AzStackHci.DiagnosticSettings

0.6.5

Private/AzStackHci.Network.Helpers.ps1

                                # ////////////////////////////////////////////////////////////////////////////

# Test if proxy is enabled and return boolean

function Get-Proxy

{

    <#

    .SYNOPSIS

        Check if proxy is enabled and return boolean and proxy server uri

    #>

    begin {

        # Write-Debug "Get-Proxy: Beginning proxy detection process"

    }

    process {

        $line1, $line2, $line3, $JsonLines = netsh winhttp show advproxy

        $ProxyInformation = $JsonLines | ConvertFrom-Json -ErrorAction SilentlyContinue

        # Return True/False and the Proxy server uri as a PSObject

        $ProxyReturnVariable = New-Object PsObject -Property @{

            # True/False

            Enabled = [bool]$ProxyInformation.Proxy

            # Proxy server URI

            Server = $ProxyInformation.Proxy

            # Proxy bypass list

            # ProxyBypass = $proxy.Bypass

        }

        # Check if the Proxy is enabled and if the proxy server is set

        if($ProxyReturnVariable.Enabled) {

            if(-not($ProxyReturnVariable.Server)){

                # In case the proxy server is not set from netsh winhttp show advproxy output

                $proxyUri = [Uri]$null

                $ProxyTest = [System.Net.WebRequest]::GetSystemWebProxy()

                $ProxyTest.Credentials = [System.Net.CredentialCache]::DefaultCredentials

                # use a known URL to test the proxy server, but http, in case of Arc Gateway, to prevent "localhost" from being returned

                # This is a known URL that should be accessible from any network

                $TestUrl = [System.Uri]::new("http://oneocsp.microsoft.com")

                # Test the proxy server using a known URL

                $proxyUri = $ProxyTest.GetProxy($TestUrl)

                if($proxyUri -eq $TestUrl) {

                    # Proxy is not required, so do not use it

                    $ProxyReturnVariable.Enabled = $false

                    Write-HostAzS "`t`nNo proxy server detected, using direct connection...`n" -ForegroundColor Green

                } else {

                    # Proxy is required, so use it

                    $ProxyReturnVariable.Server = $proxyUri

                }

            }

            # Check if the proxy server string has a semi-colon which can be used for Arc Gateway

            if(-not [string]::IsNullOrWhiteSpace($ProxyReturnVariable.Server) -and $ProxyReturnVariable.Server -match ";"){

                # In case the proxy server is set from netsh winhttp show advproxy output

                [array]$ProxyStrings = $ProxyReturnVariable.Server.ToString().Split(";")

            }

            if($ProxyStrings){

                # Check if the proxy server string has a semi-colon which can be used for Arc Gateway

                # Multiple proxy servers detected

                Write-HostAzS "`n`tArc Gateway scenario detected (possible), as multiple proxy servers detected ('netsh winhttp show advproxy')..."

                ForEach($ProxyServer in $ProxyStrings){

                    # Trim the proxy server string

                    $ProxyServer = $ProxyServer.Trim()

                    if($ProxyServer -like "http=*"){

                        # HTTP proxy server (should be customer proxy server)

                        # Check if the proxy server is set from netsh winhttp show advproxy output

                        Write-HostAzS "`tHTTP Proxy server detected, using proxy: $($ProxyServer)" -ForegroundColor Green    

                    } elseif($ProxyServer -like "https=*"){

                        # HTTPS proxy server (might be Arc Gateway Agent, "localhost")

                        # Check if the proxy server is set from netsh winhttp show advproxy output

                        Write-HostAzS "`tHTTPS Proxy server detected, using proxy: $($ProxyServer)" -ForegroundColor Green    

                    } else {

                        # Other proxy server detected

                        # Check if the proxy server is set from netsh winhttp show advproxy output

                        Write-HostAzS "`tProxy server detected, using proxy: $($ProxyServer)" -ForegroundColor Green    

                    }

                } # End ForEach

                Write-HostAzS ""

            } else {

                # Single proxy detected

                Write-HostAzS "`t`nProxy server detected, using proxy: $($ProxyReturnVariable.Server)`n" -ForegroundColor Green

            }

        } else {

            # Proxy is NOT enabled

            # No proxy server detected, so use direct connection

            Write-HostAzS "`t`nNo proxy server detected, using direct connection...`n" -ForegroundColor Green

