN4T<|O+&KMAB|8xXMM5}yW?YtvDGo4}GgoZD0^*IA_eni=khb~a1_ zNNUo&w?~^*vS?N!!~#D+(Ny#Y8pxJ!!cfXpeXg-t_WDBMK?4{+mr%eHx?&1dJ^wA# z;lE!1h|2bU`NDI*BHiS1f00{95O0$S+Om*`!Sk>qoZMu4peLZn9A16)s?o=Yx!~?DL*1q7#SKauF(1U zgz80cG!A;1O3vvnadtVOu@9{QcE%AauR(J#u})I-pIYZJy(X_sp1OwmV&e2Rpx?+Z z$WOAAzO~cY)%m{uIKSC9D52#%O;h5i^a|FQn3)j=VjY?S%=#_79*+$!w3^>l-dF=k z0cs4PbHksgzKh;hOd-q>kADFLV{I}EIPS`fwC@jzM`R76`Z;c>z<*T=4sL6239*Svvkok zH)rcpbq6bZ&%j{S5h2n5f0G>u0*zF3bfi^NpT%t@wp0X88tgZJ%E07)?EjuS|9%Wd zLL4B!r5B?R@mt-r;T)nNZWexN;dkyc3c{^zC1FaU8yvDctpB#)bB4C4=Q#z`a|zEb z-)u^SZ3j9M{Xl@MdS0GAMnsbxZu0k^KTE9dr~vUFj2}0AI*(U+sD4|e#RX2-p#12l zv$qgeF>(3O;i!u-=Sa%T!D?+?JzD8u7diRvXS14lGjW&0WsP-2SO$3cX|!1snj}tJ z)*GZ+&*Vq^gHOg7qmX_t06~-(^We7pvxkRAQGSzaeYxXTbGX2t!N^xK=kY*YtPB6= z4;5{Rn(pJ9avmSX!Hd`Jh2LW&bQ%x4-LzlxVv^HiWgU z2z1__56{OPEc~5pdwo9DFH|`^B>1|}UA^1b)Tqp_-%v0|2ovHY|6`TZkPjyMJ9vJg zhXcI)?e)aA@rD3Z%TgLm0~;`>WE(1j89G0uOoDynm1CB7D=vtO6W1A~Q*9APSVb17xpYSqhyq=AJab2c!lakx1UtaY;5D7TN7 zGCe)c{6%&HpM3;OBMOZ@g?pIDpp89eW2}UCoJzjL&lf+`o5713F-wSTkFI!hbBkK~ zcR3^kp}L`g`sw7z;_Fs30aFVqN+>~psBi)%EO1}F4QoDq615I%!GZ}7f>`o#U?9LF z$~hQ(KjSbs`?<}mZCh-dm5za-02=Ogaym_}_}5d|(+}^JF6YdW4lv4<^VJ-w+T~pV zu@CzS#kbn6!%aD8FSafAOr?goWG2HeeGaqBK=Sd{PFwcnu7VN_^|JdJzHiwv8)HLN zbu0y5%6@z@nk1*)Qi>dphFkW)PZ&t@x4~eHZ~T9FV{i8=@WhzkLBYaS&`@$`UO3m7 zA`_W*Ykfimriys1%8&|0~zbNU6 zAql9s4-WAQOG{%H78V$MK&&FdfbA8;wT+C7zw)cr!?ZBGK#M2%s7ovs(;EXLt}qm* zCaU!|Q)|w9%IYud=W$;MBK_<9SXfw! ziYs*`&L{ic$#pwknP$s%JBBMe#{vp&StrHijHfg$1!p267$W_ir>)`}5~v(#xYAGEG9CcG~MJQpFP zJIx6(t}^Om2H}F~N-DIKhgE1s)yPh|)g<=?^W6`VpXItuVrkViw6yFAzvj@FW*212 zj*x!MQ~M?V{XV*JLB_x~eB_*u`vIPd(eEf-4hXROZMC~_Nl#(ynurr&YpP2x-s1KO z8M+Ii9uP{zzjhfOQ4Na-`wfX=!)j8Ud_3q=jV91@`?XaLd#Ze`bf&#cp%~A(eZkEx$zg9f*pWi`|KtPdX^ZWHheUTo-mb>7$@vusbRlyio z9?2NZY8TnK)3sQk&w28P_Lgj%1!m8A^soAImIPC@%-k6B13XBPs)=v&n{83Bg-X>EjqYsk0I*YTQc~Tn?K9hPD_@4Vgz-x$Q*XL&*91_r5 zK~o1nygl|7vhle&*%0Xg^|;UK(xrl{MA&{HS&; zN!Tnlg^d<$3MXx(oD0jariumu*@|%I2uv1HI9ne-7kDXQCcE2t^p|FlR4WBcRWsaiV7?0S8=A zXERw^|KrEb0ZslNDkUDKr!Zr$oZmv})85`~W_1y9LJ%;(r&Lm?tzw(I?suz-=|!So z+1ld*?(tls8nRKFP5=%6*0y;~_i0H>4T3;JY3NT*t=$eKjtC#`?}ga%Edd303!sVgE3**Ls>i0z!NJkA!L6*^vAUXd<4|A4Cn}As z(<;kaZ1cSQk(gMrZ-r|(Mc)OBnD`5hH}@rLmzDQQE)**}`vBs}icW#nV)*vGz}fq^ zWj`uLLQ5+=GgbG8s5y_XyOCy8lcf=i?m9QNPyE}~ zoZ|_3{K-;V#eS`qrWe3E4y}o`XLxUsARzv3p{M8k{jki=h1=>&DJ``zJ|YqliDUkk zch&t0yq)$6#yf$=LLfZg=srUFitY>n3GDZ`kAn;p+49~XMr3`pgKJAYrT6C{_NVz{j%{4;a2yKFiy-b9mNq@+7UKxw2yO1e9x6!6d~Asr&pQil%d?vMuQ?r!OBkiHvz-+R9w-xz1`mvf$H z@3rQdYp%Jl#Q+}fAtYJ&*@+bNX2oIfo1?MAW`bKXS#m=hspO&i(Q}W}Ll%uB1!qkH zmat0|4W}?`84B12!urbM-$C%BW|B5G6tSP;(gQ9Ji)Pz!`QfNlQU1ka!zBb@I1_!U zdGKC5{OLHm_x#v~)fbaQ`KtRS!APMpEDfdzx6Wg3#SuTZOEpAm@hjDnV^r3v8P0G; zX$2J%l6LLJ;q>&3ybK`zi2K1)^}Wyhkbyp*$8av({Ri2>Mi=^$Fr&^g>eTChwc|?tuG#%2!0B?cY}p zVAitfqLt?@H(V8C$HM$L+GdIMml0NEEeYYBhaiNE7jcP+^#jQ<8}^a?IZ3xnpN@{O zs+2tLdQBpA0z^bw3%In83zO1op>+WPf?QioSlW;4#RO)k-tb~=jJp3RBSc1<9xZ0I=|jLrL*t91EV>dH5FixA9Hty+#^5BRmO5zPs;q=MbJ zt0oQ+Hx&phGb(`=Gijv8ZL3{bXO(;L6A}y$3WF()Qbk4k8oM}TKHeEv-tf~S#e|)x z|9u#x%*aw?4U^Seo~-DV+wL#Y)1}J4?G1pbadi)43JMB0lG!?lJhbQgfOctqsHeK71b+7Mt5cIb4SO*$`wT)ACcf{ixZ!UL=}}Nt8#Cqc=dZv z&+&yBvw5{Ye`eyfSHn7#{{>2om$paC`mVN@%uLa4lWxy`0J6+rDN~lo&F;Xdy#I8$ z#kIcMsowrFD(s~etpixHHhe0M#YAF=#vP*b4ZSsilb^AtAB7F)&wYGUr6^V!O2Cu+(Ui z+ItkO({f>oemhJa`#pD!i;SjkfSfmhpEg3GZ@O}3e$0*>oQE(3us1C)D^I_RywYkm zlnnG>Vd*h?GP)FV(Pj|`$M4QN9oJ#FoHz0ZnWp&k&C6T%DV~*ns_01N&W7an(*={T zmHDXVgh$oXaD&<5VX!XDDq7_W&o6;D(2Cb(7Nq}fZ5ljm#2F?!>WbwIIhl^Zyzx%w zCz?Cb)Mttw9(QL)?~i}ObNrzef&BRK{L|I#4Bk7O2~0OlT5Y?dY1qe;j*7fRAXAZs z)9}AP8{`YtaA7NX0Z1*P@<*s6nbnCQ>CoUrx-Z-*qP2fTCSqwx2@7>sTY`GYJEREqU4bqmkLM$qbRR@2YKbQpk5reERN$@yFL4zu@s%FEzXesR5Bi z+vNS8?thTkmZUH)v0N2c$;o$pZK0;BEn>yQl$~NddVF$2!zJhgpLRIhEcg(_tk>{y z^s1A5Z+%}pMpwa<(_zz_31!~*5#M=d;5^>>63R}@|K9oKGX&48b*erIS5@nKje>!R zWP)(uAemR&BUs@D&-2dw@E#u2jG6d}MTm%GOjMMd-U6{w3Cw&j6p#2;fs%6AKzfZo zlFgUr9b``qPDh62?BYU6MJ9-LYIvc|FGZ0hw)SF^xJ745EomJl`QX5sn6NZVH-{k> z!DV+p>TIw+XKQarXe8@&(=^FTl+ePXu`!8ruSY~rurtMX_1^)PqXbu7@cJmj+3a*f zE@KGWJ@8p~S<%P>x74Bw9b6&D}}@(93cw|o6b`%ask!oX{4A?M<2K{8pfwm!MfUpSK7 z;~`hN`kIIO%Tr#_nTRA(TE+1}MZze)em<$#*{jOeZ=RJ}z_qrDaIn2Go-)$qAa@Aasj@1`e(>HzW|sn5l}$M?cSexNjCrmxRp#z~e-OhR1MNVG!zAbc@N zx(f7)cOa13IPM`6ur0S!%SEic&+Qumu88t4LUSI(#|Sk^OW7*^=&PAa+LSK5vb!li z#cZImG(|F|I%Vx0-rX&=$tH$bNbApdDP2o(f5nojqM`zKw}MGgmL8a@Y{Yp%iHXq} z6d0B{3Eco56zbT@V}H-r|L0_YZ163rBJ)pRWJmA7(uWw{*jRxd-MO#y%yD%1V6}Cd z?9S=4ARqH}{GinVrvooo`xR&(V5|r}_LHCt!odO`$@_cH=+s!zu8 zMbWo+c3$-+*2L~ALD>5C;%8Y?N*y2nHh`)f7{kb50j`1LwT};MrO~Fw&azuZH2sa)ba%&m z*5>Y=c4l|F(T8biGI{iKM_1>73-o8->q4dTwh=E3aggH_4Ig|2qEk{Nyl!?O8{Fjz zL-Tb^sVOnBBhy>CqFA<$c3Cq-b0#pGHgkjL7NWpFLB(Wy5K?MA+Ys+Q{e#aYrQy|^ zo~K0FTDVI&Yx<6Nz3V19f$-`{OFHq47dE}U+4=c8#AIY+`Pvg<-EW4DI3xX!fm@l( zQk+a+(vS0>rQa(;HIMb=Z|-1CZCQDNB%PT^ zlc+JC6!erl5&;n%eJ}4y>J-5$!E%&d{i zrMrHQ!wg`P-P=3(gTm{Lg&-O{L_%C#$x7YdN1%l33E~q~&C8_xj)Ec=B)HjUVAIz~ z_VY?OI0}Ql^s+-xU zr}moT0<%C_2AK#NkBrn*7BVR zJ?!g@!FA#N!?`GxHqQ94p*4_wb&tEY?b4j3k%)6KgX!bzOLaqpCQ;6eJiUQpp_kS{ z{ST!-hGbz1xX9e3wQh!l2tndBgcAdNlff?#-(U$LjdpA07 z4zg{Qgk+Wd@ByllXos(NcX-pgLRr;lW6^qmamzHMU^jMRVmrd9k2r zaPsyVH7dE;zIfb&oG3Zd?eb}NIDBngU7ZR0zmwG>26sy2&s&?AccRT}V%eL%lTWXq z9;Z{5#mtNskq~J)3=6cVdA=T=w-+RSM86og%s0Zmb-xvXrN+s{Hua4hp?^t~{pGvsM#bfVfVfVNNmk7nUV}6je=Yb@t@HDH;Zj7~9m! zY87eCdbW-;JhB$5Pt)f~{LXDC?tSG^`sI85Eofok#11vl7*xOOtO9;|YD%+YW8{Ds z!M*n5>Nh{>f#TORdx)?Bv`24ATQGRwdm;zs>IP_EIKSWA>+kQaf-!lnC3oO=;(UC| zTbxV?wzP1UHhi?P!R*;J*SN@x1~UkmVNrY8pwnLm2I{LgxGn6x@ZxtGZ!kwgNoq9p zjts0qWG}_ba((fg?H6&Z`gB3P4BaOehxD~pv& z!bit%`!fr@-*gGODCKrCJMf-X2-34+cLS6nr9RZVQP2H{zRSuGsT5({IoJ(4-dGNwX9zUOxXx=8Yn<{|Oz4_u=8IO!P)#SMWTjbjL zljdyec`0BMr>0ly+W3;Gt4eZT@X zJ%SoQ^(xl)`05pcUpBREA5umoBk{49b-C*NnH66Z)EE`IM zwi*tlDl)7`enz@+r*QcPfLT+#`61m03pK%bbQ|Wkz44t=C&3P?J7bdKk`?m~MBZY2i{*6(B5F2(cS3H^#3cYOyO^c~Aq-HL9)j1_Da8v^Hf zkzGwoQ!9J|KYYljz4g0T$2&`5pGA5MVm#i*HZ8>{)H&2(7?8{3YTfx`C_6QE92?u{ z9|76T4QfjN3w`DF)^h>K+BhEFRPJMqgZj{hX)Y+*yD zceGtwy1HVW4rVfVq;0=<8zvYD6t+C~I^Ubd+cqI`vyvYO3R?)cJQzJz&6$`_alkK? z(ho185;5zKqjs|}>ZIM-AP!qstU|Ysgg^+$GEk^1$E z#!?pe|B&MrusLOo3v)A=6B_;g6C>1vU;N4|U!kX`Z}WWY)zi(oOHRh;Od`Ur2_eqL z#=5a}=U+RShJvG_EMkizPB6f!Q5_nQq35@HadmS=WR5*&DM!i46z|n_KFlg~_*grl zJ>CXZ0?R5KxS?JK>HGew%22vWI)s@<2u+!$LHCL#T|}jCL-K?v>FQ}V&vCdhfNdZvIDc&dGGCzH>_vU zcls6N%^w!9NlD*!DWqijB3;I;Y815AaBz=|y;Pi3>-pK~=qL1N&6)m23Ky5r4o0%8 zbM!}>pc(&xyR#g#rVq^ zet`43@5|Xqd6DIM;6Qd$U9G{k-c%cr8s47y@u;EaRNu%$;N0FeD%Vb`2Tnl#zz2xV zNh=w$2+#IqH&#}*McP(HCFG^4%QxlW(oSovbKWl?6Hz)rr0K~y#PBMo}QR=M$yS*7~PS=wMC=7wps zu@vvydM#NA`5XNaD$sb7LHPCSt#;>YUjkkMUKfariDsBxvbD0qGny}LlHntPV>Tll z70p_O&&oy#8NoJ>Ss9-_-1%w`Bmv_kReT z_d4hBZftLN%xIUb4TXGI{jl9d;W;9{E(4c$<5pjbJC@7arhA(7rJb54b$?|=0UdQs zV(JYR(mxhbN!YtNT}fS8M0;iiw?kzR{k&i*-5^L_2J4%7$6LIw5MXB?T3?ASD-^s} zVLYAUeoC0k?6YLI#UMI$rRx z(kVksmeTMYoGr{8RLHdk&d0#BR#;jZMGZ(xB*V!*=9SpZHhW?2&s0R+9|IrH_Xz*X z3R#Li+Jru(z*9w*)Uc70%@Wl`y~O8-mD5(jL_yCgEw#PgSPF9+iq`2=$+7Eyn6knBOSffbl?Xe;~ zyptafl^5#w&#gh2s06<2nFK5@Bo8)F0->w6^t*CO`lqcY#8^bqv4hDI#>X0&ud=eO z6+8v;2=JRo>$7Y|+1X<_vY7`B$aNJJxoK!}l&l=jgG6JzGl>@|o)PA*WoW*!?ZIGa zf*yJvJ?G@EQBqY!otWSpxx1My)1FRFO=am2lT=x0yFul)xX`~34Xj8n+#`Y%$lKY@ z^gbm|a18qTi2Patk)=Fzl#^XlRQh|E@CxXk7jam*DZ}UGyGV$Lh*X-X@(E1*jBfo^ z+vgBGztoRzN={C!qHqyPGNzVx{;T?UkqZHice*jZJOT0Z06d_>OW8n5(ER8ppde-_ znEz+Dq$#JN!E$GBuk%9|j-G+slfUrZ&=Jm~@$M|`63c2PLDKDlLMix(%3L?0+v-{( zBl<-@GkZq}Q8Ve-*n&9Nt(Q5K-dwh7TfN%8?bl!qsn3rK&%iOYu>g_`iSuNp;22r? z`})RSwsxvJ9xlFLk$pp(cg;IWc7p?Rw>MXs7q|>arF&kV37fI}{aK4wozMQDs5d*` zyUXg++&q%G(b18=OweX|8F-X<__J++Ib zg{)l2%l9-y85=qrNGvhYZ`dzCCFQ*K!4!0ttkP0BQH%9rC&nZg@bMma>~*uBZB1(+ z$jCrt6S~9EB1o?;=2E4~v;Gn#k6cLz0y#lU=_g|jtJx%3D<=89XI42q>gJ5(yiOr8 z?6g~UD=z{%l?~p>b}1%njHdcyQt+MW?wK9^mWrJ11GPWLn>Qa6MccH54HvMLe2DhG z$4pHWCa{04tlY?^bzL3cHe2%XQ|l#?9)0LOD(%se`WiOQfDb9+Nf{eue`VoNoiEPw z=1u$HKBDWOf`!oiB9?#9ZPDBoT%R_Hz0;8M!S=fNJ1v#EHMD-_YmtvIVL7DH5FIcsJ)#m55~K_K@3O)zK71W%Qo|XU?1mK`!64PMxKG7$VW}d zxwcL|y)?DUQ9(gWoYn}&m%Uly$M+2mmGNQ^$9}CfMMdK(W`#4U4t`H7?2+D29@FW! z6R1AEf*9CcxKKV^BP68aR0j~zCTUs*>7akGToz_=g%?->@xGPSVU z+}iY%QIO6ASR^+5nd-gS7VaR~2qL(yx` zJa#ftY&4`&PQwh$XRN;7#%Fc)Zdx8bDx^)C%(_Zd$Q^VH8y#VqwapE293SF6ecJV?a}7Agu-z4(;gJ-WWoW7OUvY}klJNJgg0IrOr=DD?-` zVB1R?8kUIQC`I!rnT=3{-%_DMwVT}+f`d9>dctV)s4!o1esZ)BzXqgIp8Ba&Uq8`T zF}ss}n+81Il5(W&i4LdZ0@CAjLBUVeL$A}mKVw!`QYf=Ku1uV>F|*Frz4yeH%;@Ii z8lO@YkR{%=Vw)^`-Ioesui$d{c&c&z+h9pcZ&b;+&_LRASG2!v3paBtFbcE*eqCS3Oz%+c5C%9jUpv}Q92AQ;kSCPEayWnJ%R zhKV{5U#z)JZRK8J7&~0I^OhhRTlJ+)O<~rrK1Zc9i^FJF7_YU@y&oFt$8Yaxk zA{-nTjfjR&Np-ZH)2ynEq*E2(^!L#dp>P0QX2&rM*b+SsdShE>^@l1D2ol(i!?>_t znkq{!q=A7FA@3KjC``)X3F~uq+3aEM`GN-rkPZ%TfPX4H`kw!}euLu`hE{|RIWg&4 zLZi|6;-mz3vHtt@z(n1zY2v(A@7}!wT{q@cN6ajU^@po2%ANh~6{C_-9)8y>jMCIp zp~myY8=0rqT&V`O4^86(R zp}9&Ke8xa$Ug)&=%cFdY<#MT{>2`2u(10j_XA|-ff{!76dfDX86u=vW{-2W{CkzMS zI}j?B+<)U@%i`$lr1H*!;qLa%*pb_N$}f7m=ey%!(Z5M>2jOD?Ue*>LE)wOo?Gj?z6;?Dp zuT`?fwYf<``zc(MWRBmaDkWT;05aRULPGNUqOL6mX8&e zND}bIcm}-kvgw=}g49;b9qrDyJ@z%kL!Z+!D@Y56+f|x z<3G$t%T1SjVw~$_#{jvN$u1eMioNJqBT`N3p5)Lbh4!y+bV^jz$LuWuU*17BV)lA; zS%q=_8_iC9Vtk31m~$u^&gS15ehmA2LN?g_$HDtLZ{yVt@qm1&n$DXX9j!k{ut*{c zs@mm)$Rg%@GT-A6Y(Yqg0usX9yq;T#60k}nCL^jQj0wkt7|%&njs9-s7l9`yKfncI zuw#^CHPv?yo(@Ig1kb$oK_EUaegi<&v|bUL^t@2nDi*gn-&=oaiSk(WvzRQDq~zHzfXAh zB?|_u+eUF{EaoOUCPqJMyfJ{o0gAa=iSr~QqYn5o_{V5C`5d;##pA)RMtY*naV8D< zjfalNOl?U@>qdprra>~EDp*~$uu56lFTag{mm)1KoeAoq;MelU6=g`#3``rQ*6@qE zDqyJvBv86#p`pi%{j}BVbna1rQySM&@bCfOrt9V3@=6NMj6`)?G1c>zHe9wxBe44~ zH5B4ocNjp}svy_k!A2IZ5)@A|I5JyJ$?1uU$U=;X%0Tb|$v zr5^Htlu|4|iq#V=_&X2ACyfoC6pf8}AjpSlLJ#X>v9SHJiMXC)W2y{@@k|1qRYR@r zspM;s_^i7)$f&65=C2Lzb{#aREz~V)PTn-zEHTeE83p(3HczI)x+1{NVY3d1ewZsu zcYb`LT2aC)8C~Ye2ALoJ1KP5&T>g}PzrI1*4&`3T{Q1YF&gCLD7M){!Di5t7mW1?A z=$jT`HvU{^+SlUGhYSA!QYL&fk{sWby5~w=S@I1H9{L|;r^ni}G>VNA%*|9FTIN$< zCB;l<3YD#-(SNJjG`G$4cSw*mA5kjLOgk@ACi6IgHN}bh=}l<}&%XFu3@NW=wbeG+ zxw&<{MR57sW!y~>mXqVyH-Svn7~CiF&CcP4|M(#i6dIa6UWp5>CsXs<#fpx8K3i{7 zqmrF4bc?IKshXpx1Qb?6^%%Byu5G<|k#}>wSze5s%0y?Un9GJ{yHIH9r};tqCcvzQ z+AGx=!vY&@dc256-4hl+KU$F9q7&jP`teR-Uo-` zv^Yxo{aHe;E#O>Q_+C)58G(MWnubcHsZUc*ed7GpiY9pjnVvo4Hw%t1jPSw=hJyW1 z;!UdLzXDp7-<6u8BXCd;kB$zOcfY<}GRyi}q_Y^En0S+Z6THqeST#H~)_1<*TZ>=n zNEX7*USSTipqET5-!V2O+v6(8RFds0NyEWvC=@U5+D-S>0oZO0+5HBSptP;OTK}H1 zOa$sz^a27go>#{K;+GP1T{r}(QsJnmd1bBDJI|`cmgdGpv%-V7wnjvE$f-DeXkMrl zrloyLvAyCJ#U~+Yn^k9#8mt-D{X;B&dOp0mXu3T;*>(l+*QcXlv!I~R46yLNfR3Bn zf%fPR!utB=@EBVg&D%+Ml71|NkmufLhDNVe2*DZ4d2zH`RDZT6T{|{_iUYC-3@j6J zNJvQjY%}T{c8-mg4U4QAE#v&&_rpfsARdM}!7OF6CtH915K41!p@C=aiIOX);8ZsN z>7VYC(&POuMNL#yT|9{K6diS{ZiaI%F)4{MkBJ3)yfeWVz4`9`M)$A=YJpQd7jw$Z z`s({fj=^DkW-7ad>0wJoDpI7!T4>i-*w7G0b~bFZyZiU@xF=LFEGR6KwwQ^Q_<@%9NFT|t#);~%5> z+B@SIbtwcd5cQhe7ns+-gZ&z>=xICS@(4Xb#&J{DuYW~$!2fH-xrn#)^+k2Qgz~$H zUtINv3l+O<9=@ULX~Cl<_$j6g#>#uHe|z1B3-up@7SZMO?X9KLJ+w^isJ(9=+7Qvd zB-}LA)nVplQ)w)>yFYJ-;rq?#YSZ5_E+d`l=UKox{KF)PTmRHCkW%ganR>$Szn=YAGvkIYD#nwUs}_r|5v7H2V0s%5Ni?x6gsd=eZ6l8>WET2^gn zbB)oyc`;SipWCa-4Wq~>I@*NpyN#Dp2Pl(l+nP!HRKd;Ao?o99C#_@xb3-lmXEUVn zXV1<;vct~0b4>?7amiE7k)J-)LvPFT7!_O`)+EZR#b*jw0*!2PJa#-`b?fLE&<-)qL3+OO*I17hFU%d^8li}x4$6ZeVeD;KQY9`MYf>eb2mRJt z$p!!t3WZ@XmhoB)*#Vn-fk3=NBE80U3x8W>L(23BUx3IKNavniU$HzCL!TT_G+ll5 z6@9z4b&Qj64zU&mtyS~qcVJI^<-_vxrY;v{4?U)dsYxYyb()yi7-elU6swsgzw*-) zb#5wu`pa}!sJdUgq;RIJ^TFakAxXal3_HCA|V~?acVXLPepwFM@WKja*jtSHx9f_LWzf z_xmaaQ&KAUC?7rGR3^oIe>(5Y=O-Oq>E3VyuD`br3^ZM9!VB;b!*WZKus({=mVW|< z^X1kfjIptG*ST94Q1hqbd5B|Nz5(4d{;=UM}1vg9%EQ635Vxt=AW`Up}pCfaN^ya zT%SWMcJ^6W1r|~#h$O$&Y{Tc3Z1F>jf`YAc?l4tnMGAHG3C3B74MhWw+jU2p!8~AD^if1a>26$`V|kFbX}ZI>y1E)^ zLkb_aqsqG5NVLhNTpk(eIFCl>GX5>`S{oUi_pWJJLi4G3#c0OA~adqS-F&f$0N zA>#+p*TZ1%TCnpnn2_*Z0I<9m31g3T>4FPmp0MhQhelM=24d)F@?KN2@U{ zr?=nV)+h>iM65o^&3^D6z;A)+Wzr8%Rcy%K6}!+FQtEA(#VMka&{XUt=8^i48}|3C z0BOqjK13exb3+Tc#B^c2exl~00jArf{%3kTUh$ck$RI%(TEYF<&`HD!19+;G%ID7? zEvUumj|DfUX%nkZfY?;YQ(2OlHEy|miUC-*6iv&@3eEhOD#gvrX$K>#M1(_~iywPQPImVG3Axp^r7a?IAtqdU*l<_X z!W}%^{)b=XhLBJgQo9fOjV?YPwThLE;m_I3_?ZNfHBf_2PER*=!m6E{NZKgbsFJQZ z>7yu32!LdAe-gIA(Sp2(0{jA?!jcv?z6fvd{Qm1LeBLia*s95-0(}o@iQHV333W{+ z$#*z-_J~#bg9h<_NK@u1NnaxU^`{()oM^nu;-hSX%VARf>jl79=b8sxIuw%Le07|u zN_#Jad@BKiVR)?DOfr*;zqE z7=IJg7#WO8j8%0B#J&B!zn>h2WYvGVV`PiO!NI|o{v1|eS=L`vm8CsZ#%Hk#$PJ*| zG{)Nutzc_!5N^RoXon?jY2~lxvO{iKJ~XsQV8oVPxc1Ox(8uiS8OnL@#D$4jbQ_We zmqWTt^p={V4ag2nn2f1h*jU|&7Ip5HO+U5 z<<^Y&cx2m0s^`bY*?`JATXf6W#`L=FUfJ|RnSKfA>;2O@Lp91$YZR%_Wm$rf5#SWe zBKTzlXm-ss8Ar#)qT53X3QP=Ay>7=|Ci!ewXgahRKJp=kbUq^^b|)Wev$CMcK*v-{ zRc0nX*Nw3W;%IOkDLFZnjg1ZQ)?rO<^0}+MupwnA5nW@WKGFL{O2cpjzyVJ8;C(z@ zmeCx9>gDOz>(5i8{w!U74ixz2i{fC0LuM{c0T`3%RqgvU2?ETmeNN~$9iN=s!FfT< z__R`oCmeiJ>k^X{+WODU&Pxh)pZDoII=b?_x$B7t5#c~k9!F47i8QtRq%~!!o`Y!W z*Auv-?xKbp_!hta0^z`3x@i&ke+w3sj2R5Y2c4LZz7!0+HhKFtB(g^E^z^epz1ZAt zoVN*ih$9+?Dro-#nrJ+^!Tt*IZ~x|%pep2ex2U!wS-{OH!F4BnwM4&GVdcF;u#yd_ zS2C5B`9C7%Lc%b_&+d&tBNSb>90K9#)gjHBWQ&-NM$50(017gig4)VIuNy%l-U5BW z?0Tja!h*zdRdMRxVz%)m(7VO;Ii+@KMxpmJLen`$!@SR?=m648sh9g|JxR1cxL}$u z?77L^GOcr8xlK^mpG`2wutv}JhVhcWp2&y*v#(7hZc6q3moryoJvIo=n2Jz}nj!B3 zLk+x{I-{5Bz;EK4U$?_hMF$v;@HWDJMzqr2&Xd3D2G?(gEG8x~0yCA2M?)XCk5XAx z^$09zwE3N=adJuu&GzQ2LaS~1RKu3;7s-PZrP6kGh&7^!>@v3v3o*pN)kCV&BBVzy zdorl$Ea{d z1=uQP<~|FU@bJ)xao^CDesT+Kdvkh6fG~MpGgeJ*-~)x+rqsLridIIl#Ksf~f>dFw zh={^by9xb(Z+0L}6pEw)ce_Z{u}L18rG;WfSSu@}(*9RpXgsT&V1kpX#@V?xny9sh zM!jrHt;miT^z`CotreizRj=AUw>C63I%F|hHQgP0-RROOO4DNfi&i3(0nLy(p6?oP zD(}NYDZ|J^H;T z^!8RpI2tg)r6ompMBOFG{r&ylrPOO`92;g$TkC&GhO4{bbNHw}CJbQ$IMqGNn7!mI zu1<_)2Z(3(e!Wu}4v*8ewVvSR`I+rSUMj5>CdQyi=>gb~9r9v%byw2adI_Sfv^#mg zVf~5cDJWqG;egFBM_YX9`;}_dln69K3t3^*L_v(7Xq%MyJx!y%Dx+MZ94x=X!w6%` zUjK6R-RFeYA{|pzeG@yPTy%8QT!HMVU)}@{43xbWAC{S}PYncVn$=|vx|`cXkaGJ9 zXP$_Nf}g@g^F1|Hl$qosuzVlMUKQTV#zFqj@vX2BP2Nj1PVi~cN;ksALE<~-@1r=_ zUp#-0o6UC8Q-8SAP1reE-wk^s5VG(%PGq@BfZX=4761_s2KF5mAvrNEkdOE+DBfxy zY2a5Dz4!C;TiY$r+dnIaW!6#uHA@_Fwj)Z)1?(oqvz3>l^jF2|!56Z?$#u~X5A30{ zpvWD=ihRv);U^rKa=^TExSy4YyT8FaxK{cNIYU}rQIYN(B}1`v)Ca60d{p%2X5~p& zkT+`GYwrkPzT4*h^~=X*4yvda6uf=EP!CohRN4|OJ_0=N2{09AU~SFyuLCnqL;Bobj^2GESL5Xas(m1xn=NaswX{D)w{LqU2@iG2`)_4&Bn_2pUu$POdVt%3_1J6^Ot za#^w{XlQ8VmSu?p_(StQ4`&Ffm9b6Dtka9;oQFF@bRQ=-5um&Lr)`%K z+|N};^cVZoIYX?41K<}H79JDmr}bY?uwT|{;1d%|B$F-Za6(l0<>d$5L)lGj(^9d2 zPSXCpF_t1Nz>wO)t#iZ&zTOO8AV(7OIk!#lZkl+iRS~fD9794X#b;$Qec>m2-01WN zCU%(LT7=;`nVu#)ER{!weFy?|q-t*V;&t$8`ZLA->G+qr(;ufXyus^*xD*LRnbg_L zH@)Q|ANJp+@me=FVH6mOne*Secm z930UE_OX47nt}|Pm<)4H2kF4+dbhVP>V-*`b*4tu3z~w7(1*za{~TjwVKKDY&$bAh z5ZZ?26GWUBqT^#qB1Z56!KG4orb3}>H3Xa?n2)#MIc0gnYXAu}RjtnN^;|^Uq0Kgy z?;CYxmhTt%fyk@SJi*NYnm-Qpx?V%+nYA@?T*X6FI!<0e{EU?;KIbwzWSyp*NKdm{kPCuqqKi0QpZ0wE>MW41#1b26j zapW~}n{ZkmPoX;(DD^jewug0o5jI~E;tgDlOx)mr0Dgc(RGcs8PcMMp)iPYQH7+Rx zhO|Y&NrcRU&&X(X=lN_G|WYh1z+H|1F-ufL7we_kE!!Z6GK+%wCQq37-0HNyS zr@||gx;Xo%@dC1;``cW0p(GcWM%wv>`$@1r+pqS2%QUsVzpV-H3_#3XIWB2mbegD_ zayemVG%!+3h>II{5i`XAk!=987-8&0UN{+u5K1 z8QQqi=7*r0WIIWvPuSv+jpK2kb2X+Qo6`_U#F^`va|q(QhT9SmXVY_QhHwYKytXs{h>H>Do&_9FlJVyjS3~Pu6gH+E z^#25hhi5>B=m&W9#vFY8{7mEEVXj>cbad1{p;c8@n$1wp{w?3@!2xG)B8?`-C6zME zlLjN`Z8F$oYXj1ZD#agXzrrdw!FEd{0cV|ll|{E0ovbK@k>}YoGKTW%`H}1T*P;BvzOrr?;r4v0kz=DGbi78}?tS!CX?pQ68`PmS?NdS|SqlkAueq(}h2d0D@&)1mM`6Uhj45(08w z4zYx!M5~+4F#dbGiP+yqU&qI9Oz{9iK^~1Xear^C0#AN{Vf%$T5-WSR3-X ziuSx+A=uevCw;ZifWXRbgnZlOb)RBxVV;{;wz9tB|Ktf6u4TsKIa#O?vg?T;qGyr( z92Dz))JYF2`|773KYc*)NlO!s6rcX=;VwJ-tM*@H27j}$;?|^`oShL4J0USY9szassS3at~9Inp+R|H)ewf80pAf zgU=c+y=VHFfV&X>A%JY8iNdlL{E$n@tsNMsxPzO+z08F_!BkA_^*Ofg+4^Q`9-r0e zs+^q6$Gja=`}Ng!qP<_(SG-qOYUQA1`oHnp>c_6Em;;0;BC{F3MC3w(-A*cH4- zy#83oiwWbm7~E>0I%P4ZR#fIl(NpjO&bP6>ycJb$=e>#5VqsGAQkkgZL#rq*8BPZN z+-5T1eecdH&jKSC`v>}R!Y-W5&2u+(WGl>-KbqQp2a7**v-4d=`k;+5Qg?j>gA7Ox zZ&k26fa4KDlJrF+qb@f$=g19(S9*C^iGE!>Tf86CF?VH#WSR&or9ANM2USye0}A~g zzlE4bZ{~LUPtA7n=`wsk>~D0vdQyJ7!+3YxJ!@a`8$qx<>+7JYuywNUB9| zZwIXJEwNj{dRUL(tw}QDjTSvQ?ijhaM3UZ{%YiVgWp1F$HUYa>)W3fxSAMiJ{k1|8x4If?0 z8vx()=8D&DvL_5^G@P+%$dUNcPZ-0;wMvLBEMwe@W&Yh!^eH!Rw6v}~Oi~(NK zxf6?!kWg)8+Wu^Mn#TiJLTkBmV339VjjbTD$)kLWa`Fr2A<(QL(JaZeoXwKlpREXB zcLDnuhJ^C!w5CdQ^{ML_QJGa#kH`5BhcB1heT9^xfSV zA$PQ@ip~Uhf(^}EL}I~B!(Sc#F5PQsfq9CKo;9hlS>Q}TMD)X#Oo9e=5rfHlhJvRw zfLZ^ix#mNWjNy-0eYk?|X`L~V2@)&1a14UaQ<9r&Og9IuqLZV#^x3U@;2;rNNwVp0zg@9R(7zd7Y^!UF@d$@R~`BI(IWz5h6*0JjJUVQP8- zUIr(oDA!uB`3kpVrV*QnX=8I!(N0(BVm>~V*Y9G&_wrZAd%H8i2IufoO>QLxYjXKA zvC+4ihwjao2a7)htsmC5Yt-Cy_>4A_n@6V_PBj}-Q4Ri;Y zo$e8Hv8W}_hr0rTOjSQ1K`sZ;^C82rgY!c_b~{LVgx&1!lIlFzr@58GZJ{OUl&V#BYm#O&JgBp|;ZmM8NjoIbm)pTMGif$H&L#S(T zIwM?Ya0=a>a87tbO^3NmmTG$PSyu7cIZ6a!6%vm0Tg>pP!^6%nPFB`$uCB@iBU<`A zkJ!)&p}m%-*1QIV=-)!l?8+|i6vfXEAKaZ(89kV=YXNzF`@e# zR3p~uwYWw%KriG0yPo}g{L?FkSUMJ#M8VsILv888_}MxByo`*1gC!P~q!jywB~N`- zFnq;?{Ouzt8p0k_7|&vDsj;G3?MEICkKM_uKAC2t9W%u6ORWs%^wy|<2pz;p(l6dT z77IKX-^w*aIta(rA_!*!#tJ zan{e#`ONB0(yGXt)<#n5E^m%!|J$|y~BFQ0-oh%HlnMM+mpiuVb7J3+iTyQ zIZ+pKX7jStm`1!VBB&?6IPR6(ph6(gU^le+<#|N@`gTt(;}%|B>qqcqkZ4&?-M{+1 zJ?lG(ed3hGXecTHyoDSQ?G6Q{{71Mh$pbHqUf#JO47~`|#YP*Ug}Za8vg%K#t4QT8JOaGYCU_)u`4#8} zZN^~P8fA~K6-0ZtaE~;y$?Cnz&D0o#`Pc1P3Y)$2yPJfD#!VDGCYhIt23}6^Hfbw% zEOjbzVkPTS{XONy%R=~@N9(`jI0u?8@ZZT1cz~XzmX9}rcYk2h?$}Hc!r4;;j_Xgg zxf2;L6;!me;#AUKeZF-W5mXhD!Y}Lg*D?2LeXgcDWeFa0vJmg6n;PR&{340; za3JLyf4&z1W?>$53j)GtwuX&xsfOMHw{~@I_A~4z(h~yp<~YvT`R?IBAEgS|pMRLS z>D$O}(WUUf)>UvId3r`6To|%re0|xW7ULT$gN4i5S}U*LA>?j%N>5|0l%H?LTRD_1 zI*ad2eY(^VVdKw$!3yEV@ftgFPLXK1)g_jGSM*`g>Hx zX|%1(I%{WCKmuN8qP4y?=2ugIIe-jnX2mg>0Cd@ojSvjYQx;)VAGE~CJ{HjMb^YD4(vOy(0QbDzf4q0kHYpW9NH#@42m#6| zK2K0XjWn}W^U+Xo`e|s=4v8ZpA#UKf#5Bg*{BdtJ1B|Yo7i!dftG72E&w!xpV(qS? zsu(vfy{E9k3=Awt;~ntaC`TsQF+Y2YD$edzRBm^ig-}%b2Dapo-oQiJLBZ5t@m987 zU9K~nkm3Smmp%~JTu-UobrVxtXv)fTI(G5m>9(!U@*;YRhjUEy|CmEmJ8}>dt#RDX z_*@Jb>C}XvpuF6$Q>h2c5c7ePg&I=^d>+ql-Yxd2pNd2i2yzE@0hVFZ$U_$Q6LYMh zAkN6>NR`HMc|i!1^W3P!+}j9uc{AU2BnqNf1g#&Nr-rH^W z6eeLm;Z;k5ep%Koc7g&x1y}ZEx!M5uSI}^8oVT8to+kIiV5sT)AU#Ge2GChFg*KSNfo z5ttoW#*WuM(}K76Pp!Nj{s&4Q4Z)YcyZqqy(9~4a%pu?47#gKzMvOClea#Gk3)}kY ztV7V!lhm#tre?I<9a4}p;(!74Yko_bm#rY?0cX8h6Xvh}o{O73!TWjLLuY)p@0^D} zXnuE+rHgi%rzJn1%P+!OlX|4tPiyX+rp7y6N{MBxt!OpuSEIjK{Gq4pGx;W+?AqBk zqtN;K5YhgC!2@06Duho1?@Jk|G79V;?7s|uY6mBMYN2~Mf_oP=`LTI5B?Q8xtMcW3 zTs~H_sBgvf=*XvF;eLAJ{*!tdQfhNDNcDTWp4MCnLq3o0%Rv+~%0z|z)taAq8wxG< zr%~{mOuuP(tA$uuIY~*gQ$MJ}Yukyepd$PTFCslQzk&gYzs0yXIGx5M_ro@D6gXnw zj(Lq-O~-|?y^sB4=}pDna&J*^b-65`wVM5XSAh6)CYfyP;$a?(xlg7@V>_fmHccBQ z5dTYDV71vfu2i={nzfDY*`>B_5@?mbfBYC%al@uEaXElMHv8D-?H=As!RvYm>tHxD z$um2@nyn>9(X#I@LB32Yp-;7^Zc*fIVs}77vpl;XtsP!t_l!gOEu3g=3EHS)aBNi< zCTfpKalkdzz148jID| zjWJB0v;QebM^Scj&~#fgHE&z+gVtDiZSF5>nlvilJrD;nzFR8cs2AOdD8>-x!Wz&# zYW&v;lGiy_2g9N4X4T+aZW7 z(+L=#N9WPnIWVAS-a*PEnOU9!&Fv|*P4GJrp(F;V8mn8%C%`lKkVo&25B4%X@jqwy zJ7Ap5UbJ9JnM6ilGu#nkp#fyWX-3)#WTV?=M7&T%Jzc@eXRjx|eJsXdUNH=U6= zh~G8@sB1ts+8aMIGBFh#1e7*~7XXg|^8wyFFpWl8XeA|v51|AVg=Av4yx&`!Vn`00T?g4Au+EnApng4GF zj|WeK6pK^c%a!*eIfzBmO)+A#`Lu~_G3z|UTs*lKYjG--FF8L>Keik;CiSWZV z1yhPajFKiFt;BK>=qO05cYG=TlKen)EGMuPzU(&PLFaMvgc5sH+0Ph8Tgj`w-WBxq zd`VqWT#|GE18CV{h&@)5x?njXn6e^OjYgyjI&oO=UhvQYw97xe4WX=8nb@3m9n1 z8lDsDOBJ6OD;<5bcCv=#@LE1L2j#c6MudEp@>@UtAjr?R2L9^iue_^keobT5p|>!? z@OP+}dk&~MpebCf?P{e}b5in-l9NQMV1-o=OM<&22g;e4gwNu zX2v~&^m7tg0~6FhW=K8$=(;iK6ZvaFCy^cxWVE8@;ktA-Q4aEPQW~ z&=R30V1vr%knKWWVlVW1v5|9O z=k-!(JaDnHSP-?yFVd~jEarbz3kE6+oM$tL+7a zzgGEHVbz;8Mgi49Mr4L7sX@2duIKko!@^QII8Z-F_!bl-ZyV`VNXNmaJ*-Ctiq;a% z%E__LSw6JzkdopqO79+DgGgwpcmM8CXQj*b0t{&^EV9n1ug4l39Uzfokh}jovuxa_ z56IEi8IWT!zEm|d2w7@v$j3*DjLaCB+Zze*mEsl91qsm>VWXmozn^aU8M2j=kdUB! zxL(Q?*rHvG#cG_m%{^^{CDvOTdF^J$d=CrfrP0A(LCajq$Fn;iiEY zVoIC4E@U+dK>FzY*!}?wT>qMs0$m)8*D|$(p0ra#OTrxLaB;DBB*#BdGn6n@FWd5j z>{gm7K-?j=ygU;PigiDAAk^Ap1fDQwZBod|OIgA(=&fV{L%f3=L;0v(rM0zNu10~x zfXU2`@s0gJ$Pxka1K?Uslb= z6g%ex+Nt1aUl=B+a=%Lejy3VK0EYJ#3haN<&VlgKa{PH|X?)wBR<@tCRHaBx`uckJ z0J?1tD09ZL=sl@rotlk)48aFTbN=i`MJm(6B!i7d{Pc0%K#SQEUbKYvH>XzH+vrN# z%9ewS_OxK{jYYb4d@K^feCUD5)= zrIxOrPjGtxYx@Uvwy>nwRTP*dNiB5SbM$7ge=yUzl#`!~>y}Fcg5gAxD3*rX7gO?C zN+3d)y$~}(Q5EH)m4X7VN2QvXX1}H&)bs)fh zhv3C~&A&oVFjK4NvbgS{^}0H5 zf*s@VIbkl!tyYv__5bx2)G3NO9t8v_IGw_ZGZaKMmj5a92hhv?hp6xRA$!^**(O=E zGu(yY_V{|b{F8Wdn@5l6dBO|5U%@?g|GNE6^f46Tb#if!-(m{)1Y{`%>xd3=o;E(g7mI=HAj z-rU?wy6AdI==z*9kn!&B7qrC2ajfPb8_JBN7}Zc2c2|HSmh$(0NlEGpYn2XOH*uqy zmQ8T8bm=b7gB3cDEqj%p@$X`*Sr%FyF_kO2t9aENB&nxor|oA>Awux}0-3#03k1cm z*p7~lYR6gU`zJ!a>O5jY+Sl)v!jpFQ$!kgtk+?lO!9c{+P(e}&o@Zx&^TD*rxTvJ4 zP8y=Dw{L(KsZ}KxZC9K5<{=AL+k+PaSUqs6|H8T}eR8(YQokS=@CMe74|f{mADCvf3uiO#MhsI;3Lk^<|6zfs0k z*VSB}rZ-$*zCqSh1zNb@i-j6}FJ6m6JutJ)OWK_@qI@$q?KDcq%EL0;;amjwtBl4s zkrv(zoH`5l%jE1M9-p6=N%y%X({6DP;`DoGy~Qz${PCYQMCE*t>ccMf>dSYO@5hB` z{m|1B&7L4N#U`0&=R6woQfcQV2{J61j;@B zOexy)fK7U_WJXC%Kz3R~{LbjA--Z@O3nKnZN;5#iIj zKOug<3u&5h&S)PN71!KoIwThNU^s4>F>Qj_ubVlgINYLJ#SsZtzjJ!%eH;CJcN$|J zUl%fCnDnQuB*(31yM^yGRDxr+Ob5M<9ScIoubTob0|JJGG6VfoZtD8sqkq?KjuOe* zrF&djy@@s!0fDkgYhkvf{C;2x#N5hE$eXgZ-$pX_!4g}!R+ELT{j@C1RlB+`_v?j* zOM;My-{gED*Ur>0q?st!Zr~U>IDVk4U^=B<-DBZFHc3Mwe(?pN1^*B*HD#BS9ExSP z$JMqUw-Pm1w}SCa=X$7SCViN?R!tv>(;JG(8$^LH5^$|@AHc;fb&@XSIkd9vo7=n9 z2x^D~p=Gpxc+IUk zm8!_1%k9`MMJgWV>}BpH=Q2dYXJ}F*FDECYy|xiFE9JEf1zwzoK>Oie!RLr|QAk$! zt!+#_tKrPRQsEX9D5!wJEhNs6c>`=QH}wii^f-*a-W5=2b73GPh|`{?QKqu@b{r`i z2`v0yv|+mN(dLAS*x5~EFnEAncZaoaNS1zcvf!X6G%e1dN<$gVYS@3iAhx=zKyn}r zLGK=_Yd0)fiYHtgFf4vPR>jOm+v5Jet+-Rj#ABR=K^74yOV~rc^x_TanW7RoWL-dpY(=v zyFTY65U=9O&6Ddh<77pgjlEpDFk;n1&>pb+;|J$MK()Wy-szzf0JfRnD=ng-sEDr{ zuwe##-wDRZn&58zMpRSYo~c(dren?1I$?@tM7J*ad>lwALQ3+USVJ; z&htgzixwhk(BDpdu6a|!kb9@dX~zVbUu_LnWCWp8<0vPqihNtCDJh7P=x#W#3OHBl zODp#Q>G;^aXpzH4(|&V zu7xHQtw=erNRNaCO8=Y%D>s<$@1NB#b8}Arv5e`VPV58#SwR$wp(bP*+#8 z4pZS^oYAH$eIW5o`i}n-Z^>89+~8Ub>&54m-#biIw%~hiAfqQcl^}=N)`a21)~E3@ zzk2(Q@t3q+NF}O+fBC{oZ%Fq2tgct&pFajO%O5_>h$E-ZX8KY?*Mrp1>-&$BN%hj{)M}QJClU+0cX05HZ_+nqiKjjRrteLdBqK93PPonaFYwMN&$0vrjDCsB z&Ws0ubty|U3JB~I@^`*=EQLlRa8>)(wE(e zV(XNoxbI8NJjNzBL8njFB9Ysc!28Cwz+!w(^X1g}p21KqCx#SF{Z7Ej3RuA-p@aty zkTr~Ff1{`h(}JWuEb6;wqn3oOW?^05`DEJOiWGnSbphY69&+KgkorQ06JySD6S60P7En}P80G5KEWZk z(Pu=h0-!(#&qH#2GA9<8CX%12?9qTq$&__B40QO>V|1QlHYyeAh4zD6NW_0S8Lx- z>7B?D8(*FdnuvZUA4;Yxt%W0GEK(5aF;aSr4w*0n)3zF!{_>c2dzrqXNG^05SK*j~ zmf_n7g9V{-^Q3?JU**m4wSYD{CPpN5>c<@{ick-M4-5v;1ZGFHH!Wkt3E9*07n zB;*bK_q$Y73o_iQU(`swRkym05%+!|wOll{fBX~SkOjUsfSbJaj0ClpX}QWbn7M0E z4-QIpTdb}3JNW}%6BY!#6~w|PP#_<*9{&*pJ_}(bz^(*4TpGOECGfo?a)tqV>M-({ z>9{~FOev8GG}r`iaM{(DBAbq-cFpQ~`}r|W4J}cJBR!Inoy*;pxL4rAP?mf7owhZB ztSz`!Tz4tXLJ%k}x}5GVwM#+Q4_>%wXVdH}Xo8#WJXSU;7P+=_9G!5iBy=?^dUF%X zks)!syasVB?Ee6+V&A?^zY&wJfLx62PLUpwaSO%rdS;Hwmi1}M@>*Zf7|?2D(e$iM zN6YIO(6pnCNB`ZK{#UUCh7tQ&GW_0JaG99y3ZV6d&!1b@Y*rH3Jxv(iUTm1!&3)7i zn>8B@oaC&UF0BOCF5pM;z8+Zat%;4aWJU7Z=KEevlI@)z`2o)Yu~3QM zCyW#hvc{z43@Zrkb)Rq33kMZ4(D|#13X9~Gw2F-?Tu;Y*6z-d~6Du#gqH4nFHa{$S zQ7wYCE2AA5W+`*{$D^B$ni@n{kNGRFGN@`r$Jqzy)p8> zpeE{eh_h0lliB}Hr4`x;)wP64>P_+HdOmVQK8-D z&T{?5mL4DsCq&PuX%|Y&f)m1878?BKt2+@RW9;Z$slJL2;o|R#w2buBJ}QU|q3}%p z`9l;?WO2{fx^t#a=H#Sn%dkMm*G(K<`(oPmi2i)9>!TGn~dAfAgl_|}LWFmamq#nM$4MSSEG)d>TkeTi)E@5d@E zq>gGl+HIZOM^%T%OGG8Kqerkw3`)6!u6u#EF&OzL&NzD|G0SAy!X9=G{nrx9;~hc6l> z3FMg4f`+d&2%kAx6G|48cq&2>8t^9!|q`x0da zIb@sb2O6l1NZU&KZ0V9aV46F>H|0rMy4Ma*spku?7QL!46l9z-9HVi1M~SA^6Ryik zJ_iwCiS;~}LYp7`m3g%Y9^>G)gHru~>Zc~N<0#1etnl#Loj(au9jiU9)olD<$Um{B z@zm5?j+{DF%4v5oeZ9HbT(tE;{TumYS-UCw&#n96t0kXAZSlu3%l8)y^QS6CR@NLN zvFIl}92|K^mwDiB5{&{jJmL~}cpXqsFhW3l3`-BB=*UZ{_EBtE;($j62=5xw^oHqpUBpAALis<9aheCsNh!t#@84x0ML$rahs zd2f*DeI7;{&C@iKlh>WcO1P=rBD$Q!*6gGW&Foy4oq7I21<@bQ+`Yu#Ir%oo3zUGu zPD2zGC(jO7AGIW)ymqg7Yn&6FG9h5DeF3cRu}1C~{O=Xg%L7SBgp7wYMt11gO&1tJ z%uyWJ?F$zcxvuE=99j=In0zGIqo<=$wMaYu4&lM`@~}Qfi5doCUKG^O;4;b$Qkz3c zO1j;)^$x3@QDIUywOXbpfDPfMiBP5`yx$7=dpZ@B~Nod#py8oVbfU)~F z@77=q-+wcxGQ^R_=>yv(BvkMHgpr$PT5Au>21e$nI(~Dmn3yX}msbBS*B7*i*3Zzd zdcfT{s|HCcS5r>JMds0_#kmkL);R$iL~uK2F6_m^@->=C&!A$}34 z0Xg`O9TiL6-Q_LF(jThX+anl-?yjVr7<;JldEQN{##IBQLVq#-q4@hvsCW#oyd_2hpJRe0ngxyxL8`*zx z3ngk5XeLA=v9gMI(txjZUsz-7>g#f(;96f~Z{KA=5OP*ki%hX^TI8N@rO3f<2!f_? z*+3Xrk<{qd&}dYz3`itttuQJMM4JTNzhE!L@vGXdHdmb3A%=xAnpairoHl-bJ%1uD zkb19ly)YYr4ceC?U(u|N)MW*v?dy*i6m zN1h1G;5iDMi2Y~*SyuelvO+EDZZ7DU=~KQ87q#L@%YAQhz02-(DO~;Jz(a!~2{#=7u?Cd_vJnVuxSuwK@7T^RaN+BFR&kJ->_-p(T91eRgBxT4 z+|aLnDfzFEiFRPfDe|I>hc%dx+s5D)w@9~wj?QZbruAg=K1^;D9klytZ#sZXMZ|&C)1XG8`>9xfy_eI~k!L3DtolbRxDzT~QhD<>E4IPF3E|zmw$r zVK8{<(NnAK0?NIqY3AnfwL~ z4c$=MXkJe?fqx?U>paoyQZ1XNrt3_d&nJ=)}|FIrxbA!leWYaXw zgJ2o|*!40soe1!HeK>MNO!h9%-{Pe@#n=AZ3qbHHfxbC(lR|dmZ{12@G53)}17=g# zDOfI<s{R{OKUG zG?Oa_=_yX-iFno3Mn_Av^O%b?c{8>~go9@MB(s%9JXL*Qw_QbBcDfe;? z$Fkf~gm?13$S(*E&VIdS_P2~SKD^H(-lCfhk;*Ku=UfB||1FxLqN2E@BnBkHp|fm9 zE%*nVMTpQ4^*yaXcQD_Z9G;gs3Z$3$fvy?*1;&G3hR*cv?)PlgL$I%FK?Ua9IE%)l z;I$y14Wg-u377;AzMIeN744fb?^u34&5wZ5`?}<&{6C}T2nv*jLRL8y)0Da_Y*jrf zQ&8!-4#o*PuN+Wr2nmrW3Y=V=3~yc0X}%q#84sNvue8aQCTyIPDVpBskM3d&#Tn|j z%Shzq8$)mB7TG=o(0@5X;z&SLk!I)lCB0SZ!g`28k8s+@w|(P(7Fx}J?cwW$GUUCA z4j*xAXQzF={Pc|0lM|+sfk=^m(aQPu$?q&Z#T2m7l;u!>xLthv68K33gHJ$b_(UwiNZj|yPM~R4R?CRp-|+tYRyKm01&XfwfR|Wkv1D7?klm+HO;X}WIE6H+FE)J{LzxO zC_1Xwn1UK~!7I)q^EniegrSiJ#2ho(53l-if=DkX39u;QfGxp4KkxZRDFBeAcM9K+ zmhmhgQ0zWkic`I`Ti!SOgF+F_)#JY z%iPfEZa5Sbs)!Jhr%Ou3U^<0MZWzjp_kL+<-p1&5#Zw@iNSPUXTaK0B)@R}$;r5jy z?y|2qRzL>i%%m>%JTe>(vH+$eypSt)Kh*#FWx?tc<^_)LGT<2@hJE1wU865Z6Qf*q zj!039w{-yG?6cYW`7+Z}b3*~bU}K^bt*4`w450{d7&*lj;>U3o8hGtlTb+3!(h!wN^t}u0=#l3^^Ty{JXLelxwwl zA>;|>u?5fp-nVFjt^C8ks|Sd`z#y@1xR>umTt!3us6_=4WebEu+!rDOE?LSW4kA~v zBe_WS`udQBEjR2-_3kjcqx@lYKKJy@!bC1KnkMn@Fd20GdHN2^+Cb@JDC(9mxZoAB zA_BHFJ14iG!ZP_<0@mjcCxV*aG09k8k)92Fo`~C89>=nWwbGR>0B{j+}x}W+kMCsk{yR%h!dzv{gTole1!V z=8ItQ>h7VpNcVagry%92LtZyrgTM$;T+7}0{2vAfkOBIee&xcCnQYb)^Q%xgm z!=-m_o|i7B!M)m6O@SF6Ice!oXZBhrueW%XhPeH~P zscy$7Cc-DZXJKH_eM(&wMbUNN1_3$hy7SOD88|rD*x2zPi^H>`)n}WL*m1}R#r%npO+%>=Xw=~ZaG$7hSDcy7Xuu}`05Vg z97LQ{O(}kzup4?VRUUA-fEV&5%s1soQANf7Ng2Idy~JXFCh%$8qK1;1Dxixq?AiM= z(Aq8PbpcaUL=*)3U(M~fIOP>mUCeB+C1n{une4V(5iBJ`;IRV!?E`Sl`ns(RC|-{P z?BskK!M(cl-rKrjvIi|k0CSI;?{_r&QEQ?$^et_z1qJ1!D?8otHXA$+R|q18|NJ4Vt~k|AU%) zZ=_{7^;nF{_WIk$;g1}>Nlmb#f0pXn(_*9pT|9ELf{%L*O#Bd?Y!1NkhEu2UaldpZE-MqsS)|7ZkG(fKF!V-q zRhu4@oT4}}%^NLtJosu%r;NdBcQ*w5#iQJI_EoK3Mbok49kR6BrGZS*Y^}e5$?l#m zV#j*)GLUEm>nEUSfBq=+tPT-4Ifb^&PlDX;?lzuM`hPHw#O-_B6N2F6{IF2h5ZAEk zC5}k`yH>O>$pQur%#ygWg2Ha{X1_Z4TO8ihY;Q`k$8<~THSq2Yb+zeog(CzJ#8IS+ z-PDW`Ur^EX8Eo@^6cWlWEbSGrwN+CP+zr)p(6?u5eYmIjPNX;$frC@qjR^N30W99$ zPw*0TG>sSLt|QOM;4>@E9SjWRs%l7d1;W+!RY9)q5&Y{~jX z?j-)Ay6Wq3quFUsodyQF?WKrzF#jJV#s`DUlIDkWbwX3V`EqZYP7mX=Z5Hr5BlrzP zW^1SaizXh;h$9h|dO+oU71MWp)Q)*Y)6s7w$mMv=(sw+@RUudN-e%nvtS!VJko!g_ zrTWllxdDo&ySlw@_1V|IGc!N@x2G-)brEtfA6lruS4i0uzJQ~p&r6u*SlEx@3)bu3 z!597Lmq4Yf?mNWZ8PY%6U27p(^k1AZaQNgA&8@B`ws!Mfg7LwguiOs^JaE^}03iHd z^=`ND+lo~(!jch}McnXd^MEm@x}?FSqtzp>&Vcrttbu$ibD{r8#RQ$ogd6fJHqKi4 zQ99Q*-pS*1xdFdcXLNLwgjXmp<#g?L7h`hJJ9y|$XYaINu(WL6Y#EuJ-o6hB35lXg zj`{gBew2(bFT41O`?HB$RE!C=NJ~rRABW*#_o&<_M2Xmm1XlZndi_-FVFsON9rgwcZ0Cf+`X*|+7PapowOU)PyQ~6d&TQhq;^MY zE#f^%{(mZ&J0!&(RenTH z#1!0cGlsEsmZg^*q8Xo>@>gf-5cSTtWibiSvqN0qc8|Ndy{IUT)KO9SVHi%)Qiijbz!01gG$UrUFcxb(8()n z^Iq*vV)~B_A6T>hRp$jzSjQ+!^oqKT1I&@X+If?MCMu+#?`^xzM`s3sT>p5@OnCUd zLGnrdFh63c?50{7+0s4dUmd|eKjsln>QhjRW|8i2k8bV9zY{d)cn(HH9u}pVpdmo`!DYTX2rGvbx3p_9;X03()#oU~%9O>W$ z^Y1weNvfkt{5#@vN2O=lxFU}hK0=$N`l_q-g5hdLR%2bJuK;*0a#FZ!bSYDBR%+I< zV(#Y|VHu+-zWoNiNIIzEKUsZ6P!n-sGReNE=tM{qX;Yz~mGGT4zS@6bB4<87kDn9g ztl5Xwh*3O%?_Z%QXcQ=2>*x#Sf!^MJWU z!%&hGihr2D%-E?wSFz?Zoc3Hg$&j?SRMOAyDY5ajxTsV!2%oRVV41fxum}XG&9hN~ z0P+}+dUvMp@BvYqRw*aaRr2{YcUjiwsh#7~WBEYG>~$;?Z5t#MO}kT_qRK(lnHz1} zxHD1Mu#VO6g)=by3jBE);EDy4ln!pn9yPhW#fGB`WZLx@iP+m9RLfQrG-u}sUnv|bH0Fcq(n0?d~L1>3oQ7u{7*=-DO>>vhiC+RM_*LV z1}g@LPGX>a441z@{SzOjzEM(&HMBA^+NIdQraXfNIb>e?{Sq>>J>6MlmRsvf05&s$ zsRzMvf8)#hzq8{8x={qwKRzjI-Crc*rTPNe6|)xZ+{DllM65D0h2-t^aD8$N$2N$A){dV(s3HoesvG!RCHFN+Ytn zU!@}hQeTe?@-O_+s;*zi`FVZu3r#>Pnelf2=)m_rKm)Ko+wtZ9P&OG6pUn}ZSm+C-^UA54xeqa;hx}VC|!Y`LvNt>W@Ng4TAkiM z3&C!_BoXImC3W=ZLOnV8WWDE28Og_w_(EA2d)@VpPMe9TN#E&(;Dml9V$-PzjtxtH zKXb482nw& z8Dj{Q=6(*xEnG8`lte@nNlGv}cX=sJL_PS*)gwF(@m|Dz_s0*U=s%n&fy1=#uBJQL z%*AZWu-O)~B&w2~e3-fdt!8NlX;U~Re9tG|nRT;nvl>wm*{q{Sb=(C6S)OMUILRfP z?C%A)9BHpV0d0ijiTJ?bPUJ(s{C`XraP;}`!!k%AO2(JsQ@t|Me<+{eL*mNP z_NnknDLZpc4cKp+f~omED}F>0GZjH3!5G752td0m!v~}22$Nz}k)YDH#oN+XfYfX- zJVGy)PYsWCVfQ0yVv|BFN{(8V!6EiR|2OCy!yZ}BSK zH>%MUDIaVVIw39Y&!%+cLi?UN8*i?KeXwiT5ysbh2d!fYOf$ktq!gy)h~&)kN>y0` zVBWuygG3bf>+JNbP?#yyKvHk3YtDS1q%JBQirz9?w(6%kbso29GaF`YZvMgC?IHG1 zS?NTm>s%DDTR>nf<@JS53+b!$ie>=d`Il_M{8lQ%z^cfG=^7hpbLnga6lDJUOF$uE zho1QGxSU3fkG+_MMWF(P%eh;zPkJhz5aU{3SBJybBvybjQ2fIS^spyfh$KOs(zCFF zenax#GJ=0~&llH!z^JTQliH03=|?DYRTF6+H61)&P>SwZNu&?7;yZb zMd2lnO0^c&9qay;Ra#{0E1MT!>FhkRSy8W8x>a*smvy!#|9H3H_IUDrvH#C#F-~Yd zVz_0h*tk(?Z}V!<`AUScb^ZUL^nvnDZ2?#>MFp0#J5LUuXWHSXmdxrU(UVf0tH0MYkV9Y3TP;m~nTMrcy~qK$T}@oP^K867 zCe6PLoNdbB0*GN{7pXboegx3Iv5u$mqlZXGmmNuq9VzlAa_nEa z1`rOa3}h-j{yh>t-`$#5|8%W|#+|07Ze;1G&bvqDo6s-eq5--uJDBy(+lT>ea%Yk1 z@t+F$l)_}~%bvVnKBV|DymG}lfP|+#Z0A1xD}f9PKl5D{WPlxOh^b@Nh3f)`88`hM1u9AGrtMiz`o|CTYIxMoD$lp5 zjK!Ukk3$0E)zu=J2ZbcpZq7f@Dg~`!v34!22Es5&s8}aIvO55^kwCt4@07jhwXzcM z2<2egi6NQ>M*RPHF(Yt|r?Fci&{JuBPQV)J4A1VTL4U9zKS7lzg-ALWXc+qaJibwhYWLa6@9TM2f`9%|sAj3t*MY|S z6b?I=dvxaJHQ2CyCo?aKh7q?hzpD$pul`g`5)iqPp$f_uJjW3-!RYNJAD?AE%hnFL zJuLnZ<9a=x_dSOIC|Ifc>b0-zSdUR)&XouU%Loim$(g0IRr<0FVQBw-uEzHulUNBe zqCJWaPL~KqsFtTX@uo{jA>^tU4~e%vP_Mo2aa-OiB_-vDs*VSK2?{sXWB5VpS`Uzg zTE@_WaIO39=KZh!qUM2Y>fp%8U~nT&?6gxAr1lRP_*TocX$fNq$z?*+FOv*<1Z!`< zgg~yTwI&|{Sr@RvfJr<7Qs}MK;Z-jebma#cyNxNudauj-585iFM_vc}j^!H1w?pat zb7y$SK_9$Ypd`l`P!od|k1=Tc16;2g@+KxHBY*3^Il3O9sJC&Ah9`_QynnnbJAb^C zv)v!8+&R8vXhGV&Du!>}-Rzw%(sWZ|hy!V4$?_a7Px~Edg};4psa|JF6?gzgq_)Vze{Y zW}pyl7C$LPUEAjh>twmL1<1xZ$-NhXGiou+qM`|OA1?hj(FRrlcaUQ#Cks2ju#Go? zf`UTrQuNf65|D@YU$}>Dc3oGFE_K7AqeH2Cysuz-Lr!6xd0mdnmkutiQbB<2)i`sp zZ@=ITmbPq(JC3qDJUCHQFmQ2kHu!4f;S>?m^U#(OibF~^x~aO`s*V1reI(R46PccV zM*yR)n8|0yRw>+Q#%gu3I`a85NkE%LJ@ye4KtUaX>;Ji!82)=SK*6b^K;G1>#>?1% zwEWHN;kllXDxOur=s>OC+qFt zVAVBhhFV9sm|VqgmlJ^x%M9g zM72N-7M5he^@v~7FFc&$iIYRC009l*;pJ6lH&^j`ktgW2&gWX%TG?R zDQ>IiT9jOGesDCUU#X>-zaEwtMmF9utGd8hCX#@2?S~8FVP=A#cQj%_#iWpY8E>OX zS%%t;weN1QVFBO3qOx7`++VK*$-8K*OLeFAmhFfM-EMTiCD!O4ms0$&ZHkxMVs#}H!@&5jB?do`)}BF2;1iN?GTmKANtO;mj#)NU|eQN))c#Xg2BfHk`^u+C$WXX7BL6{ggj|^BrO&^HQgoG;CZ+ z-BfRICf6aY&K&P*jHAJ2iK*e|cU&YtFk{qhc5FfxA;`nx8yVx@T>*P_MY38%{F*Rc zV)Rq!+roqTdI2RhCF<8zZF>zZOp%`zvb`T7t@2jPKl`^;0y@5c^NBH2-)rZ|6WuEG z_3jsW0b84cBO`Tqu;}qAeN|tJ0P?)NJlD(Fl(bhB9z%WHC+1lPh)2H6N$KOS(PMeZ zlPyY7d27m{vgfMOtuG-G4Jsg8)qR&zPLjxri#!?;Y^tWLLL8PN{xa9VUo2#sAK+-v z8Rj*gJNnn$k4&aOS1~mruZV|rl1uRfHdSHK%kzm5FIYC%sOn~$@1LFCDx5aLyOlkM z0a2RwwaAZzPtlV>8zw@~#gH0@oEKjc>-b2BkC~Y|TQZ#x6jMYokD62Yb~S_=cJ_vs z#M8q|Fq!?L*UPQQWSlQ6YL4eWybH@qOSaaxJV$#y#Q7;X8Usj$g{wQWidGzJ6npn~ zbNqN)nU-x1Cn-fbbbN2UOitGN?AE^mQ$B#RW}USTkG|tCA6_(ztoTqfq8-YgN=?IH zLjC~(b`=MMq&Hzx?ThS<-+lZ7-rAoZR%&dET>cq#`$K(NQ+*OYT#SP~sSxVF0AoCz ztn|&`t1ZfCt*)K`WzAYl=jq4!mJgS{M2H5AZ(%dqi}xg0ZI$Y@3C_(v();2AwMmvP zcLU4pHC*5kL_WHJu!7$cE8fedlbVlrKdfsx+}_aS@0NTU91!gej?h=iu2p#XvK0p?*NGSXm3tW44`cr=S)t#WkGLaD;wM{hE_wl(M((ghV zF=~fg8jGq6(9BZ!BYbYN$o85_}A5uoFQ(3U8aLO3!U%? z!U)b$!si#Sa_q`4u^!@u|F|VtVt&-xBE4e>_W4M?Q|;_?ZXm`S)v3q9RJ&Sv>D*IX zD>dv!&ZD))wbU71nW46BcGI~YBWg5i&m3;S?;9bIrkV?JNizCp1m+EvU9HZd{3+hM zckh5U+Nxb*@w88`8EYyUgjNxo%d%D8D3#*CqVw8pAT~IZbv5JUf|z$6<2V1BVD@EH zw+XBmfU@%fcZvj|`zH%Hk=+x&XJyE}z1@p$ykF7Sh`X`^RCn?nTDt1BcXEs>DD`4- z-7dFUW#wu{%Q-kl8XzHEz6yLDy`(9xGt2rJ=>4d{cotu!9@EkW;kQwr>2Stj`dp`)U#eo;$gl`O!wNGXr182^4Q%?KhSMS36coHDKBl$B!5<<|NSSbze51LRHk z?S$lSWZX{oNwiP?oIZPuN`Ot}tyPGy`_>lMwm&JMDnbQOQ&6@)5n}#jqZJi3!~n;4 zw}Okjy`2f@r45%!S)E-s5t917<-6ct9U1lr_X|vGM$dJjLFOZq+FXC#D^1mpRb$RV z4G;uPw3_sE^qnFOF9%nifeLazD9A^uK^mA!mjWt!M2VQqyu4@w$0ON>%(o<&A(zVAqRG$dq3t(tMHTw~=^Li?D%3-kPMoIV$@wS4ZVnEBnhk-3^ zr$+Y6jFEvRO8xqL_+LE-ferxjEWz$Mxc=SuD+6BSY{|_fKNLoGV~UA=4i1y!N=ol$ z*^(xI@YM#G$BHz_kK^OfM!6#6vzfVFmR_K8^e$zl!jPc0(7JFug!Moe$Qc?f;R17K z0kgY-5>Qu+|3TPk0(1AD2pQ~X85v78tO($DKZ+B7UW_Qy0o>_h4|hQWI8rnIMzK?C)-ZW99(%mYYbvpB_u0~QGAAt-n;a}BvT4j3Io%;+ z21*tdY$o@BJh`&6b1%xOy6)80_Apn}fl@q#hQ1H?1G^aEjtXrs%+8_$LQ z{CIFk2?q1ydBb61r3ekQ=|Ez5CB(0{i4NaJ`qXg6`O|cvj(@;(Q6jad2#rpW9KXOQ zr*(U)IX**R%oXTGM7|vq(K>SFa=wS)9VaKHMA_rRs9v0rQ_o5=JI{T0Hot8`s8sB{ ziG!$|BeGalJYMERr>TStNbUMh3I&2-Cj;yP9Pfc%vP6$l%_mz*9@>|<`ix|(BWw7K z8%ZH@Ros5yo)Y_pG8BTG2YsvgSyRoX%L_M+t|TQqGd}2etdK+p;!p5KN5<3*4lJS0 zmCT~O9k*I}8g<)6z3J@m?M_FjU3$bgKM(J1OPw z|0y9M2g#=oQT*)&!R5cxd4Pz3SK}@V7=BK;;_;T~el!`mP3{zC3+s4bq2xoCuArjN zl-|GtnFe|m=4aZnXcz93qd#Ydke$<%O!b1^jpbNssTaX?x8AKitPF(P_a=H5l8VN+ zaQfKLkpTsKb1ILQKpPpmA%Q@^#-H#pGEWDaUg3k8^Swr>EdzJZxBwmWmPAdU-Nrv3 z>wDSnA~j!Kg7uA!mSM$|=cZ}|*-8DX>ZGLP&z8EBf#O2VrbdNxXPr9msCm1uA4+6Q zOn&~nV}+cn?tgTS${7iE?en@n`&%xNd*mcNRre%ZQ2N*&S)m$f;=`Q7C(yfsiRuuzc+U2c0B0fz|m$L%LK?2vKYv61^F&F|@x1qI&v0)5k_a2noN)YG~4 zmfrht#KZzX3r~Kj$2RWWZ~uZvUv6ao0IB^JPplwdC_+vEcu4lWZBs3i+8AvhoVj_M zC0Rf5ItPbAxqR^id$v}Xd_(eROt&r2pJotvy z@ASJ-l%ZT?!olI;V98R#hJUvAd%<+LM5Ltp?hDP$sfVsbUDfaOpFdxGJ#8+0{~m0g zHtP}5%NefwOnzVvb75g9edxkbox0=nQoJv0@i#^kAgABpf}B!n0`C0HE2?|QQJBOM zVopWYo{n-O4=6OZUa3HzJfRCA-dDD(7gpLqVO97q!T?Zx{Aeq3TDUqPc4DZuvAoRq z6~etjWYQ{q^lPo1Aj6Xqc#%P<0oAt!OV{76W7mME+lMfp-L_`@HtJUfC}#i3eo<``z<{d*CBk@Ly@a=U>0qIL^{qWU{OQ5qiu_sJuW#hR1_&Z96~#Zi0&fBsG%d{R z>+k>ZGu5rHont@YYc%qtf_#Ebr4Z}uPaCQPacW<%FM%27f6|Vdd0p?@kocb2j%!uPrFzNRuX?um0_5^>Y4r6XBF}=L*YiIYz!P1G$3(fjH;MuK? z{{hBaRk3?2q$F?InP|6)RZ00st|;7GwKE+~7ra5-*RCs1LgiK%d=1X8nRRnon$2-U zYV2Pl1uDLw#(RF_Cn$GA7Dn1;2`q-4Ikor+5xaa>|358pjm-0>u2H;OHq{>Z60drB zD7g|!-?~HdV-}{VMfvC%Ap!lTRTzq!-=^6Gmn4*wsC!q_Fs2Ww?iBpD%4%SLf*)4-Gwd5r=qea}Xem4*P zRZgJ!lHrw-(!+rnCjWqY)!ay4HrR)!HN(I(H>1~W0*(JmvyXsXyHKJn)i{>6$U2_m+kN%FQXm+-PFd!oc24Leb!C!eSkQ* zf#APzwZ5h4F2waE!nuDY$*h~?JWDZvg3#Idv&2Ja28D?L4QSgyOc@AhfC=Fd;%6L+ zon&B&5@cjqRKCF__=N5JB2+C_PQR1;e zf#+sAd%5OYyNo{h8UV?C@9GIrR4YZG6KKb+6lnhZn^FS`f4eo`e-N_Dg|9;&zTYoys!4tgr`O&c>^o?h4y646TG5u3!g7QxBPZoJ7_oNIei}mmu zERz<4{zuy-WW<`*UMS4D-)~l_(|>T??by4QSm)mjJHQvVo`GOYhr;hc1XxekGQO?y zwNLF8o0rehx%2dmjr`yoPFDoikK1d|3D2iS^LN{A_3apy@!Q=cq&TX`R zb|AKm>MDU@&`9kt3(pidIja`w@1}3EQfK|c&A`~0DC-ei;pnxO>fv@F8u^YcKscY- z+KT#t7m(I!?@r+t%Beo6nN7y%IcD0kD&xVgjSh&6B5Ez^_o`<&tDoTMVDp0{-=O+) z5dtlpshlg!6jP@z#EHfHIsvPzJb=@(xjgaw-j7^XUJhI&V(@b-GOp8ZuwT;c9%`<% z&rO8dK%>F0YbSo`znB~vADO~I_Uy+)FMP)KQkeX5YmH=HSAF_-7U9UJdC~y^-#|Cr z*V{uYu3G=bG~loEab&Q48;fG<*a=hv;S6vT)SS|PnnUc!Hnb@9^1(S3?9po06V4fa zw}Y4>HXmnqCvu4+cGATpCBMEqeg9s_d!y{6!BeN%-pNFzxEyh3IiT z>6pR5_vwZeRnGI1gnA#OMy^M8ge32Z^vVsS*4E-nNALoj4t^~nALn603d!E6vEVDy@%oY3(FY|m9?pl$ z>`^h%4C7zmH_v@2qk-%`2+~{(^(FiVu73#u3jONjht-7X%iLh!VP#OUD zxC|!wjE6mzCm<_EC*suU?CbH@myV9RVy5eMsu+)|Ehttce8q>x1!Va z$RIH`HlnwXDe~is5TJoG&EUQ_STV7uC~HnxNstFR^W<^Kh|{WFZQnN-nCnbE6oD{ z$>{xJ@>+x_BJSVINjvStE=8SSd5iWW$mj_BStREe#2ab`++d2!Ip+nmp6v%;KMstb zzI_Y#>kjtDeb)a{uvb(+5Z*np{c^vdyQsWe8p&6Bzag$rP>3sc1QdOVIQ$5%!48hM z{^6qC#{Gwx_tJ*57#W|hT-H9uUXCsZT3J2FnNJv#T45I&zP-H1KcK^IC15L^?B^!b z)wzC2N&8wIAA#fKXnQ-ftV~d;K^nBvR~^->QC_ZHa8nrk>~?~vIU7L-zTqi0>0jso zT%VP6Gxh5rlc0F8+qoMX5qh`F*LUarJC|_|wfimA5Qa)uli<8SYs1sJ@vVU{C~hCotX;php_O~*#^*z@l>mbK1}%|@bD{N$31pR zxgV5Gf)OaX5pyL^XlV`A1LiaS&~c&6VwrR&|e0PfLJy?Nbf6 zt5JY-Px8Ie#UP#-=t zr^$w2sLZk7`2QGc>OJ4xT|J;`^$Jvo9b?Z3TriN=z{`+?NnO%_b93H;Rx`#Qo}sF+ zUZH8%|A9?NH88-hExpS2(dYNxq0S<$>+5kO{w*R_;`7USOD`=o3G2k7%<9}vVmg0D z2VPug0qrb7p_*ydiDB{piKs*cIM$e8%kPrt~mgt?2U2QXm z`}DiiZB1fZnMZ?;)(+O%6^QKf#H4wT@IgviCg^(pN|8;`G2ebN z-OcdoYpI1j>8|mCQ6Mx9BLaywbAZK(ZQoXgfOo)X{yDyUTsx23IxIVvdHY1? zeFjG8!dOu~aQ}Of!tKEEP-{YeN???ci|y=>&i$Xo5#P-@(kd#@DLwZ$iuFVOA7G*( z^!R~8t|}uUnr(J`)LK zGP{bT#L=~pDCKY@ZrT}KdfB!6+JFXr3~o*)pyOW-C0T|_as=Af+x_}|LxAO0D`}V7 ziV!fZZP(Xt2+Y-`cpYQM@6LS(x-33Ya~=g1mnRXLm=F(6o6YshPW(4Zo!UHyhqX6p zy7MKDX#H859-{7ZxTN$Cn81|J)j(Q9p#*XB%uM2;mqh0NHRTOVJF;@CIIdZkY}(Ig z52)tj-x}g9P$rpHX)(l;3Km^`uD}RGh9&|qblaqnImv9g73e(vDcps_8#!Z zGLps4?vqI=^Z09<2r&LHw?3`%=`vPP^XiUHCAB^}I;wF!U@WYB?V2%u5O;xOoCJ|8 z{j60}sC9`k>a^U!hxlc*faG|pYIShfg=@QObtlKy{*OFM!8#2ATBV}D&o2S zJ*V6J_yXO8+pcAh=BLTJ0T;=_k-J*xhzNI9;e8SN&Ew#!1#cYmd(?}Ak49Br*C_TK z-Gy6!PV0g1y~soLCf>Ie7A-T09@AbiSzez%6RAz`=tSw;o!NyA`AzfM1YX8|0PYfy z)1ph2mz8!=w~g}X=mBEUdTQVfp8B+Ihkqh_RC)xC*~65ZV+w`jw|E7fjr&29t5RQH zZ)pMXuLAzjg2A5s86u9bHPub``rut*Nv*seM(ODFFVAUsj(*& zp7omEg?x`klC)U!0_3Dhg}qTTr{-$v$FT569>3C)(kS5STNdvCn1-4gks=I{Fl{qb+a64Gt0|=lh?vV|F}Oz zYRhoha-M>SVkzNXz!e&%`NK^s8MqPW9|#3(PwoNm?B;y!TFRtzikYeDD-D$om+7WV z)e~4UFJ1t7Sdrbiy4sNiA@=i&<&9xGK4O^e^94lI)-*r|?Om1mAODpPeJTMk&Fk1X z@>-o0RN}btbHVSEtyqbE43nKoZ^#j7mLprWF+F&Lqp z?v+S*d)x3S_WeK8C5HEV7NM^1L9Cl3JiY0ls+#4>n$y;o;1YH5ecGL!R9aFjV{pD2 zeEB5t;bkz_fJlkr#=z2E{fdXfm#)B^{zQN*Dydxbh5+igfD1JEd&UU;EBVge0*5$N)= zaU$r{!q_Z<3bAu$gf(^W@lxfuzEpW<#pvLvon$~xPLiQM={tvaF{ft6>vpHxPe;bo zjGU*!)ma*9978byuRVb$6W(W2KK?IZz9o>6k&yt(16+Zsjg%lqY*8;Lv(ELdHu~4T z{WFBlt}ZE4Qv@xF8FhqK4mQ}1daT4gFIuIO^ea`}qD;TJE}|7+&QRZ-ID6X)b_u>3 z4<;TE<$ooHrcC28E_o*IV`}RPu;6ZurdsC_fV-BJ^zEg@tmF=xn)`CWtMpKXObzqCiBn|LxhEUY%YW7*qo|mZe_6&KSy!4@$lT#(Tv5cOfN2{%n>nfo#4*~4~!p<0jy31Y3QnwcAyf}~Tc=CSJO|AO3l6u?1@0Mi> z^$xt7xP}oiMM?1SuNJdn_3Bq^MX1D5UGCGvLBoYMp8Q$`@B?+UnUw6$BtousOj-?m z5k_m_v-SgxvW5$~AxqJO`VEE^ds(D|s_f1`KCt2)1xC^swfGke&Ux>mRW2Fd?&R;5 zj-7pI`{E-}+qTjV=9~E3 zVCE#qI@3}R4M)|`#f_X48RY;;6;;*MHi#d}!`8v$%mdg*w51bu zz1?8Jgfh3m&rc3u`pH{UP&YkvGCq2R6q|FQ9D#t}V)?z9kJxd1_MXRE>XEw<3i{Z? zU0meHjI2$cvf(JAOwFgT6L@R_t5oo2&IW-it8|o=ag}ohf~z5V-feDk$3ni;;sLEc zR9ZpMo$4XPF=>!(}DBznh?7W-IfS z*q*NErBzIt8XaIx;AvZE7mqZ}t~0c>wH$y{1G><5o#6IG-eYud@@omJC+8Y}%m$V-t&F(_>**mo(IPFIh+7* z96(Qd5n2K;`p_E2Ics!ajh?;RwMUCT(^k!e9M29}z#f6k&Ay06{WF@SjvL~o2H&?; z;3!By*Daj9s<5KM!q5k}bZwtK_CkQmvD9HZ)U~4+2(wQOknCLEz76>+`gvu9FSLrG zbyMHZxeP7UJh8<6F+!9wq}Mtyh&dj|C&U-?(Rm=$=9RLSZM2sm*zr6W?X#g%ObncK zSd-?#sVOSjF;#RC`ej))Z+y4+;;jVj_Je-mb-?os@CYe* zxy2NCI~&RChq-f#-rkka45^5qYs8_7pY>z8_BS^tP-#^}X^w+j|(Y7ZWdBcu(C^=30 z!uz?Hk3xyd5ADjvm9rHtRm>*|aRV?Z!@W0xmYX zT1fe4*sC??OSv{(_L65y1!wo>%nx|$tBY-k@RhUWL#(O_FDcz0SJ}*BGpZG;!5aI{ z9rzKdmBrxCoZr?H{9XSC1h31}zVXG`n(K_?ww79;t4BiUW~RKt|t*FHU; zIY%>;XjuoY733Y3dqR5ngq+8Aj>K}@+p$sEOUg&=8B%Y6`X>ogzrTydMc&+eYxITz zPJb?YAdYxaW*(bHx;+>gBW)?$vl1b4QqNL^nHWaVG-y#IGTIDrF;=WEk(XQpw7>0B znv(_6;l_xmSt8g@ganhkY0Tmj_pfWXJ^67|xkNq@Ep6?^PXBB!gtK+0C08opLcy{o zk@$p&R{fj9A*YCwH&8ScOkx6>4#nX31)7Yq8y_Hed|pvq)!wz*Za!7cDKIr%$D$QW z@rgpHMxYDGyA#o47fFf9Dtfpr(&!;MO^21aq^}9X!om(tw@P%&L4-qE&D<7Od7NhbI!AG& zSE<6YY@ixb)lgzymV20m!NKvq>^0f6*;(F=(7EodIX=ibH<|Pw*Z$iw9S_Jk_=D9UG)AcA5n{_5c^_9zi#uS#3($48M}9Fd|J# zWo0E$U%Zq3#c`$COx;xNDd0SrZk^|fGS{8+r2FI*xjz(g!#M=i(Sq_`@_TQ)_Qvxw zvvwzof===Z%DCSvk_kHZ7zzx{kS)>5*P85D#{D^`U$m@RJ5}EVOvGj&)}*jahgPqD z-p)&tAjLQBygTuAU?Qq7*totC!6+vMr@NC$$#P)#172;`8h(89YO6WNp6AIN)>@&Y zytFrl%Q3nVE&qm!nlJ?M0Q4YSi>UPuV5Jxsr3Qn#x^0j`!FuPNFqfhDZ)?Mcf>qOW zuO`8u5yg0tD+Ylj5VJNhZaaGa__474qOl(A%2lyF!aO{Ops;gKlde}2OO_J!c&td5 zoRCFlU7(O<<+8YbFX-85WvS;mY8!-wnDu^?witZP%sHX(AN-yVf562{9uz>~#np7w zxYv>T%rD*Dt`Faf|6L}(*Bkq`VjHh7^0nL!r`tpVj^^l;B8A%1V?=-c`j<8BMv0k_ zz&Fs#?+AIe1~#A#oAw5Fqo> zg;}etCW#BwL2-&ZUgtvK2Uzsgz+7}s5@_%*l-blb-&}7*9OcA9cV<)cFa1_}jLteE z59V7UTFXJMw8BL*@p}VfH#_4ci!mpx9wgUL@VS#Gx4f_O=E#P&GdafJ|8#3S^Ue=c zRF1<~XI&Jzc)7D48S0Web!VqlXsX!m%a67k%7qA*UT1_whVfL+68rj>E*+sM5>?Rw z7M;EXJhZeoZC|X2{$h(4x~GpX9S%HRRVxxn5l2D9+0NZ@seMnn<6{MlwUd*$;Z(1t zMG|DpbHvue<1%aMDi%3_b(i@oWf%^At~c7r*Dj|Wy~Tu`sfa`Fpn8D?KpaZ_OuceL#o_{$82o1{r+QC$_RaZ(uW&Kpz{z&yT@Kp;K>#*!}VOA zG3=^t(y*^4t2O_V?gBdO=TF#q4gxj|^kTP%yyb$x%CJ?1TCDnn(ZkUFbf)$| zU-ZUF%j}GRg=@xIcns_BLEQ@9Mqz#%G9J}fTTV8cgrK?Lvi^;l-KD?RoZpE9uy67x%4G;JM7BiR7a%O z7Qiqa<>veImP2QEZZQ?0MHYq5J5!_yyw(6|UR~aL9ac#BHR9sxLe!Iyfw5pHaDGWQ zmYl=UJie|_pvq=$q;fB$iHOhq6~lFZh&~KzD|ZExWKUB3^*>P=*t}siXB*(_$5+#t zWvSSxzo@)TWpiR}`QiZ`MG${^b_ei8t)XmPNgsun$fzURRTGw_vqFS&5k4qo)6GsK z$w7HIYw&w4W$VN- zC%?mgVBvuz1S@x&flW~GB&d)ONezD#e2H*VrZjCZyCG_0Qv^&?uv5;P%|< z;n<`%PdMcS`A(ARL9Yj9$9$bXpTnw^W8zjIngvhc*chjq5?{iDf{o>$XIFw~hssdf zNxRwy0EkiTe?>rTPI<8mcjs7k@g_=*)Mvc*8qcSi)`l=_c={Z8>aw%4PLyN2#-0OY z#a$&6GFyp3EWq@TjBi4>&*D#jOdr>bt0)vN9Tirm!{Lg3h|QBw7pOC-B;I?zxmW2W69!rtcgFO}JE0U++O?NeimSvNw`1mjkLQ zDq0s-IS+<{2M=zV&SWZFR3w-Bi|jXLhDYPeA^;s#$6s%<9V(t`NczVfi}5V)A|S$KQVb;F>)e<8#kEuagfY7NnI@hX!R>7Y#b53wVQJgSne7EdDCht>io{-a)9np#p0oG7WPsR75y-@V5L*B7_S&rbTl!ZbP0*{o{yyrW7cYRi^b*!_Mq#!U3Fyv^=}EM z5+Pt<&=^6BbxTc#vnR?u)S0{tHG32Jh2{I)Xz_hfB#kmaqIfjJ=>S(1gQDKDj2Mw? znTGQV%W>vw({df*>t$tjgZXCH>k`%+lTQkgx>vbG{NC?I&?&LylUfeLohqt307}l+ zV5wbES>aK78$%O@R7rA)xVXYJKs z^1X%=Q}p7zE}EWTux-;pH7w);;R6HG?QgHs`uh7{#0glxbF8Rt)4x9M;PbjTR@Lsm z4ks4$ejZBBE5c(vMF2!hi^j@E#-fvBC1niq$X?V%$TM!E&fAa0e44{h>ER%`QA>Ae ztvXeM@&4I!clQY4(^ql{?3}C28dy26?RlmtH0!vuhQb_-jEpY4EFf!*t~@_nVILlx z6IRhFk|~b!5#!RzpEvaJ|I!;EfXfxDvRSIJH!=d^<%8XN#=}URSaB~PJTu%&-c5*J zepl~(OAf^L@Q6eVHRO^6_*eT9a4pqK`o}LD)gDi_NR+Skh8cAztb)K5m6f_%Ki9YU zT>1t)fy4Gqzx~#wzs1*kC>UnW9vpVj_QyH~~ zhXD1Gwu_U5jN0=~?ua9Jz?kZ831huv5Mbv*SNqKjk~={zE!~EXct^eqn>tbXjyj`11YY-srb&n%}xthg25O zDIh3_52}}FxII>Wua?^o8;Mv-?l;m?SmE)qon3w`ZXky=URc&oT+#I4)#hACtNqqBAsX3!P zGzdE9MVInWfDvJDrs*o!!S+~QngQlrW9mdAFGQ!We8vm*rk%~Lo?G7t|FhCRCyaxt zqIMdBjJDdA2&7GBIRuE7$+w_+yTkc%MLkckpw3Y}%uSRO2@;ECX~g7-biY^*}tWOu{I^}L^!Z4gQ441N!INYSega^Bhq zeHUTVA29qMCcTcj~diFMV6;u@=f8<%TxHnK(nu5^g8+&q|&9q&J=(1$Sl>B?x;+9dAt23A>3rngfAMRI;Cz0(ldsoVty= zyW;{r&=)qJ9T*LpL%KHR_Fd~zbg*}Jc6edm?0A@uKc$H;Ep$+99cq@pGhv{@?Aco? zL-~4ZRO=4_qY|b@yZCLZfFQBJS38tO3qRcKVP`=ar^`d@38?Ads})w|H0UnuUcD_t zOw+|si0D2@5s1h>!yp}y-AfKsU#K1ln8_O$y8ka5}W zYrUGaCX^wW`C)suq7x5;o9lI0>z9#9cR9bIKIp{3l93`qvYu^^P3w5cC0q7DBK~l; zd>FHKmG0iY_UU9nNdxu`j8(LE8YEm~Cgf@Cr3aTBe^CM2+x2|8g?)mt(ep9yJoY{S zWlZ=aw0FlYmiib0_(v~fAC9)a|9E5snQJUHT?r-)_dJd(Jy>6g=;&c>j3IO-B~1`< z+P%I)5v?3}cxyTqfJO=?!H?6uGW6Y+z3iEeP0=H`Ij01}da-q4BcKVl2O7-GX40KW z#OW+YvHUT_i^k)%hq0HJCjf@mQ77BA4o1WN7^R0-P-P{TRWkw~R!fs%C+1o+@9mjd z#@Pma(8&IZL){j1@kz*{=h}Jk>OGA7@C$!`fY8{=C2~>Jk)(Z3oWu+2~VT5c-sB(DoQj0K03oAu9))IJ2xqB)5GaGt}& zc3uci2mn$o2kQXexLhNHcxG3so31L)W^Hd&46%R7tJ%bN!y;*>XSy4R&k>)KAB@CO zMgU1KNpOY8?t4j>w%p^#&eB>17VAIXMB+P7Pff9;yz7GuXAg9WYFBNSx*oKRFaG#A z&5M7WE_qa69ERMGA_WZ9X;%pl0(A zQB`327WIDPdt{<0;|X z8D?ccVly}V%s*obW+@D=(ACXOZ7Pck&5_zbc9klSHLd_0B z6q)_HxHvB;TScRBuF7r6f1=LKK_$}x$X4TDp6*0!6`eRXR@t1EZ|_xARh=HUiED?Z zuu&HYIti&2Ymk?l^#QfD&i-uQxk?XxAkcrBqE(o+0vgMxo3!M=b0@cUYJ%HIf!=@b z>rAEVGpjRm-9iOrVcWTygKX3qzx;yX#>voiZ6$mlpW`~cOV|^`c!0AWgrH2T7;Jmh z!s~80E~1_i3U{qzrSM1$2u&Z7)l{gpw})w`gDyJafA5@m|Hn~DYobbOQ64dw=-Gm( zqzTE%^yDNlr)j@}X!+ttun^&}S?~7q?lGv>c903cTGoN8rmKpIibRUaavun~@r5wx zG857Mq1W8$=`mMZ%1NaxM;@&9nTi~l?MbUW)a8Qm=@#}g_U?O0mCSxQySG{ z^HB+<4om?2C<5@awjvR6KT3=0@*SuRrQoGCmFulC)ja-Y(lbWHnN6*wrLZCiv6?DU z9~$Z8G?S0myPgkFX9GB68ztzbK3CCl&Dqg$S(({vYbP1}$$JRG45R>iBL>E1bUg=z z*^SqK!mcJO$i7!_9iD={uL~Hb>Z5H*NHO&XVIiyy?rk2n|GR^-0Pk4gbB$06VFu9! z#Q~T|(YVKIyTbK^((tffyOX$oo5Mg87LaTaISq=vbr-iBtdY~!UH-2(ZD>9}A~am- zt~|hmTxf}0K=&6`&rU_XX&zGAYzAMw9;~LOa6Ma?0NdJb&z9$Gl@~PfIb?IUXKln{ zQV5Yr599UH_+!csd&ma?70;S3FiD)(KPCozV;aJwoD$^XbUZ^bCFHzN5qwdS0&!Gi zEXX(PpK-IVTd``mI(?@s0;x#F1%5s6)}L{6UP%5~Al0XASrOua>+^G0!%3rqYDdoN z=n|F?AU>(_G!g{@tIpuM$r#{T9exi5vKN*})z#IK!wZbkQx6q}nFhY{it4{LIE;E@ zA+V0?hFx>*D4Qta70>f;7`T6o<7*X^0=n3(Hk@yUzlBkwj#F#i*`qI)*py9HTE6PAo?&4VT zd+KqfYYLaJhNb5X$_*a)Vr4I*sEAo~9P}S0NL@oURu%>FmeGpP2GC6tY;Je4O;+}1 zMy7;LAsGkixzTji!UT#-@b?m&S8%(k8$+6Zuu#km$R@>`4I~o-aiD@H z^yW-$d!m%FLj!E1%cN035Au2xws~dOmw%f+8X0>SWP82jVhA`m`}yWHzNoP|F91T1 z-tPymfVSSxfL#;?oHb$l(vUDS@0&Hx5&Q7~J;2`n$`e>X1g^}$VSC<}93c5aL*edd zQIRB!3&f+VPC0hFq6T7G23BD1qrE!(nP*y^aAs2zD;?Z~xZX z#O7nrjwyeN&Solhfz%2$l9G=_09ql}J?`Gk(&V<(KCwSoClle_;SwWE+yl9y0+126 zk{dB2KOY18y86{DLm%wT z?zFiaCkj#k^3x&x{o#sExeP@|g0%9`88&x0tLZAvS<3AoOc9MQyM!#WG~Sy?f`EL1 zaJ>mR@Y(%4{d$5m0p1gXaR{f)PP&Qg)|%N19j^N+X=;8|M46rOe0*J#^7z!}jozZ;q zlgTu&sL0H4w_);J#m-)g@+o7uP$D11MUm zU^JYs9yQQ2P$Kh1;V#ZLMgY1dZeS7m5m)Z5y_6BzS~ISs;l!7tPxECv|xrO9mlFF{NMnYnf*i<%=xXc-X&`zovyvMLSzJZyP0f{S^sOqR9@~n zX-5QQPe@DsF#Y_4FSKn1tc^t6ekiLSSF8lswfAt$ZAD`v;BMA4Fb>AFdyY<0%kMkq z1Ryls`0XucfIZYD++}agQuqax$G7e1SpA50@c@t4)yE%!A7uE(En@a`s10-|2T6h`6lJpJyO%%Rf@8d=$IcxrEejJ^XqW*RZXo+Bjwkc z?;{<}Tt7}KOdN6-wFhVNW9ch%S0b&$3e$wKGlpzqv+w(}wU6!F>HF{fF@Jp?d(7wk z`uTjnUeDJH7M~mDc=ZUeM&D0sQS)%e^x4_bfl`gSU_R9sZ~w`G^9_-jtYaZrq_ z*NYJR;p%J>y0h1~O){K0teet`=D9A`d&~HDBzJFFqO?AHC+2jww84?zUX#(G&5Olv zvx*fy<{R)U@U!RQcYYgy=07eJwVFxaCWvUEtFD}cyL$bNWl#%w7|_hoV_-pREYHz8 zoc%c9L4?QLsqx5b{$WXz69*u^_fQm=A{@v~ex&%_cxuA~+!}tfGuq@{{q)x@c@C)5 z%uiQbGDeX`gQ<@>)`f*(kykh`X;6>?dc=CPMUOei!?G0|oHdqOJp7t9@=!b_C4v>t{^_tTBcO;JeR-f8 z(;K&=iGH-4f%x)(caLVh1OITQXOQ(xUN|THvUpibiFWV(a9qnRJBO+huM97mE^ne# zrk;w8jqR2`Z{$C@go^p~s$--RAeA6CHOKKa($o(7tR$Cb-ykEeV4$xaK)9yrrESNE z$fU|jFT#^m)b3~6pkA^jm?QC<=Ojm^Z5eC2bxGT_V^Ho_tY92Sta8CkUKWb*a~4pd z-|=edyB-?91;w!nty{adBa;ZW(e`44ETf+1kNE1B6Kffa{saN<(uKGlqh}udP%Tfv zP7c=Tqhn{Lx+vJ->sCU&{UGz{)vg zzJ?I|#SdHf5fH6JFf{-zjkWnc*`5vr?^6iEpZmw{Lh-e~l$d+w5c``mo9{BWPhxUF zk21j?8_?Qt@KZCufO~Ke1qGV!v4{-indWK%DRgrj`d#uJwmSJ_4}yrS$M(pv%hsic$QvdCoEodA%gkx`LeEG~^V5s0{ykE-=>RNkyhXUH|&!VEZ5p8+()=7hR-E|KZ%?Z*pwH7`89imt$hrM%) zua=jVW;9;B^@5fKHZWZ4099da5i-PS?{8-^F(E%Y+>A8=>7Wov{%{Q}L{;aUGf|{d zzAplr^6An7+ifk`N1U04&zNT{GR7Sf&-xQR7`A3uY}%W~)Mj2tZJ|?{DLPr)#R>B> zLe-Bawq);iG@%cI=%_e3SO7HU?&~=7Xde9KQTTx>6{$B zCwq4J>hB|;W)03l!%%5!aRQI^5FaF5e8G#`N^E#53R)1FZWE^d_(-mDM3E^Yn3}(!n4xg3sQADP#FW zOSJ^_n>)A=**SKW9IKF7$!QJdU=d7teCtxGO+tQY%=D_tbxN|=L!Kal^>#b{p@XZn|lTei07WW%Ca_q6^Cb7w8XP?{E&NJP>$*BH^9%9)2B1Bqu!a8ORVf6z_Zw`-wTtEN(gmghFko98%&uL8`PeYqu$D!|r}S0)0#y zeVDPu27bkoDGLG^KnzGE3^VDsr6NPslf@FCg2? zmPTbd_VptcFSn&b%a~@Y0U0_>X=onT5S(AfK`5U;f26{4HLl z>I27#P(l;CiSOa(b_sUeSr4Tl$5u0QD8{rX^{>?iqp43qlLj)t&~5X+`vqVO>4E~c zH!o6$5i*~}DmFP)qTNb%He+VWD*pI9u>X<}>N)lO!fHYeBOd@Eilcm)w!qh7?zxbi zk|MgsZ}+^u(;@Rn3@~-kfd}W|VoXJa{1Tmitg_h(Cf0aj>dZ`D#|{}@5kfbB=y|%b zxK>4I*jhs50HAWylagZ} zzDwzojT8{kX;)D(3phxwYdZKVg>UXArl&5X5tMXlvED%%{fRwSu_O@c9-E4PDWGw_U#Kl2Fz#sWD8AVQLJUhc39c z{JUb98n@KArNj}cn=^UFs@WSgd!xbustX%+Ve>zQjaXXHB?(ogIfb< zX6=2>%D(5n?suQ=(|&2X>2J=T)vT&9YE%a+$Vs515~3m?AfSJg6jMS#cnrLK)baH9 zpHsnVHv|M^0&`JO1xry0QCllp2W2}0BNGV|8xsd}BP9tD1O)Eza8+G1VpSZ$7DrP` zs!?UDw*gLtLg;VMW7Xbf*EahsFLT-?eB@ksy=#1NG@3Lp%FWSomo5K6!HaD_6{j2A z;7d+>j=3mU%My?JW?`C~RiADYa^k!;>vwPJGQb(#*#@H}cVg`w;=6>B6! z;~?Utlr!P8uR8`seiLAb`Wlpl|2SJ+k%U3FNCt^h9?i8*8zTC{Q-6MD`98C(L7W7a z+@8#^X1fsWTO{JI0@WcGM30+jGNFAf(hI}g1~%bt7LUd?qq#0eLGN($&zp?vQ{PZj zl`Xy{zK9&|xe|YV%T_t7pCxMnE#BSwZkX!4oK8vRn}an#aEN=5!ln3zuK;*;X`%-piN5DM>| zubiih>rCIqxON7WJAalG$M&Rkx^y?Z(>gifL+%J})=oL@bGWru&N$iG+JBca&DSqdgCC$FL>32@Q6~pDU;)p039Q2A#X-5Bq3@7a;$m(F+KK=7t!|Yh_Bs4 z_+>9*iL0@VVK+aetUl=RbIsnhhH)t6r+!%Gscp&n^uR$cqoX`m%7{@PNI67zi=x{G z@71r;*<<8VtY0TcZ&n|@*1v|r*)JI27P+fFo9f364t-j~E!8qz2UZ%6uBwFAk2mms zO(gdO_mG_0A8)E-ihCyvB=1z5>GEsZGGmCBCZgO}T&oetg^QJ*`JV;VGPcoxXzzO4 zMnHq05zr{8Qx_?kZzz4EeT~_U%u&Dh!s3)r3*w3A{;I)rFTt`@ih|M#mlV(82j`li z0s9Hf^QT54ia-4l%AmJ+nJgIsBp60y+Xc5e?aXS3!M9aNXR`OIsw#VSadaeVwzAyq z@3F(EM2*AZI8`ni)laiu$IEXinZHoxQ^qc;ntqQNRFm(LWsP(TCz&a-saD#bG+F^6 zX-@IlK+#8VU8N^u4GAka=@U}+cfS?B3hbAOFjEd%u+}0%fvucHo~5$4U}9@COQhXC z?`Rh~KDcFGkElgRAolg^qqKQ7Huz)(h5PjDLiJ)NNwlOF+UoS>!3Fq+-Oc-MdT*)Q zv2=&Yw~mW19Sngv%?b)XlpvUf`yggzdZ|9rL4zS62qSzHd#~b#c(D8=X?l90;}}2p za>dh@ozH z%gF=xW2cO%JUl!fy+2Y96(tYGRk(;heM;_&fb>7VtkU}pm-7&~a1bdGpV+C`4E#{ihke5bg*7 zhG_it-9hSqUgz%(P(bVu_{WX#^+iJ|M6g@?uod^uE6qak_56oT`h5{TssiHbkI+Fn zihmqN7zN?-pUwifh#4mfsUrYCURmTHhw(*4IQpN@>92X~&#4{+`{!W*gLv}K+w@<9`1k4k*C767B>y#t{~E-9IFtVx#D5LqzXtI? zB|HDWgbZ>tWFY?gYNHIs(J`Gvb!n41OcMgo@P~S3QsY<2Z(N-<@P3eZi*9n0%#Tm5+2@reo9} zLh;T=2H{=@KiTFRY{7@Tuzq28Vjc$-3}WupbpC@a;cM;Wbbfaw7ubps==q-O(Na_1 zr%oiqDP9tvhxWFuDhaZJJZ|t z_^FR+`0|fTl>88dJ)TbgP-X!ZC_ru}mvwD2vRTe|^KqjWeXI3!l&|53srg*_^2uSp z;>q?R427xG_Geam*!_`ZCUKgO#hZ?VGHsK)oA7FzyT{1_p5<`vHJTmt9~!X?>dcz0 zpXxXJqnB+@njLi94$67(El$mW@0^p}(LiNzHeraYK`mP|5 z0Z8WDbGP#4$rZMIK?vHVXqHj!$s}|>%bo*jBni&Ehiyz=*6SfoVG!Mi^Iu#k7ftHe zd6N(bU1-;A`4r>!20>d^s2sOPPs6u4kj$w&?%X0SQc5af-jlU@GXF3w>SF>K@7EFt zR$Y)~dYrKBnW~)42XL5*S zO}^@Swdf=S=T@`hGUYG2it;G2c z*g?W6&+LRUa?%BjK6juF1)@VUrHPG;6uTZr(B0oyeh6fOtK%H;^l4KvGc=Og8<-aS znNi!R`BL~c;!b|Z`l_fP;I)gd)Z~y?d8wW!WkMiuV(EC5(6B=A;^HFPCM)10B$9|u zAA^8eUg*@TF!egGWxqJV+g?pvDAJ!f)lN8h{V`}g~@F4QnW0nUA|NlJfd=5|T7 zGCl0c^4cGTpGWp7^3G-Bn6x<|v|~HMQ2t;IVe&vEzoRB$sG-}_XR$MDT@uDC@BjzJ zSn>M4Y1(d7gfhu8<$?rjQbHc{6O}$^0)r1(xAf!9VV|%g9iJPMn(1m0TMjX3_s6U2 z*rc8_RJ7rqNBPzhU$r237BCW-t9{-~ zcKC9hrRt(=#PpU(hD z#4}bF^#U!}Nr1UAE8?ti@9|>hQj_DGulP^={+w|YZWa=Gea7Zz%3u9mmlD$_5H1F$ z=iX~g1(eJ<7b7g=JEocLN+CQltwd%m`S|ZRsT+s!X@hH9PaOKz%#mzfeaf5S{)xyL zJX9Q-@)qNIDW_;UiOn(LIT_m|jJVI|AqReTTH$>xMjn-bv=mw7{0MgxN=#p8F)P{T zH&P%hibBHerhvz&V_c)!8@!$&U1~XUE?ElgocIGBM@=BVLZZ#lJ$4d=NX63+T7x`z zkDRxPXHE_qa*PKuhm0XBAf<90P4mgd=&F&j`Z8hX*KMiIuCWz?7_P%pu08o9sauzj z9k=gw@jg8vTX}MaTHi%aeg+_2pAMal3B0+3HO|@88R=xL`ILsE;xW?7hOM!D9^rMB znQfNzfwn%HDN)5em)XpUr^HXw*T!SgBRpg6+GF~ZI8PZVK*vjvvmy_~j2NM9rYL=% zRI9`|ZsbWF-`iv2;}Bei4>YWEJTeDg@QzsCtvvG+*+AHMkmsO&IUBsf;js#=na>v* ztug1H^Zsv?OHTPr0Wm7N+=Y1bJfEnAxBg16(XMLA3u^7~Yn);%+8ptM1uVzj+y9{2 zPI4T7SdS@SXRCpWfQHZf@-DK$cKpj#~kKUT;q$j8Y;2uU+Ui7oGVFqfKaEqIv6wqH8z2D4GsU_ zXQ}wtS?cU@r~KAUY61kE*@cwIHhxqYqc zVE@YQvaE8_&ui<#`Jye(m8eN zWI0z(hk}Mvxtxd5S8aJ|v*@h0*+3~FU6P=#L8g3Hu3S)Wwb1%TRfmcUgM^pSs29Yt zY`bgG;{Glt%X}k$q#o);*+n=tP?Up-i)?8A4&ynu?34(>F6ntgqWf3?iV+vF5*axZ{UZ#8f6oa8Me&8jwt?Q9xX zU56P34KL~($~7o(DX__NZ`N>WyjhopYsOp99p5YHY{po2b+eP{V|;nkR&8-^aXqt3 zhh0h&5U*PrDNobVel{tct2HyI1bE*f3pg>Ki_UDhHVZU76IWb5Lj%J;Z^z!eCKUbA z18Vu!ka~Yee95r#3@Z2G#MC&g@GM1pz11@H(7l$;8U2kcaE7M#$aiHM<8y7lkQ~3y zd-NLDT%T^mUZdd+@NcXnTg$M5&UO`Rs>|lz;NNc5IqooDgJus@j@MQq&E3n@8_bz_ z!UknqvQCYz)V^8B(~%esGam@q3FjjxjnCN-G1&BmK}K$Qr12hvM4imC*iEED1$|s7 z#;+bi6B*;%dhHytk=r6m)XEG;c@!3tWON~#1@f8E;Cn5D6)q3kGQAqL`@2hs@BEwf zQ`{o~Q`aw5a15y-&xNC(*i6iLbCfBt<-vFcf-cw$o2JEV;Zgt8cClKuEyUaLZcw#k z*tCd6>6n(dGywiTgPSMN5w-Hd_yb)fs?r!X8m6Z;8r;XQI+_|Dy0a$6h5Bjxk!J0|C zsS>H2WmE~c2q`|1q+I=;kA&hj`XXOjxE%zX>Pr}u&f^- zbK7MDqxupx>)L8R%WYHexHw|*7j)xNHHpJx_Ebj@YiWb|S=_@gy%z0X<(7nd?zDRz zy+wyL!3^e`EE8?P2TXEK%{gH{iu+X219Mm~3CJI{_ly5VpJ^B_){1sLTOg7SN&Z z#VIL;BQGG>RtEztR`N2{Q`-N=*&0@5K4p5NityD_D1WPI|J}a*6ng#6Lw}C^;4fPx z`3z7^v>J^=1De+SD|3{NXiA9@cb?jqA?CO2?UZTs2!sUj-{dG1#*kpvwfLP+9zodX z5$HW7QirrOtWoanXPZ9NTQAytxW1F?-eFks9KFmnyd#NAxU7X$(X8*7RY=rAT1Hqb zsUJAn$@~LMGX=TARy`jHKG#5e0rjMs+$j_fw>aswd@%L2!1lTMaB~4(v`tsT;kyfG zwY<=wM}T*K`#a^8bU_S6kh)+<>ge-X3)tZ!UEZIuB%ae`a5-2qXS%r)e6W({1mnIG zJ6PCS!p@GGxOo?+knP3eh@}UqUFcf%#}qma=M)N>GV0)blqz{>KQUtP^G)jJ9+vaT zCLQ?hEgI|dC^_Oo?W6i1C3eSbK?2@eiNn4~5ua;?_XaU|C+-l{l+a=$qzIuAGfX~vrPR~E(Y=M2&z_5EL5z3~KIC>&}rcbY{s*Die zY9(vO_pf&{sA&iZ#@?Frk7^9>;l zlX*QbjWlRhq@Z)FPm9yuuIo=NT2uT8VxHIf7^D^r^qY+Xu?4*O=+lE>Mc-$>G(qE( zYk}o+Ls#~cKq3mll=S=}12?F3Q@6R!x4%g%9aH!4e$um^;d0_C?e*FlmcJu_b-GNUrL+i8OT{SKpQD3<#V*Nvs=i|Q-Z&im2ZswV{3k>CH(6Aa$+8nsNTB zVC%_3s<#lY%7;>sb}x65nuR((yCDlp(SjfFdB^R+uw?KeUgJ!m-pDJL{IvKFVqp0+ z?!5-xOhJK>fzUg(ZaNX|@teTUy<#15oi^z%0}rQTKhYC6Yi%J{`!gkjl$h5I-uIV~ zsrHZ7LP0He(k%Q8V*aXWN;L)q}TU8xR7cTvNuP>Rn zToY|{`GV2}m%frL=;POZf()J>@!d*a99-1%T8-0?q2rL;(`byN7BkP?;wL;=WL`M0 z;+{h%;u`oGEVM`}wIPnK45BfYzN*GJEqhLK5pITJ`j$e$piPGvoJMjFXs4K3I@y4Sei1>jiZuI`vz&*14SZx zMmTYQY%%aYQ-ZoW2e04zgmPL;cO1(-J!{)+e97u9k}Onub=kMHTq(g7Xybj!ct_X6ijQ4P+U-VvY zPK{a51z;CBa#=yzyIf-T#Zk;xTHWEZDEkDg&MA)4pGG9nkj{A}u+BVJ{XFl2u%5-K zR}1JLUtxsI2$1aZQbC)=;49&M0$78NIECZwaoaIbCRDsx0C*MI|S_PGb}ssha@Q zs2IW#j*5Uj3sYeT$K=Hne*2zAkA!{G63lpWez=8?U-6BnH@B$$J4gAocH&AJ#vNak-pp z>(u6dmpd7X zRfr%IkaPK}!Ly$VhV2X}7hH=cXV!JJdAButLkXXlH4$0CA6mlQsT?-@j}i;SiG}Qc zq-|y$zRB@`&zALunSAjw&2e=Lh?LZz~Y3!%Qf5+Ed#0)P#)qc^}Xh`)`pP z-Dr5j_AkGW`h6GTZK_jFVqG(p=WXE$S$B`TBCWXuP7JBTRj~LpoF_NU13@-pou4ro zc7GlAH}>>@Q1lB^M@XA1F9uCEwgR(GBloU-y^VXG z^^ifj_NSToCX8B|4&B~glH+ZU&`$kE;^ zzn35F7W8PStkzf~z@q^Z*EdHQ!J%~sX8?U5HJWyh`x@i{d7bIQCgvphRr1T!@m}tt zi@_1usTj?dx*y78{I+;!mMD?7+~5chY5U&m>sGe`rM=}Hj4}6y*6IMSi-9Ngxb(bd z38a}A3?>130-iqwyPEa1zh1CX-_>PoA)%o5-#%Kwf(09vc};G(*6vu4Q@y!@VSeGnl-^B*`}dXqBRB$9=?KF!00R zbWzcihi&1`)^yH$S=;uyiUSB3vXm{3}32^3uc+np?PA}&(4tGYhKP?ukXgAf{;5Kem(O?ImFnuBu z_}mIvSiHSB4h@wMlgrs^*Bx4t4igcFe3~m(LZehG*J9!keU-Y*1=aw~svR+DH^ies zx#9!ES>E{s#ky7=+O};`_Z=KHo_fo#fvHn&`@AN;xU^)&Be`HVE##d?pt*QC6Qja> zQsbKIHYai4Wg0Hb70`Q7`c-+j! zWov~8%W=zWb_Ke7gJWq-?%^m7$36JhTl4wO(gYXhT;9iPVqWlp9dGP1iykreoGeEG z;H??sp4K)wY_l^U+^i&cXuP%#F6*M%>rPjzEWxR4zSyZYKen+>OaOyPkFAT^jM}&Q(FJV5c{VbrjFSX2badTZnefGGQd1X@Z zj?BjsTIGy-7ggCk$kYQ+FR;rkx4tjGyWdOH-QVFM`$drtkgz(0X>%EKl8ZjRVY^q3+GuU*)ZOPR zg5%YAhMFi_YP^TK;|22aP@^U99ZppLo#AvEt??a_+7B77p$~EHh=d+AY>8zCU*2ZA zeZ|-JdRM$0Sly<)wpjs|t6pxvdwzE`)78xvjiHYv_jKzD2)-t%c^L6*>rj?FwKB)9 zk7f)9){FJGcigfU7OD2nUmwz=lv+9N2y!)9c^j2u6&z>zT#u|k25A(%gFMRH`$}*> z@;3O{j>9loSS@FXjhI97TuQ!&IMTOXS|7ty>7?PzjXlA=H`(n85Ywn>KktKhnzBMP~XIP*^A1P zIRiQ^ot34VSI4&2!G}c6&U;iSCp(wna&u$6?iDU&nKn~(D=n8_>yKuTgkV`HcD!*h z7>kBn<*lv@wOWEE#GY>{eqIEi;=ZN#9mSROgjoi$-M1>+(JQd%3!eYtlv~t3?u?M1 znm-q*thZe%%my<1FrMx9h?nWKYhT%lN|gI!w)n^B3uYfuKADD5H=iFchU19{s6&=5 zO$shZQQtj>ujVMk2F8yzoJ@Ke!Pp+s1CM?J2=%9|#(ugyfzfxLc!TCf~qo(7l+j)grwG4;nc zq}Bh49b!HL%yi72MboZETc43^+|*>YLo;NWW5x~Y7a<$;y|KDytN!EXo7($1vC!~@ z8m-Q#In%3`x^um+%1z;yLi>i@?-^b>$=JeXe`;l|kelnWQ;w48lI>Py_#N90 zTB%%xDjF0X1z>s>Iqd8G)1~4q-0euY-J*a&$OG#Hhm&+^1SQi6o#KzCcMY-jTEr5q zCvcB$N%z(J7830qt-d@I%XaJ&E$H{VGJ&MpIY~OB?|P7|vU{OhuSy;ྸn$z0J z#}?Nm<^Y>P|Asiwz4<&LRm|tdvo#fjuQ9f*nH9!Y7^ppLc;SiqxB z{)|Pdn%E%=&r7aryZdyhHV=Lz;3+DIOma`<<9++Zyk+(XU~ll4#_Q1*9tmqVNe~I% zbc6AQ$Fw~q>klS&NcO6>M$;FUoKA2aj(~joeKLFA$oWb<;%s}Vfxtm;T*D;Qtu2$J z1L_kDZh4FSw`)asy@~X?gLFgR*6Z@F{4oWXZ^NJ2`3In}aO*#Az0Ds^yC~6d@7d~% z=>xUZ-@Bmt!PDzM*1O$h+`~gFzK~wrlI6=neJuOr%52L>5#Cv-I3Cb#)Rx6J;Qj2Y zo@~;n`mQ$1c1;4?VIXMtH$);40YaZ`R7H>v(b-O4uuwphw$sPI_6h{-m5Yz*uDeQw z-ps3VHsJB`c?6p}VU*9{9jO`qk7xR~@F`sV-TTqK)ojrSi5M) z<9SnC<3sCCBb_1~UpLD`EOf-58xv2R0+9>2dJ}@r#qf-X4`=BPsL-)n--P+L%o@xZ z5=NJ?y?nq{Rbqq3q}w{XxbE^UN_&hiq92%wWwfLgX( z5qdaD-Eqtc04G#LCF+BwVmHtBI2^{78$1O)Slg0p$3e;_j=GB_${@Kh%$3;7{jcpSqBwi@W<7oNhl}9` zyh`|!Kw_!q#EgR81loSgN~wD?rf4LhUl7FvkV`P9c~EQX9I(NBx{X7;H188_xQ3Vn zY~t?kZrnUy3aR7el}$ok>&hg*JwPA zXg>+<%AM}4M>lE1Fvxcd_?c{3vK)wki*UNl@-|2f&4esCgIaG)Jqs2pc8ei(W|@T7 zhhK5~<5nkTi*y1tXpiIbVBK8pv7nb@6U@2|zW!DO?3%W1R=w;i`3EwM0R(ZrRIO$M z4*h=Atmt`9ga=~YY#wsy*9quam*HBV_}V@e1(Q;^F3*n@Ok03hZYs@2uFjGwe_UQ1P6!-k_l3Rq7T55XfO8FWS8LoQq*{ z-m{v`-d#v*2`Mi#>$E$!xDe1TEwycHY6&Cd7)=T_tip|F1wYcnbz+rE@{jEFb2|E| zSDUC%nH8UMgKcIw`N`ARGlPXHcsJ9C@|Px3>&UC_D+C>79KcoB{!m z%&`3?8XmX0TiMQXnY1Z**&Y92%gG+acV?&)v*R1BN`DhlN0FUJsJ)M+fuhzEYjYlp zGmTS;zMHvVV`sPz;7i<(TH7kl4t*My_ZxeyAsHV1j4=OaDu^5D%*lziFbK_N*W6&n zO2hI?hZ{R=xeWf1Qs47sIT}pYloE=#Y(6LMX3*^g!I&}yq|{^vsNMaLuDI&y<9jUt z#F;yckjr-=efLwR?Y{)U#?2C6WKoYmdd&xK;YqfoFatruy$g0Mpf?>vRcC|t7P^SMeiZM-iJ$RVsSBmTK^$= zn06K`55{4lmHfIY(A$hBBcIOO1*=5Gm(yh}DDyKNyY7lTY8@Wk*!0ADv-c$e-0nEX zyqHs=l~--uDy~+nG2yb@Thm27UoMj)NwTole4)EJzoX}H(1}%=C`?GAHE!iR`n*7o z3#iOLZ3eN^jE4*Z1%?1G)SKm3yBW`UD1*Mrq1ej>JS^5*^AdaNfH4X7VrdeubF=iMcSUU#khAaoWzm#-_d}Hnu(1BpLLnFFWqoaQwOlRxc2_Rb#4n zyDi?o?<)Ku1P6}z=LsR4{Ph%;bukhD~#N>BCMJiaAU5_q_!}? zcBti(_d&Z6Lt4R≤KlfAjRh9f!YF(RZkQ$MD)uhb@Xm){*2bY;?Qh6q!=@Ue{K0 zuFwU|v|dXAhs|%L`ruBN76r<>%9E08O5#|^_@T!@G-c4?jc~x3EtpS%UZouO%ycBB zuHIc8sFZ$=NAnlFA9f)-j+ho{`6N1RHq;x2lfbO|*|XXGbeoMn$K$FDI@i!}NQ{^A zYYYfK(qytjfL z?9UXba$gpqv!o|Irv97f>iQ1+P}da@giXFL+)53Q1tM5sM@T)u8jhjm@`mZ%ausnPch7}P342V#oVE2eUdx;Y;2Cdgn>GMD{ulu)r9QB*vUL%J7?WV3%d z#$6;$tUCmr_DwvE7MFA$MoGxx0a{pXk7wpeL!eg-Z#lFt(;INk!q4i+Z-Sm-=P5tA zMHmj9#8X zZQB_ZPN@?N>L#>J1}25JzMMj@Om2Y!8%?6_!Z7WUK7CKPfr=JUyqlcSAd6OOx9zQ1 z@T-R|WcQN+i5{DzL`Kc(S4^@jqZaD%G7OExvxJ)UFpE*1ZxN8iZh7!tvY*NPD zTayFq#6{3m)5f=Y7lry0&WVAQ-Q{Dx=AD%-`8E^~7sML%MW75EE?F?aeNM|RH=9f! zJeemgi#~1yPUard=&{|0@(wr)ZRlRCNo3wsgt1a9W>km)EJqY)5tsDPt>F~)?HVR- zDNyn}S#Ic(Y5A8BEi<)IAo=K}wJ#f}SElJAg)`#PubrV_ENQDT1NZM(|FrR=FDZge zbILOh=8E=vmub<9-J-opw#d63FdK=u@vqgmhuwvVz1%!}t~T14;@RG$16~PV-EsRG zQ6{hScb4TwmS%?p*-Q#XFTL-#xaPZ;%nXl~kYSwMyRJt3<(WXc))QlBxa$G^bPS@cVvVX>XqN{GvMBVx+FN9X|_ zJKl$H8NwG<^^opC?0hpZ4ZBi}|i5@FWwDUSUA&sQB?pl>p-q0sR zvET~(SKcEmRifSgm@5nbt>CIbbYG}+dM8L>*&XS2`v;0P1^w)8O@u5yGB@wL}?)6q{vr!!)c?} z(~f9wmH{mWRzcOeC`k)f+#QuNVH*t~eG&TZsPmPmo=AY2)O+*U1T-D*eV@F~U3dfK zpccc?QS(k`CADj~nS`QEZoHpgJKFbQK?BaYYqW)ime~upGro_Wnwsw!UR)k7ngUwG z7S}OtE1E*Nc-kMBov24|7bOFa#??A8`QeSbrP&_hHD+>F3jpMN{whyv}&{25TT zC|Ud6Xh)Wei{m+vIs!_E)sH_!uQQ&7h#~!%e~bOjznc^WypwoyrFY7KTHrIGAP{}c z4xB<=cUf=JLTRy6A9Uy@!;9fWU?gLP-sG?q14tqFlhlIBpVA-~vzkpcn{aEQ$lQ)J z z_|SLUfY#1*U$=g~7;SVABUNSiA)JStccDC#)4?HX_AZsvmQ(9QLM^-0F{joFR2Bvw zy>Cs6(1mT?yDl-1d0ka0#}uw(Z(U1m!m0V#9u=nvTI*-0F-8rE%=A0>Z%I*ix*sgJ$lom6M>_4zc9lMTI(@E1W2GOKPJPpqSIgQ{OyGA=eBUpINGtdr^e_ej(uQ2}XZ4IAO8OAq-8$VEpH+$Yxxdqk?N1X#h*I`AK!Vfe0>e{tjdqB(+7QV?FrYbIQ&*3z zJBv0>gwD?#CvWTdHht|M@+6YX!k#U!50;FqIn>)i)*7Wjvk$O%uFaSst-;-@4U(xh z3n7#e5rbuIH_2_E>ur{|UEOZdAP=iKC$oHyCQBOvAaX{pq5<*op10B9WwLEO@3Zq) zsh02Hsg9yZ*EWuxV8IB{XV>}YJ2l=AC^51eg$9b>l#5zxyFMu(AUT~+e&=b^fvUtL z?6uaTz8R7**B^=PU0p313;9=MQb_5bamzQi*WdNb)4gRrX;;iPxr|VZ=?Y4xnUGEJ z>@F%82UHg(fH3cw_ZAQTA0}%^6ICR0ZE+#%W!Qk}Akv{Gtew5z{hikxkZXO|g!$Yj zI74TLv^M&RoXf1m#a^!(`T?>isdI~&T$i#Ghsh-3bC#U%=HYB<2^gkWuqYONz0;q? zswIZQFYP9iphh`tJKc|sekOH8?XiO6mFiof0+1gft$9D-*uKq@cC- zTe9O&n%7k*A$UxNOGB!8Qd?3E-LLSy7VAmA3!o#ZishaYycs-=?}xlM2ccuJJ!nAi zfx1o{z`cIll8UGDys)b7E9{tAL0o&jm{fS#FT30_FvKFT<4O>OK|~QLbX=>?|ME|V zuL`t}HRx%MqWw;x$YqgHap`G8@rUb2v^@n|A37!Kq2I)Q7b+x$`~byX6sLOK$>N&z z-BC=Y_x%h@#?wExaf!a;g|JOqbsGL}_$d4n34MQ#Bk<{K@j;f*(?_PRHN@bJ zlKZdU9Q(H*-;21$)@u{*7D1Di}KWt0!b z?+#0!GdU=H=`iu(A^^T{^Kjfp>aa9F7$3%P_^k`|_af4fkHDAAi|(oSNnH9!Bk$wo zg8FR!U|%HF{TTO}xm*JOs*ehPL3P^yDL0tFWJC%?%%J|0Er!j8kIE)pz2Px{NViBM zyVVKm(Z)mLyG*y+-JjZERi*ub_^%}rqHYc+E0;Gl*Wobh^jlr~0KzouOHLbjWc{(& z>%U>)>Sx4l1iRCjt);)FA%fK(M;9w|ZT&^1ScNV3tUVYI4^wh2FKOqGT`jxfX8t8u zpVY`Q9>8LEot^ge>K=zh+%2!aZv6wVvHWo6CH_5h zwEY!-+>eLKnfZSoAEwaF*B=jO8=vL>KL2M_!YIN>y3a9C{yKg^Bp-sVyHf22!SCr~ zDFW(x9(yz2>P;yB+W%U74X{DZ^H)~}3$Skjf1Fd4FW|bURzIvo{WXP2^-m)y&Xe_b z=O>+68+&<^5mp@KITx{I|#R zzfHgY$IkvgH2n(WJzb)U67umbQm#oz69j2}9!bakMHPy}{Cb4hhLAP9Jni@vR&5Gf z$=Z|r+t2(z-o5Yv?0MY>-OvNsL@F_1LA(=uKMHuBQq2}lv-|6lZQL^Cr+C$$M+h08 zLH}%$`41b$`kl}rH@%o3?seZur%^3YVbg}=(<+c3lsaqeIi9kWd zl3g8{(@y}jQ}e{L1e6h(tB*OI#3%rF^;^~pc}`~NXw1LUnd$iMHF*><5^wEhzipsY zC|=?`G3yxLSj&j@dz`=Aya?KKsphg*Ln4!M?+&+nMbL%bj%`7I1>67rEdcjSqM%4N zoUA9p&)GKOXKuoYj62sqH~_MR(-%$$4|XCEH3A57Y1}VIKj(fR*F`zm9-(Y<+`5?G zA$SI}xt!yeXgvycKC2Q1jyzY*)2z{`8;X6NTnqWOXl z@UW(bl5uX=BN_QS_(!cE!AZz6xM3H+S|v%EfgeW5)<%&{o}oPhpRG#||9Chj;_P?H zi3bPjh#Pps28IuBz45uH3&JEz;H|SHz&^+0@24{&;Npd5GRAC>**a-tuQ9z=D zxzJx??|-*r{omn7_{(qE)^irg=+_^p3KWydQEtGp$&9xbha8R-fM?L8tF#!gNallK zYPLHB3}^7o=@i5x96#qJR^&9o;zZArjz7VYHe+eA?&akqo zS=w^vF@M|mzolYTSXmVExiNGP51lMZLiIKHSx5#It?P!~3SB#I@{r{&85K%{a!nOAN5AUKf80-i2Z8%gTO%i3h8 zf5&Vy+5M{AOhhtBBiGJgAT7B$FRD@!CmN6i1a%Wu(|>=?{!1KCt;F!VpBR5aloLos zzQ4b<<+1zZ!%pJxgV^%3kzm&A4ybtDy|MEb5xtkOEszU9?iaMq1P#_mFXAEd_~qECw+N!w<^a0-W@E- zWy<%jbr~`XzqfYE4GKHyk%=qG6WPp=>UnwbgdX7swd0DgWex^m07R8uowM&w$az05 zjzxXcY~-whQLDLoNkMx@rAX!DzOKd`ywx3wxAT0;AY4$GFN_rJW`pSLs%}mM%24rE zeXmJF0N-oM!$;7h_9qp2R6UXm&a0vdyh^xdh{%lO-B0E=6t`JQ+_`$T8&VqbD1IbB z3Zlo5-XQ%IH4gY1<1b&tgzQ!!k#lnixpC!3x6ENPUYrK<#N3N-`?2*ZY3!hsS_}Jt zIC{;=Vd;&}Bgsa!XY%Hn6-*DQoK5{Y4L^3@RD${<3NMmpiEI~I2TD7}n~+{{QkB&W z2t^5BJD6-;9b;3dip+22)a@KD*2M>+?+;z?%y9;8@lxJAzdsqGN`C7evP_-P$nWkj zRMv17g*IA22^2k8J%&mXdqNZY6a9k-`<#|ynSXx4XqstKe&U!4;OfURdUaAJP1oB; zh*P_Ra}YOe3=*k55YAh+XD=j?{D7V;>51_k>Z6sVP@Om5^8ZO%WmeZuL!RS$!@Y605quEEohh82!LG2R!m zoK)iE(I{uS4UTi=-ylZ76r<|r^sMP9Y41JQ|0=JkiRPFVuo?k`+;AKY3O&o!Ld zD+SwZvJcx zk*qzEnxXy!xuIVsO++jJQU^BV`K>o!>REmf2|yj>vjtNCEe@Yse3-&~4vuNUAKY#m z5||XfH$J~#$1YOLX@=BGhkfZ>X}f(=7DuaD{Z-R%{I0irn+(}s@J39}YflvnZ>8jQ zF*7ATg{~;p56PzJQ7<+G=|v}<1jtJxY0JFE7Rgc{OWpDro^7(;%jvZ_1oOjpvDw#CVPQFFFn8GaJ+J%qLk5@U z@=eA;DET3Y&B;vHGUDnd(xnnnvIcydS=Lfm8+A;kkCyxq4@(07Gt=cO3 z$^#Gq9-W*^u;*oPWuE__FmO2FaL3cucAFVemg zX(~T__ci_}w$NMH7+-{`QcrT*N zGR`e4%qiuC&c7BFLY^4)fo#=~fgXif#!}DYfQJEqnb`tBH$1oQ%`y6Nv!r~^iHJ5r z0M^AJghfd1iq1^wj+9QZwUI4&L2tgDTX)U1hZM_{O+AiAP?A!o9Ojvz{ zbnI>w2p|ESAoP!(w7yByU0JB75$0bxym9Sl5jR36QBv+oV%sn|j(IbgYfqUor)XKE zQuMv`bk@?L?3fGXG&4yI?*CVI;D;P@yj<>ciAl!!^I*B))G~tXA!m1db+qK6fS$YkgwjEDS7NEB7)#DUi z?POe1wE_3Kt`~`&qJab6ISQkwvSE17wXQ1GX69Dn{9u^XYQgo>EwGiAVJU>N7aFx@ zRi^38{MX$%lVFH-Mq``j<;S%j0sNW%OgPMGN{Csfj&E%o%qurbB|6?Ap@p07l{Gy1 z3KE>)hc?$}+q4fX?aY=f<~k-4jUc&(Us>$Vv3oDMeiyiMqGg4k`U2r?Fm6D|J#b*^ zON(f)m+-9t#j8L?k371nKUY?G}R+q@@G|q(ML$r8`8r8)=Y^ z`8@;Zc7HaUbJjX%ea~mD-}w)ndEa^GdG6$>iHSRpQWgEx8>+4JK`zRwSq)EJIL z7s}ro6WyA_0YKDi7as57ehi`^W~J}3*r z&ylo>T6iagq19*-c1J_lxH+!L8)4|fiAi@4g8W5Rw{P-xCCPqwhQ zN?+;Y*3Nic;7Wapx#XA^M_^)Z~2^zn9%$Q^OOSS=XxOiHm)8uV9KI{nMxw4@=3=d}r2ld|Bzu9V%gmRyMZQQ#tKn zSao8Di>U`e>bc}A^LZ|Om4cidqPTf(`}BN?aTAw=MxU{(^6EvT&H37Z1!tRO{9Hl} zHA+(MLQ1WH?GOHsMTfK-eM_HM&*9>InfO)*+aMpvvHA2G1QV_rfgx=Yv@qZSXeMRm zO_`@%owxg!$OZc)0KL}u0GM2MK>T*v zvY=8d{(M}Ce(@^#a#OA1lZrk0c*%3t#IB+^*lc({Rvbtg51{NwFx{H8Gq8zLUo zO|s@Ea+eoJKBwBW?RPH5G(;pS@_FlB^EVXe8N3ah(id%UNaW;hseNKt{uGNKY!mV+xp2G1cN1xpBG&umYDyjQ)S*eN{ljK-_$h2)W+ivS+M`%=o_u}WlARk9 zhYiFLnnoQ-96>C~AKz{HAo_s-<;5je-#LMJqo6lgBD{UL6Af5RdrPlrEz=;aIJXj; zLpkQtO<8-qZ=fbaG+9D;jTr`s_o+o)R310oc``%!<4;Ks1Qf@xp&vi8@U-x|c1_L& zAMq4nRuay8{SV)q!fJj%bjBMl-LzVVKn;-W+YX z^iB+UBdk54@mp{2pit%NfT%$;O?&HwfFzeKt4Y|{pe}}SMMSp#eb4h>sl8x_4v;$l z!Cl(t6}^Xgs>ztR0;Q5tWQEvVfJ33nWI!F^sXW}htjo>VSm&O0$w9~A!Xty+me3zR zin4Uk)wUG)IM7WYNHzl`f_mGHVOC$5B#<*RB~qdzrYQQ}o`r5Z1Kn1pVn=di~94u$M2^x#56DFogEjqjpzkLtiq= zLK6&(q6R7YbUEL zZGk7OsF!8CY^phWum7kf6c^OoavQ^wS-lJ&Rze2QOV_SN3WX)|n-%-E*{8o_HE6ab zg)n;K?9BaPZ|q`vkut?!$lfe2!P1VW$d{@&p+3)P%?R{w-O*kY%@@j3kK zdG9;V4vKt_B21#?fl}8Rd;+H`DN;S4cMyqAduF1V6Xuo0#+tb@$qyX?qY(+yRW8g} zU&MSNU_Hr=NA{7o#NHUiCVt)dQ{W$-S+g$!zi-AXvFlfcWnO~bxxDn_zFa8g{KHIs z?cwLizJh^zQfmU;&l|(Iv80Jswl7z|g(|g5d4h=-At3p^h>3cT;98XTm|i2!^X&L% ztcBMGQLdk*>cJVYAjJNW8WEv~yXV;QM!>G6uwq22D<=?T#2FXuzV(gy;xb@{XysFs zWB`-M&tnG$=VZI?6rkQ3>j@9d7oxy7Zr^pkE;OdG-}-dp$s5Kq)WV9I4$Jy224qK2 zB!ceV5NLKu<(`_a3ucc{cebUtD73z#7$WV=u5SB4nn$+b6b^Q!8hjpgo??;5yJFvV zw7;23P-?@BU$Vw-K3*oJvpxQvZp-WOhKMe2^Y*0IXuOdSo6W-7k7A;pm4o0dlXq^U zU|tAFdUef~LBC8rNT|Ma3z`Nl^yjKkJ1pJHnHXKuC~UB9DWkjj{A@^Kw4fXD!%1Jt;Vm$1BLn@vS00P0kO-| z(-(sFnd5L(L|(>aX{*8Bp(nIFydFJ2+m*%`a@CXt)8~c&6~B9nCd$&;kAmGPS8Zi0 zcUJQCm)kB@!?aNBZX82Q4_?pwfo+RX8z|6zIal}VZLN^5EI6O4=n-!EYLtRn6!&?J zMdQ?%!8#JoYdkR~C(7e@9ToE;=uUVvi4X#Q3+c4>J-kHi#$DR?XWVQp*mHD zX(hOK{UXmxv#>y0#U9?ptFT0&_y@s&NJMJ39lA0 zzUTW}vl$cZ34JmO`EJBBmeS@unU;ZyyuPl}{w)c&UcR|gr<<#_aujb$VD-Vwrogw7 za8L$nFl-m?0kP&4XAC_)Cv5l4&ycO@3XGL90~Bl7{&w6n>WOTm)RS84-9PvIzi?f@ zObojLl=JXgN%8?t9;xpY+BR8MGVbo?xU8*R0Wfy)(EHv!;NF=7eb72ia}mJQ`rARl zSdJiq)1|CHr+1FsuxzUIx%c@T_YmP({WOVpX*lyYf>Wo&@2y6Om2;S~ja7S#Y?LVE znS`l4meIuiBo6N|(2(nP8q6WraESbaOvy-c)HO)=oOIT&I|KWbV}7CT&VYMVDI9FQIoY^Xks9Cnvb4yiq;4}} zJf4L8;Vo*%O^iNWMj|xw13`Mz`JY)_2c0ktk@iF8_={;Jq`e=Xu$MRu>c~D6o{p2# zYwj0ol+I&Eic{1|ZV*m|KO9z{dGOsq^fp}nlYITBfrentkhH$M(~XZ>qTckB+g<~) z3mbNRx^Iy~z-{-|(x2BAgjavKC&)&=>GYHnT}w@UnA>aTrCa0YIJydkg{iJU*(&N6MYLZ>zItrlWA zp~u7^HRcmE>{-EG{ZvZ9`|u-CxzJpH!ToA?)Ki;+(m?gD^@on5bq4Ll*=^1!wnKo1 z5D$6VDWLkcm9DeyneCwSJ8>UNVhrmE_mz{a0 z8us-?v0+u^7!OxWj|cE1oRY83e0M7_O_`I11Uffl$roOwo|9C@pej;xe}^*yO2Oz; zJNG?tnf-^{WPR>d(|raMDj&g&N0(Y>U0~memAZLyzXIhj$*GS4xw5+47pU$Z%1V zYQ^smf(DJsh6Fp_D`p#|9KA{M?xLGZx^f?zXCJ)3D`mb1+KU}WLH4f+J%d4Va|T4?pPL;n763_T-rsnTAVV&fP)9fF_B)ouS7?1-=APoLW+gvFvKl4ZiFq z&|{#^M!1lZPGa1Z#((?cl{T~XY>);x49?DWCdT{l#>&3vP1eQY>FddvV(6$G&k|K$ zxd~T-qMX;6lOM27n18R?Umc2hHo5GSZ@}wG^YM?bm4n;)f08Ek=hJQa8~_e&uz-mH z>bXLjg^ue#P-Nr`cXtI;tU77^CjoL=>93;3X4d_wjdC%?`nj(aK&chdO;oK31nn}( z$dpnP9;BPO26cS6_jRtf$jQf*HRb{}nd&9~5zK6Z7PCCUj)$8S&;3H#VNZR=(ui%r z?4QPuMY}7~re`B~i@LqFiXC3gZ%fkVTA;pz*>P&-Gmj#wo}G_cd^wb@?`05%3F9tA z(6tnXv#Wfny=m{b+92G}`Nvx7?9{VrmFOqu(hb|x0qA1%SY)NB?MW8i$}P~<3dTk- z4w%n9j`|AbEa=U3FFuXZ0{GWp+E(P`Le{8Uv?#lASNpcubQK*2nuhS0g$2wEP-AO3 z<8Lh3dWGpN2P9NyBEW9fdfCp(Vf&hgC1t$nl0ds#VG!)zAGDn8po@q~r|JK9xv}AS8cD89!Vm|f?7{Rvq zfQ{Ba7W1-eCuj#_Rx%HljqKgI_}yLn>a@fAoX1VeYBXLi(lzcgpuRo2>$b_IU)-uP zE=`U7=^kRL!C}iJqZAC7crz8{&NcqkyQWBkf<|QsbU(F{0^sXb*a*9vClW$gGAh&7}#R85T(wcD4W zkbUb8GZ@7na95&K*ztDJdNeogEIyT}o-b*s%LJ}9QOkwJs5wB%OT^r-S+}~G&+&K; z3>s+w9sUVmW}awrv#Ywkca!td+~(L=^&Y%McrAW<-1QVzDZBlkV>BE0!yPS$&s*HX zCHzf3_|(F5py_W!{WO=#_DrIdUL+UY%l)>c@2s44x_)9nTPz#+2PSSkmHiJiOdjEU zk=MxN?sMu_pJM|tp_ariCRMw*Hp-~?eWsVxLimbqMY(;)aYQ}6{%+a6e^4%5BcQ#{ zU~|d*>-g>~5@r)w%J*S%SEJn1V4yniC_#W}E{&S5f|OBt)2O)|PM?hx%=MQ(-Eq~c zKf1IUL}tg<%-lChHhk>2y(TyJpNdk#TSPYAwHX?Ez2Vf7jdEYOn1hu?9si#8kOTuj zOTgNInMPb^nwr!A9;ZJb`tE??Tum#dG|;*2q+Yp_pc^fr9H7?QCEa&?=ii9|ulphc zv9Z8haccUW;iaet{!=!JBF<|(55LKADbG3-%ZcoXIqv16cu>0g1GO1VUrwjBeqHk8 zdbz>VB5IC5r7vDNO_L_+vNTdN9xGDB!f)hlGuU9&3s8Xf8fc*87wyKHs;`ZXO;o-N zoQy9EPvr2U*eEHG{ThFJx|27-LV=MudTS^3V>hPbWe<-K1aLU{KZ=_!q)*ewC5~KL zHB9}2+S}P^aF5=O{xNT#*mW=a#S#A*iwhPby(aPOrVSnPWwl<}VzH2Xc)lThG`R?g zEjCC(US2-X3K|eiXb0?FvvKeRbwOw%==i(T^HD!XfTkQj&fgbHtS5t`hQ=H%nY&WB zl;IENM`}~nU#uf}eyaVEAj^XfdS_a4nkl82O7O2UVx}wQegHGY%0n+$XebuRY<=;2 zuBrIEsrsU1OdQwXex&_+ppx>;r=4ZT&RqF)r?n67x9fvanv@Fb>~I`91Lt4q7mqas zv!~qMeB@ocUfoyi9_r2o8C@-|0bgcyce=7Hg3r{~>6%#7hWEyoD;bg2R%RSMr&vQtkrLVcVvKCT4qH72+LlLxLWLPa>aF;=Yme~_6s{=(H+ST z`gYs0Q2Ay9MoQQwgV|MvG7gtLo#|O&+@2o3uZ!##OFu=WHq*q2fpH4omW#KTiBBbN zl=jd-XV~Rqv@w!3*%OvTN;XXA<(^NdC0t|-6uS(P%OLf_Xt3*18@f$O49tDSUf-a36DW&1VHE{ zq=J|p$(~lv*24k%y+5|%h;bJNb86-;#)!by=e^94kFQNhJcNxhXIhRi=+;JPEDOWd zK@6UOTWF&&R11u31?OIBfMpWKl#LcJwF?n5{1HxnM3W;{@F>OHzPRK^3)`}6$$9c1 z%Jo4)@<#UjRrA4OaeV|1v;GhKB>D7WgD)A5c#{q9=%w3dn7YqG&Cb1Oxq@NV8pj$- zk**^yh!wRanZeiM6mMm6UJN5@Lvr46kTyv7fayhkBpxoI_F-RKH~i7vDGM|bb}U@J z4JjoU-hZIl>7~OePN@>R&D^>q;Y;naJXm``y8f&12I+vK$NhLCmI$u7J$D{M3pg#8 z+d4}E2ELS!ua}W+8h%JolPC0d}JK63p#vc)+f9C-x6ak%A~7RmxlJe$73Jnw0r+Es>g>jPQk& z$BoZRTS;bThP>HF*<)^_`U{pzap!0-U_{CuH~y$B;iJ6xQ-k1-o>W}9B&F97-o&=s z73&J7`LPJrEe5lz{fQ&5^Wv@&b|{ntSKN)ZHCWI}D9<|tLh3eBcVC|<>U=WsZI4*! zml7i3*^yVT4|;;&C77E+qQaJg^COP01#K`GFz^Rh4C}#A;|NlSklg}_=Q>XPZ756! zULN{K?B(~nm#&YvCuzn@U&UA$md~gyKwVuber_aQc#CLQm0-pU6ycb#`CE3vpewTwta=71^8;Q??LGbKLIjoq8Qb7eOJR57hT>RYZc6}wu zup_~IA-K=vEta46(IglE_nB6TKO+I!{lB!~1}HJ^naXEG&GnY3Jw|cyOByNBdLXVr zCmMo+#%kn3Ta>@gJ6wOiK1>X)W0!}!yD>lf_##y^r*rC-L#HcZ^97&uy-2aFd9`8slEAb84C_I1K3%l|*+**D8duQb1dOCnS z1rpIqeOfyszzG{=SX!1iH35K{mwo#^Tu|(IKSYi1{CK{Wn`Crk)_D*BBM|ty(~Wn^ z_L+dXiYi}MyXMf0;DkcR!t+t)rF~$$2w~CPI`BgkI%v%Q?uGl@J*B!ua|8KuuShu9 z5~PB?A2sV8qEtuz_~;f#wSfb4YJydMvuBC#Qf{D!ojr?UX3W<8Tq{y$^(6l{%o-2t zLs+La<7i{4gl$@xrAN;p%B8iJM-#F^she?u4E)mvDr7hJrpNk%REtknu=R~{qSi8` zT(kgt&f}IKFv3Ws?dMn)Bpqq1{Z4Gf^CtV9<*}N;A8gl5VExSHbmd&d>0tEc8{qf< z3>w>ghNnL=di#;-O&zeC!>FF3jj2z~tB6+47iu?&F#O?qFClIIcMy{@bW}pkRWJ3W zI^@G%E4~ejyl8rdS4b^z_p$1&1QILF>SCK!_h60E(> zFS;4l{n1i4)yTZ8ZD*-ga(5D>zUknyIr2Qqb~RY#Yu04&9^XkfdWOpc zVN#3G(VW`ZsGe-1Fc9lLcet;JZ+JGg zX)>MbzP^5L6e-&tn36G`FcJuvWp+e(c)(zFhHp!+@q`Joek_~7 z2|Xf&`&%Qagz{>TNLPUt1t%ExRlciqLu>32{GX3Z#tNR9Uc{=}*JWcf4yRxytPSyi zmS1k3s`5G?IM^w+G?SE)Ql#4w6aiDF4&l@)9J90|`kS@=G8N<&c8Bfxoy5tn@)3P_ z!rK#(ZE9@Q6RgUkm372*tGa%|3u z%!a~%O0}PmX+70T;fb)PglM5lrwa*v@9;tVnUObQ34?MV&G`7$m6f@7t2k7kj_2heD&rT;%*=c_U6;Gw84MH( ztqW_G-doDw-_8g?Jt`hUp7^yKv6&!^r%X9y7Qnd5>4opFIy-~foLcIW`ln66LAXFg z!5)3qLZEb`d82`}?PY<@#DxFsm&>@r^To{7nJ zV>Oubf7@kMZKx1*rgwCZl&zfmwaciO?>-^t(6tYkzN_ zQ^{f~>9Ald(<~iX43>$AOHb$EP%pkfqC7# z7mMsf13nfdBl-W;PaWM^`yA{oMkb_EM@~+-wJ&0q6xF3AMj4W!UXYw$Um9gQt7B!w zUAn&3HCi*(Ouxe#a;kSL;koXEEyuk?F{(t_=+flK6Ym`hZHB0L4DW3WM1OQ!O^eIl z-PG#IavXcFhZ5V}$Tvs-(;~}-to-GD#z5CdD&qhH)N=?@2#?ZbE8#+S*+w%~kF*D3 z5_4U6?G~lmd{E=mCGgw}Y+wm5NZ`}F8Yr?K*g`lTxl23y_9qPKB#8jeZvEh4(nCUt$DiVT2Oz78=Mc8%y(wDe{7h($m{G>v+uoe==$|! zV-gblQ|Fr|oF6$6!sRufxDdQhKZWEsA4_M`i_B*9XM@@6^1$x|FueDRaFmagmmDlb z1#TFat%pO9a)j5M?XGxwdWt>DXo6vn-yU8`XjpE3>DL_4AT7HBM<2Jk(eau4G(+}Q`_8;#`>g@92o%Nw4O(O8@Z^-l3G*>wJwz{Z@B36?)T-S8+^$Na9=C#3my_Ombe;^kJjlw$jK zZv|EttUR?%pfCl(YxZVLzNNNo&t9JaG1&^|ZV*<~+i-7wKWeYnuU8vLJuQ!p@@=A| z)cH7F-MU^)mLRfZWguT*chLH!q`}%OkdiA}GU7`!%D=`fAaGG@zdb~h1y`Nr{ONRc z-@?Me2;XJT6TSyq0{A^Wwm%loaVVv?H_r8eGdhGAY7}rYFfatv z()s!M<$@MBzO7jI>|I?{qcm)9&%Ts+NML^;VteVtM^!AR_aK9RN^l|YXkHP4Jl?;J zdPOQ$l(B-9prE+FGven?(nswyT`dB6hzovbL;FF&wN`3n@eDRNROTcznm;t7;yn&E z1LEnqIq%Xnig$oqbJ<2>>8w`!v~_j{t1qJB%684YZfw=;*TrAr;taP!o~B`-yc$-mfiO@ELS>`nSxLkI-f$2-_Kd##M}<` znw*>*&)8yhZ!6RPI%#NX>I1T2E1a0H0mco;=DjUyh*-(K`^45OXGkO63TU3ib=hk{ zT`k?4U#vzgNAG9I30LDoVcDEZH2Wb2W2mh%RLivEFi(%1_-Pon%R9tGKq%wT*7MDw z{S6d}`wuNtA0xE^)}g2HKa14b{xUU&+KWR``iZV{jz$tQ=A8S;gwyc?eHOml(qbR# z-{^0ZU(xF7O*drL+CdTQPnXg0W2BQ{vVaHtG9^mG`u)4kyz55IHkPQXuHpvd)AbR| zpPuONHp=!6ouKNt6{mzfLze=UW7LqZ24@s;PsL5}K!mXgLp6r^-De9{p8PqMLokbl)wu5_E-SmQ@&8J-1$gYH;>yn5tf^|Cr@2}#!Y82Vc<2%n^KKA%vK)qNqbu5d%Qv81L@9tavEco1S zSMYR>cMaeMY%!3`+L*$Vg2Fd=3`G8H4*bMgrxtvG*O?DOP*|||@NffXRr!92^w$DS z9Ks}Wq==lzx#wEW2}YymurZ+0w7=y@>`f3S`onLfK-#_D+No!{IM4oGF#R)n!(tw- z-=w?_ioA*QOk~cZU!Hk2(7eFLCR9;Cu0NPx)^;BX@Qt+wpQ)vNd*IddVjrPtT3Q2* zH+T#Bn<6psK7J$#$So;Ie)8FM23;(Yf|7RB>AMdENl$c?*@Pt74-moS*`Xnv8ou_j zZ&QOUDnSS!!nrFe1IDc;j@D046Zyob9quVy1_??K)xHebyYT|4S>P$3A~fu?+>P*S z1pfTHMgEn|*ZPA>nft2hjiayn``#RUd23P-vs2!T{o{qhz<@v(cK;UF%Qrx)qHHbA z4Gh?cYa!|5nQOcV|F7G`%|9G5$=X{$@}Oe6vBHR!N^ndS~* zZJ-Af5%u^!2h57?SJ;0W+ks7(ggw`@sz)i{f_)kTDsZ0ZDt`?{Mj5%^q8r;(nA9Nz z(cxLXZmJfTyN4Vc?3GjrhH=xyK>TCth*(ZA{LmDHtFd#9m$gW@C0I!nS>#yFkS~wH zphh#Hw~Pk@7dq8^wyG`PH{nXaCGa{2GI^yu@P6R(WScG*x0PGLmn$5Hx6YJ=2Iaci zn6Rn#Nhh>lUi$!!IN8mZ^rCL9EnkpUpKve*h=3!elzFds!p4?=1WxPYp9UxR3x8UW z*8Ce>K7J6Sd?oBe-%gQCh=ZV|y#r=$eOYbE0s(6Z3er}tOm}mW!D6o8HVdKL)eDaE zw2B4=PD8+7HVkYi2wI*lVc*G(?8oW&v)q@eZ>+q$G`#jf0L(}=CM)*RR=RmladPm* zaoIyNqWueuU|@VnSnCDMNb|7*^+|b?=i!;GcIE_;Ts{bGv-enhY5>6Wpqh~hY@I|* zNgBJLP*)`w*?vCpW(jy#F4UExv!->)!rRyPfvGq2$QMpB026*^MOF@qmC(>neEH(O zml1GMurZ3EXOC*Ef9!udDcEroHWoBi=dSY{1DFG}wZlREH>x3kM z1mbe~_-FD!-~*J^>RPhGWq%2zPD|mZ{2U&?Z|mKm|o2H^%$}sOh-ugRn^vR84)PE9PUdw+wcCG zO`;EY`|$r-l{R6>op92*eh(J(J-zTrB^D(P*sK5j%i%4*AZ6i1CVnWa{-C5dALZ@~ zl4pVQNf{Y_$USG>)k&YGf~7(gWy#F9%p+oxN+rq)cuj-2UMF`%@ro2Q=z>OW()Q@(bMg6QK#xmlf_nP~9AF z#5}O?g^>gsdYX|n)Q@|h_C0KHe>iaYBF4F0~Oi@qI z=ejmFsYbda7Y ziUFO$Wtw{Snj^AHi+wEml#Zi6> zXodSR$;n)xgNX#t_2C8tz`Y;r&NsTu`PekzZ2Qzw-)B|=oKZCf2?dLr4VPzIuLM6j zn?v{kIA#?O#LkCxhs-i_3=u;qv}af9NPDqgdbX{zH~blBuRq-C#>=hk3X+}clkeZF z`hJXnAU|Th#qiJjv`P5`_C^b!Js#R_k9_DQ?<(gW&2fc}QZ zxzXBKu=V(i52TKL6^=k)lp7px)WAK;BQW6416k;gzcr|-hIvjn5ilzzklI$<2_ixY z|9XthI4xKm@Hae_aMg)%T>w~P#d0qG-fU4^qgWG8lF|GZS=EeI)!lgT0 ze_?jNP_};o?T%Y1aL;o|=BA4duhA8HHXNu%`Yb0Ki&U{6c*C&S5X1ciu>jD>!u%1# zi~;?|apeKNg_RNaps*90xOlU&^QY0HjO+2a-w?LP0=;HXSUXA5EXTTXY1~N}p9jJh zrVeG22xKNbVX?2U16Y%NBEGaTM>2=?u*9*~kpxo$w+jI9^NS5+JAgx7 zU0p#sMiIep-st!q>>Jwlaxb-h%jHw;6B1PF`a2rhk&Q@zWX`rl=H3OqnfFqrZq53& zE14M#RzY;YuN#^eN|w&5@tJ?nKV5JT)R6tysj~}Go$I_*R0VZ+F2hzX13L@}dvk>9 z{KH&BFUfal%tePU4@!fDS4==;8ECwb8sie?RtQ?gc?C-Db7*^QZsr95)lAilJSTWp z8UmDzTvvrDRe}l`f$RVF{mXQFOw>c;GF$`Ppwsy;X zxyq3)%{r-1qjU)EC@474mg7sY-6hUl!p^PUhlZTQfHWmA1vK#BpbqaddNOpdKT84@ z)E^V6lf?*r(kb+rJaES4(4TA(-t=`qZ)C%NV~g1SWCh*}BQPjn$t{H8^#;@ezXK-4y~ei= z-J)U$BKc}m>bx=|!w1$YZG><_G!ev%f9!6clfF_w`}t>Vy*Yc*j)4tzAw1p#{g(3n z!%`2!8!klj)CnIAe-1z_fwzjxCzuijCM5cVXM+3RL|5vvAKqY(-#a2j8g-4VE+e!( z5zcCAKTK7`biG1ANO%ylqG4{T5!Ur%{Pw{D8A-*+Gtr@Z&5evwlZ)x4;dtOFR72^x zh~R`+W!pjExcUKAfWZ0goT<8NR-5w8Id4GS^K5d`VQfu#Y6j8enKOMm06M4U=So%8qwPx|Ve7hZC@?4OUbZVLajvrrVL$WjHw1*3~)tMlVq z@1K@j$~=PxRVG>{9M1T8vsFxcf?*8o$n}+N@S}0)EIqQ*zxonFI}EnXm+BWgGID{6 zO6@)N8R%m48vM3NgUK($yL5)v-;X0jLbfRJ6|#rX+hUq^EbQ?~jzNs4FX< z2UNbVxyvl);sqT80|Vjp+PF4_eVSQ6F)&tx%ze4Zyn0xyWaC8U3qgwasZ*L%u37zN zO8>1i^9s*#&i%f=zNy~1YD+(tnUV1t6oJ_8mD0U|#ma)%5i}7my3x}je*gacIiMZd z+!Nd8yvKan;n=nGK=8r(Pr)fxZEBd@x6YRlYVA&Fy_}&zwVaJC8e8VEPoG`zb*>LV zB@6FwPe)kp&gVBI>JU_+HupD1*UB7ddj{o88OuG_W&^wS366I!dN)CgqFB9Z{3ghF zFM9j)%x0kS{#E?Ft>_k~-5(efG`n|KR=_WPPRz1LhY!9LMorg<`AUayGG-+D70p1* zkGFytBM>>0j1nI&AR`5K%v^Rh?Z=)Hh)R+_NZ%9dssYl75X$WenmwlX@6AeRemGAU zqcT{ulnjC7q^-Z7GUx{Kgq%RJ3?$qi+=2e*-C-{J?5Xd|NIF_%UbqweOWaT|8Qi{i3UzVKoji zCtSq{u5z^wcz7!)Vna^#ZYjJFcmT&v_+wAZIONtWqYq)?HH;Zuc#w1FOJ$8tsrpE zD=FPKsA&sPTPQq-igWYCO*%hekM9Yjwm}4AqrDU(I;qFNeom_2mz{4fZCfxo?DtPy}z| zm+Y!58xfewH{Q;+ZP?jWt9xNK1Q#NC7%j{UuN8Dv{qRZQ3Gwj2Aq)*fOwibgZGH}0 z(ugJwd5W#46k|p6fd*hK-<4CBTwCVYaNi#6#_rwWg%wu@R%2&pwXpgeztga(BodH+pbpVCusSXUG70AqdTJ+yKC?7TL=HC zlz6Q356uBGkCreNcdS7hSJaBFiup!Tbk^Rs_YOw?f=b^B#_j}S;Rgc_1;241OysXN zF*7S%cAE5hf3eSiT5R<~#_^1A%r^Qmb6Ewiq^qKCx~cUVz2+N+X4|Tdv|Xx~^MyM3 zj?XHSsDT^)9_H0SyHzLWM)cMFTiHrfP(BqZ%6Xw6YY#9=K3yj$8WFZ=eZ|Huo1;wy zZAIM$4dbpsyVUetjk@)$tSqJ=seF;@qh#%0?LSEr{izXwinQDNLW}{+Kyg9h>|{n> zR8k_+X=4L^EkIza&61yL_$-nH^OeZ#=wNd*iNsZak2G9r9qc3n_%~-wYc=rX`UimE z+PXpPd&*ZMN9K=-tLUcuA$1<)p?Gt50PRMm2K;r_ZJy4dqNfJB+nNxq?a_>?!t@0I zFv+J6M#$ir4CMhlnPz%Et!|fICMFz{{DZ)?EcOz_M9p5=eni&bzRY92zcq_h?b{qmHqv)wCa%oKsd&h@sHJz7@qt0R&ekvUN~jS|1OB}o{_2_69NtGq8!qySkuE}{d}%mnunOrCGb zwC-Ig7&Gveg8X6jzU|$AHIc)MXRtrvSO_+YpM;1c1I#(T-t@|`>jjcUUk@na|Hb8# ztV?q|ay7Iko@=sWT~aUQBRhjrCs9i`zpTvi+j3#4+o%y0KoHT z!2se~!b2>Rhd2utpeI{+bKO}Y_-E!K+_4@4ARGr-?ddsQRI0!F{%$3!Zt&9 z`?2oM9}go0QeSmd>W^dND$okD#Xu}_p4%UPIRbtjWY-0u;&+Zuc_7FLumEQ3OTH)E ze*6YVSk8ZC!a3pjKrc14yoq}7ghC6c4&d5x9di2Xa1<0v%Z>T;`eKv&J8nApF{pEt z(`Ed!btxZK$!HK*!o$hYQn4)Ojr3hc)|&^PCw~gsN8Jn5VI?J1V7gqGY z08I4>`ioFULcj!3KfZ?#GeQi{^?bfSPM(gun;;pJhsmK;NV)j-nra_*HY0clP%T-G zjwgTO7JPWBN9y&#T8(SPD3Z%{uBQ+aZ^Fxv6PavMYqw&w8A<3peapi*!lIgp+c(k)mv8mX*O zCFVKdG=!oh$7Jv#AO*ocVxe*b|2PLgLTQGdQAZUe$bg7(g0T#(0TuN(Vt>h_nB$1| z3(Ql)&5>3vs<-wWEyIY=TZep$i}v$bS$d|NK~e%u3J+n~%;@dUaFGx> z;gcaqN+30o_hq=xa{TTgv>$>6dHCg|)d#{uDB|DX@)fq9uDsd$l@-97*)joG;V`l_ zr2+zqHFA4<8_25p`OF7HSMMeq`f;P1F)7BT*?IOhsp&p{>feFi1eSO)oGq3pN&l#o z!8i=D05iIw4LXs~S%u6v%N=MgTWfc#ze`uX$)IAx8LLB`Y{5B|u7RM`d1FCAtH8ip zK*By;nvf%p334hEm^26HMA!~j59^j_ef0Kf#Vk-mc0UgAE6Juw8 zre|tyW)wal34D>HTKPrD6E6y&Vs^xND(jL3Y8pb_%Yw$_$i4$G*oO z1iel8NfGydLc4=A*2bZs{ra{;2}I-Chq`gx zrl#fU*^KJ3BATa1u)sLtm%BE{&wdR>x}a%xV^RH^$7i=NBIGt`i#o4*Xe~8u z#SuSY@a9O0S8?W4Y6yaGAp4t#-k*RlCNhjQ#ntHOfw?ZvSw#;w2teWWy`qAA!Kw2J z3QvOL<{7|`qo5Nz_X(lzCmLW-ydR2yJcjPk^w1=GY2DE^HuE8ju;@?S~! z!^i$Y2j{=mr@U|>UC&hOYuoFHw{$n)oM71;!|t5eta$Md(!97>LI>jY12kuPJNYVg z1ugA^i_tM4C#U?aQ%v(M{u&^*zv2Fsax3L>;T};cp%H&ix%KW zPsoD)a~g{T^6zl@D#^9Y6=|U6TNG9^21-9A*iURM^-oq=AgE&g4I699!2&M*Ah$6h z`h|@t-B;1M1Oj|30?o;*5*|r+fAYXbId}enga>$Y*6&KU+=o03jZK?wd;;F#;7~t4 zXZVDf&e+-d{#Q1MULfA-1r1x0YW)s?0GHObSSkT&ca*Xk&;-=_mQP5Bi~%8E4~|Ow z!OMVE-b&ZHNcI0~(ZG+?Szl)%q1Djvw?Jy~6W?j+9;L^CI+7;2bg8K+Px6X59^@#< za3YYR)Rm1zgp(VynAZ{2{sGcPvd4Eo_^e!{1h~fku~5eZPx$|_P={6R@hnvQ3H%c} zc{l(_yf=XQ5D~+I1|#1olKYLke*M8)P98uezG&9e#x5P`?`1hAVNL2c$h5#mYCF* z^OM_&7 zD_pMUAQt^I0wZq$nHJVb3bFqYnbto)^x%JhD){0*tn2701%9f65!9GYowhaqGZHU* z{Czvh3*8b2Y1&aw1=Ex&XrVyfu(mEfg4VTvJ_8|o*g$rk80fHmY7&otYXQst4_7j# zG`D2zHW}C{pw?a~*CTO=nyX%<3U#|VnAxN}VQ_k|FQw&?7 z2a+O&{~eF}H}m=HG5$+^7;rx*m|H#uxKrWx42)3Nc&17O`d^lXu-t_J{X}~p z7FwTk+#_0R6r3{mS7ZA}O(d(V$J&`4r&(oB+E24_8utsCRJrG9K6|z3ao9 z%lTuCVfH`u+vNq;H!Xjp=^hFKKWJ!wpd23W&?|QQq2lfRHe=nQ>WEHjyezNUCs9)k zIw=)dnyfyeWr6<>fNR7}U#r)+huiEQfT#)ohVDC*ien$VGKAWH85(Z2R#8R#jrebd zpa`fX1aFIP_ra1Of^co@(|oix`+Zq_76K~-9an7B%iQ(?2{NDm-3I>0aGQT1C%_1j zF8+pZtMCX&zd88uan+aObp%FCJ)XUf1 zy0V>YvuVf)%}joL&U>g$L$@f8DQ8qSOSsd5-inYIdyS(U?+KpE#%3Q#%78d`J{GM9 z{lyC*Y_Z=`xnu}J(WDOgW5GBJFpo#`jhoF;BMn5sT;vl2_A~O8=?UKuJ_d4_i_wUYlL)gufFJhDR-K^Tfcsm5Q{^oe zvvdMRS3VCgI%r=Ezc17T33c;>q!1Z08fH-WAYwE@WH(f0>!^*;r=`n1~jh>|XW zRJ)^9PdW$@jCmSs$P4Im*%HAZ#e;_#PW+99tUs!TYLUMbxmNx@B-rE9=*&wjDC3RZ z5u(bLTb^gCHhNw(UpM)=>W_W*MSIkhbgi<|>Amm%e?K>hacHrZrBdas6Tnz9Ko4dj z5KSj6CW05Rmx^PlFHY)>V*^bT+DMP^lQz=`WYJ00s^|Xh2L3XAl^DP^Los+yGNy0f z`Q&|aE;9gD{oJ%_7Zs3C4Q3CVK3qU}1iC9!!g#jc4@1Oz{q%? zvJKSK{j%C0iY@=@xENX>JUW3ufchITdGVEc5^RO@Ux`U;vhF-n>D@0=c8yz`MgmJ4 zZW{z+Kuh(F$QKN1`90W|2LLHbYrx9)Lmk=QUOO-zHb1Z>E1xKW{%%UY-pG~=UjJ`h zkEjS(PhY)@ojRjJthF1Y6~)_Gwhcr=tLHfyo!*}M`}6*M3hgc6cY@vVgGK)63}TH_ zfQ8Ptb$4IuyR?41?ID7&0Yw*dx6;bOanyNw#c!x zk-9mZM!R#Cv5S9}yTII5^P{{J>I`f|?RpQk5NSkwq0EWbPIQ|B^mwS7#=bm?wV}_; z?fuFkQ|E!|cdG3nF<|o*z~N@Lp83@Te3?Do z0;QQi0!m-mB-QmSItnAxYNEb-b^Lx?)^?mwo>rNghyeSJn){ye^1hr~K#)!4oqrs| zgWOafL`gobc<^A2IuCdXof`O`%<;1;#jxhcM z_sxnVomivw@~f`)1lqU;ooSulXW{^%n|hI58pEn)YCI`~Oqx4x@9q%f6Vd*+m8Ndr zvOPQXVjHgBhkc_wdwW?QT$p2u>J6}W>(7@Gy07PEG%+`<=kbLQga^KP3bxN*0}xpL zRW%>hA1seNr+Lg}!}Yr%$1q@ui;L@68GT@|*78Pw+)b_uS1_^-Yl3E7iyf8VuKafY z^UNog38{c4vAw0|mMcG!H>ZkdH_}h9yaR*_}-nF({ERA#ooxn!ifE%`b8YvV&ex(r z*P$tNJFL0KP|~(6Z@#4$2CY~>fQgoASk2>;>ERtCU-k(*6ime|a!FNHb>|z9Xh6ST zvfB*UtFN!`*?19(Q}Tcj^Qju}g>8S4cmesGNaq-En$GdMa*Z(Yuvp5goGcNOZ71VJ zqS}<41+-zep@T8Ki<$AK!%Ka}#yu{jF-(U_RivXJkrX73roJzXqTrR$t76w4p3`&D zT3fx9Ogp_WlZoA}YEy@;eJ`HzLXEu+zh>_0T^IDh{maW&4X=s!9X#FVD-dGt6Ak&o zJV}ell^i91DwFLp?dXJ6rQO1gnk>_`%y#D*^p|+40FOOSXm8PtAN$QA-P=otRETu$ zK9Qn^R_+>kng?`ZZ z$YV7r%!Bndaads-!`A8o#}Qgic2KoV-v#Z7prN>3BX;{|?a^;K9_(ICOVybw8KvkLIp{S1OELU(XIgQU#6;LO$gNf1+w(0Lx}H+(unSRHSklg zbP+^ToV#zCNXja!%ZJ>|q#w1i4pt?y{VexBdoe{X*TigSJl0>}7O$SN)5o8*M`sVj z*Vn3P4eQ{b0O#!@Yi@)iLj)0jF(-p4f|BVeg^yEf(yi3&ZqSMkJh{D+1TVEYaWI28 z+3}u*PO!-j1u!VTV zrN(dnwJz4TtZeI8*W0r{=O;y3^&ik{^3H3?OwSPR@r21yQo!{4Y ztSb}zyzdnEq4wiE{ow7!iJPrsVQxo>36INX&@bG0F-Ljp*iZe~o{!F8BqD+kUAuJg zb{d|c{3)+ey&N)5a)%Kdix7Na=wI(ic;RtD?nByDUVM%RE#E6263BnV_1s#--8+k! zVwh$16~;)=-~~S<1P$eFoi&Q$LC0Hha@Yi#n7g3&1pX`VYl)5wu>2GZ^^B8WD8No(yu?rMUhWzbT@xZ`^FWNoTyD=ovv3g%VSjv(?mG4n~2~ui3iY2w=qX zT!^u;m%9xb93s3asXRtf_U_LeJwKCf+d+uDQmzt9NZdlb?>!%U+kGjhaOgvG``O@9J9a6K#$TW`LPDKE73W+(6 zJr%S5ZpIpWXJ=%h4K8%y!Uaa;DG54mdkDg~u^cZG3fLiL-CPr=YTHVJcRyyz&Dk$y zJCwlLKRYwC%=Lks;&#NJVo}%j){kIp+aLbY^R`2Zq9;s%o;Pa<<8Y%;W&h{vro1Kg zCpvpJx8|S1@|Vqqbc0bkhnC+t==&R_XNZEDvH;cp=Q94bdhHTm)s07UbPxDm`!=u> zua?j5AOC<^3kB=dU6OTB1kR`fAx?Q)LCFVF$_QBHN{xM2!ukBOngl6?FjKD1bPBeV z?|c(`&@?6zqTET43|->as^Mzk^C|%}jhR=0&`03q>q)#*VwBXLZ=m`hV0&pRz1!hIY_>%&+RIr{^sIqnPuJ=gSsl!F=R(|AaBz=$K@ zh@nl|8@}Lr^5Iv(q7*JJYy5;QV8^YEba@o#w7zLJo~bjKBJq;2OXbhOFS^^9>Kamk zrkM%&jrd;07c_%f!E1OaoIjB4KjqzkQs~akb%T0g%b!ob3&-QRKYFT=!4f3P+;_=S z|PDZm9=r#rovzfyELRfr6l|Jg~Q7L>`#I`jnu9h`?^ZB!5;B1)kP#LP8ki zeIf2c5#n!04thOKpdgmp@x38abP$icU3KDMn`zm07KeY16_jA;=y=uG77s8^v?}o7 zJ_QjFKuevJhg*ff7@O5>=oWtj#WiV6Q^tKW-vKcL5k?Whr6ls+xID*PuKyWPn_2zZh(Zgg%KkFF%LEuQr^0w!iy13h540Ss5i01%(<10|A+86GSf>QD{i0%9` zh|x2Jf^Q%HIl}hKe^=~f{KTCEHDf^ey|Xi;VI3SB_`u+OK1fkRQX1lxq8>lc4m(8< z2Fhb^-@Raa_$A5Uv2YbZtv89-9r}A{j2{4b$>EgK*6V~<{MY2kFoRilBcnLza0KT| zUPrwUXWf)CDB6BITPk2>BB{Uk)!fgv zkK}-|d*usWHXLev*)N?2RZuS}uM%D8Ts%-AF(6D1AEDkglClbZ2z;zBq!VqXbTL8( zeP0aUxsf!f+#UN&Z}$Bys_AqO?~T@EoW3RamtPM$S(GW?)w^kh%JH{vtHk<&Q-+-{ zlg|)_d5-aE!@5Si6p#tvz8_WB1;qVCrYZ4 z@+{`SOjuf9I$hDN6CmJoQ_2XFN_RiESW~w2>n{fUZoGZ@^Wx8HcUPxwOy_xlGp-Dn z-m!z;xp=RH{H8bwIinsoFHx(Eho*zz4cVWsqJ0dZSm}Y6mE-A}GDT`blbVymNr+wAsYzyv z?Wmnv6_wr_eat*jc!hzm#Z@OnuZGVzTR*}dba5UmNrKB$dvZEUle-4<%M<7iF+WGe zuMW=MOcrP^AteNqbE5b*%k2GFSe`$GlLVaS6ktMk_^;{x=ZDYwKy90A*AX03;Dj@axXnf1%B#ToFMQcFx-n-Uk$-fn8oQ9}{0QP&zrLq)$%}nrzDN*OOy7`}wZ3 zpl6CCfmJ9Zu2csH>4Nuc7e|1DaQwjW%`P?;9)yvX9-HcYZ4u}E{h8ShpF^cV>S6?| z*+8WjXKtE$3*{4bU0||2XZ7zx?&) zoVspPm`YEcxoU5nFnHA8=eM2y5RAzA(ih+;?mMrbmnrb3G2Fukt!fzFZ~Kq9{<+cJ zfgW+Q+Qng>Ts=R+lsk}w$u2(?yIXy-PQd6L;g8oyGqbW( zvD#yzrx$D17<3AfQb4RwACk>gN zVIWD4yuhg~prHq0>K7`ZEaRb_6I}!a_CVl+<q=sof<7U3i|DZ|{k8(E+u1 z(&wkQyZ>6V0*~kZ(M;)o>W#mYcmx>``2PrJAE8T{vpKAT$J&a@5~+XAG-8M9?