PKCS7 customization
"Jason Pyeron" <[email protected]> Tue, 3 Dec 2019 09:53:11 -0500
| Newsgroups | gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Organization | PD Inc |
| Message-ID | <[email protected]> |
I am likely going about this the wrong way, but this is what got the = results I needed. What is the most proper way to customize the entries = in the PKCS#7 (see example below) or what are the BC standards so I may = submit a patch (see current implementation patch below against = bcpkix-jdk15on-1.61). -Jason Pyeron [some tweaks for email have been made...] commit c463688f016085e0de8acb1ac4a71fc48f990f58 Author: Jason Pyeron <[email protected]> Date: Fri Nov 29 11:51:52 2019 -0500 bug 1913 - PKCS7 structure matches Acrobat Reader DC diff --git = a/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/CMSSign= edDataGenerator.java = b/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/CMSSign= edDataGenerator.java index d635a761..4ee9fdbc 100755 --- = a/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/CMSSign= edDataGenerator.java +++ = b/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/CMSSign= edDataGenerator.java @@ -13,6 +13,7 @@ import org.bouncycastle.asn1.ASN1OctetString; import org.bouncycastle.asn1.ASN1Set; import org.bouncycastle.asn1.BEROctetString; import org.bouncycastle.asn1.DERSet; +import org.bouncycastle.asn1.cms.AttributeTable; import org.bouncycastle.asn1.cms.CMSObjectIdentifiers; import org.bouncycastle.asn1.cms.ContentInfo; import org.bouncycastle.asn1.cms.SignedData; @@ -68,17 +69,39 @@ public class CMSSignedDataGenerator return generate(content, false); } =20 + /** + * Hack! + * + * @param content + * @param encapsulate + * @return + * @throws CMSException + * @see {@link #generate(CMSTypedData, boolean)} + */ + public CMSSignedData generate( + // FIXME Avoid accessing more than once to support = CMSProcessableInputStream + CMSTypedData content, boolean encapsulate) throws = CMSException + { + return generate(content, encapsulate, null); + } + + public interface AttributeFilter + { + AttributeTable filter(AttributeTable signed, = SignerInfoGenerator signerInfoGenerator); + } + /** * Generate a CMS Signed Data object which can be carrying a = detached CMS signature, or have encapsulated data, depending on the = value * of the encapsulated parameter. * * @param content the content to be signed. * @param encapsulate true if the content should be encapsulated in = the signature, false otherwise. + * @param attributeFilter a call back to modify attributes */ public CMSSignedData generate( // FIXME Avoid accessing more than once to support = CMSProcessableInputStream