ÿØÿà JFIF 

  
 
  ÿÛ „ 
 !.%+&8&+/1555$;@;4?.451
4,$,44444444444414444444444444444444444444444444444444ÿÀ  á á
" 

ÿÄ   



           
 ÿÄ ? 
    
 !1AQaq"2‘¡±ÁðBRbrÑá#‚’¢²3S CñÿÄ 
 

             
ÿÄ ! 
 
 
       
!1QAa‘2ÿÚ 
  ? 5˜Z¯V¦cø)›t/? z¨±>Õ5€¶‹Á¤·¼z¼Ü¬+ñ®v¤¨_ˆR­BFn©—˜ý®ç̝P8gýt·ÉSTŦˆìät?þé¼íìN/Þa)ì–í6ô…
Ï¿øÃj´¿KÇü]ÿ ªô¹-eKànëÕHTx}ýSÜ›ÿ ”7Ø×&µ<¦  ¥ÑO¶[Ù¯ä¨ÞÃÿ PZ-¬;#õ|•
oaÿ ©CìÞz3˜öː/¤­ñTûIØ}š^   mÓ%ªxˆ¥ÉŸu=Z+ISe¿45™¼u;ú&WØ÷€æßQ™®{|
íx*TC“#ZŠìZ§²‹ 6pv…³¿¡äª*áZÐ%ÒOáˆo"x«OHk
w±æ+¬V(kMúŸ5Vö«$ ÁrÏbàb57/luR ¸ÑÛj Òµì`Ðœq­û žICÀ
Ê•©4€Âcà¨Ï€O´<èÐ:›ù(Ë^L8þ‘ÍÌ#¸Ð_Ì©ÙK(Öz 4¬û+¸;ü’V’84‘¬ÃŽ:[â‡ÔÌáõp¢~§ªlæ£ö{®G>J¼"°‡7¯ÆÉèßû ‹É‹§ÁòÃýâßî
^ƾÙõ‹×óH#«LP½ïX=xÑÍ$|W?•~•îëÔ©ª‹
{ÝT…Kÿ ”hûâá)J*ö˜–ÔU;iÇ€/ ÆþjóZ\ýwØ=Ìm
ºèËL9 ýè
Æð/¨’¥öo=nË.%Îì   ŽÕ¯È|{Oj²ƒE6e/ßdÄõ²Ìâ1O®ò×TsəԸhOMýíMˆ¿¼H˜l²,7Â¥#MF/Úf°Ö½± ¸–dr‹NýÊ íjqx{œÉ ä-È    ¦
øÄër¨q°ð
†nцýÑÄÆ’mä…n<0È™;ÁÝá¯ÁZƒ7FÀmì­ É&9ˆîéi¶ùN§Y•ÃZãAâ?•‡©‰ , ó¾IŸŠc1 4â&y­&pŠ­6;M À 0¹qç»p.á …ŸÅáK@<u %Ü6ÓtIÌpÓr»söfeÁ0O…­´Kƒ&ñ™\©<+,~)‹
ºHÐ*×µ&†ž‘Æ÷ÚŸ
1ßjC5Oh´‡›

Ø×ë æâ“Þà

ÒT]§n{ºöB³ ¦ ̹Â8Êï¦MÉ<„¨s¹¶ì7Ì”æR$Ncà! /éþäRM÷Gƒ¿É$
¦oà>%6·y6ƒ‰3?”úºŽ‰éX5ªPT §µ!=Mž«Ú½‹ÅgÂSâÉaþÓoö–¯ÁÔìR>5éÿ üs¶ÆUcÌ  kÇR
]ÿ ù¬¼«VŽ;Â|‡~¢¦”ÏÅ°æ
{L™Õ°Óv¹ò¸írŽ¡×¢CÃ!íVÕ {¶»sŒNPg/
"uÕbkm²“$ďå¿é¹§°½æz¯6 †s¿!s–wÚÝ“™Œ°.ûj>·+™Òa…©Œ&rÝÎtÛë긪Ît’LAVp%c Úý[ÄzJ¾ÇàXXç@˜ó<êL]·T˜¾¥1Ó©V‡g´æ½¦Ý@¹óø!_@´ÞâSÁ —S3™•& ]@JHÚý©ZŽ €×æÔr»Áf!‡yÞ4Mv*èÓã_{‘åóUuљØ«Oïé*®EvÑ
Œ÷‡U \"㪒ÍK+À 4“M¡ï:0¥5í!'<@î´”>Ç»&Z–ïCCV˜Ì5Šo&îhè.žû
|ÓK©h$s6KìŒëã)¹hI¦GïOåóI;ììü#É$Š0…Ææ¥TØ.5­¾gn´ “ÂÖ\:hœ89G)J@„}œ:’Ò{/Š"¦_Æ×7Æ3VÇŠÊa]ÚŒÙ€Ä–=®uÁßâACZƒ§§£Qnâ:«,×{tyø¬iÛcœÜÄ€H½ÄÍCk´÷šß
.W'b¤Íåh]÷€=,Žv×cÚEÚHXJX¶îo¨FÒtèöŸ>ªª6[J®Fµ£sGÁeqõfe\íjÒÐïÄÐGˆe1Ø‹.Ø”‘Ëuø
Y­ˆÜŽG|zùªüMpDnQWÄ”%JŠ™)â*p@Örš«ÕT2Ð%ˆG#ª„
·¤!°ŸOTÂT¸aÚ%4&h™LµšØüÐ.F¿²ÐÞ_Ç‚¾ÅÃaÜ÷09Æ 
q€öy˜v‡85õN÷]¬äѼóS{°_MŽ¬úÔ#°Ç¸0åÞè2ëôPcvÆw9®ií1Ä8F™˜à‰´+‰Ik1òÝ7“Ñ×ÒsÝ\x‚h`ÞÑ`ó"|µEcý£n˜h`}GÞ  !±ù²Ápü²
ß6
0ïi󜵩SÈÇ7˜-ÕURO˜¦´f$ªž-Í6(œ}<„ éc øs]ŽŽ„*—¾
ìdŽ„)méª\¿êÎIg¾ØÞ~I#C/¼¼´EÁÈŽi8“©õådô·>euä ƒ'Ê×लR1ÉJE1ÐAát`t;ÇР%Ý<‡¥„ÍÆ`×Oyó)õiI€ñQaŸ4Ûù\áàaÃÔ¹HÃu¹*k€¦<„eS‡&õÏ
B!ŽhüÞ`yj}mªf×\¿
Ç~æ­9‡û\՞Ǖg²1Žû5V7 !àöšm°
c`ܬøÇìµÒ'P"?…´Ö,"§^•õŽ¨sÔ)6˜sæéÍR¼
ò|Sl”‹7 nPW

