AzStackHci.DiagnosticSettings

0.6.4

Private/AzStackHci.Constants.ps1

                                # ////////////////////////////////////////////////////////////////////////////

# Module Constants

# Centralized configuration values for the AzStackHci.DiagnosticSettings module.

# All constant numbers and hardcoded values are defined here for easy maintenance.

# ////////////////////////////////////////////////////////////////////////////

# --- Memory Dump Settings ---

# Default dedicated dump file size for systems with less than the large memory threshold

[uint32]$script:DUMP_FILE_SIZE_DEFAULT_MIB = 65536        # 64 GiB

# Dedicated dump file size for large memory systems (>= $LARGE_MEMORY_THRESHOLD_BYTES)

[uint32]$script:DUMP_FILE_SIZE_LARGE_MIB = 131072         # 128 GiB

# RAM threshold (in bytes) above which the large dump file size is used

[uint64]$script:LARGE_MEMORY_THRESHOLD_BYTES = 768GB

# Disk space reserve percentage for dedicated dump file validation

[double]$script:DUMP_DISK_RESERVE_PERCENT = 0.1           # 10%

# --- Page File Settings ---

# Minimum fixed page file size in MiB

[uint32]$script:PAGE_FILE_MINIMUM_SIZE_MIB = 4096          # 4 GiB

# --- Cluster Performance Log Collection ---

# Minimum free disk space (in MiB) required before starting log collection

[uint32]$script:LOG_COLLECTION_MIN_DISK_MIB = 10240        # 10 GiB

# Disk space reserve percentage for log collection

[double]$script:LOG_COLLECTION_DISK_RESERVE_PERCENT = 0.05 # 5%

# --- DNS Settings ---

# Maximum number of DNS resolution retry attempts

[int]$script:DNS_MAX_RETRIES = 3

# Base delay in seconds for exponential backoff between DNS retries

[int]$script:DNS_RETRY_BASE_DELAY_SEC = 1

# --- HTTP / Layer 7 Settings ---

# Maximum number of HTTP redirect hops before giving up

[int]$script:HTTP_MAX_REDIRECTS = 10

# Default timeout in seconds for Invoke-WebRequest connectivity tests

[int]$script:HTTP_TIMEOUT_SEC = 60

# Certificate-capture timeout in ticks (15 seconds = 150,000,000 ticks)

# Intentionally shorter than the connectivity timeout (which is 60 seconds) to limit impact of unresponsive backend pool servers

[long]$script:CERT_CAPTURE_TIMEOUT_TICKS = 150000000

# --- Network Ports ---

# Well-known ports used for protocol inference

[int]$script:PORT_HTTP = 80

[int]$script:PORT_HTTPS = 443

[int]$script:PORT_HTTPS_ALT1 = 8084

[int]$script:PORT_HTTPS_ALT2 = 8443

[int]$script:PORT_NTP = 123

# --- Animation / UI ---

# Spinner animation frame interval in milliseconds

[int]$script:ANIMATION_FRAME_MS = 125

# Maximum time (in seconds) to wait for a background job before giving up

[int]$script:JOB_ANIMATION_TIMEOUT_SEC = 600  # 10 minutes

# --- SSL Inspection Detection ---

# Known trusted root CA thumbprints for Microsoft services.

# Used by Test-AzStackHciSSLInspection to verify the certificate chain

# is not being intercepted by an SSL inspection appliance.

# These are the root CAs that Microsoft and its CDN partners use.

[string[]]$script:TRUSTED_ROOT_CA_THUMBPRINTS = @(

    # DigiCert Global Root G2

    'DF3C24F9BFD666761B268073FE06D1CC8D4F82A4',

    # DigiCert Global Root CA

    'A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436',

    # Baltimore CyberTrust Root

    'D4DE20D05E66FC53FE1A50882C78DB2852CAE474',

    # Microsoft RSA Root Certificate Authority 2017

    '73A5E64A3BFF8316FF0EDCCC618A906E4EAE4D74',

    # Microsoft ECC Root Certificate Authority 2017

    '999A64C37FF47D9FAB95F14769891460EEC4C3C5'