CMSTypedData content, - boolean encapsulate) + boolean encapsulate, AttributeFilter attributeFilter) throws CMSException { if (!signerInfs.isEmpty()) @@ -174,7 +197,7 @@ public class CMSSignedDataGenerator for (Iterator it =3D signerGens.iterator(); it.hasNext();) { SignerInfoGenerator sGen =3D = (SignerInfoGenerator)it.next(); - SignerInfo inf =3D sGen.generate(contentTypeOID); + SignerInfo inf =3D sGen.generate(contentTypeOID, = attributeFilter); =20 digestAlgs.add(inf.getDigestAlgorithm()); signerInfos.add(inf); diff --git = a/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/SignerI= nfoGenerator.java = b/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/SignerI= nfoGenerator.java index a233ec46..cee7c285 100755 --- = a/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/SignerI= nfoGenerator.java +++ = b/cresaptown-approval-frontend/src/main/java/org/bouncycastle/cms/SignerI= nfoGenerator.java @@ -168,6 +168,12 @@ public class SignerInfoGenerator } =20 public SignerInfo generate(ASN1ObjectIdentifier contentType) + throws CMSException + { + return generate(contentType, null); + } + + public SignerInfo generate(ASN1ObjectIdentifier contentType, = CMSSignedDataGenerator.AttributeFilter attributeFilter) throws CMSException { try @@ -193,7 +199,7 @@ public class SignerInfoGenerator calculatedDigest =3D digester.getDigest(); Map parameters =3D getBaseParameters(contentType, = digester.getAlgorithmIdentifier(), digestEncryptionAlgorithm, = calculatedDigest); AttributeTable signed =3D = sAttrGen.getAttributes(Collections.unmodifiableMap(parameters)); - + if (attributeFilter !=3D null) signed =3D = attributeFilter.filter(signed, this); signedAttr =3D getAttributeSet(signed); =20 // sig must be composed from the DER encoding. $ cat /dev/clipboard | xxd -r -p | openssl pkcs7 -inform der -print PKCS7: type: pkcs7-signedData (1.2.840.113549.1.7.2) d.sign: version: 1 md_algs: algorithm: sha256 (2.16.840.1.101.3.4.2.1) parameter: NULL contents: type: pkcs7-data (1.2.840.113549.1.7.1) d.data: <ABSENT> cert: cert_info: version: 2 serialNumber: 225816366948433615078627595622547226476 signature: algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) parameter: NULL issuer: C=3DUS, ST=3DMaryland, L=3DBaltimore City, O=3DPD Inc, = OU=3DCresaptown Development - do not trust, CN=3DCresaptown Development = CA/emailAddress=3Dcresaptown lists.pdinc.us validity: notBefore: Jun 11 18:10:38 2019 GMT notAfter: Mar 7 18:10:38 2022 GMT subject: C=3DUS, O=3DU.S. Government, OU=3DDoD, OU=3DPKI, = OU=3DCONTRACTOR, CN=3DPYERON.JASON.J.... key: algor: algorithm: rsaEncryption (1.2.840.113549.1.1.1) parameter: NULL public_key: (0 unused bits) 0000 - 30 82 01 0a 02 82 01 01-00 ba 87 bf d3 09 = 0............. 