+DBe znV|B|fdJS3<#Y!Cw0tQ>4F|i9fO0zB6qr@kEqu>-Sza;kostia=gY$8ZA5=wz^zBD z;IVo%Dopm=QFbwIJqHRx!`7)d2-3TAILeIPN!A3rvu zz{!;PLN^Tvo0Xa3!kjfZ6|*qS2`Sr|SLC+|7~6dTZ9TnY&i-P%{+I`OzzA?3MsS+f zYxPB6lnEjT!`Z7T=?|^rBs?DWe%#oawIc^-xAB*kkp5QcEPD!|-eGTh34Y99M)22% zF(Y8BCppdlKJva23Cse;f5!EQNUD$%a=aldiWOsPnS@A-KdkzODkuGsqtb7r{R9ay zJO4X~i;D|zZ!1@%kA>G8XYW5q2*7ZT5&cIv`w`K9LG1=i8NmC-uSyCP zsr%Xt(}c0NRouA;j?7n53G@_z*!+dH-`9EL2*lwk5dYIx>wueNgoq=Oo}81Z%f2-I zbKH*?xEqBv=y1u9GzYEpkIV_}Cl| zM-iOB6d}^%!rtjZqsK4&l-dtS21YM=MI z<8G5IX6BjI-v`2iZLX5Vh8`Xde> z89OWTi7*!&3{%~?vI<4m?93VcL+ikyvLs$0;%CeL1JKiMrW8GP(=T<@iMf210Om}c zLiig~n+?CJGaF6UFlIzp6RfQe>CDUw2=TgX`}2i#ff2aR-EQ8pajpCuzbZXJ7)U9; zf4@!*4%`$fKW<6@Q6DfDgZ5OvG&cSNL=~Vw?er4c|M=_Q!r261tH&yy_#U*XviO|M zf5i3Lj=$2Uu@xpv1V^Qg{#W{xF~dHM@JAk|ztX1}Z`LwFXZkyq)aQTYWZ|W~%vmnIL zU^i-0RK5?zC+%wK8Biw!R@*A-Et0$>h0pJqMXr6z(Bh)-d4D7N&y^ok21&=ERF;OJ zrz_Pew0??>Vu$MZ;VA#mV?=`^I7ldeT6LWG>za}!b9I9U8MAkg-cLv%8B9#tR>Zs8 zTt?5$q0S(``z(Otid7|K&RW?Zbbk?!RL5+iv=ETmAppGR1k>UhY`C(HP17Q!1dRx^zc;cangE zQNSvOOH+Q&SIo2LgFRrz1ppNJ!^8Q$#UCizv~V68RhRvS0f4e=z~9g$ejG3uK+DD1 zsxUj(o?BLyC$qb?Mg^QIiqo_T7X}rA8lEJtz1tOuVHF}qtW{j?MA_m?4(`7Y}J#2p*Krk881+HkZ@vWEDG$&-vWlwD~ z3D$r%uIpLOn@M@NfTNu3TkG@X=z43~RFc>-rrp3qpc_rp6TG`@6|x~)vq zuRS?JW8=9%;MDy-5o3nn!RXyv->0^8u#be`vt72KZSjg$WmVJb8pTTox$0>Z3&3UXmG}tD9Xd%9_yD-S^Tb|Tw?BG~vfK9N znj+g*dtzR<`zmwC5|7K0-PT#=81G4H#-))&ne^+)^6bVF&!e^pU@a}vi46XNk zPieKC-fXtW)(o{p{X)NZGrE+;ewRyM# zYm&G14Fd^>$<`yuYxy(cpC&He?Wq3(Eckk6m5y2MhvDJ6Xh9U1~oE6kO%OhY5ox6V^`TD_!j8Fglw?{ir)zQ0-Q%NS3f#DJ21_qY?Vi z<9(M4L$KiGq{l^!LO^9KJ0(j7Pe9_$vWWYwY8Kgm`@c`1`y9w>O5spxX7)78=Sp`; zr7C#Gn%v74vWP5yasnFicYhVX;no4IsVDr6qwWQcsBGvtT|*~zc2xF<3xic3S`VO4 zj@<&1nY?>5^6kvb?1@<`tK%D0I=N?vX5wwoC9nDRdovIbr~?IK^jO{MkG}i|>Z2`l z0jo-HdeyeE7<7p@aL7a36!y)0=mMqy($pRXN9^b+&$`?+$Q(!NE7Ms)2*NUM7^Zc;4&6sIoQHcQQO{QMNqU!$VjvSFY)0c?8nkI64^{# zm+C~qOW?RCs1{a<;keg)exWC%{6P{#B>Wv+^(Qheb`!6@cc~U_Nme!v8$whFd5YRL z4IOmm2e%dVQgXp8Obnpk1qj>-2!v0Mbj8vgk zg)m>bOg=VW!1=Wx#0unW#Q;xqaXBVd1%R-|eHm_Bd($_`qhWy%-G;A1Puk9?~ayea(Q`jz9h256VX+TB^lc)(qj5}P&Dp_HA%T|h|iQ)={0T}KHPw;E2 z%VZqR+8Y6)p1eEb@#r3DzRR9)!1Ni$C@#IT$0TE*Wp1(ZxH*eGMWc@Qn0uls}*+mu)94>OpaEKMl35xHVXFMYAY1W)qG% z`h<*Dvp)|2NsE))3$(FDk1yj%Y1jI@zyvN<1*1<4t%V^e&Fe#kvKBTJ)~4IM#RoRw zu=$TeRKx}p_zCRSc^}6c!o}>p+ngLwb?w}F?+Gp0@fJMX@t(imNHeJl-p5`@-E6`= zJ8F5HyDsEi7Tl1_V@`b7DS7jLoWi4rQym#vr@Ond`)icEuru~+v^m$10c_|+Ux+_( zoov`+-rClBM)+ws&I1>>cg0cwoSO&pjmOQ>4hNfV-BFKceBf0PfiXnysIjN!GZ26UL)nm!+&p5Mfm8Zezp4^~t7OS3+2-Oi%7^W6@A! z0o~fHJ?PdTv}QO!>w1`?Bm470^n?K?{hm}JccSw$&J@!TDQu_Uvrhp8+rGVb*$HMO)gO;Zm8D1 z%Sd3i+vp8P8RBLJ%|K`S8$moKYq+cv@MB@g3R!t&n?1@qxXk7>!%uuG?m0hHbg_l9oo9XaBC z_-lg{rt|4Jd$zmS%tIcsX1yv7Ebqb)!dBiCt4^S7#bS z4Lf{)2_ALsB_-pEbYEf8x_sNI^wEc1Z(xl@x|sMO*NfK}h%nyW{T;#7qtGotC0=Yf zuU?aK@i1y}81;>6XT&W4YvO!OAL;G&DAgkw(u?<-H1sH*LmWslGc&)Pv^g&7&089| zj##XX(()7aS}Le}_dYbudo`%JBMP_Fur`TY9AC`s-n}rm5}~pc0QDNp!jtEG1(BPb zi#_IAz8Og-J@q#W2Ir`fao61i?JH`q?`14Xbi@oz(p(_iLlOlJqv?x_r&prnV4PPM zW?sD5L-rzGo$KXk#>8}2u259$gN@eBH)T1L<(*jUia>QH*Oh z`u;JGM}8q(Qj!XrTsZ!XST19(y=~fJ-wb9EHCVj-=9K-s5?nMy-CuCCDOQnrp>%R+ z?2PhsuC84+^^mA3qQa}|_5HkiFP$c)r?EX;dy`#@FP+*n<+8t{=Evu^Gdyu^Ol}^e z`SM{!#S1Y-q7SbdZ}xBbj#~K9R^eV1_NvEr`m0CDQB5k9aeHxKHnum=#`KDdRY+<+ zb|pE_seIZuNR>P1@{<5s6y(A_e^toOD?dbFs1&=)Wn{?jp4%|rU(5#+LYH@!-K%;E zlki-|D8+=GTb%l%q2@BC{K9+vCFMKgy%veAdrM8Z8OW7U%mx;|xO~t5l?^cuKC>rK z+(bU6^&^lkiSoQf@;8>A>O+UiE*zpOSb*;?z}_tFEO#Sq>J02*A4B| z7)X}LHpoO1yIDNmB~{F4Lp3LO;yArMcePMmTeimTksoi{>T2zgDy}bS`EQt-1?tT^ zk4KKf)Q9Cx(pao^=6Yp`53g50p-qDw_QI5-H77@(!l)It=OSN8$tAH%PfFy{HYa;1 z+FYCXVpS%;Io2^en!MrcuBXi2yfGG~<;V=V#oZ<+98uinZlf)JF9-##&BBc)N|_(kFJ77d~0r#;tKa1p$RT9q&ojT{hFf4|`47B_R1$(=t!+Hz{E>KbHcz zTZ~Rq!PO2UL^glaZC64`5srAV>P}*iLfD<9Yv>mg`q&)HoV2jU5+E3)-j<{gCAjox z-95KQRPh`}1Y^Ey&Jhio%?8g z_hv4;OOIJ-6q(}c;_0*;6EBh`le=T7r)vU4b|Lx&4{bMwu(;CZzFT2vC1d}zd&C@! z_))p?EF$+d_{b`P#fAcn^l7GFxqYKt^Ed-Z86{SolR;}6_V1MXOMm}y-eZA3Df+0C z^~rW)yd6>3vL-{=o%+D@VxZu|Q8wuhi_WMn~BFUg#wp@o0qmT7)55dBcdTPyG4rgI^_Y^ zLz&OWSK6EDk~E#vzCrAe^Ip2JHGXJuiw?6B?qu`a-Oa6eVTIb^8#*SYX4C&hK!S+trzw#Q^{<~cad{gl0>BagjN7Z1ZiQQ><-Y?H_7DhvMPiw?Vzqey|!gV7z zvFTaCTk=Uz76td)af)8n?vBXRRI}Wz5$IOUTM}`4IzDPUS*>c56CM{+Lhx+MD~UX} z0rI*yc1uelsUkRPr{3XWyvP!f=T{GON6E~OC$!d{CM|qRYJRu0WMt%b7I)|x*o#3* zi49RhQ6lZ8udd#KUEf8$O7qG$!T}vmv%*y-wX^I$i#KN?sZ>K7G4-2j`R~;YNXiNz z?0uNvWSnzfEqr6S8&w5=9$Pj)zPNkKnqiIpvs#Lgw;>lOMI4StZ>YIjpzA~9Yhbxs z-uNYLpC<(_^RpuHq}$=hucJE#u-)ke{A&jQb_br(NP*t#>aOWVuG8`ql#Cbkca+tK za>Ne}BB6C$l_M%Ay%(sOKV6$UPCN*hw<&U~uO#WFt`ILZZE1OLtyl$*T-;Q`jdl-f zKr6Ug;=~myM(3eaQnzMc=Y*$*^=%M02H&j&@8oXGqE^14mVg3}x>$SMc8~{qFm{TP$ADgNo#<(~5nJtf* z*Wh-Sw1(k07^q^g+Is`2gX zl5|=!qcu|c$&YGAdU5SejZf>~ zOn1I@JATapv(`xZoSVGx7G8MZa?@N3|LpQ|jG ztc0(0Pa9V#l`iy+)u6fqERx(LcN#EuYAUV{<7ZKB#|zFsH@*p?-9{devM6a^RKDlsEi zUh_RDmFZrS6pj8B7j)HdXGWrXwQU7xFtZH~jky!OAm+N5ava7kKNXGDUD!PR3W(aq zm4x6QO;EU0f}(|;tm0xd;&4p{c0l2Ftu>QIiXr)q?K0U$3gR#-6uG70dX|;#2c&t` z>K5v=!pakN%ktJLJx#PyqHWeLXupP^#0Ic&7e-5VRxOa^rnre>^~-NKiJ4C0gUsO> zjA>L6_QU;}LFoagKun*s(PaEkBzJ+ za#aozwNrPG{fHFH^2L*^YnRr6%M^g^cL6*W$sEJ{`v#*c_vB@GN;y85o+Hs_f4zwI zUJ2gKoI*}EjTW@MWZ?8(T!_$Qb6#Ej;8lL@4=gJG4+t5FF0bBD?YIwx4{swvCrcNW z5@Q2%8}?&Hao{{G;&m`(5a^fh*O>7mjSxJPBH^M*{Ino&zn*x=596Sc&i`MCfvZazT3hyr1{(mc$-6a;-?Nrb$7MtT^M3_1Z!OnI*1R*M?6| z>4n25jg1GTdNZN2sn4Qt0x#fY&mbO(=MAJh>VlX%PK9gKljdg5L=A)%z#WBK>5s(% zeD>q^HgA}Uk*R6&Lh`s0?96Cv0|~_F3a9&95=cx*)7h7hJVjbtiW2*ZP}m`M%RmrC zE%%J(CWuM5uWO(mVPFP%NchY82^qvqszU5agpQ|Qo4YvN5LRgGaB3NZBhiZ!NLTZ| zffMk}_{F?%__?ff!2n1sx$}5lr7-nE?@II;T-W0yDgG<{L%TUJ-;H7~_Otx0%y<9p zMX*z>PIvHmZm7h*F`uH=;{8;y8-}BH7-%64R~VY+7uDn)59Ave-9VUbHFftJnW&nV z&E}M&wiOps$C~!MzjV2Lnl(MqDnHse{A@Gae>Mka;L2b6=#z4a9J%xA`6!ou=w7ap zZ?lLO+#U8MkdK{fFV2$}YfPy}gPYUc;DD*`qKW0bW6#Dl`D~#2%J;2Ne87bqMH&S=GbkyKe*=_ z4ZY5(886Gj5e!3Gvj; zyaV>5xp#z5hbdKoGHSYjEi1b~Ju&3CF#K5+lh*BrZp^ox)(lir&J!o@$~&hoq;HFW zQk$nZiQ?MfHA)H}rJdofe3jzV?JFA zK2G^2eKuY(S=vFlWEzVE{SjO|Ha>NtDd0=#QgdsStXeb!iv?T(sP*gj*0Tk1@1_@$ z7^Vs#UCC=;QYk|lWz&^QmzLV;%i+n4UDO)h3>Oj^Qa)6rHMDxiKG@yuxS7z!V5!NS zHENkU*XqrAPsX6(_ETZuVg|4n9Yw*S?pm&R-(4k8Z%47x-of27ykR39=QSOiOpVdt z6;j&m%wVcnzsk*k2WH%)i^5sY%MNU;%+@d~;->AF8~GNn#g6PXEA=OGsFt9+t_^c& zuaR4}`7N((w{@Lo1o%L4{IbPxEyKeA0J}K9LAWB4fv0lp&#DgN!FLz?fP&v98CqH| zmN3!j?n~0c{dl<;o$Foj@k>pE(&Nh|tC86GkAr<5XKPw|GYYL-LtTlIWSrb(?bbJz zMwKgSq{0~3Vx^By;*rG1;k|>saW5r#ha6o;sk^1>zpqxJ_qH)L<6L|C9Xd%2{AG|G z&jFW7VYAh#K~yXI+ZtiRBHvq@a)PX)@Lh!D?CPZSEG7oPH-f|29yyt&W$z{5yLw-i zUaB2c$u+6031SlUl|rs@q-HC9A7xUc9l~We|A9#-U(&_7HscU6mR|k19SiB5#Xt|+ zN@nPbl+A(x4>+Ov~iSqPHyKOmDm$2R}}W8T)nnHGq7j z{ihRXwj_6VGc%pwa07N+!OotQxHgooM->l53RM*(2i&V=9BmpYc2Vs=u2rG9{A2K> zN#H=&xB|ut{?zH20r~xt+99KsoMH2PiO$L!oub~~t}-@!*Mg&R_33#vkG4cju+b(%}~k-aTSYFw-Zbk^P81GOgGs^M)}Eu zr0Hfg2hoFG(DE!Iu^R8@1K;7hHDXD!1XLLml^GBG$jpMXcyDH*(~Ilt4{s%7Jh(l7 ze4{O%9)nkW!!Rr19Ja`sOp)6h(_DK?YRC=Mz44Vj5zkf39`bSW4#wvCw&d1$?5whL zKP<5LLN0Xt%}mv{s|Gg}!nLynFjf0*f1i5OKxX#7+5Hf5y}4#M(e*)OWrBgl}TUnyKlC?Q#BkhYPd~>mHa&QJEKe&sN{SYoEe9Ky9sJZSXE79}Zx4 z3q_mF#l@RraG{I>+wCc)*Z`>KuKMs343fWMTonC0X$N$`@!DvM-xI8usF0H0J>=#y~&r=*N%F)A`Py6T{XosrDTYpi2ba zpfaG&y7F!ga!zgs!Waz6ongRdUl>C59gxsv5&$)xL358od4J34{7f4n7Vy;DK@a`y zf29#G*3z6NB052e?*;H@RxRZeKIfF*FF~lS`aOeKRt{)GFpSy!0px@r#t5RfpY6H{ zrKrEN*ryf%M{}?;;Nt;>iDz$unD73wMK}cG_uId{3MT6R zY9juh2j5QpC*k!7HQVrKBBrw;z=De0uj>m{Ujk!(zd@rkr)_ccD=CT~f1wl037o=iA=IS8Rqt zDS<#!1Y;}gtdwT^dD}l)Wfav}3htX^p5ysoyIs`Y-cI*;VW6~o>t?0CZn;qQ*`)V& zR;&uvx1Z|mK|vz^z3Z@FjHF=W7Is)1a4K6YomI&UfUC;rq8YSMt_io+=9J*WSnhG#7NXEw8Z-o3m zw*f?t!nv~%*E7`lsLNMa6q%4z&8cARTtH%e1!ID=akDMJ#JWGwbC>Aus$r+`lOsBU zdC>tVBx_%6?TpFr+|NT7%J-w8*x$voDM5n>PNo<+JKBsG_<|s z7-1TtZG)eAZ(J;5j82l}y^wdC`ouc zfSZl>jfwa)Hn2y97%0igmpflGbJ>!1ZU2EM3uT}fJ4H;Zx;>UI+l;PSb<{+BQmH8# zTR;HI<{!Y7$Yr7#N$Ho?p42xPlL4cxE+_UFWLK;_U z*IVGLU*8yeBwvEIW@&%+sm*&hQz#}>8h=vcQKbHH`66xrtK@ySwx$0xL&2*|?@(i~ zw5amjWC^>ZzWXfQ()@Ys5{ApJlt&1@S6Xk3C+nEVVJn>VlS|HpVYrG<0O;9lE>66W z37d7II8c~L$ zM9{eJ%%OIc+9W>n`njqtTwSziI^RZo6?|-1)mINWqccshy>*}bwe*6QP4kAsXpIJZ z1M|V5EfA~hafIig->^eXrk+~REPAo5JAV9>Cpj_uG4st5_K-QJHUGI1{2*ENWE9&+fGPb$XBj zhW5~MJmn4hb}ES+{$n`6MBsy;g?J!c?vT<{%9BXJO)`v2rliaAA3d}u)W@Wu+n;Us)|c^lxdBM6E45A zxwrkzSo7*a$Wz$y1jldJhV^jk{podcSb5$DnsVdM3q!~_-TCET8m)0*JfFfIC5U-E zX6p!I5?ojJEv$nfo7Ueyh4BwKp_4oG#CwlvtujYS7etmTjeJmBT5IJnK40pj?hrfc z?nLzbQCndAFKhEZ)&;^!UdvDg-{~-(rr32|-l|eSZPYSM`0*q$hU+04#&MBZt)}kN zX{(o<6Xc8S@0EYBHRSBSX(2TENtKgkscG|CV<2|s%%+%E-*@L@eGSQ;=R%7=mW>!w z`jxZP&%IcbTIi6I$x~czSLqnUY7o_$Jp)CN9dE9hp#iBbeLiHIBgx2(i-A}pcIt8S zd~tyEbL|caM=F(d`OWW9q4DVCGj~SBl)a*4U(F(78XF^&@l-y+NI6o@YyMn8YXDKX zPEu(7&eyw9_GfZ&DzskZ05*ku(slE>FSP;2o}x+uQA!1f^61vy|A4p=KAC zrIRw^iHe2O$wl8;sWR1@!t~l27}g6czEG-iINX1$m2)*2`Qxi(Cxg`4gdd{UH%@ei zs`-}&+6IqqA)gO4wmY+4u)MqF_~6_H?G7Fq(n6U$JOngwNF$cn#8W)+aLRPqMulCQ z=b_PtP^hP1QZ;T<6na#ta(Hr^TH$-i*CamB?c-Xqu=hl-7n(9S%Iw+5Ip@#qyF-t% zFy3;K2K190Pi=+ITo_qY2IiW4R?5yYKRP3k36L8tNaqP11OB1sLFwj*4p@8|3Pw|| zgrlhpv98KhEb2}!$7cfd%C$8856M3K_H{bbH9(oYDUZX?e2#sNpB| zyivprJgxK}FvkK|gPP4w)2cIYX`nHclTElMky*=tro&lW)S`7S*=dV)xOOyLi|qTxM&$uxPHAnnVLP4VFYgN^ER-hx3F>PoEUoUAKv#&%n5L9ce0~RnXDzvWpcep*Cj*O9nKK5ci!p}=I5{+|Ud94z8GE|b!d@$D# z>5ZHprBiSSbUN|=(XcfZn7+AUQ+2_6HD+$-OmOrJw6vfz6ralaQHsgR35n@TZ?F9w0!d9Q;NvVH%Ueh~TeJ^2<1J2gzxz0doKZUT%8kVLNsw943weRdY{No$PW)(H4$mHh@( zMXkMw>M(P?N6anK9LccqMK~|pfp`ob>$T;&R+Vb>Rf_O39aq}EzJ+di`BLoBgu`%c zZ$m&`Ff-TU8F%)F{6z|_pFpd?p=$xsM{gKO+S+;XzbZPy9z}s$FUMV#Qrd2jnU2tc zmtm7u*GerC6I)~Lu}R$qUHx4fWuuR`Gai?j3x3?M3o>GWl99J5)cjimg&WAoQSROo z_KGa~6R&fZU#hr2{S9*8zI%QZ+$+DTS)u{NJxI#khw-L|FyS*tc!6K`Qp~dK>zn%~KFS{PInag87-3OA zGnD}UKnC77Fh<6rY53x&&?qWq-euv6V$5g}sGsPu-?~-e2 zj);)!PTqY-^x^PIQ$15IPLG`>x+s=hIowAxD@Uxd{5wV77XjQ!*Ta`;Ynu=;ajPH$ z!-x8Ap5fb_2s2^RL$&%lD-TI;Vs15#eg1l8mPd2zM6ByL+~^1`TY_Q^)J)TNRRiaI z6$JYn_X_syr)@x4%g_ZIaI@%nX{4Y8I)&M9_y$gEOZthALsxk{*)%xB*@igPQqU6yN zl0x5k1D~MLp0~09O=Elr*ZyR?)Qae!xiI& z^()7DLf!cw30F7Xj*0k63)l-`b37Ile^haJIiX1)W^Z3nFAz=fTLo{gfu<2R>$wt- z&n_SNx55U0xx@5SrN(BkNccOSUa1y~l431|d9pfh%Pt1DnXHQyE~Xx-IOHJmhqO`K z`h33}yLZB8sThVRIt~scrI@ehSs%TN_&j9~dK89&Ds#sUCgS~=qugLOXN0y<=>bYo0!TSbd^l2Y81Lq$G4vmQ9Ik?5 zk3Sj?%*5?*zzA3e9XwOKOp5jcDpJUa9f$|a8ZVVVuk+Rq0_Rhfz18PFe~NVK{I>_q z-B|rm;q|@1IfMDBPvap!NVy_WW>QMv~e@ zsYJBZ=IWcPE1>i)A~uPRY~OhXC8^rg>_n{h&hF>;;4c}w3`o(U3MYT7>HSNoM5F?g z#6J!+e)y-t|AoJ}flfG|)wOzkdHuOaPqX0aV%YH-?el(V1Vr zX9b;f?mvCUzi&(r=-JG`t*cn|{jD?lUv?D`I)UTx-{Jo?A^-gF-_`%G@c(!3AEaCU ztNQ+{`Tti9-yUv#F75~s5s_IOygRPv(~ZNv&!b{_Ru3|UsXm9fYZ(t{DNbTS!cHWr zK6OyXYUM*@kf#C%`2iK=(nKaP?fYSEcsIe9n8t_h7HI1CoBjT2PF(5ji7JFr5As3C zN!f``rXOU&7f<~lay3w<-T&6ybd=IW%GW`MlD}Mvzkm2~x%$vzzAxtiUvo3s6Zys+ zgHqae}9|5xkw1@>O*w*4wN2IFrWWx d3ynA=TS)uG=7H8HAX-G%E^A)OQNH`f{{iJ%WfcGb literal 0 HcmV?d00001 diff --git a/orly_files/figure-html/other-stuff-1.png b/orly_files/figure-html/other-stuff-1.png new file mode 100644 index 0000000000000000000000000000000000000000..9c3669cfc086e15bb301d079ddc50788fd65c641 GIT binary patch literal 54039 zcmeFZWmH_jnl_3DCkYmUhu{vu9fG?%1a}$<5TKzU2_d+<2X}Yr1cJLe1b0Y~hNc_( z>ztYS&Y5%P_q}V~HUIY7R#m&IUU}Z<*%4YAiUhbXaZylE2$YrH>Y$)tgrK0HqhMnp z&zOO!@R27doaE%RT;vqx0ImQpT@Nc8J4HKpJ1-|29Yt9b6ycZ{eRD@DeGHw{;3%aK&3$DC6w1u2cqz_LB^LIWJXv%8=d5^P5eu7&= z=vZ!uRwbLbQ*aqq=IB@?o9;eo9Y&R$WQg%+ICa!-*qsBfaxQWM&)Xd?Fb~@+j8YRw zP{}fDILZ08y~E?aO0dU&4$mjYDlpWhW;ZWaLle}*^J_NUl;68y?>ez$^Vtv@kEB%u@pl!=$vCmsFIL66-mt%YOE2h4# z^VhVeabx{=3ivSIx&_O8b?1|c!@Y0TSw8Fe^&S^ik9lrC9K){M`bsA=@+3cBSee1t z1sD&uw128rB<3l=vA12^f?BA4t)^xrJd?tTU)#v6EqQkF)~ssvNkvayQFU`9eel6& z!7Gk!&aaa~2P3*amMSZf`m=xd{%jR6xx5s^_#V+=n)zqY3+ASqdwH;TERZ=G=>Hae z-{r3a3G&JlIXeO#UVTpGd;%{{Oa4Uq^V3&Qfr1R=VEeItP30*%h4afjWe`_lA)zVv zj=5XO;iM`)xzHS~D%r_>s7^lOZDW*INUbqerFL|T<_c%~@d;GBe}WvC2MiOe3KeJ_##@ZxXaxDKuh{Z=zO+pcASzu32dGKBQQnV>!{6|l3^5f8u zb(hX~e?Dup= ze?&j^mFJ&bLn4LX)ZvVS+G}%hV*nSSLRA{(y))E+LL=sF)%B*8C*$e$h>+5x3sPJ zE}8MMZDh5VLQ|_xU}SmRxf0ZbHnjVtFtZ*m1JnpuJ=(SUqrSf0kw-EswE;j~xJQOK z`n8;Gbh4n{ZJXg$!K)O_Jsqc~x?;M-<@IwiMB$AkzWHuwFgW#mxqE}o@r=zz5SsC< zsQU@QIH{lNOp^7>T0yqd%;UqaWiP%Asl__#hOfApP-0$eT*qB!@pTdrn{p{;!|=cN zNc}m5ac##op`=oUgbp&eznC0(vVkdl^?9XX^#^r=5)kj#-0dj@e9!kG_+jp7?WcFu z0cS|FkXR0Q^Wy!2q%@)u#UTcSnx6;MM>oT}KtYj4QGP3<_W|`Z2eXT6{$`N-rv&}E zO7zpO?D4;*tc#UA{aCaLiXRqLS^FbNS*FnXBgt=H@V=&(U8Bo=%77Ce{~HX(xk}H; z$;fHGg`5RX9y9_RYR0=a+ra! zw==kO`~TD1p8oI9{(Wx#ch>%Gq5SWH{P!L8zkBW9?co2Kk^eO#|LJZ2f9%)vFj4;_ zJfNdSLj;}D^V<&P7qN||ateJ4k5N-$Mn!9mj9?$5xP)rE?gQS@L_B5jK{Fdw3BuwD#@6FNC6Oi_1((HH6e{@4 zHaX3H=XGChn6I(~OY%%+8C9DI%y#+n19X-l3)QCM9X{o&ES2A}{?REt6*Tf(P;C4D zfg$CCX8h?=ec#&st=M>V>$)-Ppj;_lmh`9loAEj;IkidyPW4%)n3!cZp~iPVWcdM) zXa|9_C6hKp`2jc1CB}`vU@t%nVt(guTo!8tR$JU|9rj$o?Psb2tIS~6m8Rh$ey;hr zj>)LNII{VH{c+Q=F9eiu^XfU6*(lr1QQ;LUc9Z-1$mw!%QnYyq4Gig*kiz3zE!a*Q@ zJ*KVsJ-2PIF4=1tQ$}AG_@1rUucZsAk7o)bR)8;$Dff}{rm7OB^0i~qwB9R)LKH52 zb+c%xC}4Ged*VO?y50=6qw&ASxr%ZD5vLnc5Vxo54>T&|?L0kn$b&w@2RAdjA;-^5 zfLp!t`zw}+jV`fZSw{-Kk#H2=kdbhH#nAusy>#ekPpEjrWuQB5*1KOHx;tIv=oruf zPp5~(@4k2MOA)PKw6!X*g5HPNk7s78a<@-)K`yUK0GmPlqV`6N?ZPcCs|!jLK9G#k zjKD|FEdTv-#qo`92yW$bv7n!*FibYk+;?o4Sfw$8F)vA{r{#}S&djXBxcgl0<|e=P z)D#GmdtiF8Tz7EIYu1vQ(J%Q@(dJ^Vys+@J`)q+yy$_2Z@|j{W1u>a)%D&#T_TRZ_ zXZH9l!!R!MBo^ECt`^i;d^mQ2{zS!EhPce4JHQd~?NXLK0Tq=fl*~Z;&m9B8*NjYj zxL&Z+$S~X?FJR15v1{+b?`K7laslcCEQ1_zo9zF4OK}_!3>#F-^f;#SUHVbr<1$}i z2WeF)UEKV@-lWz+;pG>wzkD!TZP2t=SYxQ|FOT;*R6hU>{4mZvP8264SnWyWcdEV6 z>*eQtv}ahVAJ^N?5Q4_y$Kiy7wAj+c3{#zc+}h8s@c5(RDbX@ZBJC7ML3%6(Go&cy7$z*7Q-i(VssNJiO8VgXr z@p^09N+@+2pUoB$06BI4vTCHVv(djN_p3csUPFqHodVUE_3^NXnD4l`3O%oBOIji3 zWs-Ifo1G#GdEM!qHsyc%kx=pHQ++!-n&K(%Ka*Pkm%AYMS;|MRrRlgr^B%58qB%hD zvkUuAZxKgC;QIP+epe2AK!hLoA;pQT;k&}zk1zN%jxXPo(dz%C0#1F^@*5qBe3n6O z#7<{Rj#^_k_Su@AZVyVZh+wVUGIOxOD)wp}KSt3bWDLR7VtL8;UjYvb2AWjozM(=W z;t2uOJ6bJ2{)=uzf&W#tA8vumbwT2DE%C^!2?_S5Tkrh|eoaYebcUc!iSg~S=xmL- zsl#KA-+4wT5hw2Nz++bC421aQ2gj_(Xidq7xoBFcat>nyNouhcA>@{D+D#;V9hviI zPzs*c{(GDKV}so6w>9vZO3X_EzE4;LJj6`EMP?!HSwKJa@q&*gL+)2zv(a?Se(C(c zIQI#*2pOAc=Z}VnYjXRsB|o?LTgm;{Rd>F?(|Sdn=@z$D;l)nq6*<#hLcAq1mAf2G zTcH2X)MyAbRJ(BSWzbXX-H+ePr9^q>R_sQSkHe0xK0GZ5r zcbf0k^UQqYO>pyBbxTBWQEy+Ix03K8x()~{J&rG!7=dwA{vkGQ*W*H)uZtAVsC%4h+MpC^f_7h&g48_m9gMyn={v77xldb z9uaPgsZ}E{W0@uBmUv?CgiKh==+M?X{RqSxYVsPguSZrdq9Nx@t`|oj!h76Arth19^u%OEV(0+d+%VDDla9tAoMxwzG*&c5=6;SJ4hTmzJ zTi-woj(-g0g%xBI@IiK^%l~RTI)j$E$VpMiwAp1*LnY5?bfVd3hLn?(J*LAlmCM|I zok`Lo(ew?#9t-~va1U7?JZ+rZ*dOHv^EKL!`)<3AWr4q2&f{!`Pt{+OHG{xCvBnQGcBA8CaSqEu?EuUkpQ#wHgNYop@O&tr z_kLB8c*ZgN2m5%(8dd}4n%Cr4#yhjZj1nE;;Qr}!q?^7-&a#<=4nndANi*O?)Omm??2;51>k5lx_`m|+0q&>hkcD&M?zIFYj{>~;)1&UQIJU#e$l zXqWVz@N?XhERTl4o^H-oQ4WSaiRD4=k2g_doV;m>J7(oQe&wkbkX1l>&Q(s%W|=#% z#r>g|!>DbDqakm3p_fi~F)DI@wnd$C77W^y=D0fZ&v0LNgzF$<4e#A&;jpBf2Lei= zbiWOX9ar{^VIE2)K_$t%UvgK&rK+Ehj`{uiA|m9+CoEB-Z=$WEX|*0T#NPX3{1>af z?+H{4z53TdYrqLoM13#B=j?Q`HSVYp0GRE(-5|_UPTJ(R8HkSR7q2o01aQ?jY(Tc% zPwuD7topuhdvTj}+pE9J&AQvwom>h0h`zr5`N9GM^2ip+&|-b3=uR^Ea3SwKGR%y% z`x1um)@-!&C9efWU`Ag%zots;hBjW*R^ZZ1y4= zG_3uQ6rTaHMEEwgU)2QWoX<4@C=fmfsVX!_N7>tZ$ok?k7~T*y-ksji+*&_Kf~^GY>wJxBsfocej@tNXrB2IIrEW z;@1$sO)t+vGrTtj?b^gX<~BNyHiPf0{YPqKf01_2w;cgMf0$C-!1pVZ`*1vN_EkTj zqIVr<3*h!noK0dTjfo627Q-uJb|LtNmog(5Hr{L}?+)HMU&5uU{_1^`l9o0<|K(&P ze{)sdcS0>kl#^b{S#hKYv8UUo3Dv2YuK+ z9{9}K?^e^X2O@FD?T-1~#LiYrXg2%C&Re%U|NHWNA~3=yF>AJd5V-kue$UXhmSlYX zhQpc4%0CElM4f79(ZVgLGhF&iWpE?#g0wP5Z&0fzImzl(SX;2E=WC9~xS9+YR-N$L z2IZa(YLR5F@5=B#MC?M)68J|xo9m!Tjeecj&Wm$&A7mit^GQRx2GrPoYAJ6n)JQG2 z6m-f5Yv5BtElP84UAtb)pS78gy#4kXQ_BdpyvBU;%PS#<9cfr`I6Iia8YG%tQ5Zj4 zlBitK`y!1>EDWof9lx5Cd{zPf<7hFv=TZ#KoHqg<j#P|vprKY_nMP{>H(~77l?@`)ngNSKfqu(><0a~+30PXQ+ z69;D3%w+@;?=~NAvl5e~HW~st;bTd0q6;rJuItW{G~osQTOdtj)C>2yrn@>;ogB!F zd+f+`NHY(x`go~mXFHKyZ3bGW9Rr6& z2%k%^gb%0J@ANiUmo8QsF0R4iR&!2rEs>ABT|_sh&GSE=Hmc!+Zs$(6Z_|1&J#q&J zH$!J>K}kh$&(Wy)Zof@;4e_lHLab*Okv+M?mjY_G)mbVAHMp&0t1#1(5k0q`!$?D; z?pQD3nw>8^QxGJ^jNJ&X;)s6qybXG^b&#TtD)^3t_T0|XN9XIRx%8hdX8mgk?H2Sg zxt zf{hv$*#|If+hDfu@$klO!&&+4M^3Vi_vd;B1M4qr*DK*V;9!ZJ+YAD)d7bWN7pbTw z>))-^4wg(80mL+lH4puhV>SqA+Ky;i1#rGXpV}p}%&TL%W7WjtXN=6R7Dl@tmNlwP zMP66mdg3JZ%U<_u7(qw5+IeJfm}e1mLfrF!>8|#NH>%ETN?QkHBVlMPv{%b#mR#WC zr^#W`Y}0*r0uXxs6!n_z1BOt^GE+dc zC$=+at&V=Wcvby27-VmVshh8BJa#Wt+nsybvQ?cm(Q;1NYkQOF(TWSm;jx?eshl+4 z<~R6+t-aIl#M#_#)jvx)(6nYRSmbuCG11~PbToM}Sbl?e&pLV;KB>~`?vJpaJ+h=X z6Z$maAZmkMk$2JLdY&|Uw(3;+WfQ&Fh9LLcla*HE-R*A5#C>6*Xe%qQJ+ z_`?Ea^!6*eSDT29XZ6Xr8!dfR!CiK1Zv9vyTj5e3emNH`#p6AKU!o0*#;_alO{{Dp z$8seGO~ud7fa3>EVu?GrkrMBbS)iP0%C|G*hr=0<8=2}m(l>nFc`QF)ZrbXe-`_Wp zGtC?JZ6!Hu^CB3QLuszJoG;E=FXnstGg5#FsXqKdEg*A-W~L!cuqXW?V$;|mo2>PN!XEBk0NJ(F2DKIyW_)t8S4z*$ zL|~#Mkp#SKRc~Q4liaGoSzirv%Ie7zLEiIq90dbuB;BEobxqEOiLXqiO}oh2sl$ z#1TCY8^Defd#RV&wDw#YHQ6+`i7Y9E*=zn70$mtj3f0g)2 zBD}eMD$}t9SBbi0%P^V@gin7fyxI!z+uk`;uZVrd6j`1eamZx8AdV|b$>`;OrIL&` zL@OpsRBuJbb`kyZ%uTTH3^?ZSN9&X!hyyQ@ zp}w);CsfuXT7pWuxaITSAB&zs9or2b_CFT+U6{)Zu8X&)e_{RJ#}TpCQQlK&SZmMK z^=oa)no`J}?;exm{|6=8@{PY6UlL?_d1gT(c5+kGw^uQj2^1-I}qpM8=OB0iy&3 zleVpO6|Y$dc*%|Edn^|^w)IC0;I@x6|X147~uTda1da>ZrPNx56GdUyDP z@NG8#82ItQqgRElLndCi5mBHA_|nvMlquknV~>T^25LWpnTPe#gk0L87Cp&L(v%qG zu;}`El!zwF&ZL!oD06h(IKhv^4R=YPKRgH1!K+dJ@s4{*bU2N%+RNVDZABbYl^Z2J z_cPuT#~P2mwz0W2U$;aKEX;ff?c6TE2O+TGibar{x>C~4*R&cL&To8kOu^U7LeprD z?-1~Q#PA}Jh96>nV%<1uesEmLB_tsWZv-Jq!EYsB!ne{B#P(xqa9;uCAgXUHfs{qi7g+w5RiCOu? zA;%74=v%E_)c!_an%kz&t-uwFkc=!nKG1rQdr>Hh}_c4F5^-$tjQ~drt9Nd zK&htiR@-L|)+fDHj9v9WxC#w`Au?=B;0UsCl{%V+ro{fbeT0_!A_5^v?c{$2ld?$j zNP>_q1N1`Yxk7dkyU zYSFkjLmWaiNQg64fDtdXe&^#(#?bblixrt~&rJ(3yZP&o!lg)F+f<=b0($q~D&sSytqD08+j82k>hn7ybx-g7^aEW^=hrjN3 zYed7C$lcUMR?s~m@57Vx1E69`+z6g-WY3N7H@kF$4!p+ulle-A8G76d&Geht&Gk|6 z1)&ayH3FNBCevWK#-RXx*h-;Lf#8hIEHEv|wz@E#=@xOt+NNIGF7E5Am(7a;uC zHS4#212vZ48)7ex>mBgVztEYVGz@OJ9WKB3d9ZwZddH`9Q=*n*U(@+Gpr;<6r}!6i z!cHq0&66G^q(&oRGbCw`zS|2UxAaVHx+!&$DyuGExTjNElb(vauPqKO{ON<9mTWH2&Ovadwqi0UUesrfNR`OXDH_pYlzPKXPt6_ zA&tL;Vgh#73W5Rw(?e(DS*^*&w*Gh;^;~jRI$(?S&s98j$?%TuN)duXS}NFK5bSAX zuq}g(x7OL7v!ugpYko(7H_bI2uaj3Dnv&Za*Co30azg5lpW-Gm#3tG3l5E(zAp=>; zZf!W#CYXaeURT|laT0%uY%&UWc4gmxB7Lo+2CWWi!g$CpU`Uiyqz$yzAr2d3<{;Ga zrhIQmYY6$%{<-~#xT-%jxpY}6ef~2^Lhw}}wQ7xv%(lhidKb`Za?#8amU|o+C-E|) zE@eg`h9>KMwLzdxS(tJ>`#ZbN+^`tVv?JW2hu$mAl%OWGe6&qPR*ND%|KA0QI=*s< zxNrjM=SCV_@ijo`yrIESCJHuSCq`p5efKTd@; z(MLXL!{Z;?!F5Z@0@n(Y=19}3Q!zE=LNp)r?Hot(9cDGPdo=>=itgDSW5Oh!sQ9`| znWGL*!X#0j=cLjmgpz7zt%B{po#xBwv^_dq88@#)Rv-JT!S+5Fw;eu-nK*$Vd6eJM z6Hc_JBKe)$>_*=i<`;ch`7DJHS?cC3bIopAZalyuOM;yc$4NK_K;Z69b4cJvlpVoo z+4E{Euspz~6h6HyA)*xgIY-c@5I9=2k}A87kd zK(O6+WE`6fP{>sXj)+O+z;^3;9_}uq&>P?971lksIDvov_{h zn4Cn@;dK5mT+V;OQQQhZx(&wZ1~22m z!LtA&0r+&(Pq&))aL6r4!;$SD*6=yj)B4#i+bN7MG+sCWWq7LSq-{=gLN3uy}u+RBD`^UK~ zWoLR$|6=W!1xbU}#}1&%^S(Woh5KNHq(~W2gXlF_+;em|4D<*OJLlRYRSKb-BE<$L z6IK5L#UXCXld)Ht+}&!hr(eU^*)`PCtD=l_jEGWXUio2mtEc)mvEz|(G`LG-C6TC~ z_eEE(d5)f#;+7yWsbt2Z-m(;tj??9Gj`7ZCWOzSKOB&px4wfDAtR|#xIS%M0b3BV0 zs#Hp=+w6*eCM1qHDLVqZSzsbrtGmX)K_2HA>>l(rchmNy53aJ ziv>4L7Zb}_d~9PRhi}@Z;oQrA?4U|4BOI%!Zg>yfXzr66O-J5T(V9Tb<1qKwJwbU| zN~+f`vKS+H5$iuo_5Rn_&%Rw^DWQ{PPldP)pY4M+I(EDbOT2ISq3$%_#Pv+I0mr)3 z?3-&>yoNe4!&#d}o^`9)Bd&y=M^_7)&E}4ajXZYw1JCvaQ=FrrV`;@>nQshs60@A9 z*iw&ew8q%`2Qr0OKlHyfMhWW=S8*7--AHrAe7}G!gdPi26wl(@jYdcpJlKEwVm`e% zo-dgaV6ud`9n4dDm;ui%rySgAqogpq#ikgd>7P;7@=Qxb@I;K@IrFnTZK5#(eSp_1 zvy-#lxoM%8wSzD+l#b6@JAuANAay->||IB3sh$Zu<&;seSSLC7uQlr*h72bQC&R)wY=SQ zYZCX@+GIzk#WZ-ho-J11N#WC2FtI0PC$jA%?>r)j=X7fHpU|WSb%oa16lc{?QgA-u#!R)Gkh*XMB{p7gAkOjX zD2#aIt*6$!D|fvlJKZjGq|hQ|e0!Bkv-mY&3GKf>daGv%ZY@L}ht-ghTX@8JuiuXY z5b5C9y?Q%VZw;}V-695-yQ_`v0LJ2zR1G)fNd7_4rqO zO&&@L1?H3AESl!JDKTL1K!$icqQf+Y{LaU z{nik4F|h2AR`4aA9RHL1vE3s_?bVY|oofM-9u`*}YU zK1@T;E>I5aQy@UEJd%+-{770-gkv(V$}}G^TUK1z-E)y6>Vq$C@Bbu(@bqmgF#=f= z_>2|MwKZTGof_e{=juX8Q-U(Gf7ZPk%(NMaPEv&8g)ReI1tK1Z8Z92p-BK5UkX!J# zTf=G->Xk5MgA7q0=YT)2O4RdcRxJGOhx)fSeUJ9T&(PO+6+xS3UVoq^ri;IX&fUQi z;twQOr{0K0UOq{$BsIG&{s32Gs9D3BBgSlrC^Cv`7-2z=w?|(D>N zf?0UmpV3O)a;2F+72H^^VD=0d^wN6VsyltJirSF5|d+Cu-s>cMT#BgGW zK?^o<{{c>t0zGbiv2RLrK3?kfeU)kJ!~lGmp-P!KD5bl=7xrelw@6BJ_T+{yo|UOeNZsb*TKm;lUJcBJ z{yqPWfA=?+3?7(#Hb0O1IrJ_#=&-53@$V=^8gwj^kr8Qd5U|P?PbleV`;Pb^JE%js7)5l<LVkblQXyZmfSk zb0v{>KKv0*tL`}2$2p*Ta?vSMmB}NW}Jtdqfh$O92H_YeH*Ai~cFL?h2LHZy7;p@8%*dL8qCe znq87pBHD%2mk}NQ?}@ev9;uj7PP0X>o~LH}t(K2%u6OznoCO=zjZWc`raxv%8a~9lM&r)Si$#N*QbP? z61zIhw*qJx(lihbs}MJw@Cou;;D3C2QP?^OhVVEkP z$7Swp;eT_Z7tR1i!6umjEW{N)t;u?nv}*v5Z3tmS)X2zGUTl$3yp3vlkIdIp(q8Q0 zWlB#yKRd27s29G9o=vkHn7T z!l{}*2k1q|M#4+U7b_f+yFDk1lLvttbyhZxX{O;ufG~q0?SVD_D|FKe{l=1ZNSYMU znC>_C)Zjl?mE*#l$pN?L>$0OMieIdw-=8kg9}z=%s39md`2&1Tw<>m9#EaD@>wk!o z1`eqK$kGWZlM;kha_o(J_F;!`6TcF2}Ye-a1cvR@+4o6+MPYJ};j&V`i<^q~r^ zOfDRv+)OC3n_tva_W80cSDtz^t2CWNQ|hYguRp5!7$*({J86M~jWhjriiqR1t^I@w0jyz&t0Ce7A5F=laNqL#cPAk%jDOjKPNMJ6GcNf-!N0pz6vdu= zA%rV-uZALRBU$FTRrLr{YwW7t`gA^dD@07NRN>(ka8%IMBhb@atY#o zUn^7;g3&?wz5j$AV3PWz@&vC89APIp%{qLx6FCZK6rS`W-fPCjtq{K{bdniP5p_H7 z@-HCrMIum>r*<}+O4kOu$e=g;Ig@^+KEdcnV8D{s???2(W|GTAyjAWvC{>eL>uO$} z#e)sMhqM%fY7L7ES1Yilhqh4$L&z21K+S0{r}Po_HOO&uvb{V$szA)oBKQvlrSy#~ z%tNnl?L%LlTuNvAv4ftNmCyv|S;Yq_@yDg23M*B5&>J@e9gc>PUd71Ex~oG>9wx;< zpf$mpPMqh)zzx5Poc-?!PtuWW6yf?bnzoA?EtfbX8>VA-KPpi2K;>z8T@!O&upp1B zN&`atJ(w6DjO4BChdhL5i2=aNR6%pMXrt`BhcZRtNUVz*cj&`U3x|)}@bW_>)sK%G ze!+UxxoPGS?6JnX|CAELIEn-g3k^JN-s=ci@MU~JB6YH>_|+uwf9{AiGms32CTZ^| zc}^VKy+;A}wGRh~dXf?CJkK5Gws4jESREcl(pV)e9>nbig6ygQAGZ?lh+_^UcGk|W* zL7MY#ZG-*ICSQsD8a1nXSFjW8-_xyuL`p3tBo4;%tG>VKkAxjOAPC1)g*+ebZ}y7~ zEd->5A&1{9Or9fy9pdWGw(AR%9sF3sa@AH0t< zbN*K1R`Q+sZaTrTK`iX+yaef>&-G_K|U>Y}2$|;b; z$|{h1!c5(%-S=f5?mfu|f}W@=`@h!1N971%`y!?|&Jfyp-m&Pq*2cQSphRC#oTjTh zmw0A!Gs>OB#8}#HXWLx#Lb{&?0iCo-=u5OyX4{K<>1gr;K%`TBev=z?m`o{OgT%c2 z|0FWjSH1B)S9>ovawGh3CSi+S@TL9L-RPGy%b*+5601)?_muiZ_C?LzsSM47)PI=* zjk|^ul@~A@Wbt($59xo)biN11>yb&8Z=*OBXJ|^AzkKtvYQ{Dqq5RMa>aYlBs|%29 zI|!`7Abd@yePCVH{Cv1{7Z#A}z6ogivruK;@?MQqtQNXgE5~UudzLmLbv?zk7pP_4 zZhd4m${xOA6yDK-FR& zX|qb~Shn50<6-#Pba5StLom)BW9rui-qsX69BouvuV2cE8GNJofnZf3!Rq58L^G+m zEtNtPCvXRMH1rOf-5pKV5SS+nu5KvK_L{fYp6!r#D^G_>D%md!g*WiADnJ)MA$U8W zV+Nv4nz1qoZdpfjn$1)|HcV~N!OPU~TVQI+LNy3H8#wg+jK?tId#{Mn+{IQ!-ed2f zP)7Nh*9mofvS~(3Ud0B|$&JSdt!Gvkz3cg4833JE7?pjZY`2xfMi`H_u`k!82kE95 zpn#riy5s1p?ES-vDwL0ux9yx8 z#IMaA#^(h4L{yq?{7iKuFUY`}BcA1!+xX@uX-?tM0vo-W*B(~MlRKD~EidVU;Y=g5 zmLu5s;w$c6$I+QC(`tZK!KNJ5@IIzrHl&f2xH)roWIkha)NYpf7>igMm1HbzPDSI_ z{NlzNMc{?-VE?Ogt&I;?Zr+Dmii0)8WY{L;2gZ&27&L;eB6q@-k(h!;%Fpd^p7}6T zS{?p4HbmS8UhSn>V#Ydqgor7=`ytL)g2ZGkap?${H?NEhm>TV$Od69Tcm5xDjkU}6 zJA>@6pNJlE{g00hW}G!pQ@FeCaIfMz**D&sa5)~BE{crjwS9ZE^q-&9HL=mdk~E2a#lUuZWeH#L#EWFh<32~0z_oY&><8U#>3RRn zZ;{N5D<)>QQ60$7BuydQpP4oPSgoKpUyw}V`L0Wqdv;y*rqu3mYR~9lL#>_gR~(L{ zuqvceneZSjby}LDFOZ{6`+}wv^OiN5Q0n^E)J{>>pH1dG-iG&YakKu0sohO~xg}?s zOshI2h`oDC-5zX%_MKQMktDffRq8Mmt*_B^{*dLlTvC}ErBNcJo&mb0Qi&-oy&yP9 zjbQMGQTvH`+V?!(pA=aP-^+N4K3)iccn-4t>X(ty1f7gJ49tAInI-l*E3J+d96Su_ z5;a^gUpv*shFV1$pRVRFcY*KX-TPOBkvzKSHFhSo^cTWi1#&vv?c}=htG|AW4MyhTMCt%|_)}IjFu=`v5eEtwwdO@1wN`d|2|D z_QUUl{XIjA(fvA+YFI@~-kZyO1}eXrI>r$n>FVCsv`{M;t!r-3W0+A;89uN#Sv=Ea zM=toH9*eecs^&?W&3G1|oA@xclxg=PJ25b)aF7PXr%*Yd&9-M_vF}~;^JO~c8=L*X z3Ary-WxIq2xrK*K7>~&p!-}|f`n9#+JQz+bgG<%3vIM5b#hG9+Zqu^Oy>UY zhcoR-%dR_I$STE5$0;zAq)BLTa9ls|=48>kM&7*Bw_eE0a{0w;RacJa{t0v+E@a6Z zy8BT^i_%24)p9dP9Z48I9kC?Hk$%ivjUwm9(O-GeOq`lZbPmmBx3ck^_31V+3lF+I zIvbm(;CIMaX05_p?>GV;oCKt5(018X>R0Y#co@b*O4Kvc&ny8#c;sAOWCGZMeP`8^ zf*6rG|JWd1?DxnGqRO=Dw%Wui5$Nk@P?>FSh?auZ$|q5Ih)^hvrA87Ro5!=;uh1=D z+xCWu{);35DWv;LCilLx3V$7Q*@ed?P}}`zuOo`{Z<=4+FchwLVO~s!PcZ1TrZBD* zoRF#x<{QtfW~L~e-ko?;?g0(3bcH0C8SjN@>$zuq$;`%2g|;$Uf0(VA)NsH zf6Anh#CQ^h(29OxmH`apSvpg+NOCVEJveh9=GKD)1fi6CQ#Xw0{_XWnG~(ZT6@k>T z;2yb7kt17qhu!45+^d$$BibNk($KT{-Kst6= zE14|S9~4PJ{jXB&$S=sM&Nq=1dJAc|6S=ll#aYJdRqG# z@he z=WFe=V>v>b$g1fc0h1%Jk`>-~q01fP=c=P7c*N9PGo10QY{>+fd@%mZf&14Lg|vcGx^r~Q%|HKNoS zvrui4fz;Y$FdQ?A*OS3;)oR>N8vha3`{$Kv?K=)aCUlUAEkcf|(CY{2jua>5flVdJX)UWUR z#(8e4yw!RBSP4_BGL>^&2^L~nX|I0p0!bQ(DYTvGi8x%Ed1;R+Y9zP zo%%6Xhg+!DUx{)VE8rf;Zde^X{#rk4W9Q(LPsL7>YA04N_XKqo3MY6~8qbzYEHP>1y4ssEY9zmDj*ROg5}AW`t15R4Tg1J8nDVin z#S*j&D|M|M#__k*1UFXYoS^?i1z)-$SY=c4!@aBvcso-%h zYCE>}kD~;{wZGor^{Kf%Zco#H=kq2L-DROB=9DtyUo7huh89X#BRz9CM!@aLs$|jl z_~AG}OXymf|HCio!tfXhT97Llr^T+g*6>JKaQA(Q(=3y{G&s0K@%CJS2*eG3%v^49 zGnLil?z(JPUSA+eER2QcCg_jzPfC#|Q)e>mjZy-@q?s4vOEj~uMogI}d~1vcMeHm1 z(2;o=QXeqdB@v)^`UI@!mg*Hum5WEl`6lpS98s&_cTvGVUVbm5}2d=RGWc=yD22xt88uxnfhx_ zasxAepktXZ-lOi9JLK`^nMM`0Jr{sHgkLytR*Q-q*v>80#}=oqkX8l--nNW%ZP@QV zP7lucn3KKjuG&_NWEhU67Rv@a{>z_7Y&DPw^ZsdB1{Nx-?)~zUYERFZqfZk z|IKw1ZbFTdv5JrD<_~QZ4(R(doe?*oQ&Zgdo}hc9+e!k3bH@xNQ8%SOjA`ZLrh-`q zmI1s!Fb(0h)a^Sb)b@z2zHz!r?0~DBRvSN7*VCBlC=2q+rdfgCAnxvD4>j{zyFW#$ zmB|5CgUOYP(*~&Ai=sJ!e{!rQeULOR>f$`!&YJOhF;$s=dgD+&H1UL#f_Ds-7}xg3 zf84JJL}s7R0yZIM-Emif#(&u1NJ)c;F~MPh0ufEX_e$;V4xvt#R`2l+7JA+?6`6cw z;;GT~()i&+iqyu0Y5~IuEh~*J^njc-VfVQFWU@-+hr9I!=q}VdX6lBuMk!;t#?5q4 zUfVu)7=bf?j$pw1lXDjH;`h@6JWBhV=@&+iLn{gfGM=xUPrV|NZeo+q ztOm0sy}#^?FbA`pkh7i?VI+P$R(8p_9xw%Dkg^-zN7WPkGbW5jMJ93-(uFDk7$n{{ zmrpLlh!`Rj6JicgRZ#U>m&0q~941wklQ%9WbEGDF_G-_6CMX#fB$5v?o~XorJU8@0 zBcK%YP{@}a*WSj8B+}s;b$(0c8TD#=TuHm$wcm^KMMrQ(r}o^R9}C?H4}ASKdBcM1X$ z23<<0NH<7JZcqVf=?>}cZl$}slA~{l<6i9pAY38~6OT$JqOMp8d=< z*R0=f&P4>T-eA=l9R3hxg|Y5EakFyx3nO^1CzMKoTo0ia_IpYQMrYK ze#Ci{-O(Jj#5|?7t`|336=Wt?#p5PyV;{>naZEH8W{nkCei#f?$W}@>rJJ^_xI_0g z|2>@vQc{M3-vI{0t()DJ^|qfLubewh8ctUE8)z~Nu`C9 z>lNQ@(EN7Vq^Ejr%|641sQCuTZh)1q?Yfu0h7V^hOBxQIoOeLx7{4q}yT&NJY@3G) zxt|rj^~kTB)JY-7yOR z`_a=aGbMd%A@s&U{jRt6I*{WMcPE@0PMWmO2*iO2k6GoPhO|GP3NR|Asr*jUR!-nI z*1hk#Z89Gt+MfwGclqvR+=jTY<7XuTRlc=?59pTINi%1TCvhxB!5Vcgd0gWuoyB7F zR7;<4ptBX{u7?O5DRN$ju7pmn0$tn6w}tYSga=g6C_{D9|OfrG(;VRFNerQT$j zMxMeW6XE=!*_Iu8;yw>6qtY;GTNhqa*(=a~ z)#VP&(;aA$$gjg(XL(ewfyyfCy>3Bjym7|2#uX>7mCl(hKd$F|-W;KMg8r5N?>tG6 z7{*5=SC5vaNc1AfZAb>>NRGpEq+6J`n#QcBu@|T?ln&BfXG7cGKSO6RcU!JF>?~FX z*-mWZ>K8@a8&P$ry+|hZQ;u?w3XqE9Ck8wLHc-5D=dkJQ$Mj^hcK)HZMFE4S=CgUV#cabnU!Lb4wivfQY%^mfdBVQx zHA&)vPW-sdJ3rNdXMR3P|IpZkNRMPKm1Zc*LiTNHQQdCY@^rXD#EY+f$uAV&VA4Lk zcqqZ(t^PE5Av@nL_i_;?V+Z-cOaA1k*qXz|qpZr48Dx@oA%hb=LIhgKLxl2I?@vzG zU-)bI&C}TssCpCyc>6{qut0wXBc$~p7Fmp7&V{1X7~IISGn}0%wCX3=eQXg|D+MCW z(eddTy-@-ui`PR(xN5J(acJF3cx1o$5Mz$!s#)L=n6N2cR_JtwmrnM4e)@rEv6ljB z2dQe+7BLr>U7?NlB7UjRQ;iwI0IzNWM~j#O7px{fg=}zqvQ zP83%wVQl#QU3}I7)H8a@{w@`7)+9C}FQ;>L*G}U!ABB@AI!bv1Q#L|h%~Pj>aUyg4 zOKi&NE0;3u{t)Cvybb??Po_du&6d4vS9dYm%ncF0f=*Y6!Qmo|7VA)C)>mesv>Z)r zI851zhlCZr9(;Ua4lP;;`cU&w_ z`l%Um>SB_AqFor3omH=z@$}u=eU=<&9vyU(=jNfZ6SSPK($KaF%EY|>PC-9W31X}m z@-Hk!x`i^c8@QORsnXwJ?2XMEDv;omct6FLG+{N5RC$=(p{N@_lSE%pYC;(zrCFqx zt7C#hseksQvW%}v75EM3dF2X_cr z8eR!X6-MGaHix)shT`wJ1{iZcXr|t8hfPb6cu@pZ4*SrT{EJ=?M z3*b8VQQr1xw-P=6)t-7Lo2ce`qQDZ?au4slo9dH5@k7hKggnXcUyxr z6kKCQ%p{NVrrFANyq~yrhY~~)FX?gPQaRFS)@#-3XeCBcSY3r+4?G?sX}${bRr=hf zE#z*gM@fbxLAM^3$T^p$HyBvP*%PF@Rdf2qD+JTvi$8Rp|G*3PcKb`XW7S6{<9N@Z zk@JCkJvl{|_Duj*@s!5UqK#?^fQ+KX5)FOC_8d{CrlBY6W-N?}V}F$dH*0H}s8d;; zirMTJym!!;DMxgFNPh9do^`+HWS+Lcrn$pVu39f@50gDprA(b!gi7H2WmwPHw9Z+* z-o@ZFoq=9qSSDp+z0}b!HIO-2Mvlz%_ zy{FPTp2LSSn(!5@lD(#v6Y|DJrAyyC#jsTHBW&*Iw@lJK^$FwbGrt2(R4Zp_5&h!V zxM`m?oSf2TrTDnG<7O^O1T%1`s=H##&(O+g#w&FqFqyI>`a% zC2X##)Re~SE%!Jkwz8Jw?_I}(C!92*?60ba~?j1 zCj&+q*)Jte)nl`$xu*e=p#E!z3tMX3S4;s9hJ{7IyDpk#&2G<>Y5H(cEgl_VqjeU{ zFDBiwn6&W6UsQ%`7k?#DNB<7$j_k+cWVfX~3E9BE1dMRprAzpHDsr5pYz?D`b$)YFb9z>9uom5!y@%?){9Er z&$K3d&g)Mh`{fe4>1!dO@Bu}OYI;&xd#ei)_bA(S$5)==i%hXXbdqq`EhpQ{)RhHN z&igAz)*MfRjYsCz-&XrXhC;Ue9+=G(wddNuWB#_8BDr&qr_ib#c%f&ISO$)w_E8>BqN1S-|ege(4w z&?qiQ9hQkPNM0_Qv5vq>e+f1ap|8BNGTQ4M!(smIoy^^spH2l1VNnd^T@C|F%BYCg zH=cdfnJhP1ZrT@ZyFG3>|7By#QV)eT`m=g!M_y)~&T_!V1KIKRkEQRo#p^D4Y%w&# zvTIX4{&X{18C53+BV=0e_ z_9ar*^%e%)nbx`9(;jImNI}&k+=35Q@;j|pdtXB}=uIZ}LQ2Vv4k&iV1> zr1YVlh-IX}=s0*M(56{W7!y z-V#TXoaj}9YA$Cuo!eU;GsUu^)uI_=l6XqA20{_zv4&1eKAUA#^=xOL#7shKhIE#`UslI_bgxE~~>(UsK`)}o-&;J&ObGn0Z4kZZs4 zIl+&q)411u2aOQfi}^%&Sx}DcD0$eWa)(_&pAzMLsf2;S&q z8>M~)MCTytz=>g<~>SvGCQ=V*&3@o zw5jbw)A6Z4XqmKVmR)dIFa9;tB0;F>=mAqnq(a>0oZGq$NU9yByDg?!-$$RAP8;Yi zW+_NF$SM_L$@j#Rm20>vC%q~9WT~Ciq{XPXz7ag?*swK_X-&a{^nLjGtik#yQn)oq zmwovNdeo;Jsgf?|c|QCYd9=tpjUyX|jv8E&N<0yj^Gu$8ac|)}AsRt!53J?mOdW(v ziMT94b9G#0f0aUZ8$baSy}QsmLrsE1u`<;$7R6J!@pXStN5~egy}^0>Y9P;ySL8>E z+kk5jW|rlAiycy~%()6uHS;aTZY3l;X&l7KJC_@PIg1>&I);o+xKi=8JNB?pMb^8* zp|yweXZk}Uj1a}=k3){yBL4*ud-?h9ql1FcT$9nZx{5-Iv%^)BFrofkBge6Z0-x#K z)qzxD*0&h*P4eEIXUVIBvB-uh`jv$e@A0;VlfC53Ck|Ghj<@(X%Yq?G4d;)&WxuaJ ztq0{dPuz%af@to&IddJhh%WW98pXL9e5js#7q42r0%A&bLqo&q_{XsQDAgt1(EFtB% z&1Ye4`U|`z&jOnz=#23A+#XSX0@=Azr9y%Y5)o2Cd5e_R<{%NW(JvB1b+lQddEmxx z*Z{|F+V)c9-uFE01!g5f=;8V>*9YXgY?~7$-6o@RMd1(icBv&|;i|oeoZk*q20atb zBL;&#*nI*qbv?egn~vAehf8FK_m4b$^&$R|L0ORA2V%oi!(CqnBH^w2dL8ctO>VmT z^L=YFj-q)68gobEP8L@`0P!HVd&go~O;$eu%jzrpB$LtWmE(!b=OV=x+b+S;A#7Wp zo}=4_+KEN6V%pr*Yko+%^%_3!OSIDs)2V_ovx&!O0^O^mQG8AT$pyR%4IhH%RA`m= zFB?61J0z68ELuEA6KHN%(Yx_Li7M*+(kWn0p<}%Ecr9$m_Tn`lS56fcMS~)kHPeO1 z08urA=Me!uiWC&k%1(yrghP*6+ z%+>`6J+n7KN>y-An%km~m$arP8kwh-E-_as&3&Kj&;6rcwvArluZyz_{ z*$ed6d1|TKo6Q4@ov{jI3uX3wpMnCCMA47;mwM52=X*cz8FW=x0*c@fJM!(>UhZR_ z{Fq!TP%f?Np|e6GKHuF?33%V9DR6)OJTjiH3RCzrY^!dZ?i^ZEr9!1c!to}N{VJ7(fZxWDfuBV3v|xaCRQrzK zv!78{A{-3rYzUF<&`_-~44Mz_V`$Q7)FW?htJt02ywOcZ@T4l;-?qPvBV)Fq+iqs8 zQ{3>qf;bJSv4eL`#DY1dNY;3fYtTcXUGasyaOTB8r>=^eL$`}Ldgd7S3*^TVJlm_v zvl~SX_a;Ft8()Q>!qRB!sCL%p2f3a*HkWL`O7Yv>q!K_7mqFiO*PQyUY-Sj+LNnzJWDeJ7?)_x(c6Z{!p)$fQc$-j*WNONGtbzSrVDR^!3O`U%4DcgMI^|T2vr;v7r~wvV{&rL2v<|&TyE!E_F*SK zW}wv?2r_N?GS88rIa}yD;A|Z+AiaE2NfRRxKYo<%>2jh}pj+5?`c_DhtOzc+bn+pA z0kvHJDXw)KS7p4BM?Oue&Y0!eP~N<9er_@RqFydGr3kTI#k}!Z8&;r!O-@ExC$G%8 zZfQE{8Ud%NXeFBxtAA~ciuK>4-Ct%P21{X}m8KuuLb!*xFhJq)j8&A39@3=b6K)g6 zxaANu?4BcRMK&J45B}(-1pE&s_ITf2-2q`H2YoAN3nC<|h~@yzHD?plhpAGWN&B@k zbW8{B!X?hN{FyJ{m-ImJ^!2@X{&~N0vrP7n=1Otg$uYS&lf9qGu3#oCcA+zfwtNQa z)fsRIKD`vcI1!S=nN z5(6aQF31KF2QXJ=O0z*l^i%S}E0zs~Y(?(uEm~#kNf2}%8V`33=t*>EThzQVY87q$ z`Su_&e8~VRZaAG$x`eQuOXudM7``@}o^Ldn=AS8>Dz1WFS3+;Y#h|1UO) z;IJ&7u0voUXw^-#ZVk{sjDDnl>Vu=_Wigupqn3@o4z=*A5L^*byzXU<=3 z)Sm{&O^_cppptdi&TKOJ20ETrmSV0km1MMX8r)icZS@1rccSC{^3n)49oQ@@(b8yzvkfkr$mDaCl6QqFTDi^?V4xr;0Po+HrFTba@n4-=51Qo10}jYi zfKcDL$F0~Wm!X{QT8+ptfYgBd=wtZ|p;_JOQcMyt`G;$Vn!Nl3!&Y{3IE)6G_!~yq zWLNy~+0$|sU-LQgh<~ZvUyf?uu3t{Em?;`3wA&#Iz(hfM`5-HJ#t;lN%T&rYf5krL zay;D?Km>SkXB6y@e|wKaQdA5?9Jihal6ITbsc~;;vDqYNa#+3H#+X)`bixv0CKv+Exg|qA zXprC%cOetO*sXP&-=F@ZF?jMH^&=j|{967928W16U z&T+v;H*75LAbC{m0<{CfRw?!S=P0EMRyd;5X#U$x+CIT3mjyyf!Rw=7m@dMtT-Dl% zn%$#GcLxes1an<7?#>tuNDN-`+47m%_>W8%D(q8@%Z!J!3Omz`eVu<>!auLZ5CXMQ z>^P47wb5*g0D&Xr!DO}L&_`fA{bnf9lecd=im>qiH#{8TMCk1cQ@lUvJ@U8X~q6p1N`e|q+E!7{JQOyfx`Y>L0&}heI4-{ zRd_CQZQ2AF_`h%p{`x&wa0)P9T%u~S9AX9dc;b-%9k=~bq+9q11j@kbTDHZ$f9}itIF|;lL>sO9QYHYb!)jiuN&M&@NElTCyfS0;Pp8i9R-F3k@5lZ&< z$3hZSf%v>Frqfl!CC1|eHURi`-tXqJdsHAcGGLHAn8yI|yp3-PrUV-4_eSX`=BNXo zl!5XyuKmR=&0zq;bvKoxBd4&?CEjsMMFgJ0grxb##7^#>NVn;1-893gt~YQn-dGGg z{%N#m|LrDh55e9dH|-BwI4gbE9^CLOTQQ&0qUOR5c8tc~Tkz*cAeXoBoyZCk|Aq7n zhk*0~Y=9?met-!YBTd8`ee-ZV#_@11YTABw+WSsP`%UlHm5yOpS0Z1(-1~1f>9YmQ zJxW%9m0e1_M=k~Wyn|Kq^lk`n&FG*H7CuKF%wB%IwAr8Rr+xE6!0C9LvelLfuOttCu&%$BUuQkG#5KSGkJ^g$LIZJ7rT|Y>V}| z6T_iCciWkn^yhM;(Z@l{pwp#T(;u-08PJ0Vmh=A0!cRZlAEiM=!5|fMgM&x-^Mku0 znkd|G4)kT=Hzf*40FgjEKlHq~#N;?WX}Px_oBpE|1C>WSXDRQrI>QZ;&c>?(QS6IJ z$T?LU!_sZpYd3>O$i@5&m-WhSZ79>|v`BAtCy0Ety#7jq$91lWvQ#86A)nJFZVNhd zJP=nt8x%fW#NcwiN*%FbaO3A6`tw5~6MTr^D5c5}dwP0$&ZaMOJt52K;Jd8e`jez{ zWun28xZ{7k3J(&6+uBf#@@ORM2PGc6sS2y~{pDWtx?;Y6{7)$qQMgC$qgQ==PDkM} ziVT|ZX_E0%SL^%<+jaXrd;9UV_XAeB>&eNH>4t9 z3Pwb8lrH+0&x(imEY4We{P46HCA#l;dRzX-SD+=g0M}4DfuFB$wCvt*s|W63j0Gg_ zzxPbYpf_F$;_&0Nfg=B5{6OnQun@t17|-!of%iKg0nB zpEf-akhxfCHR_4wo;5oN_*-HBBQ}$He{-HD3_gN4(=r+UE>nWxy zblWLK0*Sadn+LW9AZzKX>ryeYUC1`6MMj;tjm>$83%u9FnP>!_lufY_#mCF2S+-Fm z68M0fYT9{FD&nHy|x;fc=-4F?S0@+J(bmRi^ri1lT+6D66lpD>xmp7ntN=i!6 z^5+N40vGLaM#u5ftCjVarB_N)5MnNKbyd4gMzCq4*bVMh*NKHt9}*V>RDb69Vm9`P zZPpc40_ru>%?TFHI4P(l;6Y5DX3b-mPPiC*YbgZ^oUM4I^j$t=wb>CICrIy=e&qUY z=kk%!q7P2(BVkN~ujfd$3CK?D4g(&DeVGrxf+3+7Mg`L@GS`-}B+3o(CDxs?t&l*u zbIB++Kv`vF?~Z-Mp8L9zuK9CT^R4@-F%d^nx4RR#1o$pLJYM2Ihz4zv3FmkS{!_Oo>dkgJ3%hc;X3c#g`c;}h@s=lm@J*S3rx6qx7XK1C1< zOY9bJPHwJNB`r%GWSo**9RwP6EVLVqbg9sK>PX9!-}hmk)*q^1cza6q-L$QXE~}5fXZ8k36bR<{M$wH7iEe&aLIE zlXKKwvfc3Vhj2dLIqA5K6L$%pD8H7t%j$DoZz~*O2BBOc!THSS6bm(Er5j72Jh$$V z6z~v?$_1p;B{oJ06P?^{S?ynZPa)ci1s@)D!w)ULXgp_u$-$_3N(gf7tCq-h| z3J>kOiI0wFlzQMx-ahTu$w4e|Xru}ImFu}R# ze9ewz`u=}`w<8Qs)Wt#&JI>h zY|ej*)ENm&l%BvcXXtE zu0V%3NA*Xa%mMavB8^Uq%_ZTZQNmHw-|bPuBMji?@JW}QeW1RJt4{j8(oV;lQWo{l zEw?YyjEaXoRwth-U2Y;41^xY>Vb9WKN<@CSbZ6*nr{_Ms8>1wBI3vl9JQ&9>3U(|* zJ+IYCn;UdY^zUW+=U-=P;NFG z4?=*!U_AL>l;)3HmM8+>QCc@X>I&BFU?4j`Mf1r;F-M{3*^{$2@>OJXfhmJ;%Z*;> z>0C38>`;??q}Qa%Qs74R=0>$&Rxb2tTc-Xpa5e>~6n%cR>gM{v>Y&knc=xJ+>s7VQ z_wQd{>CI{XE^9$*)D`$4v0R5;)g+}}$f?&AXAZsZYyRFR$EMLNuFhbVxFV1BlH>&B zyC64(sWQ%Z)HO-8NdqTcP4!^hP5Qof0#MsPQ;eSLu6&5@4T^GZEFJl;$_smu1!^FC z&6rQ0uHBXNWj62_|6cK{7x-6J|7yw4{qyhs_}7;FjN<>b4F6M>0rP&N>0h$|{_r>d z%I$wjZvWqxmEXG;SS^7hyLgB{4dkC6hN!=b)$@1e7)P_}2v>mtq_A2OjL&)pf3jq2 zt7NGTIyl8`Jpc}E8{D059gMGa8k{(urPoBxZMb_a$`vdF0qi(u_b^h~yZ$5_lb{pt zQ7~OC1+by-s`i7j!C+v*xmNTOBiZe`5Na9eQRdgNxLsh{-@Db+lEs+Z+F6I^*MiTI z2oUBtm5#dg2M};EF;*{z7q#|wMX@7KEsGN*I3EJOS+NXj{Yq0is zDuhZpHZuO*M&W_L)ndZn>R@`ly#MurjJqT#F@_p7-lon$-qs8ucHQ|RPYJQxm||UM zOpcJTXFaFyFtMl$;#V(c+MFt7cR4#XSY>8@qG?W|*@bG;+07NPec^R2Ff$YYIpdK@ zF+6!dr7Nd%DeJ|OeZ3Uq-BJ|%@dLy8EFAjIZfco$$#pK%mEz7Li+U+2Iw4KD0`zeF zEAp?=3@~1ajEJ}4O?>sMtUha6%!JNBcRqkwm4#NVkx+w-#VVv*9U8F6xhFvY(ypcE zTM5y}Y3$JNjSj1-s*aCB-4Di&4fEHRI> zVMFa*K*X$e(Jw5De0F^$62MA8OI6J7$$)}Fc^+86!#WG+!HQbTs}`4<>jlO=P{Zt~ zc2ULGkla!a>%6ncs+<*~XCBvE!V{?IbD=)X5EdC+zd!PW8P-ZNa zQf;?Qx2{q0_J`XcvuZ`glq)E>+nk^5!XFo2%Qi9E)IjF5ePrZdlK|P(a|jR%p-LqP zXIQna122}w&BwP`#yp}qmfw4q|JRj*>75xFC>7y$4^@$JnT^M0Rk{(ooCMiiBsCjN z0T$=XROPCO%#)}VzXu^bal8?A>h*QDPcyD(UWSh{%p9TUX}1U!e8w6_NF|)Pwf!! zTHqA`^1@;GXbC9Ti3E8{Q2uUKN`g?DJ;`z{}nesYL>=OsJ&9Tbj5grBMYdg^|2V}J5>)RXG%rBgKIKTr+ zW5-ahEgw7rIXx)K7hV1%@5C^y1lrT-9e3>!7^Eykz?T2}kn7g{Uvd4vr(GQK0O_Aa6P(|Zr?;iPIZM9kqFg{=iE5DKMjXl_Tj(!)vIXk~T z{%B*Gcg5B28tjF*2e>R9*?htj(W`@LsiFvX6u~H2mNBNf>q!M0Huzz|t2|rL5Gt89 zzD2;FaGX7cSnmyGUdA|6{bjQMy#E9+&>45|Gl$8f<88>`ZL&mn&M##k#)n|k@-<_w zt^-IgnmRj#GF%P=3v4;_)B($Q@sYn75jQw@DkKWGXvB?=jno<&@HTTz-qIC>qt~8_ zasa@gHDoq?0qJ<>LgYS6)WrU=%e>!%Qyxw5*Y+ph_0i`n!DTtZ+1lEsju-2v7V1nB zf0(-tpqIG2i6u@Z2B{LwrTFr>rQvjby_#lrjdIlQWs-4N>WV6{9?d)GFv(9N7YQum zxqW!uDKG*78{adnmghB}s^GBv_K|H$=+^xsR3{L))0SP#83@S00F8-q3(bUW=3_EP zZ2t%BOIDhbt`FS%-{4{eB=FjAu_17lR|}3dd2hO+erOT+a$;@S(VTLc$UFHHH%(M@ z*J))`AG)1^_>$d`=&k7^cpLSO_7Lhpul12s7wB>7gF%Cou+E5dmFAZP@5USqyQ9gN z?~&Nz^K+iZ=xor4MmIalVG1_Zb4@IM@=gXpYn~{a!hTw*MD?eTKVvcA{9AoJd_mSb zOB-R`o&OwRB|2o;_M1*?0FHN@04|>kZmPegnI!UEVul;%`jcfPuJfJ;2Qu+=ULP4F z>q)yos<=5(>(qB^4D!7p5jyrm*1b46(Lj>oesBEnjg^6sZ9m58!D`<5XL)aNSd}Jb z$c{W~o;|Aj8(DnYjnuX0)ZM<%qopfjzcCdxQg`**VlUli2b4*gkB+kgR{@~tIP3I} zaz-EsCZHw5pI%e}$S|q3WqfaHdOGeZA4>jyBjtDRpV$n-2*#URAJ?*R8q#cK)<1Sy z-ue9}Z-xN8>0d=fa*32sJ$A#8BS-d;Gm*&e!Gilak|aVLgrJn;8+5xiKX$=kyRLS1 z(|(p{M_n#mnz5XO-|Ah%w%Om2(|e#(j*POyVL}-xvEQB<8XOEERxYM$F4~FldC?2l9|Kuo*#ofR$-eny9pC0maXKYy zM(FkEJQqmU#HBc&50js{_DuY&c~C$C%QvMrIq*ra>&{MNrse-Vs8IYemfwZPY^I3& zqIDY*0SE(+vn16Sesw7*7%LR;d~Q6Mk76pqR~GlXtb5Z?=UdZNz^(>^Z&Ls_CG`2X z=!}sszb~PiAUHo>@Bzm&X|h-*OaYKy_s~)l{=S0n2vTTx2qP4Ujn^`Hc!Wxrz-OM# z{iE2=0gDg+z2a95`Bzr|YRS)y_3!@p*OvUW#Q$1`|NSk4UoW5F?q6)=yf8s~dwYBV z*QrvT=})oC-@iUz10E(+l=vTj1GKu*uS1UKE?2JlW^IVp z2vC!9`MW=jKu&goYycE+&;M(?2tYsjR!ppwB>$5+s0)8DY$cK2U+S*yDvv8XRl3@< zSZxbRjFOh!5uwWH4J1&4s`Ey?PQb!21QenSZUK?&VLf6I3@Z5F?TY$jpP3z^a$PDBL6-1BJC3fQIy$`axR)Jz%N%@WiDBy;yE&p zvH$0BMzS}X!><{=kJ*YOh@-)hmC110Fvy=#ATSnLVKj_ss98u$n^c4wT$!Vym3WqdE+HtvD3|1(;6b} z`}5xsLa6Lg`Kpia*69#zTW)Psa@hC8a@HYyL8p3q&{kMtAZak$%I?E`aeJM3L)vh5 zJ6$?%Vi$tjij8#1U_R?)Lle|G>&<(yjXf<_Ew`uS^JVI;%h7nTeg3jH|HDQo$X%Z> zJE1@Q-WEh|)D`(9&DZng51R4C)ccx5luB!Cyb7dL{66vqw*YPP4ENU)CXewnR z#xoIi4R*^X>oNgyxFYY4h*KZjcUZfGhAHzF~S;s907;loeR!dJgU7L5R!f~ z{$*7_)$r46HI3Vv4Ugk~#MpM-b6Glmz`JwKKaXFQU=)d-p@X50^85b5Ljv0;IWdUY z-rJxjcJ(4F+e90NB4QDgac#|31pb40KLdX6P%a~p%k9749E4bYuaE)4%C{{I7jhgmC12l(FCYj z+*Q6v^6>50EKF(wYy{+~R^h)Y_HLuRT986+s7gw&2`ZqBjvBkLK!D&mGVEMLL^g5S;*nm2Fq9 z76P5NAFPt$@44jphpoTO0Q9DyGh>nmGE;*MYCSRuGftZ@dcH+1RC?lMSgCfh<{t^P z4Db&C4o|(;YPD1BQwh0?6T&ZoAPRmbn1{gn0^lQss~h9Rm7X+A2p`b=NCfKag?gUa zm;KcYmWb-UD@C~8cNhEdpUiXQ*HIE{%q)Mld@K^mfYv_6t9%!#Wtbo_X$inlvK zK%hJRQ8rI7BRp5#{qOa*`q9RygRc-}gQiyxAFK()uZ<9=oFuD(*nJkf%prB$S1nr#un3p+t zkcH1usI7J0B<|V!1iEZfAc{hZXod6cM8x{2@|@z3cEon@@S6Ot^Dddu0-}r*38jwF+H$iUk#_N z5F*pPPhr#H(^eAW^9BX=1sYZbcK{aiNp}(5Hw-mhCPq7Uk)@zvZ?5+T-D$B?Z~Q@j>w3qJk^SXv89>ih@*y@4B0U?0 zT-i5%yGd2@2+JKbu0#Y8@>@|5F*+99kw4m;z8)k>$AFiRrHATt=X&pt=4#Bg59_sb|sA+Pe^6K?>Gw=uEBNW7ggo7-@gzG#m6i zg@MM#aAKzgYyw#P>_@i$Dpx(!?5vT! zw?yUO8_^~L*Q|}4*xQmwlEr=I`ihS_)6^u#=Ic=|iw?Ao_6ME~kFXwkX2oY~$MY6g$ zR!ZEC@rGosYaVUR&Q{Y>Jyt?lpkm2g`D!=UK;>J&_Kv7pD#r6M$gO}`luxroviP_1G8O7!^co6cVGzpjmp+;-k z0n^Q$4t*jxYrl;4f)ge4EAqh(rNO`w6k+~CBKG4koqD3fe^VkF zHRaM82Wx{hIzPD;h%Mry<;UvoAbB?zqfLP{+%?du-~>52l51yIgk+P*(TR-qz|3(q zOsNCWAa9hE2|)>vBWy~o0$@3iI|HKj<8N8ov?nw%<)&hQsnzw6=_y7}J)FcxM)+W5McE6MbRpvIRQH?;_rKlhzJ%KB*$q`0{_Y*OB(J~@387YIVW&& zUTm|IcnaYu`XbUU#8`d01Op*TKpW&Mt7fKRBBT*q@1r4h%b3LcW6FU;uqmX;G@PL5^#npxzt29uAN4_maKnwW?&>OBjZ!A zQ*+oexoXq+3@h2KmC~-FVeD=_e}o7u+99IDz*=&>a!2mW=6y-wIs?W;Jpy67Ah@eu2#IM2R5{6-+2JP2%IXt(**|=BujbzsiOs}w|OY= zCWk#H3NG7W4WhT2I+BKcd|7{3hn;86`OKImxa>NdvO3;prrXl-0DU2%aJI50Rk*?0t9olK zrPGEnS@QdOcZ_5H<0V8{lm&{Hl#qvMbSmQlb(@pr$L7%^E?TxNGk0b%46R{-kcHq6 zkO98oKzs7;D!RzYP8}L!QLn)?$%9X%ZoQ1MFyn1BG|7C>>93%O{EGD}Xj(+1f+#L~_6{;7NL*fe4mYIIuxVA|g$JUMc*3 z&2DzSW3_Q0F}%`5CPE>FW#|gh(6Fsm@PKr!;^=TC!f>Olx|WWGZ%?hZ(ug^NNFXue zb7FBT&^B+qY3DFU`Bn&qs0Fn~{IQus8bF#oNRIAOf7|HF{l;q8sAebalR}J&9Komx z21Q|?Jy>TC`JGydGZO6QUwa~LN(6j+AE0zab7!kB@jdgNiGZSS)Kg?Bt7Ou7p_Amz zI8uK0ZwPt_j}1v!sq5OwqYa@xZgE`r&JPQ(2|v!Y;WO)3KZ7t2&P7x%)Q+0n;P@gPININXTd}e2_XK% z*(>k4Xzf~0yODLp@Rr*))Pl!Qz1lHKgIW39%?&u|Y%xVP{!OhbEf4-Mz8;tLk`6(0^4=u@Om6Nt~6eZmvBb zakt35;Suhq1!$e`@g6`tWF^~Xm6MKpVV01~>|%*P>`a(&yZGLTRpS|Uwu?~Z{L$oD z6HX&;w$@VNoW>(AwS+il(!Lgi`Ly1RQ^@3F*DqM4Z*dTIA?C;G>Uva{56g`@m$EaO z$q@768W_1|W4CITV}oC7rJ^)Va=IK)^yNAc>4r>pCMXb#QA0`#SWRNCjf#DaGyRMti z?bHvB<^IY9+`HcqG%Y4VVXWP0tHJKovu5AUgcj&y$B%hXXl;Fj>{*R z!2-xWV%=8<8wrCVB#>B*DTIf8n%{wkmCmo-6}FHmUE>cp&4#fH4|*o-p(Jzc?m37_ z<%_cso=u{%7_H|gTEvN0Zzf8N^zzG;qx$=r?M$DtdI|P!#M_*8t=g>gk&ze1@|^zg}`cKgIgI43NLHuVv_%kUML}=st zfAZHG^pIfD`hQS*KK|FZ?e`HU1m8FlG|{~HB?t5*V{tt{Arr_+0Ei*z%yz{q9j#wy zj=xli=CU_;T&gq}*cNovVFamhxtaGBaF`{Mx~QQNQo~Y2TfQ;V1&r(LVJkOI@fHGkUDcv`p5P*T+ z9?VY9&Zh6CakP99=mqfp{{9x$K}lugYB6ggvPU7NT8j* zLh>^9vE{>y&ic!Io2uuIolV;fmDbBXvmS#{b&UbAB!8uQSGWJe{L9>0Vn;{Ej(B0v*V?r_CnO89mD|atS4WcpVwX*a z8#Be!7oeGQxkyRQS&@l(N4=kyCAhW!hUDsP_~LiA!n{>zzbq-r5EYB1wvx)|5Ascc zjcfs*kHV0kPKds(LyX2-1nC;e7^jHbz@rcRp~qPMsW#-q#c@pLR4+Ejl^laM)V_kyp>b5$`r^CdXmsetRpi z3`pF?nCtee62u@Dm8VNK^T7liV*XstrG-zZJo$2!%bvK@8p(laG4C9tihYLjwK1o9 z>rQH76CFVzaP?@eW|Xml$)7f0;%M`z!n6p5{)yT2+3nf;Im-vgGX8C>y1OY~y;2jw zTxJTk6ccF2?4w(TPKMtM5K*vUlwbW60V0rGt%0+$W$ z{~ZnP-7kwzdOf;uWkM_JMr7s2crI|JkyBLM5O7cUH%F2;(<)*%7ih!Ue$kjIa+^!p z0%&(ysc#3_V9v9K3>0cT@fHFgoS*`&6dt0RAjkl|RY%lu zoY!C%j{r1ul5;`EeWp#8&ue>9uaP#7Uv9$C`2~IvCis!QAxQ~b>d1V z9|H!b3cK30L*x&7BK-T>#8-;0;&QiA_FMRVlJ1wHX)S8|U;`iZUbAi&ksQ7AF&}?x z^@}CMrO#GuFHP-W@2^U)R)Kii+NB=l;1|mmqUA*!lXX=d_-T>LjwVEW$!C;E^x|-^ zPLMRaeOgIfbkAF8UgQcD=lz0dS2LxHUS9*Y$jC+k5Q3i6Zk_5{J#@6uIXyFNn+8yL zWU0lhL4G}MGou>kp+Lktj*7ZobW6jEsbuujG^{@!y$V+;Jp|{+cHXqv-~hQQ%z#R3 z5CrpAV<&u9W)qam?@h8v@QI@bLpvqWwpy(#U90TMl~A8jcJRCH-`M+xl@g*gd417f zxKc5Yl$3xa+XSrEfK=>_EdG1(|IDX-ofhjyML>>bair~ui21^TQ9ILU2qP9~^f9D7 z8u(Q2uN(2Z>DtmuDyxfptNfIt$W1-C4Xi+_hYPSssNBp`S9sqxzTz8`cQO&Q`fzpX zq{3l0^x_*IHUaqr?C*+P*F~#GeD1XPDnjDl$vTe3bOG^~E9}XL`O0y{)+~~i!gRNI zPhmIut5?=-WQ(&X2${fH7;V#`IW&>Nj&oN;(9UL$2DB7vwsmpx*!y-d3Yvo_m60lt z4j`9Ibd?@VrEaXuP}PslueNj9I0oU%Ia5bWIJ3HeFvmK$r=d%fwp|SU_1@Md?IE$> zAh&KD&SY*>^0|sJf}Duh36*+WmEn4tcbxk(HW_>C*^F#GM5LM}YgimQ>Eg2PijB|^ zl?Kd~%hO%jPWy%E=Tl|5Wh+}fIz#meF5M9X>L&YP?2{rG8_B?F>rO4cB` z$m;W$Tf=$X7Z`=G!`w9kh9=}|-k8k=RL>cYa}7<_k5NDk9#y5k8J9}E7ElSfn*46eiId<~*2xG_HZSaUVQPG=4!-q4 zR=tkWy49X-P`0(^ewrQJDcWT-a2(zA7+9G|Q3u z-i!`pa842ySP!+4^@34zq2UVwTH8A6Hqw#giB+ad@y5gzKB#la2??kid- zI!GSd!hPd^z&`hc6sRg>g1JjCr*}rUeDG94!eGauf*>Mg&=5zEiw7UN_pC`L+28cJ zVa8V!eUsKJ_?3q(>EceKp7?%hqw}6(#Nd3-ZFItvePzqK&j*6a0&3gCq>t3cb?64^ zr5R^PVPn*Q;lU~Rpc6phr0s#Kut6}}5_(a@sLPQ~%KrFO+vKH~$#mj$q*pG2o1io= z(Uw@*x_J)xUT&e3LoOJ3OItTZmuoGA9e9 zSMbXMtwh(V>ZSdXpvTjpIvz2%66>(+!ILkV;Fv%+xa8#RPw#I@TRyWh<37)QWE=(2 zc(V^6glNe>^k-1KyQcMw-N0kP^8K=HO<%5@631dQZ>i4O$yi}`SpgJ8f+7kUh8Hwa zEZ<~6iTWAj^9gB+CAL`~8#eJ1ir~nCfq>+DrB;0g@0=6lNMRFY4u^obLRn0QquV)= zSm~h?726#g%PQ1tpA2;rXu~WG(RA}vb4I|0urU*ID`ybt`KIOY?e`z*U{7!n^0o*Z zq3|OqVqoILPA8Pv-KzMbmnAKRl#JdxFEpq|UFv3fk5j$d)R8m#8PNM_WOhtEEtbFE zDM1RGrw$onMS0{E1wXxqpeqD(W-56_1NnmyIw|G>+;sC=G94rpRZU5v@QSQdPWeq< z>RSo4)1$rZP`bEgt~Y9*mN}qdl`f|NM$Cc-$(mMU-SNkeFCjzv$lVuoKB~?#WcpF4 zrQaV<+!++m{Ah^$4`g$0CJ{)n0>jZPz_`KvY0&R+m;BKKmQiY$#Cy16v{^RgRPK@}KH4wlik&47=Qh7tcdX z-@%KJVTpn(VfX#CW^~s%*t6!I09VY@R}=LGzJewUn4^(}gHWv-`2)ZSCVMdb@b6&E{7kX>?%x7M(ZN@M|h!rn?~ zXRN}xWG`%g~oAHUu9;kd}f+lu`td9sXW!F;Cm9GE*k zi36cM!U|!(9eNCS;UBjZhY*p*BY08j93XaSYGljLod|6aDKY9f|EFQmW>-vuBnK*` ztZWdbR=x8lrBt?k${}sU!raN#7qt!jc=n00qyt^j6uP8J2Bw)35P_GxMWN zxs5b>$}FxyP!l$0(O5Y%5Dhk4D*+1U&dEy=p_2~8Fv(Q!HWwQmw+ktt-;Ge{>p=XX zxxJC`XPVYtdZ1KcuHYtwe~IOXwe-MTDwfc625o&kdR^q<=;XbZ2#A`(*V#8uaFHv_ zVai74D@?Z#)pWVRt~T3gBv6fbB#L_$YlL232HTSu{HLuEZ04l?mx18APp|Y4u@Vdd^#q)o7l$N zVk)+6FW>K(kG7O)0(wKe4K;PaR3-Y60YD=eL)> zRe~}CK@diPPY2aUbT!kVBrE^^2)2NIxz9jcuXEQsy{7}jag-{oa($VP-1zPBFYlH- zh-4cgir;-)Yzy9c*B1Fpfw48OcXbD5Fo!ww+gHT;;c=h>_2zyne)5v ztx%_X0@q)K=sf%p3U2Doguz9 z->2RtyEYyN7jO!%fhtj2tC(G~y%TODw&N6ri^0J#gH5E(BRRqVh4B`EZks>W-ivpI zg70y#W&z9(QzsOsd9jn^x$wH$NuL`yqvvBSRlrqO*Qu-2GJ?B7TLZmRGsSbn>N>fx zav;ydMd;uYm;MWmd7r1z_(#k$sl$eJ8uu+QK_{D?+WOrw2GyL=y3CuWJuLzfrECEA zaG;)`)B5wQW2JO;R002w&@=b-{Lt+0-$dHr@fhPdMBR*2Xm)EYwVIk!cUva~6e`}6 zAUizC8YxvHA=SPUn@4|=#l%gde6JeO5mi&7R)|-G~5-I{qyD3AzgZcBr zRDlrXY>)IxY2%lz(!Yv@z_3S*Tw=nnWoVJixZ?xpWPnvpTOJ%>`bHb+byif{DJSN7 z2gX>?0p`y_8u+@%yNoVE>nyI0+K-6!61sh^B)4yF7mW7S19+*kj24~XRS1121h~ys zzi)(lLEX#sB~K;TzZGA|dEFQWa2Y!41Ss~T;zu3dv2N&b=4p0Z{qc~+3h!5(P4CgX zaqsCzSZ_-`u7nfr5w$*-m8+-O+bqM$ z1yImwHVZ>ZVb+fY1vbrh6_stz(`!nkqYmxK&+9lnD-zrDEPeJTV9I~O{x72f#y@|4 zQ$J~2*~YrD*)EYf)TLamr_OX?kR1AZ2Kh=eJJ;JE2wZ18%<*qhk8j@i+*}D2Z{;iy z=FbiW=F8o<%T1|e(9}1fX8$GJ&Z7%tCW8L zWDv>j1|x!3ONW{%1Qc~ zf9R5$m^T4lp;37fnE+yQ+;p>W<@m|Pue-XmNbZ}TLubD()ckeY(^uyJ*}hAXU*NWX zym5@$*|yb9_Al2TL8r`Z_#yR{)L*|Uzzjk&_CW4xM8PR6gs)vTAs#H}@$0hmp+Mwr z%`!;tL4Tp0K9to_Am1glPH4&-rYzqnY9OvRLx1mlQ89O2f~?Hv;m|I^kAWf`@A#MS z;OVhJ6?ZZA&6&Lc0u%{a+~$3tc>lp<%;y=GNU7W4CMaJrSX#8A$t|GdL8S!~VvtK} zq83&tAo5~e#$*39ci$e)m7UQl;h{PH{0O66OK8q8xHz-<{E?(oVD#LmHp=g&5B_{_<90Eif+dt9Q1PDbd;Yl!~5_kkQx3BG$i!YTirkN*=}($1eukRRT$W5;2k zHO3(^lhZ!;lUDy|^L+Fl;b#XN#Q%wMeZJVfli3hs`*%AFz-adEJHe)vq&y{GRh zzz2WW%Ljn0g%$@xcSNh{&H?V%BSnZ!;+6(Us%mqk1`I|TT_DcSJ0kuwX$Unt| ziQm})A{L1KQ)`ET^~ae7KZr>Ll-vyq`ax^|D*sz|(*K+C1+1an&ve*GU)AvOX4 literal 0 HcmV?d00001 diff --git a/orly_files/figure-html/testssl-1.png b/orly_files/figure-html/testssl-1.png new file mode 100644 index 0000000000000000000000000000000000000000..6574c03977a42defae3db54c9999db5a1097ab86 GIT binary patch literal 665478 zcmeFZXH?VO`Yjreq9CFa=|!bT7kB{?A)xdsy@N`Lbm=t#M5Xs8H6Xo9??pj+kzN8s zDFUHHY6wZljqmIK?mO<;XMaB9jQuGYBO|}E*0Y{xK6B2sBA;oiP*E^b0000gHC07D z0Dz3}^%~&n?+@kT<2L{R36sOqr_Y?8syuabcJt7G{ldmh#m?2v!@)*RJv$ixFf{&9yd9UX zqx39D6p=;O*WDb#dH<9eCf6X6O2NG}!+Bq>;XLfwc69M>hKzWILtE{t-9gZC4l+0J zpcRB9-EJ*6NlT<7x}8}q#2~ij86F=YE0FLuJdc4a-&mJTz_Lt}SW<`5x6vH_^h==i z;_S*Lw5nN|jh@q;<7NHNQp$*UqF*J3BR)g{7l|A|gcmi1eHBqhHUJuVX|%%~|JZIqsHkZ+?84<-L+u`x^P;66*5#)w^St z-jaz7sN7rR3k!^Z1ozet-9C--B&ag>>Y9@axQX>UEG;YX7LY7qc{Q`9_!d&pq7p`4 z-UThJYK*!A*?KE^EVw2VF(I`ztp9nTqCEL)_Gh2IW(l*SBN>vO$TsuL!vPPBi+=9W z)+RzCb0pAT5qr_$uX+adfJ*Q01Z^L`O%o!=7Nw_z(f5T#1m`O&oNcXL)-J2xyu#$j zyr~u}oK$ebTx8wSrFeTn<2r-X42Q<;-HTAYJiKCkv`0vdDOrVXOsvk5P%B~=t^0MH zAqX1uPO>62xQnX(8tMHH55hYsv`nttvb`@)2EV=Vsx0gVnHXIa9aEHbzC8oWR?p+3 zM-3TcpS!-KTn-LehoM`>8~AO*<=)(`W5&i+-k!EQtaxW(LkolmN)ZEjm^f(`!zQf6 z)Xoy!#fa|uM?Ka$OJ=R3wMAYms5>iJJ(ilob;OA46=x}}NH?_SJ;#glYg*{fR|?)} zdVg<(4?}9%iS4(pwb&7q(rsE}%4stmM_Z$Jv0`TeSjWQe!5hYh%^m}0qwRH?y?f3k zp1y|6E@bPse@$k5jr_`X?0&dmOsxz_8_L+KIk9|f>Lz?cxiX#f!Vzu6q#dhRc@lOK z-XPe?3%-x*?;HaUgU7(*;Ln!Ci83QO>s>#DUvqd`_n$c)Gn>H!Z~HSggLcxKD%J1Y zbEap%?eRtOhwclpBi`#*ZJy{Zgr-&PVs1l4a%I_W*l_$T!B}(&8xcifYKc#@E)5M0 zc3!9Ou^G8(J?v7Tjp2G~8eP&Bk4Wj%$gW5am zz7X?+;AVD~`#dYRghCpnWOBOUNUu3Ld3*%`6dO#G2Msd3VnK-n0OSE`iV6mPM0+`; z9c*7`d&r+GuUJO3-xR!a?dEb6op1PB!?!0ubq7j10b!*ux_J_sCl-<6EiCT7oamo> zBg=a$GVSx5D<~kkbGf~~{vJLjHE?`XI()`y;br#|P5{wWc>wXv5CF-)`8p^-9RAbL zZTtGa`|)3Yxj}RtaGm5oTqi`Hou&tn5YC$_tnk0R8R2>l01wFi&13xQPX4NZEAs5Q z25lt&>9KnNJ&gbQ&%b%MjXQ)V_V?4<}a{g^v`e$wbcX0kYIRC#a|KEiC9}3Zb2j{&F){(>l5na>s8^ z1uX(`LXO|_kd+t;8|x}IK9Wdk;7Lf^-c)p@kjrFw!BV4Bx;IDUO;stPgDX2cn&^L` zDs-EG1rF(@mXLnx;a8*;nTPAAv%+GFju8MyZqQ=Cnk@jr1!WeaX%Ne=cs_(Mg zGSoJa!)VZdwl6dDb1Z9Ras7hbpo#C*M6RskO53Tuc=1G?-AMUxssQOvDo2d>yhYhT z=hh9w4!_T>=ljj@8GRjKNp8T;)*i9N40hu1ZKsYd$-%!|<`gB|<_u;_t)2>*b(oB0 z$mopa$XM?$)ZXK!FR9DTtL?NI&~9|lKXDRS)Smq|54i@WRt?8qjEFd%W;X8JZ&OXp z7#1}y?3rAA@|1JiiqVbN88!a#q(fL89P8_x0Bj`jlPpRD@oTKhC8%enkp2UCRI>qO zA$^NVvUT&dDiv9-Ek@qRRYQ6KqfsgRQseGSI0yJ+t{(y@%7=h8JC(@c&Sl|89Ws4a zKfT;kZ}dCVt9onku|GB|uZ!utO3Hj0W;dLoTcCVhw@5uT=AqB`yw8ZGUAH*Z__S}W zp1h~ssMR`qjQ=UK_r@f6rl$MSam9_M-Dl_HYA}kbp6N{b`wI082QrXTP$)Mx?<~V( zBgkh5(y$n_b36`n)19{fD?MNJh2x=ZsQBQ>!Ranbb8k5Gz{mbFD@Sbgpkv)g!e`k} z0`euECu8C-+ETN|s5Zyue{l6?P-Wr64F+w-etTPvfZj2yu-W#sS7= zwBg1BX&s#&lXo6oXp~#RBoA3>JXcAVz6V%zC)PYo)M3OJzN>Q8 ze^+9*9uzOX*-d9qpzQ5E9Xns<){VCCK3Eq0w5RA3rSXC6bXP!B)xv%8E24-YR~H&| z;yM-8wAvYWXy|cv;N8G)C^q#VK@~G5+UPWEPy+RdS{z-}k%kIoN<~+IRoE8AtFZ^8 zoqst=4@gQ^qiUOMr}Q-CjW(A{W5EUQsf`#c{ko9ecV>qL8{bnQDhAkb?E!8*yBAB9 z44zJ6hB~8EcWqW_pO0?h_=>}rxSplt&MTGGFtI){@D2e?6n_z=YoVr#J6069^Sgn~ zdv)_UseIIgr%+WPB)EsA++mu>J$+fTodSJQfMT5&(vibCFAofO$~RYA&KO$<6|M$h zEKhsFf}^*-JzJ&K*<-jk!0EMlIe1q}J`9pN4@6cMHrX-l@IoQE222?b&r9#cKRf;@ z5>du4%Gl`W?WgJQlA)gR%Qu6jVZ!LPL*y+#Tx0r7?Eou1>az-mcOmo9ig7^WsF35r zuSDJW2?JSOmM8BkZ*9+`9?mxFxH;kQ0eeG*7TJpwcB6}>31p#tS4m`(!_K&k%zff1 z5IWzw_L?%6C@G0@wcf33l3MOUFk-k|{fDYk>i=|0@<)Vx!!_~1;LWI?jse<@A~9pR z8SYchEcvpKc5t?^WL+PTL{BtbtYyp*Oas-kv=}{+t@eFhe*yIi8m0nNnKv7#?D|m@ zD92M(%D`l}fA;RWb*6(>r&OE{p&?>BQ zvd!)Z|C*N=6Ct{RqrM9s3P#ULAz;Y&T>5_vDBs}}a5!jNr`GjQf(so~9pI;ByO_ic z}%#*C>P=HBQOWx3{WkWv+n}1^gL8$mSL7vTbFxHq=c6 zdm2CWUsAKKer%;FZsmW;>Hx2f&3xpdJi{~W7;3wD5QsFk4i+C|(hp}3h{!x&x0Tqy za3l$(try&E+5EX%HDANpTAftBtfkazL~>9aP#|O%I!)Ap%jd~*`eOUKND|H%m{d? zOrL%D5f0swSq~geaX=)ER2!K$xl+;J9p3%?^t~g4^ix7H=&+GJBP8Nj7~p~3u-Ddr zUFpXw){0E{VT}n#Qg>sdFbLDK9w04n;|vLRTS00)K0Jr4a_#!yX)lVF0h|I{)vXs4 z-t)33)7{ZjMcq9WallNOzPW_!%mZ$%+Z;!==ZQLMc64huxARtN&xeZAtqTan<>pdn zz$x<sYD3k;J8m2_R+|@1W5nSMXJ?b^XjdhzjsKk2C)|AYXJ0Se-RD z=(kwSdH5*Bi1_0-20NoVy?;hxD2_5NUONP&@1@-OAq*ogoJ+s-51*wJ3lI*`d)*(+ zAW}Upi*j~S!<_Bw8(RnJe>j5YxPR$WLtyfIm(}u-v*m_{RET*>7v5t#!Wu^mSJW8G z_#QOe)^9T?`>>ldd#%xFzAkND>#;5iVCoJi$3L^&s?+RIl(uPx3L6vHzMF(nnSwVo z;1p5LZ&+@^0(3n2@L;oh=mh50T{ZyqTXI$oYI@wEq-a)*h%Ei^_O3>VsIje%EL%9C ztR&PER`KRuS^kUvfz))w#FYTm&uTR3bg2S{b!lAHCUe#1pcN1e5WB6v8}ob-Zq(jk z(iHS=D060Ot_n5-vJNT|?)d)LNm{7EJf~C)<> z;x)FObDGobbsZi{qc)1|rN(-G-H$Cx?I;E~zupT#!Z{Vh^(~J>^ZnJs=`wxt+0qvq z#$u-y24uA34Hbag5IyL-GAclbLQnTx!_G3o%pb6b$20??DgOMtQ z%QkV+>W!~f4J4fA3?$}*3Dc%W$slADeF|soyel|pXhxXOC+m5sb}=8CRKK6bvPem1 zd2Wq)F1eh2J>NFZ-E;nzkF0bzr@!9^Sy}#NyAU#22tTf(e%w<2~P?EF9I69IdTrjcnSi(F$ zzJ?savTe_wzO=TVym-48vZc*t7=3%}#Kfgoagj$eUD&cZP0$k2mlF9?U0^csQ;amz zmSiF*WK7~ii$sd38?8S?l{MQU*$+AonU7eG{yCbn<)t&8Re7*iUPI-MYI(WIzXg%- z8$^Y=PIfpKW(()YlxefUD$e#{(pwPh+epX02;E!ATdOuMu-0W`2e%9{JA;86`-Unj z);peGDd=ao_TT6%55=+obqVOSH{;byPgt}4n3;tA-b3@|rw&7_sHdbw=g~3Agp66v ze$nL{;Y0h#d&x_}8{s8khiLeA+-q)EZ2`>)ko3ohz=pawW@?OehLFTrg5M@GnU<6) zjn&fx^R?y5x}_EuS3B(LFMfpIngb_&a1PY^9Jx9@c38Vgp5#9^ISgUZaq-Ma2~^$F?zb$E;y0p8shNHM-Z z0j-Lb0G!?yL5HLW;6!Js&;HV8l^Ac6o#DIt6>sPQAyF8=N8ie4e;_hS*z4InFgYk? z?Cb9DSh#7dd>zf^kwA^UNaruj4+`pZ6s}j~>jnZ@_&0(0W&N(|1nsHyE$Zgw?bjWf z)V^gBPV)iLS6xclT=L%tSu1|t;I#`{bNPUcP8XaU4xh3YKQXOxq&HNL&suo|2}#tP zwLu7!LurgR-fiX1k%g$ftG)jtW)Q5sR#a(rTCYZd-CL{=r=78+E4Pw1Vj+!**ewZX zzbrA5SGu^4^xm69;Mrpid^T#RS-qmqpdf3_1waBJdPlV81%9ljrkaI1hy%Rl)yH}9 zI1x7=5GJakI{pD58$7o&x9}Kvoh83dX&$|mQ^4+jUbFPf{BEVDGvNrV0JN9XnE?k;dw?7@#J!8A^^Kt}- zDo?itTXvpLImLOLe9sMo({z$IJ1;)LVQPa}1qV-EzBPxxltGjiB;3oSJ zAqFbIpF}Q3*q*E1V2xn1T1QlweYa@PlkH5iJ8}gDowM8YGC*9H` zF<={i$@(MiXjEL=du?&qWB0QfU~*Ut%Dvx`kV&A#{`dG7RF!{#tX+{}H zpOLdOF$xt%X!}eCl4iKOJF7b`$lMy2^5*+dAMoJw$QmL}`hAI5wUb=excF1Kgwa6l z>KL7Aklf!m20+}Z4q%YydnhjE^iAjIg!T7kft0QQt@FyS-)`WFEPM8>eY;G$YbaVHyWI+{ zfLqC%FyvsXxof3X=rW1;Ah!bS@f5*@nc2IdhZeirpRujB>GxSzG+BO0!FvQ1BMzOM zbXB{*cfiX;y3Ys8v8XfanC!5wOM})_)aqk<3^e|6;U#L-eB9YF`6r4mYGXpq-x`N= zqrR{kG70F4m(EB$|89L*$R2!>cy+ToR8Um<(r+RM@q`VoLbu`8d8q#O2)>az!7Nc; zL4DF1XJ_%2Eq$|zHQ(5ZisO;$ieGPIm!M{#UH=Io;0n9&2Ljxv89%NiS-*u(iNhjf ziKE||)Cj$Y^N@BXqyLdtvSFf4(1L%q+;f74O48J^d5`G_Mt7OmX zzgb=(?E8ixaJs%$NIb0b?!jGbUz3i#)L3?gnXek;G;o?4*wOmCZSELaT2XT*3-OCj z&uFH`olfYcY9EkAPJlBSeGiowT9OMO@y#x}lrv05P7DCZ!2@PTDdqUf;}_QN)CD)Q z9%qyf%oxwe*^L6vw&AJwTVK*&E5AI;swrQOlbJ)^MBjo;zT3hapkVGh+zgMzr*UVX zyRz_s?9t24i}DehC;o5_q!F_7xNZHT;1W?do6iUF-A86}s7vQ2rR#S@9E+Y;ih?!U zzc#{w>}X&;(=@0d@KcL=Ln}J*%hzYZ)tMbrRpyftfNcMM2VHv1`}r{`t1YL5uCq*m z8LfcezoZS?qppd$Mt&BwOe*hE$MoUGDnx)=E%?YeD<|1-<1r>J|82nLtRg(y;3m4Jw4+Zs8lk0$^yS%Psx!{AMi0I8x{)`AwwOu7?(fwMBRu7|hr(NJ$v`qY#pD7J%4Gr8&pN){WnpLp~XjQs(aZE-I!iJ}-yE(;)LNeq`!D)ZZyFy@&N z*Ns?#I2D@H@M#{@2ZMj*$>jP8-0U@3?~h%R6)ZwCd6GU9FsjV6Z1s-HsJhR%DZ-Y7 zXnKsBDJU=Zkx7fl4j5KbU+(SWuU!rcv)}if5oKP!>u!TJBEwd$-yY2npU;s+cC}kx zD(+e|IvO_K#q32m9|=-r-ePx`PovSBG@kZqg^zT~uq9EWz(4M;uO&qXbA;YEuAb18 z&6+xdJP7I=yjsokxrw4DjR(zb)l;mMHJU#TdbGr16bibR7TC6x(BS%W_*~P8myh)i z6Uh~N(m~3*So+1s?;QnwP?n%Vriapo%FIql&Kiu>?URX{vM!x!$iu9dIWoYl-5NUag_Xzo zEj^dH)LCkL506n85~<+3Eo`x29@`S!_M^=y2sO~wJJ)0qpBfYoJoL&N;n5|z!G>)V zFVH5==H|~R=bb#GpIav|0Re2D`Gt+>b}v@4Yh-*jlRsBAZX|v8TYK_VfWR)+@te=N zp3}my1MI#Z9~I9ZsuTCX6fLTpMN|zhNyxwoTK}sfAxz$0AFsVTeITPbz-^~yS%)oz|U^R zqdNzIuM>y|Se(@8Y#X-&2V_WHT3gF(|YaP~FNM(YaAu#ignexUwI48u+b+g8$wkDw~i)6~ML} zf50J(C`us56k8$f2 z{=A=Yw$q&9blki~TCSzjr3EppF}v&5QDwX1*0DC<qtSoY}sXHn9W5bV`yJ& z4}s3i?_$Ar2K*>8UT3c$|(#i2Z?_b!(_!SX2&wQ?H5BY-c`YuDF9cRn! zUO_Pk zi{;jM=I7)Ou}$Y=x#`80-uton-;?Sdxqq97N-OBgjv1}3is;s^gz@TRl)tU7^!lY< z68A#@&;}a92cr%wXQp*zf4by)V`8P?*J2r*-gD7z%6V@ZO1;eu#a*zMTw)NEM(b_a z0<9A*VWn09hwr+C5qG@8l}9BY|dY{mkhi%xvx=& zlx`K1d&;&(`6mR)f3sEOI_hFtgcO~GC=H{@0%p{T$f;QeZu)y;IQ9b%Ujj{ZJD?MnwkZulUNbo|f zO?alH%lpRVCKq$_Y4MB?6E+8JEUr|1_;)+xc+A7sO&C0GKky4gU+TLFc=fhL*dXovr;Ag!-Z#bf#G>67% zt*2QHum(jpweN38)r7a5-Ti=nyc!Kr8L9KUV^EYi;t*w-ZAdLJo& z!j+`S_!i@oJaApX``%K7p`3yWnKzd^Rd)_acQ;+09?-L|^Q2c#cmcDf(2(a@og&!I z14sw#C+kpPFW0{CjL?pAO*=abl^5716x=rD;Sf|@5uZZ&N0mt<-~-!hKNk*Z3in4Q zfD}0J*$_rMWQ23G9lH>CTtyTrdn=tzh0THbl}vzUD29Vi-acAu%2nKX3jY?;w9ztc z<$wA;hRgF4BQMu4N68}19WkRTA)_6~7p6^2q%lcFF-FcHjaAI|r=a(BjCW}gP2${^ zOA{Nnxi!+Ig^fF8y0MOVG`@n8hXNyMQfW<#anambbfRMQK%-`&m3D7Kx6aF`fb)Fv zY}1U|nLGXj$)IwdZxl^X)tcClq((E=Wn=L?z`XS ziW?{BbWhMnr_m?6t1BI1O6`Kj$rPI-?|cl)^h_gldw5=cOY@bk5xn|ZoNl*%!rWdE zHgq;SqdQHbYIZgh;{lVkw&>okeVt(Aj2k<}TrT@3R*%e8S~~5wpVS7NIv(BPY4rjZ zA1|hiqpoy61V}i|JUapvh7E8hsBu&nvqt4l|1;A_!Xxgi+Dx_PXsnCp;0m4p$Os>Q z%LwYiI&sNNv{EYp;iut+?a?1wj*e4>T!WXzhV5>?E{UFMw~%hPcJ}Rh1y@qo0uLoG z&Kg^K`!_tDZtHel6m!JBG|U%e85%ae0YSNiKhswvL08 zUS|@UF>A(_vag%jt&MY4o4!mnS-S0Hx*D`*^dm9&ak21}Fv$kFcjeuRI|MyWYe3dW zaKN@a*JMd=;rP7uX;ukRL^81mBPO%NLtrV8>+gZ9l+zRV%?hfpO!M_B+p<=TKm-X+z0unUl zL64wXJ3+vk_li)yZA>%i@W9e?HYxiJzAyD?wx@dV})|o zbFRi69+$143UzvcfMoF|OXYSzlBqP!#)!bdEbZFJf{cs-UG$o|n*D}9=xX4I`qr7% z%B3yW(xKSyr|jGzhveBMU={S7?Y?$Zl`C&Hvzlz4!j-bZwRQrA;&~kUfzTv)+%83S5IVw zVLM7MM)%K59X1A5-F!Z6h}erVo~PPqOc!TLqTsJ%*)anN=UjKXfh+4!PqF3y$1J>5+Os9EV zPx6tyD#~qY8lb?Z^yXcC9y-meX-$O|tWbwtLDHxHSVL(z3EeT#t3%ecGgFoc_nq-} zuSJhp{DwF|W~7cWOT_}V11;Q~x+ZfM@kweyX3_4Sd2o#txdsu8O!ofEA`yDHwP+Dl zrNe8fcSQE?K9z-ZagXgE4RkWgpGC&702Rn%R*UL(E=%&bcW~B0%9x>ktt_k$pYHII zVwwgy>5nG1D#hrV<6=+M-?LP=_cx753F)7nOXl4~-Y3xJ z<(um_*2FsbZI1dT=eo@#dO;T~Bvw~?LVSU*iE$aYRULm}R(MVP#dh$OzlGBAhq#oh zO3|nf77O;Hn_o;-!7Ll>0lla54{acGF=}z4h)o9kI*C;Gah$m!RPORU#;arfobOPJ z^Et3LgE4Arw6Ug3O}6oi<;z&Wm7cTxGgR}J<#n^hJ(TNCG907SffK4k;d0vdgm*WV zs*M^QN#0v@$mye<)lryGK;zh2x)*I$5kVfC1N0Djx|j&VcaUA>(Lw4u-o3puF8oPtXH?@yNi$j{5}&l8PtY(yG^D z8a)640lA>VrmP?m9`rq%>6Vr1DGiuLDt-Za%rN_F^snAesthDF&^)WoHf;%4n~<`3 z5^CXOB^0n&Xa{?pB5GTTQfuj+tDf^+;IrKsDpa@YNP6sF?lq@7Th`^Yjrm&G4xQY` z5}%l)R{g5Vv*fJ_b?W&#<)XIkLW!RHj$!eTbnE&!uw3g=g6&_49N6C$6lU3%5eQg` zZ^NE+EmSm}w&V_X>_dEq=gi=(uvu_$#|YwBhC8*-G-98LUx^js=eZyCDFrdt7~R;% z@jm`jaf#UBNKKdS{-d*q9XA4@sc-77K2pc$qeTjnb-k_?@Zz!oT`z^Z7Jz!-{}L@& zi2?)XeWtef4ewdHY#yCvL=iwHocitVgJ>2GHMjYu*dRp`5+9n=;Cq7gc=1Uq{oohp zqnn4OjOUZee;1KKH$qy{dktxJUO||vqmMShs3MyIEShqbP%Y^$j?IUKC~%(Ra`%dP z&Rg+`VKrR{F^TW{cxCJmwRcuTAW;_aa+;Lc(w22ll~K(#UzU5~UnU-{pS%h$w(HL5 z>^2kOMOAAjP{hwEq$v4Mw(5sRT*Sg();Q%w#Jqd_|B5Dd*~GVp^jkvL^6TVPS#}c{ITGNO&gf9%7O`JL)Rj-%VA;)$OT?iH$7IC|EJy`Zppo2A>$N-Qa?5bU z+vm$6I0$E%we_kmlut9E=TlbW3z0OSTi!UGW1PtF1=2wkMLMpbmWxT(di#LkWHMLE$%F zK1};(cz9C*I71>Z?qaJz=WQK9q_B6ash6YmBBg6fxR~?VCbj6F zW6neFC3fYxEi6WTHxgQIZ{-F@wwW9!Mn^$iUB^oZf>=d*ovAUCVuA<`i)q9dVw|z8Rv7 zm%Xt`(Z1oU4dB;pvG1MKGg?cH5iYmm@3U|}+}{?p=?s6@1lwiMb+G1F3bMxUT#|!9 zPX_eoLww=J!7ZC)cFV}YS_Pn${?1u1Yv@U_$2$tStP$j5>v*=mzW9rGo*X$L z=Ca&AStV=9D!>W4b#pAbi;eEYodDftXUeA6pF9BfUx#DG+K*zJ$x53WYflNHhN0Bz z>)51YW-fxBk$-VgFET?g(7mZEvg5E37Bcay{?@%5Ttj0VBI$o}$U7UH3l?qIrPw!{ zm;ihV#$P_`GJxCyj!Rw%xkj>AwM%FwEB0Z&e#whxcRu-41%HQmYz|+r8u}%Nt-VPCx9BKk|gYeN^_KF0ZrEpp>9z$0qu%3`aM` zFpr0KSk}eE-M{_y2hK(i8kd_U|jC0>DD@YQC+@ zyh68CVm!bUX{6WrxYR%<4x_tMVt2*$CyF&YIR>2}OdM7ygSFgQNe7MVWRgP$ zfiB)#j%Jempz69j%RlVdEk1#&UJ}T3;AE4z>g23Nk*;K#g9Mv*B5tLx=uaxkW8_)3h41pLWVjl z-EkGg7P{v2h0%<(xa*XT8OTDwLt7_bqtngW=LMg$no+BA>RP$L=I(#x$Q`;7uNaG5lv8CW{#+OObEb|~9s8)s_ z@Fqizez9`(QN5Pt&7TCwpGI9_`>}H_%JVN#LLjT?eiQr?$czL$^Wq^5?51_ASk?@W zZ2WdUKY5E}qK$CJug9=_?IoT1By%Fpch@=O^n}b^eLL^gYhsDxB^?(y%PT10?^PBP zhf_&Mj4PjAAqO)Q^^YRsl+TyFc2j-*EFI=yJ;San61Jv2%0cTvJ+BAqo{vwiwXIUdbNSL{T$Aq zCh);uFp3+CBEs{^*k3MvaN2nMG`OW8CSbqY&GE{9$S1G*$vg!xeT|!=ThJ|iqsPz; zR!;$AoU=>jV{sR-P6?%y)6=8BYBzrf1qI$NJUN!VuO;)F#w|`V-f`dX1;&+y-2LF- z(nAqa5HBZ&j2H}@yEygnmBi_2LY}BgA~8d`mDQGyOrsN0qZE>McEyt?ioH5H{QQ@A zDEyBHn<{;pm?$+@H5=z=(#IxD;GSZ#a`i)R+y3aEwKP3|n*wDaK}Wr7>pF7HKkt`? zN#F3pNEp^WA>F+^o{&*NqZ?MLK`O#l9en{7k0Zr)cXEh0&e=Uaqr3Hs)RlyZZs<(` zPe(n=b*JZa@rwBl$%No9o@x0tC4g@n_zRCiMUg4H`06WNKNxYe=Lg<7R@({rE{kV(p|pd zXLtNlXtnU0k0sP}CI7l8WN7AtdF#ufMkNpM$v#ZR*?MQHXm)dnp%Z#;sSiO%dt6jo zwu9T@RZi&GEeNiDef2VCUA?k z|TjMD{UPR?9DPftAN zFbv%b`~(`na0C?|bl{A*$*$EHRGKJ6P7Dzt-?LnM^IP(g;Q3`YGb5@_&Uofoc8Bb} z!PruAUJh+=b|ENAgl0r-WqbGUynxx;ES+S$*v#}|LP0#{*@C|v-aC6#Ps%-!-Fl3zBP#|uj-smo z3H`Ds^WCK@?I?n&{dSq_N?R#qaBwb-9evW{Q2*mCnF+UM*du*MH=NbobqgcOVG0Fz z+WUw6*o{wXJAtv;fBBb-r`gRKB=kL+7B7wY*n;eh2O7>>2O28QkEHMw{5B__#s|w) z7i&TDGaX3}{kL+fw1N965gj~ta^7?5tJFb}2;b#<0bcdDkC6lHx&$i7%R=g4xlv=F z43T%xy6fWt_(ZOFb|$rg0y`C~YX+?y2A4f*bgD=!7%0`slC02Xli9}XLBSg6wGp=< z)KHxB-)^9yU0e^P0Wn5Bn-mrpA%ncifyeXc6fZd;G*BS^RnIz6x#_WYM}LyW5REEa zq}kToXfV#YG*xkJ{6}U*&8H>{`;O>PPNR$>OMJ)C5=*Upe5Ovyq%}2b;rJYdVU~qE zn)?MA;Ls3WR1Y@&C5&5tRd<7qFrR!DFGO97HunJyx;ToP?gAcB_{7VB#xe9W~X{0(;K$)&#PC@9P%y z4A^q>0DZI@inzoebtO?Qzjb`8Mema1bk+GOFkGilYt_b<_!|y|u5tC;N{3&EQ(dm+ z&>hMWigt0X)=mKM*OL^(FGn(b+w8mpF^rFx8^#rsNz*2XpR#u_fwX!uSB@2_zgB&iX9g~dmLhbIKF^gKa3vPs>Q&~T_PFLEBz zChWQuT8)_+Y|L8+pLW*pjBu`?aJDc8W+G(DH!f2#clBpWlO2Y2p z{WP^^N1o^lCG+U$itR4z5Y)E3;7x*aTFji=XtB<_A~PT4f1&m)o2c6cJGDu^P{C&* z@xxf>@s4r$cf{i{WpAVCuKdz! zUd}hFwy=}6x=yJhi_7+g%7~g_Z~0nvBQqF1*AUtVE48X(%DpDTBI^ED!N+Xe{aD)~ z-CkAe!=bbtImp7N=lIJ>Ix6FR2;k3I0FMvq&e_$z!*%3nk3CH+B!^`jU);{PN_)bd ztqGsv`G@O%zR;#Wb~ zTt$PgA?){_PP+-!YBcs{;G@q`w3JS!rylSsm|`;hWCNr6O&d%mq~lR>`Gpy-4>$q0IV z*2+*$@a$z(qajhz4|U(e`X*jwjAOd0*lLT_Vk!ly+qCzmXj9+VmidVCqD;{-N_E~~ zdj$BtC6e5=slo`y+Cn3mR_i!Cq8O-UxpS%cHBh^$AJn$^Ozsc!ult+%=Vo}l{GN(s zwoz*NW3Ykc9wYIav=XkvWXvnWBd*4OKnZmsWJ z%+n;H-s8yMef{L2w2;P0=Uws8zLE=Tc0W~1|5GZ*diJo^`-JwQS7v4&7W~? zTS{M#j{GPLIaC5Q95{KTp!Q4#X!oWHO6YNoe7lN=z~^T&Nbmmn1$SEF*ocoYLFY)k z9$_y@C1D4b3ultT5;fi(tmCn)J$PLcm|0E16ZMNH zQkE#NKIATR_f%YY^{YrHmU&=%Yk$7U1(w=T(O-a-+8_LRnsES1J`p8^z(FenFz1a=-e9+vJl*hZXhT9K-}RyXy9%%1w(tWa!@oGWS}*M7A0TEj_^; znWjC>qlulIr!p*t{Wj@U1j`*gQ*6Alij&73c9GwmQd7+ii3v*+GB1r|TarPQW&p>G zJU>=Ss&_OkKh%3e?0c}RJA^YevKKaa{VjH@Lwed^N3ZBE^TiOzx)iwVJ7PtSlE1ZNL3 zbQMzjr`!+zMd;Hrc(lR)vk`(|niRd|w^;--#M8#d4+aug4Z_|!7MetDViG-tJi;D4 z$0b|LFoS9BDV9>Cw z2(egTn{SQHJ^rN%;|S7LhM0#TBv)ImdhIN$wYSA&FCvFO#%=%LfWKs~E@3sWfF9iH zMOobIIUj8le-ijNYsm>C=)Ja>>(7AyB$nSImOM!)%(ZifIa&2hCfQfxsQVElS6MkZ zU0+@vpRE7(T|9#*RN9^4Igp*x>5I#)eYrOuT0py=zGah^4>`=Z!W+u-w^dYL`_@Cj z60@f^f8XgJc`S-6bgD?BB3b8=f?<`}*9>$pVe^8SbkO0Z)SMU1otv>ei=dop#C*+` zE#?=lIVZ0LPR;gvi$OUdbn}^|981T6NMCJDfVnBnH%sDI3`##P1fxKmzfLj^P5s8{ zh5lX{p?fzu$>e=n^acL)Rw2>y1Z8#RZEde5U!t`ya>uW5FO|GsizDnK}7 zDk}ZUpC;hm0oH7BzElqg|VRONk zNA!1KCtUe$VEcb(`gb-8{iyw&0PhS5f`%~xoO?dogEi}nWp&HPGK#AIR$lHukG=q? zDd3x3VAbsC0UJbF2~?k#6|Qo+xA@c>@y%+sRQD;ph?Rwqd6R{ZWs|0mWt-+uRH#Td zbEz%sU3GV`7==d$U|l?Y;)YAu-?y~jl)w4i;vr=N(LYG#x1CjNxGsMaB_7<{ zB@oQ=q{KG|ZxLHSr9JMxdY=kdpN@K`_z$ZV@)U3daOMB==l}J1AHpdK5k&tzspy}2 z^RF|E{;-n&J;v#OjhH{4>i-_&^iPcZ9~e2Rnew$Sza|NX5ql)}ya;DY%c3eUB-B05 z&^3$yhqbp1inH6cg&PSFlHd>$G`PDv!95V%-6d$_8iKn8Z2|-c?(V_e9U6DH#`|{8 zIp4eYS0}aapIi0(=z^;5^{h45lriQSt2w}XUdtWjj8Fv?DcGWAQUzs;3~qJD`MhMD z>Yo>i-9(g4V)(^ZbD9lPbjUAK|F!YRveM*Qtle%Dq+Mb8L%Yp5*a3YonXx$fbgFNm z-F-lX)2`RWW;LEtw$Rt-zG$Q8mA;l#)Vs|@hY|T4v22^&(IWkorcsC}*rx#2HJX5t zD*1+>C_gH_5SIQF!CJ(MTfHDfZwR=HY7b|5cjfBrCQloL{&d${?~dvnG@pjdR~6o0 zAN*p<(cJrE+U zY|7{I0gv+DPnYl7`tqBG{!!al_=zTX^~v>~wt#1;c&ZCG$_(5Fr zhb_$YYLUbEWt+WU`2Peu97TA}qPb5#UJ$oLxf5a-YOOqAFh!*>eU-{i^mFa`>0w1H z<1|MA=SBH{RsKp#etm?lHAQ;G$<;PD8N4)5yI29M?V%*}N zFjh#+!|k++o`D=~@JpZMxZa-PtBl zj?#%o!irfX=8qigE*X#r8tAYGUy0`JSg%+u+rZIM9pii~sU5qATrvZudX!hoV02UM zp=O`hyr^gH$6(YVqaY;Y1ab#n6LnM}X^xnpRA9&Qdw zt)~ky>*UPeXiR+*xU-pTsC+Nz7OCB0Dx*ofAnlq?PS=0_)pogAo5O*a?=(mA*=n|= zFtKGW@&Vv{($hgFIpv5=Esn3b(g!?Tmhd?rnL8otYI{3nG7;IT+3PspDPtRYF8kVh zyY_s6k*#-IDYBn!LWJstJBanf@knUayIjMNWKMDb&3gFO(R#ni%v@t{>T1EOHHqHq zjPH$E^m;@}ror7wPQ1|?Q=fOaT6Mk&exlue2tI<{sRdQLcT=A%*(o**>w%R3rXZ2q zblsaJu~+|=TRVOCr!iL&+^4WmFXH%Y{(i7THMK{t)*5#vTi=HgRX8-2-@Afu?;lAMg*)f6{513G!{t1CsI zE`G;MU++oe6S-Jnl)KnuXCw4Mx`{cp4LIPel2|2aD&J=eV7c4=Y~BUEIAm6w{1JlZ zTxRDXIpl7+T9Rs_nV9s#mkbHP!@SRFAv1}sD!fz4wAQ~R7oS$Ism27QSo24YiFE94ra+(RwlPDMO3L-2 zL!9I>-iS^iR!;;!{q_#ycM|19uytf;Br=xDK*#jDe&Z*W8*8hw&M{nP2GD;g6v31+ zNp|D(|4Ft2A~9kq*K;~>g4Z>V!#|quG)wq?2hG=maxHO!6B;0KB;0zo+$vFD55vy9NGCOE76~`LtH;nf5z2Py)xD=| z^m^A)qLSugjL-#*RHditSeEq~5R4bUYL=h+XRT229EXg>Puh)3!ghVRWyUsE8=VVi zyY3QaSgH3cDg>kmxGW31SLQF0=({c&xSRGYJel4Bnq2ocB9$AFBZ;}yM;sf~bc&Mq z)zqCcWKh(uE`KT%&yGGbEwYcZkC^`^V0lc zK;9LzUS;%XXnRc4Jl{gcqt#>=?fN=f)OzJUaONG>kQh!(BdNK$^(UQf{|~;Maq#d? zg0(hFqYD@$yX1Y5XnF?rlE#QE>~V*)zjC|Vd7NTJ@=x`4^gk4PbyKD+Blq}!FOg=* zs=RNs5`TRzO2+C9E4XnIDNPC3-)^`1+6_t-a4o8)HGzH+d=S!4<@3?r z(~h->m)Gsbl|c?VXo}h3lj-iZxOk7~^b=Zx0FNO}0z*aiP2>jtK}AT*QEDt_1*SpS zTBC}w6P(4FEo?)T4O#Er7Q37-&b*{!xTBOdU_$bXs$~wQ1>KTzpW`K4)e9T;=MVBUIL**mTxVp6X<@EW zr=ua>oJ{^QL(Oav^MaI&h2O#-F{@r~% z8d4Pc@N){T>*st0XHPQvZ;$G0W`)J72rx(g9oE3~8liyipWO44=1bMWPZ+UEiN7b7 z@4suA=bT+3U0fcvBhuI{HAPi>4b3ttR>-!ujG z>rYMCkkjcdo=@S}gc_KWIqj+lv4u9iA+A42Hh+XF|GzCu#Q0!{Iew0Z4CBB zt3EadV%FPT)I0ducl)4NJLE&m4pu44W`|{Il+A}g(wW+|pX=Cu>k?p9_b5>*q#hk% z0Y$OC3oNNr8h1KNaj<E-WnHC>^gU?BgQS zX&n*1!hEGf2yCWuoXhtAM?MHvm`R6=+&R4n|4Kv*`d#-C1_9#ACNFGHi0j5mf04y> z3}JDZuZWH3U93D($`bKNArnr%Y?ebt!J`El$~Wj3;&8JK%^YfrE;ELf%+ia`T1tEk zm2u{}@(Z2-kRs8u=YnZ;B8AZTOTL ziZA4J1d}jJmd3Q=rJ8xY#MCP!qMBN_-Ljy7m#wmfI?wujgvGKcOvgv>p_}5hMw^m4T$7XH9j&tDcnJPs z=!Wbk4J$VdD}XSvF2r`dYV)XgKrI<3TEh!AJ@!6n{>UGlM?*78QUR?EA_0tLg7U(x z$9C==J|mL|sQ9PP@(x4tI+&2VF&Bcow%=Dz5{aKBwXAg2-Ipdsnw799e}&?|-fB~w z{<#bXUhOi1oCJNF%NeDNd$!nEr98JYtxXSYL=XL7znLFsp`VL0Jed6M*bGfTDawmY zm>9iNu!u!a95L?KVowlhK-NO%J)eFpR2&KZEuS z4b|lbTGcibLh;4?GcJqNip-0=rvL1~R1r~^S_baGgMY*LoYMXIr3)Piu%7m_ zr7)>w&!bbix4BGtE>{}j*#&uC*9zYR z8;#(C4tw>6jO`dg)jSyC;&ke*an+N(#1eT$SqYXsTEW26g=2~^l}R78mb=MTMh0=w zTHWSCs}j9OX_o1i3BHkqvn6G*m6Zy8dZ9^1;-c^5L*1V9Xp`vF=Y#krj#YAPV_EH*hNpG$kgx2z&*EG<%)W0x&|>}S#pkIZsHK)4+2;wq|&Bpq4-m2 zT=qG9ZhP6V6z8<0>lGgr(ZklWiRmdbGMGeOn@)IJYq~}TyFl8J(lpSdpekB?P!<^h z`?J~hSn@O|M?rSKfeeBviAZpB#rNa_Ep z8x8~7?R26b0KXZtG?1|gm1(BDy*4LOt&YDbU}k@6MFQlu;6a3Q{8^VKny4HRw#Jm| z9G0>w;7E^D-1IhmU4PQA3?CS@xQCelFmgX_%O(-!=PSN^tp_7MF|_h7!*KXHAQ}L1 zem_Mir=#|+`5jf#;qF$s*Scg*r_S{HW}N=`zqj>O3!|C~zSY2paWKjd_W=c_Y;pQK@EpH(jiw6h@Fua!rSU2*W`AV4UFvlyFMy zpI8FZZGvGJShHMO@vDs{)SMG+58Mpo1iT6&%WOPIfL8d9P%XF$?Pe%zmHF}enLK5a zW2C|+*qi?>r!f~tokH~&L#N4s@mVGCh2^;P`eMncVU4QDuaj}Hb1EVv#I?x%d@s_O ziYp>AoLS*RF{SV6*zZVxkDlIbiM!8%`EPGw;uPlXI z?v#Ks3_I#F7i_Cb1ykkac3b6o-F=7vn%$+bNyn~>B<&3X*c$E|NHll|9kfpmLqF7E zLG{(}0ID4`c^KW^rjs_!IH=}{FoErgZ<6?Gke zYz;stK1BFJP#HYxWSieZb17j(jRe@QZn(!VYY(N-qO+!q2vt7nDLTt+Hw?h8nc?M$ zfnpQ4TmH;wfW!Woi4Vw^Pk(<`**b{bIMT9TYFHK{=G|<%ymB#4r!UAY6(u?{_biWv;Xm)C~ zWlh7!1fSbuiVbwjBz%kW&I7Eg7kSQ-V zf%|?-8&}F8eYdkD%6H~0N{BAQdwz>em}2d89Ez!OGFBPBoU%KbzS~WJ`Ia{|x@VKP zF9i1$NnhnnXS&1rB&GG>bdaPtt1NJTdSQUdKK?6^NrvuSXfwG-S$K)=wR5-TQZ9J^ z;~3pB5(UGK=^?a)mRxLc{<>JFq!t#4icxrGCn?Q zwd+XT!)Nn{(c67$Y8hR;l5tTHGp(j>Bum%Zb?cku#*-s&CF}sZ#h8{jn0`^i?hC$WCw&U;qmrKid%t8<=*b{GJg9Cx^fd>GrQ-Q`A9C#xOHuTvLNh57-P?34j(Yd%z$-cG09@wR3nV1{xwV8q|D9$M$;d?Qon;0O>cVVSnkdW6kDcGW z%As9fc`#9~3&Z+k3>V5FWXQuxPcvI;@U||HqD*qv%DldE6yN2druf~ydeey>OsLgq z`LKI23~5nwt2<^Ft3@^$9980kL7NLU`2+C9Q7^sxWo)RM-?Kbb=3j}klqP;|^GD{*c38;%v5st^zy|{q+MCJg0310PT$&uKu z0l`;uTl5SdHhN$}maDc_xg|!=buz-BYid-J@yuYxzT~lXt=c{UyIs94FOQ8tGE(@f z1R~F!N_>P|+RT-Q`X=)NazwU*j!``B0{H{oMw^g52kdJV%94cGtF7o=n(#a=Yap4n*(|ASJ=^ILX99(wXfYg z7!ae41IyLNJ4YhW$?z{jQY0J`7lS6-UupbcXx5iuWhve7+R?dtWZj+qZ@jZxw6>sL1qFm-=f&Y} z-5dmXi=~n1bd$cD<4lFrBxd%IP24abDOq@Lc51J=TF5l{CIeoaBjt0&PhD2{L2FdZ zdMH$LkQUYB>o3;sfyf7wAu&0gnmnZMt8}F$F`r+V z?UcZ$csj|$kp4~H=>d9()fAG6dqi_AB05WP!B&$)&Zhru*lk^kMR-4~IqC^^bQgHE z{G)p%JG9$6ZdVcJQ1LlRz@#opS-Bbl^S!Au&Vg_?0ApL++*j~$C|k@hsN&Ace*fJ+ zDW^0oTq>@8qHpQ-Yf<*!!+K%($k9iRU$IE~$P)D6ZkO)@+lG!dSU3BEs|Y>1J1;(l zdCSnkDa$Km@%7Mt#-W!YnwWZTsAi5|Z@JnvK;27Zf>XuW+i*_nNNRbN=K3Ps*Fm2Z zApImcKu<3hsGi~;GuC65TZpHji8c1IJI}1S6^o`0!rEuue(#!*A9`UBDB4S((~lE( zIjj9JRVRZ>1pVRL8o2NPJ1i8r0Ipj`h;;n54#zEGGiL=67GkBgb$y$}!CE4pCa|zy zwhY`}Es(~G_Sh$SbL zm!_ULbWr3jv2k%U`^{fIf~LKmkOj-_Xk1xs64f)^W%41CL14{k#J2B(mwZ@y}N4>YkfRxR*$x(Q7fxfN@%~+@FR9q{4)l!t7f8Km5W}Y zUrx>E~mYM1)Ir$4zu|R=z?SPg&N^D5yZ( z(MA_FbOC0SOTDAesM;{I_e1wLqgSE{{F<`CJ2ROIS;2%j*3HdnqzVP%FM>rZE zMy{+eS)E+w&iMvmvYL3- ziBGJM_b#|CmWFkwVQ8=yWV%$Pl?73kPqAW)ztmI&i>2?|G|j9t5=lETb60YQGjT$* zyvl!?p6c~J#Y{Imig>?*E+(01CIPy4+UUpT-A#8&w2D>(lAMpP==?z%<JhmE{ zHeF^3z1H^J!PJ2Ve>9L{iD0Ej)$dI0e}#n~6cz3RSe%|mny%uIlTma@VUo_A3Vc3q zO%)%)V%%@8*XTZ}aZEy95(AX7Y7|`XY}h=~;_IhsS>F8a6$ewzDJI=kUA(FZ}cn#`5qW;kP>lP4+Z!I9<`WdV|_VTeHQQ-4^{#K??MeNT-^w=yY!0af|d^ zqhcA=yYI(ahT!Z!fqjL$wH7`IZJF%=L94B$0$cY)oNkd>lv(`eG$n6FjE#$6>ys3d zc*w~#-$Z+&#pg^MRx6r?`rTH zsK3-l(xTUU>h8(oATMc20$}h@h)8GV2jHTZ+&_^4_Q#BlqekcHw+4R4!*n>pE0W?e z^{z`?oUZpAFmyRUrr8lw1LY4i8J&A*2EZQz_exN=3gNG`k2p^Yd{(sH}C zq)i(3bI|ny5Kn-lS#rD1mM`h%_GNjSi}`sIq~}5pXJ!a(I63)Ub5#}KoSJmdjJF)y zH)F4)@cezo*82>0VA=gu#Mq2C{ELSmfeLCh2vh2SgD!LGIbo?&qsHJJj$=7-s9S~? zRLK+9KeWLuZsx;zxUS#l0;L#8MdB8y_-WQp&@$E;8tZt7*BJ98>~(rgIG1#6WsgN6 z>Mn=ukGLmt+KQbiu3T3bue!qBZCbyz8Q#u76m-Jlz2#UkP*G^=>Dt$8FGk zDM+^)alSPoj@2u%dn)dFM-A1Yr@QV1*QB;b#NkNiYYIw5oJ48=4 zRrP}8@X0%qITUdb#DAV9KtNz1Jcv`$&6kIC{KdEY4>fTBCwK`eg3G+;FfnsUD)>s2 zHOt|lkxLaZrL1WkmNVbt3+&3p$@4mFk;xz;8lGz!EJB{drPV5JjDTqJj#JqB=z37A8qfXkB-{nt4E8SuY< z@FazM0q|VQv6dwxh5t`aHo!mYKm6Q({cA4(5eKjr5K%-M=8qEkpB{LCC(^$U<1e4H zk+D7jvXPmJ@+tn~z)0ay0ekQM(^SC57CA7FOC z&W!&1EA~LC`@Z+v8jz!fOM7!xMRIs^hQ7A5L4FCTY&qW3v*X$<~|D{X{VLDP0 zVL*Uc&@%LVh7xjgH?(CxJ);-h0gh&J6SnM&D(75zRp`=`3< zelkB?o~tGQ2g2G^k#*!?KhOY1?A zKfI+=qc(pvyFE2|-CtSVx@d#nzQt{PeDnscZ}fa!8W|mQ`uz>fl{+=YQMy~Dkvh(; zF+b*ox}2P>uA_2gu|pwnE^1+ux^mkVrQ6)htlqM1-73h&($dmV;6lV}lyX_a-o6Z^ zVXqk7Y&Z61>|9?+-;NYNcH1B*gh-bnG&VRL) zfV(A|mFCbF(Mf@%syidX=i%Df$CeuzZLxZHlok-1|MRHi)Xe>sXV204bftZ))%~2z zd+-$HJHJ;n0k5%m^(K$$oZa$TR`(Y!NcHaaZwMG78no8SzB}6VCY|dAiB3y2G4Eh& z^_L&yU;Nh}p&ldFz~Z{Pp4wl;9s9x_8x&BTQ1*2HS@6?uF!l0spvR@|c7?2lSM#jT z7WPbwfJ8R~=LlX->ErFdDtmybNnk3KSdBZ-0E+9VtUs>{>5w_dPzT z%|TewcYfKctodmznOScqNHX%*Y9JP83X{YeK#ePtD997{fBV6J8`5lmh}S2zbjO!R z!tNb{?zbI`T33q8hm$@Rw_%$n_L*j{r3TjIfd03t4y&wdsXd>7pz=Y?0REqeg^9$AU8Q1NP_cjq;JQcR* zSfHfn-_XI@V*AJWO8dpcUniYGAwuIA9@zXZzC0VWx{cVaw5?!@Xx5pA>D;ZNLcs0M z5kN$#)r7%aQ3T}1z(8-{XrLwn^6M`MrC{;WmXhW35F!lNO$&;9b*d*ac}7*w>z8Zm zVk8uej+goL)tT7UcGP`c9+!H0dYPM=d7Vis1Sw1g_HIR;Zs^N?XW0vt{piP>DcPVw zqu-ByAQZY%aKnUNVdFd*DX#92jm{31z0|41|Msuhf`7sqvFeO@3dLD>-nUVMhVeh1 zBCKOck+hFOz5k@|4vZmTzZ<|C41@)6G!i?P=id=yYRNAQjN*-tP&^)Q9oZvI9W@eD z9=!VR`)*Fa4o)IL%RH|TF|OS2F3hUEdSeK7Gg}YsG~l$r^ZAVFD}5y1dy+BlS4yDf z+*Eh#w*%PG!t)!!5m;z|3VNf}4BnI27otdLglko7I^{{RFgsEVscmw+{C3eB{(+EjhnOCV_i&y9B7&~KHfpLI z+3~^qzr<}zdRQ1G#$PX)Xm!limCem*9()A3vDs~D}VF1zcb=^TGvJLYw%N9nWnueaeD03kz!mO=WP}j3Mp!pflQOwvTFVGVN_xT}lR+aE=h7

b_hCo9Y%gq3LM+P?lLx!yzS=8oXMKHN7lAVD4V_YA zWU|n!AWS%sEvVhq#ixd5uJhOX1`Wtk?ma5)K29h9&B>Dvs`uR9Gu5M!Vr*SKTfJSmn*^-dHr_B6+-tQ1)yj2*sPDe=Qmp<``Yht0936F)nXQpH}`E$*WoGi9Ul~7J)=_v%R8ky z>5J&A!z{?hIPf^LB#;TTz7y>=|7S;dgW)pA6W1?f3%)9uek^U`1_?xOk9T&ro0Wv0 z=Uc1f4=kX>E&!jyROV1SaVy<+Csg5Y!X>EU3$ME=IBSJw_k1ApJP;U7E(`N-}Jciun*;p zzdTB9(fmAx1Hk{p*YP&FrxR zhVX#jZ30Ja$uwliVB-#R_UxSNqnYUGvD+jApGgFLhhgEI3mrer#wDrcKd&uL%f-Sf8g~?IiHS)Cm^`m)mDF) z6aQ67mcTEFgnW>R7(LyiAhyDs&*dy*=X#>PqX<(*dxtP~yPf7~1aM=yl+DK>5WZx> z?A6(0mAQiKu`{;z73ARL&J(d!*Q66BNV-&+`L=#56WAgU1;x0he`ju4>}O#MJ-d6m zBTceKEabU2JAdi2eV|6tAX1(ofvSfL@S<~m zIVSh_(D)J-8nawx+=>xLwc&;{n}M8qQWHH2JGT<(-nQ5Hz$;CY_0{}W`t72#+XXYl zL<>s+AJ`}He#72&F&w>@q& z@-4|)cwMq-@-e8y(@kUfi^FUX!$G?*By;QtJx0)7>0F7h$h6i%C;yl}VWQDuQvRB% zIl#?J$8Pm-Y~1Q5jm~|L5%2jC5z=jh zp{Bn5LFajOxofYm&HCP1+>ytQ{b&ZImPG;qgiQsZ@LjlHrQ%VB6Y@)U9nRk#RX7gk zn5P82o=bXY37a&92^{9{&A3iPJa0-Ica?8-Z?i^G0Dn?(!X5H>RL!4GO75e-S}fj9 zH_N5mt!UfKl}FGjxL!=t0+$GnQy9L;ihKi%2R2^Hn_DHO3%M38wE`WgPxy_Qj)prW zRo~Q~PGdiefRBOxnEgI|2k_H#+&l*a;@VZtVJ!xrzveCfTAVNXlGRfdW4Dpda0s$K zc#d0~&5#qToyQmf(BLlC)LCCYuJ4$sf6luqg8tdHk`2MpA$VtX5RXUIz#U23=|)c) z9-P1G{mc4+hcY(5UZ>gcV#SKrCqEcCX#nD>LQ!E??mR-o)#x;dn82pO5gCJMqr zu|BAy=lAn9_e;hl=+^|}_A%3sYnj3uiI?*WyiH|PDOdi7-zAHaqHfe_w>DDdGLet9Q* z-(AHE(8Kj1fzS~c;=`zfr#rO~=qAMCFluWc_hEb%9T+l26v1GbF(|n1mf$nSGyn3V zLUQW^#ABgA)9wi6g>U0G@YKjs-TeyLW?!@oCSWhL(bS9+Pt}}Qxa_%SuEx-II_&nM z8m!|FyGRWnQsw+ZA@whz(gg>WD)EKa+=t0#uUm;-Z6;%en_Z8Edp^VDrIcgpw++YN zUXWB~{N7dQd;Ec08#N6^Bm5Hg1UY$<#G~SwOZE-qg4wxah2Q0GhUXUJ&2Xy_~ zKW-rd~BbxOLwS(y}P4>zX{`0GZkR11$O6QvKvG{_Yoz!pQw4YAFJn(q=0Mm z!g7gzTmH8a#NRRHETg`aeUe>U*f<6 zqCeEDrV+#*9*S@mblV+GzVx@NuyCl4_?y42yMXKaAeuHAuR?-?vSk^#go3fPpcwst zHyma*&53V+O_aqYaNV>OCkk3?OQF*H$_kbq;&_>6nT*Q5XaqrNR_yA8T~v9rp3wq? z5|iX=+Z>X#{mN}i!I?8Bs-wR3$<1byXo|zVA7HC-4DG9K1|IVZF5m4wFJ2!iq@WS= z^tTuA0O#H9znr0a`UvqzWy8OGpV4v7FkwNZPcShmSnEGLV>72qqVr%bX@@{SKv<^j zcv%5+Mz_zVJ6-H|s~6jCzNj$%4DAS=J89Z0%dD+@-B3ekw+n#f@l4WI_F;-YzIp{Z z?7QTF7GG)UEVJXQNBK0l_Er&ZYm-KY@F<%MArMK84bLNkHGNXP4Wt-hO0=zy!^ zhn)f>iw{~gJbh$#@~*YzFUMy)(9y)*Y$_0pV6}+4g)#86##K}n&}OtHsV?g$CFOHl zLV=Q&@;lX!)9 z+tJZ@xf>*x-bw|lMhW;1yksy9G7ctOW`1w33#LN*ht~3>vVwQ%E5h<8d>6O6yA(}E zGwVFj+4B{uKhETOV_HU6o{&quhO{%|sGt!9;JW=(jd_23!GIu$!t$DcZ(6v#;D|TW zA`GU7vKZ=ilKP?=#a(<+w)i17X#tFy3B~akv?ihOQ)-A4--TD24GwIamf^*r+tO9h zHHOPtZcq_f7mCv;reTIuIjm>m*=5S*j6tyzzBbuH1&b=c>}~CcKvp--%I2_pmP+`5 zb&oTlSzWU7DT}`qf)4NwEl$TP35#!G2=1S%D+H#@0s%dbt~YoaF3d}7M^=;=X2{|o zpk;{gKpW7JX}DZ0gUxig+xjqN*C+bnb9f}<;`c06IPimmD~)i)d;(-w+r94wGn>Dx z@*_AtuW#wWpa6p-NdH7`exvV_^1Mr^Sq1wy7`Swbh>8rr_X;2anfLe$Yu~|*c#?nj zPrj#d{usiT5a>yTNq5C2Lx1oFthJzK5ZIGDR(arjuxIpp-q3@na(f_He%N995Kuw4~em)qtVs; zv=<`S#dakpN052Nv#6wH2s5s_-x*s$c6|sYG~BxsJ{R(9g|Rj#H?V$5b3Jnz_yoMku|$k6)*4%!@E@* z9VsG+-w~M_=4g=}f(9Y+q-b!}LOyJ|KYW090%ntW`5!uX9`&sFj2s4s2EF}*13OE# z@@wUcv}Rwd_yzI>To3GR7SYi^oxj4ndP#60Vo@@Fi~m3*(sWqG``DLCfy*z}C7O69 zh(l}zsQ$Zr+z2%qk*h%B( z$n1)7;dH5MU=lbytL4=eXdyhv*w!w7Dr3&{cygW|e%aE{(9h_xo0)%tyr{_3mJ)aP z@qA~{C`st-vyBsf46&daC1uYuHx98*y@P`_`C_{1E~x*KVTcMcGfu;O)UdU9ShqPSc zl`Wmx+8w~+tbD$CpxJE>Bhh?l(K;Rtiyb;UJb*_PUA*6UO+HJ|B;SF%Ax0yk_px*D zROSi$G-I3nT_^bIHV9U^2%`#pdm}Xyt;fGYJ46@FaaA^^*RVD?%qrJz%4xtQ_2qic zngoDSRU7mWe@vZphwO9id2wZR`o#nS-%MxCWPl2?_XHg^G*td*>vR?uChB9b!Nk8% zTyi_IT(<=`m__i;<9YRc7!|u+ZgHI|)oULeqOFt*2<(C>!F}l~?O^Nm%zj18mG!fu zf4J3N(Ghjq_zl&PO%B1 z!{z?@IfvzO9+Dv(Y8^t0y_-z_*3Svr$O0j?we{(!8UNbQ<|@9{a*&W ztx5!*t{nCe++{eTC->hMT(nYP{BBxfL92pI zgmMJRiq^SpHIC@iYhqNy2qI5Ckt{AaG`mF;`Q@gNwC&oj=+*Dk*HUrTEc={2KRn~4 zf=$=@oGYj=hsXCCSWSHV*_MH4>A!(tUDcf#zvs@fz(Zl1)Eq?S8Yp8L$H$BLCUFk& zjnt`)rrQ2rccVX!A}W$GYGa;7s6&EEytCj44+GAh9?eG5)DJ}|*xxQHZr!2xb~wy3 zx0jtuOC~tng;eT%hvnf-rdxpQ*)IQZXOe1hn{Hxg?PAzu1<2;zXoE{%8 z41UPk_k5#q>|@OCV+5x@p)gZRv*f3_ zXd>TUh`{fE@4xKaRsH_diQ3v_1#7Sog^{UL)z6}v$LFmS(pL`9nf4pFTG9^et2zDh zk~htKC@e_)tQ*(CCZ5>?ZD&4V>g?pRtph^rm5ckReM??U-smV~mFcf`g@b|EPh~&5 zs8e@A*UU_Gb>IT|c5DW9qgzA5{qI9y@5V_p3og7Iw8a@42n9=pZTtfWIwpw6Vf$Lw zZA{B@8sm0}xwrWZe{@r>McGSfZtDLgQ%+1F?a-$tdm-#MB=FEV=shwp_a@o!3IKoC z$eS#Zynb*54yZa&@b}|}p2zrA`AzkePtCSk{F;amfl!`N*;PM`ijtpxK-6|lbGzbj zeC!!2w6hc78KZHM#p7V(sVpgd>bB-yJQvS|E~oD`e2LwB>~klf?b%Z5zJ28Z64{{c zrOfo?S;!XGOc7e`Sn6WXZ!XQ0Gk*%ITio=Lk-YYM*cGmye}{FoKwMs;kaH*o<;kH% z$tt0I7^YbAmC^^pDqk=E;l*RLqU)^T%dva*I`Pun-T1u*m(0K9`TtGCO^O4eJW(Y! zj;QaWkOZ7WmK3<8XE{+m$pxgLX&Ou=jj>5_Xs!19x~P$3r+T6yCRSBf`Fski#Nzpo z-rB6)^8WRTtK$3mzkEN8pLF4b(MK+|xD)P8jBqvJiTvLF42d$c!}28A?ZoZ&gy zLHp@p{eeDRfws@oNa*g290Gl+_mkIr|4R#j=%hy$*hvd| zyDRM4fifM85-K8v(LXxi+!GwcmqUL&F^YH(8FMU7j&zxvx3w528h@<#@WOua*2w;` zF!|boFWbvCP7?m<-n=0`M*y-txWm~tIUk&MAOfHIbie3{=VlmlP}GWIs^v86EH_9u zFz#9Rb~D;KrJM7)A4XI*QNb#srky5B)s@(edj*1(9XlO8^Y&pXnGAcLC}Mt77cg|f zniT^Dg`h7X4(TO$3GA%?i!z#!>U(+eR?S&%c2M+49vBei9RdCVL|+bQm#{3 zh-_@0Itm3Ac$R8~wSv4r@ule?_WDYj3aAp*;VNR4En{ZsPkBV~Y@0tsuT5EmZ@5@V(X=ae>{t8OD7U*dGhplehi*b_FC{IDl~(U#$1?tEBVc?e`Ce|f9$qM z3I!}LPtnDDBMW;Se(b%a`f>s`_X@M>J?gsRvP~E#wOm8{x#{4HgXu3hAB?+}eg!83 z`1vCDy~h&lq#Wy%i$rxA%W_evYo8*a!~Js7DlAVOep6m@CDx>)v5Q8;yPWiGj=Z&X6*^DcCgzF++oc_Kq$8Fn~PceJAvc zw2nOzJygt}PRk71Pl$DX?6~M8KaIYIL9u2!aEHhcl7`~B@}4B3p@9L%cXg$FwtL$` z-nZj*d-)pNDUP_fc#UtFv-o`x?tH>55c^RQadB`O_?mBEfU@H*R(a{{C@0ePH%(#S z$`dlWcJnd_<_n$f?(R;ydLkUlm0(hMONEO6(9HjuPLVVi6BJ7oYrS(!Df06{Qc5{X zt@ZTSX_z$y1e!BL0NmxLhUK!wXgI^u0b-vm>g#c-ezUQq@#{~4KOZt~bPy`5ZKDzL zP2cx84B)~Ntc%e{Y-**t@8>D)&}IHPa-}r}=s~$bvlrx4DvPb{_sa4@b^3~w(LNEL zA&@i!>QR{%Dd}XddW_?%-LV*fBVmvra8$WL zfJpMw#>!8*mF$3^;X7#8srNeY9Hs?eKQ+s!jPRzhvC(ae4XT3^8Iaw5P;0~ZJ>Hg#i>(QjQVt6wB@Z3qu5Z3xK5bwdukki?{-4o_!|nOt%M@=nY1A0l>hM?r%tZ+Ik&^*3V%H`t=ixujIm?dh@6 z+2`R%x3JY`Ni8vj-z|O38#+`EZs?0if2(x3R9=3H7s4HV$9*%X*A(9tm@J3ax|s=G zay$9*hwd<4Qp)0)P{8M2Jq?_11&*b|EY!=Q^P`4}?$O-({5f{Ce@DDT#Ih8L_uBL0 zj2{s3)1oz^^fwJP?bxkKe($T$bT+Fh&INk=YD894)Qc6~SFtdRu;UFO56j7QhWt&c zRjsJr-`ZWQ{_NxTMn$xLcBwyL)bQEm1vxgsZ`xvj|7EmQ#=2AtQADFay|sf!pUd#8 zkJN^qn>%mn?KdSsQDeW-CI*zU``XE2GEPj6$A|{X{j6SRAQ5uuH}K&J4ws2K>D3;j$e3Zacx> zE#SWO0z@9&qCo=dw?T~h4KzOhfH|tm;V-Q)pZmWUSiW!=x z+FOQ2+4k+bbVx~qq=3XtDcvEd5+X{c4BZYebP7lfAV_zrba#oAG(!!I#Lz=`tc&}3 z-uM5!@9kRKw$`>j>IZR~xj3)${O!knoI>3|B@32L0hi*P^5E0;du|um{V#5(U;7N& z|2FbK9iV{y8CgZXzd#Bh1awGx(>hi* zVHA(3x`!bZMy$jPA2)pkGW;<$oFp{Awpu+NoTIAF11@~&~&+;Ga`OG#|DrT{=%xuvoqO{lvjy!=rDn@>f%#-@!HT*hj_+c44fC$%6J)&Ngg{&RohHDf==$~SSX52y?qPiA94wGUx4q`ar>9;f(GtV zy{{vjk9S%2lzm8$R!1bNCz=j{?7)3dYpY+}Ch9oarZ^cS)l1(c8e#S*9a-)s1eFFU zvK#2xVG5<9p-gr&Hf27Go7V%P72->sD?c<^d-H^xDEJxpK5d2$n1VRROoK6l9sHvR zLcLnZUvveueCT>$jDHgQ;`3`-5C2U^P31V5mzCYuFC*-4ClzBwe<|si1VozUB?j)C zQm>-`_q<2+r5HHaWVFl1nm?-Yjf}EeseBxyTI2&wl=E;vrR+A3syFrnCiIB|jRLM9 zN1Rf!q-vG27*e4s#zHHTdT8v(jbl~GjF8o2inGv(sye`6lS(=8fXk} zOcQ?bYgz@rPn?B>STf=msR(iVRU%*QTrBC>F81TDbbHX9cPc@Drc(z5I-B)e2G;Jg z>}!D=8mhz`(A_@cLv|9#YgI!HYc2CUkFA7j8yk~DB*pHgzu0oyqF~%4%!0M_^nUkF zmK8N2hK!p>p7XHR3&FM1u0`%}p?h;xO)nY?4}^<;YS=Q4p?NT@CjFS4@{MzMyO7*= zNPt=vG!5#m{4*~~22`_-X8 zW~8nABDzz^AdS3dKj#9^JK+#`1vKX(`{LN7I;W>7aGqRzzPPQ~^j(p^>O^Fw9yL6J ziBly)l6Z8t>hBN}Me`F=3eTM%!LWyxn-ZKCv}Rjv3mxA#Y{n!K(EpaY*)Ut&yNpWp z?v_l3W4wOjd<%Q}Mr`rsICt;>4?Im&Ui>@MVbIZb(AsxG9L!nL&Zg#b8LE^8Q`5RT zb2E;`RFyKW`DHmosUvGZyN%#UJCjAxiRqxz;oBye>$H6+gTo-_0Gf=XUY1iua;%0Q zF`U|Ko993zqq1QzU6jMqVJ&^9N#LS{TEatq+3hcTZ3uNvTQGCg87HbxDVZW3`% zxLDXvp9jfi=_nS6bqJ;{cJPzz>P=U81*cuLVb?p%c>feuUh_8?AD^I#2O-Q#@M=a-( z>}<`xBdBx{?Z#<8jLArS9WR>p99yr07CU}kd#vNwk&t~7Xib$k>fC8cHEm<)I3j{X zGE&<9a&HRCUrF91JQ}C^C%$TAyFV}>8m-57Wl(eK050QWvGR7 z1oP7(rh%QM#gJdY$4*;dQzOOiv$e{x7i0cc;TA@!y_yAWp-80T#H0|h9Mp36(se;& z(dDVCqto@o^j@Hw+fOw_Awa}6Xk-)Z@;139NUUEmmwB=E8lna%bMIi1t z+J2X{algaCyp&g~d4i;mQC&Kogk0fp+6k)245L-$Tp$P8-py8O+a-#reoqgQd6;JA z#!Qujt30;{sx)sc^ZGN>00#f`w-3L^U!=lh+H!*}laL^-^=WMEE>0(|8O!0 z$dCm#co`MY6op4PF>8Rk;MdWnc&mVQHMQt7YZ0nDLiAZ=6u*!sxk1E#RIJTZt@$l} z=%X=OQ-t3LVGr8w{*sQEQEUO+ih8DmnsDs;y15>>U#($0$D!RGe2qPHw?C-7A;E_@ z^+#phB<*CEf8=(nWHhO<{Uhc5ss*z!`Jj_85cm)@m*p3t?F0VRbE!Z@k+S&FPVt5w;4++Lv;XZz8u_t2ejIsjj%83pC0JP4gl zT#)y@PfzDA+a-N+ZnReEvH1IG*$(7$06=R^yM4YIKx16I-uHC6VuC*{wvP zi3=<0myiZV+ShbZs94!;mlFvcBQrO3fhi~*Z;arKyVZgcu`sJu$yNnU99=bTrs5dT)#)*ue|K^v z)%T@A)MmI6zj4~6+Q;-pV2=8scUoT0!lJEL&PX$rOYcF!@1&p9ZNA1*f+m|5d-Fg4;`hXpN{m({TJuPAQQ6ya`WZEh6w*)}wjLx0jATEGH?DhJ_#+kj`s#DFL6ZNOca2B($Vn3y4x%6luir3l9 zgHOCebmnnEUw*^$!s5Kw{q$-3CCrpJ0`Lf)`QBsg??0bT*UKhNYul1HYLdO5#jKnVKnSDyC z4W`Et7oPNN1|}7caV5*lekzopD$+a9Fg75l0FT5yh*ndjkoF_UbO z2CI_5m>bFKVa5y<((Q`_YzEJ7S;JB{hDG9GRQi@W&6WlH-MLc#eBCV=q4ni|Y;8#s zII8nU(OsiaX}it+!f^h+tw%k>rKaFZv?e)%0V-6v{w4AElDn2x?Qp$P zs`%4Dybd3cpD|3j71xG!TQGGWjW?B^SD<6(wKelr8Llb2>FQ_o^KGAZ#hSnWD$%K( z6YtBA@>zFE!6ckJd~D8op=o(za5RO4H%-}oR8M)@K}pc!y;ezwG{-dM=xRxVyR9GTlruj*r)?&YZ^xZ2R1fLw7(nbdJO9os&-uQ|7s$wLKNO^@ zhmp~n`4lMu9(mJzVe+-z79R81R~TCs-R|q4xOmfnq;5AEXK9h`KsUns`}U8PKB{3j zFs7ORb*6RxyGBU`Em#JJk6jLnz%5dIG3^l0Z>Kdt@$C;WO^(1vw5S0+TFPGxiOdwW zuVm2F4y~F5dOZ;$vb2Fp7@1f^^sB#&EQerzc_AJ-+nEol-eyowZr2ge%vE;1@-7eZ zS26+e%#d6adbWfEi3Q;VS&dblDQ9osuy`t2b}SBddM@pGJpCn}%qz;1cIJNT<1Bu8 zQangHn=D&`=7L10(GhExtUH0e!(-GKst%naf*&6t23(cYX@wCt1jcjJmQo6?!!!KE zLX~^p2-+QoPiUrgshd{VaU^ZxMQ1{z%Oh|4_nr@S?Q^RlvU_ikT_l;0mVW?NcrH`%@NTNXxAYAAjP4@%)XAY=YHimE*n?;IxA}o9hnG(gG8wL=^F{Ion`oX!KkI-e6GVHwpgb+he1DynJLZ zX71CTyQ(_75Kc6ae)i)gV2oF0NC!$;kx?)*yX!z-NT$ko+hBe>lp$KBVBscmlu$l~#m9D>b}C+u{JA`}5%VL=r%ybNgYXdu4I33@3umN9 z9FOvH2b88K^2XM2>T*RyGj?27YBl_Y>qq`i$-LCCI98S8p_QP}l>SnT6{eV{w%zy) zEV$5MgeuC?Km%BV4%Ttf*St{6wZB^sAO*XmwUMPxyCM@Sc*?nA?i-*XPc3=c?v!za zy&{$uOZX8Dg;w3%u%0)?9364Ud_gS_B z@);%)=BHcLE&f$5@v2VQY1A!2bS{=XTp&=ef{S{HY|qG2_Muxqc@W!EH$}Ud$_Z@7 zK(pr0u70B|-8dt}BKVON^i?R&o8Nc$MMk)BEc90mi0xyqP%|_3I9lW#wA{R(u#}Q% z7u|xq{^^Oly(uY$0ohugn2;q(SL$RikUs%GBAy(;>2J^#D(D-RaP*& zB4C09e5#wFrySn1DY>7wo$X=??gnU2!l($#(fUV}n5EzRU|G0%YGP0l#bHFVDRve* z+~(w3klALjJL4iqU6&4;dQw@Ta75`Y`mOCMv@N=yS0@#i@Ls8`%TLBXuNKi@NCr#u zy(SZd?pt2|&`{kCmCrzcrrJsdewe8q122iXyDj5X&8v^(z4jT|(mq=P$e3GT(8?yT zm^Iw(L3T;Ue1Dp)K|mO(ha#iqMd7uujaKq-)~91L(;q6qT(H&y;gBCovatsytrbSV zZ>qh(siswNW~#v(!*NesS>qrq!b&x3t>zLisjE6EpUck4dd zTAw8%Kt12LXESBWiofki-y+ga7dM1Ea!!%&B&)Fl+HOAN%$Bdjhz_NWYypLP9C0`^0tq_*J)4eC$PL zamSK<4e%Kcg!x@(g{dul6-3zmWgE2mf(stEFT%74)8xOhGm{v`IW{4 znK&Qc^NrZNw7cpFfP}o=|8~O-e0U`XkWIHA=w8R?v6w!eA?_^vJXmom(mM-Q5l@b2 z>+&<@k-Hm~tfS7GVt>F5uTf-%0liBmk=389-vrjpMw48OkQu_j7O7-6?6?p6uO)A7 z(-iN2D46=lCg;)g;-Ys<$$uU%PBl6m9}LnNu`1&m^hM*2{ruwi<$ivVXgEwsj{DEb zpUgHegRn}EEd>Uu8}euyEt)GR{X+26wO0w3XJk@0J<@l5ZOENAcG{N#T3ZjYT6}vz zTBkd++b5giUUrh-?uvKpjH^>j9){pga=<ngm4MJuFF}gmwA-y-RvE>{2gxnp44!i>Gj?377d4$Qs%vx!6wH}7q4Slyd&^j z+trQtRh^tqbOvIUuR#|5<$RRBp&8r$?2qP_^<=ZVQb>!J?)zx8lHIQQ+?gjYw%cx} z{N51wL(xioo?rdzHKBzj@e^VV~^U*zOrea*PAKk8OdkuV#L&X zo*cfIrFnywuD-O!32E933rB(6zO44Z7&dMe2t5Epa<#fRX7Q`yXnKc!30%m;VR=Vv z>$@J3qFpNMW{<#>D8cN@wZJ} z%`FWuJ2yv-9-7&_S`pntYajbgpLVW%2ocG#`|H5H2 zW`)la?BnPqtYZ3WJ#mQkq@A?OjKRYzp!T)Z)%wVV!768?25l(Q3}`qXMy0J`8p}I2 z;K%JGMFf1ckHJ_R&xduV4gAf-wf z?Yg%U#%*qAdv);vR2qVFgXxk@aG!CuERh31kYh@HdBHCm0h}^*B_pL4G=?~XV*nOr zr?zg(JwvB2+0C6M-PYwym<{M$FB}VXV+rGH*xuJy5dgN@i z>#K1YbhSfBBF|Bqf~+6L6Rk2s+kl{BYkL6q^t~gXS$|pbS{OCd2m5q36J0iu+vtKD zkx^O6$1rX_f49eQ+uG$iN=T;1Xx1?J4KOB$8y3(M0WXgOl=pC!xEz_TiCId&*2N$Rq6S9Z$&OtnxXa1cU%QgDzd&OR50&#S`YM>)%PdzLM}&& zLf$nd!z}Ap*wpGnc-{&$RJE@H>dRlVsNntm?5}#czy*`FJ&M%+51jok zD;Qw$_X8BegYV7&Ca;VAZ&D_QrhtlK37;ozF+1I;FngAW(AwojCP6)9H!xHj=bD!% zlVOQ=-o^LoT(!)P_h2h+Ac~oOnyvrFv!4fj@&oeLhtPvAlCf)arN>UY-A=f=`A510 zoljkdY21ZPSx)G`DOqfTs9UqfY2^E9aR|~4$PhZ^Dn>fRqM}sp^oQVA$n?94*G&xv zKVQVQPs31Ug)$&d86-A9~<>h($M)5xm^T5(}FU^ZRtZm$q!WePv$<})N)++hyuxigmt+?xDB+WDL zdeQkYw#}zwX=dc+Yewj)`16fku6uJAM}sWPPIE(PQuE?Yj(V&IVN;)(dL2|U`6kSd z`<%**S`UY+t~6F(T&4zq_HP7Z&#XibZhp#*wc9FxQpvNtZK;yF_u+%yR=2d@?T_sN;o(+a zFk=7vUvX^TT!LAt1G9sCw~noWN}CB`%HV};gp~6&My6=`L|YpXALFybc7Z`o?joOA z=x%mVx?CW8=X!K30bK%%Cm>{{tVB8^qXIXz?24vGk!&k)!>;;bXg}-or@z zHqC8eJLOsMM8?Xy*?-F5j+DSRyHI*EX{Z0#f90~pyubM)Hau5k%E@F|fL_`yt&N5a zq#q%6DvaR1oa*%)!KUsJv2<3+J))Z&>OKe^zzKd8QPOUqiPAnp1v=xmsMH5eUY^+A z?%^W8`c%4f2fTY33mEu9`}9;p$tlPhQH6wP_pFRo+Kn3C2lIwp_OiUF9NZLZKd$4* zd%^fb*UUG+OUTa_-F`QgLWgmMYBQg)$tOhAU)T};zLGUDHKpgVHYmBfn8A#Bw%)GS z1ZI=D!rz{$-yZC&%e)7;P)BD^s(4iC;531pn5^6|&ee~DJBgcC$o39&?(mMv0^|%> zaX-|x0nh>oa_dB;itK!uy;;wI`9PGX$1>)tM?80j5xm^& z2i+IfU6yS`JV#~6SHpf6-@B$$4CC8F-zMcB4tzYB2wLg_!4BE3T7PB`L2FK1(w;h` zO$A7MuPVY@{(^Q=MQ|apk75|K&xcJ?t z!tMme@yC=+ZqphTF4RNzp@vP({9o3cEn4mt9w3#8_`c7M0Z#xhnw<`bsQOK1B;Xe? z{Kj{GKLB!^&7m4nQO5o7iY;5R>`mKj4ILl&~aXFf}`t+vz%`AkMj(L2EE|2h09GbDEGVy}?F9%`J_>FaM!F70CLt8c4zRJ4#B zaVqrx4>NNjW1{Jl=#DIP1In9E5Dj592Gu43UN%tJqEPXf_+KJwPc4TAbRC*SYlDWH zNoccCxS`6IkCn?IcfN5bHv3Ztl+axlcFqe4+$QzNFZfv@+cSUs4W@F{_5-_mTJpJ*?e^&|cc5RZYHe#0vEBO?TwoQB zv$t0{p=I8tJ&({lk9hwB$?Z3FGnnYNFP@YnJxm**8i*F#4Izd88=0YM)|+88=xBD& zPDCLA(+mlScHT>INE*eMAViw~*FSE{?z<7vUl{v9IM90EFcLjibk1WY4xQk&ovc@v zx-K77<49W;>EW3i7XaU)qlZovl<0d~T#ol?&OPpbt2TivG@CXcqUKD6ow9r!KsyYK zMVfOnhBpOh{RC^9OkfFvs)u}_?<>tJq07gHX7EekJ2@C!7RlS#h+{k1L!Wi^hkdzF ztTF)8-+=;RQtKATK*0(obTvF8@y_z3?l|Ii)YzVfwE8D~g${w6S)`2ZF;qVu|7r~G z8Mx+XegNSs?;L*FPMgebo$o_+juDexrrl2uSv-v_*c*X5^0j<;LrA2l4+elxa3 zOE_AcMGL+tZ->&0)4LX;%BqGxB^@v+{1v9jX0L{R1Et6?ZAC0widvO%wqi9==}@lM z^rO-5tS?`^aw=|ZeO&U{7MMGC|Fb$~q~_k(tC>>D-IhTEU6=v9eZMT$FSg_M1hQBQ zH>EfZVo?+5{PxO%hmfUu$T5kOm%KAOL_lf!f}y&zLPlIdBmt_OXDy@`;$|BXBp@x# zyJt>m%Tx1}#%Y%JF5pPoo1a9CYzfF4vG}~F3RdnM0u&W78$%t<$T_>!f*k6h;p^t+ z0xqlW5N6SxYobM^5u8vP#u5^#sSG5ngDch&E9^;ecc4XV$WgN4;{*Ici6LvZC?_8Y zGlcxK4jvj2hIkBW1SLuqgPYS5sBm4O80lVrBfrQDJ|6w`#a9VGdF`6#Eg_vnusvJD zFc-?2{ioR#C7n{!BW->KmNoaHE&gPz znUcOs1+pFWuDMdvB4vW_@oVL!7)GPlDh*w#hWj#FT7J@hP2ToQvS*rLVqkqss%6d%LQaijZvc{%31E?