RE: PKCS7 customization
"Jason Pyeron" <[email protected]> Thu, 5 Dec 2019 08:19:07 -0500
| Newsgroups | gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Message-ID | <[email protected]> |
Is there something I can clarify or should I open a pull request as is? > -----Original Message----- > From: Jason Pyeron > Sent: Tuesday, December 3, 2019 9:53 AM > > I am likely going about this the wrong way, but this is what got the > results I needed. What is the most proper way to customize the entries > in the PKCS#7 (see example below) or what are the BC standards so I may > submit a patch (see current implementation patch below against bcpkix- > jdk15on-1.61). > > -Jason Pyeron > > [some tweaks for email have been made...] > > commit c463688f016085e0de8acb1ac4a71fc48f990f58 > Author: Jason Pyeron <[email protected]> > Date: Fri Nov 29 11:51:52 2019 -0500 > > bug 1913 - PKCS7 structure matches Acrobat Reader DC > > diff --git a/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/CMSSignedDataGenerator.java > b/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/CMSSignedDataGenerator.java > index d635a761..4ee9fdbc 100755 > --- a/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/CMSSignedDataGenerator.java > +++ b/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/CMSSignedDataGenerator.java > @@ -13,6 +13,7 @@ import org.bouncycastle.asn1.ASN1OctetString; > import org.bouncycastle.asn1.ASN1Set; > import org.bouncycastle.asn1.BEROctetString; > import org.bouncycastle.asn1.DERSet; > +import org.bouncycastle.asn1.cms.AttributeTable; > import org.bouncycastle.asn1.cms.CMSObjectIdentifiers; > import org.bouncycastle.asn1.cms.ContentInfo; > import org.bouncycastle.asn1.cms.SignedData; > @@ -68,17 +69,39 @@ public class CMSSignedDataGenerator > return generate(content, false); > } > > + /** > + * Hack! > + * > + * @param content > + * @param encapsulate > + * @return > + * @throws CMSException > + * @see {@link #generate(CMSTypedData, boolean)} > + */ > + public CMSSignedData generate( > + // FIXME Avoid accessing more than once to support > CMSProcessableInputStream > + CMSTypedData content, boolean encapsulate) throws > CMSException > + { > + return generate(content, encapsulate, null); > + } > + > + public interface AttributeFilter > + { > + AttributeTable filter(AttributeTable signed, > SignerInfoGenerator signerInfoGenerator); > + } > + > /** > * Generate a CMS Signed