)

# Expected certificate issuer organization strings (for string-based fallback check)

[string[]]$script:EXPECTED_CERT_ISSUERS = @(

    'O=Microsoft Corporation',

    'O=DigiCert Inc'

)

# --- Critical Arc Service Private Link Endpoints ---

# Endpoints that MUST NOT resolve to RFC1918 addresses (Arc Private Link Scopes not supported for Azure Local)

# Reference: https://learn.microsoft.com/en-us/azure/azure-local/concepts/firewall-requirements

[string[]]$script:PRIVATE_LINK_CRITICAL_ENDPOINTS = @(

    'gbl.his.arc.azure.com',

    '*.his.arc.azure.com',

    '*.guestconfiguration.azure.com',

    '*.dp.kubernetesconfiguration.azure.com'

)

# --- PaaS Services Supporting Private Link ---

# Endpoints that CAN use Private Link but must be added to proxy bypass/exception list when a proxy is in use.

# Traffic to these must route via ExpressRoute or Site-to-Site VPN to reach private endpoints.

[string[]]$script:PRIVATE_LINK_PROXY_BYPASS_ENDPOINTS = @(

    '*.vault.azure.net',

    '*.vaultcore.azure.net',

    '*.blob.core.windows.net',

    '*.azurecr.io',

    '*.database.windows.net',

    '*.siterecovery.windowsazure.com',

    '*.backup.windowsazure.com',

    '*.servicebus.windows.net'

)

# --- Azure Region Endpoint URLs ---

# GitHub raw URLs for downloading region-specific required endpoint lists.

# Used by Test-AzureLocalConnectivity to fetch the latest endpoint definitions.

[hashtable]$script:REGION_ENDPOINT_URLS = @{

    "EastUS"        = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/master/HCI/EastUSendpoints/eastus-hci-endpoints.md"

    "WestEurope"    = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/master/HCI/WestEuropeendpoints/westeurope-hci-endpoints.md"

    "AustraliaEast" = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/master/HCI/AustraliaEastendpoints/AustraliaEast-hci-endpoints.md"

    "CanadaCentral"  = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/master/HCI/CanadaCentralEndpoints/canadacentral-hci-endpoints.md"

    "CentralIndia"  = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/IndiaCentralEndpoints/IndiaCentral-hci-endpoints.md"

    "JapanEast"     = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/JapanEastEndpoints/japaneast-hci-endpoints.md"

    "SouthCentral"  = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/SouthCentralUSEndpoints/southcentralus-hci-endpoints.md"

    "SouthEastAsia" = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/SouthEastAsiaEndpoints/southeastasia-hci-endpoints.md"

    "USGovVirginia" = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/usgovvirginia-hci-endpoints/usgovvirginia-hci-endpoints.md"

}

# --- OEM SBE Endpoint URLs ---

# GitHub raw URLs for hardware OEM Solution Builder Extension (SBE) endpoint lists.

# Used by Get-HardwareOEMUrlContent to fetch OEM-specific required endpoints.

[hashtable]$script:OEM_ENDPOINT_URLS = @{

    "DataOn"  = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/OEMEndpoints/DataOn/DataOnAzureLocalEndpoints.md"

    "Dell"    = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/OEMEndpoints/Dell/DellAzureLocalEndpoints.md"

    "HPE"     = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/OEMEndpoints/HPE/HPEAzureLocalEndpoints.md"

    "Hitachi" = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/OEMEndpoints/Hitachi/HitachiAzureLocalEndpoints.md"

    "Lenovo"  = "https://raw.githubusercontent.com/Azure/AzureStack-Tools/refs/heads/master/HCI/OEMEndpoints/Lenovo/LenovoAzureLocalEndpoints.md"

}

# --- Manually Defined Wildcard Subdomains ---

# Static list of known subdomains used to validate connectivity for wildcard endpoints.

# Defined here so the total count is available before the main testing loop for unified progress tracking.

$script:MANUAL_SUBDOMAINS = @(

    @{ Wildcard = "*.blob.core.windows.net"; Subdomains = @("mystorageaccount.blob.core.windows.net","eus2azreplstore214.blob.core.windows.net") },