Gòú÷½§O¯‡„l¡kSÞŒr½PÊ@æ¢pŽ-mÿ #Ÿ˜Àº¶Áä¦;ïÔæ$1££`“Õ>„—·ž)ß
ð
³ñ#Ï Ô$¶œ‰ÊE‹À;÷º
¯«P:Ñ”8–IÊtpÞ3ª“>ê“þës4ò2OÏÕ­±zô†Õ§‰.÷ä¸;¿˜“'œ›žª}«Œ{ª±Ì 9ÔóÞÕ‡0
$íWV3Üì¬
—@kÝ4@¿r¼±½¬™›?øØæ´'Áé®CË3-g$˜ö‡×auÚi´Žp/êÛæF›Ú2v‹ã¿¿,nB1̨ƃqÞa5͝@&Æû“él÷ \C²½UÍc ¯k×¢U
ÖéQå™—-r    wô ÞÏ<Ò=&=ÿ Ôê Òêˈt,i—;LîÜ á¸*ÚÃ1$êL•LÍ <É)ýÐà’
;F™{ƒ™˜€&'}‚ãÄK`¡ÞT@I;®žZóè‚s’7®°›+§O­Åq©é»²9<Ô
J ¼9O’HL»Ùïì¸rk¼Ž_ý‘TŸu[²ßÚŒ·ü÷B%¯E ŸÔX5êO´Ç•€’I0 É<mÆÈJoúáõóQâØòÙaÙt:  ·=|Ôaz]a1cÉŸ1
4˜à3΍}GFøí7/B«vεŕL=Ðr1ÕšnwH›óÞ¢ºö{)´4€æZç^ÿ yÑ:_([¿ipqQÊ^âÆe;»½“¦º|¢ÀTçèrú1”óTÃ’u¦CG¤ ¡
Š­7ë