$BQCEG-m1s6u^q)&G#QxVTm zNq&eQei`j1O*m9>N{i*TKBp^7k_p02qyV}~}JNfEh71y<$7llc^ci(5LPDe4J0lq_AHw7%h6dvUzf)6U> zYiq4vUGoM=Xk%}(&pE000Y|)2^4*s&&R)tN`3d%C<(&;Cx$MX~x_`hC%SWRN%>SQI zoY$k^YF^`poy-a}yysZmM=wS~^cXhrGq85I|B2*fFi4)n7`(K~DcKSu-Uz|y{cF+W z@`Rz}x}EY$()Td0NU+2^?YqdGQ}uFh$0oHwL+-T32#Ka4<3WF+BSof0K-OJi-;4oA79{vHz0+cHycUn`3 zIQ56dC$FlfpMVFA+boerWyDg}KQN31$k@Jwebteje$b!5dkp^xx`0;Yq!$jQStq<3 zPIFGdqS#T!k-{#+Aa?q3x*50Z^z=wn!ZGcft@x`=VIgD`Zx47}E><*MsC|^5k|wtR@B(l(HH{D;MkSt`V53I2L+PaV6q6;? zxK=!x9l3&XdMip-&VjP4T`!|e$okSp-{Xx6P7aRKM<*iHbqrTvBsAjdzQ!3&G~UFpv2n%<|ylBA~0+Zi(`*QbEm zJD*V@4h8iFw`IYGZw3!}b;hE%!&v8~ti2p+pP~U`jnK>SVLz8$#}yn#C4KCZ-X;4@0CQV8Si0pZp2c ziKPKMJUXZWotyc8pt>k@?9PDj=I+}d>}LLF5}_aZuhS*L77+tGPV17oC9){~UL5N$ zN7d3iK!VsejHv<4lx$Rl3+2l?oz!8SWuuRSNv}RbST$({dNBymP{xU~q9GJK$M8Op z8mGKT;QZO+T)^}#$h((3ZVSiqA-^$S0h?;l2Eup$H5mTI!~lcDVlZhrh^3=qzZn-L zO%%fO-At@rDtT%)0kd^pV8l`{Q;wTG2+UAo|DcM`Xq}QuA%4`12p=Kp_q0^*(WVSL zO8ddv$>6ITT}8zetfIv1XP8sV@ppSY40GOILrauGw8P@Xy_~Yi<@d%MWu*eEdFk#F z4u1N<&1|i1`4Y(KE1a{5+t;XSCL>6};d1=jtwEM`^vdDtW&&!8{8VQ5XY+(D{!TGJ z+hKmaGl@D8C)~^ZbUOQ?751bSX28Md@i~WEVX+@C|IUB4{+3~#H5K%FKYdj|?YHq{ z@d4r1$l5J8i9vO`IU$54oGHpgmFraqe{j>3?!%9Uj5|xXk?F*#wRR_{pMZ7((7bW= z?<$N999pbyooHQ@$41XqK-~&WWXLsL3%c{5gGl0-6=D9dbKuhGEq(^ZCE62l_V+E2 zyIZZP&DBkql(O7@L?iw+RySW@Rrz~_yot!x1$tGLMl!)Rxtk|x7xVU`dl)F^ScEA2#F4XVUx(CZIPG?~?Q&{; zT*?&lL#pM5dZyT*cwXD(_7v`*@J5w0eXws2&X8ZA+3p3MatObf8APpiSD?``I0rYf zTBtT{hqk}k@j5E|srze?M3Q6i6!0z3MBR`*+D5dZI0#UeWt9QFV{mA8YwPO^xhw8h zlR9T0-~P|`(qFc5ACXg%U(I9fY&|ZIjl8+?J8I?Re37BR=d&>beLTWx`~52V&ZF=~ zxY48htC^=Z?NnHGRX1O( zUAn03)nrq?g1d@X*LklMQdH&V*xx9O>UMT}FU#E_kITK(<#Qa2>A2$q)d7aH@0IDV2y?YU)b%~UB^Br z3%jVcS9PTH)44s-TpMxCoy^J3&yqlwre})!T*-)f?i&^`@1iU19p4{d-p0%OjPJ{$ z>+A}pAR1GzAJ#MXFYkt7iQ$# z>!zUOeEI3?lRx}40OEa82QrE0-Y!~z=@f^Xb*2`D&NT~i9D#SUdtXNT-NyMX!u>Qv z;?YXR$z{B5pnb(V@VcpO802)?^Ua+u9Nuar*ujWT%_T6&@t#Y`PhD@b&V{GNv&pFC zswF=TsSDdPe}mNkk2;a{oE%tag@aDF&2Vv8Cz3L6PE}h&2kXmTY{b3|jL#^(BHdW4 zPMG&2r?HHQ9qnnUyxVMo-)L7?gy@y+NfQqOMV;)Z6DS+mctzG>GU`nJwIX-e5_akX zqqpM^=pf`P3=*IlNd7Zda-mIn>;OiaC%v1Q4wW`#{J7V=08VsC_BruO5d#y9O+Yez zG50na#Ad(c@#$~ApV8fYi$73xw;%zYvfUQ5#n}>8#R$jyU}$QTP*X5NYyEuY+u$n5 zQkSmyQY&9b+%;xP;xQV$HeqMSoUNwVi!`fs%I~7>&RAQ!(35c9>xtlH#@`R#)-M|) zrja0=yd2|&QJ9j0;?Ny5J40o81xg+3NgPm1TJM^xsNg>ft$0)0Wt{UROzno&f-_PHzBgD6sdeulg}W@`ZNb-tf1%A?6vbo^zs8O>fdWT0 zK)l zKCJlD3GiM`y!YE&6Tgg!c+m#v@>^Wy)OP%In3!z*7tR~t#MHK&)p35UnYFpJ+zFJL zdKp@HOPVwOZ=S~i+j@4CBxn}WU(57UJyX*5Sz+rbUEePoUB=44{kBgfmcJlH)phA{!VH1APx*DFZ_khi}ElNGg1^l%PI48`h4XD7lFH)V`bQ#y{ru+Cu zk&O%(BgzNl$T5v9V6ao^8@ydTJURmEzFQ2Tq7)vB>y2q?w2;k1 zbD#up8Fe##wEi*PLc0A*PZU^qutAU0{#_fHLU6Fd^hmY?KuFfV`i{Q$Xa$NZ7aHh2 z0vjJ1-<;S&c*Em75>DC& zdy`Noty|OS4z5(~MNM<@0JmOw``Y@dP)%^c=AMt&{4%pr3N&~T_*6o!#=ZWqf+)uW zPg2KZf|Jc{oVxU-PG`j)HH2K_o)I@ACYdw?}1$s;Rx(}9X9Oc7+0 zq}N$Pzcx=3DmqrZD8J=};p>`Ox#g7IF&urR67zcXKdL*Rdl3?!`(H&cyYeVuv6CRh znQz+^gP%>KR^tXP40)NABKL>xLJHN*m>S-B^{-YCc1bWu$%+d*EI4foIUK{!(~272 zuJCckl)H~IX-nF;=%Jy23gX@k4`HslK6Trt1uEdgVWB|bEfBHV6H>O|X&q&``!z7& z0-9M-AqxEKKO{8v6*_7Z#;5+f(=|ob2(;uofVjDk_NY4n9i>OIDJ-F5zYiIFZyVry z=tF95C(h92APk}!1Pd5p$USoiV0XJ|Ar~-I|dOYj=m7JVBg?X#N{QH7i zp<1RhP(>$PIGaxa&7GWyaHGe~z%}b>c)rctBhZ7C_Fl5Fbxb84Of!D0>X=r?U#Nbj zW{_u~_CMq^x!KFCK1+Gn2w^aDRt`w!(T#);Yr-t2RA>(+0FoHj>1Fehm&f6ER4A5O$n*2~|n?h<{?$ z%^wsL@5OHNDkghAB>ZebH0{tHr1h1m$tX)xROyOk5)tABDEk@(>;#8${;Q? zMa;TVj zPv;;eegmU%=1{s?DVTZr-ECo}o&W&x-uZF$ObXG3%n?y=$dY;Q&Ch;37Vr4V@2@aP zVhZpy3F0>KSS>3)m2qR4XlXm|=$=_eCe&a&O5PCl{Ns#yU0{YzZKkA@=Q^&Zcv>|4 z&v_P83_AeTNS@?x%QIr3rtKoR_19zev&vcjmeAOoRZK-5Gv_nE7oa@aPXd}D9ZzZf z=sjZe;(oAm^$M%*P!kTG0!_d|C&XlVT-+S4U0Nnp94ID)OR}tZKaxg|%LJ*ToKXB% zBG!5LW%0zAI4NJm=nh-xJY8`asCeR)Q=TEWwgivrDZ);d8B*mt2&`A6owjJ28F_sYNJtSNYTJc&2%)plA z@HsqMoDhuKp6Wqe%Z%&>)(R2~6h(cR2x(JsK;a#3CuDfF=2JOPv<*%+MjeW8+yJK{ zYqPat!tDBrb4qU#Wl3IaeQaDeURdP9`IeM+zQGcrx&J_v?zUZg49DpLt?Tp#hw|n6 z8E$|7U_|p1?o4aHaLh~`U&HEljhuwN8kK5eL!e0iAKGm!uz~%=k~7Q{!}2dl?d}_Y zVGEcH!4Sf{eFH?4i?{Ln4ICn}<)R#fhc1n$ZYH^MA)iD8aAmmkn}6DRPEAcUv8iXA zfxqitJH0yOug!$_sB=x_YefKB|c6KS{bOQ&jc z`i_=a$nLRYVk)7i+K#&P{8d9J1ACCR+`E#R4BfPt{f$;#+$7ja1IO|EF`*i#0 zUC}i(B=Fk14u~E>_I`LE)1H*e3b~nJ@Fj5TZawi9`Y#X%!Q1`;9LWE6*RYsN%?ec{ zf@qqwaq1dL(_IFEZo&TCw|Dvnk(Hg_G8uhxmNjS3M6Zc9rF!{TGH zpJ0cHg0{55U^w*%MXL3OXCeYqjx*x}7wV}~0~`@FBD6;Y@C}m1~gD^~&qNkOL z^fGhDIuqx$TYFR#6eJ&I*6JLo>esm!t^r`LSw;Q(FzTVOh%kS1h`30#+q1!7I=N&jGuRjTmSe{|Sj4W` z)r+*fE^k%M>~vaR;VPs+In=)HnCAF!>fO)f zH3YQ3SI2%jxax&?=U`Iwq_F6i0H(X6Mp6>^%1#^qv&POPdzHyB(EfZg6k?)8MDp5N zaJ77A81L$a(c}kDju$KWL<+u^SBbeEqM-YqcKO0zz+SldU4KbmK`M&w?R3Kt<+bgq zF{nK5i>jipexz@&1M~~A-|}xv29)-&%6T@-<H7KUM zkItvWP-3tN`B~l+jEI&QC5w~2ym#7kw7fv&+1%h4PCB=hT@echs6BGEO~0#e*6&TW zC$NO(BWPmBbBDj|r10)~7@G056m$Vo$$7$tb*|o{KhO}ShoRVcR&bcXxLUS7c|peq zD^PL9IQW_@Q!bcLgV5{V((L)C?;@Xd-)~c`sEkkmI?e=UD`ZaDX7Wv=Zmbac;))@h z@I{bS4=*F~vH;$45A1DC{Qo|I=f)0jq*jdbi;ivXL4t)hjCvxc*6VuP>GRfE!L zTX`3aFnmUNO}*&;rhplJT`|?M2Ob8d zqTfNrt3cA&Cfq=;8(U?u@9+a5UuEnnN?s#YiE!oQqNVPImXv;D%pQ+5abb8kcU2YJ zL>9rK(w4wOWyT z&`%Q(CUBUmWA)086ty}0T4W!x3x~Pj7UO6q151$mD@r4n8qwckT(+vu z74GuguU6b&;GXM)e=UG%yb~`}<+pHgi?g6gRakNiB<2*2`J3Ffy^v40 z=jrBYrndchA+w`@Ix|`kp;c%y&gKf&aG*&>wgYs;`|;qji3zRay8L+jl-ahcbJDoE zq`89ROnz*UA;0iC#Yco3E)~y8@n}edMZ_Woap`L-%(_FQFV934oTmA;(lSjuHKaU# z{{*6(NbOShMcYhX!{+J1RG3J?S4viohoKCIN(Z;{;9D3$m+WYD&oUJip|}m}{-Zvw zde&HNv?t2JDzwralv>bc>^_#t;yycQJZpHf&;kM|inuwCWeT$Zy^XFCBtTkZ`SXG^ z9D`Ll!3f`VRa46c<%b3ek7Ppv1Fw5K3p6rU=t{ZOnx$g?mg(H&9@@#!Tl|aRc|T~n zFY@H}OBbZKrH^A%JCqgP;>@$TIHmgzlugQhQ%-&|i4JE-y92d{rr-6RzD*w2eIZOvQ;p5OzcY+$eZSdkF%?W8x-^WW$WT>wCL3l$%QASM`; zfmgjI^m-b5-BEPgz?fwI8?11inbY%y;uZ^7N;C5OEBTfDl$0Il^7CLbfbNWsk2YbJ z4)Nrd+~q>$fLyn?H!o(aOch4LqI{1=d>x@(u!4)br4FB_+V;gDO(>Vi>dX3s=Q*Zk zLkdFB_P~L&CGh@B8WGbgAb1%(DU{iH#HxS!k^G%%;<7t~HJILRjA>uKC)I;=Rp$5F z(sK9C{@ZR$(&}SvF2AXg%VSMQ?+nvyqq-u4wvo|#`r+SrQAiar9k!A{ZfLHM!FG8f z?X{O?`_<7YKjB3b=mC6izcA**d`ovaEgAR;iY)5%^_+x~%u>Zf4x{o@3zwSyiuA`K zeYv}1Szn(G&j1_teJN?_;WN2z5%|b`saQ>~jk?Q?rs@5befSYuQV;>1o@qcy_gQ2p z(^zb>iq;WW{F9%)t~=qZLz%T<0_sAW1V9=&Ws|2Tv8@1Dr} zD?_A4DqXKmDF&UOH6HJE*ZxiQYGLaQH>E$nV?KTQwh9da{)UO4(}y=o|3MlA8_wjP zqN}mo2zf!GQSEs>?cB=Kr|ZS~0~jO)UXdF5m9pt)BElDy(#`==Ds)k)!iivuS^Q$kqx%-#tL=NxNqSODO!eK6eVF$5Q>% zCH+b{Q2c??fQh0ObSg^^k=(@h1>1uik(wf7|5E6bEc|k-jz7;fyB6`@OLWFfzJrS| zJ2d$mIqD<$@jFfXok5=#3>ycq(Q&-xu~3qD1H$hzTh6?poP%T6gg8Hl=|3{#qsBbN zKppWyhIbv7Hjx)?zC#WTVJj%vu^*eVD6pUMQgv+wv05;brM!+VC@5?yY-;QuC6Bnj zy9{RpRlw;O!!?7_TSJ)FfpshpcS)4a#A2cOOt9^2AuR z%ovF8M5PBFqCxfV7o+6usg{(EpSnuHY*iN=L0FmO8U*nTHMNkb&qT}M)BUum8 z9;pF04HSvJEKETwa7)B#?a`y3ZPG^Prc5h5Yg_a(X^R}KV01S@67RUk_~Uip@V-bj znPN!)_zPblJ{{a$zmMH{X-YZZoE|q@K4iQ-V?v3=*96?@ZcVkETr!H{k8Lr(IRiHGbjbV|g^jGSHBNQEhZ)3>|L2PU8yVB|NsaeX*@tR4ubk00LSGHaNPd&! z9HYF+qDWpe*$P?|3hyk?zESX?_P&5G{a%p3R=}HmBHt?8@_ijwT_az2-JZs~yX^b> zFm@j^6G0$;mXl%8pKFTd>`3({UX`3hzxo3$(?!(dd8+U9CsqxfXupd^uvX|W4rAY^9)jIlnf}2`%Kq0T_C6O{Z4*Y_?mvrBAKdR!RD;%jTRv&hs@DY8y zSc_fBsQ-0+p!@SPSo7gv`_UqbGa}?{o&t+&pP;j9VR6xTH?ZFM@u4De{TgC zwoJDfQ{7{|{LC+~n*22L@z59Ha@pD~{s23y z;1Q;Jb)11Aqk>HTtzG41J-w5E8Yw2u3nY_{w`dGgXg4(XsMgSgpxxdO6hW#m%}pPO zciVw=J9%>7Dj6aGGi4iN7wiDfIbd`Cv&K#mpcpRtBT4Kaa89Lgj|Q_!Yz^;R{~$H| z49*u+cF+JlMO@;yT`jB{4WC@i@!?PWIChnGibCJJmnkFDT|QEWwkgF7zL>bczpTR% zFYb9pex0p~8$_NVaX%{S3;v%kqk3W^kWqaZZI22v1BWljg^lFt6H0wA6JcFkyRtb{ z6t-tMD7Y6I5klh{lcy?5N^eq*dsUYTX1A)h34I6Q-0^L1gZZiMnKyNQ5D7pJ4Vt~& z#bgkiBj{GLkJ!kYc|&> zBPgA{60NOXEkj=7uM0B%`V|ZY2Gia)&oYtvICo7w;-q&O1vSxDCN9RNdQou!lxboP zV;}kyRVLfMb*OBT+pBODwOADnywS~}mTbugZ2KLR6(VYo=! zzaKXTV7wHkg{B0dIEpsXzcl6AQ^i6LHFvzpGtN_7!-Q^YF~XJDzERc*Y}^cJ*;!-k z^T~s)URNqAB$jGe3(3na>u?n!jTFZpWr)%=yG-d)G6>?Ohy?>GiQhVvDIZ4$|6Kf9 zUuUQa@0h3wo92h=d4mZCMwSuCLL|?_0Q6`P6CF5 zwpYB0e=b-aMF;O33w~r7K8i8o(yqc5#uGt(3kh&OgXqb|c?{;;sW{w;! zACr~{PM<}k&#&lxBHG`a^fGPF6>@;Uw$FeFuEY5p3n1X^Ns7J4S4}-P-dIk z8zW_AorDD5&+RAXMM`)3$*`Xvg>-M$dK7>xD|sTJctO`gS(fjiW7PyMfG<8dOv^lR zq0v#-V3$;%9ov=7z!udJXYDO?W3o8Wf4My*>KSS?3m2D0D0Y~nQ`0pN`S-nwt2X5Z zKyzjhoMYn~ty6LJKdskIC2A53ywAw~@t1<>fd4M7z@G5$Ep~#CK;Hly zH4pPU5qgGvQk%o+#i$iM6a}INp6`sE?@IM|2U~@+7NMJ*SuwPDw9FM|8}cvJ%|((T z$+@Iq*u?8&8v~V&!=I4^>v(v$F^~%&({q4!eI1~%m&OwYj+IrW7ya+e4&IQG=#@mg5ODw;^XcGBg)$QFVO1Mu^W{ z9&3en+YeW3wr=!hLLn1hfp98k%Tdt4Jn#OsFL4TzZ)<$g)C>a@o+-T5BEiJZuML>| zS^FEqYdrI{AJX;p;S!s|l?bh$AF_Y%HJWy9Dlx{jn7sXZSe?wOK*|;?lY$zxe<_PQ zdl5#;!eL82(vCb;RZ{(~d>#zH67_y~3dF=!sPJXOe{cOE5Gnc4IC!5ABsUrY31OdH z$ds&Yz6Ia@Fnjtdo4!@qyVrOqQ*hX1m4@Hr-P~avHZrn{ZDcxx@a>VG%FiT-8b>S8 zb?&XD7F_o@!yRtN*C8*e!4dl8qwtR>3xUZ2TFJz1dk(y3e$VMa<{XGW9nl|g`lsMs!z`g%YYHVsL|MUaXgU``D^1(ujt5$81Bl+xg`DW@+Y>r>xhC-set+UcQ zWKgf7jHa*)o0tK5Ftw05Je>!Aemch40JU8C9H6@Si30Z|^V>I)m#i<}%%1ZWp6Vq7 z*+#OAT1v528wYp*#smGejC_Qnnjo}PQdlB1DA&(ts~Ba8|EQv+MS^z5UKQSx}|8V?3CPqVy?F~h#UR;*Q~z9lC`M($>~WsadAIOq6ZpL_p$IN z@aEW9%-EQW=d3?}cH5IHxBb{PO5<_Nj}i7Oy_Jf8;uolpeVNS7EB8#u%c9a_@peBZ z99#KMWvqIi<_>{uiqNhbgI1aT**BbyG_&EfJotuR;|btyq%N~9J{)dbVyGdJ8?Ggn zA0F6q)d>R(-{&ne?YGislNVvVF0Ml!FEm z|K@RN$)F)O(sht#7@hl}<9PeT*heOc#c}540hbQi<#MT^Xja42eBEG$lm5H~*}9L> zXH2>~_d&8JV=(Ms0Td2bR>BgMIyA}SrnOqC_>XTNf&^W?d9Gv9Mc>1S303QT)`IUU zqea(5x{i8k59ZOG5xFPXIs?&6o!I}gPytGp6Sy`K|Hs5SI^#)X1i}$DPvrPWVU>&hpZgrG_(bUqKBCfsq z#*tGWkU-9$r$1OQx^a{qUE)WfXdtN9PR?&e3%|(d_^|Mq26i)Rjy3gi3F`A^V6^Pz zNJU2lwykY-%jW|f4V)U87joS{a+_#Hmm%i_vY3+`QTNR!v1PVmZQhk=q${+6=R|1> z<+Hn>r5ew=1smHPJCQW|yjSBqueFltia&UosC3!m^>Ck0KUk)0ZEVQ9m?bbk(#l`< zz4X5X;!Q=e$ZYZi_7W}4IH%TPNIwRzE6SaKxyl+-bTou!%mAb2j*}LXQM#(76|9D* zP%(~QbE~;Bg92;Mbh3zE^MX`!ky!8f4*=6FMwEGXmb9yE&HxEsEo-xthE8D=CTL&a zr^%5_JLDJaJS+ZpQctyfu1|Up&-tAfR`t4XRjjQzXRp>S5bYIW!!I~bJ1+Yti^p=2 zg2jSY6d%65%+F%Ypad_y#Z8M>OfqV;u(rmYct5gSvtSiJmqL-8(?%^5MRU~lS>86? zec8j)2p8l<7}0R;riuq!NZ+tHO@490aaW?CQk*`$(9lwz{;L$%j!`xah~d zn`^VZ41NOJ}d0#LcL%9V4dF{Tet~{^DoI9&F||S4H{=?2Jqgs<67j%H4T*_u_SyeguxO zhHiVzI(E;LR?%I0UgVac*GZ5-rgu+`?47U1;r`7TDa~I6qk=fyZB$g~faOCAljuDP6Xo?2+y*V!QK z!>X4WO{o?}u7l6W9s)upE%D9up#2io)R9j6Cgs7jIQ}nrCMN|l*l5sM;PwJV2R!3E zcVtM^b*5%!{iiP!BDyHnehcWNeh^WcDmAd3dMvhUJ#@|QylHVd`4q?Vuy$!{CWBfk z4*dj32pKI*MAx2ZpYV$Li-9UHU59{HYd7tbQ zn8`@EXeR8>RmqeZw3($UL zW1MgGn3&uymxq>5AURuQm#K0*eEBq@VWt+j<@31jhG6k@Z`<7s`=B!UAdTNk@CX43 zloI(B#_7sc->G<3+1n!+nLlX^#hmOEFO86w5pwLzD2l`}QX6gunz(UALJT}&I_^KJ z!*By+98maD&DLP97^sp2di-{H{y;Wx++l5V$iK5;hMeH*kXi#7guCuwVQ1}LCbe$z zCH8?0#Phk9!**{>d1L2iBoi-s>)Dss0XPqfcbEN;_~PUbml~UHAJX0Qz~8a0hYGzCMSP)!EF? z9o_fX57Go_y%B|I93-vOixl|LkRgMZC9N-JhdP)ah;hxxUs+fCj5E^1OhQommqC+9>vktoGY@<_eXNu(sTC9wxP?>hT zHry(+L9+AYUsVzM3^S{~7Y+&bh6B*?hu~;Uxj@=_3S<=(nVu#@zC4b!q#Pn$Dh-q_9dy*o*ouIkDVOOpNU#Z`eYp1B}Z?~E`K zu7@mNka0aJT+iaNtM7={B(00~$^_RqfPVIXtZtbe;+Ip?`}vuC7#bJJ7pa2)F+g4S zp$g4>0d0%RB?!zZyOm}3mLtgfibi02oW%bXhR_G{axrm!NO%P?svxmy$@Fr|`nY&B z4XxvON29Zu3=Zdv{o`|0Zhg~ek#SJ3Ve6fXSo!nV1~5O1XvblDY(0{(rGM(R1nv8;+3%3sN&P+(KQvRLd z)n;k@h=(~retlz}nYzf2QGZkQp){{e#69gFr574~JE+|#@LKq9={4k%6#sA{F!`h6 z=;FbsCwet>-_FG1j*Fy6GGCB;po?c)zbixN0#8%&_3K&TRs-i)e6!wg_`ne5K6m_) zY{IjL%yHxh%GtT-{*y|h?)ZDNhs>53?^CNDAM=|27C8C-hav&Siq>e?Q_jI$r7&^B zaj|Hg^QYUblF-hU)OG`F1L`p~kskVc0$j5)g9|iath&MY7HGJc%N>`H<9PK9r^{s^ zWp#%~wlWGbX7s{|htJP0GG+H(nd~q2+&?v4X;(yM00x(gJtyLLSaQfHKjJ$l^pgGc z*(~*H*^$xapCg^JwHa^qpR@PS6=1)qeArB$jwzKAcnv*ekM!t^54xe<5v zEZWhpYu*wX-kEK_b#Tu%b0zxo(XDNaHXrhnmuzHKL^dQkOO9QRFLFUl+1s3J8@~oq z6*_IW((c}RCj5ahLdoG7)~+|lp6I(lT0)cnUeU_I^x#Hvm+8Q>dT+z`+AjgHca&vk z*7hJWqqSh{=F{S@TFfbXE+ljxg*{f!AMU@s(Z4dvYM?gS9aM!cOUeq1BM(fS99xc@ zAPsjK4K^-MM3d!Ouhl-KSno<|VTr9dw~FfdN99190=_R0ldgJNEA_X5*HX(H_fkho zw^#~>F5f5Sco&B+s@@l2Nk~{rdf~ykS*s%O9BX z4Woi zS%YAkYa2fI)2)WT|FF7;#;vb+M8>}#_&$taHKnVPQM&Y2gtb#aABb71m>RqC^J=8R zl(v$5i*3=aaQ$D-_^sesNmnM+dbh^@$H5&f#)64+e*deIuT}|}J{&|fKL5TA5#W53 z{Hbk=O)uJowH&kHRT>Oh-SKf9UKqkvS(!5?YY&psnS;=uAlrVn#$cP-i|)`f(0p~F zkuR&MnV{F~Bb%c(=YSt878NL^k79p6RtA-nmLjOFTkz;optuIjV+3% zK(^#F5ib)gOo<#Y5d+XwN*JE3aFgSCY-$v^Sg>)#O>^i)4%WkjOFdUB_y~ulX;&p5 zT~>KZQ9?T-sZ*Kx=XgZ~w<2tI&UD`K=%Dr7nWQ^b$cOndt*da@f%$1q9R9pBba8{M zAro8dlaB24r^S`TRZMbN)*TOIlE&<5$tV`i@qh7M$@8HW-o{tlS=Htjz)mRD8!Et%;pYF+5QER49G2^E=AJB{)&4$LdnmhMF;6^aiWzwH4UgB#Y>0(ozL`Z6r73)y>Jvs*to-S1g&S*+}u_6b^58o98I+Mym zR<>#uwI9=R`OTgGxNfqQM2kWdJe77P4O*#${~mZ_JB+_^(Q4**q=9?RPcg$horROu zJ8~}lQS%@8Ee-SkJAT`B9=~(_y5d=~QPJYbGvd(U?(ulnf_^zbMvd){e)+6J868|t z5Plq6jp_0*DpxqDDmlw<9*zy;D4}ubpql1yz}>sADaCd9D2BBQxK;-fX3SFHg4~Rz z(%F>E>d+25jP|>SQg`2FT9j55=h;;z;E5+G0#ybCqx*<6*34 zb&EL;D8UL+%$L!ZD*zj74T9y_O1l!1^$b`iSgcJJHye9XI_BJ z=Z$7-4r|*%XSI>eS631@H%|@k6?-0K|Nn>J?k}^CA-fb}9xO@A+OYcoVMHe4p-G){ zsqTw=`SfY?HC=QxuLR<3nR;XyzI07NCPU2WXZYBxR(mA+(wyz)upFo1xxw)i=DYZ( zz03DrKM)ybu9rXArAg3Kb@Uj1x_S{C=8UkUx?zJWImdXCnbe-`zy!yG`H=2i&k_w0 z%8!p(hpWPbkr`lVX1`2zsLVE)pOuJA9=X>)2uHRA_f+&6duoLRdol(e-33DWbMOIr z>oY&?%f%Vj_2wR(n0u6P0&_i0YF>Z$SC1hxS~3|-{f*xoW=*E*v?!68UpMu3(;Of9 zR=ORQ;k;wa&cnRu{gPuyfN;;U^|Fv^LFY30sPMCrGn$r9Hr{Ot9S^)xoQc4f&Mb3+ ze?BXo&|o0N;t~pg-jDyI0QsK?uF^FuEHr{mq%uPd9clA@Q@hs*DZ;Wa(`r3AqbLDp zWfeLaC=+}tG9*$U6$LVJ$^UWxgmZ9pWq4?aCn%iIqQULv)Hm|pGz%XRgZ_`72drWv zG6Exz5g7|nh%5kvD3G>WVCA3F8!*P6kDLVykFtCsDUU#xh%q6t2-?S4cg`{eOh5@) z=@v-wyC~ln%Z|UTxNvr6Bny-i=f%`Hyu+u)(RpkBt9?cCPfGiBCzhP7a_HV02WSVO ztgK?p<3-t4|DHjS4Vny#&v1XAd|c?*hR*a0NJGnYI;KoQLJEU6`44}dJX{#E@%yFn z`YbV~&gI$F)|9?J@0tqr8fj8nH)7v#i??t89A|+4a@Hh}H7I=L_r`>*5jU}K?e$DW z>m$-BfZmv`sMv$kv3hT#3f}z2PPK?a@uQvK#E?Q`oHI7^WFYv`4!hq#kIm$9Q%V%G zJ#MLf4qYUz9~%8^$JhO#gJS{Jeuy0?3&KIxom%X=2yDrdLolW%cqa%Vp6(Y z*6UEP=w4=l&?y+b6>nXzv@W=qF4ldixiB9p!MaG~ZtY*UYLuLSAqNv)B$%zjm{b{$(KBo+xH_^g8}WXeKD{ zX#4sl3G%h=k;i?Sl&^#zX~9;j$K-3E9~>K!uCnG7NTpd0cHkUWRK;`tY|)hoIz<>d zu!cOo-Ni9zJB$yU{+e$#`6X$DIpfz}g%f+^pN*}F5G21hT}I(lbpMMYNyfMT3Boo7 zys*`5<04}Iv)%$eBGyc3^o4CnGjI)H2N<$OC1#`~Pe|lllxsh;?|+-pt;=~;#o>BM z<);^3Q+w&c?}E8a*n(4InxS_<7CZHT$}6MIjjiq? z#mL1q&@o~<359x~e{kYvT_Kb-)u*tA5g;{`+fHZtKv73J#>Ppp35aDzZD$t)42)HJ zdwV(V|I#!-FdrQBz&17w&4kI?Dluo!0;5RpSdU6&LsqYDg;+UpT>w+XV^6%c|4Enr zUdyr>fa|X6n3*BahWJP@RRlL}RRpvbTh?Hv+QXU8p`Y%&vT5X>U1^u*Igv8T&h^#M_?@rK(|q0`KlstZicZzY@PN4EvnBatYWWo*&guA9sla zFXNmC+);E$^tRovi9RsyU%Ea22bGkJ1KKj9-}`ETE$EYUR(-i_zr4c6`i@45{=7|E zBJRZnr&4;uKq5>0MJliK0w0xYYVAF6J^+2FiANEGrEdw}D7GFWHYrm&e0m}Gt5i~> zF97dnS3#FQ^=5IdeW7^+OZ}=++$$L&1GH`+ZmlptuLae|YFpxoB9uad4Ko23Vh^j64mHA!Q=xt!oh`-K~ zWkf{x8*l0KKc4}-c?YBdPwrn+KM2aF*zqca9+rP-b^0-(Iqil9%D1A$vMyJu+WlDt z+d9-gUG+Rth%i9es+#X?=w9qL%4~YKizZHI{&=m&U-34;($p-mYpo~BJLTqc7h0zI zzL`SU_x$fEH;IYyo@k(Q6x5F3jErYD0RKq>=XAOw40n$@fJ_jmrX-mYQ-3x-%6;<_&mxn*ZpF77?iC;yl+3rpL0`ku&JF?pIqwi=$vS8w82 zXN$-qSPo^VqqwZu*&q|SqxnT-b~7_6>+cF)`+F3^Je%kB&!F{_JYnkXu|?Gu-e|c2CE%4dA62y z;c1l_oWw*-q7Ct9V<2C}go!CaDHeTBgtL0_YEZRIbkmPN{)dx1;K*6}+jz|=gm}pk zVjgT}7bQoPd*$0}X?mtwvk)U?m@PyI@+jGJ+y8}W*#=v7|1o^W9dC}b6_&{EF7RWO zmq5s7Cq&YSA^nk~&5s$W=pw1PCO zz>)bf*?BX${3={{bdS92h-g1~O5&Ka1oyDPcK*F4b8wStb2snI*%6PyGx~qDyhbGf zct2V_m$sJ$Ua9|!_vr8Z_DAuYwzFL|n{rV-;+HSMwts&4&RFOpM#ul5p#*tB+rUh*$O zeM+qq>F-EWmdFOKn}ybXNyQAEywXM9;wU|Fh@M6GyW_gDbyOb+F;T(cdk3B*7lCFs zlh)HhTdk_V=vclo4}5lyue6w3A=ExlVv9N<5xwAS1P#PllivlO zN3N>1)R}lH<*IJ z!K2_}30lwZZ~j18bW!)9R8++M+wF~kIcvaxR%tIFbLLr@tjk4#n+l=0k)EVwGur|z zFV`+=&=U+h4&PZ{521lo58=B7nUG{GcU12$KFyioEKv%u{j4y3LhH7bcY)tW1$EU0 z_PTkDE3T=w`oa$=sqBgbrsXcti&2B_(AI1ZgaNNR)Gv0P9bd0m6?J z`>D47iBzK7p#X(%hibo!bd<$lQ7?GK-4^q_`Ef;j?VDuJ2pUZ5qIuO8ln$99NV0u57BWL4t{@cQ_$cRZ%Y+_i|cm z;b2i9e==K;Hj=-M_oyS^fI5z~PRA7BJP*q>>a(=xQM{iHvi6TAPSD_6kuubkE<+UW z=^y2ysH|~xD{PWu%z z9hS^Ca^*{>-?E!tEwyaEGr52jpLMYLv5P#sqbT4_(&qw%?lC|JZnAS=?qXm2I}%`RsKPT#>=|51wG=th}RIC)}C#=E}8-F667{41pY?)~kBPWfA932GvTQ z4&(ZR5IBAVLD=V4s<3g6sIs=ZsR=P?W)zRa!&h{CnxuB~lXRk>*BPc$d+V~`;rbMOeRjwSX<4?2lx$^`Ks;E z=JNeo0%BiB)<&<%XVE>y9pBd0q>oO5GDtth6o)^opphPgCjhH8Ot;dc!@#rIGs1R? zXsbo0#y4g2o3n>K#f2Lab@vu88N`j^VUoo?92{;BnL~zF18b&=r=K@bSqIXUb^TsZ zJ$QFRw?I?=c~ZB>{2tZ8%eXa_=XI-gRh@lX7PZMtuIg(B|CNQy$`3!=s>)vLa6f4x zEpenmHF33C!S)M%NwMPBwLDOMW(ss`7*#{I2n8u=tAeNn5jLR$k8cX%UR69P`B>Ku zbYceKDB%OF$$>7h8nH@_(O8bD&gD$jZOYhN6k8Xotuns$k%#x~pM!v&Hu`62SFG?+ zQ6cjgXFq)g_*Sn$cuqgZeo^1#qAKvF$4baVCV5a{C@a7FQE8#eJPfP8GxPih-{M%n z0B#OY-8YeZX5i=z{3eeBU`u`s!0|Cz>XO?TroE{$o>qn#UeSc$pmV0j^kIF)trPb7 zqnk8-^FWVF1o?R|gooT)2*D*EJ==miKchHqt-GoL2HbiO{snMi|Mal46r&}XfHS}x z6AZJk-Z`pyVJ_diolKZJt;%%Ci<7Sft?AW#nB*XD|W`{VjST)?r`tLm!D9i z;V!z)=HSrUoZ7&|-&POl-XC$B_W@oZEr4z;5j|)-^V`0R^?C)D>L%h9YEb*zED9vJ z4;0r$Hmeo1>nhecFkmCb$Ul2^)72nnmtpG}*|Ow=w?W})TVEDEpxyE*50mQS6$Y|| zAI@+ezQ?mP#Edl~}~rOxR@uT9TRd@yp6| zIXL22Bx!5e8&~vSo0bJI7};*2?+*6_`F&e&Wzjd^Y`bG1xxqDQ5w|j6PZM39AgOma zDC!&hY;Da)M5mo{(`Ge$DyE-BR62ZxaC*#6%t%b#ax9$=S^sXbGy2%TI@3^JM!E0E z4Vf2N85DLrOp7`91INy1H_Mnh0~va6+j~DLPY>FIaS41att_H{3f89HBGtCUT<^x$ zeBSz+@&w@$`OE6TcG=DQa-j)YL(S!4=Qdlc<(EEvXkGN44%<441z|KO@Tg`%Db=E; zH=p>r7qP*8v=#5Qa)WxD z>xTR!LcD@~#R&IXMZ)0AGW%w4sfia1XDo>&B9SSpOZzfSS9oqzX1eVkpRDtl;&bc1V$QIBQ7*@ zDL@!z2r|Q?JrQ)?U5WZ3G}(oou7_~{(WENRIuw_TcK-R%ou*ud1s|w>`B|NJmPm(i zRA(auuj(pPSae~Uak3?(icAoM##QbibA)R#E5W$6ed2fVBF)xm4^9NR4#Nsd3sH*x z0f_V=9p0@Y_^WzrHYieUYFc2H7Lm81)(DXrD4`i0(~LqbZ@%S7YDFrJz(#VraUiy_>5@et6eModeA7Q${4 zhWsEkeiQYkO!uyo1!zY1o*E?vBnAzT`;pfT63%571^IluI=VuI4x&GxlRrYefE1^J zXPjj#{wvrn9^uY?j5ldy-62MsQD)CuP+qg|y-u(4X2 zMz;z~9KA^~wQ81`n|TB+YupCb!urN$$|AXulgyr_q}51P50~@l`O4fQR8!&-2y_Hu zTkjx`JzEip{h^^qT^$dB=|a$6^Ic(cTtW5YaKmP&(Pz6b+${>vH=Ad`Eh2ReH`Dw6 zYs2t?>!Fqj!dL_Y;??xACF+bOR<`i#3b&VZJJ9g`yuRBAOvkOS-S@bwaC3}|&3z(U zL(~M*b)w#;e!V5}t9%S-F@NigIDm9|$z9UiH=X%WSd9_0;^hqY0V9GMhcm!13}l@Eo5}Vp>-=^CN+o3%7`vI4-JjS zt7uMs*yuFU7aySGkShgKFgZx!85T@0y&)GiS?R<9qat<8oUqc6AdXzwbRXI6dn^NxK_CqWpSAd0hMy6wwf`(Beqn?3`l(ERGS7XA2c`XX;;{2KfVlVe2vuP*ldNA#_y?IUW|?!KnM|wF$8x;+eW?Z zF(8HWSQLz?RUsjTdEqLq@O9e0^ne)))w8Q{cmNis4+Y^$RM!6Fki#^5e@l#{Ro5~p zYsoAh@L~KbePXiEI}dUf`IRf1yi)iI?)+{jpb zPwb--Gm8J3?G?AN#HbmV4Qf}$u)JxnA{7?u}ws&Whap zYjf=Q3yVIe3)#IR@O69|^#a&+f@LQx#;|0BvFHy+4wY#&qJ|d)NQ_h z*e*0Tano$RY(Qg~iZ-Mfk``A3bigQ>3pr`t_&~ly0UG?3Z@-r_yzg$eEa#6sl+=2J z=M*%AVUY91V9%j}@;I}zC|#$XJ}dX5Mc1L1yfaBOe3W|lPT5qOY7;<-U7$EniH z^U(!|@nUzmQGQ=09Mq1*U@@vgl!9~-PfgA-uE8q*WpZn`;C2GPSL|J9%_kv4`Mt-U z*3&5(BYdGuh7%{ZRYsZQ)lYWMqC_g_je#*!5y23G!giXeoAzvQN7^Fke*M0)8>zLm z)xOM`fL10SnZE<`7n|u$s&&zS6?cLE3m}O~%)D%(^IH`IDSKOdr{8-D7lI7t*hc>l zcX{=lXT^yE6YaB+DfK|W(93sl$TI1v6yrl2pVWtzTR#*6Z8(_%FeSNm?{o5}p>HrU zUV?4nCKpdEN1(iG)a)vy>THI+^*Xts4q!`vgs8@^vf;~kXx6CamfV?K;GS}cO<=VD zRnfuRnWW@l>vw7>T2DE89qff4~GqpK4q11HO4-#mCyOQ9uW+OIcp-3A~ z*{F|v8XTnk!o>Y&G>Xf9a7`5AqpNnKA`w| zi`QRMy^wi=10bLh@miWjM)T5YR7Zi~ug1vl^BPY1GF8S?cu`z^exH={bBluI!@|B_ zD6gx>_@r#DK4*xIk16dF`g$sx=VsZJ3PQkq+1u{Z`(NQNqzg5hcaO%k_tG9~%$@co z;hT#itI>l(gs?)o$7mNxFN3U=~Kn8980?Cb@4=A+U4kxZIpKH-Zw^U+vuinN+C6##qKUo>NmGQ%}pN1VRo$&$VKZ%C=WD{2ph`*@m+NL zHX{eg1)enDM|cJ}MhfJ#Mi%WY&ewtRC;zj%bUUNQu6&re#v}>FpP0HL)eif^4bxA zCV=p-&wA3Q&G9PI$=Ma%hU+z#2FDf&tJjt47If=y(RWMc^aV0M*)k9f?f;o^!n!+x zk|~c^e*GqF%i#`A?T)y2AMp-y_@u5LtN7nwg+EwcgXRl37xFvQJMWSP==jzm$!&Fh`*eJ9wHsjabCB5k0GHTiCSZWx7Z z5fb?K!+}*mc>B1ie5u&M zoi~~B$uHucJo%g6&RToJxgw^ZAdd>`O;M3OF7ruDOS7rmwX3bZuD(*_>Odc$x@s_r z#s@}qqa!1g`MuT)tE+2e0inuZCYRRcPzL?ME-1u!*;3&t`k%cR`Q#0(u8O5Fh?Jg*i?^38?6_8~}ddhtotv z3eRL`;;CvaFBcnAS4T-NCEvDXEF?Joj?s1xP>48vyHxS^=kI%Jymr)qnNAu4(6;() z3Q7nbxlC;fTIOqK83}F6-mU;8fVcb6lN3dlP|) z@$-jf%ehUT=Fs`CUy|+5Z3dAqCk!MI?nL@0Sf3b(Iht^$w9)6Cr{CiIi4d>fG#vr6w zfn_CqFy{D&f#VcYu{4E2fs~a~`Tp5ZWN-k<+#WO7`k>sZbiOl}f0kc83srL!9AbP5 zc!gK~m-vTdT7sB5(w;=B<#DCe_N|E9k+8VECM4&mh?q-)I%vD8C`TP}KQw)+nkP|` zXOX~n-aD$SCZ0_zhGfpMZVI5#AsX(*GJ_^FcFemceqm1r63AslkqMz3xhqzEftVBo z9`n&V!4QH(mHCkgwo-s{w4-GkM%vr;oWho?tV3vCl+HnT;^soqi2_mw1Fo2eoVkWnCsUCpa$B>5|57mlW;FN%gpwYF>kePOw zL4&${C{yoW$xPbSyvsf}o+e31Q11NBeNW9D-v0F9Z9#s0iEVLniQD!yZKM<;ibvU}cVLDVJ#CYw zMAtmD@0ozZhsI^ubR*x%IHqD8rBE|**b%+6zY*%@se1ajfy++6X$K9?)<=T?ZRWuR z+vj_Yt)D~nn(Vz*^%3rkQ@#7r986>q9B6*TU}&Rr9mbT9{Tw$j!EB>zlqY1(!VaJ3ljO_$l-MjQhUtb)+ zi>*Aw*bY!SE|);PmP;ZXw_|l1NcU;$T^?>h3DEK`%jDF!Ts&iw^D8UAX*~BLLFARJ z3v=f4-9aO}HkjdI%_7(A4Wblt1LDG+hoLZ6SIWZ1E zqaZL!;j&KX%MtascXR6Il>Et1z>u0@&`efOkJ3bL)YsT*CkXO2ng#mu=Qrf$J~9Mp z(0OQbnCHU1;(zolIXwQl4tPwZaJ>L@!l2o6=*;XO>}uWBN)rKOIz5;vOPrebl%^jJ zpm_z4djV`__gg8Kz|A4?Gtm>nq)Dq*!7@whHoLSli)plHY0Dv}&+v|cXp|IvY=h|+ z5lW~0UK_hlCLhZZ;|CH4{N2yOzZ3eC86jEb4%~Wkvk;j<`+18P)b@VrHm3ezB4;eK z2a-#NOWG!(t{DL?Mu!3zz!;TNh8ePC)8*kCoC4(^Q63Q$>RkB;g;j? z=a@T4?k~u{taX7G(KU!{d>YfaSR(= zCP|+D?T1V0RdF}@Ojd3jj(dx?T|QWd`~WL) zekvAgwCBpm^I^6unKqXT3gQJFKuC;c?jbZBwiQrFh$InXS(lfWpOlrhh`ECBVHVNd zf=S&-YG5oB9|lp&G!Ordj4S)k+B-K9*xhnn5BMF4$VR~{3+!yKIF+SS^C-hGCD;*D z2fCHEA$H>WBsdoZ$uv6<4)zH;-|)ybTC}uY41XZjUFzcg=+YHa`w0xy_&M=JF%pI@ zc839&`W^_QPWe;9ED$z_9P@!;Fy-CVv*gDaB!b=yQCR+-gKl>bcU;u-_8cT%z$0Y2 z(Q$sOSd6BfNRYGH#Ax5SFjFYHocQr_E^w1(np9Q#^88gr8us_*CG8fSetCJ+ zF?pHykuRgA1b|t&Gr@lp>R-@+Lo`P`#um8v{GvwcofK;|24W(E9G6}epfD{1fkBFz zcWn*?fA3;_w z6#iiSrUT1KCi>HE}g%!!`0+bnhJ)z^f%trgPf1gV_BAmZlB{y*OF#vNyC&d1MJ*(D;2S!SC-gQ8kG- zHZdl>`wVl*WMVf~r>1q<>pAn;6oXs>BCv_93?_kB_<_TUG6Gz!!&a$^fhV|;N3j_6 zk0iE*g#|B;B{=N2XecbNu(BSQ)q2rGPWYte(sH=??D--!%p6Rlq*~RU;*8whdX1q# z8km-?=%uY&gHXJe*0^V38c@1f7cxsKaV4ML4k^cf1O@}IOT!=JPaR|n1k3{s(jE+& zU)s6>;1B*2S^p{eYx@q;>k~7z{C7_Ye%em0_OUjkBKiBNHis0xVjiU5f8AMUrW{V_ z?R;?xYZ7p}PNhr*PtHq%_gxj|;sTn@>_vMb7U+}M1D=)vCzN*|clYsz>`wpSd8Hb5 z5Xw=i|LP1dmQ{S3;kt<@D1;EWp1O15xUtswBl4nxwiHq9@1zpK@sLrVYn~6*2MmPQ{V}@PW~#8LUzLqTcHl- z9``YWIFTFyBUbj@+h zr<9RA-~^&rHkKA|n-z)YnQioa@MAd<99#|NUa(PgrO?)C0}S-~1q1fjkkQLP{KfiI zH>wr$7 zgy4EwY93qNlwQ08I2=oG3t^GipiJTkN6$5NV@r0Wk)M-D$_dta`Zv>z!0I4zOr(!> ziFXr~hn7ZkgWW?1l~Gf@MMT~xv3r~?I7&z^YN_kKS0SCG13MJy_{#-17`N9a(lb7F zQbYRnOTOWD!HoWeqt;i>-EXc+9}W^$1P~)Zh#kYIZ z;=}9ij{BG1nr*f%Y2d$;0>zJ0I=Xc1kP__5Xifa zwoW5f31$fXa!Y}qdXt9WhVX{sB^i)V^)DT;{|NebbMKIxt_(}1FRr}9k&H;usW-b( zJ1)>?ANbZR^g2l7KfFy?|5cbEH5S@g51HzE>YtPI=H<(QnAWSSSTO1HkY{Xw$bjzU zNP~8}99!@lZfTf^|M)n;Lis#%z1FQ==JZ&k1MaK66FNLTV1Mn9hGPB` z347c-s0BfSf|PQO&mJ=Jwnn@fe}(tMzSC~bZ6|$h?8l2=0Yypplauz5(Z+=>lYlzXbvloBIXbX!ca|>+#vf2I8 zziQmr? z*QGi&MKbS;OF4+w3)COaKr>{uEiDOjOw|7W;P&`09D3d?r z+fwOk;0VH^)HxlRnyKxdQPfF9n%;VKoRQ5{A|COMC4=e1^XD7iftaRVAeBg1DQcpQ zi<`?Bu;z0CR`|g;o@_wh$06LeiV`B^SrbmiuL!8rSH4jL*y%BJQ$BPjNYv|6d4C?8 zEsp)=%eM>!O3^Y=lyYVoiDq*{fy9#AU!GAwo$3KcpYT+5XiWr#koqQ570bxfNr$Ar9C9s9J<|zU z`_)6t938ok5hBrO`5FJ6AcY22ET=X67t9KM{t0rT<7Q0+%Xgot>S1t!DSih=4}50< zAVeAH0h!+&zc>1qx_u+PO9K1=v^LWLiCuS_Z>~*&VQ9!K-Jx%;M&EqI2c^)PVt|v_6UeOn^;&g)zD&)*Y%cr(wjSuPtoj2tWK_~4zeuXh79$q28=g$cNnf$N0T9e@xZwA>)%kC#y z7em@twWaqt$=5MN0bk;XZC+SW_y+-av= z|6@kVAM?wKVHJ7+WtEBXh8bUA3nx&RQy=<#{Se4Sv0s1DNHyduOI!a--oz7!T+o>O z>RiYxcwR2KPg$Y@x;G%*bMq)3R}48-H9%<7-@6k8Bo1)V>Ac1##sAf-E4V}`JuI?f z`4F5mdLEQmFO+v0udRjtBiKslbppHItLjk6h}P-#wh;?^ z%~x5e6#nxay@)cbT82AprRz)fSbuaHR!HGBV+2j$Mb}F^5g$(xNEf!+4!sOXzSX%; z{=TTWU2Cc0TIKQUv}XO_EA@gnFgyE{apDqy4h*T6IytaF96l}r`H{T4{07uVCzlRU z!tMZ49Ay;J1pvjjE>pfu@9Px`Q^tqa7MuA5e2-o~T&%QU1ZmY>(D$HfWjhYC4G+M+ z%QPftlp1i4D%arxJRtScAS`F!$?*}x7C}HSzxnd!c3jT9*;_u(crw|nhXUcynyIaw zZh_O!4++u>h}Oqc%n)X80nvK)GX!ytwMT?F9OUGmYj!!-KxO~74SAXuVRvMSIDcl? z=tp#x=zFIlw*&E#ZD}W`_jC;}k}>zwJSsPn%oaQj!1X60e;FE@uz|;C6ZQ_=>CIEW zwfnRWMd4r2Dx6nz0~thf-T)^s(%^v7Ap~(n*GPi!VIpwk3QL3gc5Jau<0Juc&>DHl zv^_&M69W!Bu46$v$|E1gdOIa?Hjw>1hO!tG&cPpgw6X$x|;WAb%HysuaL` zC?$?nA%R<6XO{yY&$RovsjLUqxVvAe6jqx23Ua1TUvxUHy)h>Bg zlT5~gH)Lj2o2wJJ0R=ND4y}OdytFjil_jZu0K%!JZ`r<7xjCHtVnSsXg8ff+?Vpq2 zzrF)`VgNOdN6pUYFI9Mjb+-@LAV_2gAWIxuZ(EBRR_sL?86uAmO)8UBSSoVd1H5kA zLwd9tY@mv3urCk{$QrQ1!gMB*(HO-bQ#H6?-N!sr*?hoZuGui*U~K~wrb+9Aa2%&K zcHlD02slF~I|L!~PsrC{=@G#atrRnJ&}ue>9G+30ubgg^)@y!VS39}D6J;ttRbGP) z;GhmlJfPrXFGYJVzihkmodl!WE?gbo(_ZuR%v(G^t!l5J-#ot8r$6hTsgf6I6!SFF z@mbH()h-eU2jRN`fo1^%?%;w2!oE6tR#zXx#P-_V){7V$2?Vs005y9K$+mn4%fOhj znQF7B`Efmp7;W%CM?HIaC*TVtX((FFgO9x~9;sGRp{zVj`sGlz4P`|{CPiPSHn(4O zUZ$Y7WvJUM8-gmOb4VauTx9w5lsucRH1ocQKKTq!Xs--3MA<(uCrcWfz;YCxoBoZD z-ROGP0AUqmtQ;4>PRJ4m9yK^Okff|#DKsmZdj%ByJnV5A2h!YFlmAwoEyi}%HR z+>a_$rP1w^)T~(P-#q%V7?+>vX>EY8C%}Ro9T%5fK|LY8VG6L;caa{3e#YI>thQm{ z=C@be;3V6kE|{rH>@16^Y;v2&W)A}xD%GDLs8 z=y~KWdae`gTEB&!P~8P}4hRex9>{~Qg+7d;LRM}=+FynlBDuc7GPN&M`fx=Ds!_h> z(`066jsqG=lC8bXTs_OCJkt^(qqSBj&-86O*^o6WL`#43fsQAObxmAxR+7IZ@DT00 zf$;GNIu)@%?82-i$P(l~(?%Sq>>y~l<{M9@NpLUG; zD_6N}gTIX9SKEvP_tnG~PY{FeRPSy~+~IOv#&{gC>23?-#)=8K?m1H)dl_gd7X%3b zBKg)S40NnZZu1JEUwb}{SLpTW<|H{jO;{vnum%|sB(mj0LG}?&`(V*pCz&rNw~rp1 z@!?NY+t`P%^$^(wh{!7iw}xChJbeEz*bee11?wtcgRtSclLyE%G6$`86-&5OB9_L{ zNNHq!ZYvy4HBxYb-g|JvnmstRcS|t< z5Z$I)s~Mkm`WqC@ZUe;s;m&owQ3?i}#~4-SQRcBRlQU?lD6epG>r)m8D}xFnTdayr z!L5xECDTz*p*)blk@O2Q;>1=#g!_^s!N}z&SK^;?-#~SY^!P=-G7y+3P|Q4$YeaNkmBz)JOcCIGLsqzwOQ&obe0Lwt5gC;pVBoVY(aN*{7R- zWVrdm9rj3AlOkM_#oW>-(O+`&3cj`&TdFTl4{J1lH+3Aaxe`mwy-t=lF$ucb19USV zA2@niFnZX={S1GgBKX|gES>p6`TzgKNyjn%s9UmJh1V8lFa0OlMO|KVLR zM`V+NPR*&%@d(knYsX+Am36UwrpC{%o)fd-i0|^$B(zl@q7A4oghLZo!2=asRIe}5 z+Mk%8(Tt~m6b+M(I5J4P3 zSHL^d&h$Qv6h|L*hHhZ@&TXn!s7M17G8-NB#F%M0ob+k*pu|VBTHryjAkC4{PSVJ- zEE}9XLxG+uY~k2u3ZR|zYJoa80W7Pb*1Npg2Z+zKcKL1KiR4eF-=Z75fPv6_RX)ZH ze?Wh4DDzEY5PkDomN0i6TKS?0eQuuk0pRF`C`kPgK~hZ`ZsuEBezH#nLf~NZ6>?j( zVN;}z&hHQb>iMb>higuRH*eb0Njz-}b^}&N>b1ugEJ~rLDN&aT^&4hp-%q^$nqj5+ z>`-wo+$7366(o&^2yTj5G0@Q2r4=*EM_;hnYE-gIF~to!OF5QKoo|_yrcOf=h|-*H zs6I&PXpFAW0{h-)>H#vSg{?3lrGfrI-iBNIo+T9li2Yun;Po)7W|$B4zVL_H@~a zI*>sGvNI?#{zQC3EXQ#<=fSn}Gu5Wpld>O6ve<~&=4-Tdu|FHZ#aWts`-y-%aaJ_H@kkHIE(ntS6hqX;Upln()U{s$;YjtKH;Ngw#Fc@x<))6+>2XW~S~DA! zW8ZKsQcj4xDI%D3g#d$%R)u|x?yIIxJR847E3|DUU4jI$@!!vO3U)7ZbYF15Msypz zW@HD%f1nT<1f{G0}D92xLoXdW(a%Bar?;U`t%Xt8;d_(1C*Jj8scN)s1lqT+}iN* zWE0;@*wbvc$c{GjEXA?HhTG}pd2n%`A)s^=dEf&HZ+HT|mAh>Ev_Bp@xz!$eaC}bMfelpp{ zXF$=Te=M8Dg}K?%1uk1e*BluC)aH&;>~i6p3O}}tmpJAE=axGe0Y+$jgB$X|D*Vv( z)s`>&4^0AMC@wt=k-Rug3FLc>N zx(;-r4Du&p*EC1MVRGIZ1_bH$BAODNlxHuFj~z{b;J&*-!kx(E#Lw)~CTy=R0$1;XS{_X|Vi9r%FA~eD=3}&j*Q0 zd=GChX4p4R_655)jmn1Kfp=Ho=)*?d3*YaThWbLkUF(YRRue%skN$SD0g4Pz5rSj+ zZb)N5%b8MH24D;oEJ8(UV)BRRDR3Uis3IdRWEhCT;v0I0*_E7&BXelt!Xub#8!gg$ z(B_lOZROe;N4`lR=FtJ7@HyW$leTMl!(Flh{sO|PD0)igN8|3t;stI9<6+{k>Urlx zE`em6--wK`MTTPxE(5wodet_(F2ts<5YU*dhwr^r1+%)mg5$`JiI{2{&46PK7q80% zF9Xwx?Qk#RC|6Az<3=TrbjeK#!hnzr+Vj}W)k~%&w+v~)XeCm8f#d{+G14LFsxcsw zg4_TYoqOMh5XkNB&3Ow6ye22=d4O+ob8BotJ2@l#{CMZdMhu|ZTK$8)@hG#5kmCK- zfe-N?Hh9MI#C6Pu)5xfcoFxLOqQCU1yrr8bn%-VE`Ny)Ux_jMtzjL-5aKkPlvS55x zTQGpNqehM3S6+vG!MOi+em77nbl{pa^o1`=l(pOF2W59AW2UzP zKu|vr2Zx0=hr3RxJzDecEP%RyCL*0Do$vxn#lZf1HbT|dVIz8HrSl_Ak|H!LQHIx! z%+b++W&}L1R*J(aeL+Z^Xr8STI|mq{m1sIk9W#VWfAP=(l>v0$KaAs?4!kLHsgXp= z4o84A*blr2BvR}&qF5Hs?7W~CCp-CG}=5z`)yZ%+@e>OVd>0)jqM?&ij^~!`Wghb){`GzDx*8`wA+p3|P)iIaj z>kn`r?jO90H9+&}&Md>#oG&;>qI2;dl@SWdQyB{JdpEV&k*wYWl&+?@t;aJ z)4qo*c1AR@WV0?2|A$>)9U3=1-pEy-5%Nq%|91+M*A7ecGgbXUD+4DlD8uEECZ0>h zj<|G>TZQ!_Ix5p~^gW{0Os$CEyRB#98*oDuUD|EV$-PEs@O?+QCK}_iHPoOCm646> z!RRBp<8=A*9qmLF)f3F_tEi(deJrB_Z64t-TG7=dPjAYFrk_!`{F=Tmlbf2?pO}C6K3uFv&dUBTRpx=M-x2Z|@5%$#8h+KQbkNv?f zIO;89e`X<=iCHpd-lMGhom(WdCJLCuG_`DU{$+c5guMJ8p;J5o$(nz_fZ6E?q5ZR; z@nGb>fGF|&woD0guO{*{AL##qg#Uayc40vBPZR4gJn@lflO{%l-RIEdpUS_8DBE@r zq{CA~^1Tszh|;FM&JUR2+zXF@eivVzCaCv*_(@n{n*1v%fHI(`ax|_wQGXl$nG4ih z9;W$>I5B~xKw|vvQj4YWrySBf-61#6T8ZF{w1{Cc;B2j_5D_o3TBjo_+;G6xas%jE*Msf1XhdsB( zw?-hm%f{Bb_xlUDziNJ?C!K$VyzZ%UU;t0eEQq|=Ff^fbnLoiX_b58h=dRui&8Kmj9v@)> zas!{~`mT=uj4q{$Bm!)Zecv0j-;O-AM|ZofUjh`-_P3&KI!4BRAkQH-KHg#n(Rue0 z=uY@?-J8ZqVg}^8|13>?frdkII_IOUo${z?2QPe@pO~Sq-Jd^a{_w@AhvD->Mh_8t zdVd_pzJ@PyAR#A`79hPp1{&$>rzSVtbZa7j_JUH33to19jVVs~lBK$*Wf-8<(a|1k z@aD{k*)cr1HXVqG!P=sRA!{Wk2i(xn^GX4!kW6m-sEmJ}!f!dl?I*clD<}WFX#ZReI^A& zlBm&DhozkOj1x6H4M&%r|C%YgBZB(;>BXX*=YB+)_t4d196j(An-@9BtWnzV1fgvP zH7qO)S6CTjwlS1UYhz2Bk2hO!TM%D+JRl- zn+e}HtbT9f7%*I|+7KHbM%vN$Wta0XEv+Kru6C-eeAr*x8vJ1@5Eo4S?p1a5NA#u zlp|JLo)0=1omyffn=B#o;p(E*DADIs9KG3rg$1!1RJ(Zqo_2evlF>d`j89}YurzhIY-2h6iaOSlOp>gsqF>S|&Q>^iZolVj zeAim*m@7PDh~tV*ov9}1Qdq2CFPC;e_GkE!ff4zY2UaQA!5%S6S)Uyyz_7Lp8zjZwQ@9Xy!8xdAE4`kLUY|b*f5>tnz z5mNf=x|r8i*SjxMGWGPf~;cq=@o@xLU3PrtvIAkkp8J4Ft$mbVJ)4W%IWiu(h}+N8dFnt{iz zpirBu!8=E^wJ99WBta%y%)^T|g>+Hb^%VD`V(u%9?{R6g$SDyK)_Z6+_q+{>0K4__ z)h;4(h@eZ-`RO?-1uZM9f~DzjjI{|QPw)?}%Y}rDO#XNg{xrW8c`UEGzIiMv;_{^n zDc3AAiLtbtd>*NYo9@)uoDtW#cUtezx$P`?4$#03KkIp`B+ox$Z{QhEV)=wz*h@26 zMqQE`XwJ#oxs!h<%QN!;gFu~Zuz4u~Pr@GHiIl0_#^h-vKUeJ24qR4BON22F*Re&P! z*fy0l%LJhTe7LA9<9o~H4t@l@eQkKk;-4uaMx{$VpWWt0E+L}?k0CE)1RpYxz}AL7 z>UL!Q{~>b$QN^RKV&{~ z#PP~h20LJrZ@|deUZ#IK{k3B4ljS>NFy(A^b(EhWjPEDu(%ImGB;%{0k?0_&G{G6; z4M|L8yuqP7)J=szUR=$hUB6V_V=jiFpk_4_{w9Z3wpf zTw*F;jSaX|(=);}j<&LS+coZ3fiIQ`#t`ynFyVdi%FNB) z!9(}FfhUU)v(A$$CgyaLtsMh9^XR>~nztpBU~xS3*%Nmh6)!>wPG9xx3(Si?xyH-J zyg#-@1H~l?GuPx0kp~7(-}3>jjbrsc&q4>s#gX@!pODIQ7B}J2g+qd`anN7W5N}%j z)(*34{e2yN@CPzesX&dpWHLTtZd;FE<;iao;7Z)_79flWE~u4%1>rRu>8@_*eGa$m-i!ta5c7T92(jx;KY)^v1}y>^kH_{w?+{2K+b;uvnN9lzEJV0JnO^9l(H zt?wSR#J4^)8lE%6kHgz*U$Zs{t6ikN@Ugl z1gT-yZ;9@diTa#?EOYF(WcW;yUDvprEzu0tSioW1rKb3FJqWJoOZ0G^d%q6{ZokJj*vs%)zsTfx|Y1{U5 z9qTzK+hGpCvxjv!+;;9Sq?^`ly5DD7P+7|a=C`BU0b|sQ+IYSB9Pkx9PANyNex<(Z z91x)lSDHo548R8qI}LtZtUjipn^{M}h3rSbCMwIs?PcOa4{uDumit(-EkUD6P)*o$ zDSN|kaOUCQ!PfXoh-Fhjo zK_6w%0*KICR@`ilI)c&#(T02$svK(EP98HffVfHP9SJb9qwRHt&HTLlT*6-j^>iGh zkGm#zA9)~%92Bj9+vri$+jM;&SiH&JdNsSXf0JIB5z~zwax06PcJb(u%CBs-%9`6B z&NMi%+AB$=``W>%`D55Q+Be zdH+fDt$_WOAxyH3Bx{8QQPr zqKQ_yQ%IuC{iD;k2Cb28-pO8EQWUk(l8{x?d>=D_x<7#>9#KqH^0%gZofFpC^;#q~ z1X$QWak>SU z6Y}}Wa4Qvkeyh_vSm!18?suv41~SQLq}{6I?fYx@yde!^ZN{Sg27}b~i-IW$^PNs= z0|FRafFLHQ-U7b>xQ0{$J_F!p6?EbX{%I|L1kk17X6GXE?_b*-qh7aZRO8}O;NTQw zO*B`HaO07EvAl7OUua_Q%EMU2B z&?q4H(t!BASVyZb&xv-2FKrim58GfKD>InqdR0yiV?8z4=biriV(Y#mabMn}_vEp}<=dFa;mP>_sjRG@jow`QGie9``6eus zVoD9Ca`PLytt|HYQ2;iSUzT-}v3(hF^KMMz{^AME2eu^eKEID4?>LImRZJ9@#ecwXOViWIKju$Q{`m+RB^*s?aSY()0#tDm@zXX8szL92~-t;gIWuWC`; zXo;mOLqoWR_KNl}QG!>{!-H&=&Rc%pFV^`q7i*V)>Y@QwIW>?^qd(Oy@eS?_%cKsR z{*|T433*^nU?ZDEA%9>_#2p+qP%(lJ!TOHVi3BBBQ3ztHgS9cD$0bxY2EtdSl$cq$ zwKk&D%PZJyXQz)kJftSi5)@L6zfHcjCpGrnUu?8;&7|96`zB8K_+e1uiBcN#L$%bR z&U_yFkrCT9KwM|Z;*Yi$5utTHw(Hx0kp)yHOSq2i+)Uz$H{C#?srgeq3ZTUVZ~3rV zb`r^!YVWcQhUtCZn{Ueh)$ZZ_|u3CPIA#DIhmL`);hZZIm5Vu9zh}&}Ja4#wS zM2P*bG`&786H>@>KC>CDJE$Fnm_@ z@cS4Mt3M%q{rx7feOZ}pFLUhkijbd04hs)PmX0{7&rt^1o){cx`mJGgds11@sO5jW zw;$5}Xa7XEgYh5jn`A+{l`jXo2V;if353?aIGp^t!d%FEpir`xF*#E>REd-l%~;}v;@p5Yn$QQo&@BUUnJs#BaZ^>}GvcGWD}@b0BOWEQZy za#=4_%@AA;4h%%EzEpeH19pGV7|fB$V+Vgqk0yGYDBh`P8>cdMF~Y`w(sRj#O{}Ke zq2anWxQ(Gklo!1a@it$W(UOGF?8QBNzG%lZzqjI?+`NXjtukPDyFE3QP(~3#JPbE3 zFmg?h6Q>z#`03-GComiQnccxA7?m_{cb>W^@aB82KVG;6wh$-W>5CCDQSuoE#!>9A z3$lzf#FzHXg}aAlbvS33uUTQ3^;8_6?Yiaaz0N{~NBo`v6YOZV`))+)y_K?|wU@@B zx8&0mWtK;`3Y?hu)f0Wz=u3&rt*+j<^QtK;I;)rC+N6_*cSBRN=>Bvbhj(wXEa&?n zQ;jIf`O6bU5;ok1Ek-r$O+O0QT*-KsEcpDx{QYIFZ(^)=NHe2=aY%rj|6rl2Jnc&Z z;cdFjOkJ;V|MXcEU`(G2y7F1Qz=oy`Gq9n%-PMfQ@8{ZdYW!ueA%0Yxg`=88N+5}X z$}kavd^AdR>3N+th(q|<{MV>b);HN8{E>=tSW?C`o1bhxOXUjoF%Qasb7Fq`EHWba z!LN)MBZ~rUzd_rdZ0=lz5rHH^*hO!2DayHX-cZch2mC2qypo%c3JJt(#7nRc+9lU% zvX9AkXXWZsc|Va}>C`d5;#~SG*=*8b<;Mey4ctpSj~k2hOf5`)z|7cE@^ii(W(lQ$ z>-%D3oRYv!-+DrsZeGPeCn8^tD(~C%a+xs-UDy3tlMQ5OIX7mLZ>GWdPc=$^EMM36 z_1)c2k{&)C^5pwv_0mXV<`e%K^s3Ax7RUhL(mtM-2Q1-x3~M82*a>wOmDatnACu<{ zEwFD7tVRmdc7@xN4G^))PBLW!MO`VtA#HuYABWN{f2UP&@yzBaaeKoNRtI(C`n-#u zwd-bOz%t4tQb;{7K}$7iO~hvd4z&FCml0y%@8u=RSi__G@ok^&{>W*aeTJgVN(65& zuh3pM31duSBe9h!2V$>qNE#w8iKY7AznSvN+W!F&aARAZeWBIQi|y0?Hi{JaQt$D^ zV!wc{Jy=|FE*N!#(&;om?lo8Bw+|$Y@f2_=Y!va}`v?`&D4zghIYYt6s2L4@8|yjc zsn}wnv_pz70V#Z#v!Ho$sc6n~yR=j` ziU$3|FRf$W>z)3xjHhvfB|@SM`HBf44P&6lrI`IeW0Rl-3=tnlSNr6%SCxR6cu!2F zp_&i0uTrpK%35Ow8iALPda`JjN)DHEO&$)Dzm=!*xwe$+hEdRtYt&wh);_de z@z2q7Pk5TeAMoA^i=wX+O!hsT`ld}j>=QqE9TBDFlyHxJ+ezeP@=%WHSpV_TR>F7c zWO|xjSxcQd!%mOoVVnP^XP-`>G8*GH@!?Y5W8^pG@mZ5S{26SVV#vYaXf*p_E{3lK z!%zlp=X>LM_kdV_ArNk-3K79*qCm1!)6bFKyALl5`?vtp5_Kb|oQH^g?6D_JM7AQs;9M+)P4 zIQ+{$(2##%BJ=pNa&igdQz%0V7aa*k{^GAc#j>P)$mG&A`p5^7qysrts+m}-l*qy8 zrAD#mA`y||)MDwq9Ya})SgDXJR|sCvM`uH()l3H1I>_jsEW-d4=(dQfIUST-U5|L5i zT6s)uCP7kY9&Q(&6C$P~;C6`Ja;cnWSV#9q?C;dPLjc|yMm!K)b+w^=mEWqL!D00| zk*K07Pqx9+bIAnw-#zv!^{E(c?229Gg)drTjSbO-$1jp|F5&jkCG-Cm!sA*9N1*q6u?C%dys8{o z7<2_aJAh=JUd2V-VB42%eB!MgR;@0(PQ@DrE0tQnR*kkET2G+#G9f+P)?<2#=upt} z1vjna@yRj07AAtLn_K@KT6-?}>gsCM!%KjI$u&Ba1%|{X_oEJ1qH2w@!QuWmAYKBn zuY8*aVg)Ege8{UF?5CbpRU$Ah3}EW5v?#E${r0?gx4*3oR2>i+e&G+vCwPt#APN*) zM4w0EY^yJpm)U2K2!))UIy*&Wk}b?km`s`sUwIA=_Qnhhyt8QVo?Ei`YlOH8Bar4= zK)dPpk3ZH2y$cGJx3w)XE}-R6NXvB7*8W6@0P7t}urM)k1XTSl=(tl+5V2DAS9uC? zfD^?(?jC;SbnPZe{SN*@v)(IcAW3v#mlT|TK{?GHbqAhXIb5i4h;z7}mA<>XtFRiT zbWxNkMPEM+l}np*T;r)-6Q0V19;q?@nLS&%?y{Zybc4OgJMS^mQe^hNw}IEncr@qj z1|H;L>0r?Wa(zy^X=Q0y=(xxPfb$#rYd$}0B#pAkg&j39zcxGS?_Yb@4Tn=O=>&?U zo(Z&Zf2#-LlisHs%pZ{<_>EDmegFO)W~@h4@&NU{j@S$R+v)mH9a!3j>PJrYkBftN z4wPQFcG7s@Mk@0Nec+Atc6@un=zbT^+}R_c{@FyT9t%r2wxK`KSYpqs*%US-3}2l> z1Cm&cke(#&?B?!|(mOfp59mCU$1p>@|8C5B_wpg6Z~(YE$_K`IUUK|STr2fvGgpe`q_O$p?itbV z7q%NgK4DKVBTgRnn>`)Zr#aus$#Lz@wYa3-9`%cnZPp)L0u&7Q@c3_hXzo!Dc4epW zeUpbOw^_*yiUUxmu*C4u*Y#w;FxnBD>!S}k-ky-XcuI=h4YuqI2F=%)`1qInc8lLT z0+3$5r~Df;N6ZXb?df|1#{I_!$=@vz!Ig+wjcVpV=}s0Z9rapoIJiWhN>Idz&8$GGd`$=n;Cn_BIEDyqiDnJmuN z(?kf3N@-GEOBv>#?d#F9k9+0Mz?f+;eM~=`m9cf`^_Sti1}~fHZ@KP61bQS|l-xcD z!#$ZO(kL7c4{6@2n@;#l2CS*^>QD-C;=$W({r&wBol4V%Jzjhe72bN#Jm^tK&<@IOw!-@5$3+aQ-5TDJC!2dj9|NG*w<}n&|?!~afTf^_@ zZRLV?wh_IS!Qto?ku)ZVA)f$uGhopg;C|E^zx6jQ>!2*8-M#G&W8ki}yvB;JWlA`$ za<;Ir;eE!ME`7~lM4w##4T(;RJE5%es!IgwUGREI%o$AGNEmXfB(Yo-txwxdh+iJNN6>wV# zXdd6K20B0JZTjeSOr#A*Qd<{CsDEATf7T=FMU(wSy+)z6x4msKx+IpFa&F_O!o3<} zb1T$XiQ(w|h*k``AhRk!Z%Vuysx9Cv@ z#7cN!{n0jSG(3pTx+2UA|eVnkxhvdH%dw@K+`|)E6wJ+7@Z? zT-u)(fOB~+jh%{KY1dgD*--VF@t??zr;)e^$K2s2lUo&3`h7;7_`p37iS0>VYL0yJ zi=Gn$#v1@&e=MT&vvl3It@Q-4NcXtzXP6pbL@(%D2$%x4FAu6$?x zy;|>%YWiXLJJrSgdhYMY*FOOqn{|wtd9V&PAU$U?oS0AYG#{m$(O z&Te?_#|y+_y)c}RPry_vccWa2!B@&-65vPmH6G@JG*F5jfI_TeTUCS^G<9qc|8qIMG80OX>X`-XKV^OaZ~x z!#w>r`FA((HbnDq%@%+nn{expJL^P~%5Z)w2SsqG*wrB|(2L-!< zVD9 zcfQmqy+96f&w7Zm-pUP2O!5o1u`|djTACYUo~yBrd3#M|<*Lye?6Mm^9w|b(_52wZ zdZ@T1<7DsxqdOnK11@XTQdDMFj?ITz6e3cUHlh`e5eXR@qDLF1M<;x%ksvgiiOppo z4oN}D(k!d~GAjDrN;*X&1=Yh)DFbIX0eTX+L?%4dQlSX2Y|+0`YhkT--RufwxNFoL zGmF1%eeho=>r|EcSBkwoaL{l|#PE6{j@EgB+!}%Yb@V@SF@VG)(jwCAJu%2D$fp4h$UCrrNZha}s>7RJJl7R2^AhkUD`H~~5e3N_5byJ-o8 zP70B7Gw(j+lW+yctYC`Rfpw5cc-mIp)HwMe6CU$KKMft9FAg^`OhAp}hwB z+f`US4nF0f{}@Q-os;Dd0B$-a?j+bnTOZWekytCK`}nGl>gKH43oP;(6={D)wp zV7wxD=vGWL@IJ!SsxXg%PoKB2=+})1XHP%)Tx!*Hx=f zEH;-$HOBmkUdBx_ZF~Wv0Od#*S#nI_pKN4^`v}B#Zs8~N{&*PFsg#j#@=um# z2qLAyLcijMJa7(ZuAG)fB$hfmMLQ8&-f?%WbOmw`Pf?0cjs{(bL=G3=FI(+Vq)Gcy z-n|fCnVc_P8q~I(Z_2uUa57%IKC1vqcxeN_w4q%};QUk>7Q)uPO%lrLCG|d z1aE5udJx6NJ<1e)HZ{@Tv^iEf4Oo3#QQiybkv_Oe0qn4A5oBDyP9vPZi%@Rw4(wP; z*gO#qE3f*r@VmmJQ#zZo)$BkYP}wcHqhl=#m5U=Yg%Psw44H#|N2f(~l>O!d&y?>X zyAYM_A{}efY86L==>P~cjd-D{0mljyB)tXu@uJgeD%HnbDbf5~glp$1vA=M1 zd>oK|&O7$SIJDBd&}qMR9AkcIiAbf!BUF%^=3#C4Dzuz~FW`UpIt!>M*R}l*-60^- zAzgwr(x8M&n3QyPNymVc(qJGkfQTZE(wzcB4c#rB1JW_f|6!lA_xZl>xc+PHwU;~G zi#_i<@B7^MbzQ$ppwdYqIWyCX)DP@|d=61u?+RYdiL(W$G+8#>zbk9wH_wqF`ncAm z&s?=j{C#ROo#*8)>a_>1b}0lpjuRq2-iGP(akSQ}mGREn;b^B(QSvf()wTg&i}51x zcofGa#D<9oQk{i0+am3AH-=S(+9crkMbC!5*)Po3rZWoK5D^GqE0Jsa(PKccw@uP& zq%rRG7n({?Mw%{4y=LdOK40Yf!!#Dn30}P_Z^b)q20vnltX{tRd~@+5(GqrS`^!&p zq^h$GSa@|c%B)YIXU9f2sxN{(GN~~v%rS9p|8*y__=)By5*f%h-y)zr>YrD=_LM3O z*r|1oHx0>LJelNu2920T?YTE2V4C{sDP5-wWOVo?SjTc(V$MI@F$W(ugts(YI)D?4 zl!F(QWU;y?-7VBF8M28RaB@cX&gKc7PsiL!(XYDWizjpSW&%*C;9HEI)3~zK2xAk^ zC(%pqRO&;!y6*cN9V92{5^~*Q2MVKsJ|Vz zkEPoSU3bs^L(a0vo2`isvbY`V+Q3eJ6GN@9$@Flx>wPPOj?3@N?|g(VH?u|xGnvbd zxlkfNatL;pnZ#w>iSzU~Vb_yGFFkqdh;)v28AEysl<%)}s!n;mF2-UYT|FlYXIOvp z#+e2j5_5?)8h1!@63fam3;gCzTbrc}PESj<$L9RMwM`%2BceXpY`3V)q7E(`fOPON zjK((vKbf_yvT7(A%Fxq;l?-OS$~~f^@>UV|5>mcqAo<#yBmb3y4}7yp9kqQdT@OR= zm$hRG52y-L`J`t~Y>Y2p&YYQ47;fSej4E}-hqO2)Dug3BR&ZA3?c^lW&_2~Zk26a& z8mK$)4$dx)d~BnP9Kc;?iM1Sepx)}?--Ms~@keB!WS^QRX%hRD_n!ler`4}tXN z7VmxCK13L>vzTFy6&XvU zY;)TrC#Rd1t+9?_Snm{UB)6XupWfK)e^pAVxgHwo-HGTCM%3bzm#6!%(4XZUf#!1b z{L(F+TM3Q^6>1M20vnIM z1<{_dEfX4sGVZ4i94cE?VK~aGd$a*d`K?r_GkvhKETxVnsHTFqUR(_IMTb7{Q?2cM ztuhKN?3!vySntW{kOV%^gl&V$PHSf9&7`Mx*`@hIl37vZBnCb+f%3e3JZ3v!0z-Z-Odp30_;bdB=sD&vznulUUu zE0k`t4VTZKfh|c{^Z1GER8BcQpyk-xQO?u0I`>vb-Eip?YOPm+U@tB&5swTjux!8I ziCsrB$ERvkhLg#O7jsnF^OZA^w&+Z+>BAC)YPC#ceHn=j0Qm?J5Rb#k~{PB z531d^Q|`#PTP~L@w`V@j(JSX>aY#$Ma)@Y}9@JY5m@O)lt!{ab(a{aN>N;W49+$(N zz=-B&H*PPvsS2Lxuf$#Qlxwhq2_=&k4k|{oh1KHce>@gGk}O+lJl*uFkv4yC>J+zl zU2g@XkhQ9!g_-1nnACh91cquz zOM6Wvw_O?fh#BheaamrQVnM3r0DF|#7gsbWgoTu0szVdj578>hCHwIrBa5_9B51XR zt_1zV57PIPJACW+vom5YJ4YOQm*HPz?vk!{i5u->Q%@2LD1@s7g|O-UN$i6vYKO?- zr@u=3WTmmln_4FOVA9s@E=HT@Omjq3W%v5=kb*A?_UnJ{OX)E#eH4jgZgt(UZwSkp z0gDmqoW6%u`z7YU2HU-pag;MWXf?5SdA=fqsT=>ow}}6O7E|8)GGDCel|0SPSXj*+ zlDlcgV?P;)JOrvFr>$`vchgV{9W&V`2eFP*F7O^AoRs3t1m4iT zI}S>K>`&7F@K8|+Y5FqwJNdH9CANJWxHQyEs0cm@2{6F0Qr>T-K4Xrt{RFkJKF(>c zcLsPX)cFyH>UU??M|1YDj8;9Uq`l&(;Hd1bO_K#gS&mCFuDO~-^+YY)gQfd&x%&oZ zsa$;PaAk(e7@4&V;Z7rh==WVVy$?Hd3Zo*z7s_IAmNt8c1$$Zmwt65+0&0)Rh))>9 z5%MA6@#D`g?MX6_i~tNH2d_Er8Stg1L|AmG6lWZeH)g6j!8{c_mId6g$~J z#Ij**sxRxu2e6tfrN@?jiFtjiV*gG1rXaM!km8rhW$){D-7U5X>@HsWW$0yJhZsbh zDl~fAW=r-1_T@rSc?sGg?{DBTyeg9^I7s zbk0O)j{zX-tGFN&)X>LL1NyoJ=f`Q*l3=7Du?BJhk+mQUEmWtvH{(LQxwgiTI7Cos zC^^>3BcEtKJ7El#I*2&ddNPjhL9y{9s9GpW8IG8Z$Bi4jhhV(sRKpN6pOos8sZlkT z?9!pwkJVP#dfVS?>zE7Xne~HO^3wJ{TcH2AS!W6A2J&c-dbnI;6A8$%S=nef})zt`xyPS;MD(Y1|ZX7D}a=x44qyC;JsUy3rL%9%NvPy< zA3EYP)C_dc*t)&7^`Y#jfI{xh_bcZCNb%PMC1=$``xXkDTm9|wfSP5ozU{|gyN@i!&_ioQ0U=N_&@|4bK=A2@mzE^k-#=ZjS9H_)T)Kw_?$YTzT3Pv;=@9h6Q;P+FA6U<8~8C@Hedt z`27AZkyb5jl%v@LlgBL&s(tgL?gg1g`8@SCuJn$i4uyWc7le%I@@8Pax|{Yj3bVPi zbRA?p->DX_!U_~gAiGAfOnc)o@5q?}V8wg3Z=98>JpD&%NGDlVcq&$c!Zffha8Tak(-!BL^Y5c=g1^?nEaDS;-u-J;HlW_fvK!#LgQ8*x`} zHmA?g*2H($KS&8?;~oi2kg1D0nNASA<4QpV7-wv%vaL;6Sy|Ym`m1ZIf7sb^sz%Q@ zzaE13i$5WZy8HBSUeO>`#{b0Sr?`_K{2!^n@8>O*s8V_>Z`^OxNo(#WJr}blewr|% zm+pdT+oyke;+fq8GK+44Wh1)~0^h>YN?l$3&6nK8&90Grb6!aN+cbf&u&~6hv26{P z4IgnJoEj-#5W12=A{L2uG_P=G8@n+elD+ODw&@A!w*ZCH?b}xlD-6i=>c2&YQjNJ| zK2fMq;nRnyoTsO!HP0k95$W>ZpsN9b`{zD;E%!=XF8zl{5f_)i80$~*d~5FXdZrfttvsxc1}T?008PK(MZ+||123HQ-qyLR?=*op$XC7yea)2^01fzc<|=V+(tF9KP-kM4)OMxSUk5=YU#>Yf z?ae#xDZ*lKpVUvg@rvzlsl)DnNgdAV22-T9G=R->E6vc*ZDmW(7P-~GX&+t61nV=b zG7*efyWXer{CW0tozD|OBEpB?oxYH&hJah|9-U3-U!umVxiogvOmqF@zcr0bO%kNi zC#RidH3#oM-HD&oS#G7I{Sf^3Bh5t_QcDy+6T5Z%EzrUzz8rn%HP;DFYRe#K!%Bt` zApt`J5?Khx$*ggIv=3EziiDRFd=a;ne6y7Xzo2Zk z-hL@81u07J!(oxuSCGdvTBr3j7PM(|T=87?Tc&quJ03i%Axac$crIdX(*XYNyOj^p zR!Jb?#w_dm#Xk3TiDrZ2w0{FANvxI_ukWXSRo8Fh>e)){W)2j+cL4w(V>+k2-v6l+ z#MasMkkImsb70i2G3^om!!0!b0e}~)I66FA@t^j7G!-GR=)wz8CPP4 zhliJz)CJQk^@#TOD5`&|I-#B{=AQj7Nkb&I4v+U7Bl((zgle~vq5PMp@#_qK2QAVb z5*@gwTj7|?x;Tl8`E6R87ZQmrO5Kt}STq@f5Ij7A#h~0@zj}ZV`h`@{;=uEzr;4RI zP3cp{Z`@sXK9MS0u(#UM!g=|4pQe9(QSz)E2Y35mlZ0f@7rFDD(+SyF%BGg0Fv%_@ z)yWV(MA|nHbiY zr`7)_Xua3Z9%M7yabJv4DMrSmR@dms3wI=pkPv)vs*iJFIv1ICw)jexmoE3kdtNvE zna;ChYYJrM6XS27DGygwmj9i->PB~Z1U7MleSc@;mbFfBJ)&XKy7Dyk*w;Bf9kua3 z|I1@bzt0I`WE}^U(q5CMvc*TWiP?R*#f(on8s(K!CumE1oU@mmi(7rQ9{`>*GKKae zAX(ZkmLNLx^N90#)aa&-D`}G6=N;;1k(e#0b+&vu^RQJ;QHrT&hNM(gbrRy}&wMz} zD?S`SBNi%)WfkNyqC;^?UM64=cCf;RT!fqF3p{WkzznYONC(UZHo;lm=M|3GG@P*B z{)AiFY0i@0$kl>aCBK`_+zHNVe83^#>+AP0LB(S0bIvO0m+0|0%3$bS2@|=lsnCN% zI)4j9JnXY?!?vG9MlOM!thnz;MNI0L%UA{sW+vM6qv7)_rL26?by_MBfwVg#7m7pY zD}@H>>n!Iqn;1GmAwEof*v~HNdNdG6diO?a3-828dVF|JZ23~+MbcG2?9mak#PM83c`^K*ij_pk zo4tokxf$fl&RVHDlEbWGuTGVZaANBy1el^cOY^L|;{2e5Ih)%fkK)M|ikLBkC24PS zsWmA?&C*4_*W^(u4B_{=xEs}SCh4^8k=YPl8#s+DM;3}JN=KU_Q6;Mndc20crilyV zvXTTIHx!((n%?ICa`gUsG>YeaJ(3PAI?%Ls~`S}Vf1D0WyvW?i*r+! zY8+OqDV7q5wi!K98$Mm|X}x1^dm<2WI?91B%DEC6#J#dzEQb->nj15xVC`yp9)M8m z!yoo|7}uzQX#V(h9d)ml2&#`}%tOb`#b^sm`_bAp*2Vr|CTRhstqN5?y-`A#$UiB7uZTV_SqXk)LyVe`A_`f5H79J4GFFN$n;*S_rR?!J%d)V4kY**p!G z`74p;m3&2l6x8u*2_q+B=P+fvRKPL0a~Eo0JwiolRb&BOB zA%CdAd{U$`#d14@QQ*We1Oep^NAfgatqL0L)~0^d@Y-e(dhKU-{*&%IB_ZxD=hj)y zRg<1UQ4<`$vx80{{&9hD^iC5p1?e1vY;)TA>dgFy&Ibj|ft&N&?_-`9Z>^@WLU{1t z0Sa_0^9!v^9Ws!n&MUiJyB>9qDXw*=Y;VsjYKTdTn(qt0lbD!~>s=L5;ZRCS3JsS} z4;iE2YmN;=W1^Bs4EgzWQEM7>0fU&r9eTgI}2TSU0ae>A<(iZHCj zR=iQxMvAG%8TPr6vB21m6vmor!DtxIdB=O{`v6}C=n z>JF1jSjS4}CFKUHa;&3GBk>vEbGRR$4xwlV*?QfU%(fWlbf{s-DcxvdFHiHPeO!qcCiLHMIw=21Bn2P9LtWEQUaoBlYKt z3uC-9et1m{7mk?O=7Z(U2Q@KSWPP?xu2IIAi+R?qLySXC#vrt*&^+UqDrS>Od!X6s z9{a0tJoq4AFpw2^FcTT4W|P{8ZloY-Vf#n58xA+t{icrv=p~XF&Vsv&AmkJ`-t%0&ZspsB^-- zvn^$m<0b{KXh%Sx;Y|uGAs10YlVU{7xOlGY)az%g=1W&HQBC{J#V;ZIgBhlkSeQ6J zge7xOdaW@kY$3sugz*fD5ZrJ*CETuzW>Z4jRE6ZB%vtD^#KFbDjk4uOLgMkJPV+iN z!U~tLiwYY%5PEaDx&S`SwzaM^z9g~3-kunrG;tyqcE}dag$7}*hEP+};PsLp1L*n= zk=q&^<)0nLpS?0va;a0Ddi>;Z@9|oDVJhb$Ginjlez<9=vivgmZld$2YsWZ{?Ezm%2%Z@oX}vv$jL=wsjRQg1kG1Xm@^SS(HG_%7jt28o~s$Ln7f%@SD!U= zg&~uF!eJGkNk8n*upZ2?sd&EYF8u58d>?tz*Bcs_`h^V4{*q18VZ#!^xDsX3 zT{xwI*Z}~h&a)rgW(yZMysM&PRMc%d1Qy$D`*V7NYy|{Tw@AHEwr?W{`{V+D$?IAp z>&;)kp1X+!ZNPo`Jp}(=c9vrfSI{JF1IB&HiEEIiB0S(&Sb?1KU6^_ij>e=Z#dq7* z`$^U0OWAGS1&`=i-zT%x7*QNTcPvQOlh;K;k48s}ak~{s$DxTg21s5Iz z!-jrGG}f7nc!PqMk;aqz33W>6b&tzSGh_p-mdq~Hq0ysfYxQ1qXORosQW{*cT>R8&TlxXi*R&7SGUn8#7zrbPHsy|Mfn$OQP zc{lTDLB<)&0%49gey`6>C;YI(>|je~Yg3~2bd&{5`PEW8S&$`IijQ*$6aFv@Jk+eE zng87!@e~v3DUhHr^-kg8UZbzRkDW9q9TDSHvL;lxkCA1+E<=h1%Nh9GQUl=}G4}7; z-ZJrFr5_XmLVaakAVA}$=a$RIL;FWgk|#f~x^3}cCV2W@kT<*%$Ac5{e?-;r6Z~u| zaX*sXBWO~OCWfjdv80ZUfniPNo?}2?*uK1pgZP{^X965LhKQpW&~*$bl&b zT;BGq>LF)u4p8|d+PX*o#%xc$Ysa_MrSrDLu`t7}x(|OiuHEElVuU16_;*aTnqt=f zCaXlo$H|{4h?EwqtExr}*a(7Cv`ukq?phCbI2#V>;=fg?*z4aYnI}HMe|ypqPTwT* z0z>+j%-!$-Qx&w!ErU~5n|iIt)TIPKT*g~9Ew%1V3~yJ-N{+$I;C?}@{G5y7egmnR zP0y-Lu(|#C!hGL!0kdY+`i6GsBDYp);R39zX3j-)xsi!TQx^VH;RB|9GXskUrGxT3@pN;hC66zox{! za7qfwFQugqigMqQ?&mf7-UAbYO}|+>fmP7*5SJE-@j;lJYepv0$^LHBy3QjbR&G(^ z2O4P(7NM{{u2*tLKAwPc^JZQQl# zbKH>&9kl5Hblm7Q;{dGdswr3UZ)rG;sa%K*f+c!9xcvP$Mo ziBD!1Gfn*RgCyS~t=C#YjjWP84(5UoiHnu@b^|8ZDT8G$5|MYN ztY?i@{Yk6^Y$E1JC3|mEvnQG0v)2#Ku%b{{ZlyfFSNH0Sa4m46U|(;hZ>FWfH7X3A zmkU_gqyJ^UF#BNc=#S^cAODP+t*ntsjV_79Iay?yW`K3(a&`s$?!KLr_TCW|?INtF z9IRoF4-w7FYU8O6iQWfUn(o222Qswis-25ABF?qlHtP&~ZPV~~Ip#Msg(TY&45L{v zh?}u2c#X$c6cX-m-4J|X5!?DBJtx*2ymHzbymJwfaeJ37ZFk)38=)Q-8rmmRTVk^M;|ljdp}X zb*Cp@H(1mFGZLStYg03!wA;nUhXS{5XFRetbphFJ|G1pRehGUzz0EnB%z@*B%T^yi z3w_88C~Yp49W&Et{a(4s&C17OYl06#h~OW?dk6K&`*_n+%O~dBk88a)>oc5pvK-^= zGje!(|#qu#y#n$!Qj7W{t>YClYqo!*-qZw zqB^iqx@`89d%#KHFX=Z(U+(bvp1ftgIzq3cHIYd9o`s*e>bwI_3%UJDPqLAAyfgIjdkBHFu7BZPwioM)MLhy> zJ($wC6}9_qH4e!px#**Et~v8#f2g6pwV|~E6;?`J)}~2ESAY=AKqqUsiEa zATs69PRWXoNj>gW*l0U-oFh{?Sc3>UzpkFm;WU7h;(_Cz>Jr(>?J?ip@3zK0w)^Re zy9HIc7W9PKjTLSZ20}BrHYwYHdv9UUJ}JaBDwMe2hiF9zKHscdtO^JdnX^JhOyV&V zyZj1s6C98iZZ~f5H!b;zlIl@nl$abdW#rkI4;!MT+xQ_Qv8kFZ3j2ChJJ6BK)HU7m z*DIy@x@2sKW#l=6(gX5Kj7DtGixMN>7~MOUGEeSF5)%#_8L#ZCj`6Lq&oq_MvOGK> zt)q!sve8=Z0u^c5mWOR7oW>cd;9DpZ@xDWTFGcGXaXdyW$e|G)VSo!Fhgo(~e?a0J zJ~-PehTd-UGrs@31-ddF-6sBnLx{&C^MVY$N;u+7Pnd4g!YqfRO*|k`I6+@^e{%%_X<|NDV(Kk58`$Z zUqPZ|{2pp*?$U_kvpMn`?c5hhKMHSY?Ab3SjcI#Q8`x|?Jp&0ZOW5?>uH-fPcA^dy zzrckalCkj33)R#FSanr9-5C?n2T&EGfIH9 z1lR#2P!@&J=_-n!AukWfUMbAl(0Yn1+;?Di-@&I{*N3jQqI!47RLf#nU5?c_lBf0g z$0&GKT{6%vv@8mtzgGU}KSy3g;gMeP`v7oFql3)?#jJm6L8EL%kW7J}lDT`!v$u{< zJOzRF3ga15|661GN3r|s7Y*P)vCGlYcXfUT6rO&I;=?$@DAQ&%olg^$>p>2hDg@{7B)bGIa7@XVej&G+K_gN%&O2ZDz@$+zC9 zUu0OCgXVFW$|{S~xy#o30)dQfL`IS-1QuU7x_W+>4^FAhoZR+}Qc53P8m4+PG?R4G zm9=sq%sdGqy7&lB;rhAFB1|E1G@jCjBggO_{Twz0#V-yyxj=uxSEXFR1P_DITJD&0 zFKz*|pvl&?po$aa8)s+c&K$67;0F{XD4S_y9U@$}h~^xs92txH685_h4gI#n!3J^O zq`vDojo#g-lX9ukESj#OFPEDbm}1qI6El{ZD$%_}LTAyQoK26i?$4u7jT__fwzoIL zvtzt4`7vc?k@Kmi%9BUS-AT@*yNp0x{0Isvnm*Pr!ifJig*DZxnQ%uX6h#xbA`iuH zj-UVLK(1CbW~BRdZZj;RjKBkme=$kWN3i3({^y0O^eK__wH@}ce_btr3aY|$D^qi4 zxEgTr6GQO2hPydV-l1gNwA{CIhy)EY7L$OqWFS#{mr?w7p$EBZsG zvL!Js?&|8A%`JxcL{?UIFxz0uxX%0bFG;6cH2FO@lXcq4+!Pbyqy+?~akp18P5zt7 z5u5|+y;<@kfqV+?zfe^O24r=vpZak3%sZ*rNZY`kVPB`%a6iiQvQ9tuqqxTJ{e7I+ zZJ;Nv&-pZt{hAjHJaP}-9~*NqzC0L78l?XesC*dBt5<0iQ=Mc(w2B6ACv`v72xpxl zxo_ED;9bjn7VQV?M%&kH#{EnhWdbk8Hznn&Y~TJ1Ha5tjoc^ux@-pxWfB({cmpw(C zI@vTJp@(Q%+?i7O+(|uLz2+*_%|57#ImqPF4p!|oY%K`=PL%Y1$^S%0?e=Qsg@Z7l; zJ@wqjclK&i<(<N^!6-mpK+Br0#f8Y!B>hEy4I@ePDQ&vN5wPiN<7^xTcXi4mSLdOAyA%dZ>y zbGOe{JY@luF!9wZ%>BL0t}Ixi_oGjhMq&Zs@7_^8@YSyYAmXlMcWXz={SQ+`CfNXr<-@gu|UUFK?HEU{W>WaeJ{S*}&HsTva^^v7khd?Rd&!Nr+%Bt5-jC4;~@|fam4Q|2gFJ|+_8}Q~VRKNuh-fY6NnHpQC3(*5P zwcq)Pn=vH6PdeY4B()zf*x{OJz%RY5&XiNp30=RR>hucLlHE-EdE4XSymZvh%hI!* ze_ytgf7@fB0@MbHYosE*yGN%R0t}uPzxZ0q!;6yZ_N>!3?zp;YVHH<6bbnZ%V$MTv z@WlPAr|p0K`DY~fp8dGl9jI=?KoPVUxS6eyg7d;GGEfOAqjA{3V3VG&X+iUHI8)k5 z;9pQG9@wypzu~{3R8E>jR^;-Dof|n}=5^|6ukqP+L%!fgzHRY2S4jH`vO>aHZZ%Io z=)iU6{0m8UnEY~aZ@PUcDC@CFF~1ehz5bZXwdPLc{!@2)#LKcbPn9})&sdfBJ5`xG z`QHDo4)~^bW`M^ICK@|Y1G>pe#ykw9AS6B^-L&c^1cG-5)`lMlW_;rij2#@wIjD;< za)2s}0R4OUflnsXqyVccP9C+ijv1WzERUYduYZ)2kxsW0(e=*q!3TWdv}0zOc@IHZ zl2(68M12puC*G`AxUb&>gkDCQ+O#2%M4qZj?xv{uAvKI3x-|Lpdwda;EAK*#V&_`` zG>d~vy2IwQlBZTdf5*0l6ubDs7PUC5CBQ>)=Q%sqp1%f9ikXFv(#R^=XnWWBe6pwh z=lgV-j5~Uw4h6zd7DiFjw}j_f&+>I1Cal=Fm@)sK&EQ`LjVlnr-H@B-EWrdy^Rgqw z;rq;bBS0w@MQHJpgbB>)$huQqj~U~C`E7#VoT`C8`7wWn|4D-DED}(pEON6x@iNqE z0^|`hX#FEflDqB3Q_)y5_}B;9{XF?w%?faaRzxhX?V0B-%9${XNuGSYbN=H2Bv!}f zLzWP4N!NmQ>`yS=*W%27LVK zFG~BKMt*JIN|AiI^m^K%#&XGe-X?r0N^Gl3VN~4H@}laPtN2%Wn{NjB+C*7k$i?Yq zBm6DC$XaW4lFRt<(Lom=JU)#<$Ee)dx$OWrZz_ZBMXhsuC51oumPWU;gK91=C&S!` z71_6p6om-eocAu;`!bwgNnaHj6r`a{ba05pF#SntAMZwU=3}99sc~W}GMjF*TZ0q~ zd5JjmySO)kTstNE-rGfw4vg8>CaiD>?FO%cJ`V+be$O<5XwDGMmPsRG=iC1u*U^7W z{`}WWASV1XB)|ncdlLf=Rd|e(GKWXj=-Oa@--Y<{Q<$Cn<$TB|guG3opD~rd0!lVovE87JSN^eWk%iv`l;7T(Csso4PwsU((PvX#rTlx;dOUH~dYs(iM zVmT5J)Jb{1j{UU>x~$_J2l^eq%46Ya*R8|Sk<&QqZL=Uo%A-3H#bZx58%t{+?Bo!W zdX_aU#3&Fp&;!FLLpv{zR3|Z3F28Xp?VWf%R~h-<@TDF z5-oo&a!s{T{;7Y<41{J8+iGd(kK?+QE1pKZ)3hf75qXffNWP6KDT3ZgVCe3R{15H+swe$z90hM}IqxNRTDMAq4I z!qlb7w}7#shY!`8Ph}3>4Vj&m6P1JMiKM7 zaxV{FtKt&1xu#ipX|Z#VKrdO+ut0)j>fUcAX-RSCac)!%pH<&%J*#C}#3XJrHuf!Q zo8C9T2T%8g6Z_ypZiB4n!rfN>xF793y>%=)VKWkQ7l+b~Hs1}FeL|%M zeO!nVc3Zca$!AJ6&HLgH{HgEeVY>-8I|v0$$2g~gGsVXgOpqj@qGE7#Mha2zCa1JD z+RpgSb=S*h5f-&>X<~J->Nw8;k@`)e|8XHt8PNpeuuPC9^bIb1-ZLhAMN;^&uGDp% zxBIpSzb##ouSqUnBM%PMVDZb=G_rW9oX$xRwPsX9Q+40V@6-1^#fZD_qMTanFg3Y1 zq)TfirwzDthMj^kPfClwX0y{<*MOdHzuDeZio%TVj{DS44t!V1=IlS&T72`ba@2-m zK*udHXxX-k6b-Sl4L_TjzfVr}dG_>ODso`sS-y-71x5HP#e7i~nqrKgIn=^&y1W0M z&PZ7r;ID+bk3hD99$%*aPi*U03;#a2sc5vYce3M`jcmH&wJg zc6`1fhN-c8ZJ-(riJf-KsM2?ol5`*{rJPfmCQRP|>HFYdeA8?%@)Ld}w{ogXyp=Ry z#HKb3krDL}c#!b&@hwjbS*xJs;t!%y{iJf-w1k9yi_yQ{lXa3G%iED<&;7g{U4e={ zh)m<1Cyb~XA}0BA2(Z^KTY0v% z&hX4zGnpJypNnhAP3{FJ+&;Z{tEE9*iKKBFGnRHv_b&_R5V97Bl^rurOSH0c#s(G~ z0wYHFKFCx0C)okc)U!$kFxpQXIU?z|{nY4LyXP{h>yw_}&n|eGr&EcqOQn_k%cJKM z)%N81ArMC)xR7JlZgEF+LHT#*cr?at%Rd&wW3}`og!>!w-(M=Y|cC z>s@e{k#HSW&LI!nE|n<=Ce9jGvSXZ?x!q#u=ylmJ1wmZX#a~tTBO?_Oi`P(gtR|(%5(CD zgh&|{Iodc%96_TcXa(0ajK;9NL1m<&uKCCiRn582K&mDAJN}R;@~3T`ot-UP4aK`NZFV4tqp_|w>_M&leimP|cHQEvE~H5` z-6Y3Xd(s5}G%Q={3FFE3KcveJ^~$Zf*gzPSGWNJ1W)d%muHKXmKm_`AHLCh27R@hu2Fxj6(0%6%hP(Hqu^V@qf2tVt>{B?wvcx!Omf|j zzS+ngd{?6CX9Y^N8@g#)x6ft}MCQLLEn}&3D(2E6f7_}|ZYfTsn$1+j0u0E1-2qwZ zSI?3!y+6RSgi?W8h7i@_^QNW3#ip4BjcL7AO|)9ikUha0@WY{#V)0|y1LYsuf32gj zhIQmtnig719+h8y%f+IBx|jjh@|90;gy#kCgK`BS!VOZ=2GQWxr@ZH{AQ;4M>~NOG zBE_Ja9(006Rd9xgw+zWgmzWR`$A~t+p}*4a=Im5$K6!FUxpOvfx&HQ>3KqlJf=f?J zupzX%-lcUCpfQ@6iMNDSd@>-ASmbnh zH#Y0Mq-y44dlVL`1UZjEumo#IDM2tWhyf_!wo7|J)$t(02NaPj_XSyXu^C+cpw^W0 z{1xh2)t4r#`eD<3cwk_i$1|GP@1mI?t~|^P4mbWP%?QK!e9gOs`Rpoy@nVqWb@`Nj z9Ht_>jPub%hZLwC8Lv0Mlya-}tFb)R@_U+YUApCs4j5u26jILS(#06pmg2Gxz<_r) z!Hx$Q`k~~noA-Z-N;s06oL!|hY6-}rYqh-|Az;!HH}|#2%vRSv=;h2=N^EvagX5TE zGg)KAkxy#w-2UA{Jo2?_MS5UK|L+kd<*y_~rq5$DS;`}@+Y!pfXUV!jx_@KiMW_g+ zX1fi2h;&Jt*2#aL>YkRqa~@`}dSz63q-E6|-> z5-qid98<*3XcH5=%qhE8)z&BFV38MNL?;| zpK99fiqm6grAAlO*|us!tU0D2#f?rV8VVbR%xlj(F$gZFWt_=hn5A#Y2R^zb5pBen z;l<<|4SD+EI(*gOMmO}Vw}B?6$w~EX6ZAB$@f{xHc9s--N948Oo&!-0tH>lK)ZA3r zo(81$HS~OHZWHbG3!Tn5=apERk%L`@W%7AeuP6%pCVNoyY=USb8$%0xSK*g+8UNE& z`4#Z_EU-lEGlw5HJeFDcNpphdUbau{amR!_Z$S=#VRPP-N17h1&n!Qt12$d zFzxI{SI_K=5SHLn2c!!S0tCd7Ol7jKbFSi}AM_-_wIy-5bBw>SS@A9*L?vvb&*B7a7E*>+NT z7VZ(`miR6__4$g<1iS2eKI@q4A78x)l;}84qf#Hd^C+1%x5U)v(A$`BwHTX%a*^Z7 z*Sofh8BJif>XTbu>?VMZqDm5yA+T5FV0667Ikx~2Yfu#Z_lIHvBe!v`<(sh09QjGZ^}yHqTk=Pk0Cd_fnH`+|Exg5AsQ zev~F+$Ri4nj9A_mDF0n7tyMq8!U^9P6G;7f&-|PdZa2Ga$?`hnW>bAYmd*{pO=GGZ zkqJR7Jzj0>;Y|a$^YbCooy4w7Q@AcI;y-Al%L2F#MmJLP*Hq#IBhevzfevP`(4G#9p zN`{6H+iA8nzrELZ+x6Q`#KB7|?nRyG?a}L`9T#=}pdYCMCg~w;Q~LAgT@uLk2U=Q{ zGF$XM-QHGK*$;Vm6Lmt0mo7uj2gjIEj-3Q_(Ov&dSbE85^W>>Ex88)_@7)FEE4zvX z$^g3=yqyjOwWhAJ7TGzQg)1vd_~T+T4U8`tkJxEe0X(WZN$^X3mhvt`gxQZ54_>^0 z5l~xMTCVR8vVqp^yyeTA^JSb`>HGwHm*~~u{nfsuy|-K#Q@^qQ@G1OE2|}Yg=r$is z$Y1@_Di%n`uY*WJQ0QwmUbrwEqG;~+S=UM>+?B<8{u$#i(hOpv=vXKdaQ3vwsCMPJ z0+FG^cYP>ZJut9g_FPiR?-F*IcI+oWswu#e0OrN3P1|ZpbF-q9$5HgKVa<{h^?K_1 z_4iki{^0%bN$|rhSK$hSG6p9yAESj`qw`t2WFtM>QBy5|-|qy;Ie1f3knGa2$KL@9 zYQ$DxeM4!j!Q@CaV{Y?08G@tB$;~d0K<(nMT8YYB-{GoeOLK+(#1`K; z^m_vRY6Q&Hva4BpxSAIQ1rMuz_Oq#Yi(6V+uGP+b_e^uWWR`V(0nE?jTm2uw(zwVL zz?*{8?lg$g+3QvM#!PSoTjyPN{U46hBXVHvMPzw1dVZ?&ms*qI0B#S$8uzA6v%r5o z&Hwx&mD+>lCmrtxw| z+WnR?W4SU0q%p~tH1HU8Y&5Y7SYhlOQujvlDXR*~_<1oPGPPurOz>GOJelP4Uau4m zDW1+~kKj2yVxBDAZz-CUj~P6qoEoW)n^XCou_T97niYNS$gSkif~0xuO{lEt)r2VnMl*7a{tTM z@@L@mvx&p;Z?IGS763ch(o05z%N;EjkksWXNkX>@(Ay~*XM+|gh!m+OUC+?6_ZV%- zp0;2GDC2VIQ-fnnf_!1YL)>Rt3?;mAOtQjHa=?;VQ{8{>%qr zVWFhSC{+B6qgQq5a60%kF)`6hb0HCweV=v*g@@1xbM6uB4GzCF@I7bh!bHKoO-#Zo z!hb$|vhN60u9AD6i!c!C0ZZoq1?LN2cid*g?D$c(F7S7(x`$5ytzF#c17J~wQizc#?ifAw|wyj1P%IQg>}4`|=DhNSP` z@`jj6Hizi2uTW0~e3GZ8w(GX7h=riW>O(tm`E=wBI{dxzr?RoufMbq#+x_x9mbS~< z;5EIw7hOX~Jm-CP_|1uZki0yXb!c$!AhkDgwwDbV;nPvKytn)v0(teY0Ra`|)tSg; zCs`9(TMJ8M{_i#4>{X$`Eapp6DNlkX(;ANB4r7M{H;LF0%hLa2Hqe7py`m-^4w5=}2vuQrH z#3sGyAdHtY$eG4f2}pc_-faJyj(VkpXVG}++%!b%*DtnZzZ*Nv)+~!vq>|yAI1H>7 zlv(5@;M>+u@xJA3%MJOVWMy--Umm{cwg$geTy)JwFaI~YH|}?%t?;Il_)JpOEa2R- zu+nCc&><@D#e{eV9_Td(w99U;ZN0t^VS!msY>O|aO8;?(p zgylD5 zR|-8K%AhR2J#EV%kCKAU|EwvTxR8cUSi-;uS|VvAOb(xRLfRy~@tsrha9}&Xq4z^; zIDsU>nML|@EDzr`Y`p893{7XXoZ1G6#RQth(t49QyjJ3iPuHD@vPNx#a5J`ARN#bsift#W6p$~owS6mX9P z{f=pTSfZ~(<3CK6TYKH@a6-~{*;m<1z4MdoODnqg?u1B_N6Iiv9H;CtWePt+%rJ z?w@|FXS-@TKVGdZ%w6!<)@E)M30tL;<|psx9-0xHH+bSVQ27=<5wSo+glWxv88uJl z$tVDmH?DA+b!G|Ph+B4A9y^o`dj1=M`&WPs}a$z#X;T~# zkd|(c24U!yP6ufiy5lUKecrv#du`7bFE2j8VhwBk@B5ejZW*P%h-FVh;HYx;ssCdL z8O=g88C*0I&^gUr92ck56DzuJnsMDnlC0gd2@vG%KuXI~P=i~BsOk-k2q~n{r&q#8 zL4*W^+;Wb+eM{hvQgH(!gRfN|Vul!?jt8p`Y3PD+Rq&y=5FFT-Y)~b1;uT>&nrfhM0&@+EjsZCGmT&F&7 z$ily!A2rQ?=D>f}Y$|PF$R^}45n)ir1kzg6Jc_p?br*4-B+VQe2()h*td#>` z9*q?x%=xj{^vs7Law_$){@dfiNwJqZmkWP<7{UZ+raf7^Q1-l2r)>gH zjgnOy7W_M%H<0k5SSi7(G(J`q1=@;%rreanazxA8>qr~?Q4z;Vd92fYh-}LTU*19s z21iLnH+s5b3k!<_phcIPYIdE2a&%$3kcGsGeN&AP43T3wq|(-cP-T@s$4Hr4J*HHb zYtqtmb2Y0jJrx4|N6b!7&*=K~ASPmVUVL`Bw(jvgS0r83UvHG!Nx?xvl(veV1JEYr zvVMrn>JIPvUA>+*LA}F(csuqX*IN8y-Uo;n|AwA zfMN*yLj3ch-Zq_$?TJUexx*q5ButLe#RKB26-g@32#5OJZu`PY--O~d$d+Nx$>Xin zpZIo;zdx*z{}cY#$~PKZAiCK)3G3vo4ryKCpa=NuWnqy}a`~>tpVgH!{I(x01b+nS z{2^xE7WT*m$m+8hHoIVcu!1J|2ynRzrL69Hf0Xp&{HkT7vp&fR%jsSX&z_#ArY`-O zI#aW(_Eg@8mpxzFO3b7--{h>z5ud`@R;@oqkG|%YJCs*6e!*4-S|OKBwtHU ztks`Bn}OP`PJl41VndVrCo2?B46N5lz-?iV=Bnv-Q`#iD4$-EQGWozhhF{pME~ESu z*rc;F=g_FuyxRCW&h<*8uI07tz^y>sq<*sgvlPTM&q9aI?xRCtmk%hTn(AY0KKSIc z99y;@?9ItVr7qKO8s)a$_IYOG3|wc|@2&K*c$dpA&=s@;{K%xm7P)I)-Q=s#A!&W@|A~X}qPvx19JjSxBZ2Z+P+o+TO{x{oHd-J@z`MC$k}qtbpL_QH%pt$o8j> z{sV6Qu!_(JMy603I>N}qnVl!Sw7%6evo;wBp& zL@_Tyu2Y=j*w^ROwbtm*zy&oDu-G?|^aoF-Hv>M&``_3q22I%Pm105NeiJUVzTL7| zYP?;NpFY@SJGZ{X36#ld#)J)>d&Tw}<=Kdc(tUQ{fr)u(Gm*U#wo4dviLlfVwHZUY zHh zUJ^7X1$OUkrj%c|SAMFdD6%J-0MS)=rnTaTaPUq_Weugb@X?K=35$(U0s(Vrmu%cA zv$<_FeCUc(&hQX93NAq-5(lrM4n)dwTC%uShPM;9s3c+=y~2(Ju}`<`f!Bu9&rz{r zek_`2Wa0DPO_u~e(H!w*wk!+xzPZJtoKcxPkF++77V3Q35y(!;<^4nPxbh|RBDZZG zbSKQ`X2ZjX2>9-9$SSoUj_EDNswfTZfYZ+uk2f1B#bnzQDKf>QQaDrhmTMr0K=;7& zYnKHQyPVp`A3o`%wC{QRu_kSB+oL5e$RMb$9$fu9Ul}K7Z}4p5R{Wdv(txTN`MrR! z-fG&(@Zdx8`1epG$>8GnxDJwQ_Epo+OBtN$A9lLM+G`%s&R4C@!Gv!vL;By6Z@F3# zEsipw!z{%}Cch=ISA6xb8PT%tP_&~P%*G*+P@mWU^ojjma#+fSfEmVFgJPq)@AWM$ zaXX%YkO;R!ppiQk9Yj45`yPZ>tY){WD(PL8Ni~K7z3fczyhD>6T@K_~ASKKUp~Fev z8P*1pM02#wz>rv27U=LLm6HSI>Y<=qmU9He5b$c6w7`NdU zVu#*0Ct(;Hb_w|%L9fW@R)En2Qj=n83?9q62*nWqCzMvT6mS0=r zd2pdFKNyA-!ITgwF?5uqSMMJ6=!wF9k?V zwk9PSJ2k!)+P1P;!gnLwqg$$7O_Xj>2eogdXm$l|QQ8cHfkf`$!g%y8-!6QtIXj*S z8a(>7rj*oFpvdo6(RJ?uKFej$;lk-#s6&nV#lgQWQ(v(@hI=v z*Lx_*GFc{5t6K_dGaP77PzXuinAO6uG;FP5aR_eA^JTy3Ky4RwCjJALm36J>rLxn8 z|Ec$bxGyE;VaE$RY0)f`sRlX6ey4iM_l}Y2NeNtnxhp-(V>id|zxkP&yMksX2KVDy z=(5DVeV97CeTeMp#4HM@_!UHJ4iDj7nX4zbxK&CIFOPPqV?0OKdb8riPiZCiq z>`(*UVg>(>99{|On6P}UTtN%rW0s^Q76;dmRJSdkU3o!>b0J+MYoNKt02X;LBQe8zHSh7G$^+- zd$}YWSN^dfA;?$|a>Jr`(5Y)m+~>oh8L-Aky=_L6=gCKbUuibuk{)z&kMF0(1I$c@ z2KR4uL$&G5%%8T(>~f7UKDQMOWik+4B*eggcKPy~5nkHHitCdPL{?nZ>`6d$!5;v_ zR~vEIuE6gsVIj*Zp44hi;3|89d>rApW^AdaO2s{Ix7& zOxAYi=fMIAkjeLDcB@Czg72GG+snjm+X&@luRhsk@)1-!z#>n|zq0ED<@&{1&WF5H zl%_bsY6#q;4E-cXQN`Gg!di)I7w!)H{PCCk|6~Ew=d`sue4YF^KlC5oQZ5^}3>T8E zQbGR@cnxJ{2?#qjqpMS#KobFk=l?}m17Fcn36KPRgN#mD{14s@t^F#e!LwPl=bz9- zR7oQ#qjfX+vM?}#*qgTNswN_niT$--lSA|bKEAK=)NC)S0U|z%lwF^i4#x5*(ZZ8;>TJSBB~bVQR{+!KK5}D0rNGOOjv~C?7%e9y3X2qnU!Sk?MvnQr~-Vw2gC%UR%9ntw|KG7V%M@QL<0u-aHRkoCgF<~zvgT?xc1OW?{Py` zOXc?47EDddv-3kriA0YJ=}6OOIMB32>4TMxvGsK>?`dA>S=~OH9qe$LH#h(6zEZ&5 z{+^WxvIB)J)W03NBNlO?Kv6~yOw2hfOyr=$sNSc(KV4GvfT&XGe?El&Asqj;8-0F% z*Yxs-ta~@MRg;WL)~}IEzfJ{6;nJ}>jE4bdgoLDI$VH9Thz#ASi{(&4k~9DNV}l?e zVbPE|lryrchn>;Kx{CL9@4N-8QAU(qH}_>>obv@ERh7WYG;wYcMj1lS0qdK0(Xlt)gwsv7&&IlSB98I3ow)g>?M=37;Q7w_ zdQ?Mk@xkxTuYR)#ml$|_4iu&~pyK_|V|OlEIg*8!Iy$?b?av?8_wOrQrPpH&Jse4< zM2pHB=Zun*qM5lR5-v|sr;-VfX1eXO7wn0+2`2#mHEGz^v7xkN7yRJ{?xCTsE^NmP zl!MR29Xl8k{MC)aamUV(do3hle)}kAZ(jtqwCu%nv(3p@Bp{Z+27O@X<>1$%_XU#C ze3p)gL;;;|@pX{-VxRV_SFA7Kea`#)0w!yi#7l)lL|Q=at6n*h892@(B%f)!a(Oap zfXp0U$4mXf_T|PU^i({0(GQzKrOW#BC<{GyKJR_tZ9QCy>&j)^sP{EHTvWrq@gb-R zNN{r#SUjA(?pqlk%@t+{<}?yh}&GGID?%gs)!64f^{`19RPZ$7PRFXN3*&S!4L~4l$4I zi|NVJ$Qq~9CXzquGarRGxH(3QIo5RS8k~Y<=vFLp9&NJvv##0kbkBVkpYcHvhsvGm zHyzNE4a=uiQ}QMUw9dRPTxlvc{3F|Z7Q2Zfd)h!gxOHqd`8*LD&u^|?(O`EWKJW^C zUbs?oLBF|uo2j+Dji%y87l>V%K{$qZJ2+_T=so64tfuj!2XM;A8Ph}-?ZNqwGA#i{cFNB=8FJfP~fA^!#l{|>@zNtx1=WaDe3${ zu{FiPi@QLrlo^AeeYu*oR8&i%v9~+U9P?5mX~TW|1Hh%c@bE65D%OFndw}EGPLqT$DCkhr(R~(7PYiv%xUBE0nzeO3KDW)7Axvf5zGtN84Z(zs@ygKH ziW~tpJIj2^qWn3A@>KZ#Jc+-^do#Vnzdl<;cajdFe)LPeP25%vtdNDd57oFZqNmsQyzMm$e5A9d5+)AMHS_lqnync@oV=b`Mhd8|TBBO(IFEEdDE z%3ZSA`ZKRFq^VRRG?S+Nf?dL!YFc#HeR&PaTKhYU2b!CY41%#PfTr?Gad)4h#?6rr z*qc+GuzKz}KlT13Yg=@%g++?}b_$R_7CSL7Bg2x_paAdK923UYe>AT9x$15I>q^Vi zBKK}wHxF4I^~;9$yX~K3rniIYJ?i?~o7lTvYnkxqZf@Oi>dPWX598qHwXICEzpH3P z9h1~91>D-xWoEYkshEe2G!*4`*5-HA^l+9T;afk;+iuGcw;vOQ*L28e@knv#+tbfu zcg#0B{gi5;+Hu>ISr=oTxq|OKzE4JjDu!Z*kupPL@JB!;&UAz5J3HrWeE{hFuk+i9 z4$_~b&Q0U;lTiTeiEV^mnemFNXW1zDBdmNMyy*(c(E zNK9AQ#7571=Eu-Ic1_8;Ku-Sp@>woWSS2)DJ;{vj8TXS%7;D?(6&%`cw4a#zUWPk2 z&bqMMTD~ur*vb%(Y?gDm@$+uLrqrP{d8D$W)+Kzc+C5cs;oW(r3uHT?(~F^!Ek#)x z-1ZMYSsIy426u45>>79J*QsDRQI=2{f1teH7Y(%c>P?-jEsdP}PihdAS_>&(JB|FR zQ>`UB<%ZQ2)~HZ=ltf$qBXkfhcBYwqHU=mP0nH{_EmOoGjN*DStN`RyV+j<0)An1q z{@TMv@{>Oa8T6Jy?Giee4A7-LX0oNwFqP!^Q)pGxn5GBX^r@a8kV${P)j(K|63_0( zuOhS#{N$20Su3KTjrcLO!-14vs2W!yp5LNq@8vb@nkHxSj$Ch@C5EWCFU`7S{TF-y z%R7Os?2Qb&2QV}w)s zFD=0(EJD?IcoJyC!<+5ey($%sf0p-Uo{T2dSZtpR{o78UoUq~)t74XGlu8rhsbXl(9qug72aY+^G8jp zoP0cGgWh8Uo#Uv4%H1|xw4$XSGR_B@ud{QH<0DM{2W7>Y9qkg12Tk3n*JMkS-fD=U z=CFZ}`isW+CB^qKT;uO3Ep_Zp_l-KQ%3;vy)3Sn zo+`5#0STSV%EnLP5Ph*pu}g6s6wYjE>VP_1?6gF<)>*asB$4~)u#fTyn8aITc^Vf0 z+e2wRzBnw4iKp2pWJJqV2|-C3!*4w&29@*#@SrR}Ye)%v@oH00A4t^(R3G~A-NSwt zk`O=tA=$1VdWAbmMKa{O@Mo*^EC|B3G>D9`4f9H7<@?GMZ2I*R#)MpG=jAh(g|s!F z@W_|Lzq@agzV0^>o&DtOP%$h+nl^(Ac4cgYC9@vRhd^cttZsH3?~Pk0|TUUH1VH1xYhIg+uSZ~Cmqxt5$mEf^%DZWq#oPxL# zQsTVelD|MwV+x1++Tk%lFwb+N`MRIB*%*BjkTcQn+g5|hKjir5p6wFg2nryyAe25V z4pEcPAfFO!%~iW5T+F@iB-^6Y*N+co(lec=@IKPe4|9$xH?bZjO5^ozb7^72CAzg9#5vtv{nC}nXSt)NdiLhjmX z?)59QxYYL==UDF$fG0`f;iU!luHGi1O-Q>>%57rFhsasN7a_e_q;(B?kc_QBX_JD6 z*rhsIz_K-+^Kr|TXJRuV$hpFG|2_+2FcW-?RHZ*M9qj(dj9c%;xB*q!4SM*=oSCU2 zwZDzc7yVSuMBYGa`tszw8XB1S zI8>ZGSfOn=C*&yV70JRv;h{Wg5FP9$`IT-KxNJ<-8msL?(DkUxj1Q!MO~z!qzh(^fXlM*6eW%XI2`Cf<$IXtOst zqoUncs3B@bYqd;)r!A~%{8;tmP=UcQ_S7g9;*RTKkRQ41&(6NVgW&(R8_ zJ#-k(^z+{mVKG10$6-uq&)oH%19+SDRK*L-nLQ0fiY>t82oLGMgd}}(2|w&=3+qfH z>7h`W2Y;uF7|UQr)wG@T%`d3j-Oh7fns`X7R`;62+K9vzQo6>dYv|$a)E6?pLI3WPxbK*+{3!^n zj3O7=x_#s&5H@cXdXjw|TS^N{MWJ603jUl#>65+6i%b6Y`x;9ta7R}R+2VO#;d9xM zetmPoC;`6k)S*^TmW}#!aD`*b5{JYXxHXU0vK_r()Jq&xSjcCAW&o%!ZeyTT<`H!5 zFHdi)*`!DZ3UE6l z0`dHr!4Kz6#n@RI0To{3`ggJ^x^rt9ee~QHhD@moL2cEvCLFYfT*p(t*s zWQ&QX1( zNyifZUl1ZHkvqnm)^_1BupmGzgWEX}c9aOaLRGcxNOq+k!=N(OfYm#d)B`wXX&h###H;qXS z6hwz7Fk5O(%JdRmN3c2|inz!6`714o8dPVbn}-&5KX%7gnLZ?3U35Tr*B^*Sw}OoW zaXxPl@0=2(=x)V`rMJSjCTMXa=vr_=tqK+tyTYrM7ca}q+s=WNDvZo;^@w^iD%D)f zeEX7wK?v)$!-)_&s7w>MY#F^awgN?2dHMknP^HS`r-2fLcsFLvTwc6xl3Yan@P4Gr zj-28g0NF^qc#WtZD>MH|Gcg61^vK@vD~)>)aa-q-SCS~sh8xftUTyW{(HMYXyq$hu z+sSa!^sU&1axisk?`FHcmHISOphF#B*wC-%n^N;y-@=r*AEp`%(4p!sqksrfH2TRJ z`pZzc4xo+q8Xw%D^;K5NML9Au7T}{!T(b^u3nOJjW^Tnko6$|&07fy41+w?r)|{$t z$ILr_YCe!48l~CE2R#?uQS+QYlZl{tg@ash!9}Y)SwI;AR(e_eMxpVBhYQxydL{o3 zr^Ot=MkHPydNV$6!4~wJBd>l?R^xE*@VT$Z?%c{jlg^DUIcj_*+j&~V0I5z z_anUfPcKZYNi;;(KjWBp$0%bLN=i1i*mb<67!+Ptd~7by#s`Dq!lnq%Z@QqU_MJ(& zorv*MD*ta1hHXnDTkSa*$5@1AyFuKRQgQvH>+Oz-yv-NyRnnCD9=<%@MIa(UGB8QsC&x*W)%87V(Scb^X@A+@0jAj$weCCTZo)?7u|Vji)<#~7c!iE_~FA~ z+7G;|>r%_!1r}lLSBt5Smu}M1vqI$bwQ77C%b)w*@=AWo8{4*#L%%(W^nb*CYJlN4 z#0z|*lwC-~moM?e@eSEZqG;RSZmtexzq=N+jLNx2hBmQ7YeQO7tNzqlsnOx#J^cu( zFlz#wE~95#&zN$M3BSL9FL!GK-ENRS2KjE3^~Czy>#?s1EVv-=Lhg6VT`r#xOh!E0 z8m$g)0o*_e<(c5%qT@qh%HZ+y$np<6pK(9Qi>(E>Q`^;_dK7SH8#1qx*)JhP=$^N1 z3wIpT^d2%kPsbL##r@g3|MGA0z>%i`N&(7a_GP^PLJra}myGD2ysSfz$ZE<7MZv+H$c!yV>`@bk#YHg%d=`DHt`9 zYxIsusI^FHwji%9EWg91NP z81(Fxt~}(wVVnQ;6;c6UK2>Ycvx^I=>gA;!mCoCv+5;q9vYgKB_QYR&c*%gQGMEDhfc%+nr7I-qx2bF5 zQdAO94hsuyBfadIsnV6R9Ys>Ihuaub#YX1S#}PC!MKp-O}Cr?6Jm8B7H9+rzA^0>Pq#k|KdRlGOQ7U6@jU7C zZop0d^Ux&L;c8!_xJy;HUKsVO+K9a3CSwEP z06sl}JX72$e-SHwd;vUs`%KV$ zW=%a!YuK$Qjg$4nsWWm<8Qa;%$f#A#ZkzPXc}+v`nZzxN=r15_D!OEsN58?=ZH0y? zGp7pAM%zI9ArLqx;jRJs0Dct5X&^NuCc7X;j@ z7N6lfe+9h%Lnf)1P2mDhMv8aah;`-l^01Foz^lp@!i~3EQcmPr=#c(*yLPsA(z8vT z=P^qpHLLK~@>n2<<5trfGM&~-==Q|U>_JCF`UQB5<#Dy=vVwdR>wS@&s{ZYF022`x zoh_e=t395N^x63R=vnB-`}qeghRjLj&*6ttkM`Em{RpX;4jUf-B$+}(<0z5j_81rU z8#TJ#8&MSZUT$ox1S;>-#9vXvcE)Uf73l*hRC@F~!a$7TxnCJh`-ZN9Lf{5jcC@YO zDV}5)sWr?%M5#AV?JdZxjI3kpKQHG0!7H)vnsnrsk)5o37kJtE?x)+ym1;E(+V8$u zntIT3MDoNpag3;~D=HITV)H9jM!E=XQJ=_JyZ~g-Ru%evd1|j!<9vRhy^POYwS+2; z*l_f4XzOd0eAw8CDM{IYfPt2ce8r>2Io)|kp8BwwsY=n$h{*V@NhcMnNsQ#e^hzCk zOlm}wg?yJYD!kc#_WVf-R+5G{cWY>a}&9+&Sm$Kd{sW^7j{N z_ry+74bV~6YrZlEYaa+nHi6%N8PNjDKy<{^qyK~xt^ko6Ns|pglhMZW(pXCEM+B>b zg4?FYjRM5F{gq>UqEtcjEhxz*UZH`ZNuxdb(4Vwn#VUe7GT}Fxl_Sx`3&4O`x}k|c zd6XkDx=gi9O57MXgMXIq)V*$TV(vudLFh(X7n{3+2Mz1NylKf zgnW%1Y41~F>MX+e2Z8e1-8Q0C6X@>jaW+fs^q^KJ$_X}i1Hw;-jMun%runy^4%Ejn zAR2r0Y1EJZ-zE<-W8FAhVCDOX83nx<41Lgbk8te?Y(8oz$;fEC;qc2VcHd6He~1Et z?Dl2+0Tid3TZP3KTMsPB239%zbf{-gL`iG8s0MpFq6&{JtfNec-nF2BgYB}qC|jrb z;)J&4T@oJNmzZLQ40t2VNIn34&=b6>n1<=!aJnNr=rZe9S4#Vu2Xj!(4uGmEod&kN z+_D=8+B8()8SfeDyU-$9v00@q2tcgg&F>qm0yPfhp=uCJxuv9#n;(h9VsuBS64O%s zVXSAnSd(p9pDzbtG95=m7poJhVfph+r>+K7(_($7+jvBo&_l2=pR*aK&Cx2Sdt)BGw21t(;? zu+(olldTp;fYjp>k+ghKG!}LEM5izt_Q^^AOpuZ7FH3DdUqYA08k-O#Kc@i@~ zyBI%RY1!w;{n3U48M%q-r1W!T*N**_PG zQ0Fddy(RMv;Vxu5&7-$wlpkjS`7*(c*}81S@};14aL0M19KO4np5n>z_XnKnUE)G0 zIPug2n$H1;jLGZD5%h;xW_&jTD92G5_D!kIsa&-;w;r-r(_)E06bVaZ7KSAE38U0w zqRCR~H7;~Xcd02=fY+4mR-Uc3(`=m#qrOc1eo2hjDwVy~>9UDxvq5$p`<2L)nF2iP zf$wX5leZK1SIlROBqe;X11vE|8KDiL0ac#%Qw-SA_--rFQjh>+urM0NF9K}IOA*RaNBDN$# zphkwdsDJH;g;PzgZ){%MSN>c` zjF(5pv-3MGTZ>^7mO|8nHoB|kk^e?WRm@oLH03czUQYL^6wnFQc=!dbw41|jOYjiq2%Xm&7c^=k7f_+j@ugkF-6(~!SGOB;^>hM- z!5-fhsEp~GFF7J^DT_L)wA(P~A&s_3(i$*qoxAQ{+Tjd3ZC~ttXufDDX+iDHnG74? zB@Y#n{pi`|u zm#~oo>ae$yuN&t2NbRAD^u#(U337`ICKx!miElkR6Q87FT7j7)fuzUuL)l@kOa_F( zRQZ8&9xhe9XDN$IB@-hef;~AB+M<-VS2IZEJwlKOqEt1bl82%dpN8Y%x0) z2jvLHL%aKfTh}4P7p!pmOv9E~BgQAadA-tZ{pL9G*@Vz402<|YlZ|SNJl55g()XCs z=|RlOMwPm;6Z^3gJ$m#grFQAqid)30T>VeZNI>w|o6{K*YOK8)3RF#9{_RL9qSdha_Ogs=}6J)baXh+tfkM zi||Tgv_6zAN4p0>T?8dHDs52bl;1 z{mMj$V#Fqygm$$+G!0&Jqf$W|yesK@A#my>mnxDkjCoga4vYr3`9aG-4bB<%#-s6u z&rd<1Q-U1Rb;$|J?9UN!PeFg&nw6I+tof4AA6S3AM;z!)fkP~A9)KiE#jG2*wVnjQ zBA^*E%4CebHVKUNYHcsNyIVKrXJ(!}){rE}9`FV8XIby4&{U1S6`zJa`l{w^B8|W{ zTrkQ~@(!8$@WBM=Bz&LVz{+|wU$89IBXP^@u;O~d(nq8H5=z+lK?|3XSYIp@rvkQ3 zH}q=Txv%#yo0RyCO)(ny##=l=(VA`L)v^zQhk|w(cUl(2{z^VU z8e9zv&LAeNkkr`nGbUr{GLJ~#5)3E2y5Sl>uXWIuiR#^q=ic1n^B?}zAlR-?i!mwd zJz-e%A)q8#fN&eT~|1X4P35Y2U zAi$N4X`NNbXkPyAtX8a7Qxu6L)|gXzG8^*)gI`{_I!suFMYxV;JhkHqcPXy9=K&*-bkP z+tz-HnqT~ML4EpEenxG8&x7V@4KYNbKOZ$PYpkj2J4pz zf|(TGt_pEmZVO?$eYYGCXpEAV)$8~m?||Q3Ntl;YfUE_03l%D?m}v$7C8@OU)GOUT zYL#G@TUL*^7`F(q+?exLs_t_)6S!EOBM;4s<44Blz@Fk?P1)_<$OPi8ryHg+PU-`E z=#HBww=Nz%q*db~Z!()<60Q8>y!fUYdkp(Q)b=GH`mx*IlDn=ToWE{&VyQFFi!7FZ zH@m|5mtB{T9SVH~oY|s{lt84wPuvVX4!YsT>&Xcc@}#7m**^}Vrjy=i*|2Jr%-8L@ ztharMR9o3cnm=OUo)kc15^t~H*b_Wt?2VtuPU7x+V}B#9*{p( zS5wiU4oiNo_%%cU`;k0KP>J3b;$v9=2;QvTC^BNXRSIWOU=O&He^E+@ClvnJn*j12 zHeon1y3j+%z}>*I|HlQTB`)gIA5JGqnqntzQUuG>DB;zRUq$ z6LGXb>F(YP+zn+$A2a;^hqE7iwmmtxxT2^xtr6nhg{RXzwDi|a28PQ`+=lAqi(eCY zX?Hv@wOfe>^~Ln>8I`?>N_PsyQ)Iw;V`P*aalLTbo%F1Hl{ntonO2~w@A(Uhu?wQE z@=$vlK2`r6SKe_iJ15kz_q<5r!_;&5A5OLO+1BxgG*v>R1#;@QPJVe;pTOYWE?J$grky3N}NVcQ~oXtAoHw@U-3ZCrOox`6J}sY(VTgvO&0jwF(zSY(p10o zC4F~`E?pPb%+?k?pv`R&(1mYP576r$V)jNb9G2#p4Iv^Ps)WVI$34Gtw9R_#+1v@6&`>lAm^=K zoc1#+DHJ5u#T1BQUYK$n^ZT{t2Bn~MvrOt>b|OmNiQ;@;BU{|qPA*upHl@psvz|E% z0yQf~Tadr{6br-zo?9A;MV#C-gDQ?ug8_RVR)9haprjO~SvEt%Ftn~nm+|frD;|)) z#!>pH)%c4hP~t2IDjHgowhz!a)Oc1xbj^=zW@x$UIPPeh&bJQ0X92Qa3qNFxc?7X< zAVRMD3~$KT%VeRtD@s#@XTy-&;;1n1ZJz)nh5KIjTX|CS^ymU&%VGoE)1_ranI2Xc zB6ah|tmAl+|)1Blg*Elw3lF6Cc{ z&3oDN!1n}Qzw9t_>)zhkFJ(qr9B~;I&Ch`=>@U-IJ<`fpur%D)W`64NJzIlisOMqz zan1Q_J!tZrIC+^w^3m_q>m*KCM7)>XO{v6WnxBn~gp2Os{(`B>A zu3-Nlq1Y`m5g8#y_m)|rY6y0MLOF1ME`sN&^Ktg&JPepV3u`Wt_RGC}2kxkycM{aN zFuS1KzFPaUx>1L8#d+S~y7hywlQg4uuvg%~5Z97eh+@{AuOEA?6sVS|%vuI2;d8Ak zikZz&vcp?We$`6%f2R?;(zHaP{{yNo-lQV|ug3ZB4K2Q_+V5ZeZwr$vPF2Fk$4__T zybG~KyRcuqiQ{H$k$mZQ>x4i|buSJs-;DV$KIBe;JpJm2PUbp!#v8H)M);vtGS?ZG zr>N!caP}?jUuf~&Ie=&(Oa|Ra+gI6iaSG@WhvME3P}5*4fT_$`=FfVZI#&S#DOs^n zW;j_Wv&+njL#a3sYzfM1{9kQSnyJucglBs>k8ygm$ac1vsmt4L`0cs}YOZ$UDntYy zQ@S0m`%}fuNbQ2~1cmF`l1>OxR)@g-#&9>-bP+A(V#*f{@e8MZ&u>&KTxe_fFa}A^v5#Ee~%01k#hH0 zKaMVti!*v-E~MRKXJhTjwTR6Ld6=ptTYyzh2A+vi)z(gWaBNP!h4DG^m3ZS3c)F&y zWpGFjh)+enZ1u^_!SlDwa>HIclGM+kXQu@B)Kt4H(ycV)vqq81n%HWHJhfPywz*G5 zaEBTYRQB`#TfY!yi@vcz2EMAx%lZ+yZ3Mxr;%WGa2sbARSb~IaR=%rdc&;j+JHCi( zT4S$60wHwck!3gj{mz{AvJ6!tzv z7(;aj4_y3=BJ86g6SOuKhzxgHYkaTs@84bPX-4sJ1US3Q+JIbLzqO=`-J<98(uog5 z8l`#U!!ORO^c6H&feSfO({D{ndDu!@xY96hg^|_)(08q?uU{Wzq_)AdCP73VFu!LT*0xTVHa#Kv!EiSCC0G>cN`kthay}IOL*>ktxrzhP z>6U7#Jb)^0>(mcud5DqaFqM#)iMP{jS^M25#LXqj!TZw0=D`pE9cLFdc(>Zc#Kz|E zwa5Y9LNU0 zesPHsT^d-*6834NS}Ox5Luj~W8~j_ajT{?N@wZ&WkRfA?TSan{8Wjf}R5$0Qx1_O{^FFZ zHS3&mKl`>uuhHpqISrUpj(i4NPft&D&R2@Qm``6<(k$CMmUl(KlO5;&TPF_Uo@ZsP z8_j+@2LCvp#}aP~&~jR-cXn&geNCzl=#!0%xBz(57y21M5ug7mnyz?;x*i*n^)~t8 zH((GC?iC`wU7f83uO4kYNfdes^fCNd*?8q!0&qUnKqQ&Oho9RD@@Dvw=9U9V9FaoZ zkgJt1GLs)&Kw*3R^Y*p}4Oa!&i;eEqOf3GL6&9oKPfMnEoJ)(Q24@6i|Pi@F?yU{)A*R**m6|6{XX5n5>6 zp!LtNcU;8FI#bUUC=a53NH^B4U8a|3+@+Jwp_IO-K};7k4yR5LPR}qQO1eA6hLb0Tq(B? z58UWm#NNYLb(DL6ResR}*b1&6(-x!q!I2GeDLoS!FlIG`8z?ey|Ni}cVq8pdfF~0Q zDUU@vg+6^Wn;c zTG+6!c;@y^8+}ywa10LzpJ0QqSqI4eb&UPL{|4W^vpZB%Pai@b17$sK-<|W-VM)w@ z)jX=^(&2qhiAio;e8JdGZaSH3SCtLh3mQf5j0$?IK{yZy{O48fch+ak(b~|oX31GG zAinJhXYXrXN#oJig0vN)^l6*>S z2Q~XJi998q@$q~%?}iaKUM(C5;AERYglrB=b9RTh8$5p=+Mgn$DB#NTO2_3|-Xqbn zqP8HYc0$l@!ONix6%8j+u6@!;wY9x1bU3wmOhs1F%M6XnKM+~Jy}sOG^KO1|`MLba zYU+{J|Fw*iAB4tv?HING_{c0d?=V~uLdGzCJ8>TA5;Y$Yb{=|A;HTkzdfetG*E zg+=nWjJmEqFFO=vFK5LUeiLwF$Nm>WyQ`hK>K8P^px-rsgWE1zwaI5gz*G>@^?Qhh zuH-I}##ae^Zykiuk0qA%*a6^qvhX5hnulfif^lxvO#R9SaM2${Q3c9N{7IwmAJ8m_ z=_H`Uub4P}gE~xovG|F(Ir+{~LI7Awf?M~)KpnEr7`fL6E2qH61`5Kl^flHI3*B00RFVbRqDd` zh`lZ7v086Iuw=H!8PZnr+5uNy5(`-n8_T*&Ik2fwrX`zop=#%26%rbwabuZ<8G7iG zFC`_N8^ozWa(IGS+tv&~*#9Zi{_C3n%65<#Tap_FY7{m+}FC$X-Z zI?aoL6~EZYryP%gb#yJhYW;VuUdPb8Zud4by&4CFFC+hj04ozMC0>iA5PiF4T%L&> zga1#9$t3qu`7_xcz!-4`?=EPK_{m^$RKiITGd)=x9n<-3M7C{o#+;RC!m3fBh*ZR5 zLN22HB=W&-=`wpDOKoE(7tMren-GHAo<_>aA|rCUj9@Wd3WFhI-rn8=yCf8zq(KN* zO%xB-q+fw7_IN0_*c0ukSgAilz({4XV)>$yg*=d8Z6MoOjkUGSDiDU@U$Rlm zAIlxRNW0|qnC0wzeu!va>#u{)R=x;Vk730n9*Ckc*+FI@xuV&7pULk!wN>g0rRL}F zE2VbTA2@t3=dFK{r5Lm zXh0&m1h9tVBIiRw1lh&S`Tii`ic$OP#qn?usERg!mm`8YgGg znm@oNQnnQ}&J6=MSnfEc&eaD-bxZ77&Eh?uG54LgHrY)9CT`jfTI)(6kmfnyA^S0l zKBh-sSaL>Tb)YTUgm&8`^6jWPmi_kX-4?R)=J(ywLm{WeSR(-uN+=idccwZ@PKuZ1 z-qFq=P)FsH5}$=U6y;_{vATvkFy~0## zV5_yTYGdW)#tQL6r18P}8BmJ*oV{t9#z#dJL{tM(%+o=)@Azq2rW?616tqIzw$ZNs zms*t261XGLxD9Gm;NMDsG#`G3SWOR>-2EfDytNI!ChmT=u5HfSB4^kh#H#yqgpZK2 z;$Q9**ZT9mPkKjSKd-k1rBzksoa8a$y~p)7Y(@@s`1@vfhSDp`4`^rMWN?RB1efW1 z>B6xfvD!bp=yf`i0o8HGPtj<92$|W5A5iY~VPY76UY1_$5*Yg~XWF)sJ0t@m95Il* zl=yp>lGy6#>6;aD$>rUx#U`aV%ZG&q4!a?3^lwp|{e zO<{<=wMNrWuiC+wh`@^*f%)IwY6+acI=<)Kfcu5jVDaR;JVCA@9X?i<3-uZi$$xM0Pf=UY3n#c_)F;uh|@@*5G52QHTiUStC z#tAn!Y3q04 zQ=-$DB z^wwf{x2YrOC4u31M}rTeix~)>0Pyg=-SUlWCXGS8ui?()Ovkwie^tmFR-TR=1^V2E;Uzg@i0G;)Ot2MY1@SXXFOi_Odl@#frA<84giAX z_a9D%G!5#DN?v}Ky))mFo!L`mH5?QyQC!i+tFxKvEVnIrx9GXw-Hzc0s8CY1LT&+R z<7pW5+@$yJ4emaR;#hRN^wR@@O9W+@dG<06yU|)ra80;AGbf3CA+Fq8R~0QfRxgvn zHLr#`7ZY`_Y8JV#+%89t3Qc`$36GeWD_RfybzEAhyL`1w zz7{c|IoFAL`8Fxo4iLSc&b`Ads{Tyrz!T!x#ZPLHQTmSZiG~L-nG=Bg>k(rD*;R6C z_GJCLX!x?_X6MmWk(BoE7VExuPNZAzvrmc%ouIMD&wk2;kKCTM&21(nukLrP31V#U zT!VlAzKB*aBCikut8n6lpdFVEv?lP|A4)!a2Mo}_Ju0Ff3W8MTs-7bbYSo2wHfXG= z@0QI-W|wz3%4~{0x1nA>UIcy!{zuC2pw^}zWvx)Y@&2OZyVig}-`yk*wfFO6QWb(; z3U3s=w${+6_#+gJTvfqaqC+nrOnlS*V|0om@NL0`ZuOqih_@j+%-f;k3Un$w6gEp) zOS4xUB9FDv_C0n-J%7Cml@M<|G-T9{W(a^0l>s$Kc2jrq$XA7|is91pGGGZ=y*{Z(h)=d9%^q2=4Pk=5(b^xksK?A~es=Th2_9f!Y00Ck zvw$$h!hn(vfW925Ih8i~Nwe*Jr~(O)+zI)3nkYoL#@HE%p997fQg6TnKWMfk+Q4t; ze7FJ{{3z^D)QmDDeaZ2>r85q7-@4@eS3SUPq6Fc(eHO|}ng_hZ4!Yh7eYK8=XZ3gD z_LfK&GlLRWUX?Gosf`h?$>t=ye~tX4i42_qnn<$D$_7SDw}pKI0RjG>sGV_IX68Y> zHzC?+l`|!#LpXTeWusq;bu}+joq%wYD-7e_fuU(@@86ba%G#wbwgk3!cauZ*?BLN+ z#PpeRe6Hg&MLa*gXsAu!w>5^T52oA92u!E7@XmSVx}Y~lC;*pnxqc-4sD?_a-b_KW z_Bb!zfz6oVu=((uqDhTvB)!oh@6KT$4>OO>x4r7p>WR$Nsjqd@d15S(0ATMEDz}x( zcKpPbO9X&p%kVWFjvgD zoR&9?xhp~{;874;im$O?Zp}3;05R15Ual7Y4bgk^wUQsDYK6f9<4nb}HXdt8CQkN; z{Y|&)<9PSh&EYJw0CZqgrQ5;>sexi&Oyfz7G55Efh!Bf=b^))Ng6KjEugNwnT88d= z?h!2`k-%b*HaG*YUp`i%sub>j%XSQT$_kW}PCiHw!^3H30pZ;SpW%2c*(Y}` zUxzk#11yAl(n6vgqVx}KBYcnh_VFfm=x`uD@Zu@^9R_KfOYwzh!?&6Hj&O8~SYUI7 zg!xEX3rzUiz|%uFUF;X>XK!&oP>5kE=H#rqbRfu`7*B)Eu9Y8yp1-oY1s;^Lw;R>P zE}6A7LTG2*Xi?_yfFOH0_Pb^F)Lx4I+xSdvja*Ndl>r~}ZxNApkKXdLg*1QYwy-{(c=_w;-(^!`!)s#!%zo*Toyl+#MXuAX(> zw7Ik;UkCC~`DVkNr*{ek0vmM`-$z7pZ5( z?-7t-)RqZyvZji~(-u9iESHkg_-mHL8%qIqi<;aVxl zByxI(LaLvWhDqAk1I%4%Dwp9E@;BdL%JRzWO-O7hGbY$k2I%_GK$m*tak?S#Lat3R zqFpypaaZ)HX?4CiioK!dtdhCN7(4&4r%Zjh%ihMF66L5Dq;N*sXb6~DgJfKb!`d)&^ND>?Y0S`%uJTF{?r2 zS*x~$#Doq1Lrbw`qg*R%3Q6~eF0!^3b-r?6SO#-K{3%1`8}~s5>bPWK*@u-!kvzEe z?6*^#5c>D<|5i$tFfQI@i~d1L!Z+#f0p{CRkCjGA7g39-q3xouH9h&rL-1E=QUB@* zJSC)v&ls>J|LSczKeFi@-v?RP()r@3FxF)@BJ|ypwv~H~-QJ|X=vuw+fnhUr=rJJ4 zI`=O&ct#}2~+AFF!i}5urBwoVmW_c34WNz1B@z%*MStM z!!-YU5aGW0nb) zII05&C9USe{F2Ryh`(%pgcvXuS~oSZWH0@;%Okia4yI%m*WK~e>n=HGU~WWRZV1Z6 zeaf|V##t`k-_9hs1j0xDs~^`#!#20F`n>)tuRNF|Braw~mDB0ZhDsY3u$pDaiPb>j z+g$s;I5s<__Hu+~g=!k17Vi~&pFC=%H%#cpuqRE9yAL80*Z%m>W}Ps^g0v}P|C|c4 zNAo#rl0)lsyTX<1XV_vGIy%4qOe!I4NhH3Ugm0Z}3mwRr!qNxnM=5fJ{wrOa%>y-; z@9f$kR@M%Awkj9({QO+*Y|-{597g)gw(!YKWXkFJtW$#n<9Q=>zUzCVDl?Pc{HGFD z!wdEJ5-VvH;jdrIL@&)2-7aNRZ_~$N0TZ-t{+v|u5t_u=gBx|2$q_rpO3g9*qa=(>2TxiIj zZ@U}zqbTzHb>`?~Vki^xlq3whiyvN>T7KTq2|&GcSjimKkH#rj5%Cif67Hg|cB+a_ z&v(W}dffltfBSzOoPQ5bfhWrj&qI@M2A4q#;K$@D)9mc2+poc=WJ3? zpjS!W-?v`WC8Y)uCZ^ijZ`%L}N~Pt7g1nOaMNO#9W{*l%(iy-rjNxAj0<6`y`cRef zOuC~|jTQIZ$q=Mj0DE~Rh$ssn)tT&TyTYUY=}XzDMS`a?u)hs-@~?a|rH>GR{diyQ zyIr>fKpHE7MFerx&VS^!gdsVy=rtH(-n4WBIu!t?;x>;v5Y+vL`k{U&f_bR~qz*ro zCx~>`pHP18&(yq`<91s&dCEFp;@jt6J_gW%3R{85mso$@Wt@3hMBVRomjtTJc(DD+ znDkn^WHP&rIV!2Bg9HG~VNp_2lJv;`FCWSmL4l#~Q;?-72wxMh$1<@3lN*}W23k+2 zYEdndQi@M(cG=DlkvLp>6?rwM#P#*{-ZAM&lfF)A$0Mk)OZt_L=!*8Z3V~2tgqrtz z!TTj)(v9ImG6wv|Q8asMF_!BeroHjGgyE@S64d*-nsx6tMAVMmsRoQDy_Jf{z37FQ|Q!>QwqI%d8`6^ z5_sGvI#;1pi|C{dddEJGLtW4CUpgKvd7v?rN}!v6dTZ7ol8d?!cw^^JWn0<;L!e=!D!DXZtdyayD@|(z@h4M(CS3{lEA~-7QxZGqMCmNctI_?PCs#`&yU`q1 z;z<+&=KI>!fd(h|gY(l@Y9FA~OTAyXENUwR=Xw5HrMP=iDIQ72SOJwn#%k%uD7q}u zx`bg*&!3Au-h!$<|AEP2&2;>Gjf*zQ4aXJ-eVDyo5wcsA@hFx2ghLlN5d+y$*37KE zB<@7es#~$|Z6Bfbl^mJh)luDxO0TBICNGS3#X+2GAh+D%ClAkJQf0!s4tC=(fFJb! z?a;4=a_ zg+C;(2t3Ck30Rdj8#s-;Eobq7EiyKkFpy&tHC@Be;8v-anQFjsu|jzHr?SpwPJMe$ zJt?LC^R0lmJ^i~)z^_t+CMi>w0zezo1>;3R$glvzrj}i1x+{ZixZ?QuJkB!90NN-nxyt&O`E^310C$U0v zw!7h8DpFnddr2a51`p9Jx;Cb_9bfm`<*EapjB@l|qkllIDwtmf#}{J=Es!Xml()iU zzPfsleX9qHSAEaxiGiFtI!-!d8gi6Te)dPxyFY-|)y3uyyH;UA#m>kQXzX87Gr;M% zZf7Gu2Z_Dg47^&J?kpE}l;lik%AhD#^Zha~HlSzxP7=Ob0Mr4$=BEt+&w}G`+l9ez z-jy1q<_fXd^3n5_ErEUS#~;u8nJ^6qH{T-~OqJ={kZz$Ax4+W)R{6?Yl##Pv4MAk$ z2D3)x(u++&9kND>u@Q8Qh%3gQpEf(xS;kNr;bR2FCKRjXoubd&)<+90g!xM%-witF z0RI2cbIgK%yE~p4bwr<^P9X1=6-P8=OTkPl_?it7T@BT5dn|8q@)1A(*+~L|FOZW? zEE*@Rr#8?3D6};qf1?LkwR+Dl-iP^gYlYNUj_TBXwX(;yLgbK9mfRFZ!;uQ)W;_a9 zf-CyHL)<3=@MA8w6ZwS+xluN146~O$Uk+Wy+KJCnF!N|6M|8N1s zdT=c@(u%^G$N5lw&q{`)&L|WuS#&2BF{(_$Pi1o351RMOSr3oWC({5vNt}HJ90?*H zbiPu$P&v&ILgZ}apl-D?(AL5;0aWHUUx#V!(}D2LpTiD#E8e+HB2#5rHV`fSo*tsf zV_AbauEp7(ZXFVw*;}mHR#?lbIeQLZWzPAx3onO`^2Rh|{mdG6x7PUGiaXd!XE9{K z{Ut^#+G~?BTkO_)Z|CcMTGD)bNd^Jh@Hf$)z={L~%sn%5{~C}XJchi`OYw;;GRFF7 z>Dpb7j}5B&k+-6eB*ly>rZn5FYBZu1J$LJwqpP38ytzUR|@}tz}>9hIJ8*L4+i~j=pzuP$n-L9*@yqDOtpZ1Gb z#+orv(Kz9HE88`J7&cpgr={bkwihQ*v|^v}?xQK`k*-eHRrIbk;LKS{X^0_1w13@* zu55vbLsuLmQ~3w3#bYu*_`Tq>Q(k*1WDdC&KF<0TzovPQY2#|-MpK5^c{JyJJo9*7 zX*tTJv&p)p^elAUt58$EOuuWZ(TA?S2quU|hUs2c0#4$9RsEybCX$VWEo$c4+UiEQ z!Wb9SnnPe4rH~H+6qxmBe@FDkMdJ-JMw`Q_(V%{d?NY5$+*b@6->pOJ`O7C)iFdZ3 zFO)puzQok4XM5=lI+eJsMX`XJAh(-AR%bRZ+7|I}$SrwuKGDX=VR=cLCA__c)lDK@ zA3$tSWZQ@=Z{tW%9b$CA$lL*JCJ|@5wuFRJXOmVfd*kj8KokwwYOV32u{Lq=o_cw; z)@|`^KyKW;^^{L@S!f3_O^vE5F&r-9DT_`+>4M{6*(*eCEY)8n^FW(P5lE{hkKxL=IXaZ6G2Q5zH6b%U zJfgg*QsIn5=HMHQuMyVSLl(RJWfMy->PT_wT|2kiif~(ap_}1gp0C5l7CK&L>F`#r zzZAgqBr|Io()@RH`s`{x?Be^DNi3?@%z*Lsa#yAxGoS>GxY|px=rqslw;v18+j?a# zt#k~v=^06$!`;GkA(~%{R2R7E1&dTbpdmv%qu*tb9sA#o8_UlK19U`>pf;N}|1Ela zCM7Q7MvoDEf@TbH`=Fnn!8Iu@jPar5k_oy?0N!EQ*Unde8eS0GYx!~ELBevuoRF(( zbF4h6J?4QQ#R;)>zF@t*G9*^BCOvA&dpJO!kwr1htwmY?-HbMDpx|hlQ@(G9(Ha|+ zCE(P3PiKhSf8THx)r=F6JCo(7^I8|Oe$C$2g@UuMj>@>7oX+o!gaGn!zV`oL{f~bA zQ>DA`%Uu+QkPhBHO7lBm`6sHx8-S}gt-h%d>q8O6{G@y|#J!DLO#_4v#fk~8K{>rP z52Z&Xx0|cb*`1?(uq8tKD}gsz5dL&#ba_A>BKUTWOj?TKC`SHmiOJrEZOs40g!;^B znF7{#qmvm_JUrXU&RyweEAeC3D5! zStdVxe-@cGp=I?$4E2cs0TzFDc*Ei*F56Cxg&pQ6M9)k}e&{plTP~RR$bThD974M2$2`_cCrs^N#K?G{_>S+IMVRnMm@95n9!hUmJU}2*?c|kyrC>1 z@3~`x6jZBt9Yyo|HRtEk+iN-w#0eBZt|((-mJxnbxhM?q|M8_=44jMM=P#x+{~qxc z4z3sGAT7;3W=qnR4h$)L*;u|<#gjkZ_!U-7RNx}; z3vR`cvi{WEqg<=CQ^7xqk(gde-%RA0YYXerI_Wo@SA_rDeN6PQUM{! zUM6uZPtc~ zoqTk7BR#JagOz21)ar+Bk*j?#dmd#-guW7GW}0^FX4VSn+x-W95tS@{r4I%qPLllU zDl^Y6WTeHgRT1&v{^JWc1SKlQKu7B{@F3Bs5aUY3Wz4?QaJbA}mU+h6ok`bjndRJ1 z?0#rEi}z8(^q7tbI!`YD@x4Op0_s%3N6tFhdDH@n`MiF89f)b;Y{RtsHHIkR=T(c6 z-8@Y;R3IKAzD4myG3v*X^LTe%sV-lo}ShpPPFZyu;W zz1Ms@nt%QKO$t+*u5d-;9`S`@rmD$TcM1NW+tVR1JD+^*>^t*kRQ06(*IdGjD%r0gsqU((hN&TK^v#_>qBgv=Y5X4Y?2NOmUpzG8?-W zRyy*`lqdA44Lqib0ewRQl?5VND??$1!t^d4=-+X}P7+pesvKY*PG_6UZ$>1%-iiub z16YtRC8Coub<~0JGzW@U66mKaDyMj2m;8%ICmS1dqM}PY{zHQDb~{zm&tC|XJH-f` z2D6-*;=oA9ZYFBGJ*1{1y<uzkARDN3Vcb^zDJX*obq{o^YdafJ0 z2!kxGJAj|N-z0q9G+Z&6$7Bm(a^+CL4_IS}hd9WmQ)l^3zg$|m?EgfUZnSxsf3=ii zJkGmMierEoBc*hdu-?9Je@wiGeZN51GJPMTi4a#;Do!<5;UFD6WpR3c^P(@-p=#bs zF-vGRPN?B+!a6ibhn&Wq<#UbB2ThCqTUw{+!l)mL4=4m?#MO}FN5IBo#`xCIoX|@lBR+KdpK)iM!<`2yjQx!!vKVe_3>_mQ z^h9n}RvF&i3oTx2*DL%q6)v{6F`6xoCes@deRu6clvm331astdeS-TDLh6YHLod^E z=1n8y95=Q$<_k7U)AU~+3U+-q`(fPg#Q)tRL0l$$0rd{kdHTlnYA8o=T0wGh@mm!} zKy7W$scwIb5n?P*bTxju`1H5WrWiIM7UBdP8~CRcFynj#|1{adD_oY80 zJ!5cG*fVHEbZIhvztlRsILAz0-ZkM@%8)%sto@n7g!NKQe<}74Uld^xEC;!m5s15H z+M2orqOI!|F1vEh>i?=t)1|a9<&L`{^Lnr3=CN|ytJRlwMkf6 z3H&j4-;aNi47|R&Hzs!wXf4xBGZ=##LJqflo`(lrSs9cP0dzmnA(H_KUl3(#B zU9~n40xUkhF6Y^13)3iQZQKe=6XPP2b@ z=@-hWohUnn70FXz!xVNbn*oQAUbm=tI~4sdpVv&Jw5u|x2>Z6@ zHbh7%;vV^AsVdAjMHhT-E{uR&N+hChzOW5ekEj=#pC=hVrmM7FOMEFLfkj;Lg*urh zNEtnz4EyeKqdLWQzRlD>>_|ts1bFBW>Ysrh2$YC+BM`T$C%D3uhbswlJt^wnbe7xk zaOhFZsj0miqz=#aW#}vO{A3k>*tz!jYn>$y3=cUfno-IXlIy@usHXJFGkzWTAsU+ z?Zdttlh*T|3z@BiO$(x}=sSJ&)T$qJ^+lj;)A!@7wcRbuHeg^yr{5R${d-DQqopK; z|G+sHYNG<%AZ5X;&<6(DZj>46yFI zpJGhTd*xE%SXY=oEQBt-Pmei+@@9k3e>lXw`X^WMS@msSh8rS3?(*qJh~_cqdTEz7uDd0BBKJyss} z`fzPhr@zuW<~nz1B(-%~pw8qwsS z`vM)U%P>6`$0*@kzH*#9je6wJ#z?m8wCAQ{HT_kLVEK|HCLFXPb!clOL-3&Dsfb}l zBi#wulTi#-lse&or-@$ z(B~U4sa&70cPJlpZl2)!B*Q z4v5ak?N~Wt2d)40)4{>fcz94h?$B%PU~>0O>!)%Ybb*1Lut}@U4JX<{q}ghz$*j5W zoKHcC)ai(Pug{Ux^Ku@|(`RcR1NgmPHQs{*t+=S0ct4mlY_7R*4*1^HB~p`w8F1YC zKJ?%hwu&c$Fhh3+;@WeMu5`JU4kpZ;z73nXNXHXh+~25Dgk0)j6V{?QAJ!4qc8&YL z`p;VWfBa|vtInpzg>wN#4Y*Ig1rC-NAqqg}Pg}^$WILSrWEd=_42ih`ia{j>N5|6Q z36H;@&8ISyuma^9;z(GQ2U$JvEP^CJN_P~f*wNL4tUj<3)wXeh#C{4x0&?REzc=tt9K6*b z;WUlv8}7%YS1YsdowGfJwpfviqB6sEH8Q`|9P(l)YPXtpr<5`eE9&u?t2LCqYiHE_`6IsnXN z0~Vo0XQMGdO#R{zV*|@!|NTO|`v0d(ARA*B|WWa*_9y4XiS<{eSqvNdgd`13V-Iczh(htp6=kHhV zr%yH*)d!}?=9_%3Hb7r88(zJ7#m=Yc_VM8&r46M?ArriZ=wuIVHi`V+u;CQn|IE4f~`)Q?*4EU&rb*B`&V?U+3JSgv8w_b7aKl?FJENFXEw znIemd861-`TNFZG3xtk6*2oRWB&*e*0)Y?@KT+9yB7 zSun1?XJBGr3$B!;#Q9WdUg7fRDb4$BK5Q%L+amy=`=ostnHaQH3TzNDeQN$CVEq8A zQW;$9iKVufx`LYbyrYbHH8q4g+fm_i2XXpw=mFYn9o&)sd$9mMMEQmQKE$#@czO}M z#}1<@PL*@$HLTgj5-T=c4MI)6_r2ZMj8%wpzuE6+J-9)O*Vu6eo!1XuA;xb2i%A^x z%2_y$jqL?AH(P)rp@2g#9v(ddQ4TX3O97U`)5AaDD%PB{zQh1^tNWHi@4-^+*!vob z(E^Dy*bgNiOWC+56FvAqVJxA?-8bSBqLAzDw|k|jR55-)J`qvoM<2-Pg#4M1G6#RP z>*YQF-HO}fDLytosF+@vE6S!x>cmdFO&5Zx`bNd52l1@;5Q`>_Z9PCaN0_<^{$={< z7>Cotm&c*-?3!nyxPuxqX%&XEj)Eyq5g6`cQ1WKDmM{N%Oz?EIopZwPg0{`tYxt%0 z8Ni@d$a%?$iOkrutWrIMuy!JV0zdvHRr_+`s6QzC8p3MwjU;f+BRzt3p_>IAp!ZGJ9T&sbFV zIgw}k#MDG;#OVp0Cd$0Ws8i8l5mg=b3+geq1gxK(+*+R3$9V^8KN~4&DIY7|o(}Rg zPYIvi4t}=p5%t_;>R{-q7PY7oIG00zOK;=@%t=j$c`O3h&m51BSH96$IyyNGR`;nf zbwu1Ne31USLOQo`hq2EKgb1^5m~0g4gejre%eG6*4X5%9iuoA=#(kVp<(ajo6#MgY zF3*LN$}Uo2hvvxrT6%m9i6%NJ*+YrDje1*tc{8HSF-e zh$uO485uAq)GY%e(Zjd+Z($m9RtwF%$BKsPWx5yHJnH2-iHiuoO`8WW-)>3vwP$2; z0=CCGNB+FqAq=ejyk?{3O`lkdN~d;DyXF|Pep@`K^rt!-wNp`DuvN=nFNC+$KyC9a zZ#*EP{aDfuKvYoVU zJf9*&StP%zkT56|ujXG}q{#P9xD2Mh1gy5zqLYH+&S^}3zgjViJBg&do#6-3q00C7 zSOHr9OB|TrRgy4<>wOe{K+3jrm~Z!>SE)`*cNDf6f)QOK$qi|NewcpDL@KrOg++9`@=H(4#0i#U1X0}^R?-;F9^~s)QYrPuA5ew(&%E4oyRFe zJj_KNcNyPUKkg^yL?jk4y+#HJa)GlR56d6BpZNJ+cPWDqMc<1=6{Z^%J(WlnQLSr$ z)%7z5zFUE)dOD4O#(k#4ADdmJK)_Kz(DkTxuTK}{6gdWusyX&ekWXp!1CB$i(Q8s_ z_QMdDJ#;q?BvJrz5eCVGKjE0u1dkpIIRPhaXH?PBGNPs1Qk53cF6-veKJD>>&`x&g?1t*sF@KVg;GfkP6e8McTUz)BM8O{|B2~P*gx^#) z_FmnsI(NKFP-~nFIUjiwf8(z~*THgDWjM>>aEb!=dZ<9v)RkB+K<60LrlDmZo;P`5 zb`WA!>N3T+er_CJ=LoqSn5~x{tTHl$rPn~}29tk?IuCxg$~dYpN;EF&aXNbCi8dM) z{n?Cl|4mc-h%RjsLXQ2-ho31DyLUsR-8gn(= zPXM$UUN-du1&tCh?6jv$yT!B(;Sn5=)9Wc$rXR9C3<+mC91Kg)yVQ`t{YgR zk8KfcBI8Bg2IxCbakeC!<4co!ztPc?F~fj?u&NYRJ-Nf+RzZ-qw^#mRtYo)zT4Eqv zU^Qknbx({|A8y?n1S&j>6ewCBWkHtqp&#@xcKtR%`i0E{YSE7)<~`#Kc-*Zr979qf z`qO7(nLzB1=1s{Yqxv6*%D9n=!M9?fGr|b$D!QTiL40R%$?1D!0m6`B%xQ#ZGGc#6 ziC$N-I3bL<@vJo=d<~|P%hPs+&o& z4)+u(b#o2F94ONBS=r-5Eft(<%Nmb%zu#@LYl2Y4#jYgA`Wn0T#4T$o{r!p}WO!G?sJKR zI%RyjE;WbSNa{K|O3y8qj|u{e{ao%?8XiT0j04Xi35q7$s~GQD+@@}ay7=_81hn>n z75ikihi%wZQ$&KZM|Jfbh0i^1#(c+Kfj;t^nti$kX01bH46@zV2(xJ7vFGoY$Urgo zp}lnOJbm_oM9LMb6q(O?U(X>@!Xrz5^L%ls(S2GJt<>k%Y;i{eahM*dcEy5lv_QWC&%m9pbpcFz~nD^}C& z0qTp5;iN2c?10)R1HD#SLGB3~&NE!*Oh#0zHG{ay@N)S9=q^Rf8UU|Ok58sd$SLUI z44RSMq)qzp;o}@BLXS$f$aC0iRZ(U4VJf}ENM&M&x72(uBwX&a{T{8`rrP;bx<4 z5D%NBkvH$EDbqn%b$($QA4RJ{)-l8zVT~Eokb&E(huTf3aff~LjOr$EVN^K&>nZWr zTS7;bJSN>?-;(u|cA2~V2zQnvuBpUypuqfB)BNu$hAj>y$dm!8(rm8wsRCt$zY6lA z52&dvlyRPCb$K)NMs{S8?t}@4);r$H|2l}&g{HtYu3AYMv=w!%yVrl>7XA}jZ=3bQ zuvHEdcDVFtK5`WMwZe&tu|y4X;gg*ijYq3E4kAg+8Y?4n4F?ave8wfp$cJQNH2}nd zmxj*Ol=3Axg8+h6M!rXq>KSTUxpV^U2#-yY@sxbuX1`r4M)L%IhmPi316scY^Z}v- z?tzM&iI^rkK*6!@wDtkKg&lNakm=^7xX#{(IJV?0q+WD>$z3{X>XuNv5ove2t-&;- zV)~CH#$If@X?%Hq=z#O-RL|pbisxws=rkOQpF|ca-1>t&y@1tp`H$YM^9NYh6wP;K zG+H9-C27M=;jUO`Vq=zO_-j4$l6L1UO`EN2H}|60J6|*EZ0COcqT!)CrFiq1jE#?3 zPVC3%qb=R}Unl6mkQ8_miRG5ryoL|Ng2UOh#f3e%^0wF{!X!qpzrWDL?07MX6u;3c z8v+U!l}G7gH^Nb@l`A>UVDJPaJ`wIM7Hxac1Kxu;^V)*?Uov7#&F=jP57qI>$)*>Z ziNU#9bm0c&kq{m!Z+V9b$^Zgtc1B}!t4|rUvvS%|;$VsMoA|!qXLb;7vGmOseY;yA zzn_dO#Pq+4e~cL`{Bm7R)zZ=$1dtzscE|VbEoDP8zIK4e&ptCP&A`NHn}9>$QH@5a zoqFtK4Xe*HD+dlWol$+M8l5OYD7ya{$W|%`nNIq^=DzoWEmk9bIZEaZosyf~k#Rz~ zxFV=ln9?^XB}J1Sz2clkG>g+JIeN&HC2QpuW!@psog=xwqFSJ6iAmlhzg32!;>d&= z#U0alnnp<#8LdS;Kk)E;xDTc^Xt_Y1l6Uq!sW(gnwzLGfyJuXSHEE2Rwa${v4mI{l zlFNUhM(y0K&k+X-Va4BeL~R8%IKH%`AI#LOLKmb1$2vJVq1`;o#E-DXZqkQ$f~yv` zcSMYWxT*P>(}LDdUA^~iTx;!(2y0T88@VPmM$?~&laCltE(hG}K6LLt zq|^!XgQGLd^z>(sEV5-7I4N?xKq1fa@6M2 z2lNZL&rcftAC0u`QzNb0YuOUfjwJ=EjFW2Xf5}?mv4y2U_)D~s^oiyovkG(_^E4?~ zAww?*GLA5qSI{kp2;rK%r&%cbKWgIOQQ-xUTEsGc^8Kj=mD*u_$!wpnxEcn2M~V!` z12lLfCj%_cdUt__Z03v)6$iKHS^zYp*UV608$7wz%J|D*agd}|ahalKGLea$)D0>~ zN96?rdXS$|O_E_v-`0DmL?s_b(?aiEU-n(cC-n{PC_Y3?xkq9ZyGrF}-^PuIn>Fuf zBwCm^+sXF=4&9jt_nJFT649a00OWV>5c_jBO$;e1$oy8aQEh8-Z<;1uvmm`-k+`D| z`wznc@geC1m;WS zJSvV96C!&%)@uB;#v33$;%!vBBnkcXPVWl3d6FsD_I#FT^>%P?OsQ zmeN%UC26C16PB$Vq3b0qJ;0Xkf2=>BS(1ESSXT*iA=@dm4&U|#kUcJyZe)CUx9v_{ zRjV%TL5-s6R^PvW=P@LIC-i>IR^4?=qtd#q7hkM3+P+k@8%J5R`3f-5aw^1;}`a~*ZtfSHI}K-=0WWE4h)yumnD~#W)7G4GA`ww zW}#ScDDE`cs}{Y-*YYR7N(LXmk2`{>rd<^)0uRt`W#@A{pT{QKCMplc@ulhbg%#ZI z7opUVkKbd~eM^zgG^laE#H)yBN$|?L`L?z!}$xXs{a` zLsUIq^1!e4n554pz8PFcy|oTOp98lz?583oresU8*+Wqr%H4;J)Ie7fhh? zI08$9r3-NBKfFvkpI8^4lRWrXj}k>D*i8z>)%B^f-4eES3IUMC77K z1&cvGrW2XW<-aZoMk0XEmu=&)QOTCaARB~Zt2d=Pg*NZInN)Iir=O{RfHFD)!a?{6 ztvj7~_TVOR9kO~)HSb$WHV@}u_XovO4-1~IZ^tBx!S50i2Pbw7)mSjppEM0e#{_;K zuz@+Igl9Pln$c4!97V4lTKMm0CW+u565^4VULfxm+HDPdl?V`b{A-_}sn2mvM%h+-#CA;QaA9lFkCWtV8yets-u>I#g%YUwD5I#*l z_3MX!#@K04#l^)v4NW-1jbt|Ivg1V_3>v=aVZNpp?D4wq2&I#*MJW0I6F|<<{p0({ zFVQ)ffwqbd9!OW`J=+@M23{T-9jl9I|Oxw&}KIk$!&u&F>^ z6yt)Tj9E^zzS_mnO~4j;V}dgCPZogbl0VFjMaI4QpK6CNfzC8IIW?65H!h$h* zO*LXe$(gg3R=W8EWcrI2Z9v73A3rLkYl`fdlxvcbCdgexye}t&yl<;}ZZtA`2m9F5 z($Y2o^i0dgl=ygqZv2--*pa*!SBGi9{PIGJPI~IB{tH#4Re%0Vr@KS4Gavz8w_n;x zlE%njak+Qk&!2<_Yo04&Vu?$}v4*I^M<_>p)bG!cg;9(pOaJo_{=2*t69P&tF(K7S z0epWxYLG)nUJ4%$v+f!Nw`I}}%`wLS19pKTE|mZ$rz9Cj{H124)XvuCW;zpPIiNkv zn;`?bQ7w_4t}T#OYX~I9%;ry~jhm(ZIayQk@o9AtAmxWl0KZCmybph^r)yPt?Yz6H zn!oy|CXuz)Loa$;LHh@Rb(!gUE$7jgJVd-6Ir-vlP{2qCfKE@XNWmU&`}M9D=Ui+7 zoDmZ8=TDE?d=9$>025wyTG$_1&5}OjiC4kCI^%b~)uhDbRClmoaTrDoe)$qe%lqwK z4e+fJb5f=!pJj3^*~}WI|Ej<>A005!CtJCXF=ZM}LM>wTi2ZxbkM#oh=wQ9TtHF@Y z&B5kl#NLTBc0Ga~Y$YShI-L-U((Jo_dKlyGjfMKQ?P*|oP_-Y14Y%HRGHKTLDrN}O zY@uUk`(ydC#6Ox1T`oAlIRM))lZ05Bgwf(ZME1Q8re`3CD%n|X(X6R>{m zblr7fu;^O5KHnF0Yv+Qt*#Rq2gO$JE1bOKh{Zo|iOo}|0 zDlp1>_}rhIA>=?