Data object which can be carrying a > detached CMS signature, or have encapsulated data, depending on the > value > * of the encapsulated parameter. > * > * @param content the content to be signed. > * @param encapsulate true if the content should be encapsulated in > the signature, false otherwise. > + * @param attributeFilter a call back to modify attributes > */ > public CMSSignedData generate( > // FIXME Avoid accessing more than once to support > CMSProcessableInputStream > CMSTypedData content, > - boolean encapsulate) > + boolean encapsulate, AttributeFilter attributeFilter) > throws CMSException > { > if (!signerInfs.isEmpty()) > @@ -174,7 +197,7 @@ public class CMSSignedDataGenerator > for (Iterator it = signerGens.iterator(); it.hasNext();) > { > SignerInfoGenerator sGen = (SignerInfoGenerator)it.next(); > - SignerInfo inf = sGen.generate(contentTypeOID); > + SignerInfo inf = sGen.generate(contentTypeOID, > attributeFilter); > > digestAlgs.add(inf.getDigestAlgorithm()); > signerInfos.add(inf); > diff --git a/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/SignerInfoGenerator.java > b/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/SignerInfoGenerator.java > index a233ec46..cee7c285 100755 > --- a/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/SignerInfoGenerator.java > +++ b/cresaptown-approval- > frontend/src/main/java/org/bouncycastle/cms/SignerInfoGenerator.java > @@ -168,6 +168,12 @@ public class SignerInfoGenerator > } > > public SignerInfo generate(ASN1ObjectIdentifier contentType) > + throws CMSException > + { > + return generate(contentType, null); > + } > + > + public SignerInfo generate(ASN1ObjectIdentifier contentType, > CMSSignedDataGenerator.AttributeFilter attributeFilter) > throws CMSException > { > try > @@ -193,7 +199,7 @@ public class SignerInfoGenerator > calculatedDigest = digester.getDigest(); > Map parameters = getBaseParameters(contentType, > digester.getAlgorithmIdentifier(), digestEncryptionAlgorithm, > calculatedDigest); > AttributeTable signed = > sAttrGen.getAttributes(Collections.unmodifiableMap(parameters)); > - > + if (attributeFilter != null) signed = > attributeFilter.filter(signed, this); > signedAttr = getAttributeSet(signed); > > // sig must be composed from the DER encoding. > > > $ cat /dev/clipboard | xxd -r -p | openssl pkcs7 -inform der -print > PKCS7: > type: pkcs7-signedData (1.2.840.113549.1.7.2) > d.sign: > version: 1 > md_algs: > algorithm: sha256 (2.16.840.1.101.3.4.2.1) > parameter: NULL > contents: > type: pkcs7-data (1.2.840.113549.1.7.1) > d.data: <ABSENT> > cert: > cert_info: > version: 2 > serialNumber: 225816366948433615078627595622547226476 > signature: > algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) > parameter: NULL > issuer: C=US, ST=Maryland, L=Baltimore City, O=PD Inc, > OU=Cresaptown Development - do not trust, CN=Cresaptown Development > CA/emailAddress=cresaptown lists.pdinc.us > validity: > notBefore: Jun 11 18:10:38 2019 GMT > notAfter: Mar 7 18:10:38 2022 GMT > subject: C=US, O=U.S. Government, OU=DoD, OU=PKI, > OU=CONTRACTOR, CN=PYERON.JASON.J.... > key: > algor: > algorithm: rsaEncryption (1.2.840.113549.1.1.1) > parameter: NULL > public_key: (0 unused bits) > 0000 - 30 82 01 0a 02 82 01 01-00 ba 87 bf d3 09 > 0............. > 000e - 16 6b dd 7b 43 2b 2c f8-e0 04 e2 16 64 b4 > .k.{C+,.....d. > 001c - 44 c3 50 eb 62 95 b8 f1-1f c0 dd 60 bf a5 > D.P.b......`.. > 002a - 6f 27 3b 49 db b0 31 30-d2 e1 7a 4f 6b 7b > o';I..10..zOk{ > 0038 - 91 ad 01 e5 ad 15 7d ff-5b 66 00 e7 d5 0b > ......}.[f.... > 0046 - b8 c6 3b ed 5a 11 f1 d2-3c 25 b1 9a 93 79 > ..;.Z...<%...y > 0054 - 00 74 05 ee bd 5e 3c 46-f2 47 f3 01 d8 2c > .t...^<F.G..., > 0062 - d7 de 52 66 35 bb 24 09-28 31 9a 89 7b f1 > ..Rf5.$.(1..{. > 0070 - 24 64 92 e6 64 1b 19 94-9a 0a 8d c4 eb bb > $d..d......... > 007e - e0 ba d9 b5 af 44 01 01-07 aa e0 a2 81 9c > .....D........ > 008c - 73 49 35 3b 7b 12 df a4-7d b0 ab f4 21 4c > sI5;{...}...!L > 009a - 29 a6 dc 33 f7 77 d0 61-0e 0c dd cf b0 79 > )..3.w.a.....y > 00a8 - fc 51 80 87 79 69 e5 60-5e 69 4c 9f cf c2 > .Q..yi.`^iL... > 00b6 - cb 0e d6 97 29 46 77 cc-16 2f 1b cd e0 6d > ....)Fw../...m > 00c4 - b1 98 8e aa 1b 40 df 06-58 eb bc 06 0c 97 > [email protected]..... > 00d2 - 01 e3 eb b6 ba 21 51 78-11 35 10 8d 79 27 > .....!Qx.5..y' > 00e0 - 66 f7 6d d8 33 5b 6e d7-2d 0a eb bb 18 01 > f.m.3[n.-..... > 00ee - 8b 42 b7 a3 14 8e 33 56-bd c8 aa 9b 5d 61 > .B....3V....]a > 00fc - 96 a3 67 48 5c 5e f7 f6-47 99 73 82 d9 02 > ..gH\^..G.s... > 010a - 03 01 00 01 .... > issuerUID: <ABSENT> > subjectUID: <ABSENT> > extensions: > object: X509v3 Basic Constraints (2.5.29.19) > critical: BOOL ABSENT > value: > 0000 - 30 00 0. > > object: X509v3 Subject Key Identifier (2.5.29.14) > critical: BOOL ABSENT > value: > 0000 - 04 14 b2 b6 71 fb 8a db-5e dc c1 7a 43 > ....q...