    @{ Wildcard = "*.download.windowsupdate.com"; Subdomains = @("1a.au.download.windowsupdate.com") },

    @{ Wildcard = "*.update.microsoft.com"; Subdomains = @("fe2.update.microsoft.com") },

    @{ Wildcard = "*.windowsupdate.com"; Subdomains = @("ctldl.windowsupdate.com") },

    @{ Wildcard = "*.endpoint.security.microsoft.com"; Subdomains = @("edr-neu3.eu.endpoint.security.microsoft.com") },

    @{ Wildcard = "*.prod.hot.ingest.monitor.core.windows.net"; Subdomains = @("prod5.prod.hot.ingest.monitor.core.windows.net") },

    @{ Wildcard = "*.servicebus.windows.net"; Subdomains = @("azgn-southcentralus-public-1p-sn-vazr0002.servicebus.windows.net") }

)

# Pre-calculated total subdomain count for progress tracking

[int]$script:MANUAL_SUBDOMAIN_COUNT = ($script:MANUAL_SUBDOMAINS | ForEach-Object { $_.Subdomains.Count } | Measure-Object -Sum).Sum

# --- Module State Initialization ---

# Central initialization of all module-scoped state variables.

# This makes the shared surface explicit and enables clean reset between runs.

function Initialize-ModuleState {

    <#

    .SYNOPSIS

        Resets all module-scoped state variables to their default values.

    .DESCRIPTION

        Called during module load and can be called between test runs to ensure

        clean state. All $script: variables used for cross-function communication

        are initialized here.

    #>

    $script:SilentMode = $false

    $script:Proxy = $null

    [System.Collections.ArrayList]$script:Results = @()

    [System.Collections.ArrayList]$script:RedirectedResults = @()

    $script:SSLInspectionDetected = $false

    [System.Collections.ArrayList]$script:SSLInspectedURLs = @()

    $script:PrivateLinkDetected = $false

    $script:PrivateLinkDetectedArray = @()

    $script:PrivateLinkCriticalArray = @()

    $script:PrivateLinkProxyBypassArray = @()

    $script:PrivateLinkCriticalEndpoints = $script:PRIVATE_LINK_CRITICAL_ENDPOINTS

    $script:PrivateLinkProxyBypassEndpoints = $script:PRIVATE_LINK_PROXY_BYPASS_ENDPOINTS

    $script:DedicatedDumpFileSize = 0

    $script:MinimumRequiredDiskSpace = 0

    $script:PageFileAutoManaged = $false

    $script:PageFileConfiguration = $null

    $script:PageFileAllocatedBaseSize = 0

    $script:PageFileCurrentUsage = 0

    $script:PageFilePeakUsage = 0

    $script:CurrentDumpFile = $null

    $script:CurrentSettings = $null

    $script:DateFormatted = $null

    $script:OutputFolderPath = $null

    $script:OutputFile = $null

    $script:OutputFileExtension = $null

    $script:CsvFile = $null

    $script:TranscriptFile = $null

    $script:UpdatedKeyVaultURL = $null

    $script:UpdatedArcGatewayURL = $null

    $script:HardwareOEM = $null

    $script:PreArcGatewayRemoval = $null

    $script:job = $null

}

# Initialize state on module load

Initialize-ModuleState

# SIG # Begin signature block

# MIIoVQYJKoZIhvcNAQcCoIIoRjCCKEICAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAaY6gsT02/AVfZ

# EiZbCyveJBqYjfYXjvFyBBeLIW0Lu6CCDYUwggYDMIID66ADAgECAhMzAAAEhJji

# EuB4ozFdAAAAAASEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM1WhcNMjYwNjE3MTgyMTM1WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDtekqMKDnzfsyc1T1QpHfFtr+rkir8ldzLPKmMXbRDouVXAsvBfd6E82tPj4Yz