#Ch9J+d6(Hi`P1X~^RvTwyNo5+2_}Th?GAfT+oM0!lXOty%PU-4 z-*b__7h1XHz~>hD&C*?3AB5#L2DL5IZQ=njW5&?Q-d-d3F#W0}=xtKWWa~(H>_vS> zJi3?Tee+c~`dqaL0esBzxI|B@@ZgS^z>6M@o}7AF&J6THK(yVpK2Wf3Pr|X;C=>;n zEcqko#NSChsH>!!7pi2LDrfPJ2Xf`8YSId7%FL4C^I5Txk^oUU6+=P)A75t~6=m0l zdjupNX{37?Km`Hm&Y=YrlrCwcb7-U)sbT0AL=fqYp}R|@L%Kn_;oLlLo^^cB7uI4e zKIlFBp1t?~x~|{#x5TjY(6f=l7a~LoT2uNI)-mF!VbYH`lQTnGowUsLsxN^p?%*Y_ z4<4>=x_M}r1|3b8$hLaKfDo~`0VMww1*kc_F^SqwNT^E(*~=T6$E0z z^it^fbd;|!iB`9GP1yeW>rke3=_>;QxMX&|jg8{(QBcUycm9%xm1sRU={v$GuWF4q2=KO~&J?_QGg&9L2 zgRzkjHdxa=Mqqjk)D&n%@jrjxtBKj0rNs?jfj2-@V!+ihV6`pVSKi`|W=$f2oZ+*!Bq0#}w(1^T!>n8XVWya0?3s@G@3+Ip%h5$B&u8ewQ zM^oS=q`)Fkf29`0ftp=A0ocd*)mG;ouK5X~PxAUb>?N&T_#ziFFS%&L65q8)(=vTB z?b74dychV)K^O39y6sQ=kDG%8;RX%xX&*<9gw~-g`Ls<}5~XPwon$e58kXcBa{o)7 z8Ry2b7>!<-b>{KPs*Yo&9>PTG(ssJ$O~sg#a!R)n{B@-S50W9*9xNce#h^x{O*Ej# zfuP#lBznM>&9HKnA%53SG_f~N4I>Zw7;>D=LGT$rF#IK%6wfQ3?C84BI1pDJS-KID z-1%gMn1V4(JXl@~OBiGJ7~G8*l=kiCiPc2X!tLVO-1H|Cwvpo~u3wRFv9LuqsUk^u z>Vf-3ct9gFEC79zxCFJjGJitTh%PlWR8}k-kUC{c5TWI7*Juz)T!7A3z!>5Q19c87 zFI1XCt1Ujrcb=4)^(rdvCfB-L#m|as%hxMXjVK2m49+2K+|T5Ate6o8NLPEQLjBrN zAzu4ui-tzwhA{~#>-i7%dpoa$M|s=I{nAB;o(z$oi)M3VHe>R!Uv6 zp6YQGO?v&_^NeR(sPhi-;-3mkh7ai7ni11K191Ne2xKX&!D^3Wu4n6}`+}faLpL4DeTx*wYlp+Jr$?{5 z4Qvngsqs zI6*T5gcDai^s11yM_q(?WYlDNODM{TfT+8pvO6)5t^Z4W7@H5uG{8r-j8{J&=XMSUSk$QIB(7k|?3)dsFqg&y9XBJb` zXADdAD&6BWNLN>xZfW$(&7ab}Qif~t$UG3{v0}Cy?Wa^+E@6W7790gy7D9A~_DD2p zl-OF@g4gKl3_bJ@F2?w0%L6H*_sOvZN@G{{Omr%YOXE5Y@H-`>)OJqOR5sx{)wa+c zrqVV>rmt$M-7~mrRul95VDY0ez@qAU3!@c#jt&+E(aS}fOZj&y-KvoZ?WJCA+~8aL zYf_{803X)@E8P|~QYle*#Z}YXn7Aw1RbfpVx|{>4j0xnmYNkesE=U4eWwfPY1?^YF zm(6bW3D+N!OW{BnUrIk9&b8Y4J_*b~4X?+%E<4ueKtBU`dxQTb_BGYY}6)dPU%CGkobzaKX`_dPYiNcZS(+jfUvJlhSX zm&@nf2gawO)tW@?3EhMEsUIMx$T`6%Z&wvg{nUpms3ovq1Eora_pTQo)`bhjFKH(+ zxOBmH9WVT1NZh}*`b#0d1o4KKbJ#zZ<4*9~-TGhVO)v@{h z1D#_tBv%+t#u&5CP6if>D4Oa#g)#HG@gBNv33Qx@&OR zn{4PK`mUng;aMmigq7 z5ti%RSeSGm4O+QbKPO$7@!k)PrVU37kG_+x7YIm!210NsiFam?yv3m&!15utpOoPL zeFVS!}*<38$e4$JehFQwmUhqWINb#gV(kBv1&@0LdAG1oiGDuuv=yYSriP* zHJHw%t*n%yLiM2rHCCN-bbI_NA<9&Ilde;+;o(U`XymUa-wCxqS+$tGAU$q@9x2g; z9d!DkHi;Rn=m?|ShqZsf)j@JHPud8%oTiWHUhgfgLyRHW}FM}R0#&dyB{;2=UU^#~_z z6KJOB_}uyH-RF~+$6NQ&nK?-8dKhOK*4$sg2LX^4$N`9#NU5x%*jRz|Fkf*+CtcLr z%%v0UD@QB2cE6n@`-;BA3Qxpi1&F9D=v{#VV#^3#y%J9TQk_A29i9PPrbcCaM#ZyX z^+|Fug(OlEDfr*iugx7`SxFM^*gRs001h8=B6Pjzxq~=H0Dgrs!2A z3?6Ci4#X`sBrJdL?H#11x~X^7BqMixy+~BT~1xjLG;F zEr5wyD3NZQwX+Y4O`34STtYDndC7?>;TsX;BlyyMDAn|Z7(kw`MlwXTrS;j5`*sH( zXZ`tV#|a@M7lm9E&PAf35;Q{2Cq5N9`{?^bkB@m39LX@aB(_?w+ zsJ$|-F=3gNh3~T8epd#@0Cvb&>HPYp=TGxuR$LZ}yjRTN60ndU?u3zoBqa@Yox(G~ zLI$;LMBb_`ct!sJWpWS2WdtE_70$!s65?F*F|sIjukCR#$AN37k*O}9&7?&c*w2|W zMbJAq4)L8B6)BGUln(I22*02$z~5nh3P?$jUtV)5E%y7C@PR~MA$H&OX-pbnnudgB z9Eh2BDdnx;{MHTvFLX%lZfp&e4kvtwHU=d;Lbgf?M$}9I0b0|V?FF4;+P}TX|L^wJ z_V9skl|@asN*5s^DkSdTI!yy;edI|Gh=GKmi9UkGqZAie5xa2*60ZIZhB8u`2?_B@RDk5PKwwb`qHwxhN^t-r zl^%9~Ouj9?(b7ppgS!V+`XQJ|j%yqQ*+q0|@e#E^nYWi#Ex2Yke0*=i&9q1t`2jWo z9Lr)@>JBC=o~nV1+kO^(U_gUSLf`y06fON8m6^t%=XJVc#4$SEfEz3=Hk-S{2czd%B{Pu+NiXP9!<4?{M$Wy=xT$S3juRUnIBs zSfyF~4|S=Kd;Q{wjB9}(DbrG}gPP_!y+Xm{$1h0tJwM1I{$%iGVyi9}H$xm+6kgfd zC{3R^Gfms)6l=x1W$Al1-yn&k+`C5pArzedu(QPtR2^uFa7?O05z$NGhj^UGu4vw8K*PO)LSd% zzPJVl=o0RKy%9r7W+f@@*R<;0#lp<=fmGve#{XKm2M`o7Ic35PDU`DCf2cw2FH8h6 z4)8aj$LFQCU>#TWD#*{FZBqA_L~`Z?et`D1Df!a&pV=IFWif)j?zh%cmjOS&GH1C1 z_FSpPMjioB=;Pq}4tf{Z+eUg7lQ4DGWP z*p{9~0sN?Cdi1cn_ubgrS7m`qN#*9s*~SM|Kxu+X8V@%FGi`a9Ma6>yN+bQ7{jn~C zZUaVb7p8RXwZav#@T-0WTNQJEeIS+=_`04Eq12CA#tQyzBQy@KJ3lLA3_e&CvB!8C z=G6_!qY_Dng<~bs2zh1qIsDp_DZX-2P^o)6jH&RuT|d(dI#!WDib z*S(4A`(Jrr>QI4G&7;AZvvByLPmfozk{D5H=3$KcPPBgd|yIak{` z!F_0bmw#K_I=&o3@Q(!WFktbnblThvYoP7W_1MOO-l#E;y2Gl%t9?BR{xfL*?|WoB zvELh065fM>&y+*+R&x$AD606a)XF}f8klZmr6eBF$fFUw&Bt~DA~;NoBMGNhT%;u! z2Hib=JSGD7rf0w@{wR9UBD{w6R|=D`BrtD%55*JN4-wogjIpJWzOC-IMY!pJohWvb zGpWHJQo=FI1a!kpZelR$C9`gq{V0&wx3_k;<3b_!zdL3|Reyj-Q(Z1bc@)GRRtGR? zA|cbu-#}BmE8?nxi()C!z@Bk>Ge~?fR7BhDm|YEWr<>8k02RhR6V|4!tRg4E2;ok5 ziwHU(AtCLFEQJWufy418Kxs;L4bcUFAa^TtJH?Xn@`LL6kdyC;(hQ8+uN6VDMt6Gw zM1Gbch&c|mE7}buey!8J;+;87FwPb?XmAmGd`03HipN|c`cKm>wnDRC)_40}4kwfzha52yrDipdd3|x9hRo;- ztX>+^cwQ0q=*l9^vYwOmT>4(0mqImPh%)=%@HgG*X&g=@s_&_3%`Ee^vFHZq%Jpvf znClYpKRia4# zD1rE8h65I`;KLou1rk4U5S*P$`l2>Xdk+Zt06vX5Mfhx^lN_v^e5v4_3#d5~hxgB8 z*nb3x&Ox7vBn~<>tTfPraZthDGDo7ru1biJTeu~*wTACM;zbC8^N_p4CdFHdh(2;W zr*wGYhpoLT7_qmZ=}jX!TDg(OnfayXci@d~`^yiQc%-Zk@nHY9PkeiOFf(}#0dhJ4JzfW@S*jUL zoKPxWa-(mr%s)Zynqn{N^9NHi#p0^&R$@kH#oCOXDa)ybP~1F|Ts!LcO+Ji8E8`D# zQU{Lnel20m8!a=uyGg)V6-NfWtgP&%t;*o*ow`%^P|$rd8Mpa(0mHQC?!EQsKjO{3 z75?A99Y_PKy&YetP>Yb<0V|x6xA%G@0KagjqIlaZz$m_yQ?cJOA$e&}g)+(t&f|GURXSXZs zt0_+_V+H_rrBqd1Vxq;TE|QeBHRhvlWLo(zj5`yr>qQ()R+CS2ch~mjkZT7q^Ni(P zBqT{dJ!C%F-0-ADVvMGanQZX!^M%g|(_>>MfX)$O4N^8~K>gyN4>JVvCRXz9h_SJ^ zYTCM>=;EP%8j8De^C77!;(-nehe#9lO|sp`JxF?1;XVJ2RT9Ce~c^21+8}QFOmN&J%>* z*6*v{pTP5|#phSn*HeHqRtn=1ijd<@;(kMF>T4}iQVv~=QhtTgc zP=Ju91q6PcK4T*~y!&bsvi=L8<(PHt>Ahe`QA5OhH3;i($0n|;#1*^)EWc~8r~spX z#Cj~NujcU60}6$!kQsB0EXoCZtO*>|LtJF^cTH2*X)Sq#tYH}I^6OlZ=@%qQ2^6WG z{SDmm7Xu4+2j2KKo>>=z@pG?$PF50@*Hvjpu38B${I-BnP03jq{->uV(SI)y_J1Dx z1jx21qJwsPc2yEMJQuH60DI~Oaq1{QaiE$gULT%_q!l;Q*4F9YB4PC|#_x;)wq`!B z`+O3><`W`El1~7U9+PCnsRs_%E7&8`dwEofE6{hQK?Ds^0|0`ozkq`Kt9Tkx@>)oC z><*}dHKnQ0ZbjbCi>iU%{C>1Pz}dIX4A2G zuInhmikBZ)L?3ho6zqrTpPvFmphOmF2{E=Yx8py$E1Q2y0b}(xD=|!Go}a`l z+PEjFsn$mTMqos&(T-iW-ei@`c6Nt7fb(nB_~XZqCvUTQyms2Lsd#ln-)D7~JWe^T zaCTAyy~U>!9kqE0xr$_^G%w@g#ue&==*-u<{E+P+^4{ZhZh7?A;Q$c)D-?6HQI5zX z7&taz*x90@w4Rd>fmqen)|ySPJXL4@qSC4H?v14YCSlEfvk$l3AhjC%n{|sGX%viJ z^I>05;3G&fSZhU;R@{~w=wO@*)d7tFU>;hV3AT8^Sx~uf1~$5wwb~@gR$LoQwjt^S zCu-0X_d76Pw9p06%NPY%O%&$;A`E)C1^Od-gJ_(ma55n}?JwUsYBKPU63o?^d`7wdMV%oqI`&i0ZXEPe#z=J!MdfMQX2~&< zBh@K9=z`&LA^I+saR^0_fcf34a2W8lliIe~v>@su9G%EIU&~Rq`{_3;&3x@tS$Uwj z(>7nUk?Nti$nY`ypH4b{KGMLtxxqO3ZG%C3{St$5-IRA=%@wF29P(o-qg8(U*oMeZ^g0Vwo_(<&>0n;0V;72 z!QghLd0I@2F}7Pp`R1eS12hIwg?_9&T+5sFA@OZenypK+L4I$DMyiJuvvL_shCwV> zC7mr2uA1McLiGBw`k(oq#{B2mN@8yNq6~||{VojlI(C&>s!(7$G@dy;IXTIK`BAAz zp=?-}p#({dV#u&;Hb{R>wa@P=h=M>McHNrO0+Yb_K_ZOrpK(!o4O7agvkU`@7F(wP z3Vi^>BS7HuZoyd}QiPQ;O;>4QiOBa5DQqboyXbZQm`}?Yr=PekuMHI4)}oH|H?dL;oFVO+Y`W!8F0?p~{GEa~ps7Y8#`7jM6iF00 zn(5f%3nz6#4qh&@g=8yale~ekgguF#PAK%Nt)3k{i;y4t_IuuPrT z&gg_DS3{-Ng7LMl4!Fiq@ZO{vC?jSC661P>`i6$MchoIxeJqOfo5q8X)i0C#v8|pB zYxRiM$GD9zS!UWtzC(ij&8X|Uu2a!QD!8@gFRthOxr5K>2A{5dLGGyX@LEy)X$?J) z`MiIBDA*^DJg1Cj*S7BQ1v#A22pD3kN%&oRC^>&&U?V1yg|_v`lo!RcC&6m~%X2yt zHgNWM4PoWdOjPj_alm?%g?efUpV7(fox z684f{=?bauQc|+UJFh$EFF;TJ?4uWesjZdVQTty6Q zBSjItwe#DryHk?nRRE6xfRp!L|J<~1UZ22MpkwEA+Vkpp=}U_F=YVhIRPd0MILxU) zZM?ITxC=>*Key$b7D#1Iy#F$N^=W0E+1}37y*7BNx78rN>p~05eKpgNyZZw9)eTxE z>&|Rsv-oQ^fsduHsQf8!<@m)Tec-0QtK_0*>dqfdBDWZjgEO`#3IU_aC(yU~@$^ROA?rfjG0>)N3c-Ov&P&Ao^ges?W53t-t2F^h zIP|YZk6rC*5QL0aIYoeZLdDNz;|%~LdY(nm-g-wD|m zsn-)>VBF}h?1yK!R@kwzE3rj6p|c%up+m~(YTw)IqeP2f&+Ulg#5qcWO56EFrEFI? z6c#7rPeDWlS*8oq$MWqf8y%b27u#X@cyWL;I#df>ZpATbm+A-+S?|93 zXyF8^g?*B{eWpH?Sp6#Iq4+!%ink zj43)Oa@=@||Kkd6NKXj3NYP-ooE9nF_B*{ltxko1MeZn9%9-tR z9j=E5nTyc@#jboZ(1J#m8q$Y4$7d|MNvdK#rHjPKsotZ%liO zsOE^ua8|r_8#-AfFLSFCkhAZsq2cw;RP)+Ic?Lhxb)t3Y6-JiAPt4 z{48{J&78-%Pj9_5nZDoAKEb8AN85CoB}j%nI5M{1d*AN$dvTv_9tq~XJ+ZqhO!+ZA zN7Vydfyx@v9K25Es`U^bR+KJQmg#!-fZ_{xA&{l?{(swd|H~kH=?{!ZF8$NvNd!X& zEnc(qEMvlyxVE7YPBibqMu9kU6_VKwfjCT3l$N-lONQT85cY=(VQ^9j&93BTJZoh2 zrGvcJGe==CAu|Qn^f@@~dGvuquVfAgpU04L)aTjGqcCF#qt*82&X3tAy0yg1;JQ;gwBMPJP% zax5qI6PqKwfmVA4_(bziu0M!u)D%LQ)GK|n5}bHc+;k(G8f<4W)Y`FJCGe`GIgM>) zui0K3UHg*&@8rW@uBhnxQEO1JfSg*B0Y$2;d^v+&$V)X&^9%#6CMN-#(ks>Cvwb0I z*KWsBv`)dp>)vg_Kkth4^T4hM{J=lD91-n=tJzcjJ|O2p;1Zt4OQcq4MFoOq1hz1-9y({=DK9ncDTZwz7**>+r>P-e zm9u%W_ZOCtquH^UfZsHDG=&%K{U^qDD*>#UwNUx}%Eo?Q0prZ)2q$SDJK*9qQxPHJ zOW0mJaq!&<$96rq`m@tBk0JLc^Uys}FuO3y()(Yvl8%a>S0gJ1qm45wm)y@vA1$pF z?%ljkw_T_;jzN?DhUugq6vk~VbBZJC3m$EZw>XL)AOA*gKbUojQh2AHhwq<}CZ=!f zwIg+~mh@X63PfF)R8#e+O3z(kxzY;BLBjFl6M|1<`|7YO)(_8OVmu$!=QRC~+25^{ z1b_`B8*Qtgkyp*4wX*sE(ay}xam<8NBUehj{hA5K_hx>|_%CX4o7H5zxS6jwcwTOO zK*UNW8SBJm6AZ@ivHLN@3`Yq{l%fLgeaB}*nNK6U9>NsFZ+}T6o#-_e=p!u|&nkDq zk@&bLnI5C>41oSvapE$$s%OB<`W zG}@nhh`C}~YLS@LBu91VQE)`B*&vz?0C<=Da(Bgb2Q&Z?C2W||4UWDJOq*8$;i6 z9%j_Fwj^DJUgz4uj}5$zT=);^6u{|z_BP*lL|V7D_gz^1%VBBM0%Y7KatLnFYSJ=r z;i*w;Tv&``qD=Ls+F1n;Qivy2=fwyw_@3=Ug-UL|V?)_ia%$bTbMzACMR<0$jG$z- zVn&-Hr`!4I|3gxjV)!-08T>4B;_(A~R07!<2r&O;C|~ehr@1d@`SB!q1@3S9^{aX@ z%^}*Hr8$8DJOfB*ChqjJDY3aLcx68y)Z0+uiQaJr_~&N-MC~bkdm|3Xi=q2Y;AlIx z@kXyFfT6!8k|EFOV3a983HOEcl2Q0Kb$J=09*>Ay&mN_wz-aKW3AJW)g|zb?E`vX( ze6Dshv(P?6e{Wx(^~yOTLtyAi&h_6^z%Y7C$jb9KcYwvcdilu6jMe)_E^}i@I6%IS z%!o*JcxaMALTWU^YC_9sf2w>vM;jchyJBVO0F&?I0pK@;g1Mz;{_;t$&C@qbq%DNz zoUod&Clt6Ds1y*}D^m2epS~`r_ES14_m@IdbpDZm+fDq^g0s7a{VtA_D%5@27a+@> zVz(x`n+>||Ok37p&@!tl6JRPN?`l+mH`aUFZ~t9VfRbBr+%`!-w9LjgR5Km4eeGZ1G~EnJ^40luLKhwWFytMq z;LE+8EQQ~0YCYJTIEfY<2{gvYV3>cOlUW{r>eTM^T3_9E)p~=)N!|xDJ>tb^R30cT zKqSnwag);OlcOJYs{s_*MFzfxX#F^T;8g+u536X2=KL8?1c5iHih{%2e{5i2;DyDx zFl+1_T>;tI%bKIuCVdU_tHHgrM+xlOmK8mfysjz%OdDUlY6Om~5#fnfBR2*DcM*&h zz%cr%z;S+t-<8ITZTk_+b0-Lw<6-t&jaNJ(WZ^VvmlBK)FOWhO_$*j3KZn4wnPw(F ze73fI`>xi8kzdrCx@D2)p0G6X0uEPWaQA}XPp(rb2YYx;`pP2U-qL(BM16!)5Pbq5 zM+j5U{40Br#~ZL^ALWhzu?2iyAoythMh*Qk5CxqW=EDFRMg|`@)88`u1}1&u5hej8 z;1?ip7`L4XH{M4jsox%7m|->ZNZ*Vkai~67X}@<@pl-|N@0cjDs_6?RDGX`11fYGE@&V&cNS2U+k46255~-B3Jy zGkCPSd#(Bx@A2>?QnI~}k3P^J%u3p-q?jm3bW#pYi*rxsWkbF zRA*goZ6UIl7nH%L!jv%JyaI?tNnJ^qQqU;5YZZmE%yi)S=)!jgh_khwGFI; zPrKg?a@$P;UFEoggg(pt?~CNCke>VLpAkxn1r!tPhrAiSCttOm4dHknQy%gGWS45I zpJ{SipHd0$XSXAp5R39o;MzZZWTjEa2PV@8A3>EuRmkFKd#;gH=aD9CGtgb4C8s#1 zL588tiH2ZLv%Yb;!hPqr6OS-jvq2D>G14= z0`VcGX#u1vz1=@!*I;VbLJ_n=5LpKBH8r2m;SNR*GP!v-+2kj2?6Y?6r`t@M)1HN0 zlWLv=+0;yt{T;izvMFXWAJ1i39j4tFkxT#jg#UklFXFE0BW9V#^eG$=Q|Ty3L8c55 zx?slwjFqhr>L~R)Aw=UatudDDV;R+iGyNu21R4%1udZ~~Gf8U02GJpbO!|qt^L6ncQL@ET2KBSAz_86a`iT+y zNFV-M`y*=(qExiL;3H(YK|yH(UlI@AR{$%(9w{;ZBJ(gDeVll|6upXU(C#u2E#^h( z)k@E{NmoN$gfrV%MoNqoG^He;MH8`axO=-3qs+{k$4%%|;(2^MEb+O-B={oa&PV>X zao2ekH$vZv0rwqX|MoHzaR6gr~rDApJ7tkmrckYXnSj?BkVsY zbDN->+?NmSZ!XL9k#3i~HKvYP;ZuE-aJ~P5kzPt*^c3UA4ZNd)u(Nc_E_)YJXO<`j zx@fDE-_O-Yc4j5sKg#;3m~&vOo+T?n3rT|jL&q{>SoZC0eS-P4=tOh{74~5C*!EsT zj)8!v!dsfW4o|k|(~zr8wUT<8%&jnIHbabq;{VFI{YUx%lr?7b`He`N9DPfJf8W{h zQQ`T~0u3TEC$Ik;_5k3^euQBk_fW`7)r!$H{vBQOYw<@>*dZn&!c>A*(0NOsJPoLb zZBOjOJk3#tgND@|5PSrXPUT)FJA}TYuohi z!kBp%K1fsf4Zekc2|lH-IQ!JhDSJN>cXM>H_|N}=lZW658ylIUB9QOoF=KV+Anpw3 zz3Y=x8|a(pK}s(aYG87seho@mGv6QJKHJMrKQK(swZDvyNitGJbSBMm@^bqpk&R0){Jt z4UxM4c}5u6s2ar+N#?tk#S4;LG~QdC6`R}xKpXpVGJ4IcCwP&qKnT^je0NycX{~JS zjGUUA$eZK4VtKz@J}a>395s&PEP5mZnwzfo=|YWFGWsOB8N4^-WwnzpeC|k&<_5XF zzsZE*VW5BS0{Ci(h1d7WFa`^1GMb_NVA!eRfBq%^{w)8Wd&~y$y|hB?rLFmozosWg z1%d)=%lKkEPs=Jb{s%hbZ`}6hJHpr4pKrT#b>7~8Xa0{-_28fRzo4J8Jp3}F97L?7 zQB>xDMvT5}Cd|R1UyqePB|nXw-}*6y>tXqIy;n?Zs!6g*;cQ_sehuUKQ18KE0oFLb z?K}^Mw6*14-+4fFk;b1NnqT8RpR3XM8!w=pHgifF-qQ`!;rS75uXQS7a0a*udM*kJ z9h^{B17bSJmQRMAlJZ) zu!7p=Z6uxD;n5LO%a(=H%H*31>PH^FJY>vo)sukYcy03#);rx)+ABO-&UFr5``kKj zIqqAEA2~_DQ=W0C>9zkwE#TaJvvUOHxlw%eihp~epc0Q@!cSdG=O3}Y#U=BRie-&g z-<)y2X_pF-`SEQ*Vdr4)lWMNyJm7r)3l1PF)L;9EfO)YqW%5nepT zM7RN#;5E~~;fT;RvZmX(sq34woWjBZHiNP;pa<(xop|#cR%B3Nm`SiT5FdV<(R5Yl zGXL=ipfz~Sgsz!n-(*GHXZY%8b)5ih^~kOXsFzyWE-sW_pQ~Qr+o}IuZZUn3&oWj^ zGRo0?r)EAl=`+GV{y?)xyHVur8&8{_td8-P_NX^s0*X^CIv1>#Jp%ru1p~NZMs$B} zmKPr+^56XZVtiwe$adpga{LxyN`ILG05)J6Sqm9ro@+BfK&f2Py>2PnBOWf%i6Pg5 zkO>RC7Bihr7vXE=xf&l*09#lX1Lv6j+N1S=`H6%_;l;Q54Ht(g#RG*i)ixEd>jv3r4$uXl+dRhra=m;u zQ8POS4pT|+)L5|h_70RDE4qqUQ!I7iIq0O~?w4dapzFr#9xI10R$MJM`{aN}+h z&^+2M0M|Tyo7}I)#-;;~>;7tAeQR62<))sak`59EDS~=4hYJy6*Pji@_a7JQC3xWh zRE}sG@^@<+2P#B!o(qJf*|<#ARdjNb$UbO=-^;4-$VBc z3}vg(;`~QuZjL^YwUo*aR{+v@akQSH zMKnK`8XIeUGMShA?epu~o;Er?)V3UTme{w>3iNG=x)0Y+t!Ll}|STcDM?`r=+w>ZE2 z+_8|psktfvFaq~7jS7%L+`bA}!6_+(T?+&>Xs01LOo*}gi-NSb#(qdw&;1VUPMok#;#)I<`Zgoj5=|DxsmI4xM{mC|rb#2O=RDGw6d0{6Z zyz+=8O>#WiP|LN^6y3=IV_6Sbwq#fh-nv_FfA@|$-<$CV+Y#o*oD|-a8a#tSZT_n) ziQJx%E|1fJDK9fV-p{*CzT4NvBUb-8xBQnEr|q6Xj5Fl^^UYIK^+uzPGE=?}=l3eY zidcyR3P*BNGtvBBbwHm?KjNIo@ge}aP`+|AzAL`^q6$oA~?=s|II_J^_3*?L0!L*t8wd zDex8B>Kre0BU$h|)6-aRATQ9Y z>le}=j)9Wqm;REM^rXX1)SQvhs)o!iCsOtYFT+e41jdImqJpAhDRZX+zke?hiq88E zzv!}$#0fk|{bfSM0gERFFU{{F-cJz7(rMubbi5Dv5oNwS30u}1`b5S*uh31p7`WoT zJrF#7?nxD;|DSX1f7uereeTbF=L30>@`NQ={Q$m&$ZjKpab_9E-!_Wi6dntQwS)>5 zO(?sBLolpZsnss3_K_eQ?*N=c>uR**#V64@et?) z!w-2CpvrMw7A=4v^rimv$koagLmu}$z|0-ey!gPP1>1S*z7NLwWWw^}#agUont7z=)#I1b!_muK*7`vmOOwwC zSq1|zmCYQLBV07!oGp{@S7B8*2_(wj3TtGo-EFaCBs!4|Qmy?ZN4!ree{8s)Xg?GB z(_4UPeJIT;BLu+eU8sjGmt>YQSPOp5D8CuiyKqd$Z@w<82hVXQ+@L(qbMx zz8s{&;AeD8gEHZs#SY;sL#JuNsISh>mD{iVYmfTxb7d>?_57mDZ>$IyUrGEe99^V> zl&pnpZkqvX*BpTTBR%T%0h*GfLQhmMC3sv;H7LLl&Hkyl@N2*LXC~b7DQQ1ku!%@n z!V|8cWP)T0OL`hb)%*AHVhHZ`v+*jE5h-MRT2*7U56jGBmG-J?-GZo1Or-fexb%V< z-uo%;fX(;xXM#G$_X0?E*@}}+#m@FVZz2%0Ia*oD;{vdrefdGJV3r|f!=FTS(d4@N zefXX8+Wf9h6v5mnA0tFAt|Zasxy(wn20-_fS>%q7adh5r zGxo=@x?gk%u$*M)Q@2CquuwPJqgbDD^&oh7$Q`I3JsG}aCUW0C-JSc+c(M8K446Z7 z7)l;RF|7}|Ok3T#DC>C96Y^Y=FEM31g=?8z-Q5Z~jPt%1@T@$W+*UyB6e2mghSEjj zcwM`g?f2C2=cyT59dOXs%r{&O9*egok!d`4vxSS`Kvs!yeSk{=^eOv-iaA}wC16Z* zor6P!V>_;r9Bia-f#T%BGNihEDvcG8Xoj2=8z9H`6wd*}-L5wFc!um0MGPZsxZ(7J z^ZL;MxARG5ef*inF9+Xn@e<|#b&d@l%?dM^!4b@_jI1Mu4t#1R0j((2pNQd zB{*XY2lF()7mO7@*Yema=AWjcJq@{e-*g~$yb`0O2tmdT6t zRO~f${|D$;oGAS*R<`yA>7Mo+_IoW2SOv8nAI}15)~D8EJ&G#VRW~!muP5Vbn-9Ix$=`J!gjq~dZ?UO-^E9G zZqqPghQJ<571P6`7J6J`i~mwAWQ(%4P~p>lQv|x54U!=uhB6$d52&=Xd2@u6a2Y)4 zpT+x_+5fQTUG!UWLF_CWxZVTz?J5_m3B?bNpS;T7H(ZUwhZ;o4oc-m!x^F*Ti@Tkd zq&kDeW!b~}`*DUm4x@2|v@+<3q}%W;o6x50>$wMSw@;9&xfhfrtXS@%S(efL52Nqg z_|C<=^0zTZA>;6kvn-;^_>!&@;QEjvu7lA8AH6*O62+r+@qWlkIQ|G48PNs#h(+)K zB!M1^LP(GLuV3ovB``md#cBf8Sd!?21~v3?t0b!V?e^-jIn4~eHHlrNl8r|LVFU(eIhN;_6!1hi*G338x*IyZFK?-k2Oyudr>AWxN1FgT zaRt6*@?$286rLAsL_hsQ(Hyk$SLj2394LBeLv{JwDo1MQPWX-uJ+D|g_X7M*CFuI29TuUY~b5SLg$1~@aP1Mh|pfyd{8AS zmpD0^si+mmD|j-&3peJOAzYpRR!haMTL*TF_gP1Mx!5jor;qE@!H!o>#Zb)weZaF4 zEm4=73rIDdXZ^D_S?oM>+%9_32{ach?5vHp-mVq6Aj%T*N z#X}EwTcU%{c3{2StE;QMhhLQ(rZh8qNn0M6OjI{S8i*ftd5ykR&()nci|tWn9{Fvn zjAN5gTkgGHngH#LKjUT}d)O#g7tb>G3JyCtS)&o=Y_=t6x^YW;)W|L08E%d}cUSAQ zHu-c*1pzslYdLv6gz@me#t&_vG2`dExXVFtTvj`h&1iaw{Ky$4FeSnt zm>oe3!Gx3bHu*$BF%i^VUJ;j7!ScJto@W>`1p$w3(?w?p%&MpnZrW&z-U`_6+ngm6 z(4G0`tZ%pJz)x-^;0wDotQ%Aik*wqOd>=l?%;xUAUIuKk5h&dd_9=Q%51S_W;3#xFNW^&u@)-oFe1)$YP z_%2Ly&vpEsuxpG5qNphw&hTAwtMvvIC-2p=RsWUN=JlN3Z4s~Y;WJ%=o2WT7O*(zt zm1hVHVca2H3^@{4t(vc4)>`mO`sTv-q7MxE2P~5)DE#N}mOD>2YnEx#`ENgV_(?lB z)_v{J>Y$c8)J4R^ywu5iR{2nnt-9rav=@{nUh-g&KF6=Gp@@AdYd?_;n~h^XoW?kN z*?;ivmH1t&#oZTNfg3pbWp}AD2H8x}75}Ku|Do%xpMBQe>#AkpS!ypey`?vUL8M~k z-)a7(>3I?^bFH~aHZLa#Wpl)O#rfgzk3hZ}6CPjQYmzbPgzAhmoKm<%AtigPpNgPY184 z=$CH{8iG37l#l1uzntmOizTKbDB&LOygld+Qmn%`FR}W5XzggAYet7R-XLv+-Ot^Z z87u0%2ianby5Br1c&qo>)IfC|KyAb@Icq#NFQK4KWC&I7n|PdId4t6k_o7bWhn!K# zJ`X0tCU+8U=c58-)gD(ggU^PVZ3D!_M;1&!%4h0912@jzccNn@!HNgr-R9APiRvR* z@{PT8OdKzPUwUo9l{M}}Oo{8AeTX4y&A#N&(&ezu{}%c`Z>~QXrjR=9FY14me`ZWL zd8u6AffJIyz2bk)ine2N;LCT0a=BCd`^*T22q9E(%(=XKFV(u&#C(bABRjuTobkQF z%D{S`$d(z7<15dp!>)PqoFblwzlj05uWiV4rKm*O*58KHNrZez3#7g;<4J~QG~ZQ~ zM?wlVCqEW2#osLql?x@4{zi@Iq3ru*iR-;gV{-%5Jtv1CwQYNH65;>*J08OegShxq zvDZlMA;z~}3T%Qcia!qpW44B1nKwxt3><5~O|A@TrHe#o_SaboUm7&4^C^`}7EK?s zL{GGbgsimFqcd|e9ruMs3>`Ors6`}ZpU@h3vkD#K=TcD*`li3czxHKIC5B(cg@kW0;G4%e2G^_f=j=~8V__modRNWa*>>%WM#n?#Hpz)$ zT40F8;;j~&OA!pd362itn5qzc))k`gjk-0_VM)wft zcV}k(tLaiLxf*z4!8~vdquoUMPXBXi|GNzTc}9QEbKT!qUx2=o#U%0{M>{5>??Rg9 z_3Gp(nB&vDPbZ{n@Ly;C|NiuG7!0Kkzi7AL(+7NK$)bQXK6{hVXxp`(e!}}!oILq{ ze!|_`M$%R0o!5 ze|6uTtWh#?DP#z`(>Wh5ME5EnCTyN4_bzR#hyJyA86uCtV&ZEv$RPx`A(O+zRMj+m zh{)vU@yiL8n*p((#f=RO^+lbZJBV^e#=+~_8RRT9yQ}dYErt#oc2=dN#u^~s03B-} zcpd;(>89f2V=^;KKV+TQo&RRJ=Og)6{g8y1D%a*lk1uI!^YABhlT$v7K`^Ge|}*x8lAmH{|?|; z8jQt6sLtdS4tM7dabPsPG!c3Tu|2PAghBVd8B9D~UJ<=2Zo39x8Y3X@&lnA2{xYTf z>IeQrRz!N%2TRBBRemm0pqSuSKaL6Wc&~``ZQlQQK8MMK{htl=pW9(DESv*O7mNz0 z6hbh>0u#c12_WVh`}Ovx4ASE*<@jdn#e(javMqCE+Mi#9uE&zz)0`q^tHbkQL7dQm zJ6iyE-*iHy$?Y&A)-=bI>csr5I*>N^W-?EHl9eFkXna6=5Wzb*B{KBvn^!H6Y_i5c z)5jFWZAcTEy~1N+V$vT^ua;Z(1@Zy~1vYM9p;Yan4ywV%v`fi`YU<&Z&+6=PL8^0MepmSGY#^qwzy@>$seYgkDT1(uN93N{I!CXi~FGa zs8bAGh5&CT0bFobpfKE~r#%c5EtiHpVB1ZXKP^xTBiIV*nsj%LeB!pyx`jowgE2%9 z$)^@ee~}@HOF^E_R$E;il;7{ah5Nm&|IE2M9o~p2zq?OX-lffN990RAkJmzUy6`T0}bcIMc`ah63r&p`R%=HVnqlb6I~{)jTIR z(`of0PC}6sgMz5RRDIRvGaKzWL9AM%z2+)3yJ>vh+9lQ67;#tb%yC|j82RJ{!>UrU zBVWm>X+kaps80Nd{n3Nxec(o(e5<&KrjMqavS?1UgfF|aoN9G+Sv%Xj_p#4V29Gk` z06j3>C(mxXPj6>?e}6_=&as+|*1?)vxc2Q(6tUSld2lf|K#zL1H+x-pGa_coT=FU4X9Vr&@Ci{S9Z7rUdn&)aK>=IJxo0D7 z)CGPYaKKYuodM2iaMs0OBHMSp=N zdF{^DAl`nm;yD%}9|^&s!b^kTDOi~*=E)};8XFTR5vrHIn~PX_yd{MP3m|)7mT%DY z`)zrjP0LXX!eJA?T?S67C@uHPBr>142MnS6WLFX=SwOzgdpUNO9WL~6t>6nyHzl1Q zl1xZRjJ+L!{Q}m1`!>2AGXl@F9RrxN)~~t$rTih0LDP^(t1fW;YZTPXi)Ef0V!?BV zKBM{NR;bn0stuM|INkoY{m-2Qw%rAu?WWwfr#wnuxYwEy-lHRpG*p|*!KoH07vVH1 zOWL3y>ClJ=u<_>@wzszSpjc*^B}{f2#Ps_WCa0XJ?p^21R-1Dl`+8UxY=%ceSuf>AjJeP|xOo z6r>itGD$ns-}yKN*4qDdb^A~6&#VHx-FS34OwYTJXkz>V_%;QhDDw9J{>ZPE zZ9RBtNtI1tfVd)PEnn%=RK2wcc?6E{>5J3Q?^c-lkN4hJD3r(6`H0t4m4q;c0)5`} zlPs14FOv%m5cEtqHnupp2u~k}=3eu-{I&sA5J8z^O8ig{cXy{HmtL>2L*V42KH1>4 zt=O*5vc!kD;wFci+(MlR)H@^4pr>9B{nWy&Ct3xM4;yOU@kK)n*VhVO`q>MX#I3E- zL*19Oq?V82gi$46GN!)LCoYAHaj66D z&fCT7c?v?Kh^=>kAv@FSyxjHkT~q*<@+%b0@Jidtat@Q6|hS%-J83oXP7&9YBl^IzOH%;TBFLs_Q)5 z89`D1C|z*gv?%q4YdERbt~_zZqVNwsNaIlaq|sOA1$9O?*oCv&p&d|(@z%B z@{{&;YSp{R?e2aYZma<2DPHf+Tf><%eqY6uUuMv5*8e)^8feW#a&}pp(a}rO1!kY1rHIxE0w>(eJN6O-waCfijH928)FAjRCzv+hVC$oe zLN(bgq1{y%fDSdrg|%x&T{pG6+}Oa|gKzv0l?UJG0Mg?~y3S`)Pi<28e^JkWbU?b_ zf%6Y2gYSj(5dcB695H=APJwT`!<-InKYx-hM7!2FoGc1UHR8MWI;>B`IW#^=IL=HR zrTa)CW? z9TzszSb{_s-*o@Y5vR*U+m*5jcoWeCHRi5^HXsdqHeMgCo-7Kf=YSiL1p}XKzbGUD zz76|Y^;JAoK1Yl&hOyT!>NM36&R_ciM4&H#!i&`av1M9xw=kmmV?bJ-m5J_dqwIHkMuVhu3 z?Fr5hVFBjT1n6)qmZ8mhKKycY%-~@fVme)3Y@t+m`XyD1^)PH~VFRB5=&ZsRu>cs* zwXX;{wdkWOUizJ$EXuI^WmtWba-r^II1qmP0NMTb_fh=iAvAx^456d>3-%<1vAvsK z`L95%U9ty7)H`0cJN3FO#FE>5obN;Mf9)k$o_Yy9_@T{P3L7WUx~b}43Zz94cGeJSl*^IM;VzVm$L12Yxxnd194FsgXYli^tEbIv$yOu5Ks z{gu1x3d`OI&~x%Ag(r1c!|CHgA`|@EGp}9lUV_4UU0iVm>&S>&ZJ-;YXts`J=DS6F zAGH2$ONDyD%n277A#Tfev5F-XL1O|%6&kBHLbEgw*vQ|5l%N+_XEApaON4JVVB_j zHig^^FPAY}xA$x#H55EOH-TWZ>EE@yOx&El&$Q=)4cr(%3LE z>Ji?HV-w}!4yEQ|57yYt6aVV13(r&CRO0O+;lmOWZZI<|C86|j-MfEiXq)=kdR_!R z^CKDDU#cv#>{EG=g;b_GBST7z8+QY|s}4nD_i=Lx$*r-b&`$FTDkd;JmOeE6`$k}VeP@5w3aluC`_q+u2mRzbJ+c=(j?v8z4$x9 zhT;6hQvq2ZhaPhW&S0v-TTK8!x&A4HYDkE^An1k7u;O<@FI{2IdViB|(7R{E=<*tLq9^v5HapgO!Gdio>U~Gu zGD3NvN#G(W5cR+s5$$L`onqLUH}%}72}2U3p`>CFd{SgD(@(pPp%g!f-);hdp{#Bz!LLhZ5Sr$G3KkXRsx&knnS&oJ`DD-b zj2>u$tD69mb9~CFATDNI)JwAr0S&La9h1O1&-3l92-^8DG;^G{V^O5S@4>F0uG3L= zU%zhB2vuLYmNw2luyN8N#tE0MDS5kK6NXS^1Mx-ey}i_kZ-<==v(-lfQ&AzOv2r`} z&M5ZW19ZpO&t67kFzThgjlww^-ENQxUGDo5P0t{;FB9|drF*0i zDjp`${DMqOY6(nQ1f~Uw&YMj?t`x9}bee zBzA@?sceu#w)pl%^thy-+kV#xh_zHo${90z8WOOEfhdA~GuX=!Gix>$^UGPcHN>SR z7mVD$My-%Uvy|!e@F^sPNmU;w7d^Xci))m_K=_ACrMR?4g$ZB;@$Gv6CVJrSpt+A; zhLlt2I~06OS^M49uYCD#taQnX(|Z168ivisp-eueF)H%!kq3)~(7o$64)^6e^j)`P z6e3#Cscvx6vlV0{7;HlSB+*kNZc2z1{8h*WPTclU41gCsg9>67Gyd4ZAYU*8Apn^~ zx=umdrE7Q;&zmkf~m%6A|Cc3zmfk!O~`V7GD15*xggW*ER( zuI*{PinBV*hZsbJI`W!(@54ws8Z>3=yC!-DDYAk2aOG0;q|0IAkN1fDi-FtT`ybmp znG*6-j!_&IJL?ULRfxHNcXBPaWpVQ?PUu@-0LNS!Ydx(E@sV2|)#YK+%$Dx+1s8W1 zB-~Bo+s>O$3`*Qc5U@F-R$Dzxv3uT}Gwg`Kens2QK+3%mN_W)Wkohus68`Pjgo>-X zALWh)JhEw`7A{%$sOR*NkHK9QD#*L#ll z2DNz8*iIo+Gt)e&%)K^E4Z{k=&V>B`g8d=?eHp@(L0BCqq$&Whh9id&!GSP@Wyu>( zqp=~N%51Y5&!}inl!4_ohCNL5OL|d1S+j-!Gk)Z)x^$DiH}_;o&3v`eYd)`?w#EoV2YA z_3RzM93~jNTwFtcb+FIK_QSrf78SgLUEnF?7-+x<%Iy@>3rY!U4s_G*x8O!@!rrg( zyc6g37P7b9WU#p;KAb($9LrE^O7raPFbg!je3~TUn~pH@&~sy(Yi`Uw$~A4@{vq&g zrrCLihrb=x^mM>m25{nLhCUQb2h7Rt^6 z(FiXMydG#%wkUaM-#%PDp0_7uqELfkqLM(}&#qHYBTT~_5n`hJcPWCZL^Rs_akqlWV{495eMI*2e_Jpev_s3Z;>W8DojXAF_(3A>Zq-(Y??n9&Hw?ZtUZ1HtIPn(`)64& zeXnp~*EL;|A!bEaE6-b9&pwb`3YuUqUoGpkxLt^!!8XT~Ac4R2+^h|a$i7+!tyU84 zDO6bBSv!PI$qZ9MfrVRcO}4eh{>|U}kQ3Jhod`W@H&}o9%K#w>ep$e)F6|G;q+3K5 zl^RR0<8hOm`z<%DI?KN4-z)L2ukz1lhv$eqCdRc(@*D{YuoxIvuu$2dbODK>X{lH2 z0=Bzx{4U4KNJwI5`*ShhG<<=22dK;1zUS6K50{SKX>CgA4bBk)gOijr)xp@*6JA#( zPXzU^7q_YL@s!7-PqxFHP04c?$jQ zok0g?W7hA@@)_P&Ndnj_+zc7M&Gt4HkK>KQ@=ryKkA>!j4-54@b9(b`S@MzhLFfb5 zD7gDy+pIggq$*riI@;>bmQUm9D=fFrwQf1;;%Yce>F|NM0y-o#$W?V>yxg z1dv!E!SsEIT7F|PdYLMe-ECe_m|J^Qp2lnc0T|=+&4@kM8-|{iF~N1%enVR=k%-4l zh4;|$1rc0LrUAA5d7*%L52|Ame_W?Tg!KF{CoK(4l&gKp@L|}&UOEehdXwIvUO5`#o&Cj1wj@-HZI;jzQlK!{>|U8`jT z*0qj~2DLI3SN~4J>opsjcQ?kJfgm2@{Vqu<`Di1V1W7ShF%=@1B%Rwur@01$AYS$x zY?+!T@`G|>e6;K4IS>Nn6qe_3)q&DYjt%VEn9H{{IhCSDh4O9%oN?FgyUUhjLgt97 z5^I{|$y|efCCY37ZrTS2jReP6Py9DM z3${SKer|?i4pPO!PY22<5Q3J76iG7RAV69=KJeZC@Xob<+HLXm)xCzAGQE+}*KbFi z1o7$LC%EEY#UsK)o&E99aE%Te89}96Ln%g*7Ls#m?)3RFDJgW7-$t43JZLDx}46)L89NC}>}cwxzkcx(cVn zW4nvs!w@~`M=^SP$S$8^n7wX`$N&@uGaICS?GGRHa~*!Nix5``!sC;l>E$_CN(>$| zM9IJqJji$QW-N@+MBUaq3Ao4wO-!^tF1O@I1YerYQVeSxU))^Wr&O3z3Q#mJHDB#? z+_FDjnK2$s60B+dFLezR=VfBxC2H#QlYr{ZV#4G%8gEGZ?jvQZWJRN4;{^x?OW|dg zy}`{Ct|SiGr0sMx%l7bq-7OHIDLNcA{lE$bWWE%q?ExsuUTPGa6RE)E6YAw^=C zZS!iuL15_C8H4q&hWxW&Ty6x+aW6oEI9F|=fT^WX zQ|wEc6@(mnRavEzFbG&vN54Ch)e3L=;|%gnQahshqW5)=Fml<&KV1C^f_mT z*?lekNJF%nAO6WD%ng@W_R3evP#zQ;&=Xxp4%i5`jr$VgkF!UO*$C=NpgA?QEqmlo z5K}W_Hm{&Ygg!gF5SZdwxn5puD~V9YNA?8M_qc!TCHR3`^YFcWE`ZgBh*Mq~XPsfT z#oR>b-cxy2fmoTP!n@3B`Ag?vMn(onEGD|+oA+vprXS>EoQ}>ptCbZ)fMkr z{H%9ZgGi8$@3@Stpt6d_PGKQXt5!X~%%P4TG{JTnh%4|%jYtX%!GY(K1Es#21_kAM zm#R>qG!pK{Eqi?#q2FRd*Wl_Pv>7PYE}z&xZodiYY`1j&k?hOia57<384CyH0O$Te zz|FjG_H@Ej5-T$Rl=MbBGMf2D+c|MTks5oNC5Fcd$8E18hUp+9h(9NhhPKDo*?{uI>oY?D#h+>8ti%-xK%(S!qxS}pwK=st=DA?E}D zIbh1}2IjQwK&V{nHirXzxSY|qOI{Q*xNkTc*+G*IGWM)hO9xQ^;6SibY;(|VdvZTr zOoh=gv@;3lTXyIoUs3~-h!<+zGmcS9vjVWJq>aK0JkKq1qMq5wz_-73R&0HiM4Bc| zO)Ss%<4n2t61V^8LA1R>QGKgXrDIS!1#KPXm=`e4v&B^$O=<@E!SDU$d~dt;2S}Eq z(aLpMphERa^&98Di=qBehBW!r`(jt?^q1m=En4nb1BZE-3NraPA1@y}T*IK`7g?2N zN9bl?wc?#uoTRr&W)^w6?UJ^F%wDW1{)A>4vG_GN$5(3)N%YXZEk!5Q>LYhIlH@I) z+u3kf_tW!`YsW`}t-}_<{VmTOJo4Sk>fLn-eH$t{^Avrj&MNZ&cLvl7^(C*`cFgN- zjP>(@jX^oJSzFd5veidG+bKTq{CRE84oulP7dRw}A7848q8b=rl}tDG>*^ywAY0BS zi29uX!dW;Z3@1h1ppf}&7H{X&a&B*6^PqUlQvGf7JYCrE7Dt0}+%d4WmGV*Xs`{C< zTV7V;`xQaqCc{&?2>qs<5X@2zZx=7w3tGp@OW!tMY>j3R-djf%!@t)P_B}M*&OCl8 z6|5&|_u`B%ai(+$c|B$!AuVma<;T&&pk@O{J}c^aH6M>vE8>#2%W;{t{Ooi6Sbn}i z{TWdj!U4@O?Q$w1aVRH{#D}5>f?vV6a_)m%kT(ZG`;&LS|J;&hATs0A9?;k!>C;x- zYlQW51J_;Z&z_vBY*Z=Y=5icAH`1OCD@NMMc>?Iup990oao2l}4LGw{a+{k{5_zMC zC^cKRk!C;HeMB>Qh%VZ&F$g_(E84`~;r@GP4ar6BlK9}e0dz8W1aP1xtQ8@t>b@+b zBhIK*&Xtl|ZSYpYdQEE$BQ`29oMS3O{K9$hCq~%i6)?HYu)WFEzed3R1~qne_C4l0 z3HA#4^}#`{l*s|ne(4*bS#uGW&4^P6q(e;roJHs6=C0!PReM5|n_vuS z6MoUv9H2Bf-);lSDz(NXjSxOa_g9|QNYN&^r_wSwKZ>}<`DgBAnmEcr!!WsXHx$JhJW~A9&?`|Xx{@ieHN{$q{850 z_5LTWq3MWOwhG?n^Zdlkxyp@R=^h=G;YVO*@orMZ@a(Y#rX}ioytsq0YS=SA+#hck zT&@@(Et~ZHMA9+OjPzzSG`^N+37-)ZvGxMKdGQ<)SG=-cUbjI@so$-_a7H4#x)A!u zPu3Q8G)2~H)17q&j~?Dk<~Gef^9^X%M#WllY!FnAQ9dtK5HGCzK6ZWuSP!%)EXgQt z-ZIH8rJkPJX*B}A0>qY|2DIQ*TKe~Vp%~`x#7((%;&Igopx(3 z^{ssbI19pHLq>b!VOBne$9I~=>v#l1UL2KFKTNRqktwH zvHztQFRm_}XpCM|bg+wfmuF_>dLY?>(1+R)ZVkneL-sZnhM4*V6|~D%v+TJ~Hw?nN zd}smNK4GAK4>m>I`GaaN-Vmt)GfvWAZJ5=8jPv?0mSEMuFl;A07#Usu zsDmj-oJ>sXX*?n&W^i|RgBg!ACuk=oHr-$owPW_f**?$ZSX^W72>J33C-l)k4gS!* zTy`p2huJx!Ur%o^k&Y))h<^q?Xm#B|CbZee>x6#{BaI|@0V%81Xnwj3Tk?BmbcWva zvow=wW_ipxn~s1=$!S!l3f-aEb|oE+nbLk4H9s7vK{2EPdF1t87=*IQcMEHPWhF0y zSQ2bs@3j^PqFY+EnD=R#a8BjKcV%!NegM!=4UATx00RK9&1g3d6Ukqpli*iywi~KA zqF-;rRJ|<{fwlq{4x}JFM81m~z51?jL3QXV-;#7)DEL;L@TQXpA|J>GU18FxPU5R^U40ZI6591H_H^zhxFwcVg5${mSMK|$FZgzH(M=kC zaz0lTfcYn?Ru8m8y7ikvi*2MqJA$k;E;iP3bE3GOXrD3JclRdW|B^fzWtx&mWHuS$ zl$6y3-V+{?pfu6lYq}!Q>8)|ymVWQWm5>ItS${iU;l98_#2bVcGI;}!r#cvWwPzQz z1l$ty7{1SHR4DOsf=_+~jJVc@zR&rghGWf6k$XqwsHQEE|sA$!x~< zCFO?;t`W<1DPovDXzUFK2C4zJr_~wy_Cq4~TzlAhk`PgNPl4cL@BN!}l$+0ScM|F9 z+~JUKkB5=o$opW3P&u=ttN;nMrneB+2fq-5xq!o&r=HNR5!#sP$F(j<5a~Fe1RtC^g||i z-N4j<5VkMqb65EP0mF6K$;*sxIpwNSNZ6}pQkdEz7o-&_`2S$~z}0?01|@z76weY! zs;9esvODyiElf}exrI+tJJwgRsAtaT3?@#(BVZi|kM&LA(`lq*a8%@>Fz z`C~zJ$IOfu-pi!-*nnMB;(?~mzbEn{#O5w0E)INR>k*^*0;*f}rPJxH_VJnfChWsepVSSIzJGnM~lCU_b`Hm&XTrPM01WK1=!Z9#Ng@kUh zrlQmM4@5lyh`ato|GJI@7nfS>)2Eo!Sc(H;;)$uLS9M&o!j3?OvXLX;g8=Egk`v7? z`agb!jDUUecGE?~tq~VBMSIipbEv?IskT*#p^;I4_1?^qBS#z7z-!!B{i!q7>i{m# z_6_#44ET)ndwTn!k&!Xo$aPFw48tNFu1#LEXBnL_T0(r>F0Th;?L|G{lJFSgt$~P( z2fCK@Ioc`A5bRF=b+y7?KH)GgPxpap>iagdZM{dl-ubJ4zHS2IA1s#YCo=-? zpYgN;b2fb8^(HrmCw@9nSjqszj%~hM18IL>Xkk(P6@D2Rd#DtQRj2wsjC-3W8Z{jjv);EoYe9806`#l_fI<`#{#abH z^mcG?LabgB?C&3$zNnbsPWff3f0j3zA+;Ay=m1mayUO#l#s7OV0e?WH2i6Leeqlch zSgUfMwuL!+)aNotK393KfK}r6N5Bv>r1;SEtwGw&opdmtEzjuYhZ%2OoiI|J-JBhc z9!AF_fUUCDX9*k2XOcydT;NG`LeKzvfKECjT`5WjWP9R&#i6J%;%>uG1iO}*F z=YQKN9Jji3IRQH0;4zCx&`t%A-%I&Ur*h@J-(r*Cjc0e3XuC~*)HOhM^nUVOWH~f^ zrCbh9nqYtbjZ-e#Nc!0O>i+7!Krauu?@^=HdJs@IAfSW!3jsOFK&$t)iRkWCVJ>dL z50+|=ex)^)*&2f&P4i}wiI7(XjHQ3S^iu+h*oCcC^W?)xg2Ie%L?vgrO6Y!1^6eAP zxV}|??+6P)*IwTcv_%1TH(`p?^ zNg!@&X6pIw(QLKMbcuFx^l_H-bz|Ul^^)Zb%{lSz*fvM_9}5I!YT}#sjjvml-;M}z*ywP6mhdmw+L=!$0jgpa;l4r5crzw4MO|Su! zt$XgN;*&LFbZNSm$1r_haA5c_wD)uVWLfMpC53s1AQ+oZ2Mf(If)B?MtiqWnX$n^U zu`nZu{Dao5^B@4|a>QNv+up+T#S#Uo6_$SnF$Qp{d7UR~6>|avo|V&7RgewB*nO9# zrhT%S?7u`|BkDU)1LL9T&PHNi z*EctlBrT)T4!3oL92pQ?66DarV{#7i^1k(VW=Ig|c_>J&y>`t)D4)C=B2{7nRRA`L z(5>w%U-o5y;6f`;%30Rme|U#B^k?dB;@-uNHjQsVYWB_59Kk+EGd5vN zki#C!-w*8>W>)aE*U7DoXiQr`>>BcWRBkRqdDbQSJb0K<;t^PG<+M>^9{8wKJrPeW zNhFw-N|(|aOSSi8F^^;{TVj7XsqlE7;1!WZB?`bZA+ch9{D`m!Z~%}{EiQs^krkr#9(CoLTfJ2nYuENbZG_`q*}!Rpkis67AEV@nq+%#Zv9$@o;Udr5e;;C$ZXj!VD9J2u1_fI36fd>#+A~~_@!}?r@kh+-n zE2Kj}Zgbe@Ub|n2F=tU!MhOx7mC7`!}&D(G$LqOQ^uB7sdI3iDb zrNlXh!`RBXFMN><&KGhP+B7-I>Ce?WU~95UU>n})Z<6qmFHy@SnNCZW@_x-Wn%j-) zyjxgzl`sj~fm7njve*nu-n=&jx*!^7$oGozCd531B2k=I?ktiA%bs?nQcR8p?-8+1 zX0v>)I~*Nr+^QwFj;ggxcsvpT+fw+Cmqgj}GBZcuG_S0x2Qs68N2h=a#6>wjXOxI% z+=|KwHm3r}ZB{ThFz~Rp(o$*!nK} z3Uc(xB(V+5i-(b)m;edW9yjB?flW&_26q5NZu_|wwoJjHL}NIo2SKkSyCo?9YV z<(~DHVD8oVP{3RiTZHY%_@`Mf)>}5B-Hn)Aajrk&FMhH)K3;*@K~f^zL+)}?Q>$HW z;b`3(n!Y*>O@9*w_Vq`&{2Ftwwaeb_rc+=?X(Qi;6}W9{9zD{{WLzV38|sWT5`>ed zFemf&T24lWV?-b?79MSW`;dK6Y?TvpSD8wIQ@+mT6mrNr&aLn+NUQRY*M|)|6UCS$wB*6Z!sxM8hSL)YyyA&Yi$-O)FCHzqy-ovc;kb_s)UX(S zlsp?kIzsXXH(??2WnQmnb4RBJWK@4{jsNcrt4)%8EYFc8hC+7< z3KB;K3~7T=pU13g)`c2GR5rCK_py@E^)cVhXQ2lCungZ^sxqo1dwh$?hYTWJ4t>5dqW3*!hJa&b=G~McVJ4@3i4Tc!3B7bHjj+sS|hN=%qa_t2iJrJLQ4d zd3hB)IbO3=50kifdnp|$&5&g|p0SJ!2`tdP^bXh=mQ67|y;r(5bFM<^tOqX?$C!vIpkX73f5bv zXyBSDS#k*C`;NXSDiM)HtYA|mj2$liw}t^ovRFpJCm~m%*_kx9_OuU5iCI4x)2k9yCxS zrf-l72s*5n*)pQ4Sku`18j!`M&mgN0I5PCg)wVuKsqw?0|!{k$+Yu9avR z;Q9oJtTEKM799I_+rIcjXd!2zqEq#Wl645gRrc@kqDB>p#Iy8=X9Ps1_&oD9NBN6y^p8~I;t7)zTRrC!EoQZATgQTHmEK+c zRP+}1GRQ-=11NBRwO;sBT*&5&MpyCBcHtXKG_#y3H9>Ipekz`UddIQgN{lJo!A> ztt2G!qNDmI`X1wD644eAk_>9i&OI3RrwV8MIr-x1142L4%#ii2a=J4uIR5Ze28gum z;ZA(R49K={21S}{vbW-5%S%Mz#0BbnT2FgF!{GRM+r;{U=yd^sNRgOFnmxz#`uXtf zh3ao2JPFw>xFjl%m= zz}jpU&OjjRqvFA*#z5ltPdVo3D;G5D3yDibJ`z2A5x7Uh0W`sB9ZK8 z9R3nnbupiX{j|U|YlJg$Z8CWJ1b_XXn+1g73DQW|t~kIFgIO2EPWKzKm9P}I*S(;# zx0Q(%vYIca`2HSz3e8?r$J_j*i4Y}+-xq>qwj`P?leK%kgcjZOG9*Ip>Ig|9YYkvX zK!w7&!l?p8(SgKpAeY-xiK9sP^I!lST~I#>?{=Kd|}6#SgMVN-%nDIu3nU^ zct30IVtumM?H=kpx#J_8oHZmA19-rYur&;vJKVy@yxDyyu;j%t?`F%_*|`f|T<~qm zZdx5(H4SHBmyS+aGN~YY5wL4Z#uJ{lz!2w@1DuE}&-a17*4 zOrA7J3g{eh68<6l_z)sKEmF8-sl5jxW3>@KHLms5Oe<|TD9fUfudy`Pl5}#)tf_4d zTmnWl=1&J3n~zN$?Hpi%4diBsP_j_**tb6fCv@*#V>mKuv)Hft1QdZ(4Jf1SfUy`9 zIjW_jy#y`K9IH8~ge&;m9spg{DVJQ@!QK1?r|Sjm@D_~cm9GWBNy%31z8Xw;?lc*| z76w}(B#9Twk0pQV4OsT_OWbOEM5=ueM%1sePNM_pNDDdqTb9GhPT!8S2xo6?ZoV)a zSy+Em+yr1d%xjD^;eGFBJx|Q*Na!eD<7AmVEMNVy=I{?9#OWvo!lmDU&w5tIcZqs; z-L!GexaGpeNnKRL5X=r4|Y9st5HhewoJ$^D= z5Db_E)X!|z0TrFqRy}Z$8Sz<$jZRHU0`a_`3p`F1bo{7$7gfmf6i*c}o_@)fa$c(f zw1sahExFLJQ~-|ZXApy|wB2WRvlwM4f`71|tXwg+3#h%ve4V#Xu<#Zwn^ve*p_c^V z74|EQ_b=wH_1gK;-K(NY1N3NIiK29#{d^s>)Sr;;o&EcbFR0+)p|VwS97x z{yaouBZ<-rZV}UwL=VfYvpV~*wZ5ZFaH2^Sj)oQ!A8!;hE7Ak+DVx3k=1K9mmX!%z zXmVs56U#lrQ2F7%S6uw9l!IO^`6<~dXFP&NcW4Vpw(`G#8FD(9qX1^nPStzU0fWC- zTwg#K5?;PaH5|iZl7uum-4(HI&62x50LqZ4OgKaC^HE`05kbVjYahjDutz40-=b?D zUAl*+Y3bj*+FyXgSTP|Yy$ZH&QV6aJ0&=Kc{D17dWmJ^!`ubWFzxnRHe|!J-c0X%9FP{Ia=PirH()+&d z>$=YKIFHYR-m$R`SnpqZ!6KI1CVtduFkg<$kl6IgoH!4gE+xtrr}SkUk?ftJ_OuQ*bR39dqsF* z)cttXft?E+DnG(;hDqGo>=usvs55-s+06i=lS0A zD)QBbT19A+R0Qg9=T$OH(%-;MT;T9DN0~?dehjf$hxo5=Bnizjo<1Vv6d`Wk7$$pe z*;V>kG7fX^`&ts+;=FS9!>x|ZSmV?NW~z7dW!IcCe|pbe13U_zs;56`(SCEaX}%SV zS|w-IxKq0(q4GkD%1r&aHy>=sA*7lwlQB;~+2>u*cz3k75x*6_Ix*z6N4n9J(==m4 zDStjgs%4?&x^T(ZXMO|X5s#4;f5i`j#?`HVEgT4Yok!;I-dj4%iV*eIx&6{v;G*4+ zT?!|b{@peohDm%V`;$yY{(QS>PdE+I$xvowyP4|vdHs@ZeE>?#yzeBTtabfk>bGSOkZ zjb;YuFtu)rTgN{DSLARQa3!L;8x? z)?Dta3EENF7HdyLj1j*$m~eA&BUXH~<0UCUSCx{=xF0W_0iHwUyyK@>+Tn@Ov$PZW zfcxXwymVMG!fiz~b#54@_Sl4H*ms+#p;$cPnr)1h#ReWQDJe;z-(uf=ED7NpN z-$ni=J*9*b`-bHSd&pu%03#MoI5LG1m6xdsXndl1g)aGmdAjv`^p>A{1CROVU7bhl zD_oVEmK{axatrfzuMZx76_cHJXOfKnb=0F9#+TC0Bky*+cl|p&H|t))u=Lm=uo(b` zfzMfiP8?p$g$u5+C+R`*M1h^AmD%`CMD=q_^OsL?x}^VH#97@c%%jHwA`iek-6Xx= zyXw!pSBHuRRMjB-{GHIN#YTVe?OiNs_ijoK+AI4H(F-!S#YY6^ZS(ViNu4^@ zqAgagZ+zD`9?O=;5iU=~vD zR!?qk$MjS?n_blQ^}yGSS~FiTZF3*aGyP2VoBeTS=&Ga)NR&+_1m?07lIC<578}IO z!a@?m8wZ#!OuN5*i$BnF`VC#aQULx}DAbJ0>svgT9ng;;fAaz72WS1>av-CEcLUjw(^=s8{VVh z@FG1^Vo7MSsN;YgV`%f8@AkuSyUFc>FnaPNb);g+883)37hMiv(mMB zh->~0#f*+TqP-hcP{8Hk3SxZ#y!4>aNHo-1%S7y&CRNM?5onU&t#G04WpAR)6Ha0)E+;6_eZgakx_PRJos1L;{9hcrPzu8edrY4hxyH52-?zb1$S3FN8R4;>u-a>DOk=%uAaxwb%xAZnhT z^>L*OMukhFlP~pDO3FIdTnussj@CvllJGnknV32ybb1RG#%sgQ1^%PBxK-Pj-U7!Y z(_4uPfd2RL2bia!Qge5)nH{ia#Ln`@)deYF@{=4ZKk`RRkHX9^YS^^jH&$r@Sr&Jw z6M^xo@zzyLxr9QMm4M@RoG`SyJKRPMKw#5uO_6D!>~Oh$rJTFUs`-EFMX}YLlm7q9 zo3R)5exR^XHH*~LZZGI+%;nTBwP}$%|pNrW>cyHtnO5#i1+qJFx^R*?gdSdQiA&0Zg zl!1WCuhOMfFR@psAYKo_G^2w@{ij@%7x~dQroc3J6CXLG!}_%79)d#I z@N(Io@JI3yJuNRh>l?{3-Y?>eN1qxs9e-l6|wt8{n( zUZ#lzQtuLh%mgeWl&{t^UC7Lgp3ATP`)nK!VR8$iys1O!yz&=;55wbWlj<_;wQ^68 zL)MdLg9+-)L-Go37bX1DBJ-#e4t+aX)gl9ZjJOE4Cy5p|?v@u`JV3tzZAT^ztGlP^d7VRn;d?l};Nt1OY|QUfiR%c5;g`OE+)x@Xu$h zE+9e6aEw~a-9AJWED|H4G^%t@tgtAm2s@}v$YtOIIR`)*NI9GkUP?u`cto|hhDPb- z7tzbb&CXAR3BBr!qZR)EaZC{S$g~Vl-Gh}+p1uH1;o?@aDK5PxpIXI^@JGM)sF70v z^+pBXJ&WZFrUb@(3ZBE0?2PNoBOiax`96YP;k!q_F=6hxTkHc7nTeMfXITZ9vwb@rDO+s$l@460?l~}E@J`BwP7KrZBL+;L$&_ZSu3RMm!J39VG=wS#{yt0XuTg{VHTZP zUzUHpHe(PxzMu|qrMmliIG{*KFl}7BQN6$du+Hn0857zZZr0jTJDY%$RMnZZ=ImG9 z>e2J34jgpJrj1@dT>E|M*Bs#A%2FYZo}4{uvL!w5aIbg5(9xa{ynG=@yNVBMa;9ks ztguX<1HC%~7))6~Wjo?tAcXz$JWRCDZzPKdO~O+IXZf+SlqZ5f#vu&v#GR22?f39X z^K6}w#ard;@UBdXKkXz4Ktp(msIVOAe1q1D1TuiA$rwhfLB6??gjvqE;m?a^S-b}O zh7&NJJit4o#3I3+2f)+Rc%(nVSv-O^p6y$qAjrFK%P$<%Dzf`{=;ExEN*Ix8@I%8;z)hUJUNvZ z?vk8*kLHOT$qe@ivDwo++p~ayWSMGUoYsJ;FySG2m&7a-!3SRBWgzLS7nzDNDuJSoC1!tL71EZ}JV4d%;Wc+cOsT2(*- z%^Gu%z|dwA`}?mokNZwjT(m9p0VmQOh!}Ww#N;ce>2w?KY zg)#d}aZe|6n^g84+AGm;Y(8FlV%QTScnBtl{);kx=k{`l@w`s-5y=}r95QVwohJvJ zbM+-cCr|jfNF=@&VSD4bDtgaFXhNXK2VSzYS1qVolpN9%$o0*YeNs2g_pi>Kzhr8pS*HBc+N2 zRompZu0~9*o@ckjw#B+#Pv3tu(J^DiyD{uMb-Ko2jOtiG+w=iWYPw zV`D}aG!5{*9?aJxJ+o%cjRPvH@4$g_x~=6|RjXPSi|(G<^D?YqJdq9(Ne9lchTq=? zPb~uvxH`_9R*uG>L2vqjS5z(!(YiyK}Ub;mFzzSTH;~2+RRw&X2{HsDG7;2L7)| zMf3m9QW5w6FBRQNMe+Cno1u1A`_cbPDSG>VT`B6-y;X{OcGZGhKPA$A$;F}jXdMrE zZ#6~Nu+2fSagfIp9_wnF>mv`)GVlS5jbhs?sXJ$PUJJjij+qkkN(Rj=h;!Q+OqH4N zH%T5oZ(+MtHNG_dER%nMgMG(sTMpO4iAR?HF6nMw<`d&7z2drN>0gDyPsn8&1x->hh8oi?ofM|x-K{55tQNPWxmKhO7mz1*2=G4DKWyn3tn zHL0pnqHorvk6E!-S9c!~1 z8ekgrsOLQ&&{2-xjhgvvM(|6Za*L6zBoJfY*|Bw}E@p>aQ1Bb=ifBO7fq1nV9tF%` z#nR+*db>?F*z(Vpzl7V`J3%h{s+$%a=J#Sw`k7@!Xqbbmh;J#Xc{7GGsNmDaQn zF>GY}=$#oGwJRxcs%THFrFf}z)C_a*SE5lNktJ1l)X**|>(7jQZ_<|zYliObNqS1r z4>)iMn0YJX35%UE{R-z{DJLRMb=t6IrD8kYPmOd(4EoUe8or0>#?D&9VW-JwO3jM~h%?wDX0MqBX=ri$JdP zni-?Cy3PHD^J9p3;9$YEc@Qa)U?uz@%$tz{-CP^nUqb-U^2>G>F(#bT4UJyeLgOAU-G3j zkjHGzNGHDF<(@d^ zqIS*a#Y?=Fe4f6oYxYD*UjEq*zIl8vi`D+v+2MiX^5C>7=a00QMWK;>3HH+~R$*I! z5cJlIKAJm1NnbQDCS4I>?Ywzc2L}&(0AVSVTBt?6?h#&r_tLnsTFq8VartYd{ zwT%Bq!(gUVCxq6c4nLph9Hk*p^+5j$P!VwO5`y^Q!cByT6~77la6&=nDtj7nrK;+S zn&utB%MV5G)oK+53_{8R0Nxjf%C-@yi)+!AD?24u!|`Gyu-Nq=DvcZmVt%KDnmzJe zbP5+0RjH4^)Z{*A@uyN=Jov&WpuOd!v|6v&tu2++_kAL^lEPVUA~xTe40s8DUanjB zxFUlk)06;qCEKBkh;)MAtR8i%xlc3+KKMuoaq4a)PKt*-JJT(tI=*8WniTJHN=POt zEUW`^MY7yn{iw7DEYZ+wOiPjr6GvSJ=rz+QfA>#;ZMimeE)gAm!SEnK$UwL7b;q~c zaZpsGm?$u-nC2*%NjC|br|cVGGx z(N!GF6=zcICml6|xhL{iNr2(|lo3A>o(X=Ej<`qK4$22L1w~uf&mk3;p&Yx#QG8cVB&t-X6hjN~ubZgU|`8dyDu|5f$Z9$tMv}WADyvbiz*| z&T{!G6X01!*7mUCN`g(*CxWl4#Wc|F##fDZ20G z^l$K6KF-D%4|z?~JEJ#z5QEp02<^PY-VZue!8UExQfM1t4|tl6c^vu7tD+<1!M(W`k-TaYlW-}G_G_`Oe4QKpWq znV5+uS>SNc}z;~Q+ic;DZ27K>OLv% zcPE7Yd|Rh{1l-mM?#oUxOyJrr);*UgWTJW>OV;y-)ZOnflkbR;2m@tcoNA!JNVYvL zlW(Q>srVRfD0eRuNJFvk*j_B{8sU>)5Bh;w;#I#|mh0H-_OhtmZ-O}R>O2Y5A)-Ov zbDM`kiw0|x#V}Qq1DY~`yVi=PkQ(s_$U|X(Z_4S={FR0h=2VZ$Y>oIDUiU>%L~b9a zlaf@{&(PUPztGir@=ii@#FSW)jI237uBr$o5j*3gzqDJ~opN`c#SI6v_Z zr>VjF^*i&Xnarou0at@dlQ^QZfQe}T)R_;)bmkH%+-Z~+jM z#%S!UPUo;S>x&Fs>Goc^x2|Z*O=wE@Cm+UXWJ=usk$nWwQ?ZBlciSm%C=|Y(s0O6K-#{p3VOXvorW`{q4(CIBxrd)9 z8>+c`?}=LG&|UlHgcRNAU$kyZ);!T#(>`o@q5VH$+y4?u_!O&=JSaf0)+|3<#=~-? z#$EyR4HtnQgj<4=QFae}=Km-?KOjFb;p@IQo|a~7D^Y|>pqy%88Z>^DN^PN7^EKe8 zL~57>SUc1$68ta+qrBJ^qrw*mNL)wZdp-lKM>H!`E8NQTc*sI!kNB@%2lKnZ5sH*7 z;|!jTVrw}U&wWdBKWWZ#bSzG zJg7;U>Gwp&nqT*>y)lDlVc2`l$zl0%(2_NTpN~mCaO##F5Ert_zQ4=H$yO^4zyWHz zuN=-DZzk^YHzJ>af9ihOsLhUTYt|Vb3PiQ;!CUFLeLa+FJ+r|3jsbk_cJt1?w31h^ z!%d5Xt%K+z+amIQA;*7d4=r7HHqy^X?>zIvy!0ey+I!-V;Yc+^}!-t z-1DS0$OnP-ZIlhrsy2061%dGC_*E{>k3i(D(OV$zeEm^jZI*))T3V*EmT1YQZsQgT z#cza=-f=t8y)@g}rnIJzGBT}%hn>$^st1e7UZT2vGl$QLxcg$>^AASEU9a6-HdSQZ zJBX8BJltMhPIOSKKO*jtdnz|8J?U0XMeE|XQVHG7yLOAelUcBH8X+XL8}wV}zr1uG zvfC(cmFhfyO)MWOj5GM}y3as1k-Pf@iS|>NV?jWLW0HQS zLz8sUs!@xQag=>yUS#jgVyBA8UJMRD)xHfw4}y}4c<$!&a_6x4G%ZerkQCGKFJ9){ zd}UbFElpwCH))mbwp(=X&TK9`lk_=zmd^O=EpqieAyWGK0P4sPb!tNLTl)H92C2C9 z}zITo2B+z{uh5T(t`tsU1s3BDX+dN$FCxi$Fps);|F z>&M9p(u$j_qhQqM-QkU$>N7cHrHLa$=&1?mdMB>=@z2VQ?|%iHuiwYLcmICc7#v=6 zdVk|RV+c+L`qji9{`Vu~Ag?yd6IFJke#3u%%L}n@_+%F(F=tzV-#He=I>+yma-DSx z`M{iz3&c#veSAAz4$L7G#7iX?*XSTqTF;AWOh>1A+8+ZhdBBR%bINK@coG~nfSr_f zUJ2mT7Mfn20v-rc(>&`&C&t&Jo(WYU?Ce9IQpyJbYt$fs?pSzVyo6~n=XwHrbaXtU z?F!_n9vxe67Cgqsze`{?JlrQ#@3@rQViZ5i;K`U4@M~>N%{Rm@05)k*zx~Cqx#Typ zftt@NqQP~oZrx>Rt41}ur~mM-_A^8C-6->!U+g;DN0S?|&i8T&yAAcVZ0M!E?aKNL zrThx@>zrkZ74HA9o%Zh`@nfMtuH+cj=NF%Vm+8oj0i8=pPEN;Qlskf`9KHwa5kzR2 zXuBayAiCs)(Uza=OicWA6R3}3tb#)6tQy&=!0>~|x^Ur57hdd#k01L928U{)2TM1r z+~V(!vWt_e0PTmoLtNS|-F~A9wIc{9G0 zI=STt^u{e*Bvn0I?3en+A45rj4~-Lu$jvo)Ii(0Zxm<20w1&%x^ob8u`D1>+7kzod z?`nQUW;oiVxh32@3%KlZb~ONhh-LiJ=9zvq748LF`|i{)oi{Pt z3RMP7+~sZcYM0x32Jq4ntsA}CVf*6G6+^Ege%1n;v;g3N;Z3AwRh_7Ou81>WIQdK` zLtcq!fGaM#&XMrsO=TfNrMM zdw>`TL`d@&Y$+PR#kFo$L_IYS&K|pqbT24+I>UhnU~I-T$spxN`2q-1@9++)4vIK0 zpDN@1T>ESexM=!aPw3R?dra1dqrIwk0n%lUwwA7h>>NBIu_pI_cFLdefJK8|O;HD& zL~hT130Q61E}p(OtLbzwrjW>)%5!68&gFc!_@CR}n}6MG7TyBiRU^K)y$u0 z#?#VHK&C%})VU-4RZZbZ96J_xm*@=3>YJ=RwT@oUZf%Lmp!F4ucOWw#5~D6+2ZJ+2!s zMuB3C03fv2Las3*kKb;~m(%KzSo%VX=9%d^xgH7qf^*y>qkKg+<~z}!Bvi?aDu^WF zeXR9k(!f#q2({!t1+%($xYr0vJ(KepJ&lkFD!Oh8!=sSo3&+S&pyu26M^=86D&*~aGM zM?%t`lybx50V?c#>XkEKU=tZ$YS4KuFQ-++KYXVG0`}>ywtmoB(UBbjaQfNngE7%? z?sjqa1vBY^&GP8o#u6%nes{BBIuAR9SP`KioTbi}F;!k&j2XfnA}>-Hl(|C4#(4t1 zPLwDOV~49$CF2geLI<(~WYUF=tjJ=jcf=F}=?ZePMA2Y@=!v?Gmwj=u7ioduA9|J) zT{Fmf3BCA1B}i!?50dIhN`mbxr(Z8a6eZzLjn!&QR=Z>Q>mdz1g~GOJCyEOt@6ZlU z`O}sl#MmZ_+zFYOeLr@Z>uq{Te5c38RwPSX|9EuW3*u6`eO*KiLdCdlgcuM6gm*)m z@w{c}i!4C?nG0j2A7xeA#9WAC4#!JZZw+m3x6^JV!9g{Op39bfSZ$?O?9F`j7 z^HB_HkgE*DdwE-%LGb~dRJ?rQ>&{8eGCTw1QF)6%;7Lj=N$Cl=+I7TXv`E?%&-1uO z`g&PjEt_Qv4fOG5V8TRAZj9_`RYR(>2{fIB78F>v@s*jC5hHTh{npK@b`3Z`2DfLc zS)nh%Yv?RyO7WGW`-YxEo~N`K=EtcqL0P2hH}cZ}glC9svMlrF;&_HXj2K(}CFu|u z6~23d37R)GfhEp#cU7Zif!$L35W7J~^D*yz((xJw?%~g)K8$G@-x#Y;-CM9WXEojl@eXb^1qY4WNLgA@*WxxEKaL#MCqt4Xb z;(2pjFWktI=4q91Yv2dF{$iu7@1@=X$Eyg0-$Kr{tZ zeVUQo9{z9ETSi?v`*9VTSVxb}s>WZQG`hdIetSwO{-q}J2WglqW-w*=o0Q8nYADAV zPyY9;q&|npQMq&`RLDCr1ZVedB%oQkKf*+8MxvUkE4vJG*frclUNd{ltDLcDT>+mh z@V-YjLIYUjp7kC7g9Q*=ZTnET$e%Styt^HJ__JntXNM6gAU?6d;t4}k)j)@V(9fk{ zlQ2JH<<@C;J{v?a4^GA>VW4e%?RWZlwHn7c&O*gR+g{`s(9yG5b6pC;r2D8*XtGV+ zJ{_qE7LV|Vly^ieHVd^M%4LLl>4tkWu0q4M5vImoy9sF3O@U+INj*|IOsanDO3ZS^ zX`s}V<+b(S|LY<2&$@;L7kvSp1eb-g5cgOLE8;`A-y!^FQBy{pPQtHP{$2%p2x8;| zgHTgv@e-_?A2OSTYfz|hdAhIZ1=rkjFG}2%oN}q2u-VXde8emk@t~)HWT-dcP2}Si zJw`s61cDxPEhUi`zl}6C9ip>DU4^uqU6I>*{Ey*nA7;g9)be+-Bt2go-)s%R6{4Y! ztUn~VbwqaR%gk=X7-~$CwNn+{Pe6RGG`ZYf6N%|g1m3gCnscoT{#m3loDhBeq4DxJ zFmDq^yr(cJ+?O19GPe|p7||MK{awaoP82T(d{m;+$`@-#AvB^?qP6ul&6wUnW z_-XtPtWdVbh0*QzhQzOK!9lA%6B$76^$enelT-NH!T$6;Rm9EM+vrz1=ySWmk>8($ zH+zjH>>t<3yNN0;HAm_-TMXmp0bf`1_qaR9!lw|%`0-Ed1b(noS-vQ%qpT*+a6z>eoIz&GQ{%y*zB+Z$dh#}3&e5gqUcCmp z26x7o*>6>zeFOg`om2 ziUI80wo8o5(o5R$2~Iw2M3gD`9Vg^7*+BBZG@=9oV-|IRFrnIU8P{{9yloP3#jRN# zXP{2VfQaXgi&(>XN%4pu{T2g*q2~vhN{iER$D}hM4#es1yLb)t4z)HruSdHh5y(_LDU%Om>_CC zA7j$>U$~$tj58q}IQ(2i1eYED|&?>5E;D}Apo0- z@Vhnap`OLxEIhordO6V~#1LFxP4Z!?tX^CMn;>FW*tqtPj$Z=~W~%HMhA9JA1n4C< zg&xbHzE`ZWZ>Gk!+Xi>jJuubQot|z$H)b+YKd1G+lleKJp0D=`4krs4OiH;dBDi|p zL!kZ{gDQg`Jm#GY1Ze(JcmEw{c}0E}4V zRJ}&wHYxX(koJ)xW(lia8_syOj-D})m>R{TgpTRjZj}~4$KIjXd%+WS$*K{Na>?*a ztQV-vVrRpQ|4YTvh!M2@SY4;4%pO>(GP5Ki-ka|xa#%$zO#^}^9F^7DNv;jIDx@z)BnM4@2W5A0rCMg=khLGCS|Qcvo+-mMYdC zYF=R6DjOh&hP+D}Nl2&9)a7yEm|xA^zZ)c;t!&$U*g0AHdLk+bnMf?n2VC$4OY8MH zRm7nAizVex!C{O7bVN1LKXAm>q{%G1tP{u^Jon0=4=B@uRTcN;kESPxvhh^w;4{uF;tSX=FKcJX^t_OSl(o#@y&i`{dEU2Za;a! z6YX0)0GYOD!ln9~;z#n6C7?Z`Sfez%(bg;y44TbSP^(JE9fml4`#!;aUn?sMZIDi# zVv=uKkWPFvo#+Bv`w$DNYE1WH{{;OiEEPu@*N*^aQLm;Q{y>_u!v@3}*9=!%_F;LK9`CNzJucH7Xl-YgB54&5N6m z=gwO2_WVzAOsnaT56#nleMWaL97u35x|;ZD8U1+9ab>;QR?(Iv$aqcsu9CLXQ_U)u zGx;IrKvtSH5XrQvKI2Hn#&p7Wd#S~CC0ofkS|-4Y=0{tZ6GiKujIHxIH@)8%MBym# zBMTFhP$~0!tA4I zqL&TjKCGoJQw#-{-E3!OK9&CT>7&@Q9v}1AGtPv7N}fpyZ3U;f~L3vGWr6nCvnyP zpoj1Tad%O~?J_y4Yvx+)MEABw`=9NS2%Nv95AcojvX{+h)orJDl~hLY?fNc`+{cT8 zP3=+dO;$0AK62a|HyY^6N96C%FVwD}hpm8&p}5xrwpeJkiXuOG%(t*;1=ZsZC#ILG zAf19vqf%U9Gf)v6URq_?z-aIDKss6HFf^7|Sw1Q)gZcrd+a>N~-gw@QS0e8erzX;t zZVve8Sodn(F0r|3wYTqqq@gtd-gB>;mvPNFdlE;014B9?z*)mur6l&dCF*gF`RwAs zk@%wEYHMq?*`_C6fwvGtBok}I`zDiXDF6-e=x9Z+qUCIFVm141+w?&!((!spa%IqW zrdsSnb0ker;86i~weuRA>+#^pm%RxZp9dIBHmXBK1Jpw|CmHMLcO^gd%x37~UN*Jr zy)08}OVHm_%9RODZdnSL{d^&N+mX(2uTA=})Lh;DYi@IAb@ZAY!=ErnIIqRu-dv0x zI7)Hl(eTm%rNi_sTtwOP>bmTG;$;!%X6wu>*UYM;_^k8XLenVMNz@Su3U));+DxV* zi$hX=#QJb}5m9?Qdcyyr^%ThYA!3jmV@60{fr4{1B*NrFy2cOm8>fI0X@x%G#*1@N zFj4tx`$5#y*aEOX3x55Vq7_QwRj>!^UGRzj$5ryXJn0*ly0GS=e0bS{)}PkKUkj!U zoGXsz#`v#ysP99#FbUD7TuE6^VNZn&4KnnMAO3FMFWG7!8RK)~5i-`AWhEaU-m|Vo zx3*LGw0jo|8%ach*N*;L-(NvTpvb9g(Ze{1D=j;^t9KT zsai*uZ*TRFaU&j{fx$F^LBmGs)~|Yw48A5?f!}iFI{k#=dN*w4ec5~D<34VG<~UNl zE}Cp2?HwBCJ1UA7(%$^!i;}59v51S$U0&Qc$s_>JAc#H+=&JdwcUjf{^8;GmkzMYN z9ryrn59aunr6k6#_0Et}wi;Gs%Thc&fmbRaGZj0<5cHN=9K|CKVpHgov@^Fe=n-+w zj#pFAI#WT;B+uZyjqMgwfp=55>|$k1%wt#9VF`UlVH-);V^NJ9)gFQ0d6vU*r>dkp zimrfo_Q&t{-+u@wLx8FklK4@6^8(krAF%!ZrBJw&YnY_&Km1wkQGd%N_A+JHGT+)%O31h zitoTz5TO=v$}OSSvdEV5wJGbD%!*JA_%N)g# z!uWW4>D{NIantkjaecly68^8UCA`P-zGnaX^ZxsaXavOU8}52`-&}h(3`tz{-f54q z^0wox6w|{{f=3)2${Cn1{rsC7oL9pdW~fbE8e(Ejhs4*JKPo7Jq@_m)$mCq!K=7FK zC=rV@u4`i}Xv%I}dajGa>UV38!8|3Eqh!^r>e<`hNk;ymd5B@8#kbz{n0P!~lhow2 zpcu@sJUlv-FEVNIv-a4Vvn65>B@;{e2n@t%@FudV-)sIsaCCX*>S{u(Un&HZoBPV~5PB|Qur65b+E z*J=HQL@3i#4;Cjdb#na_&~3FY@V?hJL*ii;iix~dVhAMrsd`b;BZs`%6uz1Nc@Ctt ztX5PuVSLWI-Q&kSP-Wupm;O+X-QIjtm~x5UaD^MvZ1>^HOn<)EoqI|leYW5Eeb4PO zm92>o)Vt!2Mw>#1SHGux{0U}aGYUwK*I$2z5PqVv0fOu4o1Ne~WLatvD}q2gih<6d zbe{^Yldq|49+j~HySOEhO7QR+-EQ&cVgUt(x5!M9sK09?;e6NRz=IO9xBqu_q=Loa zZW^IV)?KFl0D!!Q9o|_<&N^7R+B2A?PPWYKq9NhWycxK$^39_j6LID4Z1q9~dNXJ} zK6okWI+P{uxh)!)l@!d5xB-$dhJb*8C&?lk#g?~MXA`N5kZmw-e5T32swyRXf2k@z zz$KPD^^S{k*LA`4YinzBSt8p6-UncbpqVd~W~J54T1LlNS-2_b8J%3x30Wkbf_X-i zEI$AF{oWqvC%3o0E#9dI_k&0{T}U)v}k}` zAK+8AxQ2`RNThP;fl*(avCaa(nio@!hA9s(pX6l;Qg9my%*aLYU-P;b0D8(aZ>NME zY~5e!)N%1J1jt@M4O%s1N z<4AHke1AHidSG^nijKCQihLmHeqPhyccN3K_HeQrLo6ynrG)mMD;Z#K0Cfj2I z+QQpN1SSGLlxzfBH+fDyhOf$!{lw4ieJ@}X^Z9M|-_;)%6$KA_zHD)OPrHC%0G9uj zkU7m`MeoKm7F)z=B%1Tlv>bM}sOKd87#EalfM9+kQK8H*phR{j_Uv}1vUgN}W3`TMPCVuvinxmHMYf{Y$k(w4XQV>6@{GjeCsLta zi-Bc{$DclY)CccIb5ISYoA!jI@Z?B1!;^mcT&`Dc`!tx*IuBlKHAt|IL(Zi%3O&7g z4viyfqro~ZzWa9BVy0XY;eS*3 z_Q8;hN^V8|jf_vZe#02cQ$LVq3=kaso8=4=hefc~w(=IA^MJ7AZaeg_>m#GQ9k`b; zLwLqzH-~JLKddGcE1w$@^Of1$tpyeVYb1dMUalOahNgXDpY#Nq$tJ&Qc!_<6^BT}> z9)JZpmr35-lK{ph&rG*o%yAT2PAoHi$jxoDfik6FW{XI)0nwi)%d}Hf=2DrMXhl7= zqp{tv4`0~6+>ic>Gnz>fNppvP@9T81^QAWE3_T3@8a4~~$_PZ!0Jj@is>AtD7#9lp>vU*S52qE z0jpm^-a&^kU(p%4TgKQsS-ceyj@qVF*^gotOPM!-nY^6BB|@WpNRm@YCKj>=&{Rtc zV4hg!tXe!GxtTkpL*9;L&nE*qe;*`U**AWNm<`nZ8nx?DRa1j|pg|6=J0ovdofkwa z{wl`;wv8|Ldq`c+2dS#Pw;nWI13;a)fd@UzalDJBUq=99>Z>EM3PopxY}`_lr}Vw% zJ)VOA;oj;V*LOrl0gmFI^HgHV?E|?ZLRjvHh1~h@c5Mx4sWKTNLQcm8;E|RU5rSqZo#5wa4YBHz{zTN8hnN9f&f1E z>y@hwa&ak{p8Zcf&W9KWAmBvx`W~g_vHN)@`I7bHy|GDBCo85_CZBGS{j@YHQ_m)= zZXgm&*X80?q#7*+JiK*K>^@b-2HLZcAs7O7*{k+N2o$_%Qrizl0vA0zriT&O0U!vA zx$tQk>`H_PWc(m1n-40EVC-_|OYYTuJ(OzNcT><4p9YN9>gLBtfoT2`o)TIXla;5; zCh=V4Jvc7Ua;~7=o=d6%U#{sX=(hPSN77q=Zv>ih2?*->%?o{k5txI&pm zQiey!qZbX0DMSx3NZllQbHK$SDWR|CvV=Zya+es&KmVd^M=R8;?G+ngudLR~PKz$W zX;|36sdVg(r9w$duN?alcFYh+A}%fab+vWIXB<%BQ;_A?hZI6!-?i)oY(MAk70K4b zTKsTKG!?iKS>6-6;pwb{;lul{gRR_dK;~utTy~Cgm7Qep-j>Xy-W!05AMPLtIT|d> z_I5?;_K|^8Dxqs|UyU3|GwDlg*8JrHy-Gs^ATrqd5p)ejBivh-Gf?+%girrS1k4kc zbwDFmrMF09YqCbUOudJ%lkoJruyp!VZgebjqipYdO%}gZb=zjZ8s)pfem; zG@XSM_IPEQ;Gy(}#x|w(PA~p9zDy|z8i4Csqy9$Mg1i}f5g`D|a}`+ij|(AVUGR6N zKSYUZ!v#!8*b0HM*$)WO=*hZloj+HXV)CHOq}|Uo#(Qtj#srmBbAw_s!9Wa&_qDcw?g_pEFWJIY3XKfv>NDg6?f1Yp?nESd>i5>asSVX_>SC=BC1^Nl zalit$McP0bTGq1N7@`=Y;clTopO=9|Dzh`f&;y%3rn#o@hhlrvkzYIw|D@v8gkTY(pDw#1I zQ~%DgRC5ksA;djd^E!s#9EV&3&1nwmG3hu2l6p1dvZu_@eksWL?C`!?O$g?QmxDu- zL^3Dh!ZP!#tCuvLnBTM~^V{&19|N$F=&7beMLf1`_kPH@R^GM{24*JXBo#~g1vFJ& zz1*;FUhLl039CzdYn)fS_lxO;b}kVlAAHd8g-3GfgQE1M2xL!{dD$zf;p`3VBK;z| zL)#6$2>))xjqkR7Jajh$F>`t17-$xN0x~uN&xfSvj5w5c6F~Y;{@iz3SI2V0k%6z1 zQ^jV9FPXPq-H^0vAes{k4}ecWH2#USU7Q=+Hf{O>bXY!DfsYn*bdZ~T{7_6wJOQg_ zbavSfR=Hf$2Km0A_;U_(Ntz_6w@e02Op832!4f}VU>mnBBHxkH#L>bJRMOl%ziht0 zo4;?YME16Lvr5)taoiv2$+zlx{>zw0AL1wnFnPbxg2$*_dCWEi#JQDoe((G&SdSE4 zy?vE?d)hT--FMQynEwRp=@8}_p((R5M%M7Qxl)(znh*1*kdzo7E*UUDw}1f6j{MxL zg7~#x6o8o}Nw7mUl0O#LE0gY>O7}X&gOQ7og^;g$kOB>ncTQ-BWf6!%ud}M=CF7YC z3hwM^sJb~08rCjW$sQm*PV&-}EIiA^oO1-=)rB|jR1!avGXY%#cOe!7={VZ#+FMO8 zB5-pR1&Et=2vP4xmk@U_3No(Y^crUh)*fOXmuBUlO1({0|mX@N_qKI=7WYPN}z(o zhwH?oLxf&p(kr&YVZ6sgRmbh}3mu#9>&LxA@2T9Ex@}298J-?h&FgQ^ucn)$oLfOCfR4ALu*7Gf+_S_tRct5QOK0l z5ZPAkVKDX6(m9^vsI^wB_b)N=&{81HD?QCYsHg*%`fKtP$pp8q88obiw@ienWb$+E zIw32s4^Nr9;m2g9Od(=_-6bx;PBdp4Wv85qx%2m75@OlcL_+!@Eoq}DU zf+aCA=9m9UtnBKu;6@P~qacdYM+5}@Od%_?FBdq_iSL{KdgLW|61%m1)}zj4L7WwK zy^5`ZbaBFydtkQa|CD^sNj;n{2+tlN5C{qym%Y6Z@wDr4Q?8iTX}BFivi_uCMNxW! zSUzbyxVTCzs>z~3xIa5$P%wNceRYLFxz+c)*#Tr4X{uFYo{&JVA`@jR{F)PSl!mz4 z>l5{9Gk73`#NJb7hpV>g1|FqJ4+R?s5Z#HS&X@^L=OpTlHRz()vHNG7)JdofZ$I-Y zr&Y(EDe8o z>`uqdqCo9KjRd934iPOzKx9E|3HRk7Tksr~k+-L2ebBR=O~#h}tPW|X_~E^GPv=YJ z?4#o8yTR`|`tQLnB#Xogqq0EoKJwr!?o!ido5DMiE7D;zbcU#2{*PGe*BEr2Lz9f9SENZJ zeY>1%NSi@vwg7lD%Y%TX;dMi*D7wM|@W2mgAn-xWhMIwyytvdX?_2GZ@OtKsQDC(a zNAds6lmBxf1@dmDs(Kt%cS0)CHW>`8GLsqu>Yf@4b+hb#3 ztpHYugl|7e5G1s^Bxxosr0}!wf-21;yf z(jvok&orR&>Jtm$m$qt?4MWI#$?$U~n~kQpdI#c~QWqKeb3wI;~W;x=K*7lH%k+FWPV<=W*}ZuYmhDLC@|H ze_QCESvFZ^5|M;hFG%@&-{t5&Wd~u+T z${<-Fil?tHZl~73Vpt|)4G3{p@PQ=iMVeS4>L62c&>J6|;l~#jJ4)Y{G8~ODYz04l z+?hJrel5s6FvT~teM&{b*^9e%2uNTzabRk!6nRT_@=kiQS(}SUKN0yk2S;Vb#suY1 zP-gG*Lv_E4dzb+z=h6Bu1+t!ACl|Pi25?Qvo2i>RlcBi##C>*>wi{@sA#Ntc8ye6x z&B3*_i-@zEPCm~Egah5IbnejTL%4n|pzEsY=zJvgRW({(J*8m=xqTGxT9X(g~ zSaF39WWQ7f`;=>u95E{Uw-3VzgZWNMGBJY+i4Q$$MGwO3eTuZa6P<)`A{&0Zrj=iz z-3`gn13-f+vuMz4b~dvS5Q+cRpb((bchPM3h@DdRGCRYm90{YiDLPSuyw>_s4TIe0 zxOA6OB!n*gcJF|6sW?r6`tO2tc{KL{!GG`ZqQG7?uZ@B|OIIs66m%f7Vg+GmBIW^q zIS0Ba?*fpzT{)gF{CsrSGt!mI#jmE(DsIf$e)T zr)#ScMFD9_xFKUHJUjSbz0emziRg8^XexYxP!j_tcN#g_8es6ImD8H$ewZitP&(lW zLj;2aeFSUp_B{}$|Bj?gLxb%@wv&5hZU_^h+meltF$BUJ~&23+KnS$L4^+ z)POO+>HP9(kV&dxX-SI94I!vITnB8S*RVEggm}Bd8{xXVU_P!d^|yg;&s6pZ3qJ0l&S(wqgP*u4%btHP100!j zAnHNGdT<<~Bc$JBNsaB^v{(=f6|}g6 zDJHYadh4(H!ByB%r?OY)G`5o})l_L`qPv^Fg?_sP8L_rs;L1g`hB|fqv5oupFU$TE zwxiY|%E42zznybMS}xdYUG)i!Nj%Jd3;Vac^`E!>$7r*j;!TNDJS`egmh0M9=5Xwn zvY3n^41Dw~DyBsq2rk(Pd#W8C|MV42#v89uPIw9tm##?ln*@(TR+W?s$-uY=aT9^l z>F!c$#tY5bV6GuJq0FbJsdg)W4mND6|KJm~jOWH(Ht#R5ZDDGhFG)+Wny9NmQ_pHDR;N1R$*=Mul2C)heUDIJ~f zm7Y3in9#B`T)b|F=zL50 zQLn#+Oy3Zn`YhYcZZ>vkE*oDOXPU|FY223E26n}?F2?Qd{OzcA)8vw9c9R<$nqS#_ zFcZ_rOcc^lWos5YQfgbh>9X+J$@ll*psD zEU+Y3jm$n{Jk4TBbH=-%d$I8hy9UBRoFgG(k?nRZ`^lc=JFzm1DP|}CL`bl}cJo!o{el0QU%fq1YrFKeI zhPuahaA8oj-obHaj30<~UP@i#^fjF>AZk|ROH2j+N)D90gcK_Zo-10XwyE=nN7u3IkXH~QADLKq)>5VfE z!oG^2&-$-9FLBM6 zjgyY+`EM?poO;y@bXNmaEw|=W85u5~sqr+7;SwSGDD`9eAL&XJ0rRBz% zx)Y4nJuo6e7;JL>an7CfYF_S)=sn7LWn_vJP=l4!nzPjNHG0#-#63@9!7sAoU}aNI@w=A1FwuG%+nZ%LhQ=Bn z&AOvSilu8kZ4ju+0q3>ExdG_2)aEa!_*@H{fM@4zx0C z$CmcT^Y`IV3%<@cPJL+sYxYEiCmH;q`fA+vbVqFy5)xRf^mV^%6@&7R8co9eL+tU^ z=jT^e3AU{VfM-T;G^?_3vT}P6P%o>hp<$B9sl8qy3|Ap6%KcI}+@alM!!%eFbIbef zpKxFg&>5TE`U7n7BO0yZ4WP;cKynPn%pX-A?WHZxIB3@6ayzf)$(cw@<#@uq6lDKq zkVDD^1z^V24f4MN=*4ZVAhkyDm_kM4`rjOUn!-Y=pcq5`jgYBW_)o3WajTD2ew5W3e_@>QyD?&hjDgq-GtNp4i+pF|(c zLxAWLxFVnqtksQU*M|C!k4ZN)TC5S+Z9D(4TVoZwEOih+xBB^J|4PimXi5b{+AeG; z^6uTcu|>!Y3>ndMEI{R`0RKe&R?sw=M%Z=&ATK&;{N0yPG=bVsN}&&s3DH8JaN4R7 z*)QU}Phapk1B)pjf*Yuh#cSP35VQvJ4n6{S;KRzPq0G(RpBG2JHO&UN} z-h)D%Zkc`!P1bx$h`4vOns8lz{dx%4bteKHCW*k|-M8NbX8$YkpepaL1*r#K>35@> z$0}M%z~y%-f)-h_)p*7KtY7)XHTQ8{G1Ali=K4EVUvfgZ0-%e`@@ix21{#X7DH{iJ z)A7`+$!-O#?hi2;sVqZ;rj@8=w#*y1KbbVzPHO+K<|&W`6w7VLc$2BAsh|CJo=3}5 zCtIs3c6Jk$tR%l^&8j6d7E!QbNZR%O8%*r2^T(q#2UG)7`n|K=X=5!dt4Gvm1myrG z=J+Em1?~B-Uzn^C(fa%ALrfz;RRjw^f8yP#=S~d%!8%6@x#7~OpO8jK&6Pj>`ik+= zxLYaw!fv&jGYov1+%)%!lI!2>G$M02CQRLayhZ|CaR-RrcZylZ@6O z9S&oYDC}07`hni$2;yNS809+qXGFF6^e0-8&n7`udk+!FPR2F#3+gT{%c^*v0K%8G zU&`zNFD3V9Zp3*%H46U8juH@=?udgkJ7>j++>#FGCG8N12Q)R!wV-MrpyYw4>2}tt zb;ZMRXV%c4kdBk&l@I>#^8t);XlP9>01s+5nW~z|w6x2UD^>}rka1|}cZ`OG1HB?# z;nkpI-+u~;L3?Op<;7B0#}!e6uq= zn!mgEXpO5^DQbxVY!sSDBdmZZFt=;SZXZi|qG)%CCZWkW%r4sn#CSH()H+N{pUl<4 z1|Y#o--?-h1F2sWj6DcB#+9zv&l}0XZ~F-H0a@Nj?Dv*MhD@8DI?UHkKFKPLOrvEa zWzPZl7@h_O;x1O*p2(HpD&(kKw4xDG;rovJYsSo$raHW?l&>UTbpV}lSN7Ru&9@^p z$G{plW+d2S$+u>5>d~g|;6Z?;Yzrai4ZsDn@pA0M%>Ec+bWX+lmAtM+@NWMSYiN4{ zNcz-Ele_H+NvY<~G6v4t6w=48#b<5vB1|hU#Utj-6v?^b4-OT$m7{F2&+VwKxxjSJ zN@+5YnulXFD`%ozE&IPWf6)Zj8VhnY84_Sp6N;P(>RY!78m_fVx#WZuQT=K`UFgob z0+Z-EP3=w?P2S76L+JnevGV6{$NYCjyJ;hZtLbGTPjlT;`@EP2`d1IbtSgqIet5>W z4sM^ml6gS>FzHa@Bjyq{8s0x3L@yTN9zd~H2pDXQ@?50WsJH&gd}$Sghn@AHi|@NX z9*@r}tb~7y))cHCo~sAGxa5^ZtO8cr5IY9I{xnHIqJ4W1G7!xo0buEUGIXEmeJ|zh zBp6|PdLHyzhsR(O=fCR-)6V9=wlKIVOZ0OblgOSeSIoH^IaTRv}}y8ux6) zE6yi|40|=BT3zV-GwmP2IRVfbzO1i4YGnQ3R|J*uE9g$Td<5x6hTuW%NThUGm(j-; z^j#?oVm^zI`yW8c9h%m=*B4o7HyS$!x<9qrCfBP)Tuu?nL~>hcXZLQl*f1Nn`3W1fz}BiPMqdVh{!?&WHe9;y{X=6B9w2t|1}8RXd|P2 zl`sw2CE{^Cu^USNWb)H_Q@C~xEj4|b9Az?@*v$bT2r2WvD{_j7`r;704f*ldcgax> z;-)NnV%`!ti=zaCrGQKwplyu#;p*V{@NaJl4=&C*@c3 zT>VFRjXp#~!Obew(W2YlB=%lONGdv_EJSiM6SlL$O0PX2@Z9AU<&kWl1!L9`=Bgaj zwzTU}By$}WEpE^ZJMk^(0mpqi6lbeB1_CSu46iJO1`9Gp-Xlt0e~~|o`NP+`6at3>`vj*55AV?PbQMui_-`0hEXkG0y007qX zfJVDB%X0lWk)#I>05X`oJA^r;EIGL+V2MrK9T^(AadGd0L1i321KcrC1dr*7ouqjJ zyF3gj$+a8jLOKmrZZ{B?In^U%7AJzGOa3I~1W;lKhm$u!W51teAzoI_HGbp-aQwA} z_~wf?J0tV?g4E}4U`-CmWIO*?VW#{kN4dvR5Xmh!_NK`tFrl9Sl|NdA#LHUiT@v} zQKpVsSnrLlL1416u{ekdICo`@oKjyN>Y5R6P=#VIL3g%m$}^C9RS&A<`+U+o9mcw2({PJ8qz?Q6j+-9I>mC?mrqUD;!4fHTFu0mnfB z-26kFL+PF%}_?{~6G<%EOB4aNyBgRwmpC!>o^eX8X~+#qu1Bb-Q|N ze0mlem{sxu22>JOsMwbIu~SY?5hYCQuW^Khox6jr)mr^luBxxNqgqvAm)s#FzltyH zA`X?rM$*4ni@{b{QksNe{*L`QmRg7)uAyd(HcW)vxc2Ql+fS807U=gA3lhQXa*4{9 z5cUb2e6lfZ5``t{is3@fdK8^B!ubv;;uAp4t-d*eUoG6;xH;BC1o@O$1C}|~Jff*% z0xh9Zt|1b!(!8?L#SY`=5g|U_DJ*wDK3IOjbSUATX3v~3#dMoLjw2Sn3(c?vb*M|4+e|M%}s&_^^KGl|JAQts*12!sKyep%L|%q1W-p zm`EsJB&el#fIL}7z(7H=pLPeX78^Q$bJI8Z&fD6RF$Z1pT^;Ccg&WSjM=&$Ucl6^p zQr#;}Ei>{ye)q5K=6^rPfl5i>30}RXE)!>jVHxxm8%QnRC^sG+d(=kS^?2OICGT>%lJ`q2z&sQh*~Zo0vQV+0Lz(4q7s5g6N>D^?ZbxCgQw8Gc zp#N;h{Grlsg)aFasDt@aYT&W#4ShZ(TG_j2w+*L-@Pq>B8PZl%FUav)q5_nVk zGD3F%MhKkau|}-Iq$_W9J?AQWsqg@-0$!0^?{$0y5^-)i>wi)%ndPa5dw}PX{E7-N zO0p5Hjh#~9xTyZ3J%s3csKMu@qmeLQ9J^&IM{;1oU*P_IldiM5x{nq^Si=+N< zjQv$nQu`YWO};tD$)SA5=JN12~;l|KK%x(T~XIW3Y8nZEUdHniE-4D?_^Q-)`~&41F*7B zs-k1oA3TSLEZq8Bm4VaySAP4gVOgI^jeWJ+-A<0IiX1BcHej6tgfiH!XBd7tnnITg z4rR(XuH25S<5#jJ%4+rg;GYV!MTxl9;d++#t56F#4S`^qf0& zY&u!mJ?qN5AC~2|EZS*FPHjG6Ir;EGm$ia4{Nj;Vk^4<`RTY?leLBx6EfPuH_(df}y@AI6e{Zl4yHv=9! z5wBEAR-BMtP{>%T;ZuGnRwd*W0lLCURXAmj>HWNkEpUZaS@k!>qHg->Nir$3J{65# zEJuiymeCjLiyCmrvV%N`gXdeEyS|$8hr4Xpu6p9bw0l8>uy6NINacxD-qV$pzgc!0a zX><|@g34lb8h*hMu_;ubCV~%;gpsD?ZR+pK1EN5bQ~`P@w5%^K$xyoGsF&fP!$tS+ z+&;xL;S&e%nGnb7R)Fm2OP9!YOf`XRo$kEZ3p2jW^ED2pp&Z4n30-{r`D8P@x6dcg z<^JQIqxVc;N)|-z04eKm?9Q}r{O)69t6kTWcgd>I58IRct}jkXvw>0HB&QmHqwB1Y zKGo?B>41ht>xvq^oXZ{MSZ{5RTNPYpd!(Iu#u9aWI1T8UinE9}{07|N=p^XT<`=2k z1oV?N^Y8>D{Z`tkb*MtL?{a->(#MpF;BvSV#vT#7%54C2EVS?~^37kn(uPBUnbI&` ziQ4=bu_re35ZB7XE^7u2o{Ss@yEFNUYW392AGsQgr8$~EC%#HStN5_T`6NAEvMmSc z?o9ANub$T9r8L_=9=QOqs}LVpd68j(a zHvcq3^lnd7j-38VF&6ngURZwP6&fJoh-unraP%!OYcY>6hrr?yvgi$?F)F=n~(hVkAX=a~zdnv&Tk)oz#8L`O(f+!T_ z<&e(3T`@KSQfO9iyTMN_H1wvJ2XXOtdX~cm>lYb3I)ji*7~zXfh*WBgB9x=fQ8TST zZp@XaRftc<(bbu0>br09Z}b;nr!zj8Hk=1tfgS$VtPGXW13_%F-XtXn|ZD| z?Fh_kOyKKX6vyd2UU{&e=tkxoo5-n)9m2nsxJ91zV&(XZYD^}^E~6LlQpRsc znn>v{i`ZZifL}Ux)pg7~Z(OFtt%K(V%*qm7dK|H$I*mthUaem3_1fC>Hvsa{=`*D! zU~ZIXeAs{Rp7)3jdNV@1#VW=%-$?FkENqyvblnoQR1K_;CQebczgZt%e?%fHjc@i9 z=?+iOtccMd{gP!QC-)N`hL|g0kg1EUh((oc@J|`y4FyV0vGT^{nlm0=gne^^UHCs^ zdh&zMXOQDx+R;W7LJUUZf_?;%WF7xN%@I{{Mmx>L5V@fmdD(E*aRtUUD&6$;O&c84 z_W+V1CT2;ax;wxg>R1|`@DiKf!#9fdms}pFc3bNP;|jI-ylFHXXCH58!xJRU4!# zrUgCpHEi{F-#qnXz%A5CsE%i9x5`h*kg+nUH__(g=2+&t0y4CJKB1`I<4haFKg{GA z@(4D;471Wbol*KUfX1*tp7tyre>yxd)3^xpNwJ?RCxBOW_vZAlCN|ytzD%8#+tJkj zrv?2B8J zYFCee-}yJ;H~HlG_TzgNA@ddE2@(*=Tf^%{Qe!mbz^0@^0k9d%w(w33e=8?MsN^P? zKAI%kStZ9upR5oSTRo%FW}iOgLEjQh)AtvJL1a%s z+}QiV!=NVCu3lKd*u=wqZb=N+0=Jpxmu>wK&Kx?12d6$Y3=Gcd8X{YCSe$9;vAu~n zQ~t4k6F5mC0c>uA(!ZVk*|SBWVMqtjy466$q)thBB>J&eJgY)5RP+RrsXzV2Z06tl zyp5N@SJ`M+H~V9%rGJ9f>Q8`gT25-=p0g7^dAZ{#XF?_V#$vSl*!!>M1pk&67No@O zP|i_?r2fcNwIrxeSXp`5GW^+Q_pRxB;3pV-j(y#SJTLyO!<}ySXhdx|SlkF{Zg(>l ztz;*YRY|Jl@`~s&qKEe;>s!?op{h!n+ORt|ki^GN33pn(_0e~+t}V`)vL(X6j3ZA_ zXJpIk!t+W0Ro(-|U$G-Jujmn1?n*2l8b;x52J*uhqLaE3r7$6y=QR@+u zR+HrFa<8LBiS;26+!i(~x|{b}U7yy)r^I};Lu-uj8JBp9)_`&sIq5Ao%=zTsvorB| z>1LI7_yf&CLVEfUS??`lF5OeFmipgPkuDW>7uW6Y2_SoP9#>oMQsq;6=EM?s(N?34 zRSUW32VX=8r@0$&I^f;?rlW}w>s=`$jsKntq%iyo&+HH0aQJIM@ow}wCk$w!&F=+% z3+um3cO!m`7!UxCT4nD=0b=nJK+aRzrm9< zA&Xi{ZhcP^twvrfLOOtd%lC^97kW(f)(9B3@`0W9f;C0$c%b`4c5D3>b^^_0%K)Fr z_oHn1l{3(#);CiJ6EnKerv6X5Qn$`1wfj=3@*&v+ijL%zXpYOo>b}aY7APBVv28gu ziWGnJ!A$r(nL6vb6-yIW7rQMmfa4Gs`z5hcnKsGHd$Ls~Z`?=;quhBF<{8Q);G~Zw z2oya10WcT;9{?us_SiE|O{o=2{10h4l{ogo=^faV2Iy^HTUm+!qXS`>#jayuI-snq zttCiEJ|Kv6yEHb^Dm&S(u@fCejbytq3>5?)`U*CT&J+-M3XaPSE=510;^=Z+TImX` zR!AN+@h7A*>hA6?7%@!~3_GO}Br0WR1t|VrplHDtc%a6(u*t3do55T|^0>ZD(G-L= zZm{BD@*t4U=L`5a*oJfZV%CgKdo_(l5m5$;%O?LIDg6W^oUV%wmoga3&AU`oRkY2k zC&b7Yua>gq+3Zk4sb5HT@Qu9aEb22JNKK$wLI?p-A>f!%C&qYYUZmK?P(*9TqHv$u z>HiOGiH}XxfR7Vni6yRHITFnsK=elgqGsTu>WCnmskB=gpn5S;lK9o=_u+4^y`4>O z$c;y(QDq*0QPMS@>8cAL$0`6V+yqd|x(Pz0GB&R2TYm)o5sZ={gnht-yEm&NNab5f z`rhmFlORBD2`OJKnk;upGX)}5x_f&13O4w*!^4xx92sVA)HL4!_{cwVDBpLE-L=c* zKYZHP^!XGk$Wr;m{m(7+7e*6@sZmz|*PPuOMCZEg{_f3puz3A5^kz9mo*_z#v6goOfj(XDqj z;Fkq8GF=H+U9^1O-*q#xpEcR~>^vg*p=meBdB6`i z(CaTKqqPO7|GfZv)4Hk9jykM&hhV1QCP{*wIdyAI%Car2X_?{|AIJjnSL{(2IcXdM z?+cioOupE<`Riwnc>bMhA)k21>x4mq7eM$ZL2!^PBauVU7xWd`LdXEnlP)^Cby;d? z(e{*eH`u(zODce!SXaRIOJ4q?4dwuqBx ztB%FzvW>E21LrkjLynARY%^b0u-c^3Lu_g7T_co#O-mhnH?i*16^9L z6&_NeGY|PHjdD3f!Hzw z9`>`j+{1G)*x>Tc8{3a}z7 zR_ZA9UJq$a@mmeX_;xTdZ$0Pl0E`_ zd4$RPI%v!tpZNK8g4bjJUSR-S)vUD5Rvbp$p!?ZBCFj`rhD*-gvbE`qoOQwvB4Y?G z!aeZQ1zSV_q~7g$`&#Uv-N$m~L^4s!&AbOBwB97c_ws!IKz<`rT@633NG=?C`6BHU z$rB-oOu+Hx#T&D74L82-su=mYsHC*; z12_u;Dw9o{I24{$0faW%VB_;r@mt;h_4>7jzCXf6b{6PUpQ`-XepqJ9Q1#RtE|2Ze zgzmYL@idmRl7tpQo#}*+(=Q6dqfKAh7s?MF={)h+)6;cd^1m5AI~@m-*zeOhHUt>}mIfjsf!>$%*@9I9l0#MYBMY zUaH@_j4W{+nji8p33=!mkY3Dt0_IcZa_L^hK{^?A4OQ-I1VQXD_QVSTshohZ(RioW zVs27M<|W`#mRw`=!MxVH`ORgHvEMIR*LOh5>Wlr^a?t8u^eWV0~#CTcyyUSidZ2bNcRt)YaZR31M{T7(peB$gP@O!HvvaD>c)1M;R2}gE9 z@yq!zZ(xkMfcQ(M9`4iMK{cR}`!s5;srA19lgG{$YC>|4`c!6P9@PfP)8_wkZ|VO2uM3LqC;} zTG%87rE82ZD215-NUgQf?6gvRS6N7cg$|>##?I*}`<;-$P^0b)D*?0VkUc0*KT;OE zsPpn62%rj=zg03)N`6d`8Da#KnH#{2ho5s6s{f}J|37=iK!4ylmBBEA)vpX>Uq)ga z0_mG}ptjpxY$}6%k=g( zfPGhF!fC;?X~Q>MEV95{&Qfx_rc~LkADn#QV43xB_ecEe*;31&Y&8HnTxS

(eg`>)ycKJT@f3+LrYNJ{%(WY2oE(dVgAcx5$roF9a_sM z7?;=!KWd2)d6PL&?+~J>wJ!Sv>98Wie^W9Et8L{WJ_6!169QdVNdClUes~4MXBO`K ziO+_fD46AnMZ{+Ws2-n5vhc}wnGz=$djucO)k%ZuvF93WD(PrZBgYwfHsE=o3Mw)W{c{?6H z{Ozb=-0$od?2Os{h>9i1P}SfdoOyChZ0-eCd#J0++MhfRQbWik4kfdr(C0c2_ue&< zGG}k1;ce>Xt}mR+q7r)6=1K|Ax)f3c`&Rp zc@vK@KiZhc?2MwJ&I^VrLD{=rAfvd$TsY~CZiNAwI~*mW3CvUu*oZ0ycnErnxaXpQ zWQ(}#2ZjoTpsQIRc0;2ablHwDSgf8&Hs9I~T!o&*5!!|--2$7Kz=R z0z4(Xf_KzU=hkAgHb7NI0_6R*8emspvsSm+C}gEnz@+cd6(Q}huF~WllzYqkHq!y_ zpulJ{CIE9&i5dZEy$7-+|8l(t-UXO{_&U;4EU`;iR8Z0OHlOKr!(h6*!q0yEq&d)+ z-@-xEX;}7*&Re*LNj6bXvSIF6QuGfSfMNc0d6PM#TC1WkDkb5y*ozNk28g8ep@Xha zu~bKG_8c+dnc+WQh)6~U4pO@>IMb}xWW68MyJr1?4C3{%Kq-cbNrpmV)oRXgzhZd`;mR1;4;%lS{=dB+8 z{{1zp|JH2IP}T}$U;+aobH3%4FrCgFN_f=S)LA(x7aY{_N;D09&)EYi1rpIFZ5E$r zWV0&8FNi)oILnXO(`eXd4k4p-jE3+EV4m%Cw><)$3b06z8V}In4xqT|$*SziIwUKv zw=6FlQJJO9G6sZa$y}w?qxrm&zvucuFs5%t|O9@38{lzc>)m)S@N6^2>P4f*DniTpb!MMXEdnk+eZfV)}!-peG5wtm1c&2JB zLn{(;l-aoy8jL$GTHZrNut;kS3*}_a9cGP&?=s3Ymb?D`%3jwRS3MGcAr5D&zR`wz!kWA=pPxsUj){oNC#tD2+^aUM;_6RviqcJii zO!LvesHJVwxEVIiCsk{aj=f>#qI-Ww4_`!Uwt zro)n86Jn`IvjTzP7jgmkgi~eN1UV&4LrR41Kr ztN+WBPXtybQL{H2aZQ4oNbOGG77$EbK!n4uOKyvp>P2`lr1KBtlm|#fjox`R)LTGKJ`# z*awtlq%BdRsz9*lqnipsVl1!KqM8>eU)mapI0bnJH5&gBE9!B09JGV`=66i7oVmJZ zVDDX`Q&~^Sk%!fEjTDrdx8Mkagi6ZM=avp^Bcd?OFn7Q@6%HKZ&RdM?LYI-odx}1r zwQ%P}hD-ds`ed#?N|RR>7Zy2mWd5Y5ff%j321;P4;S zV)cY)FK3+_pU*x~cX>Psx6rJ5K5!&Lj{zs57e@nfGWwB{xEB0Z)Tb}dm&IsgjMGF5 zDi5p2gy4L3A3x*-IIQRsDCZIrx&lovSDX8JaFVcXEW=(Z-Fed|WPE9xpDFAzgav&vWeTd|IHc-o*z*G>4O$gk3$F@lUaWoH6K#L*ji99 z`>sHyZ5N+HXdp#wehZ~}s?8-wf6eRRv6IZmezOTKPChJa>kue(=&14j(8EnHsXx)- z@_9ht*Ow2apQIWc#qfp0YQeoBPQKOPLp*!$^X^B6B?FY+JLtSK8&|NszuGPh~|Vq5oemuNL~q*J>|jzuPbC zANRe$Oh5_E2`t)qommUce?cZCaTQqcG7*o$XNiM*6aR}ADke9ikt~%*EdX*0xIM!*z1nwc%x(;*lOsMRhdJ~@V%ya8~iLi_M%oH!NOXt+v7N8%#S(- zIYf;DJ3BNTl#6R;Xm*4-EFN(`f3escQ79$vOr*;Lr?g3-q0hyW+pA^cKN|>RIXz&= zpJC5uD$|c5OkjdTBf~0T2XuKun3pf=u8@;W(=3{KqA#;&$Io4$#0a){R^*Ww?GOxn zJo<}LGjq)(1;gXy)_l@^p&+@zcG@MelPOaCqh@M-)5p~7%cfllugtZ`S&Z8aF{JjR zL{~?gy5fT)1Y=}2xSrHu&FcH@bP#VDj(+D!Cmm8(6{9-B{H35P2}L%BuD@%9%DucX zc{EvxrI;sczkw^Pz0Un?9h3KV*(2wmHnUu6|NfJH{-2^$g|{A8rH1>NV!M8PEbxrl zi36gyj5|+F#3Xjjf`$y8%qlG~T?NCx-0*dg&u@ zO0f4Ml~J+8(Llh9n+TO6YuVzM#ssfk>CZ?0@$vuolPL_v2_>|Ga@qOcUr(CG3x_Qa zo|^D{^Y~H7{V?TJ`tPd`%^u~J=H9Fi*XXO%zBSp5p9$K?lrQDUReW_Q*wr0RZx+`_ z;WHKSBBnD!dHAB2s8FB(@(Y#WBZik&)w@}}qi@B(L@Cn08NmuU9z~~~Otd}*aSP)N zqH+tb#b`yL;6(m;h0>#$QVJb96K$@A(u0^Bb189xc(dshQ(t5nd}>o#3h`2Yoq15d z!K|V>{%rUi<7sj2??y(63B>8-C$Ipn^`7)p*06+yLJtF9NP zzq6x>+-DIM;7fSvDbpe%c~2GN{FmS1RdIh9NmxhKBQrAPp^Va&PtU_FKD4S|?e1C% zIWHw{pC26W(|}}FL&P0izJk^*3GU-WHt&O)AEC6`=?Xsizb@?mzRm-KQD{)!EH1a+ zy^Z2%Qi}Q~`R~e1TD-r~VqX2lZ2|afF9R7*Hc$WAFV^CBpR^Fs{H04ZtE_%zW@dQm zNlt%gLt(i~^dVp-NU+`C|5`HG5kbcV3{;1wrWnuY@ajK`Jbfx3d>{9>%b8uxh_wuD zMRkC=7zc-92eS*(Vd~cjg!VH|&yPNNNcpu6Bjx+7OGBD3WN`@6l%whH?XGCnDEk59 z|GkQVMNR(=qn?9|XU97XSQ&WCs1y_5)ZQY3RCAVuLnq6Px@PN~vh!+$if&2{;xNj1 z`NF>PlkR;=rwt+S1URHFfSddMvps~XMKFAIAcggz>bE-4LwdK1U-WZV0 z%v|Pp@~KO9V7AHf_YeCG+ zT~q36J)_;PGV6d+zB$oJ;Mp)dG-RNB(x_aR`vr))#|@oStF5hF@f6koBo3(Z%NyD+ zcA#1aFGBVtP3;}W)>uK5uW#xHU+!C2ja|Sq{!(ib&{6YW{1QIM0PAz26eSgc()@(yYmb6A$17;JTd;7_VOA{nX;a>3XCX}A#I3u#7k+;h z)#mV+jic(KVqTx9OGoofk^im|aK8yADprax=0BwfL!R|Xj?aDC~d zT#;z!P8+;0^}1ieAqc7wwW+7^T0az7Z8;wcq>9Pg+LkT;*!fj>Xq9%Y>GVb<94h$P z|Npw-d18FHtD2A3hcbb!kwbfmfQ{f?VG{|^$G~v!sWuPkcb7H&x@-q?(8M4zgnvc;~1u=Q(0v} zXPIpkymT7hWNNT$YtMcz*>*PUv$nOKWLX<`Qc^RApi4{TZpe}+GJwGXx%(Zy+F6;* zmJICKwsBu`^Ugy~;tHbU`g5#yCNfSLevlxnt*zrxhTykd8864aAt2}`N~*WCVKgvv zHd*W6UoeHk?kuqJFhKW16|K8~XXCtM*Lt5$KTg+oI!cS`k9-_s{Ol-|EtyNO=}l2- zHY&~MpDVooy!8L~pWO6fm|}y~uW{VPlj-Be+3yI0-E4+N$qzuSzsQIed`@T*p7qbzASw=a=}Gd~RLE?OaI?Y?SF0 zL&#fxxtn?h-)vMVO@{w6!Rbb2C4U;Z@Y@1YihnihLmZZrbetDznI8EQuYJVX(mDN0 zt?z3Yyxz6ke3J_WDr?3Oqf~-Lv|L!am`IVw{uirCLmoE%)UEf#-WE$n^*3vo_Y-CH z<^;EdSB*}y$NHG<)jyth46w?oIIk#QqLd6@w?uQtgtdl@W8zUlJ{;6k7tk{-LUfgj zpE#S~eyj~+#_HZw9Q52qYCrMf#94P(;sXnuIU><~AB5Vsd=EBg+6W<^n%{-uXgXl3 z<$eh0V$tcithJeAFlGGCB=zRD#LHGx1(-D&wDo&K{&;Pv#ka9T$e_t9%IHHwm&b~Y z_(vg}A;oZYe{%}I7<$v%_oH;garj$=ryWU-c*|ud3QgnLC*Jf5=@hh9uW7#EW}Nj8 zz}@%!4p4RXC_m8eh6qvI_Pe+$^6`UTH_2r9w%K;CiIBX4!I}Kx_byDc{2n5{>`^;5 zpAscI1&M$cp+Dqy{LCF~S)%OS{bdW1HBcM;y8`;pFTiV02r1;V$o08`p|M*n>)@4S zPDb0}ZTjYBslZ6*Vc^XIm!w46=vElzozL|$gA8svb@N5Wtl)<*Kad8YB~H+@NZv4n zOaEOECZE@R95>$lN&GV~axPLV`|yDm-!-CmEwJ|p59oFJxS zxwh-6d6);N1Qp3^C`C|hXF~aAayY%^mU_zNSy{1`rBf7?e&1+DVpLI5uB#7c?FiU- z1V;Zg@NU8(q5bFTR~q1wLq`O1lSdqYI_OauIn?$@jGZ=BS#7*#RS6P|z*+N-rXu%4TZXO=%dD=f(iO;X zStD@PxS)K$#hTUgT_o~;YrxAh?5hT^YKKk{;^g) z$W@L(6Uh{!os1kJzm9{MkKFmH>bh6ObdclDPtdRRMhU=<22!5)DDgQF+!|#`rI0?N zMB<9gfch`_L{9^Y->LQ#deHD>lTk5|HaDdc(mUgjfpRJq!?Qt=VDUO}M1;3VJbUle zw7OCR1tcR4=3k9XPdnUlaSnwM*ij)3Od5T#aEG*|#lf`NE)|XlN5ECsdS8=l?rwZ5sYY%Z2!k|SVw&u zujb{p?BaTM--Kz|Nb|E%V;d>#J;o)@e?5_6FCP6uCcuucp+7()P{3b{PwaS>exIds z#jKRc<2fpUi!pkvxYjo9%Vox)+uSWV(KP;J|yOb#B@#p#qU6inO3d4w0u)1dEikWme=goB{OMmIbk- zn7su@AKq;N|14j;t+{uuID0i69{Bw@!{EKI;=VZ6H}26Vu&B9mJS33m)(%GiLbq-( zns}?KLKx=0yQ|j}*=0K#h+gS%hXUSVw!n?(LUjvjhRfa)Sz&g4!0lcQaV8ta*1u%$ zK}ZM8#rWShEhShUaCAIvQc-3@2lHFmN$%=9U;H`|Bm%0uqXWSk?KZ^P1@h;#g*GI_ zC0Sv^-pf_*^|ya%hQjcH+wXVRml9YKQsfbTU7O}O7Xw|3JjC<77`kBUY&#k8gvWdH zMT6IEN_ecTjSWw*Xw`&agXJRPaHK1Hmo%z2>dW3FA4FC@C>;+NY%)g%Ix(!y6fhrd zufaHN4PbbFJ9^o!hr{E006aNBsfT)%68daguDwyx8Y8O~nUYHu zf8Dg+t?tPVubZP-EKj#K-vrPTfop5)M7d!8puxDWj|7h-9;cb;;}t1i^d9@<4jLMs z5rJmA7axp??{MV~1)lt3 zpSp~CHP5V=9wE1g?M{6#A}+Y*DcV?neRLuic9))FhZC6HZzq=?Yn(Rb#{A)0NHqSx zUL3LQh6GuthFmOFF$Is?>tkM(aaDHnrVtfE?G{@ZmwoSjGr4mvO^c7)E-bY~+v{}; zrEi&IGLt&1zKwx8K<*DqfGcg=A@6<&-qqPHy#RJ-p1s_Xpt6J{c?A@7!0P5!1~08XwJt7K6yrY zJ^KB733H5anxJ01TjoUiRaKQ2=N^P*Bvw;*|M-=@Y)TUn*$OFX;YpsWmd#6h$3EHH(| zuEWdgt-q2obbThA7$J1f%DBE|;rh697LP8CGbFMPtHR12w z&rM>Ciqi_Mhq0`L+pmI+i|w>)e1f-9dVIyt+-vt`$QGy{SD7#?fna63b21T6*H2{D zg|VpCoLQ2y6}cdkis|7>2mVkz_j|5`&Gq$1V?GU3T*KZ+>91Z!m_=2(laaYEZ3&+b z%w9z9zm5XyVn;}%q{7cEvDRefs6qECpE@mXWZ2^)j(;ti@U3em%0e(FdkR5Q zxT?=quTSov@D#n5!@K7YqT3^iNGcNtj`ut8>L+`p?aPdb90ry7mwywmBwo=}Gg`}r zbScWUr?&UVC%%6@`#xDmg;o1$G7}k8l{4#*P1Tu(vG0rm>>GiUNJ54kDP5QXL+9~y zN+zfBjwZC!DT>Qt(XmDkp#*u#N65e5{mQPYsc9b>W%~Vlo^P&oax9OybN2{;93t%I zjSA|BI{31~flqGys9ns=*|ZBOA^%n)w(4f5##%=ri&^jEJ~199h_A%3SwAp4kzk!} z1y+Bks;b*WmYWY}d_fJxPp;+% zz7;o*oLUXDLZhQeg;exjZS7=O(kB+J!@FtGn^prtl{SP4hY?9A4erPWo8}vFliWYa z8jHk^QGSMhidwYip)Vw_H2}p#gNiuPMJdBYt|sreLNP`)efR5EjRxPXT2GA8MJ-P1 z=IabO@3EN)i)?SgGg15Dcf{z?#v}T_HOY#rs4ot_*p}IWd;B`uuJo(81IesKe}U!c ztBk~2vv!|3t^ZMpC!;RRz~Td|==r8+C@A|5oI<%qBMC>Rs}hD7O@l;e#Looqx2gSH zJ8t8+n%r(1lY^vma4r>G>$L(*&{!?GWb`Y6ytdj&r@f;dq{c9|_kz@iMk*LR&`r7e z38jie7Z%Q%LnSQ`r$0Eh&@jiHdNf6_UOp@V>99wi8cBBE>Rg=iW`DGm)o7^SPKt+J z90Wii`LTM2!qT+o=vKvc_49^)yZH03I8WD4!*i}77v+EbH9^6ML(L%LO`$Q-48!7Ffo$D+dH}0FU$~2X6X34{17>J)GoC<7HcW`(J9uHfZviy1qAKb zUt?#>=MDlRP+4W;)v^fzU3}I1U4F>U_RcS0#Wz9_U1+Tan1t##opvD@Ll_rDMKsLf z0l7SUb&ZM7e9Ar5<&YVdVKjw4mHebw;1pZJ3sR`MCe&RPME7u*R-kwL2k`fWcjxT^ z$TDG1_6meN{wRw^%SNGd6gJMIVc6DvWDBH{Ow3B7AMFu5|CGp?iokUMt-0g3A?p(r z-m#akSDwt$lwYgKOkCh1ge8(v^2PygEaO_g+8#T^ z#0Fmv8nZ+O~*-BkeKPD z@Rh-RTNmOYs;wu zdNHn8;JvbUXp+$5`?bguRwKcnem#5we40KqpO?$fTB!FClglqLL>s#UllRGBdXhyZ zbz$?KE;s9s{|$ehNjh8)t=aeDo4;qklM_v|rH*UP@s(`F4?&w`WZANCIXamq!=;Cq zt1P7c?ds_Y2WUZ;B|n7pp^^qkpvCeq8_?$&?a4&@S7&d7P3zLJ8qE}9aW*WQy@*r|5#FS#UDZK z&-zoR_ao2o<2SMc37=|YsbDWs>3#X-v3VxsZY5K6^+_YCw}ql6kMbE}rs)ooRhJ1~ zC@gDjfEUg(z%^p15{PLsii5SyO9Zj(=xOynRZMP0^77D~i}cjf8|ZnA|E0-_-UPk8 zeDqf|X%6JO%+0=ZXmr}c(<99n0QbAp_gkpbRQ;^xrN$X$5e)Gl3JVmowyw%m$m)P# zeeBvCO?X^bxz?^wGRtcd(j6cvyK?q6-gG3c$jKl|4Pa4*ulhY^YrRtTX1p!mvvrPA zpj72;$~R5%t&QyU84xIe(X9jT5|g?8*4cPrz&Z%ogpX)`Y`vE}S%|KrhtJ!?3Bvb} z&wC$@;EI~h{>H-m)h(bcGV5H^eM^;wjdER&G&XHmwUAnw6Rr@7rl%%;mCZjus`qGd z?B3;>dQ$LWU=qI0JG{Z7{pd2?_c9DPeO)e0*0|-}-3*JiJy(?5C*cXDBmmo4m8WsM z#EYV*e*iskGBi-Au9LHq^iumvXwG|(@PUuUi;j9Z?(7M zl|5=!5%Vjgiv=J{R(1=Al=0I)b8{Jz6H<%HitjzvqF*&(jr&6_ zNw%d$pDe$1BFyxEDcS=(56~h$taa*cB&(GHfN1uk!3?nc!BPvG!qAW-)rH|1u_hyB zRF}npPX{4^(l)n^;^#LYkI5NwYfLc$J!9@fL1Jcd)LTH`T2J0Ybse~AILS5cC;2%r zFkaFb?zGqK=$r1aOnQ8>^R_70=XFErF4NWSR^~+$K5Ra-`C7m2(8zVKbM z3+n;ihmIZd@=YA+5l;65zQrCu>sB02gIep`H=n1N^SSbQVNNoVIzJBbNR+yu^zzx0y>O45w+6ogTW|UiVC(gwvNpUcn^s8dH2w@ekzD{}DBlJ)y#6y-ixSXsnh4{ zt$A4x$DIW3kD5v)W9n2rOg&P1zAZFT;c8>!W2T5|tD&`Y_SqCn3XHC)S`DyW`d9CZ z13~*IAWp*VG(HYFD=RzMd0+^Mn5a?;-_P9jdWWOzi3!9A`cl4Q489s0Ta?jc?$)nU z@;_w?IU(4`*z2J$y>oM_axPdwuZ{YG8U8>|9U?S!NZ;XSiyp*OQw#6PtTbyidQ>Ds zb9oxGnx4`WrdXLC1qO$_JWj}*NV`fhm*qPNY~C9Gkzc5v$J#~a3}<}%MeRGVkCMR1 ze|?5~NFXy;WloKO**rVk&c1%0V9Zd6ma!+d{O8aRcigc%MXC$?w3jRKQ3Fk5R=m~_ zW8{47IIukGLhFuOb6#-@96%zc%WsP{%a?|uKf1G#;`WGecN#o$r~KHj>98r_=GHIr z9`vw)`(>!E|Ml0w!89Yk5#v>)!@2#yWzk1;h|t$`qyF_fJnA^Joc|?Cw)ZiMVYc^W zN>~wuAVrq^g9`;h`Np2WIC4kCXqDMy_>^kcGX%N4v)7gSiE~lJTjBDFoCCEbx{Ls* z$K6P0(sXYHVulsNo8Fu!Yi(DE-Mn8+SReTd0yyX;a*}J{zyQ^&0rN~OtZE&((LSwp zE*WUB)yL2v6lrD>UUoKiFz5PKE705dGW@=Hn{w|xyf+)zx0yl#w(5Sv-3VZDKHJV% z8!Du}RbVjZ|Dr#F&cLWeVB;~RT^H;+i2`v!1vn+iPfnNa}q|| zC4};ox7rs}ffEev%!blf1rby|_FQSMHLl;__>+pUC*o%pMe?!Shx&gJIYDoLn-_=4 z_8eS*#`NRclVH|N3&kUQcmMo`!d-=Xt`s^^aAYEZc|ubZXtCKbCxPV20Mx$KH1Yya z@q$|Gk`kVBoeD+WTcENEJ`?eIkJEpNll)GDsm#{%?WR@hKG4E%3l{o!{<+yE%N*dm zUnNUH71qUjCir3toGB0)&!zKE&_ntFdOGSg+>7*Ez2Xv|1wnjH!j4)oI@fUN5yfyMz_D#1wWndV1o-wHl+maC)*oztK{+d=Srcm$B)8zdqjf zql!sh1hIlzHPBH@GSmzN2Bi)I4TrhQzM%zM!*@9%ajmC+rfFB9Lq!xV$P<9LoB8%Z zoav{;Bq|C$rKX9;*wkJRy{_+Q|Qg7S$) z@EK;LKAgGyo{(EZ1O2(9nN}I}nC$i9v6O?bP=ggZ#T zNQh*j%Oc(wH=dHXfE9V*P64-afirkN-?^B0Txe!9H4`(z>wOOAjjP2aceF;AhCt|O z9FW=_w%$fgF2Q~9v;FyQA=i;xM}~vgu$Y>U4dsCoZ?wwn+m1p8(?leOt&TK6=ZT!U zX4$Q)eO43MKQvY*I&U4+af7>!IgVPAOQH#izbV6h%eqRW6zvqMT|?RfYtiY!bO$Z1 z7vl2~n|H;+U?+dBQN}s@?4Ft_ik!P7dQ&Oqu0RDSAO5zu#vH#-b?SM+ksr|weeix`&)LF zZtqKrJt~fXQ~az?YMjshrg}R7jJ(|;l`xvw3;;ASEb0_jaA5FTRKE;zKgS~N3Zv}R z$!(0Nhu)4e9xEe3O;ngynfi-#dKvwQ6*4o%7_MG}*W@@CS#_JmDgNBF;Ue{jr{j*pc7(e+LMmOLIN+w)XAS8CEyXZ$ z{?T%6kh3l44rs=ie%lvOZOK%kA{^0Cs#CGxb02rI#9ljvPHDXQUdQzdAFBxj8lt+= z*X6#yb7sx-o7$w~2!K2aB)-8@ypOkXS*EBIW~2i7q?h;ROs$l=b*OJ@eM)S*3aczS zP=F+VfRGZ=8(L#`15CUN1x5^+y_l49ENC$>#P5kSkQcfQ`ty4#>Tg}2A%qYB1&|?( zULrLVF4+9Sojz`tSabr{w_M$_>o{OO7bxgSq@!&3SV6G1$|a9H{k=emE_Lf;&TBss zX@7Tf@0xb*?3;>lWWt650i@nXIN>afjco5q0?5#97i}9wWxk7&pUlQIE!X=+pES=@ zbct^;p8M$Nj2z&S+}l2`(r|1`Jo#C)U!Q>uNz@8G0ZWl$QA6Exx{V_XdVpbR5q_!a z%ADj<-|Qp{@0;*N_*}_{^&r%h(DhlFTm0N1aw~D$k7;R?#8+@i?43B8D7+oLk4{Jl zBxI?2C|b<(Z3rHRMI>{7zv!cRuhUCMwdrp_jh>I%UPJ{kQC%7HQ2dj?^bTOG+&+f>}S1gto8ib`h}qY-d+gsAM2q z=uSO<^zCZJ<6BuEHD3hlBQmJ(`x5QnGPyfcNDe2Qm<_H z`cbs{JZyh&iYAO}{-ps7uFQ#*B6>;pm|1-Wf@A3?y2lqw8<99`B z=O*}(7u@2n^R`B?Ij=C~<`E_M%Z`mVFxTm)DfRP~q|Dldiv|B*Rj9PAtQ8~QnU%cU zxC&oq@HAAv0jw17-R^+e^vme{iS+bO3)hYV#+!reXCc##uCCM9gwZdAt?1a7i+Aiof<_-{^i#f96upF>GTXz(ip&{Pbu|vzmo*DIFzeTUBBH@KHTrDw}mS$r{1De+6ij9 z8JRpBBjMI;(eX-;UeFg2>gWtqFL^8QeKM&;>s>o?8Pd%KK&51Eo<=w?k$p@)X`tzi z8)U?)%!Y}VkorZ{xLCe^3ThUezpE1|Yf^|}N*^OLu*27NMrwQdR!1~Td)Fx|tekqb z_6!`~`^?g_oR{gVak_`>*;+zBS!N4mK$wq=xU=M#e<`AK+sL%ElzT$(F{7WWIK>R> zDrs(cXEb{5xD&Kw;bLw?dk5z^P;H@4OMExOuKXIbLoKgYtmyL>Gibm!rgkbMiI=E* zqIPJ??}^ZP@-@_7Ye?s{)Bd_T{Knc31*Y`J<82|LQkLl2xw7egyD!u;Bo|n|I`r&l z_H0>`klaDH9S8W-vSmFzV-I7c>i}tCQIUYOKd2(s4zq`yIrmMhAi1T#L{u7A_jijX zwaM~FsA~)gy{JLY#yrIG-ekP+^z_^WVKf4Jypy?8i8=3B`rr-GF&6Yn*cjg5`(@w! zIfB!YxtEgvHWZVLdn@@)!vBvZz(%UJm)0n1YIv+S-*~!?n{{ww#gdXedF(VwFLYsW zf9Os8jUxQ6CH+spvR~TBrvZEg@ws(F!|2e$lXqT|lTvJ_*g|iRY=;)1w9W#U>Q+%T92K+kR61T(-=%9xyVo9C)--Enyp3q=ShXjl$XC4grJT z4qMQgiK58RxLIn6`>&!+SA4?s>QKhh23D{S`_`2PNBixfLnC61iz}O7>1>fKdq8IQ4&~*rOuJg_@VuTM_g29V{KKQ`&%E+pGW}zt?%9|R zJY&T>7*5q)l*EZeNDn5U6lL*Q8XYZc3vSR6F#NV!;ePLTQanxVH|_M${9?mEE*veV zzXktR*pNLGHd0^r@vu>red^>5Wo5YgzmT)qqO0`wUhJy{-AQ@(gH#`a`;i9cxxBy0 z@jkFw#k%L8UHXkYn=NR#TeWG&hRrucxug3kaj@}1aWyy$N>$27)^B<~F_HUjRBpgL z@J)afZo2dfzk@$Ts*v1v6@-N8c@ITDMmIJRPAz~LuMdPA&B#Bq#v+MCS2+wOf2%KI z`WkKHYfc>5fD`bxEps($TFxc$ zC=8rRZlRxe0-^#jy6t=*{YsgE561(wxae?*Y_R<|w8$>k{L}cO%~$uJDFWr%lr)M% zd&UEgPMD_VO^I;Z|M`r(jm&HpitsY@?E1BnNV*CiZ&V5dFYr zM69ys+2Y8G`|3pU_)c!JwI4mOl3~B~`^c7dBQ|=&L3-da^&?6NaE$;$YS_Q&8mir9 zR&tluyfEopwvn+n*V44y!kU5@lwRtZ{Y?simvgi*gmE~;zRxvJf)n|fml)a^^@S1- zvkOeb1<3jpBX1qNfH<_yHSpTJeAH$w_@EJ>H%jp&+A-a{`HMyMi0&bgqDM@pCTn;~ zEcTjG^3<(Bg$koq3wut+g-2DtJ{_&%0DHfKfc&{a$UeTbn&efdSj7KCQr5Cs1SX(! zVhN{Wt|Zx$%l4vfX?~}57j*sP`&}$gpZ}g;f`Z^P!R1E#LJ#6vD4$p;Ip*o`6xDOv zi+PMRe|HM;q=rn~W6!JxNySTpo4qYyjKBDrI@Z{^;bLmu@{_%F3tS@xd@!EmNLPI{ z{9QAetAg?%g`yyYcWqKrS+Bh5QMBBiVLO8Ij{wH9{GOqBg*E7Ywf?wBzIob78PEZz z0be7(+*9f{FK`8je*RD<%i~!1D(2op>%MjS`~nG1UJFD};sqgl9K z+|IEdBYM|zm)h#96%!vsA5ifcz!I>X!5HzDIO86+w~EEe-9Q8dg82|ZF&~CU594*P z6+q@6UD#A3uJ?PRJ7Vt6^+E50$es49y7sBOLL+pjEsDjHa3?hCcTtBJak|=W*QgPD z43DRml-~u#a}mj`8ba<@B8!U3VxV8M8nZM4m%Sc?gj*AbE>g~(y!+x&wvp9{HvK{A zf9j(D2xILl4+W9~q>Aj}w%|hJspd!9;TL-?&&TX*780J&`n}Nmx9tR9I$peJnq_Xt z&sYe~U+$F$aN&vutb%Y=dmRi2)*-wBni{1%JsI56=II|=bWX{@q%8k5W6)&7iL& z*bR|UGq^^aXg~B3k$5Qgz4zyAa&iDdwMZKJ*iF(fexr3bulRHpt&;ci=gNZHQQ{u82 z`fQ?HwcQVhlOjJukH0F4+3Y_+-Ku_cxUZ5mG^6pY@`cjUGLM1ZZK|FLMK{anUFO}m z%-F99$m{B-^Hx9t=ufgg39{e$-u54ru$0(#7W!C7|LHfOe_2_8aLE79&+89(NF1pD z`0xUZBxuZyqaTVaz--=G{*)N=Z{!L1o9MqFsUby8B(K#2T#1g3%k-F}@CB#9NNsg( zKQQ!@-imn&KMF{UeC5=Bz7~h6b`SMLR9Dy3^faa>)h4E=vjfAdzjS|;d~k9B2?UwN zyGllR1|WBm;o|C9`{heAE09`YFntxVnP?OD4>BOA#AMOa))|QMGZ~^nPEN70)Z#rn za2w4{<{8f<2V~2Hy>4U=78>Z&@u|<7IOmAN!^2hIsWYt1{IEVMjo#lLKb$uU+94VO zIXgQs{F6;QnjiGo_>z(`1L3oV|a1$<6ni0^LKx0CeH1Ml*~|)ls2+aChyB znT@0{y2F>g6SWbQd&Y8W!f@NNpj5?bI;0V@M zxaq|}Td$;bCS>;+0qdTXNtQDgVk8r)1WZe2UF9<3?G5i0-2Vt}!b1bHHnI_Qzw>E32Ple38mjql zdOQ&PN!tDY;Ddt;97P+QwhqbTt`&m^VKzfh4Om#ig8!_VLMG^hR`S+vXv6z{+< z@Xv3*DY$uY+uq)b2DkkblJzb5fP*xUEU;Wa=fikEYs@4o$@4i8qT6)aYe8vszyC{9 z5L&PLWVkUMbSTx$N2<&heGgIvO+vN~B0Jvk`eJnB|K$;1i3g~qi1-md5eN@0_6{}B zh4jb;iAI&wS6SAu{E^`_YWB6!&4tc9KA-IXusl49b~^fT<|+vr8#^!IpY-(f^Ut1{ z1%<9aVuB%UE zXq3d0koY&RX{u`8^k$S? zUxAtI@~wG!Nm<(pTzB3VI%uQS_;b{!yhxpozT_e#2xcQjGz_~X*MB5F^g5j#NNa6^ zQ|{)}kS)alV>_HnOq^QTld;?8`P|>-((^!0#q8NArBhSplwimkAXU=?44g=h`*b_@ zg>BPQk~xN2K>uL7B`Hz40d^!jB@5(X!hf{R&oFT9z;vFoJ&)w}%Fe3@pvk}fK9Hy| z;aSjHZb#^tUh3Ja5|gDd-K@J3rVYRp$37bN@nAAb3svyT0pqCmy(w5Xst5~UC+kr6qw6#?vvfu03 zb&+LD$WxK!)|Qc$%MT(n+fTPQU(Si{kr%eiy0_X}l-^FVY07=iqjiEJ1?~{-gVwHm z7!bYA!nL*#oaQNyhCG5!IL}m+E{63`{q=_V|GKyTT|XSk124q3Tn~dckJ}5bcJdUM zS}-CxY^~})5|Uut0y|NYTMff%VIYvBGoKadMY}_E-|Xk#bn(QL(%bonKw3Tand7s% z<@4woFRL#$T6M!9u*zjsP08EW;P05(_RJfKp8+F7>%~$6$&h)eZB}~c4N80{m9%Sa zxfltzejoUNpXr>RV1G3uA6oTp`KAj-2@Z178VvxBZZCpD|JKm zuhdP)VT}KsTHCAd;-@l8_rR)?3n8Su!XpySd>YqbU?gH%J_@zDnd$3_2cc@H(w3l8V_FB8&1lU#4OJ^dLEGE1TZSKmb)Ayc2F*TlehW=?N}9hc_t}b~ zaehb-Y6GY%p#kFJ5h2hegbG#hmI zbT))mi|c!yR8>_DT`mIJP?1FJ4lHKn0%fc~%FBcn#EI61s`#{wGK+X~oV{YKXVI=$ zq>DCK?}-D7(aSFFCss@JqoNvXk-6#HJ89i19gXK~75cn>*BicnyIPsVFh8U|62->? ziq>L2*uA_a2SpGMjx@o#njes2gc(}rEIK~JXdbD%9|9$cc)(vO#BujZo_3Xcm25V0 z3w5$YTD-|`2Vv8T;?+>@dl<# z!p*%2B>g4nbxk-akqzy}^ODY8f;xb7j_o*M8@<1`u63%-Vx<((sVLjS`oU0#nRW*o z^s5)oXjj-ICnr{Ijr{yZFXQDd*Ip3C-BBKuPE~KW@g(XP#*yf(Gk}b4 zU*V0si+o14g64$fmPzyc_8(lSl@dyw#TnW6?gGN|H?dJQInCjM99)9kiM0GD{!xb82B02aop0NajoP_RXx=n45kDv0(i(&foqCcu(uAdvKHjZ)xOh{aDp?%&0jx zEF1}g{RPX2ETJfaVQ+`DZ?O4&s|g_UQ%PeEQ1)y702NA=o^8u*CNE)6pGx7e&V(9) z-8VZ=Kh%0)XsS!? z$PU_6%=&9?G3;S?TnpdoxzO;Ca?6jN!*&i#xI}?{kBW<{0gIFbAjPtGEkC61WR4M2 zB{1b{z%n^lvtgAKT7{X}F^M(x6Chrn-Isg@G9oUiLWY4cZsfi3$c4Y3cWN_{f!Qboqcc-Yr5OMO)J&D$$Sx)wvU;WE9g zZzy%?*RNj!$9`F`&UZ2D_go5i+uzN=H@a(W&NMUIA7sw}oPc`vDhrA;4FrN(LY!rx zPfFhO4}leES}9pen$bcQiU$Xm!VUrheVpgNu)UPBTpVft#yx?Dv^RM4`IF8#5*WLj zxN9HD!g_avIGQ*20E>A%Ux63uXGn0t28^V^2`S?|oZ zb&}#MYVg|xg>5rzDk%K%kG7N94&e+9JyX@n4soH_Zto$S3DL5@kiZWQ5@mD2;k$Q_ zb1l?4y7ShLc5JeY^F}gUyrc7}Sw+5L;CF&_c|@L)kAvB<>C_}%FGte8 ztZNtx`{*;(8>|6-bN_Z6cW5+i`$}h!Ut#=BR;_q=H16msulXR?c7Tmlte?UUVq=={ z*ZzDW4rHjfw42jiQik-$plw5%u;((bsYr1^?eS9za#tI7bb~REN=D$Y2sdNb&@|mHKlhTaF*OBk{@H@`^`7w{1HE;E_Q@o2Ly2f z&JcGlO2>?I;b%Y%Ju9g6HyacP@Gg7|=#oF8bx=~15{rf39Z#|yZA7v10Yn|stkr0W@2Q{fO^Tpb@ zAERy9n?qI9CWuzsU2CQbugMuJ8d%qE zY^LQZtEy`M*+Ddm)nRSyZj1Dm#Df-z5F44;HW8pyMAvtUHssdSSSezdZm3ZaN@2N& zaL{!#T5yNT`zrv)=WT{vXJj=(GJ)wk!{+oaVR*TfW2$R5HDI#N8gT60Iq=neH&1^9 zc73tXv$3yr_-sGLv9`zLFYQDaX22aO%;U6^U#?voX>_*9|3-XC9TgH0k(KU@u+GkOt4FR_u$TfTHjq7w zxVn(b)ym?<8!y6K=D;`{mHQJuMl9IQ#Bwca5aU0?NnDf|58{t3E1INkPjDNDvJGU;d9*(*(xqc(k8yJ*d6#$K zkK2^Qeek(-E9K$*Ok;9Lh~Ju(5M+hq&w=Lp%|DcDxUtDbuN=%2%pe75N z6-{tWKcz`a7sNX1%7H{7CBeE?$+^0Z6Sg#Yy&OI5J;o`9Ne3*Kazqg&Mvxtw!RT@J5Xv8P-Ev{Qp{BHZ! zYF)R{L(aZiR8=7jD8(UEB0g~6c>6ZVsGnRr9a(lc14dl>c_Z2;%MVPjf@q&pyLv{F zdfvKLDe@K|W3Ue~Yw`K|wQNM%mV^MkF`tVt`&4VX0`Vkw8v%kHTmTyJw&d81Mq_VRNj;9r2~T$ zqlB;@upr?gm(_1CHRpK2Hp^R#cvXww1D1m60w43maGJ(;)`v7ytfmWlR{@*^B#Cd4 z!VCeW1qRk}h2)5x*|=7V8D92!N_Kb6;F=>*;!Gib=xpXH2vUdF#c3=oC;Gx*G&3k?uyMq`S+Zq+#g%AKv}#ea`u} zYt6Dtb#<5*(uc_zogTj8~a$|=GpTjaw6!l=?9c8a4$#naCquNCI zQg^Q?;GVJq=*d(aZ=?r{^ig_XN#9i;t7 zJFTJMmGC}wsjqY;#J#d8+=?s4cpjxL-fG9vn`l;YgsA;u%NZ-uR8j&YlPFnA~`t?-hTpK&uZ#etOH1 zVWRnwnsfK<7P4)((#`N|&Nip(u0Q`~HOXZ@!{@Z9y4KDjvhNo8WmeV6usQ|1a47lJ zGn(I-EY+{@suj7T$Hn)i3nI_9;z`j>nde;La-m+dY9-HV2WM(?+;`;?9q@6G-Hkzn z-6d{b3`S-0`?V)~FzQ@ghXGCC(m3tZ(z1j<`wn@R26GcYL@+8_8ri-o~{z$;9r_fj3)Zg!BjRP!zKrXZV-O z=eOG&6d#M`yaQb8J+NZT`CbRKmjA~h{vQ~JWBf6SZrm~k#uTWc2pT(_Gie))=dTA!JeaSAh>sJCl2oKgVr==>Wr{6D`4yu=3- z^ld(Kf*3L43CN7r_NeO(VKlFLA0d)s$;jcioF?z=&~ri&b~we8tnW}*ylb})jlTY= z^gYQ$?x6#c`2NJjB?%FIpmrBzdcM2zfn}gpcC1Lvevnx`F8lce3#PdXXFK4$I#I#3 zGSNu0(-pGJ|MugUB{1u1kS;<+oW}l5cmd+U^dZxhYrYZ_;zb5;r*xAjVDf^#1}1oD z9qCt52996oG$NCS_m?tD2r-i~-0ija*TO$>X)$~NIYB2IsL;(eSAB9L2cUm{W{bbG zsarf;A5OW9kMhSAD8`7(5>#xO%#i?20{nP<fE%P0K79`D0CaJds-Dp5G%EBPj&U>=|7kp#%Od-SFx5^< zE_fR-QiXo>B4r?pt^>Y4;iw2jv@iPc?c3I`J1`L$B{mDfrU^iijxMWFJMwJvXt;0h zc)eU2A-(0$*vj_8^+){N<^PF-_Ae9o|6#zzm4UAi`FYRHqot0f2N@8Z0kV3gp6^kE zn=Xu-eK&_KEX4$j(Dx|(Hh(`uNTiWd5UofQP{ROvmE#;eM|oUna`jFRzW=ZZdzi)* z58qVPYqF}G7AIk>&K zI_rv(mwG_Dz~_0t*bdH#`T3U+a`KHo6NR+B1p6rb{#7+c+C!1#wCV50Z;Sp|``Yrf zv}oJ%Zol>@r7e^?fx@q3qwavEoY;#PaAUy_wglNBP^#hGNR*KgIqRI)rh zA75H}^`ErBh;y3lG$3%G*w&)a`OREg^CYSJ>Je?D$DcTnsY732r7P8~?(s=>e%kW@ z_^4uf3JUx#PLTg{USTl;pap9D>l?bq8woK2iAeim<3xr#`Ga#+Yo4U&-EYjtCyl;R zR9iI1^pDw{*JhGxQs$Z(3Gy;Bg&CsW(nN#l<(4Y1S!+u5TYLBk0khVOt$LP_WgXxe z(wzQQc@CJO4la%aeJxZS$})s~-}O36tm4g9fWNl@u8)&2vAc9q!}c&beibd{A|b4* z_4!&`)tGE{6ciL=-A?`;hpB-`@><^mc_pP}z_BK;tE-z0zr^e3z9Tz!rYmBzaykAH zBDncKW-IdwlRsSAfT4`1c#J|Z&FcAfn#ANo0XF#{8#2iu`N47`e&n`cS+gpT2-v-c z+9^;^xU<-K2^6>51G`Z>0~1p^xURM7!~K4|*e+X8?}5x^>R(JssF46(8XTHN`8bpY z@C7bF9J~!lBrT2mr1M3g578p3g)}I*6tpq#c|$MwK|heZa{dJ3P>I@6pq?xGl%=S$ znSV8B{MB4tJz>D*P6C8=DZEVUl8H`(Q)W`SoD5onOxLt1j-XaE1+AXgnmQ z%e937*~>^<>v*oI`=L(2F*T|MN%j(cKlj1wTOXVf%=z2j1MD~XtWDaQOa!WoeO~T$ zK)4_U0h;(IZ?OA}Q@sQv%%?o604L9De@I78C0MkFx791n`AI`6;87gd)4EcGBx;#H z;ClNd)EoFq7X0CM(o*>gUTjnZ4Bi~->wrB7%7r-f;RBa;WQl+P0q?u(VxAS-X`eGq zGaK`-i>1wTy*YfgJy-;b zhtfBZ_9#o?(*GcjJylHQH7z)gEo@xKE`E9$GngW(|BFdUh2Aur$4U{BpXy0rZpMby zFRMNA$VPst>{$ocNX9VXp5P34A%MK$3{lV@3P6L?5c<&R8kDj`mkveC34lPd_ln+9 zWGl9fOtrPOS<YLVPg)XsKeKS!sLD&25?DZn1^Mr#ML{ z6*CW{EjQo6LN_-JTU`914ONk28%s|EWt5p_xFKmjU|^m%OgQtG&=$+=X2c7i4Jk|T|_ z{0{JGDU2yd3D7fnwQYLJsHpSf(>US$LnU4xE;Ux7m3kJSZQsu$CHfTAcEZ29&hg9yNlej$VF*9mB z*JO=novj@0;&`#R^smDAk`j~Bh)*_wH6{V$7qI}mlfZQa$QJ2QFOyc`H+}?QdN$3E zYWHb=cmdWcmk$$bG`~f&5G|bOXs2R?3dM#cs<^7Jv5Z@ya7T=@!s2P{ah^P*=6CD6 zsG#%gfxuK2(JhI+ea{sT^8z|pSTx9B4_{f5BWdxw*=hR<@6t9qLJ>p(>3ej+Yc6jf6br~?VLfcQ zN+L7W-Dp1a=a8POA;v+rz3uHfOM9S@_RD`#>Dy6x1ngdn?t?(5;QKb8g|RlI8wIjx z^R#yIlh0%~Yy1I~IG)Q-E2Fl3Ne<|r5wh6Z+Q)y_t+RUVRlDAfcZwa@g;;FSvJL>J zLBx;2d}NYkGrq&FPG&~EKUdnW$E8SMWKg)Rp|(Br2q=*$Cfhp{qCWOroLtOj2LCI# zZ&2$WKNq{+C?%oNkY3wka-aAv7!>dv`XE!|!2)*ClDKz=Vm8xK)rg_%mJ&0oJBg|8 z|J1D*F#bX|q?92z$DS=lw`m-Z^(7=U-t8jbl@!(%0rD^#l;C}6FwHe}vzFb*rfkl) zC(vv#eJk2<+Xt32J}G~+9L#B>Z}&u4#ByVlk^?nt2!5^=6Me7#?5qcS?CS)GUbY4X z53qbsY<}hUH(#~~-nMOGgbc1-JhH6OB)<4BLK2Tyz8k>N>4gnfCh3_huW5J%{kn!# zz)`U@?M5opepkRpNB(pl5CB{|0Yql(XFO^#hnCM7GEKBnXEV#C+!wU?f(aDLrfkp$ zJQDXx7zk1FNESa|;M!}Z-hvN>Zs#~ia(!W`IWl)lQ0U7PMlT?p*aUgb>T;#X?<=dV7uMx!QR{KC(`7G^e z8~xPN@P{8S?jY3n>Oe#vL%E~x5MgPEC|Edi9#c{`0wgO-cIP|W_8!5wK1pu5TWkpUYn2T=Ho4yJd^9O?F zdbAT#QjEg+dcWMsE&xwdp@i^=@b|4T%C@($f{e8N{dfNIF@jG_4mqhW(f&3=aXrpZ zr2NhFfn!o2fj_jbpGPM^KOs-IHVzjv(1yYZOf4F~-jP8rY1Tw0n@JkPd9 zQfX76?w;Tg<1r%PPPe${5TsnOcg89#rJ*e zO!*|1aZ4DhZNnq~XKVeJjFW@pafJZl-f$li>kn#A^QR=%W<8!@1#!^OPYp2-5kwR6 zasdUA+l40L!w`BUHxdOJ&0afb)f*}UAOd%lt(AhA2&N4szO(e?R zo2%ag`xb>C{b;ca|D6S}(qsRNIG-bEVtcT$+L-#R+2Y6R-!M7~0$IzCCXId*56He2 z6>iQYm_478WO5zK-5m}idv)sUO_>mFygDwUmuQOYpDNC~Z(##TZIm!V{`v~re%szC zxai+}fZ{C}r}Yfo%`$aLz(!?*zG!d9Bd~1wKD#W$85w-J zH0)UUwS2ajg{ELAKvFmd#-6(-AN!XTJP%Uwp(!pa;X=tPH)yxm(fQcCatI);q1m=C zjIfa!n-!%SEQ3V}l=M3&nR6Er>Aj*3OeCI^C`Uzld^d-ptUNDGu8LEwo&fBXuvW>8 z1R=SXzXrU;7LfMzI_AYipzi_16Q!1OwWh`GDo&&u@|SIt1RwD|0uRIN9P^_ln!|5@ z`u5Jz!CQaX4~8w^fBc1qmpAp(6+nJ4XLEHEDum?DK7pD{l$4xhF{Gv>+C$A0=|#Vk zvFq*F@&H0|zQ)cOAn2QoSdUlbhZS{f$Ll-gMzSq@9!LXk_>aqo-I!Evi#{N|Y%mIe zWGwaxN)Wm}3E>i|mDJ>xRiG)$>+mH%a9dtm2T(9FIVv)jpDHozeTuncoZlV2x2Ijb z{%h)6tLcztudK6iEE$Ej&YN(0CubLrqnxF6hz$9JdrLzUp)B{*oN9hgkD!7~@b6;t z9gn`D{zuL!464lD=l>@oFqT^>GL<7-==s})?2=G(z3lv2N~66R&k^InLGQ`|q)_;` z9V_u2f(jXD_52yn!%WEfkVKenx)$WdJ=fk2Ml4H_-y_s+b1QCTAfZ0(^899c z_*O*x)LSWV*E&>$f&>kh(q(!4kiRdjvr9{jgG`d0q?NWv=tvKeP*V^2IJ6&qI6@F9 zSl<4@F$)ftiLw0seZX!>yV`8b1g@)6D9B?gSU&z6zcUK2Z!Ir3@8GV~eB#snQ@5d< zO{5Hs7yMc2>Gb5&->VhmBn;Ywr&ff@&s>14v*Iir^J#L`gj^1ejIg4Cz{4kh%aaL> zdmL!xvVG$_UeE;SgI=6s2G3CNx^)F$1y+(tAHtZFPB{k^2eXP|x8<*a+fm>L7AFu* z9OZ~^ek=+3}D=RX*|=X1eUsQ zf?&wQ-5NA(ztl4r(?^#ldbN}3FXd#|u40O{^;)T^T5S+_lVP$9Wvi86+U=}lg9QuC z`@2+RkB2c14wa%ZTAzTooT?k-QzTtjb>}N5gTP9)m@R7C{sSzJd|RyU&#~!Lz8~Xh zY*F_+1cDIz6gw{v5e)#pk5}(u3)(OpKW>>`^UKlBXk=f;3dnf^~!*^x%1M|8mcqkn=7@e_qKo0rtDAE3<{@jt`?_S8ToYA)>6 zHm)F+*=;RMoHBqRa+VreX)FWk2_qEtL$MC}tsO)7bSA~$RBz_@NN$6%W*58PxvPNF zc8>GvCFO(BVi*rke?Lq?1Z58o{iVdr`_c2YoX!J6=+J>5X;GwXmPGpTG>UHyD)KZI zSfpmj5$@)-Dq8>3`&IJ|96l#FazqI)@#It{_kWnMk4qX?Q}@X6_Vo22c<~~Y>0v;O zN(D_>DKceEL??=kBG9l^Oc#K@Speu82SQ#R3Hn!L@Qk4LARXAhKk7PgGcVJ=-=?)SH%|cYrf#^mx_JNxJF9Uq?hHM4-7O!y?#} z_R(*``NoK!?4cLkt3>WEVtWRTP;@7>4w5vxl6U|9YYt%yLZZZ9AI*xd*ekAvshweZ9nh%ZNgYsNOw=ce~lYrvy z6U5_x6}Pp=R{mn0U?tQvB|e|Bb-m)DVE+#I-r`QZQ)6OysuEWL!hn!qwS4bImR^bU zf8GKYdd;G3!l}A{NTy7vv?(M(!1Ke&*3yhs3K@$0>Qe2-2`m>r{vNI4Q})m#M*qoq zXyeINxl)veeo;W*!@XF`OMBcDOCO%n5H^LzlILal@U^_LoZ*yd1e}1akt@eJ&Q|oI z+X_Iw*-?>2g%kB}cnL^C5?6?J#sI!SvQ08~#hrt?>PI|zu&m7TWZOA;at|qBzJ@o9!3J!S_-_ z1Cdz`juV{a@JUyC2bn>@Oz2+Iq+3#w^bY^6N`lm3D+GisKH7oLfQ1l)Yer(yx(CzT~}sYBanxnJvG!nFD}f zAK4M6LFg-u#v_lIgwe03vT|~kk*)wGN+M7z63gmbC2>6}+Y#51%j)(`kFsyAIlgnhH zds?Z885kMgSxAR6FfzzmY9k#ILWLHBL;f!|m^(=5;nDn`Y+n?`*<> zBrvIirFO^7zOAq;C)z9oML^7$_DYBbH&N|DZKZ1Nj?~{pHBOXC&BVlXJ$87lYg&Wa zi}>>S*Y4+ZO|R}8n8kVO?p(Z};q4eW|~~e8NIbUV(S`B(PJ$ zy3L!<3IW95O8j9)7U)gsNX6B71e4+OOgD0dJ@}-g%)1)pu>$7iO|{okp<>8f;D_7z z(=(L9qK%AkF6|GxEXT*?8LJ~%BJrkV35|ZR(AI^#!#hfUJ-brTJjKo7RPK4yWg41l zKo#k^V_MO8z)?1+WP>PAsl--YhKLwNVW85631Xm^HfZCYf29%K=$D?DeU( zK9urhqInfL;%s_NMa`ILLmnkWtTAuNc;+g=nR~a!$s;4DZnPQej|u%*%LbV@)cLjF z6;9wMU%^){+PdvJP0h_ioLhJIQT|J5wH6mWUs*KQe}9!PXxu3YQC0i!-Bg>U+3$Aj z>Jx^4S-Gxx&|B?PZ7!BK^#~pn+uK&v1PIN@d#{UxXtPdFXK{~3{_+faFNlB&Vx$zH zmi_0uNbUeKv>5H3B1*nRn%-9lhP0A`pHI$A71Q6w3C>qDurW@wp%t7}q55d0d zN@%FU212m}n&pNBx1Fod3trIbh}HoBR6d+{Z?UNg*_(5n5?GM>p+n$8%*(&5}<=~nG#isC7coq)04Y^IkGM`0dFB1}A%8q14&JZvFjWsdGVzj%%Exfr+m)VQ8&8DZ8 zeP6N=&}}`Wgk3v#WLM^BLxeav#44MJvb;xYF7kvdD1Dn`FhT{0`vUW> zGhHk_hHvvdHz7UO!%fY@*``1k5t|{cu%nz-m8mVmo%} zLA`h6J2W95dtDRN1HtY=J6>Bw!u@aD!Cg7e9dJSU1^Mrih&Db-k_}gpV`EqOF1%L5 zs!`&0$#u+1OtpTJK^J2*x8T_N{KYl~lkGR6llST}Yl~F^J+b#we1-$`i8z(43TNYM z@57MDeFM44-|DHP@Jc?HT@C0FImpP=AcwUwK4+2x>arOA@TaAv%OHVb9y+*H)(Iq@ zvVa1d&376`lL1X6{aGMQ&yOqkSrek%c%?Dc)%@mT*biLn*6+=oq_{ck`mARx8iWz_ z97RycN{n7a@|od8M+!mLBk)mIeY#o|2VFlkI{Z)-L{Z8A6jXDOi$*Ce#ZlCC_MX{JFe>)B3O4 zZw0Fr?E5ATMBDSgZJm3i@O9#w6Ls#6~px}-@(73OhSm`)(odEilP!L zAl*ZfHeGn5sjl_H(ZN@;YC)Var{>txunDr7MvT^%sZ!`uC+FU4ISWrD%$fO zAo23YQA5ODyHM-=0@skTNKy?$WFxgg^|75C?uQKT6BnEP4SD+@fTGg>zQ3^ND*9Nz z&FceZtA_l3cp{_n=-AaukV!3UcNb{bg2qz|!jihEaE|Kh9r<9rY{3S)Dw=)C0ADE` zIw^1sZ)>$6M$JO8aG%c(*%7Z7P3I%HEL^k5Tg45%k{`45t_H58DMqfEN|tr-M5Z(E zbSG6aC0+{I$m-8-#lSKdea258ig*EMI7i+{TMg$jH>1mPb|rr{w;^PQwJ5_9(PE1& zV@99bGBX)@-xYc=s9j8Ys#Q3fiT_gasd=d@6wQ?ot84zdLBl8^(Rt0co+}Dus;4=U z9p5z}v#WgUE@O1os?7N!P4Vk*@xVI#+5LY5$5vT@TfNWo?p;}U%qqi|8D z?L;_bS18OYnF!*0q1nzQge06B04vv~oCIo3D2CXir?2*fAU%tSGOshntgjb6hHCtZ z$Aw}T1I=(Uyt1%P1e2ujC~Td6(SZWI(}b4@f5UKfsnd>sJe{3iws7lrv~kwd+G2N+ zcCK_L*g*lm%TX}<8m#T6UUSeuqAZY2gk6!7V;3$DGP)W!=hCIz5Zhnk-no@Q>)88* z%EY1R`s-KA@YYAcJ=oBFDe1TVtDW0kU*eWMu8!I{?YW(lOw;Ky_wss8!e^mF%&)jl z-T_)~9+cp3leAFriH?q(6CB~b_5C?mCLF>#d`?$$bc~t!`3Ko6l}466@!Aj?A!>=@ z@9D48GbOdW2@*G5qPni3Mr*(_46PwzXbv(zt975ZXr8NFw@sgMT#Qk~CR_SYFpCm$ zxRmzcZ1chm$b@}~0G^*I@SyzLb&?5OClWHhQ00tl@WqqF_NMoRHm3ls(q*hC?vkex zYHBL*DDw~$@uC=~1ftD}&7S9NmrPt|d$DcKeV0INu7yNd?Mk-2ps>5_uD~$SnqMo@ z1xZ$z(xIX`E&WQg;0tL6f3aweqK0E^v4CGTR3kNY{l4wSlo-eWUtk$VT{T&h)~y;z zhrR~uL+kUtw3SUmSH|<|=Q~*D1Lvw+V85lqkzk7uu{|!{S58Bjn~YbdUD1O$2{X@t zr!nhx{Su8OH=T7nEl^(<16jUK^f|xshaNCi8j^2&J9R125RypiM+qt9V)RS&SOF3P z#?`ZlED<(W5~~$wYKAtN*s~#s(Bf-YvDHasJd<8o*yLm*|;?ps9|*t?Z0O3 z!2cOZY4k9DO7*6cX`gT%Tz{r(U$&c-DUP^q5>!)L-Q3q@Bxr1HmCT$%iYwLL0}jv8 zIl4NpyMWl!CI95mpiA0W-#6bs?mM;^SDh(kypdP~S7RbdME?qZCy`V+fv0u+I(ZfY z^!;YWzO9V(TXx^JjIk*)M++%%j`|^mQ~4hqH0LFM*>?MgnsdJgQ+l6?$lv`+k^^zN zSjb?{mQqMfc?6;PeazCn{40cSLq;vATtrGEZ%2{G)njgg>@;9Q=~--NyA2z+GR_W! zh%yLE$|N?Jb_-Qg$o1fZYlG|So1pU)z#U5PUQ5kTY<_dk5YhImwidtG_2JOaN7QS0 zfgCxB%Eq2x5>3LFP!?(IzX?^@Rd+li(5k!g7PlM?7KZo*MQBiKQkHj76GrRajgFc7 z;r$(3bU?wqD|IkB8{hR2LP(HG1ZZ3`i(;kgr6h82X#GSf=rjCMO02geK_T_sF%~us z>5vm-*j%=*Bln?8NeqJ_jg?$I(p{-riBlRXpn=IGsnKr;|7v(&M+)7wRllHAwA%w6 zSx8C-H}z2U*=-GDBFFH60y;YG!f^G{wx@IuD$ut?y!KM7dWN4l61}ttgm&wS(GH-< z%TdJ&yFk8+nRXr|@zvQqoqQia0dyJU7PALn-F?@|r?^`w7UJOuYfEEad5DU_k(>Ck z3HB!CJV^(I-P?-=KfeU<84f84JAQQr}igS8_2kr$LrJm??zHNBTmbjrP}=qlM)!Z zx#NRcZqB^W^cWV;s|Pr}OE+|tJmk;)(6h)Il`;~(3Qd1N2-V343LS%O$orBsGlaUlxv-_^!wfs&= zW&VT&VB(xgvM0}~#e0H8X;aYpSuFz>0aZ#m8w4DMd{=tEVCYMU8AKOz7YL_rRs(hs z{`vRPUZF%k6|uqz@wgt2Da?TLq5p}=s&ULm8|AGQCYk2)m4|OL<(T(-sDHj+Ec@w3 z?atoD`u`})1hOUwa$Ha9>qjpBf1~!