AzStackHci.DiagnosticSettings

0.6.4

Private/AzStackHci.Network.Helpers.ps1

                                # ////////////////////////////////////////////////////////////////////////////

# Test if proxy is enabled and return boolean

function Get-Proxy

{

    <#

    .SYNOPSIS

        Check if proxy is enabled and return boolean and proxy server uri

    #>

    begin {

        # Write-Debug "Get-Proxy: Beginning proxy detection process"

    }

    process {

        $line1, $line2, $line3, $JsonLines = netsh winhttp show advproxy

        $ProxyInformation = $JsonLines | ConvertFrom-Json -ErrorAction SilentlyContinue

        # Return True/False and the Proxy server uri as a PSObject

        $ProxyReturnVariable = New-Object PsObject -Property @{

            # True/False

            Enabled = [bool]$ProxyInformation.Proxy

            # Proxy server URI

            Server = $ProxyInformation.Proxy

            # Proxy bypass list

            # ProxyBypass = $proxy.Bypass

        }

        # Check if the Proxy is enabled and if the proxy server is set

        if($ProxyReturnVariable.Enabled) {

            if(-not($ProxyReturnVariable.Server)){

                # In case the proxy server is not set from netsh winhttp show advproxy output

                $proxyUri = [Uri]$null

                $ProxyTest = [System.Net.WebRequest]::GetSystemWebProxy()

                $ProxyTest.Credentials = [System.Net.CredentialCache]::DefaultCredentials

                # use a known URL to test the proxy server, but http, in case of Arc Gateway, to prevent "localhost" from being returned

                # This is a known URL that should be accessible from any network

                $TestUrl = [System.Uri]::new("http://oneocsp.microsoft.com")

                # Test the proxy server using a known URL

                $proxyUri = $ProxyTest.GetProxy($TestUrl)

                if($proxyUri -eq $TestUrl) {

                    # Proxy is not required, so do not use it

                    $ProxyReturnVariable.Enabled = $false

                    Write-HostAzS "`t`nNo proxy server detected, using direct connection...`n" -ForegroundColor Green

                } else {

                    # Proxy is required, so use it

                    $ProxyReturnVariable.Server = $proxyUri

                }

            }

            # Check if the proxy server string has a semi-colon which can be used for Arc Gateway

            if(-not [string]::IsNullOrWhiteSpace($ProxyReturnVariable.Server) -and $ProxyReturnVariable.Server -match ";"){

                # In case the proxy server is set from netsh winhttp show advproxy output

                [array]$ProxyStrings = $ProxyReturnVariable.Server.ToString().Split(";")

            }

            if($ProxyStrings){

                # Check if the proxy server string has a semi-colon which can be used for Arc Gateway

                # Multiple proxy servers detected

                Write-HostAzS "`n`tArc Gateway scenario detected (possible), as multiple proxy servers detected ('netsh winhttp show advproxy')..."

                ForEach($ProxyServer in $ProxyStrings){

                    # Trim the proxy server string

                    $ProxyServer = $ProxyServer.Trim()

                    if($ProxyServer -like "http=*"){

                        # HTTP proxy server (should be customer proxy server)

                        # Check if the proxy server is set from netsh winhttp show advproxy output

                        Write-HostAzS "`tHTTP Proxy server detected, using proxy: $($ProxyServer)" -ForegroundColor Green    

                    } elseif($ProxyServer -like "https=*"){

                        # HTTPS proxy server (might be Arc Gateway Agent, "localhost")

                        # Check if the proxy server is set from netsh winhttp show advproxy output

                        Write-HostAzS "`tHTTPS Proxy server detected, using proxy: $($ProxyServer)" -ForegroundColor Green    

                    } else {

                        # Other proxy server detected

                        # Check if the proxy server is set from netsh winhttp show advproxy output

                        Write-HostAzS "`tProxy server detected, using proxy: $($ProxyServer)" -ForegroundColor Green    