# aSluGDQoX3NpMKooKeVFjjNRq37yyT/h1QTLMB8dpmsZ/70UM+U/sYxvt1PWWxLj

# MNIXqzB8PjG6i7H2YFgk4YOhfGSekvnzW13dLAtfjD0wiwREPvCNlilRz7XoFde5

# KO01eFiWeteh48qUOqUaAkIznC4XB3sFd1LWUmupXHK05QfJSmnei9qZJBYTt8Zh

# ArGDh7nQn+Y1jOA3oBiCUJ4n1CMaWdDhrgdMuu026oWAbfC3prqkUn8LWp28H+2S

# LetNG5KQZZwvy3Zcn7+PQGl5AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUBN/0b6Fh6nMdE4FAxYG9kWCpbYUw

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwNTM2MjAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# AGLQps1XU4RTcoDIDLP6QG3NnRE3p/WSMp61Cs8Z+JUv3xJWGtBzYmCINmHVFv6i

# 8pYF/e79FNK6P1oKjduxqHSicBdg8Mj0k8kDFA/0eU26bPBRQUIaiWrhsDOrXWdL

# m7Zmu516oQoUWcINs4jBfjDEVV4bmgQYfe+4/MUJwQJ9h6mfE+kcCP4HlP4ChIQB

# UHoSymakcTBvZw+Qst7sbdt5KnQKkSEN01CzPG1awClCI6zLKf/vKIwnqHw/+Wvc

# Ar7gwKlWNmLwTNi807r9rWsXQep1Q8YMkIuGmZ0a1qCd3GuOkSRznz2/0ojeZVYh

# ZyohCQi1Bs+xfRkv/fy0HfV3mNyO22dFUvHzBZgqE5FbGjmUnrSr1x8lCrK+s4A+

# bOGp2IejOphWoZEPGOco/HEznZ5Lk6w6W+E2Jy3PHoFE0Y8TtkSE4/80Y2lBJhLj

# 27d8ueJ8IdQhSpL/WzTjjnuYH7Dx5o9pWdIGSaFNYuSqOYxrVW7N4AEQVRDZeqDc

# fqPG3O6r5SNsxXbd71DCIQURtUKss53ON+vrlV0rjiKBIdwvMNLQ9zK0jy77owDy

# XXoYkQxakN2uFIBO1UNAvCYXjs4rw3SRmBX9qiZ5ENxcn/pLMkiyb68QdwHUXz+1

# fI6ea3/jjpNPz6Dlc/RMcXIWeMMkhup/XEbwu73U+uz/MIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiYwghoiAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAASEmOIS4HijMV0AAAAA

# BIQwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIPdn

# aez0LSo422AvMw+MxeXVNxKZZfW5nQB2WLh6WXhYMEIGCisGAQQBgjcCAQwxNDAy

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20wDQYJKoZIhvcNAQEBBQAEggEAyussaqw9kqK+siyGTom+/u3otcNXXXm9f83q

# KzI+4p2k7EFSWPgEA1rEZ8QgvKcdzoJypCUQS9FDYIbV0mxxhYdsZSC9HkvKOcWf

# b4Yw8I8T6ytEGMT4C2kxup5oNmSTXIbY6qJoM5SKXJ/IXsRzN0+B8k0yHQ2KoJMi

# zosbH4S0KhGbXYWyMT2C7Kyyvgb90j3NbwAhQT7E7snXFzm413nqZKdmmLNk/0zA

# q+XdwRoZyi52wO8cUMGgWLGs29v1ZkXB+07lQ1tqrARcjnDmetiKudSaWD6/LIE5

# dish1TpGpjHdK7IuqLVv9E874d1CugUyE9seXAt+rDlWNdz6TaGCF7AwghesBgor

# BgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZI

# AWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGE

# WQoDATAxMA0GCWCGSAFlAwQCAQUABCB0C60zSTZKi1C+7SL9K6Yq3s/A0TAhQN3s

# 6Ur6nwrRCgIGabwweKKcGBMyMDI2MDQxNzE1MDY0My42NDFaMASAAgH0oIHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjo0MzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIFEKADAgECAhMzAAACHUvA

# koc4hX45AAEAAAIdMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgzM1oXDTI2MTExMzE4NDgzM1owgdMxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jv