}Z}Dspu|OZwI2M=!ncsloIBwM2ANKbhQ%%~P zKGM^-~gBsO?vLY%aefU=p)(R53e!G2N@6 zXhogthfH~51@nvuCvFBxu2g;b@`hkm{3a>z6~%l~r}6G^4y+wOlpnV;vMR?ksNd0> z71q@3xH$aOXPmY*t6WdwiFWywM_&tY%HiQ{&s<~2R7$LLT!SYl>v8N2Z$jFBaAqaP zN922%I{66BNGK_lFE+U@WZ;?&L2Fno>;to#zl=}wW*Kx6%^%DCLex3XlHr@O#@cFH zis_81ZM44gnsN}!6MA7X=vwJ8Y;eSC3&Z6W#=Yx|A}r0Tso|Lj>E?~#G4;`!u~>P* z?!8ia(FR4?eYRq5R%S|R$|sfYr!+9IDO)E>EF_mEOvrO?$%@WkoJs2umzBjxo|tYv z_pG@tU?w8Ta=Uls+9Tnx_U=O?6sVIW@6B+x+c?o27C;7(IWCdG z%$EJPV+6JMNP1~A!uk{)Z5`vY&kt0#ymR}<4Zo%>bak=6mp-6N^bPDHN0s5{I;)gN zh`KPBPfCNK<4e6A0+WLpmPd0GZ}DNbp==P>0e#nKIQ6M%xkYk%Td}Ah&-mIb5TDZE zypx+_`8}#UFHenf`?%*S>~+i?7SnS?&{A}>dD+fno)J66o`{IjdkYt!JJJp8-v4aM zupUbxrdxG?tQ*igB z18b5ej#wd^BbTN%_7N!Ir-IlLZ*A*C;S{1b*LU?Rh#!EYSSr_6_pI{2+%h<{ku9DjsW)j%W|T6)1%Q8HtN@y;>m!muWzSby zHN&jSyOQ!Gqp0M#*$?Hy!_L!wJ6 z2x!&po3`yf*0x_}XhwsVsQlIYzbKc!wR~6|R8W$iIU~&rOjoSt?)Hpq9$EW2xI=x7 zoXQNvXx7V8?7XV);fmGtZ+o~GMVq@vcj)fzO{HO8pX|9270Ny)&UQ$?Bw1-oANIZy zXhApIn(144h*oRr>hr~8Z}A#f_Mksnz$O0GW}3X=0z-04K3*iGQPxOdrgqS0c(`m9 zQOl{{`|SbruT%TI`cAnI)9-<+1&F(t1Rc~wB{YQZxZ)kp_}H^cM>Zpg$DX!UI(A6)C9T zpnqTdMvMgF7=hZ=Dao9a)1dV_y4n}sQtIn&B*RcDNi(yL@6@EMGO6#|->do3N^L{% zR}_Xf)U*3z@1t+|;2-ug|8SP13Ow2MzgfMJ`xjV?PKj_|J~vuvKJY)M)+#~Zj~}XP zeT#(=o+?@dpTeW!AI>!g%(NhEV+F4Rp$S^dcOJEF?rI|*HY546E+(Zp1_S;#?2hlx zaw{I*f!uvvs=4}2$nZWzMI|lYOJI+7zYiW8+@t-u{cvB2D9D|T43HXYasaY)ltFwR z{+~~W`n19O0w)5b6n`cCboF5uQmBpWK{mMMC}#Y0)tV#H0v!O+^(|b?D1e`RH@TT< zCHzF^X~Za6_{m;kyUr6S^{?LyA zm~tG=S^|+RZ~_w&2<4RI(*=+=WeXVsdC$(O+>U=U&q2Ux|9+eQYd!*w^BcJUeDU1; zfjT*(Cj{cO1<}jih6W{}$A_XfGt9#HVBac?!7LG7o8)qi>r(cOuNmzgDpX>A6mbq_ z7G}SI#-k0u&SbCD+0pz#83?9m!Ry0=<2*70%_@~(FX?yyX;@P*XJ3i>(hVj z?v6`MWp*0R0-~56h8tUn(6$ni`b*|@V61g)UgvwM6ceDXGjhICNw#t)4#%Y$IhQKe z$*YGS!e}d*kG;=Mm!l1e;N+ebA7J-NpLUD^LN%jbQ3?3HFVkz?Irk|Mtg5%0FGYw{ zpLjqpU-Y?f7)1m*U7HGDU0oqsiuxJeUm5ys)v+Jon9Rt?Ie+$p2>t`vAK<%Ub>=oD zvY<#%@~oHCV(h^A4E$uXa2JXY@lK{4Q|EOFC15 z0O_Tn3ccy+^4F(zJW*vDK+IMZ(YLl2MvxnDtQ3@dV)1@VR2E*Gl6nD~E7b z5&Z_gA)Wrw0OIMj#BVcL7r^`Le*_y1Z;x?mWLf1T6ur>BM zj&0ilE9cl)l>}u|;>NR{R6E7n6Q%d>p@MmE1&fwM1+n~nK%uR=nKTr8BH+qEf&lXG z4LYC{bkVw=?8KI7TUx!9k$$*CGv!{*b1&VU%#A$uuiy3d6yz{!=e0TnR5y&5!S-6s z!&@K_SOY-+`$OcDPqSD*M|?h;W!l^9I0ID7oN@0P@S0WF3|qf6Biei|%26)kYgn0D zt5oU5*fZ-J8Hf-2j_aPKlwR$7=j(Dm{+58J#GpYLXeK^vh@k!p_G@$kV80wdpLjkE zp7^HC*^ig;_N2t*wp{MC@?&{v%g(0wDd@(2PfrKF@UdE7>eKSnVknQEWB+#&9O1=OSE+ zXm<;1h#_ED*9xc z80a8;>3#fTJ8$G$X+qo=lg}T*%)jlZbuov&w=bl%t$Rb6xx>eex(~K$KIu6qmfVW#r_P@bbP< z&u$*#$JLl0_ zxRYL>Hr+3Y%p{v$iqd`)l5n5S^^Lxw908)rK4cY2seZ6PMcqFI@N$>K&bwoWXB9;+ z*pta4u_atpVUYEOOrc)kg&n1!GU~#&f7p;xs(TQ?qo*YVl)?tdbN(}XzC|gzY(Qa< z!`IJ8>7Q3VwcebgM1H%QBk=u)J-ANyknlgOb6DQ171&D)5UIOkn-`Oj@>s?;aX4M0 zw%z~TE(x|B_d=buRxXf0M+NPfUH^#50~%}4Fc&pS^?&M z{&pQ*-Lqxn_1w6iS5aV>s;bCkfpr&UGeT8@%Y|zH?8PQu?;2nK zm5$FS*7$@%3Nwg#c?ckPo~@#4DjXO7^4t)6T#(V8QvtnlP!1ZyOJ!DqZsDgn0eRFg z=U+Dr&lyv9pMu0Wkh_(FpMe6V`8;yj6Q4Z`CCFI8+!~p&TSSyoJ#eC;&jasnzB;+0 z_H*QEMj{pCmwcc&p>X;Mv893K4qLVn1$8&2YN{}c9b9?xaPyBge#9E`K5U_9pITeU zpZncaM|}Ife0`hb%^>8 z=YE$bRJ)E#JG@+lrGt7=htwYBK6Q)y@TJ;7UhFOV++Phe)puFHCdGfDAOtq1aYmQ! z0bF2nv-_!5q6>0YL>dN_O_$flTHDn@Yp0Vg08ytFb9YfcFgF{r=u=2+z+f6sZKNbD zaW7;477agZ{zBp!w}J!3&p{E#9NPc~P+a&W5{p;ge|OYLI>#-Yihj_THhIFN@CQFQiQ z*Dk0`9s6Cob?{GqhrJC6IoX`%%h%!V$F)&W8d!CE@anBUf%xB$!_fH11nWHti&Q2dG~Z7#pY9TTJ+n&4e{d`~>#o-Oo+Y zkVrb2ab#G6nEH_Gbi0P6JE^fuL#sKoLOp{C&K&Pg$|wJL8-ni|7Wn(`Z{w9B;naKV zwkoQ!&67JVbjloD(f85Royf8gGz8=s9RpP+OBj{*14MH`o%=G4FEI)eipBcb65FjLDVCoJ#SThi_4r=MJ?N0$o?W zZ)aL-zaa~2uritS#jzkTUG=kZY_~k9aMI00H6ke zlnX?mB1+=7<=1H&aU)n9T5)bG+W7#vZrv|KpKDu!y)KbUhgwKYdX9L-H9iy^a~GW{ zHeH75o$gctlz8o`B-^dj4GlgWhTS-;XCBOE9t&c(V_deL*HYIXF2=G5XqwN(eIJQ~YmLzocn4LKwYqVLw>qg5r<4vaeypqCIq?!!Aed2aO7irRzvFCe@J z{c59ER(-Qa6f$FK$H~_LD8WWYZgAePzZ=3Z5#h2_(yNS;QcD*s~qxjM4cgZDf9Gcr~4ld{3|?%U)^w zM<3s~z`;&n3mWl=-|e$YAH^BX2AAj03s5POQXYtCoXqa{I%oXgf`1vs(HQ|PKRTmA z-7_x4zJf6L(63vFDEhDfzcH%->XxTZXn`=r$uidPVq#h&786y5r{b>v{Gl+MM>INm#vND}(=&3JdWgE>d zgs9hHTc4rbULV013FQ;EYUnb4Ldph7 zop3VAt9S{H={Tl(+2vY6j!=tTQN0#r)8t)+4Ggy8=x%?=6W-d{L4WDIiUE|@>1lW| zZcos<^o$^=VDZN4hKAUnCXyR~r6C)Nk)e!N61(l&V|;V8=dR_e|NZI?Qtygz7a|Z$ z21G=joS*L(XkdXkjKXksa#+iXV{un}mG1MK>xEI=Z%OIbLylIc2vb9)p05AFEA1J6 z`YokKZ2ws2@5cib6eJgK9|8qs94FPaH;2)DTT0#7Z#f7NOzo`(h!|LdB=|*@*}{U* zqy!I5f7(^M=N;-{eKY*9UAnMc-jebT-GT$LlT_BmgL{h&6EcHZ4Upg(nW;|bKS&RU z@$AF{P`S8F2csLMoKT{q2>C+W1i1n`=?#Nf`l4hwFiym^@*M2VkOCLfraLhrH&G7KE5H+!h3%@)avUST+4Kt1&>;*5JiX69luq#*4OviZ}L=is9;e@v@54>+=f+O zE{0&T@ls@r{8U6f{nKW%soPBKgq<;jPDR5{$c6wSROmT;5yW(WCBdRqh^n!7CRKs- zq*kE9v`=5TM_;#7IMh8UG1Z*nO8Uuua*s-p$eZAA{^!R`1&aO8mPAbJ-%+yPF972y zXJ)j9>ys+g7x%h_C%Q3U$(WZU;NuhXPU>l-X%Q_6)qa9qBjI@a|6`p7uoB=Ez>Z7; zItsxr_uNNbU6dJ{*Lr2O+n-AgReV!V8r1^u)Xh9-OJ0RZ%>yU|mjTd4uEY%zG77FL zo~(7c&@jU^#I|9X?w`=5;?)+$gzWZ(vsS@5lNQl0_2o0Wo`#CoLVmKl4C_oJTiNxi zvFsz~VC?)ap}ZYISf_bbYT@?@s=F#RR2&zj5Ub3KS+SWSC??l~t;F~`0qDZ)2_7&&@`c?s}0p+DK4iHQY_pm0;vg}QGBJQPJ0yV!j1V@)6<0SU-%r4t|CbdSS( z-A5(;Gf}tF`+id1!Xi6Yj`>#XIYY#f*$h~Fm$pN@XrFwCqv<%!Fvs#3818M^))+a* z5|P~PEI8_&F4H0f38JBcq~10@6u&j1dv0zQ`6(8<^*-?QiCtBX33W32EeIh)k zw)ASk#c|y``1eZRZJ4npX2zcsLnVZFdc-A_IjEhAi3~0P(bU`h^HxQ%gI?yo;Qaztk;gS^rk&o_(m(4xAq+<$jrSXqY< z6F-wH5T!;Pav^MZo4p?zfJBj&l-r(#rTq=)xUaH@6T!5|$h;Vxc(mV!V%DrgQ@N7^ z$xDwO5EJ*jBScqCj#YwERbt!wK86L#*DQJmWq^fZV=b^~5sULrQ1 zbZ0!gy7fAaF$c!lI-UJADWfuPd*KXaDDWf@G7f<+f-d>f2 zw0F12yh1s}h6nLpI~w{ptV`WeV$PpK?qE~{KKjX*I2j`T%T`_fr^`3vIW8{&mcmV; zAf*;#i*Fh?-_7aO6MC38_~^)Z?!M>smALyXyER@;^|uMxLZkiMl^2swEUURe0q&n_ zSBE~^M$+%Hq&O$`Y`+SkVc`VBuo#8hGHR|Z}lqYY^F>_#g32PR` z%(wkJtbrPiUdRRZ0R(2FwS;*qjqkV__vnty+FW`7Rb%(nd!NHl9`fb?kFmE5i>mG0 zz6Th(L#Y|MRJuDvN{~=MI;5n#b3j0(MY^RM=}svr5u{VPrE`XNae7|QeLeSiKHK(w zbL0cttaY%~as2mv|LqIPBsaBN9DXPQmhiy1g3%-|wB@L!hHBE0ISyCP!%-~rwOXZ0m2@3;PsgXcr zYu;^FcA*DbMFO2D&c74=W4L^k)<0Eh?xR_7A@HchtlARKoii4hE!jf6;ANGh%^}W| z{+D*t5<-e+R}~S9ctUKD=vPHt{V<{7S5g+>Sk8yw$4OfO5v$DMNk#6V67y>+xk*H11MOB}>@)`jp zGIjKl-S{G$xrpvoQ=OxfqLp-M4zFx;Y)q)Ct&~{H9$+)`i1bzBu}Z5Rb!2xleK&zt zw_o!-1mB5YElU&cNl{{unCxeYdrxkcxtkm#w2f!gwZ*%j`%1D8-~5Xf z&o^Ad9^zd>cS~_~bLaQme>}9iy?QVE zHF7)LG<#3PO`BaHis7|KYZ7yJilnx2zE6W|?Ct8|`8!vM8KEVN+i{6o9Ua#xHrpLy zps+k9Gn&62A6<;O>jhkGB!ci$;#z-cMyeG2uGRugDC#4aDHP-mQo^$kXY2>lFbB4) zY8TGApU-8|prmCY1hvvfQ+6^@pb}OOA|{?-up^zKkN78Tr<%MDt57*9u+OFlum0=$ z-DvSm!TCrmUCr&9tx=LsNjVI$bT=igBV3KjP~A;_y9^nQWXvA9Kt}9HUS9M$;6v^Z zI)#0|?EM|Y+7jt?ZV{1vQ(tQ8YSDhMElU3<`|)4n_qeAtZ(e3}h5o&P>;PkQ&_)^| z{oAC^y>uZ5=uURKW~FOKtn(-~RW z$D5X@ugbF({@#Iluj0d!wq~3*w%GjbR%(GAK%6`vl_|U%miwP)Y=8(dW-;t$FZs|_ zdcL;PWJStovNVx9OC&)Hg+_G4gsxT6GCyJh+~|0-@+@Vg)mV~-UP9WMPo_|v+TWtv zNSJ9p`2Bkfxc!E+XVINp>MZzIt*owwOdH82v&ufK@`9+q^@u%fUWEww{l?FM-_My& z<`(`R4a{hR;O&&oeJV(7LqwcQ(NA=&3)I1zH1Z+PlnvP@T_&KQQ|~i|gVWQ9J#imf ziii+t5Bn3k?QP1UP8o_zAPUOLACtDo7ExwytE<<+6LBjxO#S*(GUFm7y9gtSEZQpq(G|QMpq{$HwGL>HN-2J< z4N#L-%*5aT`5G8}J=)Fbdo8#Lh;635Z8rs(xsB`Peb#U>u7VmRz@w336zY1&gX;wm z@qAjo)L;yC^29a0Jx80Im{JTw;}!msl(ClJ%f0~2ZeB*k2i&t&meocFN514_kWU-U z?m-VhNf?EnQx)OfIA4$&ZYcX!{vht0osx|yoHj>t9* z!P%|)L9{)NtPMP4J_6PslAQdS(Ec6kUGV5U{6xj+5aGKT6FrV|Eamz=kD?7uv5a?Z0eD;r>u@ZE^0DOsgNLfRDqocYuzkQ>-_lSZ#LV4!ELrVH$&h*}?} z6nL&;U*Xs1$JtDDpH0zpmnbbWEE5rF8s_pgL?&;CBLZ)cJD2E(Z!`Ixcs0q5{AOL*Ic}~a+O@U4g4k?h^fuIs6%my_^)GL}02x4y4F?+n3Q;eC z$M4^rNhYGp>5_#>wAgpMP?4eTICXY22GDXV2eD9UMn?HdE?XwbIV<$2Syk=8=j}u3 zJbi+9=%FFKqD(PIuYr@mtdQHUcjlj>OU+CXiKEF+eqxub0VNXeO_rsk9~=~SL>U8(vSn3r=|J$I1Pq96rQC{RRevHXWW*p0(_78MO3J*pa%I3u z$1pRaO+-rEa*YLxK!pdkOf>OX4`1FNzD1#Al}(g2Q(>GZ76@h&R;i$_5cyxT@Ba@A z;Jkk`b7Z>d2~fis+t)85t=D7(AmS#>Tw z9eu>f!H@O9V|l)D=c?*R9JH#So0}W3b_XC?=Ugy;WtInea&|Hb2flGV{b zfp9-LsA>c{rE;G_V|I9W&o7Tmc--9K25m0M3=CgWUrjSQ0Box`Hazq1PN614RX`A$ z4DPX8T~V=hSe2*vf*-J7+4J&KBq!~avWBHV&1!~Xh4$=NJ!Ff@!-4P%PofraQeuKP zTklnPgl{ujl7LFGS+cZ|=Rp^0HxzI6_EuCuNq)lnklgM3=GNGJA+)VS3b!a-OMg%+ zTwgyLr#fSis+zsbnt7K`R-1Hfld`-&!|&+Lv|v}+CVpYu!_|7-tf4*IWijp(W70Ek z3RXo8ZSn~skLjIa=IFC32Lv+Dq{xdGCRC((CKVbpG`IYcADN~@mP+j14_oS zU*3Iv$F<4il%+ExyL*U{8x81UqOtkC^ORdar&`3}`J(U5(_gpL<7yIkmm+s7q7NlP zh86!QjpjcB)2bqa0Oi#V5GnrZ3aKE+wXZ$!l;cjh-H0Olchc95VHF(^e?* zIUAm$c(z5=$}h`fncer7F7}f=!^ovnEvXhbS>Nu@w2un*%Gn>E;6lE{%=8cSe>$D0 zc?}3-6!*dy5;B-BYxgf0TKNWMa7uqf5n5?XZkI5?uEM+Ci0Kz(^plwCX34 zPJH)-*jRSd$NFyq8NQ+R$QWOy#by`_24Zet`NPP16N_wNJT6_E#XMBXR;QH7!?d0Hx)+;1vM41L1Y|Yd{&U+o zrC7~UAriG7y>83-nX|`l*8tBXr_dwqMej|hXA#`$$I#)Tx9`0LQUjYbh0E2&r6mC* z*=W8jeg2i(p)1pD`Eq9Sj_VrQeI%KzZTss%@*yyuSl=kq{ZRmmF(O}kw>%_M`Q1Qo z3QNg&asEC|gW8V&8W`FyiMUU_`<2ww1W!CvdE3w&be!Sk~LyY(fM)wHu{|hT9$rBh7CV4uGGs@vSigLA{OtQJR z?m>s2hU7Hb^*q;ZFoKbjitC1yBJAD$3Y1rQuP%e|henW0PpL(HwColdZ6Pll80dq3 z+Q~&zkFy>jt*X{X-O~(Hb(dmximh7jVqB;7PR^q2*AEfr0v|v7iu>b1HJ3(hXr z_}`_wN2+6UucGjomeT892DvY}#`=Wv+znRTnWhc2BQ8yTvbg^|>$St^2ZSo>^E~03 z6)<|v+2dBE#s^>(AVsC$H0e;S_8YxBiHlt&q^q#xbs6`}M1i^qH2Ehd*qCPbixRX* zk(47LU1IO$=8cKUu!mTbKGo8eDB^lmW#TG>vDLRVr|FdC9rnI0*j2Ukfhd8`m%T-} zH!}0xLPCOC0pEeA_l+A5BCbHi(z^mOBKK1POIr7;(erq5?l37}bP zoqpG_NNwIgbxen$YV2FLQ;s)Cpa*gm%rp$u*W8CQEvOM^QyfvZTx7WHxMM7l4gyJ9 zIU$`sWHa-H=+{2}gj-$g2}TrdLjl`q0I_Qo#g;znT{cMP)z;kCZ&KfRcqo7g33;>l%Y1^F_p#NihFaLwjJKCpyycI z>92m`>2wqfUty4|^K3ECZ}Smijp>BlVj>e}?7_Z`>#0ZD4iW?ega~u57}nF?Onu}) z<`JAG0CjlC>Yc+b2!1?|p-ibb7SaTP%76;G;bYWM$@IGsgHGCJU3cs0z8`=o2Xne5 zFZtRbi%!y%+|7}u1VY}MG`dyzc6g6kb*Av4>)K}0a)=nnXd(1ON)?Iog~F3vWB6tXovAAsIY4c%3=UG?q>V-~K^%ukdck&?MFi+UrJP#&xJ*zpmV zo2M6&eAH&HTi_Fym>3MU7|G<>g&=+Q!9ACHW7+oHSo@Z?d5xDu!VZ|5HH)TgK0PD< zlkr)2ei?bfV6lF9QtkSh$jx={Ixnfd{Q}*omBXYHk8B#qBGV7JK1C^DQHp?aVkqO` z;H0Erz(oB&U;K4H62hvM;s3Hh4Z7c;not$MSz=z`7bJ;xs#q3xc#`8#(UF)t|jw+@1Ja$r#) z;tb50B3Uts2W$l9fLB5GGy2k!5v3nb8^SKs@iF}%#Q#FWDZjQ%Kfzi*tWRgN(@q98 zSk_>Nvb8T=N_i_ektV0vyH^A)RLCtYiwSebsi8!H(||H#WNPYX%92t^T>xBIl=R_{ zK3-cCBfDKL23Pr=vOBu=4>JrJzv~q_^C_YabSibI+;=O&2?OSRoBwl8{G*Nh72rn$ zb-CM3^H3rQuCm$s&#jEr_gjTBLa zY*|A57`FUbgpcifNz0I*e9W1_^nG`WyH;2^4jS$D zng$$imc%07dzv~rZy>*{cXs9QM-hzj>J_jQd0f!#4QXa{M(P&jpfR2T9Z8z(*oqOk zTdO2DHj)rM^|@j8z(Pj564h$ZlD z<4PX)zuXxNsFoeWt5RN2xEp%4;2>zLR>M7A=R21g7~wH}7DCA`^Ll?Y@aqd8r<7Yl zJkK7)V|aGa-N{}!fuHM3g9_gF7bFwgUSCb?*FwMZSe5J?)_7w5VgcP6*Jx3dhN9y9 z%^*;i=v6x#HBR&6R|>`MsjBkw$Z(&PwFWmLgWUo9uAH!lFIZ$+e z_<&Vgc-ZeP7_GKkJE!SFLf+-j2JDmv0hT~s-g<`PHGL{{U-}J`Ce%Vhr;=o*+aaqf zTTm|CrYk!!TiK_7S&L$^M@Hsj(P*fKwWA_Q&L0^G8T&68DS56xX|c{TT=MhVw_C}d zO7xVTAInP(Bky12$Spi>1R9jXkLX`LL{mrx%)U~cx`HzRnrzrnP+dB-dwr;u6 z7$1O54h28k!#l~yFlcn$tZQ6C;P*yGSWT!(Ch%3wu`##8o5EV;2u#bPgkA?p#XS7* zK8cY`psGK19bbWXP?h7&z~`Q-I=@<8({&R{2bV02L({zIe*(AEB7$?@X%TxD98L6;W(+g zONowR7UGRv!@_}V$WpZzjwG9J!a~$o>6D7k9Ou5s-d%T^KN}$d?6H z@(>X%PzH%s9)eu;^`MdYgeCV?&5_#l++Yk6lOxs&vAWD*u(!o|_X=1EET}a*wma$X+yD?%Y%g)Nt#E z$!&mvlurb0aj|W|baB-RAQ0?X3APv;p>1B_;v%mVqCk9uXypTxoS%R=D_Xh)(S{Y~ zB%UNzkip;C=({6<^c)Oahhih6mE6F#fwt*QD63mvOsd{oISprVa4Nf;Zmw;QhvbMY z|5gp(rV=Zk+DX$w!Vx?gEpjGIZp-xfojt?%v7!?^q*(mCy>!BD<+f%>+-`oZPzqvU z?nE<$hK?3FDT@5G_K9Xv?OU^TV&~Hc*|)OQ?B+L^El{_5u69B%oYOx#iZ0+ z&!9qpck7yk3yH^}v&qq7+AQc-!=+sZL4W6LZK*Wh+`hG-s`*>|U1Dn@CEqWSz0p@+ zoqxmMy~FX2=jjkktu)c=#M{m-V)$02q}mne9FAOfwe1GVM#-D93Q2S*@=R zUnbmf(h6BB!()572xOxO=7poCRHIQxJA{|cR_$i09OGK@nu&~(=;hxpd_UV60M-(E-7Y&svV zrprmncvB4 zf3`lC#P_e9n3H^^HzeFPj4tp@t4oDJojxJeZ2oP7Bi`NnC#Dgooyn&)F4ZM@fVw*r z&jIN&W1G97*wQNHNBkP!C!$_$QXCTQn<|o_5owo2ApFyQ+{s2y5G3ogTG;P{{ccvC z&baSY>Dis?@$~qKEroKxs=Ab}9Cqoh`j+-Fmz1k4!~rIP|7C5>4xY~J1anMUQr3W6 z><{?bzy$RW4mFZnk^lM3=J8tC-OF|!2sBg$IqvDQM)7X0XcRszY?&ayCrku0Zn>s> z=aklNX-36Dv+<+_&Xbn3uw#V(I_OkckbIiXSu7358DmpoXsE!1`FY_r1>T5%1a9); z9pVP)8FIonZy<#1z1}Vz;03;U+)RaJ1|PYJ)OX@2e}6W;$*R^RSX9p<+W$jv1OD)B zKHEeC?FEJ47!7P&A5;3izMfQJ3=dEs?>^LIT`}<5f&U>lvT|5XjM#hJe;Hl^yVVXH zCP~aJa?vY@Fs2eJG7HH~XY*m?_Rg!}14KQCIJI*c`u()e=rPgd(%tS|X>e_FBG-e> zk(tfHLXXCiEERVVHM8*n^J3o-`N&s~`Ynzx74Fn`g>QCg2q-BTk8~W`N}Br|L#PYr zU>^gOJh^Tm!3+6sE@mt!k@|aac17`Uac82A_thB)ie4(;o!;HHKSoy)Dku{4-#a;F z?zmHNz8>Y0lSh7)0$TG%tX{NFK|!(Xs~CBjZG%CVf8{ipV3M!_V2fR%lP++D{Xas zHo|JUH2_I)Z$X}#Gf^jX?)hPsj{)p%L!EN6J9p1I#lwCL)(*awS6BaJSMB!*KuoFY z_kA~eTCUfo_iJ^v)!a3k!?V#7s1KLVIE|=SPyO_Xp>amY+}qJwHx;OkX!|4$l-NJa z9EnX#F+Nvqym&jdt*Y&%ld|jygra(VpV63np@{sy&|{_DQr@T>U7^T?o{_>{WFz;j%qWv@YC;?4r_J*vc;S{|-#4g$k=1}<91)62?lo@t`a zI_w5byk0h+?UzscJdV#i9fsN`ep&nhk(IWaIP%x!w;4SDpy(3m)}Pr1pY#-79(A0( z1Lz+LQE1u*g?eaOqbYof6cm)}9V^o2HY2^nu41+eHQMdiEcMm*x ztId-X7rl7bv6_R9hQ3~XcX`3J$!t9w;mL{r-x}ZF{|>;vH}@eCar^}!Ji?$+L|jKw zuA+gc>gtM5&M2=q+OINut$(B)?(fD`xbMXn`rn4BOrhU=mU8tv0JhAI2W>YchN#V+ ziRXZngV>BOd95F{isDB1DLz5o(6C((XqSFC#rh*hhifRDwz&n6ckYwO+dLMz`p_kZ z&$^>R-iX_z=0rB_&qz_sPCKXMxFa?4ng9c#Ov}dF~Zls5MrmY9L*?H*E_Hz_nUm5vL-o;PLnYvB@z&eEW;^RXqqAaNQ3=i4<*T+@b! zoT-2Zxo-h8uGXCCThPTnpR7Yl09RmW$aAw07>@@kfwV_s$g@#pLCx3z8qOr`E=XG1 zgaXEkgG|f0CrgG2if9~K2SL790%Y>SRRqj4dgu;_LgjfG$LlpYnMLGy_FXJBo0gjN zN!uuu+Nf^2s2QsPNxDB6GvLrE04(2_FG;;;)TXPz5Muy!p))2uozYP^!-$-rI0h-Y zI!?%{{#<%o9Q zbNAtS|KE~sh)U}rhzTi9ZqW$Pa64yOH5t*qx_S1$PLTH>LBO|mfW~z2GK2aar=`cF z!ESMChEfj~%}G+bdQS7@Itlkvrwcy7!zSDfoZD4Xqw2p30xcfs^lZ8hWUSi+~7O;oN50C%>* zImO$$drrtSm0ns*>g;>=D$q4NHMedqp1oSmqPL%ybQAkUB7>HP8nD!^AF-cZ`4m6L z!rhKSetS8GyKB92i`whBKd~T()-Ya~U>x*#=Cp}5=8KkZnP%PCb$Y<**yM0(S+|sD z@UsU)+N8);3e&BDd~3WBs3A+V&3u-)@Ayh~Tnpr8k`9yMO{%SO9UTjJ(M0j-UGDqm z=^}R2&~ocuTMN&ae~7h4y#Q#$sP}~sx@a5*4T}4HVu^6EV8l!?DYh*9X;wn|OIv5t zJs_0)lJN=sc)z3MA%)k;T)k}^uqo?=e}5cm0#P0xDSxeV5wkC^{G1z=TUX;36PH?b zQntBdj%lk{}LUeAn zcZ{fUL50#1a@g^7k^z$7n(zBa0YDJ*9^72>d$*Ez!8QRkUBJ%UodBZ?xh5zTa1R0Sx?l2_tEc((;0@$^Dx(&==Cj#h8R;>)MY( z8qr3cpJF1R4?U@w?0dpuBQ`buq@h%|Rd(Z3e6nIC`|_pUl}%&cEK2`I`MpsrdUG_h zkrx;0dwPfnx{(d(ThHB>ju1C7kja}@7lN1uq7TwAgVFhr4P!ok!7&MBWMt9~6>a;a zv&Y{7;S+*PQrTm5hDr7XW=*}s^@0MDO3u6CXHDU**qaiQLr1Te<=oXHeD1i1(uC*w zw2Us>X4sx@eEDJxojFyXYkzUVs_d6tCUxuTU;nW4zd6rvnp?&eF>~>)ZA!=04xoEFZbiis!v@+jRd? zEP~D|U5RYsdCYxLpevmsN>+N*v!`^aV!3}dQ44^(|c&ics(L&F@!5A`R zbaPO#n9vh$HID{zph5}1v{eNqHv1!B%Y_J~r5hnp~iUHV~|LMnX$5_>f%2XtZ+eI8}LMh6< zlfZd=9H}TED0xCP;;0g0^cr5QvEdEE)2d!*qWtBmon=z=^HA9B=3SM?DWK!6N3!Xz zbBM!hG3TWoVo1pf4il0%P_!{)6p~n*`{p7xw3BfPl4i>?iOCFw7<8~Q@?cSlFS!DIO&d1@z0QjNrUZb7uU**W!c zmTqC*q6&w#?wH2K#}&w+{gkV_p8`us>A2^3XT@nmfux*Z&@xS(%lG{$PcQ%1;X?+E z=f%rxfq3cPKq6f8>V#bRBtC@}uP>9a>`i;&on<>bXV6UoEuCzi4S$^l;FEB=kSo9h(-;dT zD0h#o*aGplRagYz7@73BJKRo6Hy_aKoDo->tF&vyq{{A<3@Xo@o+hKWt#yQZy^=%W z)>0O6K1hqj4s0P}_z)2hk4E{L{k71e_y<^|B`lfNx$Ojdl%xOu*1AKl?kwUUBsv`w z^YzHI+iQ`uq@sjpq%F1HKKXOT{ysEc%c{y8VQANy1g8 z`c9q|0{ImV`A4dL#K>y}BGW$lek4yC#VS)JfixM1KD}j8&W8c@S$)gP@@0VK_!0-5 z>+}+ZkHjfN4C;{=Z*PyiA8nCvLOpZae@i{u7(p{i7yte#sGGf!chUJ)2>*&wo~bi7 zdXu)=2WT3~$Fx|{ao>Mau97KcZAJ2lB(bFq1iIcB)#A(q(6&sRrn!}VtBmrgeXPP2grpv|8q z-Ud~y;9?czAO;4;D|*)z1-dMUFMk*s{L^d6*?PZFTQ?JPQagb_&gjp;`Y$Q^k*w#c zF<@d=M-Pb{ED2!>7#6KR^Pml{m?NRy&}dC z5yA&D{`s_WBiV*>J>oi9V}JWnQ|GaQj_CDP81Z5X z-Z!D$tHNg0;wT>yPuUeqLmVk`pHPPi5rigXVWMh&m5ww;q0~+G$1g`_tN^g>y48oK zn(z0@8;nXzP?j9eZ0pa0->$5MUjjOw4~k9cqb2!^QgfTE!qK!l8TYC{)+$IS){xaQ zv)!h!Hq9Y6ffw^HJ?Z_2r}$Rwn_K>wNjW0EO0`y_YX`%oXX*8RX1P!QYCg_B+$N79f}K!BIX4ey z3M?TUPkmpw*0xl`*_=nWq@l0nS2|1sVG6SCZHD3YUCAO9pI;L3@*n^<=@_e-;8E<6u(w-o zZm|-EI7fLA`MyMzONC{sn=}(QWcAAPs>*g()6%lhA`KCYikk0B5)&C2ra>MP%tTKi zJnNu0qSi+Nu^~^f#p|Pm^i=|!^MQ$oH)L2J7S%)fuWjo0N@Gt1L-@ICjVhUa?e+*H z6Rzrpbt6n10Y#)^Ea{`@uR@OReiB|2W#otWL-a8VxR@WKm+mA1G6cu|4r_3)SQWxr zy%;S@$$jRifjs#Tdt)?F;8fcqGcC=OK~;60WTxXDE-kwOPX5Wlf-QZ{3xs%3Ah1B- zY{A3M8N@?^H}UP*iHF+Zd(L~?a^VTxgC&8N?7_jPviV>f6%|2ISEXGLnoM= zC6ylLKnH@l3I3oh`%-+aAgRO-ma-?| zBF|qm=?|39Tm@A(m$eSR?I0~0e;|UZs_O1>8LZdpw_v(jp`&e`HqW9Hj@+dQG6E9b zy^kU+x(Kn8iFVU|M(^U{?%1$$!6HI+lIj7=t*h10leAceLXNcd4%50E`v%1FO80%h zwbwE%wG`B`+>tf#TlRZ4K&hj@c*8fF|4~*h3d*DGvzr7z>pwCfA|$89Xy_ov>K;Lg zAQ#?E7*a@xYP4IIe<*>B&9(Er4jJ@h;wlP+i!()Y(x98?x%27ur%75#{^J!BxyT&X zfzL7P`^YuM`xZoZE=T%>lS3 zDNkG~Yu1AIm}BA5P>KvUw&{wV8-}tT)e37e2&?omrhn2Dpo2s@PSPd8HfdDf4fzV5 z`cEFdW1e9V^d=@I8opf-F(JS91kic(W~NZ*wqM>bx&{oA75Ei4X?kLVk3m+mYNd0R z-4+MV5CFAl+~WsuLFaBqRGq|NN!D)nN@;96cb6!zQ|YS5nL8`SuhPkM{09_;UDP-& zqlPVoyG}MBP}G@<_~mynh65XNu$D<-Z9wCxd0V+z4Pk%EmkhCbnHtrV= z5je-!g36tLfiQZ>;v67sal65_C>dKrM#5?EdzNbI0qHmUC&U#`)cb9LeTji=3QMmT> zFlvDri9aGqVu&jAxBt8DWW-_n9qn?QwQ91t%3HKp!)#Ze)ce97DwZ^HJ!=P z#MDvLjmSeE_tL{r58L{>+9>z1sS`x0Sp}}Apryy|^-&+PJ`X}PXzJsCJURa}=L~2E zYk{W?-~7D;FzN!gn1!k|IP(8<|NrNIjDU(25GnHi1SDGQkRLZbAUrDW?b$uR%cK^B zX+Jh2pcc^$c~nI%_?5GfNBHr}^>cMuPFj8?udjCC=SFptmLHNHWPglF8I>%!CVEAifHMMF+ z9alWqvk|k)iVd*mW`1TN|CPqt#B;YJO5EQ{&N75!4Pd&8lvlX zWm?|5%k%+scQHB&G^%)H<#${y`Sk-oFiP>+p$iAyytDkK$NLi8;QZ}05qhQsSmVX2 zldUXN!5$u$SL(a`H;TwSA)r^o=0obvS^x4V|F5gh69!n+cr5FLH1B1Nq!2KWR2clx z6JD^=FUaukN=FhI(sR&@2m6aZmU~V36v(A<)Ctzw@(fa=7i*NrEENL+aj~f^m z_y_>rIBGv^0=|+T<8!-589rndj+N?0K2% zJd?SlOnKU#4FH~xp9G>JJ3AB?R1so;7y}3w?E6sYabdIfy!UM*jn%nLSa>+K^WgIL zEF3(%D4{51M*tjW5)}>cu-w=*BM1)Yc14JRmW}`AJN=gLXzlA-T^E)5Thr~Nt#s%_ zwzRg6iyG*NJ7Z)FsKXnAyl2dM<4jozM~fyo!CyhbrOBX^`B zTAPqtIXx70s>`AG(aDw+n2B3g|29(}MK8RnaY;{6)%M&)k zz&njCwyn(%Fdu$oE!WOnOjvSbW@ZWtAL0Ys+}<*YLJr&% zm6Uju9rq+X07t#w^NrC|=Fx@I!F4)n3E=8!0_eW`2u2R<{huBaHp^#FD z9Kh*8;jBV~PLR}b5Zuhh#$Jz)hu5%>jWoh`aj5X>RrTN*CMG6uB&SQS?qlymffJOU zP;YtsD=mf-)WP@XFXy)o1`Rzm-i9P@l%;8rp=LpYNYDxVK7~@m;7St>2F>eV?Mz1< zw!05Fg$4=pGimad>M{cccoSsM1+{1lU}2_khJ56^&s0@!iXHNMoJ|}pofX=Q9mO%f zpy_U+$W#nh%&pA&ZaRK(aiLofWw7Y3Dm?uU^@a`?T ziH%LrKWChOdx%BkULYG_ei}`GBD15eq^KBgF`A)h@w#CC?b}a4T~Epv@2Q@dM#<{5 zSVmm$&sES(c0Eqz1wcz-l#m#eFRGbu7GRnq^IE)@7;5h&hI+hE%ll3g3u3)>;y(A<4fKmq{jPNEn>+etjLQVwH8zfgV{ zVk$xi<0y|;Z;mJ?eEUZ8#QSo+GB*ATr1HV~da*#Jb$PJz4Zt-Wz6nF1V1D|m3x#~l zA%sp5s=eYSR}L5Ik103MVg#f}WODMiGXhJkCFILuFF)@?h1@3muI@$`z4`lM&9nof z!P&J5fXu>x^f5~_Ym!dGOw&v=JUN|THx>Sp+Rg2v`=FqfZ;txAbsdkn2|U}q$-TOu zB)_VP`w6NHcTw_03K&%qNdYMU1SrT-wHKnlQN?S2!(E`oGB0YUOTZKQ^Lb<OmwIm)<@7;mpTfDGQ1iuFn(jY$z zz#u@Pll=1`juNPiWx9ZG?t}$UBfswj%xu*$K{7f`VBvWhxT>U!oknfj!>?uWzlY>U zRU2P^B6-J4=Vwx(E{9dVz>+gQ!xrq2)XF!>mr490iT}iD%l(B&f`y7?p;!0AYH|D~f z#^CEq2&np9ZZ81Roz#EDtb)$5BcgKM33vLjUVr}Jz&qx$9}@8Dvl@ii&bCgFnP3I) zm#7Y!92Vp$hhf{N%{=RV&h1}%-8{z3qg)(XUS27NltT~JBr<|uS&VM^IU=2l`PnTs zuDbg+P%nR#VnY6aYl8oo>e;Js?}!x-r9{@ymGkFDli8R+QZ2$Y_0C!4>3cLkM z61_-y!id~WSLwC>_yvN#m?AfYHbe@sKV7F!{F{p_D0VKNhd8-K1}pU81CnAD@mu-0 z3v_(yv0Mf$-@qEVhp?Z@?|Uy#HsMc|-7fLyiTwK}ZLQk2QmEqtb9xE#7Ma%=7&MFw zv1jm!AhD~vGL+C@H7Tp0clbT*ijGsCKB;RkCZjI-T##mFh|+yF#5}?#I@^>+=UZu0 z#44r|a#OFs&9zo>kDhIFEnyjKpGpu=JEPg79VNoFegJolxsA!?xQlsjH+>nN90|mbUA7?KhHp)8SiJmI=?wocfT-V3OM`>vX`{!4h!k(9OESs z?DcH}USZLt^-+nRJ{4YkSl~jFgR&|>)ZMzN=IYE!u2VVuN_fy|u-{o=E29Xa(wQX@ zr|CFcpM8+VT_Wb9+Z>;s&&7iX=R(=LBZIg6=P6C4p3U}l!=q1AW~l$|ZYka0t)z?i z5<27z!u}W*5BXwIpHo$ggNrp0VPu77izV^1BXnvon-x}7r2>W(!CHvRvx&wy9IW>? zF=OxBREUJK>gjTVwpRTHFhE7*{mLImu=@SUK3By$g3v*;Eu=h{6T-ibWMiL7!6xX! zVnXSWoNr1-+X?!5OlrNC3>GRI8sv$iSPX=JgeYM?Gm^GLPwMIERp^yz@4u>fAH--V z_f!`O0zAoTEP>5;%ShB$(LyLZBpyAjPjlTFK1_HuCenCUEHz}W1fhU(o5oVz!!6@u z?vn1zV#7bANaX|4OZY8rmG0wrr3Z~3oe#Kh-%yT_7x+>aU3F>K*$fcTZiv*}etOmJ z=y>#N$V+IAgd5GsF)(}Kcd5zZ$>zvUnTTOe)0QM0QfJn**ChT2dtRj}J+$CZ@cB-P zM(wo-MzF_d8uo!GQrmR90}JZMb}S3OU)dDn7ZRnlU%3A5qCdXB=<4;U;f%;ILdj1O zdm{_p*FO>1gtzZo>Pc5>4A7I4yXB&_@P*psPA`rb75O?b!f>0#yblbACcN5o)4-b6 z{)tiq%3Ru~p>&_$mxh|+LqIW;QkgMBQZC&6DkSPM46TlKTAPIX7l2{MYW;X!IJL{N zblMWpQTZDM zH|ojIO3MPU*Qj7j1^}#duAFuy@7{T^-38kufMb^fMPD)Ot&#hOF$;ct~qTb^NeN3=w| zLLs@rHMeJInveWhu2-bcGv|J|g|T>kjz?Q^qmlCL2#^qHJxJ-GZ))XZkG9aSSKpV0 zNS%XwUKI>J>6ev{%fjo(8&r!Bu4f-Qrm7`!vzyD$IRobWCF@!-s7UBNK#}nSy8L~# zj{?)J&zL|vEbpw17Zh<220{Zr)gLp?p#(>+bdX`9C<9v%RcG+#5AwWjVUTJj@(uW- z(io>;eqH!8{4^1XgPF4H4AgQikerUO9&ALmQW#Tmt$Qzu-&6y%#2-7+Db91QT63i~ zLE%bDw+`a;)ivajGo2dB;8V2F2Rmoc=wjYbMrFO7)oQ*Q(|dBm^nbr0@2?RoEDUJ< zB|d3$(sfj*gtE+2w_EPCNKB^Z#d)moHQu&&2+gZ zz>Ql_;W)qpEgR66{n*A#XWI#oCyFkgjF?1f@$?%M$lH(0WxWx`P1K;tO@DY15f-ODMb8UR3{916RFZ4u@%hO+4Mgd*wUF zLn{3U;b}5`{g>5QdfUGCZ1egwAJr<^Q&BKR#kqxbbl?iErKIHCG4q&pnJuM^-&?+n z!UP}?7)}(H;Er8*5c_m%Wu5!Ut!_nqTl5CJKC1iTUsjhS_%kfPpKtVSM2C17h>(mF zLzL(kN{DdIC9qR=8;KFxT;C`*^gaEeqg8FxFT{bKRfgYcPcQw(HvCJrJ+LKF?a~Su2IzJNU|c3PTD0KIv-jqyF}mVFCLx7&O{yFB0|iRD@%VJiAQB zY=GeSb`(+QLChE|$I5)Z``DO0J3pj4ZO+Yn{{$F)VuJtV*Yvu{l#O%eo?^hNZ>`Ah z_B!r`o&+Dh5t7_59MInO z`bt6H9k>?TnU5HI{NgV_9l{@~)FGSr#;+(Ftf2Wt=)7(i(a~{>wIS=+NP7Kx(9F0& z*c4m7)L=}djXavXmYZ~5@IJ@kesK0u`Y$yc9HNB@;}jaDjJkb{1Z6WN1RZ%xon8yg z*UOMyH~XCAPqJf(;3(mt!m@vs#(sw!5gxs^(Te;bB{P-V5|5A|KE!1{x8ROESzbY* z!`@A{IW@@-D5~nmIMB1s9Mq5mF-|IzDPOL`Ff{ zQ=qnsle!>X$gqfjjxeR;+}?furlt#O&^Whn*Gy_LhUt3De}vC`RNvi^O%TyvSOv2V z&j9^|tVQUwZRNg&D=*PmiN-z(0+FddbNEq}6E}{}GwR3td z7|&hv#nRnpd07mI&9LS+i0}+(ZhW`T=Te-dM;DQ2Ib^+W00ZLZ&m3DXY^MSwnDin` zNM9HCZfxy(=2ul$j|17@&VwJ;80G(*+1&dbrXn#L&p*59jjH#)lf1fX1ehSY|J==x zpad_Gok2knkU1j%M?s(}(AzDy!6L2F3ma&UNMvAJi~V*s?YrdIbUMW|ncM7MLK8b2 zR6b0p#*)Dmqn`2nGb%0-+&D`3dd|6|<$XJf)-1~CcClIs!hClMD>@VndX4Nzf(`{M zUetbngkVMe6DJ;V<^X$SXjH(<2eO@LN?s`Spgh)A{p2 z=0u`rah-&K#N1_%x2(cG=@B{uVaf$uUwCVQuSg)v$H#X@S-S6!ojqfbOe zq=5MjTPHFQZCVeIMXsG(7G!L9l#0hWfF4g1G`10quC!TCgkQ{{=`Jknbg;IDI&I{; z@U>jnZhk=5JIu2qa7TIUVL70(p9|W?32eeWa9@bp^;s7R?_9-Luh7h}C0JJn8ug-h z7j0~K=TQ*tsl(0yu}~GwcW-IO@TYD5N$h*CBCXDYcx`=4nKHiM*Sox}>*Cep5QrSd zg&ysrOUlNS!oJmSY#kXrlTXKn@%#?-`3;@|+!tORc?vl06&gp4TlP>opT9GA+WtYZ zFm!0xk5OwS^09lvbibt2$)?4~9*h?%aDBclOXcOtVf?5~5j})-a=#nc8R)(57Y5R% z{->$?w_O;M%%Ay5UiGaQsB=GdAJ~5r2{0kqWI>nD>1H5itDmh;s{RnunG>erT96Qg zj`9$+x95tp31YrMl;D4G_Pw-~AGuJ7XSxcBp+QfBmPN!C-WSBx0EZO!Z|dl2o(t6V z)+u&B?(Cn}#P+-XPf0YRb>0`bFoGvZM z{oJZFqqzi)g3=!P^vM&;W7@~?P63qnf|Yp2uj@2JTx@OAeVuNl7JWH4d@rW>RV9u& zPh!j0$o;>jqV4!zwGRJqn>C0^bZGkYM(AwGn@63R&s|Q}s!nLTlKc<^7(^8gf1509 zz4twjzR0t`3upsS`@2$)=}~!>ryyht=Ds*?>YRpOhr+XeBtR5X`aYMQu_Wi`b}L8C zmP6^7k+i6ZNNhd_Bxcg662wRZ$B50)e33;AA$pU}*!x5bOev`Y4P3?TKNLgrI&0%0 z+MANF3kKqng&}M!tUTZ6q@BE61T{XtW+w>g?%7#k&GS2dQe4_9S10QYXO}0ihbCS1 z78@5j^A&nAR(guvHL+9m(qj03_1rSO7epaBqA4SLHQc&w#BkV3@v;2hmcajX{Mr7X z2#_R->iL_0o+5kt2zG*5ct2p7^(blS@L$^0=fS_dSt<U;fWe;w@| za_MV2LA77TCi0mia*KHk;noAszr5nM(Ha1L7*GOMN}IgWBQn<1K_^UP!yG|kduRKE zO!UA1c%(LJ{?nq**9txRr@TiOn4c0hzhI;(6|CkpicTDAA1`Q#85|7A>dxi0)LWIv zMV%al3cEYxCv$MCaZ9Q%jIEWtcQ3@0jZM~O)x!zRh)iV-K2zy)YBLixUf{~bJOCj|UzVkx(1TPCG`>%Dhnfgn=U zGo$sajR==3?KwMAI|IU5T=s5snUQbU2GXa!z7m>yPvOa!?Q&;rBhVxcHU!L}hg?bdKGV$^n(;>qQ}R+@J_OGTgu#3V2N!owV4i z{oe=mpRa$1s2>o=vutGa&u2?+18@M7MP1lr(dS$+!M}7;|M-Y*F!Co5rBiJX5%l5c zh{Q()M6Bc4XxI}fTNQXXg@DUK)SvH8RZc2rsn1+?2DUSedb+!dIs!x|78df-U%Ql7 zr$em<`i9h)`}&Gbj*MLH+XLy=GAj%W4aX2`tmt~7g8LD4J)OLW&&khD`V@~I9TgQ9 z%Lu%OHL-k{;;G93R0x1^rS9(?wV2ttiDLEgjwIKSZ<r;{N&}+SL8;A(3k<@x zvgGRXS=*44TqheSS2W=?Elf=X?-v56ZU7%}@~+iP22zOn*v)*^G%+FV*<+%yj6~3P0q#e`m<}$>#8F z^qLrx&GPT*XS=~aJ2mX=%4Y#V(az(|H@P^uLI-k+im}qtvg73UYeM(RBL`y52_pP8 zX*j?1g2%dfScHJWPWV4AF_aQG#^JbHuCfn5N}R_0>gHT%*Lp8MfyFLhcQ8+=Z>?pS z{OtJ)RUjPTvtf!D{dmC}V;^_TFFQc}P^QyZL^{cW;FYIvP0w3po368Mema3qBUp04 z&0REAu8(1jv55gaO3~K3DRV!{UQ+(%uWvLL0+^5#QT!|@E_QL*0Su(ku2k0ReT<_=q@3LxrSTOj*}<6Cw_J!I(m>S`R{)3tc>_V!Q#-F<3twCv3ZBq7LU z=Swds;HM+O&mk-MM~5dzC7w883nvIb#gmk;CakF7zW}q8aLzSpJ9V|iX8J$ffU^_YX5oxP~BKwE13 z`A(&IsWvXl9&%ZCKz`T9~J z=npTCK4)(6fFAJ)aqfBB5hXT=K4JXr#y-`H=SG;*n(^^kV$@MtKY_!FdqJVDl`ST~ zYt)pij~Z?&cAl44BQE)&)%~Qq^4fT`EJMgGJ$fgYVL&<7$^R2>?~2m)VZuj7@Z1Nd z3Jqgj)6c`>@3S%_V`e9!v=5(nh%RtW@;(W-#<6diczc+fTl)?F)F;;Xk%2z-YlbSm zmworb-r~o9!a!#vT8Fh?ih#6cUe4>`$lV&b;9lzX3Zarorr8@SwFzk+arf_F(B$1^ z`oF>5|Mn|q_ zL@-v@^i}rul65J3@qKN*3Yah{*$=}%s$MvIy^>&;X(0K9)-SZn%LZJoDKTyszwj14 zGMK>~IJ~JkUt=Gi1ie?7IuQ@zV&Q(FN+SK8E4!a6CHWJb0bq}C_F9pgH2RYi47B`q z2Jl8g9>vFal=`I0F@vBoEiJwjkA~Mef7cT&-AcWD5|3gYdjNm^bt-8$Ai63*&-Jro zz^y^r7)Z`*gfj?mt(TJSq*tD^mp5oxT~YCZck6*LR8`gOW;8=;`DZZ7OmA9QWX!dd z21|>Sq}VSRV&xY>+^-HW&o2kk~le#t!SG$7sb)U#4kQ4+=|`W zJT^+eK*G*Pe4(-R+xAXLF6OY+LdbsUx)2}CVJ8<}aZwySgs1QOQ$~6`x^!;bYm^(% zy(b>Rvd2XjSoIrJXs@-vsF3zpZV+GvErIq0_pzYL^{@3eXmXytvGbpMeTgHuT{XF; zVjorJe^aCW6j0oY=jZQruzjF7S8GdRa(OX({IrNBNMKzP`VMf5OI{BdYNFd)iM+Jm zlyANR_~I+x7jM72E+lhX3iqyL;8Txlk|$!YY1doVCqGARxGY(MZ;^oodtrXnD_civ zMVcJMd%#_1zx^KmO^Ac%fM+oxv0Ly8J&cM`zM@ArriQ3Ew@?HBks;VA*r~s7`F%hj zIvyE}zhcvfl;v&Ipxln1@nf9L*Y-O<2ib|cy8Z!mTiF1Q0q`O`(=n664I-tSn1ze9ryw|4{V}DRYc4H8FT`V@!Ss};ba_}j4%f(6U z0vPtspFeZ1p3sAGO(Fcu-*aOzkwqRUk>Y{ATHuWL{yGAB{Rt?Y?WWrB#QI%?TkH{J z)&U%QAAI9BWAgo_SpIh#=EU$qX9H3)Dn<&jTjI@eAt^#OXkYu=mMp@q0|NEqyzz@tD?upwEHh3bW|7y;Vr|& zU#NPYrwMvWK$i-3kbCU8&MsOBnnL)JY!@5y__{1cSjKpJ1CZX}^?_e2JcNpEZ%aCs z*?)eaT?OYa9nx>wD%xF{H5g>NYXlVEXHyxzStcpRjwjBOnCFkG6rlC`I&wf%1lB*6 ze^5f#%73zMKrQmH{25vNNlB)x+n?AT*FoPJHlS(AQ9%IH5ayJSKD;p5c_{E2M512pA9r)iu0$ijn2=G(N6 zmEY_)2?_;5rvd-sU2CiYE5m}za@q?b7s9u`?R^heb*~=%^{R8!l#xAw|BayMUDNYp z+S|qjPScn6-I?SzzznLZY|>indpTLzkp+WD+Vg`^ATWGcPdVpmwOW4{hnNwgt&g+d zHW=fL&uPNim7WM+Kk@ikBU2>)hd7IBleMS&zh``x{hn@w><-yb?fLFKB9_%_vX32F z_Y<=NY_IvS&FUPwuP@&om@wIN^UJ3SJ(Owx=dc9Ysx1(?&_y`s6J$kk2w*3CVYhCQ ziY^wrWNI* z_lu$vCEsbl@3gIG-*0j3$tVUIY<{!hySh4^seXL6P*x3DK1~#``WDSmi;vtRUEvuf z3mR7p&DCvnS2knJJOEiT&HJ)3#S>fO)OvQGDl*T|*mt-26IujvB2O|?uue8d4-k*% z3V#mMegua13n6AntMf>acZ{ZYAwhg@<6hG(CdIA?H+5#Uu(yj-MVR9SQ#^&5{zB61LrH!EnUSc*0LcarE95l}yn-OBWkI-U( z`J1fb0VF4ih&c;8JN0s4ku?nweh46&9G7xf9e9@_dQXeW2OX3nY733NjWy(%9+=)N!pEbL$H8B^9{rS1&i0ME#B2M^pHx_+=c+cTTM1 zU_;vtlf#Qo@D4G@LggJ!Ya(XIM^(etm#M?t*`D}sip&wC%?cSiU*t$Eo;5ZTH^tVk zc2$HdXCjBu^foO=28}Sy4@E>sAB9)f${UAEUY$gL&zr`Y7UZlfBo4pc@a$w zKgvwlT(Y3FJ;-a;WwP1x{>}N9l|tZePnd}U(LtR_$CM>NrFnE2U1&zI$U7sJ1_B14 zchqUUOY%fIG&!8_MVte{)l}WVE#A2{-KP{gIl8pw6d#8LFXN+o@p#ZJN!#cG48Mim zVa!C%V#)`vey`Ym5{PCr$UU;o%EH7(i_&s1-y*i#Wj9+PLdV(Bx4MQ=$x*(M45zzT z8Mm)OXEw&^@Hi_{6$`bR4>WAn{o!VC@m9#9J~0i5nK=E*RnRZW z_YY{9QHl!($otMUXYX#i0z2E^CL|_nW_d!_JGU5m+Mn zYcWlXJhYM@yOVbNu$F8I{1|Y!4*rQ9e@K;)lni+qDq{S3C^4%~p%@2G>IM)NILiGG zc#L|4%Z#w(jtn$x0CX^x*OR41d3mZtW#lMhFPXBF2{JM_-q0;dFxO#q5W$}UWo#kU z+oh4roF$Qg?2%_Ul$VgJRIb?*$0dF);qXnV%GnhLO@gCVAelj~1bQrp$a+AFg9{R5 zr^Z;AY$NNDSC{3bGxxB!{?KE2+U#4ZX1HmSNu%qL_nc~K zX%*$mrma4&i|okdG?r&FPx%~Iv`iqZsMlLRKsW<2@UA^dr_b7V)k8p#c~d`fY6x{0 z1YJj4gJ2-nu)v&yZd~u-6=N)u;Y6PYuvl5q!YS&EBpPo3|N7DBc16I=>wPZw%j5W` z*P|H|nf@`&52@Xw2SThA#79>idnwonteUJ7hl-(O6qM6$klyR7^e=mRETtJSM==>N z_S`7mWzx;}?nB>fXG=1~jlD}Wz705M<#)*{n>Zdi+~}=cb4+J_WluvcZqHt>9=Fyd zzlr5@nQa~Nub*sc(2c04@e~kZwW}cb(^vu?rxs@ay|^govbm`1^u-7FmtHa+fDZm+ zBS~~WivL>~+$IG9&LOGH0rt=~mo!X@R3G!YUC-7 zE;-4120Jk}H#)RVgzIcy@n=X3_0JEkB5&6)j-fHLv=*0%+fSbG@p(^#lPJxf)&$TS z`uDc@{SNlWlpMc(;efo3jno1hnciUefaz(AXgt4^v$Nz}v`bvw^Zd`I3s0xZdBUzj zs*(B56SX0o^FS-gRhPb9MRO^_aQOfM6GlQSo}+$@jvk`B1(Ct4rv_5W*&Cc^c&n(L z1c5TJy9=h_w=YhY>p#4i;qx>)5lfYU0t4dD&Pcxgo`4!}K&|wBhAv3p8oTudI+TJ`gEeV|j@sCp#CxnGmstgnsKuFzGT?-hVaMg+w@;j-(k$OR!_=9sRKuEE`{G zWwJ1dJPNru3KW!2OM+JMxO^s+9(EX3xOR?R(4DK@bsBLJ0y?sWC)d5UQG!%!Z-ipcw0o<&lvs?>`}Gfs*FC_vE7-$PA1n-buj&-mslA z+|Upxke-rc%Q$NA+E%(HjDAL}$79vq{`Mg6K-LGq_{HiIfaP(r`uwlkVXUx$^qcKH zk$iIoi8XTIV2z|g72XMC3wbJ(s~{XKIV+4u&)3*k;2HW6GG>$|1Yp1G8YMw0^}A+YCrO@E8l0D*m^h`C`&6+YEBBmcb?QJ8iC9EAM5=MTmaPfSAMyD zxqlAE42}Nn2;l zU8wufSq!zoes@PbW0nE1x7cpb9B}sv);sR+gaSf}=e?c;_qMorV4Wpi4VgI`PVWVc z4&Jw=*tOV{GFFwtGy5mB4~2S^x6jQ#aGn2K6G12+P%T`Q8Ajl#ui+uVd&CUUW0$(1 zgecU`Fkz*<#OE9k^PC6}rh6^w!Pd~HoWJh-z{eWwK>+KTN+(tr5m01E5cZ<)I$)mxBHlx{tXJ3@5vMGW$o;Kuagv(#H2dy~psT+|scO!f8{1 zE;CF7Gy@mZh(vK6C~;(%B(&#Klc=u?PfuymV90 zl6;n6MH2YF+5W0xt4AeVU?L0om26^tK z!{d?gglKWpDo*8b#uUqO-^;7-8mTm!>xBOICqiDid<_kGB>fZ~LAC?B>8Xjiz_F2? ze&Jazz`a4r*~fUg6OURY`|dX9O$%<_4SVE6r}SsT-tys{0wW_5MOM@(A6`KNE&}1( zAa!a#tX9qY714gemM8yFR0Aiy@B?HB zLLM~{4Pz$^Ii)T(PlbqY~l$%BWc!(7H{N`!$>@So|F@n98gVyZ`q z$F29I$egaiYnvmU;X^`H4FFU&P)!X=PL=b{@D_Q<$Md;tIFImDR#vWpSX34kbhBl) zTMC_Ka4vmfdkX6F#G8HgUve-%c_RMH*sS=|y79#2pGr~cFsbB(8iszbVSe`?+!%*=1d2x#B)W*%O)fqr>4Ee}}%#2N5-|5s}Q;d^)usdZ*{ zG3fv#yXaA_N)uKV$p8|Y%Z@=uzX}xvY2TL)B!gR|6`DsVmqOlG&hZ4a(WHDqFq@kgl6ShtD%8u`)OZyF_Dvwd{kG?*|KX@=!yowVtRz5u|AxuY) z{(QNsq{Uj_R!d8ZZ~Chjykb?p-+(-EK-ka4yucdduI%Ilpk#VeO5C2&T8$nxOW;8a zFMRN8$7!$AW}l^0R5Ef51phJWs3DwRG`04E@;mqNN!t`o%xq zm;ZG`A2ym%I6zs9!ZVCQqS_`JtgwV=_oi3KYb>dk8{lMaZ%$dWWphmI7Mlpi%rXuH zl>qpM-)paMNKfNyTgpHmAdn^TG2oQWFW%R#-MJY3QzHs(5Sf=l#b|?T$#5OG)OoMY zOgG*$>c7hHxv4yCPIv``(-+Bd_yN8bdt1a}3~m56j_4d7kGE2v=txEzyEWj6OmVPO zFN?dK&vJBfbaALMu#xWS1N?0~&UB#D|3b?fhR87|%X!IuXc?~M5+sm=Y3^pQ?Nptt zinnJEx#d$o0RL~C0)LW-l|gh#W+SMk^i}};JmrE0gg3cYa^Gv;Iz)dExf1wwDj6$kF~8_!+FrH+h?i{i$M199(_ z3)=aZD{>*%&$v*XoDY(fUtT7~FZuS?d=UJ2jzpt+d?Ud3wK8HFig*21O^} z@oH!)W)Y0~0;6mDFzn9*C>?GK$u)dfw;=+JBrR4@o0XDZ;ZiyEgOnXjbNsV4%1_3u z*lwE&IiQUmyZcy%-p8b4~Y=9y2*Rf5pXqQb%E*WUX0`1ni9 z#`l^zNfBqz8ty)#Yww3fZH|8k{(;ONBzfbe3S*H#Ks z7`Z@&tG>Dlj<3HCrKxcX{Vt(A(gLJ(70_kHa2#g0L*zUNO?GBEgajKq9HXsTz7AS|a zHYqO@*^O|J4MJb7=28oahn^?9pNu<)ZN+@VTmm|D3(b#GJ8}uwU(okYaAG<9>7W;C z-p$C5%wF}@le<3|z*VAFJBfMyE#2XQMiUrA$D-VhnZmL&T8&qrB%CiKn!QidbmP3E1gu_}w+(0T zE0~y>e1W^;5xC%LCKqG}>OY&laXb!cej}A3Hq%dsds;>~DO6mgv|w2n16#qP_A>U@ zsdMg=+(J*;h4!(ux&3Sx3xNtI7_3E4IZb;m-TqlaY^NM17{|VJ0`jS!c}=ZeQ!k;d zXfd61=(W2&$-Xa*z3a^u76{agCjqo7o<`Gu!}0%%;#`Y`8w8s#)Bhl4c$)oAWHP{7 z!a*Ls%tsNr{hIDngmhJl;7{lX{yM1lLB&49o6Llsgfiy2dA{EuWwKOl)?jW?W*)X= zWj$`(Ou@Cd-lW>|9rJU7{kFNE2 z-_jquOdOL4VzjY1m@oHOBFy>R`QH1h?Vg$(!W&n=d(0^g| zIU$5Oo{+Hi{^h&<{r$4!tU}InPUE4}RFpD42M5Ip_b2_;A@{W~i(5Bm=dH_n@_>Z@ zs$2foS^VEDDEJMkvx6L+7h!X==b_%jxx6XHIzE@ zb@P2&`AUoUj^(lA_5-VMOY_y<+YwnoheR+!$-%{K()KSQz)XtKSt>&fyvh`hT7Uz-Nqh4B1gD20RkAtmMZjTG zA{w?zjjLdcKb{G-Ff>HX?fYP z+Z>621-(!rieai2Av#w0U)fi-hYpI3vd~F(7_)@Hkn;PBP+6^CeYW^OtD=B7}qbcD2r& zP*T3db(|c)ZOXa^@IAMu!}JFv(RhjW%;xW((ZRB84%erTxiODTw^yHF;XzN$dVO{9 zkS`LH8C|&k3>+W(U9(6{wJ5I~nCMH=EUEMfcAdCi{ve5Y5z-1CdJ62K{XJ3bNGK^l zotMT9EZtE}PJ4~ggvh+RJF?CnpXw5Sl#$hvykc6{I25v{R2Qu*M|Ofync**EXp4iL&{By;+gh#hA;1cRlOPQ;0 z@H78|x*wSmKii|(sblz6;651`4?&I09D4CkX5#F4iL>p(Fivofa`JQr7I}yV^ zFBJD>BnOc|%+!skc*b4wG8@>bM2Ou6>yK~w+`IM5u!k=dV{tyfiEdlxT04cl%`+?OqL?o>{{I8WnBtMB$n|JzLk znp#wV8;?Z&0j6g`g=G05r|3f6ANLA7qZgqN6b{<=EJ@`$bFlzijGGmMMQV42RsFRt zy<)kK>HVJD*lo!7Ahlxno^0~`6*j(3G`40h0iM&!PyIKT1NnHG!1eUxX;dLY9@ zcxHd_DS~*gEdr^Oljh3+vQ(fS>Jp$8`mD|2ClcP7%xe&>tuJZ$g6Zu(gKiva5;hyL zHTU_(pfsSPZY;i;c(QzM4TtcGlSj~QO!E^UFjk>P!z~maCT{u z66U<6T|vtzZ6)IYAHhH~Gzl%`*^-#6C$r}uvFo=C&Wwd+>$0fvVu#P7c>SeWxD0NQ zPCve+CDbf?dd_`*(Xi1AWUIQ^;1mdk@S|(;Xf%uuW17AvMRfUjK-$6jdYfown3z7s zdm6YG)D%)#((g5|S3UoUJN&Qn8-lz7S=Q&~NKK#qj0q?72cTd%<7}zih0GZn%oo@7 zm47ILSfL*_2hvLc3!Y$E!d$j+64nw;wsjpYdH2-Xp_M-?U zYXh9y_vY10zUq6FAA^W+Tqvs+-*6{|iQzBxy^W+`Sl>}C4n~YXcoW`Kz9W{GaBlcm zU(ZV4oM0xE3rqD*D3{Q?rX|-&2pI6aJi=(r$WaQVaFwo-$~?4tHJ)T{VKaIniuBIt zjS?89o^CQej=3@J7+Af{sZ{P%T;!sTPb=s+@ubS)f$3Re(co&Ft1-|QJ;y-%7@HQ@ zG2LBNUF9N2bTZS_@h*Iix^b|Sa{fLoEihX3+TE+W?fNn|Kle|AxCHWDt8?+)=R@+PzZOyCxTvW~8Ka4hdKi#J2w=}YFwzkza@wWC zRW~d<YmOpz`DxH@xHty9h06aXKt} zsxC6=cazTZLc%0B&+52anwb9hESR|WE0t7B#|<)_CdRNIiM8v2Ve5w(# z-9Tf5HN#zJyNoKfGL@Rz&WBoV{Ib?qZiKt1DVj#;Wfkw7OXX7WRM~b%7Sp%zvxm`H zuCOY!tnDB%Bju0jbAVG3@nS(<-VQGv7HMqfJ#>uueCu5aMNk<#!pk*9Pbs@KovPiGU^#iMH`7hc@vK>XAU{8Xw;OkcvIpAcIdbep_ z+V$$l%??6)yxl`9Q@L##tF|*C9+oAB-}Dwdtpy{F?f+$BV%fMHafXZ2q!ORKVhhcP zz>a`FEuP!t5@uK5b0IE}lX(*_;H3TTwba-E;Uk9E_&_zy8~4-p0Q)n+4?PKff;^Kv zlekgNKO+oJpKcG(>~f-P2Aoj{^QZbkuZL~uY`rj4LX8Q|(OPH?&@SB@Xo+pm9AfTL zag5o*4O4D4)%e8D?OGS@&UXph^%(xxX|?KwucwolnKaR$cHskis=`b@u)y~?{A0F}^S zz3@CVd9j7>Ni_5km=3Q|wCDWH=)(HD*|-$VZ-CWHABv4KEHZa{4ecS$dGh=?`Bu0h#7(hOyUkFXjjzW4BD~RBq*{!;fdaVc!&&?Nk{(Phwg62sorhM7n+Cm2(Nen{7$TzSR6W!pQF5yRR39jzNew=6lrfq2WcZ4UE48 z4^+a~^*BBpJJ#I*XH9@W5~Wv!+*tK3$fafg+olwKCjKGL3?t&K&i%gs%SUJ+hbqyK zy`V>BAoir8LidKl=H z3{&s*fpeYuNrkmh*sDnyuZ^=!WgD>dYQXL2`B6{0YV2o$H@3hPyrN|_*#_k3IJfJ- zMAhEpN3t8Zia_V=<{K>VE}I+bS@Zp;nj>B9%}W7tv-VIcmvI>+{%BCNXh}meUwVx*>LolkL1M0+IDjE7#nWd=f#*soyy>O zzVD>dxINXcg@_MyhfraBuU}X$siLg7xf~Ixu|9g-ObT;}T$xoaP{3FqVk*LY!v<^p z-R!s7-3OqUr~YOxOT*U_Y7RsDvz21B!8xar%vd(8ls2=!|3BO+9a~oBdC~jU>EGJ)&ESpuY71dmMCIvS9q2z)Sa-$|-;Wk>H6eNg%Z^*xp9` zlG;|M{G!W%I;yz|AX~WsP{tb=!RQ&_H0;68IE$)|{rEy1yTC9Vwdy zIH^TZg@4iJlu4a6jA^F}hmJ$;SKhi@TT6Jp*bm(C}_rHYF;}5r9L0ABmZbrvt zYn|Jrbj3&Gw&G}u{;ghIj^JE_@a?S-HTi9yJ^DNP-x+roOGP2n`|mC~@g!*dzkV|A z!-`g1IKFsl<3;c1i{gFx>+shS-s1hBK#Tg&43Ynlf7|uj%_DaGp*T!)N3_^`qAmj7 zh^?ziQ%I#~*Ua-#Je+Kkl~w-FlgN?FOh`xD6A<@R2G7SOwB;91bV>pT(KOkC^hWCH zb)gNsIPmvY^^@@Gsk`g+vp2D)f>VPPJr&WAsw<@H@N=yZq3l0mmF98xiTDSt%E3}h zP9{`;EofpNl=o6}eLnw?e!V1+BD5$XMB`GpKp> zcp>@puB<#|KyOeO-w`gwbIku zn`%xaRac3ss|Ee?q*D!9RM6^oi}d7F_^Vyix}-j(oV`JS1S=X>%8s%_{e6LNX*dep zK=PD_ufTJNZT9dLP{l!4I|3|@+#-iBf$t z+Gey79V8gLQ`L}MI@4!&(i*6H|sKPYN3^) zFd$q$@;I?Rks$4vtHtrDXzz%D8vq~bGB6NC^w&wcf6!?EQ_ezz0cwyiFpiqg|2IKs z{HOYk0OT+~^1I5&u&~joZp*ah-`yrwP_{)v4Q1_OQdS+F9wAZ@GHZU`nJIi2P+0$KoWp{O z?~WFO+WJFLW24Nu>TeHh`;K;sg!J^6Q*OnQ`+%KBvHBe~--EzesS6PNEdTOrxL@|C zBqz78d&Uv6j5;v%BQC=_&C+vovH4w(%;P9k;>>Oj8aHuPn-=Tf*B_zxGxK9m%B^yg zmoSx76j$=~poHrfWK-UmnP<;AWzJf+)bZE#06pSssl&U1`Ld-}5~05W`=NLb0&WcT zb7|Dq^laRwY{#_U7wt`}Q1j)f?`FS#<>Ia`k=1STa<8+M{N-gUAAM!eBaaq<$M75r z11a$9xQffxR&1tI2RCF#>1cM2e;W+?=zTj421Y{0Bgk0Cqf%Z`U;GHTKGI zm49-OmlqJwWjPvv<{|LjbeV0JShQ6)^wuC)HcW|blb?@&{MC{-+1?mpc*T9b%Hm`9 zy9|TL@v*&W^+FiGE9rXX)U{A`iB73jrD%JS(H<~9v6Bl+1k|b~cxYZOjdy<3zfu3% ziDCjGQ{f;a6E`?S1$8J@p!h(V*e(J-h-Wrsr!!^D096j*gy+1}u2Ru$br5R~HH07A zpI|z-0O;d~&^d3RL-kS{8$LsrA~arP2hU7>w~YD5tHLNmTGmTp8h6SzJ2hi(S3yQj z*(46har=h}^EX~DQQGUGrV^F2GXZ5_TO~1TN3K76oJ{k5vRt#6es|Oim@KjW$J_H69xcocP&Vg=GvpX`jpaR5?`gOJM(qRpSAl2kPJb;Up<%+O z8h%nkao&XfZvgKfMi?kHRQCE9AkTKKj`&jPvT1@buPedVCPg#8+H2~=b-wB1Yq`4& zn2XXaK*(4f(=H*^JXe;TLI5;#cByyGGiHin%Z zW_hQ@#g%w?UURwQ81^%BkU1p*p8LS`lL~VmbMl`ZLfuQ6u;ju1L87>W#HW|`)LdH; z5fNNRUgtON+;Ya|nU(2DNm=xvA~+&b{D}C3_^@%QFF$&FM-qhjZvaZnvUzD^+8BT` zpYghzk6#t5m)E4%e{?+$H|bXq6%9DRU!NtRdm1PX5|d`!Nc&2V{jT&_6f(VpZm{L2 z9tOu2L!my|I@neNFhJY}pB`~^7^Wey;y~q3LzmP0-6=cgTNEevRv3?#miD0J(sL;d zsYJlsZ0Gv6uvv`Axdj`%_7 zj(vJ}(;XUp1}M0pzptdApY57HzCd*8yh%22!Y7L%V7T6Gc)*!0&CJs!ks{{OXq&D zpC_JGJFJ#+C!R`jdfBhtH^q!>h^d&Hhv(V&78C1pb+VVZadR85u^dn^N;)aG@0VA^ zN~r*1PSlJxaaYV+?$aiXBhS{w?AdO5LlSFrAZ!M^Ft*a=#8km%K@SJ4#-f{lRJpo5 zE=Zi3b`^G7S)fF<+DPjQ9xJ`XQ}}$piORvci$9JL^VcIQ6#ZdG2IfmCNKl3GM0t>p zDIv`wK_n!^mQeShl9`70Wx94$#~ddNmSpSm&E1}3JbFZ*N8E$`r6fMF;uycedjFJ> z(Q1rpG#&C*Brb*N3Q$E98nuEiBE~Q(@sx0bc%c#xblP|HUR{FiSG#s!a(ZHR*-Kj4 zTpOekHB30(g2+(syJW~hh|_|6+|v<1A%J&5XO_c#ySF3;Xyf`ptUqPgeRET-pHh28 z;&f~0d-cN(9Ep2-0yuU|(0{l0lx(EI&gBoCy9!1JaNJ72Xp~l@0Ixz~9Z38;9L1?W z?C6`{6I$=pTeI^a$y0r|7=+>VMp11@A0#RnQwMg_`~Jx=YMrAoJO#t}Ywf1Ggs+3< zB?wi=S?U;r>^Ils3+Qw&L?@6y|MCK$#x@y#uPJmDlKKd1{h!Pnrt77nU1hnl_%2QC z&I$~qlxOagHUH}LL&ron66lhwcUAbag@;2}1_}s|n_#2Ptk=WerY^5dD~(; zdEECmTScc$I(%U*sSY~SDwX5_71ipstmIJNdsXt&w$BmgdgN{)aF-8$Pa9n(MV{U7 zumrgda_M|@wKwCmbfKQf{@c4!BUKP^+H+Lxg}oK(q}FF~d88LsT_L~TS8*7i$ppjL zWu4s|a8s_J#MYan-M_5z{c8=Y1~Bjy+3gobq)5c>3xI+ldg%UY&TiZ&>={om(=9Nv zQ3$l*MdkO$rL07tTpbtHcuPW2A3!j<;TU@kD^|n4)Oj+xILYKmjNuKPL86)}RX-`( zwCqDfWTPxHqCUaeeo02{O>o7k-%QNd#@ceH_ENvB@7^lA$6L$!MlRz>lro$AX(|!G zyuBGOYnAO&5W3&n?QHUwxIE628I){QN31R#E|$jl2i;9b(q02zn)cXTA)_%M#Kb>AZ9d z%s3agLwOJ8T^F9ee-r9DA$<@Lu?`Wt%keGu?B2cdCxRvk-D;eN!hceAIt6ZGpkCPd zo=`amekef3IBqUzl(boDPz`n$B3QRDpqeUIf3gaym<6aQ%PR2jiA~r|kCT}-+sDm# z(Mqk}?KX!^#Cd@G=U60U6r>n4Bs?agzC%le zruXbB(bz65zXgI01MGM0+L)0$Id6f)_@yoPWv3Kla%w)u@58YnYu$jFqKse$&rIzr z&X961JvG8}L!#k1acU0t#mbfVw=u^)>$Z#036PSq-jvXM;%kNf7;6Q}X<%|UsOJvu z_;fD<6IH|@mS7FCBrL1l=gZ|U;goaZ_xlCO>X2>Nqd>xw4H#yT5u?wjxETtGa}cRe z*>*gp31S<86A%qE_A4?SR!llH_7TPm3`K1>1=u)JOd)U}9rn9iT&qH&?1hp_yZTh?~F$3{hjdU=|THecFlF|>n4UH@` zzWjfby=7EY-QG7$cS`prBow5(8H@{XxbCKPVhG{@u@>kBwwAap@(2cy3_>VlgbLzV|Kbp@ z-N_Cnm}f~4Ha>!n7X_q4m6YM&`+q#r7_dqH6l&HMpnChEc)$zxO#@s|DV$z)BinrV z2yU@ep*(gr)_AD-W2Px^ESMK?4l$p}<#yKY;Shar5u-nYnsW^hncvu2#M#IpcMfqw zBtzTRzz73=_s0|zXEC;?zLUYgX4_3zrwZ*aIRwKRu3hSC0%4#uJ zki##z`oG1$aKVdp44S>UCxDqoUVUtOtyjVy=`s>A21^tx8R1zash`Js>|beiWl9zlrW~rH~*n_z%}LC zM{NyXCE6KoLz_o2%1%?2Z_20>No7Lv(M~)NbwbcyVD2c@1hYfI!S>*;=ZpK10$VD~ zjFZ7?{s(y=RoB~a`NA5_h!k-sx7p4GhK}K-wd~7%W(%fbx3USTw-!IVi5{lyM3O&; zyw<5+t&ohN`u+Rul^dr?dZgmFKP$f$2woSgU2FxKT3@LEw`;obDYa72*T30T*Zx2DHs4}4~&hEW*6)2 zE)!w{aE2(|glCGJoT_Sn#!uE33&T_ovZY#!PbEiGn*wPmNv7dnCgD?&LtBCmUxe~| z^>7?Bj8Ge`TIC*-SW_9SHfy)f3ghiV*l&Of!`sT;P3pl=KL%aS%`aR2>9uR;yeHSm z16`HQ)aN3dg?2g6m<23*xQ;MnBdEXJB0_cA9k;;wYFH%p%$o$KzI9|-#417+|5@AE zD!9&=Ay8@OK*C;Q7=#6?2 z`Q=aC5<%dqOA~TZY8w|GK>f$B6nqZyyjc2r(MIC0BE7D__u{*}J}g7frK~mZVy*?t zVfPU3$aXc2$>%ouV>IjxE7CMnOK5{L=_JOmaC>-dmnUpwAju9XCUTpsat_8IMnGNV zk_j)j3)&}jWB?Kg-(O+Y*HX4O5>`AbN1q)m`CXQo4Q55Vg=9>*fMV+b?f#EQmU>J#=SpaF&TOPZbL-UUj_NzbD0;*Pd51r#B6i(kYms8flqN`aAoO7#lFz zp#)=%Mv)-w+v*XKWOKwFrB+N#OyF-y8eF!k@V|(|ipQlBq*=oh~Vnw#HklsbKO&5^~eN7fFqPIdgJQ)*tte~0dkhaavu1_U#J)EM_QXj zBtB3j7=kp!%V&TH!?2IB4~U3&KZR zN&uy#V#h|Bq-+LlO+Y(SbY!JsoquY`6@k>ALL5t~fJ=DS!o>SYDLbFslNVBoy4>}n zS%O8e!?5%8I14OgERIL`)Y|WQ8sl?mf8kc@v0PC;>w@@6D!hEQI2^I-n-oA2bir$ofdWy7rCeH-N4<>vqkzcO*lGKJ{xZ zVMm%KHaWDME{h+Qp~Ydm#pxouhkwpGJ9!;`ZA6tT+PuDi;lMTYLe0IX|5N-2BS=;pc4Xje&zqbIVdE zGhIu+JHN!x2GDcZvf{_*dzJ~&+ZOVDX@L6yo38sD<$w`k#g<|`@`B0XV>&5^lSs$s9N=KvWIDv`Fd zJKy9P!Z636LY`>5UI9>!lrTUI7TM*b#c7E)_{^$6JXk8NblLqys4gI9Rr!Xnb|fmm^pD7{nF%%Up+E15)VGJ z(w`zs`9#%id9^;0*%r7!pWpj)a8PG#M?4HHD{d&&x`B+a518+~jg3!S<)X0o5)NnR zN3k<#Qi3KuoP>}00b>?l?nx^@KY`7&3L&9PjjOILkEu`T!h!sMiPOpyL0z84S0GZ;3LS<AQ#exq!w@70J7{gHmx3>mi6~hH_%|fGBfan~^cJm2& zSf$uT$_A)y;-%-q)q$qKD{kUD^93!#=WF6NAYgeq%Z4&Bu3Ok_Yzc28JEA-CgY<() z^319AzZ~Fv!oXN2Mscoj@M=vLDVrsZ^vb&21^XQ|emq$|PW|Z9zzZ z5C_&uUm;e5>w?)@P(GbZhJXxGKc)eC;VG-!hFx#x17)CoBY=S0Jjv_fC?0VjpcR09vTbH+lH2y0{) zeN>z-{Pp4vcUm^|*v{=oMokA)lx(=s;jOF;3|qn!rAX(p})95F}f?9@#7 zdAIRwd_RiG*Mw5dX0HlW zU1aJleANRanFnk<=zFnE`x+GCp-~n~q!(1s_ZL>7l+oY6hF2~M;~g)xmaiUowiv`* ztr?J7GP53BG$nl;;VW{WmVVFa*OpX=D)W?o^z|K4;Yin?o-~`c;jR- zH=D4Dzic*#ZbMX4kBk*ttxuX5vsSFaiw7Oyu7&1t;0RLSK6@K*Q~1H|VjyV~SI4TV zEA@y7sn@z_A~f%E6zNR!#Ce8Gvr1p8K?;+^B_vvAvSic`P~$N2a09}^VXEvwTR|2c zQ=kqig4o{@HduV^a3oK=p?yxo7DAK^e{noLi`xbwVD`H@V_j^RIh{_4_un#uA_i|=JJqi;fmOJ zaQuTsF9$z;IJ((j@Kv1!fbv_qI02+b-`zFZJfe7N^U-WPic6r2vllC@LrWZpcp}vw znirs&`Yxs)N_Bl$N4f1q!&ZU=9$--!2n%virJwF%STi!ldojK0qy7>)=ERW63rn5C z_AX63zNE^P`9moo=8SF{8+!T|^sp!b{+>;#!~`5cR87&dq)6t8jGsec^}pmB^1j?6 zXkY1;bQ5v{zp6|U(tvCEu8^wbH)v*t;XA4|;5&u&B^N70x7q6?t1D*tcR?KqIZSb` zo7z6hM5q|oa|l7&Zqyg$rb=eQ;h7HW_4mjCv~`$|U!wpvN{UfE zW!e`XCKE-urw~k9L1I~ykE5cW;wl`R`}wBhBtCvzOMNwLM_jVbr-YBo=jD?t;HSR{ zuZ_SL&KRRGdyteQx8M~SJw%p@%m20pCp0GFJv?hs@nrIelr_q=U?9pv^XP}t6%nME zNYJJ#*>8N}3nv#1hb2|S?G&6fEfbx0UjM2&?N0v*NtzkvvW8U^nB>WrHt!oTx zqfG;R=KAJ68pq8@vf8&T1j=t2TKO&nCPR@SS*4dOmSR7?euxyq0;T1AU`Ql zuP5(0>R+0t$aerMg1CV!AYe8p)ABF9);|Oj&yPNUJwVJ?{AU(F zA4wP)7&Bo|a){571zq={BmobS`@|C?r=qk|^29O0cjl(1B~uCbkD|u0O>z_%vtn!` z%&*@Ao&>D=Qu$?HV7{lXw&TOULE4Lv=#`e1Mx*1L(1HRJfTdQ8*#K38S}JJv_~wxU8nPc^c1Qg3Xkw)Ie{p+9-wG5v%Vb z8KP|PvVXUx-;>Ujlw2E=bXHVZI?uhDJUbO*UO%vjy=BfbvRyfkab^#~A2fJ&c}&I1vxhjRosux^`)=)Ptg^TLRq*ifkVeJr zv5EeMy*vEek)qgH7RC2He2z1~ju#-L`0fNRAUa%aBU za(;0>9bKkN0QZ`RRgbF&_Lt+`M|+wKBriXReC>+eq?7FC6Oh~G+&ukSbFYIJ;nPz) z^vdwkGWVe7Ya-q9?3%+hDCD8vc(qn#NHY*LPvf2-Tu@Y0ap!~zr91wOT z+{g6(Xe%y+O!)K;2u0jyyaOT;MQA*qS{i?tt$53m>6c!Esr+2KsiMF*9aOa+yr|<& zmFd*z)anejgGI9(sP@ZOWAPX9!-TYpM1ba$$MsTC$ezkVKl7VcA8y5Yy7Bct5BW-4 zWUq&I`UI7~%;3eQ5>^9ZR^o@N)r$sc-of@C)&Uhq4yVGZ=A)U(qIJ6J<%j9dCLQJ+ zth*5L94*j=-8#UKl049vyXlJ6_Lz(#}OTOgdUWiqy2PDC7%uer>uhOK&`IG zIhB+9?QU)p0RHI!cMp3U4*}w{vyJ|?y{&6n(0ciRqy3lxX zYLt^LOPWt}CVYj{bE4R>{T~frJxig&O8pkK@+(M7Ta^_Sl%|)pymgpnX?glJH>V{4 zBhlgnw0_PieYchf7o7iRn&Q|8=M9(?UH!6qAx71!$3G7NK$(xaPt5^5cd292ld%Go z^Q{J8KIM>t+c_Q2w`!KM0c~-p1y7Bd@~DH99pdwwe3vPfWi~v&d#;std5vq2HpiY z_`^I62l(Yv8?B_l+JtYoUOC6yzB+e8hM&xeFl*QUgZ$0%v(*F^Op7cieHxZc5g!f7 z#^RTDs|A$oX)Do0#H-fg`pD%?iwGZZXd(26m;>N^C>)TbaQ328x4@{VcYhZ;Td~TB zliQ~f+PCLtHCC6dsZqvJVC7S_n;?oi+#DUPbk;F@C+!pjGORNRqyJ46rg`5dxQFFl zn=JR19PLi5i0sP-UPOUBpzap%B)aHukUPq$_?=2XgZjSsr3hPv6VXU|3B(}RGiyXQnL&sV3c5|P3@2(jC`slE_VglHz#f2G9MZOc|43Vula#bpg5~s^7dq)^Pp76EK z$ViOk^y$42_$W2&Pe2s9hQS9)U{Lj25h7q1-8A)Zt+!nv@6^V$`s91F5hDrVQso#p zK?|5?wO?>@Px=JT$oVVM$>xjWPtN|-idjPOJ{yx9=}8#XV=RstVyz3@ns%nFR-Aa8_M zUt@z0!`P+ZH~NWDj#&Mm6>Sone9;NKV8l+GuZz@7HY7CDReGEJVrWzXj&rgc=`>l4 z-f4+(cPp^KSb7&*5zfaL})0Sl->q5hDBOFpN)@XkbvVu z3Vk)M&*?MGZjGAaD*`>7-7fQ$KKcT^E~*H|e}!nksD$7McvOT_HCvLt1dQ-Azkbd6 z85w4#T`^QkuJ9wJ7Ip?mPB=qXqpV+i9aIY6F$kf?3u+AzZ8+^GLTk%A87AYE@1%9u z41Eu;CNg&92dSAQYOO%7drV`vM{o)&c;i)dNU$WB4{J&B;+)mq8L_H2-U^jL21s;o zlC#S>pz$ETF9EfSLDxy;tf~CwK4@x`D0sO3%3hap+8A>bRDKx82qOPBZM4!8K2zM*!_uUhI#D1c07K5^E=Cb}oP z`>1%?UV_Xv!N~=6g==j0oc4OtD}ep5NDR$-8~;(hlp6iv8#a(SzQV~@&NcX=83yG< z90vsRBAD=U#ean$LgUa#(@n!=bg0g?K*dfjJXJJ2N~On2Q>Ryo(e=ulK|;{aoSSy~ z(%B~Y#-wt$^@flRHWp?VHXcUaefc85@Z5C!9f&gy)g*A|L%`j6>xs{HOY-rO*XXj9 zFM0(aD!cn;HGC^#7l^$an3}PJRYx)0hD?^;FDVJ!2F6Z}o+&FD{|@QtA$azrV#xA| z-6DO=6m2VXOkQx> z0FAqD?uA6c{mbbsS#^O+=w!mr;18l;H{PHpelQeIhi*!Hj3^qN4-cpCNuiodDU;tA z<(RfVCe;Go1ii!B@BGp-5oSL*O&kic^r2l4e;d@(IyuECdOWwD+6PqfAt3tx;9l&M z;dI9et_)}s1FE&2fPE?J07>|&eszJFQOcT==<`kPPw0+tbJPa1mP9f|+!g42T}(o% zZx)!Tz-yw=UEWvq9Mn1RFyq(ujUOwK)ejHiEt1mHSg?@bzT^{h)=h}=w4^%U(HuJw-}c8f2RiHJ|Gu}1m=F^ z7Z^>2@WxVu1}ss$ACCK}YHXLS-pj(kMjy=n->J=W>n)3|z#zB- z;gInQJm`s3eUMD&__`a%k*R)vU#Jz-{qe`!RgeH=EUr825lqQve;aFJVkXyU#o-dynu2}OjH~B53$23WZQ?| z&5tt?Zx6blFAwIQK}%!%Wno(`(8#^!<$MJK!Wh8RA73NH$g!N6I$R8{!RnK z}rrhSaS z3CU%|2AJGYpgNF(b;;FzRQx*@hmPy<%2wkn+;x%R5Z+aV>`n}G-oXBtyW@6Ee<$v# z5G5dz_>U{oM=4w_z}aH>;ku^eJ))md_leg%8MHs!wc#z1;G(Q2nb2=q4M}1!CFA;u z_3aUKKG~4bkG=Pl{+0zhYzvSPr>(Mx9-L&FFSzj$4!3ouVvjn=`eVVk=`|z+w=rS~ znDNcf2N#(Y!6IZ2GCmkFu$FG4NQA0jE? z@KBmR6z9C_@t3>EaTB4J&_Ta5!HZAPC`f$lIIuB|+C~1Ey2UZBEWCEpjalIbS9i09 z9^q)Yal+<|2Pa2I>>KVHe>&D}9z4LEM~jQ56aPLWlc*TDVX;%L4_l2DZBZ9CDb{l$>O4lf zhmVR30||kL!+IgNB{qY6^D@IGw9d}W!FHNi*Q!lVSJ-!l+`;El+)#m7HW)#|2HWHs zp~*1wqJz{|?Q`5!<;NAFjUJ%(lnv{xxuES|^>8@4C~LfOZylj0ya*R-H!vs;2+Un# zNgG}w3-hbvZQ}37b#MdMPZv>BCvLbyF;eH(iG5l1TYZNgG(M<<5;7m8LQv}jcM!K9Bi{x zlGN|06EMpd9H2HN3f~kvsfOxI;qCOM9n1U_1Y>0G*RWU!a`@}-FxqO?x+zj$z}iG$L*+e1%&&XGzf{+x_L`otWUr$ z(UL5DE1_iS0U)NX6+4&ymKrdNRuC4ufF>I?c`87r$v5H+%UfkofwjH4nHGA#>U)|y z{!5DGt6a)U=xh3CORV10AQ%q)$s#3A7vY=;`M=uyL9V!BAZ(2GMCjt`Bk%Uj zLbeEWNHP?9XXk6p5!8P7)SOd&M%$>vM~ilT;ez!@-lK9a1Hi`Es-t#+NX1baSuo

g$!O z5^k?*r!=cr+U_NNurNJ|``ic{Yajh?JKg{?a?~fDG6=M)E8Z3rq_|FuoN)G#wvx;K_k&h`Oss+889Qm(RY9FvC^H&cx-Wd`l#qAvcSD7=mSZBaAJC%NaVZLm!Vx7H94( z?!O!o^!Z~IP72hnAfjpK?^Y*w!WZyu4BCHt8-QujX%sx$uM1faYsEBS%1}eiw#PUS z+eTigKVA89@b9)+Sy?dh`$3*CK1^vj4i7tElp08Uy;pEX{fkPnF4Y>5SWzYZ4_LZMRl0c%+&Q^>p(t-xLL$WZNJhKZ@v*KD zYBjPR*1TluPezzj=RkJR_ndL!;h!ibx;*ViaR=gQIn{F2!aIPt`#amkrR8J|ihY@H z>gfzA!ZqVe1PY8rTX%4kub?es%+@}_fToY6iJ(-s|4x)HujxWUNqkvKP-JlK2lzHd zgZGEtN9WU}IzMlJ%-Zsy*V!z;l2y(?*(L5m1;%7vHvF`w&1z+MnazzX|47W^h?9he zejjtpc)8i>@s9&;&8tVahJg$TiK!BEZSxo-*PTn8BiAD~-X0l0Q%O4}?h5g3Kp_Y_ zUn^|pe@cIUKe@R`)pjGic_pMZbSeO60D{Ksx$wEIyR?Q@A{xIG6dY7WLveYzW^y^b z{za0}usx@H-PDiIT`^qw|G;*z|I{~y@+0I#VOv{zP=FI}Ub&ZE4IKD%3!iN_-zd1U z`}&D(-{cV!)XusgqLW2`dFrM`|1{_-zSsoLn;hx=xx~-5JM4W zp`E$t66JFjDlugSKN^68Vj+knDE&w)h^s{H^U6%mH0G+d!IM%H6|jYF-kq0N-e`B$teu{U`o{^JAE!e*`*+01UxXpzbRr9R zx38|n!;#{dfx*};d}77V-Y`GCUrt-QWJqNPVc~GTewIIBUIsys9E*D}iKGZg#J)d< zHAzizdT=cC3;L@fBkmu& z55irmY(7eztw%rpJz`1Ju4@K%S3_RQ($H)w1@1m%9Yb7z=JQM>iGdR3?ryiLku_`q z6N!-a$?I6~j6J66MF*i;-95apQCVoYtU4l!9x=HPxXr@aIyv3tDPEq4ReuJq_FI%K zO{g(GlFYguAH407w=hvX`gH7Dlhp}n}^Fqs>?Sf}rovDzl8o7vsjkfmuy()WzH6O$i!C!LI3T&BYRDadm z<%I*iBTzdrhWYG@xHGo;!{cJ5zVW-QQcZ18n=AlabVE zh_0R=I&H%MQXKH{Rs`IdXgw#DXnouU0dpH4uGptxKvzm^iE)S=hy7xh6fDayj--5X zvshnh`}kS%chGI^%*+aXb0V`Ftxmi1pxm2CxzVUqg%U}#Cuh^xz7*-U}r*(`DH!6%biysWN;|8$=U=eOwL+#Bl;Wjs{J*W|m^v@Y0jkQo7W9>fOf zh#ak##$tWClK3}3=-3dyYxV`M^_NLRcjNoR#@V>B5!X2xLKw8iz*8h~yV<}C6^q-; zdCp*ew=AOH5C=uHbM&D-phaFotyMpbI|z0bp6)f9E&pWRoX7-osG1YSX)l5`a$Jlk z&TQK_+Q=PWy?CGG!HQ)HJjQH6dF~2p9vN0Bh3LstWJJ{Y$f8|(9T-V`$`hovz%}7_ zYKr-oKZ1ynig3#j!usCURU^|7v={d&@F4nreps!RJ|IfSt<=3`DA?ndp@j*}DC+HmO(Hk)k=d2z&Cf*2n#pcN9gU#zpt~~9;pssK+vJQIn zd^-pL@@l`@ad1pTZDN7DJ2A!wPZNR?$RcAYepUoT(^kV!wUvqV?2GMuv;{d~QkPQA zbmHXfVt-)|{p~so*U@Mj%uV~7%mHa;8++gTQW95rp8lUS=3rUDy2q~}9CCdqX1Ha<(ptQkVLI7rgJnQ#P2h@>*~ z;KP9<4-VhPw%;{Z7+V=+D7d3MEVn~5m%MfvMO&M!L4>67#tpxJG{ zmCEly_VH*fJCj`b^?jn*b&Lk;Cxk|Al64k48y=G5MYkvXahPn;`%_xlWpolld~&S5 z({y8vVYJ~;$`jP$9uJh*pq|&8e#^cLfn-{_;$A3NL6KG54=aKW=LOc^1s6d1l$~kU z89w_8VmXDAT}O-a$o2U#09ZcWpYojO58R_WP(UyeluD@etYWlm6j<^INYBZbuPX`U5aK)1Q8@ax!6pV=|U6@4T%Px;xv(j#PoXC7oMq54#Zu7PH zn#)SaD6GhTYaagjkN$hG>K`IlGnk%}+Kr+ABR&sM4HPr7s`YM!x;Sj8R{i94B*_#` zJ#T+1)kq5-=FmO!g^wJZh45RxdO15!aPrP$V<(%7US6QdbJOqsz{XC9Fdx>R-Bb8o zcwgA54bL$vgNa;hZF)K6?D<`vRLjdpvPYkkg6Ct*o`;KJ&1CEUom&6E1*}AuR+;MS z>kTD-BPR|x!FrTu%!dS;D{MCKKuqw(?2hgwNfuz_?<9P zeE{;cohjflThJ>yAt~vtjAs*d67-1*+F6l#5?%7G2%M%-I`kM}41)U2Rq6w|g}aMW zC;Z@TKr5N<#38*Y}lkgubj5&B9MXCe0>~8^rqliw*5(L4SdQi z$KVa@)90I(CK-;}kcGJ#-yrIRBQ4N*{Q*Q*NB8i}sPR?JUX@iZ+Nje`AK->I1(JJ5 z^gr1t|M;mkl;rtoY z=DN$$ec6$qi@`U*+Y5w7!81Ku14fzD`1icP9DQqa# zTJgGB4vh+BJOc_02LOjm0qvLF^H9Z)_|6I6GHDYD2+|TAl&%^d^M@UV9i5yuzsLWU z-sqE8RUOYMeKW%Yf&!&|TY!QgFfs}AU}hkxo@WpM1wN1ci36tc!ERY>Q@wRQdATVr zf0X(C#L@!qKT?hMd+{NmS;E%ehf=w9XZF4Q9`+d8tgX19Azi=CQ~DHHx7o@?1LJqZO$49Kmc>ANQH*nnk zaJ!s52@glly*_#+iDccdoKt1ORP`YfZ}L*7i65rzaUGczm4;7wLTz%0ACEx+IQ)7J zI=2543jN1^g`*98VWG@fhX4{D0K$<|R3reK(Z$H~j6;QmTj6M?7J&3>?)VweA4CB1 z`omn#z&Fd}htl0-o%#9cI&BoFZBrU85M&7GeW-t*Soa(!YEDpqnYH-r+UTO>IRutL z^baQ?p*k^Fgj$zk(prPxqzGQeIAwHuRzKLcu09 znbm+)k7YjEdaNvkWn%Y0A<>|d81xN(-JkmpL^+c~x_sIonaDFnx+^CYTY_R7n)D#s z9-0?o`!L1ytrf+6CxwrwmPX7~aMY!a*@s4kcHow>EYq= zowsNbTX4U2rt9|>w^|{GPyjg$Zbq=7rhSU{#p8|deE<wB25v0=xo|%RB1kKh7|lTiXMC!pM$v zAd?FH_BXmbc09dei`;6YX{W{7{&~MZ4WD+cufh|9cl(?y+9hR7lMB>yu-9s3=gxTB3G}~ z(OS$bxwyf5O%Q=h%^z{kBRz^fTJ|K#PYLjrmf~~1&la}6kUB9YH%u?QLEU~KuYax3s%d|; zRP#g)g_G3;>9Y9+I2h?QInLwnVNSh?zjqLgVx_dBb6u*rW+x-U4Zg~~>q{nv^Xy)5IiJ@wM5{suQGbzJxmop6c5xC~ zCOyA(vVs3|#!Ka$<9YCidsX)}Dn&+oM(xOLamFyE_+r`XCbg@8F&gcBJ|4sgcqhXMUFfZiZOOiyI8eU^JIDb?Z8Kl&f4)NT8BH-hK?Z z;C7?!*n2-+?o-v!8M8NYl@i*}Q7>1re(Yag-U!kh0M7G(%gsH!J4o{hLUhP8Q^?`a z^#veRq!zmy;kx+Zb*{lu0gck08wMRN{$C<1Ox~COeiGY9>UCc~C4Cc=j}R{jWcprB z&i9ksw^MJJ0;86=s=?BQywlG9L9Mv!(L7$9*LH5(io*#|pZYG|jA`y3XQOLPy~`SQ zcG_5gb&lSJXWh5Il4Oz-0dmhsc&uC9;k1Io`%m(a7_Sx|iGvTtI_cm*d{xl?s2y@m z_MZ1+j+1-j-@fLW=hwV|QvGc6*29HqL^*hWUR~P!PJX_q{OFg{S>RWCN3WYUAAk~$ z=3ceo5!fl!ET8)Gy*d&D;~INf?18&DiMM8{tOuDU%5Hkvqe&*XQ$4Xw-1#z>HbnS7 zPS}3!lzIR>6zez*<3>u30y;Y&BW(fu)xeg7f&ENK#30*%7uzhG0xw>k@1`mK$fknp zccxFXO;J%H*^7nvpP+Ph-l2KL(WSB&v3t-KoH?TNBsIe(S8R*DP!3AfH!!C8<1W!G z%%esmObKmUGUvRxhCrildpLC!Rt}nM@^2+v;G-yR;~0<#7ie z3K;MR0Bu*v1Jo-hfQzt-U`@}ly7X1@Rqa}u1TfO9Q9P0M2F!6kPp?2j8jd2CkFEJ;Yc(r)vEyG%o+fPs%iYP0o$5GW zb@K;#dEV02^>!-j07M#J@hRFgl1a%3E)VoBW&HBPhT{@Tc3 zo&bczGII8NG<4nEHtzbtjpJf;+&NhXF_Vp9I{dDqJdSDp}lBJLzHK zD}|g~;d@mlIBQu~=>p8JzMqP%*R1y}OM=JhQem#$fdIxvL(Q3~Iek*g)f2H|?I!gI z^_VzO?{nGF%3NEqZr_VOMf$+Udn!Ma#$$K`U2t0pkIRq77$i@YV2)Y9G;I~I84=vk zZ;d!1RV)f4tN3f?@(0U4fz)s2J45!$C6m1`IK z>skKgxf+LBvJdZh##chXIa-`pcr~VQGl}TOjT^fFI-;};&?>sRzLrmV(cYE>d0W@( z=2twLD~{cLJ3>=mm+kQNkp%9VpOUJy1?_VNA%~5Mz6);<0uBbEUFOW}Yy|-}c_2GZ z%BR&u`mr(k~%49kH|(WIB1Ra&8uqxM5UxW2kGsVD}fwk6>>g9bS1$u)=KC? z;OF+Oc>X`1BOti3Y7*Z=PlW$`4zV#I6XT^C-&?hVs#?Fhd}nu8M|Q}cq3X`k#9w>Z z2#_pwWf$YusPnHQ9o8qLch+I+%f20&%KFjEbLHp|x# zu^Z7Vd9UaP#@CkQx>%a8K6*b&OO6OKHXqF}y&Uqfrphscsae2njJXpWmRZ=@+Vmv& zcgE`v)&DSF;{(r(SMlEeFkUv~WPH9?5bg?^;p>e1SA&5l(7nm;mbhy=w4+8b>$r3I zTCAJzbMCOnenS+Ish{4LE8&0#L5tL+NJ2nHB-7+~g~ZRjOD_(Kr(ql+X+}HNKs5cd zQLkpJYq$0p(ivVBO|1d(nKOg`HidKYbq9t&E>N;Q>7 zBfV=|e6)=La>O`te-7byT@Rbt*I{pGIn=q?DyyPq52TgAGE2r;R#i#e951`M?$lB+ zo4HfKvc^LDF9pQ<`WNN`E8{aWw-^u+?x^`lsQ6b5?Xk!u?(XjT;4s32rUH9%fR)2nJSrjVO~L5myR8e z?SN3fqHUhghA_O}CNeIyo12@&Huu*%NAyju(J%HGWxUQNUPhhTUS0-ZO37&gD1q5@ zD{|%B{QOH0sZ%Ys7J!k|)YPO&bb+jkl(O=)k>ue5DMoYGZ7`+w2v}nGxo}EBbL$zm zS9OM@5?85&oFmg0>{uvXmqBvgHPUAqhe7z5blSjtHjG~gNV(b~+Fw+Qqe&b{3}T6kqFFTNA&Q23!UvU5PuC&8{YX~daR{*+;lz*qK{AzOk8y8$q#bxPD9V)q!+sQJwi6EMha%!FueCvuE=}9qs`O19ltn06oTtZlK zdsZ&T_8gGmOquq^UXfh2N7I$B+n=vNoL9n@afD3$K7O*RerqTl_h>6_ALAI)J`4O2 z{p%Jhg%|+c@EaLh9aY^E_>t*b3y;sm&h!+hl?V$u3oz|Lk4 zHu0CLMmistuMt<;xIbFdsQ0a--V%S%v9`ARw){4!8MkcKsurdEMM~(4V+M!&g7py_ zyx}&NK|)ED{Os-K;UA(|=Aqs=sWVB;o{DK*uqve{g<%m7fP*NFx2w1862} zStL0vK6v1)hJ|UKoMSZfy^s1iw(GtI=yuFD4fhW)P_1gWh66OA{whzO`dziFt!kMw zL{|@c`Nzyd^iXN8%7E4@VtxV>T>MfK46wU(=pPZM;|xs)122piE!vDX9b}8rIs`Wwt957?f!`N!8x@d?^)gjtH4>h!`_mbN>4-mPC0|7@Bej5}70rhA zSiAcG>xLpDmg_&aq<`&Cv|(ahU&1XrD`{x?-$g4vZ(8;s|3A$nBzrQB$eZgQgLh3$ zDE$AO3hJ>e#jX?><4++2>q&w|eD>e^H)UdX5lfjio58N>@ph--K4Pljr3APi?eBBN z?In=|=)iFhCxTCNTvc7v1@2KLq14+T7;G-q9sc$5)p^;Rqpuf4VD%_w=w-xcP};j3 z-@xSNlROs`9t((0h~rPqBBfzmO(_d#=$ zP$Id##FfVNrsklPD*U|VoR{hPO!Fww`RWK|G4W%t#i7o;6boa=OA9B?J&zg7oBsyZ z2x(GcY~uxz^x<2W{Cn|y<_Gz>REaOqNG7ZO-v<8>Z7>52L|dkU;@^J-d`X``{trnD zEgCqReLQq==-Y?l@tktO-f_c0KkBXDErQqeb3aO0mG(ntJCiO~)(JvBzru@VIX7(| z45~}!rrr6-e>c^tq2jdsW`A#8b%BNfbno|WG5t}p6oYoL-A zn&(ByhQ@i$IUl{g z@AVvCBr8 zfzM!+P`oRa=Sx9N7t8XPxEL`JCqE;)%YI;BzM*1j8Zs0$K?dDUA;VE4qbFG!2l(-! zILKOARm6nQM@~)QIs$HT9;R4WSk(s(eM3W&m&I0q5OU}6kmQ(XtG(Zfjv;S0q4sDY zGA)f{E2FG7x++gmPejk->~39Ib>0I`R8ZO7L%?fJE#f;pCnu+@k_M@~Gs}yulyq+Q zNrr_BK!Yc~GE*KEoA^4MgfDKh(f+|tnuJ+o{DOCK8qii`XJvKRvw!~wJyQ^TZZiRe zE*S4E7l;X5oI;3S>^{P3qj;hiPxoaPykRaL9+nn}B$)vwO!we1U@+eMaCbE+aNJw9 z!Y2e##7F?xL1fCMUz>Niy6P*p#J)M!W8>l$v>0Tja9OK74cFClNu#$UPnk1hmzw^{ zS--tZ<^Ca@ir|gky9yvR#<1dE`=izbhYKY8G3jBY8kLG~-u@~_Zv&!`$m8E>Tyhia z-ac@FwGqHBA##A5?{JsRTEO+4`@KKZ2=Z166gRR3@b$Oy&-Akv5pEnE^?2!Hd(G=y z=O>|#pF8sqWOoF94UO;r!gzKjK$UA|f7!U`&kIL{0IFa+{293F@C2T8hbL1H1ezj* zAD|$TJ?#}KlE#l00-3}3#){ytM_!IWT@nKKKl|L$5jn5 zeaeNiEy;Q`VEQ@~*BhD4ZZ0uaXDKT$&$6AklEQ3|`yS<|n!7Jo$W*a91-*Jx1n>YQ zQd`VXWBQF;4d4N!eXMI$K9Ii- zj2%YDkn1&CbxIAXQiqM87RY9yWHu0j#9<_GJJ*ou(W^JCb4m4Hx?CL8Zhoo3+ zP3P!QXO5Fa+FmWHak`ym&rUx!sST@h&=(ph_UmDk*?)^c}(poEaG59;X#{9;2Uddq{8|Gv#Tp`cGxU?5(6>}$(!EQ17} z!yq%rd(Q&-ktsk!?n0<|dlaqA35?A(_V@$=;L+BMv?IvILH1PW^8a7ej z#ehVlVAutH&i4~5CFSh_gmO&6Kc=83{j1-%bq0?veS?GJ+iUZFRo%9}XL>*s!zPBTv=U1)OkBw+Ez;Id zd^V%_`1HJfz(FoX1a*6L0;^6=h+JYSOV@RM)Mhwo?aRb`ebW)>s7-~~*f%3`8CT!Z z5=qZ5pK*oIA*sz9{wGbkwtba@i*)fh&)W`0ZnOnb=|UymyVwC^mgMv|%PQ$G;e+_t zthT4v`Q`>MWuExPt?`E*hNfvF0blCbX8li{hlOJyc+)`W^gj;w@@J+< zxqB!F;0n$L4WvA==*As@PAR2f`b>gzy}kf}+W9?D3<}~F_nZeme*{~t&+KUz(nP5! z$`-)dzB{gOoo}w<+GZ8Wg zr+fJp5N}-UL8AsKyj4u#By%Frbxz!k@%E^-Tm2<2AO-s};H(zNnxZ+Dl{?3o`<+;D zpjH$`#ayVLz-AGF+yw;?8r=ei@iBHFX2md|D8`ovT|z4^WvHOuG0o6?2??)j_o88_ zs`)arX3IK|u_jXSnf}O}Bqdw+r*z?P=z2KEn^Izs#Bc|`kFB-~wkHr93S#1!cRN9{ zr8$>)IDj`aHi`H0a!LF#c3Ou(^4?`zG)c!T8G8%yjg&9VfkF z-@}@`8A7SRmN8S*Lu;U`f|645^ve_(ng(Q1EF->aEjp?)$Coq z>#(k^zi&JtRL_jT z&f(AE^eOWD795`-=Cp62$5|wUfY|FU6zeTtz2+h5epfsc^ew68Xe6R+&F2>U^HzKh zivlBhc{Hmw5o}>4DTCm_I@qkY!z7sZRHoB7Mu2dGqCX6HueoS-ZQT=MED-W6g&$R4irkBbx*s4-&hP-U9<0H=K~&(MoqjmnW)HF zHw_LEDBtg9@|Zc&KI4Q}G*d`Dqgu_R5vi+s4ojW9(Eb!JM6w_jQ4-AUWHld|5#g;# z>Mr_R|NfYfv7mpA<5Q(`4vIZzH;849ln3(1V1O)rTjNUsf+Pe%>qrk^ZE5UGpZLLm ztZ0D?-_Cfq;Yd*}m5Ad$X)`3;Ryk^;tC2ROn9gC5iy=7V=XWU zO*x3#*FYmWsN&M6QR?^E1v(1DS42x{$bLxY842+?ft`H;AR&5B7LPj2ycP0(+i6X9 zAfD0QC%{uzV`tR5-77Zu7fM7J9Qs9p1oVCJbXubuE;h8C)&aO>ZfDZO;D7eC<^ z2*npuGpbmua{cq16oRxoC$Y7Z;OPUE9WIp6P~)sZXcC+NT3~VpAYkeww<0=aH;d!x zZZu%byu=_rpnOW*I^cF_i)dE7ggejzL`jLjJVpj#`K+|{^zF~xc{7f*tINv-Er^tM zac-_E#V`LQC=0<#p@_&b!1Z6b#U_7D%D)3K>f_Zft(92e%xK?i3}gY^2vsZQh<#u% zSu%DBX~8gEn)#($A-^z8+TQ|5)nDe~zksJ7bwZ3Vn6uYxrTy&cu3K|Wu$}~YdvRg^ z(B&rsxox6dUx0I>;GJ+nhEIJ3W$&(5DL}|kzVIBKe;n~t4#>f zjR8KvLf36fo_)YC4MJ*7)wV_xl!o&NYy&9sVV2Rp-;Y_-$`S^=>uKI)%M}Yf$+>{Z#o3S4 zyXVl@>(%o*!@TlLhK(VV?(OIA9tMPRLwiv8ivO6QXrn<*fdZP1f8q<10L>?P_-kiM zz%>@s`*tbdwjEa?d;JKwLhh4rjMv{6DcBwX2=j@;n{VT@V}>l1zbO^p^uLAmc?1gn zP@(Vxgeb;g8iz*GaL84Uar->WGU}Q zCy_>F7^$PDzqeKlR^anXBY6G*s0a#n)i6oepU*ntV~aIqAx(J- zkKWaV1)^5g5ALL}oRo|%C|0jSrH0gfcmlY#^#wmQ&gOcQ@wyLe)^_zDeQkD=x+LW> zKyxIa(=sJJfWqEL1-dTR-3#zeB0%l?)^)m30dW5WJ7?i(?t^d0KRkTWa4{nvT500{ zb@Zq5CTbAP)cOpJfbinz!xk~ui5c#oibYy%R3b;l;P&8ri%bv5`fzIBN9<*HdlQnp z9RfbqRC)$q0$gJpXQe)pu0_lBrZGjl&YiE#@NZ}PP#6g3&4nn+=GfF?&devq&zHDJ z&Lkv&clz9IkWnFbv5R(n{*#AxW5+idD<0)aRI`PKoj05|%19b(BZd)$b2YYwM3W{s z>_ZOv^O}}+Y2G*dIqRjA6;{u~n6VI!%CqXHB@SAuVuH>bkx{>w24m~RkzP8Ug5iE2Lq z2LLiRG=#oVAq>uk(&V-(pXtOgarSU$CsrlY#=T^{sdSQ^r8i{PXwqPbW@fmrkFAsC zRzPTvFF!lbT>kB?<5Tn1^MF{e*OMQHG2{}Vii08Z!WG4eAOKPezvY!I&_nup=DESS z$Rwo7BwZ&6(0)5B_xUp!Vjv=kEVeIaMs%208mIECNHB>tY&nnGH*W}qbz#e};I=@f z9zc_UajIlH^lM&}&lsXZ+PpFqVA$pjasD0624*|o~(hWUm}^#$LHL!azyth(Pk+k9x;P~PN}t2A zrm1=s`>r`%mOHQ1BkvNEH@7NV=%|)Ru;!Kvw7d^x){ePkaqdBj@Gii>Ka~C*lXO-| ziJ9PKCZC4j{A1>*+_$9H$gUb;Bxh5OSG))#7-V74J(utEifGtnMe9V&a9<1$pRMrh z$cGRn6Qnji)O4u1=bioB!@YXlJuouDe#VdD`+msA(AXHSmJ4nr#XBsxyV)%qwCD?` z1H%RSsmy1@AG5os{gA|}(sUK0hyEk!4o)Zaz5Nv08bF-f-K+V@;S`ZLzWDf6qZF>Y zJ>Ucg^V_#awf|!v@R!wt&JDJ)rSAF$5Bd?Ty+sn_p9mDIXi9l`P_Sk>0M6m}uT8o)sHhzH;##$9TqVv)O&HZNq`Y@|Qld&~ zmCxG3$Uw`5F#-4wIhwR72m|r&&dw2dk0$(49fgX)ig3*53qOEp9_9ufKDQ-ILv31BNkvJSob&f^kM;v;JtLi9fU8ZXSHC zfhzOONQ{iBnHdwn5_vy0Zj~b(cqQsrCzPR!Uh)#gH&H+&v(@cG%?O79f7`PRhl7ZL zbZI|CW@`MTqN8`Tt-iwMM0*XL|2xC7<907b>mA%FFHKV82TKtxg&I<3kCCLhCxG@VIj2 zF|L5yo%S67$dpx91)$nxESpdV_F6@3^;(qM;_Ndn^~g+{kD%GAJ7{=LHBao@cDZ_n zkTorF(4|;gyblWUw(zGwJ3?{@N7P*@BE8xV=R1f9-J2TVPG(OoVY~wB^*&bO`Dp;U zn3^`PA5<`WbLZyCWx1fo=l$6WTbImh_iVs=4rbDC^^uWRikjEvC(VMd^^8$<0R?S0ZG!<`h;QbDge za3T@wYaa}Q<0KJtM;57>d-PHZHbpDGrwq+Rv*o?K*CfFR4A}$M6Mr4hq)VtyHy4_z z_IrV@T-mgCS^4iUJUkrZ z=0M${5QES8nRc~Q7)yA_!*((egS`xG3nrJrytq3(GMhL%foiw$d4!Nlr8Bd&7Mh(*_e(RQ`@3_Q4@g|!}4`oAv@0bqyXrw3EV1umN#&0aQY z*t!Q9>*D;`J7;vaw`3D;3o{=Sw8U6=Mgh`x)-5-0+j$)~>~m}n^cNEe*hL}OOmRt7 z9t=yOkPKq-&W>`nSC1!nMZVmMWya-a{CdJwK+uY=|A%VLDX$iR$Bsdcq)7B2&(4eD z+GV@<74*XzP3RZ&I9G>gPvL!<7BvYT@?p9ws`I7uIy7fi+5qaTt@Gur-@x$ z?_4IRRFI@#(35PqFGRyF5KMWK%;=iomGD*Au*K#2@`G|S$2n~Sq(MJgO9=AHF=So$ z$45n{eul9Aj7(op_Ek5|x^cI9m563*hcCaAN&!Cu8fNCRUPYE65V0xj#13adgA)`n zxCI-1O+3?;*@@Lf2lcmEyiVf;>^hkdC$llS6yvkc`MH3&L=Gr z+6~~%Oc^F#G4b&O)qB(a)`&!J#ehc-#-w2be&#k(sBLvVt#&GR%{u>QiXu8WG`&Vk zM9bmwUX0HSZ!#JMG%w57I0=RD~Gk0*oAW@`ct$jRUkH!nfz66B{ES>4rOhEn}|4JmA>u<4={hgeV$?4sdL=_?QTMkHn?W=X7C z6+-}IU_Ey&ga_044I;3#3WLtxtIR*;o2VHa6G#B6F@aL)$`cTa>zxJ+52aQg|`Ih@K~1 zU9u{&u9c@we)CetI^B-TV^IE7R;fC!p}-dx#=8=5Fl-pWIngy=$ZU5 zO(~;#_;=q}2pf8U5T&b05#_mZc56Q<;j`L-!t}|_*;c{9Q>6!UMciXQ)adLE{p@6Z zYb@a8!RsGh?(K0`x-gSSs{a8nmGMEJ0aAk`3ksN;ZSCxU=s|aks>Z9s8;ne5{lSR4 ztE0W-hb(aDuvq}V4f-=OGe*>enZA9#Fl(JHYYRrw5N3QvWdI2VmIaftvT}vt1N>_u z?x~3!slJN?ZhMJfE;M-Nlv>LNr>t)cf+K*)*11g1i|e^!kduEcvj)sldVdVWKcMKzw1<8&$v z?zor~`frtwdZUk4R*xT4(s)R!e)FT4z=KEthHN$vfu4R5-j-LaTGQ+PaL?>`B4ITI zFHz4WseVAj?B|<~@Y9(xeC$t(J%c1TCN>WLw6!Heo#ID0;ZIVGuGa)O2e@MmfL^QK z>3{&hf^1wl0I}q{?$%4$`~4g1g6adnCSGswWqv_X#O39d)#EB$BD;PGYIepA%uG^j zp{|L5XZpy;_);(t^qyjAT=7v81pq!#@9YxPIcN@5Y*0yP{~@p;awvkzS+NJ7)d5aS z7Z)h%JxtZ$tNVKEjlO7V^}7?wl#4rC%+9d?0`MsR3GjSS<6}6SpfBmA+SxgI*R9Iy z>eNOX;d{3A_VLq3XP=x^?nzjP9C93;I=KU>>-BL4ZfCT*+UCHW-H^8^Oo9~s>8E%<$k@d zJ?H0|r3WyMx3q}l5GH4kf8L7;@AwT=Zm`6no4}Ay(1_S#dZPjSv=j{XmnIbD)&Q+* z+VDfoR-t(-YfnY&!ht=gj*XQY0}3^ewzqbMp7UU2eq-PF>{$!6JTL+fTVU*-QKCM% z+4Mh!H{>d?duNlO%<#etoj7HJ@_`D z*8F1=JArL#rVC*-j~~4am>j6vtG4$dhc6ohR7F0R;kHY(Kz%$oIIt3dSv@AK1DfEi zT1KxQ@Rg7x zUU!XAW#JUt6dV&aMlAp_`K|jUw>$GXZ_;8-rl!T|+0+x7Eyd{| zSOZkxsjn@=Cc9 z1^omC0SbI0rV8OK0aSts@3JCIFNpuWG%F(?os51N12`5?<8*4edh6CAj0v|4CE=_1w1_`tB*4 z3$iY)JdzA+NZ*GcKhw{U4~b&I$Vktq)Gx7L@*`g&s4WS^^i+9pI!{kuedI;;$d~W} z1|fLw)M6-l)bUh>BY#yy$-YWwMtRL^+AlB2<&Eym3}q+yO#r=lpK5G%-?{AIbu`tp z||CW{Ihx${Pq zkj>!x4=ShYz^Jvv0#~K~1*PgDeKs}GpLE|QYGhh>BfMt0EcyeOqEA2A(21R7G z6Ubd~{eL1;=lK6mWD4TBO2`_1V=9|MoyUSBHvM0LDb#>X+GY()I`aH-vkliWs@zv^ zZ-T2iTJJf+b)4Jp;kwDZu_cz@6T#=>H^HZt_N~0Uk|NYe;z|O9pb%36M68f@We*dq zCiOkn6!G?y5w`!F`2zDFQt0Mp#9L?c>+awgF>i!*f8JjJsxnxAeGtZXZ{~iI$>)H* z;8Xe|=W;rsYU_q%>nsv50`rJ$g-?OP2q1tSr4?nw6Oy1$VE<%yIQI>#i#(J2MD}8l zATy255=|6D9%gL5Smtl(#q#^$3VJ@3ChzuqR&G*ELx;TWa{x}hwiy1v7|p{gBs}~N zwSage739BfsKx6=3Ezk2i1Km98ziDd5YY{Y1&_(MAzfZSQ&J0NAJ5W$C%qmu=oVIl zIj>(i_Ta1}Qq1#)UFXZ}7buvsr0E%osZv6Zn&2OqXH@6ZVb&AVP&J{xb` zw>sQJ5pi4oME}7NSJ3(T#kMrSo!3QQu1hAHa|4vm^$HqWkyTd4c)RZx&LE}(tgGBR zGoMGAmR-EsEwzD%eFu+-=9sSLd<8owWLXpbi!Jksn`Iu75E3XBdXsbEEs51cot}QA z=?C4*I&i@&6s)(>0B{f3y^3)Etm%Q`nE%gR4Vgmk9qf&9eDfMfdx_luE%AZj_%-B7 zYeWMFrrWV4F2ggV46ooTf3Os+-|%DSW&_7t;BT>^gjl@OYYo2yXm(lObN0D=OityD zttpiltV|5RbE7NGT;3b%p7HDAt}~(%z1O|YVe*wRWjb@CqXBUt#5xI zR=tL3ET>PwrLAmX_*;+2LwO*_@VgQ5$1Ev-J#9@=WPDi9B9#%*U+wj0TQIDM#(YH7 zG>=H+S0g~~A}-w*$dQSgs?0jhG%+d}kb;YVLf*M2|HhyWdAJln)101`NECBBEQ;wB zyFJekz92+Boh0S@p}gAF2-oZ2$2G1<+p}SCs@}l*pWpsZhLtun)I+}MZf)26noPTM zzSR!^*V{Q-^d+E7IG7}sN6;LJ(J#9cbHw-pRO=)gU}xk4xHA6n>KbBFQB;7*6+(1L zln4%a1B=djq^G1X(F`b}FIIZ+QJibp+V|fQC{YFw)shOeY_%~ivj`nfyqFewfCP4(9*ROSpEmpE6sy z0ZjI&>W~v}u6dCgcb6T}Z2~SWKKJc~8(U3UX|b zIThB4wU4n}i9c8|)5XKL9fkPfcdG?Z0(W;NLV3`S{RE<3_^syE1VqfPTyMpRjMrB4 zT8Gwr&$RlK#|ecXU4?vsckE9Kv(Oq5?S+k;g4&`8nC-Pt78m885D}d9<11vLMpD{> z?pLDuoWg{SU}oRcDgEBW&SzXacUvxc(@TFmppB1=x3C8UxU$JA;;5`Ap?b8VuUY z{VivRb0{ab>m6|CcOF)+3V%We#?vZSZE)=w&NoaI9&5anzL1e?sHtQzq1_BsYIH) z0CYaLB&fTN48{VY&92Qke7!5zNwz}QhiF@l=H}mZcMxhzXQ6pp?ovm*)sV7NohGp? zzp$RA`c)UJRnG}wg#aqp7Z0lr!MNsr8S4BTUB+7m%jt7Sy_gh;Wh<`V%K`HWS`fB`6x!JGr+w4DF0cssr=9RM)sH zaD^Z_=xu}!W@ceaDKh(Tu#Rei%}b2EKUmmUoiR=!yXhOKrWgGAnyT_Tzx$7tVRW9_ zz1>_@f6l$1gQw}|HXkOs`?ZHL&MYRSnjy>ybnV9Auk+~|nK~_jGEWnD-;>3xIq1<> z_|#aBOD3n@^xcoLv4>k&q#wU~56-|k(rYh*+fsg=2nbi!`>PAnO89ZLhkuu5Ztx=f zTxjD+u=f;UqR{zCz;cdI35?$51$viVPKKsM-t}A}amF-W-A*7zM{BtM(j+lGFb#UZ z#`$SwR!^2pN-_vb(QmOsQh=-d#Y`@>nsY75hUoZg1lopXLr?a^^hhj6t z@EjP`bRNt$?_BqOaD4J)hL^4p4V%Ub6TGD5oDCbR#0cap4^8XjpghQm<5!_gKqu)jp0{*JM^ zJ1KtpRQk&(yRmrv@T(bMmOYqPq8NG^>UEHkVj?J+MJiPD7~L{Ezir@5@>i5?5dJSH z8^O`=YMaHoI((aZ4Buv;L;OnLpha#RsRy4qBXKD&FE8e`YdWu;DyHBqeVg6?rmwG` zP31g+B4A_Z4WUm=jp~IhNg}>O&DH)AwQ6k>#ZmKJ37IX%?@&(dA|TRX0yoLt40m6} z;@x|hjBxhPTeXgBR9Jl>)tboYjSf0#`3<+#1iWElTjiy@Sp3FMIU=sA-ioB;JEpio zK+uL{$u4!_7(B-K=-PbIGzP34;IFrw)~n$9{!g{iEhi9?h_s31n1beZ(~|Pud8(IL zK#=tFleOLu+jM^*zJ*`3{(x%oh1)C@p1cvl1rC39+%_i-3G4%ZL`e%Oh{M?O$^Iv}|_dq)6AKo$;xu zLzP@eiuI`ZSl#pyMq6W-sq9c%mo*I&25Krf zZtwc&e-%F>!}xS{DB`Su($n4t;57%{ZKr8 z31ZQhCJB1QjgPnAyI%ehsshT&lZf56SO1Hx1=zIMY*dimgs;)Wyg<3`d$YxyQ8kDj zV*#JS;n)x8c2XxGSKdDvAwlJ?mtWm6@bw8zmL|0;Msox^OGB^yVO9t0EA^yFTb|xx z4QUjNodt~gPe9dJU%iuKz#aD9_!yt)dY${DT0xqWYaPcm{Gt1-*w;~U{PMUsW;%%`KH1ZzU)T~NT3papG~$fRTtZ?p8?5q;())79cYfn|O~1#r#! zmfUB(799XKprPz4V=wbID}TjYZ0X062|w7|;z zCxwdFGsYPET&V|;-%(LfMTr=6ZxntV@?cjV04R`m$7^3?n86{v))}2hH{@^XktEJ# zj}}Xi2}%_|?WsI&FOyVFl&klP-y<%L*LT_sE6rRVA2rP4f>uWtrx$KlS|UZ$-#U8U zU$`&i9@Q2-Fq|ss7%*S|1wG5K?W`0f^88Qu>;x|S6fq{0KCZj*O62CvQpm=JZoZG0 zc2rdX_FDiwiy z^?O@%;@5YJ8xK+H*v-%rzQ{t3%o8Y{Zl31x*{wH)U?`4jpDst%7d!kt36I4VAQ8pw zx`Ba#r$WZB$5shFf5pV)O&bTB`)~j`brsJJHx<{`Hh(F<&nZTyKT?VyLIWh!-OY=T zr-500BSKrdi_Rz6#bcah*1#vO#)c&eN|ByZ)|CY5sWHpfwm1*UM0r=j6wnmDAoJG9 z4{2+t)XxAP^&C;~zf3#G!`k|j2pk{p>wznlZPm3>@Gt)p{m-$$%jV|~dQ1WG#J5J)o{CkHA~LiEB6B3i%??kbolzp#|FEP0(#hmx1Kqf`nAIkf@c zv4dLf3R}9hVEHqp(mr4wzF~;{s@F>mX_HN4T8_i62zwo`cOWd@>grI<5ioH}Wh4E& z#sdNkOvFN7LLY{71xWeB0Q5EVx8RVsv@!Nei{udL#>U21WMu8w7f^|H`cLm$4Tn=0 z1rOhnT^)~6wCXGfz-IckJ^Qq2xd1+G(`1{&X%w*=8?t#<%;&Qic z0$7su(a}u39H8;JG|lueZ@IsXKe_|Hfcl%nhZDZ1_V*}vpY!@0;WZl9MFQ ztsA18Ju|K2-!LLn1fzN+G=yY1F>%gv$|`?;4sMhyHg%WMSZGy<#d)S00i`$ua1m1A zVX@&6D^#xedbH)wRAP}rN!jo{J~s9n*jyKKe(td6s`Tl*S&F^@D!XRodW^0$(J&JB zlAEckRb%fP{lD-FO{Y){+-1yS> z`Q&*)|0Z4t_NOp}l~ti%zMH~PvLf(NRERl1#+Y7V;6ChA6=Sw1|6>Q{IYwvhL{nC5 z*Dq|Ew{K$?7u7j4BAaxoTyHw9`bI{WBj+F!E`9RPV2~g?G3?40TLXSfxX1Z#353 zp5%J|+=u(FV7IfMDtZbd5j?3%IlH-hrp{Dor0=6X#?!-5`gSO{F0~2ldvq9RD<|se zfBU!>O>I?q7^hp%iFAIGA?JS6kMqf{7dbS9G&gdU!JzItr~NQTIR9oG5RIv*7gs+5 zD3fq3bak^pmB!W66glPQ2;T2`nN-jfP!Yd-B1^;9-c^72=8wMNR#;+|K9S|Le_Wnb z^1#l)oV6GF?$za^@mo|5<|0qZ`+ zKj(hm;~pm+>f|eMu#T!QQwuutD9tnQdAdHG$B9BY< z6hsDtBvK9=21vf?9l<^ZTu4T8*yB9wIKD1*zz6i>Dd`lh9c8q+=4vhPlKNj_wLG7# z2q^8!C6YXJeYA?rd`b_@%X&=c^1fy!kdrsJWV8<=Zt?5Eucb4*NkMBt^#FWE5OotZ zY20pQe#o54+rfR_tV4B{hgq~&&nQ{4A?fA|#-(K#yJ&;=;mEcxD;3`O1VM!H7jYHw z?k&7UcdU10k`5mK@E!s74xpNR8`vDm@pw~$WwZX-8`|ex3cVTI$LWxhqN-5UWQ!}h zgjW8Bi^V3O?RuR?D9tzVi_;Tqk3Afg4HRC6yx!%|`fA2|SkHs~dVeo`gwpbpuC-7T z>0n$T5^--V{b!Glt&QYqh*3b@q;eY(#&7c%2!&W9%3txMabFUBD%ZVqJ!|(yC}*J? z_Wis07Afp1D~tys=sjN4Cxm|)0j~&oSc5kpWeRi^bvA&pJ&@JChY@^PI)0V zHg*oZR{KJf&94quz#fn82SbEumju^zQl;x$`_kB2uDAR7fDTgxvgf&4tS{d|e2UM> zDPchWRW~T^Ihq@5If9pNU9`8hNWFes2<53szn0n>3jf6bEB8u`maI7sX7^VI{66`r30 ztg2g~pDe(J7Fii^+kD-BQ22w?;H$yr+9HSb zVG-FROm*<3Ta!6t4MzIS0wE1Jg~h(4<%y-YgxA?+mnh&h18Oe%Av<6f+ODOPF)PTR zN%Ge3js>?1{EIC7RL3On35nA#oAvCTgVw`W zX?@V9_PUY&I@bCljEUO@Bkxpw6cG6Gvk0WQIIvd4d&qnIKfbLGZLt?w{qX6g*1 z@#Ae>T4A*BwbO>-W)J7>_P4k0MQcX|{Y$vLh-reHmLo=X_H7?mq@lvxI94!p%h%In zXb7Yq2a6;XbBrc7q$%ln}d?;?Bq z+R8)sSVxJPP|Fl5*MK674ljv5sSQlD9TB2ZX%&l@<9gYp@hzQzc-#ELw;zMa%%WTN z)4iV@i3M50Mca>^i4Ux#yaT?#c_~nUtyXvg(*0~nRb5G@R9@INd@zhu|8Aw$HLD{TM6cd~R^^y?Ksu}F>;y#9?q(I9cFXC0 zC2NdscXz+%fVCUG_(T)`M2Q89L@}>|E6y>s)iy0&v?z_g`yQnjNsII8V5_z&Z+`>= z-}jx={_vRl34wEgV=6MkeQi_9UCOh47}1t5J061ZExxGYdvGj5#uq`?)G58XdGkp@ znk^I?o}H-^D|`O~gU%KbJm>nvZ4t%}@0S@Pn*RiivmH=IGwL z|2>CdOGxzHEG~xS8s+3`sW+Zr>Wg3D{2=N%ML9WBj(5O3Y3ck6T>y$|lcp!7F$jpG$=Q9?RqG zy9n@2K`KGnps^brCda(H!R7v_X&_=qB|OrTIo&uVWgff)so7mY>J2bFHRWtm)AjE?m&TC3&BHv4y)vi$S5e7GLjWQ%1>RQ$zNtV#XJm6a=H5H(qyD z^GbK^j7UgsUbTSR3vh6;rP(At{Aw$5IqU zB=VRgd^1FFYjBFVNFWWRuN?{AxmpB&SJ=xnCEPi3TB;fIo|8|EEPL6A3bt_%;Z)8=Tcy-KX!Oo<#YGhIxnKi$!IZ#@(y%BU@7Nvm8XR`YP3 zrNIWb)vo2=LY92G)#_%JvI`c1bhuaS27OmD#JtC-B=o`wt`=j^aFk9MiZ*lug z_@-km8k5U@#ibRx|Izy#@dZf-mAqo_?Ag|!^*w?=Rrmd1B#!&e={LGJT+`U}i_P}o zPYyhuYora^3`F{g(>JPH%HbKqaC7@K{P#J-u7HgO6(l+z|MrCu^rNcnBL!F!UpMBR0Y61T7Vo&F@`Hop;Bfyq^bF4Cl|X5U5q@vk+(z}c zfgv)4^EqVQjK|@Zd7+wj7DMeXho2s}!q%uYCV$ZM(nru1dkefy*F3LFg%$Jo-ERTU2*Bz(J`zqL% zpqDC(`=PL_N&Jd>Ik?@adD0t<-QsD{vBhDhiI0pFSiA|$g+NQ5I6gyDTB=Urkd~VI zji}8cojmL6>P_mZ4Vztl^i#9_;uv|^bVxKNs)a7?ngce%;Z(ZUL{PB$&O*nHVxBZx zt~_{HAad;gu=SQ%m4;yd=$8>C9$?zy;-cZo-}`dS%d=4T{kYc?B^WyJ8msT$R)9RKtE;zKre%D?(A>Bc)6Gx`a*WOa;r@gEm-Ke% zTd#G~H^}^(yGd9oFakqluEIPUgc4TO`)2(XZCYuPs%#7OP2};JNzk&Dbg%nJ0H&KcPP zomIXy=x{<_s&raKjE=r}&Ct&a!77_O7J3ZO(-4_WEc0Y?=^6Ocdcye$;f1&I>LXWF z;GF=Rty?9XL}ctE@HI{~ zt1Q!UQyJf3$l`0x7Jc8y|8A{N3PA>=$!I= zc6cPCjruL~(bx}OJ^2ZX+!)Mc_0qhkp#b^b>Le6n3joO(+!2=63!dr4rpO?!1HF=t zuv$`bhEuqmidG@(_62HKolqAS_$pjxCRQf=hpccfq+WQJ>8|KVN1Yv|B6~I^h#xG- zp|?x?h051KLTn9|eP-#^+`9bUOFt+ZQcFDs3IFDbnUL&w7K}-#(e-`Ly!`;LcKK0c zcEk`rk{|Z&^}>roBjhGZ@P}}O1)VbeKOSvzXtzAKE5@@Ckm+8F^%>ogHRv^CvNTAe(4&xZ@9MdCCOqwe=bH|THF zYTC$73pSQ;QO&^+tulKQnQ#oWic%N%GYMmw6e%;*Jw*;+Ton!R6%j*c} zF1Yl=j6z0UGYGmMC#MK#weP4C-KuqHHzu?KLwsje2-k*R$2dP7^B&}}-N!4a(b%3X zuF*y%2uM6FiI7dU2eeTvo<;<zsKr&*~M(U|7gLZmh{N@M6-F<9hA2vjM z$dPi^u&8KHGoRM%^Nx+~nV8GrYPd7M^3gmZ?dAH;< z=vh0nYOrfd7~Q4gLm%`$s%)Q3i=TUPI_vG}5T*!j37&M!t4)*WP4~NDLLVFzYqyQ7 z8AXn1LvF_jy8{=GyyKNhkHmM(6(<`PHxwPOKxdAmU{q{^cknIX>aO$#{2h@yUxldD z_bL@n(FozMFbzhM8--_YKkHw2M$}$QJRyk~3?Dp<*UdD}_QCD2S4~BalQUzPhh!A)wWj7@dc2FbtstF`*d5%Go%#eE zeJ3Iftj#{NIS5vUujrJ9lN~2%*tp<(BbDRhYD%*A!dkoII%X?hS5*{p{mfNY5HR0( zN2?N-`DSYCR;MOo&gLD00D5>{nDX>+?|W^2`w6zo(Kk7YMvJpF0~2p?bk=cX4?;qIL{OpDwk%&4gp}QNrwzLw%BGW%?KKS2922VC zS!&>Y?J#(dvPZ_y_lwef@b<~v+x85_Sb7;djg&(2#9e2?qYdS89g8*!(e-Gz$0eT= zoy%$ASTBJm3dn-}Ja5mTdl4N%>vgY>h{Zj0rLTR82t>JCi18bn9POs!4Jw+0R-Xy|e5Y*h3kveBY( z$TfA#adD2yIg>=Ggi5flE&0v|w#@+F(`YDGUfTsnUp2BroEC;FXB$-q=O*R~3CVGG z1(X5HB2A0Y=f)JyOBb`oLZ?Ee&Gl}G^n)O0|G-weS6jk_jAveh#)uo|NjE~zrPd4 z56fGg{=Jy0!^>-IbG!CWfI;x`a=!+qxw-k!W{~VTAn)dLeR{}x%zm?Cg!hXwfV=aN zoeH?pVI5W4z?B}CrJ$#mj){%QZOt+M1WOR4&8pv`)%0m#J=(Z0DBJb3>_3Kp=Yb&V zC%gfT#gTvK(ixm#w7c{6PaCxu5y}@J@K(sSUm@m-0Wb+f z3VG1^y_7X-v4T!bDa9QgGUp&c8>-b(SPkNWBgrEAZ|CW`0WZw$>QZLvugLcMoAz1P zGxsoLTs+*txPkDhla41C4+37hG{9#w@OV%9g%zWvn}FPZP);79GY#-74FT#m@faR) zL`h58?=5bCqh~>9E80x8`&Y|w&$3U`zQ7MH&TSkk-=h4Y`N{L9&yQae62F?6naO<+ z1OAmx<*oX5wRQ8s%O~y)7bi0^QTTg%dmk-z`7!sVerYJ{3IC4xLtAZWxi{LCryFYQ z(*6)dQV~o1*Lkt--(fMVGd465|DC%w2wIX)$YJ~?7OJ!AL2WZStjz%k^5@FWMOie< z2V?2=%{)Q|h4@%#OM9eUwFxFHUn!ZY-hL$kaBU$R%6Gp=0=!Lev`*i_V{Swj!})X@CPE%SMR&!i zSblzy9O~8bS7Ru^xZOEVUTN8UrT%hMG}TLJOZt^Idc}U3nUqM-p&Ae@Jtwa4mvcTg zXZyGV%>jHsznYJ3u5!z0&m6gi-1}k)=y7ZFdC!cYfGbi3rZaGn4`c8226{ z`a&-gQQj$MI3S3E(!g`Tjh&_kbi=^|3d|lfycAfD)H<64U>i*d`|$7qB>|z?=vXj^ zn^zSWtM0t(En^$wK0Wn40dw|&8< zuF|!LW*Tn{vy*9*O%@_W2IGra#54)t@YG|`H_-m@WUM(0taCZvjn(tnPWL#?ANm$O zk{iBHoy(L}<9oefW#a4$$6bl=nV{Z90pOF}k4}sV*cQ;uKmM{Q#}t-}#UTaAK5 zh`upK(lk$fv8GX^FWccTzWcPnChRibDvGU<{Vc07!_eMeyg~r^E29vu-mJpjX21nw zB*O_b^KZ=#;8fY1VJ8c_6j`VH*|*(~f+I>3){vDHW#ebK9N4m*#NWe$40b+-BSdP& zSGlc;^OY693<(XTQS9SMnwptHsk-o4Y*d>r)i1svK18>_U*j??>r7CJN522O;aWDq ze~m|-+}@h*m$4yn8g#;osK;v3GMp)(S?+ZjPYo#Q*~N1F=68hu8a8gIPaguyHY3|V z^elY?>>n0wOq3utAQ9`)+x=HqWnI1$ZC177InE=cqwCxQ+(%GHq`xw71pJ}|J@NwC ze8d8yCQxc;yitiE75MGDaN=qC3*=y$G-w6;odwHlPU6elhMPu{3DGi z1d)|Rn@_``+(SfO;zK0KU7Z?)H^k?s@Ee&b?_RsRH>R9DDje6Y#9rX1n0~Y^HM>O| zj1`5nX19rvmbNL83A$yCims4LnAZd1fC(<2&sI34D^;?%S=__D|C z%aZxetHuCKr&LPr46IlwplqK{k84tb1KU3EXDo= zLGMLN6UVe2cdu}fyWgQ>>aXz$YA(hM8z_Kmn@_f=bJM?ZzS`gd!Nr9+t*xzH4gmif zU7WMDjJ3U@VptC83KUE4yS_mDVi!(|&Gp&Z(lRE-Ig)clm=h*X@rUzQh^6xiTABiNm z@vb+*0eo=T?aTuB6OjDwzTU+O%#hwDXf(;wOAdeewbhpb>E+ZH1j5O|5H=238jr;mi$oO51M zrAtRCc+2JW{wH`5i^`l?TW`DNVvsNYh&!dbqZmQ7&B^k9p_&h3-rM zH7bH_XLQ{i?lM0pfXsM$jEd)xB-zMak4rWqiGp`}T%gF`FlL4Lq; z!A2Q(k>idIOIyvYQsWA3%fjXveKNDA*iVjl1S)E`+nkRhdk=bhrEpp#e34HG!*ICq z4m;Z|E^)$n=q$5P2%i`%$cEXTUh@|SdPP!M1RLoyThYNEWG=}57q0dEWYMrmB?{c@ zp?%;XwRdCCcXyFL;J1-cY$bKu4 z+&gz}U2^}c2eU>v4A?h1y;;T@GfQi4$I$y_^!7FO3zLr9$Py=biql|pM5G7e^72?N zmnM38r2PWJhFRttzt+lYmw|VCaYmnaMoDi&BXDA<9I$nh*ByEdn>^>>c{?zTD-I7{ z5N`sw*&ZYto{5~z5M1nYyB2Il8|WfP)@gP%sP6v?iJ>Fx(Dc#|)CG9_MnX_8D<$CQ zqi2EY*&w|BYI+84TiXi*)y9d6iw64#h-EpGI=-C(av@NaZ-^=4~4rWR( zd>r0_%p#ro2BY2B!(O%Hr~tX=YY@WYmnAh~ofh!7G3LW;ou#EszdD;D{nN*e{u^2X zK6gn|ywe1|)y|vpf$^Sg>VYmEq4Bpi}KNk2Fc^;l&%O~rOmr zaD4xu1%(|io44-Ay@>l!N%!4&EKSJTfC>aEB=Gn^cmS@K23PP})-<-ZE*%CLm)@>R zvQXW=pss9 z97fw@*jNd$?!*h-Pr_I^KM5$I-O_HlWm&cZ3sF$C3)QF5&RyVo*75{CB1_YgoH?*9 zq(dz#bOY#TgS?~W>@h)FOuQVN9C?Zc2%uw&ZKz@U-5_fKu8mRnJbi9K#RFSP(3e+H z#{Rf}%0=!1%j&=d#T+4uDu_xxi$0xcP&1MyISN^yyGyVP$%op(fE?+d5ty(_<3Nn# zC6yO}Ezw8blBSU#O{Y;qfw40m1Q?2uhCM(Kln^!%ulZ8HU&WRC%WBOIhtx?tQ4eE$ z@moy=onh8Qi(gH!{oh7~{W`&EX)pbPox#7|`PYS!5T|go2BDu+1^Q{oU=9Qt(`NvC z)G7)-CNQfJD8WJ|W$gf#Y{T~uJ>)yyt5@^99$zAueP;89G>3C8L?&Tw9*SARyCxc0 z7iWSE`GYHoK#0-|CYnD!L{0kXw-W8jNQ%NSy{6)xeC11d0h*AtLkxERtfA39d>h)d z4u>sVY~Z1&Y0u0?bo%qv_}mn&t*z~&=2tLLASWK-J|OYpDwZZ`ruKHf*?m`f|Jz!_ zT$H~+zOTl3MhQpnmk>|X+AMjU9XB_N*;v|Z0M~!Nb4CCZ|8Ef7d6%~psZ@YS>R9B}PspURSY;qOgqQDSoY1u~AP0&@Z^JylgOq?asum$R; zO^U+`;~R9xPc3VTz_+wr5Ajtl8=epLAoJsu=MRGcg`$)Hb(R6gSx^A*#_1AE_lg0b zv{0>5S_r9R8=5SOUkK~T6J~x?sx|RhoUbH_x4Zwfgor``23p1g7iDT*NG2?y$0$Yv zsnzx^44;Tgv<^*2XnaZ}y^fMEAhj~*_>7U9rH&zpwjuBneEmtRn%V@D0TyY3bNz6Q zvIP`5q*YP^pQY*axqdGyr}5L?bTYy%IyaO%*kXM`?qNFyY%v74Iad1L*-2nPyZaIx zXxKVZ!uwkt)z!|!jDd!Qxp@2UXW^8%xu>=b^qSl%eNv2TfAiQ>B3i|8gM9NcqKROI z*!lzKR@4|Wma>`rJ3J@~^JMNZuRP%!&YvkisL{`Yo5(JYCiMXASR$g~Rv{Horw?}K z|E{wC^8uX?M*T83y5k#wMs$2@?@psY>1Kri5A?QvVhiGs18>Ht8;|Z0NR6w5UyuuW zV$~$8vLuCuEn3f%r>^IW!evWi1Yor0?VJeG&6gK5()SZh?FAnyxVlCT1O*$D@$V{m zJUs-C&pO*F%MzX}ni$mAyCzA?B$0^B88Q|qaPL#Da7KycwAa;XeEFouFlp_&s=MQ2 zaSDq_>Qih{U2C5ujqB`PmRXf{(Vb+VTeoPEotO}p;{R*(b4osM@-S2-{cQB2wWSVL zsedzgR3Jnx*a}QmOq5j^xf&q^Fy2xOX-9p*cP-M^_M*p@C2fXxgu+Wj3NK;du62mP zh&_oHPEPma8JoI5bf}?5W2qnWWTT+Q00Y4#Rr+-C#JhyIan6P`MJVc3b|Xa9*8gViID7by`j)5H zTl%Fk1TAB%PI-%CZ_B*utvc}sKC)n=+kOHcQr7};IchWzz!E{HOLEjX(DXL6pUyIS zZOP;M@&NXnlR%;kQS6XI=69DXCvLx_iZM{1DiyT7o+nS|pbG3q42uFurG}88*WO_p zqx#^L@``GgH@z^gDZz5l>?d^5aD7bvoaXBEOI7)Me-NBFeIDlUMc z!ie#2c2H(scESOHii{GS>-_pIfU<{HbAYl0Tl9>&Uu~{5x8d!14I*5b7~76W1ZH4$ z>yk>QM3H&G-~srBr0XA5)veSM94mh940I4LR4E_uq0(~l^T{SG43Q3)b70}fv;Z;(O+!gAwg zF8)td!`o2NtYBIlmTFP}mw6{fA)lv9H?72_WCmVyuBt+~+er|cpwfZ^rKR~}AyrNTs^-KY5b=rbkr3Nj znAKUPVOC^hkdb;P5T?0#bY-9NvE3nvike83#$i)kQ=PDY=B}2QB*8SLv}}YZU;{I` z{a;j=(3eZCH~MD?^lTcqA_&wLBZlqXT|OjfJ->IPKj_O~lL~supfTR3MQSyw=&Dg4 z#Jx%ze{O}{`J`0G>I;iON(zY|V);XMV>{QTuhCwoigno$Y0A)~SB@YTK)8)A-E6A$ zYR$|DFwEF#L+|+24k5XSFe*$iN{(!=S(*M=r`VGGyaxHwx?Zl0tvstLlYdkj`ISHc zI!AH4C6@CJN$r&2Cq=PWS_Ao7x1xG5Z`GdC4OJy(qS4wVA=jUXt0wCNV%< zpzih2N%@5xsfhZ?3eYu>{X>)jGy^+>$`keE@iT2)slmCkkxfscNC+5ejV`Mlk;|E#By)1Bj0~_?ZiVuEVCR z73#joD||&I;Gd=r zAqZ$7idgcwV~1~Dofr~$;Ixz9boBzz%99NKe#qex(?yNN@z+EQeiO{D0n}t-FfbYc z1&}}+hr*{_C&O0nkt4QFMiB0uev?JzYgIIJ8uYpTk$q+%r^BBsl=j?gjcuJ^wbGgC z4WJjdq=2q#4i#inrZH{^R%B1KPI>VnRoEp(>yw zj~x@dx?<42JT`_3$`Y!$Rjs|If3JbM8M}HZl?8ucqtf>oOV6xr6~$a|+xxJ=!wA7k zGz3Y~IFW(V+F%x=t9GT>NlNS8hx+4!B|4_Ig8>|EHv0@jCxa>Kj#=*s>%*4oDEnWS zBt@NN)vcI<(hgQYfhLENHJTP;0jKxx-ZnVnJ3gQZ^l`Tpq6mWP%PE7=@DLpn(aLnd zGB-0JdWu4=Lhob@d*zpEgjkpDbj^=%o{9W*^{EP-$?|x)6~AJlXC4!;Ap@^j_DiNj z8Jd%_-L~l)F!_x824-p){B&v)BTP^{c5nnq!o{7piw?~N=GCM9NwrcyN=2u?BFjt} ziUz@O((T$nwpY0@35$!3ibu-)3O6mdKs9nm?m zJ5e#Vjph~tuFx=iAiO@sVhPpzHYcpyCL;LgY$rye_V<-;5ucrF`fUtXIIDkA&EBvf znQXa!c1dBjED7<|5ZZ=!C*V!xw5~(Z@w}cHGycLtvBc^90M=I=&pww*x066=dU4Sq zbaCTYP$V%Kt48|3^HG($_lT>efyI|Yi^ixJG9jJCW!!kkdAAh9qNO*dtzbuBD|Y`TY67w z^<*XU-*j5rl#5-TgYHMHpQX%kkeSgapNFOCZUQ!GJ_7#>&D>0~H z%0L8CH-{3+cXz0< z3#zv`_hMgCU+YsIg}6|9-(M;nbR0kYZ?t!KP|QEbvn(jx8Ne)AX+BH_oDWnKzUUt; zx~QwcLM%(=rB7OLh_3H*GI`kifcAsr>=?2BL1`&|)IZZd&G<;Blq@s+bcvQ*9dJDy zS20d3<^=w!p8~`|qEuLJ*PaUEchJ{6G03i(4`IU|MD# zGV{Qzz8Bv2@$_jD#MH2$OW6XCJ(WU}4So*L+%ExkILA-ONyAi&nlA#^d?3U+U%f%T7qHl|R>TrZ$4-(%G zlm(b?y)$>cBr=un5~tucO?$X2<%>z>w$r*ZFBqqdDiQ8YD>)mtjVpbD2GkXh#p@r2 zTay0#kUYz9$o1MX%=`L-e#ASsJ-#h?N&v$4*JHqlg_q)lk!SVh;{5jM*x+)Q`Y3cK z7KGwP|9k1;y}@Nq8(s(``V74s;9{<1FQzc?V6IW$U_=@UwJ+k%2zV57V@UT=x>NcB z%+T09(43B^3;D%j5ZQyuLE#vH9rg^X6xlDD^*KdH|{aCIaj5M8B^55WV?rJsG44 z>b{s-n+0ynA97hhobTY!paS~`-0oJ76Fc!&zrq>OdGMTJ0f9vPr_#>fe-;Fc3~zOk z_yh!W%W7)S-AF#00VPD1j^DH7)EABxfcE$5Zr2Ke2Lv;bQxbI7-GS3Ax1EHcz3Xl)JTS0BjJ-^-E`AeseA7 zsps)u49rwx$Q@kG>`Q`yv^ATu6gIKv&Xs-m;6FaSmvpaLS$VGr4R%$peeM!hULZGH z&T}OLnOAROy=&c0ZU7Vm7D)mE*}CCL^DQVk+8C)OFisX*sr!^jP9V-2&x-8-9Ea`ob*l*Ri_Vu6cZ@y~uD&(VTJ$Q~1T}{+M3@S>4m%~Gi>CSSs_)*t z`AH9=KhP3tvl5Tr+}bK?kxR6ysZSO@w0(On$ikvn-Butk=G`{RBmvau#x1zoSqDL6 zV{MP8KmXh@c};H;OCPD2z@(|O>BnzszJCB4|H*IT^03j_Nm5e^`x0Fm**PnQ``7pA5QbL_|6g9_a|8q;`*%E75}SMRXxs@3RB)WUx() zbQ5w2dl`&E!tCLZ=q$H6G%z~$Q0aLOf5^2Q-dWaP3VWEP<4qeYy403vH4V$;EovgY zNz2>HGwnSSX#5cKP~jr)`?)F6SyfdvucAUF*x+$Ryaym25!k$-Xd_QICvwDNFEDBxfhkA&cK6Xx@12KNFyE>MT}N7;Vm zC=UGv4`su4{*{mB74+rsx1cSPog_YfYj+A=azvDT3qn{$E%m6xRC6oBte}3;E6g8L ztP7O?e7AfH>u`QEAC68jri2U#d}z8&*C~LL>lfwep1Ds#%_P?dLz(8%Nph9@frjPD zE}LR&6n+uhQ_;=Il=aL*gaq_Pl;|$H@h#X4Xd1PQKvLAt*SO7 zi_m4v%?nHb!Ndcfb2v^5M7taj#(UqjED;~bHI=F+WqKhDJx7C*{6^FuDbcN#%5r(S z)ik`*gmn`_!e%%0zNmdT@VRo`Cm4waB*Fd3)#l-9p1sYslfJ*gIe=&KClm3u zL4~CsOQHn!lfmhug~yZcDhnHqf1QdnKp1BQKM9Iw;4MOLrtcSLINC7Ext9apk_dr1 z5SD@dMk<)ma|HCMhPg;y;99wD^yC1S3i}(VD*x=_vT$ttMvL^~H?b=x_;~d+h!O-s zNi{;yTN({60W3h}X%A7_b1k;TEdc&L@iSsZZNKK|H&0ik_P$$iwQGHyJpxth#&LMn!%-g+xE+?d zR>){Ghhloy0+RUz2qX%UeJl1J8LNY8%Z3PLO{Dw+)BMfohYm*}bvQ8w#L#>Cl+QP_ z?=C2C#Hak08Ll3&t-t7r0QbcAzd1d8^R z9rjy0+el?Xpy}uuu`HzX{uPgb=J8u15P^uWq~`L?JZE^@!`O1Lmq)|cJGKV{>1I8( zeB?J2pc)`17RN1((>ejDs$*EpcPIPjL@pYJB6tw$h{SFsOoWE7LTndLhm$XWJs7om z^SDh8kD~KA!0;oW=zuA%Tf?8NF|CfqtRo-WIg{}H->F>`76-iI+39k*^B$=kz`m;M zLw{j_L@!prcIt@8O5O#X?k|QkZ(k1m;_KswJOzmET%|Wdh6S;X>N$$WkdK6K)o{mx2U|u(h@6ure`hf%sVY*=T8!b4x3oQ66H~(>G}1mSPTrx~)}QnP z-RMXxH0YLOnS#oG-W?u_-q+i@=V$ajT!iP*VJ_m5dAFyK_=u4a3f;}P_9|GXjXos2 zd9s3JDBA%+J&(jv5D&+M7v$$7i9FA1BCjlcT&FtXwwm4 zeyGfje@A~9fLyKZ@WdZ{4-~7~UkG0z{7wQSoLm60#)_I+j@Tg|xcdq@%}u^fcl}IZ z>umo>6X(1XQCL{W1K9=|wjZ1OBChzZ@maO9B=h#Op#O-^1_$m3`~e)K6pf6P`w@)u`#8xhaS^%r@5L(QfG72J|2%>l1rFIfuN(E#Ouxw*M6ohZ{Q~%bcO!@O%?Z$CDNK3IPK!5W1%G> zslh%Lc`_#s!Y#t{Kg+F@<~G63NCKlC7heIChqvbbt zl^kDgNn7+DX^}afg6X(weNc@V^aiD^Ih-4thAm-DGE75;j8wI=^?Yg;#M7@ zY;)-wb_qm~D zIanwuWjS+E3w43@mZW%r@ZEuG+0#`5Fk`k46c~~(kj9T%t`3&jzN|%=YPUFKFHjcE zcrRJB=0sJd=2>9DqSRQ4^_V+CMehf-S*?-`2`F zXYSL9L9=rr)CKrjF`iq+J!{t%yhQ{I@miJ(Hs;HR#M6U7y*)#TVaCGp)f+5bA@Jal zF+;GuEvg&()!jxn+Q>*R3?LE#l9V|n6-&4Sn}B)5(iX!F-Q@{}zHJdSR}7E{7a!(| z_^=MO?CAeF7Z3=;Y8_^L6Ojt#g|$J#AdgWNxv!oU7yMKH%F{3a6E2~MsfI;<>{J$W z#k$?x_FROD0TeLy6)zLM0hU6z98FphmIey}_R7Tt7KyqlQjOW#vZ!HSAjbN;-i#5(by{U-j00)>o{nIaYM`TCg_ z-le-U4xe59yAVdhSN%*tD7~zhSQ`b!w*ym_JePyuh3CiOzkb$zMYHB@NzfUuB`VS$ zMl&dqL*PY9cI(PV>rfF~i@*5&DY2bqAAR%``j2J+IK{tpkhuKn{9s3z7MrjZIS1ta z_c%G}E}S9n7^ynND3lal;V%W+pjM@?X?^C0I%1@?OESW}FK`lO_&uM4O^=L7BKT>x z-2|g=?#0l4M5f>el6yDr!yAczcANptZ@`)I{g= z+AP+P>l+g-PXr%k9)?ReBwm~2L%v>F>mvy~Zq$x9?{`-P^b3!6JvRD$a_48CsvSYq}@F4JqA|0wLBeP4HnG=l9jP&Sr(~;_{1F#!saHfdp>DCWia>Mg5H1Hn#O-t&54%d~OPV zR^fXsOZk)DuNdXlEW(1cq)uu(9^l#aCJnc#PX=;3PsXo*P~`}?+B5qeo@TrC>Nfu?0Ng-hTwD-A=e%D z(HY>KY-3z8MVe+}BMjbSmp0>3IX|WQOm9c3p@B8v;Sr?R01YJSw+q1cbxpVuc zvB$gmE=^48=pByvz9&d~+8e+lk^p!_qy$2~X8PEgWBr)5VmF*o~}!>)bY&Pf%um@vn|+vEYmMx=4#R89t*3pOZiORHcr>}kEf*pe?rF_Sf&G%E z5}@?7BFIFh%XRyo-so1nFI#DNL+o>ty&~N94HH%m28(>gFXtKiQ-h77`Cd!8F&p|p z!JzNeD4#*^SL3zr7re;pF2V+BP=eH%+hBftlQ`&_a%NK*s#yCtM+xe#6RtUGt?i$iUzr7dG{8UC4eG2||O^A?^}Qw$z~sANzmZy#Kn3 z3B=$r$oa7}tM}CT(j|hgG5PaVGJQ_j_KherJL{oxG#K=K)#;p`%MWm-tt(7JqMD|MK9S$y4C= zeSU}#{z5H*O}!7%x3i2k^ty=#w2cSK-`l4tHZ49F_t7DJN=Z9(W<`os!T|db2c-dj zmqbJwDKNf<;leUhg{Xr*dz4Yy<8tOb&n>?Au(YOE=bjH>)`HVnFl|&?92IoUM~iCA z5b$uM8T^O}j*n+IAhI@$MT%?^7Y;`1rS}WF#O17D=cwp)_Ke8Lal-Z$b}_Xqv?HSu z!q@@b@LR#F%%Etps~s?mW2b^hIudZe<7N|(w08N!8FWA21=kZ9^(}Zc`Ld%rWu@x@ zoRyty+)~JDO1>9URg0R1PJUaZ)*_H4eOC+@XrMP^E5Qr!W1-Zr z&^_`ejrmDFNqJ9LX4tfwncpceAt1<=d$Fx~y1-)OU9I=~`LI33nDlsBAa3c8jyL3v z-Hq1rff4NA^r<53@<}#oHX$P+0?GY+v(SCh=Sr z(!VY|4Od;z7bvHjk=mgmK08Dt;>Fvhz6`aeE3b!wXnofYzBq8v zurZ>9k&77YThYq_;di-V%F%u4=@Xu3Kb~ORlNB5PC$0T13IVdrWUNz_yC#mb?s))2a1?Ea1`^c-2Bf9n_yclL+j=nI$oSuM~aJ(fzUU7Hk%lY}E zVmOHqS*DLx%W&RG_xcS&nWVROn~ABJTo9gM8{k42h6Mp}RQ@&rK&(=+w@DTjH5aON zQBkhS2_Z9|py%bcCz2O(n8t=c2RXn(9M!))Gw^7(nXl63=l;FP1$G!$21Mff1o_FL zog$AzCuzZw5BzD~`3iP%Kz&PU7Wy)iLzXcHP)mfKVhO+{2K4x&dUVs1gFg_^6ezm( zG5KQwnl90KXG}Mh>Pt6cj3gSK+*0@V$9b{o!D;gPVqsGwzaoci>`}f)#BTh*Pbao+ z_=^1x8~Gjdav% zL955sV&JZ4WHqF3XPg?~ye_q>XaTN)4VhU3iIgPSp`VJAIKt3`*|;(Jk5y5TDIh*_ z+CJ3Y`~3DtdLKrgHLEjW#981U`m!$G72DqoKHr~VqcyIV=X?$=T_~P+!^ytR4v~}7 z?~A*d<$+kF*PN+lyX?lW5!Ln#Q|#2lYXJF@(&IA)_5`}ysW?+oHi0F_vZGRpU$}1%L+*#-9TS-K~;{!$+XzNiR#A1_=5Yk0*tU)T!KKeqKD!8&VM6 z1Ee5M>zlI9vzL}?d6x5^TAzkYHZVot)An87SO7`6u>9M9%iBLtvdQ6t2&PYq4`*BD zKOf!7IypOiGX3n@0g>C06vKKB+n`ELp-9S=b=5Le4)uBVMMAmPk!6kE;)s5}Jrbzj z0(?17?oFoKAL%uaIw)XpB4I$R&g?jAKHjie`o0RbVCYgA3&(Q%!#1(Apa%5~Ea>Tv ze&%9>i<);ixkA*O5n%%R^e!Vd?i->4u|R`h&ryKwKoDVrNBQ^)bUKg8vF!-Z+1)_n z_Q*{I(Z*!*A39@WaY<9rUPguY_DiQX0|T<#d{v!i^BfPARnT!Mm{h)M^VGU*ChxY!ITKjw9Ad9^%mu)i zQ&x;#!Xx2@ZvMtXfLcg`j(f7W*E3@CXU)rPXK1HaPUT7&Hg^K$EIW`Aj&s>inml1{ zIGAG;-<_6RP2+A;)#6q*|B$jpR@yI+w$X1js)A%0Y-ViO`ost}4j;PJDpqm@%NJT z{Bog)MqvX*^=n2N)BC~Gs+1=$hvL6Ek8EoxQJ@tad?;W04ZVpKN%80G|MGMt-OhG* zF%3iB3iZ316r>V(Q1-bUHWbBGx&Z9BIj=DFZ=1fm(5-^ZD{4cG%J`?Aof2AYc;DTV zLt8WJS3H3XFt;C_5j-q%DTPYPxZ-7{Wzp^4S9y*t8*X4n%4C14{M$zNa#+wlurX;9 z48I~g141st!64r{<`K`!7c3&U+!-qZGvJHL5leyu8qpQ83Q1c-nI1him&``4?BhNe zm(@7kY`AVctQ6@eA51v<8sdR#N4kLP$7!ZzXdZ2zlvR;LsLY@LUQqx2*(evs2xOFN z_+c~>em$z=b-cUfyMas^7u1)$ozh`f-MxPpv!n=p6wr;RyrB1{1c&ThosQ zQ^>wKL=m5cvRIz}KXbyXqtH#q9b=zx7~IIxY4Iusj3%ktKO&k(m%%B~BxTQEW2DeM zP%r(cw$V^ur~I=dj(584%^&p~&w~BaPKw~KHhYj|_kzq#Aq{q;!#V9aV3#os8)Z_} z{qg0TA<09>npxBe@eZn`=+}e>gfhF>l1W-R>QhKo15CBgnF08!6F=hd`WmBpr50uh ztnPCAQl^73Nb6t3gk<^_0+9mWmxrX$6Pc2x5ZPvij!#XSVL*cBLjO!nU2V!M{A8ks zxmNQ?>r?tP=Z_pWSVTQ?DYwo$$q*r~dt=j|oG`ZXi*P@A#s1P55G=uSL8E|3pJ&kv z^%J(UKMhtUJXvup*|j)y{#y7zo!-;O66gMB>HbC3i5O^A`~tycKRDra#1wpLja(~j zaR61<2tF&(&VA~^G-1I;!qLLvlDqe@=^KrW-}b?Wm>LYZ#U#H&@y8G*xS~Y-1Dt-o zU_vL_-w#`ScA4BXOTVPRg_j$XNd$sSo{rpLUtGP8B}RyO^La<)T5N}OVHxN#!x0qq z?HK7W+K(%QC5w6y5>GihSpb2Bm78Kz|C)kRZ=7UFcI0lf=ny6`vw};n!N)|f52M%O zIZ)f|FzRT_&`bO>PPf^rHacy-#n$?LZsTH57>IbYrsELk;IIpJApXZJ^FMP<7#KL< z!y4oVQGl6#7G+UQ$ZP1Cnt9PrB3tG+5LJis5tFMeKL5nme z)=^ub_H7srX#k`f7DQg74Te^#!n@E{>~G4+%l|f}o`cydcoq_MtZkR-BKV2@mF5IO zp?DYe&oC!!l%H@y?*qaV*(5&SJD4o68Z@Zn^C+<=FZ91{|9@<~1yq#p+BH6efOIzu zCEeYfl7f_^lG5EN0wN94El5a%l(fVQ4blVB(%n7(hx5MQ_dn-%zO`6u23QMbp1Gg< zzOKFZwYU3Lm8f&x%SP+RYSWW9HLLv|VxRGQa>WDJVDS_XfHHJv@5fGc@-n3Q84s4i z7uu3Sq~&{kSbE@<R zR}J4Imw~X53-qd=qBRew{sG$63Q^8WKUo%n?rWDb0N2K09*w<_tuZrY>xeNGXU86k zmoHb)5$}Tbe9MS2IaxRbfsk$R3V$>bI`*=iqvxSu17S9W81*%Se?n{rV2HYPC}UQr z<&s*3Jx9>r5+*3wgN3)~DI<^dqAd=goBv(DaJ=g9qf)G!@%Br4dXMBdW?99)`ynlC-{h!Ue zxd*`tV#q|`gVNAGeKonr8)esApw#Tq0QCjEZJB=%I89VBePzn&gl$5IV_Jl*O=&@v z9sd-kqX7l>Y@@6@i7G%Y&OZIMIU!o6Kj;T$AbrRx;{%`XZw4KLu1YQ_k&L?({M&w< zr&^)iF^;uv=3A@*3PQs`_@6usbcpByu=E(AJoWD*Tn87f=(V24S??InD1X0Xu2}>G zH)NdM&nb~@91BN>Mzj(d zA&D6nhwiNf`2v`CIm7@_Nl}}Pu@s%~Aai0n6;&e!r!{)5W8#QKzrypye_r%?27DV; zK(yo0Nlt1D?!jRf`>W?4?9Bhb4?D=RnuSz548l@C!AwgJESBx427=gt=ag$e2t2R< zrdlxE1-eDg@_h?QJ>_x=mLk%d&(gYGk}b0Z+F% z+m)+J$>cquDtp=;rN>EHt~0=1Dt1O}j%_gN~`gi8Eb|Znim%U1JmNeqBY2z z?atk3F!rP|D$eaC;PA=G%VT2GuaIu)|BMkm%u3pHC54Ul*RFjARd-Br{FbQj}hyw)^edYX|y?OL>WNE1QeX!hdB9#kYD5 zuuk79y)wBs$4u~gV(2H_0MEJ)Bpe3$qkEDf0QIx83&^~mjHeoq0T+%9ef)j3LqCz!E!hVI5e;CoRB=l9TwFdT<##lcu9J8W2va7b zy5m7Hb=&SaGR}U)Ub8;NOs=z2qqE>x;zRt3+SxZ%gu6vSn(;cH?q5M<4`^RkQ136P zNa+Cq&1K%_yLUsEj=Y*jY{(k8;x!e9Ie+h7dqEFiniE7s%xVro_NFGgww-PbeGMTM zY5pjV{s(}ElGAckHVGN_%r)%dajDk6X~xON4xo!7+_5#{E{ti6o?S9OVv4YrtllEm zYaRV1bX;IP-!m2nZFI$1zY3XbGbPCekBW>2-2f8df1@Xq&3(|C1Gy-36MX<9&E(aC z0BVV!Xfb6KxxN0@9wzRismO}R2+FNpp>t*Bpp{|wdb6PG#6|s_+kfe~sXZv_A}72m zByj=#`}`v*eRfp=DevSeX5?9$P_KK1S2w2UX#uGov3WyRAPLj^nzIQ>JL(s!H7!$#oY`O@#rPw{|zsBkT6t5lB& zYQQ^*H07$$G=Gt#por5&_@?txLXxpr;OBz~tmN*nsgq1~QSuX|nV)z& z!k6L^Ktpnf)|E*0olk7BJ9766PE(-rj_@}h6nhMW=Uf`T{{E&u5@_pk!mv*Nu_oTG zrRp;g-g@|PiRL$>zi|=2T&QYK-!ik$Twzv8>FI65QWHuDMn!DJXWXCrB66bowWOJ7 zY%%^5(&I)>CmNx6%MWys=KRK1qlw6hWC)giY2Q&Kc+(SEu%45qe=~75J??z_g8TI- z{A~_{*gpu%C!pLOk@GvCGBJg(khUBbt|WIq9sa`f)PRsI!5kU=hcvgx$=jXpH=Wjh zS%IU6s}p`saFz{!!fK_(@sw3m(!QME`;g;9@EJolT;JFE$)pTI!skJn(G-YQ;fBAp zbl8c$b$mT`<>SWgs1K;f@k-rimE z>?B{Cu$YYdamOFDva$+0>k*?xa3)>m9FdV<4;s|*_1B?DBV(@rovO7+F6#KM#c4`KPS)a+aivVD zq@WUKX;m}`dy%ZTcCPp*JL!V&5vaGxY^f0RgDPf(bed|#!F2D(@j}?0NZ+%KfWdg1ow2zH<4T9vru)w*kMDrGTx~lx1|EN_~l+PbwYiD2|KJJfJ0(98_4k`Zo^B54K zg(<`4U^re#t`4azP?=-WI(PwGGq86jq(5n>E&qNds&k#Zl4U9DZHu53_~)Mze(v%t zBpJ;tUjC`9?=2q`0Y3g_d}a=o#M3%n4$N%Mu{^0X!1QJCX487sqGdwK{0WT(d`-vz zcbvBIV2DO`0$@YZ`z#lj+|xEPaqR!?3h$tl@};w02l95Sib_f_QX8=?Z+v}|DiwyG z1lJzv!Qi;Qz#G}LoW{n6!9v_LslsN@>5tFd0H+y1Rd?J(vO_TJ>QHy56t=XKoA3dg z@squ?CSMwuY2Eo=I$#5!>8d#|NVUK4wfx zGZk+*R-T~4uwkdjoo+lH#J(jj2ipin27km zKs~2suJ}%q#BY+?+~A`1^_!=6|8HNR$miulrHzCav9DMCQyE=X{q_9)Bl!U;w_PS_ zxj%-?qQipdebO|k1a(vj373i6LzVdV?*91=GSH`bj9;t30+r8`R`3mXeQYvz1VoD1 zq>)mT3+n>ObLykd$d0x~^K3xUTnbI1uAMhdVP6Q-pkmJLL=VvfGSN@c)cdxJeu|{x za?y8IF5>GwV}NIjaVsbbNLgzs0{cB-q|ME97s7Y_K-KY{=5GN&ksCabg$jO4zkJU| z?4nz}kFdA-ArCQN%lde-WJ_nkuUk;#$n~J*(1+XA%3y@*{(t=tL$j9p|`MekDbTAUZS7v=loZGbzU0TlY{Ljd34q|NAU{ljW@z*^EsEE3*D zKUk3bx%o5_FLd?(XeNc;$!l}bup4I|fR*LYK>=rfy!+>!8X{AO%2>)yVW)q20gsz; z5U7p=h_)^*r_!*KQb;P^k{<%(7B46|mPyBjK3FA4i@FU$E1*r31BK>i*x{ic>~)%q#!+bE^IyO z-`5lH90^}}>KQ08jzUEbh?bwQ{K=o(9ejB&((@hw+A~2070c@SP{8zJ;>dq5+pr!` zuMXG(hcS1Q1rR#I1L4Z-lx{q@c9ou46bX0|dP!dHX836Jx4G;+jSVm!6hVKOt%o;ENZ`1)|uz(Z|F?wq! zn9=BvGu>^WQ{B{W1qAQ&6xaRMPCm&iaFjKI?_Su4VH5Gn0A1*7R%X>h``8dweNK!~ zB}R}PYPN{KAdSEIxFQuQ;OCnpBqjhf`Zbs?`F%+`7^c{{q<`S^Oce+F(f zy5^%A{kC;307f~^P5}`1as*Eb^04&-h$6{S|MN#Pr}e(NWY4F@?U|dBy?*tjb9_I+ zBAb)n1Jo%p`3~Sjs{RcBb_g)ea$L~W+j@Uo+nP(+6YGC@tA(SX1)Zk-|==J!KkjF8}KLS^>@`V7R@V66u7cnV7u>Q zPh%x8IwN;R34w2>btaKljzu1YCw%zU2YzC&jxt^3ftB!zu12qL{u;@0el0w@qGS_K z!vvbsm46riseuS&TUt(VKZoVU=YMq<2f3u27O!Sz6M|i%VXJ+2J|-H{-QxTJWKygi zJn7TFy9?mg??w0A;Gmwy6f?