        }

    } # End of process block

    end {

        # Write-Debug "Get-Proxy: Proxy detection process completed"

        # Return the ProxyReturnVariable object

        Return $ProxyReturnVariable

    }

} # End Function Get-Proxy

# ////////////////////////////////////////////////////////////////////////////

# This function retrieves the SSL certificate chain from a remote HTTPS endpoint

# It uses the System.Net.Http.HttpClient class to make the request and capture the certificate chain

function Get-SslCertificateChain

{

    <#

    .SYNOPSIS

        Retrieve remote ssl certificate & chain from https endpoint for Desktop and Core

    .NOTES

        Credit: https://github.com/markekraus

    #>

    [CmdletBinding()]

    param (

        [system.uri]

        $url,

        [Parameter()]

        [bool]

        $AllowAutoRedirect,

        [Parameter()]

        [string]

        $Proxy

    )

    begin {

        # Write-Debug "Get-SslCertificateChain: Beginning SSL certificate chain retrieval for '$url'"

    }

    process {

    try

    {

        $cs = @'

    using System;

    using System.Collections.Generic;

    using System.Net.Http;

    using System.Net.Security;

    using System.Security.Cryptography.X509Certificates;

    namespace CertificateCapture

    {

        public class Utility

        {

            public static Func<HttpRequestMessage,X509Certificate2,X509Chain,SslPolicyErrors,Boolean> ValidationCallback =

                (message, cert, chain, errors) => {

                    CapturedCertificates.Clear();

                    var newCert = new X509Certificate2(cert);

                    var newChain = new X509Chain();

                    newChain.Build(newCert);

                    CapturedCertificates.Add(new CapturedCertificate(){

                        Certificate =  newCert,

                        CertificateChain = newChain,

                        PolicyErrors = errors,

                        URI = message.RequestUri

                    });

                    return true;

                };

            public static List<CapturedCertificate> CapturedCertificates = new List<CapturedCertificate>();

        }

        public class CapturedCertificate

        {

            public X509Certificate2 Certificate { get; set; }

            public X509Chain CertificateChain { get; set; }

            public SslPolicyErrors PolicyErrors { get; set; }

            public Uri URI { get; set; }

        }

    }

'@

        try

        {

            if (-not ('CertificateCapture.Utility' -as [type]))

            {

                if ($PSEdition -ne 'Core')

                {

                    Add-Type -AssemblyName System.Net.Http

                    Add-Type $cs -ReferencedAssemblies System.Net.Http

                }

                else

                {

                    Add-Type $cs

                }

            }

        }

        catch

        {

            if ($_.Exception.Message -notmatch 'Definition of new types is not supported in this language mode')

            {

                throw "Language mode does not allow this test Error: $_"

            }

        }

        # Reset variables, in case cached.

        Remove-Variable Certs, Handler, Client, Request -ErrorAction SilentlyContinue

        # Create a new list to hold captured certificates.

        $Certs = [CertificateCapture.Utility]::CapturedCertificates

        # Clear any previously captured certificates.

        $Certs.Clear()

        # Create the HttpClientHandler.

        $Handler = [System.Net.Http.HttpClientHandler]::new()

        # This is important to capture the certificate chain of the first endpoint, not redirected endpoints.

        if($AllowAutoRedirect -eq $false)

        {

            # Set the handler to not allow auto redirects

            # https://learn.microsoft.com/en-us/dotnet/api/system.net.http.httpclienthandler.allowautoredirect

            $Handler.AllowAutoRedirect = $false

        }

        if ($Proxy)

        {

            $Handler.Proxy = New-Object System.Net.WebProxy($proxy)

        }

        # Set the ServerCertificateCustomValidationCallback to our custom callback.

        $Handler.ServerCertificateCustomValidationCallback = [CertificateCapture.Utility]::ValidationCallback

        # Create the HttpClient with the handler

        $Client = [System.Net.Http.HttpClient]::new($Handler)

        # Set a timeout to 15 seconds (reduced from 60s to limit impact of unresponsive backend pool servers):

        $Client.Timeout = [timespan]::FromTicks($script:CERT_CAPTURE_TIMEOUT_TICKS)

        try {

            # Setup the request to the URL.

            $Request = $Client.GetAsync($url)