# c29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVs

# ZCBUU1MgRVNOOjQzMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# orSgaAA8oOl4ph574zw29egUN8DDepRHLX8FM1zHNJmXG6KrSqUKwzcKafopuYdP

# TETTCvb9aJfESuAU0iGNUFI/D6R0kvdfpe2oPX+E3sbTQvGi4JPH5qdIYUaJ45V/

# 4bqe8eNvbWzpC+ZKjH193DeiI1XAI918JoQmBhlEXo/Ton1721luZJgincsf5LjM

# Y3jX84WyXUSX3dsS7h/7xVI+w1yjg7pa+0y3o/me2Tsv6UJUdSTQap5ORGSfCncl

# nP1z3IiiWIWr3Vo7aIPWsgJzq3m5GxpxUHCQk8qzUhk50y/uB+LGE3WIK2C77iy9

# iFsSfSLUnyMEzGRDW9mXHT4PH7Ozz6CHqQEiNvwcHqlvlCh1pHQh1NXQSAqOoVBs

# 5mi6easf6yxWTfe5DrR79503r8pU6VqC2Y9XMRU4wH9QbYXYsIUZ33Jmndy22W1L

# BDAbxBPQHCBlncGDU3BgdhVUVLe80mggFO98FdkWho67w4kPdCTRkvdvkY8PrQYE

# /nQjHXCa0g7LcMttZb6ejMHfQ+tUWXv6+nZ4Ynkr2OkaxclFCw4RIYNMWD26AWbQ

# j/WEdzga18fKtw66L5gzXPza6jFBfPJeKE3H8QAuwpirmH4ms+5nUjNNQOmNgqJn

# 0U1+3Yn7ClswD79YN0r3fdbYBMDApBZJpNlK7q7HXRsCAwEAAaOCAUkwggFFMB0G

# A1UdDgQWBBSEWfBxNEamZtXm8gl92Yq80jfxXTAfBgNVHSMEGDAWgBSfpxVdAF5i

# XYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB

# JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRp

# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsF

# AAOCAgEAkdweB4yxvLspLKq0D+miyD4Q0EcxVFpNZuJxiR54gWRkeTDDuymNeB03

# JhlsBpbwSYJ5uZSgDBCvwHED2VL8lJpFlOprJzxsXWC2NTfA+O+PO5Fk5jw6LHh6

# jeBADDEdQAx3Hqi7Zm0JwvQ93z5f6dtxkm29WqOcHYXRXfAQwy1hSrLXyfeblqR6

# 6jpP/9n0fCkWU4ggsUjQpQ2Ngj1DV09J4Y3y7p9Nd81+Xs6qYo++7RKm8qiB/5ND

# eigOLjlAeFgiEXIRUJW+mJyqpQw+OORlaqcFjR8Hu0G+/7bMdek68YX+kPpDBk7U

# e+I/xgiYJ1xcDRBn/vczLtN72+RIlD4UgXYLuBSCk//pDEPX5z39Cr+rkc6E4Y28

# FPk4BhloAyvp628P4xfElQY8TcxraUbZShypocE6ny95D1K1BkltZmrHVKCxmgln

# uOlM15NKIrXFlXCzdqpCtIwQ417wNAVF/QDPvzzbumPdTi6fb0tLbScYobV6zvbB

# sMsKEME4Tj1b9oIXC8dybJq4nbboEXYpRwi1QAbpSNrn+PxGW9uf1q63FnMJu4gm

# 3Oh63njW/iVf723quzyHrSijWMgY0HiRiHQi0Jyu0h8MdhRUp7mxbmLQckPiOFwA

# lIaUN/k725y/aLWpkRU6fqmLlEOyH5WpyLd23AYy9r8v+Qoba6swggdxMIIFWaAD

# AgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv

# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIy

# MjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5

# vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64

# NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhu

# je3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl

# 3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPg

# yY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I

# 5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2

# ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/

# TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy

# 16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y

# 1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H

# XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMB

# AAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQW

# BBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30B

# ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz

# L0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYB

# BAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBL

# oEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggr

# BgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNS

# b29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq

# reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27

# DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pv

# vinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9Ak

# vUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWK

# NsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2

# kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+

# c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep

# 8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+Dvk

# txW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1Zyvg

# DbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/

# 2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjo0MzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAuoO+BKbfXzqy