>sAYcbN^nedt$@{9O{`$0h@4+sS@)(7%A^C%7I5>1a zqesU8HJE5V5G_8I#$`yZ#r8Jn$XFzJRd#$8=xY`%EyJj?p-_e{L1Y}7sIdKzR1eQ7 zB`qCUM*e2fR2p!j;55vCYxnb@h*PuGtvF;!Mp*|`wj)uHzSp)p-`Jm86Gspzu_-kx4w1}1ax)ns8?9bkaaI7h6To*$Tl(WBdEp5 zv3EV-U!(JhH0~ni9P^B}P7dQ-6v^6Y3;RNFQ3$|%8ACquDE8pLf1F6?TKIR)7kI85 zfY_%XxdYpbCb?5b;q7vKLr|+taKEBog9y6j#DWjDUwU<(ftl8>jVhalS?#CrNul23 z)$|>t+D|nDi<6fkP}zJzmVDSB+vV2ad$kKB#|#1(MQkCyg|wb1gDkroqeS+u3oadQ z2x1p=z`D=~dUILu)P4kA5e`^_AGS4FtR`T1t|Wj2)@GicpXW788+V8Gc3g5ULCr{vAZxxf5dE8%b5&SM?zr^?YM z#oHq89$B8FSDARn22GLnjMoKcO5E$MK#qzTs*bY$7ET5=GR1zxudal31SWPPhgq7B zRtDc{0n-7Qx7%Z#x4gEl^vK~|m+96EkU=eepOdc&jNAxIPs;m6@8P~(|IitK@z*5jDgK*Q;kA3d&v3Wij zs(NAYDRb-Py(LVBW;N70+j+*y6*}&m%|Fkc*W;JZSKSvVAl2l2Wfm&G1*4D^xDsL+S|AKvkFBc;OVXZ6w3Zbg>{@D9A$Go7~cnTM1eENiUB& zPZNVBg9u${CetHPo6g79BSm(Hw&ra4W}##!otJ1L5hav=&oUsPkq8$|%z0JaUG(t% zt<)F2>U9|qYx=#WmtG^;Xm945fuVtv2Vfu~R4#J(Gf72%p+8&)!S*vYT@Ap zCJ@GzxOwF1B%b>pt+OH$!bnuI{QX3B|0m4l`QW)a1-@G(s#`6w5JTPupSTSH18;A0 zM{)Zs&lr&ecpnikqx-3RsJk1ea~N0=ELU3RMMi!BgMU1uUN)&e7fzfOfQhPBKY{Ur zINOKy(XRblHhm+@0_&J{9PW+aU49+#{4tj2g|!H{D0*eCf&cuK7V*rYgVBX~# zEMCMOg`<6Gb#m*V@EkfeRHd66r9!;cgT@v9u=aqXc4EFq9ep|1_CvpTNOu-sUy%`N z@tNOL;9EVK8k`vXXN?m&p$Zy^41e~lxFhQY9EsfE0dsHX`PB8%&c(B56&Ayx_gqy^ zG8_H0urQ$I`$T~#`5c}QX~B``o@?%?8EhCZ*RnihPsr$1U&Ir-uo|EQ%Ga*XP3$wx z5AM>;m2^Zzs8doqSwqDEU*~MiXtx7}VzcL}8Qx0cq?@$ZRd*s)SvL?r9KGk8-c z&vH2m`5uXx`T#d^9TE%jXr83mk z%uz~keoNNNFr=D%sN*jhAj9%Mh=btZ0f%e^8h`KR;3^qR?)5HIrV8JBa}H+|o^%%xD=1jFXd&y>KW zWeFvHk+`-l)=u=&A%Us%GrKr-5`fB{)#k^n*~T19XwJe>JvI>)X2EtXJ|{9U7muTl zW?-%x9#{pfk>2bx$g!8|iDXZ~ku~o!%=^0RdixcK%YaJJl5TvFccZp%@3+I7dy&$F zZXItnGokDjr>?m@?MI-;vv0nI1zs+BU>edFz29YhkV<<8Xm{v5z?XBwrKKb)N##MlgOD9ThyC^O~(J>dKc zGbV1}BI94Lxo!iMOf7AQY>SA9q@%k(PKVn5ub?=0dnxqQrDk8%oWp9~=~WK}T4USO zWj8|H#!;irL#%ZV$eugN=+Nk&)=HB{CCjox=q@m<5-UF3r&QH_)T$>!N&KLBtYBCMz?TbFt#-^*!sKIBT))@-K?@S@m0*uq)Dqtz~4Gh*DiySnF1iArz{c;eO!CfVUiM*ycs0TtGih=ym zJRz6$cRuN;Cx)HjR;1fQrA50W-C6JmYs$j}==nwzE^>{-&kioG(u$M@SqRKYB0{uE zdCU0%qV$h_W|j8%h9q>kA;N~C!&Iy_chF3hRHtV8a5YXs^RMfwne;mt03oA5?_v5# z$b0L5WkbwcTLMX+kgu5Ic>w;9c6dHDJFSvRtQQ_3?r>U!k}I)3e?iLUYO7!5R#_i!qjVTkn2z}ad$8@TMNld=91wV4 zq&pngq_(v`j_4n}H$j}j>S_VB?l<76uXWob<$zxZBDRfs;HP#a zI3lVfX6P3Zu3WZqjgkD$#p<#$Kj#qu|F_*Uo9)6xL?|5yNkQc%oS=e^gY|*{iP_G} zl-l2=XC0*#c+4*Kz3NUD!ZdLnXso;!8#{isk+I-@y34Owc-zXnoP+mG}q74%uq@k;qKavxYTK zRekeqQD0Pa+>nX@_cfgjlo+U~*1iCe{g*vA_GEQX4!H;cOSeVJ5UGO&HkAPtM!7{+ zn&|yizBl{CaaK(gZ-rwLPh#G+Cd}@04wWF2eRe{-V?SWV4 zYeVl@)h0tvoB7x*vJ9dO9s&e}Zpz^^@p#0K$g;!uG=70bu(j(6*Rz4+~?#IaAkm6jg4UOkfYXRWB4=i^k8&{wdwgc#cbF%zTC zFS7N+rFzJWgA3$?DebRvM$PwP4bn3vOc$74^iTsP&u7q$6|mc48r6I=kA-708{S5+ zF?cad>b`k^cs@|S4xf9*e;fMN-LxOuX5vt4b{$H;KritS%TJ<#8q`d3NwsZbZ`@qV zi`qC9vcji9)hTkr3U`%+@N&T*twB|~I>>|w3etF5|Mwv@SAk~Rc_%mLl}90yc7pAI zQS|YXQ!=Zq$h$~N39$%+ z!fj&%DVgi|6ZTD6NRKYI55xX0J=|5)L;S1Cm+1SDc{Gbb_NSug_!5kB3ejZvl9mCz zb?`+lLM%pEcph9fAsZzXQeewX&R4bFa+ z_jvVix*WGTmDM&Xj2zl|r<*e0c-1W8Ss=R69HcCP+#kcv3xB9ig$8Hk7Av*RmPlbDC{fiOw`Z-6pQJLV0 zYFb>DK35?;OL*~?F)q)Xxbq^lviu702M>Q(2&_OB!w-o3a$L;8fsRx))`ziNm$3sq z$`$tfO*J#iAS=xWO0wniVEr6Imk@v^Z^ZwDkB@0h*pyox@uUKP#{pOci>y{BVMUM@26a=)Flw zev`<5DK^;zhuIDUSJAtN<{4n3688pI5Dz^~e<4ZUgWF^3j+P|NWsi zTDrsXH&?dQGRoHnhPs}_N3Rk|%7`M)Zug}Xf!*r2rMRUpm=JeC%A6ung^%yyqKz)-NL9Wegjo5a)Fg!SJpA<+rog;8pJ-BJi9Bv;I$rgyuQ z=|QT$gGgv+>sk@8GvBJ>ZG%GF3g}04l4oStByz~nF!|w=oq2CF?{>|S%W73#jkx*9 zG~Qf++4--)MY-8BuQB%JVtM&~t1J3NKq)Q@6t333o%&GeC4dc(%1O9d^*J3^y42Xh zGM8?z)T@mx!G?r*s}Hx|Hao5EzH^FRY$rVSvG&LD5mkDw+&AsVOF8nyhx>QMFe8{)|n|x zzFuGuK{WJTA5L4SX5~rQxFZ}nmo(rV+!ys2Sah~!@go@#fH8{Tk)~%jEtv^+2Xvgc zxM^tF5D_54Z=|XOvFMI$Z&~e02;L0*x&CG;XaS@iX&y%H?u*LPa8!2QFDSt|7HG9p zrf78RIz-rTS@K;{Q!o2#-3xDvZ(N6n>n%^->FE8Iy%!P?P?7l6z6m5!ul^igR|yFb z1tpmic%VPsOqpm}%}w=hZcZx1^&BsK`af-v)4?sK)#Gg_+ZFM)W6|1tCM-?)SqA1P zE{TCN-kbV8-im2W2BBNf%=Ith4&P3aiehK3w`ztR_Y{9qS^^5IoRKC}^~T&AYirBW zo_-g$Px%=ngdSR&3PYno%KAQ|pDgGd<%S?tORf>J{IJSLfjMuMjf5j+D8)T<(hwK` zEJ7N|#dFsG*}p>>WXvaig>UXmmTW?6EmU~vb0Yrh9t4)XG%F3wd_Bwb<$*+(*kfnn1yBPeLitir%jqXaK&f4VheV_1HoN1_pTOBe0s>zqj}|sTOjaeuMJ& zWmlQDZiX}L-*syje*Mwh%df&9)>okX>;SsfQd}q*HVUbS*H$gZX658K0+5Y^{IEpg z0V0OLf1GMhXPmM&^6dq8GPMwUndnh7Nd<`)B7!H#15v#FHQq73)@uXXC4ZaBPzPD` zZ+WlD<+wQXm0KOfysxt;ly_TY*QWop&K??jgGu>a@)PvJQ4X56V#jor5V-ld#xRrD z_z4?)&(rPBU;gsEl9;AiSI-mG)$XDgndeqWE74UKC{&8&4L|);#67)QsI;+V`&uWg z*90&&e4uuQwapuM`qF>jd*?`aAgoiOR@+x>7+Js0q?rz&JwM}fg2K;H>XVZ2jqKMN zHhLb1Iv*Q*g4iIs>EFI04e;TF-NS<>6?KeAOzmiM?M1UcRm)V|fsby<1U0iu%k?Vw z#r?YuS{Bo0ofpS#;+-|m3;(e$64cO&>`+2}!v{P_Ucil~5EAbFi}=)Nk%>pMoKY}I z&4HLZhwsjR>hOBPip<%NtrAAEBp}&h!ICVLAa6Un;U|0R$4jAL0{-bQVvWFz`#=|z zJNNym+V}w7QsW%=fcxky6ZckyzoUq&>4oxt2zd5zyt0;wvPSB0yxcBr;pxgxST{`w$#j%&B45ei?I9Kz)FSn!&=@yrj z#AmPXwzu8I@4#cX8A>g}8L3=`cDWM%){RcfPF1FzGvCPQsVYsz*#3EFNPD221L-&u z1%;J<7>Lfl(ENu!dr*Cr#-U5#nmF^eKZ2ENGLazC$`^d6p-)P4KzLe*pQsQR%CB>C zL<2>S-_^Nv++G^h`|fGJ%0HeQBww* zxc;a6l1rKC4VLHraoHl?Gw&Mp8B)G-050VOcQu}Of^41EHE3TVhsWGTl4 zLa7vlNyi=`^+A->s>B?`N|OXp}Dh4Dh=b-Uee~5vceXfxi~hK3R3D0}c&@DjqzFeb+!nyb)skyM5tA zY8K*yeFruf51{7t4;Za5yd-KVs!!qxO*G`Ozr{=zq#0>*3UZ8#B7CVdz11C1Wocpw zRH~9)8MU;B*?m8WtK`loJ`g`I4W;{be!fFs=-nRsQ89>_SyU|5b-bC2m6g!2OkZy= z=-2g0ali(1Px~t!Bl|9v#5*aceFGg}L_Bdtj=grs)U?Cxh1MWLYP$z%t3IVQy{f9Z zhF9Do7uF^aUC*fMv0->*f3uuXZ_{H9seuDlT&ID}=D7pj?1`zI8Az5}HO|mxkCZ-M zja=v;ze*82CsT`sjc$ZVGutvxX2R}*$xWgn^!AxN+`pEtaJx*Hg_W&;ejno~{ls{^ zU2=YDEMXYGBig9RQT4h#-NAnP=09t#|NX9r`l+01mzX4DB10sSO{H61tte`qJ6@03 zh6CgMfkrZFbY>)_OE2V*&`@@x#I{uvYd@Hm zO*mR?7+Ngt*g0T4yrNefVlP9J(ZE~hy&2XNraJdL>agFVlXMakJyg8l@I~=O>x`LR`A@&osAGg*;2D_a9WCf+?=%0bd*uwCD@48 z`8t9?BYy{&)Nx3P{Kk0&p%MXgVeF6JSerp-NLSoDdVdmI+Rk*sJA`R7M;a(*N7i?l z7^Q+sGkAUL{^W^HNaMJHdU;2+GLE2ii4me$$|YJQ2oL~APZhRBA4cm&$Zla0wGigg zi;fU^z5wDhbz9OPf?mpMzmCz7f@yE1>?c*n5X8__C|ppkHPabuHT; z^zIMY#1^T>m)simo5R&(jNi9gOIvrFO+Hm8SBYwQOd8p?o$=F6&QVBgL!wN3-{yYI zCT6LfO}G5l$J#}KEP7*eo)veVLzmF|R02c^DV3y>qv4VTtD{R?9?dQXGzYaGr(6vK zDBJ?$^4!#%;-h=Q*Mzt>2%a>;N^}}mLj%**{!Gq-V;)!{$f1MSFiKPMcFrzQD(JMi zvLA%Z44cF#x&-yTgx^o6(RH7c9>9E-ac|mfmH}IeU%smEWJH6HmqhsjVN+eQrT&)( zL7TzZZ@241F!q{T1`?#;G4M=e(_cth>m$=F}5 z#O$E0I}18+gM*G`J_U#&3-5)8z&8rxZugk!zVuRkiaOSAPyRzi>iQex2nRYJXHB8E{roWXDDu_D|p z_>w9X;wBEI`Q@r?+~Orbd)4ZVdHBGZ(W6OcL!j|kr5MP1|KOlMF)kj z(DXl=Zv+JzU%YK&Qj^mvRhwcoA3QD85E87wYP8;{5PH@q#Nd;{WJ_hj`P16%jG`q06;7I&104PIK6Yd)xwPJ&(CuaYKUL+a%3FV=V)MJ zP$$3>BubK(5JeSve{XiAScbs_7|w8sx5Vw7{p-iyV}dO9b5p;{G}gmVZR=JQVHOyA zT&O@%Zc+Au{3K2b4|RAI>$?u3p}UQ)?rfaLl}V2Eq@0DAW^^X&zJt?}x`IN^1ZJ7z z^eH(>fxQEUB2O%wS|y5#I8FW>I8`$XDUPCsaz>%LM8nzO81FjxrP6_ zr~ao`UB%Txl@_)CH5h_;wq>a6tWSE3(S4paP8NRWqSZ|gHxMZrsy@b!cOd1KMA zenfua!rP5uNl^J(o|hrG@n{jROr>N@J%t_l>s(@r$m|3vKVVmF(bV(j+-YM?DHNWexGVIxd1Axjr+9wD7-8%jqoIpHhDH zPjTfp%0xjwXe}T>&`zZ}f9F{B@@Xub1|o*b?Ah8=^kf0n3=1%dvV+dW91OSfalzE~ zkK9$YpTT~%H?K*lqHe6`&S?(1Z zr60(=K8!qaY{b%FsN)6##GFcG`qeel%ax=b&^ocm)8Bt{F=h-A1CI$D!Yuv!cES^B z|5nQU3ep<;V8c5K$&bmfG>RTo`Zsv(so>g(+z`N$YD{oXTG(~zC8W~aO z!6l2{egS9x?HnX*zc8{cM~;FwU-5;9jb)3mJ&VlCN*PMcvI5LO9K~QZRK4}YmhqY4 zU%cO3I~nhivKzJaDt?J4m6WBMDgVPlFedCs0=X$Jd{FA4WMgGVqo|ER#+}Kyi}WXP z`$CSl*reVeib>cKXQ@+O41)&qg76&)E2(yqTm1fX&SUp@Uwno-D)8FL#Nfp~7WXq6 z;fhl3EX=zuUgfEMp3u(ESevApe%!W&(^svTl}veBWUD4b?3YmQ5oL0<^bP3rAZ9>kS4{2q@> z#(Ibi99x+`3&p5=*lWpOBTq0zQhN8g5<dc(PEXC5%?<5SD4B{{U)zT@EJ@X;n zBe2L_m>&9A(B&0p*`YN~R+x)C7Jl|2Y#F%97ZWM=t`@zgw`vRtPA^Bk@cN>xB)Ddf zS|TRm$+Zz2>6TMB2Y}(Kp;Hka^E2m3fKx=#ZEy+?=6ib0-8aL#eT+F&c z<|ne7_b0;eY>_~}1>S^Ew370mgIiC&_iOTJmxHQy7@RO61>EEmfY#OA0E$tC+K=`E0G0bJV1)}krS1?--2(fkVV~gVD z1p0`H3LQrE#*bjpC0yTx#TUGh0_FNySwcX#pOM}hJF7PdFUZqHwD?b%7MQK*f@z-t zE%T>!nvspa*tL0pYXdBTWbehhWoJvy7%~Z11zrUWWmcwXI(qjzWv6JQXOz2pU^LFA zgKzTBQ4v2k;kRVQYL6=z?Y=;v< z;QyCB*Y)M+=x?2=X!Z=@oW^ao)I;r{0RzKVZ(BEWPYyFE;%99y!8U|-qV{@~g5WAM zXN>)&%65B{A}nrTvdB6~_>FD7BjmENYW&Z0W2*=Y8H~g(1 zN?i$Lh_<4f>B&t~xkQf3WFO$2Z`iU~uf|vfb7ekw&vHBShLa9W-=_n)1LE%?%SsGm`kfi6z2BNM_vd2?FyVEGo^u-QM zns+Q$WD>u7IEQ&0&}ubsgsru#Qi9}9uQd0Z`{SrB29;v#W^qL{J|6GX+sHzLHI@i6 zQYC==G7)V9x1xl7+%frVYGDs3pw#}#!ItlMJR`KlX`JvlRH-&j#iHi_u!$8+Kv5|g zd}!=Xc`B--tg{6&7uPon5tMKEDcN`gv(o!CBZaqiztS8cywrBVM8TuckI?6um1Q>X z`8TQ;J)DPDE$4|ZY;UmdU@j_%)EOhb976NLKL#mxGir(>oK4z+{yWao|7z)S&NMafH3~Efa!LA5KMG zg{k+1C*?0uO3)R*h{xrhts#?gYJ?i{S;N+apF{aw{H<{sA3s~e-}}}7gw62z*gqor zYs#6w(|g>6>DD{LgIYEGwSxLu(~RTmH|i`czd)~0)q^Rmg!%^fOfQj9Lxx;jEo5Gv z)%%a-dTkj~z}ZGy!p}B=UcKM259i@XY5~D0oO3?qdx0yf_k%)ixk^l<+ZGylbRWl@v8UtH$w(qz6+?H zmMU%X6wr%yKm6mpR9oVs=#cQWdG#|R#2t$YQkUv;DV2M1CIMfCs9R5;5+zO7^;dyo z01I$-GF*~9;r*tbOI%9=rRk;T!Z^<+}7+eAF zISy0&^Q1@{q-S!}3`sz{UKI3If@J8io-CgWTG8yFtRU9h**^ z8_tz&nuXOfuE)hH6vgHazct}F4(>BCZc#B3IyeS8dQqH0VM^D#7z2*fhxi6(*m|~f zakPyZe_WJL_3Fz7H@d&pK^oS>pin-0bfIB%ieb_dJBvsh%Moh z!^`kVnH%TVrS@YH>@tfh;?ztQqc3 zeN|Y=gRc_k=;%{8x;v)zqHS2)sDN}ceQAQ7O94*G(m42b$7XZ2hgfC&^&9okV zGX5h-17u`xGp&r@D#sp&?wAp|36-fp?g<@xKRJ5%lKtoBdz(@D@w3Tkl#}_y4HcU$ z+@Uw=I2%&dTa1bO6K~kp}dzv#IQ~&GnjZ8@8fFdfzug~pR1@phUw~y zbbjgxW+lVVsWkvrfvbz(#~~oz!3@}3^!2M>EC$e1*>K>(?f#uq`q#&wAd6;e;DPR# zsv%&CJcWSE<>r?|H?EF`tNWP&XJdOsCX7R7a6AFh;OY5?AA?E}5AZ-*FY-bO*QULT zB9%eG5TS8)wH9LCu;WeYa0bp_s1#gDT&?!#~?6eVuYS4~X2bXZp zMkga9xGt`@X@c|bG8n}0ulR4Ty!|tXy}^EO-DtYJwI8{bRsRfa%q5PFd}z1SoYn>- zG{qkZT<90E{c9hk5y2ZL|6ewS2065%+b{_M_ZAi7_EcS6o%Y~7j4r_rEnz+>BXORw z@QdBq>OS{|4efN5l&!aw46J)dP`&iz;plbn%;ebbPrfNGv)@viVVoQYNo$}z>V%TUy zp7YOpldItSGq}a>USV3VQ{G6~eVgR6APeZkGNJG#9RU&Ceis8eB6PbQN(hMc38-mc(c#Um?VQ z%(M=l198#+QU~}|ZoB+%B8V|-W`slAe8b|Rv5tY3IZ)-DZsr3q;bQCkpR=813U+2Y zJIh-2Z8%Ljvd=GW1BSNU!P5xiTaCsf75}df{6F|h9zZZsYoDI)V zEfnr5QFuxLNZ)qQu&2C2J{2MmTx-3UUdt#X1lcVBP@P`mHje?o`KZQZ!BUjl5{k=L z`F-#_?N>@#m9fUoS|u=zZVmM3UvU%v64){ zuBIo_uPQJpSAuMgJF$#*F%K|1p?9i1? z1Aiw;(K@>EEnH?+cK)OGdcDt5#YP++Xq?m)EwV7jg%)~b9ObgwLZvJKl8&T2D#Hmw z!6poBmeonfBdm!hsPFZIi2KTfv5VUx|&f(u*F`x}myzXC~ zX*yaIv;yK!r%GRK-iKoh)Yghd<38=rh><`c_!Arolo?qFNGJyFKX#3p9D0vwXsLZa z-Nr)KfU&16KASNZvnTxK@G+pISP=@T9$9|ebpGkT{V^VO=X$znne@_PaAV;4k(rnp zHZtJY!6Loiw2IFnWvN`%!mbb#K}3}C7T=LNnj^cjE9q1rTtOSR%pH$x zwV#87CFRGEwj9h#YM|q}O&`5t`b|>AfYdlPm864RpJ9j`2o(}d!iCQmOo(GGeZu4%*QvA#Kj{u09F#uT4W=z_o12L~zz=&LA z7;W)7kd(=dg@rQ$WSRFB_)ZcINN@*_8uMvpGkc!K(5QCX&nJoWN@Wi)(mqVv6ELZb zBhH#ipSS;$sr&fE)JfYE$lsW6jkOjYTD#1cFI+A?_#afQIs?E7K&ZfSCXoh0rF}MO zL^ez6wUGTJ5an~0fz|?;Ae&$$Io+S0i3CDsCNsL(k)>AKzNa{bMzoyky= zCq*o!%yMSC?6zPpbBYd+Q#KF^R`D->3XLn3 zH?QGIqAZHb7)1}-sgj>-S`K!u$0ZHh4%B`dpCkOXo=`D0)REf*5CcVVz6I)8~_cBs!jn zhIV`cF_35z>>&MiJeNu=Oo$xKjkZ1?*|ocx=%B;+k~$;nmdMj(VO+FDeyy+pEYw`=`|= zN*#Sd+GUAo+Dw+?p13zS-e=Ey|eM z(9B~%fXsof1;yck-(BrFGMoc@6k=ih#1sWjz{kGmJzAM4?TCPLv6z4HTwl;O^aVwI z|Ci^=s*Cgz#ha8dWONFu?TDigoB5*hTGW%4W^R6HNWbbwbb9f!3O<>-r2xvK@|#+H z0ECJ<*QiY~TYbDz@{~K(W_TU`dtSi3>utMk`~JASr^|~0J}U;_E!Wd?rfuxiEXft` z3^T7ykUxtd!(#;q_C)5R zxvthEmb>FV>cjuX*jqmTS5E&o%Wv&-3|4!i&3gw5UdoZS)mUAyEZc5s^8O z?v+U3?A1x-f`OVf$k*@suv}GVJnhAoSicL3vLc`0AmmDxRP8Di7Na)qF|KM3w3n=x zmaXFvSZFn|7nIDMw>4nY(1*_iC4IxpI)|%8e3S(0%JVxURmbv~YdDw|!y@`7`1IEtj*?LbEnmiwH(P$Q6`f*I zLvIVDWSd1;r)g21RuLxs$Xt|j=J^AkF>bKEs3H5|0ow7TeU2xPSpAj$9|TRy?{#4U z{aZgMb%4?t_3HW2XBFPmfR+a#RO?RsO*I2^Rfnj%ZykAiz!6w*;jvP@;cC2mMkpo|nm}MXm5G^1}_{RR)(@8_A6v$+$Ev?s-_(Imv!Po?44!C0e z;W-9}=^#G{4Or|%TlliDoKDa*^WQD9L`CvXpGw*mKS4o#=KN??^xudM?(zV^30nYI z9RCJSdM$)1?-=W#lz+594WBEh-h9D0{I#F0vb*pmyn^p|V7pfB*T+X~rb*(~$}M&f zNeHF)$x^6JbI{wS*RB`a55(#7mOhQU5K-Oshv2Wb6G{;k$QTGGqL?=k{RaLUFpDb1 zMErm-g-7>#$hz)taD~6)?hCOnOQ$X=Qs5&?m-Pgc2h_gB%`a_~eOZ)eo7#-a3>tK3 zB~1GRvg?fVY1XH#XwM?7RxV# z^i-~de=$4Y7p1CnLGtNq(^)?<68)BapPk=R^**8fyNsz>m))@25~sDJ2je&jZ>)2_ zFkSTk`6^wYFMgpSRX?b}A_U=_pq{v}%Q76>I5pRRQ)C74HksI&!t=|^C>L%X zTxLM1JeDj>fC9>GIY(Nh;V&_uV-2!$s7B5b0o6F>@Y&2ri~%*KUJgTXmR(8Nj_&}T zgE~+H4DeRwiFZhzn>q&Xg$4z<@PLSo0OJIx=qNSwc|IoQs5`M{EOR>tYY;J?h> z#*WQ_^hD9%QLN>S?DezEEXWtA{4d5MEeUCHz6uw6eUF2sn6lyHzrAh#pdo(jE4$l? zmeao0HwrfHCu3Jhx5u$>2AV}B7Pr#44ulmO_A@TMBuB94)>y&?up}v>0JQVLVfa&o zOu4N8``wtUQ=W)0M^MLbxJHnmfQ0n~z9XFy;v65%ald5BEZ3qj+7=( z{jKlqKjAY3Q9-zfk$}*Wwd zyZ5QP(Pt~&o__g`WP73lJ8zA=p_SE+bwIyixRObovtFp2mOx$cUSFM)(1`D$f!!1w z2~?_K5l{{4Gp@FfDZ@BO*{0rphes2=GXw>Be}DpmBb?aOXi-`&+s$n@mObRgv9yepy!7;n z$JN=h)jlFyNQ=r%eJ5IGG9=zvQkI?7f^i-tT|*dr(d~R1r9YEPWg1 zkB}K*@>eAYS@)>IWC|XOVUC}3A*z7h;u8ic%Lr_Dhq=0Io5pj$pkY~9Mn;@I2*(4# zfE+1$M@t(Uo9r7OrB9Sn0=<4cFx;cG%h-4Ta2`t)HJ}UtEBbgNx0Vb|5crgW@w1PF z6=2c$i*8mOByk(RW&Wv%$G}9q^XrVPgZZ-B;n>XJWV|}mu-tD*FgPrC>h|&!vG)Qn zHFdz8=F~V>AK)-Xp>-Tmj|fugGDuTBTGHkc#AxM?Q!7nI(OnL~eB~l3<^A`vs$(yuz~*1c-ni zq}Li_ja!cXqkphTC#LwT9j{5#Ho;c$-&VtHY?dcz<;HGo(U~HQ(;M1sWe3@rhKv-b z?|q#Fr=Y1iD(V=y=EU(%H-LCMTZ3saqGerqwY-**wL?$Y;afub?_SU6P{+1ek9Bj7 z`knv6r6gfX(}D+-Y==+ZnApLVTXAzG;FClj$zSE?E+62thp5e+F3wa%r*9 zu->z)D_|d*d7zMwEo~gw0X*+Arr4&amuQ*Gd;~<8nX2Bb5bnp-OjK*Nn?7HcIo?Ci zOvlK3%Dpk7Rh>jlF<^-_GlrGLI>$6IUz&T%f9`?xQP5ISp0c>}q$h1eFWhlFM9Wib z*A0}#I$_&gN-sNk$9;Rk=Y!~J%p<0L=c5||M-t$Q#m8Wwek+kjP`(xVDDX{fpLt2C z&+`2^ughV?KOQXE*m;l8#@st16srdNLSlb>`0#KK=la(Qz*dtzy&s98%4Z)iqHGDe z_UWpaJp~c=^ayUMiZi1LDZQeL!_}gmqEfPfPY^SQq{WT1Z^jp>r!02*Sr zMZ|zUJe6}|dE5)E9wU&GZlz~+ok!(#%*%gKRrb7x6GWd?s~+Dz$?;34nuNpNk(|yQ z(HCIKLz)PPXOw)2_r%RkEGmK6EpcD%QCw{%UA&(DYPHq?_}f(<=xEMk+Z=GE7d{Sa z1*$ztBd0nHnCPc3780z3-N&CUfQc&;V|@>EL>+gN6Hb@_s(M?b{l&WK8?&gTMu6%4 zEgs|Z#Jb13agv0_U_tSM=Rjcl7Ms`3{n!sw8&6n*8J}~|M$bNfC$I964_xgwXl;7& zVDE-s=s#hrR@xhxX%uaJ{kIRpKLrcTxLUgz8GJ}$w{%8#fXJSEW>7BroO!dO_R-r- z)%2Gb*36Q8hkhSW&k{9#q(89|<6*LursNhHi7*`U+UEy#UKrOSAB+~LSIU23koJAc zV}kFRJWPS{*vfSwV|eXTN!82ed+5`Ok^DAIU9>&k@SXwKG$H!#jd7f6V75MbNuVSz zsUqGTk4>EXi^uLsk9%|mP8E$-*d6WaHog6vP@VhuHxM&l%8!B-yO62WwjAl`4dfR{ zkkY559dV_zAY9(az6o<0^`pxQ_1I4Tsu--bD6W(RY}Db)kmPr#mv+z2@MBOii6!K| z0zrjS6ZS3V>PJmd9!Tf!4?PY4xg_HSd)uOYvea?#;9qDW;md{{#F)jMV%!)t@KuFb93;4!y4`N z4cFyb>0Im0J`9h*-T@-I5lb&^c6f2#ZZbWM%Iaw1u<&)j66A%>6uu<6rDnd!0%)Uk=I~h$-GV^^pm|Irz+1cNAu- zxQ7@n72Q0Y4aU`J$=V=ZU`5a#)dqhDYTIfC?=|xeoC80ZOV6VqD;-6V@;lZMV@a9+ zJnZkwF3LxUp`4R`Un@V@ZwuFqQP~r{=~}nzkBfVIyuDT|G{1BnzA`6FOvhn{flNq< zCCpZPyRXQ5XFs%6K#3#9NoI??C&S_i^#OItG6+aKP6LZe(Ff*zw!>a4dyMUpd!6zr z>$lpfJ6JZ}1rfS614LV?YL#S4;{Ghr-4ad1SfN1}yR_i#_ zMPyY!mfokzMX%p(J}iqqXtTRHDz`T40;H(!8hVOY0|A3A=T4IcO7MG{- z$$qZ~x@`P#Cs2$-ghq_-_rp(}2Qs^xVs1C(eof=6@0ws3PTi-1r$lh>bhDeAEP|hY zc4EzTT6QizR$YFGL$XSnTMwu0w`vRe?!1P3$rawmy$SJs(l@RuyoN>#1|!n9?QHq^ zWvrA12c^w!r6R)ODj#x2`p_?CWC0E+L$^4pAb3;h76vKm&ER*AEvHNcfx?j z-VhE3V?{1&Z9VwgUcRU{)g<=g-Gcas5M;Sysxe@_pyCV zyRF@e1%bP%yT(`F4+qV=kf4#^iAo42uw#T64T-X&;VAeQ>a%!+Eq_>3iSsz$EMw;58B4@y)-{ ziTJ23ZQ#ZAASw6C@6moLkidL*u;6?`G9)1X zm}@)f>+v;Qk=VuPgk9F@8wRlfaB2GQu95KpppO`W6S7FK=?J76&2M|#j zLv033UX~uZKT%EG388?bpe|!rSU*eGajYmQN zNO?_}It>Mo2DZvLtULQDPj~bgd1+!G(eBVFZbOOHZalU~^o3NNyODFb0!pcipnP^M zlYM!a0>F^t)cPr3Solsl8PTCMy_W7yTvsAqjMT^YPO-^QVLg$%vMUI)o)`l$7p` z4HQu(JD7H*&d$=tr@$?~cawDvFh z8~0(_q9e1VrNA4q!|a+8A8)FFM`OG3!U<94asK#l@IkXMz}P4= zae$cQug9JomaQ;- zzQ$>3e#qBi{&}&op}{Nj?R!}N!{O(Mq4lz!z30uZEmn#<=S$i3(A0@62C&}sdmWSr zZf$L8p&WhQVtX29X=#Z$@_uH3jwwv$Su~yGG_9ns#Hzc7&z-%Gb^QL(asP4G{}<2w z_H8&_(yeUnHS}imOMdE|JJ0&O`bE-ZlHavWgXIyR^LfX|mnN(+O#8SM?4jHG>V!=B10O z*Yn=|w!4#1PTPe#Q{U<4ehJ({R?SD3&5&VGJoi1148i|HyY+HR<$)bkmHKDi-$nH7 z&le{bMSYi+ENbJSMp}!2C*t$VVMR9ZGZ6 zo`{RX<|6y>zSSSqY&5YyA34sg!YIow`~08aR+VM%U(UeMIXO0O36N_G@{Fe4S2aaK zbm`hE6u^|W>Sa_$#A2X zpaV&XR5h|htr!tNEZ*DkrpvO6_KjP!?jtwKLBSg-F=QinT|Tj+XS84je))wX{$Ajt zO6$Y7$L+DwH9K#|qp0$8mU2YhH@}Jq*rkH%u+|4ttk%OxKdWaFix6Jbc=u?j+}t+W zl`}cvn)9S+0Y(IUCAn z$1=%`UCd24tRtgoY#f=u`6Mpe!U%?k*bo0Q5{BvJR%zgH&_aL$<_C&HwPxjTbisdf zTAXx%(}tavVZ#^y3)8YRN?1^xQDO+x0G$MB;jK==@LQmrC-qB@HkYOijq@@E73rPA zW!*NKXfCu55WekRn#R3*{Fq<6%kn@qawF9}|9o?p8RjAOy3!+=LfU)XUC%OwO2XZ~ z!M5f4#_RYxKYAUI8N~e>vw%8?xh@AqZ!+i!RTy2W>M`q~i(uaEO{rk1-JbYFhfHZd z+ehA0SbJha=>K>g4t>IgqCz92CGV#aWIAG7V9NZoNm2hU%($rZ=>&C42zmRf*bLoc z6K@$_UJ%RmTwgzOFeVCBO1xcfF(Jj@Jx$OlfA2DeNP9y*;)9YdD3yw||9A03`8_kL z?@}us^0(9y@O*~3 zl`vVRk&7az7x+(5+YcxerY0J4J$%ouJZ9)p9#rNJKDI<3DX9@=d8g>P3H37lEER}* z|GQVM4iYyZ1^^|tMkP3a1Cf0-H2L=W@>Iunb9hBDV0a2#7E8$^wgb}cI3=nFbC53W zx>4phn7nwwUZGW9GJYL&xT1Ce*G&9aN<4QCs0!GeZ(({I@rBL;i%fq~S_}nM4Zt+1 zpc8oSoY^v1yZFvAInPmZ#5sH0H*BR;{G2n;!fD(~QOTUvd{+>%ztXMI2drR?NkNU~ zx15}hRxj<_B;pTrLEJ{o@!)VL!l$%u2``l~{6by_M-2ik+ROy;NlE6ZEF%o~Ugd{# zSrQI$tYxO9c8hzVh^T;XgvJdIT}a8fbuGH0=tuXBV>YPm7KWP_Nb_S9PxlPW-VR`R zWi8LJh&r0hSwFrMTAFG^9Nx#75y z4O2dD&cLEM*EErUU_=84gB~nLVe9**%hLM*`5-m|9KYh^z8!>jbraS;y&^b=Z!L>^$;R>_*WQ-CT`@VyB5KXk%drM2jdxbIJBNsQ%H-uWi?kOPtlFPqm z4CeY281o5Zgtl9wW>)du2mE^~ZK7en@wN&B2^Rxz#QzJ&Vr*q^;P>#$R|xO2LM|?F zDf*@btyFJ@yu(L)-&Z51G~io+^>~VkNU!Bt*OKr0Wm{uGc%n3H;||9jam{aOqzLqE zSB8!{B5I;fuL0BJo{u|nm&$9Q)6+*_&*60+85a5JZ$ja{e`Nu1h&}qM;s?KydG18W zD8CX#O`!{TWyQ%5oTjg5M~zjIo_tTb$h_drw7T-?xJ(gU0-F*nZIilRVis>Ld#{Q* z^>3_Z(+!HjZ@-y#CHr6zR`t+TOZeUIV}-?O{bOn?9S5UceLdhi+C4ozWO2SvAoma!gP~1u1MePO&=U%{|VJl&o%+O!7ldBs4mW8>n2Rxgxuww~q{3wIInPPpWx7w_ z$79m;w!6J8pbAR?awSY7luRgnE|ZQ{Mq!F$KaQ(+(WA%^uHXfEP}TN9REq=P^ zuFPfiMhN1yIQCjiFfL~iZzSz>W$3rTY3X~Fqj=3WU(?;S`f4j1n6`5l6LZFOqg!kO z2vCsKNS>H8T{_T0Edy@Eh%aYVCdy3Qk~&VG-5Di6D}AXI5!8F6GOrI|-tVyx@jkII zxaHwXyDW!*zv=y(xw5_sU*EWKSe4!}tn&_b`JhR838*m=f3qD2KB0^(yrEkjx^GUj zB*Ic=*pLeS1G-9S36mvu5)Z!=(x}?3>vl*6n?hRbHDuM}SwAdYfk-h{QbzPv8gN9V zo@H`aE+;QahP2-|l{o9(`3l5s%;=%{YTlxlj|{JLPs5Sfwio-nhF@Ffv&Kwwq~L*A z+$ktGXCe#p#?{kTmnJ@MD~;j5mm7ll@e2G?|2EtJr*eL@rFSpmJ;ud^ zX&quE#(z^+Y>tb^)(1qHlt+?8DilGxCvi<@kYp30xHOhW^F7-#Lz;yoN7qK-^_iR% ztOhkU_)ab-p-kQ3zOIOEVus>~3Yd7PCXeS(R zkb7gocK>2fw_AQta#&%>0zNNk06?YVT~W1?A^=Ta@wvVNG)>V2BP9F$S4>3`oaI9$5sxL`Eqod`MR40 z{IcL9prX1cUQ{R7fx!8oTUOj4S4`q(KJuF#^Bcqg$G3%^&7Z?6y(9CY}T;>K- zl;u7YiLd2y1Gq5x=KW#@MM8f}p=U{Xlqxa20h_yZK}Fks5HCPKizwz}KZ(GA3D2}e z_omjWyzpa@qsM8WhnBWVDuk%8FbASI)&Ntp0W(NzMt6|O=ib!ysoMgk@w4?dT&5r5 zR=693l`gVFZ&$?$C`rEg9@6w(~Aa}&IQ|`Zr>t&gbB75rWFCf!hl*Y2< zytJ0f(*1H^ua#*<4>#y43B(&i3T zfRmND(i$W-c!okFzHr_Q0-1J=E{y}rQq(!g#?Vg-*FNjQFxmn7w-Ywc7!;pz#%VeQ zQd2`%Sf&+Xd1@g?e|kZOwxjge2Qma4P_Fg~v#K*9H}LfslsuUB-n}c;7tiq*(%imP z&uflRHVYI+?~V?H47o{r+l5=FznqohOyaFAxDK|O6Fh7LLb-namP@=hNSn#2gtz33 zV}58zT2`*qT~uD7z~Y%af!VgKjF&>_jRiAIV_e|h*54H;dbHK@F!-4yw}D(=1=EvIm?935TNo58{s8FG|~{~_BU0ktl?1g>tpij1D* z-;&UCdI6UQD(b5%K@E^!(>)HR>@dgAW&S4Pf$X#QfcC|#&zohDS6xhBfrWgB^1Jui zv&E5#GLLSNaEkkvo{?l&#zbqfU0nghWW-XkCp}Evbl+&-CA~>wlI8* z^6)E^VAdbW8rL#&W$a#2rhu;8@$2$WcgB@bCj;Nm{Y6nRJoak;gP>j&ph=rYkm6vG zy0(&*(vOLxdfYSWeiC7*ZTbN(i?Kj&$Yt2L-B&9OV5EF+?-=P>9mN>iAo#x8vEh~a z?_=KyXiz=l0M&-~qG#?!5$^}<)QJ#68r#o(-?5rjrETb?tYK0#M#l8Z>C0380%U{M zthY@T+g^V&r!w{sS>RWxR_Mt;p>r_=qs9qY$}i%#=RxnjDz!{dW=CE?-Bk^F2p)!} z8y55LJ$w!XlVq2P5%)ny-~%%68vCmxb?_LUDGylLpf?;tAX(;(T|r;bT* z+VK)&8{7Gk8qpohupmE>ag?xp7ko6FC1y>5vv^tsxS@>vtelo zBckW`tkSD=OrUEi+6rc63ta_FU5n36Ze{H2Y}T9^xp7%j=d6f=An1!I?yu581%sK@ z$1R*w_YX^go5Mk7+zi*ta!#w0PdK*%L&P+1wF_S8{eU((Dg>BQE(7#I>o}bC2H&SSfHc432`C*+UMeb~;cFDgl{#(d4T$_ud*C zv$cw~#FOB27guB-mG*Ewy<6YqvjuRyxMAbQhk2(gVxs}X$ggslnatg^?%1s4-dBNi zW+%bSF@g;T1Di*hI@6B|&rtV1b*9u9o5nz-Rv{Zod!eYVe!Ms-bT6#@UA}I-(?X$8 zR7-@Y>`ot79!>=RK4TbcbSGc!;r~>TI}(+2{ks41EL1A8(e$@erd5c?`$T`Y9I_qP zd%v2lSN>qEos@F`HCeC9SicGS3XnG6&ed?z&K`kY=r0HD3Ojp@-%*QHALsyIX|t!F zgPl?QG}+xwu<`REl0r3K$y6=<@w^zB7?;rQo+^-Z_mBI=-JQ+oE?cf1<;9*B@g_EE zRgOV!ia}K`EYaWHQDLkkDcP|bhCKfpEad`|{sWb2sYraf#!m@OkLbPs+c-2nzzI6s z2z1T8aP6$-j@$I42*CHq;OJ;_LV287%qv4v1utJ{e8W4}Y?Y+Pq<;$zJ8q|Cj1jiG z?oo)6`>jP=TX&HVU6vnaT_-}34qQdMeg`^m2O%{bQqS@E2>u|Y)&W}6d{`A!Kyjg! zvUph=kbh=Z*#FW0>LmV?sebp<0tOKA2o)9z`Hueg{6mjV(Ja2m-ITrmqomQQW_}1I zOswxB73s%{u?&^x-d9V!Hhcagb>-jfbTN5l|Gz0Iw1N`B3cG~1mW=9U!q@r| zywKA#G`Ys9cIw%QZ~lcynSJ$rbdtgJb&GhNkbL2MC}0O{rm zzE!;APTlTbI}_9L0S#RuE*3ixoUs&q>C1h9?fBc`Zr9=i#RrgPem?K*?S17c9~B34 zxAea}uR&+z7cnj@X{5c4y8H-+;bTgIMpL#JgE{a0cE-pJ>WRTRT#6DF@^9OKxWJPD3k)k*s5Lszxmkg470%v!>8vhV{CgnUJ*p<)I z4v^JAo?+8}e4?OSz^(RKV#=ljkh?1PM;7a1%TR;0(%v0=APGQWVJ3O3!Gepz#|f8$ zEoT!_(dnkHllN%sb6uY<~Kjm#HF@2QR70~45O`gVEnO$##<#mP{pu0xD#D)@$ij7(RH9;d{9Fx>uHUYwW3k&kbLH7$Q$;aBL+ zpqE6ZRpUhE0i@qK0mjtXq&kk}qLt3iG~!NX^$>R%i2c+`TagVT-4d-rh&;w8C%yx45!a2Sfv#a^G-;qY9hu41b{?I!~4o^#RZ4q zFNCWx23YGC%J$1eR%&4P-x*0poh_&k-7!xU^1R;X7|8o*P!l6%{{YihaYrYy&WccP ztPK)NqO6<38}OM15M&#CA#-EuYKuCBdzN=VaYi+-Z@iJ^co zw(ss6nI~4csW}IR37&QR7=5g{Gkik4*9awv`~?I%h%3C3zJ%*8 zvyrce?=??+Gc2%q@R!;CzyAs-yGzb63NJe=#XccIQ}Si(k;6Cu%(62AB}_$D@(cR^ z=9!*XU|mvJw1RZ?L&ofc)TyCHnJ{<89mb^bVDI<;9EYFp=B$a=F)^CGiY zQmn`YGSup<4NZD?GXY3Ss~?tC;)5Br^RPn0`*L2O<4TlcX=9;6OjB7c*yOh3?!tJL zL{E1nv{oLk>5$~R>isO0V=KW1%gAI^5VsC%N635u`K$IF+@32kJsW+RNTh5cm6rpU z*y4y#op=2%xBRNrx!;SjZ)F9gbrCPy!9M0qIb@AeOE2*LWGr=W-G$_-6S^k1l-$s7x}c&qSXR}Y!mO(M*~$6xlJ&wq`_C~hJf z(M9vhl-i-g-EJ?=rk~yU7@hZu?pn%w=Pc!OF?#l(bu~{_Ia9X&n2$~O<$&jK%`0sT zPZ~5eHQxRvvumnZn3FJ;@hDl&QjFSB}@bc+=PahME7Zf&cSgbFo0qptJP4*jqx-2DW@fQco=o5MX~wPhvh*%o4j_2z0~z8EQ#Wr;PMo#>N*|?vhPr40 zfXCdeiRy4SZo@%0abe*J!zR~$7m71MHn#34N}*Xw<%F_2uL%k7WOuy?-HAA!OA)1r z=*!Y?MZ*F@LP)|;Z?idxB$G%TWJap^I*jbm!Tm_r+d31hynDB!o1KvlN!1miH}np} zh|SD|6DEpd^IGaWqzB~NlJ3knGkQHVd(G}*mlKGnR?lhEQ>NT zw>P(FYmdf&(Nr=a^^rZViGr9FV+6>Q#q59kyI`=iH!i2N%Yne}rSJI+W=J0ZOQJg9N>zxZ zes>=iw-kNr_b~H1(2&k#b9EQVv!JM$1?=Sumg_oNT5qkWp+9eUZ;>-$a%vfToqa$6 zM%kR8gzr(%l;7{{%gLNffQ!+5&0 zo2Gk~C3z8P;!Wua-&pQD|HFGK1$aO1%tQlRZb#ol_=Ifdt+zXsKj;51>vT5u3CkVj zS3YsswUx`R${UNj1+JR>mjtw5gQVr(^RdKbNacuUa~o!#w$WflIlQ0ahwMvn)n?lETRU14n!dbLqp@M}Qg#SW zVWUEiq-cJ}TnH$*sWrDu6_V1}G%{033)EAA)vL!6CouLkucua^2*)5c* zZvAMj*GyLvMkQpe`}%gDad_=6)D)3Nbo2+jgzzpA*^4j$Su%prmxA-vi|}@s=gN9N z^cxLpF|%PvR|yrrs$9FA)9;}-PL;@f4iY?oL~q~!)D^}NAx0HZkdi8^mj?w z$f);?(?s4poeaDA97&#r=J1|g+`(`kQ5oV3q@Dg7g64OAX_EQJGWBP+lI@*j&B>&>5(jN|?25tC5g6>YM9WgRGI*C-mt|hFuFpndeZa`+5oK<5- z@$@!a(&xI%C7uI(#K)xG{py8&fj>fQ^~GHRsuwm@5jmEBt^6h8&~UUl39h)Thbx&0 zM4aCIzPl^XiJ|1HzIRC6n`<$FAI=z>G2e0mQPnTw3z7jm>6U5{k9k%H@-uzSfkNtm*?`5%b)(7ynF$li9^S;VOkQ4>5)kA5uGgZ+z?FA=j7P7P#vLk__kbL7o&{_m%rzBddF?PDt5MI$|fT zv>vW>MF|2KKRWfx+2Az-=-DTQ7(Ths^(m!yN&{eUh37_VW7t(NOD|lBVtK0!o=y7% zPJM4`^T=^{lHBG!Y!)@rd@yq=%m7=CMYvH&IoB|}qjQK{+VkqWOOOm-;zu%rx|pEmCJ%j12Ta8Rl_FF{xeA4a)IbtJzL)Ph=1|Gi^{ z6J+nNfYqvDHnn89baWpOu{vY4V#JJKBez{(2)Dfj*oiyuw}WE4g^F^$DZRY`)}4TT zeU(h5N17_Axl>lNCh=>TiaU_1fIouV?Ud@1O_G)wwb1$6jrXJc*;Ti=T>#$;z+&kDyZPX@5OgWc+f;_Bhs z=lILM7bBk&H$xjkUYj<9OUPF#l1s&FLJi}DSq90J{h-~OMp-TPZ6!vPUF4QNpqRL} zK+F`-ut}&zBM>pu)6@T?bA$qXUcEChlgp(^% z2}x6M-YQZxTvs8MUNt0AF5uF?iLEzJ72DbOPPt;(>=?YBQGv74J##vQb0p$Yk>vqm zl7sLe_JyWYcs-Px!g5G5@EitxpVB6g#S+b3Uz{2Ha3DC3yH<`?61i=h(j=YoqsunD zP?#d3?sw}7YYB=tm*F?tswN{T!G{`!v~~wxEl!_pppWgo^M2Fk$WGl(+^l9SfJE;7 zM06OiPyOO+(;IzB-mj0@Q~743Biszo8SO;nh5S5C%gJ-kyZA;>A?6-qd<@%ymF>hh zt#sxnhqSMZTR%8R-o;H!i{Fv79(gBuCG2nh>7T6Wj}OXFJisWj*@h>+HPE7-Bw^vx zLc)}?M1AU~u0}Q1n~9PsVSV66G3F1W#0U|zu!v^&i#YNAd+R#ICn4fWtJiYj>?X~S zBH7%)u!B#z==cE{oWuwx^ZuIQ4PN7BBDU7S{R;J_=D5OZX`hQ=RtS?hRT|tq%!fjD z53}$OALgo{VF*gcJ^%#w8VP8{D4)LHn`#*}t_MnLw1M1)5)(u-o%zlg-I2Z>t`CVU z!9}cQN#&AkpdO(9hh$cZNQm4V&r3GyZpfvGposC&;=+@mvR|DLwoY;aZP&oMA2u5b zZRDW50)Ai&+)6IE9WZjX_69ezhk?cH1D zLl$U5{W^R|w6R%q3zV~Q6;0`3q3BUXvZN-LL^1eHlW4uD);-(WOW?$pFS|YYm9$M211oD5lB*FQp8|A=m-|O?t_1PnXS0(qJ(uLxCt^RJC(&eF2q{Q%kr7K{y zR2Lpdphy+d(6;RSEKNu)>}qGdz-9)m#oV^c8$rRN`#MWFdf9pP@}zYI;bL4$=E8q(Vt*m)yEyt2jBPQqS|%Cihte@* ztRF~!NWmG)pm$-fGEeV4c#L14XbP7DZd)O%ie_fV<5_)J2TkU8Jt68iMO)GIgcBNy z-G1{8wWSP7p8<8dJ{HQ6f-e?|<}QSh(Te{?-Xj1XvQ*sG5j6@ML_!I098lc5L(Us` zVgl*3{3$;W24)k+wf#1x*zw{c2CA3e@e?#(t?xiL&FoAL%kE(j4WKCYF?n@J5ohf3 z3iP^*s8|ph2i~il0NHgII})xbcPWZ6Bk4oK_`}*7s@-hzgT=`YcG6QSt<8Rp(}@Ei zZAdx7%pc>xAXqW-Ts?GFTBioWW(^S0fu0PxfgUTOYY4CPR82KLuaX|E+?42)4Wtr5 zec)xE#ufAUaa3?eCr7ns=d-lZR=1ER+P~`GbBD&#RjZ5hi9G9YaJuzvl6cis`;MAv zs>H%PYTySt7PaDRM;fA|>{XTD!utl9n5snn%}bSltg(9<2Z~1^%+G%fbY> zoMZfk@u-by)`_r)7eJV)Pe!khD<*nVe5;-IWryDD9-mhIN(!z1et7=b%A`L0|C^ci#F`W`R3sh3S zSL6dt$&O=Ah*&;2kjRws(&qi)m5xwvne}SaIk}kfLb|Av9b8x}#H-2VHTO3DHVJJc zCO}!u{y~*OC;~{@S0&?gAm1=xAL7FC#a&$@5~ae&OVSxdT0 zi|)M$SED*|8oJxLTC=U(&ioSa>gUys#4*)Em_C(~fS{7A5{Nsode+H8)3d{5V}L%-YRhDcjIDlgqOiA*AzdTcA#Rsu+rrRuo0FE69miuaanU?u~hn{ln=$te(~w zpy_M!1AW&>GGfgecs`L)l!7#nM=lZk{u+4&u-Mw5HK6aJ6i?m8CWBikm9yjg=jYz5 z(fil4aV$&X#&2${#4*w7gb}4 zWA~=}s7LHv%A5lGmb2*mh(cvArg{+r31rN2>k-To?cL$Sp}5a+>?$4l-x&^+@bS~1 zdLuw{EqycvqdClq*4Nk(FXDfVjOs9UemxFdk3?U29jcv^i6;$FKkQ>Oz`n=^l61rx zb!h%Ro&0q)Gzz~vJd+shiN7QEZ;T+LW2kz3KW`qN-T0YU zu#%LO0ySKL>=M9w+#EYywjbHuPp(Mc^@Cu6IhT92svPw*FwLM8Jby&q_rn>`y((F3 z^;M@v;KgK2)*S-V{zL< z%jgued1bG^EF#Egb5K2A8)lwK^c4yp6JKn05M(wqQK|%2JOM(NXdT4%4#|3A#xi|g zw}eC3KBRh5_dw|OA^{z46M0fjo8%My<_(Lz_+KPF3U~~*%ttVDN0;Xxrr8|1XBB5# z25_haG7*$Eu<5r(vx5?$fn3wo7)CU`-+nqgsJVCtbBi3G)$f74mL!V-PALETN17yH z@%dn8IxMCXn*|jOnk5&qT9byOk0i2{4LNBaYRq9OVEn?K8KLg{93mclNBp+mmFw2@ z5d~zj_x4$bW4e`>nXu^RYh-Loxgvil8%A+);&0)S5b7ma;1zUt^-Js5Mcs8(kQJY% z8U%W|Y=BCG3s-(=(Yn=aZg}Azk;P?6(lf$N2NQ9)^vJ>D@PaGrTLUet%ua zZ(!C{+n-&Yg8o>He_AkV8Aa?^#PP=OY@So3j8kR85JlPjpa}~*4y7q@Gn!p1gf$^= zJF_UFEato9@en_;o7mfZC&j*%4zTp>eoAP{me-DYaeba`LL;-h9r!?bD1Z?aDEf3) zBoSCF@e9O~Nbw+nt3rMpnnZxjG9|pSnp%ALSWBzVT3k0J!>i?l_$#t&t!WcCsY)Y* zU;cXde7JC6^BdmO4)i+Un4v)%D99ZPlF{7h5i%LSXPRD8_qw(_qINe-|Q6QSH zeF(`vv$Brlv?+PzSeqa@IDdVBPm_y>&jzM6S8a#_)s}z%L!^o}i%O)Lx@+~5*q`~K zFMlsw;&F6KI|UmJCSyo)szT za3Vc!n-HoFdT^sw)Xc0j^8v+SJ;;0mO?tg+x1(ojWr#T6__ubH5QkruZ%j5-nHf>T z@hNF*pyzcnvyk~ut(+ClC&n9@g!ye#`t(Isi9UXsN9XDVt!SsZFFY<%U$*=r^Y0V{I&f6Ud3_=4gK6dh2nQqhRI6xW zV&eA517x=?3I@uef7!1OecYwoX0L)j2K2Ijs+je@1hI8Cx z+B+cs8f5~=QGwYQ)IQVJuGFJ>9Oz6Gk)|N8(1SK7=pSWO@+AE$s~Cj{uC^d9L(Gmi zKE9bTkcTMNy>wbK!blYHq+!9Tx$L&HH|e8YncgJ^eoS^vn?Jcvr=*UgUjU1xJ(_%e z+CkH!?X>ueQWv(7C_Eg@k6Bp-1J@S(LbL7czjuubDNr#mOo;kC%`XX@cy3MzPts1? z5j{Q6f0H#3Wqa*M=G>w+nLM8qWo6Y9Dl?HD;gYj@_qsN?a~O$&NgqShrYOt`l@D8TqN~fUJKHwttmBMmYhvFQ)aya5M^GMQG9{ud~$Fl#FH31 zcp96Dc28X5^n=`Ja0kdA@-a?ZJT{qFgC z?^^SRg2I}2@7eo#KJ_el$zJGB9(-X7_99&B{8Q=p?dPwa=yrjXRof>z8(N#y6-0!~5cveGLrO8qI zpWOa%O_9_Z`>W1&+`vv|iL@O}5a?>I$C(Pc6;);q|yc46m&5h0WX`4y@ zoR~w}(I0+1=3L;X{C$+OT57r7;49|P+WqKihKb&gF>-vU>wUBr1)K@osCsQV6;RJ4 z5oSOLpncp^4sQC7U)VjVJlA41Vy)3CO9uJ3I<+UFXW%3+W4kiJT5x2woy4U%xi@Kr zP3i(=B5{T#)5h$Tv#G;9fN2xbWEd=3W%}RFhnzaurK(mrNT3=IGj*~u^dfh1!xEn4 zL$5-rs+3UCC(S2$d<^`;S3`g}CZB+spw0zO=;k@KfCU(5l0(R36YE(tOJ{R91`hJ= zW}8RI*YTe#A!}Is*bosK(ea#i@OXq62=smdcjj(6{JN8*QxWeZkdh+Wz_G6JN^d_z zo~BINO@PK9MjF85o>@ke-yxJ*gL!)i%s9GkWQFoYH)K-!h7~VUE_NOw18J3=^DEk= zz!({Du6-U@Pp4&z)3&m7EY(;TE|I17Kv=#;E;ysqZGXbhp`QnDKxT z!cA~8&|giMm3Qc-_NlBT={_w4hemB}5ZGn27>&0Udb;`nj6@VXY)v=f(V*7c=?Rcz zCV^DB%5d8j;#V#?6$8ruJ%SeaD?IukX8()g!;_7mUBHA5$)iSr#-tZIQO%AkqUZna zcG+1kvTL2dnRd-r>lO+QH-Tk_bi55}S-A*ArB?i{OtxlX_RWM}ed@@KRU6^!!W{6z zRjy6v9GJPoC1OWNw;Tw9a1J888im1BS<9OTS0=2z8zJ0S6p=)4F`d<4YSUzRUoj>e zfWcU;cY6nG7e9y?m^dGrBo$Z#-AWb(3Flo!KV&B&O+=Ft;=(x46ZYqC?Yqz)kfXG$&io@J4@UhP=LncI--q8phO=t>_=KvER?x++KSZZ3wm z8OvB^modY;@Q#{5H>2|;@B2tx+uFlrJpUgi!!MMGz*&xFbNL798g_R!O=TnJueOv; z5?(P4E;UR~;l=X1U%ZQ!afp>Y%6(6>d4agS9iWdss;`67QT$=S1bitS1hSV?e%AvI zTH#)zV|&f5JA{3gZ?)PwRXA6D8e9uf@9KHMgp_HNSBIw0%7(-V`i&xds`1wKf3~ia z4ER(`VmOOkbcAjKgWvz_C65OjI}9O$Wdf3z-@mV!F zr=ARY;mnjK_^D$%eKiC{K=SBN#vR1k4W3jk(|&M1*)-9$NFc-JtmLxNRaQ04AJSMFwN^Lv@lk z$okF8)vea}=(`y96*s3Vwp^W_BzD{(IK+$@WfGM5?M1(b0w&6hl87tH^n2OU4b+(G z^7HnoXY4Z&nrkA`hg(%Pqp+xiDMt8~;<6}m;jUl_@QLSL3%t8|7<1%!Y+Lrm1a~lK zt7+1y7npbN;?3}$ay&16pHD*dUGZ)AP)zMm`j*I}NF%Jzk6?Yvag0}=X#KZ*C0|KN zB{izds|YPUK9BV5p*pIJLM4k$U z;eY@C49OsRe}-genGBdKRqWNPpwEvJWF;h;Mxqa>pF}t6)#cRLS?z3gU^SN)zUk=f zSfAYUeB6|lc}Dzp)C4GI2pK;S4q|ft`M`2^Iwz!uZ(92VZKk9flku)+QGpgHa^+Ps@d7uwGSB|&*Al)nTcEK z=RPmbH`j|}j$zK)rhd zyKg*>*MJP&(Z!LKqnTIKA1A@;_Bi=@IlZgxJ!LK+ ztkrgq%!Q>V!dr-&`&s@_dW>8GTNDNP0ro&{L8jQ~2_lrHYvy?K#KE^|p|Lsx)9iv$ z=e(Qj`Eyp@<8pLR{>^@~7fcK_qP_YV?wZXAkAmVG&hs{tW+SqLMM^G^zj1rKLdt+} zv))u|#g;95NLR~WHc*=#@K7!y!f}D`H9aiQX?PQzg&jh{=@f$`D^XO3>ZRELS~5pu zcf|9DAPdX)U&>mL(zl%lce9oSWfK*l`Xtb1zxn35!!*oIKMC&u;zy7BKFE>Oh~=Bd z6b^*T5B^e$zPj@KA*+-S9v;py<%>+NVXzMpu`V+tf#d^SaT{8px&xpY7?64<*PuMJX=eEhDt`)eDA>LL9gHOm)}=#8z#v)yC5e zG9X9lvtR_Si20wXV%?Hf^S#*gc-FTo?dFu#uPf>Pc~MUVgHSKz`QGVluP>luBVVlkIpJHk_t$5IctTH{&z-H!uIRVab%+q+Wg^1D z3Owr>Cy6PY1TK#9yR+8v_XxapNORi8#Tm*dR*bk{}?O;8d+#tC`+`A!kg zaAX4pmxOUCG(PP5M%j!Y5~_So-{G*1Jrn=TT|o(o;(7P+%6S zBmfI;bFlPwX7YkL!}Tel~`F>Vu3m0x;3jIY3&w?#X1|k4`k8;+fCpZJFWXIXNGu=W^Wr1ek`^(jvQaM@<8cu7HX=GJYFR5# zkG(zNY-}slm_t&S-)kF(ZV z3NIh#JGuYuu44!UKE83{X;aVOq=1J1$X+|RXzUu9CYURUeKkwD7^s9UlX{oP%bELf zQy7fG1k%^?+j;cx%V52ET+r6oyTYZL!{(cf&ZzKG*E_L0*$5Py~1qu#1F0d6w!{bU^RQ^h>?~w0acu0o_Da z7)Sfa;>=90Af`UOIpEALC0mV(Fs$bpxM>pdu--{g%_Y4KiK42&>u2kUB7GeTBoZc> z7!_1eBOvA0AUt0PS^0~vSrraB3Qg!FG;aezIQ2Bf#yaqQs_9zOFq_44m7gROmA9o~ z6Iz+We0CF9RO|z!1ILOo824?Vl}5;TPi zU@V}5qKN`fsS#xFxW_KK!f0PUn4^o94~VSi6D*CCm3xYL9HK^u0;;ww=Lz_Xl{zdF zh5YsFrssKt8##}~m<23|Kn$hxs5oq|lGbDEKtB~-<=c>7uZ96&G=QriDk8JG(LUX= zPT(B2-uyOca9wTeQ!`B*aE2lshCQ8bQ(9aS#Og)TcRZM=!YNsWH-{r2gx!s|&Ntpo z0|Yh@HV7fMhAVb^5eD-I9>XeEhtI^1QowDDN*SC8k3*zX=HAh&`0;{6E8eG!x|%vm zhj-U}KanggjDP7if6%sp+ScqhHD3Eez%)OzbPnQ==N2g{1({~C(r%2km7>f+s5<@8 zzbeRc+>HxPFZ239{G_R^(N`7ba7i+=u2Itfc{AD8`ngUS{001orjXB33$p^j^xpGf z&rNK)#S1yb?EfIh14zn=OI+9|-Zwe5D?Wr-@B!7EYbwO61sE2<2RK{~bt)|?zL7cr z<7J7WJAC+)vs%6bXGW6o&seE2*inZRvl?+;4V7ZVq|K}!FO?bQ5U$)_PG24_`Pu@d z9ilfJ?E#~JKp%G(@(;2!Bd5;o!fjd6B+&b&z05^8!2<%KAwehoYS%)|TD$AJXZ(oK z^&sH@c+dY`0<~$~*FSGQZ30bGP_VyM+qG5pqbsSE!4b|)pXTmE5Bn`dGNMI9BqH(? zFJqQPQC&wy9nXvU*4ANq>?X4bW;K&#pdyZIo}ZkwebCBa@%V1zlw6-}_g1kgeQ$%C z)tf4JNFJ79A_I?m+w^{qQkt-5%jw9(fMO2gXxV);K;Th@F5619g68v&om>V6jgC@> zZLFyC`Sm2U&jT|9*@71+qATGr;>uZbPY_7HyB|lKUpBfqi$|6Q{vnNJwE_jVyN$-g zjQ{S4O3+C;4%ONUe{H4e>sN_mVLdgqz`AZTYX?W|!M-n?a_bqlr&UUWUbnP=+Zi;# z&VVUz@&Hc>2L)QN+2kC5830LIjvjXpW+c*^i|X}%NzL&t5e3&XO zZf%6SNoS0z-~r1rp-g2VKCirXk*JB^pK8B8V(-Lzp#3hu`k|TA&$Av9GbGziNYIX5 zI6_$CHCxf|dSsRB%dcs>47g`cz1Bh$ezAWpJJle4Pg%jU*8Q(94iyiJehQ_`(YnY93DrjMk(cx z=BfZ7E}D09bW`NfWw_Mm?UQkE>3qxz)xx1eQG0jdUyxU7ekELxj?O zOwVKk*%Wl|P|w4fnRp)X z@u_=SGy&U;j!xc3=E|(Qf>BaUS9WD_rDpZCA|1~mWc*{N!TDW^P^}2$Bu0sD_{7YQ zl($8={>$RJZwjA#TK7bSn-d#42vQsO5cBUxl>-!CvLC=7P5BqpR- z2Vh2TgnkMq)W`VXsgg>9q=^PeF8HUoxRAL&A%HUU1Dht{2z6vLsPd1*R`VR4-;>*ROW)|)tg-G+?IiCp~` zQq9v|8VyViY0NNN?6hpQ`JpO)<{md$CiWhCzNbq{YU5bVdFZ6$B0T}I@ z7ICyhF%d*uW32|7nwmWsQpynF8nP{S;Paa#d@nhOgP>iUY3YPWl?QGDQAEroTylLU zZj6#s50-qqwVIMd2b5DlOM?nKQ~kgcae8Lv(Zh~|?uIauCW8)&9)8S1ouxp)Zb-NH z!3!?^51vO194FYq#6%*2q#t{=8V;{+cJ|Edm1-bfBww`^2Z6b177}K)_E#sX*m| zo~~YQ#a1a#Q;az@_kN_yqWL!`0oAlT05_ki;#_yY&8`$POzhTavoTVQE7fB@?*F^Ze5qgy=FTEA6J-<<#AyUE*Qct z+fPFfAi^~f+Uk5n=tLnN!0%)h6;6r)w7q)6Miv2}4`e^fcL7^Tzyjeic=H?L62WQ_ zHDFPU0>*RqS^4V3j=njh!N?CL-4CWDi+^iS0s=*%agsp)96>#I6Q{g78`Dp5Fl?nf z8crvL^meWQNwB!MwwJ5Oemj8ow?TaDIl)j8Rs(L&+r|B!{+b#>5_0o>kK%k&ZLRP} zinewe{mnKtQud`l2x!892ej^}ZCWw)fm-NS-JO#db6~Y2BnEMs&Z(x^`cK`^#0eoh zEJa1Frr?*0+N(l-iNeaHr5V19FZFnBV=3oqllqshfXtgOs>Tq_ew+|9KinDA2H!m3P#9g%yB^U-#dw~`#A1qoaY=FBP@!W;kz~i{RXDPBsKR+} zM#W@TGd?WJB%#v+Pv@NXw&mP~6*JN}o13z}c3d>NJA3&HO$JnF(X`61JgQUZQ0>leR^GDO}?FTXw`_zn z7&h^$QfG8wPH<3qXr+;;Epk;!v}=-mlr??JQwp91m(3owZ{ZNtfxNAE<{$? zxyRHdGIx8Fdm>7xe?;8ngWz^F;mG$y+hXY2mjVe+Bt!jxbV73brpGx%+ zUswb0nIrw*@0nru7uNTix51#t6nB4ZO!w~_)BP7fquGYT=r6A?`-kS3k3qof6(eQj zG4F(OevCgK*#6hm>dEOOepK8)aRcBhZO-&S5#emWADIF%Bm#eX{#+O2j7WOi2;}U-dN#gJIYT{@#hva6y5rN8X<-%PMDK%dun-;rZb` z{4K9=k8}^ZtP}v7)sRq(c0m+5*Sdx0ufr-247=L>lWupvi;V?{K88lb=tv;vwwi(` zr_Dc@%j!)@di*(QaQQeq_E}6rr|{c^+LE(f@{oULEhh11-fL&)AeN+Iv7#=RfM`fa zNdNLO(dix6xIo&}Lz5`=1$P(n{#C}nF(2T4U1ZnPrv26(1%6c?0|4shZ8X}e18d3) zM#aalIk+p74ATcvQNG2=Cob> z#+c3nNJeRL=OETLseKAmH2m!Tg(tm(uIJfD)3Z;MktVCYOZ{ZYPxh{BY+XWWP)a(s#4}X8v)BE#hbhTS`e?(*B zk(*GvusT~o?7Cb+-#4!O^^ROQ@dnR#@4m7W7seiz+c&r%43m>n0!P^dNmKp@HvLNa z)%N3Mly3+ZInQf}?2z>MWQOAn%|2j6mJFr-8^_AX=i>X^+~J;7B0-N|2B_9YH6jq} z;(94UUS~D~uD_|5`u`939QXo-h@AXIm9t*WLT18T*_6jo2g24?UOs%yY_lNvlBi*6 z^r=$1P=(vWlc|3L&&&=2i;+W$PJ_mVu%T4`Mv<9DUIR~~Q;$6|@h%Ibk8_>)L@p(T z^JE@wPK4K;x6)rO$E>GqAhCkpN+ZI=cMx8?X(k{P%uL;WqkZdvwdMO$`;UVed`eV8 z?wKe7cuqs=*Qn+%a6Dt$D}NU-xrpVxwtDkPh{}5aBv#%QIimC*EE^v981I;U0;LNt z3Nqm;Y=80dNeSw;yNXMV!-gRMQD>tsJ$Ld3 zyW#ICLjrxK(uGHJ@yr?fCvK-obh7ad>SLlFein2&3)gS-_E?*CH&oXg_)=rnv@+dQ za^*SW_d9ddd_C8+(sxg{>M<0hl|*!Zk^cSOUgT!frg1E~d@U1VE$3P1RfWI|`N1Nt zE(m0;qpnP2>6x+Owz_-ibOk+d>7~BAk`zDeTp(b%1S-#*{3$M`N3!JSx0mVvXxaQB z68Dvba*S!~GxiUdYa451n|_iefo8%PoOpgv9lG(YtKUZ^Q87RmhCZMv=P*SDX_Xo9 zL{2;&l*fywCHMn4PK=uv#;NgGGc)^1(vf=5U5Jx@+~6jWu;6 z#p&mu3&?Y3mhm*Ye}US;zGl*SW=D*&%>un#qhs`RbSC4shbvb+)(Xp*K9h#c449ZU z`gMwnGZm5|*EdV+TVwfDJ}d@J+Mb@C>nBN7WHwf@&drmB>n|Wn&8{xhbUVIHyo~Q6 zx4?LI_CBU;Yo!U4tVse!(7S_$RyLU^N-lWEAUWTCVf&-i@5mfClHa_&b$jky>%(^9 zQoU`nkmrf)8MP3T+sXM4m(-T?b!UeCqF-MnNPm8H1oA-Qr6#aXtJ(9_WFl$VKP?3y z6cp%s4&NyU1}wVbK}NfCom&3Z4H6I6XLzvWAAv2uJvU>rSJYKxfzDDjK+%jM z9w$}y_NEsGXLbQqY~J=ElvNZn=XYcn#(RAE$+`&~ycK0qSi1dz(LDhE{a*n1G$1zW z#sL}kfM7K=OHRP(t})x?6@UGD@7I%n7)RrHvmbEo4mezA9QfXhNCjZvZ5H%0&1Av@ zZ<=m0A)w+NgV72onqcwp-taUMRRn{5JVv4Ap$%55_LDgL`5vkvX%X4yGg+_+*meE?mSyn^vsgutyP%j_J88XTTf~M(> z`ObIsf7fnqY$SSuftY|VGoHTUzVK&^j7i0FKwl&70xQ*T(f_Jmh=G3T2<1h1dG1P{ zxJO(Xr$(Q_zrP8K#3H0Cpap%40&r_O>|cxQ{|3wp+lkm49Zw5oG|Ron{gx8G#J>TM z-j&mnEv^ZXgJ^QTodMejghCliIa4bmJw1<*e>lPxIsfUwbM+yWn3&N*-D9ApJMB&E zX=IxW-#pY=37%Mgp*2v71#>5POib2%6|!9r>@>@I8sv(-F-RhN?9Vf_wY$riwCscQ zi5#-=+ob%q8VngqopF*syF1>L1V4@!o&-fTqf2HwRa{l2S5##-70d4!&f_F^^1sft zHm=X#oy>GWoh&XL!8v&+W2Sg@y&$}hhYd?n3Ks8gkv+hL-OX_!V;Ym5a1EMINzkh)#DVtFYMf9!t(@WQ>YZX)4QaC-a4MYvO^^w zv`LdVGBaWNATQ5qMIGV^D88+^M6GS?OTSWHeL$ro-R7Ussnn%+E7u%8L1AoV{e08p zR%VIrk(zeUQiNt1lCxr)eZq$?`{qq0%TE^9V#XZH)XJF>>#Hk$fJr#>dPsWWt{q%+ zwKgUiL7a{YW7RY|+eGt>3bZcgJ{zf{KR|VLP01$RHx3?fGQuG}>Q(NU<*r8~^0pM6 z<&Or*$;mx}7&aoj)?7O&6WTH+cr|-I9mK~?icV6Arx@#)n&viyq#P`bd2vsAm#MI| z3->-L-nksZ_chtrx*&kOLZXgKlJ0m>%aZ$be|P%J^3f;*RR!ctPp%Sj$_vE5G4kx?AY11i|{VZ?-zEdpTkAt@w)bmh~%s6 zR#87~+Rl`mq@$%3*JLqZ$lc!c0l;E(6yFNI(`%m8j%WpVy92VwZHXM1$nME!HxCOS zVq(DlL30w5_Jw|DQQL%bI0no2ckja}UxH~UkfRCEA)U}?E6#ogdv36ij%^M~I8_=y zg}WpwhyCs96=p%(4@@~V^IN^b8a$ahmcjYD-GtR1oUwaQUJ?N1TdS(Zpw?NU_}zdq zZ}cZ1KjYXr-@{)bXWR%mXf0Fa#(t(UwFY=SRsA+=lSn8U&%8i77xuN;21NqGFHsNb zYFjJ=&?hU7giQF*Qs-CRuKc+jN*m2OC+jwyS&nOe$N&xY8d+-4_R$&cwe3-S0BwCq z%Cb`h{CgXFU6O)yWN{p$G{v+jeP=rt#4A$@pP!6TGHWGy!c!Dxnqoi!9DyYQTOn>> zXxhOPhfSQyTwy!IyvdW!rUs6HE7S|c`knb6X?&7amsvP_!R#F--YcujcZci9?I~>= z#!j8cE4nm;v`U{j-XCKiG@SO&CVhv1V!5`8@r>RVwZe6pCrDywnjY|RNDvXs*(Q&~(rHOiNy&C4?D0j~l5WQK7lM=cLXI3< zqB}0}1Gxx?R3V`9xvaOJQM$HRBdA^XI6bc?EnSl+DXLuG8@ovrH9Y{)(B1UgwTz@e zDm2F&L|1(S-`1gkUoGy-+57ystc4rRy~LO9DcyivuS!Eo%^0l&X(S)WcrTvmIWzB+sK?dkMXwdJ zd@QhT6g7Tf&S;Tw{I#~kB~{n3AUC^%7OHx*xWpm4s^Z1aQ~P%l9_3NA(Y$A8-U@#! zQ=b84D$`b_9ie*!CQZu1kJ6$*0WLbVsE4}8`~6R*{ewdhBUjQsp&2gbc$GU9a_0Zx6Grv(rL8x{ z%-`!$gYgmKn%g;x*!Imm6F(XVY#G>M`Ol61jQ!z#XN}p{ zgpMUI1MVce6^WuCq*XMdjPlU&p597TrovWZ%#IWH?MC3rb>@NB#iWQ7kccHvBdFsX}z;ESB-zz|s^ZQ+s()w{Mxr6hT0cF<-Jx zZ0i*H!R2%pT%z~U`ufJT@tz@R$&%P?_$0L`-9H;lxEK~7EMVfVrGt~ogNBOutAwlk zWl}gFoQT->^LAe*F^7O9k5m`~H@qDjDuhVA-#ORHe35h5ZtJfY8e%=hI%#4vbp7J< zL$le%!V6>0I|wq)qzw2Or5&x3CORNw&Y8UTuGC$zCK(F=u~h(i6ErgNvqcK%@ zvaoZ3#%I*~phW=7i2vD2fnMh5i|DF`15L4Mt5%;my}XN;i`l_Sm8 za3sDiQt7*si^i9=&5a)kOTH#Bn__E;yu93+E(mC2;OMpt*J#7;lwV~S?GjBFlmGP@ zr4YMH0x_|gv_Y_5-3}#vNVy!y1xLVe(y<&Jy+;t1XTJn+nkFK1wKg0I@zybW!$5BM zb4}~hmHuPzg%uR*_dXh%CK zn$syA@IVBkFY!AgiFSp=-&)zh+l&YNs`;Tl@dVUmCWAb!?_2i$F>@luYCQf%`FG2; zAsEe@gsX%B%qfS+pN=q62zJo1q4`Vx2M_Y|@)8Hu06K%5@f+fCW0?~??zC-1^3Tv2W#04w&_d-JgzbJ6 zP7VKnhSq(FRpQ$3SXqVEPW%MsZfms+LQ7j=mvT^jGTAL+R^2W{BZ=BSJUnKA-&xk4 zr&86U@_WX%SD@#T`gYrg-)$wJx~48E+#ZJ1Vk_XB**bHWnY$A3t8N$8QPqD3=F*-6 zSe$G>yVDSPCx{peHc&{;Nli@X8rLf+=gg9za>1rd^fmAKidJ`yobyxvhMv@`b|jbn za)UnQZ>B#tVv4EG6LEF3gHs2Sz|I_O8KQ(lx`EFVbJM}_B}FShta7is(Z+!#P89RHkHioZ1`ZkJ*Q ziF4a+3}0pAk1OhkOzAOCsALoby!Gd#{QXO;TZKDCJ2 z`#Za1i$h`deyOiD|K!p7kz>N`5 z1`>eh2tWmR4x9qOD1^bu!&Lq+rbE#Ywy9^*JrpK^`wr+TzM}?%K&i;h1u!Tu3IkUL z;&eZoeW+sAWT2Hobie)#+LLi|t(8h3Xcxna`7OLIJIQ=R63czILDgQcdYS=88NfE1M-4XZ5_y(hz~8^NQ#%Q+3;Hr}UubySYLll&&abY4%A zjut8MOlr>0ogjq1cXLbM=uVOaYJ{sik$c0wEr2iM(tbl^?6Py@0bZPGucLJBNn0mM z+!00DC}Y*>6N<6u_eWhfX{~HN=$?21beJdJx9cRd>kqcl|0TNz)PG4UQE-k)Y6P~Y zr;w(hA=cu;r>qaO-8!d)3651K-4hd|J44%upPRtcQDU%~=lhVGy4G*8s6E!}Zx)bK@$K?S?hb~@H-kMzr>*A5>+=)&q&xW( z8C%Uf?z-xsYRl&MC7`{@DMuFOs$s)WduMR5p@#6m!f$x|rl_ajt4l`5=C`+J z5nj|L+fPcT_SBBWW-rD$lmJZqzrk;~0|1^Gr-EiuA%^B)CfEa9M{PjB|Gftg@NWPD z{_E5<3M=1{!VfLVJo6c%erDb125uHtom&q`DQ5@hL7R?DlwDj26y|?pRiCk|0rE_C zHO<u)9P!(gjvlC{m07iG#3zWtF_BSz!ci4Pu^NCj+KuIS6gwT1h(ScOxI=KjH9 zwv)Io%HZF`Xy{9n(amv51Tr41t~>!V51XEBx{mebb_{K-hVFqPrG zCz1a%Gwo^nh`KFdqR4cJ***DTw$bRQ`HY)+KLZP|A~|GXUTduWN9oQx_bL^-Z+7=;-~_ll=OLnU+&IRbhGaK2uWyV z6K)S`j%ToU+tU^E9ox z^xf&*NJmF!b>w8{YjRXJ3JS0j0St(*lWEWTVJQ1QAipwPl;4Ku@^JwQ_|(Fl?Q z6JT?2(z-w7oN+BrA?m7qspn?F;FyTz6wnFX?P4k2#L*s@X+-r0mYUrK%ieEj+<-jt zU$smg4}2{Lc4@p>261^}@t3~hUkZ03C4eksNart;1yezuK7E=~UH^)Z@R!CNyK0>n zp6o)2-Y8&Jb6~{>%pV1QpitWW+1a_=vssOuJ?rbHcQc%!BV;&A-32w#Uq2)f{Y$bR zI9%LDe#%HyUGv&pYpP(cqod;)7oB8mTx`yx%_0`{a$FvUQB^g1dVVP?d=bF$`1r_W zDzx=DgUdV;W^O9y=9X|P9mE&0?s;9Z z2gZ0*TiKx#3KqaRI&xe-q)muh`ON&BITpxdXr$Oo`9bG@O6K~xJLRiP#rB~z&87=J zsBH!h0|^}clxdm9wdIAnj*gDf4UjMS?R!rVJb&JT*xr2lWO~~7g<<+Fk4y;`adM0AYOqW1I)C(Kpq7d_ zJZH;J+TFb#2>el`-ZZ$PJV+7iHZ|aS&Y@CkGiw8WsXg2i7&z*FzF&aiFE*<^b-X@f zWY*v*TB=tiZJqKx!dW!Ok@f#L1CGzY;+Zc~c$1cnfILlElQ9Fk{6EnDwhsYTA9>7s z2N8seO#-}#HD0Vw-%GXF>=wlhNbpi~N0JwW3Wm7cB+a$}&*9p3jWy@RTIh9;w+y_%LDt8o8J3eT7i{+X+Ny!SAwVX< z>^9^>L@BJ!qfnMYs4v;kAN&$CS0FAU@s_z+oig98tR+#7<)1 zKVuY>(cIn-so}A+i1)4I-&kB+x?JV^T3?`yUM)5YP}!y`rxJUrV*`OUw~_sg-dX4j zfLDMms(P~fHV|VSQ2LoH_XtoA!>cRmsCQgw2L6X{z|zVVU|9IHUK(ZXH0aN|m=9|s zNUbzWc*Vb+R6DEvv@PcNvmV?!G+O6KVEDCNHDRmAj@5qkz0IfZr1vmK>256T>PFVuOl|C<;X!ir;i3%zRkc|a+?Juu%R=(fS-0Ru?F#MMTh27&G zs1Q19`eQ9m!^x@2mFNT;+T~}szPmi8g&+4;_H2t;TiMnwCY$$y2a|bH_reD>o9b`~ zAGzjh{73uGSKVtjK0(U=7^b_L{8L^gxO9vawMfY?W94vgta$g8i@*4JBO+f9a0r}j zvj=XR2Y4K#5z4CQK090KM42!<;2iqiax3C8WXLWlR&D}hEiwE)600gIYyPa>&KjDV z{6pCKj3s-_XXOw5*4}Ax63F}{pwA=rbLz8-5suL!pSn7?0;fjJ^g^|X1#ij(FGQ&O z!LUAiR97-RRp~hnMNC4OehlkGc*tXs9H+{vN*pJ9+k@Zsq#^;Tm)p>&sIV!Q-Iy!E zI$UQ^w3jDfBbZ@(c`#aL2v2#e26Q;XEV}l z%UljF;Cv+fByK%A{{y0&sJ|We>>Bs?zJ_MNs(T6M=WkUMst@DaNkcn*=VdPk-fiD z|EyHGeA;$M6h#bz*@=TH@YokFg%tMF-!5UO6o_V7#!8>Yx!PX0B=(ey{87 zo~M_)pC_jLP&{fnQM+A$cA8rkWgb`?beUcCwsRCG%b%X;i#9)g(FYt5Tlr1zD7Xt| z^!$a`F#dYKIx0CHl!WCE>%TVswrBWIE7=vK&9bMLYcaO_@=6JNdQL4oe6$P+8_ zz^3s@G==jC#mXw>A2OBq+n$`B_w$K*1ICL(I+s6ra{nq_iT8@{`>Sw_1$0yb>ZUK;XY;&Wi?`|xRgU2o^ihS2*SwHKhzh`$KyqD zb?7%KQoah_7_KjFVfe)#-O#p$+wy~q`|=QZo@;drem(wlw0<~x1V4nqHH#*2p)&T@ zyH#VEl}R9uncTo@SF>Fa8)9yZsMeHfT{K$6fj=r1c7;LaGz%XKc6+UEC}cE7hKBMk z(VZ9DzK|4@b_)vXXtViX7P#u=(NN1voRG-r^UDoOkn?{V3iuubN+Lr{$O;^Ei-09M z2{Lgu8QY^R8>bO-)n(y z`abk0s;MiRg0+kKoQ*eidkM|wdeGcBN+QqP{#^26P7@h3GXj10k#64 zme9w5@F|F(x#D)?rPafSG0ev&CR$gJ0`T{zFpMam@?u+&-GR4_|v-v2!At zk*}J33tFW_59Z8MZ|`$h#Rm=#*@>XlMxvs8!@D_`8`lTBAu@*9y#8t>F)>6J0skPm z0fmb^pl~5TH9LPsKnPAw+AfNShvPi|{LJMF-Kw`d7`Jddl&?ypDzy}f|G~6X^))W> z=7%QSHQs2`lx)?f>&*D-{BET&W#S-O0!ao@E7WiXjpJ8UZ7b}-X3eHqR0%GWe(9)b zVb?s$7PBN(sayM-9hdycZ&R^J)Ged)U7r2qn!UXBMmO+~)e)cVlNE2aNzEj?>m9wt z{?gcJzZE-TRCj)TI3oEYvX@g(e77BCyu^Ry*f?qZMkX4fs;!9|W_&8DaV`E651o|D z3pbJq8JTSh@ii(R!xRhv+JJ}&*RL5zgvA`?3&k57-^j#;-(GkGw$O>S|f7u@k(l35(pk`&QZVABUE zRph1LYnsIyCj^*EO0q#XdG{ZaUiQK5e9%3}q0})W`}^M2L*kmkskM}=6bTbXnZqUy zc+RZ1kr?L~skN6L9sypcSEsIlkUk4def4KYM@Nl$j52~RGl$bHn!^ALpx>rB%0PaK zR4V-8lluHh#r?^NT+UZrPooPPmqt1NIA}`ec|-(sFWMBlRMd5z?+m`w3%^AIcHo-D zF8=EtwO>5j&i<&bYtyY^tCae!`<3tyh_VPOufp?a`XWiLzXdrPSh@7gSc=b+g#9W;34~42f=`{)ci4y|BYb^pyeefPpy2Nd}%YK z9TN8v$c2VA&G9UZV50G9m1#e3wNTN5RvO!DOWdLl0~Wm$lYPHhJ1@C)hhTc&(xs*q z)tqSo5=9MJ)6BNr!A8A2U-&6$I`*GG5t5{%qNu2-bkrJJ8dy18EjMT6V~bZHpPK60 zL{M8Qf2pXFMMf3^O_e+IZ31^;s-7i}n@4vOjcDZ?>>fbHIk3(JJyM2{nq~OWtU7K% z{rOt#fdc>qM{39rYWINd;Ac%pydXsvW@BbBD(t;<)qN_`?_aFvoVw&jqJcqu_{?mp zwoC%#l%(`a$cw;hnGNJ%qkv8=EcCG(D>)Wu8KJ7HYO~)1U^WzUE17IN0mnb7VSdV) z*K1p2jw6~kP#$`Xz^4vztY{F*+xKLd{s5>fF9M(d+53?kj8_*JT|FtuDbJKzhwY>3 zK0-Q6sdo3_I0;^d?9sfF_7eOg#CF|CycuqUsZ|>j5UfNjP%C)nFr@Kiprg~aK&#?7 z&224c5kKof1b|GY{&tT&M$y8b(>6Z_`Wbj8!AGrzl-OT{gABM_iWje5=3u2+_D47G z=M>?G(5G4gryZ#blww0iCn+}W%gf&MR`2ys6r$_NaNHh`Z++XaZ>S`AUiw`Bi?6Q$ zit=6irUaA@k!}Q~JEc=Pl#&pZZkCkpZjlZF5v03Iq@=qWX;`{<_j~xC^S<-V`8?l@ zGmbNgGtWMI-`Dj^e&Iflja2!QiC4#=rJkTYeRH!@eMp%F3ccE{%i@=^M^%Ee`hDQY z!=Y{s13$mqb}^W8hg`sA%-SS--CxdlquZ#>p+G}ToFGIu;nJv#i>trB&cZeyk1Hj? ztljRM=uy{s@AD&eSwlgIm`yTLkYegh zL8ybdu8yq*6N%)-Of^tX>)7L(pKq!ZdXl$q-O78FTQ+Pedef;r5-{`xk*1VPp!@9n z{DP9iH%447|Ev}*!4Vq?YpqE-3bCWc2MwF#fNGaNB)@BM07!OKs@xq*=vJW;rtF@J zPl%-^%q*z{By+s-yagkBh{YY7y=#l??2Iqz+xWOrId12!24kqDxVwRx!vB+%^e*%_(VNMv=PIjaemgiS-}F!f z-y&1aWg!685;gPbyJb)F%oC=yLl8;55EZ&kftB&k43RG#n?Elr4`}2%{4!jQfw3VO zP&;$8eK=U^!BCNUR)i&VX2AyI%BbjgK3MA^P<@x-a*c6>hnm;MOV#R+McVceK$HI5>>Gv%KaR8*wo zvmP3~QcAVcGQUN=$e2t>SjYj z>go&Oa|}w3i!d)pD{A@@*23kb`?00kD@7AtGSaT1msmtvpS4r{qb8w&hkhvOYqruDu$zFstQ-h=LAiUL zdF)cu_Q`dN{Q5w)hsM%h+~ON$xpf`qa=FE_?q#|4A!d%vn*j$o0?%Kj z@aFyj&GOznfqs(rU2i~IC3Dz@G>+l4*ZePg;i8R-nW>IW62Q-hQGj)K`uG|kcQnok zoa+Y~uzy)!5e1ATPbKyGGPCh)yWiNBsmtg#p%!g(AgrN8_5G)&&L8Dvw78Dp$DYcU z{lNx_FCJy$sE7h-YcA3f%I-dXCGb^Cr>Wy?`}sDDIM@CP3y@^K1LOA!O}YNYkfib5 zf$J*(-#?EZh{m*Q4RsT_SYEf3dU@gY=9P-GLfFi_Yky6lA`I? zPI;bE!wx>ZTxicmWAvI1d~!DM-H%I{r_>Fd{sGp|k+i8d+GX&pN66x}h-nxmSIr_% z%VOdLsm%vi`JfI|`D*88xKkxVjU>?c)xazBFiAO!uvthN^e&)Q;$Cg^Nr%D>Yqve& zl)@=dboHoNYlYwai$w;S1zsJY714QLXLNcCt-)33rWMqEYHSPBUmJ@wpaW{$4y3in zluuzn*f90_4lRE^CEWQofTmvpWVQ^JKkeXSC-(lAq2v9sgi;0!1%JbYm(%Kt%K=$K<@d~WjlbH>noH~0JeNtleMrZ zA^`vBal|IGIn^siNCA=pFld$dLM|M56akVVe+3kl z0XYW8vUdC?BO)47|BsMtQSt`P9|{guI#SnUBx5}I#4+NPP@WaiPIb;ze zkvx!uWvUnAf6F%yMysshdK6RRg{KnGz;FDZtFIx0pRgq)f7{Db7ojvFQx^%$lRQH*e!k(g6g^Juake+ ziH*TmIx_z7Q$TbJetAhciX!8`C?srTio|WP|I|rU2gM_lg|Wa?ohtT`jNpA5tUCPB z>Cvz9|Npi5=qUHttz!LWjs#>DI+~hvz}}O7;pB+$_kYSUjjo1d`J)WIPYQ{KK0Z0^ zmEin5J^_Vk{Z8G#tRc9D2?l6U;ms%FE+E036rv??9sC#O$irdxED0!>L(9nf^%NdENOR3JZ@35ZD%tl#vk;34oIo zun|Qp&EDQ?2s6a1Tgf+bRW|oZf08ApRM-)w-JQ; zh=M}XnXO_ocVokZ;T=Ua*k#$ggpO>aSO4;|!Uw_l(dLl~EWAEbiza&;4Ama%lGDUk z{B>A&yp9v&(+qa|(%0sWfe!Pv3TrN_z)8--w|wdLW3^8Vb{S@lwM<4^d48K>B(GXw zamwOtvFdxk>N@g0h6iv8G5{40q@H3cFBoKcsz3dCn^N`0=T0lu#{bV<3|Z{*&h}P6 zkd8^u#%I3;-u25C@{(mUXcuuFg3&%MA?@vkI`3Fzo;*qX^2K}xR*E`2k}W1?eGXWo zbvxY3blo$$Kv=-xWs@UM0-o-;GQyR)pixV#($n5Cm-lnYYCxJS-o$VZ@6 zpBFtfU-yJLg*EAs@woDSWIS#sdZNC4|E{f)Bgm{gtelvg%~tZIV$5yun?crgf3ACj z_(J0~=ZsgWkCXaW)B(!h|7Jz(xbB2Z+@EB^ua8$#^7~@b#9yV_`hhbZ?qB%LP~c^^ za3fi9&&=Hl{_PPyhHP}v4*1F&KO>M=ROZYtY5QdNs|j5&NzRa7Ii3M)0F(5ok{J?4 z$&YB3(c}faitbVX_!fWzDUxj3<%XA^vhUFVG9mGEDiazG6<-&T@(@mQ9UvxJ3t^`) zW$|ok>P?6#^_xor?`UB&X>MCluPud~%gzj@w6|t)7o{DS;pmyIb_LN1E0RL^-WH%T z^Ofo|J~#Uli|7ydKGYeK4G|^P=w5UEt{s>)PS!-Aj^|tHJvzGK#(L%hU3TBzylHGq z0i=o+I8=Sdj1PRrVjjl7025OGM^E>@MUC=vIqI%uK$5V6w)!_rstAB-abH&-rl1re zAnrQ#6>lY$BU%qUcgj1r%QDCMl0YZ`l$tNT!6 zAXQPjTmYM7wtq5N~(g`!E{mpjhKy_XF8Byw|9xEHQF`^BEQ~i9WiKJ z^T>)2*d6__J)C93)y`RNm|Q04cbfN z`+OSH&bWXZ@2}e;UV5-PBZOLX5MV&#?h-cYQL0*Z3Y3kZ#j#Z`A`q2uX{ngI!}N1D zVPPNTf|8z0^cLqBQ+79Rx+BcPuUz|}L8Rz__k;4007U^09Y*~H4C@8Fa-BNCH-b-< zOp)~8-O<11at5Ks^Hh;#&c8p^0#%h8RyornsFh>Oi5$8$T>(q&?T@+FnafO{pZ1Al zuJq&fjvxwL<0|<}e24Y3%eB3&ox7(xx&+)Y#kx(uGm)$k-B^8rI8|z9t!xxiF~{9p zxk|(x_EfP|fs13FCH0+81x{yDJLF#y6GiY5!d1glY+VazH5-BC9eMvfKrFi|6~DFwL7M7`u_5X z0;?n3tar=N*~Ee~Z6jtdJPNPDM|CA^pYBz5Vt0rGiThVnRo?OmofoyNmyL)62JNP> zC1l#hRpW>|1N3CzrY9>i41_Mk^9L?r`x1~I-@WI56p!1WZn~DPbl)5cSwT02pOU!}NJ5rVZ#pZ>A_#=pPRVdCZro za6!4}qQ`Yh4J!PjOhxl0B$s5fW&HDpOus%EUe2M_c3MjY3hkt@anD}^U(jjlPIfjs zs3)@WDQ}65Qs^y^EYnOVKRojLea!VRlFx;hA2eCSS9cO2RzyHM=Z16AZS(H(byp()MBJqbkYd++>!*j2O?wZ7 z+1AdsRrP|3>GD?%JqTm1P|Vw*>s~Juo(ue5UAQZB64i$)ZGox5f^KKQB(#x#ws-Xo zy>|>Yf35nR#EZJ8nN*|a&Sk;pk`a$SErH{=_YNQ_@_(wd;%Ly37VF&OE)JX+rDk{o znHzYEHkH|_j@Ed>y2fGJaHzu*8>E)+Bu8W8a_<{jXo}u_Go5ok>1T3bkwOVHyo z)fxdWGS{)YPN<&{RLD`L zW5t-RU~16I#X?Q)0+R5#guSjH-02(1&%wNdf&==KoN??%)l(oxi1v5Z>cb;9qab`H zTTDjwil6Sw#7hBMC>1UHoSW+ zW{$&wb-9&-6GZ8EJIo(Q-6O3J_}JnIMmFwWry$ik!n&!y1$%YdJ6?1!$oIf%2H25Scl$cQL)XRbtjJY$@?S_PvxQ3<7G-V1M8l=^qGvTi(k znxRa_*T0|4925E`kSBh~>K$71;0T5hDt<5+DJu#(K@9Ke4m%7JG3=&^X7M^Cs)BS@ zs@Pgu5(;#+kz`Kvk2$ovkJ|Vkl&}Vhq1P`p8#r*moX9J>DAKNFLPFTOp2~|zZ2!rC zgkkjQL3KvwJlD!*f?Z=PM*CE=Tm+vZ=6AnN4iO)E`0YuGBD8rXcnr|F>n1B#IMi9l zHG$q&qk#P(v#JF7l6@po_~4SV!3cS^EXOqkZ-!Vn7Wd{E4h}b>(7or??4zIrXWJ&~ zqjazZ;)S500NTXMR8w=KzbrBwM1cH|I0{#cF<>^ivog42wC4H?g)K!`umUwI8k@_~ zdh4~hDh~!}8Z>^Va#1}Q0;CF8IuUJxr(TQqin=}Xt^|Ji$dnb)2&d!#ip}g0JU_nzvL_A9U_}$ z*CEJ}IL_Qm&z9uC#m!7j_1^OgLYQEBWAV~}d}0|wXEBh;ra4#~x51bCK~ z#rm514Z|j@H_d#I0aHdQ5Nnqf=88E#0O*lkBi6|L*d9)~TWlzc1MT+2dt$wDbC2@g zJ8YnW9PaZtOipUN8(q@xbdg>v6La)Pwq$p@Z`2=?k_`7Yr^wmZ_=Jk%9eXl6no~gbCziQM zD}G`J+_SRId>oiq=H(z%rX23o^DAL(r*hbLr&H~qE7A`Tq6#41_CNISb~s%|>8Ki- z{B7OjMbxg4FRJK$3~4ERf+%1{ zKtLeUOG-w-EMv&^Nqve}@YVb`EOOWQ4vCi>wRc&z_w@}*0Y?4RQ>A);Tq2z&x^FwI zZ=c1Du7CJY)_la#!c9dorC%p-!c|6P%rB6ujzR>^EK8ellR7og@ii=mRyvtTKI>Ut z3kTGq(+^J)aUlaG)amK@JXTUW{Zk0mKfP_U^3|t<_-f#{m)ts4*pa_Dv!*P89bc zKw`hozK4Ca1x>R22g^9WUg|td;Gx>%GGg-kpRGO3D|->cduMhpo@xsD@VHsY$)-Zz zK(E4EfcPOGW@2U~vqJ21u~MjNYLLYUzo~}p5<(@e&_>`%LPjm;V!RB~L39f`Hes`F zK?H9E1$Et9T)YI}$X2G8M+YBD&!L{Z4#@O*xS)uJqt4E98WeMY$5+|IlxIF3! zD6{pv7xcgiW6wMz)|8YC9KQ-{#VA)V8@Z-;eI})X7GlVXfkPJSAQ>ehLy_Q!njh}e zDx|yfMVmNmC2N5h0Ov_2M2c|YD`LF}BV_7D0*L_+%F8GcvDEW-EmW7txZ<72J?c)! z_pe_C=hfmYQ1<^1Gh|hzmkC}QlSnzBwhYMYd32x9RRreMINs16bbOLX9>}b>@XY7r zIoRAVQ5I8RubHCx__?qJ$9QxK=y${z6tbGKDCkIR4oKox&T7)3YkAB~k{O()dE<4( zqVQIpN9n~o?KqbxmMa^fm+n%zFV$!9B=X&Pa7}dK;vFBO?q>$Z_-FdsiYh0Y1ZE0_ zHGpj7t-GlIiK$gEswgn^{KXW@MA>nFjypaUj(y z1Cl0}pMvJC>z5gMDL%HJV1E3)fPS#|@<6V6XpEGyv5)1J{vhb~E=xKdtA#QB;(m5~ z{#BD6sOcYjjNu>x8t_sHO^UUTJlP3im=S)>^_HsJ*+4gqB=8uRi z?Qf+8Q-or&xF|Bdk3t>|gNDx?|14Tmlz%hfsR6b#YC^4f#-~bnNQ%>6(ZZU{94+-w z6=GM~4ROLKMZ=^xKbUC(f{>VVvcCANSj;^jSM^OM{N@25$`Z@D#J}x-mPO@sxy8d2 z@YyaMu4LJNap-HW3mir(?Kdgb9^ z*-?1RyOL?V=3gN7&Blc2@r_@MD%lt4)tI7`JUMih)y}uh1Ruo7h(Vuy1$~!-P5~RJ z2-o$_do4`6)Szfyx}A2$+DD%r)&M*z=|B^rFaWsAK4yZOYPuMmXF5I@ka_9q(GvJ$f^CdUnO zMG6uq?J7iHCP4}l2HuB}J^RRo674cJ@*E!nxV)=dkX`M}bAN)R<;+MRjkr@E5E0#G ziH{o%p0suA(S&c?1Eb2_i7T4`Ro5u#G6krNCiah|BNEQg`LAM*E}g@f>1BqN>*Mid zDSc3%zC&8vor{6*++~ufBNii&`{AqnSBL@JTKV#=^ zTmm-yfCksd=f2FGyFoaMYnxLbp61(niRlXsX{OhheM_dUTwdJKZAKIcyD#k4rhrn` zh=FYi#U%1i4>dfRR5G7@ctPad1F=m&NyMitoDr$_TyC6eylxCbGZq5Mc#i1FU3mL! zteZ!A?IS(<_u_FChE*Crh*;tugOLZ{Gytxoq$W53QWCeruHt@{7d;OUCkn)BU$KE1 z0^Sh|IOOY>ZZB)CX5P5j-&n&+J1Tq@M!S8Y?>jpD#3Ar(b!3+J zEdW7cSF{t@iMgM?cE7>)+$?4pDhTYeqQ3tki@d_m9AhTi&iG1G8!+Y%1cNO3ooGY?)b z8jE8~)1w0^OdLCz+^-@v8m2TFc#8YD**ZRDziv6yF2CJysQCTotna#K)UD}|WOOdw z{xZ5bStc?s6+9vsh(IiXL@$pNZP?9RGPAeefqc!r}c=M#NIi=?D0Y z`P2ew7atCj1R?7p-NGII9)TUpa>d^(r|B_(!bW-w1qwMl4-CA1qP;J9 zf$y>I&ZYi3KPlnuVxdGvzEw8w?OYM4%jOe~jpH$ zNPfs%+hD=BLK*smmF($*x6cEv(1D1cPRt4TsUe8Z!4`@hCgx)yXvi8 zY-94tsTgp^Wd~O@Ow8zaTr!|cOrmCN(4=ig&wzIoQyA8pSW?w5o3T^dEeTMo;#{`i z!jj|-A~A-uWpPUHzK=geLN4&l_V^=Y^)2i*c^G6N>E>F#NFHi!O4hi*98u!#6 zE@ufl+d~i%%lqqpyaGPiRcY~a@ZGlSxGwOg#}0TGI;5xlM*20HA%I7hmL*omVwQVP zOxSjniKM^b=b!zIO<`>q@&5O)KL4{?ZuZbyTyAE<*R;_(6YaOJLt(CzkOut6smY0Qn*ZPuel%{ zEhCteB6DwR#c3s*|7>qPRv^3U{3(ba7(QBT7+$`+!|rpDgHXq3Wtlw-iKk$RC4XjP zW^SGiR9tjiV*3Nd?Rs3-w$YN)QfFsFKyNdPRqSSgZvX23!K|<=!WxTCoAWoq&bORo z{B~T^yt7Hpr;O2L4uGkIP=ILm^QUJLp#%`9`|5M&b|&YWjX#R!2UoG9js+5#MzY$m zTtI+P&2`Gb-QhfUjW#*U&Pa}X%Yxlwj4Qyo^i(BM%)>RF6;c9iADIH4T-EHmgFxN; zaJ1DVy@9vC5C3{oJP^1l5pK2Re)1L>VE1Ky&)6hDqF zKXwnd;LV&q5Acob{ONg)rCvtnw*s<0*tewz%gV}5G0l0_?C4ahQXu&31RAwF_ndUe zVpDybDc7BJe>tnjJpk}p$KR9G1UgdtLuz7)dq0bEK;{$gZMWF79so?DvO?vKXNaAYu$t{T3Hi$G<;R@RUIM z&N7s6-<~ThmOOTW{Sc9yvgCbfWy1XdKg`lTf}qk?CoPTNt6sO-F~Q2xvhx06b2y!| zn}<)70}Y3QkGGDuu(5G&D2H47ZkW>@$Z>P2JrVt6F>M`mzIHKRvwe{^S@^YTT+AiK zcax*Z^We+y$_e%qtu7W0rRc?R^(ujZUs!-k*nfF&%8w5&!+-kY^8i?^ctF3+QagB2 z_DxHjc(^Qgp3?vkZ~)(NAx#!4RiWG!Pku-K{uHql7zZ*KPNAWf+X`T?aZ7HN>5m_n zX~>Iihm|8=j*9|ZH?|^*Vlm*Ese>nH&ftwH1*s`9Hz4sR0h!eLWhC8Ne^q{H(S5m2 zRR8f(v(KO{kz7R5mmlqhtcf3s%>nC)`BG|C0JcA5row?yKlp>jC%xt)ZpqAd5*mt{ zjH>lpaG-E`7|6zL<~mCCfh@I|Qb==>wTY(g-gQTp+5NTFk}v>74b<0ya*IrvkQ~sF z0Dk$4F`0;EWem*kbmLpVl*V%3 zJ*~3y##FI96(r@yc>eH7wQ~}qG^+qF58qrk)bao*l>PiQE?F7Rtx4UQljki8j~;x{ z{g@{XRNiKGT57g&bIP}o(Io0|(nRNzAfC>ccAG z28nLAV2!!%{FlN)IcJJk=@5TRqVnO}s26$o_uPdl1hhiKw)4%r))~13xfH4wLf1gK zhELa0%|W&JQf7I$q3?XL0xubfi*?**iZA;4vu7*Y_Mj}F|>(Rj`zPYEpIgS|5) zntiWsA#^=_<4_|Gcf((Z9Pcxqc(=NpUA(Gs_tUR>*MIDsfF6(z+@}yCK**%xwZ0)!<1;(rhBr|f%YEzYMBv7~MfC@8CVCamHlsY~;f>RRxUq$q`2g<_$2HmUJ;>b~$f8Kg zQ-psw-kG!*t({zi%vIZX{qFgwrKM%*IK#`slg{kSF3^|cx7E5N5|w21CF&k)Fv;R; z%TOEt&;7Ga;|#Wu7b{O^e-&@?XOgrsdgM4_IU&9AeJIdB_AD19!M~L{J8FqtczHVG z9PSQo3!1#K;r{FV^uf%JlA_+`;<6&+P#2J_ZK={(u#ABq7yhPj26BnOY?DjMl}I0xCl5lq0N9nH^G?X*iEi}P}&6b44z9U!f>}t zLb{{)g0)_KA4C@a&VQZUKfbiMgqMuZ-eq_=KniV`)@e>DKKzqkp-h1~zh8tqtC9s! z*y#42aF8|0=5(Fi_Z7WY(C(2#14y_h(kWNqjOwTRbY$|3l{BI??HtX+Ks5rpBi)Z2 zmT*hiV9}B1=;zd|?spOoh0g}OA+R?G@zlb|`MIp%UUfW>KwV)t*!;Y{%*{~3uDKQB z`s;zT$ss55a0Faz#Np&!D4|HD6hC&VZ*CrHcMwi9o0b$5nn`oTfkFDr#6Kdvb&1!Dfpx48}PMcUlN4VV)bC3P%1t&x_ zXc5)d3s_EX4}~4YYgb;7x%A+W3xRN2Fj45;?9&z#*xc#Q;6OxJLinYzV3K?{t`T*8 z0v4@lry^|fxkgIAA2~L6p)!A8Pgkd?1<4-C49Qx*ue{?4oe&_s&8{ym?HPVvU8~oB z0HkY5b5Vv{?yNY5PH9N^w$Ib((!5}=vz`Y>+lJ>f*mF|(oP4z*brqKA_ZxA2_!UuP z*N@QE|08#$2QbRgpPTv*w|0(?FD=okRP19z2S%uWWJiY_S7$i;s49#vV!UA2?L(L5 z#g3oeAnr=L>d`h@5cC>V{enJPx$0VD$Ytid|)SJX%G~w z_4IayNk!5#lhT0+=g#-@VJ%kJ7I&G;N2$TKb`zcl6b7++nT7FVMzZ zo$NQ5x|)LN@b;K8S&t3y><$}esqCo#>*DwHarAsDPa%t^hO!~&Uvxw*%$P7k_*&*I zqdJu15NC~2<8$vZtgZ;8~&hna2 zPm`IU4o@}lMv|rdmT$aZz?=ou_>S}){Kx^WXN|`*ziS=toHtL?0}ZyyoP1m4No#YO zgKpcPfa1j>wSrzk^gUv=U&!jy)PC(56}W@OEMlyptfWTwwLPHFPDrqKABWvj@y{LN zx#cFo_xd{OC)9n>5b#z1n3-*p(c}h24+Z7w5lGmX9!b6JWB(qsHSRlr)Fl{jL4-|L z;RG=^Bl2*chx8vAvz_?SMy|8h9up-dshqgyY?0Z%&+&r-ANsp#<{8LQCTk=##uydWlN_9ZiJl$cYkyxfRf zRWIexi9!i3+;;q@_>rh|G{GWI)d$SDh)|eOM9#zwXci-W_v%SgGNd<|#uj~BW=nYf zlSG`xcv~9l3A)G3TO#B$ZkS2Mc(3XVOnP?X4P4R5KA1OB35_K2T~+h~(VC2#3`;jj z0F94~lZgeWa4kF!8xe1Pr8N5Y?`K|AtcHzayeWJ^N7o@6(xgmBe%E26bbX1?Zz`Fj z#GfvGy&iz&@{67|_s7QBEcFJ&O^@oKgw^L7V;Mt44rS3CJ8Nk|E?eOwVs4pbArhgn zvqcUG?7Gy_FfS}dWNbjIyHbkhkWuc7){?P-K+f-0>T?yi!fasRr@d1I1$JC<;2HhL zgco4>c)5^rH5)y?t&#|dwkI|l+_ruAH1iIMpqkZCqLeuULP0F9i}Q$n294~%GGD3J zC_jnp+{8W}EJ$WcElhje?ck7@7``?7t`1qqQ|Ry>&>-705USOp9k5xZv08mwI??N3 zRWaZT@xAy{W%6okKklXbQ9Q!WR+}K5Hpjg@XrtQ{YA(~^!gR?nVe$8PB{YOOT-k`4 zb*n+m62D`Hw&hy_gQx>4H!q0c0k3QZ^k(1+UvvtL{&Pk6Y6_T+w!}yfs!A2AUsWOo zmaJw+boVMqd&a2~3mHX{dL2#s&v*q|Y(&ac_b>MP-~`p!kkz`X#I#Kk@F2vZ@FU$>z8T`fkIRf#G|abPemF;G7P`>1cjC9 zQX-?(yI+a;EWEa$_pMBwnHQ!rw-7`h85$L2Y&%M-^M$0|8T`M``|(4NCqg=c=eShM zP6MImGHYd0{((83o@J!_D?PvnLc+5YWV?MqLP48Cvk!1uK@?@a9WjKo4=Io~hp1@Z zhxH0u>GBS&4w`NnpxrKQah+pp18E%J{pdqbv1VbaQMp$I^4Dmk0brrFtLX|_yjOl@ z7#%}wXy0&5C9hPV_JE2v=%M*inNJ10vS_|_g2y%ENOlD2eYugdQBm`)JYY6Fy%7EN z98Mxj2xy_X4x)DirhiW~;?VP3%ojLa;_$ZlL%f{$hOz}U=}ijL$h(3LqpRMTN+bKp z4AC?iIUe3nph;w9qu+ke)HhuOLo=P&xFq90p9xEj$m1P2&@=zKpFeH(xNHwXv!g)d zR~h5O9Fc%7iGr*u^&5m{{2Lul^BBtd&{akpO|)Vt&7$o4oWp~&UTo6bBj0uy%^Wbm zF)*H$@x%!?ENVm{dNOy=+{=6h;;)p=-^0Uoq<8({j5 zr7t-$iR2Y*TboMvDZ#TA4UXg@cyZGAxm}P0Jug_C51j&rC%IISY*GMXSo>8(EI1*{ zd7hX>@A_nHFRW-Mh!D$8?CwNL|MS&V)}r}Xr$k|E>yXlCle*gZW*@R{eK0=%2aL#d z$xsbPLAh`Rdd+Z^_D^@8Z7AnyV>X_>!11K`78|UV0HQJ;EoP;bQH7FT3aC&IXEjBm zTrb)Y=wg6F8mV|Jb4e02EOtbF_O)mox8lX z%)T9wYFVb-p-pR~x@*aNYZ5E#5<)AHUWnLeCA^JIhT>mkaazoW7jcIzWHSP z3GG@(hrxcE4Khr41VhC`kLMdk6T_q}M>F2Y^^bfa$>)9BQdmDTL#o5$ z7tlktL0pr_iGS4Y0QViY@H4qSRUMopQk+S| zcRYo}#Z8UHXoyaSSp^1t<%dx0&@T}Q7I3k%)q9_(SXTXk!D*b z^gO&y-4BV3-@KGzzjzrJ^wCL{XeT{>LO_LFVZ@^}!h$)R!+mFwW~5MSKyO`eyIU`o zT-e$%Q@W<|JkL*0uY^Y>RNz&-<=LXltJ0%}qzw-sN1z@OK{B~O9=){sfjQGs;_7^c z^?f8p-U>+?O-7I4Rx*Zj-xA-U@MgLIaX(S&%S83#G!Q1aJg~@Mx@^%``|`6dzy23w z`=7J?n*j0OCy`F;ItkgSG1*eUo3etA(oawQgM5RlzgJ#j`4KV$s%qcU+Cflx_gtvx znYY|^q$0!fe)c!=U<{Chq;CtqeG>Fh{q^M6*D3 z7M13bqx;cStFYbWG=nt%a5%5&Rj#vTG3SX=7gS(jIKI6FRGzcKd<|}geNGxWpf)r= zMfvqI0k9xJ_^)P&c&k*1w`8n|#0?F8rNeUo_K!TB-)a+icBfrUdJ4Ppps6YFm0 z)`M))T=^j0s!Hru?l^*#K=+GcMi$Q83*>$g(O-S;P?2sKG>73Q9h9Ftg32z%?|MsJ zh$5&@R=q_AY?r-$XEx8NCvqg5)~Z5iIIKMqZas#z&U0X=eJdHk*@9N+4?FOi+3hc& z{U4WpD9$xC^t;x%R`Ku^4S<$VlRB&!6-|M=VZ-4e_t%lGSCQgy$y`>H8oyzEixL1E z^&t-MKtGXA!Na*76{Nnr{l(R9KN||^Km28in|MmPb1Jun7PH>NGo%;T8}6PX_N=1@ z_HlM%Uf`6R>RJ!B6A<6$OE&@iRh;CM1dm2u$2eUjAi^1mF!VYe1_E6?wv(Au1h#H| znFD| z;|_f2xcDUWzx~vc_jI|u2rK)86;awKpC}P8>IRTb78E0KcFR2Ro%wHq8e}A|q`Ti~D-&T)67FUDHIficD@CwSPNbkNq@ZfHa=RgEV~9 zD{s!KqdltgG)a4Cdf{fD=3;reb(#C#c-i*61G=crP`Kj1xK^=}Wn53u_OX0w&#&R) zdQev{)k;)PA6`tv6Z>6J>! z7h)s;wHofDg8f!I(N_NZW%tjHk!yo)i7GyOGPx2du7L~G-toT6m(5sOB2NN(Z|(}> zhJd8;p`fsI=WIfMFH0bnhw$8nrXm7#`+XGFK`CT&ogEt3a&A7#86=Z)p8Noriy+7Y z>(U#2pM1&obbs&wQ4oTW|W2pi?0 ze`JIYkYm={%lwvc0H-2fnxLx zw{a&zQ^#AZk=D>qRPg->#rX$o6&LfSrlvxdT{WqT>wh?|roO5FSi=6jnFXxK0(@?p z&y$M>hc`%%C3#TyS>3?riBIuKoZ0yq`)rr1+9*VEmGYUHhsQVj7LR7Be2@{#v#x{a zay!VbO#*O-1tkH8v(&y@3Np1{KQ6cPFLdy3|GM~w$HM30Lgy`cP5MzxdO$BJw*}^T z{fnSCh99uKJrnWWJ2R^R8gM&J56Nk_AOO3C3EmLm!+2%n1N}5Xj*tVp0X5 z2~o6vGh@ORG*a8M9d||Dz75EwV)szU(kPqVW}AiMO=-fxh*0J_%bog+vk|$9#Ct&M z^ca(-l6Tm@o_n!*$j9S7G3RVGQ*b$Qh((R~ZxGdZrieqj$ zpmyGM4{^u)I=4(?LzAJJBRKh$X0*TP_p|feannb3hTCVK$BORbHm9xQzOfe}qr|=Z zh4%I*JG-gu=NllMDwi}*+Mdt`+eP#8_eSTJaSOZ`h}FIT^k+u#dPRj5--(K~1QByZ zw{AgPAm@vF=N|WWWhwj`PU^PDdO*6_S%-&lfah8KjK!RU89#46@Kc75G~1`jcKzYW zwmsB9^MjVH1}cgXmAqSaoX>`q2hGBQVFrh6pKt^lR7UHV@Z43=s6#tt>7sFsDq z$A7^NI3BSB%(n}&c)PMF;pOclM`ab_7Tt<#(=6wdCrj$h7ZJ8Ccee-opJO(VE0%DNr25b z>olvyU0UOnH{a;gKoaY1hsCNP_;shk28D0}WX<>BinT^Jld_bm1R%kxLB-}x@oSsC z(RC^TmZovVKdRFR0CJ7PX0{YBQLNEyIfiUIjEdidx))GQA?^29?dno=(V;?OuCr;l zzuL}mFs}mIKN{iP{Jyv$&L%%cf2A}Yg>ARe?tymwjuj!ECB$lgl$u~QrwfhStyGy+ zY54mED6aa*nPrRXj($bI!If83tdU+>lL)fA5L2&=w-`y6fj9TQ_=+jW=V)xRY)`9y zdlcOdcKGGl94%(Ett8BMx4gq{SUd5W0YB}xASB`gy87_P+TLZszyDFfgt%xLgjmG{0#je>t$=c->_f`B#oD51-e7k(P zm}>f}iZM%V&7JY*Sf_XAO=^vR?LTi#Pk!860* zEaO%k?4-LATx=JL+j`UuRk>b0l)GR3%;n7yM@PSu>9-_5#JLL+%Dj{cEDboOhNq26 z6@NcD!Vz;x)jNt2YGGGA&asqLMz)p_kEdHF7^L0~vVIls8GyVUImNw;MMmqaN(@1( zFlccbW-+W(<5H7-(w@=^F`TXVTGi#tkT3OLE~s7Q$89WQ_n>K252aVWfLnuPBwXmv zCT8AU&8VM4)F=E)_=_BG>&w~YQ&mw|-Mw`Kt~LCwkDWF|XaJY#HB+tLo@J_bOnEgn zTKMY}84i8)6AH<6qZb2_(yVfkL^w&F1PMN6%|aUp;xJQ7g$Pz>p*(L7G!1@!#@T7#^gV8X@gKRZT(t)@I*& zICPfup8V0Br%NA8=+X^EVLkXzXY$Q8Q%xzY$OPRlZ;_^HAWy*WG;o;wB%3(_^4OW` z&9R-s_ym-%o0lp>#=Za}e?{8{psFqA<(#@yBeJo?Rx{;>cJEn@KEf`BXA_kCW$^!C z-o~|ygm?_#t_!KVBke@3Cf0pXAYfcL2$*`Saa4yooc^xl@H{x*cH>4V$XxguMT6CF zlSJ`(B6J1nWxl*ncjdV$@arTSdXJPvy#hP+-f5zwixsTaWa7$rHBW^6t&$zPYBfr&&<&x-AISWHf|xSN>UU4{HX9Y5H}QH(72k=H{WVk z(zc33=31TPs_x+bv#HI@{r_%zwQ4AY?J+5+JuQQ50u%7a77j zDLpCyP`(5Pz5~<^d2O&%T|nn_Fxf%WlO>9j6zmrQ$73FMd=9#0XHNlCZ)ROc#iIDQ zGg28@FQH;U`=1>(qphi&am9e-SMt>Hw-^K}>laA7H+0DbO-b-x1o_J#4pQMcue^ zw}>He80vqehiyBaI;73ql}-Y^ey#Y7RXYT{>33j~wk2w^-78eg(#6?lNw>QLEI!nG z6B|pR0$CIpg+qMb^btRy%Of8H*6i|EJWZg95+!ct7ukR4rT=m%GDSbMG>RJ6>?pTr zK|b_%)R%`ju4SNc-L0BNQNAYpL;a(G_V<@bTlboR9BDjh>Y?7kzCq0x2}R)@T+osx zw%%6sl>{_A=pE#Gu3Z=`N(haO9Y7uBisuM;xQm{s-`DGH8ZB? zmrcA0U|gl*AiSg~Eh?IJXy_RirFR z;vta$NLxQ5C2UKX2ClYqNNhk~a0C7F(Lqly6;wuUsFQ+H4Nov`bN$q%qZ10p%CSw;RkX_C81oTn~Sn8NH+%rdCKvR z{J$H#N;G}T+!`EzaVm|ieIj=kd7Zl(57OS>z5ZNt`Frs}JS(%)rq56TS_E7^sq()a z)RCNrk5FRtXVv2%CdS`8Kh-1{n85lW#tN3*YM;l` zO1B;(=P^a}DW>>hs3ps{$|;$xrV;1Fmp4y6L0#}+h*pb8#a_{)6vL(1{yDpev|G@@ z;d8DFQtH`7YV@plbwXnUU6XdWG}FNpv2KGV_oY?tUYuiHOA!si%+mmaBx5&p=xE@& z(F48>{$LT6jaXEX!t&&_-aSCgekK3^H zdOi$g>0|kh4)_1nV3p*uTJ-Ivcm5DOFEAK4h}Yir>wDK^?1v!KIf?RIX@5)2r3_8p zL8&fTN!>&E38H zCF&ZO+mHAoFUaWium+pui^^Ssz4^Xj5U-npPRGTA{Kl** zefRsdu+BX7iQ~75scE}-Qq@GF1xc5iP!)8{IwI#|I)4=QLm?`~@%79{2Cpai9r|BV z8su>r<+D+y~qU6#+?!r33zzO z)en@h1q8S^qSYDC*6Oq?Aj)oNqr!VqUA|~DwD5c2BB*ElhYB{BcrouM17NzjL^VcT zE@rBH8yxC2d-CJuIoGmZ6)Mk_;{4tp>@5FOvxC4mGl~FEp zPDM*rRvu1{xs7J_#!!4Br8VAKhQ0c6fP)L>>@)hR=V7s|)md(-1ROO?JYyU{US`Xg z56&Bi<_@4H*V{a%88$=k?=jg4)%bJ@#-c_PJ{B?BV@&Wwdzzd-1=BNf=g7Qw#y6EtBaZteN;VvRW5d#!>79#e;8*5_yf zBKlFqmZkN42t$K>xQf8D^II5PKPoG%&EjY z26yJ~4XJR**L|c?Iw!nW?Ss*N%~o;q^I5BXx8xkHTdri73p|P7%O#1N2GH(VIdXYp zADPKEtq{3JtGU-B2F(+X|L9{&Ev1ShiGKJJCP%c-S0I!C#s|sF-UTr3w5sPOd>BZL zVj40_&ds$%AWtgC)1HVV+{AC@W(e4&O42^A&qXRaE>uolyY!HZ%c_=!u`s@&+ZQpqdAA*k|wXq@T{Pea==26$N7aTKO>Fwz?3nlk|tqy=BMDlePCE73=CxE zr)HpHoSmjzz-NB~s@1;nxb2}G;)nKS2$_fP@4oM%=SG-_I$e0*m$X9=dqfoJVmck~ zf7n&yy>N?UFLI&lzYR|gGEY46lktERCU=~DyeAu7GHtSN0zFNrq{aLpb$xE2lWe^U zn449C5I*$gMvUe31sNA>teS)W5X^X4LbS=J8BX}!XLb3^KZABkR5<{P`HWkCjpCc1G>ep3@V$LyJq3} zIZ;>V$cK=_L#*MyABEPae`sXi?tUhh(0kdcgqCjxSmqOT=WV&E{RHpOkpHDcJ zZ`C(ctirQN*9D30%((Upo&AFD-;^K+g{pf}UJNACd!N5)gWR`?rWk&zeV3C~r<zDefI z%&)fEglKl-Qn@Jlj4wRT3UgZJTQnEl$jqdfnSFNDmX^wGWIk-tMvh>wbD&jR9w#7A zzyEbF1O?VW~fOW!s`{(X=r&pp*gmW4<>l?C*Xj zUU80jgSfwSbvto?t9{LQ^{t&gG5LdqFl~v5%t7nq(&zG%GkPr{Nkq~7q61Cu<q)J|N>{Ld}dNLwiQW79%!~G&{<9j;^2Vx_1k&l=Bm4}N3PQ)K??Ou6K z@@$D#(@cl3JxVmm^O`!m>aM|y$$$)cRY?8u<~vQ;ypJnYhmm=35f-*zPs!8{97kRl z1FGJ7K+wyGKM7O7`SijURrb$@5zpWW)j2$>?i%J>^kvy=G_g@8Bh2$EYnfafij4Bq znBc|K?WJ3EscZeqX#$Se$m54u&*RhD3WgD7B03)mDgOeffB-)uG25H{b7}FjBFz}i zC>x#W^X`~UJr-tDTg;cyq4=N$z{#B)AWh9nh4Ln<*jcLf!{7h@KaQ|0>|qq~=0|NS z!w3N(TMEkecKwFoVbUnP)4?iMVw-Co$e;NDh|ygip+P}Z!Dxa2ngR+2muEDy=WEiV zx!|&LUEu0XijY-O%A^pgX7WbeQE3gAwN(0=p>OcSF!$RO%U9L|(jfYoZA*Q#)Eg0y z-Oy(Z3F{E)7+H^=x5*jOBkEtD?bNtUM1?88?dTxIa_z@lk~2CtKuetCghK<%s;=zM zXJSZQ-+3F9Y;5e;Us=+(*a!fFl`VR-T69?gLf;waO4zR0cOU3*{#@`qBD@z#@a$hNyE-GGb3Jk)Z@ndK#eHavI&CMzN*>j<`Yccj&$xlY1vc@mAw@-uYOOW6GG9yV0 z-J8OJpt9z%9M0U|-v4QTVQzk-Q|&}Y)y$-rkD$+|K=MCG+6pBNTBjR%9Cx!mnC}#q z6glj*WEeF3;Ido0$pC*2ovHh=5e$Y)K_+{F(t_}CXrFmGsDq#63%Xa zwwegoyVu(O?wWJ|>0Wn>g*;@nulZVS^Xvb3d;R5=7779+9r~a#%YXfDh46`_S0#m> z;j>XmsS{Sqqs}nPjnnNFmg2I%i$V|64zCzOEv)>8t#_=|6E9WM%AN|%t^>>3YbOLp z4gJ8}Z<@h0k}pjfK))xXqdVpTJ60dz45fd4b~3(^H&nN?<7nclZ3ZRv&V75Xs=cW{ zxs&q5^6Arqf$Lqf($DAmj*jK*)Z!B`pUeJvnESY-z3on_bPoQGU1C|JORusNiO)j!#WbcXvGry$@I_}uhqW*+7(z&*6r4}ILDGE})M zB&3HSJUh=1#xqV+XFs_8{ar!V^CaAxyH2XP3;X!wmy>BZVA3}yV70P0v5Hp`1_YsaNFhl9x} zPtng357`wY3X$gOF`$W*r0CjyvJl!47*qzmhw(Jeeb&seH8eCFoN?Pk(G&t|bzL#n zBKD*U3JRHZYW!}(q~W@;lAhYVJ6_}s9z8@x#VkhO&N5^W&X7wN;}Mf{WNXa%jUdjTKJ43lqtYo zBU{`C_>ft~p}Z$ggzb88$EW{vP)WX@o|u?S2cVDwkYVGl>wQ3J3IaPa_`g%9|2;C+ zt!96E*Ee3w7$3==%$fl>-qL}+6X|#|x1`gEec*YJZz?qnJylV)aUW?kH<^)NtT3$V zv{Wfw`cv4%tg&2eW)VDPUjtrY=xYQ*VefLx0kLe7UHjisS-~ASm;T#chPjY-fv$l8 zycrg|AKt%vE86)JXgym44}h+Sg@h_dU;8s?Dv2xqGv<486!6El^H#th zf;*)}n%h;(jLEIp=d+FOXZ@tJl*Cmzr44}C>2F2wE0R;~8^BSum}>(QT_M>g67^RF|XDcEaRV%-`98UcOQL;BJfi`)g5zGsS z>{+-5n$@wJzbE&NlENy7l-2|s&(3V2v1)bcag+kWpHY!Y*cdh&R7vk=h3wF-mouOi z9pd=ZV)h4-jOc5#+2U@7)hHVoM8V&iaB{3D(GnKxF9w@x!U^jA`o^^Ifxg3eBr)#y zzw&K!fmi=Yg0XnGmIui5D{`c{xQ3p;#ibFPR=RKZIvTU}Zt)hzsnXUp+6|cHDvISe z&tT9%YTxUPA?KN`EB-9&?VTZ~w+8HmvP^`B{wr2i1#M1LHTkKo6yhBYx)x_o+C=1L zG4{qAzC*9JJde$=bhiCg^Dr_6kngLZtf48K-&(Qw+)WD%qL>b%>CLr`jVHuI zV+}ml!kfGX4LqG<3ycZyZ zc;*W4Q+lE%u^F+kwo&6YAH|;j+N-^aK@Q5g!y){r3&}zAWjh-RhL+X~3OnVmjPTBP zWD^ZF{)rXVU)%l8#`^n3Q9Sn2`RXybZ%1upTy|bsDTImV!VRlI5q|weeV?_;3HbR5 zPvA+iY_H+BwZ4bBTAT4dt5`eQKdUb0eRWg|>si7z{awxn0@ zdJREy(r_T(E~ruJ?|XiTBWdhgIIIq*aAJ;`zuj~awKxVRKhvlITBUS=IeJOpxh--r z3M`KrF~i*mv#_vo7v1o{P2Ef%j0PTp>O$c1ApcaV6^)(WNZVcPwG`d+jlkWd9HYC* zqJgDhE+fTg)xP_KP{UrJ;QyBy;=lY*L3&73AkAjYTf}auG4?K(0y-_!?a4-fVbbM; zVwc;NY8s^fhHf-%7znl%h+TT^1K1qP!@GKvoW$K<3`EF$SbQp>Y(xu**4&-fNpPOM z`Bo0C$u0?x+QURXP_s^A65CtsH~2|zPw1`a;$xz*yH~W{s`6#y4dylF-%C0TQ=O<3 zG3ClYCLO&5zi%6{{vZpZCJ~~dChQeupfhJL-HW}#{-mH5>V>EQ5qB%+#8H@7=y4iZ zRv?2UiL#p{vtfXjTOS>>j%S zvtPYKf{}4tiG{TbIT3Ey=m?lWsuAQDf+q?UG{s>xAq5VHxmFE4iw<&fZG9wSG!=e0 zie2N~E6y*eoD!t2PWycBSO;1nuDLR~Auzkh$=uD9LFC**yH!yv^QcoS0l=q@K*yIm zJwH@)S)=RH=6Aco^~N}?L0D>K9ZYZDInG0ayGHFli@tMF0hGZWGU52i_*)_Oy47?l zI~KrWSRUR5M422K3|)%OQ(vU>es42(@mZcmb1TQVh|TLw zeL}K=1rJ8(6}#P`c#{@}8hh{Av3O3Vq-mlHQIyEv9;18pBt!>otFfdje!qVQ{Zz}9 zbV=e`^nNJ_gKFl(ca2BAibsA4&@X!)EK-YkN}8tk0$Y*Hr5_hO;osa2X56P>w%UpK2*Z+8m6vQ6P)U2^EH}bR2u=#84{vZBelKW5#9pq z#5tRqGWYWzIf^cgM}sbm_;Vo)y?sSZuKQnMYBX1x(3B<8Kohpi6N^t>do63bhi!E} z=T+#MMVh5Y;u7Jg3A=u$fB1IMFl}Wt%Z0SBHhGLO#pk)Mz3w)jgJlrRGpcgojMmXG zTDG@)LvOHc2c&JEXVduf3=$V3BS?p}sY<}|`+zB1^0x&#h>~^Y+M5Sz;sRs<9|EG+ z@vBs#7Vz0E)%oOBVE_;CKN2xOB4bDvxV)Wu+|_rUQE6X42fw0Qq2Dc}aA1c=KSb`< zY+M*Zg;a8Kd}meel%Vnd4&5=2xxwV-ve=G6xT}9ELA1K*L|CNjPT6s3Y&!ge_0b2l zQ~Dfe5=6VhRF?@a3Eb4e0Wq>~FkSeC%CxF*@XYp%!d4BfYs`r^UU1eRCWHD(1TN7S z`zx?OrsD7?rGg=L;|y{aq{e`^NS6se7p#X^zLb^4h$(Xft#A%FcES0>DAn~OrUB}^4gUJl9KUwdgZ(~52)SFX6v-ZmrcS2f(()BMJvE$W)rB5?|->|;cG4=3j4yh z5$5K7{~a}{Pq;%|CQa1@iD~0Y6i`I{_vz6;irrJP2Ll+_`WcK2`LrcuFB|kt-j?xG z(ihY~7y7}`F4imR{Qw3Xu0HP3K9&3V-xjQdb*lA&0!*x_+=iSpNOc>apeskbY=x#|Z=#*D$^XY>e`qitk^z!w=R&o!y)YdOIFPU9o_2t8sRPIyr zP_@;JO`1F)Sm&RRFQB=yV4bRxXKmg+E2CabtQV6_u2K1dzt@`R6lW7rGfZ3Ddq_<} zRb}np>d+NnHTaX`_3Rb7sBt0mnsiSwdME492uJX`m$eHuiob&1O{t!QLP?a|X`#(w zi3=Eu3(-P;f4qFoFIXT(30q^jZgI=6K0k!a6ZU}`4gH5K^P!J`b^%;izV_F--j5KV z-&mDXoAZbdYBhxK%iW;b#>1 z1&emiWwsj%KglK3GQ$En^mGchS37$?j0bYeZ>S2P1G6Ypo}q#2}VJP7QOO zHKMgpB zMy)5Oo1(ILo$7fNXfhbTH8~nPli-4~j^1Z{-t8bSWRCXqhGbOZ93MY6m)BX|)fOgc z^_W47WB_@2BUy!Zs-cE!_R8*cMHTphfWh>9%f$$f$jOvH%sF2^9dh~|1FArJ!BT^a zC5Y`?*q(>$1|-&G0P=f7n15lMk%58PQn5;o80G0~P?Phbq<|I`Qu}q+=0V~@d~z^i zeq7~?HXDtE`$nzkd)*&=;)v%NP=lZ2N)C9qO_CM3LfJrNq*iW*I1<4&#(Va?W^bb`C3g$Oun(BQ%Q*be1PR0jABwp&Kc&jM7Z(xu zY=Mqf(X7d4s3M1k=4PWWo84q3&{* zotBYC!>CjVS7Pm-CwBYNh@iWIo`f1&rD9r6gs6O2t*a{C*1k4G2P9T@0f8C?5$qKY zOS6Lv&}66EcQ<+ZH|treb-X9hp6ZZmQ0{$6fv;v90Y8#YzcW)X{R}tZf?0Nu+4YYQ z0qBXHURiZ_HYCy74Ss8V{?Zn_tWL#5fxC}OkS~g~wOfH$bs$H;;7MLqXSUxU3CTZ= zrhZ6#z7BW|_B}ocZ_M+!ww2wj!K;6b5_$9P(nzkpe;-Jpovk?`;Un>b--#iuUS^FR zpyk|H`hC5D<%&&;W2vD0M&*_P~)myQw674}sy2+i2TN0)7lXY=n1{@!s=Dc(_ z_i7-m=uyJu5wSw##ZU!vTHeaVC#x`C5^vzb7kw7o#HXh4t)8 ziY$rNJ9;N`H+4E#mcIYPIVpxmx66XqbSf#iVt~B#W30Y)Y;tA%KW)5LOi!`HvLhtr zWyImpG0}rbVKJPexLBeN{V6Inxb*KUgHZj5>MD$6Z51@c%}aU1VVLQ1Om{GMySD&m z>*Me|cZzZKC>$7-ID|GZc5^UE&?~OT>BJ~J-Z)Z6Ij;HNxp)K#U3fiNqt;_ilACV;)tUpHTcFwoVTM(LH_EDNw-#PtQ^958zsHgnM+DF!yH&K6$F0Ii}(DCiFXKbWOT zX0|1x2bS=KIuWS6pI%Q~HZollncC&mKjac~eGdd8e+LKq)c{694sPuXl6xp-nH;d+y9_xV3$>GNMd zAkZp07Ckkw&18Hx)YXjn)iAv=`K(l&K#Xo4hjVu5xKwYkl*vD+raXh@ZmD1QL3#k{ zQAAu)De=1q%&}sIqd{6x0+e2+~JBWyIrC={r-t_t03MAa_wCoFaiVcC}?o#;tq zGbv&=)3M+lU($_g^@7M@=;{`$++ACShRd^HRv~7a;OT&-H z-C^|g_51TSI3x;NN8gFMvcCic>IR+g5XL!TWBW3C0YD*^+X`$VQ`;zuo(dv{>?<@; zB-rSt`m@m!!jJ6%YYCP!NuQw27$9&60TY!0`S5D@pp3GJhLzEk!%ThMV-b2LdS-fs zi@iD43!@-rw#}hj#v)h$h+WF_T-Enn#v%n>E;L-}A~MyaIv~+-_xM zVYG>tF2*2L<^1_{<~HCeJ+$jb5fJtzZat$)ogCgbA73X{r9^FS*8qss?G zXW`Y|xV5M5G^`F>azue%jMajf=b}ZwqdyG{zFrETRFMrckPIct95IWHoNWKIu1gO) zjE=w4G;3y>4|kJ;hcTx_afiLVx@vLSzj>FFUghE^yWTr?A1|boZcf_CY}@>?ik??q za_~uQ5ICFPyZUnPWC>#t$3%=^igpajkiASj8+Da%F&o-y)m%+h8E)^- zq(K@v$V&!rV9dEpYNyHO?;;>~#rOz$2E_dXUrnDK?K(__th;$p&P^3;8c({oVZgXU zS)7-5iuY6iz(I~b&JNjtmiqgawTR!ZD<6gYLg_)mgJ^tVbB0-H(C+RU#$N<| zF#~~HXjcRe@-3wNRePol49%J$21o5qKv;VObjH{)zMyn!55!E( zzrt}}nYJ&oUn0_DUyvzzQXWfdtg?=}$%?=i{B~-Vmc{ zAQ@_>ina?J=86yZe-u*DZ%-=MOCh-Thrrw~6UZZ+V_qVfG9>=V&dg&QJ{shL)&n1w zD8z6n=%^i|3&unIz3*)0O~jwq|H0{dMf`A6s=Z$0%D_<+j={#>w;dP&B^ySAh)vYY z7Qn=UTPB6wvGfB9E`Y4?U2l<1U9e(*8t%}Zqm zQ|pwtI!}lmHEj3>Fgz2}=t`Uupnbs!n%8!#nTSfX!oOrIC<`g~FF?qw+ww0F+@c!f zeEM5e{Z9{ri2_hsn{;XVvIce(Ji;l{5I5P37H+OF(K(&^#&LMgS{>%+cfa7t)pu~E z3%&qST^WZWrR1%*S&p6wPQ@=W0JN1bmm>==AdndGW;C6>R=B3gafyYSt%rEr*7lN_ z98}nic}FM&c9xJ@f7;^1&j;4=W`#r$s1Ak1m&`~V-9%*7)$5>Lk)ebsik5}M3|^FF z?AVJdymhv1zVxJhA*jQxT$abE^@ict``Ea?7JPd0Ve9nLiS*=I_sxQ7sTME5yhJCU z0Y~E;GmoF*=?@yUp`r9P#)g14w96oj9lpZdwUa@+OB|y!94JmKD2AxZL$GpxpI6qR zB#-ulu)|m+uBiS0yd1qgeR@pvLT98#Bn}QKxYhMbmK|v0dG7eO;I@Ddc&R<+YiT`O54LA!Cxl zuyu4kaqf>7bU~iLt5E%^@&c!9b7ZRg1?)tX=-p1nm-hixcW+@Pb^f%V<->2@t0|3ktli#E9TrhBmy!MyL+;dV-`n5?(gYf5e#HC{7ifv}124m4 z>lsSoZ}`#s2JOl+9x?}o{&hKm()N}kyr;AnN)XR?Xk}^_?(s+$?pEtEg{KoIOP8^A zVGJV;gw~D$?{Yuc5-qp6zaq{W%0FG%SpVe1g_8Zm&;RRGW|PJ7l8_-mkkw_Ux0QIhnNsBxJ`=|fEwB(Powv2y|Og!*k7Fo~)QI{Q>XR%5j zV^K%9Y;0`k+mNrj{ZmEWyTiOg`~1xW_z(F6bd~x$ez7HA`DGmLW{kfbEUL5=bTSCI z+@Jv_*L0(f{Azi!WXEsgMjzmz%lQDKN<^mn88?q~1m3GZii4F2Ldkri^~ z@QA7nLH2q-Q(G=TWFDAexI(D2%W9P2+X`qE(`SU=yavEX?C`XABV0oppC=5wsg%KQ ze!;OrxM$BYpJp)=J2;YRZ#IJg9%lprO=feJNHf>&7dn}xMU2-KCNaX)EqP72PoLc6 z=^}Ea_LDQL`N)ef{u*0bWJ3$Sr`@Hj1DU87U}{YRPI^KscysAn-DwB4bXDe)zDlb+p#^M5A|$1r1&08Bfo3L5suHM2SvzRd=?O zC-?7{qzmO#Vq>Iz*SIGA0N4_~Y5ms7BQ@ny| zeypXW`$1rv$qAGQI@WXUAM-Ca9E^sN3BeK>#E<1`m&)4h+OE!xL_lc`g&fL#^BV>_ zi+Jb%;Dl!L|AP}+;P}skA+8+KtQS3( z?_+-uiaP(!Z*o2RS^~8`IH;Y^Hr6%JHhYLC8qP6{?Fsx3?U;*cP%<3gdMaSQmilj8 z&#B)5Exs4!ghL_{ry50?5pv=)RRCd=vK4ZCx*f^*u76$C5~wOIFO!%pyEJ9GsXoF= zjk76#3ER;zGkfnq5-%Qjq7=mc;)yl_Jke#LIZlH{6@G4j1f-vABnk;~e@;sNI4cGD z`&7i2dqo_w=_>g7^5GzW=TxZgd+I`SbF^DAXwF`=_=?hye*%a~XAY$CWDz%=1J(q- zh{56EdJU9~P@1YKmRQ;)hZ(HJlP%A`e?RFSMwgLc!$tw6{}he0c6J>`)2j;9qsp0$ zWM2?%aihWIzc(TP?bL+L)8BaAwNqu|{h9g$V>G@`S3VkpLVFe1f0QGY!U%HsFRF29 z`CJIo3xEY`0IUX};PV6JqtZd89d9ba8UW9I zAUp>AaZ!l44&F;^T169c<@BjnoijMg`un9j;{TxVTvzU=F&2ONWPla>Jp_Gj3&QY} z-a1=IL`3bSec825Ln43Ty?(U)Z8a^=8(3xUyvzhC8xM~F+?GnxPro)9<2iU&B{@&# zhtiHb%Ok~^<~y@`ki~GKwJEFO@y(2z+7C(SrS8<*|9A2+R?z#SW9I8DYfBZSVLT#_ zqp@xeeP`Hv>ykbacB;upg>W{Dg5dAtGXT2RVIh2jb;x5FF5p5>iM^#Ik0d9#+jZw3hF6&Ux`UZGYJN{W1zJ(d@k2kP;z(tQ;maT4RgB6 zyl0xB@l?4OpjPPS;62{)VzBG$@8^HOLxs8eCqjeLdrL4r8q;5lAGG?)=Sb)k0v7td z+mxA)eJ7hdrNZqO)QP2=dG<`s(vTy09ihpP1I7bLsbcMZ2tZ4hTl+EFV0GWt(e(iI z4b48%tA;N??!t9hG=)o61tkKGLk((dKioT~1-Q}rUw08u_q=_hujio`VeZ)b);qqh zRMd4ZeF6`2nA6R{d!wocV}BRXxP)2&#&5h^sO#<{J-zrU4=(;=q`>kY)xfNWvm!Ej z7_vzt;8P2V=8hcvmw-%mi8p#Rv)L}9X*y6L%gK|trM8Lmgku;*`i+G5Rmx0Ddzmcj zx=)h|NLF1Qmze%JNQ5af=64&@G0p=THRbGgJoUbBvnYS$`%iStXn2o!F#5z|MUnoC zf()nJKp2m><%(Fvdo$?}Bl2YIL?knpPs>Q&eUnBfS}fP?Ab3!b6BQDxNcB9F{KEh@ zxIAnVa3-%74nNRmIa0Z5Kr;WADza4{7dvkz7aC2`{+H9+6PMML7iy_Nkx6;gIPz#qfogW`0X!Xe^8^({W zZ}rVxX!B|Su&^we>t3*9E}#r#F`>d&W=5Gc!WA|^+=IO@oZA)0eeTQ({oWCuNLV!6m#*6Z%IR+bKPZmYoH&*yHu7 zk^n43RajhMojK%%Ntq~1ZziA()O}mwHJkUEE7PMY@$c)2a@!eRkl0^5^tTBRC;!`< zI0%5!yCcD*ro<59naKSAQe`i#XaM%O#VAIVQ2S^&&*dYvJ zqmPgCjyw(*?3g(d(;Ate_sc7|QSnwuWwKSnTyyoadq|$8dYHT_0UOJhMwla}rAAgq z3^CuuNCFm{yS2K^04y)M$w8LlK@rpD{aGeTaB9v@*KFYX$!r(D7~%5>dI2AmsH zQj%Zd_~dwQ@LdJv_((J@qaVCp%ay;4B-1ai!!PkJ=ch-kKdI?R&K`4rrHQ~h=IpBk z1jkbBi#=WXh$dR&4SWqw!F`uSvqkl2(B|bhLdJ6o+a?|@dMWAXhD1z*W$1(5>t80v zBarB#o6ksl@}t>29MqOe)DJuVe%2%ic>x}>xTzUFDlg+rAi;0IDywzv?OGN!CIeZK zA6apn={=Eo&2a6_-KT-gPbH_jek+S??sTrBWpqxY3h~*Z5KzlTm(&$ib}352shl1cKRtiE6|(6G+UJNmj|hz@O|Y!}M8^@18W@~V z+#N+YN$2iy0AN}v6~!%qyyZs7#ZsCI;t1WrsQ^yG7rE9&>>pc*{QpHVE^-4LfY80L zm(U?=GO@I$QNqQ}769#e`6>u`T}IEdP$(RYuHHU3EaS!cG^GmN3GgR^M% z5P~>1o%bD$?pe!clE2%jv->za*n(??Qio*k@}`fo^9zRacKT2@~wj=F6yFIKAPFO00ZN%T0Q7ta59=WdK*Q* z%#%IW$2N*d*&rhzP?${gj@FTRHX;4hz-#@nL=^+&YG0v~5G9v&8R!nEnkAWS&2Lx? zIU~v~82%2MoaFM5=b5TQp!*@rys++qR??c$ssvSbKNK+DMRE4T<};%mB+Jfz0aj%C z3D|UkD79mX5IGW_VK423o8*rxh^-U_-M|I+UbUUsQMs)AZKBV_Ye2jqf~>O=sZ9li zRkKXj`V4k*5sRvdkA@aI}N2FS@F*(BBV#KFUvHh_fsWrdSePC&f$( zUCf1~Bkp=6Z;`{plPIJCeI>1kvv`p(JH_vH>7$X6kwM+8joBc8;|3@_WVtxGB-lp` zOQaQH8LwgHS97e#H=2(Zd~N*_kwIub#`K%(HUqCx_Ozt*0?qLA3Kr{=zZyHjX5 zch>lCZX+OrL4zi4HQKxh6W^hXL>le!_HLrqn|vB&2rk$2obbtIzdEXO7ny}l6AFB96ls@kr?gs_^~BR&pKik0oO`V0;Q%udEI3?fx3VM6@5V3LE--4{9~;xz*KBa_ zrkHV#FFM4*)!opb)3M4i9f%u8NfO-q z30$$30Lo^$^FmZXClYSWBw`%e*46J|GN+#|7yWcRciHo{z=8cuTpWO-9nO^@w?Q`; zyb7UWg(@904@#{~F4vbsO6#;@vrc%D&-<${=^12ESlYk(aM{3fPrCI5TYyI- z0n~6LeJ^=EA0e5xU^el1dGU<=N-3UG2ABuk2OP^lr5Bqbx-+gRy{Qk54u4UH&L;{` zMUsaKdS;O9Da%KAeps3WP?G#(V?&<1kl(bn7ZQ6guk&>BN6md2;sMoV+^E%3VmcT< zcpkl1V(R+ig@{H7L%;K62AwMN1N~b?zp%kd z|C2rG(S!4uyj-3(Qz0In7fT~F+y6|Kc;nZ);jNvB;_07TaJ+<4?adD?l0k`YdX#O2 zpYV~fs!%Wg@GxvIGk@8-&{qjqXa8zfZuAakEQRg$tS;5`<6ig8w?;a~q?cGLI!sKu zR)zzE6gr=^;NEb?)54HaU_l=+)PNHYB?bbcf+)cOxb+9dr=lI?+SkpGiiFpT1bVQ| z;W2>}pjCuX1Ggmh(Bowzn>T1F~e z_#OxrXfA>oU3)S6_Jpd@0q=nMGTnFW;83j~6$jbi)Kq*Si-M^5kd5^cz{MMMd;b3D z-A0bNg;E1}kpMcZq!C+z9OtAL{#p6e5hr;lfbq zayR|#@gM9FC(!e)J4BX1FCIP7T?lT5>R!UR<7d7@Mq7+^cxzyfw7c{juo_KJI38Gy z2AfcVt}^J%gPt?g@k{`YeoLeJImed%^75$#FFeV?hya1O?eC|kmb|FysJFj{BIFRb zZ;(Uow4A>39z1KA`)OfRZP8a<>Yt`!yX2`&S*JB2zwZ{1)?5OA3+CrfpI>*2eGgWe zKcf{1KEKbtmMOM)aaDKDPU&Hs@~g=z2U^rzS=qs9081aAd=3i6#L%yHIl`yqQO#Ls zsrl-f{(<_W9WaH_+nn8qxeb{?xtdw}hEy@*!4$)*2G1Y@9VN9zMa)FaqW+ca z3`0E!g}xUDSpu7HTGeiEkIL5%(fXo){>8=(I4y$?f*+D6136nPYk`${d=8n++!Vy2 zlA-AWMIyvdu{qCu!B(G(>d?ZN{?L5pF_Ih`nM=*AEMRAVibO2wgT&nXAThr^Y`f(P zo;}--XTnq>e#CI{HBmN&z??j6FND-eL{^@JANxUK&KNfxn)?t@X%D01R72x?ak^Wy z6P5b1Oyc)5;>n)`;*&Ul#60YX(GCmaKuCIGw(WU26WuQx_~ru}wT~ibXRHrgn;`Rf z03l7E+IELAVU+2|&&Sa7kN9Ag`0Tm52IjPm7ixc!ji0=;8=ou_=Hm;cp{3%BjiSO7 zeY^!Jw|<|jHBI^5NcT1C83K#Q)H2Fqww(zidWq$XjB2E0+E6b~0{&RJ#jPa#mjYAZP<~bs7H)2g_PGj79owRovg*#WX*$){T zPLMEim$FII?qL@q@rh9+U(Jg*`hA0hW}Iv2J%;_UB)I!)I397%{7YbF7Ql2{e0@L@ zMWW1COU}}eezHl(gKr8UC35#~7QkNyg4D6HJ&FB%Q8O9%2gX?t|9?u%&l6R% zKt)S<$>l24_guMMiNUzw^P%7(RxBaG96#VS*|9y@wrVFZ#@XMFxF*>4GR;H{L zDycC{^MI<^W^VDHs-?I!C3$68#eH$g4v11Qb(+)O(Q20x^}W`-xHu5y_HeH>qLbj5 zn{S;0yCsJDPklZXVZ=_IIrgLf*i)X*cK#aDHb(lZHOV7-EPQgC1`~{zZGU%8d(jWU zs9Ue!qA48H2FU@+*t=+UQg=0~Yg;KwWRG#FfF!fKmDi>hdr@2ehq?C*hjVZD{s{>Z zT|`7@L>hwVozdG;LiFByk2=wbV2l=BhLDKfJ3;gsy|-bML8903zhtd@-}}Cwti7N8 zf1Vf5tMz7%b>z5Q*Ua@hKj-KBU1z<~e0JXaV&Z|rqX)&9H@x_DwM+n6zW%Tt zhro1r27#@t zvm$Bo2cWd0N)A2p(7yamb~b?*9m`L$O7<>E530oiSp=?)isIB@*SR_(k?81QaBc}>18 zJ4bG)tup6h-Gcyetn<`@K9M@C!Y_{C2WQA;QCd+F%356|Yb&MHbsOwkN%-+JhzQp= z?uRE8S3htM;;tYif`01IVSp}Fw)oNy6y5R7hvHRMqN_MHmyznG^ygR69lW3XsP7BUMUcE;7oOm`QLt6j1<~0kKsIla z*y2fL`7k(rM5jIOnE+?cZ54s3lr+(x{Y*%?7H*W)VWsA=_@bjf$1r}G+#5RgOz{m_ zMus66_T>Ak%gm-I4a2AI?AYj^kkgMKOow%Ypzp(A33{y?SW{B7k4~#cy?JglSdMW_ zl<$6sMju{_hQ-I1V^ja!Fcnh~U;MV8!Kp@LsfKM3Uar2EC^UASd^b14Ni~fR$X{^z za%hKL6UJ^}_Fg6?6Nm@7e)7-snw0N+SiQ{OotoIl*wnjbz=DiJUjzx|J9GX#zYn>R zh~2hw(oT+A+jyr95X(WuRL+lFb>Bt)iyK%Kcb)JJt$V!yq{M1HhFYW*Kx8`ho(KCX z=_2+!Jnjv_D#$@i9}VF3z>U5{jMOjY0snX3<|Q0gbZdy)i{z3hxVV(X#iX;vM8+Im zuhWNbk2zkwce-wNE0(>4bdm*G1+V zCxo^?0@^amI8`H_Saeg@uun}*sdp3Wj@gAu zKS3;WjUQ5Z*8TEt<{fS~uUA=akNU`FUdQ{+Rcq-ilr zg?NGaGvlVXQQsXDzXc+k#Q9q>?r@Xwi1hw*?5P3e2ziESDhHnT>{^9yZS#ahr8NkW zO8cvF8f=l>aV!>jeCE-ad`rsALd$%w0I+yTRqk-`v-aLw<#gka-ZD|N(N4Ry!J*PmwU}< zCJ@TK%`gD&ivMH+{w3?ITU~!A4&xp#9wG6ju)mh=gdMKA_%$-~&)ci#W8H%Zaixip!}HF4>3 zoL+T~c*j3dt#d(Iw;7O&t+J1aX!uE8!HNYLMh{=Ayl{M`XVr9$KF?9oh}Q~t&2HU! z0606&L!d(9Jx0W38M6Y4FoJt)JjHeyn~hG7?REe2JIMYd8VXNTtyzD6D%XSnGqAd= zBwf6CF6nj&j2G>7QP&h2`u29416kLxsPExNuOExzWeyVhLG6QsgItyaX&lThy9)C1 z(*@OL!zK!7$A!v~9jIw_HzI;e>F@;4gQ6WMgPgIGyz|@P+@l*bA!28*-b6q6P&H$Y zd-vYGlr7$(RN$Aq14J3l$^3w)E8IKy1ZcSwxQz+7;n26F332kCmSV#JuKeT73|bwX z05iWMR5JgwoYzniX7t$Rn8jrb73mJ~j|tsIi>QDu5x{AXof0a8y>Q1NnhxLjAQ^fV zIkTX;iOmy_FpKNDckOWju4eBn#A(6*r2mwGTyhz{d)fbEwhuUPQA26)kLhm9WptP& z@+}wXH(O{HpN{d&>*?ap$%^;f&TPs8Y?_Dks}Hb(wUK)P``l8hiq|5l%=VZZ;= zVo5U*7jZ!J=K!Wj7N3lugo54|@AbJ*238F-RiiY1*VZh! zda6yCXiP_Wesf!1A8<5?hpt~K4#^&Eb-ioyJDXm=x=watb>wx&jZ#Qrug^TfeT;P) zW8O8)evT=Qi~7u0$7$N6F*%{_&&xR!r^;ae;8VM*E6GVHTE7#e`o} z`k-4~U0utTw&$eV_POcii;-%>NI+{ojb)G^lfaWiGZ^ANPS$MbHh+;G0dk1>(`o)5 zT%iqFealS6FMe$_`*EeI=c#-%{(4yUoimPIjjxX+3}3YeeA9=9OPxif)Qc*Gj%S90 zX|UbzjgZfiPD;{MAu*6L+uPBO48L;|S4(`XGMx7u*)npMzB5F}`^qac3hQ%q?vacE zp>0;503yAHkUy1nU7OXmemVmX>F4YKk@obI&A)seJcJ;-hS3e z8&Ty4mHJFJs$AwO7<@uh)~mJIUo%?@aOpx(NNvQ}SZ*etB~XlK1<1Q=&9g-d1=%kb z{AcnBIzkA#D2Fyv1c$XUOg%J5N5`}+BL(T)5XqevISuD?PrnWXWL16lism%DJA^*msMOgRl=vF&MQj5-`Y#aGpfnGo{~9(LKPLL zDaZ*(!z4d2e{Wl%J_tLfblmc=t4M6mWg*lR9#s`Ch=rLaOY^HcfP+v?cZ!J6#wJJnN zv-a&m0dSgub?IxT8EmQ2Y&J;~thFz%ngS*>*IThz~$82`1VX(m5(FI|&W zg4+x7zU2o1h}MFc65UI4{YEKSrYqCJXntc}TYHL!lOKrpeB`>+#F{3$AYxcx-62!K zseH%MM`|YH)9TSHAQ!Eh;#y`_uxM5sF{CD}Tzper#8NWc{bmZaF5-C zgU_;+hzjxo;q)ov`PZIgJ#t36*1JgMl{xACL*9i~aP)%T-kmAu=b!=15=plLx}E_{ z(hz~{zL}@e8r!a-TM@&j@8-b#xHXbO5S(j-gXh{>(DS_HLp`D5x;6^PwA|B$Y%$&lneVP zKwZh~x!3vKy+)C^YQY?`!}HxJm=PJlNu`MkbEKDYVr zUkt*!{4*3hSZ-2AXGQG!(+8A#9;^MKJ;3nTJ?G$4GMh41#^bbXKD8;lO8ZViSKeSf z6?oN*PsZ_HYOmJ)`8;5=4w%HxtMfi^c$FvSGc$4a*O~0!{v+l?Y&C3et#U`_xKa`W zelHLmB70w~b$`z90`JXZ1qscH7!FdAJ>jF+F69AcPT6#z8(r7sK0HZQ{-7=vld-Ja zXt4$Saz;qS=bZWM{oGC2tk?Dh;Mg)OOvWkOKC-~{aCb`pH{^$ver!_)Uh5-H@Rl*U z<8e(biO+x^l`6!&%WJ9GN)3@5&L*?}KsyO|jhHeaw(-Zp>Vg!Y<$E0hdy}?UKgfZ( z_9(TrFIV!XP8D8oOvb&4mo?bAv!?=$@()@M3l1?0z36F2pN6Bdwpsn?{prj)TeEuloid@W+{Hc@gedT35LXaiiEWWiNxsv`xw$W@ z+y#+c!-8`y7(X07Y((rU&IdvJn9OmMQwLy=+!>WI@@D%sMhdx{A@=r0PXUQpGswSs zeb_VcC!sD->yXei^=v@mY5|{@kUE|ialMC`2cy;g!bkR+sPqdi5{J-~x-4(d!#-Y^ z&~ltpP_!e8#x_*z9-Tv{3YRtFQ)YvX{ILE$BdLP;Qh%qk@-qjKc0;57Hn!C$y$5AL5%^} zo+ZcWeu{$uV??#QX%Fn%o53Ot_r{mF+lf`rN1u48>-4>>!)BnSIzeO1Q`8$W$! zuw|a9>N`%AELgh&Rp&fcH&3NWW6$~6W8r6Ksbc|3<$w9h9S$sM@AxR3Z|ylGb6Uer z*Ds0slFB5RV#~kID9iXlBt6O*{A8j-0Ie+Y;AL*|bBBfmJIPyjD24uxntr)fqqG>V z>WhVK)?#Wlo#sZ3&o_D&N2N(Mh0hU~O2?3Bzxyn%4up>pKcaie z3ut5tdL-AFI*N)wBA+`|h~YFTqMR|7pK}-@tZFjw>9T#ALPkpW-c2r9S9oJwvVuTL zfnr^;RPr4{Y8G}mD)#astuxMG=jb*RDT6{@J;;0X^TM-L+e)Z$>*fdFYr+?rUXlT<6=jPe@ z#&a38WX}XGpAp&lL!0XS{O?UFu>!8+$d6dA^QfuZYCa7A<5SBWm~eD#@L+*8XmpYx zlt#oGOkGF0d_Ud(W8Wm+=v0UD-EmN@@oQeeHgS%cfV+X%f@Arq)Gb zm)zTAfenR^+^$ArU215dpfU~kT&W32TyZJ-&ly@-mZ@%yKu{DKNnabjO_>Aj^Tc*NDou<29CNa8=4wFHrgYg?{TVM^%h z;0v94f4_GZ@FAwD;l-$R$Cn)6$UrF}U1!6*w@AHU*Xr^cAz~MhcraJlV{zb-D2k$B z&zLEeovAQaea=J&7L_wd?c14)88rWKvHHHOyj=Gs6N!WFJ&S&D@}0q(02S!!%FVGc z?ntmnMenI*T*)zB1|n_)kALsAyj-tOU)RQm)iy47(~=RX1q8~Nn>Xp7>nplE#SQC( z0o2-rZt5%XKd5zP<~Loo1m{wP<^I)P`)Iqa7S;(I2xEu@OWJ^$7=3B*vEjl0I*3(O8g_IiMDIPj{-=)q54?^a)@Jx5jjpIXM|5Z z-Bx5nwG{}1UI#9WDY${WxOv=UL-;+GUl-gr&C58?Q^#zZ4h`P| z0<)fw&$~$MIdBV8&!`3-R=5JD^>QEIa2~P31%v>G5>hMq;JbofC1g!gP zi?|<%MetRa7Q3OG!N;Kqdiq5w`jaQSA$Yr&6pEbB`Bp*R0j0p?3U8+aY8VSz-!qI- z&UC{@690IhrfSU8K=at(F}6l%m+_(oJ!59A2}0C}BA83|@!GBj;Q^FHjfj-n*?OM0?JL)TmwZ0o;|VyOD*l7gh-gxK zyW&z?dU?@`fFNucJW`1e7zQP2MM1%6eB`yZEEz_WdfgqdqxP*&utTG1A(n<1Bu*<} z_9?-FfsvBsUOQ-bxxtL3OPF3@YVPTTKfv?M**aCyp0}APGUbP+Hl*nVNxnfwfd{&# zoKyyZjR{$F7!4r7kDBHWiVm=qSVVPs%di}`JHv__ddaa&O9k?Y24(s^(Fz>!1LWocndObR$wolaUn6*8+=*^gMYj zw~3lhf0@u$fO>yL6E#aTe6Ww~;|`OmT2BG-(($-`N_f_$?W;5H$*8dEc#ALAEWI)a zkd_(0+o442Ja?P;U3bRn<82FM(DOeVnt?L~L-9>P2=Lluy08&J`a=Eh`sUX0ug^!6 zkB+lM=uwu6sTL6mp#%&>3~TrsQDC!yBYi=o;`zpBOY3k>2CIkzu;sK0dSq=42vzz{ z$P_Zk5O`23E3}9|S?>sWm*wGC&x98k3l8XNcmg6`ZJU&0IH&(MMF1TNeixV{Rc5?) zptbL@%J7V8_f{{dxFQ**z-Mnb^UE#5hPT1)he6SY5;l@=%V)l_J1+Hb4blX%3;xoU z$7w&6p8(y>GCV2udOLK-mgDazb4#*@G-YVB<-)%_W!#pe=~ATTueNnmU<*i1{J~QD zynQ^kP}knX1Xoyu&*VNCKe5x3p)0-N^@krycmu0*ik(JNyl%(?S2GUnNEb1YjEtx3|Eef$9ju8Oiu=;62qV{=m$ZM zZP=lv6<*I2m&NVRzU5<=1oam1fsk`)H@<=F+Hz!jZtLaesU~5EP6-s;7r?xZG*`#- zdu%NkcSItdB_Qe45(lej1a%7Yz}qWBX)OB>wL-b5^?Yj_>yON21IL+mV3!$O^qsKU ze`4iPmC9&are_1mdm=7^L{5vR{c_HygFcWI++@BF0voGM8fyF#iQBKY#Q8AXe@k`z=)V|IYiV|B<^@o-iLy6q7!(Zl%V~ ztf@=P+|oR?{y4>s5LU7~t%0@xe8D47KaV zTOQa@{hQ4`o9nNpG0#PoNzwlSVD=a-WVlWBn5?3Bm?G?1$PlA9-^(uxiAh;-OVkN-uccd!<3!j)Y2kWGsl8<-&ZpPSZF-?uw~Qa z12ti^D;Ra|=T%enkW7S-RU>yjSH_i7_PE+xv15rW!)EkDuBUlE1oARucmeZ%oc#rx zYEzixpX)R?rE%}BStj>24T6@ucO70lp^?9f&FO9a9{5z>#YQ$5WasQFnpPKee`FAO%AU;ibymto4Xp}12~a`k-04MgiO!%j2JPb2Y2KC1 z&a5?RifkBoCV;oHI;=(R#?m=2onM-AMQll-;KOT8*@306Ir}Gp4WKEj0Ge{Y!eC_- z##SBcUZy5M)E#}=btFjE4RB{`42tF6)K9QR2&K&X?f30A34WG)!^AY{_au?r!j^P# z$5n8e8`kF^V@JBE(mXv?rEM~Mbs=9V$dv>KhhqW|7brS(mAYB}Fade-@t;{RI zJs9-0^K=bnEndCG#;zpmW3_YEj=!I8{LAYk@R1?PYeS3ckMTb#@(CWpo4dsPtX+6R zlvPGR92SsMGq5gy{+pz}zt;P+WEiqY#e_FK+|fqELv;MU!QH*RmD4-x$V>r0ofi~> z2CaGfmS2Rgdu9ZPU(rW2$wX0GH!b`K;s>-4ffU6_>ESF!E`JnXx$WRiuzAhUa{T>g zDe={X7IxoTT{zg;2jdguNe7YaeLyvz(nzC^{mTfAynboFn|mM#uIm6Q)7n9yZ1u}T z(WyKLot&OvPF50^mJIISc(Dh$OYp!9;KfS&*%q!ZNee|^pFDS?c-i*EexM{WiA_8C z6PUc*jBqvyg|ZuQtL`2(Z2WFqW(w5N9%W<*LPUn0OpwkVO9wrJgGt;Toex_y`77=V z{k~~F>kbJprl1I1n5$=Fd&0Tf)cBp$l9&>73JPGs9_?UF)g^$mp8Q-pJKV}$TI<)G zI0$Bh5@OSv%V@kzp2ouYKAcuHERK7yIY)Xr_+RnmTXOZyRnj7r0p|SLss;}CSb>Y$ z<7#3)^li>%_3&_AGe&sfc>3#KCey;P>wU(8TJtj-V0$l6A$IGn$ z6TDnK{3A`l0+_BGMA-d#Oyf?2IJXcP4waVR5Dc5#v~I%NqqxIk>%WN+>buJh=g$S zN&a0lOpye=-!n0-ezEiI=h(MHhHCs*>S~>Snkd2o9;w5PgWj#{nDGGB;sCijAl499!Jn%4}WQ}0!?<2*t%M#W3^VQS4nCP@S3Y5 zA)T-ZCl^=$A7ANdJb+NsdW*@%q1V;+p9MYe3h4 zLOg5#aLMY!7W z7LzVtAEC7My#Agrs{n*~<$?7I4#|6U=IIH!SRubXV0C*eC5+R5??K;tf&PQ-iRA(y z*uo5u0&Ve_Q>4(CG?oBi#(E$B5;teWXSO)r49P+%hA24va)$XQx$kJIM47 z!Nj3@_pQXIIXGTlUQf;_NQAnyeL) z9SI7Oh7!=&0Nv;g=H`0Xd+Vy%1+;wIe!@fnb4io(kA#KLsi=5oW_4R*pX9p?tGxUacer^Sh$L|d$}Y><3cS&fXpFtZ4ZH{G4IG65xY9hnWX zAhqsa`9EOHYY0DR_MVQRHt#ImJb}&cU&X|<7_aB*;AW~Lzms)U1(!q8sC6RI6S0%& zREyp!`_fnu?~6x3RQBfZpHbP;0!$X*nsXQzEO_5xM1NS;z%IX2rQ|zxC45PVQwG*B zKpN#qsxLxv11RR+F3nXtZRJCs98Ro}F}!7H885mLNvwbK>D005eBfegP?U#wW5Kuj z;dlj*mfheUnNaRT;iLw=f44j02zpgf4J^|=HU8PrDz#Q&1k_^zaoLRZ(XDM^W;f3LzrY`mkPb5%gbX2_UgM;tX=! z&2HBD70QRx60I+2ZYf?qhVbxHU)v^kOo@Q=Hkr?8dQQ{I;L|zaNsr%f{}q?bmcw*u zYRephEyvM#uZnJ*!i9RalL2l_=+#)9EA4{O&?ALO%lGUe@wNrJ&e&g4gm>Qhg=66> zhMv9Rs&_SiCT8cfsR2ClNx@X71YtSt>;O&LE34_1hPDR5$MER=b2@*km*n4l6W3eL zS!o7EV^>hm_}TKE?i0QdB>m|JPQx`OP_x{M)&fDYWjnJb zF46V7@;S&?K~=n}2vz*$*UezM6)UkDH&3Z7O_|@u(*Pc*opT;4wpOBqtaPU@_Dc5f zd6nDb=aIaApaec7INgZpy}pDluHS&9!*J#Vea#eQfSYnam-4~ZjLNUT>{S>zHLiwJ zbPdDlumxj}?o0Fcved=B)wB0p*r)Fb3eZJ0!kiFUg5#T~EM3yg;s=tg z5}bm2k>Fw3L_q%X!+^L|lg;+O(J zf9As58TR;7f8LNc`3o|4K*TCe1^YnW^+~=N-9E%HuN>mKsO17zTcMJLNA5SMY|cT- zwaFuSx|Yl6>FJi+0BV*1$2?ys)TMac$fUgYCvLtn*=Cl15EHZ~-A3T5oa54Zf0r{2 z4{@WU+soXNL|Wv{h~;3gHC(c1@sEdi+|hU*PiO?4^*XdnJg0xyEzPd?SQbb=EQ|t< zK>vRH%ECQ(bUmiXc9_`WeRUm~UGryTHt86qSUvID`V!e?w1+6k=R~ulb+a5u(TN8O zJ+j3C(^6LXSxU2*2bLbsg5xAK?ZP!dg1XRELbm>6EwTbs5zgf6?Xy+%YX6GyCae0EYwW)l*f3cw>YIGD(KMp8 z;r*xk6gPmSx}%j1&X2{PO>Q|Svy_Q+qb@=sod0Ofr@J(R7E|4r z&Kn@bh6#Z!pLk>@GO6n)@DA_H&-`830s(uyroD2Vm$OUawkFq*+65n#8`Uh^4>H$k zb&1_?#j7&tc>gHSe?Dyr_?|g9X|xYyO8it*Z8y1FQR};*mU?v~%$Ct5Gq_P!)$g)@ zvn6+GDFB>20p&NXCKG(;#AZi;Wlw%Tg0^bKLIZzex2J0}Xnv+%gR^bgqF51UO*Cy>n= z>n6N?a6DoRMA3Ju0Nc-UWDA-vUrrxCRF?BzwX!jwVm%5N+fqUd>e?WRZbt;1!yihW>5!cFsB6o9Psy@zWyw%y1;rmN4() zU_@g={O>u|YIJ;Ki{MRSujUtUD)Zh?c|GH{Kn1SKqlaXjTgR|_R|?G-`S85yVoz)) z2TvI`I|~=lLa>}LN+cg9W6=Ynd1soOlQ#b1Nw1CvKv0y^TUIOQ-wW&Xjkp#4@Q>A^ z_S@XjZ>&}>E*dns>>|LdoJh8cac^n1C6~(tK2j=pD5BKr={dlcegBRx!)boYmzRx* z8~&az-#Yt~FT24Rxb@w>RO?w-h@Ox9@AG9$Odepl!EjbSAG{G3ss}z7i!gb(5X=P% z34iyHB_wjl^Hpv3(^PyeSyj_zJbz%jZ&=P3pGM92uvwqK%VdoX!RKtw7pl$WK)AEM z$&z}fyJiE@1Sj6w@Zh7&6l`)4j`eibVQ= z$95ufor=FKFz`k_`Vs*FcK%BNIroJE0} z`QAYZ_j+_*%J1nv(JuM zGy9w;!V~F49n!p9r(D`RD@GaU89eCeuCzfk4cO#|w7A_dLf=9ZC|FBxTFb{jU9FaP zF-oGIIQ&|gQ}gJEZ11zI?8BrQK98@*Ash>L87-jDeW=X3430L?D5uTm*u`Mq!y2zoVuv4@WW#%|z6C+(J1?E!5b+bV4lN-wF!{FPaoc#lCZg6;DS~)22s?j0UHlA$D=H*0Oq= z?IlnXuDE(mGleNmiU6h@I@b3XVa_JvilnRq3Lb&8Sn#+xAoV&-pG$Sk1yIYm6g$A* zNB@G$1lFVoyP7;8lKl?o3J~u4f89THmK3kbJKFB=J`aC2&PuZV3fKe&>}an&jrp5N zc0NUgczb9@FHVxpB+xF9ihbLQ_IkOE5rE6CQl_22PSI)!pXFP1LL}4b@MWg3Yp$&X zAX^Gq$6VrKilg_G%$P9OB*k)_%jdHV}Cdz-M zVt01{sn`vm>s0Lg9^*Yvc`Uvhp_zQm#_?{B#ZqQVHqT!Agkh*dx;RWhdm;(4vUpQ5sRO_0?|6%0>*lx z(tp%9&BbDWm4%C$8IY5P?-`@uP(SE0>XxjPgtYi~##Epj>5EtW9&uunXOMXWeQtz* zx`yyDEZ-f+K&rLwOuW;Zp_1X-)b?UhwbN=clJIL14H4TiosccjsJ5>t`UevbiOqH# zbIt|C$g02k!|KcbbzxcK|F5u|XqH6~Sb2pG1@1s(s~?j9HF9`%%GE@D2|a4JKwE9f z;GxKL(^*M!52@%ySDTK*_v2zMr{)6L*z6pvnDz&a zAh*{1or3PrRDx319l(%Q&Cq{r)a`ILr|}|m<#F=Tt5v_%o#FcoL$N?8wzVS=iXFr! zJ2l)Y?A}q7)2~}SWjT<(Pp5vG8o(8(Z)9NVdw&<=QC92omA_-~oC1d}G&>$K&F7Kb zq;4m9#{M_IXiB(1iz0R0`*b;VmgznfBFu1JMg=nK7|Gl0+7*+&wKgy5G0AUn;4;1V z&~~4su=(PIjG=)FEOT}K{3T=32X@@r5(LrkM`A_8LId;8qyp3Fj-QyZ3yfNE1#Snn zARrO@OnD`}1@~tOt0bp#K@m@;|Iv9%<&BjsC@6oP4e?