·i“¿z»n
ö¼±ù^ö<‹çu7¸ÈlvZðÛAUXje•
dLÞH ÚosÇr`È™‡pÊeÇ4@x7´)ö†Ótœ~i‘Ï[x@äUÃæ­m·e´x
°t¸·²5'žªža   =ÖÌåzϘ'-´ˆpž3§ò‡k  Ý'‰ýÑï¦3ºdè“{eiÔõNkîšECEΠ¥ÃT9ãqÃâŸîɐ8z \?€    >JX` 
ñ¹õ%;µŸD‘«´€àwÒ™UûئžÖö\×®×´8 ½‡ºÐÆÓ§?Àkmœ=;d5*@-ì0F Rªýš[Ü6âö̃ڸr*KA9· u*µæ£?U¸Âêí†8@¦X4 e-ò„0s{ HâUpU?¼mñRa°®a%Ð'tÉ×’\¾ÊÉ]t›h>·(Ë@R¼¡Ãt h}’O÷au<+nT…Ö…MӐ??Óe95 q>í/;&JSû °¯ÊéÞøƒ*Ã2½Ài&:nôUl=¾¿5eˆ3”ñc|Ú2V”>„»&eE;«ÚäC
p¢Ûúy 9š[ŒÌx¼擼A&DåÒ¯ˆ¤ÀÌ;"˜ÏQä¸åhÊ}Ûq«Û0WžÒ|»€ø®öCm5•\ÇÀ§Pe3£]0ÃàLDÉ‰1øªxjgwT‚÷¿LΨK‹›ùs—xˆÜ±µ
kæ¸f‰‰ÜGk/LÛØ6d9ò¶ùA{ƒA3š/¬D¬khÓk‰`˜"㯒r¿±Óã jx‡°e}<Ñø\3y:'À•/h½Í€Ç4~g ?Û(¼]v‘ªlKÎâ~?O‚W%{Ì:“'©úNq¾›úo(X’¥¯ˆ
nFê{Ç€ü?º'ë
ø‹ì
Þ09ŒÌç9Æ —ËC`j@ÓÄ(+a‹un¸#ÂꟋ{K`‘ÑÍÍ'à´»/Û,KW;Þ4²þð ï Nm|~fGÏ(…³Ã)«1ö­Õ
¥‡¨©ƒÃ™ü-s=à=U66Ï«Ýc蓦W¹íž®›nÔ%êÇìŒ<#Ü×84ån®Ð ÒåOC`  ñânÑs‡¢ç 1õ%Îhì½Ã½® e:ݼUZo
™`  
ÅZŸŒÊ«ê1ÏÄo$q¹Þ€©ˆhÐÉä¯ñ[!…Ú˜àJ:x2$Íß&PåT£6ç—
‡Í*4Ýšçjÿ ‰É nófÐ ó(L5C•åÆ\rMÒ@ò
}y-W}™üýVù—ú¢=Ù”c®‘< M ž
´Phr¦©TD ‘ù.$´÷O‡‘V2Æò.=IUŒ=ž‡â¬i™aþÓåÙ?òUø'ØÖ•.~* šTŒ!•-×áºTâ®ä#õü'´ eýlYÅÓeÕKÂrT"CÚ@u!Óxƒ{š3€}1¿(r}%«nËamjÑ%ÑNEò
v  ˜à  σöK³,*º.àzù¨™Ó ÚçâU¦*¿ 9{%Ö¹ njûdaXöb)  kÛƱûÓ\°M7ˆÂ=û›ç¿Ã‚­V»Cg–8ÙêE-j)k$º`Ã-ùEýeBÆÇ]c¡°ñty&Òd0nõ'¡W+ƒ*|–ø<K\%¦cÏÄ#N,Úú‘¤òÒÛõ ’¶§‰Ì
ú•dçb31Ð\7‡ëÚw82
‰KÝkÚñ'¢Ž…[&¼ÌAÔzHàP *اoßreÁY¥Ñ¾ãE|&QbKg]ã„þê*b;R³Öi‹  ±î$£ÈTm¶k÷ˆ
¦»Ù¹i¦¨6 h%Á'Ú
J   \F±â+‹b/Å9ñå5Àë­nˆRv«¯#„&î„$º’@:‘Ôrø+,àq‘秬*Úg´>µFa\GQªEAÔp5\Ǽ·¼Ç8·õ -â§Ú[
‡
uZeÖ 3}×d'+¹:ð+K†Û®s!Ï$úe€<Û”x)1»a­¡LC]¸µík…ÚàA»AYº{†ªS[¦5HÒ7ù
--,ísòDØ€èk   ÞÀîÜò@â(  ËNˆë›4ô½•/¦o‡€Û7
ê•ÆêòðÜy
'Án½µ á˜ݦ  ndeo…[ì¶Ê,¥R³Ä=À±—–ß;£™´ñSâ*g§”ïaið‘Jå~™ÓÞß³Õ¢»8x埒²52>AÊb&-÷\7´éÄù€T˜,w;3{ï˜k…à¹ÄqÀ«œ{
€\
ˆ¾[´¨јr &Úé„Ívˆ±8†¿]|¬ņ4I×pÞS1ÈÖz‰#Ìv‡G!YNògñ:màTz¢Ý1ô©^O=~ë|5Bã™ç•¼µõ•bÆ@úÕS¬ÈŒ#¬zünrŸ
û”
Z²•ï›èðV"ÁHÚý©wÝ €7¼Ìu1hÑa3Éä û f$o¿É ™Ú›ÝçnpÒ3äÌ3†Í§,Äï]$‰/pê†«À¼
¸e9­Æê_C]žƒ·ý·frÁN«,E=›Çq
-‰öŒ:aÏ¿±í&£Í:-}
84‘ÿ eƒQÑeëSsuiA
³g㟥ú£?ÿ ʼn*”“÷aühe:ÊWa@ÒÞk±eØ]
F Ô—r.åä˜@ö¥ªZoÐýYL·¥S²G/‡ñ
<~*ZÆ´è>JlòàÛƽÿ 窘ìGN¢:I®KšJp/`íIÁÀõ#Ä-€ö­šµŒoF4|ÆQØÆ@Ì|£Ô…¢À{9˜è½Üó›€ôYÒÎYsið;ís¤€à²ˆ‚4qÉVŒI$  ‰"°   æµ8cXGjœˏ¡Aâý•ËÜ¢ûïe·çLx']á"oÅÎê3¯Ç—¹”ó0nå‚âg{Œñ>
S´˜îè°g238‚ãköÝfÚd´6Ò€;ò÷±¢™¼›º¢Æ'¥Ðx'e¬ç
]bÈÆV¢ó‹kýBO
ðÊâ$Ÿ!×T
3Mýמ
žìٍàÌü‘8÷€àæØ8æ©6‰©L´«…oãpð„~Çk‰!ñ;‹”ÛžÍ àž±z Ÿôû øŸÝužÏ;ÿ #|u6™Þ¬ÚˆÐõA4¶â|ôl|Ê2ŽÇ¤ÝÅÇY.<#Aí.k§hóF‚”Y;
M½Ö4hŸ4&›­¿tès´%FìL¥£Ãk‰ÇT¤haÁ¤ÚxfÉ`ÑìË›>i 3t‚:,–+^÷´–{Û–Nxi"x‘Ûg
î¨>¥Õ܁ùZH,2Û“:8xÊ¢Çí9.É-Ìâã-=çjwµS˜dütžçwýGòú®®ûº_ˆýx$–¡ãøO
EÚÛÏ÷R„×w+3£Á£öUMyR²¹âŒ°š›¸Ñãò9§Ó_Dl+Ùßc›úšGÅÌc†Ž!Ko=¶.‘Îÿ c²(2®V mª.ÿ ¹B›¹å ù„öŸSV>™ü¯$y:G¢Z×àøúdî¹û­·ýÇ´:•c LÍõi_‹ö+ÎæGÊè>OŠ•äž´§Þ{X}¨1ÚTc›»Qþ•êô°t¿OP?eæ~É{5]•ÙR£r5†nZ\ã@
&îJõ ¾àC°þV>fé¥/ü5ñÊIº_é5;e­h<@
Ä&æÃëE%;X,ÒãÆÞ`Oò¦kŸm#˜!ÀyÄ¢|
óLšò¥Ä`
¶R=|ÈCâh5ò3DˆïF†ðÒ#ÅìÛœ?¸yhBãœí
ZxßÎÄhºRK„`Þödvײ™ÀÈÑÒgŒuYw³%†ƒÓzõ ÖÏp‚dH®¦A´ù§»ÓÇMæ~)ˆð‡û:ù&Ä •vGD´À 
n
Ý
‡¼Ö8Fö   óáà£~Ë¥x`oK|Ä?fxiØü%pìR>éò+Û±éÎ>núlFŤ'tq8LZÏvÃ?„¡ß±È⽆¯³íü@x|PöUäèØã¡ð‚ŒAìÏ"vÍwóŸÍ{ ý0.z    È•Ö{,N¡£¡ŸKÕÙž>Ýœþ ÍÀ<n^Àïe€Þgn¹”ÜiQê
9Ú±‡„è]ËA¿‚MJìiÓxŒn-ÄS6!ÓæÑû*jÎWøìšÇ뙦gj~+?\,Ö7ÁÕÊ”G™q6TF)óCç<ÓšÂUé†gW=àà“hóR³ÊQì<!÷ÇpR1¯u„De,è­vvâDß~žHå‰ú£Kìní¢ÐçÅÄÅ¥Ü÷
±ÃìÇžûƒz\þÞ¨-•‹
€