^..zC > 000d - 0b a4 3a 8b a5 f6 25 cf-64 > ..:...%.d > > object: X509v3 Authority Key Identifier (2.5.29.35) > critical: BOOL ABSENT > value: > 0000 - 30 16 80 14 92 d3 62 62-3f f1 f8 50 0e > 0.....bb?..P. > 000d - e3 ec b5 36 a7 c5 64 30-32 d3 1a > ...6..d02.. > sig_alg: > algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) > parameter: NULL > signature: (0 unused bits) > 0000 - 2f 32 aa 1b ff d4 17 29-3b b7 3f 74 dd 3b 42 > /2.....);.?t.;B > 000f - 4e be b1 8c 36 38 96 16-b6 49 c8 d5 6d 23 5a > N...68...I..m#Z > 001e - 65 e3 c7 0e 69 7d ae 84-a8 a9 e8 a8 80 60 dd > e...i}.......`. > 002d - f4 90 aa c9 1a 1e 69 a2-30 d9 e1 a8 7e 26 44 > ......i.0...~&D > 003c - cc 59 61 64 a2 7e 46 55-9c bb 0e fc cd e0 15 > .Yad.~FU....... > 004b - 19 27 52 41 bc cf eb b5-58 ea ba 22 c3 80 07 > .'RA....X.."... > 005a - 35 8d e4 df 6e ba 28 58-84 a2 02 35 7c 6b 92 > 5...n.(X...5|k. > 0069 - 28 e5 09 c2 3d 24 27 ba-23 e3 9c 31 56 40 67 > (...=$'.#..1V@g > 0078 - 3f 09 56 8b 2e da 50 8e-70 b2 df 89 1b 0a 27 > ?.V...P.p.....' > 0087 - a5 2c 9e 0b 14 ef a6 91-e0 39 3c 9e 2d f1 91 > .,.......9<.-.. > 0096 - e0 dc ef dd fc 7b 7c 71-17 fc ce e2 4c f5 a2 > .....{|q....L.. > 00a5 - 5e 62 48 17 98 09 f2 73-8c bb 7d c4 82 74 ad > ^bH....s..}..t. > 00b4 - 07 70 84 17 69 d0 f6 68-94 11 84 db 4c 5b ff > .p..i..h....L[. > 00c3 - 69 6d 03 16 65 45 67 db-f9 89 e6 42 66 46 f5 > im..eEg....BfF. > 00d2 - fe 61 c8 1a f6 a0 19 ba-04 97 3f 04 97 16 98 > .a........?.... > 00e1 - f6 f3 56 70 af 16 b6 15-8a 03 c2 13 2b 54 4e > ..Vp........+TN > 00f0 - 2f d7 7c fe 53 20 00 8a-d3 ba 64 9b 7a 3a b7 /.|.S > ....d.z:. > 00ff - 8b . > > cert_info: > version: 2 > serialNumber: 12765852582602929747 > signature: > algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) > parameter: NULL > issuer: C=US, ST=Maryland, L=Baltimore City, O=PD Inc, > OU=Cresaptown Development - do not trust, CN=Cresaptown Development > CA/emailAddress=cresaptown lists.pdinc.us > validity: > notBefore: Jun 7 17:08:06 2019 GMT > notAfter: Aug 24 17:08:06 2027 GMT > subject: C=US, ST=Maryland, L=Baltimore City, O=PD Inc, > OU=Cresaptown Development - do not trust, CN=Cresaptown Development > CA/emailAddress=cresaptown lists.pdinc.us > key: > algor: > algorithm: rsaEncryption (1.2.840.113549.1.1.1) > parameter: NULL > public_key: (0 unused bits) > 0000 - 30 82 01 0a 02 82 01 01-00 e9 26 d4 13 9a > 0.........