+&Nc?oAv8y!6 zJ(5xThTCk_&l$KqLrY6mZrj)nU)or)myL#3LbRqt>MQ!acqWFsbex&!JcF zwBCgF86jJ+-^#&0tSMp|z@=5wL9X!9oE2YBYKnS+Nmgijg8k0CZ5h98Ym+T-*mq2;WqyS%b&Kb8jEE94J=Q@$jT6t2Q;5YKF)F`*Ln{$ZmKdVC16Bx0+&P}KiRTAVD1poii|!+ zi28APh+WHZvUqq+{%$%cJV60)7ndBm2?e<_=sd zzFu2j*ZQqd`lZ+vU?am=*HdviG`@RI`8`Btg=$m;XiM5@$4yDfu%*Hrch^OT7P^h^ zFC2we1~U#d62HFqGeCU>4>OXSchU> zC-nvFM84S>+-N$MmiZOOBNii_Wn>g^x*jCTjq12w3HV>-(tkLnzSwR!Vo1{>fEpJP zi{*!d>VRA(O$nT2IH1p^)+^C8tHZ~P4#4$*5^Y_Ds1_qdhFky&X_oZ`o`ZS@w`pki zzyME7rjXoQYh&?%f=eOSor}|))dq@k=42i(mM$)_fdI2mA(DvdJGTg5Ogw^YX_hT- z*ClT1z4z3%{_MrDoCic(b1NP1FmGpqmg8|Ia_g0H(VGc`GwyMldb2HGLSL4}&FBFg zayutZ$T*tpQMvJqs|SOO5lg$XwXC~i53g2(n_XR86o<3KHLG@V3sS+SrjvU@zcw%K=sbL)kPJzT+OY5AKN4u*0dxmuzZUp-57S|#Vz%(4^Uz5e#@`G?v! zUCl_3+m|ZbN$S1j|H_eVVnVkp{?URAW&|`Gmd@`N%I}SO?=>o2_VQ-+7V+YIp}~G3 zI6W!lc)_oF>lUN1Cvf3j`!U8|$wbo+@-wmSGAGOtzu%o;lmR z2(mxfHl6dE)VGJ(Nup!5)rc>FHhJ%b_4q--B?5 z%}k^X;EsK6cKP;>LI#6mX`|$kt2Q7lYXfmTG!(kDi`rwsiChBLj6^OBLo??xMF5YAl+yQS7KsCQ*e~ z&OyL3`)jI?x@_g9X0gO)sDf9A+q`QBQ(SW05D!Iw5>J;&5nHLJ_Ln= zt;kpuamR}9sr~*I1bl2@aZa_%rv9xMDKTlEqEk2&IY6Uu*@ zsf@GHr%&jBu}Z_-muYoERD~-r>B(IS}D^imu&1oMQ=+b$yzu_ z&iSW;HTedu2|1kn3*b_KABx-w_1HZ4T=U6-v3$IyfZShnI~B@*O;1-hS&Bb-wtsh7F+st=s?7IFNYyeDE7mZ(!l}7 zu!ZGCM2<>$m&^m?X(UqfZM&3x3@vw$P56jN>^2S&o$~0*^?l=sz99z5z8^jLiHlZW zuijb>XU21{R01{H?`LQAeBK`3>b^5YX%?6NWqZS|@9P2@Y+avO5P{{=49FB~&D6(K zE|h|)JHP{wCtmF1zLQ#?6gni7QxRq0IeD?V~*=)xs>JEaskw z6lSl--I3|BZCM2s?Fi(mE@KpS-avRtI&e5A?ji#B3WXpbHuZAg;BZ zWV&QeX>NIUUt|`&mJ!fdz`|89LSIyJ(Ukxm3|ckdS_4e6b~9b5B7>^Ere;;tngfwn z#%79f)N_Bva z_vqfxKaZ6QxCnmlAXlKn^!-VU$%(jtPxea&tLA&BZw)UlOtDIRfyUYu7ksfjxU;a9 z3lX$ne*r9bQ3P#LwL2e3*NjF)g+vDb5Vj|?tMh%SGiYzcr1DJ9VeX`i*e?J$ zwclrPAO^_adMGV5jlD-FS!F&}y^un*01;JgqJl-2N;X_BBSk41e;)PLLXF7Z#lD7-0(;{rE`Rynm*U;m$WoJ1vW_SrtLmBjqX0lG_D!{qel%!w zwTW5YK>!Fl*{U#>k*>3^vO=t68SzTr?;RK@8zfmdegG4ERmG=UH!b@{NTuSkxA)de z<^FX*S7!u752eGW<~^!N0Z%^+kc^rGt@k_5lxEKjutOl9FDzJy)Oe{7{6sLeJ2p?{ z)3ZDPE#LE5y#f$yWUkqCnCM3_Bm%l3bQZW-D43?ehZEW@SXmwK937~-?Doxxc==WP zhfjYK-}sLNmr4~WG2$8)knoWN{4!Ja?!{bg`yMwGa(_>l4?{UafRe)Ak^SKbMeuAL zoj>t%UC19{Spx14gbytCqoI1`7JU^6hrmtyjNHP{aV)8LD=hcB?32>&%U~fHp2XhT zd*B*^klE}=1{yabEj%rCt7MPqt+BtNn6D^tT$g9Vb|FS`e$?3a>q(^}`|w>vqg#+d z*!w_viPF&Zn$))S<ohLA5$;?c6H-u&d?w#(CqVWSy(%_(>WqD7pcXa1j%v2>I>ylN;xCa*kO` zrJxirl6%wQj%coSMA*x^QI7mLHc(s=Y)7D{b;{j-Qb|N>b$VdFBmYba`|2=TR{PSH zxWsk>LMIqgfyXKEZsVMQN+&k6G?3=R911e+2q%Yd1yl)vX}?Re!K-s}LV|_e^O<)8 z>|6HP)0p&EF@E4PjcQS|qd*MF&j3*QIo#l(*3AJD7jozyNwas+;ocLN#~cbd$@Jh6 zdths<$`5DN*s0t1au|vDejhsLV%WGM?tru6twmK+w&t7xwKN7ANf^Jy8+&X|k?~fD zGj1FLV!Wn*gw=s9j40b>{dp__zz#_}N0Z82vl{t@mj&=ogAQ9CoL(!g+>=tv9`Q9d zfMC8l8n3>dO~=&#kFmFmi?Ut2hv|?8m4*R^Qo1`wN*I(zx&@@WLAp~)8l(}WJEWyS zI;9)wp7~$g`-%PReed7)2 z+sGqw+B7z1Uvl*MvKYzWkWqM=oZb|r$oq@!)(0{7>kjNAO>-x5_Zf9R2NgrzW42!I z>dM02pNi@cHL)v*95M-z^#%!7tSC;`yj7M|ZtJ>MJAn+Lh0@X&huo3BQmVzOR53sE zd)0w=k4*lHswz`LG$Voj0Aj=p0e|MtmNPNQS2`GOo)CoJOM@)XsR>)o7FD0i=MG+k z6NTO_jII2K>QwfT9~UE`zMzI8gc0z_22G~P{XrIg2qBi{@WkOFNGLtA&A)O!5Ei=Z zdbI#M$?r?Pw|U)b+}@weVo>!<2oW?E4qN$VsaoEe!w&F>*A~mD_0_d4%}iTNd|~&& z1Mz$h$!T+h!-wL>a6JahK>4c3{D6Bz-{z%RT5W053m_#vq#*kVAIQa!Z|wNj;8tz3 zAJfHO_zpguORp=hXmsB%sxoiDd!IrqS7jy#*P{)P;^7%VI6?(`<`s-TmSi7SDQUi+ z#eAY%rq~;`F5*+sA6utM8 zC%{Yceq)~WG|i&%jjE|fTu-G4-qBC#a=9PYM#-bM5CK?K-QYY&5I z{D<22S->9_<09PG!jJtw2qo@)Cz`@WwWbNB@sok)r%!m6qetl_p6=<=VALPalP21B z(tHED%6$^hPvL$bIn=#h#H&h)$rd3f2e#8C00=j4&-4JrkezHUkAzPTzo`<6Jprrhw?}uKWMKu^l8(xOtmEY+A5U z2I5DS|M;IoV!uKj?exOiE*}zKfix3*Vo1b({B)D(-QM2Pey~IDw~@~wOL{}}gAmCI z*jz})khN}lWL&1;)CC>V#OKU5GKzUpRsm}^DrQnF(jRF_RX7_KWvr#g=rY&%T}hr| zdq11f(N)`EC%h)dOyo~tt>+>U|FB4+6_Qv}|41}tkpAcy?nv=m>sbF}d^v6slGaXt zC|xed5S;wr3STJ?I z3rn#qe{u~`NP5s2)ST7B6d(pUh2L-WhycYB`S>B@V%JcQ>*=XMNjd3ugAuU=FgbZ? zhD7s|%uKVFZDro^K|*1jMe0hV{5#rgyyQaMGD*x+SC++Qx0MV*;)B#Y3K#Uj^wHsg zPu;UVLk-_ehAlgnD|!9kojy(q8zsF8wnzn^*#^$I^?xR`%LA6Dr;AFVG z*>Hgn@iB=ho9qZ@px~7H7nO2cR%--t# z5@9cCFCJV~^G@BuY_ApN4F%N_8h}N#xhDhet7Dy78?E(J5RMs!@Iv7gqTM#H{Xebx z7#d;Da_;SF^19kIlc2hB<7~l)sTRF7pi!+$U=VWHDQ4!E@RYzgQPhVk(%eh4<1ZEWByY%;h1 z%0WfJM&bxH3<*RE&jHchQp*yVdT9kRnG=W2$W=u+z~x)^Vn4c>(YVZ6u0>I@83s@O zu+yot;eEKh{60!NN@6n&Y=r~M{kM_5zD19>VKA3Y))ZYLMz30~2hb<55q9nV=C&AMO)0w&(3;_>Gh_pd{%)0y%Al#wlH<2VZ(qr#ZV07|=rvNVFq%hwprgql)p=yU8~ z!9B|HI)i#&pRrB8Q36b*1*345Fb|B5N{z~h_$3?H1Y^WJPnt{6>j#1r8(viNo#If= zpM(Rz;=L+)D|I2eD;++wVvwJf^l5Ruz(>%Y>UXuRwRxOsa}sfa2S{qOAh%53VIVlu z-uPk4;QotC%=H&T-S(y5{S;w}p>kKprE)xNYBPR$t_hi=!^5>P%&wwws<4G0X2T7>%|N5G{liIO!kYGO4l{{~Q=kE~^sCaqU@pK}$F%!M zHe}BZ_W7Cl1jc|)?({lA1I)heW*^=nyPV5QXtA#S!eed{Gr zNWQGH&-Iw`*?7e67BzgOR@9S9==wQ|@5Pm$J3i@jE9QNf$bS1PO)(dno4O+(9Ur%% zeM(W{EaWga$MX#mELG*fzildj5qH4jh#T4LP?})J6eUcbm1xP6HZ}aI>-?HN<*hR| z<_(tfqRp>{eyi1s&?;4>9&N|SNECfop7TCcqS&?Nr#!^R#S1J6}6qY&+@oFxqG z7c4bR*E~tA;0M6-&gL`TE1idIad`RCVKds8Z?@WlLS*LI1_P+C6JS_6^qd#}J@ofK z&!Ol4NM%GCt9|_{hZ~sF}nVO;ac(^io5$8^gGx$PYvpCRUbL3 z0aTG4@LTZ*S$VCc1c}Bzs1*A0M~O;Br^9KJGu?uMM{!w?IUlo>e9ma4@r_&0%L9YT zalHPK8lon6&do*otgZ=Jch#D2t5MjMoc6kdVMP>#gIvZA;?Slsu`>nY7Xea^;O^!Tt6QYdVC zBGwV7Nv4VzZ}6Jpcwp}55MC(npV%>(&-VELT$&Sbp9`*9jQ-fhSDa6MR1^)Up#y64 z8tGD;|GN%*pF{w9q0W!c!theUwqSWM%a46Y)VVK9oGvrqpOMbr1Ut{#ij)7+Ce5)y zIXyd5GLn>BKm}kee1D0~4y3bjAir1LUg0&A7X2+q@Lyj91gPB*3IM|cbrfGDjG=VS zNd{b3)zE;8kbEYpa zoKx<&fQ^sD%uE|9agPN2q_(_gLJc3jH9BqAH7@*0`bI(gsGjI~6)_r2^F3p0xz)=x z^Y-PWTlR9NA6d4D$A|v>c-tckph zqBzG&a=WepwZIjhu(FE37$BWXxNVSY>HF)$SN&EiD!GZ1x+ss7PstH6$5>7m^Xik} zEBdsP7-m*xPE=&{bZdUwRA8t?|B~wFUFrJXR9T9WZw&JJNT%>sQ7ps$s{%dOm=nIgt~CuE{dYSVc5aFOF~FcAi2|YKx0nFZeR6h+-Os^6 zn+4feN>y}!>Kt%84gG(S8xxWuTuX!(iRG4zq(jqvc<)|`pK6zd10=G4sOCmQUhStkkHYJ zvT{}&fqK{Q;#_sbdN0muxPZOu(VWd+qPjhlFHM&tpR;fXB0CyyXN&vUULLGi;8F=a z72bZBs5B5i1JLux{9Gp2+h1vu=IdL--&YPF2+ec_1qID}Cd{T0*KYedYk*hiq?4ic z|D*YDB1OW#e4Lb!PlX=0Q{Pc-VWBLiyX=1$2c2d=N+l3(E|>x!4Mm|m>$+r)mDZOu z0LAKbINdoh8U1wWcZhq1Dn+pdsGCg-L&G?Lo|U=a0@>-$9~y463DdNipiai`Z4bBe zWdfLMluy`)dInQ;rh@v-mW~M5ZqwL3wt-r7l5AY>#oPOv8;`9h0a}HKNTqN{En{`3 znVI=W`5fA*?+WZ;t9KYJP`blNLsfI8R7e;#L`{t(17&-}fCG=7w%zmIo!esqeD+8h zS*Ts9Elu3R%!8${Y8%sC%>b328+{TU8-KMKW8V*tGaDWe;b-@J|4P2ZLUS@7N$})W z3Oo>Mq7}xtuRDmQcMU}hf^WXO05+u^%;%Fz3QKmgT*z()Wp60WbR&sbcmkhbDJ^v( zSGmTLPLBh|14CYb84M#unpL9}%nt`>*)rthoO64-`+4?!$lC4enLy0!xnB z-V6y;mb4k*-6}v8l2nYu)LRGFfA56o!(3*w8?P1cEs#-1-!Vi{un> zhqY>bJ!xg~159%%@&)5EY_apMz@$ zK>EtV?%5qBA)ssXe3v-y_st>p8uxe%mL|iLN$C~+!97uQ;Ct7D)!$v=5zf~h8Q8w3 z+0d7-TrqCa036EYnuO4$qluOsN$5u3q(YH|e;K4llq3y$ulL9MG6g)SjBJ|RViS6^ z3>GBO0L1^x@&u^AAqpbD(_4p(H5~CQe>bC+$3<+929(sZgdX87`Xfw~dkzOO6j6SM zU}<1ZqkH7h4sdOC_qXY@yFNCa4gD$o4VVv0%lv&G<;?dufBn#1EBa>ec8U&hiWkR&`4cDb#YYclaN9e9=!_q5`VlmkmQ1%i}kazyn< z7-)?gBGYq>kP4W;M6=0qQ%a@Q3Ah17o`QF_D{VF-76u$!Uy%Lx0ozj|Mwwt%zeZTq z>e%bB_7~*izV{oL)n*HP!tAh5%x_2D&k_%Yc9%oiq=gcOk})jAfNRPVvjg6Pr%?MD z4>rn(!FDW;%0#(F{BF94a}&Pysw@7X`*fGEcOTdUe&>C#!-=Nnn^!bx^UTpMA_5Kb zGHor@k_T9X<;Lrtdpg}4MP>%zNgP)b1!>fE26lo4@nN&03A_hNU-z>}vpP9sPE9jV z%PT=u!iwZZKP7&e@PkQhNld5?_9RMoTVfT9!~|cERIZ%#`h1^x1udZ~uW)cM_|~#` z4ZHj4?e6L^TKpe0w)Db*vb2fN=TL{hT?tTzj;aG~CI ziBGrBUdX%F^V1C;99GE!ZN5DEF8l;^GOh}r6!%ym%pE~Q*p=r}|JFG$mH@7o`Qy0} zVwlN@_gP0)sqaa_HT^%1J%mfrdDj8_jgGE@Vb)0Cy*)?3$@TX+w9Kn$9X@hXi+L`4 z*~zSp8a>Mc(@x87vR6mwUGeII&Z!S00*R!8*uAe+OkLA|0b)w0f&)M6x5-Aa2O>Hb zqj}$YfhDr|-M%st_jS|BR}EEn9+9>KOo+M5dngtmx5=FL9PGv6Eg+UA0CwLB9bk)J zZg%T&R00hLImBu$l#BkymGr-aA9KF?JXR*J{KM=BzX}C5thCsaMY~cnnr{B4lchg} z)ip2vmJRczJ@K2pHi_yFOj@Mr)`!|cqdvGG18YEa!X$B$lCewiaNWM#&PKcyc!v;P z26D&LX4v9Tr*x=s5r_y_Vqn93h2ArA(jz~5emFTJ^oS$P<&N(d9l!S49$k#%N(bFu z#+^uZvzz73tJ4g3K5UdsCWu@WMuQmBjvl)T!aer3`}|LO3e#c`wr0siQ8|q|y2?Xh zMp8k-t&uE~pY$K8izXU4O+F+EK8U?H*@m#seL6k(qNesmPW|^r6BU<`_$QBmsfaIw z<)+iO)cjg1;+8()3CHx*y&(s`AkV+NtQgw2CU6Vx7T^zcbfiyF?qi|PSSANQ*x{4F2ZA9B=4at|n^ z&6sh_%xr9XJm?4z9%16K)hogqTkq{r0|3_`0XHIXtPQOsF`a<|?*VxQoG2vM^zCI& zKmvEZyRbj>IzO{@Q|Q!d_HJVNh8x}03uKKPo^C7c+siH)I2jCScudv#uQXx)eTYQA zfHiPBC248t#jmkBj+8zlGJSs4^D&<@LEd|>Ea1TWK_jn}6ODcxv+j(@bKzze%52uac=+paT&g4*^DaNXSVFQ8GofEvbprPJ za%9#j)n%mmwC0WCZ z5=n7meteXwmZd;j>YTMa9d@&3(Z+QZNJ$1tsZbf?6^>rEM1W_Ne&e(?zXT4?5H*@V zO$Piq6CkzdxCI&4&x;n?(#c+?_28lcB3+$b=;rqAT+QTx#hw;m?%sxFg6Zi7-E6tE z6G>Ru)r^D#1MQ&m&E`9&&HvQ;{!2B>ltVVERz!d(|?#SweqGL05lo z&VF`(mbjmhBY5EJ3KzFd0*=?H^tognE+tnt1D#C!qP1M&^`Watq{ay$L(%_yb*RJK1%aLrzKx37#u`HwEcF)V_ylgR_P5C@Gn7nR=8l46r zdcIx|pSm@?KNt5s*CL$L$8f#vR*;3Sxfb8U4_YYuiY4v}Cx)Dw=-V@Cg~KjgJ*Fc*`5rk$bZKeG6v84l z7GW%@4|aBaD-8!`(PxB=q;HNDmejonU<^nQe+*#DN&+PefdKShf8i*_5D0CG*~6bD z1-_>G3{lP(JTKS(E9oh(+vNw;-Kfxtimn{yI1H2i6wtsTD;u7{az*Jr&?tr?ED!FH+8qc z$_XA08KOH~jX6LquekLf9#*!mpY`&tf)DJH1 zv36i6?NRT92#tFP024UsYYq5qR51b58@I~*jcD(r3-iLb8|Kq{X|h2DSiYiho?E@&>=Vm}F#b{D`MUIW2kpVMV>4RT;8v%ylD7%I;+!cr^8b8}|9z;2 ziuf2}QO=4X1JG~;0ume)LNKPqTch~tRT;nU-yPD!K8w2@8D7az0Gqu^%F3E^Y1&e~ z7sLU}qO|1|E=^5M>LyN!YzQh`;{0~sTC*|3S7v_|G(i{`--aC$hCf079%|ab(7A1B zbdx~iff$vmn;sXnw6wG}5vQDiFOhUJ9sQYy^y=275=qb^>~!&fBDjAIm|X98lAs?+ z_TA+lQe)SlCQz#|7hCf}jHv}Z)ofO()EVzuX$e7cd|0#usT-yi*68RM8~glrd!-=T z*FhBBvlii0!Wa|g@t7Z^jwKP7$w z*6McPLG&e6CEIA+?E7nGFmpwFEs0pFce}ROZ?{0|CV3_smEymxHOxbnEm~Xcel2;q zg+e-|$;?B+hP}Q%v$t=iH%p`lH@U{o*;(1fH$Us#I=JnLv-4}dZqO|$b7~SjAcL9} zfEn@h(X(LKR}K-VXGps^fgvJL4`;V4Y%%s}zBhbOQ?t{Jq@Nk-b3)@s%6+kzMq;`! zbb|BQF3`jY#iHLIiC55AH8ZX&>|Nrj*8+m8rkz8mqY9GxZJspocO@mvRuA*FflB86 z@>%?+QK=6$wjGGy-G9?&>ij->@ba|z!?LCwoGIp|;r9-{8xQWoITcY;7{QRUTKZ&> z+f=1;`6gY+^)zV3o7DDF{PvWKja%kmz*HN4TIHzzR-=%<0%)KHo^wCzKtFB+X@YIi7)v2>Qdcv!|%{1gnAL*FpvKM zIU30-Q)q%EVh~)d;Yl^4)LU!Qw^Ri zqXKEJ?4E)S#pm1f=9$OLqLC5AM+{n+Ol+R3h`yG+pp$y|ieLO}^VvM2q4E%x3XEKS zq)COgJ%vqQWR|}TbbHlZlDJn0VJAm+X!o|P=oOI8U<8PJRA4#4K&M#VAqiD-o<0WW zrANd{^W}ktHT|jA_(#+xc|$Y`P^)8p+sc69EmyWJ$5|6w=g3MF<~Up+7g1#K+= z&vh;??2=+m__`}SLqt?*Lt{DdA}#^3GkTIVL`z1TDbln73a)mcuqW(DH)U_&6fkGg zYh)?X+Un_E4>HtPuMX@OI^9rdla+u6v23EGIlwIF z9qk>)8UHB7t@ZnsFA~s&t18mh98Lil&*vp+x2qCzak(Z_EN8p{N!H%cU!&9j24N&l zA?m9u%reBgzfIuqL}obkYc`Gub?Ul@V67^nAkKZ-=ZDx^{a(~ec(z}gwD7|inqvSc zm-m$P`Ummm`@f0A5-2iQ0hS)Y&!Cn}vSogk(vRU~48wmF^~Cag7`YQEG++`FvB)zl zL*@=d;uTzcVGKIl4&xb5X@795P(AvE)|&(_B3W+p$ycU#KO8Kvx#K-Yov4+CA_gII zPa1ISuerj)pzsTJzb~0|Gq#HydclX>Vr=?()!*6dHoIk;JSATKR9y%oSFgGoi zv^0k7c$^biof5Bih7;fq#pydXZ;=r922DP&9V3M5O0lY1Frvw9Hq+J)0F?V=Hr+ zRGJuz+F^7vjH<%-;Z8CzugUES#Az~qjQfWeGM7Ky>MpgvI~z!e(ARJR)>?RKf%*1D zEWBz#2f3X0EBu87>VGpN+E2SgQ z?a7;U^Bf8cg48^WKPVkf_1vMKF{1cU@Rz8f8tLKV4E+;^;kx@;5<#>PWSC+E+DC&N zg?-9YcTJQN`#Ud5u*W>UZN6npb#V~(gV_3A+^txOjLSCQoN``c^{z%${bX;fh}^lc zPo;{@fSeeUB&v!AB$XIr zh#dNwA?vhA5W^vS|9dP)a{mKaFml1iwe|HWhxoJHU^GMl)xW<-f2H@|ul#ZS|Evv8 z18FGL9|J^MIj$)C^t?L8Vs9t5kKW;+6;ps5Hw^y1PMm54G1 zg@CslrJ$?YE7@1*td#2|(i)Es{F4sRS(?w z_(?T0`9iA?xzpE>6?DP00mo8q1xKVW(DM@e`;QW)1^CgYH!)e$nC;YYWrw~x^-aF} zu%PTgwQLDnz*6ljeUHf=1~I$`;%mpX9(ha@a0Z+Zgm`#FH1L2L930|=>C}ADf5RkDq zZe%|2-2Yyj{gns)yHW$?wnJO1edn%{Tjbw_-vTE1J0ZB|ouf^MAV(4WO5u!{9 zGc&E^9~nw<4=En5he%U~p^TE}L!T>YX=#6z%~Vc>t1?OpW^~rclx26~+88`J#Zq%H z%59s69i%lm_rPI*-$~(o&+A`Nq}<@#b>Y?(At9j;6{i-(_*zZw-yZ=D8=M_3AogvVv0-9jCUkJAO0v{njMGic&5?eiu0;KqhIQNVZrgmj-?Lo$<9p|6lk)_tc4VA{4w>ocr3pb{Q4tYO zJ|i2}+@A2xKxm{Tj{=@55vlOUAtMwi`D0NKpPZcR0sCDMxc~bWrmvwm$hTu}F5Ra?Cj~F?kuKGyJ}? z{bb?8Hz!FGCyP;y*F6Dd%V`ZEqJDcrq~18;9%)!YZ0xM6)|!gSdNn;kHtG8xrzu#Pjj=!e6>* zPEohRsy%;Q_G`w|%m9>zFKr98s)ypv@B3X~BoPQud4Ckj@PJj+xp!`d^WV(zKk4bJ z71MoZH{gYMi#v#vf7|@g>$2|x=Es1;Va+S0XTwGxJ+sK0d3yaGK7CTIvH`j%Bmg*3Y0#2XoDuqtqMX z_WA;TZS7w_Hf@`+3B)6w!rQ=Y4-eGvV%Ys*J)sR;;jzLNW<5my(*(3@_YWZ^_UpG7 zdldrSt6|r}Deyu-lCQ|q)AQHfvzHglghjWVBRwTJ`gDI65%Aeib`UU#t3L3TW3;&6 zsPOXgzx18}4wu9W1>XqQ@_A**TGB2gkeyq zf{I6D#9NK;cCCp>~5$GhG-g~9JFRS*xw?P6>Gc5FXB%>Nk3-(;6+fJhd>A z%#GRdfwjoeeq_h}nXIO%QF?yvyd>sa#je{_AkPKC-rg{^){bkwImLLp z7sB_HCc3AAgj)K&M1KFBPQ-2{-EQA<^5>Pwpp4+B7#Ksv#iV(bFu4NNk>-ho5U_&0 zLwLEipK>f!ZOK0W62UjyUh|&~yXaufOJzres)*QV)yyTmy_0oDLQef{)in%4Ij!Sg zY6GF5@y*zIDr=R|^ZoPieoF{%U!<5|UeR|=WNnW9*t&1xl4FID890|bmur(nhwpq# zUT+2a2ojckEl+68U;uCFxTwf&{fu~`&UAz4kM8`3raEvE2dbf~238RcexVJ}yhc$1 zKVMwzEeGCpMFf)YpK{Gw#3@##Cnm*SwB5u!U^cUiS{4JEIcogD+hbPtR9mJNWk?=W z={mMLc7j_!JF2n0=so|KnCWkQypU!?-Qf5}wxvrqN{}VU?}1+KB7H(Ru<*Sd{{fFN z@;fk5xDAr^&@MSZcKX@1hy%As*+{&0-5xQbO!J`@=k}d#JrPPVLf%CEzoUx3B1&r2 zV`*fT;`@OCx59eIZIn<}0`NtJu44Z9CX?rIMz2ELbO6$o9I;t$kbk(uYo`WpNN|~B z2vWba$r(``-vO)$1C-Gb!bYBs&!L55RXqc1L0yw~gxM!i9>~MRP;Z`?-^s>%_|r4e zmpP9=k@dh=1&P+%EtS$kJi%7a*JUZ=0AGen>&(EGr52-nC`p9ea$TQ|r#C25@`sel z_Mh==wC&%u)S?oxaPJzM=5+eg=gQz4%XT#1bk`t>Q^q(W-%nK<9CAj^Zf@wMYrDQV zz7mF&akYUo@w+BzudC#WL6$7E_CVU=8Ja^9y#eBRnN}Kdo`d3mu%Bso%&Smt>u2kQhB%M>#_8mAF`WR33`{VJZl1tU6rD#)=lC~ z$V!kAyr^-hhbRf@-M6yp>Ia>ODzA_T7h&7{26%HRaoTe&4*9O8h?QPf#{=%PPbrXu zgxX<+LXPJ5{RM<>be~zmZha2tv^O_MM1S1-S=U43h2T@;l1?d4X>EH!{jDv!L@)~tZhC- zY>yqSzRI7yvsa8_?DC5>v{@6VUVwa#^tr!R`kO&ZA~m8A0t1{Zwv3e4lM4KE<^F;_ zShuCp_u3(rK?J_H-9EMfKS^YSd|gj}uQvL&_I0w=#6+B%TsNi%E{WXrs2HsKc=65g zLgq?Y(#F$^p6zVw0W5F>YQWs=VgaTozEapNkE(%(tOmB84ObmS zU4PeZUh(1ui(2EHV9eX4LOcNx&@-d~{8iWOWj&{t1=#_&oh4D~gPQMI0jKw4a@w>6 z*8Q4Sa@ITf(hJl@vW9Vrb2Yw!$)a<$UiD4vBeW#b6#E}1QSAA&ZN8i%p0*#|UUXu3 z2qXZ&e!0Yma9YZRED!&D4=jkgi{$d6Zdm7OhALexFweIR#i0Oy6UUr`t7R~N^f}G( zZ|&n2Z7oR;tmY=Zq~C{{;uaVyo{M34iV%Tz9TX6+j98_@+7t5y?8`d{{4H=N1Opk0 zoUxArXDHe_;{AO*-a^lVCf3%BFPMp=#;q9kM4-_4Yp#QVXMhvj6#`VDLpvl9|F7Us zFf^+=JE^&MJA(~n%RmX}OcQz@GAS%0gMIhkS^ykHM9(_NyqBEwz1-}j9 z9y5GT*#$|DbXmNI{>^nzMMvC1NENacJu;67^Tu}qUFy)&ylkUGA_cxbrj^6GTQd@hluf%2waLT!w=<;u>A+ZPw4p=x zZvR?#47F1d;%O5MG-M>uW6TSIz_v zdPo7bE*7Sx8>mf5BY@+mltIs6$&TUZO?{tex)dPi6xYg28yuuc8t`)u5#>Z#O|3>w z`U1Bspx<39Nn~A2X_`q2wkpyUo->i4qNI4oLcK+*(ncrG=+Q9e3 z>F`^pJ&iE$^XJc&{B8^DuZF)J=~WDWd-uE1{|X)I_WLR6^5#~i;h|05P>+x~FtdXE zYc~^65{#gXpjdH1RbPGRwNMoPf+!7Z$&sYL^9`xv6A?n$K%Kyi(OkOFhv&*f+LWp6 zls0h{AU?@-sgFHmhc;xclX!X41eu4Ux3|m8kUr_cK3mF6N@+Hl-wYpaomb>_#Bcsc zAJzys9WCPD#L?gcuZDj1_2&+=+#kTQo*AzH{A$nQ6H>Sx3!SL6i<~b8V;X^OwJ;$U z*M!Sd2-<6uW=lmea@(be^poV*6WR3_?euR?tLgWAx|&>Q<<-j)wbwV0E~Ux@GD9Ha zI>P7IOIeKhHii!s@?PJ?jqD>=A;F2A9w?a1ko|QpCTtbMxZ+0ln}^-BH#L!b{+8al z@Ro8LGE54mcio<&-l5gUeGhjR!ta5l|M_rY0!}62&x&c|_vc*1K90Zdj?csKHW)is zd>le*6{zqwbiRut=ko&YZ>RCIHX#sLmm=xi!}u-EDRq&493ILImv`&>ut49Lt_&9U zKjudN+cf@Fc&`KQHVD1jO^O3==jf`WaenAHaG{v^u$gM%f5JLrR5v;zofsEG<9`4l z@$#Ap#9P|Ew312Mi-(h&*S&Yc^rP13_WeB{O-`GgRIX8}Thi21;xBh+ua)DA&x)5f zZ*YVN7V42F><{T!75LZud`7)VH_bXI2?<3rdol3Fs1bk-Nr?S zW#V^^N~eJJgF9;1T?-`lE{AG|2TxH{f&ShfiegCBxYL~7z5OLP9$CZk2>Y$$x3++r zB>ivGly+~5bsx6;VA4C9zq!mOkw7cH?q(xUh3VfhdFiYD>AXfeFLZfL!1%p=SDgP; z*^-r2!j2pKLejoY{LFwM6{ege_JyuhJPGB84xbHBcR_e=NW5#2Ct9`6dkxw>D-su) z!U^$y;q_a+zhDg4jjrr>f~*DBcyal2%IRbT`6DCGRBW*K;-VuS(X1_}3epGEQHglJ zXT$R?EV{_XCusp0w0sr6JxcUQ)5R}T>i<)&(<-yg-2ZcELf(B?bf3`?D&dP!^jfB> zvfQT54Ukt|Pg2M!Xr1=l66VPIy$uOxws?Rz8i8SAR3Q0pwNQ?gg#|NckAjJr-eh@{ z;!>12dOXnoNJ2bK@PrN-Ri_7G{4U5oG0tqgX+eTd!|9L*iiCRvR|kIx5(}J3{IS3- z4~)25iat36}pJ^OF3UaLITE~*gfWoOoJ8eMDmj~Fj<^7D!yaV z_GLi}?=6sh#ocrA^S4Jci{ve>Dc^6>an>%ie1+>;?ynzGGvUKDy7Z-Nv1g-5M__YE z;R>+pK)j0G&W1{$95Z|LGpPM{Txp4%aYJ9|dpwot2pXs2V!PyMv?~LPq4M%?N4w>X z-59h7J(l3peBM5Iu58f5)gWvN#cz|yf|MCQf4>vh{&+Q4Q7ChmDj%1~-W#WkI=VT0 z`*}-6PHahxdzL)z0r4g_gIME~x=|rcV97RLl-LXYx1|*XgpU*-K2QxCl?Zmv#t3>6 zpcOAv!c;j%FyeE3`>QOa68xlA^%?Q=@NT7um@3qP=#An}c{njBS#sF7G8lCIc^l>y zFXQ60^9G~BKEyeMhhyH7(aL&(OTNU%^v74x6Gmr!`c#syFiw3ws03yz@QCu|-a=n1 zDa}*aG_@$nDF2{Dg+={qCHp+Q*v1P*q@Nm6_K~Lo-}osCA;vCHt;v6QSK)HUnMHkh zFpW|&D{SvHEGDJ-RIc?bFiQ-RGlw79tdDlcFCuf5dcl^jC^ zT(lk32_ysr@l9F0o>ZGWlHzgh#O=8$xE|Ea9=qs`@Mw4U1isgQ)E;1za0O@DXpYF60 zv&-j8-fJd(D*H63x#JW3oz4LDlC#Xp0U?S;nJ=e{gKkFA<~ zlsAuU(Ey96(l4*;Z|Y&Yzg5_@R)Ce=!x~AiFtrdh!i^A#HM&ZaQ<+u4j$L%82_!G% zAdl`EjKd%~W#t)_SN-Y;eW;h0Q`RnMTb;@R9TKY_nKG#a^+pMV&IXgG_l{i>SV-JS zrQv7WBhP4WYXs_Ul_yfYpxI$VZ0s*5ts?p=Yzr~1N^#&-fWihq?&6gw&-}@?V#9g z1XntuV`9&F%DY~vR`d|pviZY@a{@W}DAlPi+I!bua!26f)RKHe}wuwg;`$TnhdH^ zAjTboCJn=?y8ZqfFE*FaSxdg58Mm1{G^Ys?;>|@reYUZ>wnyBtM3b|LP?C zyX2_PX4Pi8E($YNmpeyFBCVaVbDqPJwRkak6ze+$iu$3&)gW+U#&|%Cl0E3;hs;$o17uw_ab?D=?>x zaU2eEjSqVcr8($IFMY8@k-^x2E9H6?5-k;zVnw?ECdPGr7-ym|n5CX2?jZ6SC$SfG zT?<-3+H$@sJiFh8kvTFV7v_sXL)N;`{A69axi-jpZ4sJX8sVl zlV`PqAuY&`K_b1>(-#}NmU|Hb0SB%SxjUw`^|j#0b835Wzmt#4U6)nGc-wTnctcS} z8M47iAsY$oPR($ohrORK4(++yPb@k5+TPnXR$PT$_;NUL9wJ(_By!lbyuPBGrGCR_ z#k2L1=ry3Lss5SYR)zY*LSYf6?E1)(c-Xp|0Opa)!}zxa3pD7f1A6cmwwKIPCRMQY zmx6BJoW9o$9RFKA{Wu-_5#3SK^5aRk#}@!b!heE-|0SZ>0V3pvk&De`SxQQQk?JR~ z9fPsk(4a*rc<|Dw;+dO3Oaft|bAd2z$r8y%j6}wKCJk(_NzX4SGCXEH{`GZ?D%s>F z5rjK0c8O$b!#9<4&m^@avQ^ZK{^Od?X4M7^k&(|2> ze)%aMM)Ij6x-Mi72G~L2H1^LY6H_%K5+(#5wj3dN%p(nLh(@~zBR^k zr-3FXZpg0tRT0qcj%D%x98APYLk^8am|QYkQ6W-?PL&VIA}i-l~sUI-z?cjqe@?4%&LmAlnWR!_Hwsp=5YbPa)$O5F(qe7tvHEFcu zR|=vY&+o%ItcCBzE-|_x!*8^A<@X$#??N?nUSl~yhm?;ywB5}sVZhS zC}TYI9)%|Hp7BCA^zQcB{Wf=>)>iU)WCEbt7)=LUncG>bivFJ-&Rr_!O8xUsIqZz= zAFAu+Jf#>dF~w>t6jo}-sYr%u4tTN_)RnAi;+buw^TLaRxFIGKADlLT-)8iU-`UNR zXXL}^P8;uIe6V~@KOQD5YS)Cvc96$Q2lvP*f4)vkTjLH3+exJGbpEMyV$-o3YXZ#6 zN%|tYa{m`-RYgXGkSgz+oG+Ma9lGsRH2JhA0!Ut`@#W=~eA0s_kK6J5f$>p%^mJ9^S0$JY0pi1M%s90~joj^`L0 z=p9-)BVwU6aY;!9Dyk|WdfShqOa?Y2<^g7_zM|}s+0@iQ!NAF9cDPNIV&qxs4-Ca@F}*1Ox;Gz6&0QXV1K6Fmi?g$$AOxV< zmana?{n}sF?`uRZs?o0QzDarUR-ApRD->@Ez&$7i(<9vtOwCP;lQvAJ=BEp@#C)u5 zZ|)Tp<>GuN)SMM-tnBPG@pN>2k|}p_1h|NZh|~eF&G&OUjZo^K> z@-hIKswjLOVRk<0Ip;xgRw7aqob31J*wpLp7_LVVKiNDPTAku%o z=!WI^Imm|PaTe`?82)3`uucLAIwUBDzZNU=3l(BEJ;x?d+pn)=WJ-ViQu_pg7`DXu zgLsS5kr7aQBz@b20AP(SS4TyyJb7js$UQ8&l>$$o8Dd{-7h5dZaBcwLPKDZbp>V+4 zDL?llS;+nR+l}A`5hGsm44Wzdtw?_jj9c>C$?+uUnByo&$fgFh0y=7Cj*gCM8TjY! zp$}*6uwG@HFTN+$>>)!-Pi2voPoF{j$K(MV zECxT4GeQu#Q5`jYKwFy_jppT!BN&eSgZB#-NWmQ_7WU>Z_V?8B2^#Zp$Y>kd0nm+h zihGKY+E-wHDK-)&(eiPuvf0&U)?MP-R<~W>#l_9qxE26nKhcd(*E$*-0%aTFmj}h) z=}UZHbt;vy{QtCHt+thxl&WBDv%k^PTbds?WN$a0vN{ZEP|+-6Gic1S8%@*82UeW( zr!hP4x?;uW%iM3HU7!jIYSGcrFX%+|%=$5dCD4FGN!uZ4TC3?u_=8!B@-6&j3j0h$ z##6?Dbw*`1ecP|^09S%}mW`XgkVDvgV{J)JyO$m@`&m7%ZBNxES9aeEQC2;rNDMtB z0Rg#)$R|DWr@DG=p09?pg_WBwR>Ytw{`c(w`vj1hYxp5#RA~#Kcn`mo{mx62b(o+b z7uM5OMH2ylyo1xAjci|v%ktk2CLxAAkC&C_jX50JI%FyE-t8TuuC>pv7jLgaol%6FJ~U3|WqL`yg&^U~i(!Y~ z7Jh(H& z=e{$vRQHnpGJ9zi>|c#p#MuTnN&#d0ShD|E`P(X{7yEHIg?$^o!U=|&YpPqTJW0TL zg!C>^PRSUdnQD>5Y-%?iH+x^=Xo^O&NWm3DLj>bbr2ZdaZygp@ytVz)9RnyG0}LPr z-5sM0H3*1wNlQp~BPHPgN=Yc)jdZt^ba!`y^lx*{bIy6M-{X1Tzqw$z_TKZ|Ypwgf zKg+~-WQ>^gx10-?`BQepW`9UGmLfYl|8gM=ysi06uHrPN>!H=4c8evp(II$iZ z8p~bpJvXho+O)Q-h4-5OmL-FmoJtqg$d!e9sVrcHX3^5k^j4CjbuX@Y6qz!E* z#J{X03VZydtt}SxjlX}8&_<-+h(Gr>y(#eke=>9>C>#ft$!24gsrl7gf}E@?SB`1z zxlUETzRpcm3}{lVIda7Jpf!!d;A&!&0tp_N=)UqNItGK)G3IB2tmtGt7z@LW76m0v zo18=ha{Xo>t(jy-5+L1Fu`&y3(Fi;#Q-R#e)Z!H={pFaZe+3wjK&V1r69dM19lx4| zGJa31*Xe!h`z7$XOe1ug83Hk9c(gjZ9`SAT!~NkkJ;b`T4^45g4H-m7R*X%mPk@AY z#+p`+Z~wUcqHR1_>dM5z>jNa*lhJ33i`13Gd$vl6Js?{sjiS-5?NzcdNjoKjBPWXh z#rG!Nh2P%^=x!~#MWSP()vgM7MA;Cpz$FhVUZ$KoG#XXF&p-bO&qM$^?LyW@J(iNp-b1 z+pM!B!$LaiA9P<0Z?vN0p4HXuUsck((YzX7hi!NEa)(|t2pSq%@04!dZ^%VrvgAke zdOn2<3&b8Sa1}f|e=878A$&Gy`PVP`4L#sy6?b$UWJd{kkEwjY?{h0pZ+j4ya!%_- zi3IeY_rSRwBGSPd3QA3XANPDL66Kkjx=+6365&tl6H*%MgM8`HYv+xN#3$FwCxc@T zrd}Lch#laTX4aAz0Q--{#|c@!>_lcE8AuWqh73IqF+|jd4DWC6Q%W@_JTZcl_VxUF zo9ca9>g)+P6EtEZ?3OE#N`;A!=^RjG38LxB=)ehvu=kfk=X;4fU94d?QQu3nN}K>Y zgJWIO-M;pji_f)XgEz}y()iU4c=ZR%-Beeq`4oN~DpII|T`S5lQ}#d-1>~0mEvgKt zTPgMD&b93mFz0g^@937&a}T`?6Fq$RW7m%i$9(a22?OeE`agQ^g?i+X+(|S14^!G9Pjg+4*hH5`E`>cm-h9&RhiCz)B=IxTd$#ylk+XMYkH)j!T};#cnTg zP34&=sVzfEUO0z^g^gY8vWO~VI423fXUX9O687t@nPJn|i&=1iUk0?czrT>i(4}yF3avl$a0X%-Op=7Y4esb{-yVE@!_6(Gw>R6MEgIbz z-a@}Lh%$yOOK4A_JcT$arNpv^-Z2h)wbWm3MBI(G_?w3OuTW-Y?1I1r)ALvS*kE(Na6E~9|z}AuPaG9^!T4X z)jDh3s??{29Hp;L;Ti)&?B#gP495CF-D*&dtH!|skWCjQ8vX+$QQe!GEz0DQWNo?F zv`Qq5M+OMC=nhB(ULkNLSSV=`G}0AUg;{qldk7r*KTD>%_0HvK&Iw|MficP}9cgLl zr?1^Tf}3U}H`_`E3kZDMKiKF+^z!LnIdh5X`94-+%LK_|!Oo9Ls*yf?Z+ZCzqv5fMXeNO}tgcZP=$jAP{+ zsf=GhC#HZYkwf-r??0{QzmGKreN2j1*Mkf^dgeCDlrDY3QHdbU1va`Im;ABlfvlniF;A__2Z5k4ng*7 z4Zwb$*_4(hwdbo@`L4s@Yzvj3?{Q^i^c&CGt8JGintFaMeZ(f2>G_w+g-LQjKZb0i zK3OCO!bp`#62T+muZG*3o4-|T5#J~kWwI#9#Q!<~AqO5>4%nf?FGeJMGY$9Y=cz>B zgoaAKNVayprZ`;=WAfYGQ7^8%t0LKofV6|}oe$=OVRt`#1R$PFTxTjQZyb&%;MdKv z$WV?{0bU-QX?@XIkBg#(BUGsu8qzkHNh!^&1leaNTt$%s1fqCJw0>yObBM`_o-2%X z?sQu_B4F&hG&Oo#Qp^M;N-j2}kFTU|@)e|6A1YMTuoj$cSR#o+4 z$Gpp&`2EQV2yU^>?5`w1D+Gz*(w{7|q2`SK^AR;}Y;zSPRum!|w%@0dWwsbDQIDs* zkFl>Q2#}J_4>yo(%gs2(4JMc-FMo&-Z)d@d9rGK)Hhq3Bp;_Q8cH0V*Szg;Twk@HA zb7P)=$wl2DJ+yW~RBqFD3zIC_wic?-59Y}K)n>>Miva7A z(dYx&7(nr{n=_LCY59U|_X1$cTI?O*?~La@?u`|E`X!R`^dD%Ft;F8DW zW{lIM^)fUDcTRLJEm=QnnJF$H#&0n{FNfT@7a|S^a$xp^5Gu&aXyWU$>fqTgbm+u} zcSo3X+mLc$v0DWh^_gB*iiulH!c*2jfT(40JTuMA;1h*3)6;j?Gq|Hf{{9#EGirt{ zkhrM%-l*wvVljPMb;n3S7QN#SwvK}Q^uyahpQ3{(bcB*VyCls0me$&8s5r{cWB#sQ z;XHz~LRCwpAXNs!P({UXKSUTZ_rYb4TI!Aw`Ngr$A1?mE%;H+T;+4@?Ku_tsJ;m5h zq#H>hKDqJs+4CpA#S4cv#;^bEI}f^Ql6mOcc<#;d)M>st{9yK@r&WA+#fYk1CyNh|<wYhEy~#Lb33mYMHQ+*%A;lfZiZ>yM5z? zLyz(fBFrtH#^_{MctPObA!q91@0P1HK_>zgwN>m_2Doz;P7(KKw-5`MNM-pmM>G% z4}v*EPI*n?Ry}az|*Llr1c_u?syn@0Sp$dX|?{$(6=zn)$^c7K5R8-!XD55Ed zrO##tgh0;g?%7SZ`E*KSLbXpK1gk&xf9d5E6@2j?83p7B3KZ=iz2}J*Ad$ z&pE3erC98$=~P_=NZF*ykAPFO5uG6^O0u#;aZ8U{L%;6tr?gzevwnuQ1K}t$>}ZpV zQxWxY)6A!f{(OUi+ou4|o4c>~CpWc8{I9G8cj;FLE8rOVg_bJ$S z{E;z)?^|Sh$V5KFaBSuSfZZqdS4){n6s%Pal61{wZ|0Rahd7TX4t9Hf_5Hq2mQ2$J zT>xFAbLD>GQ$UjNz#L$OVCVs(6=&Ln_Ve-MKanKQ1*Zhx2kfqlm;vF`*A@Gy!0@l9 zs^Dt_&EFHJAc6-AGiIJ@h9W2yTxJlmioS$_i4@)9?+2tp^)Q+~?^Jy3lR zqVm2Rs7cLFS#K?0KxlZr0P(a?7s)irXMq3wPe2PY((tLjVoHlV4I&Gcg&l2u)EbzW zBt@qcE46N~vZ@#k=P6DQf%~z=NqX9AQ@;bXh}2iHyU%x_z@Qw;;{FnHyTtuNWdxf*B`tewdO5S zia17Gz=UELEwKiZfeu?j9j6rIrT|0g^dm&Dft6^%Il!|Q*u*e4J!XkI%^j0?3opd%VNW_ z+C10p-?gk~M}Wq|(M@a?YSPn>{isrCjKJwWljU7eH=XlSK8N2$xO>MwO<%ACF1``H z8BuQVQ4l^?s`BXEsYMg^+4-|LivHG?vh8pI8^Y5i`-}xR1V>*!5-;JhUZD(ezcIW| z1_FJ$x%q8tk^vdhDPA5g`QFD|8O-o`(G0-4WiI6uZgL70Zx2^!lZ~$e3bmbR3izY7 z7QVO;{w4QCEdk5Ff0A_j%}mt?$1nBl(fxX4XA)pWY?cxSqa35Sw?}G&z13hzG%2#EQyY91 zGKLPnHD^)9I-8AUr`x$m+<~fp=wBA7W~1ihok1aXh~;w<;vc&Udk$NbgLf_pWn%pR zuANKFZyq@(pr)&%GZ!w1jm+}uyO61;%|$q?c#3$NDA~$r`*ka;SqKSVPE2BSo)XpK zo0wwA2HeSR&*!RGTTS--Hwkv*uj8vfuNF<(8P3G-7qZ(eMh`wxFQl(+-q0UjG{vVA zq*P}VjW3+2hhH!wp>$ksZTsAGP`dG7DEJQ9hxmcIzmhax(Eh}D+IdZaVnkfmsaX1jde%kJ~+UR?2_Jq1ff35}T*MFg2cmMnIJQV<3F)$W}kPu~PKvd6-c zV601nKKW#WX*vr{kk#kZQ~4FN5z_4%rW3`wmM<4vMFfQRZI8KL>GkdD)E70)*wGJP z<}cjaXbfwyJJ@Su8aW7yRapytb-30M8gp_eyr(&V&U4$yUBpQy-?>QG9w3i8*O|?J zHr_gPF=j6WW00^m)6+CH-v?1ErUTDlbu5X;?M;N( zzf){&M$LD&%cB2lits;ws#?-lA&2UVhN%je!{wa1(s+o$>1vn4>F9V(mNUDD2iqKD z{67krVFZvtqt5QGbo^+dqNDTg7@7yoMoc{7`><(d?qev{E3E%JR-Gk}?C5hy= zyGoillmxlgGA?&GI+}h$vU^|L@pZ$YBp+kxWbn*Si)_E#$=|N>G$NjpH`K@2T)d;Gj$;|H>P4&kYI)p z2&A(M;K_n38uPs!(P{5AziI7NbDnv0_&F?}vO2A-D>_(oXU7R?#HIP8e2tCG+IRqP zIqkOw((eUr%h;<#1JYQ!Gi5^zw1{25LFI+ZKAr=T0gcc3)P`8y%LexQ+h?g4ZUKM0 zKoZptA--9x@>{!rW?((in>uJX1J_r+JCG|Abjqd9SuVpl>uR-)@Rk5!xkZ+O?LmUZ z9|#AZu?w9C6!-^0rbbBrZI~{(hq|(QABq6rEm>zaTuZHJ1>2 z5pd&kc6C;w>=ZiM+cT2QdueI2?4m6B<5zG0$Pkbb6X&lwWl5_(v3GEyf!?+aq=*+M zD~v5;2>|Yz?Hww)X}vl-U0~pAbCy^Ftl2wv&`i7V(2f38o^N?70#6cRirOJOb%EZ+ zef^RL#LXTjvD%`Ax0k#v{H(S1sFR+4!^2S($dSFNNUGQPw`g{#f(gBvSn$f8>0U})Fm!ct_f*#lIwiPow<-$62WGHqObm2Qw&^!*v;|}>R8X? z`Sl&ENk)6g*qQwA6Y_v2VJIGf?Z(JO4`7KvJ@E+)6b>?{w}S*DtwjL1p#u-{=&OWc zC~adw%H{9a;@FUW$Iz=lNtWx@OnI#jlpi(W@SlmSx3gc(wNI`4nlp(=V$_vov3^=8jhLTB_Y@Qiij z!sJJvN6EEL(%~H8XcDjf^d)d}arq2OOS<5?p?9h;$cz&;+ItkWRnl8lmAv~WHwGSe zc9$oYGdh?xhwRJQa;Tt*AK9F=Yo&&WD^9N~ykH)25ee(gJS=hA%w>UAOuSLc*NGCO zwD3k1Fm0TxaUi!6utp9`r4Zjui4$t0#2!JfH#160AM*=fc(x{0M;D2meL)W=YEF>I zc8Dka)c+T>hOZ^ifY{1v@PWF-2SmfQyUMivl@F5ZQPA@Vd=}W;dQ_GW(cjo*7&GU^;`LUp_sLglg{@G!7 zJTPv=G6%cUB4YCS)v#tlLY_1=KA^jv{*hQ$SAUy(6@=mRXHzL)01u?Xn#PNtMs0-p zBQ7R6lXu7uo0^_HF4{O-e19gpYi*4VGBI0bmtK*ap81S}?-aXUlDyS7_v@iQPnT&f zstiVV$wN+yg8^EU4wG?Q$Z5)rq!tx27T7fF|D`tl!v2Drfui27R)69Y6+;97%O~sZiMNHF2Wo8A5tKfTjVXhDRIy7Dp zHH(Q(x}Fge3r@wB6uT*s)lX+ujnkkGnyTHc5YAQkBsTiHMnF4cfrR z$W0A3tvOE0%Lz&$-zA=otDxAMmKjkL-@FnrJ4qrA^{cs@?+Bl!cu+)NBTn2?OlE76wa_ zfa-X-`0K57NONNV<|vNronT$oD@z4&D{Hm#wMWgLOnL)F4qh*K-ZwC(-1oBINv&!Wd$Y)zJbUWRrsKEr5{zS^-;5Pir&z<$7 zn$L(y!1sem!ud)R@sfVN=$v|NtIFyw69)eBp!kLT8$Du`tQ>Z+d!1eva2id!`-4=K z4eAf;o{pN7Yk9PK4CK(4f!ORg!sQF{(`{kKA<;4gDPV9DjWGP)YoU+u*vz3(;MQ zYb3ioOo!?x*$)1k0=J9gHMU!6>0cCebPDub1mp`aHfW!-@eR1UdHT@Bqb6BT_S*hb zQ}4`uX^(>Af#NZ1^O;t3I8ric)^C;&Z=kC62IZC}a>$lEsS+js`U5Pk zKL=#or0$Fy!DpaL!b^G>o!=v;vIHqKz@VfZ)0l&51y)4EtEXI*T6FbI;SVvEj!zdA z0DDiC%X}uhr3jElV<828^0S)$-i}Uap&BFLq*Eg?spJWn1!?y!umeP=m~P+i%k9>m zQeQ5KEE@h)#G%BS%kVAkiWQ8qR|3kz_Svb=15bxx&mUQCnGQ;9h^fJS!9(VNwn1rD zAb8rf1jY??)0AiT=oEXK)R#+C=nk4hMA%!}o=aZk>>aI0$|N+{02!{$HNuH%{@M%W z<8Y-%9#4$LlFWVX&b7}z+~0k@+P-KSp*)+!glX(R*Hi0UB^$n&8Po{8uCkdgpt16~ z>=<182=_VG=?)51f%CFBLTP@keDO?AAk9B>YihzD)%c;svU{N-H__(#*U zr8kg#R|n}s3-CK_9oqq5{*8$w=P#=X;Vio`We<*bd|XsxMY#th5{Mset<#DZX1(D6~WRm;b2&} zlNnj*{iKNsldJQz0dgM5NE(!c-86Z`ojgj09f_(5Bmmr>N9OMDM~TPzT`hb4^_cSm zOhsUjRK0i+5n^$oL^Bn1)ROp3C`2xZUTQur!6PWABF^Lb=b*Pmds8}Qr%A+375{rI zP6tuGEPbg}0N5?$zo1j)%_rOV(I$$Uiv{z0KEB7%abV@-q6t9FXpG->2xyki+wPYs94Nm;DkdAL(j2sD-7BT~$1 zd3CcamUrO?Nt4rvDUD|1NwBWB1BQstk&cOs$(FeljG2O4w#CjTZRYm+w#S*CaNSrS z`J`d-V+?6C)!-6P=sFD%(DnRIp2l|U2hx0GQpcx&brB;kZ33Mjz+fBA$`K8HF+4z& zC_C{?7c&WwL2a)p@YQ7A1g_f>6`L6Slm+ujNnG&j67OHHUV13dgQkb_T{EEgBb{a% zZbf&GsPp8)H}iW5l&tcedHlf?!~|h~9zloMTU1@F$f=%HQSMgJ_*BWO=#qD9uj1Jn zbbaXSWOM}L9$k#)1e2wQ&) zv5abGxsT53zF0fw&Qqx!at9tedcD88N88L@TnP$RaL?<$iIP}-^ZP}`vLtWUddbZ= zh(7fUCTFPRa@9jY+^4gsGg)R4BW7s3--;e(EOhYU$rVsLAyb{Hf`8x1jO`040gmg0nTS#be=gR4*LL?hSy=e&#+&NIFtz5@b>K+EWuR1UGG=! zweU0%pZ)q4kC2?;8$1|0B*%#h^g(Sni*s{4KtV{A$oH3Q_OG}ztlXlZCNcM_FG zURx=IpNdZ0oL<&=?eJB~ML+(aQ3WT4vpYQJ*Rq^)tkV>Z1kaQiq%1P;kgqNCeU##ztbBZ?oBC;B$4$b(%kDMGJO%&?E?*ye!DiKD;$itcYw0t);!vM3z&#b zjK1I_%Bl&8t12=y#I-Ll(l++a>hGM(&FX*dozU{#ycazx$U2^oHy~0y3^u28-K0ZH8R+4GzZS z9C%;SK#;AYa=d-8-*68vkX(Uthd;)b@2E0L{rSEs^2hudb32Am{0)E|`zfruGl$ikN&4;2hR<1vLB0}9nhua^51x5kPWCShL0&iD?r2$=r!NxycQC<1h$ z`Q5?UBA*h=EtA1`yXC14Rz#aP4QHIEw}17kcbWybj`x6QL-9Op0|UZcG{d{$0qL<0 zfcO=Cxj-_`*~eMZ2P}m&I$iLT-vfRvK^Tn&g?1_!9&9g(+1nNi+yOh^^ybh(m|vQ- z7@*6jvc`LZH7lf3*adWGe~NuEQ^+WQ_`FOo?+5<7VM?Jhc#xZK^FYkSlcY%33;L;Z zZt-LBmOhiE8+0Kv%x;I(JdGyjy+sbLRh~gAH<`(a4tbis^ok7V63yok?2>{$yuH4i zJ+E}mL#H(0>EjRR#12Z@rLL4*x4YUEd`v=8c-`!Aa>I0A_R6(sk;W^tXn?0n>8~fJ zQ6zA38a1L(OMuZN9!aZG{Is$tgx;O!U`BTne-wd0L6WoHKXgNuSrV%yht&~R;2TRa z_MyasaWOgQIJytVroVI;ZKzpHOf)Ym{&DZ5O6~`|TR(-0SHAAK0p}9%`^)B#z9;`; z0n~jM`(@JW#05vlbA)3K&9l5DUb_stpuB`(;YrPE$VT-^-Wh;{e>8bX+8&zlZ|?*) zvyW1a1Mc+>L))&>Cs?l_S1(tElU|tW#B*~9`5d)!Oo5=vK8&HS)a7UjzK$WjpZ}9y z_)Z%iTR+P8v89@-TIL5og)XN8mTo-(R0$5ikGQLqCfRpVji?9rMlfPpx=O-C1o*x0 zE(wwacx8xV{lB9{c5*DptFz_Tq$zzq04Vx=RY6`Db+JH`?AYBDE1FL8E{&UDxcp2x zpEJk;|ImOhj+Ac*EhVVAB9w_@@nBf(K9*f@@{B=G{ zZi1Gz_V{hRS;MOu2WJ_y5Z~dbPDJAnBnx(^5xV($B>=6up`oEDF^~~$MGB35^*KkQ zM9?`=&;9ux6-~p!vsE{+d^8CP_{r@{2uD4W23R9?fhK`kms}hGP`ufHe?5#IY*doJ%0^r4JindrGyN zg6)h4OG{3gy>FBtK#k#;&830ft(=a^PhBHi?N9KuXRt4H3cMmZFAUDb=Vfh0Rw|I; zyvS`581;6oT|0HVO*ilAfT{YyAN*0egU|YCT=wgE_qTLPdGq`SF`qv#4A~psf&N@K z#pe^Gd~LYUFdzU{zMTMC-u zDjmak8SAFhrFg10r5sx35dgMn~;tW}h(c;#4&J^q$3 zn=a(uKw-sNu;#IXZYw+rF6OpxFaD#JlkQ=X>1mr zT`qb0eWBIsMuk zYBxq(&_j%Y6~!*PikWH4tMwegH_-X&v0r?=z*$S)yD^!leqe7Zb@G}ibKdr_f?72H zGwS~Geq|{5{i}?6qm?lhDzfl*#k)^+u%I%Eac2tA>z8TxWS!|_Hc4m#l43ketacT( z#^Q!j28rGEiPZjv+x`zTB@UDadmOTBf!u?%L9U4QedP{_=O{{AQeQsykK&=|w<}`@ zPEdatq|nIhhLxW9#V9HtUP$1_N#U^#2A6?9RH8D*FAWk4jP%@-YNt+ryC*ELfKkea zRmQ@%qU=9K*9bB%9^+GSg>)JmJK|gVl6B&vX!K%5>3NwI zK@*(ccnN%3C+UNep48|3ABYqzN@Vkh5#Zm8*TE8To6U<}X-mz1Xa9pw%#7smw=8EG zYg6LIqZ$!OAYH&BNh4yXrd!xV_C}PH)(7j+Ms_~UxAd_A>A22?MS-;MM1O2=MaHK3 zq3M#S`~=UMEg~V!y7pxWe5FJZzSDIsj%Dy&wbe})ZWN*zH~S>2|F;m7`w4iJs5-3) z9@qs+M4M}5$w{eG0>9S6Sn|FDr_%QBX7O1W#((=e%z^+2EO8aLZ!5wF4e?~d4A@}S zwKi|zb#WyAF4DFh{2HPE{Sz+kneB9{sA^o14lTPhRi#}OYHY1Ihgv!kQKpF#S!3qElm3%$h{dOAkxg#QtYCRT8M!Z|Fr z+(BYEq>sB#m}EwPu|s}kkk_M;IL?EDK7}(lSCg2PS5EB{#YIB4`M->y{gkDE;g&K= z;v5KBAFCPJ;5LBK_Z8YK81cl|cDg_lC&M-o5urMS%;B@IbGAM93_$DQ%XF^;>7-9M zIB&GH5}D5jbp?tCbgLINNXg9P7{>dl_}=R%{;+9rzL;;w(@nx`Ecl;Lk$CSD)MKBC zl)1dUBO`q^|3)!@2VUuTL@Y|EN@3{@Z~{+8Ha61GamW1KP8@XwxNBdUoymICy(ih| zgyEx!*$(vd3}NRT5nONh+(s;zHjH9Bzqlo6?obrb{>EqZ+p<<>ylHKprc0}a>)>C^ z!h?&mv)q3(3s=bgUW52O)F6IB*ANs^pa|KUE|<}#zx;q4q>svAo4KFYx&R1Pxs#LC zzH2Pne(fKjY7iDMn_eTNhc8%WQwd1UJtljcmy)uveLVK;{oSk^ir+_v>(a{nw>wYV zDl}d8YMrqP^vhp)owi_ZyWAgPj?K&n7dV@~3Sz#0AVUClo1(O|v{9f<9Xo%aJw|tT zDs!en{fLn_38n!^IHGP>Z<7Bh;uI``kXR!*lK~`sDXu|@$qF-ibnX6?Q-W%;`}ok3 z#`sQ$f?yO76U?EcqEZ8TpAhAmu4UVVhY^WfV{T+*D# zNVwDbt{@Oh(f!Is{#?84&Df{%^-=*}Tgs3BEiGq2;9Dw{a!ZViivnQ9K+&6iYdB57 zDF(vw1Ntg+&DeY=r^uH?TXz6?F}DHp{91(GpfDuo6qw78UFE1fAg<3u4u%%k<-T|+ zI94R8sv5lz`_qtBtMz%M`9}Z)`)IE03Q!;`52<9=7kHM;!W#RE_7ASxb5(_iZ#%-s zgpThoPd2!Urf|vx;212(|8V=~04%EDq#K#k2^*aWfm9Gh7C~Gzv}GK4PLfNo*0q4_ zksK*@&I#ES&9gfKQ!fBbD7H5Qh>*e_U^2&}V-qiXusFMTyp3k;-`Z4(ZlXnOUxf58 zjBFf~+_X&5x;(8I5k$}vw&yC6gk%19fr=9yuz4*N#F_f0<(<|PzfK*(~&?k#sN-3Mn^`o3#aj{== z03=|c-`)A1Ha&i7Zf6#A7i@g{mmJN}r`q3)O}1On%#6KqaxaM?+P&{)8(frt2-g75 z!6i2z-`lj5jZLh*1nw0zKs?zj7bo8O_Dq_gTymU^_=br0=JoiBsdT{8?!k$n9`3Bc z*Gez1GHTX-#zt}m$b!O&6lnxSRe1Rq-qJ{|4#X{#Lov{dpFvDtvwV3V{2lWIJ{1(y z|x2&G)CU@tawZuhG%ZPuv)X_LPk8@bfaNHFzct1ortynATPF-ZEQi z7wdI%lj3j#83wbQ(O&DJa(%!s_LS`@EvbdL^f~!BXy|?%b`M|xw`+F49ha$iT^VGo zv`y;CXNXs<6$XiFG9J()Zk*?CC*#Q*vN>b(CyF%lkLu{qO0q)cyRJuTvl{aRl4o0m zNzS*`%+Irm8z17v|9emY^eBMS>?7!a1ep%29UB>2*A6mP@PvIL^ktNBc~+hrtY4?F zH?qATukyDE}i*(3S>QHvqV#E5WWw&vb%ggGeZmWG3 zzQ>@Wxh4X9rK=1qJFTY!SYJ?;gFSIeI;0SEms>1OG7w>dp&`y%kd+Q|(P z-XC+;zTh2t7{q9tfzj2z9zj(ZgC5m?vA+;w_Y$i`2V(R>nSc939`iB^-_!+Jo2q{6Q{PWq>L3E3?sN(iaG5B>H-)a3@ORi_W# z1K)#c5EU?;6CYj0z!P35Upyg^i*RB*K((OH?+1DM@pF`G*Xy(i30T}p-=SZ#JqjxI zi|@Q@D>djV5S?dn4hTTkkY>iwSkgVaxy1D=p8h_V0VFU ziBiKVp!8uTNp@e$fc39$g&)$uyYaVSPiz)BkT8-#>2JE+(Z})g(0_1{DH7j}4f_1( z@qyWZw@JB}D$_9WkNcq;sCie~_&_|e%6dL6eeYX>FD|3L#OKH^ z16El@9zXM4;<9NVWCWg+yi1K*{Ti~$j}h$x2yH^kwfS|HFygTl`)TAL;{@=k`0b{V zVDg~?4UjWRRSBU2JIeru;-0%6d z=|)$aQMK%_H~y&^KiJ>jdJE7Z#&*ycDqcsowz~Oqri&tOz-|9YBas4Wq_-1LZW=V+ z?o$A12#s<7VT<$}2pGrQtH1nAgRLX^s5LE6pgn%^x9e4f?zvJ^1%3vMuW;eJ62tCv zgZ3O9BCIvhNO!RSX}#0--O@}lP@blGazT%2S?DiV)l=#4L1Baiym1! zA?`!wgER1n*IRv0_=fs1duUj*bv-FUYy~nBZTNR8Pt@2ZcU(KPkzipQ#5XiO_TK?s`O4OW*GIW)(minV|K5TgL`h{!=w)8Mu!>Z5LAHHySIH*AH z>4HOqhw|7Maup!mntJE_T_~jS)tAe?*jV~i@t|Na(B)_IBlMGXLgLW#AJQi`e$e#* zs}DZoMIWTo>vL5aK9P*j;Eat9(h6jh{CyvPkb1Y&2p-?VqBQv4I_lWan&m zVg;TMY`HyuoJ&|oe@q><7PN`ZiI+<+p!@2*ZHRAuPm%$JL~-nM->{knF7^)p` zr0&|w6>&tVG7ueKyqy;m$PJ8`LT*@PxHj(rc&R8)|feV?HO%SA<9bi>9!8yC&|5PTgjqu%y6;XVXc$+?YZpI zqTM@q+}XZYpqEqMV!()SPB??dy<#-`kGeW}nQv`&A3X{7e#Q`v3&p1w^OnZqo?QS3 z!(BS&c>?e8f*6~R8}=`V3<~74Ed!H|vu3o_3Sl;$?~8LRW5-3ul5ayRpNXaz>N+~1 zmS+Bf*al5>yC0G$FYkhN6Ads*31x;Jv>$F;&{Uxe93AWuGB<_7LPw3%O(cog>@f-; z)z3Uk$38s{Aj_5?ww?SmttFcxs_S)Dw?Hs|a)v%I{J{NVWnWeLf!a)_^4H6h{?I+7 z`*B@^Q2-xo_TH_^%Pos?C|h=iT{{pJnl0@;6d-kWBU*JX-AruqKGTxFoMd|Y8_%&~ z#bJ4@l!PS+)>*xUqPz_rib$!;MQx>Sw~^VfT^{{{eLm8!GcA0@+hXUBa&_T{xAJOL zFq(q#YOY8=vSx`Eu0L5=e30ya8Z(!MX>9qB6KdlmtGM@0&BR}CE;*;#yq*!v01{0no7R=*OJ%Hv{;?@6&+ z@UWk+mX>InsaG``4`v?%8-Ne{5g>IzHp4W)eB3wLd$i!i*TR<$}JKR$pLE zq>GyAjTG#z`oM~?MUMW36Q-@%WXD4IAfE_Ms%tU7UpT~?Nt_U@3_afZln z|4T7a;#yW2 zf9<^&_c*xKQHx#kumMSRQ?252`GV#>zDY!9FnYNts!yEW9InSj#=CuBW`4)Oyxh@8 z$1&2R(A9pOX_mK;ub!;-^=lSam_oOLNa)49HZlq}8p@L4xS6~*HBEB9rDHL*rJBy1 z!{C(Jw}bhO*O$7MK5_Rdt=^w0M71hrEejmsh*glWNSP3#HzDnMKireDuXl?(doH*6 z0A@>28`a(l>FhkO*oZicV;m9)8vQ(xH{%n`(8@|>*;K!G8fP@#@A09@C^hx-xTnF{ zWx$p5@+j*!ktDR`{qnOoeXAi||05e&ynX(8Q8-So2YxW9jvYaABD`0>cB=8PBOLjE zE$V~upwyy*hp;Sf14xlWOkg?%Ff8rU^x{$d$|hM2VH>ML!8Q8(r%!)bpK?dlqD$Gw zK6;GHY8|HC;L_ci8^cnSjA(j6+~5IFC$8%%GTK32O5ezxGBYb_NG#kn)3idPFSIHy zz&-v2I6ac$I^~_r8cc)DB^icU1qGwTyI-a%OdMpmPbu(%@a4G#HK$?^Pb2-XwqvrT zNxqxUN^c4|2;FgZuGld~c?In_oSFa6#WF^3y0@?FA^b0DC=xli^~yWTx&zYVIRqhvW88Vl_Q5 zcB-bCG{nN8MnKfw3QdS;W~D0vz(<-1I}3yMbad5B-oDT`lzq?8L|>uHWn^3JkgaK3 zvma#GL?TGq*(7@mt*^VXKDiS3^{rB z+pt{%+n(lIqa~LNfjSQgLhMhy9Yn$DY`RIpGtM`|CjE8CRqaz!$2$O|%)v}39{2X#MRUyi3M|HbnR0Wa`I!S@wj&>8=tzp>=tZw=x_+$i!xJJ{QKj# zDUUXa{5x*bat4(W8MdLxZ92(`K#-tNU?LHvBCLQ_6h9MBU%a>|h;-eHFO8)Z@?QQ( z!P4a;0JY_Z* zKehC*0Jj#JU&SOFv>Pz#G=Mw-=P{CO41%WPeuQ9%7ZaH@I$W^HuhyNc>KW((bZ+CA zCaIsp2c223JiIT5P55x!igq1yn!M*;O*$L^o~`zTC^P2Khz~5rcBHzc1R*Z!#rv?F zT^A&X{qxf>T_ng=AS6}5+p}vQZ(8&j*E1j(v@6xeZ7Me7vb!12y}dmU(rp%uMj&XG zDK&76+@$Lf6jCr~=h9OYp(K9OEo3Ah8yO@mL!d3{QUw>n@gUgeS>W99x$7x-B-1&XgM zV`F!o+cdF| zAuiz?qK(DP@H3QjKN4xr!X;E7D;YN9i$_h5MgyTLd--GcgV^P$kn#BascH^`ojBc| z2AI6ufwl0E(T^9?2Fao^m%%({G-woX za)ybfKijQYx!^!oLO#?7n=Ht|4RskkN6i#4F zlg$McHfxfG2>U8i$f{;ohJMkV-(i0_$rd+Buj`~*yO!w$>Y!Q0uz1tu*!!3m+AA+o z`P9>tMoI89pHIMk-U&9hg`aDP&2M_<`9~6qbmG9?$~_UQ$mHD5GEQ1DbPTU`l?}wS z1lw*#?yHIjJ$@*5;rjX9E!@xZ@XUWwchXX#V?cb3Vr#LI&Ci?tbEyJR0xBg)SB$NgT>0tns z?(P9*L_olxJEd!AkZu^dLnH-3x=XsH8>Abg8{Uh1Kl|PP=h^rDfnyF1K5@-?t#hsQ zE17m%ZW&b3j62ieh{uxA&^sv0%+Xk%=2cD<$cznmJh&D3+20QisOymP<)6* z6&naRlLku2vJX!f-(RvsKK$K1_t)i@ z>4y3aIp59wqQd5g;a_5vQZf?bcPrc8z+ zghG&=TVP(Z2Cie6`Ob(7$L7rJ*<*o%GL^l8T6;c0SdHjj1us=lOHk|*$UlK~ga{X< zWT(g5U))wN!sTSM)Ioi*9L0RS?u>Xkk%VCL7-E-RfNg<_u)FfQ8*NTpU#~}TqnUA& z)AUTUU*w83QM% zyS{jEGSHhBT~<>M%EX#W9d0jTxZlWBPSF{^Tqq^BlqK*wWq+p&sKo#j*18vtEIR&?#7r(lUl7A+-S)d!j}rf zxslk!Ao7+7`z-p!*V)d|)R*K@!w!8%2ZI{-{y0cVoFfz~&pEyq2z00Ze%X>8L5e^0 zsgm`-`kMbVJKh-hZ_n5zGb<87zcTO=g>9pgcnkuj%dJa*(Glvkt=_yR$KU_yTcNzP zTJ3ly>ZGjiTh{!V{O;KJ*s1nzi!>{XPuzgbl>AicK)S$ac216e_-0Sv0FRoQ+WK;i zoZfYGQj%H7)6lS}??18mtV7}t8h@PEAe$8w7{8PDuXWjpuk~PT8cqeLGMq!Stqg z`>nj*zNe>WnVSV)eneWum_W8l~A4pkCwSXI0q{dD+?9F;6!gwA_gkkdAouX7>==cUx51-S;)$ zRm~CueVVE9P%8bbpN^%rko!pxK!dZcKCcaZx-rBTC#kS044l&taYebl{3un8BV6MQI1jkO|!#g^mL_3 zB>hbklr502U&zC*l2)nHh_DLjmLhMD0?HI$T#x zS9>+r(t|~D9!(Ac&T^W=E!OP6?PWptfmkkU;uy>n9Wac8wZ8aijKhP;lJa_j*K)51 zD5h_JnBE}=^IKPK+`M1@+OT*jAl$Gd*iVzyBSL1025bTZfEp; zq*1j5B8}g1gH-2Sco+|L zrUX(_t}|{OnNM8%H-{M*g=Q@l>c)%IYn4HZ_0)3AD+f)TgC8?Q+>Dzp_l4Xzx#+&m zKl)W0c0cK~=(YG#pBjAtLyfK9NZLi31YP{~>k$6<*LyA-yZV9H5mm$EJY}NhMekCY zDR003*BkoRQ#v6=-bUJF$*!c77RT%E>*FHa>C|w+$maOQRJbdU_1bBF!N^!4!wSZ5 zvJw2eksd!!JB7B||ub zCQw3=9lF{mOyaqs6;LYFX3dI!t+nWuxN+UY?}s2#`Rm3N|F7BQir}FN&|l4*nFk`N zZfoaCWh~oAR_!fR?Ai&bb&L*e>L; z9;Vj#DNf$v38un*Eqc~7AM!TZ(xdP-UOk4oHOT3RSSr>^*ZAXY-L8=cOXgm&Vg2=Q zB?ZN09%yKKh_yx?T-?lSDT z`Gr&eGF{YdrhwAPi+j=QVp(y-^IMwlmP%f72CoHswKNK~+spgoL6MDR4mQHhNWT7C z+Tg0lJc)?%eOmRX>sFi8cfI?VVFFJ$)9E^cxeBYX)JUVBl@n{~+*+>u(KEpolH6Zx zwkAYolurVIkB!RpMj5W%uMW0K3|b3#%zmOqNz52JRb5eXHva127#Tj=Ti9O4?vgw9e{hUi{(QESho#0FA_ey$cU-%!7{mqK%p(SsE03C}* za8uQ-I-NK~6ik{Cpur~}2kEajRU$~!M^qn{VFmN+)LW(1zO)o*qs8x~DP;}4JB_#0 z5Q5XvkgN=dh{p;+CUg1{gre@pU=^qFd$Y`DLYBSn3Y)2jyeVNqU#=4KkNbW3IPZW? z2hI%Hn;ehe>WZkQ*OQ4yLq{(Y(WtWA8Kb0N7c0`SUhvvTQxHOH@NbExd^{KgzB5}v zb5qn1>iUk-sTFyalJ6o45bhyNEABz<`bi{k&o_8^XmwlQ=J32d5)-TleE5&pkd^JT zJt0n#O3Hc$MEQ{hkUBW7YeMDPH?`LqK??U~Pe61@z_(A#MjbY)YC%eCyH%}bWi|`$ z_32PZy~$#eLiOoJX@7!%-iG1}%v=Q&vwQr#3*T+%roePK*E`Xnj>BG@Z^O$)wM>IT zaO8_{lQa`DMrc}hzQBseQrwi?#_3=4&VRQ#oARjI{yAsHg){L$_vj$`yW^N7KHG6- z8n9`OdV}}vkkjsobI-laDd@5sXm4?j#PWre_Eldj zT@&7tFW<>dbF{HOx08L7COqAr%t7~KIwv$i^(e#6>+Z_@c#^uQ8pqp6j(;&8m+p^@ zNWnjp9b{mUnn@x)!9e5<#nWXJ2kq7JlVz2XJc=s5yAH%vEX_moU>fZwkA6B&2+gLv z7YV+*y@1(_RfVp@g}9Vwx(*Dze6AjUA@9}nxZBxxS9klVeSf-eLAlp}Xx8m*hr#(E zzTKzbpNJ!G%?=J3H^h2h0!z94Wz3JMcl|nW4vUJUXn3~ewa5k{h_P^Nu$H|1J2L8_wUuGGyIP?oUojxei*t5dks>= zfQ86C?*oT~iXENsKHbdE$84JObDUH1>mI8kCJiUk2ct!IW69`*REl9E8$ebC+#%2e zN%j{cs$I}k*t6${(DPp?e?OAZNTM#2-;wHlReuBAs%YrQ)zUvvnYyiKG4Z%xrI@O+ z^6y<{at^06vA!z9uXTxD<;N#}b+nM?v;tqW3L8H2&mNTc03P8{wLhNE?Bm@)#_tJ! z?xp)xPvOJI_tV0}fYTthO4&vNtr6}0aJsDE)A<{>bWP%lKaf=Z$zmNoT>9t~O5S}s z4Rs528!XKj@XVL6)gJJs^jB(^^nI+r_HS`amZHdTHv}%-hqi~DIRWqdygY+15zvez z)2@-JDbr*Ka@SJdxty(`F5cA__~;b!BQKxM12*C<)tmE_>9;r$n zcS;<;rI(i9L3b6h9R6vGRf4yfKE7F~ZB`F7e(W@OHJ&R0<25qt%l*^#S|@9=aUT;y zj_iV;G@HfDbsD_=3jXN|fL>MK)S}tXalP)c=#&MiPF2t`?H~5`cFe^J-Df?7j5D@) zIpOoMeuI#UNJ5sYQP74DIDC@kVnZ%kH(S@o&^A{wjiD#AWEQn=U$lE5IE!9k!F%Ts zs-tz-;wgQyH38!y{``HPWaoK64u(>b!?6DB7?t8`rTKLMKgLAyb?fc!g?8g>0j}l#U5#ltml5>bC*yLh=plMZhM{Jm zxu>c!tZp0`Cv!ZEB8f2~&x|;7PY7P~3c2|!+0$o` zI%9pZ&}v^{YT;v?`ft5TWid-pj!3S3z_1z>;eV#e29BVj#i52f=ypi^pEaJHY;gt8 zkT7PLY;>beA9C1VVO?YCG=8wAd}KtQ6EM$`D8|9HQIi4Q6yD*_?%wg{R-La=_m!f3 zcZa+G{vY~$SCof7AFX#L0Q4&YX?UJB3XI~ta2Wq7kq_JQ6PD|``Topy3Tw|kPj*EwNRkHxbV{g2l* z8m*ykv4WqkD&kNGP6ZoQkj&nTCz5otdJl6376mdAoDMjj?awZnef)f$4(%Ee;qrSs z*xS2ZLuofbW>Ckt(;qb|l0=eqPc7`MI~iCgHpl1DDzU;dLEY&JBpXI|%xi5t-}}tw z!T9=mBb>ahKalC*-k7x!Q*C1)oepBHlAuLC*EL5e>I#9ozbWeq#Ay!MKA%j99$}c4 zI$8nd_S=NVF~yiUY+AMYL55B%wtNx{_dh&6NPf;~IV}!{`MZI%xJtu1PJ^w1T0%I4 z)p^aNcJ%1NUh?E$N5a-~AcL#=t5_;i+(t6)LCXWqA$o7Cps~VFC(;&uIhy;%F>i0C z^QDyJG0lpAHqFre6om(6zHRY4@1@#ziG-6mBqb4n{9B| z?^Uc9LvS`TKP_4OXs+cT=hhXt%^6i2CgD2zclXNW~zt(${~Q0vR8G#SCMq>nxyO^QC$e9k#v^Ua`W=^i19r zM({M)bMNX@dwLjw@%d}Gg93!QLgDWlmcNF7@8Sm#f{DRZ<}ZN2kM{G2i~Nu$8qIuN z$d`|ypuc9(5=LaHup8^3yT!6r_G_sCtT+lWn6b0nh%V`%xk$jO9xVE;dp=B&@=kq) zofK_I_$Xbv?yaQ_O{Tqo>blb1_gJD&f*HQLqO;0N*goEyctqZKX^ z@e>tP&xHylg793Y?fIuYad_Y7pm|SD0)anaIio%am4&6F(TAbmKzfm)qgDFv|5U5= zACm<4`ErrkJjXD2@jU61=W(m>sIx|80s2pO$H}hUB5p4C3--~GtL%DxSIf^d2ypVD zKix6dX#{EO2b>FxTtKI6fm0M~=vWbeYW7(ZszAk{V4p*Z-tAzqzt$$hH141NWELD9NbKp9eFlXYVhf7#^K1 zb08vN$T!2iFV{0X>-A`GrLGquTEyU8DfeSIF+rw z@evUGO%GHDT*Cu{VwP8bzh3;GE#v=u{6G8dpLB?{G|MA9`!

0%Gs%Y_N*5rbTq% z76XG8K__#n*y5WE!S`SO10VeNbo7Tdb2kYW@3sKrgclk3nmMRTE?YiP-<>(#=TxUq zBlhIe`FnslqHTA&dXhrW&QLs}b#Y5?xj&K1KHl^*V@kr2Sf}IpzLr;Mz9$JWQF5Ja zCGQp`UlY-nF+hBph>lAId9UcjnkvS*7)Jfk1im*tZ^_qMnO)P)&9}&LuC89kB1gbU z@rHjrIVELaK%=_9++^O`#OUrwHiAf2`#%7K2dS6%Fw15l#u6~Xo&Z{rw(Qf=p3xHE{bHDXc2)pxd+BFNHx27Z{m~i@I_*eJ~ z?-roY(9z9@5lITVT-b2E*;bU3yXJ@O+Bx85&AB zd zv8~blcacqts%2yE-ajd&_~|)aIZ7dBn>9LKH)Cr&?DIHnu$H>WH(Z0aK11Xx;xX5x zZUn#D2aJVU0f7ncLn!pD?_+U$$0LNGzF&Wz=EKIC$E4Yo)ncllM;OcIm;2cvW7_)g ze7D*^-ibN{i%!O3BH6;rO0z=(1%s56bnAXmWlDBI;`6;`wC0Z-dpK4{W04|x*We|^wE znBbY(Y}5LuRR$O;-ZOpd%vrcohJ7%Or|-a}6kzV*t(Vy(jMLG2{}Lzi|HlEgt`JuB z&4x=LE@cXiF_)Wm*bbg*m2;`f`Cjz^b<;(R_tg1wzk?&AJ`2>l^PS10fD}G?Gg!gy zdZHPi8_;#avnkF)>jB7fjkOM2c6r}yh~-l_>3^xk3JXuicPtGH5Zva}D(fs3q^I8m z5pzv`$l*7RXVKOVz6ej@O95Q&F0Zy;cb+w>uG;~angEc%BVc!u|J`t;9W#IuB1gi) zDRy&VkPs3WS{_D;%>TRLOcn0vH!C1{37DQG0n7>&gpO_i)}H5gmz_z2zkk9sN zYdYP!>3UFG-$XhEg(lx{R^Z4601q)9xl66)oK45zs#7OQ$wsPjdX4yDuD5)VN_(X% z&ogI%2s#>|6k=l4skKn{gKEEu@SWi>_^y&UD$j8c?cf9mKL!0^WRquG>`^0o^O6^bD+{wSkxc=Ssc4k75YU6_)SH6#-aN>@~ zz5np@u}d&u7?_kanwRnl?7CXX(Hc$RaGI=q(RCe@}SKG5B$ zbn-@o=|Eu2QwikU8fe9q^hA&+NY4%cxx#IXg+0s=8P6oYt*@^`V{f>IZLK-;hEjQW z#>WZd=iiS!7P$u4EpLET3ni|7o8Ssr4a@UCOUyhx@6$6l)=#FnZ0REHApvMoKAq+X ztXiB;HwF^sQOC8`siQAvE6p1__H1uY&Ci6i3=^02_G`~3dEh6c_FG45EtR`$DM5>+ zx-w$U8R1YE2RUCbks@-p*9_pPwM1iJwawWz?WBT0q1jBg+32Pe$H84_?O6*@V*!^s1PVhZWAaq0De-(ml=0c!P$NN z-9$&#zXXwJq+q1admkYw#WM}};C0|NLtZ4r6KQyuV_caWdH={QqxQO+)+ZYkku3h| z6=At{QG6BEx>bnrWI8G6W1hl&BlUd?6^sQaIVm zLgXWUmOj7Q^Itaoe37HbPdp`nzlub&eg84T)41|P%k3eeMW|vC5_o?&G)lmH`)@A* z9f#LrA=&-O=L=kH{%@MWN^|Es)IlnYlW$_Xt+y?R7$d}x8&q=e?^-0voLeR3BJBGJ zgF%cS*R#9u3h{@3LzDr5IlypV{W+6U9(k-UO7K6(0R0ev^El{obn>U zu}#p(QZb+0+S+LUW{?i-2pxQKIZG4Gw8})PrDZ^ArgOVSe!c53x!-=c@;$dX2EJ8n zkv*B(fV^Lrw>$hzi0m-b+pW~nuYOtzIAuUdiH zv+0JH1PV*3_M>_7)dx!}AVry9EkA_5@NV z!w4B>^0&UvR;K`7JgOr_MHORs;k(T7ZoiHKZWimkbn>!mAwyECgtqcT4Sd1hLd)n6 zjm&I=)sFYw;v42`Ttexmpu$hd<_M26I3(P?&Tr4*&iq88&IcZRW2}pivzX7%K#^%! zo1YJaY{bEzwWZf3>#pe{gY~;?ktek0;WGviHWlq{#87U5sKYLLwnsvAzwYz2?4JF$ zz$kMa_F^<+npr)e^i}n8I{lQg8mq-{F0GJLZRu^AE_Fv3jElc_6~KF^VO`7#)_1ID zZ}3>TbiVi#H7@70!PMKwG8hB->QTs_EJ-#z!Jkc2MmKDP`#$nscnAyi9n}3YG{;aB-&*L3VuiP?%c2vWj$ln-bF`tPTsU%BPGcU zuFVHP&lf-VtRQ)*r_HFVgD$GD_LGqx4Q*TakdBF>7u~&&3I_HK%d8;b8D5(h)XtpX zIr{f!6lA-ry3A&rxe07Ks$|UIavIb6azWaAHS<7e))(mk*#tdaCQxp^h=!Ov#h&6A zNniVL4q)#X-Z6`w%DJ1RN7AlH&Zp|L;3lHoRpCpBS)27X`xrY|Qw+XbvpXkXLTS^G zfk;y?-NjCEKMyTw-i}tGnYrumNt)GD0(!{V#YU${e#Job4HAWJ*+{Cs8bL;(h$*HTO zF_ZHXER$WpaG4a17E7TobIzQpJ>G!ado{QiY$->5Og3=B5QlQH8h#q=Jxy2F)6;13 zE0^p=o1V7cK&C{(8-C#3*1z=GZyO$-U7zT`d`g0nVm#TE0NOx-?eb8tlp9q`rL9Ja zUv*o5$Cc_E6?Z4J94IDF#X95-(gO{{NQFJNxtZd8r9y)|2`1nsC*f)Ah~3>?j8kUE zkFwd5GB8hkc=!*L7qO*MJ!}$wM59(NUg8xiK|hlwRYHl&$HuCJseYeMI*O6n1?rNp z>2PKQzncVBWh?tgFQVpQ{Gv9|w-tI)&^%0`z=nV}lR~gAJoU4c_fqiDgf2 zD09Z zzco_CeJqK{$q3q@W|gl4nXQc{!)O6s>O*%yhUE&KUFM zW%pf6fTYREb##6p4<=l<*|AUwv__r89DJkGWLQvbngFcGczCN(gp>)4WC7_qHJpr{ zdKW5Qg_bAv!hY4usN+SwF9TIANV2lS1vJvySTE{dcdvfU|Enf4LE4uLho=Ze!M|{7 z`!QYYDEG4ySXnOWEX^IO@Iz6BeeGG`LC2TLM!GH?HX&xKAQXfqTLUfv&F;hd_hxCB z0Bg%BFZ;l9u;y|Z@`eDt<>3C0OBavGKa9z)_gVZZLn?aTf}0OREvffEYY^E2pHy=s#l7a5SVe@V{yT!LeZrS>RgwU zm&_nD-0)NL=o`R9dLS)?@H-Xj&`-l*8^$9s;^lf31N!VUep}1Eg4B#dQ6;UGJV|?8JI4r6>_{_nLv}o zjG01<)qHivM*Q?6v1a%2=P_A3yUj^sut6>Swk~{CR)0NfRpSqX6~j?d_OPcM%q*tI zc5z=26P~A#zU$ff@Qmk(ex_sW+X8V-s23J_eoYR!Z{bS)3E)=fQs(zaiTIT;TX2QQ z^j)B<%}@R=pY!KkU%_?hJ7A4H7CMd-(`m;RD}S0E+6nwJF>slYQ|Hpxk|TmJ03gC_ z<*JKA4gsFM>K3jLj%NDP`%{}{#F3Y2*J}SP63R7eQZBL6Wps>R73OND^Vod^ zB$%Zu0cm`~gkLDUi@e`2TeL!xZv(}=hF^jfwN3BajtA!cgwgS|+wWqL6>v!oUSoPV z&0i1Tq#l)V?pR1s^_l~*qMYsx0h*J^PK!MCh9Z7;xvqUXrNC8Dbg8{4FxIFMwDO__|pz>DrBqCRHVIs7ptLvoQ}{yXwnnF_TQP& zB+@_{4Xxz*ZgD)UgP5}p%m}|0S5#CPWGTY{nrrn-!aWhZweD{;afeIEJiM*1T+jmO zvAK+la*P|m+ByBXEG1c0TU?}A1`t zW~l?rCu}K}X8P6Ha)(@K!lHmgHoqaLjLRju9*N*bO-*-f2m^oAt*rER$CjtmH=jdB zYIjqFjl?JPpON|Z0DL$-ha;hMT|vF2N<&vbo^~8L>8=awCbq3IeCmmpr;8Nw^+_#gJYuvbeW1< zvn1+f8JBDWi6>?;tM1NDr?b4%Y>*fD!*h!FuK)yV%8g@%D)nU!eU9;XZ`}I!xNAMy zi=l>SAp=M+Mo$NO>psRK6cYd#5{n{OEF$l=+osE+1OVfTq3O}QA!bZ@56`a_8a^wf zxf2WmO=j@D{UYpxeOg7N9Xw?rHnz!!wqJ|WzbpkMOll1|h-f3?$t+eqW+w^y>kzDr8FO+-VMuK9m= z5;HNtL_n(gzNdmQ}8FZ^^+}1 zWr`2IlAXwyGuyDuCk0qh*gfn0LTD67KvV!O*#Llqv~#Zt{)OnI!%q*fIfP|@w3aUO zbX$m$dO$vAfa|mYgy;Hnr=K9|PZEb^a^os@BQ0&CLULCm)vPNiogZzDpfB{+Xk!q8 z-v*$2S3v=cwe04Gz<6qj49Yk*&6Lty#`?_M_2~26MTC}+WqY|jf%l#S?Q7b3vD-g% zDPJ?+MGr}umNBreqYc;r5}SiC(M3cWb&*_&G#9ZA?eM`*mt#w0Bk0>O!NgF2rmH@( zpmD!$IqP?!^(olC+x{xFd@C=Ue3z9FR1f=kv)pkUvH1zCb0Pk-?$BiiOK>o@bO->K zM(eyC)}<)x&#>^-GFB+7mv0`)f#K|_`29UiDCm+^J;hkt`g~|3GM+oEwhr9<^{%$W z%P+nz?As~*Xkx{T3NO#B`_?;eb?piW+Gyv`9aE2~A)_U#>|aGD25`lStAkw@wJUq! z-W$=YJ;1i%(5YbM{ADc~Y{-f%J+$v*iG$`bRd%=gTk6h1%4YAhS(o3%fa7e(K4%h$ zQ^ktX9-DC(cV{w?{;1W*WUw*Md1J)^^L66>%-BDy6#?lV*2|J2d5fwMNTm4AM}TYP zMC3aHM|VQT;o^ip3plQC`JY~ z(3P5YJ<#NOWC-vAxwefJXzmThIdLZg&Rr`EY;WndDajIO!WvIkQjx4vjS++M(_v<# zmdmqjO;?;2jq~G#`|3)1QM)ZrUMKL-WBlbtz2Vpf1H4ka_ zysa*j|M1Di?ho|pyU`Wyzu<@yuYgb_O^!X*bV1Bz@Q^_8$ z8Oxe!yfJslA!%POh(k?#_1$1u?tI;u&d$D5_U$&NaTxltnEKAXKtvU**JYKHPRvQ4 zm$cVEa3fG~y+2+Nqm&%X{LdumJ&F1#Xc-dSRDu~M_~!37rsDX{19-nEkxHihc5MFB zVrSmdBGTi{%8o;>bh;{JmFU<(JoD}i7H>+RveNScjkK>&U&-0`_rv0hl`YlYotrJ) z1&Sa20CREjjo$1Dl^j`~Hfw*11WD7-(@(E%tUn*;j36q#(_nRkgh+@w7%E%c?`5Ac zgHRD?C+ou@n+z=3Ky7Rccwl#6f3k%BKXhGhUDN<@PO>?lE8_vg2KU6G0WZH8zo6I+ zmma<4*!g|I=?OlvV#Y?wNxy~tn*NEhk;j;kB`+#+96ed|qFJI@%`q5)DI$WvBNcSW zA21su7jQ)*U_~h{p;Hb>dHV4nu~C*4yM5n0Lj+^&-D;?2VcnWAV)F~=SINV=zBw6Z zFYG@(L_-9yRvy-+s@kA&q3jY%?9^0Mwcy<=nFP1^>H=Yt8%Zqa#Yrn9+%LPuGX}Ru zt{K=25~nLT34#NBRf@5XbFw$MA@xy!dW{mQvevPo~(6=1}Z2W-h)j!w+FX~B$)DbdRW zqjT=E?4K~z2EAxmc*euN<+Jly&vRBE%pL0NUx-*tvB!wnW%C~$^?&V(><=gBd$ZFP zNIAJ;i(t0Q&dqf!*glNuT0dOr(i*HMEZ_`S&H{xh^)(U?hc#QJi@2?`cAb*T8h`i@ zU+esmvleyzdr|hg_5I*l)DT?(7l0#U;*!jGE$2DKW$-hsfJd+D69v~XVI5+g;}zTh{NBS>gu0t5`SfQT~00r ze7E1-S!~K)NN@z72uoUT z?}=Hr^&9ReJt^QjND?zCrnj5CzlkYmh7S-dLR_3k9xtTa?hI7XnA6TiX7CT^sCDme ze|t^apfM0-AUiPDqmtc^U|o|;d%?uQ<-QMHy+_ctZaYD4*>tMd7JywH(Pq2d z+CNfuSswTf8c=hg5^UtdkaiDCq!@3R5VGMz(%~at0FX>bV2tMGv&{ZMnF?6cxX&|d ztt!h*j;S7rnOX%q->=snFf%8CN=Md_g0Sc(25xHY2LR~H{}(HJ!OPam$EMXw#=g@u zsH{<^Q)^5K((z_BYCvXI0VNl&6%NvN)3|dVg&@JS6)~KF9S1I3lkb{}-lag1p!LZ9 z4WO$NaLnBhA_5Y7%r0~Rv@W9i5xd@vvmD%duA#tpcd^W}(B)vysb94fD=>Uf->geV zwq~)kILUO~U-UOOpxuhn;_|v(ay$Mr{MANlbm!lzvCsdht-zQjUP22jxV3%N$+w3v z#D6Ljky~R{0XUglLVQ$HOo{A_o2R-&br13&HQ@c5u&O1;y;lTxR4 zt^K3F;3t~l$|;ekEAbIDWw$p2rcnzoH~>xZ`X`S@`s)|IxhH_4hANr+T{eA~fa`8z zE#1`yWC3KRtgOjA+>F}~sI@E%+0XfXRgEkJ0P9XI?yiG*YmV@6dC3YYK1Kg`r|K2A zM+@Y8wiSuAp)ufvCOV49 zxOUIwgGI%rS*6-oy~$MalCt$+>uUg`@z*dNoW=3oh%d?&@|RR5^YyJ!lPrS;Lja{Q zZ#fD9W-JnIIYl|XN`tN-ZTG4k;v|OkTwt{DK(h)(a|QFdEJHK^NzR`0EV#g}=C`vd zyLzp=OZT=0IHRT7d=g%(?RA?hl8_#?u%>REraNHZX-0GIw)v~uNvgek$aKA&D{#{b zY@J$K@7;h2C?s$kkZSCFmr|ULFQht^U`$}NQZiGzQ$;Owtg&jTS~Z;niOT$<4l2s z_=2Z1FMtGa@ZPj`yUXoLC8vqncNPKNHv^>y4JXwJI%m>q3ZeudSDQ7E#tP%5O|j;l zLo^YEez?>mce#FZGV(GKeYq>cYadBZ)AGB7KAKcrwo>;LMbtUX@GGVIlq!pT$hypI zNko7?e-IH@R=U^emI<0{K)IsW)fDB7HOS-sVuP&?{K;sSknzor)zuC;5`TnZ>GNZV zih+wutq2^+(8xH6=b(`heDl;Emep}EDfZ)Zgw?~E2-~36gw9lWk)YMn)&5REAIHXiPOYET#>050H;04?0lMf&o-i0lw=le{kcyJ?sG z5B^*9mX-`DN(l-)nwjTz2Yg=V=7nu{ZIL@HE>91!E}IP|6{2SNX?r*rlm0@m9zCBM z98485ztFY*?ykaJQ9hs3azH65qt67Xudk?SFLF5-k&CvPYv>@5HQUQ(S{0Mg_)Gfp zfuPUvy!MIfYQLM)A_RCa`H4SGEQ7 zcV+D*m@~y6Kso5jGEj>UpVqRLM89Q8!euD%Ff%_6cOvpUr?H{1?)O2X)HBDNzZBs% z%y>tQ3UIx4-%L7nDs=4QmGQtX+BWqTffc@q5qcPoAdv6!;GDwUbHkZ1NJ?(-6M+JH zb=!8ncmQ_6UAoBGY+Ctzk)kNdA?25NP~iRaFWHbE`{MjCIt89}aJt(!e#$vkENcy6 zYFuj3G6f8$rmTj!2(OWL7-yB`zQb?6!50*iyZS-ZhYd%XzYRk>roMBytuu#q03u3* z0?;3-2_7L&o7lO8R21Q3m`biH;|N+X_`GD`DG6KhiZo+CFw03_H_r(^3U2744chlq zOcV1?3;PYO4`H_>xd;~~77pZh_AyMmS-WmKFx~J!C#aVLVq`7TY8t+>+o}B#4R@SB zMQ5(S{oBIs`@l!Qif|cIYR7++wL|ND!5zda1SXH_QB|o=g>46o)l_1%I;&MQ4EN{C zhZ&~hd46G*%369rv?^D$$Qa31Jcp7++hokG=gM*jFNYkt&z<(B>FUOxVvjHZj(Yah zj_zF}B@rnr?!SMCbE2cSkkRHJRGU`>nupZ-_&NB!8a@TQQ}pS+H~M+hxJqg<_EJmf z=eIVz#*>4beDt~u4G+MrBN-tv*k~CwQ8b!_4P~AC&IGM%DkwyBSB8~7zkt%YV51W$ z#GWs@FtUeGvAD7i#tDvqk+0VJNIn>2b}1{6nvkB$<6VNcX?m=Lv6C3#8qSpB!(&5M zfpON%)%7%W z3JN)W*}Ekgm|A`hckZ>(c&4o6>5JMG&?jV-$&ZwkMnYjjdhAnfb-p07EKK#uiHaqv z0SQQJs&WBa(B6LiyO$5(A3l0uaH0IF?D6((c{*$y*zPbh0Z4+R?WNQ^`w%zN4UTf} z#_>B8mZ$c^@-0Cb^Q_2TYG7L%BpMdNhs9ZbdXpgflHv(V)ZP7`on}53$r{4)wHr)~C`iipc&*;cOIXQe$+wwgS3S)8<<*Rau>o z)JQQ24jcp!Jfofp3)rrn2>gDhlIBTQ+cD?^jah=%3G_z-PSj;aV)(Qt75UY_meE@iz*!Q7&`?^@Sg29p4xV3>Nl=C`DtrlwEG# z@~rP1G=&%X{+zAekC@;8veXt+Pb6ohgIoM20r~b1q~bU_c_#jC^63$PS2^sq*8pVb z%QxA*2o1WZisZk!xqw6d>*GV?TY{K`qhlenz7kWS^u(vZCoE=(?u45l$~J53UmRza zDS`z_jtE^MXaK}P;uO4^8pcNO!11Pk4bu*N_rwL2rmi(G4VRqPn&9WPB>25Q^C&Z> zKdla|B5ar7lH9cL-5+YEBXNEj1iGCNp5%wIE)r$181i~{pidnkn2QT=g-)UV{NkjK zV8CkE9|Hl)b>by_wnW9c=qZe*q&o_zH@%X zb#;dOr(*{SF_$bk^N5>3T}Fv&u|TN=@?{5~ji}XHerZ*yg^lVDaJ1jLmqr^3p(OHD zKqMCY5{m}@`@pv*p~|I(K^>Gz;qw?(^lxw%_Ms7!T$PVS?YkWg!4<9 zVSX2bsYh-55vs?ESVUnJ8GlrR>X&ZDAe*2;hT-VQ zgfIR&EQZ%HU5Z8VE)6iYY$NtgqF{;NuJ+hAxb=L!kUTd)Qezwq9rCk7f(Q~DT5Dr0 zuzLCIkR#G~RCFP>(mP(L2Yya1{F{y7$O#b07(TXp6rHg_a_e5Qr0D}a zKe*8owMC+FYA=p|OKf!~HBYiHtnlRO{X5mMf)|67SM6>u7UJ_u9VUm~9@{mG9Q3}u z7mVpm?~S0ddHWA~hbsc_Zq z9Smv@{E=I%N039^3!>~ZgkfpX!qgsss1MrRD4``49s za`8pdXXr;>fbIGE55|`q1j0#4Wb>~dN!Ju1|Jx}0<;0ff*c(||8&D@i1qO`Tm@7jQ1!%y%&oh8Y*JN5qs8w2v;qOY3202Vr1l0SQhFj{`;h|ulZ1FjcdUXw1z>=qMj?UHjqT%SLpPGYjHLYI1 zWqAwwCZ#=(EK8V+TDw);Lng1&AlG|8jS8RmAhV$U^Qb@%Tl@I;3&pBsTx#Xh3*4e^ z(8T@>_ILf4p;eRXvD@D~76STB2%Zm=)3DnTGoyJGMay`UG<^RhY)bnrFksUS-MFL= zTZ2A@D1}a=H-KxBFEqJNdDZfE%G~6WTj0nB(0^MbGHa}}q`ZUR7)bkrb+vuXriX#n z3~B6r@k=GYO%zPck$#9<6>`BG*_#CyN9WmbWP1@A4Q4F*VRi^JbvqL6T|m>xTUNxz z*Y7lF&yEhC(L0CvxReR<%mVWbO9R;56@_C|FF@%w&y6$G@(cLwWAqlPJ>#*q2kPK>gPB)j^S)iduXFxCNd?iLhm`<6SgSlYh`mPfI-Zc-T`)_oE5+d=C@tg z_YW|*{(;d-$PHG|Xp6BOT)GgrO=W7k8x6cQL3>{(iA|2Z(Y%J zzRyd^cN$JG_EPbgsl*c}PsxQ0df|ZQT&F)BGMvDo5fccsk%qvIthaFf5fszqn8U%ga_Q_OZ>>09 zY>ia&HndfC84T4OOq;Kb-n7$XfDcJn1>X0It=7(Qn$BmH*u^fK4!cE?y#VaqWStjF z*lgM_5?dvp0s?F;82Cp*z=C=B*MiAR`(vS?%H+}2!Ym-q#%2Hmh4%mceVq)nqc{?NM=S8cb}PYODT+?;^O3#6J|+!nvpz4g0=`P6=4h z;r5m>(#$p)=B?KHVR5(U?|_k2!Ju{K(}l=Ef{UZ6>0AfJ+#Zh~_}(aXuI4F~&pVr0X>>2R zW0lCx$vpAK)-M01@TtY&7=4$Ud_d&MrdYurDgDo1;V_;#9%~*=bJ7w=IYqx$ZX>55 z(7KY5*7S1sBqSI2ZQBm7)|RCn2(P(T1g%?!5v;JSc+PiNG zw9O(HGJn%v0f!pfHt2YW`sFSB9^AiBqW^SN*+%?h&W0&EL-+5WIi@}qdAfUAMpv4S zOwpA`-nFxTpW5h|%UzN;BTBZiH+9rf0@`YXRx~bPgJs)i(E1+Pra=r{^6%eQ$-rKD z^H_ojkMxhazE2233MK40Dr0l~$$-za0TjcL3=d3&v(~$ZY=QY;a!R&$%au=;cVkw| z-Q=Hg>j7nvs2|p^rwMti3eD1gFXJK9w#_H00|Tza=61|8(ICRNC8PK4E9n5>Ba)db z(|lR{*>HGksc)nigU7 zz={%qRktPHg-HNz3Yi~4Fi9zEr<(5<4Dx7doR>=F|Amqt`ERCld~nD+-ItpcRn^rB zy4Kcu&SDFP;z*8Yl|$hdyAGzg-s&n9L>IhQAywF`3i#KAUDfWAart;gzqhsv7Q*OKLhGAW+%N zPzK}->|Yya49b=o$n92QV`GQ=TLf<+;$6;P0J9*;Gw48Eg_V>FWoqRI)(sOu)>pAd zQe7`6?b|&bW-=p0V(n;$+?5m*_CB5i@Dp8Z_wVtjb~$nPcmD=X{+qNcgcCShLpZ;c zdpKcrEMrE&)s~_9D3d71Gq}Fw-g)P0Vr-1@97PnI21e~o{qe@(_;{@h2h_*;$Haxl zW*Go~6zocBkBa@cMsX&1Icd7`3JcR1)ynCH;bYR`45dDQN(M9&;oi_Q7XK^`^Qt0Z z?m;LFMj~_jcNi(j{t&4d6;MN20GL37%H`c{B#BAamcka`g_1FPMkC(a2pA2mvk}hO z9kj(v?0Me~EP{f?TOwdtCx9+PQ=0N<@DE7jto3kh=VWrYKZjh1j)B(pM=K1VSzpV- zX}$@h0lugyZ;iuxB0Y|VycE{a8()n^W@<7SGQ`=j>Nfl`$}@H38pA&py1PmNawweB z&&UB~@3MQ7z~lagQi(&4UeL|WdNJ$Bl7~({jR8?R0PO!ItOT%Po&&pu_W9gQjV@|B zP#Dzbs-23QQ^Tb>i9F0Iul|{x@sjtWJlH)JOMOlSY-dw(=#^6Y?4q16NAZ+T0j@5& zBL-YfX8WCYDFcAy9JQZCx%AtK1Yv>SK%V-P9GB1#=X3y(RDeq{pZ)n?j`nw8c; z=z3syiTK*~$p%^8X-8?!tG&l@!S$e*l1l^qR=%r0h zPqR4rETj#o5u#pgoT3A2wMDKzHxy}rHW0^IpnxMi@h|5#EcC6>R4bP>u0iY9>0G+u zPWQ|F)O_T^o()S>ez`*yfTZtv;{t8siO1gb|MCF-ZIS*BHKv68QAt6z+X|e5!zH{F zzPMQhEv;;2k)aV*v4=XsVL=p0zE)Co93oI(P(Ar?g?_*IBaTuXwGMcTB6?+28zT6t zOvt08t0Mu*qnLeKWlyqm@M0 zsth_imADS|x|1HLo57lo+Uq~sl_~UcP#XtmyctalI}KyO@KNtO+Kt}2Q{7xKYyq6GOC^$?2##CZFVEhRI zOeSqm;5UPm9Jc_W`Q~FCr&&NQ9{FHzG>IvVaHF>pEnbYNuOOKUrzS1?`x2(^-?#3J z&)yLk@fFB+AN|V9en(8?a6Ze<*r!aZT%GW4D|=??jRYAqUC-~C0i<#hx|QrW?%d|m z-oy3w?VQYP;k!5P%=6v=loq-1WAOd>5WbZ?q!u2BRz4*2)z6geJIdmsvO2)xWFG7I zux_y$nF=v-uUSU`dlevpdQSH|ifm=05}`=$FyNkRee>`c?!0 zE8hL=8-mB0DnA^p^k#2Iio6qYG`ky`Q9;9&+5bTa6U*rbD>*2WAq#m3J`s*zdWRd| zKk}c~|Mhuw%ufw~i8FT7h`sV0nvS(pXcm1@wI5NiQUHfH+NzpiBNG!%>X_}>1Zw(| zziFlfM*z*#&x${qsSjF#$%muxF>x7&&uJOxX)kFYgudt6fP35aIt<`_edVrvktagi zW7)Js3(01nQ_FFnqHPQ|g544w7C2I!t_UVY6uv@uClRXI2C#bd z-Nw-=G7ZqQa?C4RS{57r%z(l3QXd1MC73-$Q7Hys#vi)^J4`G_>%1mEk>eA zybqznU1;@yRLej28I2gz)u=cBq;T$|u+jVFFl;w^EC?7-$6=s|ih28bQN+k6^q<@2 zd56`Afk#706$ME@K6<-@tKZt@tlb}5+zJHC0HW3_{5YnE4dLE7HRsRMs7G7;ZiQ}V z> zfj&BIjw!!KO-vE-t=jh$TF+5p31caW&_guPKOQapE@n0#9!1CY;P3K941H#IDej?* zT&8T@x#(5^KvIqb8Hc-}P=WcILdEH+uHa}R>jkJhubQ&1^~@M;sQOBi7fE4>qyT}PZK?wi$mvs=kLUMn$-4OIOMz}oKcb3&EYrlzR9Dt6-p zD^$z*Xla2R6KhQnCuXhQW~FjQ?=$`qXpDJ+W8d-mG+ozA| z%u&~XZO03!h~|mR$hW8Hvq;kCys`IERnyIYh7Ry73Zud}6kXZnct1NGjca+=r`!LebUQJGkgGaKbtTBSC}&8oQybCtf-kUSRV{|{zC z`9tNPFv-rkfHy$H4p8!!2^8f3rG#_W%2nq@$wX?Es|4t`Fy&qT&D{=FAzjacocJK5KJbdk2wDd7bB)wp@Sp2+UDhMV9+w zeh(uGFxg9Tn7E$W&Iz6LYq#0|9;{t;JmH7az8l6vYNFw!3aAHUT2eJtj5+1#(#Q`6 zf74n~)A&2$juN8IQ-+%`SwGMM(k~1jPSY`@^$i>PRBth?SZ%^Cc%J~J4+vT|Bv@g9 zGo^-ULehO9`utV;-SGo=qHUiTRxwq|voEbWTk~>{Dl5iRoK#$lJ)jQ^Mpu9mNxp5r z|H~BuWHhRykV(K%oz;BD+$7$tx^F=p5vNzFB8vG~E^kdg6>xK2x>$|Oaj~K8+40-&38x@?F5OV$$toPJv4ysDcK;%_B98g4)(SzY0FVB$lNequAez(63IuBma zq^NV||E*;hTBn!6Pqc>VJf>g8*Kzo+Qp6KXnF5jCm961B5KUDLL&u_RU$K?YccXUj z!^5uw4VsR*JG0F)T7lJBLjgR`!e3RW+k-k%M}#r4^-G4Rh}A3>hbeLtyt4$QG$$bb zx@%cYPZx4XbX%SK64&2`{5x`(pxMhcYOW~Y3YDK+iN~(bdv`K2beCK|ad^H};L2;kP;kEmT6EJJETg0fu(6kW&ivO!endmt_ zD0gO0X}e|p(Gr@|#&7u5XVQP|+l-6^+;l>$$*KB`015fLR;(O;O%Il+&_ncz@NHA- z8u2+Cs+*8)N#|Gn20LmWgid%-h+1w(c&yIZLF@IzHlY&3Rsy}6kZ>vv?*6)P+!qp5 zRV)%Su~_< zEI~IYsInT#<9a*$;qvJuZs>8Z^4^3@5!6^1l=jj&qxYjU?Nv;3K!{6k1)$^V`nnod z?St9u(-2I?(7#O?J*}q72-@Zy@}6s)T$dD?r9#jUR&&m(XojbcoarwVJ;bGcYL&9a zqqVm6zN|&;xOhRo07x)`=dm`GCLO4{%;tJ7*c1PBNB~#PYcmS+k}&uQr|`-Uf7NSSYs(! zWK!hMvH4LnN({v`Q5|k!VouEtmFGhMXMKAmaIMU({Yd821iddpgs-Ar+oi8ZQt~Y| zQ6qJGOLQ|PU&i@_qa0y#I_OaI*VU4T%Yk`j_#Th7Bf~p`6-tlssPYBnRpvNq*}~@P z-5)>dNNL(=2bPv_4r;@y>}9pv7Nt(hb*}s)zeU$zz|JY(v?};*sn^#7f+;FMk%)6I zkfn~u3pYyzb%9&7Fn92wd-d{Q>WE$`bADy%rW>0tQ8DA>9?p+#`3awjJ(X*uj8?yk z%-WYKIqLXVUzvC*lL=6{+arrhYx&^sVICa#(%!HddI={d952Q7?fnuak2i_ljZN1D z8Tyu&v(tW#23r(P7IKNmZ3%1u6&jb=%dYfNJbkE;q$&2=tph zG)O<9{|6G$_yLsK_6EO9r`_6xl+sHa;Y+!45YnpHmXY0?!6AN~pl)UcmP5zUC;xyJ z-rauL7*v|mth_-9OYq&pydw08R`x48@|tA?w9YF4{vTcdl7u=chAzdfI9Vu5N#9L_ z>SRnt%jl*{02MyY%)=ITHO<9F?e67DcDi)D0#v`WtUX{el>iVG`{kWh5a97L$IW%3*7lk%Fd=Yl?^;qC?494%+!9u zZSf^f-Xt$1pIf9cE&9gI`s7z+r?2ElWzahR95v5iI1HG)QT6 z1-&AY(Ew{uGbz2NmMRy6;z40rL>Qx!-kO?e@z0f0XhE0sSVDl0e!oF{%88Q`ot%vB z`7xy1CmC>{&l!L~tNUn+Ode|Mpq;=TSdf;n!k*{PZO>*>>A(3g_=a&sEM;nnOU~7e zy_sSBm<2lxsZWB6HMPAXok7qv*N7^QGK{PapGz#;lO1W>ilRY8e`T}lQ#tzp-*VHYTDQt3d-P8DR2TUb;|2z9GOoq+!o?0 zDHnb!qLXsC<%CCXx&FZe@f2KhrlZ5AUNo%$mnhJl#G+ScaWJyUh~7u59|%X!k;Z+i z_jKGCNnVfvcnXB)O}ye(bf8$LHWlsKZpqmXvd7?Cl{&Jb@Xse z6F*Ldb=K!a6e^PDm%qSl$S5xZTm?x&6oVC*nAqAm0di-I>O<>K-V&ZXAIl4T1{q=}s|BuCBTyg$;{A)B@NzDX!lzEJS!I7*ExcQ; zNxs}6ToDv;+#1O*j^NQTvoYh;N4hTdxw5ej#gC6U4W5;c4AW0tN}S6oM~JnhC8Nyg_tUpewV7(TBN$r(q) zEBvqF8OP7ru*O#5L}}@eXmGP6%WP5ou(k`ovmuXfE#91Qd|t^-E-ueDE2u?zgRO}o z3bcM8A}S6I2i@??v`;0D1!F}sW;&?R({F|tk-%&r#aP5jKN=3WNLLz+!$G1{B?2_2 zAm3JtBXYcvRH6C+PL{EeTjY(vNq9fTtv&@5rw z?Qdn{+R=v3(iJm>U%^;)}aLs!5o26&cb5j#K2QD`g5Z zzjoa<$sT?+bs-J*@V-}8Emt=W8_cO->J6WwTW~qxY8+-C`xES~0?kiZ`LN}eQv{Im zA$UWH9$#P0rY|SAPgdgXHl*)+Ph5nCMzW9P8^1I~oJKJaoE{=h$6k3nZe`M_ne`;t zw`+OlD)?PemzA5F57T2=?~^pX#CwU&jmCy$_b!LgtC50It>1QBU4n6=N0_^MqW6+o z{p~g{16?70&sJPQYS=<9d81^!Pvb4bkCCCl>X>nklX` z;5k>oEr^LVw`M@rNl8U_hkQaO-2Yh-un*`ion!uM`rFUE@gb+%dovnvpbX#Jnw13v?@ih`cb? zwzkqQ8FLbTe16P-)R~NB{B*kc0!JhI&X0YO;5|Qf1cU4h1vMinjz7^y8Zjiv0B}VR z8D8aX1j+tfK-VD;_=0g`+sEICi)i8(Ep4}4;WTom3;n0?OPAh#!e2{h3{4i>UzF6=1G3xENxxE+L{)|Q*;94&%CiWK9IqaAj? zpGbazCXQDl-o2^(z%=jBslFQ1qgR1{ct7r4u|jn2Tcb^Oig%DTuxKG$-`R0fi+O1fk7F_Y3yQsdiQLWx1vc{!FBj#?J&h%+!}h#;{uXO zb=2!#VfZ{Vc{zo37l(b;e51XieSh*J;@}N^&2$8`2oi)6csA?ASRAT4* zbQh?>b>B$ppUs>*XLxmby@Lbd*X+A|x4W$p8+YEGR1O8?Sccv#Hg`za*w|2t$E+tM zi}=9I_m@_teK&C(wpgneK5O5Gh5xl5DdBuCn`iQ0^V~XpML_p0q?T9>9F7HFKbYgg zM`4XYEQ5gi8|!U!S10N7R1RLop9`9s55W=zt$Hv`b5ifqESXDb{y5wYNho96jh1w0 zva~Tnip9opx}x!?2$F)h#EG7xRv?R>&sG`#*Vp%tJM#Chm5?355iWwz-B}*N1{IhB zzgKj=OhfbpGH$WBeDlKzh5!+pe_JL&>_5M{e}B`l@Xm+9XE`xpOHi8G7Y&E5-;~0u zWMNZxz^45^Nm*bNLaq)BIHwddsBzAp^jDqsp=dh?ULGnY@+=ulc*e#-(xz%j>B1hp zE#S0AKmr@rR8(uf-T$S1a#Ti%KszZp{&hx1hJ9h_$WiU31fUDSReCeAI5q~o%n&%; zpX2lxyx?YGQM~K_EUgSYeq-WM?PC%Z^$(PD8X6PMN12Q5;1wr~Hk7sa z;r{-ZM2i_uCCPn<@9A9!gwKHd^K@Dros83pW`S*!iHV8frh@!}_rdmE)vIGc7A%jq zFuT9Fi?%ePC_W^3F24;KPqdiEkl-SZD zIKoOo)A!rl^&UDPmNqz{qhX;|&aQ}aPbV^Nx(|S--ehoH>`7uMBQO57hW}aQbOgeY z!LfXB4M7Tu6V=np3Jcd#NWy)3h_h*P|9p&+rv35F-c0Ek_(aQoYrj#dlLBcO3XQKf znzkuOfn-u`HX*K05#cU)o@{mRxeO(-#0})<4{oQY^Lb2@X6TA25bqWay~n%eu^~}M z#e$q-J=rX^G2da5VxewZsFudMtZ1-;uWyy4P@SCvzJt?`R8i2=0cO|jM_`ny;iM&7f{WYr!{TdD5q^qjQ+u>g(w=P)EzLv|AAr~i>vti`u zcwEX1U09p~9Dw$E^giu-=TV%$dKjYmCX0=paiPU@uwgZL!Rn+Em&t=NXP==(P#|y? zDDnKX%zb`uJzZL)i$TUm4Ja#Pm!(^`FthAh0LxTHgOz2G(z4N-MmZN$!F})72V@6T zSAAZw$;qz)THz(f*q+J~*)QjMg|?L%W$WdpSFBSYyN6yUr}ydX0;mNIiyMu60X%EN z&y@Fp7`h49$8^A(uCjoZ-+4X2&U&hd1`c%6<_yR~Zno}@Mh*jk|Nk~KY8D3EgGu&j z1c$jci^4q&Q2pDrW8dm$MLlf`*Z$g#^Q0f{rAdIe=laT1!hbyC|Lr+}B<>>s=a=1W zA=42k3aALCW~PZCNA7zsM|yNwc!SQVu}EQ~naugbMUT({8~}pe_Bp4*dGR9h+jk%GuZnP;Oog^ES`b6-+X zVdM)u9}D7f@hoU<3qb8nZ5U zIA%WuSZYps5NP(fg=ABV%&naXb9z{H+AOJSmu_V~f{6Dr;^LTP*d4BPn?Y$_<~uVf1J|vVNs*J!?v@lVzM|+)1dZSvG)(H)pyF(~isw7LEKQ9MV8O%tlZ$l3y@%s@`sB z?JU|JY#k(XJ%3)bHCMA2vA51`K)UC<4bJnd3`&LXhv@+s#MA=^KxLi$WW6B;qdFt^ z>iEd*^qH1vs_~mr3EJ>sIy=RARxvYkliZisIawTZ3lF_K-L5s#qBax@l=kZD%!Bz- zhMaprwb8dyXWHo-P>=t5Qu@{>0S^e9qj`rdaay1I*?z{1;+&`WRALo%4poOqnjWbl zsU>Pwf#=ol%(UuFNlV&y9BEd&;A2u_zamLVylf^yDzY3I$@t-RM76(S z-kf`&$aOOUNnHxnnd&Jt39Rk5PezMMz4^BF{z&h{1;JMgt&`df=$bf=&3GDF^vjRWr}e$t01gg(7NT5PP${n(}(;=V+0p zHeONrhh)6*-D`1gZ@uw(K9QF485yq{3zfU;%&RM+MLK*%E(~1W@$|$W@*PvmGvMZ} zC)Vkf>rUdfs|pWIM;=XlGnQ>mPMXPzT17Dd4A1frH-!sMYjdSZjfJ-3isrhpKuo$W|N9i^rGw{(>)mRyo67Zp%bBM-e7F^POptx3bX!oR8GJm2 z=@Fhhb!7Xex^J{d2`D82qGJ+iUzLz%&wSZql!b~zG90TT8_fpHo!3>Lhac|al#Fg` z-0`kBB4id9?SF@;V9|pjEt%6jRKItipF9EhEM4qM-7_&aU=mHY-qc*UP#jVaDX-h? zUW*Hy<`fV6h#S|lwWj5u(GMjA2FJGHPlR^?$!K&xDfUZVeGQAgdfQ@=;|U>H1e~N% zbTH+u;F*UkF^7}@%jzq@M2yYcP>??8*ktYgM(SSrYhsslw0pN?#7ok`X?e)qm4L!7 zzN6vu*fLEkYABD@9Cf{JVffEfLmkSTt~sNZkn@oDPtY#R){mLuv-h`Y?Wp#!r}eY3 zgs~1>wz^1ty(A`Wqi(RoI)$L;EbeemYky?B*x6Rs7f`W)T1n^5@yON6z{>rF%`hi; zdmF?DUh}gfU(Jjbx&8(HiV1}io#H0_s8(J}*yn2{kgT>Z3^xY20TR*soMleUIN@dr zlQrbR1qQ8=b`Vn?C{cK< zcQ{koPVHxHb_NCnxaiGR#{wv@g7V1e#_OoKEZKh^_y2gatczgtDWyIM-c%7moX#i2 zGsN=s_JZ?K84!yXZuXP^aD}IQKz3k@8~Z7*Xth~6P(P$Bq)BSURt9NsPH0vLYX@W; zwe6C3Vn=){3KhxeF&#-}utjYk3K&~RWij51I*_{W;||G_9)v(DR3oF>w`AxId!8&6 z8mkSjSe9hR-|lz$i6gCZr*kWwP$2qNL>N}wnokZhK5Bf!K$K`U91fB1bzk6?_I7BY zKoj4k&RY}1xNjAC+y*_d?0~F z<#3v-=mowYeb{;n;A2M9$rrm(Y1PS&T+CD+W4ScvsGgxB9Yx0ZtYD2aLz{n2ch`-q z)Zqj@#^%4b)UrFm;hSZx=s-9bN>2nY);sxSFp2RU;D0qqm=jE6{G90nreI!`i=I_ok*!Jhku%h-GVeEW3F&ENca= z*+)(D#>K_SPpbD()LCBU^}WjoU=@ClcX1jf``}<$Gx|z1VwUB$eX2S_<)rmkuezoQ{bGKg>JP5ra3j6efzFRWG3jdVi5kt?QqOjpItyb%CGVc3U}9 zy=R?#ZMXkTOzhB1y~06kC7N6$Ru+i)JOu44R++$p&uG4guaScw+NThXkOe$E zywm+1&PL~rCVDdYy!rZda8N-4U}~IJNXRTq6B$u0W3f`~4Z$^c_Z$gZYU|6$@=uY2 z?R|II|0X(m--#~3>dyU@%siZuLm*Il@dXO}sK&{}oUYyqqu4IJo}6dKZtqpYnFE`H z+u1PGZC8VLA*A;Xd1NiRAG{BT+WVn_=vfjZ>}#%+lgpJWL4b4JcrJ|c*bv2U@`EKo zGh4b7emblY`KUz4Vwaz?_SZ=qeR?5c8)i_o6=i(mYUZfo(idf_0_0%kpAj24dSk3H zDrhr-Upq%%X^%P!epm5}H=c#y4y@#4&TxM+&~~;EQllrxMAReM)%IN2F#WH}1Rgtt z3w|0dgiEDu~ow7nwlqgokqRYL#hQ zyj5J;Kzgp&zOcZ(8Hk5TJiEE`>oasyD zD7r8ycI!RPs87u4@jbiHkXpjfD*u@Y1io34c)t3-Lxw-2246F5U=Ct7VZ5-BDq0ox z4$JOK;G0=${;Qxc>5A)X*Az`oNfv&ju89fkNYz$W%+C^j$y`OYIa2YdLkev!s1ckb z#J8B+?Mq8S6F^1a8FZbLl|;Xd6IA!{4U~+$^0;{hw*(4&2KoWMFJ?Nj(rIGfnoJYHRZ6>w|(=2n~bz-79`)wI=g=&oSBZ{ zeU-QhPqHcNIbl(_@V#L8Y>L85`IFGVa}GK{cS|mkJh{7@w=;-W?pNQyGutT2wg`kF zx7>}o-$1*fp_YcZ_+f`^23(nFB_z)DqLwxLQD3P(<|Uec2MW4#PnwTm^1pKOUZp0| z4oQ^K+%{S7equ&nqTNOeI#G*H8oK4Sh^%-3Xct9gKTdJym@_{a<#gKslJv6rrvQ$m zCC#%n)1x+eingb=Z(Hx0r)fJLfbK7d1WCp8oG+atA+;Cf9oIB6LSv}_e74Zh1t**@ zd0>rI7+%E7G5l%zy#F@FYf8)_-1GHVFu-x3DvFT zlusizNSWD!PE{S98z#x(3Bne#p|W(5_+_0(aG5l??m@HBumSVgPUXCn@ZU{Qz=^BY zr`!5f@(F_q*l?$)Z=XPyd5yw)?=6i6WYdWYM|BKD=!o?78 zrh9xKykcDe)63zr!~*g%kB_>P2k2Y&GAh%&&on~DUPqvvjHNnY0E#i6^T^cN znRVWrMv~paGz-OyONzNjZ_ivWkel^OtEF)rbbZU0JK7y62IV%iZ?_x|e?Idla_gyW zzT8(mvB?kH%iqHMc?fv6d@31*nAbX0iRKG4!fAxUWCkic$@ zsp$(TmWaod4$ZGzOg$9Q*AAU5aJaXDGP>oXAk=)e8hGgefZg0Gp}H@np10BMWNR{< z#W_Rsb1a2h3-IR*9$lPsh}gF7aTq271Cty!2c8V1YkK9g>jg(yfZBjq77&ND!mhWs zzZ+jFP-ij!t@d;|=;anyI=c)7)RATGE=Cc}0#fqOX}4;jFrwy(=_ZUa#JAY^E!XP~ z93ODa`yf2V4%YYM?mUV~`@M4*!?4R{o9ZQXvLr30J@ng6p~9i^DqwJK+2!Qa*vooI zUieYK%4*B44(6#>8ICAmv>H>3Y)1iBuNIf4>j&6d`wVAcFt@Y1(gOW+kG+{R!(`Sl ze!YpdC8ov3hT0y(zZmpjnIqu5A1r7{_!8kLVi}DjqaOhhJ!cBjCC>gd*&@mop4jQ@ z}|tq=gf_WGDvyHL+w2Aw{Ki2_53dw|s{U84gwtipKC3!zRiT`q0^ zz}H;MKFcmRHf!aeOW?oQTz&``iiDk{c_o_orY^$@EaM&$^kzSy0pR@ym4E(G) z!zxgKV4)ZMc!A6?7^&^fy}+UuoYfHk)i`ax&yv2lx>PthSfhC65rO2}{&2%J=T)Ih zoYvwpD4Anb$KHbU=KU#j(&^?f|8rlQ*(AEKYP}0i_A5f32u0GBzq_!L z;sZm^-T)ZiqA7p;pkT zaC{nwt;Stu>3cB#yDj=t$5RdhfCuHE&z#`D3RH9{N&(Z@?!wENUxfRbnG{P%2J0%D zGa|*m9nHq&GI*NMBC^ImCmP9ZHKlNrXItLO?=ok|zSAy=R~$@uI=`u^kMFonb+-TL z2er^)cpQv+a8j7AVON*VgXBe8Aw1--Ubh?fUB0nD-$;Q28~2^<+FSo~RT}yMvML?y zv8OC^`I6uI{+`Q8RIoC~h#yUF{UcLgOK4Ez?x9czwfw6S&Z`%$j>A|oiV;b>Rh~t~ zZwNUJw?rRsT<2!!qqBrB!0=-cLZ)e4SfkD)O79$powK>#)6l>e#GgIH_(ihOGT}7h9o_+1FZE<{faukbD>JC=j zwitRPbxSW&rb45FLRlr&8GFH!d}f5<3(~t{-~%!X?*T-LFat>)QQxubg*4tXgv!cF z4)b-1P}t?q*T0P8XxU;!omJ~RZ^!#$)8o00X`}xaa{9M<G$?Wdyvrz0)3%c@0!R+1C=3{t5+8WDXWME)8 z-M?{oBG^eu-?tq2JF0-78yx3a_x$VyEhnQ2phS5MnEMfPO&IwdN-{IOjsZwV=FKij zKd_4HkYtZ-w^r>G3x!#CUSv@_US z#lphEXkYQoq0T;CkF{S2mMw$km>2l>+R;y@eXs3@sFW>ZU zxy@UDZKDRF|1Lbqchd$>pKH|U``S6r)@2q?ZmdGO>`x|MdGzmbPkDSTlut00OLVRM zBBE_>ov7n+H5)DN{?bW%dp~?k_$sxT46Y9D53zp;(P;{agI967Ot+LzoW6hhU}4jJ zFH$rq*b!q){RTP^3nX%7rUA;lexT2Ir~~af>{z~L&H9L9=h_+ zv#sHTGXj?WNmC|VJoXA@Gt{4q62}g(vF5rcQyNZA@zl>PEd66i2$8=qjc_h*W7iG% zye=aSaU05RCMe{*bTWp`%wiIT5{G)3({ya~s_hd(2ZL9^XP3+=s#=UdsTF&8NWPJ7 z+sY8&k5xWXqWNlxII!J(58u4mLoJLBZwDi}vC8rUJCgT^qc2?{$U({TU5h!wdaX;q zJ!7NYSwZzp#Y!+Iiz71qP)6O`jco_#$4@TrkZ`QpUDv41kIa(pTRc;~^>k4i&klT0 z)-4##mbNcADH*m*&Q?IN7MX%gMAgb?p#K3v#x?;xRNm$-ca~F?+G)aHEVZCNRqyhlgtn? zVm9THQZAmpoY8fHEzJJ;?ETjpHcixD@NAl@ejCSf`hX8)Dutj9kQLO4P>#*5m(zdd^dv1q@pqZ5AdH#18gQhD+kF>~y z@~xVhs`-yt+1P@Iny)p?w{`fVLYKNBd9NgUh|x04x27(>$)%R-lErW!@a3DDpMRCN zi~#kIzI~gzgx+tVTcCXM+WLN5x%_!*Ay;f&*IOH12**=9sE*!vv-olDWt`M=3VMpC_wlh@eASuPt9vvwXB}(0F}DF{t^jpNW|T zvcJz1=?TtmY!`q|Y|_P5A&;5Rp8ANZmzS5uF&)r+b|@3s-$}f@#K4;$dx;eod^$|& zrBd`9wqw4t)%>T+E3sIb(o~s*7hvo5SwJ_} z{3H#C^X(Y4916s>`(_VomXzsmxR0*ibs??O_vXvi7%xPTnP^{|R%Vt1xh&R8ZKa0R z<1)V`;*!YR+P?7d&51k1b%+@_ROgPE5`!W`W^cw|#NNDH7TLoT%1`b0Hv|QVK2|Uo zppaStC|}NKV(Hw80|2E*4}V98<)YM_an1$WzZh0@q5)f#mqwTUCzA92 z@+PPXVo1_h0J$S^%LQiklmIWyAN1y_i=aJbA{Lt!1&+F_eWhk#7!Kj4kHVAC_ALqq z1qVzyrb?!#C))ec7bFZ=v{_Ies_4FGR=w}*SzD}rHz_H4FXDcmtR|)vQi?Tc@jrZ> z1yGy&+U+Us1TF4GO0iF}8X%kM5r597ekD?B^ssN0ix5_|5*pL*g}D<0sNJLk)pbPSsp{`|pu%<^BjT)uvouWkSN?YWd4P{XwcRbIZA&S+2)#T()Z zSj6jzj&A!3gjlibEpGPMoyX2$Q&|Ta;44k{yqjV&ZkQ zxa5T7hG-fg#LMY+U(0d8Rl+g_9VmZcb+}s68)nX9a46r%gD&D|1O~j`=tdAt{;ew& zhtmnF)XBBf0PWn3w<2WZQ*7F?jBNy~n)LF_z$eheuXbl7syWa>L;JXaA z7}-xh8>1A|&uDfNF(d|=8=>7&L{}JXBf4A}KJB^G6BKS%_PYggc!IZj))VT=iK)d& zi?Y|kQgcO>b@=F==CJET(Ny>f;BPK;Io2gof&5AwHerkHZ-JG1925|_hTXe1@zqNO zV^?e!V?(~lw^b46P(AvYH$iO^A<>khk#9M>jF4rw;~AANZYC(Wxc~S48qgYvX&z4? zAU795Zg?-RhnuEYv(~x(M0RcipAEpOy(yQavyv<`JQRNi9>_dKTD=Gspaj`Rp3BuQksTk7DO2vN?&gPwh75E4h*xI#nlD(wSCY|`U)KCXBpE{bL2JQ zoL}s^4Zm-7b?aTcfEG}|4KH7(Ni!}Ty1~4pWHz}S@7n0w{lc;dNUw?P&9|<@hZr8B zE|Piq8#B=vnt9*+XBY7@@FhJFTFL7}s0U2=BASnC%2N%G#GlhFJ4rxp0wsDtDXXCY z?Hp=E`!yp}F2BK8*d<<~2UmHmr+~w(f$Z|a>rT?gPk+17EqV@a^tsdi{IrUwP63zO zL#b)`?AHKZonnJ{cJ4PMYEGk1IMn+ZGXHCuGh}-Fazqzi5?n*nH}4GX1K+BP;Y|A1 zqNw(k7Ci5|c^ss2u_ zO{&}j-m`EvX9Y~fT<*{BBA4X`MxVzvTU}V6-zowY5YucdMSqqy)?JCD(6K{bt?s_L zPe@Em-ge$u>&&3(-Z`Y4Swq60*PwudUDlTfZOfdIfzgd9ZeIvA?=dMw){$uKs<%gl zW*@?n4q}3N|LYywEa!ABcK$QQx%zPh8O_YJzuvDx`qCHetvagv;&v56(z$)fYv zfSdtwdYG$xsW)DE?FdI5?Gq$`ogwUH=HOnB_V!yVT)^vAE#IljFPYQLk}cj{dn#M7 z-8apl7~-tNWPSGmmaswH(*|M`$C5@fjv>eeJPq#X4Kz^dIK*O}GjJP8kbzn|CkmNd zxk)J!04oIFO;3lNI>;$2PdkY(jjj|wl|9a4^$kxUZkn3?ZW;Rgc3g=+bNCZd(3Tnj z_oaD2QTUmNXTj3w5&mg2V3MlAl)%dMO*q?>)xm}F$Gzi>HU+}nDvpRd)ur`JBS)|D zx`LuOd4-yrqFOF5U3#bd_mn&c$6<@X>nlH^>AKx1mQVzrF5l&x)XKVUwHTk199M4d z5(k<@$o$s;x-%@X+M_iBiCb$KE9?-Eo)YyIN5X*9YYIZZc*KB6i*1A7=qdL-F0-Kro5Sy|aE` z&os$+fgn!um1J@=;n(t)FB|8AdV)XGD&e|)JG4 zOyxs_X%4oehO(#e`G|3WpieDDoRdV&hkR4-$-&;cd0D=D9(9)xlK=r!h-8q^*)@5O znSw1xRG7tALBH3Sf;67iDMWR_&Q9loQ)%1md^{IVzZLzsB=0I$d!uF4q{C+*JM5t( zu!LC7RzrS3bAZzUd(0(#f&sfT)$}#CEGl8v;44gvjSD|O_TAFcNrio+jGx2}<(6Yo zxZjbbN)7d_zNF|KO}4KlxT8JVg+8`EVZ3?*$>DjRrncE^N@l z=yQ7lD%-}{A4qfM5%EJ+nSj-!+CcWbej%;kQs7S>q*w(S;!_#21JzP5JXA3_W4B@% zaQp7wZiAFkXcMTLz+T2pNWWfC$u9!cQ4Y zsfzcJ=s|!*1Mf$YY0k@?w0De?^OoJBOuit<5l89+!L44iOS!LxNtUxUnF%d39j<5~Y>Mn3Nok|G7eY>`Qy&Y#@O0E^x0rGBU$+BYQ|Rtum0y zw0i2(^=$o7vT-wr7k3fU8zkD#pv=4OER#83yTbE!2tX@T3slM`zR#p*#~yw=7`gj4 zjT(iu3z6Vl>vG)Q*ec=+%4&BvTM_fcH?1N<=t?WRIKNCf7kK-cul)*C4^rU}eA~_y z6zb%uTz+vA*sAKUM=31axaDCv?;nq_F75=Tomq7Yn>@0t^q$73z{;bj+fuV2j7UjI zy>KrX<*onvCNoo@=#!r|nka?9Z{|bmyRwqjVvJ%Gmiv4$)S=$qgf}c2GiG^Wt}P8C z<{i~UV&AT)O-Bo;yx*ZyJjSsqsSm9(?%lo@7r$(F1!cuLE@cAXm%Ebq#_;RzK(1%e z!X&#jcFTaucFr$Lv$f~{S)s8p`us|u+pcx)Q1mz-TyxNU6Lzw~Hw<0+oTxapJjdug z4nY!pdhQ4P`J4p_rq>dMJ@e?d)kE)ZFz6O?DZ|Dk+}RGi0Ih)gJ49n|j*8z!H!coO zkt%8a(|ACE|F47NKS>Zd;=ujaLd7%{_Zgf$KVyA!%=V+rkz`%6Foo)ZdI}NrKW9p3 z6nvw5$U!^Mc5@c#hT7`mC)02%gGEOr0yP8?#5PmbwwH51L%Q|9Hpjv(pBka+kTT~s z2VZ41PNni~0#=W?L*g*7jUt|*Ew8y|iZ+BhvM;yW_H;LwnnTLT>dU48%0mFaLHnKO zIoQnsn%*G)J}uM4ITa|kh=%s5dmoK%Ey)(@Xsx(o-TK4#aq|T>u5OiM!cO(pMHv&x zjc)tGK>(SG;DR&eCxNV|2}^u5=!(43*G z#m`)xWQ`mFW_Dx%dJYxl!m(~T*m;aVj~B%Yik84N& zL9{Mp#ViqYIf`?yOGR3C53QR@NhwJ>3ZJjB8*F+I{ejOhv>(`NLtGKW!(UK|aIaOm z=YNNfe>c8B{}W=M$3G(Oe{!S!?P}!?2?d4xb5b+U07++zSNQ(i+2uu!Km_%ei6(Xv z3*e^Dyw)$tj>6zGsJE8{eTg=25xE0n8+id|Bkv$jU4($w_gyp2p=Z$q@N zYiC<`=&xN^Z}MRtjGRsBW9a%9(i6p15Ok_LcXv!y3Z&M`UvD*D>vNsjQhomFqsxhj(f-8R~-SDqfRrBOunC@)Rh@Sf=z^KDExdNN0DGZXy)?%hKnvw z$DT)}-Y(csw>1iFbRG1ho;%U=k-DJS6?c-xRf-rL3>NUI=0%`DU@v@@(-eE#zFgxu zkNSmc3QtgMq#Hj`qQB`tcI}MTxk<64jZ9i1Yha?yfXmZ8RV`yy^iq^UL`4rC=1L4SEdKG(*vP}`&> zRj>dyvpRfd9m4fidXsH#CTg6fUVa|*sPhR*hq=0}% zz6ocvs>N(wzR#6Z`*$xt+h6!Z3!YbhU@AiNvE|;zyJu=B32aAb6aC{m10OJwWyasz zy?B)WIM7kEqL9&(B=%+LQO0CxzD_-fJay#)BmYSy{EMH-jRrK*Tw6sj?c?wWI4be- z^1|+yxJb)@mUn3@X!xEl;&;mo|3CiH|1dekAi!9TiuRNpuw$tGPL$!KgRUMb4Dj&r zB$dc`pgVTK^dJiO+1kxh3kgprQuCkfuMFD)>2H>yX5#95hM0SSOKU?f$ML@2mp?nr zx*OF|F!EFo=4Td%xhkeL7+Xf2lx4jXXV|rQgPXubzK4;L6q5yOBv^D#HI$!J$QHJRZiTzO2?fT4RQYXw;`Z+*>VF;`I9|hyXrySwt3>4t?=2dMW{^ zxI0=-&qpwHvy-h%G-%eO^N3DMOwgFR3Vr_D$fALoPftXfOAmT?bcHEtyH7iZ2n8hJ z+J$g6tV)aM^aBrkh@#vSZ42kvBEEK!z>&taB{v8Xs>#UGSeR?X3`WMYdj@bDEJT$5 z$Uc6nbiTB0UhJ7T1|j>*9}%5cJ*cd*Z=YiFL{V<6TGlF0pLT{Po@Q;I{DpkUP&2Yj zf;TCh99eUb-HFL$I+sVe!h)u}d#kuO~{ zau~HC-t6Z_E2@t@GBziotEwXHK)h4#mBTOd&sTHvn+ri_8N+@{cB}}apN4817KFa1 zYO{nykz>z@dwMn~q=4n>>I628TwPnN4&=a_FJHdQ+nnR^=s9AkVpC25tFFN9?(W6` zW{mW+AT^nfb%sNqEeM^83G3)w^y2oqCt*Qu^yWbBz4_ zreZqEnZjQRlryoxhc48ttcu%TSS-JPAIsLc1@b8CE?P6)5_+)Dp9z>V)ai#aM7d1d zFJIWb&j6eHo@~F{?g3(~8&OfPQ4^Wu;6}rS*#A0lQX2zr?NH)Zyi)M1xV{$q_mZTj zb3LFIf%EXDoqS)_A7Q>EBs(JGr z2=$`S8!LBE%WBM5?D)z)HbIttuz2RT_7#Az!F7ZStb-;=0%5Vjx5uaF*Z=MUs2aFu zTj%P4De6?Cruo@uXz6ELmA8bq0xafcmcUmw{kjbojOf_^GB;ydN^!Fg3};lz>G13r zN2aF>*2Xj(p*mHzXHHkZ-usVBC}#{4mAYANFAyaJ07ygdI3?m7lbM|* z9%w_iDn59Mz$T{dBJG}hekl^i6=`nzn97l9UqN`AEz@UiW(IL|EGO95mKPTn_x*XN zT=ce1!NJjC06di5Y)B6OGl4x3pxiU=52JlRp{A&DZFi!abp! z_~p5V?b78|ZKaoyY#T6(DM&q(t#@zg%hu}~*pibIj{^+){#VJ5iVz5gAg)bC)yK*+ zb-GoAgDR%i-2*>1St8Dir!$1d93Hf#&TfLMp-3|K&CYjK`=WMY9MwEOHG1m-JyX>4 zfid#%YH8H>FHk51Ck=7NNHtFog=iq1rJsnMvtHcp&u2|(U|@`;9rl)M5ns7XpN~@Z z6ih%1{FM;eC-WXp+YQl7A=3tNU52o8aX&}^sp$sl;rLuH_xz3m&PKC|{}HHZrTVb> zYcoIquGAz8IGYf*9QDMSbPsqnMt|J=EHf(!mmy-UEfsiaqp0Kby9al@ha>&B=(Vm$ zt-`A?d4=zIR-%ua~%sA2u;0|3+j0G^) zs8ILp-k)Dy_Ti-R^#T^Be+^58e4CcfexJB%t6tsDwy*~ep9My$hO4Ft^=Y@0Zi|fF zL*J@;>pBdR=wys2y=HqoJZEo~Ni=Thqih5?^*?-5(f#|HbPM^BM_w0|6meP77FRFD z0IedeoOv5yx9b>S8=KB6`B$5t&~<-ZP2)z zl8_4o;d-Ybmc$O>nL=K3p>rUT@Gu5Tr6X?3M)%i%DQ%O=S3*pM*ypJ@7?-!B$N_!K z?sr(bD!WQay>|Lscyo{YEE4sgqC$OVXJ_($-*vM>MpgFJJ*FuuCqo|EFJ>)cm@VJ4SjLPu9;-_IsZnY<`#Uq?=O;#LYhxOt(dhafpeTA(*x_XOD5Fhzk%i0ht!^V>Eob+N%q{{47C%29F& z0-T9Qek{~Z35?}guw$!Pmd}r#-{g0;1ZnI((o!?d*`F)g3D2R1hHxoOy!4es8ii@x z%L;xg_w|JGOuj)NhqD{-thQhGJuGD_Reu=F{?p9_f(P78=y%GGI2GZ7jAJ#)+fD(^ zGJY3c;t(L{2qnUig7^e0iJ5W&ri-*#3?5dm7`iLdoqz^Lv6c`7YMy74s0vVWI8fg& zo-tzn9hx-B5tbD0(GA3qxAzh->b%@CYeAPJwzfLiAh(T|Az6_Pi=n%nX)Eu<{x`bA z`YOy`oV(uX=2t_#cO!G~>`&a@mB2D_i$Eq!$=!r#k!vyO-y*g7qrZgtJSN@aST9If zvFsc49Ia((h0(^^sf96eBI_qw;b}@B7_Ac5X+Z9@>R^Ghh0_F?cuh3B@EL8yQ%h~4 zJ-BbGtK>dPf*!@H>5!205QQJ9KmrjXF6ZqBC5=lm6yIXo>|$1OM9|ti&$9u*4YSxw z=dn_l!iL8#Sa7|D*uOHeUk^)4x6PsOV-G$yvqc^+S)Iv{E z1D7KWv6}Ay?gumF&wAS9JuYv!shj(WRHfv?&4mw;4shQ~*jib7kJxMgy~m(~Qh}XR zNQX10Ew*=l87_IQGnJ0sBwcT^C~n~#@fCV>OU>&5O&5 zje@kbp%DEm#H*Ih^VHl zxXjqCWNWPCPu>>fZ?U*o(AKrDCn&!H8vOksAEln9k|LM5CS@U@78^b(yM3DJ!#3l^ zp|11GE*2Mt`w6E2sl$NSA=h@KVTVbd?EeYqw7C0vh(K2)<9{&5Ai(AD{srhD4shDu zMQpK5;pAMr8#Jf-sd}r?(uGY-Oiq6dHS~_<-Om%lT?B@nT9J0p>PdPV8|DPIuaS`H z?R`6Soow5&kV(@U!Y_60`Q3SRVdpt8S z(L9nohSyf(=Px02_R`^@|0a22apyxz(BhS~*Cf#Lzz>@p^oOb~}UFb8BgP8b45WfLO4gyKiw&xeWa%eMH; zL5V`z??c5960=!MFbe<374$lHnt(dOc4}?vG2(1+LRJr-hI?OwvXcyqB8_vW4=O*` zL^CSKz17Ta^r;4i?W(d+Ptvr?k%pQv64~CLtia>5MjfG&tJo}m$&UJ7k=K#u-sal1 z6XRIraX%p^E>Hpx+V2I5Y2%H5y7UpOd$u`4>Iu;#Y4)%Q&uqUrV$}Pt9E;u336TMN z(N8C2O1%Jk=F27_!@;I(U zb+h&o z2|6_$#<(+5)Iz4ha6LXd;s|8GfAk}k4mP)nL;^RiAW9N|!xm)b7%WMDR{qqGkFIL; z+E!YBXSav2cE%^_X**^}(?{u3&Aq8Kzvz)KgEqz^-G)uczdwmdPI>1&cO-{k8csJK z9v2@!pi{Vsqr>YlrjpIu`ZUu!e_<;s6alVTyfiS-FQ_(l49%>Blgbm?>RF19&ZDJr z*0F5+ec1XQ@(1@o6*vWosh|8hss7@dYDXeR#6H;z`hn%5EFqC&`BKH{r?9zW=v`Dc zd(VV$PdDtTB0>Od9}{(iz>{w@DtWkfJs}1^gMwlyd-$9~ZGHSi7{B*~{rigzp)315W@1@f%p)7m;m%rudoS3SE0dQ#H zR-&xOZ@Fq9gq8h74H}_SZSSbY@qUyE{@0J69S~LmVe>3W!mr1`o!Ymbo;f_oEYl)^ zFl#qLjAv5>@|A=1bwpdLg1&if9LNeI5b!m+_X`){?h;U&;=0gZlVPas`D1CYv( zr(^TpGW{%4W7jo)qg_qw7_MwyUL^{3Ov{&e1_c5q!iV<}q*#P0g3#GjG*#Jiw5A&mWV7a;Lch8_1#@2vJVsFBgBH{J=`=EVkfCAn%-%=+E3)-pEW5Q^gVoG!`xi|m zt)4KiBeX59Gy>3d8A7KeG0vDkEB~sQU2#J$k927}e7$&7rqHSj$sbQyp&+-{$@Wrp z<^_P#lN$tgT1MyGdv1A=4=FsVVMzRpei}u0F|0D4!fj!+fwSZ_On~8h830vPenLcb zbeJjiWEp44V>wUr<{UWEJC&7V-9c|7HR$MvGWf?SPd`dyyA#AoSDXN*%r+Mn7qU|( z5MGhe_Mly;HB4Vo?;Ul5C`n>JwC*onkSS2Q=2>bt*k$i+x>lm{($*Bb*S~34@ZOF& zYXi217=_;oM2Fl_TH$Pu0!v`ptc~9uO2%4kEHyh+x{q*6x7u}O;od}_zXW}6p05~{ zzn6VQFEkuLfoK#|xi^RfcfRnESQ8S#*e2ln>$LB-Ms9xJqvK%RZX zwkYa-Z97NsYMo&-tZGn2f0e#9rL{JxxSpsmn-@Ke1gJ^-6(Uq(hi#}w4W-h^2guFJ z7kxZPB!3jq;(Y7dc;o1dm+3iVP^lYbfx|J0b+$|%-6J%l%|Vcv{x>s}`xi6RY@1_4 zN*(}A^swug}XdE8|Dk0UtFXcWYrur5A_LclFj6(_!2h;qr|OZY6xetF9`aG z(_xYKM*L%}vdC=@!CUEcznU2^GaK7WWB%gVM%U;9vIr8)wKd~sEOd@7rDOxEvMay)Ev|6a(% zcVPPNT~f|~a%GK0hJ#d;jTA23AgV(p-7{Rw90PZ)+K!HMb_EBAFgdyn-KU{TLuEmA z3HiCxu&fmaJ?o-|a&O(HoDX;KX>uISpFUcf4 z)r{ky7Z@8rO@o3U(>Xfs93MKRV-Q?~M|t_(o+NcO?5C#JZQ8}hrue3Z><4I056{a^ z0+}Y35Nwa_uB%4Iw?l@(ZNF+L-C@8=fNe|kWo3>I`~Fc!wPiy}(3JdyJIXfT??Ar= zl^t*$HB2?(xaih+FQxI<4VjuvgIvr2Jz~sxkh2m53;+lyAIkMhLO-*QZQEXi5o*(4 z*U(#rQ53RggyR<|yX)=UgZ8het^&)Uk=sM^K)wAcmN-?AU*dalll`jFpvClc@j(=@ z?CM0%qt7KkWrgH^b1KnHXR~KqvdZ!Yl~pPg5NJmk1}?i%s6 z#QwK(R48KLtBR!tONTRdt(qPJv>;*>$seQ}eIZ#p1np$1Q-Ir<`G$w})j zTj-;nSm0ZW4|H4?i5tq!Q7%`|T;6x~Cq}M>_IPa&Hv`3J8KlQ`mU|k>K&`MnJorX< zoSSM;v*bs>)~`bgi?apI!oARw8TWboA%1a)EBah^@mFj762Jgt;w{ba>x)6vWS!%(#IJk@v&GRiA77v*-jHS)h}Z~bl*!4&Z*!KDq&I&H=iaY z*Aj(oyjDgOc`u(P;HVwml0od0*6N@%k#=6CoY#HI12$eby)jwf;x@&bLcChPGVd-< z_Z~N!bqSz&THNfi9{j1V`eBB5?E^}>xXG|d8^GvEV2QPQo1M1i5Yub2Ud`RAaiCdz`8{+2$vFfT;{z= z{x1pB7g2(SBRlWIE4x>(n2Jud0g0Yd8E&*3G#gp-%~Ic=P%j`EJSU^hi=MRRRd?tc zIlC{Az95v)hl^j#W$5rvaOu2cK`Nvu}|Nf(OWsKKc5wwq*nxKZJO$)OExe!2Cw z2iT<)+FC4J+|3p6%{(-}hEEN7TP#v$>Mtwfm1oC!jCd9 zLJKSFhgbS^_Z%8hN0}Y*6Lv-0zpvnb9X+AaD#T}}wDE2`iGq~kN^sz9K(fKNWticd zlYW4Gt9Z~dv5&J%+O+K2!{4=PQBBMFkbwhhD>^#c;QK_Fi@J~PG8ki-7kS;Z>Hn%# zqhx>m(P~>&HI6Z}*ea$OR={e@8gRmW;&WYZAeVYboge81Ph$C<6qATW@3xu3(j*nm zMat)9Q}Y&vavpK;$qt}|l>VZG3h*~70EeNC4z3J@+dj%sfptO^eAToQ?!UuDa6)xJ z6C}$d{W^d|lD-7Z^h5SgCx>_X7Sm@=Iy@nQ_6rCCK32PuKcH_)5|!n05-szl*F!vq zkS(Tcs#^(E>PfL(!!j7avpk{$nWNC;XsAQ!|Gc3C*+Wuy~5%gZCA>$9P zwoF`0Y6BS^Kl-KOzXs7KsA4gZRlmuyJThqi*WC5@LqASApfRUw* zy|HFLVv7WLSW981TlD{-oMgEC+S=gdBFu-bM;l~XqgdHQloAGCjC^Dw$oDtp)h_9O zrTqEJnbn4w&b9>wZ8sskUqhNxFGM-EvmBY|1I{lrecmwCj?T^>l8mYpMY$F#L0w9hp*1zkKmAcQ0S6=o3+{bH$_Jm>d7-f;sAepZ|M2^{WmQyK5v<)9A^uTsP`9 z5R#9DLAPZd@uBdW>gJ?kY2V>8)MM~lc^$-S*u!FmJqMYRk&N|sCnp!&4lwocTBqaV zAMb@SXQA3HvmgVpmdy?BE*by>Ck_ekWB$Y8_gogb<2)0IO06kHlz+;e0IYF}8hKx;^Y17AKVN0yM#OKFkxP}UJrF}FG=-6SuS~D= zGG^oJd3KnoRCn7@Bif@V4m1S;8nNu=L^9VB&?-c+j;XU1hW{z(UXFh7c$P4&~eqiTYf~}_z zGmU&9&ubN+Ac{~udlaCrok;CykQmfQrvpLD$0`AUXG- zZ>#L9calfzo}Xs3Cp?@XTwb7S(5@#x-Q^EXN=Pu<`jU|HoZ{*zmGib9Yq+nYO~QTh z>Q!c$;MiijlL++f3HZOhNL!9^?KEEmm-t*t0XFF?w3a6;_a2?kb#l$V8XMp8*>-kx zM5S;>PKcTDa`%iEC~pGx4MMPQj&V5Ai_gGPm=Z@&%3t1#9^(5@C|5ooL{&95kDigt z{(%a1Q>}j`D7tbxECTIt@7a66r|)LiMeT_><+1kl2DN&9h z7iBOX%D5n3C;P*@g&6J8K1FoCl!G_%g+nX^e4vzAwRRpd`_2T!MoO!BFyXOC z&D69GW37T{-jfrq^Ym-~I|s|}X~M2UbR9}1nG7@HWokj&gY#8bH3g+vDlfUX@@i|f z&`;04W@Q<+@C+e@g1WB|1VQ>u=WHL}2s;00up>!4gBmU?PuK%lv3}sh;3V7Tyx#Dw zK0Gr-9SHS@JS(ykFfD-C^@D(60_GPteB- zJkD02V0Z+JA|98Vvrd=n%r%|Qw*lhKMr%Nb!}*N8W#jDgo7;sKX?zAG1Mx1-W-Y5y zf7DNC9|PU7=FRjR$fyfVjvkm1rw3%TYJIxamhN{9hg|DG4; zYMJ$=AQb(uM4*0~f5c~fs+|Z_OT~RodbeeuttPNCi|X>CA?gp`NVJdnCy2^BGJ1|a z)PWSv*N%w={lGG5ZnXya!WkE!pT#{pXI?k*t>UB;A)mIb1?7#2{u-gfTS?z>OtCIX zAvX}muxGjqKiwK(aM}i=awgFRSxIr>829sd1?>nR|AgeFgRxDykov>DX3uJmo<&ez zE&lZe(AX+7p6(yqgm-&xmr;cQf-sG912{wvFQv zer$jP+?svOJYl=*m?P^gu8#A+y4KE};cAvZE7Vdh%eAWxQn8W>QF*yt){NLqnQlra zjg)BZj^~SAkqC9jCU4(s@A^72>0>csrZEC!i1fEX-?}G{w#<|dcnZ&?#a8BT2ZuSw zzi@G-icJrvZX_+gAWZiGWtxmNh3fwnEd^ILp3BRO5z772%wd?ocjp03U3ySAY5a`wZrAyZ!mHSS660$Gjk#c z1D9RrtQ-&^971oI`n0$$b9&Km7(fb~Y)m7MJ#7cHUk7BVJhP;Q?lw|nIIkA=zoeyo z_@2o-xWOzd5S=XmhsX1h_-1C5FRWG~E5tXntq^kJFS=0xluAxU^g;s~jv#Uft7M~_ zJ$z9Vq<-XZfK2}DLoeQXOslrozD$!tUT2w$`q^h34Yx`Cy-RfS;lCj!P&?H(eAI!H z2F2IrSePcRVH-WEIOfP*=fGr8V#dinaFl@F(_?!y90Nr@2u?AfaApNs)YKU}9oIpp z(@>RYW!3Etz-Jv>XXJya%y&O9?S@};l&>*J$mT@b&9@xk>@PKXAf!MhkLaeZGrTiB zv6eXpn2E!?w1MSzDa-O;j^n$KBeF4Tq*qTi1U10krStGtK#MckpCu4r0-}@4^okez zjJiM5*dMwHDvnJgi>(AHJZ0C-gFisHxeTFFusMYtce3XJ!gc=>yPH?>D>zj~i-HWV z1V=cm-yP0P{`?9->U{)}KCLYMU5Z9bU|dQF8`b!BWf;;50UcO&M2{h3L-CQ@EpAJ>--cwx}fUpzv&^9K#twwaVSUhU5O-lmU%6t!SH~^+?n^6apJD$)!i2Sz2+wwc& ze@{K~m~{GIKZf*ZZa-hr@#8%n0zmfgq3FTaIQ7o;&7jS})anRu&~J4qD@H~}=|Tfk zpX$nHU>@>tVHOyUvxU-mqfNF{I6Mcq zQc$JEWaGgw7zCr-Yg)-;=Au%g(?^J}U^vZQ_~?i_O%DK`Ib*lGm1P+Cnsp2yK0%9U zei_?Il1E56ZtfA!vLur(11VXpIJOt>;E~4{__uzHT=R8kagRKOhg$HKN^d^fT29)+}DLz~!O|bDNv>QvWP2r+rT08Gv zqY9}MVFD^uwp&@rGsb5r+nvi?_=A;!xj0kVx`5q0%v2H4HUXgs(&Gsr$uP<@l~A?a zAIbW|8LI}G?6`Cf~CZc7}@m@F(Z8nXV3#RJG(9~yMuer=3 zRm0WXsMbEyenopVf*9$%y3}lMF=^=_A&=Vu0$dlepYvX$U}Srr$FPhRg7oXVJ;9_} zYE1!5W{VGts6Gd^6xD06%DrjDRTHu=2KpLiYKXP`2&CL0qJg&N2XNI@2W4Yxcv=NK zw4n4x)!e$(nNRtX>TgoFQgyWbcNvI>{7Bmx3}Yc=oBNEP?OT~Ihvq8%({3O|PWSIt zQV?fIp7>D->ZKu@8~71*bzLnE2LDR9X3HW%BUgly8wi)|`E}If9k>@?pneGBs4lyq zY(FAua=l(`vyJzv@+$dr)f(@UL%2|0qbi_Gf#V%KQ)qaP4nfHUPpB1emg5fb!q~pm z7o6D+-WlHva9zeng(?N~d@Lwx4wmq2@M+!wI@pqoJ0bnQ+>BsJX$P3w9(gSOhP6`R zakuD+pbtP-6AKgk0ecRAQtd*c>#)=-<@A@GJP&GqM7CAZkzU(2oj!S=#AA(FV*G_2 zdL#=kDtk%wuo)FgM`58vvad){hnB79em{fKMS^xwrN&xnU%4_-`!8te3aC&4&d7t^ zFGI$N5=CHrWr%>lZ8~SucKZYQehr5?NAR`J^>0=76Hz`!&6R-@9{ zpv<7zzdhyw^8qWWku00`%MU!TME~i||BoO6RLdWiyu*?Oy6=I~ndgWq)Ld82-j}y^ z0)wO8ljF+vs<9P|jeE>vsh^YRf%!-#CZLB$j&9-2I2UkWv_Y&*#=^?DtFQOStNq$6 z9O@kE78M@;r7&XP$uup>Ly-KEu|D`p?3k66IYEF>kgG!M5P;VeNuP!~VU6!1by~z$ zb(19Hw1RS&!w}kE$;+$H9Qj25Uf3f=TiC?6#59L5hTX3#BQh%-RxWeJ_J!Wse#^9> z{is?qJxHA=nO3z`!oe~|@a6{ubCtjf(QjhwRR~{I(6JG(Gn zWQ1)WXNQ%x5= zwhvgkB}rUeJ{p;whA-X@xv{kpOT46=QDx%SXm*^uZDbuO%RxQkNnAKjLLkSxj-tz< z;w>u`+aAvvzQCY!2`DH*5@cK8^VoWEmL@JV{5Ndlmcr80pZN4P;`(J565v~4ggpc1 zcCeVy%GYorGDfTnkAk53gsMpYd*~5?$ht>jK@^(L1xaZ@wuM@3;gmZ$0K>SB(39%d z9Chrxu96#OA?IMKiA=#Ms^dZ(b}U;m09IcXi{l!R{+BKT#J1@l6YOy!0M@{Sn*=O@ z>y?b!dOBo~m7`s<(B##>Ar`_BL_qck$*cg)b<>ZKOeue5oy_|JB?^w`QbXF3A|L*0 zK6n|#NkgpdsE>gn79ZxW6w9CHK|S-BA_+YPv9ETNPL0pg)n6WR8rKR3Pk$sFiH!z2 zdF}37M<}Hx<3+H23zRcRV+ker5lwVWutpC>DTFMD=S+q)2XLd%!RU`}!xi}jKPhVi zWE#<*mUd&?ioS{P(O9q^Bgxha4TER~ID+n<{wBSa@zs1^M|0mwjVE3CC0C1cnPL6!2aGPAvH=dn%6oGNR&lJw#5MuH&>q5dWfzRD@E zPFnYgm%ouN6ROp`vwpypU0$ody~;|RA%Cvueq2()Fk(|P=%UD|pgX%gL@$}T&b#a| z%3g#IRDBY1)RIkyubWQT8iip3QD3FBe#T;pdfT*BV#ga6Yr9ycH_lb`<%;(MM>S0w zrDaOSUio^3-Sk+My(&d;PbbdyGzIIHSK~#nFwY9%@Y$oc(fa$*+t_ZUl8#(;JLds= z03GNNe-4QmO32NA)}-Ty`&-S<#sl*9Jfrs@%*=1`G-|=2mQwP$ zkbT(jQYx~hv*}F+8JZk*HVN7Y94b8n&DN{}azt4qr;>SH@Iaqu>?FlWPR?@p^dj!V zS5YT*uf3(5O6#6bV5R*ZmQ7#P~G%NmM ztX73G?#nmZDP(eEQ?P8`EBV1p=)JwdeB|V{1ApL=+9MY-}_8 z)kE{$=0`3gh1|OzM+n4z+j5SBu;WaeFs`3>8)pb^DU!y&eXdp&%1vM-j&-M(F-b>; z8SmsqEzY2I=x3=g^LfLJt(fF_*iG|8n|i;TUZr2OSl2ghw7OT^IFusf*YPB4Tr16~ zqPM?YX>otTgatdQ{gs+CX^)?OsLsSz3Hgf31Rv&0^#t{!ei<*S)ihh?1D?3}E#1dD zQPMcZ)pyEmk$k|#$Utm7;ZVX$6Y~1890wa9>3*fM9riRAVwe9yb-&RlHiBjDWQ9pG zu8{8q)6MW(;-?)x^ugodi79{HG(D0Da{FpKnkn2&RN1_x zxJfE8rXp^R#ag^aZw|ls3Fl@D-fpaZGSl@=xH*CuPmUlNfd<2!iy-hNNqeWZR&5)$D$!lq8xonb`)C5Fpu8~_FYIzlYsn=0;# znwq?OSfRjojpFW1J=Lf z*X4IjOicxUnD^kM6V|&Wu~w7GO9BuW$AY@KJ4Xf4?RVy>5fPZLoh$E9+by<+4QDmi zyP~*oC?}Fbu&_8OnybqoTX8Wlh7^Sh%Q%!m9ImF;8KORi*2Ux77Q0UG>05#^4q}AZVQgd>3=Ud8^Fql*@EvF1f7yJlnyUbmxz&2F2a~+VhC{tQ>FnI< z8Kv5MdlasuV>8x)SN?94c8}UlR0LnP6)K4`c!TkD;Vbr0Z*T9`0pD`PUH5|uP?Eq1=PiGxsT;xPuqs)uHK~!4&>UTVNpDHK0(UyoEkuXt)gP6CL2{zw+uTU zZa&Bf<{TZ!6k&*>vXzOZWF0O;JX-UlT7Jaxec?~A&yT>d;t3MOwBY0;@EOHBkAMQwpmZ}hAky76 zzyLB}A}!M09U~zjIiPeXqKMKd(jg2D(m8Z@jnvHV;@;2R?|z^6zJGsucpRWteb-u_ z^E_7)c&irJGw+|f2237rtszh@4-bsmhSsXUZr`}F!J_qn8`gjS-DP6}_6QS3#F(&p z5CY+Y6GjE!7(9-C6Y=0)k=}sGQFxM{VV5_CVQotWC$n}@ttg%_FZ0lxXa%HX_$5I7L-dH4*1j3EjA5Ytpa>TpO53(C}8n0cn zA5iBNaWGcR&dh8Fy*ZlaeM_s=_Mzi`P%z%k?tI zzJegIkf$b*0~#$$Yl}FeDoeZPMhe8o(FS5UnURbP#z06R{ZMk)yTW7en^ZpvwfMmE zkpl6>BtLT1YM|$)e(qf7@!JA{rn9zWPbmE8Y&|sM>dCGVefu_-pX6}=hSC+D`&svU z7>Js(${n;Q!7ikqFV8Ko zO@&uIDJR9*YiH7&ZOhLtrX=8;BnkW*^s?`To&6RGqKq__G>cHt84h~O1y*!&iW{*P z&wnF&s`fkA8@79EZcp>+pIUL>R0Kzruug6hbp+TT%ZX5Z>;cVlVb@%)s0v8OEtTO* z0Jw^8${Jl1-WVFT&Gj9SZ@70M^iBy#iyuBL|J7Y1iTks#a-^8kbFe^x$DWBeG$u#t z(~O!8XH-b?88D*YvTJO4m@3$ESqjhDx%D{hYv6w2x1VcV*{*6_O@%?IpgF*@{+W}RpP#^w;9M`Wtp#pQTBjeL- zSa~IK^-wFvZqGUbei7fW&z^pUZY|B-Y@OxY<|#3L&qP?lr++`6MpJqgJ2Y}o&3x=G zx)tvbkMiL+ha7+B`LC1pzrHPaq&GZqNGk6#hAgQX;D!iras5hMu2POu4k*#T`bp1k zutgz00FtITq~f8VjUs-!Zo%1gLqCRJ2J~k~rlw6AryP)KWv>sb*eKA@(?U_CTjPe4 zhPmnO_}D zOryPia1I*hK0Um(99i*U_68eW9Ob18iJ}Rr4qnnphI4LEV-@S!P2mcd>b28ULK0G` zi>QH?n%D|G*WmQ$Gz+8mz`qaJBayA?Arlw>W?*&t%3Qz?qd{vuCOJ6}bGBJ!Keo{_ z;QQ%lyYXHc_m42n0Xc2Y3s<);P({F`a5UuwZ8>ACI}=4eS#-6OISj#VUAZ!;Zr&~x zw)EPcn24HV&-Y`-9(dkZW;cr)Q(*a|mkZGrHB#Fi7&i*V)o-%2vY0yf!)!DoLq{d6 z6eB0))%${1iyD?A50yFK9v;118Zvz_1z9CplA5mqO%lB9lSdnhdR{t0F64fnteLD< z-W-_xE)S0ICb^7V0Np0j-UVmA-=$yW%g?#{uOjw;l{CR~YKqJ_4Y5B?X@zi6I}=V! zh*%RzgPs+)+b=g3xs4(-J z(au47V@?y_lU?uwFE_x+K9~EUZsf_uR6OF1feNaiCXXWShlS z98kFjT}|jcE}*EKQQ@By2G)_d!+yUE=ydrIaQiEl5v&I6Aw%f zUwrhX?yU3Ez>CVRiYR~YdJq`)j+%Bit+jxMgn<4cIB@wvx^%IV4l1-*p?~hPR`Ns> z-pud}AoRLzxvjAp-4?std6@;x6zh?OG@;5qF(>JIp8P`}MBxmaDiqFPRadF(I9<4B z@v}c?(<2X7`wTgH1~qZ0G!)#HBU4WZ*uAxna{y_>EK8IQzNelqe#l7h@;%&)b!UOI zfoAru$jb;>_4DN}YB)hu?8l`|TtU*#0A|39ggsQM-$JI(x zuIISmw<(v_Og7c-jz@JF4+{2}a56QysR;-XKvYw{Y@R4x{+G`NwhYB5)qOcK15_m_ zCv0QZr8UWRC@a}^4cN}bC~V3UB>n5r0!eFfLvlva7XO=o&NM-lyblR3x7Cxwzacf4 zVeKxhZw`L?PZ=f;^A2R!sAc$<)Y%+b)SA|bFohvC$|SPfi|V8s4*V0&&>fPw8+ZiF zU2veLYWVZL|Hjtq$!J2RQ5wr3i6bIS+{R7AzXV|2MgKfF;?RVFz5qzjUJbZK&^U?c;jqujuL z&%w6ZHF0VOQ{(BUbZez3C+dHk+T5Jt(m-}c#f<9}QEB9=hFkQ+uiT^=T`YAaGE}L0 zWQx+SU@fPw{WK?D+M$aBSFw1lOb@YA^YinExCaGg^F7y}On*0KN)R*jWslfAM=3AD zon*l#Rh1IN1=}HpMO5>8`tsxyESF;Dj7%Enxu@C$ZopXht&y8 zJh3e(vR`&&jG~D_)s?%t?AmJOE^X+ssVz3o$2(YCL(KCN%orbZJdTt#tbC=kQz(9~?6U5~@5S9nS3R+iQth ztEPvy5WP+LfxqhHrFeZ@Z@&$U@1^<)thKDV=S4OO|Eoost;#M`KzAWNsTW<+N*Rzb zNskan>0|z#1z_xb>V3)$9&>qnAPZrDYX7^n{$JfB@pU~*`_(>2g(27g@wWL;Z7tnC zQB>j``;D+STsA7tZo87cI$8XzdEur&J!AkZybN165P7m}&}#ehlesBJTqrPdHQ=*v ziixln0742X38l8(*nez6Hwz6KTQ!3dJl==>lq*Y4PT>$4(T8z!eHO#5udD8=eSJxl z&#Sy(pojXl7u#lmZHc37SeUv;a5MbL%}J&v!~~F~Qt!Z3+JbcEaU|owdhVfjSC#cw zp;Cm0ySYmZj_Mb+7K@N1{(R2Uo9%Idf5Nw0I3}YZp;+$2`^NglS%o@LW%ld8{0cKQ zn>Sk}MWA0FzOv@{S>tfgogKFEjTLP;c(vE9e$KLS$?1qPl}BbDj7P23x%;u3g^TQs zqz%uCQ`=@iSE+W+{R#SHe?%blLxwxHULPhO!8?f5jU^PYd*{aga9K(5sr)`s@2CKO zZNiS@OGGc_u2!r4@?tY(Ob6QW;Tb66?#d9vS)xSMjmP)uE`)HwOk_$A5- z?k#S@#LkHFo7POMZ`zP!L~NBjF*M{o6pVGV`#6&QZXet49ocF7^X_<%|S+RB5QI=22OKqQAf8W^( zEj9paJZ_V!st*)ov4FE-yNc$yuw5d8uC4gat`}#oEI)HS(XtH89O_@z;5wBjx@!wt zmbjt-qBY0(n332tjxyCsKS|=B*tXHVO+V42y>AV>LBv0;f7*lB_dvIDWNi~`fuRm4 zrIGck!Jssvm+SY5wSpv%;NAyBqjEBdZQ+Myg~w*9Z{CRe25_hGIbWRX|NUKv1ml*O z1uaS`JNhFzap<#oDaYsxj^-jyT0?NP-qji5a6VQ`?cyqGrv`x!iMt#@5{D9W_%dB; zLb=@ndd6k=97E{|O>Gh2^um~jZRp9ncdMDO6u*37iE@5?>C(vZ4^45Pu2t=f-l!yS zQ8sqJec?-KY4g3@&%JTRGShV-$i=5Pi3~4XT@eWjMLAJ|T>51S8+NUw&#^4$qf*Ky zu2ipuDMp|4e3>|V_9m+T&7FJYs5BYGe4{@qD$>%3wZ3MOZQ-$dNyla|^@%Baq9CN- zkFz?e@ZQIJYIPKTaiZDWRE)K?Qpu(KDZ@k*k^FvH$iUp*@e+Oe5{1C?UPT5gD~pNh z+nslzcmCjQY*kxlApqyU`+8pF6W!tK! zH{9E51>x~3L9*gvhXB=*B z<$Zu5b^7~CPeIgLIZd%MTIGp*Qtv`}OvA%c2SEvlfz?l>79#SDK*O##a9(Ux<(1i~ z@J}p2j%~1Mz-~F$Srqvjj!Eo0YgYH4Vb*ayrom6vKW84>I5?CK&~-~iTVX0m3;IRk z{0SLl?xEyAWy|^V*RnWG$gQ03HxkT>j6`|x7qfP};~I!5|1B({nuuC#mL2S~O|aR- z&(adzQZSzq-4bj7qc=#U$~;UnLuB=Qc3*z1ywtcKD@rjSn8~cI-FHgg!BAo4kKU>9 zJYoI&iOYu)3S9z4Q}&XpTWUDKdbT>Tv$e%H(V(|AT{Fo*^qg-beQw-V+$d44pDA<- zx58&ZS?h`wuf^KEBHM!YR&%IqE_ zk446{RkP%W{harz&*F%N*8I`gpQxm{9GQTi!