¸+¶n¿^
?†[ÖWóÒX¸,0Ø:l?‰Âý«ÿ ·Dc+fÔ[ƒ›ûªšx«kæž1KI…<#'nž¶\±íÎ8¤ìK@’@J¥v)º[Ž±Æå´¼
½Ý¡ç¯ÐO¥ø®è•Óȱ߿wša©“œt‡4îyªœ&+1ÏØ:‚æƒ=/ꎔ`hm
“=©‹]°g}ì€DgUƒ8¤qCˆãáÅ,‡Ô¬ñ10HÑDÂbáÂÿ Œ»v·:uòB6»áp‰>°<×EA!Å‚D™IúOÍ
¡>ôG}Â`ÍßkÜL™Ž  Þð™
{IøF²
¹òQ3&!ÃÂÞz.d&Ï-sH¸,Ôõ˜ŽP€
77ˆÝ¼ÊëÜw   =cÕ
Ú,ØÐ5ÎYÐ)ì´öœgŒ[¤
ßv㙑8心>h]§µháYš£²ºÑ.{Ï7Sð•?´~×SÃKýJÛ˜
™Íäiúu<µX¶1õ^kâçIÑ£sZ4h>j*ÔšD:4­¿_ ÷¸
Õxæÿ ¸?Mù _•­ÊÐ ä ÷ý ÑwL
œ­ïnTkÛUÍN©ë:¦fV ¶ÜÔÜMªÅâA½–¿R×TXš-%iTÊT•‡Ù‚JôϐZxWÑè‰f‰òG º
×Õû2aZ7OU3[“×AT–ÞŒ…-‘¤”Ì 
ì&(ˆ¿­•ƒkï’:ðY¦W‘Å)“†‘˜³Åtcø˜ñTÂwÚÇ4
|üLÇªí–v-
qˆèU
qPE.†â‘˜µ Æ,ÐÅs]8¾„oúÑ i>ÜxxÈó)ƒ ´æÁâØ$À‰vžŸf$Ž|ãw;ÀÁIJ»b`
{¦Ó¤Ú$©YÀ‘n@Óïž«9J¼êG   m¤
ܯ¹ÌW4€ÐÒÅÛ‡#褕Ÿn-?í|с¥÷Ú¹¬'´ÞÜ9ÓK`hê£SÄSà?7—Wí_´…óB›»:=Ãïq`<8ñÓŒÑlú2d¬ê³£hÖ[l|$vÝro~'R®‰§°ñmY ͧäP
|PUª¹·:3Œ[Û{Xÿ ºâ@‚W–Äé u‚ ¯´*=íή.pûÒdt @
G‰¬ s¸    ëÉücr ÞæѨÊ@>¤¢Ö±.Þ'¯°ÌME[YéïĵÂCå½
Ué©Áû'Ê9%eÔðNU”ë‘ÌsD3/®+UI˜9h.WC”
빓$#:pz:YÓ ¿xž* ³$Í +$kñAŠ‹†¢
Uê>¸)_š¬÷©ßAÂÔb9ÇU ¯¾
á•9¯ÏÏ÷O÷¼¼Fähal1‰3Ì[Ïr•´UCksNÐ]R‘¸¥H+§Šé†c©vÖÞ0iÓ76s†î!§=ß
¼~Ô'°Ãmäoäš³ªøi1úÉ)³yV8CLÄØÁ‘WYïi€H6ÖÑiámø^ÈY´°Ñ7¥Û*—Ñ©L«Qƒï—Ùrÿ ›£Ð*š¸ˆL©ˆ$ˆ ÷¾D§9È®«qbqC)–ˆïv´çñsÑVT­Ø, <àïºÀO«Jý·õ 
àfPìð  .wFšir´þ’2_Y
*Æ€x\«
ì€9š@ Ž|F⇥ˆkZ@hÖÄ0t¿-<“‹qµ¾*ZL¤Ú)&BJpÓF5=$„at*Zš$’ÑtdûÝRI1    2Ž‰$€$I$#‰SÞ’H
ë¬ï;Á$¡t$’`<(ñÇt)$‡Ð.Êf¢X’Kt=Éé$‚ˆªè¢oÝëòI%Rgcª÷ŠyI%¡‰ÿ !ñ)´õ $¤ Ô’IIGÿÙ�

�jPJ����dZd
dl
mZmZmZmZ
ddlmZ
ddlm	Z	m
Z

ddlmZm
Z
mZmZmZmZmZmZmZmZmZmZmZ
ddlmZmZ
ddlmZ
dd	lmZm Z m!Z!m"Z"
Gd
�de�Z#Gd�d
e�Z$Gd�de�Z%Gd�de�Z&Gd�de�Z'Gd�de�Z(Gd�de�Z)Gd�de�Z*Gd�de�Z+Gd�de�Z,Gd�de�Z-Gd �d!e�Z.Gd"�d#e�Z/Gd$�d%e�Z0Gd&�d'e�Z1Gd(�d)e�Z2Gd*�d+e�Z3Gd,�d-e�Z4Gd.�d/e�Z5Gd0�d1e�Z6Gd2�d3e
�Z7Gd4�d5e�Z8Gd6�d7e�Z9Gd8�d9e�Z:Gd:�d;e
�Z;Gd<�d=e�Z<Gd>�d?e�Z=Gd@�dAe�Z>GdB�dCe�Z?GdD�dEe�Z@GdF�dGe�ZAGdH�dIe�ZBGdJ�dKe�ZCGdL�dMe�ZDGdN�dOe�ZEGdP�dQe�ZFGdR�dSe�ZGGdT�dUe�ZHyV)Wz�
ASN.1 type classes for the online certificate status protocol (OCSP). Exports
the following items:

 - OCSPRequest()
 - OCSPResponse()

Other type classes are defined that help compose the types listed above.
�)�unicode_literals�division�absolute_import�print_function�
)
�unwrap)�DigestAlgorithm�SignedDigestAlgorithm)
�Boolean�Choice�
Enumerated�GeneralizedTime�	IA5String�Integer�Null�ObjectIdentifier�OctetBitString�OctetString�ParsableOctetString�Sequence�
SequenceOf)�AuthorityInfoAccessSyntax�	CRLReason)
�PublicKeyAlgorithm)�Certificate�GeneralName�GeneralNames�Namec��eZ
dZd
di
Zy)�Versionr�v1N��__name__�
__module__�__qualname__�_map���@/opt/nydus/tmp/pip-target-mjwu0ny1/lib/python/asn1crypto/ocsp.pyr r (s��	�4��Dr(r c�(�eZ
dZd
efdefdefdefgZy)�CertId�hash_algorithm�issuer_name_hash�issuer_key_hash�
serial_numberN)r#r$r%r	rr�_fieldsr'r(r)r+r+.s)��	�?�+�	�[�)�	�K�(�	�'�"�	�Gr(r+c��eZ
dZd
efdefgZy)�ServiceLocator�issuer�locatorN)r#r$r%rrr0r'r(r)r2r27s��	�4��	�-�.��Gr(r2c��eZ
dZd
di
Zy)�RequestExtensionIdz1.3.6.1.5.5.7.48.1.7�service_locatorNr"r'r(r)r6r6>s��� 1��Dr(r6c�4�eZ
dZd
efdeddi
fdefgZdZdei
Z	y)	�RequestExtension�extn_id�critical�defaultF�
extn_value�r:r=r7N)
r#r$r%r6rrr0�	_oid_pairr2�
_oid_specsr'r(r)r9r9Ds=��	�&�'�	�W�y�%�0�1�	�*�+��G�*�I��>��Jr(r9c
��eZ
dZeZy
)�RequestExtensionsN)r#r$r%r9�_child_specr'r(r)rBrBQs��"�Kr(rBc�V�eZ
dZd
efdeddd�fgZdZdZdZd�Z	e
d	��Ze
d
��Zy)�Request�req_cert�single_request_extensionsrT��explicit�optionalFNc
�
�t
�|_
|d
D]g}
|
dj}d|z}t||�rt	|||
dj
�
|
djs
�M|jj
|�

�id|_y)�v
        Sets common named extensions to private attributes and creates a list
        of critical extensions
        rGr:�	_%s_valuer=r;TN��set�_critical_extensions�native�hasattr�setattr�parsed�add�_processed_extensions��self�	extension�name�attribute_names    r)�_set_extensionszRequest._set_extensions_s���%(�E��!��9�:�I��Y�'�.�.�D�(�4�/�N��t�^�,���n�i��.E�.L�.L�M���$�+�+��)�)�-�-�d�3�
;�&*��"r(c
�R�|js|j�
|jS�
z�
        Returns a set of the names (or OID if not a known extension) of the
        extensions marked as critical

        :return:
            A set of unicode strings
        �rVr\rP�
rXs
 r)�critical_extensionszRequest.critical_extensionsq�%���)�)�� � �"��(�(�(r(c
�V�|jd
ur|j�
|jS)z�
        This extension is used when communicating with an OCSP responder that
        acts as a proxy for OCSP requests