000e - 16 6b dd 7b 43 2b 2c f8-e0 04 e2 16 64 b4 = .k.{C+,.....d. 001c - 44 c3 50 eb 62 95 b8 f1-1f c0 dd 60 bf a5 = D.P.b......`.. 002a - 6f 27 3b 49 db b0 31 30-d2 e1 7a 4f 6b 7b = o';I..10..zOk{ 0038 - 91 ad 01 e5 ad 15 7d ff-5b 66 00 e7 d5 0b = ......}.[f.... 0046 - b8 c6 3b ed 5a 11 f1 d2-3c 25 b1 9a 93 79 = ..;.Z...<%...y 0054 - 00 74 05 ee bd 5e 3c 46-f2 47 f3 01 d8 2c = .t...^<F.G..., 0062 - d7 de 52 66 35 bb 24 09-28 31 9a 89 7b f1 = ..Rf5.$.(1..{. 0070 - 24 64 92 e6 64 1b 19 94-9a 0a 8d c4 eb bb = $d..d......... 007e - e0 ba d9 b5 af 44 01 01-07 aa e0 a2 81 9c = .....D........ 008c - 73 49 35 3b 7b 12 df a4-7d b0 ab f4 21 4c = sI5;{...}...!L 009a - 29 a6 dc 33 f7 77 d0 61-0e 0c dd cf b0 79 = )..3.w.a.....y 00a8 - fc 51 80 87 79 69 e5 60-5e 69 4c 9f cf c2 = .Q..yi.`^iL... 00b6 - cb 0e d6 97 29 46 77 cc-16 2f 1b cd e0 6d = ....)Fw../...m 00c4 - b1 98 8e aa 1b 40 df 06-58 eb bc 06 0c 97 = [email protected]..... 00d2 - 01 e3 eb b6 ba 21 51 78-11 35 10 8d 79 27 = .....!Qx.5..y' 00e0 - 66 f7 6d d8 33 5b 6e d7-2d 0a eb bb 18 01 = f.m.3[n.-..... 00ee - 8b 42 b7 a3 14 8e 33 56-bd c8 aa 9b 5d 61 = .B....3V....]a 00fc - 96 a3 67 48 5c 5e f7 f6-47 99 73 82 d9 02 = ..gH\^..G.s... 010a - 03 01 00 01 .... issuerUID: <ABSENT> subjectUID: <ABSENT> extensions: object: X509v3 Basic Constraints (2.5.29.19) critical: BOOL ABSENT value: 0000 - 30 00 0. object: X509v3 Subject Key Identifier (2.5.29.14) critical: BOOL ABSENT value: 0000 - 04 14 b2 b6 71 fb 8a db-5e dc c1 7a 43 = ....q...^..zC 000d - 0b a4 3a 8b a5 f6 25 cf-64 = ..:...%.d object: X509v3 Authority Key Identifier (2.5.29.35) critical: BOOL ABSENT value: 0000 - 30 16 80 14 92 d3 62 62-3f f1 f8 50 0e = 0.....bb?..P. 000d - e3 ec b5 36 a7 c5 64 30-32 d3 1a = ...6..d02.. sig_alg: algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) parameter: NULL signature: (0 unused bits) 0000 - 2f 32 aa 1b ff d4 17 29-3b b7 3f 74 dd 3b 42 = /2.....);.?t.;B 000f - 4e be b1 8c 36 38 96 16-b6 49 c8 d5 6d 23 5a = N...68...I..m#Z 001e - 65 e3 c7 0e 69 7d ae 84-a8 a9 e8 a8 80 60 dd = e...i}.......`. 002d - f4 90 aa c9 1a 1e 69 a2-30 d9 e1 a8 7e 26 44 = ......i.0...~&D 003c - cc 59 61 64 a2 7e 46 55-9c bb 0e fc cd e0 15 = .Yad.~FU....... 004b - 19 27 52 41 bc cf eb b5-58 ea ba 22 c3 80 07 = .'RA....X.."... 005a - 35 8d e4 df 6e ba 28 58-84 a2 02 35 7c 6b 92 = 5...n.(X...5|k. 0069 - 28 e5 09 c2 3d 24 27 ba-23 e3 9c 31 56 40 67 = (...=3D$'.#..1V@g 0078 - 3f 09 56 8b 2e da 50 8e-70 b2 df 89 1b 0a 27 = ?.V...P.p.....' 0087 - a5 2c 9e 0b 14 ef a6 91-e0 39 3c 9e 2d f1 91 = .,.......9<.-.. 