                    }

                } # End ForEach

                Write-HostAzS ""

            } else {

                # Single proxy detected

                Write-HostAzS "`t`nProxy server detected, using proxy: $($ProxyReturnVariable.Server)`n" -ForegroundColor Green

            }

        } else {

            # Proxy is NOT enabled

            # No proxy server detected, so use direct connection

            Write-HostAzS "`t`nNo proxy server detected, using direct connection...`n" -ForegroundColor Green

        }

    } # End of process block

    end {

        # Write-Debug "Get-Proxy: Proxy detection process completed"

        # Return the ProxyReturnVariable object

        Return $ProxyReturnVariable

    }

} # End Function Get-Proxy

# ////////////////////////////////////////////////////////////////////////////

# This function retrieves the SSL certificate chain from a remote HTTPS endpoint

# It uses the System.Net.Http.HttpClient class to make the request and capture the certificate chain

function Get-SslCertificateChain

{

    <#

    .SYNOPSIS

        Retrieve remote ssl certificate & chain from https endpoint for Desktop and Core

    .NOTES

        Credit: https://github.com/markekraus

    #>

    [CmdletBinding()]

    param (

        [system.uri]

        $url,

        [Parameter()]

        [bool]

        $AllowAutoRedirect,

        [Parameter()]

        [string]

        $Proxy

    )

    begin {

        # Write-Debug "Get-SslCertificateChain: Beginning SSL certificate chain retrieval for '$url'"

    }

    process {

    try

    {

        $cs = @'

    using System;

    using System.Collections.Generic;

    using System.Net.Http;

    using System.Net.Security;

    using System.Security.Cryptography.X509Certificates;

    namespace CertificateCapture

    {

        public class Utility

        {

            public static Func<HttpRequestMessage,X509Certificate2,X509Chain,SslPolicyErrors,Boolean> ValidationCallback =

                (message, cert, chain, errors) => {

                    CapturedCertificates.Clear();

                    var newCert = new X509Certificate2(cert);

                    var newChain = new X509Chain();

                    newChain.Build(newCert);

                    CapturedCertificates.Add(new CapturedCertificate(){

                        Certificate =  newCert,

                        CertificateChain = newChain,

                        PolicyErrors = errors,

                        URI = message.RequestUri

                    });

                    return true;

                };

            public static List<CapturedCertificate> CapturedCertificates = new List<CapturedCertificate>();

        }

        public class CapturedCertificate

        {

            public X509Certificate2 Certificate { get; set; }

            public X509Chain CertificateChain { get; set; }

            public SslPolicyErrors PolicyErrors { get; set; }

            public Uri URI { get; set; }

        }

    }

'@

        try

        {

            if (-not ('CertificateCapture.Utility' -as [type]))

            {

                if ($PSEdition -ne 'Core')

                {

                    Add-Type -AssemblyName System.Net.Http

                    Add-Type $cs -ReferencedAssemblies System.Net.Http

                }

                else

                {

                    Add-Type $cs

                }

            }

        }

        catch

        {

            if ($_.Exception.Message -notmatch 'Definition of new types is not supported in this language mode')

            {

                throw "Language mode does not allow this test Error: $_"

            }

        }

        # Reset variables, in case cached.

        Remove-Variable Certs, Handler, Client, Request -ErrorAction SilentlyContinue

        # Create a new list to hold captured certificates.

        $Certs = [CertificateCapture.Utility]::CapturedCertificates

        # Clear any previously captured certificates.

        $Certs.Clear()

        # Create the HttpClientHandler.

        $Handler = [System.Net.Http.HttpClientHandler]::new()

        # This is important to capture the certificate chain of the first endpoint, not redirected endpoints.

        if($AllowAutoRedirect -eq $false)

        {

            # Set the handler to not allow auto redirects

            # https://learn.microsoft.com/en-us/dotnet/api/system.net.http.httpclienthandler.allowautoredirect

            $Handler.AllowAutoRedirect = $false

        }

        if ($Proxy)