&... > 000e - 4c 91 4b bb f0 e4 4c 87-43 19 f0 87 f5 72 > L.K...L.C....r > 001c - 7c 1b 28 77 31 6e 6b 09-5e fd 59 c7 67 e6 > |.(w1nk.^.Y.g. > 002a - 8a 71 6c da 43 50 cb 10-d9 9b 57 35 33 9d > .ql.CP....W53. > 0038 - 6c 55 c6 b6 b4 c5 39 70-d2 8e 34 2a c5 5b > lU....9p..4*.[ > 0046 - 87 de 5f ec 54 54 fd 47-5f ac 0c f6 f9 be > .._.TT.G_..... > 0054 - 6b f7 85 a5 f1 6f de 64-f5 90 62 43 f5 0c > k....o.d..bC.. > 0062 - 14 a9 7f e7 b8 ec e3 53-dd 07 84 09 08 6e > .......S.....n > 0070 - 9a 39 83 91 63 0e 11 c2-25 95 c1 34 d7 29 > .9..c...%..4.) > 007e - 5b 2e 25 9d fb 5d b9 b2-e5 90 a9 6a 96 51 > [.%..].....j.Q > 008c - e9 b8 5e 2b f4 66 8f b5-20 f1 18 53 5b 5d > ..^+.f.. ..S[] > 009a - 4a 4b ba b7 80 14 c4 b3-0c fc 8a 58 97 a0 > JK.........X.. > 00a8 - c4 d5 43 26 62 8b f8 f9-2b 37 88 eb 21 cf > ..C&b...+7..!. > 00b6 - 76 72 43 f8 e1 ce 99 56-63 fb ef 1f aa 2b > vrC....Vc....+ > 00c4 - e8 9d c8 a9 35 65 6a 6a-0e 33 06 63 47 a3 > ....5ejj.3.cG. > 00d2 - e4 a9 5c 4c 40 89 e9 f2-6a 74 73 62 66 0b > ..\[email protected]. > 00e0 - 8a 3f 8c 33 91 4a 6b 1e-66 68 0d 57 fa d9 > .?.3.Jk.fh.W.. > 00ee - c9 1f 3e d7 65 29 9d b1-5b a5 f5 68 0b 87 > ..>.e)..[..h.. > 00fc - f0 8b e7 38 69 15 0d d9-02 9a 42 39 b5 02 > ...8i.....B9.. > 010a - 03 01 00 01 .... > issuerUID: <ABSENT> > subjectUID: <ABSENT> > extensions: > object: X509v3 Subject Key Identifier (2.5.29.14) > critical: BOOL ABSENT > value: > 0000 - 04 14 92 d3 62 62 3f f1-f8 50 0e e3 ec > ....bb?..P... > 000d - b5 36 a7 c5 64 30 32 d3-1a > .6..d02.. > > object: X509v3 Authority Key Identifier (2.5.29.35) > critical: BOOL ABSENT > value: > 0000 - 30 16 80 14 92 d3 62 62-3f f1 f8 50 0e > 0.....bb?..P. > 000d - e3 ec b5 36 a7 c5 64 30-32 d3 1a > ...6..d02.. > > object: X509v3 Basic Constraints (2.5.29.19) > critical: BOOL ABSENT > value: > 0000 - 30 03 01 01 ff 0.... > sig_alg: > algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) > parameter: NULL > signature: (0 unused bits) > 0000 - cb 07 e5 52 29 c7 34 16-ec f3 d3 76 8c 8c 9f > ...R).4....v... > 000f - 9c 8c d9 7b 70 9d 9f 15-70 ef 06 93 93 2b 4f > ...{p...p....+O > 001e - 77 00 60 2b 66 25 7b 71-42 56 75 de 92 ab 9a > w.`+f%{qBVu.... > 002d - 09 d7 43 5d 85 5b cf 0c-ed 76 4b 66 b1 1c 8c > ..C].[...vKf... > 003c - 8c ac 00 8a a1 01 a3 35-6b 5b 13 07 5e 3a 59 > .......5k[..^:Y > 004b - 7a 00 3a ae 87 9a fe 11-f1 96 47 21 96 fc 87 > z.:.......G!... > 005a - a0 7c 54 77 d3 96 dc 47-7a 7b c5 d6 bc 96 01 > .