0096 - e0 dc ef dd fc 7b 7c 71-17 fc ce e2 4c f5 a2 = .....{|q....L.. 00a5 - 5e 62 48 17 98 09 f2 73-8c bb 7d c4 82 74 ad = ^bH....s..}..t. 00b4 - 07 70 84 17 69 d0 f6 68-94 11 84 db 4c 5b ff = .p..i..h....L[. 00c3 - 69 6d 03 16 65 45 67 db-f9 89 e6 42 66 46 f5 = im..eEg....BfF. 00d2 - fe 61 c8 1a f6 a0 19 ba-04 97 3f 04 97 16 98 = .a........?.... 00e1 - f6 f3 56 70 af 16 b6 15-8a 03 c2 13 2b 54 4e = ..Vp........+TN 00f0 - 2f d7 7c fe 53 20 00 8a-d3 ba 64 9b 7a 3a b7 /.|.S = ....d.z:. 00ff - 8b . cert_info: version: 2 serialNumber: 12765852582602929747 signature: algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) parameter: NULL issuer: C=3DUS, ST=3DMaryland, L=3DBaltimore City, O=3DPD Inc, = OU=3DCresaptown Development - do not trust, CN=3DCresaptown Development = CA/emailAddress=3Dcresaptown lists.pdinc.us validity: notBefore: Jun 7 17:08:06 2019 GMT notAfter: Aug 24 17:08:06 2027 GMT subject: C=3DUS, ST=3DMaryland, L=3DBaltimore City, O=3DPD = Inc, OU=3DCresaptown Development - do not trust, CN=3DCresaptown = Development CA/emailAddress=3Dcresaptown lists.pdinc.us key: algor: algorithm: rsaEncryption (1.2.840.113549.1.1.1) parameter: NULL public_key: (0 unused bits) 0000 - 30 82 01 0a 02 82 01 01-00 e9 26 d4 13 9a = 0.........&... 000e - 4c 91 4b bb f0 e4 4c 87-43 19 f0 87 f5 72 = L.K...L.C....r 001c - 7c 1b 28 77 31 6e 6b 09-5e fd 59 c7 67 e6 = |.(w1nk.^.Y.g. 002a - 8a 71 6c da 43 50 cb 10-d9 9b 57 35 33 9d = .ql.CP....W53. 0038 - 6c 55 c6 b6 b4 c5 39 70-d2 8e 34 2a c5 5b = lU....9p..4*.[ 0046 - 87 de 5f ec 54 54 fd 47-5f ac 0c f6 f9 be = .._.TT.G_..... 0054 - 6b f7 85 a5 f1 6f de 64-f5 90 62 43 f5 0c = k....o.d..bC.. 0062 - 14 a9 7f e7 b8 ec e3 53-dd 07 84 09 08 6e = .......S.....n 0070 - 9a 39 83 91 63 0e 11 c2-25 95 c1 34 d7 29 = .9..c...%..4.) 007e - 5b 2e 25 9d fb 5d b9 b2-e5 90 a9 6a 96 51 = [.%..].....j.Q 008c - e9 b8 5e 2b f4 66 8f b5-20 f1 18 53 5b 5d = ..^+.f.. ..S[] 009a - 4a 4b ba b7 80 14 c4 b3-0c fc 8a 58 97 a0 = JK.........X.. 00a8 - c4 d5 43 26 62 8b f8 f9-2b 37 88 eb 21 cf = ..C&b...+7..!. 00b6 - 76 72 43 f8 e1 ce 99 56-63 fb ef 1f aa 2b = vrC....Vc....+ 00c4 - e8 9d c8 a9 35 65 6a 6a-0e 33 06 63 47 a3 = ....5ejj.3.cG. 00d2 - e4 a9 5c 4c 40 89 e9 f2-6a 74 73 62 66 0b = ..\[email protected]. 00e0 - 8a 3f 8c 33 91 4a 6b 1e-66 68 0d 57 fa d9 = .?.3.Jk.fh.W.. 00ee - c9 1f 3e d7 65 29 9d b1-5b a5 f5 68 0b 87 = ..>.e)..[..h.. 00fc - f0 8b e7 38 69 15 0d d9-02 9a 42 39 b5 02 = ...8i.....B9.. 