        :return:
            None or a ServiceLocator object
        F)rVr\�_service_locator_valuer`s
 r)�service_locator_valuezRequest.service_locator_value�*���%�%��.�� � �"��*�*�*r()
r#r$r%r+rBr0rVrPrdr\�propertyrarer'r(r)rErEUsc��	�V��	$�&7�a�UY�9Z�[��G�
"����!��*�$�)��)��+��+r(rEc
��eZ
dZeZy
)�RequestsN)r#r$r%rErCr'r(r)riri�s���Kr(ric��eZ
dZd
di
Zy)�ResponseTypez1.3.6.1.5.5.7.48.1.1�basic_ocsp_responseNr"r'r(r)rkrk�s��� 5��Dr(rkc
��eZ
dZeZy
)�AcceptableResponsesN)r#r$r%rkrCr'r(r)rnrn�s���Kr(rnc�"�eZ
dZd
efdeddi
fgZy)�PreferredSignatureAlgorithm�sig_identifier�cert_identifierrJTN)r#r$r%r
rr0r'r(r)rprp�s"��	�0�1�	�.��T�0B�C��Gr(rpc
��eZ
dZeZy
)�PreferredSignatureAlgorithmsN)r#r$r%rprCr'r(r)rtrt�s��-�Kr(rtc��eZ
dZd
ddd�Zy)�TBSRequestExtensionId�nonce�acceptable_responses�preferred_signature_algorithms)�1.3.6.1.5.5.7.48.1.2z1.3.6.1.5.5.7.48.1.4z1.3.6.1.5.5.7.48.1.8Nr"r'r(r)rvrv�s�� '� 6� @��Dr(rvc�8�eZ
dZd
efdeddi
fdefgZdZee	e
d�Zy)	�TBSRequestExtensionr:r;r<Fr=r>)rwrxryN)r#r$r%rvrrr0r?rrnrtr@r'r(r)r|r|�sA��	�)�*�	�W�y�%�0�1�	�*�+��G�*�I�� 3�*F��Jr(r|c
��eZ
dZeZy
)�TBSRequestExtensionsN)r#r$r%r|rCr'r(r)r~r~�s��%�Kr(r~c�@�eZ
dZd
eddd�fdeddd�fd	efd
eddd�fgZy)
�
TBSRequest�versionrr!�rIr<�requestor_namerTrH�request_list�request_extensions�N)r#r$r%r rrir~r0r'r(r)r�r��s@��	�G�!��=�>�	�;�Q�D�(I�J�	��"�	�3�!�QU�5V�W�	�Gr(r�c
��eZ
dZeZy
)�CertificatesN)r#r$r%rrCr'r(r)r�r��s���Kr(r�c�*�eZ
dZd
efdefdeddd�fgZy)�	Signature�signature_algorithm�	signature�certsrTrHN)r#r$r%r
rr�r0r'r(r)r�r��s)��	� 5�6�	�n�%�	�,�Q�D� A�B��Gr(r�c�~�eZ
dZd
efdeddd�fgZdZdZdZdZ	dZ
d�Zed	��Z
ed
��Zed��Zed��Zy)
�OCSPRequest�tbs_request�optional_signaturerTrHFNc
�
�t
�|_
|d
dD]g}
|
dj}d|z}t||�rt	|||
dj
�
|
djs
�M|jj
|�

�id|_y)	rLr�r�r:rMr=r;TNrNrWs    r)r\zOCSPRequest._set_extensions�s���%(�E��!��m�,�-A�B�I��Y�'�.�.�D�(�4�/�N��t�^�,���n�i��.E�.L�.L�M���$�+�+��)�)�-�-�d�3�
C
�&*��"r(c
�R�|js|j�
|jSr^r_r`s
 r)razOCSPRequest.critical_extensions�rbr(c
�V�|jd
ur|j�
|jS)z�
        This extension is used to prevent replay attacks by including a unique,
        random value with each request/response pair

        :return:
            None or an OctetString object
        F�rVr\�_nonce_valuer`s
 r)�nonce_valuezOCSPRequest.nonce_value
�*���%�%��.�� � �"�� � � r(c
�V�|jd
ur|j�
|jS)a(

        This extension is used to allow the client and server to communicate
        with alternative response formats other than just basic_ocsp_response,
        although no other formats are defined in the standard.

        :return:
            None or an AcceptableResponses object
        F)rVr\�_acceptable_responses_valuer`s
 r)�acceptable_responses_valuez&OCSPRequest.acceptable_responses_value
s*���%�%��.�� � �"��/�/�/r(c
�V�|jd
ur|j�
|jS)aj

        This extension is used by the client to define what signature algorithms
        are preferred, including both the hash algorithm and the public key
        algorithm, with a level of detail down to even the public key algorithm
        parameters, such as curve name.

        :return:
            None or a PreferredSignatureAlgorithms object
        F)rVr\�%_preferred_signature_algorithms_valuer`s
 r)�$preferred_signature_algorithms_valuez0OCSPRequest.preferred_signature_algorithms_value 
s*���%�%��.�� � �"��9�9�9r()r#r$r%r�r�r0rVrPr�r�r�r\rgrar�r�r�r'r(r)r�r��s���	�
�#�	�y�q�d�*K�L��G�
"�����L�"&��,0�)�*�$�)��)��!��!��0��0��
:��
:r(r�c��eZ
dZd
dddddd�Zy)	�OCSPResponseStatus�
successful�malformed_request�internal_error�	try_later�
sign_required�unauthorized)rrr����Nr"r'r(r)r�r�1
s��������
�Dr(r�c�(�eZ
dZd
eddi
fdeddi
fgZy)�ResponderId�by_namerIr�by_keyr�N)r#r$r%rr�
_alternativesr'r(r)r�r�<
s%��	�D�:�q�/�*�	�;��Q��0��Mr(r�c�"�eZ
dZd
�Zed��Zy)�
StatusGoodc�|�|
�3|
dk7r.t
|
t�sttdt	|
�
��
�
d|_y
)z`
        Sets the value of the object