|Tw...Gz{..... > 0069 - 00 f0 88 28 e7 a7 be 14-14 ee 56 9f 6a 33 d4 > ...(......V.j3. > 0078 - 4e 86 57 da 57 1a cc 1b-fd fb b9 ee d7 4c 2c > N.W.W........L, > 0087 - 4d 39 ea 52 80 59 be 72-6e c3 f3 79 d5 e0 fb > M9.R.Y.rn..y... > 0096 - 21 87 e5 11 cf 64 4f 0d-91 cb 1c ca 23 59 68 > !....dO.....#Yh > 00a5 - 68 06 93 78 53 4a 69 94-03 eb c3 fc ff 12 ea > h..xSJi........ > 00b4 - 26 ff b2 99 36 05 7d 53-74 21 c0 7f 06 d2 09 > &...6.}St!..... > 00c3 - 02 ad a5 4e 7d 8e d6 09-39 c8 e3 73 36 d4 14 > ...N}...9..s6.. > 00d2 - e5 03 fa a9 0e e2 d0 cb-b2 29 8b 44 9a f7 fc > .........).D... > 00e1 - 41 48 1f d4 e4 45 63 18-81 e3 f9 39 44 da d4 > AH...Ec....9D.. > 00f0 - ea 53 47 e1 82 c8 44 df-4f 32 93 42 cd fc 28 > .SG...D.O2.B..( > 00ff - 87 . > crl: > <EMPTY> > signer_info: > version: 1 > issuer_and_serial: > issuer: C=US, ST=Maryland, L=Baltimore City, O=PD Inc, > OU=Cresaptown Development - do not trust, CN=Cresaptown Development > CA/emailAddress=cresaptown lists.pdinc.us > serial: 225816366948433615078627595622547226476 > digest_alg: > algorithm: sha256 (2.16.840.1.101.3.4.2.1) > parameter: NULL > auth_attr: > object: undefined (1.2.840.113583.1.1.8) > value.set: > SEQUENCE: > 0:d=0 hl=2 l= 0 cons: SEQUENCE > > object: contentType (1.2.840.113549.1.9.3) > value.set: > OBJECT:pkcs7-data (1.2.840.113549.1.7.1) > > object: messageDigest (1.2.840.113549.1.9.4) > value.set: > OCTET STRING: > 0000 - 29 23 e5 69 a4 91 9a 5f-81 1d d8 85 28 > )#.i..._....( > 000d - f1 7a 80 2b 38 e1 fd 1b-b8 43 bb e7 c5 > .z.+8....C... > 001a - da 4a 28 1e 47 ce .J(.G. > digest_enc_alg: > algorithm: sha256WithRSAEncryption (1.2.840.113549.1.1.11) > parameter: NULL > enc_digest: > 0000 - 41 bf c1 b5 d5 e7 1d 6d-5e 17 41 7c a3 2b 36 > A......m^.A|.+6 > 000f - 7a c6 e3 63 72 eb 3b df-0b 47 9a aa a9 42 10 > z..cr.;..G...B. > 001e - 08 b8 bb 00 f6 78 e0 b4-33 99 93 bf 4d 00 90 > .....x..3...M.. > 002d - 54 19 5f 53 d2 82 c6 ea-15 89 66 7d b2 95 aa > T._S......f}... > 003c - b3 6a 89 57 a9 d7 25 33-81 ae 39 e9 4f 5a d8 > .j.W..%3..9.OZ. > 004b - 98 dd fc 65 f7 93 b7 60-6e bd 82 c9 25 6d a6 > ...e...`n...%m. > 005a - a6 ea aa a9 3a 18 c8 17-c4 52 76 b7 bd 05 c5 > ....:....Rv.... > 0069 - f5 14 f1 c6 cf 9f d7 db-f4 44 29 33 c9 cb af > .........D)3... > 0078 - 66 7c 3b 50 61 7f eb 30-37 e1 1d 66 38 78 db > f|;Pa..07..f8x. > 0087 - c4 40 5d 6c d7 49 2c 84-ab 18 99 32 d9 32 0c > .@]l.I,....2.2. > 0096 - 0e 40 3f c2 41 ab fb 57-41 8c 92 8b 86 d6 b0 > .