010a - 03 01 00 01 .... issuerUID: <ABSENT> subjectUID: <ABSENT> extensions: object: X509v3 Subject Key Identifier (2.5.29.14) critical: BOOL ABSENT value: 0000 - 04 14 92 d3 62 62 3f f1-f8 50 0e e3 ec = ....bb?..P... 000d - b5 36 a7 c5 64 30 32 d3-1a = .6..d02.. object: X509v3 Authority Key Identifier (2.5.29.35) critical: BOOL ABSENT value: 0000 - 30 16 80 14 92 d3 62 62-3f f1 f8 50 0e = 0.....bb?..P. 000d - e3 ec b5 36 a7 c5 64 30-32 d3 1a = ...6..d02.. object: X509v3 Basic Constraints (2.5.29.19) critical: BOOL ABSENT value: 0000 - 30 03 01 01 ff 0.... sig_alg: algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) parameter: NULL signature: (0 unused bits) 0000 - cb 07 e5 52 29 c7 34 16-ec f3 d3 76 8c 8c 9f = ...R).4....v... 000f - 9c 8c d9 7b 70 9d 9f 15-70 ef 06 93 93 2b 4f = ...{p...p....+O 001e - 77 00 60 2b 66 25 7b 71-42 56 75 de 92 ab 9a = w.`+f%{qBVu.... 002d - 09 d7 43 5d 85 5b cf 0c-ed 76 4b 66 b1 1c 8c = ..C].[...vKf... 003c - 8c ac 00 8a a1 01 a3 35-6b 5b 13 07 5e 3a 59 = .......5k[..^:Y 004b - 7a 00 3a ae 87 9a fe 11-f1 96 47 21 96 fc 87 = z.:.......G!... 005a - a0 7c 54 77 d3 96 dc 47-7a 7b c5 d6 bc 96 01 = .|Tw...Gz{..... 0069 - 00 f0 88 28 e7 a7 be 14-14 ee 56 9f 6a 33 d4 = ...(......V.j3. 0078 - 4e 86 57 da 57 1a cc 1b-fd fb b9 ee d7 4c 2c = N.W.W........L, 0087 - 4d 39 ea 52 80 59 be 72-6e c3 f3 79 d5 e0 fb = M9.R.Y.rn..y... 0096 - 21 87 e5 11 cf 64 4f 0d-91 cb 1c ca 23 59 68 = !....dO.....#Yh 00a5 - 68 06 93 78 53 4a 69 94-03 eb c3 fc ff 12 ea = h..xSJi........ 00b4 - 26 ff b2 99 36 05 7d 53-74 21 c0 7f 06 d2 09 = &...6.}St!..... 00c3 - 02 ad a5 4e 7d 8e d6 09-39 c8 e3 73 36 d4 14 = ...N}...9..s6.. 00d2 - e5 03 fa a9 0e e2 d0 cb-b2 29 8b 44 9a f7 fc = .........).D... 00e1 - 41 48 1f d4 e4 45 63 18-81 e3 f9 39 44 da d4 = AH...Ec....9D.. 00f0 - ea 53 47 e1 82 c8 44 df-4f 32 93 42 cd fc 28 = .SG...D.O2.B..( 00ff - 87 . crl: <EMPTY> signer_info: version: 1 issuer_and_serial: issuer: C=3DUS, ST=3DMaryland, L=3DBaltimore City, O=3DPD Inc, = OU=3DCresaptown Development - do not trust, CN=3DCresaptown Development = CA/emailAddress=3Dcresaptown lists.pdinc.us serial: 225816366948433615078627595622547226476 digest_alg: algorithm: sha256 (2.16.840.1.101.3.4.2.1) parameter: NULL auth_attr: object: undefined (1.2.840.113583.1.1.8) value.set: SEQUENCE: 0:d=3D0 hl=3D2 l=3D 0 cons: SEQUENCE object: contentType (1.2.840.113549.1.9.3) value.set: OBJECT:pkcs7-data (1.2.840.113549.1.7.1) object: messageDigest (1.2.840.113549.1.9.4) value.set: OCTET STRING: 0000 - 29 23 e5 69 a4 91 9a 5f-81 1d d8 85 28 = )#.i..._....( 000d - f1 7a 80 2b 38 e1 fd 1b-b8 43 bb e7 c5 = .z.+8....C... 001a - da 4a 28 1e 47 ce .J(.G. digest_enc_alg: algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) parameter: NULL enc_digest: 0000 - 41 bf c1 b5 d5 e7 1d 6d-5e 17 41 7c a3 2b 36 = A......m^.A|.