        {

            $Handler.Proxy = New-Object System.Net.WebProxy($proxy)

        }

        # Set the ServerCertificateCustomValidationCallback to our custom callback.

        $Handler.ServerCertificateCustomValidationCallback = [CertificateCapture.Utility]::ValidationCallback

        # Create the HttpClient with the handler

        $Client = [System.Net.Http.HttpClient]::new($Handler)

        # Set a timeout to 15 seconds (reduced from 60s to limit impact of unresponsive backend pool servers):

        $Client.Timeout = [timespan]::FromTicks($script:CERT_CAPTURE_TIMEOUT_TICKS)

        try {

            # Setup the request to the URL.

            $Request = $Client.GetAsync($url)

            # Wait for the request to complete calling the Result method.

            $Null = $Request.Result

            # Check if the request is completed and that certificates were captured.

            if(($Request.IsCompleted) -and $Certs){

                # Return the captured certificate chain

                Write-Debug "Successfully obtained SSL certificate chain from endpoint: '$url'"

                return $Certs.CertificateChain

            } else {

                # Return null if no certificates were captured.

                Write-Debug "Failed to obtain SSL certificate chain from endpoint: '$url'"

                return $null

            }

        }

        finally {

            # Dispose IDisposable resources to prevent socket/handle leaks

            if ($Request) { $Request.Dispose() }

            if ($Client)  { $Client.Dispose() }

            if ($Handler) { $Handler.Dispose() }

        }

    }

    catch

    {

        throw $_

    }

    } # End of process block

    end {

        # Write-Debug "Get-SslCertificateChain: SSL certificate chain retrieval completed"

    }

} # End Function Get-SslCertificateChain

# SIG # Begin signature block

# MIIoKQYJKoZIhvcNAQcCoIIoGjCCKBYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBlMzsw8vKHj0EA

# fhniOcWoUFBcnL9H8VoTI3HW8FzXOqCCDXYwggX0MIID3KADAgECAhMzAAAEhV6Z

# 7A5ZL83XAAAAAASFMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM3WhcNMjYwNjE3MTgyMTM3WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDASkh1cpvuUqfbqxele7LCSHEamVNBfFE4uY1FkGsAdUF/vnjpE1dnAD9vMOqy