            # Wait for the request to complete calling the Result method.

            $Null = $Request.Result

            # Check if the request is completed and that certificates were captured.

            if(($Request.IsCompleted) -and $Certs){

                # Return the captured certificate chain

                Write-Debug "Successfully obtained SSL certificate chain from endpoint: '$url'"

                return $Certs.CertificateChain

            } else {

                # Return null if no certificates were captured.

                Write-Debug "Failed to obtain SSL certificate chain from endpoint: '$url'"

                return $null

            }

        }

        finally {

            # Dispose IDisposable resources to prevent socket/handle leaks

            if ($Request) { $Request.Dispose() }

            if ($Client)  { $Client.Dispose() }

            if ($Handler) { $Handler.Dispose() }

        }

    }

    catch

    {

        throw $_

    }

    } # End of process block

    end {

        # Write-Debug "Get-SslCertificateChain: SSL certificate chain retrieval completed"

    }

} # End Function Get-SslCertificateChain

# SIG # Begin signature block

# MIIoVQYJKoZIhvcNAQcCoIIoRjCCKEICAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBlMzsw8vKHj0EA

# fhniOcWoUFBcnL9H8VoTI3HW8FzXOqCCDYUwggYDMIID66ADAgECAhMzAAAEhJji

# EuB4ozFdAAAAAASEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM1WhcNMjYwNjE3MTgyMTM1WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDtekqMKDnzfsyc1T1QpHfFtr+rkir8ldzLPKmMXbRDouVXAsvBfd6E82tPj4Yz

# aSluGDQoX3NpMKooKeVFjjNRq37yyT/h1QTLMB8dpmsZ/70UM+U/sYxvt1PWWxLj

# MNIXqzB8PjG6i7H2YFgk4YOhfGSekvnzW13dLAtfjD0wiwREPvCNlilRz7XoFde5

# KO01eFiWeteh48qUOqUaAkIznC4XB3sFd1LWUmupXHK05QfJSmnei9qZJBYTt8Zh

# ArGDh7nQn+Y1jOA3oBiCUJ4n1CMaWdDhrgdMuu026oWAbfC3prqkUn8LWp28H+2S

# LetNG5KQZZwvy3Zcn7+PQGl5AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUBN/0b6Fh6nMdE4FAxYG9kWCpbYUw

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwNTM2MjAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# AGLQps1XU4RTcoDIDLP6QG3NnRE3p/WSMp61Cs8Z+JUv3xJWGtBzYmCINmHVFv6i

# 8pYF/e79FNK6P1oKjduxqHSicBdg8Mj0k8kDFA/0eU26bPBRQUIaiWrhsDOrXWdL

# m7Zmu516oQoUWcINs4jBfjDEVV4bmgQYfe+4/MUJwQJ9h6mfE+kcCP4HlP4ChIQB

# UHoSymakcTBvZw+Qst7sbdt5KnQKkSEN01CzPG1awClCI6zLKf/vKIwnqHw/+Wvc

# Ar7gwKlWNmLwTNi807r9rWsXQep1Q8YMkIuGmZ0a1qCd3GuOkSRznz2/0ojeZVYh

# ZyohCQi1Bs+xfRkv/fy0HfV3mNyO22dFUvHzBZgqE5FbGjmUnrSr1x8lCrK+s4A+

# bOGp2IejOphWoZEPGOco/HEznZ5Lk6w6W+E2Jy3PHoFE0Y8TtkSE4/80Y2lBJhLj

# 27d8ueJ8IdQhSpL/WzTjjnuYH7Dx5o9pWdIGSaFNYuSqOYxrVW7N4AEQVRDZeqDc

# fqPG3O6r5SNsxXbd71DCIQURtUKss53ON+vrlV0rjiKBIdwvMNLQ9zK0jy77owDy

# XXoYkQxakN2uFIBO1UNAvCYXjs4rw3SRmBX9qiZ5ENxcn/pLMkiyb68QdwHUXz+1

# fI6ea3/jjpNPz6Dlc/RMcXIWeMMkhup/XEbwu73U+uz/MIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiYwghoiAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAASEmOIS4HijMV0AAAAA

# BIQwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIFfk

# 2WLDMUYZjrHB3/kf6qRpaPubs4T7IFj1xzY1sZ17MEIGCisGAQQBgjcCAQwxNDAy

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20wDQYJKoZIhvcNAQEBBQAEggEAfC1iji7U9Xmsqc1gTWFoFr9mk+KanAwmGSbX