@?.A..WA...... > 00a5 - df 02 e4 27 9c 9c 78 fb-20 10 d1 cb a7 cd 46 ...'..x. > .....F > 00b4 - 9a cc 34 c9 b4 fc be b8-7a 95 89 9d c0 b6 b5 > ..4.....z...... > 00c3 - a4 68 54 32 eb c9 52 77-d4 34 ce fc f6 8c 32 > .hT2..Rw.4....2 > 00d2 - 25 3a 0c 21 cf 66 94 39-04 42 ad 05 b7 6a 21 > %:.!.f.9.B...j! > 00e1 - e2 6b ea 23 c3 20 ec c5-9d f6 c6 60 cd 85 0f .k.#. > .....`... > 00f0 - a4 d5 6f f5 5a 7c 6a 67-88 ca 5c 2f d5 47 bf > ..o.Z|jg..\/.G. > 00ff - 60 ` > unauth_attr: > <EMPTY> > -----BEGIN PKCS7----- > MIILLgYJKoZIhvcNAQcCoIILHzCCCxsCAQExDzANBglghkgBZQMEAgEFADALBgkq > hkiG9w0BBwGgggiKMIIEHTCCAwWgAwIBAgIRAKnipnpQiJcsjIZtS4Rcf2wwDQYJ > KoZIhvcNAQELBQAwgcgxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNYXJ5bGFuZDEX > MBUGA1UEBwwOQmFsdGltb3JlIENpdHkxDzANBgNVBAoMBlBEIEluYzEuMCwGA1UE > CwwlQ3Jlc2FwdG93biBEZXZlbG9wbWVudCAtIGRvIG5vdCB0cnVzdDEiMCAGA1UE > AwwZQ3Jlc2FwdG93biBEZXZlbG9wbWVudCBDQTEoMCYGCSqGSIb3DQEJARYZY3Jl > c2FwdG93bkBsaXN0cy5wZGluYy51czAeFw0xOTA2MTExODEwMzhaFw0yMjAzMDcx > ODEwMzhaMHwxCzAJBgNVBAYTAlVTMRgwFgYDVQQKDA9VLlMuIEdvdmVybm1lbnQx > DDAKBgNVBAsMA0RvRDEMMAoGA1UECwwDUEtJMRMwEQYDVQQLDApDT05UUkFDVE9S > MSIwIAYDVQQDDBlQWUVST04uSkFTT04uSi4xMjkxMTQ3NzE5MIIBIjANBgkqhkiG > 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoe/0wkWa917Qyss+OAE4hZktETDUOtilbjx > H8DdYL+lbyc7SduwMTDS4XpPa3uRrQHlrRV9/1tmAOfVC7jGO+1aEfHSPCWxmpN5 > AHQF7r1ePEbyR/MB2CzX3lJmNbskCSgxmol78SRkkuZkGxmUmgqNxOu74LrZta9E > AQEHquCigZxzSTU7exLfpH2wq/QhTCmm3DP3d9BhDgzdz7B5/FGAh3lp5WBeaUyf > z8LLDtaXKUZ3zBYvG83gbbGYjqobQN8GWOu8BgyXAePrtrohUXgRNRCNeSdm923Y > M1tu1y0K67sYAYtCt6MUjjNWvciqm11hlqNnSFxe9/ZHmXOC2QIDAQABo00wSzAJ > BgNVHRMEAjAAMB0GA1UdDgQWBBSytnH7itte3MF6QwukOoul9iXPZDAfBgNVHSME > GDAWgBSS02JiP/H4UA7j7LU2p8VkMDLTGjANBgkqhkiG9w0BAQsFAAOCAQEALzKq > G//UFyk7tz903TtCTr6xjDY4lha2ScjVbSNaZePHDml9roSoqeiogGDd9JCqyRoe > aaIw2eGofiZEzFlhZKJ+RlWcuw78zeAVGSdSQbzP67VY6roiw4AHNY3k3266KFiE > ogI1fGuSKOUJwj0kJ7oj45wxVkBnPwlWiy7aUI5wst+JGwonpSyeCxTvppHgOTye > LfGR4Nzv3fx7fHEX/M7iTPWiXmJIF5gJ8nOMu33EgnStB3CEF2nQ9miUEYTbTFv/ > aW0DFmVFZ9v5ieZCZkb1/mHIGvagGboElz8ElxaY9vNWcK8WthWKA8ITK1ROL9d8 > /lMgAIrTumSbejq3izCCBGUwggNNoAMCAQICCQCxKWtJmQz2UzANBgkqhkiG9w0B > AQsFADCByDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE1hcnlsYW5kMRcwFQYDVQQH > DA5CYWx0aW1vcmUgQ2l0eTEPMA0GA1UECgwGUEQgSW5jMS4wLAYDVQQLDCVDcmVz > YXB0b3duIERldmVsb3BtZW50IC0gZG8gbm90IHRydXN0MSIwIAYDVQQDDBlDcmVz > YXB0b3duIERldmVsb3BtZW50IENBMSgwJgYJKoZIhvcNAQkBFhljcmVzYXB0b3du > QGxpc3RzLnBkaW5jLnVzMB4XDTE5MDYwNzE3MDgwNloXDTI3MDgyNDE3MDgwNlow > gcgxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNYXJ5bGFuZDEXMBUGA1UEBwwOQmFs > dGltb3JlIENpdHkxDzANBgNVBAoMBlBEIEluYzEuMCwGA1UECwwlQ3Jlc2FwdG93 > biBEZXZlbG9wbWVudCAtIGRvIG5vdCB0cnVzdDEiMCAGA1UEAwwZQ3Jlc2FwdG93 > biBEZXZlbG9wbWVudCBDQTEoMCYGCSqGSIb3DQEJARYZY3Jlc2FwdG93bkBsaXN0 > cy5wZGluYy51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOkm1BOa > TJFLu/DkTIdDGfCH9XJ8Gyh3MW5rCV79Wcdn5opxbNpDUMsQ2ZtXNTOdbFXGtrTF > OXDSjjQqxVuH3l/sVFT9R1+sDPb5vmv3haXxb95k9ZBiQ/UMFKl/57js41PdB4QJ > CG6aOYORYw4RwiWVwTTXKVsuJZ37Xbmy5ZCpapZR6bheK/Rmj7Ug8RhTW11KS7q3 > gBTEswz8iliXoMTVQyZii/j5KzeI6yHPdnJD+OHOmVZj++8fqivoncipNWVqag4z > BmNHo+SpXExAienyanRzYmYLij+MM5FKax5maA1X+tnJHz7XZSmdsVul9WgLh/CL > 5zhpFQ3ZAppCObUCAwEAAaNQME4wHQYDVR0OBBYEFJLTYmI/8fhQDuPstTanxWQw > MtMaMB8GA1UdIwQYMBaAFJLTYmI/8fhQDuPstTanxWQwMtMaMAwGA1UdEwQFMAMB > Af8wDQYJKoZIhvcNAQELBQADggEBAMsH5VIpxzQW7PPTdoyMn5yM2XtwnZ8VcO8G > k5MrT3cAYCtmJXtxQlZ13pKrmgnXQ12FW88M7XZLZrEcjIysAIqhAaM1a1sTB146 > WXoAOq6Hmv4R8ZZHIZb8h6B8VHfTltxHenvF1ryWAQDwiCjnp74UFO5Wn2oz1E6G > V9pXGswb/fu57tdMLE056lKAWb5ybsPzedXg+yGH5RHPZE8NkcscyiNZaGgGk3hT > SmmUA+vD/P8S6ib/spk2BX1TdCHAfwbSCQKtpU59jtYJOcjjczbUFOUD+qkO4tDL > simLRJr3/EFIH9TkRWMYgeP5OUTa1OpTR+GCyETfTzKTQs38KIcxggJoMIICZAIB > ATCB3jCByDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE1hcnlsYW5kMRcwFQYDVQQH > DA5CYWx0aW1vcmUgQ2l0eTEPMA0GA1UECgwGUEQgSW5jMS4wLAYDVQQLDCVDcmVz > YXB0b3duIERldmVsb3BtZW50IC0gZG8gbm90IHRydXN0MSIwIAYDVQQDDBlDcmVz > YXB0b3duIERldmVsb3BtZW50IENBMSgwJgYJKoZIhvcNAQkBFhljcmVzYXB0b3du > QGxpc3RzLnBkaW5jLnVzAhEAqeKmelCIlyyMhm1LhFx/bDANBglghkgBZQMEAgEF > AKBcMA8GCSqGSIb3LwEBCDECMAAwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAv > BgkqhkiG9w0BCQQxIgQgKSPlaaSRml+BHdiFKPF6gCs44f0buEO758XaSigeR84w > DQYJKoZIhvcNAQELBQAEggEAQb/BtdXnHW1eF0F8oys2esbjY3LrO98LR5qqqUIQ > CLi7APZ44LQzmZO/TQCQVBlfU9KCxuoViWZ9spWqs2qJV6nXJTOBrjnpT1rYmN38 > ZfeTt2BuvYLJJW2mpuqqqToYyBfEUna3vQXF9RTxxs+f19v0RCkzycuvZnw7UGF/ > 6zA34R1mOHjbxEBdbNdJLISrGJky2TIMDkA/wkGr+1dBjJKLhtaw3wLkJ5ycePsg > ENHLp81Gmsw0ybT8vrh6lYmdwLa1pGhUMuvJUnfUNM789owyJToMIc9mlDkEQq0F > t2oh4mvqI8Mg7MWd9sZgzYUPpNVv9Vp8ameIylwv1Ue/YA== > -----END PKCS7----- > > > -- > Jason Pyeron | Architect > PD Inc | > 10 w 24th St | > Baltimore, MD | > > .com: [email protected] > tel : 202-741-9397 > > > >