# 5ZO49ILhP4jiP/P2Pn9ao+5TDtKmcQ+pZdzbG7t43yRXJC3nXvTGQroodPi9USQi

# 9rI+0gwuXRKBII7L+k3kMkKLmFrsWUjzgXVCLYa6ZH7BCALAcJWZTwWPoiT4HpqQ

# hJcYLB7pfetAVCeBEVZD8itKQ6QA5/LQR+9X6dlSj4Vxta4JnpxvgSrkjXCz+tlJ

# 67ABZ551lw23RWU1uyfgCfEFhBfiyPR2WSjskPl9ap6qrf8fNQ1sGYun2p4JdXxe

# UAKf1hVa/3TQXjvPTiRXCnJPAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUuCZyGiCuLYE0aU7j5TFqY05kko0w

# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW

# MBQGA1UEBRMNMjMwMDEyKzUwNTM1OTAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci

# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG

# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0

# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBACjmqAp2Ci4sTHZci+qk

# tEAKsFk5HNVGKyWR2rFGXsd7cggZ04H5U4SV0fAL6fOE9dLvt4I7HBHLhpGdE5Uj

# Ly4NxLTG2bDAkeAVmxmd2uKWVGKym1aarDxXfv3GCN4mRX+Pn4c+py3S/6Kkt5eS

# DAIIsrzKw3Kh2SW1hCwXX/k1v4b+NH1Fjl+i/xPJspXCFuZB4aC5FLT5fgbRKqns

# WeAdn8DsrYQhT3QXLt6Nv3/dMzv7G/Cdpbdcoul8FYl+t3dmXM+SIClC3l2ae0wO

# lNrQ42yQEycuPU5OoqLT85jsZ7+4CaScfFINlO7l7Y7r/xauqHbSPQ1r3oIC+e71

# 5s2G3ClZa3y99aYx2lnXYe1srcrIx8NAXTViiypXVn9ZGmEkfNcfDiqGQwkml5z9

# nm3pWiBZ69adaBBbAFEjyJG4y0a76bel/4sDCVvaZzLM3TFbxVO9BQrjZRtbJZbk

# C3XArpLqZSfx53SuYdddxPX8pvcqFuEu8wcUeD05t9xNbJ4TtdAECJlEi0vvBxlm

# M5tzFXy2qZeqPMXHSQYqPgZ9jvScZ6NwznFD0+33kbzyhOSz/WuGbAu4cHZG8gKn

# lQVT4uA2Diex9DMs2WHiokNknYlLoUeWXW1QrJLpqO82TLyKTbBM/oZHAdIc0kzo

# STro9b3+vjn2809D0+SOOCVZMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg

# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03

# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr

# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg

# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy

# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9

# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh

# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k

# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB

# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn

# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90

# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w

# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o

# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa

# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG

# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV

# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb

# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l

# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6

# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0

# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560

# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam

# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa

# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah

# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA

# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt

# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr

# /Xmfwb1tbWrJUnMTDXpQzTGCGgkwghoFAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp

# Z25pbmcgUENBIDIwMTECEzMAAASFXpnsDlkvzdcAAAAABIUwDQYJYIZIAWUDBAIB

# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO

# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIFfk2WLDMUYZjrHB3/kf6qRp

# aPubs4T7IFj1xzY1sZ17MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A

# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB

# BQAEggEAHWMqCV5Q8gR5dmT3lyXSQqCfinLcD6bJtSdO7X4bU5ozJoKIQIAabN9K

# MNjSiOhSTFY/9G2ypXOMgLMKA8OIGtbFSjTq+WhDAGvInYOPvFpaEPPel6R14sxa

# fGxRDGEnPEDkflBa0CqwzbtUed/Vh90ZPyqLLDIMGGqzIQaJd21ddzfxZM+o4rtq

# 1QtEn7pMtjtg1r3krMbcYliXHRIlCMynUHmN6z6Uu6C1W+vcMbNXlBS7gEy1t02g

# aGhLp0TdvDyyKbV9ae0LbhhXNa+mTQniTufbLP6kPR0vUnVVQEhYvHkIIw4b775S

# eSjJI3n5rxMZn7cHnLOwCSpFsSKYxaGCF5MwghePBgorBgEEAYI3AwMBMYIXfzCC

# F3sGCSqGSIb3DQEHAqCCF2wwghdoAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsq

# hkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl

# AwQCAQUABCBJGdNZzdiK57rCPHRRQ33x5NQxXkuFhFvUfduMltBBbgIGadfCMk3E

# GBIyMDI2MDQxNzE1MDY0NC43M1owBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVy

# aWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo5MjAwLTA1

# RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCC

# EeowggcgMIIFCKADAgECAhMzAAACI0/ZYCRTz/4rAAEAAAIjMA0GCSqGSIb3DQEB

# CwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV

# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5Mzk1