# mlxOvO7YJyHQu2vnUdmLgbv1MXRikbdCFf+gWFUtInnrlWEucID4TjTYwf3TGG8j

# VGZDWeL+camJPlpfGAT4ICxfwnRxgS5/gcicD6PTzFn43kqEYwpByMb5yzbbD9PE

# +VLmhiVyIFvBQl5w2N6+NCr5SYHC0N1IB5amg1zjVak/2bnaoajm97QPSeEa2sS6

# PCgyOXkXo4PEFAQ0mRmhrqXyJSj/b4qnBdK1zbGw2GRtaqfOGArJhL0e8VvfP7HQ

# q1S/bsR8MtzRN1m0vAUqgF3rLBi7LRZY1aVdvjgINST0pD8LOaGCF7AwghesBgor

# BgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZI

# AWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGE

# WQoDATAxMA0GCWCGSAFlAwQCAQUABCBBrLdP5HdGCoXYNsGSn1MIlrbVmCaN3uGw

# ntcjZhOf9gIGabwuzJj9GBMyMDI2MDQyMDE3MTU1Ny4xMzFaMASAAgH0oIHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjozNjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIFEKADAgECAhMzAAACE7BD

# NWbPr5XoAAEAAAITMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxN1oXDTI2MTExMzE4NDgxN1owgdMxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jv

# c29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVs

# ZCBUU1MgRVNOOjM2MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# 9Jl64LoZxDINSFgz+9KS5Ozv5m548ePVzc9RXWe4T4/Mplfga4eq12RGdp5cVvnj

# de5vxfq2ax/jnu7vUW4rZN4mOUm5vh+kcYsQlYQ53FwgIB3nEjcQHomrG3mZe/oz

# jFSAr6JbglKtIeAySPzAcFzyAer5lLNUHBEvQMM8BOjMyapCvh0xsg4xKFcVEJQL

# KEfCGBffMZI/amutHFb3CUTZ7aVpG2KHEFUNlZ1vwMKvxXTPRDnbwPGzyyqJJznf

# sLNHQ4vXt2ttS1PeCoGI0hN1Peq8yGsIXM9oocwC06DGNSM/4LAx2uKvwmUn6NwL

# c0+tmvny6w28rZLejskRfnVWofEv1mWY0jHUnHrwSGBS8gVP9gcBs6P5g0OpJPMf

# xdUkHXRkcMPPW0hIP8NbW8W5Sup8HuwnSKbjpyAlGBUdM/V5rZb0sZmkn714r6UL

# GK+cLLAN6R3FhX6N0nj64F27LTK2BbS0pJZaXjo0eDNz1QcxeIFLUgF+RBsLYDn8

# E8cCkexK8Nlt3Gi9zJf55w6UfTZ+kwTMxMqFxh7+Tfx7+aBObZ+nx961AtiqAy7z

# VV69o/LWRdKPZdvZn9ESyGbTnPfjkBERv22prSlETlRwzP6bmEVOKWLWVwxuwh7b

# UWUuUb1cj93zvttQYGQat5E9ALLJNmlvLKCskB7raLsCAwEAAaOCAUkwggFFMB0G

# A1UdDgQWBBQTnhBKx+FryphQWMRipH49sMFAOjAfBgNVHSMEGDAWgBSfpxVdAF5i

# XYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB

# JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRp

# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsF

# AAOCAgEAgmxaJrGqQ2D6UJhZ6Ql2SZFOaNuGbW3LzB+ES+l2BB1MJtBRSFdi/hVY

# 33NpxsJQhQ5TLVp0DXYOkIoPQc17rH+IVhemO8jCt+U6I1TIw6cR7c+tEo/Jjp6E

# qEU1c4/mraMjgHhQ+raC/OUAm98A1r4bIPHtsBmLROGmeE5XLIFaBIZWHvh2COXI

# TKObXVd5wGtJ1dZZdwaHACXF506jta+uoUdyzAeuNlTPLTrZ8nyhxGwk9Vh6eiDQ

# 7CQMWSSa8DJS9PUXjeoi9vTdS7ZMXqu+tv6Qz3xtoBF5+YFK4uE+miGs90Fxm0VK

# 2lWrmFhjkRl5zyoHOdwG7spNYkDomCPNWIudUQmQYKpt/Hsspfcb+xpnWIDQdMzg

# E8pj1vpwLgWEnH7LtT4dZCeoDo9PK40RxBD8kKJ769ngkEwfwCD2EX/MQk79eIvO

# hpnH12GuVByvaKZk5XZvqtPONNwr8q/qA3877IuWwWgnaeX+prpw0dZ/QLtbGGVr

# gP+TRQjt+2dcZA5P3X4LwANhiPsy0Ol4XCdj7OxBLFvOzsCPDPaVnkp+dfDFG+NO

# Bir7aqTJ68622pymg1V+6gc/1RvxC/wgvYyG033ecJqv0On0ZRNYr+i/OkwgA3HP

# 1aLD0aHrEpw6lt0263iRkCvrcdcOW8w3jC8TJuaGWyC2S9jEjzgwggdxMIIFWaAD

# AgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv

# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIy

# MjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5

# vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64

# NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhu

# je3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl

# 3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPg

# yY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I

# 5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2

# ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/

# TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy

# 16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y

# 1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H

# XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMB

# AAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQW

# BBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30B

# ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz

# L0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYB

# BAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBL

# oEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggr

# BgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNS

# b29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq

# reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27

# DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pv

# vinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9Ak

# vUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWK

# NsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2

# kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+

# c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep

# 8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+Dvk

# txW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1Zyvg

# DbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/

# 2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjozNjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAmBE8SCjxgjac