        :param value:
            None or 'good'
        N�goodzK
                value must be one of None, "good", not %s
                r(��
isinstancer�
ValueErrorr�repr�contents�rX�values  r)rOzStatusGood.setE
sD�����&���E�4�9P��V���U��	��
���
r(c
��y
)Nr�r'r`s
 r)rQzStatusGood.nativeW
s��r(N�r#r$r%rOrgrQr'r(r)r�r�D
s���$�
��
r(r�c�"�eZ
dZd
�Zed��Zy)�
StatusUnknownc�|�|
�3|
dk7r.t
|
t�sttdt	|
�
��
�
d|_y
)zc
        Sets the value of the object

        :param value:
            None or 'unknown'
        N�unknownzN
                value must be one of None, "unknown", not %s
                r(r�r�s  r)rOzStatusUnknown.set^
sE�����)�!3�J�u�d�<S��V���U��	��
���
r(c
��y
)Nr�r'r`s
 r)rQzStatusUnknown.nativep
s��r(Nr�r'r(r)r�r�]
s���$�
��
r(r�c�$�eZ
dZd
efdeddd�fgZy)�RevokedInfo�revocation_time�revocation_reasonrTrHN)r#r$r%rrr0r'r(r)r�r�u
s ��	�O�,�	�i�a�T�)J�K��Gr(r�c�4�eZ
dZd
eddi
fdeddi
fdeddi
fgZy)	�
CertStatusr��implicitr�revokedrr�r�N)r#r$r%r�r�r�r�r'r(r)r�r�|
s3��	��j�!�_�-�	�K�*�a��1�	�M�J�
�?�3��Mr(r�c�:�eZ
dZd
eddd�fdeddd�fdeddd�fgZy	)
�CrlId�crl_urlrTrH�crl_numr�crl_timer�N)r#r$r%rrrr0r'r(r)r�r��
s6��	�I�A�4�@�A�	�G�!��>�?�	�_�1�$�&G�H��Gr(r�c��eZ
dZd
dddddd�Zy)	�SingleResponseExtensionId�crl�archive_cutoff�
crl_reason�invalidity_date�certificate_issuer�!signed_certificate_timestamp_list)z1.3.6.1.5.5.7.48.1.3z1.3.6.1.5.5.7.48.1.6z	2.5.29.21z	2.5.29.24z	2.5.29.29z1.3.6.1.4.1.11129.2.4.5Nr"r'r(r)r�r��
s�� %� 0�"�&�)�#F�
�Dr(r�c�>�eZ
dZd
efdeddi
fdefgZdZee	e
e	eed�Z
y)	�SingleResponseExtensionr:r;r<Fr=r>)r�r�r�r�r�r�N)r#r$r%r�rrr0r?r�rrrrr@r'r(r)r�r��
sJ��	�-�.�	�W�y�%�0�1�	�*�+��G�*�I��)��*�*�-8�
�Jr(r�c
��eZ
dZeZy
)�SingleResponseExtensionsN)r#r$r%r�rCr'r(r)r�r��
s��)�Kr(r�c	���eZ
dZd
efdefdefdeddd�fded	dd�fgZd
ZdZ	dZ
dZdZdZ
dZd�Zed
��Zed��Zed��Zed��Zed��Zed��Zy)�SingleResponse�cert_id�cert_status�this_update�next_updaterTrH�single_extensionsrFNc
�
�t
�|_
|d
D]g}
|
dj}d|z}t||�rt	|||
dj
�
|
djs
�M|jj
|�

�id|_y)rLr�r:rMr=r;TNrNrWs    r)r\zSingleResponse._set_extensions�
s���%(�E��!��1�2�I��Y�'�.�.�D�(�4�/�N��t�^�,���n�i��.E�.L�.L�M���$�+�+��)�)�-�-�d�3�
3�&*��"r(c
�R�|js|j�
|jSr^r_r`s
 r)raz"SingleResponse.critical_extensions�
rbr(c
�V�|jd
ur|j�
|jS)z�
        This extension is used to locate the CRL that a certificate's revocation
        is contained within.

        :return:
            None or a CrlId object
        F)rVr\�
_crl_valuer`s
 r)�	crl_valuezSingleResponse.crl_value�
s(���%�%��.�� � �"����r(c
�V�|jd
ur|j�
|jS)z�
        This extension is used to indicate the date at which an archived
        (historical) certificate status entry will no longer be available.

        :return:
            None or a GeneralizedTime object
        F)rVr\�_archive_cutoff_valuer`s
 r)�archive_cutoff_valuez#SingleResponse.archive_cutoff_value�
s*���%�%��.�� � �"��)�)�)r(c
�V�|jd
ur|j�
|jS)z�
        This extension indicates the reason that a certificate was revoked.

        :return:
            None or a CRLReason object
        F)rVr\�_crl_reason_valuer`s
 r)�crl_reason_valuezSingleResponse.crl_reason_value�
s*���%�%��.�� � �"��%�%�%r(c
�V�|jd
ur|j�
|jS)a=

        This extension indicates the suspected date/time the private key was
        compromised or the certificate became invalid. This would usually be
        before the revocation date, which is when the CA processed the
        revocation.

        :return:
            None or a GeneralizedTime object
        F)rVr\�_invalidity_date_valuer`s
 r)�invalidity_date_valuez$SingleResponse.invalidity_date_value
s*���%�%��.�� � �"��*�*�*r(c
�V�|jd
ur|j�
|jS)z�
        This extension indicates the issuer of the certificate in question.