# N1oXDTI3MDUxNzE5Mzk1N1owgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMx

# JzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo5MjAwLTA1RTAtRDk0NzElMCMGA1UE

# AxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEB

# BQADggIPADCCAgoCggIBAIrpDaeTlZR0rNIJJp+n5SNQBGxbEcpLresmEUL/NJps

# W6ZMG5onRA2uap6+5vkNvt9KPmq3DAqeMg73b4dcXrvX3Z+6MvsMWi3lYSP8C0Rn

# 9evMUeKYqU3WHqARDA/kjrvCLNo9blnNIE2losGDmge8BI85m3B01Shn4NAoXeEm

# XUpm6giVUr6qLtwuOBqTqzmg5lxEIysqe4LdqhVrrBENti8pS6PuuQXH0o7Q+wcn

# +T4udkyCBGF6HgBV1rDKH6g7Mo+OVAZQ19J5ZSDKbZT0Itry23SZBfgPEPPr6tqb

# nSCPWgB/JDpNDuv3o8AMU4oGBpTv5ykedpkbz11N6BDrJ0FEYjJw7DV1FfZ4oNFH

# POIrdyfRZoib/s54azJAqMjMRC5RMO/QmP/3NDu2u4s46kkP3wElU4ruN7zhLPaF

# vce9RJPuPWPY3yl4PqiWSkUdH/VnwnPgX6aStQXsyY8CKtgdHO6dsiDcesMw3AVg

# 3vIGQMDj9Uyj0JjTL2gZSirbKNsLBOJvP1ViX3ecHdBCJMJP2dbcz5M5YH48ytmk

# TGrUFIeYo/Mip6EqqtQOgzfc8r50QrClgsRPq5erge5BExdZP/+w+5tSdABppQx9

# CEBlLLbce3HC03d4r35PjAJq/bBAW3nt5Q7BRbn8MLMwX225rkd7WE2+BwBdqIbX

# AgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQU1sCHz2/b2c9j1vBBvVBgLPFWB5cwHwYD

# VR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZO

# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw

# VGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBc

# BggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0

# cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYD

# VR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMC

# B4AwDQYJKoZIhvcNAQELBQADggIBAIdDB7vPm2ng1nAB/VwH7hz0niy/Dc/paoYE

# zG2rOdLoN3NTNK1ccJo9mEzjWDWIoc2eZycuPAu6M4Ro2OFKdQOIBmpCNbllqk4H

# GBzsSCCGH2T6vvypYB7esnhCiEFuFIZ1m0qK9NFp5GqaeHLz5OGsqHMJ4TBpqtcm

# KZnBKl1BBQNuF5Yd7IDEBKq6W13ko7Sb9QW87Te196moZcDi0KD9YYQLAqo6MnOl

# EB88gHrLUfJWuT6+YvmukRtPDAs61ftbEUYbz5xguT0eNoOTGtoD8diUpBHHWx3N

# r7D+C6UvCA6cHJEkoXauvwzsU0iXCiLrLAWlo1zwDsd7BoaODD+19wTbrQjVd6Qa

# W4A0j0ec405haUjsEoFBtYTa16jq+xDVWDwHytNlJ49V2ZcvU8+qqzcpV0UozmRi

# hw8IMz7pUvfYhX3qwRJ/ZPsOPFqekKDYPZRiPhnWLtzLxTUssMaDnkpazhp/ZFEG

# MfYy6UeACZbmhsrGJkINCNFqugnZcSVdSGKAT0HO+EIVtP8cNja+lWmXkedKlwJL

# GYvmLmUhP/FsBAwjsu6Hvleub4iyV8VY4Y4YyUKn7bioQkSCVcQ/vHCyiU10E2d1

# eKGHIh59UaUjUNHvEYQuImuTyJ9VZij1cRsRe/+Vu+noXZHZSyfB5ZyS+rTLUdac

# scOofp0+MIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG

# 9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO

# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEy

# MDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw

# MTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az

# /1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V2

# 9YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oa

# ezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkN

# yjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7K

# MtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRf

# NN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SU

# HDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoY

# WmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5

# C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8

# FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TAS

# BgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1

# Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUw

# UzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNy

# b3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoG

# CCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIB

# hjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fO

# mhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9w

# a2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggr

# BgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNv

# bS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3

# DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEz

# tTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJW

# AAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G

# 82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/Aye

# ixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI9

# 5ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1j

# dEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZ

# KCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xB

# Zj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuP

# Ntq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvp

# e784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA00w

# ggI1AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw

# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTIwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT

# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVADhF

# YWz6ROJmehmICPUG1iPzMI1qoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg

# UENBIDIwMTAwDQYJKoZIhvcNAQELBQACBQDtjCKzMCIYDzIwMjYwNDE3MDMwODM1

# WhgPMjAyNjA0MTgwMzA4MzVaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAO2MIrMC

# AQAwBwIBAAICI3QwBwIBAAICEk0wCgIFAO2NdDMCAQAwNgYKKwYBBAGEWQoEAjEo

# MCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG

# 9w0BAQsFAAOCAQEANwzcqwJs4sd8wFX2dmrnNedLkYOLWVsjfkuNvuzogClKtz/U

# E5+5/71Ev3U/Us72nJeULNjKgkhVUMheJ84lXqDGb07cDiaHSf6rknPXZaZoQSkU

# QHqcY4o9GZM769OvZfqxRJV1EndB9GLfdJ9cGVkiBty9YKUYCikEuyk4YKTp8Pk1

# 1V/Ezzt0vPK9uqs4h5Q+U91YHnqKZdex2CuJkCQ2fLL4MHVxyet8M8Si0xTFZQ6a

# 3ObvP1ckiSz3KcAnii8M1oMC/RSfGkvQ4Ypd+4StUWkrEOz7d44wM5kSRGvHYvYW

# TWBD/fOREYrDfmNqUjxeW9odP/NSxLZ6DniWZjGCBA0wggQJAgEBMIGTMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACI0/ZYCRTz/4rAAEAAAIjMA0G

# CWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJ

# KoZIhvcNAQkEMSIEILYnMDOcO4biRDA64G8Si1A9JUIpTBw63WNdKXH+1CvXMIH6

# BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQglvAzLBFu9waLKeOfCMCpxoPjvJi9

# 5splEC+0QBHm7rMwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MAITMwAAAiNP2WAkU8/+KwABAAACIzAiBCAieWUMgYtv87a+6LvdXlBMxKySrBYn

# yscOfZQak43CSjANBgkqhkiG9w0BAQsFAASCAgB9kOhHw+yBL5j8SBVwl4PgK+/j

# qYzdrE5BYcXu7Gef+2DJa/mbjI6BS8HchOoUqhy5QQopaRdzNKoAA2UvqaHS3hsL

# HjMoytz6L87GunbJQ+D7Vv0u5fglb79RnApn00OhvZoiDLsONSDZOnptdhLaQ0/K

# jrGNjziWj7yOrIr5wfH3QlN5TRbysWjkSlZqD25DP8vBNlZvfILLCHoCXz6Qvgmw

# LZIORsdSqoGuo1OThQYwRsM4gnvMH/PPNqcG7P4/KeJhQl/4iiCW46OmrlyzLd/D

# 8ZoSzPjHSHLz76Gw4lcUGD4T8VilJRqR2O9tWjam3kSm4EHhP8ae5UKvggucyDJO

# JCrf3qlZdjk2OCGdzt1MH7JItMhWFw5QmsrwB9z5BL4o+YbrHOTZfwmojFodWqw7

# UG7uqSI6qIsGWuY6Zuy/pEiG7QbMuwzC4wXGsYtcFqHYem3hb8FvZaPdTXRG4dG0

# joC2gpdSek/GydySha/juikCOuDqdR7vevc1I33a7Vu0PFmJSl//mPxB9IrkQ5mG

# +OYi6xtt47yUME6UhT863RqAe120Fyg/abZ+Ywra1dBObQj0DUh+8o1/CtW+AL2b

# j4ZrT4ngde9PIs2kCVCj0NC4U07k6uhRpu4yc4qWjB1WJv5m+IpgD9ZNH9+633Zl

# gr9Wk0PCDp3c5kZvJQ==

# SIG # End signature block