# my8/VEdk7NxpR6aggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MDANBgkqhkiG9w0BAQsFAAIFAO2Q2s4wIhgPMjAyNjA0MjAxNzAzMTBaGA8yMDI2

# MDQyMTE3MDMxMFowdzA9BgorBgEEAYRZCgQBMS8wLTAKAgUA7ZDazgIBADAKAgEA

# AgIXbgIB/zAHAgEAAgITsTAKAgUA7ZIsTgIBADA2BgorBgEEAYRZCgQCMSgwJjAM

# BgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEB

# CwUAA4IBAQABQuAcPF/5cJI5e/iAhTiBPJYLvvNSEuQR10HYqqqEJU1EJrhK5quS

# bMdpNEe8INnyLG7JDUXu13qhxku3jdpvfhzslFOpQxZ80wgSF+6cDfEkj/239NW6

# jH2yMHFkBCB/+8ZQiiB9yIIz+Ma+x5616HEttp8Dfeglv0+unw6B8qGg2o6UJpJM

# KIVcBDrwAwL2t1r0hk+Mf5MFa95d8bMVDPtlP4QTCllDLfBdfnZOR71HH9CkphU0

# ySXAs0rSnM6EZac8W/rS4AMRZ8ZkGit1q1DnlT89zHZNR34anyFAzl4JQc6XZyWV

# CR6L5Sh/9QKwH6qZQKtxUfaDV8wwsCXfMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0

# IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAITsEM1Zs+vlegAAQAAAhMwDQYJYIZI

# AWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG

# 9w0BCQQxIgQguOMOkZBDHR84hj3Nf396YEDIny32DlrN+JUe3egp5V4wgfoGCyqG

# SIb3DQEJEAIvMYHqMIHnMIHkMIG9BCDM4QltFIUz8J4DjAzP4nVodZvQxYGleUIf

# p86Oa5xYaDCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMz

# AAACE7BDNWbPr5XoAAEAAAITMCIEIPKBygyuoId9kzDWgM51l4rvINERqw9vj4rx

# ipEJHTeiMA0GCSqGSIb3DQEBCwUABIICAHrKaMqDrw2iQfY4DrH6N9ZHhDpb55U2

# Zxl+r24QrMNc9XzDz+ig1WbMbxHGVQhyXLjcWtfxLpOVNBAxQn6U88P9eLgG5wyy

# SXfFQuHVHvy2DGiZRTlla8NwhKq58Um5imIWS+k1hl0TEWojsKRr1Ra8TD7UjzBi

# jDHzaMnK+s2KytbTfnKzoaXkrIHeZ+gds1HFVG2JpUlEPmwWLOAbU55LjWZ/6bDZ

# 5UolMi1569rBWHVXOF/W55RWxz2I4CpF8xQU3t8ve31+1Syl+wK/xYT9rRgfgYbZ

# qnXGtsR8bfU19eejwK+c4CwEY3kVCTT1F5IUDImGy/xEVwsmfGmSWw7vAl4v1nVb

# FESIss2bi1eGp/ZRKBJog9TUwm4JXEYTKs50rL7FZPto4mrAFqb5JcXVkOQcxkwB

# KLseXckJhQZiOx7KQ/S6q3+PcGOoLY33DtYxzSPkq2bqFL3uVRK/XykGQAp1yYvp

# PfOiW3YmYjJezmWDvhOSTbEGv1TvUl+dUZSq6tLvJJbDfR5HkgfY0yhO8qm76KFy

# p3tDNsCBIExJ7AU6zwEzh3DuykdyMXSOvVq58p6n+IM6AECRzPFvJig7FVxrlxJw

# oftxbG2o0g/OnnzRpTJ8JRKvCnBxAhtMI6l7ld29XN7MSCQn2dD7ZPCwTVSIbmcS

# Fb/zs705zszt

# SIG # End signature block