+6 000f - 7a c6 e3 63 72 eb 3b df-0b 47 9a aa a9 42 10 = z..cr.;..G...B. 001e - 08 b8 bb 00 f6 78 e0 b4-33 99 93 bf 4d 00 90 = .....x..3...M.. 002d - 54 19 5f 53 d2 82 c6 ea-15 89 66 7d b2 95 aa = T._S......f}... 003c - b3 6a 89 57 a9 d7 25 33-81 ae 39 e9 4f 5a d8 = .j.W..%3..9.OZ. 004b - 98 dd fc 65 f7 93 b7 60-6e bd 82 c9 25 6d a6 = ...e...`n...%m. 005a - a6 ea aa a9 3a 18 c8 17-c4 52 76 b7 bd 05 c5 = ....:....Rv.... 0069 - f5 14 f1 c6 cf 9f d7 db-f4 44 29 33 c9 cb af = .........D)3... 0078 - 66 7c 3b 50 61 7f eb 30-37 e1 1d 66 38 78 db = f|;Pa..07..f8x. 0087 - c4 40 5d 6c d7 49 2c 84-ab 18 99 32 d9 32 0c = .@]l.I,....2.2. 0096 - 0e 40 3f c2 41 ab fb 57-41 8c 92 8b 86 d6 b0 = .@?.A..WA...... 00a5 - df 02 e4 27 9c 9c 78 fb-20 10 d1 cb a7 cd 46 ...'..x. = .....F 00b4 - 9a cc 34 c9 b4 fc be b8-7a 95 89 9d c0 b6 b5 = ..4.....z...... 00c3 - a4 68 54 32 eb c9 52 77-d4 34 ce fc f6 8c 32 = .hT2..Rw.4....2 00d2 - 25 3a 0c 21 cf 66 94 39-04 42 ad 05 b7 6a 21 = %:.!.f.9.B...j! 00e1 - e2 6b ea 23 c3 20 ec c5-9d f6 c6 60 cd 85 0f .k.#. = .....`... 00f0 - a4 d5 6f f5 5a 7c 6a 67-88 ca 5c 2f d5 47 bf = ..o.Z|jg..\/.G. 00ff - 60 ` unauth_attr: <EMPTY> -----BEGIN PKCS7----- MIILLgYJKoZIhvcNAQcCoIILHzCCCxsCAQExDzANBglghkgBZQMEAgEFADALBgkq hkiG9w0BBwGgggiKMIIEHTCCAwWgAwIBAgIRAKnipnpQiJcsjIZtS4Rcf2wwDQYJ KoZIhvcNAQELBQAwgcgxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNYXJ5bGFuZDEX MBUGA1UEBwwOQmFsdGltb3JlIENpdHkxDzANBgNVBAoMBlBEIEluYzEuMCwGA1UE CwwlQ3Jlc2FwdG93biBEZXZlbG9wbWVudCAtIGRvIG5vdCB0cnVzdDEiMCAGA1UE AwwZQ3Jlc2FwdG93biBEZXZlbG9wbWVudCBDQTEoMCYGCSqGSIb3DQEJARYZY3Jl c2FwdG93bkBsaXN0cy5wZGluYy51czAeFw0xOTA2MTExODEwMzhaFw0yMjAzMDcx ODEwMzhaMHwxCzAJBgNVBAYTAlVTMRgwFgYDVQQKDA9VLlMuIEdvdmVybm1lbnQx DDAKBgNVBAsMA0RvRDEMMAoGA1UECwwDUEtJMRMwEQYDVQQLDApDT05UUkFDVE9S MSIwIAYDVQQDDBlQWUVST04uSkFTT04uSi4xMjkxMTQ3NzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoe/0wkWa917Qyss+OAE4hZktETDUOtilbjx H8DdYL+lbyc7SduwMTDS4XpPa3uRrQHlrRV9/1tmAOfVC7jGO+1aEfHSPCWxmpN5 AHQF7r1ePEbyR/MB2CzX3lJmNbskCSgxmol78SRkkuZkGxmUmgqNxOu74LrZta9E AQEHquCigZxzSTU7exLfpH2wq/QhTCmm3DP3d9BhDgzdz7B5/FGAh3lp5WBeaUyf z8LLDtaXKUZ3zBYvG83gbbGYjqobQN8GWOu8BgyXAePrtrohUXgRNRCNeSdm923Y M1tu1y0K67sYAYtCt6MUjjNWvciqm11hlqNnSFxe9/ZHmXOC2QIDAQABo00wSzAJ BgNVHRMEAjAAMB0GA1UdDgQWBBSytnH7itte3MF6QwukOoul9iXPZDAfBgNVHSME GDAWgBSS02JiP/H4UA7j7LU2p8VkMDLTGjANBgkqhkiG9w0BAQsFAAOCAQEALzKq G//UFyk7tz903TtCTr6xjDY4lha2ScjVbSNaZePHDml9roSoqeiogGDd9JCqyRoe aaIw2eGofiZEzFlhZKJ+RlWcuw78zeAVGSdSQbzP67VY6roiw4AHNY3k3266KFiE ogI1fGuSKOUJwj0kJ7oj45wxVkBnPwlWiy7aUI5wst+JGwonpSyeCxTvppHgOTye LfGR4Nzv3fx7fHEX/M7iTPWiXmJIF5gJ8nOMu33EgnStB3CEF2nQ9miUEYTbTFv/ aW0DFmVFZ9v5ieZCZkb1/mHIGvagGboElz8ElxaY9vNWcK8WthWKA8ITK1ROL9d8 /lMgAIrTumSbejq3izCCBGUwggNNoAMCAQICCQCxKWtJmQz2UzANBgkqhkiG9w0B AQsFADCByDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE1hcnlsYW5kMRcwFQYDVQQH DA5CYWx0aW1vcmUgQ2l0eTEPMA0GA1UECgwGUEQgSW5jMS4wLAYDVQQLDCVDcmVz YXB0b3duIERldmVsb3BtZW50IC0gZG8gbm90IHRydXN0MSIwIAYDVQQDDBlDcmVz YXB0b3duIERldmVsb3BtZW50IENBMSgwJgYJKoZIhvcNAQkBFhljcmVzYXB0b3du QGxpc3RzLnBkaW5jLnVzMB4XDTE5MDYwNzE3MDgwNloXDTI3MDgyNDE3MDgwNlow gcgxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNYXJ5bGFuZDEXMBUGA1UEBwwOQmFs dGltb3JlIENpdHkxDzANBgNVBAoMBlBEIEluYzEuMCwGA1UECwwlQ3Jlc2FwdG93 biBEZXZlbG9wbWVudCAtIGRvIG5vdCB0cnVzdDEiMCAGA1UEAwwZQ3Jlc2FwdG93 biBEZXZlbG9wbWVudCBDQTEoMCYGCSqGSIb3DQEJARYZY3Jlc2FwdG93bkBsaXN0 cy5wZGluYy51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOkm1BOa TJFLu/DkTIdDGfCH9XJ8Gyh3MW5rCV79Wcdn5opxbNpDUMsQ2ZtXNTOdbFXGtrTF OXDSjjQqxVuH3l/sVFT9R1+sDPb5vmv3haXxb95k9ZBiQ/UMFKl/57js41PdB4QJ CG6aOYORYw4RwiWVwTTXKVsuJZ37Xbmy5ZCpapZR6bheK/Rmj7Ug8RhTW11KS7q3 gBTEswz8iliXoMTVQyZii/j5KzeI6yHPdnJD+OHOmVZj++8fqivoncipNWVqag4z BmNHo+SpXExAienyanRzYmYLij+MM5FKax5maA1X+tnJHz7XZSmdsVul9WgLh/CL 5zhpFQ3ZAppCObUCAwEAAaNQME4wHQYDVR0OBBYEFJLTYmI/8fhQDuPstTanxWQw MtMaMB8GA1UdIwQYMBaAFJLTYmI/8fhQDuPstTanxWQwMtMaMAwGA1UdEwQFMAMB Af8wDQYJKoZIhvcNAQELBQADggEBAMsH5VIpxzQW7PPTdoyMn5yM2XtwnZ8VcO8G k5MrT3cAYCtmJXtxQlZ13pKrmgnXQ12FW88M7XZLZrEcjIysAIqhAaM1a1sTB146 WXoAOq6Hmv4R8ZZHIZb8h6B8VHfTltxHenvF1ryWAQDwiCjnp74UFO5Wn2oz1E6G V9pXGswb/fu57tdMLE056lKAWb5ybsPzedXg+yGH5RHPZE8NkcscyiNZaGgGk3hT SmmUA+vD/P8S6ib/spk2BX1TdCHAfwbSCQKtpU59jtYJOcjjczbUFOUD+qkO4tDL simLRJr3/EFIH9TkRWMYgeP5OUTa1OpTR+GCyETfTzKTQs38KIcxggJoMIICZAIB ATCB3jCByDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE1hcnlsYW5kMRcwFQYDVQQH DA5CYWx0aW1vcmUgQ2l0eTEPMA0GA1UECgwGUEQgSW5jMS4wLAYDVQQLDCVDcmVz YXB0b3duIERldmVsb3BtZW50IC0gZG8gbm90IHRydXN0MSIwIAYDVQQDDBlDcmVz YXB0b3duIERldmVsb3BtZW50IENBMSgwJgYJKoZIhvcNAQkBFhljcmVzYXB0b3du QGxpc3RzLnBkaW5jLnVzAhEAqeKmelCIlyyMhm1LhFx/bDANBglghkgBZQMEAgEF AKBcMA8GCSqGSIb3LwEBCDECMAAwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAv BgkqhkiG9w0BCQQxIgQgKSPlaaSRml+BHdiFKPF6gCs44f0buEO758XaSigeR84w DQYJKoZIhvcNAQELBQAEggEAQb/BtdXnHW1eF0F8oys2esbjY3LrO98LR5qqqUIQ CLi7APZ44LQzmZO/TQCQVBlfU9KCxuoViWZ9spWqs2qJV6nXJTOBrjnpT1rYmN38 ZfeTt2BuvYLJJW2mpuqqqToYyBfEUna3vQXF9RTxxs+f19v0RCkzycuvZnw7UGF/ 6zA34R1mOHjbxEBdbNdJLISrGJky2TIMDkA/wkGr+1dBjJKLhtaw3wLkJ5ycePsg ENHLp81Gmsw0ybT8vrh6lYmdwLa1pGhUMuvJUnfUNM789owyJToMIc9mlDkEQq0F t2oh4mvqI8Mg7MWd9sZgzYUPpNVv9Vp8ameIylwv1Ue/YA=3D=3D -----END PKCS7----- -- Jason Pyeron | Architect PD Inc | 10 w 24th St | Baltimore, MD | =20 .com: [email protected] tel : 202-741-9397