#`2K5C_WT!Zg<2_IADG7ijN+KNlu~(E3Wo-1prUL3F4zGu()_#%`goYjH3t1Qsad@E=ZBNVg}1mv>9W*K6)Bv4 zEny3&^psl4bd@dR>7~k@Gi%cz_D4rrJ0|;=7F`Wj!17IEs;FHts=39ym-Q5pba`^) zlNkwvlJ{K%B?)lss{_}_j?TNEE#mN03n2Fc3CJo35Dor1r$oKR^&6UyF_s?44+&NSjtB z_0@p<5{B>3i^7{;abB9e2BP3znvcq=AVR>!sS~*zy4? zP)uf74f~<%$l1;&u!$h5ORl+LiG%>9X9{PQWDWnG|4$WdAtl{&Q8UeTtV+D6&Qvx~ zgoQy~b3cl-)q=_g&?So!>(^#PCxkP2r&2 z#Hhhl5im)3k4zqYo>yVtDf?0GmGxp~WILNqXt%3wG86+;$eT_u^++< zALUAFvyE~BlXK-dsB#%b`*-|!?H!GrkKK#=XQKmfc3*0;)QUAzsXNN=V@JgVm%?t7 z-Nh0`y*N>lQ96Y`xQO;PMC_)0SW@Bua;3Uf&E|cn+kp$?C}9G0G5btQwY@}SZh;=? zdWXO`>&Ybj1T6U{pJeO~s^0dtTj;`CN5S3|b+8%dS}JxQ&XnBrsOZe(e2v@lsS?GX zx}1JNnNwzoe1X#k@sAQ3D<1|>a`W_y?3H9#2OXK#{Hoz}Y|x|l6M;Q$JiCBjj?^ar zHpt-E=2eN+^t;5GeRyZiVBpU<`Tp1V?GV+1xPtFAXII6UP|`^ft`ofuu6Qo}Tj?zh zzRY9l13`fT5~TrNs-tW#LcREdIO>zJKRQ!tZl!Ht-a^bp+|6QzpuqM0| zz#cV8@FZ#}InHwmJ`nmfQ;VIbcNh{i#0wM?QTvR%W0HOzu8tRYUnS_WfHR3}?YH3Y zV4l4cow&;C*QZCNW%`HjNW&*dcBCvUzoZ?HSR5VeThz{mi`!kfpDy3H?8F|zHB3t9 z&-TyP9(p`|+dL0ZbjKm-_Z-##Kl8t49Oe0rllw{1iyJr$Wn^MZxW48+eQ-=kM9d*} zfr3GD9NysjbJBA?vDT-`YM#VEoq;MiS14_@VLU$#dstGZj47ripuxp%HNl53_poRh zSDdc|FJBfJtqnCcd~2;2hnM@(DeZplFIs<(d94VXcuOzLTvh#Fy!Nj? zNrmu+WK0U*xq^16d6#Lr^?>2Fy-Tk(;ehh4R^qHeP%feXFOasLBA#hr5?G-^dR(yn z=jM&E!;Rs!)i*Oac6f}z$>QKRf7XeLp`pL{;UN6_`d@iFhL0ct?}s+b>og&~0#?07 z7}MV;24o)vGibi!i~_iqmeQio)?Ss{+ueCN+h;#&q)|8&X;=KM}c+L4-_*X2}pn3D=?rZ(b!07p zGq8xK8hSfrtPPkmrey#KFzb!v7gnUtZg)1(Z}mL)4Y%C$PybJA``6P?!FfFZ;$*8z zTc>=TdDQr{N67Di%4pb&Oi|ZdDX&Gy*BpXvF{pG562rFI4F=)!vgY-@NH$}Ul9IX? zIKrI-II4Se8=ZH+g7v(l(X|lGD2_~G0rLb51%&U*+LRk2^ zYXGsKG^x?A?w%B&Sp6vW8m#>Q5k#X84&%i>%%r>^XBJ%(Fmg%pyCi!gZ*TR6hnril zK-unS<{}@Cah&k-x5t9{@*JPR{I-;p(<4Jzn zFJf8-An4+-UP4SPjk(S{V|tM=@=a{wh4bu|eIXvQYJ6hCraJJVND{nx%^!z)Kda!K z|If$eKS=n0J_V7Sz$74&^T(8jApYR<+4Ga}>e57Pi(qu#2!M+~hk=dPadEzf9{Zrw z0Jfn6Q#iWF*2#$szjM;vnlD&g)Eiz2*2zv4sCFs~Td#9&nq`fkLklTIs#NDl`By(N zxp5S%#j0zp_88E2W9qdikU)aU}HAW z0j*YXX%%rUpyaPW`xVX8#n>awN$c9h$ZIgT-R6EPqIvT!Z?BAVgJlplUt#KMql9|H z=1v|N4&e8;y#ARp}%^X!t1UEKGn2h`8Rj zZzOwmSLD~^Z&v4BAh-H66_rpam-U26`2K5vyp;w}&(8Pc(ashFF?%W2(DNwn1_KBw$5Jc4m?KjkpEncWu{4Wn3PSt6`M~ z43t@x%3rGvhM(_(GR0*crMlm@N&}SY>_IV7p68XZt7_x^A&?(QGgbP~7NAP3p>73O z-%@DggZtd?2xlMi>KuH)1lIu1ipPQ_@Yj?k#42i-MxVnx z^doc7!lEjpCrh!wDc{g=Fa3`DE@x9&3evdw!Z=D^Vf>y-=r&R|%7Wk`g)dP=arGA_ z`ptWQ-Vu!g%b=osg7|%Dc6*HO_vIy0u^X4vpa|rQ;d?K5yL)!VliZvm$^#D{5?Mk{ zbgrqM2-cQjHQ05}k5rukvghL~?~4Y5F4hdIeWIrZj)OnPYF6w89_TptHr1@IP`O@k z75m&1d&~LyqQzOZNwBG+Jx~W~keOiQawvr%cnVH7yv4@tOa%GWW#n^SS<+`Gz z%DM9V5)M>LyP}+Yfe8ms@k2ugv;YJUR3q@Z?0p}D7 zHjrUYu>j3Ym_M=G6f>U!{!5W-nvciwmgB(m!Xm=jJ<-Vt0D<|!hjcr=*G~saZ~uJ* zN2u1Rk6}yj6$|j>w(Q8_^EvEJL2#<15GKfY#!x((ei<3~rzWxzG3KUI8|jQFAJp_!aM zd|Gi@fkznqKP-^_r^45=fzCL3drN)gjfx71iTM7g<*Aj%j)ZxlSF&xT3>vqla|&x# zS+}HA4plHqy3#Ixbn6OXTk-={7tN?O(%O8FWEiSUYe@(`R()xbFS;-91}2;a5Di>~*rk>L|Miii?aUOl?AT4J7o!UMo=% zSb}`kq*Ixt6J3w@vmcmURL0>7P~&)(UFx*cr&nZMJtI9f1MyhBKnR> zZP&ZyYKrfW*d=_$$039!fPz2?OAolc;?<==eQ(0vl=AWNRSlh);C8F77QYWmzG>c> zroHD-2|7K^s#|X8*Gy9UAbpr~K$#X38Y1N@_KW>@3vPs(4$1GNyw4P=i2eoG>0&vT5a^d)|fk<;?JzBicUL&Xp4`-2_*^9$*5^Ph< z`B@1f1EX-rSieXL7^Ww?V-oaf&qWP#0O)O|a$1rP+NYqJw>zK+AeQ`xoG)LVxIgZz zj3nmEU57LXb!ZEH%WVznW9%gPvYpG3x22SZ($n)*Z_Dk)2ky^#$r9sL(M;usZRGNT zZDFZ<1$>6}?TJ|0`vToO*`Z@XN*RSK8P0_gpj=O|<`0&g^C#o>*J=&$Q^{WxQLg9s zX*uTLxSAy7+<8F(=MK{)*w|&ntbkKSJ>7rnC@ruSAcoUqX9VX-z+t^4hT5s~N|zWb z7J;8skQaqgWctDuG8d#4C18%3^zLK586xAF@(cK@?WA$z4Hu^;6KAUM%f5N%u0ID$ z+PRsM3nCr1`~XCR6ZyHQwl~(5FK3mQZTHr9_xGn)KaB%Ts`#rX?82r7*Y#-Xqm1Kl;g? z$3OIKp)mgle1C?^`ZGCFbPOy3u6dF|ag|B+$EowwE0L6n$-4XN@gpncgFi6O^QAXW zqvF;q2;;y2mwYjlv^KTsEusGyC502YEI>^_;ijOljT)EdgKo%O1PK<{7CcY?aus26 z{`!)Lj9+vB_?HcT)EhhG)fmxsThzVCZbcL})wufGLGwxn-POf;zTTz1t8WY1r7uzG zH&l?4`X%c>$1u9nu*=bqv=X$_ExFSiMF&#~sJrst`nvHg!1=m}k6#Ozcq030a8!M& zXL3WtTIJr+iZd}8o!gCxye`Lb`$Ftz-XgfY5#vzfk^|?N0PGgiDRr}c z8UFhImpW;Pl=;Wp-ddO_H;9XJ3d!Qji9TaiIkaBeH7+v!`3Ic{0`aAMUAxAA^q*A4 zsaSizni?BBQYU*olH*r6@xUx=>>KtqTs&W5iHL}9wPH;$48FwSZyht-+Z?sW>$uS@ z-wdjH{l34m;c7)&f(>+N0N29t@Q%1YMo^e6|6m*p&!HqK_xuOiU1u+Z z=03zVJH%(Re8fgY4T+$pjF#2q4w*qcpWk!LCu@DbcW`Oea&_-f-2zF7*t=iAR_w1{ zORjxccD{$p@7sD%19uU8b`B0U@l5wnH&53OIN^^jCfbcv!w}Fbcw~tj{l5Ddyq&v0;DfR3h&=6Fq8%H0D9Frhhs z=uNZe5{`^jY2ICl?Z4~jryCP8SOdslGFt8IM0#y zwWAh`NW^@#mpQ?4jj{@&_zr*J98KxEm$>1#wG!(j$3EZCv33m&=|}Y$?gP*;eb#gi z+fXNWWOt=rv$nclL%FrbmB>B0N=y`K>}rP4{_*hXX|ki~q|JVD$5TCU{$tIU2EFz{b6;H*1g>wNuDSt4YUHP4B1;)P&(^?_gmxsOM7P9v|F~4^m@mYEa7)(x_0O_a`HG1k2b?;1$t!qwug+I_)*qSl152KBedN zy?q(J`%`Ok8_PGf2P!L~p2fP5NjTR*8acZFkHSEW(}p7E6XyWS;WRJ>(3(l^K9@8{ z>102BwPyy0NHh%*XkdQgAX$WTg0djukV7sQ1h?3)FyAbgUo0djm1vtHR1tK zw!X<>j_accQ2pg@6;Wa-t-GTi+&w3B8?HBog|(h`xfuk@;@MnX^qnwv{r}flVODfY zlb@>PY$z0|ZY)wWa)Q7^1>??hr6_j0FUi_MYXT;vsI&YZKcKmz_Kt^oxl)}PVRieC zV}npI1CyM!H7RNAD$odB+&zqjYMr;+@QPKPh#=BHb0=Vm*h;dzVc?7{tVjM23UsX8 z_%{ml{|g1~(EW)J3T@e6h`JRrt3bd39WeHJ6Z}20ozVSkzM=2ANghzt$2xIsHYtN1 zu{G6G_7t=1o%xm^^$B~1lpiX;4HtpJ2(6(GNb^h*^UgS-o4KFJJ_cy!@t?9v+i284 z*K#9&V@ByK`m58 z0Z5xu34cKqrUxJ*uZ!1J%8#uUF3(oMi_Nv%M~*f=+&&glz7?Gl>c|1zWKcdGq94** zVp=hlh|tNAuUG-*DlSIB?2A`GD!!A?&YsdKiTfn`8Se}7#H;N0Or+>M=Th$b4@4=7 zwmJ72W4x~D=^*_1Y=e4x{p%4H^)YWCW7ia~r1h$+ap~u@|8D1()q7p}uKL-kme0dC z!e@wwRRQZ*Cpp1s&Dv*|mC5++cy%}I%CZIH@p{%uPgl%Z2%?D`?LR2D)LoG;`KwL7 zufM-K#r3x9tNgOEf~(0+@&+-uL^bd=kcZ;H$~{l-fV26bA#R|rU$nDc?Pcj|WFamV zESiC2n%)g}Ysca{*+L>;v}=5Mkl(5LL$=}0#xRA-d%yTapyUh3auloYG=bLf^z%On z1AVTA={}sYk<;LE-@HhON#q-a`xQN7~l`fk)50h+dH37@J~dnYTb zz6GeQ%{hY%Ji;HwxZ@=F&?=8i=0$OZ(}v^WC|{*QsQdvqE#Wj*Idz%v@Mx{Ss$JZX zL%YR@Etn~)@1(Hzf!4Bes?rUjcrQ zOJPl2$bZ7DK^L&o;fa2NMBidZ)C4v372e5p1hN&YNsd19Lo&uSs5dTMxgSuTkzV(G zz&^XCEVe8O>tZgS4HwLeulTEJt!(8G)8cPb>g_MI`l*S6RG_;&i;}H3C_wS}SBJ{5 zE@ui%w1vV#%pn7aLx6;7a1pH)QECDL|DtbOTLQ!UGS>I$33>nkXqMb%djlF+LMc>l zN|kJq0QD$A?9+hB(a0FvBFak&tPueL(n;|3J3#OU{XH|oq~%jh^-Hp`*pL9f>ya_Y zgPTBcP_Au`b7;?AnAT&Wg$55#P#Vylb2-l%`ITcJ*d?C@%zFQ02w8Yl>m}v9k$d^$ zfYa&S2LE;<(V1PPQ}!J}@@$nL6|VS^QuL7hT`J9oB5( zYoa$$TeG^?K{WuN6_-nwfpWo zgfAl z?ik~fXcaRn-`cZvZ){N#Nn{fXm=1H^)>KM)q8^7?$JTbDT(@688LT2O8g=u&hFt2eG^+e0OIh6+Qk?qUmhM8_(rf+Cl*r zyU!|--h}Pc>5Z<&p#(HOf%9yoXR)icS4EjES?p(k#!Rzgm3J>DTLNd zU&DxhI)mk*n=lLL*~A7Q9-)}*w_g3CBfvj>;ybHY`!4;>`DF=aD+Xh$zI&g-w;Hz# zJ5kT%f{4qp-}lsX4uM*Fx8wUi)q!P-Kpj}7_-GoKw+DZvNHr4fN+8EA&xyQY;gGO9 z2`-lk(n|S?uH`Vp=OGGy`1m>1t))EI$B!`5=M7knLE}7cEOTw#!@n2gT>s4A&}-9N zzrhCdZm?1Wj)rU(ZLrdIlESM!i3^fi!pr0b8p;}j(z)8?*#(0ba6Y}J zUCq$My`g(T?81{mzlz`-34m?zONvEwdyaJe#oFzgtk0&P?DRdveO1$lp17NPs#>SF zaLwIB`o4}(T6MSA&#l8QB1Le!76;SBeGBn#6cDiW>vlGr1=LDxvC5036srrg(V>;> z2!bi-Qc^y*kOwFHR(`99y6!p~Ta5hy;ub894@6%>>}9iwj65Ix1>n|s@xOg{PLDyP zg*pW1$vMSkK2%XG>H9Zt;D zx_62yY#O94rWmNo4c(%)2^$Ga5(4t@u5-IphujJOZ^z?K) zK(GZEytC7%L)^XHn|&q3;W0vqriJIb#wx=5K6LJMGHQuG-d67e|==ktgbUko-i@yr$WXlSz_2=wW=5eaW2x`&ri6?=zH}@GKM`#)E zRCRXfl?Js|UOxw(&`wO=@Wrnd7a+vRyP(Zq)KglNV&OWUG955X(VvQ(i7;fO_XfH; zjEszgIr5}Sn=u|;;cO`Un=*2$8{|(aTpc+FewK#wWf<8#=QnlQ6A5~Ai8?!x|6{M&zYT-acDA-c5ka!AVA;~6L46k=YsOL2 zH9^n+9!vkc)+fxe=QW|V{_+QIvOqy46ux$4>Ms!q4hdPIeK+<$G|mNF&DMOWt*td2 zWV@;kx~k$EXYGRD^4jdRz3{u}ljuVtN(i@{z!K2g7J1gGQEs@4f4Zm>9gckS^^1HQ zYw1mm9?)gkf}O3C2PlAKOnt8QBRzn_ek6N@wSQhxJv2u#1WBcZdYtE;9rXdJjJs!uu%6%q#^X-#ETMZtOU?z@>%?x!(kI^LE;BOBiubem!kk(a%_B<^R2mVnR8 z`tayTVH zo_>KYRKe-QBTEOEls7l)&hg$yBw%6#&K6#AI}xy$Le_%RB20|{7K03Q@y%4kSKd~+e7 zbB(4I=(T14qoNPsL?|A!Fj%MQ?ab=67x3XDGeqnmS~@fvith(l45gS$heb7>%6aXa zizRU^AAbW-=eytKFklF`8OC6rU=L|l!R*PDqB7jx6f&5?|Qr89Iu|&32ponTqU|D*Z6#V)8_bYkcyuH zQy#o$EkCL+$AbCX}ET0Ewia9&`3TLuj;?(gTCi<`@cn^6eEZ&PNU4HnrwB z2C?qm0*bVlc6`Irk&WTg5gbH5br=pPx3adjOD*mv6b&HvsYsnEb;EPORG3T{VR4`P z+EVB=Q*Rr`bcNtxCP_o&hA2mc^;Ncyg`N|v9=_+zBILZUIz0ezHeTyjD?IqG&%-0A ziVOrE)tp%Yo6^2$tPWGF9CmaqlTd?So8BjA<a*Rg6>bMeFtRF62GSR=vk~ZPVkEsQDxryu`;1jP3rA(cl`^qrDUAIb1vs#}XOLC8&!uaV@Lu~b z7f@WTANa>w{~|fd2ub3!nY-Z}h+Wgo5A;bk*8#DHq5SNxuC6x!2@G)q4+`PicgfL2 zxa%tMG>?;)-#_W@?p0x*VN0`qm~n5}>?3;%XV*jGj#!Z`$mXIq{8GhV^xm?-Ar%FD zBp4q|C7OwU%fhzW=1D%05U}%i@$1W(7vG7<5LZSf6zzfy*Gw_X^tn}XSCYlYcM+)} zF|(yX4cfP+K;=R)Inor`6q$5nQJy6wWkj4?zif2@1#%oY7_Uo1;Q8}(V}EqzK&bT4 zamCZh-X81T(megq(ff#AXxZVtbsh7BRykK33Pc?QB%X=);US^1iHV9^IH6IAsxpM&ktCkb^d>n{7YPZ*4e4)=PX-!N?ct-w6LhBe6HF1yf{y0LtDgDfvJtmu%A8FXp#-THEz z^3sKH9x4St2m#hIlw^bls(0VgV1ycP&X3H?vnkV`-6^RJ%L6s`b#(`=;3WJsZ*K`U z$Kk+aBflPx+)y-hMj9n_n;FgE&A7iL6pAj(pP7QxVdl;bYK=~LcfyA)(J9`j7RT+> zva#Thm=_dFzG0r9%l4cBT`fku9_3p4S`5v0v`RlUbNRK$Up`%WPJZb`O8b<>e|&HL zvx0>e+tHPphe90QX_Ewd#q`BY&4J)l4qu!F#>yym{#dtgT!F=XSp08GoA6t}^Fhb3 zHREihaV!g(LS3E=yg9DtVwf>Cz;sz1z z02kckB=<^q$E~P`3adfFh*La$apO#o zL>M>bn|4Zeha^{-!vPiJ%G@)LApcI|05%4e$IKyj)N%ei1Hyy9g=hZwaaWlN{QFEr z8vY;m9-r%9?!Dt)_V}S;D`WPVdLX`FK)bk})7|z5j*`N6+4tmewT z69%IfOMJdCiT)=QPiOfrr`D0jW(Xd-H9jA+n!_Kqtk(I?p# zp~V)d`Xs;3%hkY4QW4HGpmQqgr3Dk&o~Zhc$KwP~fCGBf&5k3vB0f{quaSOK(ns}6 zCWr3(ID|pY};85#irE((Y7|)SS~?IyZ#v zBu&RkjIEiyF5&uVHVDZxBlTyd0)$ccPW0O{BPb^eld9E z?Ke1(Q)AcX-?f`f7G~p%T=@{bJOGOl-|LQa>rhrrbI(FLfehH(rTQq|=8^v<-(gb^ z%f2cJ!VnL$S;$%Nk`ZxyVCI44G}y{zH4TrQ#?@Xs|15<%sQeRV=nmB;#9S-?kmlBw z6%4^^Q9;(MFMCNgGIej6WwX1zfcPGzF_ABG5OSrpR=L0mbsako(+#mbdf$}AdoEyt)KgEDVO%YyNIHO6b1s+5HVxFa!2(O2z_;Wu~)QI_WkE^n=J_}E#ZiB zMsC-U6ZjmS8wYlrb#7#8>G4lT!n+U8PM&>tFo}txzUScrI|Q1Bue8of`te*Bd9^>1 zK?rOruXz(vLHsthM_@bZdoC{Gb`otq>$knJi5a1?MgpJeAkK@hCM9?4foj-HSeTi3 zK_z1nRxW#MZ%^x=W*th`x*grTN~0M{7YpZlX+L&YIJ8g|iryt*4(jE7wotMZ2c13GgfxOPmEyvuO&2!X7yUG+F=#c+ z#q^GFr()Qa&h+O*&fo?eNRX~dd=|H_%hciM7{BL{?J#96vWIQU^Z3t!Q{CGyu$oxE z+X<-9%zHuB#BoGa=1F@k{?bw30OO?xeN8;94aMbw_7Zi2ynS!w2EI|>e1HJy!MoiZGtc=#4ckfNkZx-m1dI-4!Q{?xFn{y94X27+nj6wMkWZ0Gvin)ZfoD=uDqF3^GS-ziE#hi~M5>b`t`I`dfqe z5ISKx$V>8+u+#;IdP#Ee#*=Dot8>g3^fpn5i)Ag$KP`>f^G|Jda=I0fguFQbHWC|@ z#Rqa^^ztOF(mYy1L0OhbTB>7~Rm@uOKh|yM5`Fes$p-q#pQC9bm>w4`*C>`pmQi=H zbhGj1Yp4CjP#f$)w31@RoNZboqA}J33rtf*(o~KxvKJQbZezGQNZX-hohI0uIz(v zB)SRGs`7pM)OlKDzdaSvp0*wF0X~mRfKP5$H?k5kvi%KJ``g4^mVpSiSmQbIvixH4u~{agooc(|E0_WMu*Kq!6T@k(s$-K$o%FXnN$z zDQCA&cHx_(Jg0WBaBn87z^T4e+9y+my6aVFbk=ofdO!s+i}9^-exJ$xbBkiQQreP^7gW2h7`d%3n6bcg~y0 z1cy>T6xE^Ac z71J>WKqr=OxUuFZ=%l*?e#xb|`#$j^Sbn4!->8v`z;U0Pd&|;kOAm7yhJrfmf4Y9ih(szmlB40RmgGn|KF{X3 z?seTdfr0En1o%tC@SE*2ZN00G>yNI;9k)j^ja+^R#eT6lQz+4GsA?H_7<1ifD9Nbv zsBzTJeGB>F5y7WbrqgCE_v-x{$7;=K%c=!wS_3KQ(^QhC!>Df1P+h*# z#;yNwSu)+VRhW=zs`wIH{%F4^6TO={O*#whi(XeLFPtQ_C7zAjpex7&UWf`_KGUdI z>^IRJsVDlKbDKb+bK9z_ARC#S&#`0nQMMQcK^r0$T5sHYmjk{2(*Y3zOjFiE%6={) z!%(LY3|T}N(*MGbMMnh1Bt&aGONC%}-Zw%u@aOU4obNgp>Rl(8V|Pr`;dLc2vIwM% zw}7FJrMPx$oD0GDvtFpIs!Qn4sf^y|4|aYL(`ftT@y@HkVky{y6qFz?lPh@0-Fr1a zkd^j1ENKSGG1w~nlsyR!5knJuelp}o7LejF!+|pfY#JI)5-Ah!#M7u@kBq#7HMl6Q z26wJ0IM(usmIX1HmqTs!+hk?lSGY8^^6i2;+_x4qns~~-%4{pXxr+@5D}e)Xx@Sk< zMt*!&42Lbm<}o4BUypd-w2I=T^DDiLKLS$fHjO1~X`RX{X$zRmD2+T_YW)k?KV6Z8 zBtC8}B8Jn%!})l=HFlG{ecvP)~SE=tzc0V-+qx$7)V3 zDk_QqUJus#bc8f9vbMCGPQO_j(DH1w8E?i@m#!0sz?<%Q)EPBJxH*r0D1&frxkDlw z8tjHG08oX4_QWO_8C|oy!7~D`d~a@2VZGS>gK6v2krw}K%~bQ{R@%?k3T(!ynYWph z4>Io6;HQD5rZdZcbg1?HH7E4w`=qZ(tEsN=-z)&ALIyugtVZsECx_|O!PV}`!sq4H z59j}XH(Yx~4zddDxXCGLAYchVLx&Ik5MW%lkptcoN9+9+{fp8tg(qfh)wrwLRFOrN zJo4fEIs%UFqn*4r|FQF3K(qv0lVI5PL)YbSy4U5oUa-+x`t4h6I%iXvwTH_fZv&hr za{fCb=N_7;j2*Kn(VaQ2r}zAjGay{S{WT5l?Jk)=lOD7}#7IF!ujEXZ05?H*M=APh7S$ul=?}r7Ty`I5L4Axtx?a&O`0^PteRwZlVBYb; zy0SV-ZsFXHhEQRf(&XX|FNJOZ)#vLgPI|)nXZ9i+gm+Lb|M;zhVnZRAFTe7 za(3vt4SN6i&(EMy@gQ{A{|0bYt;_ODnyyfNP<}Jl+-9A4J8aWN;o>)qVbxF-jVn3x$7iF_j;dkGU z9ed6Gx&c^G+OPyU=HV^N_*u66{C)qqV^*nDkiE*0FT{8%v{1A2`J>)}AEVwx7AV@UqEc%*Y3j^HMd1vEEdumYsi5iH#ddZbq{|G&xa8%Fr5PdPMkY z7Kb`Cna2Iq81sHG*^x9Gi-9CMrwd2C;rxj%N;i4HXD4V}b^Dg1jp|LvWf;!z63sT)>2v@y^>QVB z4*-W&ThD&1UT<&c;P0T~DNa#Ak+(Jp9cxSV(_hsS;qAf+N?9nu^3&&(a7RH#MwU_@ zEd=&g#Y826H}TQIz(E~oMKQ@?F4}1-^A)qCl(h$6KNDDf?;{Dt!1s-2zPWa5n=?4T zA{03b;Pk!o)gPGUiq?HFD}z$2b*<%S6&U zTE-=eoKjL!UP)g(OafYB=-<@PKq1`!a7#X~;iBQf#|x7)Fl~~U0#AZ!AkfEtr{BQ- zVMBJg{O;4U)Akwj`2Y_7wBZ_kz01^v%we(hK8~HaL%Y##b_;)}xbh<3D<~`uGWLM* zijh$^QlqVAH0|#0?&(dpF45rM9MRXx$~r`mC4VtMFU{3@=Dc%5$Wlg0~FJU?p?NwQW^XMPp;HW1H z+GL0a5u)IzKO$#l6E`XFZ>HVJygUIK?03G5X;Pb7W zk2N3P9p2=9mi5t6iv>Ueq`2=z6bozN_kPy(^mZ?BW`zZuYX%a)T~S#=s)%CqBAYc> z14$DBND4UEH+K;vCI$SUs_Lqtn>9mwaIAEj%W2L88QS0KT*WQpOxIs{&yOSC*_L*N z8o=Xp5&H1rw(WA?DiP^AX;aYiJ*ntYIJvN9<|Fb}pON&YBlE{Ga=k(9Gxx)N3;*=d zs*#31YDEdyLv?S*2+=To^x%bexk;+sN2Br-jJ2vGa_nwgvP0JRinHIs>~eOI%5@4-1dgtG*&0Sd)x zlgv9Gy#W@90v$Xq@+9UE>;5(d;=D?4XUr1mieC4duoABQ!mf2YXSWXz=*`bKP(KNM zAl7y(qi%__4LU&~@rpc)*EEu^hdi}Q+6%XD6<~n6>jOI8)y9x8|0E_;zO3Tu@4Nqb zz5adXOW-`y4Sze*%Z?-z6~PGHJ&9W8D8+;m7ER5cw|Q<~eF)IpUL3_*`O~!_8^?SL zrG3x2TfIF>q&riz$pp&};``iX=6fjUTod=$balY?XGTQ9I%mQO`)Vk>g9JKto&y)EO`9-4|PV{epDr9LmEI1Jy5**WM!2R zVQ&4!5=k~SJK^ORW3-lp>ML!LFhGGEXeDJ4SYY#~75ef+A;s_&ZWKW*OV7tJ5#DiT za8VHF6pk{M83lWzechZ~3Q#CMUiS9BV*0*T9>&U#H2@%OII~RbHFMgiuA1?O@0#w+ z3e8O9GzxcmOy@3*%ORsaZ>_9KnWomA^HlqZIv=C~ci(x7mi=@(rWtn5oCML`HrO;D zS>#LAc?rsA;S}$JtH!1mM4|wMDFZcD{!0nXy9r8x8=Q@$8v|(T)ho9u(>anD47|~R@W9ixzPJ+ zB~pxorq&AP7{SgN72T%Sx1_pSRUZ}f;PI{qwQ(VETHxQ zyEIsKEwg)CDnal`*A`lrr&Jze?*o6A66C)fZXp&FNk@ye&3==SyK7n)-lR>Azk}9JIdxXSX7$JTVOzDls%2dI=(xJWoz%!;>W2;oDS*~N)Rxc z&CW5Ikp8X}o)>&D_U4^OpgpJ}DkLx90zvI4OA}HOos8Ru?0!6&4?tN`|n+3n5zYNRT@6c~H`ZZ3vc^OCm133zV*YvbK~7HST{LG0QZk@}k;? zd|bgbX04P74DCXa#mQ-ORS;t*kU3M&DbEL%$(KE#I*9Z%`MRoqaZbB}fBiV>G(A78 zZjV@Oxi)?(i}-e||4cI7kKWMmR|#}o@v(POe>1Ivz4+xi+#>86H${+72iq(wQ-Gl5 z@W;TpuW9{q$2+1Uf~`q49{DGHh|MA(i7zERw7k7vI(|49xT(*lgwC2GqEnbVgR`4P zQJe2O(SB%DNdNz`6;^VP5H86Ow>F_{3$PM!~cW(``t5y;N2Uz8p#Wf2rx5r zSP#0e(Cj$qaXCDlsD3k;^)wU@=m`Y&OSY=MGIDdrL_SM#u=*~xf)=Ew=AVK^=DYP7?FAhwgxz+v0~u&677KR zunIFAvm)9iozOP$iPM;R>;(MPJ?@j#9ES0%1Jw`fg+{Yh^NFy03I$naz~A>iE)G?g zt|0i%pE7W#0}JGpki^!oOGuN?V11isE_0#|{kBx1SEul&K48F_iy#Ee00VLWtU4Ws z#P|IdCX@vR#_4K-AAqM>53o()o%J7s>KW~WHt10nW77EomS!tDGDAVA!L?slQg0{J z3V}|Fr*gW84pPN+wUf5L#Lky0KHKvyA&@|-;k~Q?@kl$4Y;3^!_B=HO>f1;hf6tDm z^$TP$y8@x9ezgez zz=%u{F3$0TqfEVY_OvY*b-Pf%nk`ll0no7cVJX;^ZCcpbSKYR+sHMBoMV~Hk-t9GB z^$zZaTv|-00(=6J3Wx4(&Jer6cww6Rv5X>pD}tdkn+%(>R`=t92OW~POOTCdM{qzW`Zg`Z%UYJag)O&uA!I@%ltuP#k_Vg?nBu(w|zv_d>#*@L8=id|_ul+DgI9xKEd*^-lWACbvICtlNkWL}{Ha z;%Ll*z$SmePg}%=#4r`K!-^U@|0iUj{!WG11^%;qpWv|tuzUnw01Ly(XqhK4Jmgc-trQkaKFZIw~AG|#-W#? zjNxr-8qnFh@X|3(7?H`bGCe50ui{D94oO(;H(;wyEUfy$CMgwK@MWVd`JLiRMgpY4 z7CUduvBO#mJ7vEK;(mshlLXq5+|3OPdR@NN6;ky-tF)NcKwM}M5nDd{UFX(lhH1z& zAeAmFJaM5P)l8sYT zYy?5t8-n>o(FB4F;D-tW$5rm@fwzz4e$FY3J7oZdKCN6$H<_0WP`*LOg;sgX=sPM{pA;sC4=@?7>s{)D#d zmAZZr{l^+K)Q12lLS4pox<*;pG?`DgFTRZl^igITeg+4-4?vIRBu$L+!3xfw`?>XH zU;{Xj1d!fr==1$c5RIa7qY8ZDwguc_yR?=(6^NI3Wy9D87(?tr;=Me9-IgRxV>&C!N)5FnCIbzE-FAwXO=HqJw2AJ&Cp{7I+xZ`cOmOL0-~ZbBx+*?dTfAj@ z4DHTr4@rR2pA1cyT6GXtP}7bV<~0O_z{RycxK(!jrI!H^a=&^a_dI{RzB;~o#K>n!AHqcGbT4R;|j zI?)RPigq6<{W|V&`)7g~f;Obc8BEZLDMS_*dAt0F&^{w$&yp?)u)TMF^tUNKX9M!q ze;RLpXG*f_97|1gS4Dp%K@FWQ(VlD&$5oR;N_p39$45e77^-PTU|`aos{IiP`DQ zo>4;w^@?|z>W0U8jyA_gi~nQ`uB3<}6*fPYjz-;X&u)!*gTkrGlKW4qzU((ZCE32B zw_ZPjS^9<9#=%K##mb(_MB227g zy3CF>GiLr4OgFvN6d8t(o!lQLgcngohnU=pMn@!5MtXvK6UijMv z&+QTP#b^pz?GbpJ4oZs_{wVkQye6;<~@wdq-jfrpMpbZwr9H_n&+-r-1pfl(dWM%y!|+Nrl&RJ!Qhg*bTxxfApt*qDjV&=! z5{VnCPy;?j;!-T7R)BHghhIM(T;nf8C*V>KP7mUW&9wH|w_;j90km36f4BN7?fjOZ zp>PGs;8-cGB@1ia9?4Q%0PxVcdLTg8w z_Tm|N=*865Q5q9B0)31nLuuo&7KJ?bYOXxsFw3KlWwN5hW-P#Bamhk}@7mj&gk-AC zOgC<$OGXC5NgYo`)1#dz>-$L*`DG?8KbpA-}+C3A9q4-9FCvG&eBZTa`^mVCPCeeuKli42@N2VNikpl)NLtYaaCmJ3@Ly-fojHQ{3Cr&KE>b+!Q zN7+T?;v#k0u$~;}Z`bIQ$gz}fF)7htet(6(eqghW!@ywsniMhwkNrS_keo8Aecr^T zG7e35kHpU@S>w#1DqkdIegBq0`sr|(gtt(!&Ps)VRrinMi=5n?PfAMJ_=J$*CqEmS zjK|%+Jd3Z%A)RG2$Uc=41@K%ovv1@^b{5h*bdXj+FdSN;2h=FjX^SzYQ)eTD}v)H zRfE6zLyTo>xWViy5-_m(SHB~Xar?kydU>dCkLMsvP9W6 z(g3d&%Xo=mzi3Cg=vJ`lfoYaU(MYCf`2-GCBasr+o;Cu-U&tNI-`x$%&xTY()q^$l z`>y%&;$m-`h+swIg$kiE3ilhHJ>Ndf-{r&)A_i8J=)`0A`xg^WkLF!-j+&H#GL~pP z8O4D|Tz!}=;W-)XUcwHFgr zZvz_c!qFbtDaug`#ZjDuS8WKGZ%@+=A}VkYr*rzbhNf@#(*mE~LNU`KQWnLxs$E-H z+XQb)B_MNuHgI*+V3$$(UY$H5^746KQzk+`TD+`2a03Hlj!Vji6e zZWvo<5iNv~-nj5gzhiv@vb|(zz0!~1+SE+h(w)t9DeRjP>j~Gpk6(MyRKDAhGV*(1 z?HzD-Z&YaV<8a~9+gfAeI+0J>u4*jOluuel=BwCmIe1Z+0L}CYzn-jBK* zvx>6$t!)-7EId2{QoEzF|8LzL+(PUVM2UE+GiQk}f!Qal-2z6KqbG=dd?>3|>A^d_ z;}hexH>MFelB*I%go?RH8^+Cw*5X7~i|s-DXaF&NPzVk1FmjkQpAl2nfC^ zo-SuXDt^TcZw(ssM7#>q|EUUI$9@cwnKQb))O=G`no>AjrgK)Bi)8-;9LB1poZqvd zjn$bH%x*;rLfvNjy+$(^Pyo+?xy`<1#Q7?CMvAtNa3q8>h{N-A*HmEHD;ue)p4_NP zlYJXQiO3>?yG*NDT~zJIv2^VC3&t-c&9>HoLerRMhbEp&(axmkEQHimRMA~4NFDaJ z66qip{C2b#9Rz|e!{I=Ezk7MlEDZ@zavZ4QsROWkKe2RX;^6?0mZy%D=3t!c$(mYq zFeG@GUE5FQ%Q@O@aW!5>Ma-zCDkr8 zxYsQ`f~3PQ>sG#dm`1arT4|`rWv{T1k|fjk%M<#0lS*q62T$6*Xb&+U1w9Qd4OV~=lkYf=AE4^2?D0&!^Ax|=Suk~}s;#B)EdadcPv(tKpu|j*x>hTzaba~T7 z{3k0s8kbw`pl)}xRfy}x`rr;ycMz*lzO>w|u^d$iKai%#f}#{X_ied-$)xYva2k&~hhgsV}A{tbl3+r+SIw z%Pm5-`E*;k)Cu^id#m2ea)V6CsUH?o%g=ca*BW|l0_T@eZM&}96kAPIw{y%!m(}^77=@G;n$qaO6F*dYPqLe^)iXVnYd_Fj(J=bPSwL!jcTLLTg&LY z2C=N5cb80u##Mr-Etk84+Re4A4y1+dhDJso^Z#VDdoSM@-W+xvb2)i_`w=(~)#dbj zxMQm;I`~uBmbT^As-O#tylX!Ry>QOo@D{AN>e|qubEdf;Ca5)so(}HW8HF{GxJ>5J zeb7xW6`6k{{kZ7;XfPfb181+eat!S%|7hW!c2DB6nMW6$nobL2tW@-_22Rrjr=4}K zy!B3V-1CJrDzc3LsW9?;A($gj@(p*gGL27g5E*I*d-2N4N+R#p)bcgaxwb<)NM| z?D<;HB$*PS3+W9{-=6)N{6TImrm;=B0hcjr*ks}={F2}imIOx6$~~K9}KQsCe!Tkrpa@yC|vj^1?#oIb78-;Pq*l1&K$W&Q*D`wRWy%&8nE&M*o zjbPHn7~TGdrkxC=Vk6H_1N@3K`)v8?9DQ-^-*TjZ##wetL z0b)vCnT^njNjra=t^`mRC}{sz1SxMQh~|(r0$xVn4*MINzFirrwB+9x>tqD$o4ycT zqIRN^FVXiSv}t?ul5LW*Ou#)q}&4UEa&M_0+Rp7fBF0J|Lccj(~Dicxfq%?0wE2haBH#X)_=$l@|4SHbKwB7 zR3T#{k;34TmTA?fQ{``x++t*o9UUFDJ7T_KVbQ3Op_9YfN_u>ZquGj z=2Av3;!)5mH;Iddm3?Ms|4GWN(cH>Hg^Y|W(n<^C$B#T2(b?CmA_{iOPDMeb9rK)- zDKXi~Dk`5QG6bin!f#tGH4BwvP49H=t1UA;g@G;TGL$pak7{c9ZsQYNd$sHQyH2d? z>pKkFQ2w!HsIsv8lgE$&Ej|6dDHT7XtZ*W?Rg5WB^cDtJ-8t_%d{B8yU>$E|- zNQtkANl1!CW~wB^ZnwberD^8S4!^DS3bg|vb=A6$pHx4h38F(>kH0?d%~qRsMc&`T zh@URZ+J7`K$QG~M<&8C6X?y6h(cwj;@9(|b|ITjUKi6U!)j01lda8S&#AB8EYh*&g1S1E0?S_0kuAK0l~tW_MkXwOgD% zIm%ryQ3sl>z5^+pVY=t1!mR`ZCj&Bbw9KW@qkle|1WT%gCjs{!HTIXHW-r)hOKCcQ0bqZOz*nPGM5x*W0&k+Lr*XSj;`< z(S8r){O+>7!pq!b=tH@#D;vD(>ydEB;^{BaL#=R#A14+CBS&%!BJNH)C`?*MD7rc# zaf6{4nwo!rCps?aCzsZ`);f*HiL9rB3}O+qw4_+zEcrh#F)`%dFqj|GEtx;UM=P&6 zsi+h*8i~H8_F*u|+xjNY0y}f*Q{Wy9Wg{K`wxYhDs~XZNO6lvAmHDvf?))hoDc?e^ zTy>(jNSY6X$*8OSF|Wr4{Me3`2xw zQ2{{8E_t3@?5f!RI-Uj!QO1XksWQ#OIJj>`Rmuj|i0EX>zy|SnfJDX%SgOag!}&|b z17;!z5T6czs}XR4a;_sOoFal}`dA6`d^#KXh`@GyUn-uKkLPw@%SWpS=8~NUrIepb zLuUs3Yvk{Z)sUUo+tJBI@AQTmeZic?-B0(Ww5 zUzA4L>Ak0`Mhbq&1YN{SG^|}-Vq%9s4RundLR4;ivS&Wdzb==?>%)Vp>sqA+j}nQ% zpTURHlG24gehA*prqX9s(`r%_+5ub0Wi&O?`-ACeTo#F5`xhlE@KgKG>)M-{YT(PR z*w{Fsz9AB%O?Hp`k{8nY25-NnzG@>0rmUOexRr-+UZ})zN_b}t+aEdTR77P5^E-8{ z@b)A1bsTa1K9n$a{xu!7;}!g{L|S`e6&V$#a)0&i^{d+!47D!eHNltC!HzGLOkppX zi;7?Gf{>M2|NTtnT_k;!`)WKv=PG|UF@0bv}3QaDZ9qYIM~R^h2kqx z?O4rKD0x0AdjH;~V;4p0l_`&*v|1q#USYw|Y8C)dvVNBFGDoVyETH%)f}72*w+$cE z{vh{6sUF5F{&+K?NNnJy+4yVV*VMGc(AS+N$8(bmr#waK01mGOKiI4&!58OKT~w8_ zcIw;Pn}ya8;+opJ-P4W%U=kN${>AbmVif7s5FFX<#HiiCXOZHcs;Khv&Z%JSunAvb zyTUF2ZQr{Il982HLg*wDKgnov?&0SoB#Nk^wN0g^rTs;W7i9~|`;k{?Me$5BJveK|*D?uh;XRKa5 z(^28pBZsh!hStzV<-xkEmzR}gKro2t%|Aa6IiDpkfk000nnJb(6-ni6NhxblLx-r( z$i4g1YzS5k*Trz5;d{G#Kk~XxC#eFCg-hf^@8?)pxaFhzGFefUc?p$I>N$ksZe4E$ zgt5khr?DQ26kVHad#lRRYk>5=5|1uB1#VP+Ouxmosl&q z+v{pKU%*a?h5Hj~eO;=xMK&k_Ec?ZKD5~#rY;frK0sG00Y1ZF1;=!Xnm2#i z{bK9gFEsw0w%MnQJAfBlyVRrXy_eVc+TNE2p8x*TQ(`Wqk`$zlDs;d7**TI8pMEG& z=8X_3L;tKzU3WLUC;DjQFhy2Jj-Vgv_lz(SnoF(JVMR{cR_0}IAN7RAG!dR?`7AR$ zc=3JjL`mYeOaJeB_wV9$RUT+RPITKU$b|tJcWbr0_Ao{v*QdZ>W<3)9F%>iGn;zV$ zViow!@y#mYrOX}Yiy(hqKT6lS290eyo*bH-ky1vM6*Mt;0qU(%pkMR14Fw>XtAGni zg#fJI$I;ZV+qVEmju{_5gRy#YQkg5T82-tFcRFYdPh12|kW+I~>t}HAW0FlYYX`)MSlBg0bfKrCf1FDN9kes75NC+ z!HkbY|Ldo9@?dAatKGi&ngSbOb~V>~gpha75s9shp+vkNn;c)DGO?mwU?nsZJ>G*m z+*7}r*Kz%diOb@T*~)B5!p9HS8}5FNjutbEemZYvO8vM4ZOwTPTz0)DZA1^SPK`E+ z2nXdt!+JQXKS*0>k=Yq75`>@6jQJtC9=u954~#ccSJ}7u?ie}44c~P{mzN|!HS+49 zrlX9C?_-vzH&tN^puDEk92>10Ue4UzOF#YW%7*ExmPPcD>hS(wRpDPn;wv8z83+fI zp%Y2Ve&Qy!{m47kT&~+PMez0mT732opHB}I#X5N@0MdV@Ac=~TcuT(9PwXWJZYTaY zIe*B7_1#;+;84jtXu0<-Q^q}c%($%#rR2Ny;WYC6_5wKc&Ve-LXvajbXSrUJ>NwNn zuE$crs*h`}9QlF4*rV4K#t3FW3%}*cmuHi{G}=`@NeKqp>E^L4F(tj9AJwPvk5rvx z$M*J!`;u>X(DA?5F8evYwZ03fIAxc3L}{w66`kTnUpe7G=eXyV*$9F;B!xT*>Ofp?M&1iOYuqc?VbS?8eU{QM6OH}>O zw21Xa!m+b0{#q1z(45cXc6Phb#kQUgG-OXe zB3PB|8a`;MqL>N&zXc;uKZ->Ig*PT`h2@kp>=IaVS<9|*CiEp z^kzH!gPF~QylDM)Fm8PS98Annfte5KA*L%;f6h)(+QY$BE8HoOWHOYw(CEVg5kkBY zJcxis z{Z2P=fliFub!noQCHx7Y^7fA0;uon3F6nj)kvXd6QoXETjMKr~uDunk4G@snTvGB; zkP-m(9GOuIxP1`QWmTwQfPfy3uJznU0wzfKfSfc=M>kHJ^+0>fD|M$t!c&T@rp-Ed zgqoO~0lryV4^9%4$Ic=9FJuIv^8zpG(r^xc^g&KVRB{=S%x~{J>NWTMXSo zUBM}FIv!632A-r`>}5>Ns!8tC#LHizGgL~nx7EBh3k4?c_7cXJxsehLeDk`kE`?!QQS>eGEmq(@Q<)A(aZ3p4!_lfBM9V1> zer`dC>+4Q+W0f4QeR1J{g?)>JqZ&1tlgnjT?r0v~`IK0})>^6eKIFj8r#*}Jf;81W zS)vSgB2dCl>hCee-^Vp@faAzg+EELdF4JNj!Bc|8)zftZ-zj&YZPor9LEhB^#?U!- zdU{!x@ruV-N*Gu;u8XCC{nv;r7!D2|HQ)vJYO^(=o1I4thnUIHpPo517a3*TM$C-l z%)iXa-gYSGeSuW*D_7j+mL4-TO@OpNY{TH=tRGl_KYDA<$yf)Mu%)T)?V_9cQx=q} z|FrbyL!u%=aE7i8X6+XkjLIkST5l~=Inuk`yM3M(Pgv41XjnYQ?=%{|*v%XTI=c&N z5N@A*%pWmT30$sF4Z#%Aba_GREnkbi!J&)oE4&^@DyK%-Mc-QR97Qm+pj00Zs$}}D z45YtayIj z^VM!@>M`%TuU8H_wsYxyM^p#Yoh?hGtl6nyL=)=eH!oXV?-QNgfA2r8;rJ8S!J1C; zl6Q!z^&k4uc7IG;)y-GN3m`CHX+ZN)v0MEt9sMYeJ< zH=&k;L%f`#{KVQY5P)~la)Y?5T?Pn{TVm}}Pp)|cw+{0>jzGkRjwz+UYfU^nyuF;N z`e(CUrW23>u8d;b3CsiNceyz)SV7@rIb6xv!#|jkggs}LH@47@#M>dk4ztu%0-M`X z0u+C68L-Ndahy=aE?6^ox|M9~dGA@LuAI#4N z%+5SnBNJY%j!&F}zYmS2Axz)>VpizY05sUFDCXHQ z5Z2P4pFYVc!ZmRSo&2GWX@BT)lk7X1;+reuwvuyd-g|tz2cKxlD1i^S1^Dd9k~A+ggijJwF%& zj_J38)~~#5v5vm-Sq&Ymabz8q^F=Lk+e&@zzs7ly|C?l1X<~jp-#h8xI(hU)B3qhaiSzP|ftcXQKxdF?R;*5j6%K9fV63P+tpd2eNF4 zg9AGH`U7rEEkiEM(AK|#%%a{)8fb2`KkI_v9kvs2!Tv{bYPsoma=69ndy1lLx~;#B zq&E0S=`lAV-dX|+YrYD(hLN*+u+RAEg=XBkTWtd~1$$uUY6S)Fe1eb~`7t1wf=JPNVOB6qC-UbTR^0TG zKg%6meSWuhah}GcH1p0_EdZ+zSn~RY;8hc%!+^;%%ugzDA(|=gA-bTRj+CeGOQCNe|VTS2G6ZF0#!H0~#a`~_mbVg-3W|FQ8+q+Y#)l3>Nj z(?dX*LXvCb+x8&8ar3R)j%(N+t6}w$=@sF0(|UaL4}@Ol(fEV9?4)CxgPRS!)2o_D zJ2!BHcX3$1(oT*BxwtYLJ|?Q^tM6Sg?0R1yoMCv8I6c;D5tw*+pPP6RhJQdJMi^~L zVY5FCN)bIjKG^%%+SA%@`~%G9$<>Wb3JQsS|e9i9x13tmq{rtdiSP$9$t@wdS=^5q`cYe>=NBV zq_0ir<=F26xG4+rI%k=ip`|yUaiMV3DR}04aUfoxiz}?$g z#E8{46NnVm%19WSyPa>F%R#ArP{iZaoEIX{gvCNWpKN=K%HL?4c##pEeVEaL5Zi9k zTJY&UN>4S3L<@G7c|H{cyV*0lr{~@9{>k~3w<$fyyS<6|*Qm-h#m^VbIy{7Ku!RG% z*kbtK8#kbW6P;89XrXQSk5BGe_ViPsGc%i2a6S^Qgvc)Jei%7m^>OQhGIpXz@;p6dT1 zw}+~iFM2&-sMVz(dfsyqEbOy!xwl=7+KN0LVYE^F)avq*|0e2}(zf716y{kM#dfXG zYvJi>;*kND4r%4v_$`vog!$xIt3TQ^eY)Z{)YEF;mF47u@&C+oLCEm2?ep4XUo8`? zo~0uYax)ivG`ij6W&G=Gs*&FBiHh_6+p)NEN%tst}L>kLUdBkzr&;1{IaqFGzM9h(E>RD-%&?V}9A~A*u`&9mpPOjeb%8l= zcoOCDf6IzrA=o=E4?dDUeFL^t3rkRHiATsW3qDLHKwpZ4w8wN&x37cvLaaYyt;p68 z!Vt>YDaY;|?IMf4voy>>{uYQG3Ua=#usr~m_qg0gdC!)=SZXG>;cCu;m!Xt_-^oP9 zR_A&54+ZJJpBaA@r@%NNByY4;LJp)QiF$Va>HQntR)1U}K^hneB!IkG@LY6audRF5 zhyBwy|F3tP59=HD9yp-y2klpYN?HtL6czz7$A#wvYzhPXcFL>oC^bn{9K-O7lamPt zOzxyaa~BsER|Tm=rCW{1s1uTt3v{mpw|C^_WtC<%{*uTXot`DK(lR&LY2OFf$;rvW z%=#J5%&esRm2j8Gy99F!8?_7_owB>r?VO=-w1m{uqST`WqVucZV5EekG$x~WYNb|I zMY*{~L+(QeA;`$)nzA8o{`dYm-_Z8)$TlBD>4DvWA^?FAHJ8A4PEnh!q|m4XJsm>0 z#>d0`Rei5qE9B9y{WG@&QSsk*%)dHQvrq}VzgYm!w^5|eIn)S42YL_!FD^yNX=mGo zYKJ!783zK7hgNYq9(4wsq_;EV_Wnyei%ldd&TCA@5x_p&3YscJxyWP2 zcud?~Qde#7asZRyqn8m8dn++rD6VpF2AC}zKRY|c5e&!=pOU<94h!V_dV7m7ep-&9 zW7-@1TZbzsXG&sI`#vG}>3-ema{IWImnD-GDCx++0e{ z*c{BhR4hWs@gXh^z(CINa*q2_9R6paF&mg+vDH2ZKU4H+#jo%U_q6?2^?9}!s9KpW z8D#WX0kdEETLF9cO96AA3O#8A6fo%pKOMZy&)k42CtZWe4bqMOt;%g$wDV2~0|lMzevn`yWlD ze&9bG*9m>7<>of;Xud6y4*k(##+izThtK$6FbxKSSE`_NVO=OAVRv!#-3FZOmj54N zUmaEDw)VSdq!E;ErBk{)rAwp*0R_n=9g7kcwdjzPknZkIDd}#cQ@ZcVKKtzNeD`?A z{l~G!P#DYk&Uen|`PGBU&1s(dro<3a&|Kt_69O)odt)@U^ia2MdHf*$Iz+%>FTpp{ zyrbUHa@Rd+LiBDs98DRA_z&l)B0ih|h&EX029qByE4_AM9RIi1%)4b&%BLg&pUE`_ z;c)mAR%V_$2~*ZnthS8Jp3BXq0$-vk!qyx*Y=;JnbK0#G2S!A2=bSQiZrWDcP92t2 zm;lV>Uer5^)zww07i{C(dZBpmk@H(Q<&6?reV6dRK(%gniR~1h_VXu91weot?0u@V z+dcF;Fh#^&Tad{-m}YtJ3T$a?Tnj2;i-H_Ay>0%SS5FCx2F3!!;t|Bz&R)j)W!4VM~UZyX>1G{Q7_GY z2;*)lhs%wq{Y{Mp?~xI(8E6_9Ius1YKqp9py1xj!{+7x~^qJPzQe(&yK+`Ng9rJj& zFa4kgIpBz(bb0<-(F6TP>Z{|x;^8JoSkRdEIIOdAMar?JfQxaTVYvd?GSJ)$| zR<_@mb>Z?UajFC`I_m0lP1}Q=hw)N$X?f}1kO_GJ?3m|0ap#+?Ped-9-^TI@;i~KN z6~dqFQ?FiTgihHc;AP~4UvQ&OqO2WmZHE(#!PSzJu;{S(xI8G<`Ss zDHUpPiu)0DDj-KQHa1squ-HJSHYS{3S*b}T>@~o}Sv=(+uY^dx9o3CI`I3LlmWzvC z%F>;)5Xg3je&NjLFt8MBF>T{=ui5}#5>76xK4mliGoDgwP$K9a77SCjMb0w!7MgM~ zM|h_d8=EgBbru@>Ij9%%o!nU{u8xaQ==EhP)jk$RhCs$SN5DVKT6y_rg;XGMxFEa1 zSs(M`P~qEafgB4YI#^1s^CuJ!D|Pd&!)(`kQnt_bKk-p(atzx~Cg!Gcruw8g#p@8Q z;5!ceCYHyUndw!>f?qe5r?Px9{dHAGIoz9#Nm5u7ej_a9bRwif!W3Ki8tRWtms21L zZsYVj6i!BwxkW)4&u)c9?&K>7fC{mZ|A1=wCj)3KmFy6f=S$Gab9jObFjZ8h%S-=5 z%-zY?EAqIa(&GmNxM&hD)ZZoK>Yn=DF36R@mErqxNFBumvKW$qwm)t&%A$ozBnKoQ zz&Y=33<~Vaq)8Fbyx~Q(!r%3$M?2XhM_o*sv{j|&nq|qb)^krHr|7)>%4sRHP7)qp zXCYT?joL*x*D)E`{=#Te3I&f(f}QornHJzLizX+yf6K~0W-&2oX`jEX9F6K=uUlF| z&onjl-rPL2AMkU+zQVsHL2YwBSbT;HVTTu_6O=7claR=G9<`rgW2ulodp;sdt&g26 zcyW-wc;gxMAR-z5Y~;uO{ysShNaSHPgw4^=gR_iH6>(hm{I+v zNGH7uTu9L!h-%Bn5}G0acGK??SPAvcMU%zqwtr~zOff;ig5z^3=ABm!gpqPAY`=kC z6}%}N_Z7gR{6T869d$2#{k6g{^t?h^Rd!`gkwIbC9@NVjLpO{)3lCX$q$oiErbp6& z8Db=|6VOwYgus{0Kub5?(eC^Mwb}luJZ%2j<@|SNI-&)7b2xo@$Op$;D$y2$%IYEP z!?pJZocTEgNl{om1cCUeVSp<;g$H%JsoM(Yit4^&L=9kQYzVBeeh-hXk=Rn)FQ&yM zX3xx$d0g&$Q>8>iuhd|F^o4~WAXyPJCb24ug<>jpEXX9ij`FxTT4JHcx8}Wtty~2B zsW`=x|GN@0z`gwVAQB!CmJtjsOn%8g@F=8!H>afPw1`d1U1>gq6@%C3Ko6KI;j}P;yb_FAz#GWFdci zF77sUu&`08{H|PLno6{$>1X~Xb-Zmv$RojKy;vzP-3tl*ntSbNHMw=lyiw~a&Bd8a zoS;!4RYlT4Y&~hvMO6elM9wU<5WSDYD?kj~UtE)LrhOGz==V7dY-vmZOLOcSsB z7{V=31$m8^%Re7K{gU$He@M2qdXKYU0sEbpKn5vmAz7U2vI@A(FaTB54;grq6$j^3 zPWd3}@~s(;lt)|Ae(um|Pc_YpdH6uDa~AhJ$M(K(S@G&>*ejb_DuJS8rOx{jl36B> zxQ0jGgNk^>5;aUJNI$@eaf+1F!8_NY0Xdm!nQYLZOw1HP@He0LJ0uxB2>k_W)m@$e znp7hUWzoVDfN~QyX=1w&G-xzaGm63OjzzVB6N&OD@| z|8+Zyxd2=}rO;$hCO$k)Gv$2;c_l_RWgX)SEZ@H*x#K8disRy*XdhGTOY#Z3te3)aWp-%R_nd-fmEz=f$wY6zkykZ68xCs? zb1IC(5v{#xgWlN%lZrTL<|LH`A5Oaa-jPSnvG4VM(6Zh1rk{meo$Jl~is1T$8sMt< zIn;cL68=mlvI|g)jA#5#^>i0r6(vSO!FTD>r5c?JIxHQMy#fW|IDHZ`t_psrMe?P9 zd0rp$uL@@!ivFF-5tme@C|uXklHO{`POL4+ zf3X}lqWe_Z-Gk3RxJKYMdPE23p^FgtQi%tCm0xwllyPSyc)gk z6h_k#hv2+pH~?+W>Bo7S1M&A<7$5zUG2pp7Ri%7s?job*!X>h_kC*fWq1RuaSC2a2 z&1Tswp=3h2kx`eEY&zYA?R#VL1_o)xvJlg|*{Z1STxHoq(Rfs^Bdce0;S3G}sT|&% z)OJn$GJlb8?X}cBWg_eh{ogb;x3H@rlnFW6SsyGA7c)_r3d`(EBMSB%npk@`$t^jD ze-+Is!3<2N`qP^4WH!&8>p^Esdy|v*I#Yb!9X;fAHpMB121U-#jalY(efEZC=owm< z5oar$OQu$9Z00HqYn;xA_rHlZ-y*-wyu9Q~xkqhy8&SVI8XI}WTzG-9E8I*WALKWj zRE3=d^Id6Nh+``n8*b4cLqk1f=R-uW?sX48cHNV$L74p|uGp z|IKjz)lz~`ftHel7`~i=@&ga0L}SUu2D#Mlc9{@V?#<9z3yPlIsROA78ujJpScp>f znNA>wO3AG+lpz@f?%1IzX$yj^CuuJo2blYq!ZZ4Fi@cAYDPXxt^>lpnITbUX zYKMvhI^l%!+3|9(pE5qELu5s)YdsE#7%6FOA9#-=K0y=l0$P?iI)e?H;0&dh#!*CUju?!}KuLaN*)#@0Ip>8v zrA&ypC)in~>`u0X9n-3%M9Kw04j>`VbIoU+8@s)31s`nDlGhq1j*`=#qXZl7o~lXG zX?%|p%d&fTBYGo2YD_Q@3-DVtVK>6bCSQrZ3QSDbk|Zr71Mu}1uXpBTg_6oRo48JJ z2`QjSu!qVY`tWpW0J6=MtDtyFNd0qUCVlDGdyBjVb%%J+$uwKKU7 zilTCL>M!a}|0dv`*x=2obf0BHk}+KiWw;BgKqjfaX;zN6R9=7gTI_1a>o)v2f_Us^$Pmnz@+Nw9hpQ2i#u9fF?1;-K!f z)s836tJH%hsFj9)e}CO%ut8)hZ$DCMHJZi8l#!kCX=ra|=id|@c{SFgGc<^Z0T6tg zehxCJChp|H7ngbW-c*jpe~l@QWvpa_&u|4%yv+dL?QBEQj`INq!;+UAV`_Mwe|mss zMX@2=`6F?AY*3cvNBdXb)mogEq5$7&@RzXYmA9ahf%HnrjYQ%+arQVRJlUVJhmdb^ z%({glbLT;e*6&(2)%21i{2wrgn0D}|S>8BVCS)|9gYUg$aE(y27D?YtI^kZms0A}h z+TGb~!rrZl{yw8|gEX2u@d0Tmv zD+&%qb5wh)4~#2;Q(3|h#Z5`3%yTe)`Lc@|8M|55#u1;XI>a>+*YCaw>10D*0fs>~ z5oSdxFr1rOyg9Z0GL2u#UTT|!Q}F44#V*t6)wgW1AiJ()oOf6w4WDPZQi>5pUsaXc z_QCc6=DX5E{+& zb^kyQXw5 z?D*sb&#pP) zJ<@-7fm|#dsYh5#ZQ^wj5O#g#byaR;WSdMbjr0XgZIuN}ZK00e7ReJeX+}MPz*-Lz zJj2G#CW7CC5qxLZP|ukXUC&f{`56+d-<9Y!PJ_{#dAA69l$JJLcp)&Fd0ZNZNeMEG zvb}+ns8v>7c~y8h4W7Bc)RIYtS)DTGBTUAoyVN;N>kY?7f-xIB%@vIEdcyKn02mkgH_GNEp^x>%>zhC8EVXg z!}RL1011(tGi~Oxnfm|fGrU!UlSfOxzuuA3+}2=u+J+@g?n_S%6&!X9R=w6ioRX+B z4|+aKc{C~C2@YlXL3VX?j3Q}?y>0>+l2hY~rQbr0x^XzHG48~@E3(^WI1^qNy4pQxLq5PYg3-)cr@edOp@20?Lr$9UdS8L+2y+A@8qH++jm5boLpfT&J zLnnyg6~_Zh;c7yUT_E@E(%@a_o71wxR$hOX5AkOl zUqXz8An7xvFdVRwxH=b1?i5h&?w(aSBa2%DsNgs;t_8tRT8WC^j3fhTXq|qI^xVNr z&6|*6KyVgq(qZe&vHX?a{WKT)durccYq)uULOIB`WrN6O_?t4-yOI5kmQ5!sm7H5v4Owuf}qOIE9ZN zRQ#G_YxLvy*(*5h+Tp%d@-JRghV3)R?$^TEt_e5kQ=R^ue8#&#o)O;PzfA8J2jVS|tp{RKNbFQ~FJmcJ&9E?3&wc8sr|i*vtJIoW%tD$eltuSi?Ho$C&@cZ)()dIFMcj>sQSGEI z0Jt@!!ZWpP-Od<%W*k}sGn`f&qA(sceEgBRyF0cjLMz0Hk!xR0#5D&&TB#M;AWnFb z!w&)cG>jx_gD&9)PkObm#0iHGc#+k3#r;=AW{|u&U}kbb{#O@$(}hE^BL{%Bf)Edw zYT4rTon~(V3V|*Mdc#uiZ4^(U>bzr<&Wo%~JZ#XTOb%RFjh^U1zuFM$-4O2!lZv$5 z|0<~jBMM^DX0F^su{Ic&#@YR7h1=@(@HC&V{MdrL#JTs=2i&`tUuJ{{9R`H?U5#b# zUHcV6sT|k8nQz9zMZp{}c8{Lqoll|Mu$H?5mVEa9he})1s^OD#8k|UWqr15W7X`0O z6tejA-LJw(iT{hqTi}{Q=kWQx`su8sMW41o@k)@y z1Kxgdf$m?Pbm2VN3!!=$PSTM)sB^TK+T5!|f-^H8Jo5pY!FKPXZTC*k)Rn1_GVVm? z+1UQt!}LU>z5x2(-E})UxCbl1m@rwT<)-7%AY`YFutUfC`ovQ_sab^6G^}G=sM*4% z#Y*|2L3m?Ve_02-s}B}Lww=2A&FpSvTDf*VfCN*|%F6t|D2+#AqxC&?D|Ku1M{d67 zkNuU4ENX37E=1N2kZ=D+5<`#@;AcFxziwfR#EN^qh?tQ>enr|`&3)OZo70#JrZb8 zz!@EdlN?h2C51=TfCox9HMaM2msPt{vIE~T3iVkE3dT(8_-B@uN?;)s%RtuZ#!u+f z&JV^a^9jahxEwl$IDfghKBz%DyBt6nx7laAT81{M&*LIF@h*6{c=G*Zu}}(g$w%O40!Z^n8IJ+XaJuP+!0Q$vBGUMCi3r`t!#Cw6lG ziyQ-^2Yks$1M&p(9!-CLGjVRj6&4fukF;;qYT?Y;T6m_i_0_0Zd!fOv_nW!UUh$rx zT;5)J$N^D-QtJP3-~V_Ve2#ITq{D-a@qZs9?LiL%DG;zyVg}xryZn z2;s;$AQy`U_Rsal)s_JV*nZ8{a22P;4$pNI}3dlb$zw!@eRvABP}(ReDL%#$Zg`HQsu#i14ht4ANjN|NlQyR|Fn|J z@qFIZGw2)1*lnG~fQ&2LA0BvUG{_kgibrYt*BaCy0*0B1!o;t-KrBoo;P(1risMVA z&Z=7~7KaRuuHR9Nme`Js2QY$&_rGdeSa%6saUE-e(ou-@nvnW>v?E&l#?7EWySuS*t6SchJ9|NKzB(^4 z$v7wO>^}0lOTas|7dUYjhjOi>?l1}kb4015@Gs%sJ?M|35lN=Hj$`H)=W7zMVauc? zfooAFSw0m7@Sg_LfC>@b$z32+pkHl(v-)$-#X`-fXZdKC80b3OCbI@q`{es*oWz#h z3RM;|x*mI?j>+*n7Vtot`#_V&%YSyvKOcOI0rxOv!si*D$Mx1hrOa`2a;pCE)W_4! zu}UiBA~!de9`I3e($~H&Q^)sV0oW$MDx_%y~jU#~o8-cn+`^a$YAw^2hLH zqSBpqS&ST5AdSw+c=rMJ75@Z)NS07`i{>QnVQ0)M+VbA%-Cvt^e!yySyjC}BZ1o)U7D()iT>_1;VVnJiSIKL9~b(GPUhAuiG;9IIeXv>dpswhgzDPyJ5&V zXP+7{Seqm`>Dmoj23_3EXOFSg{V2s0Mm(hAirn=?|LOiIR6bSyhmHk#&La8 z_Qm}%9^Gd&(n=IKkC632+2hIF+?tcNx*KY9$#q#Y68z~e;sXzMyV?fp&je{H3*9-T zKA56B%1>vHSN8>O><1u0Qhu2#>rpj&>g~pr_aOu{&iLPcvL_?htK)&TzZ3@4HP+Zi zUx%lI9%-5y&@BE*f0%>#c00F>iwc5GZ+}bF=RL?^5KS-3det(E6;Py=Hee znfurEO%9J^8W~MSZE7_~bGInvB^rn7tRvy!yLqkJ=<^e(szvvga?n>YRG`yx-yLKf zR#4hU$Hp9q$=7E^T`o&y2W02$006T|?@*|92m}x|*q5DBJzFX8a%BD~_|AviyZw~y zFmrC|d&z+o%B$N2Vp0r%qx{)`hegg`_;&g*EG%RqFrvNJhPGT(`?`u`1I>pV$GDF&G-Vj^H5Vh&3|)uW50Fpl^rLn&p}DvzDzmi z%L4Hv8SdmUONm~73cHf?fev=~^Dkz?;R4EMLt<_f9ONt~zWMY(`7YA*v|LDob9O zCpUV-zc$wMzrT+AaJ=L;-xz4xnk3#UtI3OYBjMs~T5GX(eU?utYD6${MvE$`AK29m z+Y^=P^h~Iefe>C>?C)^r>snIkN6cbkhVg27cqA)B{JCV0%Mk#7b^m1lom=?0+%%O> z3aQ;{r2^)Y!WBTTJ#Il^s{vWOPs!BiC>f%?QbM{yvRtb_bBpgyZE`2eyjjtd_>m2C zt_OT1d(_)C{Mom4J!SUfFaBdc{GBG@L;1*7$QjQt|Fsknppn_=HcAh{x8KmZySuPt zI+D0Vls#uO#v}AZd4aRR?HCknv)K{-3eA}-~*2hT1DH{iM_)tW#q$DupWLx||cN2*#tiG$_6 zt$su(hyf!PWnG079BllaV2To8kVs~5RJW_w0n{=d>(k0ha#u>UEGuiZyt50xd(8!V*jCKzt!tfYN3mqt+dW;e5PI!X@W(8iJqhm9)ppUqJ(oa@*HN|<7(dTJbbu-G4jy+`5_8VDhWt`_QfeI z3J7L*QP<-SLy%6Q=m-0f@oyZ46+XeRT3ZKVHpz3ET|@t;QTm5o@s;)#1o=wG?LRsa z#6V9@gQmlT4!%ZRG@ItifD!@0zU{`Yu*FcC2FYZx#-Z&Zb>udkbm5_9-&1~3$bk^q z*MlMout&kXh5D_&ZEgBvdb_f#Aw^Zy_G$%Zwn{v8YZ&!Fjr-6F=0>f4Fe1&bp{o#r zQ~tGe_L2=`eDnYukwm3v`g@E#LGO%WQz9wXtUCr)=F!M2xnWa`?a%7!QD?OS9F6Vv zz8=>=&7~ELKP6pHMu>LZ9_b*-H$Av#N6*AEfrSYsA419c)^>oJQz>4Hbu!avpV@47 z+%COy0lBp(k^VY@?UJE{|BXjmz?wZankbN8WbqB}uIQqO$5&D6hq6?=QICg?;&)Zg zBA(`pJBb><@h&Tfx<`X(`$fN>3#3qZx1phKYx15919DJSJ$&(}4fg3#E|kPR_gG;0 zP{9N9IifC_6d*sM>20LwmKsC}!@@rEaK1>v^aq;)aISy}`4?B*sxXPNB;HTsz9;?h zclinqy*ct~Z*5c=z0TVG*7I`F3UULU{l5{A_2-;&gK`5+OkK=dQg!J7l2`VPepZV8t3&5BKS-{ z1hxU^-FLY&@6)jy8}0?C9fgv#q%&ULo4N40tDc|}q+Op)G(qW|=WIL%1zWivkT%g_ zf<<(!h;v_8^*OZ@PzfMRCc$`84HvL=` z>K~-kFG)cL3kLb>4(*w}`@jXCpR*YRQ{cB%FO*4pEEAPb|x6 zEk`_Vi^>QMAk{4bYX08~l6+s%F|*$CGYR5SMv=JFx1W_=ueIAm(ydZN&H)$y6qY}m z$ekj=cvk||Rw9Q)Z}$=qdLh)Kn50}X{m$FHtODfQyg*Eb2-f%Gk^(gKnLI(@jXM^- zQ)}T@_he5UZPw@~QnOw)`qa)n?ts_!WH-r&)Hz53{W@H zhZ;vsU%=BrGZkYzbQ-PlBSW1)}DK{9fNGiYDJ%Q+=+%bVxaXb`gYS9II8=tF;+jJ0zmj|V@B zEVB9m<)O$ZU0qpL=ZjcYK{`VKDokOSjN!^$zf~I7E(jAD?dOP$m!B(Arnw1l6#z)%2hni(Rto3m6;P?pdrKqlb2(D3P z_gV5#D>$cUDP-ksUNGQolQg;TdP>hWq@8A+n0bHDa=&bW-e~;__wwf9h-qSWk>_hb zXW6AZB{#pkw2Vw1tGt0cfbr#`oIhfG^=~#8`c{MmVX27iX+THk|3K`33~cX195~c< z1NFiw0zevOb%Wy=>4mylSu=mS;U?vKV^T|wq<8pTKwnU`Ogou1dn>tDK|T= z$Jdm71u;7|W-Aeq5S6-KEpxdyyazw{cog^nUwPwFav64a))ea@rXkuz+73od&W3Dc*ChqCVD# zlLp_smbh=5+XKAz$Ig?3CCM==uLO;s7m>Ex+7v#E@sBO4RsG0YsNUL&7FL zav3RLvOMOPJwR?D_xGX&Fj(%#gQ++Dj!$FSO^j4iXz|RV2z0G@TE_l z#PY$y93uy;eOyy#c)p!~=i&B22hoMG@RzNKDeiJ!DJ-GG7P9VqDPt6yejOh-CU3gk51h*%zt*&WWSmcBjO=v|o4=r&K57d3bHsZe#gm9*n z8RFsLX?>14dEnXsoJOg2mtiW(%5mI3)cfS+cYqj8OV>-gLL1lAKb2iFtyd4fkc$L) z6yY^O#B?na8JU?i<*A7cnw$o0Q9x35Cn)ch`l6zvHMM23gK>Sh1sD~?bL(AqCu8hD z33Y1|bGIo8h}VSIJ<1r+DO}u0H-lr5WHJyiGFi=REIV&+@6$6PqP!vK*cQ;J`^eTAy``CpJeW3k3yp?o@MOcOQQIVZay{_Ap~sW0JKRqcj0(1{oB(Jh`WH+^rfC7 zBO{OZapp{Py^a^^X>9U2YOud^6TVn*KhJF#yl6Do89VmBbg3$|$;&UyC3K?b{MCeV zUSKht4DPuRfLN`yC8A#+#a6VO)C^e^UR)mhm5RmY&N@8v=HXJXWOK}nZmRo?L=#9V zyC>^71LjL)BD6Abr2cpA9V!xVNJxl(^;CQd54a|xdzZEHxCxB??*Zh z^=fRHZrie-#pezt@oZnL+ynJOph@cTLq{rwumPYp>q)&>xug{k(2b3c4UXRWN2;%A zYKJ1vzEPo%Xn9(9lOw!y?}s9AEiCS&A@&VB;5(2SQ$DKh2n=+XV8cRbxZ->O#zGVv z9MJ8IZ*%4YMDUNkJ~beVT+OkZGt0oqFZ9`9lgIX}iTm2WG04_3U`1mSwbe6N4eD0y zr3O;93N{83i-7#6?@o7@=XKnqw_jW82ugtUnmv!L5IvC6?I41F4cu``6jnPnL z-W{qIk_dcj%m-o6KWSKSOLrWf#Qx~VWCdcbmY?FY(Eupb2iNJR0~>UnbBEWrepO=7 z_6PGDrv;B-Xp$e6xA9rFrnz~x+xWShtZXq5?1keN#m|EtR+5KsIcNQ8)B|29_k>eQo&~GB<_7!eZHj-5^uQ;Z(*9cyrrU zcHhgnBcULTmU*^V1@PTJyfRc@h(6B}vrf>A($n|ncRA!^ez)nh1% ziyp@-G7c%SRC&YcUXICcOD`+hhbr-QeS6F;1<3z!M6Bh%*qN|m8Aa0gTs?$Tw+VJA zN5Pigphbm-)!6I|Llpy!L*GfF+BDAatzL->#ILqff1&OzF>28Uicq)sK!f)@cg9{& zfN zUB$O5Qj;C2LarG@2DRVDkhQcl6%>l#Q@l_vj13nt1ksN^EdnE-a+h~1(NT8c-H+Sd z!@>z?uDlH%U$QrHcTYbEI%O=D_1&;wYbyP~7##4hAY(gSF)rQoO~3rXkAD)_(Rshn zp@X}C9r@s-fhPhhy(+IjUh49^dHF0lgcy#7c=^8(2mqR*23}`h)Oe*p0yt=?G*Z;C z5gM;VXbS79ki%EW+*k0N4hIw>Zk-$pa?-9}S!IIV4S|_gNHjQNaN`|4Fqj-gWK?nn z5OP>0mJGxhr3M>|L}Gd4_cq$RWfWb3RhpBzD*^6$AE`X#f5 zqp7=$Q4Hx{=>geo!2IR;EY@-nT${~s9`x@n*1_wMC{yP>;f}2Ce3r|0;!AQ!ez)g* z1WdP*zd+t#R2UxAkN#4$OdL*Jz|Utd$4&3-lgmla^f0K>B9$AJzm?mYxJ+P_5subI#U4Ol?B}~1<#dE zy#<&EZs+KD$aI*9SL>|FCZZSKft-l5ZS`MhY_WI~D*iU+mlbCQQ8uHqi;Dtfh67Ui zBxqgjuTLqar5m>U2!}Z#nNOC~b}#1Kl$4ah?nT;({FWT}a!Scv%>S5YI`U|(+InXE z5FG#t&J>A6by~Mi1vnnrlC{0yDER zHNsq!dr8&>fCJ2V$M*hu%I)?nM|sDj7n&svH=-hPtrL=?j0LJW2}He>%b158cL4~* z*$zILIRut?X6Ls;M0^xxi*;bMG5eW3Eq_&IFy#e`3~?p`WTEIBdyFVJt!3E zH|sn29!@nN4AgN)u_9*NF)%QPY&o0u&NKsgUSu<{*{9h$Y?Gj2s?mtn`xhnU`D`St<4X)D+Fi2nmF|IHg)^OGcEHVWjIq|$Ptef`NoF6Jr;kJ59ID0^ zecD#}nvZO}ondsQb!0{9R@PsD^kvN<*GG%!oC;9051z>tK$Ce)JNj-mzV6<7Z$~~< zTr|<;vT}qPyTXgY5IAJOSCRtq+2S1sAAhOv^lD3JX~MpR5d@nON`Fhi*j)L%x3%|E znR#!^r;WjHlXQsXkG8KDKD|ME$)3@z?_YXrVnb&SV{>h!Drtm=0Wr6uKw9E9=Zh|t zYiPQuGibCz>^6`JjZAHxK0v@lr5oy=JqnjKw=w~$Jro(3vrJrE(}o3e=r9XhsU%`NeU`4z7)oFXcL_IUH@G`f^;Zfm1xxHF>+P# zTWBUdj%T0;tB76o5Sz|P&AHEo-0Lrg(Th&b8)YM_h7 zf~m!LaA`Ks)yP0AZ`LdxJ6T^jE&`_nd#&!)5Dm4%6-9DCnoaaZ|8Ta>o$XW*d`kI8 ztq>}3H(U}%cq72ss`YQUn3%Lf8-Uctz5(GU$25ob^&+3b<r9;4}jg>BKwkMuj%3_@&{vY`mDOWSu>8T&~ zrKL?x*FL{7&w*;RY>@uW2xli5I~LHEsias%KoHrGmmP%T(=OGZ#t*0hRM~}zYAj#k zzspG8^+k8ovoJADzzeAh6NSY2_Llx~bX2Dl)V%`&l9Dvmyrez90P`HSGlm77_G1#C zthqZCA)uY<7kY+w&FGU1TqTJNFp=6_V)6q-I6v3wGc0C8bt57mL#fOP<6}`NCrVz^ zzz}`%pHwnp^pEMK3bT7mpHL|WLxWz`U=e?@d1nyCv}7~=Z22=btRsTPjT)1GGtvur z+0@*l&1Gf}%MDMVAt?0Y?R-R34xh)VMe^x5#*F2#}l z9y;NgqIM8aZFr?B39mL|2mh^;3=&-D8_Q7C*ZyY24#Zi;~^7x^*` zL&IVq(TIWn{!p114h&mwl3f>d0{Q<~e(%cqB{`CUB64vO>Mj*Xa~3kOD23$}Znt2~ zCg?YC)@&!^e-AkBKKmSyJ++3lkNH%p4t0H;&$RD8Tl?CQv?O|ykk3?bnywf1bSUXe zp$)8)CFz#yC65wlpzy~qQ#k)sPT|+R+@@EaZ{93vn4UK zb?DZCS&}TtO@8XPNqEM4PCiW$W25$l@+~QEc%UV7f^x(;lVo$hj?v>e2?zzIARD@k z8^M`&07jjEt&!6x;5u+-!%y>@OgcI;7&*`U2!qIPEKi&i)4V2<|6tb&NRGnZJRVru zKTL}y@OQ_bl6emqj_9=&wp|p(>rt(^Js=1HBez6DZv)e7?O}XT_H3CCm@I!tEK)># zgl&8UZjw(CQ-gaSwtFZFfTpl=8TlQ`NDfq0*kdm@=O-KD2U6bit7?^TmLQ?S?R~Yp zypK`E*^08>)CTepNK2g}x+Ie8m4nTZD$sFD)W^GmH(ZLhx3{%`SV(t~H$e90`udAI zeoy+5(}!+`gaYaqHD=Oe|;X)w1bxd+Bmcs4;TU2*vEEK*+Aq z68!^Z*U+q1!S~h;g$2WoK^d^+dbk^Uw4<=fhbYSwyAp7>0j?uc1;Cj@)It2 zK8+(;0>O|=q~zylHZJ6?7h~3QpQ-flU&CO*+S1ZrEVJ=zySQ(#$&cnyj`4Oul9>Jh z-7+Z;WYjb})UA{Pl3SGrjAA3Y(1geE9)g?_K=?E<{1)=S#G-G~v>y=ja#CW-T-Nta zzyrAg&6TGOnkHXIDAhQ$=LZNR29lQ&*Tf92T7*jlOKHo>%I1B(f=#EnL#Lvso*~at-0*Nc`-e;V9KNNC;=pQ_! z$WX=t^oA}|t#w<(bAW^*I)lfAq9=Fr%kF_|+C#OiQ&;Z9vAqBE_q-?eH#Zi=Jy!N= zkqQxqQ$WN}VIbL3CbC?*5Z&%nVWh=+XmEJ=*b)c3ko!vGny}EH!~p*`q@{nNuqzw9Fv*Mxt^khIFPsZv0~z&d2Du-UE0V3D)G6 zRy=VmwP)K31N=Z!+l?*@@ARRSK?4AppwLg?6wwmt@=2UGRP%2K>sf(w_4f|Qg;MQd z+SQwkdUi zR6e9uB4j#oMa5Hg6j0~YFUQw`&rkzYgG37*@A^<>eei}yzq}@J41U=t3R%fG=-8&% z!)POoAVvvrY;z-#tS7HH;6vVgmTCrF>MrzH0ey(!u9j7z@qBi#dI)Fg4D5Rf6I%!M zawiv`3XUV07CUH|IZh}CuSSGxy~nU=7P)s*M8(Grmd)Brmtin$b<(MW(}H@qXwxI5 zUAoAs{hmjv)fywnFBS8Lrk-!XeapWCMi*|XR* zd~|P|63gnTrA0916DXZqNqhLELUm>My|QOU+2t6k7m*n zN7nT9y|KeIK5(fZQbWc(F=-$@ap(e%oM?b9W%IO=N1fKoZp?$I-@il*1+P%opAV@$ z9Ehewk-7SviP0{h@>AC!dY!y2nuXk!*UwL{o`xlU zhIoI!^q^l=U32AtUXqf9sBRYM{{H=6Dqksp0k~XhHS#>G%96tRlu~|_-98fCx=wY( zg9!c|8bm|oQ%c89Bn=jGWV&C|wSw7uq$&n{rn^j1d`@F>l{{1N68<68>X>3Ju=SwQ z%JkL1Ao&;3NK*m#`()(@e8wDNhnn!X8{r6MTD;BUq5i2l|ELO;7RYLA)j_*`2NJAY zb&|}Ulh#o34;r4&pd+G3#uLgoJVZK>W2C9`4d87Z#}5H*V46P|-qRVCQVDHzl=3%0 z-74;xcMLDo5-Zl_w)kg2?M{gIO|jjI&>til%MTWZgK29D#U3pPzS9>eof6E51a@?7 zo^(k&p0T=#M6cP_k1nOB@rGAW1xfMFvArPP9j3BE{Ov1H*GU&H^_r}a+=-$C+Af=e zo94qCG!qoK2$1~G%_L*r8nhZTM=Q8|@58U4f}O=AS58sa0vXStzQf1S95UW;-o~F@ zY$R}X0Nie*u_r4fasB5}i{199ze!tPfDCB%7Vr<8)wuxY3%tRtDC8z=*xu_Awe&GY zeD$hA(`m=C?c8|kx4s9S-0S|B8tqBwPEOZ_7=JzP6U~@k3LU3;@K=PoCU|la0`f?% zZ-3u+Uj+%{!WMDlUU#`|M0N8~Mx<92mv+SOe!UF&8pHK5x7uKJIDnJV=U5i_cE>f@ z$!ZCR&2x2<=-%d6mE=DkTr6m7u%CL_;qZB!LXiVmgKhhaBU2X*d$c_M3gMx_lT+%C ztA^#!81*u(rixWxXGKLD{y6cu%tye#SYEaBu5VLe%z54yn-sok_n9<`0RE+PT~uNe zW7O(R%URQDo7GyNSkxqg`>_cn>yBm@c5EkU-wT8Oxr@191K$OM_~Bq~P%$mn$Ro%# z#>z6uQ>Y+32B>o(%1+Ew8uS$L1A9|KK2jzg44c1&PJ@lnXv;s-Uv)z$E)@9`PURBXgHp5k{109+#0~bJ2hD*8D|a zT_eg2<8fVs*T{fPZKC+CxLP}(krAotDU4K*5uia@1iE`W4!rK?UCV*Ku0lCy$iKPE zsT>(2j+ZqyCI;U%?;)@{B_)L_%=E2kCXmUX@K9kPUc$yqA2C0#U+223{d3pul|0f{ zU=sXyKxUMfnDo7<$hwm!LGrD9-ukaiqP}ckGP0}z=kp7CR>r7yU<}9Xg(ff@guY27 z6_HGj&-zo~S0bY94_7qoA8cy^Gp~2d4D3t`S7ORvx$+;Wlk*72^oUn)tkoqX@7;@v zrwZ@J)2ZFFw4De#{?Ods`Ve2-6Yl5W`8wum#KzuKEEiKmp*mTXELneVN zIk8keI!d;7^n%L?3;+3Z1!bq|_a7to1f359@Il^wUb@eJ}iQbJ~Y?~XN# zTus<|3Gcb^p&W%yC??T%b#-kJ@d2}XNCAnj@tc|JWZRj_8AR}&^a643biHRorPWdE zVB^qI5jOdsE=(Oo5WNc-D_xaKX*@_qAje zg(yxdt4M3DQs)1Mt*;D=s$csZVCWX4Q;<-)J46WuL{X$ekd*E&1(gQrp+veHq-H?6 z1?hBv0fvySVdgCNbM`*(dAHX!AN(jQ{_DPf`HdE-YqR@mC7{CK{LK-p^&n!AI`)+m zY|N~Absq0#V`F3R6gg8+|MlTx@v>mfg*J=)f$GR^%yRg(h|SqsgEp50xu8WyY*O@I z(U$zZ`}fv?Xy$LNtBrCK(Wn+cKVXgym;)+A0@_cFFkIP+9LV6~-WaZhn@mTeg6#%8p#LBe;bcLgZZb-!SQwlrk() zVt=HaQt_b)tB1q#KPsA6aMur_Vd# z+3YUPktUkO3j!sbKMLrt`S~k$Ao8p=$CH?#{*;Or(iGIed)s^Bu}`JcvLxCYweQ^< zjHx>V@;OU!vdfRtxo~9^tag6+6SDYUI1>RZG0+L0+qb~lO~rvpM4CB^+3lv6H0SbKi~!yZn6K~N zyreYMJdc(U749&{Lr96h*!QL?$JX~+y~9itb{7FabEF2ygeH}x-4DImp48I)?aC0w z;4-hRt0vlkkKSzTEw%u0jhTG?h+2p{xvbe42);a>=@wA=jg^v|CBAD6+-C0M&yJ<& z4)a&tDI=MCYr=t^meDr!(?zEgDAHJ8g!f{0m0k%;zg&!7?%?uF$Nb9Lf_Fg9xshS! z>yg2i&y94E44~gK!TySW+1%rywiM}oy_qT zEi%f|C7VMBrzFKFz3F8@kju?lK*XpNQK6UpcyUX?9GE+In=Im$Sbv@W%JK&sYC7`$ zoV+o%FxGL~;NQQMp&*dH(MW*i&q{c$P0VHsnNVO(cYi>RxMiU^X@Wd6ze+oy90yvN zx;k80n}=G3T|Xe0LfyrEG2(|B&kP$6mcul5ZQi`PV|8r2oQ%)K`1m>RREOHJOu+eJ zAoTn?B}Y_#R?2#MCiCEd_h)-iaBJ#CI5| zF$QA22C!^XQiCo`qq-+J`1VFdt*a9vysB+OFu{OEOX)R7rMovq{6#HFw%PG)0=WAfzT>`i+zOr86V0!Lw>w zM+&g-87ke5Y816L`v^-f8cR6^_PU`k3jT;+fyGP& zOJ-Rjdv%4O3(fn770NbDqnLa{&YuPlx=}FAtYlG zVF6Aw1E{4dxbR=p{U7i`xAe%Pdq2$L6LJb+Ngc9?iPPf;`m433YgFxHyF4~zV+-MP zmO6rr1{;&~Nyow#nJQhjoUZp};cp|{iRjDvt5@=_;4Yf5ZCl6fUw65bs#S;!?+h*4 z^B87v^2`xdl}d05_Ct% z<4MEn4JnKb%nA4*_TZ>KPZz#0`Y;I~LP*SEXGK9TC(4s{h$ML~ba4z&WJGWlteW>R zyuX9<&IHe0tQd#Xr{Cbw5cVgF`c^qndDnR-a|xV}9iXvj9m-F_LwZB>bZ}x+abM`Y+;oEWrH;Qo!e=c!V8~ znrpD}9%qSqai0b6)YodQl^&wmA}!rrt7Y`Et4IrjBE9vXKUa{~cW;VsTGIwh50NE@ z>^Uue;|1(Hlu|+Y7B0oDb3n*T%sNr8b@-jLZ$mquz3ZOb%LkMC?fQg7$BGLcH#xq( zBtmd;##Beatchh0yphw6CDT`U+TGuvY=j%uTli!i;E>aF^tW>e5ObSMTu=htt%my^u`&lurT zo@cZJ{!-O7RQTe+L3d}ILH2;sKJ(@M6k_|2v-8;Kz*SLfD@!{9fY!b~h?xvN?0V1j zLEP?nBB4aASS9`GWCL(}#fv!$X2LGFo%^jK=dy005m|_G_l3O-Th^gLCO*CE^=+z|%J3RB965L5 z%~8=-$=8(iTY*3B>*^Mz@wpb|FVIN!Uh0sD2qHZ2`*&{NAJL9h3N6#Qax=ALz9hI% zn%@3iqB}ZSd7$DL-k>Z*;-=3U{M)dX_Z9LE8ysErf@OCqU6c#D=9m9W;RD+=FhWLu zruQ;3Z+a%Al3P}ts}sw_xOhXoJ3k?X&nt?uP@~QEM^!%fLeQH2K)C9dyx{3yfts~H z)2y-ETQzKpTeb&G!?ux0C#!4S*?ytI-b{EOXnTVr2=0 zr1(~4G{v5xww*JjECIo0oe8ys_X6{np~{#21*^QV-ShL22gXXFhD{Q0?s;P)x9A{o zm${gC!1y6=YSzIt{0R?VkY*57Ll)0pT3RmlD2|=-mza9)MdpUibK|eiwY%?zxwI!2 z*%4Pu6tjYO*>|Z4JYq0`YFBS_nB{26SrnMOT1@&ZxJ{Xru#ikk4Q^1lD08tQ2EMm< z)n0O2)ERM6xTQ@=N5mg#-#-q47c+y&5B_*-mH`pFi58zFDBvIbGR| zSq;^kzP?Bc8WTTyjg52ua{7K+&#!bsFGUod#Vfp^@ZYj`N#3mO zNDp2+Ti^RjAhbc?^IEz?+pyxgwlDi1iSqyYy;FwDJBmlg&b|Y*kYd>Jzm?g|q}pq1 z@#-pXjJjar{+pVZZZ2ZajoJ;ah577v9F)%$eAo8^BHT7RxrLDx3zyNr?NRMh!CWA`2xH;e%%e$=P9ff6`I7|{(_Lf-u=N^y)0 zM34wR;7xE|FenP>uzn&-N{<8*Lb0--d83$S8hKR{eB1XbSGWe<1TWfZTy=EO)etJUSd3ZRzGK+c+G~qxD zoC*{|Amqe$1D<9Sm>>UkrK*N@Jf72ENa%ECN)|LD1{iDN61-|75jdgaiJQKxth^clq>THfAH z0;?EUZ)9vo-s{VYro{&?M{=F-kaD&Wom{WvVU3xOVqoIsNqS4^SOc{Qd@1g(t={d^ zJxb4x0OF3=EAGPR>+$(PT+Ux0Mz(oyTfukL>;2t0@GS^P5=(V)h*fhiIw`56^V) zG*dDfhdEHG(Hg+74EpZN0D`Jk4<}!1GCHbkXZ6L^dF!7JO%X~&USvx5avzN*YZT(V436J!>Jxv&`M?}Q=&RAt^v*{711a21cs{y^* zgkY(}Q-4Dp3oXsw=p z=fz6M(u=?#_gZ((N1bJL$=%{6f?%RWz9}FprM;3kj5o&6h3V?X`?Lw{Df2t?9W#41 zASg(mQNp~?dyxj+G`Qg>>S-Is9ixGq1LCYJNuGA`g7PVps-pjyvBSMZaoo0>gD8i? zYpML8h~e@oNm#QAmRI9LnP80nvFQIkEr7%0VI~L%G{H59=AsS-Owe$l_ub?+u7HwPPj)!PKwd#~Qz_(NY!e@ND0>kM& zj2!F#76HGl{VQ;%pPW+{C(`xfAV}*~3A>d}z5rGjmRcM$tDX?u`EQ^Sfjr#lN^+rb z@Tvi61;F2%biEPGgz*k79zBvu;lvNJI=3}3p>U?7yBiE?q4~_|zrBBM%enVz!sWaH zZ)I*8lC|^d$JV%{fT>)4J`Vg_UQhbk+lMaSM|9ZezwPu7_Ax<+MucKFuK2EOpfkJ< zD42_)E!v1VfcoJ5+aX|Y`EEVXeHaH%n@rKl90{QK?uG}7zlmEV$v)Mou$X>JmFr^a z+)12v4L}LQ7ZAj`?JB4En_5???(OKqoN;D4#LLN*6_@?iELp1(Q+%8HKyBBhpU4>! zON?htppO9th&DcMS2=`V$*h>iwWsdQbO88YW6%A~FlNr_>idNS1usRX%<$jrO1DK^ z4X+wjA+h@cz4RItk|s4L%ucYnkE;)$SX2S@a=*|A9;E$Hr*}LU_!|M~xw+cM-ZIji zI2#NQDC;zOJb^R$)R)-@N|ygr5&a!(Da8&((RhZmZitd5Ag9{MrRz>Zo%$C<0EZZCvjuYSrUx++>Qr*ht07NQIGKaPKGPX+W+MJ>x9Z+o^!ephu1g5N-{)a zB3>@Jh2StD4ue9OrJ6dcuZZE!9Q_g8ACF2(cnb?3HsJ}k=}R4ZpJCRnod>9vwjVqR zz$W&z8DGJysCm8`?OzG~p0jt64O_W!soa(GFc>vq7O<4+uu(u;zcMo5$$6VDi0MP@ zYw*LJd*S}7nC)O=ZmnNR}W;sz7mM*%0UUp?Do!VFJ;0m<09V z{4L|?D>oYJekT;n2I6+g9bU2}W4(3n;`nv{JF>obPu4iRX;aAN+9<1gL4VwW>2Z+%Km6hNQ2-Vh1UBPFY zVLFpK8mH5B5iT%L>DT2W~Sk%D|U6ctStef=O{@4yvI|lmd>4SB!~FHFi^DjD_*9&=fl4jS*N3vmZ`-2ltU-aXK_wR^ zU*gry1_}-5{C{R|9a9)~L2-81CLY-L@jhF-O%ubo`9ZFVBa~ zr1<34nR>PZI|7JG*ck2Zvp9!E94hBF-gzq8i|@fN3%68adh`$+FZcNa(3z^`2a(Wz zqLCbQ<6JCDPBET$S0wbxF6l0B0ynfK2`a@cWCt0GoBW5OP-nviTtpAXC^+sF6fzgS|V!mwNBJ)&V7i1 z@vf+-ZagV-|MTb1t#&?_{KzxvY-NdqB&TO4ar8XuNleM+0>a9Vs!MovW;Ug!-FH6o zCZ?tqoo~gfjf@D-&0#ebyFSy`;dy$UJqRQe6})or2aDG8-seqjL&?8vGTG{Z2 z>of0uM`eYfr59dht+M7u=Mo&OK+4DerRkoNf_C}MD=3%>G^oI%F@3>TZ^lR4 zMuX3W4Qjnk?PnB#I0gY(uLC!E#HqOy^1xHTwC_9eZ)5x|fRA|iAkI<49M~MoEDr#H zEinhRHTkUB==IVspg1C|(|g75iHL}ZTHx;ye*SL~W`p-UMaHs3ZKe(s86xug60^;}_Ar8KafCO91PM?|o*w7_rj%q-R_`SN@QgUt`#QwfP&(j4okfgf zar}uBBz2e>Yzn>{s=h3rk$A-LTM8(Nj)i}LvbX(D!YSHWpCb-G{iv|&-|n`GX%P>3JOLSNc~wyQM%7{H5CaiF7P5v z2ebUoBbGQ8aZG0vAuaD@B^v+6ExP=90?EW10VTvA{`(%5R6)@nic4|*Gm5k)nUWyf zLbA&o1jXE28H;<#vNfK-!DVhfw(34oZ|_<7Dr5J0d3om1tAqhlfL(eFmjC=`eCFa& z3Vd8pu$q=rq?}Dvq&-*J71V>uU=iOIcxR%Le*F*G^{7@kob(^E>lp8xWid7Q5+%x7 zk_lKo9s`bqg!^6Ec{YRncEIbG#FCYR(Z-j;Zl?Z+b+D+%mF0yb!E zc!g{~y7E0nZm&h%tlI#izIkigXYOxqya((6-_P^eXXG9GxR682XIs4cBv~kGFMt*7`6V{&$jEhrx-;mAa*2nAtxln#;u+G zJaW;YB-YS#8AhL8^@CezD@NrP{%D7JgulupQ?01uo}=6KnPa{(Yk5qn`{`uSlVlln zVxl8)_+?9dW5Z5!CBtO`uxk-;z9{##z~fDCsbl2i<<)RZC-*JdQ|YH!G#`l%h2Gm4!vkHYKBowKp;%}Cfyx@ z$EbGU9Pzl84bE(^H#cWcn!22yaTX_*gnA2o>$SDQQ6~GO;o_MQmcxei1Z3zB|Hc1B z+}Xp6O-Tzcpwk*LEV5!V#5%KZu(l`Laok?u2hco~iSrrr#b6Lc+QkvF%Jm6r-O4qe z3Ad#CWQ&?Sp87L+?*vVIJ4a8Xsjs{?!@Io@16`+ut-9b zZpN;9I^_gE`9HXW&2Y-o?7NS`r2>UO1_1W0pth}xnzp@2gjqu)X$q!qS(__p(!%F| zw#O*(y?#o}_ZnYOXl|(gLj(u&{Hn|A{pF?^Fn5IbkqfBjWpFM$jEV5-V2X_Z0)2CD zTUd?xT!^~g1Nh_%4fU%_UhTQ4jzNUGsa<+55X0FOSdm2Cgk&~W7S401h=8-!6*6hw zHL=LA#2!mo?vY&b*z8Ub(2?F#WK4diR>Kcj8QHH75E1BSy6lGE*3jn>Dqbn0imrU>{L!NCM0SI-D}8Y%PX844&*K-^IhcIef- z96DdQ1RGSN^=w$+do!Az^(JTK6Ac$0^_yYC-qHAm`=g-rH#8%!0&FNK!lvRo3l(Dl ze#$M-Dg6svMYi04k96#Axj__J(2TSnWoU{mluU*1ZgBcPFLa6a;T@y^M|4ZFT=bZrskjp=#10kCDI zu#OQaJZz8gg|Fe=|V;w|@MP0is( z4f5nG&YQnwTK!gn&Lko7*ah!~9%_TMA@~`>?R%|zDzW}n4lB*R?zTHkPAekxhZ{Q| zBG@x;s;1I!8fAtmUcUIu7|B>$WkGO9Y&e5|R(#b14QD#}>PoVy_kw2B*vgRuhZPGC z1#7uk8qL~V24+aD1s8NE3fIauSF6MSV3|Eq`YOzFcfoNXdXhiwSd`k@>+QHf--U1y zSMpbwzg0-Lp|}xi3P4DhraC~uvHsu}tIhT9kxY|k%qy8=n-4mJvx`4dTxq65Ue_WM z4C0pXn+`~1HWCP#wYn?A;+8Sc=-bNd!H8h71M%l(QT6HqOw+)&bnJ@GXSPam+GY&{ z|J>P)P=0P7@mNuLA0I{__0eLMu{6c^hmQ`ZdOheG!(ytLyx8XOb{l4p` zBy12IE=TyFZ41m`B{na3SidA(5u-SAcGR z8upO7q7+h!P+WUA>xv2cGKzd)vDvoV!RjMy?txi*8zBz_Nw;-LlicU$y=|LyJp+bH zGljoM$joB~_!PvuOm-m(t?Sh#?~x3k&&t^EXS!TU1Y%g~!%Mt=naeCV?3nQWu%J*? zK|y$fU?tGasBn$>6Ka@VcuN1pF+MD;oQmn7My!9soR-il;4KDy9YW>;#$&?`ztas& z1tKdJyUWU63hR(BjxKbTGvqr0xs3$tJ*u@pIUxc1ch(Y+_1}gWZ9OU*3xZSCyCZRs zk<839&dV;c@?3onvJ}0@E}w9)Q~2q7A1ZAU!R}8re3-gpfYCwR+NS&KG}8v0l~7`S zQ`tNMl4k0kC-@-z`yz!21|;Fy@+Zw@C$~o>tPJwWpe2)41zK-BMd8J3WH}398)ml3P#W$v!rkGd_RKh*#g!RNcj*#qLK%ssagSE?2BFe&5xhP$I zRZHp&!1p48YS0gBC=`?rTXm_3^q1f}7fnqo@U-GcCjgbf^WBzcqKN)B)rmJvEgVWA z?z4fbV(R&9Jk_4pUU2h91Y6y@8R}=Yd&iwEoiaDx8wL+$Htw{O1V^Ci+M*6;6;L;( zuom|!Kt^1CTrEI{lrL{*zCVz2#t|O1L?5UbJ~1Yj&MH6ROFovS6Dzg^XpS8*=Y*I0 zd`EA`^3`iHABm(I^81m}f58#vQ;%Ab9*^mBf>bpHId}~=k96;)k^1o&R*&x%N&zbI zg*PgFZE~VMPKVLC6jHULaXBO=eZgB1SG_a|qeG|s#=C8J2b9A~xknjzJU79LsHz?t zL3dXN#UC}cBP)35Y7wG`&1|HTl=mXxPGvPc!XdW5& zX&3Hs%r1GYgDZ(aU%Y8({!04GIKC4=l9F6rEZO6*vf&S|G(Tx_V zkG>6lH%Flx?JqxB%wd|j`1yYt+nYJc_K)yE6jy>sF0LBwJF6zXG{@^3G`xNUXycx; z=>Yf1OmiH&fo+kgPVaGHX>C`LwEZn5BCfRewJEl7GWb3cG=j!k^UO?L#g9Uvlq7C? zbh6X5+P+0=48ZrJPJJ^htS!F&fmWD4T}OEQ%(k9yxnSqzeBY&_^C%OXnsvM5^d7%x zd!;rrV#Xv~dh{$$K~$eMns_vLSKCzv^GxlF>YGdyX{dBS-;Ey!MG%Zv zSX_8x(vINtI>b7NsWka)1bx>G4%NWr#GZu(C0f^E5lDj1w##c>NVKZKU zG%5hv)3m}vD0^{x^_@{dV|KPei2`2bg?VVILBn5$w%=!dPV?0Hh9L-h;;*yMw)La5 z;<3)VN7k&DRMbxper`jK~lNNBIaBM3@ZytYgS^ z)gJmg8eM^aX-gzn&DEg{5Q9m3ECUTI-}{dltGOSQlz!4hWUi5Y$z7xz;MZ7(M8 z$;G}pF@0+Ph|7KU58k%#Oo)KzijLKu*u072(+dDp>IW8#z3PG&-iC5B2VdNceYk$N zi?x0{F@Sl?8w3~aI3T~i2qtFBduMVFMzYcxRN?4yfNnQWO?Nll48yw!${odn&ze}9!#v)5kU zIny%h|2z3Fp*gBi0A`#2DC7L2Keh{J_az}BRotdm8uG2bI+AK}C7zjNfK|%PV*FL` z?35McTRg#$B$xz!f~c};uug+#YlmA616xQm2V-ACMd#}|x1^heQp6dv9NV90L&TXm zmx9=Gf-;k)BI-}Hv~i`x+%g@l$j%Z8nFRIKqs?n$PbCh0P&Xt`FzDBm1}k^jD{B`S zL14-{`M7H%Wk(6x(lOwa@_tr*-dmB`dq}bj02y>PE51LaG4NMr0AJ>yH7y2-DW(qz zA&zxkuAZQNg;(Ui!_=dVH+&4u3-{~n&5I5`@jW`>rCPi=fj`w;8+RLNj;#A>5Dq$) z2Womk;DE5tk`F#l|)T?4vcy5MiqZtr%=I~t{m25Bw-IsLm z-cnD*gN`l?-POwK)!V^?;RSay>FCef5$LS7C<&2890+d)?S3cBL3Gdcc95T@!%kfY`miV*%BOa}YjA7#=bn zr}awAO{<&SJz)4`(Jk#fgFWMurI@V&mZJC$MO9dg5_m9AfGmWFPi3h_ul%!~RJ$HA z{e>_29;WpC&FOGz%~o1qBJ|-MkeW0kT5HE6=nDDWIm2D9RqF;ZD2a134bL?O89 z<{Q0Rr+rE0W?kfrNL>&uN(Zi0Hah?yHZJ+qEIuZBi6BpkOl4d0hXbFW?R2CFtt`0| zhV^>SkIs(IHp&;@y)t&HPaSax;dF>-nyK+McoL08cH-gb(!I?xD2lUvM{Wik8e@J; z=qb=|i@AInY>jO)Yj^9Zo}OW$Ec0_sdD2~q-}W^@*5is^+OrM5U&zi9NM>HE5pTjf z^Evew^vCYbw&P@})a;-FP^KM14(~Ep@(g)a($!}ar)ru_&L<+BpI~%X47r?U4)sw~ zX|m3ts2jo99SjRy`S~pj$0h*|(d@5&gS+VIdHOxFgcm+_>1|B4v6Qh1nCXGKXj1JeUa zBr;3(PFKsT@*Mh;xFvp5lFp}2?>p6YIHuj{x6w`re?R~F)uwYO$raItEY3H|IF7?6tEYUqu2n64OU9R*z2_AV5NqM%(bo=Z85&eN|u&Ufj-x`tRH! zo{-OC8l9OX9~ILH6~Z+JlHOhYqC&B+p1?DJ_`2_>M=mb^*{rBSp_mgzlw{)L$irs+ zov9PPmdjkDD6?b5aH>G%CqyDzBMB*I`ww#l-?0XpYDb`ZwNp0FMhVAW%Yll^?!C0@ z97lp;BBkSIq`wvw41^56RPgOuf_?1hEzUp72|C31l(MI8xo-ktgb4&fS$7lkqAdSI z>CmNu_g7kZTj)7xJy}wdSZ$K-@ni~O5YDkc2A!1tOfcrqc&-KmfwW$kGYwn6ewx=< ztFJI8VuoH*bk3S(>mAq)K4cB%(&ArsD2_?mjw`cUx3<}KinZD%$VbmMV+)gUiP8=G z3X@rP@y0^|&M43w?rtJ||1VnDKhC>yb(*REzt1Kf)-w zeYj^>4Iy7pu4!7TchOxKdDJZ1JnA8J%u1;fLfkfryX0dR{>53hNRv{|pP8BYsJO)- zTQQi$Tr7cETSH^QU+d>}{gWAZpR(++OeOWt&!heQOw%@I!8s?V&&Isy=ve;W#rXGC zp?eANBhmMqmZQP9!l94|Jm0UeKT@Wr)5v`4_u-zm@?we80UVO{HqGE_%;)H)|-IDmqAI8zWX2_>c{unRU^%qXHK1#biyuc8lutegjc35JxpI}@Lr zb@05^%YIGBd+!7&%^s}nEhy!`^6Opz1W@b0C-N0;9v;Dv#x7MvS?Axx9XMt0`)^I- z;NZBeUkFRPpY4tdUvn*9E}Z3cM2M!k%v;&m3;{Ba(`#KZv3e)cptnmMCi6cvSoym} z^+X*rsA*|4ZB{P^r~o!=AY>_0w2~F`Ta9acV}&<+dj+$=`c*UniyPyA^f%qj1r@L; z=MX3Y?{2@FXPW7^0O?Jvkcn?`Gj~Znjr$ca0E(E{d2<=OeM;l%9axXR?n8=>0A|m% zFr@L27>A;u;HyfrPJx2Ecb^*??)YWNH#?0OQt1HO5-L7CV0lqm1V~5*98nbk*QuSe zPa;hdOgezM!_Ltm$+9o*iMvCTsp1TnMW_+rLr6^+2NA+ZV?USX}7CVHL>)p93FXu}tAx8w81$QEa z0Qm>cMYyAWtJ8N7)H2yo`j4o5eV**F#oDj|5L0E4>@F{x`VY2^I;L5g0S6wvgv$%cEm7h+|~$- z4LvH+jai=nVsVFm10|j7pZACLfn4Is5lAuEhK>8A=apGH+FcAPLKmMnIpo2O^PuA&dLK}FF0@Bn0R zRt;E@E^~;kk3+j7jTe^vUCjOvGS6kuSRnz)><@0RY>~2iKqaDxjaPWW8ezeHNS$N- zvIX9 zcN}75n%TFpKE{%f`YCM|8WV>;2o9W%PCrUL=uEOsHVSXFlPO6Y=1>N(&VHFC;}7u!x@q&houAf{`1`o{(wk(C zK@Ms!-8)tUpR5cSzg0XF*D?s-6Hh*K#Y^42wC%WKE?V&R6XAOEb}t9ilBnK(HGk$A z2WSk3k6V^Iqx)mAU^F59j!%%&rF1Wjr`!(|P6HznF7Z1hGYKjBnfgtLG`mqSA77#? z`}nMoe`jXn_k%T~P;#!Cb8wfX~%Cu8rN?Xk05`CXOc?KVUg;~l&C#qWEr$qRu2UA69 z`RAral+vc%*$t5Q6`AqSEhkU=flpFC7NPo3ZuJgp$3=d9L#F_rOoe?0AQEM)_3c)@ z49DYHy@>KK?%z~&*@`#*<~HZTud8)Uz8v_JMj%abm@@6Nn0~z1`Lev*0s1CyZn!+h zf~fm7kiamC31BAwG<*jK4G8ffh^XN$A=7f$EJ6WilE8!O92Jz;P9~kI&*=5cJR7+G z42_vM=Mhwm52HF?(~_(Qna4MlPM=1?>}01Su=~sOD#b!eIyw}R%P*hHc;Kt^Nc=#l zY+LeG!kme*nJ4R|oNM=Yt7W6uM!?++YxH67#%v9n;avw@y|E#TMD#X*$@(Y^m!ZFf zf8}6NTC8&dLVWPAN#H-T)<6G90S<)}u$hKAn2@$9(kfgf;2`v-mv`wa*>eXM zW0Pj7;(=HY2ofJk)I2Y7cALyWDv|ibJcsT^h-n9tkci4tPc;xzy>`^P!f24HU#EIq z$(s6Nk-Mi1W@5ilW^)x1&e3d`75}QrL^QV51reukV9P#pOlwBlhP$BW>9L6*9n4x~ za4@;o4YuBk&3)&IwruJJNQQ+c-9e7VZQrGyP0RoTOT-n-z1j>%0&vat3h!@Por(te#C-R2-H}lF*Ef&&GvBgLrrOL1UEeQ?)r=zjRXj>bb0qe zLbp8SDi!o#L->SLF;m_+)tyo#K_*D^Mz3^`-cy`EpsmpfJV=a zD#e?cKdiEPqJ=k6wi-&cMLu#@es z(A1jWhX0=9{yn+?=g9{ez}oiZQQ}R!5`;1&|NJQVKG!4$p?H%%5fmwgYi0iJ1%_GM znUVT~)z++V^;?bnmbhd+*Rz@H?@dBw$HsgsD#tA8E#obbNh>Sy1;qDX48+>%+t|!h zJH)Tb9uI>rD%&O;>-a0Z&f z-!;^7j{-2queXuDxuYORYfXL0J@`p)ua>I4UF%U;_w0zK>P=3kh=@+|#_cdg_50%T z_9?wRQ3Z7l7a1+5R6~{*3a>{f7v1o61HH%g;#FnvI z`elb*6roeV&7LI3G`&&{ToLK%Qf(RSGU~M4JV8R#Qw{H_23qbQLZ?)vMKAG5Kt5T) zZNp=ZOgy(@6n9mXtMOXjvkk3(?s0RVMOseK(RTC|ONSju2Km<6PfU{~Or~NKd-t7!RQc{%fy_sJ$ppfHxZ`?jP-a5HGKhs|d(95Y~o+Be8 zN5)whu;HOV$c-lNebKoFmkfNj*D7ILWpYo>Smo%ZDED_~I>^0^8v~20rZ0n$jrQ*y zgz(Pa=lKY4(%43-@*LyS8mCs$UxtRU<;9AAM%p{rgFR`KE&kq&%MrX-7>;mdO7R#S1s7nJFK)5Ed33B1{ypNRje3?*=QFZ_kBDUfBC zjw3yoXDqsX%(k=ZlDvB#Ur4Fu&|JdM{ZK{#Bg{b%c{v+|8vCpEJQ^<)_V{zYEBA6Z zplWPi6M8qATji5<8DK;?Ej@sBKQXA|<(!cEbD(1V`& zT#Hd6%|t+1@XY7d7z<}9s-nDpSY6fA!;8cnttNue$)U#_MsFgnwhbRPRcco!5&SR+ zeOr&XwbP91%PfOc4}K!L(XMZ$DL(7W{;PjP?@z1Hzj7F&g+nzo!Vl%8pu{gDS!A)| zZ^!ZN8Hidl6y1z~(i{8Lozvuvf~qe`Vb_a`OzARjKJiX{jGq1@a7z05$-E2L1fMH3 z7%wl@KH6Vyw}GHt0+gKyL}USrfygUw1~&M-86F34v7e=+P?HC~vutgyw$<-!2I2Yw zkJ5`B+w54ySCxQXF7WB~*XHKgVO)dn1g1*fZQW0axTaj$pD;Z#vbZ}h2uYg8idE8h z_AJk}!xHWCc3v~UxD^ncQQ6u8YYEUOov!ekoKweqASrRA45OGg%KBcT=%t>9iB`qB zHG%*eyWKG0w#a?`;BxZyxVP5+&F-)ZownOQo}1H`hGL2Rpp35eyp@X|hy7z|N#5;d zGbXQcwOLIEjQm+~^&6P9m}MlTeQW20L*WF47mQb9FA9?l#e9|_Er|tKG}N#&Gj|)= z#XkDBF8%QI)Rx>F>8qs&=9L8nkM`}C@a1rBUom$H5T$im2XG#%1p}yc^EA@9%Q4)` zXY)v0{a=oYsj!y#`?6wPWVZy}Ve=ftAuDW)#1aMNFOX!zuZmFa6>+XJp0poQUGpf! zIWvE^tF3-1Dw+v6cs2t%U-4cIX%WQyZIrFK189o$6A*zKY`x&CtLtbKn8-e*q;A20 zfVM~SX|@7CkI%OCH97NV0JDico^4dA`9Yj2K;QRG_s8p*<@Q>Q2K3t7URG>yTm~z> z{PjK0Z+9jGHjXwjCQx1V-pgY{fp1%%7|zm>NlMk`)dXJeGyB`mA_0)Lq`V)S3LL_e z*btPZ_%&{vRt$N=KjjKU#qOH@afP@_{^{>iQa2TW_q&P@0=@eQ}pi6TEmt zD9*&nYVpCY+f329NbnT3l9$}qmwEzb!XAuPJ2|tRW&)-iVjg_EEw<$S=stI^m*ISQ z3|?mDwC^TUctzTLOu(#$tz@>7LIeuy7|)jRtwMH2)$_x&*X zyo?#w_w&wQXMD31r}2?1`L|?Ts?~;afyR#1)>0=Wn#%EJbmY1nZG z)#M3!utzS7HEzvW{d-SIeu>}Ex~{ySHQNqy(lPn#b3L>|+}@)^`HI`H!sZ_=_nH0To;^h)9<;|fB6=?4B(_$N@^5AR$9()wWiaY9 z+~bRD)o1{#jT?GUMBs69^=1-3BXZ%;1>3;s1}qzq#eTs^dVDqf-A&U;*12s_P|uyv z+n9hFNIKuiNj3QUTquu4gB2@pxg7fE5$F}iD&m}K&gS9%8-ou_?}VxVR(tC$Ov?D* zGbRwF#diPyF!q)~ajjdsHWnm7gNEP)2*DEE-8F#(cXxLQZovWs2p%K^cXxMpcWAuv z1{&xyS^L}X+3(t`PJLDLM>kb;cTE}3Gsd{bb+bvGKOgK}>!w|goSdrK4s^N7F!@DG zQCOepIP-&FgWoJ=xPV;Om-Yl@4E_#VT0tf;JAmZ&jBm&%`a;a`rL@Ycj_iQ@ZW4Z} zV=)Rb6Qhj7=*?{7(mz-~k?#E(t!|zuuHAIN4tCQ?hx^_Cd^MUl1s#`)a=ciX6086C zo8`}RG%Y`_N9l^;zuPl#dAGAvM~m6I7HT)ovfjUmd4uPF@Xb(Wwo#&lG>5t=>7)Hi z`|^B|nKhWa?g4D#Wh$Iyf5DPE5SDPgs7P9j_cXti(g05eg&-PGu*p2^{PaIkb9o8` zQX4Fqs(!EZM6{r{26>BXYP4(QtzB@!oyF?w{-dR%@j9W*gAEK21ifxHG+;EKQ2ekbr=@TFlhiLpI`kayK5GRP^+4EfIwA~QORUhZ#jZjkqAR3B6sPv2$=`DQhdqaf(D zvjJz_NY;-7t`|?p?w|aA{xi9%coN}S*H^0jb&C8yQI!Kmy1*WJS&YiQt!OH9er6873YsIi*7s<&Dm_28E;{uhSJWPL}D z$MGni-{;PG`p*}jT#HdNKTE*+>4$H%Y0 z{&ZBCJ)FNmw$fJr_-pOqFL+nG!ve1EuHjM;l=z^&H$bD_$?z}G*#EAagiEzQw4KwD zp^O5(6a7fkA9#dAO?E9z_LhRakJ{_&a)8yyavI4(gBgS<>RTN~@c$)hMX_i%bJN26 z0TZlpdU~1K&CUZZ{eWjnQi{b?u6iaLUL+p?o_b7oZkdJY1H8`W3X6CT+B%yx<~s1| zSzEVv=|^Nh;U0Tbe3W(ZpQYIf>9rs>LZrD>pF<{*U)_tq(3~;oWMhqqyV>_jgB(&cplX+x45av%E}t|Oqx_SI}}t`SN8{oVj-?jZEtOinp}iL zDXV`pCwY95rSnvo6=_dWdED1)MW=J0IKcqFm94No+iyVW?}htF2FDQ6o;R`hX;yKy zJg|A*xw|@4E^L-{3GI~LHDRW{!ryD2bBLm?5;od(_;*P7kBs-<0K#bC3Eo8l>SH^f zE~p!PKrXIV@pMXtU-ecg&Yt+jV@Q#s=|W)MS4VGeH;c-K8%SJiv5?`kSx8;Wzuq|y zj19%>cwP5DsY8vt=V`=Hp310O+;u1vgg-J8nP1PA!~-0Fvql(h^cm-J^bu*?IHQx;e=^&%d88HjSaCxC|HOuoY6fZhOXDAtm~LF2_ddBxb;Yu5%3Xrfi30IMd5b9kZ{WGJJg zl(f1^HiK?Q*l$O%1O=!HI4W{-a=86@`i%Y7lC>X5N@su30JhBn7Y@MiP#$Od6rIv< zV5Vr7ot@|pOJ!1K5v^B_sh(NE7PE{Al!QtzN zMpReEYd#l%Q{~m)yjt&}GWbU^!2%dF1^aOzy;^o<_*@k9vK3~|rMm0FoWn8dZpx{N z?oR$+_n!aF6Z_D+3`UX@1p*#Jfpu0 z69q@{0r=C36W(K5Y4jKF<&FI6j(}boIpY}KC~&@UILGD11{7?CGX>w^0;+XhJB;n@ zL`dc{i?%@Fi8n`rJD3T_@W8jSm)sm9?u7vwNTXe?Ts|awOc6vp1Bp|FX9`?)%eg(W z@gr#zFoZquQAz>;C_Jsiyh^y=C6U2bS*!0aK3a&3f$(ts!}_|fUM1(1m-@oNDa)v%7?Z3uyQq*>TF`#~sHS3d65vt^ z4>zrXYWAQL^7=fhagkUhk`U7C^gQ$fdQTdJY#vNa9-o=SLQ^Oc10uw{21eETm+V?C zaxJmB{b>0!tnh+uY^*pQZeVO`h$8O0IRzDV;0pH%LtJfM-?M-i*H!_cNrv6%6=Zi^ zJ092C$Z6(9(5D>uHII8{?h*h&B<-xu__p~uutB}wF56Bt1)a>d3}wU#`8=524#Wt4k+KZ8Fypx1 zV3&{t%euVHY2SaU?K%s5wO*tgB3Rhcv(z%S(+Xs}E@2XSulUJ}F>cO@keR4&FE>}_ z{0#8IEaH6&Ia=bHHUXNB4pdw1ZhUTGE?<4CY>N1;EhkBzW6=7IFU-&bQ|p;gPPcYn z?{O2f3fKX}V|156V(ymz@oH1wH1&J(%gp2}Hu+dJ=_c{bdnsRgbvIXMVvXcCp=1wF zD)wW}QoXWDri9&=2NZu4>DuKMU!~TS+7Yr@QY^qd z0({B$Z@yoUzq)(c31DCZ&6~O9U!bn(L;CnJs=Wahq8NU~w<}ck6#%}8jqYd~2(>J~ z#oVGI6HI`OIXD)E`K+mkQYBD<`qgZOw`BvpIsar$1wWuC?RNAYZQTk^c9Qr0@2Q6O z4ru6}O|&QXJWemAQ4#uIw&nG(ej3Jo#+J_MwaXZPMJ}C!yl}bH3LP~+>XNxXT42Lv z2Yz%??3zZNGTrRa37l~gUx@}A40f#K%Zh0RI+I>?D~fNFqp>buT2D4z+G=@lVt_-Z zqfLXAL$Qz}3Rj!l*7}JIbkpC_#K*=8vgg|W+<3G<7Ypc1ae1V^_zH~%1E@KV5umc& zgncwpQQKcCW#9LzyaIG~VDgZD+}zrC5x!Yr|JYTYV+d(&q5U3UhF2+U84Pu=xQtBZX#&8B zZ5v#0iG}D=to^K%=0w&4k_Xhppqvj$=8@Dt1UG{<-Wu(2{CznA2%=BkhmkOjUGzRQ zcSMa$ z_TrAr$i50t`x4*M^P7!cRnBcLEY_ISJ#cR_q)qgXx4FR{-&>^OypFLKNjPct`#hWZ z$gj>l4|6=?_gnr<(dD_$DUg?@QUuo&=ZiK9KfD5>qaRP)_oRw zI+kUND!Uxorsme^Fu>)26wjaJNRTUXBh=>|PPNt8FLs>DyH6mvo*>XzIzwiDhLi#=c*@div! zs%zysy(&5D!>yV~VFUj+z8ZV&sf5=$7n(y2PmTbfTjK}07?3m{KwqSM0YtAPAF1Mj zFmfm!Yup3rJSx?8(JGJgWl5I)sh{UeiDZ)irouHa_nCaO2b5vtC7T66-VzUfnl9oH z$WDtPV`65nSvtjpv6*cDypoU{)uH zKx$<-cZWz!C@K()f`wvIWqY1Spi#-e0oujqw0$?WH!89 z?FQ?H*cX*^9S+U5BgD8w_PkM`u~a&6+e0*cr)60WL#_fDCk8LJiZVhU#@g2lCXFh` z1YuG0nQ!=`%)Lh~YNoTdSQzej6t&S>+=q46i`Hpj{Q6%HWD zZOf@L+Iw~0hMd{r=z2&!UcsPN_8bA{s*L2e9<$P5>d-RkUag#BaNWfvPZ+YLCeeww z(nl6E*RbBuaY8fAce~vcGYlDs=1D2rcptI*ut4|^t=@VZ)T05Xrj#eST5lSh^Kooc zn=a{1i>CQZGR_GnH@DuO!)Sl{19eG)_v`}d_TG;}ibA!tPNRv%g(4y$8F_74qkr0iecT}MY} zQ5AnlNKpR#*;sMJ#{6`^F;tiD+nT1$Eug|kE`88#a#(RS(G@cZ`B0`)v&cQ2mEInZrQJ3 zx9lZ9tY>vrHC`ZTOvcmE$+hYRroVjw8Y4eIj1&2b+;rp}c-YP~9Z>CFn^$Cvo$ zPgmZLgcPU%KNRvk|hV7%-C0j8!+`gH$4!$9MCN^0mj>Dxz{q?XHi3%}lHH$w~ZghyVX2KX-? zpmrCu?>npY?q?ri{oZb-bz+;(UfqH5sr3&}^Pqy3pN-V^J#_TYCkGkL0!&Dwr3$M*)|zb{dpBZ3 zuyABGOcLJQj%d+jwkDB8t6Im1(S0Dv1*QZR+mrRK-+j~vzv#OgnEJDGGZ26MeXJ=o_+t)Sv>o@diZd62t0H@miuaoTgJ2xP?YoLVj^M8OCw!8D&PH`F zQ5v$@hsSGD?)8gd-m){_7~v_v34Pf8h=-s0260SGD(=nqz}N8Pk+@F&BgL7N0E9T? z8Qi!aAHx!o-N(y0;@Rg$7_?*f@60Y=ooHX1pVEABJ6?wd3l$HAtI$OS{Uj|~VnDDc z{}{*wDBr*0Xm{AY{^QSuzE+i5XNLi`dEv&KRPD!U`9b&`o$r(FTFX{*$r#kW*M#qM zaJY60h?f5&9R2r;?tc}p=T_U)SHpb(ahiCPa4mrdQ$Nf5SAB|7buf&t*%ES;B9%5! zSC~p^W^7c1wT1E0rU2_O-62C-vi-+UL;EAq6x#WE(S5qbxu8MDNvJ2#IS7t(0rhO1 zocyW_L9ExBgV(NNt&(@W1}ao}=?V1b;P%5iXdQ%?aEZ()7?Y3pgHzD6w0BWv?=fwyFIMynon?&`6I zld$JRZnvcb;C3P}@hrgTHlQ8%RG53Jl8Z;{$#Wmh)jSSL5aPhVNrvFQ4{xRTP7u-$ z;dsU5G{(039oV0j!atm3f0=B3q{9Yk-?Za~PKCG;aL$`_hcH}MV&{9Y37Bi`2DJN4 z`<2qL%T_)evp;0jLu+y0n1m3k{hP_fjxX$}c-HzA;Z*W?{7n(pfe9oW<@^`VU1bC= z@ez@{pb(vcpt>Ft?EZM?Lp`6}D;osZp>NG+%|*?e6(;CwM1=gT>Wh9-9>?oZqUH3u zNLv5Sdq$5{Z)FpyTNqo;K!Q)Ka5d^jgtwY+7O>E|U-?grhs9LUJ8@$oX#1j|x6%Np zr&9nOl3-zEYKg!&6DB6U>uUv4A%G`~{d})?df(%BDFigIZSHM*VV2Lx4NQBDM~Hj} zYS5$U4Ms7AiIrh6TBb8JbaeE7wucfMOOuUxalMhWVs;tXOBwt7Cv}EAai7!HG_b4# z$ID27*y8`xL2pzL66lZ|-S`L3bs$Ix-{SzCm>VtJ=rANI+V6<~O8r0SIpWK7d|^!R zc-FeB^`8O$&GzrdwZG6fRcy6fQC+J^9GtR%-LI)O@~q3V9ALL3D<#zgB>yCnjLp@_ z>=tp?LK5fa=a*#vQXcnl4;2GyO$w7;z&#-)>xODQ?c;hwarI|FAN*UUZ)SFu;B--1 z36B6z+Sayox!HwbyHwOBkR#*Y&Jl$D2@+GHIxs+Hn!UDy&QyD1=kwq*IX4IL{rOKV zbwGpwI7LA6G5xs!I7t{MJa_K5h=|<$a_Py*DI&Nq&UK>8q_i}~;Nal6_;e->4UJwL z{s{y)d&?(&g%MqJ6K}_pQki2aZ@)^1(SDL#$U_vSh^&KAW>c8}1H{D7f`62_xVa6@ z9xwgYLBy_kcu?=VB?v&)^_&(g|{sH5S|Ik4Qc| zI5hMurI^Jf;^9gD9O!yjgHa0GkRnGpx+vfs@x4mbL*WPS1SMSoQV^lXjTrgyL0@fs z2-FuE=v;}NB1HTTE(1goPwH$c>(y^ak`cmgN-^GNGivAY1 zP5)xkl-G4zW11cRONrcBj;0?fZlh2GaCZKUsPR;=PZ+RYECyT;5Y2)c5x1ToG!zu& z|EUR%w3}b2;xD)Ck+ra}iH+NQDU*Wdu9(VY{i8ELbnCPYvfetJET9EUFTRN(cT4>x z6V&y7oQ1q*i}R0bPa7XMqF?wYhbk!0nuF5h z_131oyXA8)oeBKIawi@SNa`kX2U`F26m(Mg>0kkM)X0mrvNm6J^6%>+A76y%ybOf* zGf286IbB44wZ5bBr;rVjMZ)7cd>L#w_-8aDwx&q+Nin<)6o3UGVV7bLm-}&L%3@8| zN3mRW)}Q+7y<+O~DziJ0guY*4@wsjWp%HPIQ>=Fv#0OAW#x4T(S0OMkUT|LZ1(!vJJ6Yt9o$p`9Fv{Dqt-x6<`lK(?2##VUZ5XI9%sr=vK z5;=!4B>)ZGDK-*Kx*7Nd==Q*PI>p7*d#}V;@eYx_1ifZwi@jzal`k3=xnkc-7H3y! z>+IGDxTF|LLscpZvz4F!4-=*^a{LPbY?)!4uODdcwJNgn9}XKE|ro7>`$GOPf*Up`KM)Pd!x2lWtXM zxPZR+W8VxOqq8CoHvIoS{JBE?NZ{;7Yo_H_g%MDLd>9G2I^Sf&#GqDI0q)cArUd-6=pK>jUm0_@ecwer>Uvcf`2DX1F(GrLGdl2GFE zOxP42DX9g*2g#Ew<4qj}I*ZmHKi{uSWf#8!zj6{qLV?>?;>PM>cMwFP{Q1F!gAT=G zZ2(8eeO!NT=_kb^8=-X^+O|-!9(eRiI;2fzL-Y+-&v*L#Z}EPugrj=;!BPtE>uQx0 zg5K<)@2iM*SJ|cQ2<5)gupYj%$yLo_ z!KB)3L1XkvbTfqjV0Al;4(#ReXS9qI?s&1`WTgpeg(;`pzkL8lF~{es@FgZlY^Q7&MP{63gH>&2Ka@bEB;--9RTno6Z}wRZ5rB)2yK8$AM9JsgotE zxiY#V+H(?W8zrZ@tX(8y!3k(S_U?~?di(y0mpN4eIs9YXhjBcY&kY2L15v~L{`b+o zBq5CHS9j=XRXY+1_o+iqt1wdUVKYgWXtlM9mkDi3*jd6{v>g=Fe8$4~()(hz1g%Q^ zMw009E_FvxiGxpuCIC*MVoJ#8u>q~s%{w(YF@od_ws&UKnz=47?DrLtPE*-;e>3%nD(HeG;DF}-oECUqBTc-21pAsugZU^zduI5tu-9C-rQNS z%)+k5d<{Mw_#EuO{p2+HMhF9jOZRGR*K}2y2|lHEmZC0k*)BUDVR24n4`?VjoSqtF zHl^Rgik*M*JH(MYaYrkq3F?<+3d7sP$LqUZlB)3a? z4^g1IkvfK!^#?T}XagaP%VxoPOUM{Ae!})(n|}3^A9jnwg=rhH-{%i>j7%639)ZU- zhr+VxB ztbF%fd5_O1UgjVJlXMXZ5@^+=DJI#|kFMIaM%`=ns+CxE2!5X_-`m5nLH3H@{(FwT zGm2A6EivD0I*;3|Po1mHh|g!#iwPoeVWhtutAYp(43c)_3?u4DDM4@u?=5_=3j?EG zaV$O@>%j)4YN{{{UOMn+GzR&EMXY_TTa-Gc{(R>M7*z1xDRoQTM3^{ZNR7D( z%#yU!idj%+B_Zdn||bw~_5-l9|d+1@<*qDqA^U3U5>Lk~~I z3&JAm@uEWJ8)uPfvtUGqw~ib^f|KjZEnZwA_kVyk)CP9Dy*LteT-)Si12$>o6yh1V zSier2g;Bf|25tcsm%1KcbM8yWO8yi+Vb*J`;y4TFqs*c<+ls^5Z$$uKjl||dTFt??Ctexh-YYQf{4iG`oBd$cirU&Z z(0cm8=l{@lfA>TVb$O1WR{c+!|&83g= ziw3Oq;l3rl(9VYNZ*dcN>)%W93m+~@L<5BF@A;CV4#FPMEcx@z!qnbfZml1P2u zo~zn^jqa){0taHQb4a|Npe^cy_*}dkIrShppT|KpED|OLeCehWc`Vu5oO&D1FT3WK zSvjCL$D=-SLMrhwf{hn55JHy1oCdqqMvW@S?S3T0;}|i{;Ibv36=5O=;t1GR$Br zBxTwn>z6a-h@275f1N~kFVuecQ-EPTQvC{-+iADh4eqky3!J#D+lPv;u#Ui0oOMo~ zxh6Lj@?ZsVuVpf!uP@g=U!?9`oR6kI*jYZ)pXm2(qdZqC<=LgynLe}%OH`UgqjI5> zD~cPHFB?q_mcHqWA^**|={ZQ%3|?u{!sXFj&YI7JZRE@ar{y3PT18K65g+m)`0^SB z!v!bFSX6=Azh<5rH>2%|KhAw&3244Evf+3!`j$i^*l;>?J%;$DHr5G)a>sYqcjTP< z!oJ{kY60c)S=Djk)DJF&_^!6cU!eFjh3$>wcmmBvlW=GTLh@h!O8`2D5 z?UNVsgp(u(Y|N!NMKSjFF4c=T!MpQs-;5GR{O@=Ugm>Ytm){Y88Qd1S;qy zQQCeVGOo0-_#sE~w%_OZc%>{wazbi-?}1;wdB1~rF17V)wf6aZRO-yWPNT+$c_2N3 z+AKVZkwN`yc{jp&Nc(-$-{}lSB+Veu(mQVwkl>sh-%Ea{zT@9E#p=U;Hli&p5zjJY z40y<@l@$v&N6+a>b40(FRMmci+b6U0V>ll?K0$S`rTY1j_gK+e@6rv6fk<8el|*_P ztG_N5<{OKz(TnEC7P1EeGjgctaN4)~9S|c{G~&C|SPc7gyb5$eld|QtnsCnZC9(kY<^wLz4u(Z%-=h~!WeUC*11_32N05UNlL1$ z2EcUAb>{w~MR9{MU+GP~2aCg65cF-UUYo>!MMd#nAAoyooal!OCQd&hykoFRKLLE& z4=(YowTk77X~ee`cx(gbFelAPs6P1v&BE@B7f+&sc6I*aR087k%A<4r27IBE@P`B5cv*TS~`Ok zG_dP+MS|RLsA?9ZNxWZNu^V?>zqv(wOxQCk!$WYu-W@Yx_rJH8e?9c(=m?H*?8qkR zVo2x0>yZ*SN<>_vSBFb;CE7KE5cj8!^z+C|oV=`gCcdy6a?58v;ldJ;q_){#u_7J? z?Xs=qa511iPZb9-y7#bW{TSj-u{gSHvN z8C^*3jbz_-v0Ry=*o%Si>q=?(PbcRCH2xaY}?eobk z_X$0YA9K;c)x4A@ovQM}nkzC>QUiu_gGbikgx%L_%wl$aWNv>2iY&E@n?c8ITLAG@ zewp+LG~|-w_qI>B#>x+;L8<#bE;yo@=wW+6#n(IeD&`YPz}vHkB<8!d3Ey{(Ev*Eo zsX9YVZ@A&?i-XKTC$6OG7LKI{&0qw&iSofL%uvPhRv)N)1v$#+X@JIIQiDx!d#hsH z$h^h7&Um+aerRUM?TNkFpew#;B+#h#liDN_t$1wNXRfU z3srh!&#`ge>3TA}ILxt8zsH9okFTE@XeNP{R!f!b&)+{Nf8&jvhZ%H58q6Vus#k+g z1y-)G`pyQNhGcQ(UA`uep_|RfY1KG^SA8NT%Z`nQek*X(feB88lv7L$7lvu(4#&7z zN$0l1agSSO*7$7RCVquIB6>l7K<{wUe7o`#lI7+4{=U0?iiUwWKs4+aFEqmGXMyjg zne6*6CK%Q{Q-mOSw+F+<8Pgcx5g4J`!LbW3UMcs8Pv!E8-mxG*M3LzDs9Z}SE*13! z4(~3V!zYAr6o>9Z8fw@Xkgk`~REAuWRJp+f+o=4(Ue~G-X9m8P@fD>Sb+d%gJy{)V zVy~z2n6#SRIUR3Mxn{nV>NdHq=rr8%a^1T`ykD#Ks7kfo^jK5t+^}(?{b(HTgn}G) z$j$wpdzoY7e6#1p>ZgD(Mc&`3O?D~uUsuHMbX|w>Sgb>?7lwoTt-dvkvYV!HS!%PX z>Xv6ySr-3VC$?XW?JA%wOXNhifTe)hum=KIQE z{tc3i)vye3e}$25u5mDYG}WR62Iz$-tt4*&m6Px~T)hc>H1^6XPyySYmYe`*TCvd2 zDLGpqeC~T6t6#fysJ}Pu#cr`hLut7axfH@oFGrwR_%LBZ z(T2$~ynmrqB*t9lHQl?AjdT0e?LIlz1X;!Tq|(T|gE|sJ=WenX(hbk*Q(z z*1U6o#a;w2TnXa=tW=_D&IHI3#+oTeRfVQqtXr>5_z1;9eP-eKm+{lIm6b|geO58}I*lLZ1o ztUEKGhE6DuGI*V3I$I{UB6g)EHdoE-G{!A>QB+Tu8N5_~Z&wJ_gAHMNNwqQ0>-?mi z$)CglkO{AjXHV+aF*AxwVi+sKa!Od56i2LdKdys00jib9${+Sq6O1S>mta(zD$!27K zUYj>r>ajNVT+V2+e6Oeo$Qm6aTWe^s*GAa`582Wz?5v_a;^t0!h|=Jx(%rWrvff zRV_bwb^o3xiU0CP19k-MelsmVNO?fTCSB_~-^bNh$?`$TM9Cz}xjj2{L#`Q3fZMm~ zCmiE2qE6-PF}Tmo0qu;_rJEX|EjFy(^8=Loge|(K>+Re@8)Gtz1jEN z9d&kJe{!%`1o0ziOps}>qHRBr8hrcnQ_jmg9*2APxv6jLz7HekLC1HL2vi@r{0S0? zi+q|65awLS3tEB|f4Lm0mKs4h6OjwYr3%k}Q-7SUO_(vU*yl~yTafQ79Ea4|&P+aE zuCq_)Je2ZMov1yWgoAK3Zk7cpG0 zhYtHY;0-GLbMgz=NAalaj^sSHZ?#j9dmM`MOmo-`EY)pId754FUE2MKxInn@6z&ZK zHq_=wy2$as%^q-vYd+B!zvOn5=k+K`=65$`y-0TF%5rt(%B<5gQ;j&WaH#OBxj2VM zW2v!lXmCc=?&q`dj(p0Nm7Knqs?s_YII%fwL!|u7%lq3GkkgHvd9nv@~cDeuy(&MAh{i4o5ma2xXVyWV}?5|6i3af?6gr?sxg;=#xg^5@D`g*P26L^1S zd4SC(E5$f#ppkRfe{J0VR+C< zd6#ESADdM#I+ww6J(p*63a~o;?L+>0iYVqrSL~ybG4CVlxsYlqVtlgwHpAAwi?WOla|VVCj@W_GrKOyeJ_;IpqDuY zsLsceGf_mG%Qg$OHKVxeKj@j5TmT_m!9_hLDR2F3NgNDxxj#i0?TNo%Y}6NBYL&!X zYUEJyl%zMg?<+Ubz5@SI6pQ(G5^ab9*zH=JRx2RhT|q#+Zja47&OW*zZiBfdGZsiU z_Xki&{^2Lf3s4H7hW|<`mtCV=63ZM9t?MppsrF(nX&C0;%ac!Ow&zRfQuXO76%IoG zx&-06Qk@kjnAycULE1UVT= zF&Rpnd6CioVF5ew@V-GR+jn~=iG$JK!Kk;sPnG-RG?uzXF=$W7^^$0=NR4GK%f}1+ z^EMQA9a9ti;x+dp9k~z5*V(&V;T5~DkR{Eft`NoAJ0qZ!UF!5l@ll(^_jn zl6WUiKE=A>iyq6(Qj>4yQlpO-k*KbagCQ_+-M%)(pjP5&HkK*3;JdRE9Vv-7O+pbpbt?^5$N{wY6-s?5H8)Tcgi13EPK4oKEv{dI#W9+T1 zsrnz)Af%63rsp>s`BF4JjFAij4w zT{y~msccrYhjVphOTMSSmg;=lz_yq9vAz1$sb-+Z-6cD#bgCqWoyok}@EVc-S`dVh zh{M_szqcdv`ZwbH*M$pvcr-LQUVV#M$0%S4W0lzUnTkR+QU%njIP@_)j%1VNX}mtX zInIm?!&!nCZSMQo65e{lJJpu)H2xJiQeLqSe&L-1N8_|wO-b=M51UYOLPCExPx%0SE5l-g0ye5B8 z!h0{OUM@w;pIKJ;T<8IW8i9UdI?*#viu+2&A~0XTcwApjU~=l*&+XC%$Zhsx&|u{$ zetR>_yXJfI74s{A!kCZbTGN>Ur)7X~iBp`Nnj~&CKmGT(yME_F)N8I5eGka$isq-T zuye{5=@(82-_PG#cHq2R>4j`!_Sl;5U=LO3?hZ26U>yUdusatQYvm++4o1F3sxyLe zsv6>Bfq^t%F7KxY;ve|;utXd)e+xALwA^NB%32f$jBKUJE9)XbscWV7!|x)6kJh&v zIJOOsxm{?sDg&Uuizo~$M~67#=E z5DVe%z6GXz{v5rn41~y4dOwImaA%^Y=#!(!*=B31-1<^#62JAX;$Rr0GnS0wda-C% zLae9NE#3o(3~W_aZH;2Fv=odtXNr$r^n6kR?8I2)VV@x$L&GHmz8<6uTxms|!GXG@ zv#qo$(B9Kk6-E#)pT-$H3PiBIQD@#71oFB}!T(pyC7KvvyFv21c)wV6?&(%VO3RGi zAYT&H@FzF?Npkybr?{Ns9yK~n$KtGbRX*Y`AE>L~3erSv*d8i?W{22^=_S_|C~XW- z(t5{TQ>m9_2$1@AV88Rd*ayG-rsewXaJy0ClWeysQh82abOX>5^0f9$&m0YOlagmeluO1H4SZtAUA@5dlpu8Wk-N zce41MI}mA?&&tPMXm02O1fKIWTJx_v8 zLL1w>ZzU8kZN=YpQ)kyd^@cnlM?0%t5S_YFWl@UR#{~fKa{7y>d%`-w*vAP3zcUS0%_Ko?+ZSjin*<*Qrwpth$&R{DUs2IRUVY!wW#I;@{#DOeJe@ANAr6F4 zIk$G9+N6rdne29&JPV#doO{e%Yv(jDyqD-9K04S+Hi!q|I$Ecx7`gqBWMdg+AUhu? zxJ|Ql8PY`}c(>m7=vC+o+#-F7ByRTx!^!=(pF?g0%w`$MM@BAiRDV!pE2i@IY=m`W z7g5~^c8c#_5Ed?Tm06t6*g%-%}7>0YbA{6H4Kv>XR`aGd#Rjiyag%KYzb z4%Ijj(l(qq`XH|qfr$$Z{ddkxd{$S9hH6ie0WuvBZfMIDC%6fd8Hflqu+S;G}7`_>4Yi zG(!k{p~t2cxp!iIfIS)fz7HdnlQs-S;x$Wk6+SC9O?}*dhC74c&1{2x{()+TrD+Zm zj>-jg-$N)UyGDL`K)$OWqKl5w&J?jIWR4jtf0Q=zDl6s-B`G7q-Odo9AO{A0Joa8T zf%%sVOmhv znIiIl`557*)sq~+35tf>WAm8xHY)zxVTTh5KFnfBJ?vh}k4(rlt?M?)+B25?PA)=CX$!jMn&K4jPyDfeP zTUonboO`j}uysp?KqmFc{&_ca=#p!zQyH!8GA1XKU3@ua;tS0N$@>0^WsOeXYUFX)mT5*$6dl%$n$_6A~(`ICr4F3?N z7l8H?g_a?2>naj(=OLf&Z^}$BFt)N8bI- z?`P3)W-dw^AMBx{$4DX!Nt{<1+L)xx?_=51YuGxlL#41&H~Uni)(>h91zTk1ljL4c zGCk}Rv8?28P{(snTgG7~yDoQl-vFv>F4x_atCEU7slXL6DDxf3?e1mS&_aaz4DgZ_O>@@@hw`U7mK}buS8wdC zKS&h*{v0xeNUfue4ZBrvFtyYxM+m8w98i_F*XEQgNhoX6I8j@&U)gusxW8?EF{-Bb z`u(pqU#^jq4>@^7v$e`7sRoMOs+=)vU#~4j1Y3hVk)~sw9%+fySbSB4ZV2f7HQfck zF>ArKNv@Fo0{JUjp-tk+kNSr)z_u)~c4`k4=(M1IXANS1mCj^HI^jEXZ6iobU;Q=`2NZStpSU!g4SSfPJxbUv#}vh7Z!zXT@K}K5+!!coFZPQ6DSY zdFkfA{s8z`fW2QpvonDwW4pYs(d9Uf)i51TSe+FmcrCU=D7Unu-tPLu_n64|b?l14 zGxWCj1)?G7s4ToH9D8-eJ2XBEm*>h00=PRBiLOkW*VC#NL3jdZJ{w#Rg#9G@5Ys^p z?&JPBC0QDh5|_r9u1Qk=S#?UAhUFvZRC3eX0h|pLje0uX1ln0t;rBbMZy8E_ z9zXlgEUgkdKLXfVRWqm-S%xglN$?RF61<1?1Qq8GLCh<<>R~ ze99WM5Lk~~Qgb=4=k{B|^F=9WS3{pHc?JlY=t-lNW6v^*JUJUl&NrJdzpS1fFyFfO zh25*Ll|F7n0N;%ym$y}LsX;Q(rUpLtL45TO>vPpiE)=@0Zv?)kiYtvS7d9$9B*|ka z;1)ZJ0NN%c!TbKQBWah68`tNDoBdt2HcBm`{twC8zR`RD&lTFK`b+}$b-q4UXLo+( zq&CF~&;SJ%KX!z7)S!nT{)BW+7)f>IX=W}AXTmZ*nv=#p$`ujf;=^Rndc4>y8zO;l zG~sm6^bZdfJG=k3tgcw*mxs11BB&BeQ@BTw;Zw1?t%D|3jF8CmJ>4q zUYDm68dori?E8Oc72=cN3V1rZwdhLtgN5wdZN9pI?O8BNik)rr!j~_jC}j!T3X@Ma zd*mXf1;0=$a`oQ7LZq@&GP3lns8e>*?*Rt_RfpROhjyGMaw0AXBRRgr8%^|FvW^Y5 zV#jPrkWEL5PbNO1)}aT5uocKlBq@ji?N#jR;keIuN-1L;f-+5mSBT};DbQg z%6!}VVV~An2xDsP9Li_eXM<^OhI%0o78!2d%eYGgss7VO3b5)suykdzbKXv)d?Fq|OK-`=R35 z^j6zLU;mA#Q!u8S&~~DzRJb-vuhT7`z*bUiBs?wSu(bwsaqw_9^T70M^9}*^E8SB5 z-O7>(NHnqKG;VUAil8zX2}dDF+t_J^w<+9wmymLas}l582dS5B3nwEhOXQiw1FKU={<*9 zk{93GwEj%}a?7j>Y#C>uAe+t@afScv-2Fm2gW%~b44U2tlwRU(a5n$Rt{OepYbxc`_PoC%3h814tTVL6OdJno1 z5hXM+O{plGVOl4`)F6R@V1p7G%lFq)4qY3kA%qmN_0Lx>e+|>_d}v@vBW}o1b%Ndm>h*CJTvdG!AOuKi_F;er*#QG zN~vrzcGy*to%&^4#R044%Ixq#xUPWLp=mSCPmti|jg1)g02S=2eADW?CuTn>Ttf!h z@$&1zF0XCPxC>Rb4EdM-Q{2rJf=#r|hl6v9^@CDaU6_$I^9|0UMLLZ=YWdF{4;rtE z7yG|qjGT0YK9HC-eTATvi6bf|DEPP%K*yERU3Td8H=mNCYO!I!Vkz|60O#twFI&z$ zLNY?}OJ6NsxJ8J98f67nDYgSiln_C07WQx(cv1Oj^Z_^&km3%A&U}{r1aXiXT`ypi z!``fSzEWca`Y%FgIIDQ0B7DE;WO`~C4}vB++ObPdoA|+R@JHTxIZy^UZrpY{h$rPL zq@6SEQin5GkyM#@Alh*aXF>~NGYU9T$zdPw2-KwL?GpYx9{;abgTbqeZksJsx7WE1 z^K=-DK{wPRsYE!2MDo_IBWVq2%w)0yH@jy~+VK;EIS!os9UtS~AKg9<2u4f`GfwLv zWVjMb8`uCP#TNS$f2u0pQ^u%Y!=4ifVT{o{=zc*6(nYDq z(V-@!PV zg5LJ!y3$C1?&nBRLQc*PwKgRpZOp&cOi29}q6c0JGYD7-?>ljD6aJ0=_ZdT-(GDrW zZx0wB8>D_YuGAZ>uxy5LlV5A0a7;Z^?8WGc5ZiaZ-*0?EX7WX(cY+?Keh}f%Q~Ef2 zM6elmXSOqBTD?vx6ODTi!+h)|>P(fzew{O`Gh&{x+_Gw0=9qq{IPcT0>C3P0`qM<} zUBtXAZIdLu8a6-$)sP3QT2&=8#^cWTi}EOmmFR>#$oxo{SC{5ae_$8i(IdNW?^w3* zxwEnO$gS_%t8%ozmZVAr99hZ}+3ZFd7CUMIvHD!XGu(NCaU}DzIM*qWg4LmnPXaD% zS1LCB-bZ#*s1MGVc@4kC2)NuXlk=2ULtY){R60eZYRo@`oa8dD z*FU?*2#=LBkVL>>ose;mdoNpk&TQD7`YnttHh|@C!@pEEP|j{jJ4Au5Q|maLkUUHg z@QovfW+)$mTkWtYMuaTip3lFRs;CL$feG*9P&Cg`1Qc*gyj~iqtS^>`3%4Cjg*a1W z>-PJ%EMA*`85b=m)}GMmDs;$U5c%rNkM#D~g3Y6Np=MXB0g&p{>ac%0-lt1H<+odW zIT`jFr1+oodJ8CkMy%mJiKa54&l^TXHMNbNqV(M)1G^EO1;5=WOPq4kKKr|xxKbMs zy8mXS1227|PA3$x>o6I63QoUxWImkXe+9ILuZ?5Zzr2R^yE4Qw)I9FX)?f6tH9*`x zIR@C3IUuMdk?SbAYoSs`{TYMcoK5LU>(9bUBAVTq>`?yfo;#j;E?Xv!Q(9oGHG~ij zo9-2Qf7zj1!K08WC^g~LR;4rZ)G4wRcVo0s+yB|F$_8w%cJ+>Z8`ORvS1ybyp=V){ zFW|KyJ5vQn%$$I7&YrK|cDm6G(8R<0ECt3)fNl;hHg$Eh&q!U5H{@Km9ouu(Nrwhg zV~7V*1fUBfc?DM1hWg#%ls7k{r8QH!)pbO3SOA6p7Y%|r%bm)O=zWShD!7F}ggfGP z8Qr{?I0bDH%Ykhi#gatbH`4uJL3wg#pADdtbYJs3`sxD3e<|`08hnSy3ajI zBaav0?U(}f+AH{Rv;fI4bZ?8JSpB5D4;u`yPw%!t?nm3i##)j}MRp6YPi{AM_;?}mfNAw>aLg?w7Do)K1fu1hx;;oU#> zYt6YBrr0P$EFpI;&QwEL9di?A$jj^R7|#+SJb*I?7|-D04fH0!-d~;J2ybwM z0tn+|FYP6OKdhM!#&2hiO%qqch=}yAo9z!XW=kxhtpKj;!0b*Jcz`&O&=&i}x6lF5 zj%th+Ja>ItyGBNM=(?GVX>0I!f65N882Q8}G?2 zCAxV)Sz^OhKF_=8O)ezJzGxJ>O^p?xH=LqME_0ZSybEQrUDc$Pge{aa(onsRJ7Tl#_+|K#Sr`~`SdimDPX8!y zxk>I}I95Is1o9yqyThpzmK0i5M!F2Zb#!4gZR?gob*}K0Jd>V77obTyd&R`Ke(Czy z6CuYh5flvc=utCSQzEE)c1rW)ymsHl8@#U0gr(!nSHmeo=NmoXtdr+Np&<+U&wAp! zz_bx$93vUt^>r>T;b=VF`uG8%T+1B>aFGw&nm#1KP(dM013vR5hr`&jc z*J<1k+dsef;VkcW3V7+}0N1U}0`4^pKrgzL##62701?F^4Hg5<_?lOVZnL!zM)Fy% z-Z<}hN+FlI+(Le{ZMBu!(c0V0fC&4Py>lb&M*HsK?nDEQL4fd{ zYnO@?sP$PeA;~A0!B#C-Tah8w2X|X;5@eO`$jh*I(vucPJ1(G ztG1VSHQw|k6UzZ4rWj6FIe8_Q8n3~`$z$8}Y{L+cS(5Czf~ii@GJU&F_e%InxOLfT z*>u-wg5`lOAZ^Uaza#~j7D5Lm3M*B>Qm_J*{R-W`Tv|W@@DZpj{%~_pU{HfkOB-g; zO@o5hYHh82*%m)m+AR*`<}q!IL7q+#&chQl(OPvd z7p3SHqr#p=M)L+98=M+c*64n6vLB#|;|$nzUeQPhgh%6o&RZI}(YhapUN@;bFJf(G zKBrAczMXuY=Aje6Ha9&$AI6(BXubJnv4n>6u^Gky-NpyyVBee!ka(}x)kdrLN8i=n z*6PZq* zSyE7|fCLa}ytWwnGd$RqT-dXw-f(~;8NZ>|o}1%|n*WdARF~=bcUrzNb&*XHpI7L3 zUYC{Y+qdKF-WE~A-OppX!xJ;{?U}jVo4)lRZq9GutelAK!PntPF>*3rnN?Qa;I)BJu{ zt^WmHr`=-R{vCEx_#D!IR`Sj0cCJ=J)4 zT&vPO*m#%#|?DQw}X z;on{^etS_<`Uu(My5=kd1rr+*K|Eb9?fw;jo-k}6Hx$Cw@#Gv%@w-N0K=ajAK#>77 zH8{2HW})vm^p53ijuAUU`|9~4y|u}X0$lVS9uLW5%l!2M&VP&{?_U=__>Ss;<}IF* zMtqF?c9^S;Hu(VnIM0pH%k&w}&hi=x7HTauvi?S2>67#HmzJSLkJ8p0@Lj}=fp-e+ zq>Z>b+g64=^k+w$eTS~orA$or8pR{@E3Di6Z8O2myJY_}Gu}{QHA%A&PN3a}G zB7Znw046lfA_yiMo`>G9U{%|6pKWc3U#0fy0QtQu-xGLer>kM*|YE)_f&`D7h>NlRnSb z6Cm)9;S;4jPZuH~Y=H9nyZpI#yF1X5C&EHorSY>bp|}H926ur=25@(oU+FYeTMv&2 z@xD&-`0z!MuQIX64W#5(`%$;Nxy-dM3xi+=}c+mcnfblYh zB&)C|uCxb;D=vUlWYhI@w6O%dzW1PRz$9f3uuSX;m9`5gX?ppUD>3|r6_S$@d4`nu zxoLnE*orD^xcl)0Y76<0 zsdwRi1hELHpY{v8R6rs3ZE#Z#%+DOirhS>dTGh<_Jg!#7sla~CT_H9xz-E}~vMZTj z^3gvGc9ckJCe)A6GO_dXr{enLwN*gRz>>x>eQrEKJH>VOtpblfQxYtSCy8MZpI@R0 zxa`X^qX!b9ecceRpn5xFupD2)em#%_)VsTk+t%NdXPgeXqw^omo;^47ia_iDIuTl6|SRX0>_ zV=RzN?NXzU^u=EFHmoErP`QpctVL5oeZkuO$%5-dy#U!896(rx75 zD>1X%5xl7#VArjWgfWdf6ru)6TvT%zh7&${ZT+d5zHvnL8MTabyuld8d9S+u<(u-X zl-A`pN=teh==l{VB3Vi_LW+`_k7iz;m{maxPaoumG0i0P*ynZZB4xeeNt+FwQIlw2 zwU#z{4K@K4aN2|C%j*d8!^RYKtlsWFEvNbT;Npt}UkGO@^)0-5YaeJG#87mFcZqSz z$MlW7`fNX>;RmI&tb;6@&5GCNWs)i}8V;pnmf^}{kavbfvQ}7{`=jep&W~47PQrz2 zElSZn_Ofh%zlW;1?`_<8F5dfVihB=E;PBx>fai0mwAI!9;1$4+s-19esXEO|t2~08 z53O{!>!thRiYHwsF{I~dO4I=u@f*FZ$UQt@8;hL&O$Pr5ug_h@$`OpN8n(4BDuHwL zg%K1T21c;P4xn%le#ILmk2=*Ezu2;P)I|3Rmpiv3x?7>4 zom!VH!mrEuT4e5ExUpXJogDpEchVx~VNs2G>1@q=NSD$;3ad~*7Q`>IUcj=DI6W0< zxRsEys7_J$BelD1@gkRD?7mKo8d!;os#sqzjvoi*?EWEV*iC2ePV%OqGk9vi3=ft$ zyRyiYfK@xf@ped2fF@-*{*5F(uLlcFjM<0xdJ4R&*!nFZGtlfy#)!dh{&n%vrZ_*Z)(Vuk~JOjva z2T=!y@}CZT_Nd~#Z)E|On@dfMewIZPdNBH1@7QycZ^%O$SO@a^5#N2`_q0*a|mV4Btq{)I@CxYMwwP8%L@YoM}dfa1I;I zBAzUp^$Y?AKOrpGyrF0ygWR;T;WPF-VUO@jSw8${N_YsVk3_tFh;1IKu+Ze1CyMeA(pyz@s62Kpo-T%prKTRGv!P@1+X7uhSY5ay-e?j}rOXKN3zaOaih{!8-_4#W~&9m0Twv zn)%@>Y`%naK+Rk!X@+?p6s1>WOIS{jvQW@W=6)S-*zQgS^7D8A0qB4H6n! znE*)S(Tz)C&vIHhPL-wEdU2028C0?iBBd)5N3k$o2~U^Z^gVAp3p|*Q=o>x)Y>U+~ z&m}0LCM$BgP&ZdziSyGftbQRiYe2V3}8y}TP;qQ;DAzk?H8COki{Am7Y zuFZ)vdF__wg>Rm=-okW$nm~2VYk#6?Z&PChHHx#AR?*vpuLdu|?}c2ipwqocxnfHI zmL_iiODNjL2^3R@$Uc>c=s5K))vq+3j3T2d(yDe8eSqUgROSAGwvVt)-ZVk4cPQ2@ zg$TpjL~3&hhj*$d3tyEbT-GtLr5&(%=?-9B3 z-uq*g07(bsEft!sT-Hh8#9Cb;sNzF!7qAgQc%KP-uBD_8ubvM`N9hT9)ZTY#ww^5= zrLYsb)fK0zKZ6BR6)*k)o&L+eLwR?yFO|7h3FvF`AM!Mgu1Q>(cpOeL4$xb%?)a{s zn8zC<0q8o(4}+RXYmXe*s8OS7nPO;WXvb*395)tgA-4ypTzXy}Hf0R&tPSDdAcbpJ zZV2fAh~cK8SxMT@(wH_;stdfkS$$dcYez;x!cL9fJj4|raLee7h>r}zBYTL3?8`iG zA1n?YGXNJy%QIy?!LCVrWy_x=@s%d4&2Au?1%e*&Xr5p z`6f%jz>;=jHBt1E29ny0R)dSz4x~#MIWzXm|5&D*QwbGpHmxKm)@gi{vkWRvz%RS(!hc+CIGU3+ zD6vK7Nt|FmSUWS@gOP0DAft+UxlxpK7rYUhY8vHnFz@QcMcXW;Ou$Y?e%Y6eZBuJ@ zHOoSs419$Yo=BR`bpz0zLo}nT(>=6@zlKkj`8Irp26Un|c_u%fp|6WRdqz-~$Z7Ez z(O(XB=j*g8=+VC=5fyX{StbfejndzYR^LP6?W{irhQK-4&{d8uDYzW}y zdrGfJ$*jL7HfJwl7b@83vg*!i_-b#k3ft&8?W_p_$wxOS`SVAi4G|&hUlHewN_FUt z`5m3-hqc!^FW6D$y+TWH?yHWTin_V9N?}u^q_ovB_ceTIlKhbK7e}$18s`><1 z?#p0DSz~O%$>Z>^rf&c%kLOp*3^;jvnPF_N+mg&zCp8|OYF9^HxM|rf^z7%`$&r_H z9t_j`l|_c=4=Dt@Zt4*pNjJPFm8%7Y16g|Hi7m~yKbfjsdX-$4&UX!b0)%rf?MPAX zU45xnApYctI83wr&TSRX^=&fX=`T3KJHMU+OWfkeasEL7o#I=aJvF;m8*0~)!n$Vd zpWX;IKwBYw|$V?`W1AOFOiMDrvGp0sUUIv*JGq`s@jm z`E55B-#Tck(KqtJ$LGw!Pi)QU)}_iS7@bo{XarK?Kb?CbURRR-bPYM+2{7q>9$gFW z{-h|o2IYy}J`IN_0HZ3bIRJNS9$wVRv`@*HU0u|aDmiGm6~{;L^A5_Fp&y>tWHdu8 zM6YB!q2c}xWrT)%1--x!I-e3P#szb6EaWsbmjk0$TN8_p_#HaV^c3a$u{PmI9yjsd zD{G*fK%EXC_S)qKzx++Y$DRA=0X@JdV27xu05kCK^`VG63Ieux3s)ogDtCF$8Qe-> zK3)d^^{0j(bK0J{q1*jH5{Oa!xK=x!{qwo=3_0gMuOr$1Y-OnyThV-q2kyd;i$w=n}{vW^XJhuI3-_1iQAymtla#%Xoomv9iNXB5}V3o86U$Opinj;=20=AX1Qd+rBSSu1whQuMOzc z96spV*iU^^eH0FBzn?h|y1u=tChs8Uyh7|lFZ0Jm>S-VX=1i8Rl z35bvf?)B!tRxXa?h!Za7<{JRoJg15HR0x_of&&9Ah;^~2^qQpm?+1m;5w<;vARmCF zsUc?9eyP=8yrEENZ}w|MP4jMLz>ND~i9`si9KM5pjwI7nfzGQyY2|(4`lMb}{XN4_ zt+E;Xj^#PqpINUpb7uU_h7}kwJ1XSbt%WA5;>V#P(T_+0C&unU zkx)30lp~kQH|#JVbanQU`6KW88a<^z-Jx-JZ7i#H9nh|{1|W>aJS>$NUttIoJT7PB(M9(L!Y%RL0V zbTGpw2kKqpl`zsZbrA?%m)m3D5%s4rV?T5_u198~dy>ac_%HA6z z3?^n4E?-<>d(tv8^V?izBNUpA$0(m#;0IZI?;{|cgc$N=_mfJsVAc>^6YgJjt^xHdI zQ=-mje(?rORL{yi!cg>1ospbiV?XcW9`>gyxwbi%N;A7_kZ&$)i*@VWbK3#H`3`he z4v$o&f|w3C@};z$ZZ7S{a=8HCUNGJ0!H0@4DzBhl8 zuiRKpSK(nPAJIQsRYxZg5g_+6tuQG5?>@SIo+j!3)c-lL%@YJSfo+eLxINI&fpdDPh_`439&_r1nOrz>N-N7d>U5pq+{wE zdnE2Po!ytYsB@fy>R60xLBR=;?$;d;?y5;~`^UXHoES6g2E zLrtlVYuRlpQhGLR3#rB`KfDScq*AC1A6|F0PIkYwjFR4L{n$Yp13;@@X2HHqQR`E&Ipmg|K%l(VV#$%IvJ0d-x+Bn@Kwd5PJ+=ui1v)d0xw2TY|7L~cCjf-r zW=@vzSUyc&mo+{&Xewy1riv3HhQvrM8cTq7htS7vlF^Y(P9rMKH7U14)5~W&zL=-( zv90UQ1ueH*zV*bD)7N?<{n^sc)S-k635iDXE(<^?nrF=lsQo3KNHx6}SEA8}ZDSMt zDwuF(k?I^)b0RG1XN1_0XnF#_JZ0?z`uvf;^ecVGlMaPWX4bDKRDF4t99==RSuh}w z;j7;u8K#jVbW>$HKH@6IZG9q0ad6Qk|7BmtsK5O7=f!3GmUz?t6@vk-CvCX+C*v;d z4p*5Ztm=;2duX2AAf=8QIV7<@fBxjv0_Gg~)V=Q*H^VMz7?5h)#c-FjUyY?3`T$Xb zT|{AYG17Z|x;8Uc=hZvOSYya+`S~&J#a2|NX9dT$ZV)xd1C}hhwQmRS>grGW{Ib`a z{0--}t6qcW^5_mKN3G)zyump6AN|w)dpjW-@K_M01aSRTrNGu?;k4prq|oYNC+T`OY548j3Rt?Kbowa(#Z5HVoy- z&igL%52CA*0tv8grj~zgsxEcKhm+&P0XR0>&f{OU-zhlx*l|8scMsOQfJNjT7B`q} zXGm%jSIfs%VXpFr%{(sfd0}<=kk`JYMe6{ug$)GXV#mA6+tgkW|RS zWTZ7EZ^Lh_V$bmd@ET^dzL@?I7D=#B&!6EN>?k34U_r~@CYxikqwMy`tUZv*b4f2z z(y1%M?Lc+Dx?wBDOPbK{)+&~P9*9~za=!eM{}SgzPwPiYs1jh|{jjdQNH+g&IQQfH zbuFZEC_*GmL-tTML&3qf5ZL(iA11@Ud!Io94Jh`^(ypI+o~8w*Adb30PfPk-*f1zJ zei;w7Alr77EZ^2SVB=|WytOM_tSDtzmlmksNMRizM#k|;HJ=4;l=I{*9XmgrWOk;3 z#bUkvt0k)B=UGo_zVo68&~A6ikSM>p^XO%vEjO8(w3!eH3nXsIeBr<;13?ep7iDDb zB?0Zq&HOV_eV%-!92TBBOA&Bn%g}nOwcxa~6UgKR=j;dhm>x%AySNqQ#1@$ia(yz}c3fC28Kv40@?T%222Uv(Yf4V0A(;ms!(S@@pi z76c@-?fje<6hY;VDL^@lh$TzTf{88=5%jfPhlIcp;L?o!16)m#wuY5{zEHc4N~Vjt)M&wzqqcMh(ujijzrl@-nS&o=TRQTI~)#NZYZA zxbga=%%sV}v{-_SXpOoY$moQ9hu&fxJYA_MJ^VNc%of_Li-ckS#+i7bw zgr4u2U&R$^7*3wQJfIEq1vAnRU~HS74#0hP zJWyPMTN-7Q9rOjv%3Jy4hx8YqEx|r_C6J=sD@N3nX zXCvavL93Ke19*-O75TQRn4%p52TH>%)0g`d3LRNG4xb^7b93jqTaucB8)%xHPR$) zp|No&_&g$oCl@(t08B#1g2PivV3_Ur3-17lnh1xM%%A%sV8pEG-#7+ra}j0e8$g?G zP3got-yHtrW_k4(8^-X>v=fB@v698i7iM8f8S6Mi@Q}W~Rbj24!{;5w1fZqk+#)Wp zE0Rl`@f*icIs|D_)mmE>UaXoMWZy$Emh>Q`Jop$G+^Hi4@?}cy`ROx?iq9F8JKRKe zEKpz{ukojxRmip~Jh*c8x`HO=g)Jv-qW-G0kNl}!dJAq$I zZ5+d1pANl%Uf{y?vwGT}9QV#K3W${6;q2lI-;m`ONe&Y8QoIoKAk0Yxs6AIg#i4j2 z%B+^p!M~~RmG6=onYWv>H^s+59=FL6TWHAJL_fOc|KQz@x8hvcfFPD8c{ImAc{?y> zbk|4j$9yQs<3c8#EdXz~e;|)N4*2o72Uf6{LvD|NqW?=Uc>ejKpgiW$7@RZrLG2Cx zdntW_x1wV^m(Eo&TJ>!Y96Q;)x<@cH!P@|L>-7qA2Wg4#v1Kg~+Cl|nd){1FX203F zm#k2&^1XI!{QYOI;VIQo}n)6=i5QqsB zesr@lZY4}9oiBFFo-FWPjh$v*wTSXNkG)2ujOJXqDzGpT8gIYVgIRrEvbRLXT7d$=s?R?SF8FEDpu#!WLO(v7{53!6)JrAS}{V~gJ2GSG^s72Q#uh~4K*EBux^FOySf^s zzB*7e{-i*nkYM4u-TG+N&hlhLLRGg0uWtCa8(R!OotubSFE70Y%76J|JA6yQ)}-S_ zGICG?7%l+`T&(rzCJ{3kM+z8%0!28l=@=8$uuQ54?QP~A)9!I}iOY@Fen;Rb)2fo8 zp(dkucOyY+O_*5*&quvbYrS)12$z|2gb4Ap@}c-U zmsbUYI$HwDriK(*Hqx;H{`){iCvV%=Pe;=l$D0ch?{vy-b=w-4ZlzhnYG`2at%doF zsM&Rj$8sJa7b_w%>(AW|cl4GQK4~k>W}N3}HA`)Fc%9wW%dkdV(y}Yk)#R4>+Kdlfk`8&^%pS(* z1<8z{ihUX*&B7ovFyb@1q=cZ%m1cau3+P0D@95sm8prcBA{&r1l;;fo+I|x>C2#U~ zKiuFTo%=)DRRAiv&f&579D2}KT3A?xE|m)1cwD%pIN6TR2fNw{s5 zM@6562&1*^;XR4z5Y@%YF-BnD``I4anWPv=T*{kR_smCWHhWw+I0Ug) zz<4AG_|GuB-o1*m_vA@yxYE4w75&zsCUd_XxewxSGBsS1KVg;wcPt8cY`xUXtdR^F zBt4K`$WF*&$cX2I<3I{~kz-pUf171BmL%e+TDCC%?H+z!5)v&<1}JK1vN-zI?|Nfg zObK5O~ywa1&!S=%KSg%dQAWymkZBtK!6q6g=P#b9N*pWm@< zginBUhtuIAz_^wy@}lmJZo@nH7=uSA8|G=YOskLkwW6W}s|eisnPoc-bag_M#3BLS z-h0e7Um8Ntq_Fc84}%=Y>gp;I>m{xXiD`Shz{kY%`7g+c#d8}uj+dn+;w8%r2v4*jI2 z!Rl{NvTsQXDN8=f5^2kym?VudeUM85Cza=)`b8BM75l)yf`866Xcs+2x84O~{z@U$ zEY*+#=^%k_Kb@%2bYOV=3HrCSRYrAphOW~!of4W?l)J-?Z2~P!482z$OVNxQK%Cvl z`f~4%seS8Jchzivw7f2E^D`U4Y2}S^5UN>}d>I>T;*J<4dB0MN%e*IIT`YkEk< zGbW(1!&22JH2pK#HAa+Weu!qg(xQs{s3%sX?>AD-rF|e{uVvQjCdugxEJ3?L$7zI~ z7Icmt9`wS2?(=6s1h_kJZUtSB4=Lyt_x{JseMbvX4^&8q2<_6bkX8is3}}%GYe=X#ojFaGW=ckWsw9{(e^@K6G`srA= zZ^(tC3|x!Ln(C+*E$sxzkrRxJg_WV39c7_?B!QAb{4Zb{GkD;`eB#3=5lDcN2THo> z0hr%NDlX8zJT`mWONlwcy3x5+ov!y-K=y%pk5a3!nBPJsB&qS z?qZnuC-pqGPIqi(NtVmn6i0pYrAHw0)ZEYbQ51#kJ`1yb1A$fbe z=27DB5=|rG2=zvDWl!6<2R`OudpdjN1-3#QhK^tolt^Gi`O1ljbZIAqdZPWQ<+Jq$13iCvgvvpa>t;13FR06i4oQ;U>=orD| zBqG6}C5KQF9QLx+c-(;1r?z}Cw%zBOBMc`={W|7cMpO0&)>!)&$#+cSPmib*Ys2eh z(zkJUM!2_RtbZ8c`lPYmk_%P3+OqVX=;e4-!5`Y#OZIb1fU|=E+hCa2V3XIz()>PD z0?{hfam8EMveax$Sg}xQrJe#;ufX;C4b$Tj@N_6c0r54TC^A5>{L*_D11~r%-gz4J zC-pgAl%5g(0C2|z7#&!-(`u{X zu`Bf0s(O0IbZO7hd^Po5CGr6U1raWnfjEcV$Z!WG`F2<0?oC?pV$ReeDP%cOMdQ#3 z)~ix^=gUs=;McrznziR97)D%QaHZw2@EJ!}X2!k-$jCXlg7H@AFr9rngk}D&$~E=m zhNZd)s&sw0GvW+nQ;o<`7l2`!o0Cb$qTZe|(#_BGqs{rOl9XHLw_|;3X%W_)XAJGG zL7eNW6V42Ar&6F_-$2hR>pk}^aahN*hS0wNZa9NtHP}RfN|-;7@FzwHN@38=ABH$M zr(G5uVDKUP^Z_vYlUb%P$s;MSQcl$e4^X3+v@xEY+|)%h8Ghb}1(kPpw~x zmWW?>pL;(e4o)rhno0{E>T%nNRwj!oVngPmg8cN;jE9_XMPEon*aaPY5`vEWdMeWy zZEIUwRj@nLJ*YVeAqDZwE`n7MXZpf2+ZDZ4%}(7Ag|Z_W^7hit0QPy3vU@`{Lo#A! z+~<$LQ9P#C?%mKEsIm*+OnI`fyFHWZsF7=xd-EqX_df?fZjIh1i$z%ZHpSl`G(g=6 z$s?xzjlA#9!{T#|H-!1&+FphIe_kV!3wea5(sG_{^UP9%4^>Ok0d_Rv5-VI{-<1`$ zCY~;O#iQntQ(3U}_OmvcrRs}2E8DuVlbRDVYdnVqbuEFp$;+`BjSvaVW5yvMbPayJ zj-@-e0cG~8Q{B{RK;{}I1TXd91%ldbIFA?p$;T(+`-Ir)7BWcAnsOUqza;X>aM_>l z7swxdoMV~0?=O*_GM?goc5R{N?2c(iOooq|2U2-=s#TUhNbl$`lU`WZA@u&F#vUy% z%0xE3X#Eq^(87tF?(|*P#}S`e{1SuM&g>dTru>GHd`TK)^vq%0V-to_q-xmh}8I*czvhe@)qX0bpos;1r zJx}=eC;Zbnm)-(c0~HNO!0mr+%{-yi%x zTxnpqeRT1#C4RG|_~*}ebO%>?DymTZ{)B%HtD*rQCt@nW%2@v2<^wQWM1+CSiNp=r z5&b{Tj2U)kO8xI-{Qcbc?_~UQ>izZLzmxHwZ{dGG{(oN?2M~*?l%q&UEiWFf4%R(& zJbB?`c{G4WE%E^g83h&nUk`lVh#)Z$+WhN-fBu*c7c%nF9?byFZ+{mV#s346BGb(8 zUl|$23ZS5u%`od^P|0AD&Id zKu0peb-?-agZ%3O6Y$z^h9CUvgMWSsJ_0pcAb?;ZV+JR5J5@fQz167WY#OdeeP#=!Ug1G&UcbN~PV literal 0 HcmV?d00001