# fi9GLEdWHkCLeT+ggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MDANBgkqhkiG9w0BAQsFAAIFAO2MP3YwIhgPMjAyNjA0MTcwNTExMThaGA8yMDI2

# MDQxODA1MTExOFowdzA9BgorBgEEAYRZCgQBMS8wLTAKAgUA7Yw/dgIBADAKAgEA

# AgIrgAIB/zAHAgEAAgITEzAKAgUA7Y2Q9gIBADA2BgorBgEEAYRZCgQCMSgwJjAM

# BgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEB

# CwUAA4IBAQBXV6Qmuh7+EdGGqn/oYF8mTzYY/PAzKTHvC6rvkyc9TfS0X/xP7JJm

# eGhw+Hfs1u1iV4MGGg+WcYl/28h6Cp5keODlU10PKFS5iI60FKSepPw8Yt1R4a3o

# Epug4P6Hekb4RcdrZSsXjv7majrJTajmpnV4pskTJGiMQCYSS6WxG97xcPPhSIX1

# jeJTAMKWrq0fdtnywenhhQ4/6Ji8xgc92wQaSuG1kr0/m4Ze78Jvbs4fnrnNbuuD

# RtYfUAiZhHQ9y7BOlwg9cJmqLz3FZYUKFu52B7Z6JtAATvG5gzeg1Ph4D5OP9WVw

# dqIlJvlKxWzRSAMNpXKH1IodWaK/L1SBMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0

# IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIdS8CShziFfjkAAQAAAh0wDQYJYIZI

# AWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG

# 9w0BCQQxIgQgaYHPzQViYnckDCEqivFnHCB38kgegbNHbtHPsoGlTwcwgfoGCyqG

# SIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCxtpXMXEiLJzrqM77ep4rTNwrMOj6gpWN9

# hZvpj5QFUTCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMz

# AAACHUvAkoc4hX45AAEAAAIdMCIEIIgDgVTmBtCT5h/Y4tIJr/L/gRBnN3XdYKZh

# lDs7Ry/jMA0GCSqGSIb3DQEBCwUABIICAGCVtwaD0uNSWiqTN0Rn/tVW6dCXeom0

# ZYSDK9O6L2tOtqqfnsVofYejG18AE9oFA3LyGsQLlNZnjZ26M7LfIQVmOovCSJuW

# EFd+Pe6G/e6ktQcl8GgZ6O2PyK55N/I9Ov5IaMTCimpwji9KIR6ug04hK0ZzslaW

# iiHWChqRRtHplJSzgOHRXmLY7YZ+O2lAcqUkWwaxdp0aGimWfEiktaKokR4temYq

# gajz1qdEotob3cqebIfU/yKutwa2Iv8nPtnLbVjQJGawSMQcLdhjuEjMFApiXSl4

# 6K0uQI0W+KjFAOTLozuWP1jO3t9atIRl+R2UNZHOtbzlBR2b5SpZFuh/aacEiayB

# CNr80GAw70AcA5Xw6pbqdUNgq2d83xM4jpp6IPkBj9mU5+Us33L5eJLoQBcCKbYG

# cwKxx7fOVOmE+o9ivrIixYbgNanpyHpFn+utUvJGAXJnashVCw/VHTiZdio5if3S

# HCsr2iy1a08BBCJdScWmJflqlToPYcr1voEhiN1F6Rz8vWetzeXxBks5zsF77wpi

# rc6qR+6M6ppHmJc+9dL9SgjkH4TMzi1Gk6OErAM3/QDWjWf6h/Hm4Y32QInhYpJL

# wJHAKUDo4GqUie9Dr+n5MZEu/zv9qBHM6y9cakpZ7OzdpvkKj5P4ZIvDWsI5Qy+9

# hVB5IOXHcPl+

# SIG # End signature block