        :return:
            None or an x509.GeneralNames object
        F)rVr\�_certificate_issuer_valuer`s
 r)�certificate_issuer_valuez'SingleResponse.certificate_issuer_values*���%�%��.�� � �"��-�-�-r()r#r$r%r+r�rr�r0rVrPr�r�r�r�r�r\rgrar�r�r�r�r�r'r(r)r�r��
s���	�F��	�
�#�	��(�	��a�T�)J�K�	�6�Q�TX�8Y�Z��G�"�����J� ����!�� $��*�$�)��)������*��*��
&��
&��
+��
+��
.��
.r(r�c
��eZ
dZeZy
)�	ResponsesN)r#r$r%r�rCr'r(r)r�r�(s�� �Kr(r�c��eZ
dZd
dd�Zy)�ResponseDataExtensionIdrw�extended_revoke)rzz1.3.6.1.5.5.7.48.1.9Nr"r'r(r)r�r�,s�� '� 1��Dr(r�c�6�eZ
dZd
efdeddi
fdefgZdZee	d�Z
y)	�ResponseDataExtensionr:r;r<Fr=r>)rwr�N)r#r$r%r�rrr0r?rrr@r'r(r)r�r�3s>��	�+�,�	�W�y�%�0�1�	�*�+��G�*�I����Jr(r�c
��eZ
dZeZy
)�ResponseDataExtensionsN)r#r$r%r�rCr'r(r)r�r�As��'�Kr(r�c	�>�eZ
dZd
eddd�fdefdefdefded	d
d�fgZy)
�ResponseDatar�rr!r��responder_id�produced_at�	responses�response_extensionsrTrHN)	r#r$r%r r�rr�r�r0r'r(r)r�r�EsA��	�G�!��=�>�	��%�	��(�	�i� �	� 6�Q�TX�8Y�Z��Gr(r�c�0�eZ
dZd
efdefdefdeddd�fgZy)	�BasicOCSPResponse�tbs_response_datar�r�r�rTrHN)r#r$r%r�r
rr�r0r'r(r)r
r
Os1��	�l�+�	� 5�6�	�n�%�	�,�Q�D� A�B�	�Gr(r
c�(�eZ
dZd
efdefgZdZdei
Zy)�
ResponseBytes�
response_type�response)r
r
rlN)	r#r$r%rkrr0r?r
r@r'r(r)r
r
Xs.��	�,�'�	�(�)��G�
.�I��0��Jr(r
c��eZ
dZd
efdeddd�fgZdZdZdZdZ	d�Z
ed	��Zed
��Z
ed��Zed��Zed
��Zy)�OCSPResponse�response_status�response_bytesrTrHFNc
�4
�t
�|_
|d
djddD]g}
|
dj}d|z}t	||�rt|||
dj�
|
djs
�M|jj
|�

�id	|_y
)rLr
r
r
r
r:rMr=r;TN)rOrPrTrQrRrSrUrVrWs    r)r\zOCSPResponse._set_extensionsos���%(�E��!��.�/�
�;�B�B�CV�W�Xm�n�I��Y�'�.�.�D�(�4�/�N��t�^�,���n�i��.E�.L�.L�M���$�+�+��)�)�-�-�d�3�
o
�&*��"r(c
�R�|js|j�
|jSr^r_r`s
 r)raz OCSPResponse.critical_extensions�rbr(c
�V�|jd
ur|j�
|jS)z�
        This extension is used to prevent replay attacks on the request/response
        exchange

        :return:
            None or an OctetString object
        Fr�r`s
 r)r�zOCSPResponse.nonce_value�r�r(c
�V�|jd
ur|j�
|jS)z�
        This extension is used to signal that the responder will return a
        "revoked" status for non-issued certificates.

        :return:
            None or a Null object (if present)
        F)rVr\�_extended_revoke_valuer`s
 r)�extended_revoke_valuez"OCSPResponse.extended_revoke_value�rfr(c
�&�|d
djS)z�
        A shortcut into the BasicOCSPResponse sequence

        :return:
            None or an asn1crypto.ocsp.BasicOCSPResponse object
        r
r
�
rTr`s
 r)rlz OCSPResponse.basic_ocsp_response�s���$�%�j�1�8�8�8r(c
�,�|d
djdS)z�
        A shortcut into the parsed, ResponseData sequence

        :return:
            None or an asn1crypto.ocsp.ResponseData object
        r
r
r
r
r`s
 r)�
response_datazOCSPResponse.response_data�s!���$�%�j�1�8�8�9L�M�Mr()r#r$r%r�r
r0rVrPr�r
r\rgrar�r
rlr
r'r(r)r	
r	
ds���	�.�/�	�=�q�d�*K�L��G�
"�����L�!��*�$�)��)��!��!��+��+��9��9��N
��N
r(r	
N)I�__doc__�
__future__rrrr�_errorsr�algosr	r
�corerrr
rrrrrrrrrrr�rr�keysr�x509rrrrr r+r2r6r9rBrErirkrnrprtrvr|r~r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r�r
r
r	
r'r(r)�<module>r

s�


�
�
S
�R��9�
�
�
�
�
6�$�>�>�
�g�
�
�X�
�
�X�
�
�)�
�

�x�

�

#�
�

#�6
+�h�6
+�r


�z�

�
�#�
�

�*�

�
�(�
�

.�:�

.�
�,�
�
�(�
�

&�:�

&�
��
�

�:�

�
��
�W

:�(�W

:�t
��
�
�&�
�
��
�2
�D�
�0
�(�
�
��
�
�H�
�
� 0�
�
�h�
�$

*�z�

*�u

.�X�u

.�p

!�
�

!�
�.�
�
�H�
�

(�Z�

(�
�8�
�
��
�	
�H�	
�[

N
�8�[

N
r(