Private/AzStackHci.WildcardAndSubdomain.Helpers.ps1
|
# //////////////////////////////////////////////////////////////////////////// # Strict Mode v1 (PS 5.1 safe) - surfaces reads of uninitialised variables at runtime. Set-StrictMode -Version 1.0 # Helper to perform DNS + optional TCP + Layer7 testing for a URL/port and return a result hashtable. # Used by Expand-WildcardUrlsDynamically, Test-ManuallyDefinedSubdomains, and the extracted # Invoke-Layer7EndpointTest helper (parallel fan-out) to avoid duplicated test logic. # # v0.6.7 (parallel branch): added -RequestMethod plumbing. Prior to this fix, the main # Layer-7 sweep loop in Test-AzureLocalConnectivity called this helper without -RequestMethod, # which meant Test-Layer7Connectivity always used its parameter default ('Auto' as of v0.6.7) # regardless of what the user passed to the public function. The two later loops (redirected # URLs + remaining URLs) were already plumbing -RequestMethod through directly. Adding the # parameter here closes that hole. Function Invoke-EndpointConnectivityTest { [CmdletBinding()] param( [Parameter(Mandatory)][string]$Url, [Parameter(Mandatory)][int]$Port, [switch]$IncludeTCPConnectivityTests, [Parameter(Mandatory=$false)] [ValidateSet('Get','Head','Auto')] [string]$RequestMethod = 'Auto' ) try { $DNSCheck = Get-DnsRecord -url (Get-DomainFromURL -url $Url).Domain } catch { Write-HostAzS "Error: DNS resolution failed for '$Url': $($_.Exception.Message)" -ForegroundColor Red return @{ TCPStatus = "Failed" TCPDiagnostics = $null DNSDiagnostics = $null DNSFailureCode = 'ResolutionError' DNSResolutionStatus = 'Failed' IPAddress = "DNS Error" Layer7Status = "Failed" Layer7Response = "DNS resolution error: $($_.Exception.Message)" Layer7ResponseTime = "N/A" CertificateIssuer = "N/A" CertificateSubject = "N/A" CertificateThumbprint = "N/A" CertificateIntermediateIssuer = "N/A" CertificateIntermediateSubject = "N/A" CertificateIntermediateThumbprint= "N/A" CertificateRootIssuer = "N/A" CertificateRootSubject = "N/A" CertificateRootThumbprint = "N/A" } } $tcpDiagnostics = $null $dnsFailureCode = if (-not $DNSCheck.DNSExists) { if ($DNSCheck.DNSFailureCode) { $DNSCheck.DNSFailureCode } else { 'ResolutionError' } } else { $null } if (($DNSCheck.DNSExists) -or ($script:Proxy.Enabled)) { if ($IncludeTCPConnectivityTests.IsPresent) { try { $tcpStatus, $ipAddress = Test-TCPConnectivity -url (Get-DomainFromURL -url $Url).Domain -port $Port -Diagnostics ([ref]$tcpDiagnostics) } catch { Write-HostAzS "Error: TCP connectivity test failed for '$Url': $($_.Exception.Message)" -ForegroundColor Red $tcpStatus = "Failed" $ipAddress = "TCP Error" } } else { $tcpStatus = "N/A" $ipAddress = $DNSCheck.IpAddress } try { $Layer7Results = Test-Layer7Connectivity -url $Url -port $Port -RequestMethod $RequestMethod -Verbose:($script:VerbosePreference -eq 'Continue') -Debug:($script:DebugPreference -eq 'Continue') } catch { Write-HostAzS "Error: Layer 7 connectivity test failed for '$Url': $($_.Exception.Message)" -ForegroundColor Red $Layer7Results = @{ Layer7Status = "Failed" Layer7Response = "Layer 7 test error: $($_.Exception.Message)" Layer7ResponseTime = "N/A" CertificateIssuer = "N/A" CertificateSubject = "N/A" CertificateThumbprint = "N/A" CertificateIntermediateIssuer = "N/A" CertificateIntermediateSubject = "N/A" CertificateIntermediateThumbprint = "N/A" CertificateRootIssuer = "N/A" CertificateRootSubject = "N/A" CertificateRootThumbprint = "N/A" } } return @{ TCPStatus = $tcpStatus TCPDiagnostics = $tcpDiagnostics DNSDiagnostics = $null DNSFailureCode = $dnsFailureCode DNSResolutionStatus = if ($DNSCheck.DNSExists) { 'Success' } else { 'Failed' } IPAddress = $ipAddress Layer7Status = $Layer7Results.Layer7Status Layer7Response = $Layer7Results.Layer7Response Layer7ResponseTime = $Layer7Results.Layer7ResponseTime CertificateIssuer = $Layer7Results.CertificateIssuer CertificateSubject = $Layer7Results.CertificateSubject CertificateThumbprint = $Layer7Results.CertificateThumbprint CertificateIntermediateIssuer = $Layer7Results.CertificateIntermediateIssuer CertificateIntermediateSubject = $Layer7Results.CertificateIntermediateSubject CertificateIntermediateThumbprint= $Layer7Results.CertificateIntermediateThumbprint CertificateRootIssuer = $Layer7Results.CertificateRootIssuer CertificateRootSubject = $Layer7Results.CertificateRootSubject CertificateRootThumbprint = $Layer7Results.CertificateRootThumbprint } } else { # DNS name does not exist return @{ TCPStatus = if ($IncludeTCPConnectivityTests.IsPresent) { "Failed" } else { "N/A" } TCPDiagnostics = $null DNSDiagnostics = $null DNSFailureCode = $dnsFailureCode DNSResolutionStatus = 'Failed' IPAddress = $DNSCheck.IpAddress Layer7Status = "Failed" Layer7Response = "N/A" Layer7ResponseTime = "N/A" CertificateIssuer = "N/A" CertificateSubject = "N/A" CertificateThumbprint = "N/A" CertificateIntermediateIssuer = "N/A" CertificateIntermediateSubject = "N/A" CertificateIntermediateThumbprint= "N/A" CertificateRootIssuer = "N/A" CertificateRootSubject = "N/A" CertificateRootThumbprint = "N/A" } } } # //////////////////////////////////////////////////////////////////////////// # Enhanced Function to expand wildcard URLs dynamically using pattern matching *.domain.com # # How this works: # 1. Splits $script:Results into wildcard entries (*.foo.com) and non-wildcard entries (bar.foo.com) # 2. For each wildcard, converts it to a regex (e.g. *.foo.com -> .*\.foo\.com) # 3. Finds non-wildcard URLs that match the regex pattern # 4. For each match: if already tested, adds a cross-reference Note; if new, runs connectivity tests # 5. Updates the wildcard entry's Note field to show which specific URLs were tested for it # # This enables testing of wildcard firewall rules by verifying connectivity to known specific endpoints # that fall under the wildcard pattern. Function Expand-WildcardUrlsDynamically { begin { # Write-Verbose "Starting Expand-WildcardUrlsDynamically function" } process { # Split into wildcard and non-wildcard results [array]$wildcardResults = $script:Results | Where-Object { $_.IsWildcard -eq $true } [array]$nonWildcardResults = $script:Results | Where-Object { $_.IsWildcard -eq $false } [int]$wildcardCount = 0 ForEach ($wildcard in $wildcardResults) { $wildcardCount++ Write-Progress -Id 1 -ParentId 0 -Activity "Expanding Wildcard URLs" -Status "Wildcard $wildcardCount of $($wildcardResults.Count): $($wildcard.URL)" -PercentComplete (($wildcardCount / [math]::Max($wildcardResults.Count,1)) * 100) # Create a regex pattern from the wildcard URL # Escape dots first, then replace * with .* for proper regex matching $wildcardPattern = [regex]::Escape($wildcard.URL) -replace "\\\*", ".*" # Find matching non-wildcard URLs, for each wildcard URL that exists [array]$matchingUrls = @() $matchingUrls = $nonWildcardResults | Where-Object { $_.URL -match "^$wildcardPattern$" } Write-HostAzS "`n$wildcardCount of $($wildcardResults.Count): Processing $($wildcard.Source): $($wildcard.URL)" if($matchingUrls.Count -eq 0) { Write-HostAzS "`tInfo: No match found for $($wildcard.source), $($wildcard.URL)" -ForegroundColor Yellow if($wildcard.Note -notlike "Wildcard URL,*"){ # Update the note to include the matching URL Write-Verbose "Updating Note of wildcard URL: $($wildcard.URL)" ($script:Results | Where-Object { $PSItem.URL -eq $wildcard.URL } | Select-Object -First 1).Note = "Wildcard URL, not tested (as no non-wildcard) - $($wildcard.Note)" } # Continue to the next matching URL Continue } elseif ($matchingUrls.Count -gt 0) { # Matches found, expand the wildcard entry # Incremental counter for matching URLs [int]$counter = 0 # Loop for each matching URL foreach ($match in $matchingUrls) { $counter++ Write-HostAzS "`n`tProcessing match $counter of $($matchingUrls.count): $($match.URL)" # Add URL based on test for either HTTP or HTTPS if($match.Port -is [int]){ # If the URL already exists in the results, update the note if($script:Results.URL -contains $match.URL){ # URL already exists in the results, skip Write-HostAzS "`tEndpoint matches wildcard '$($wildcard.URL)', adding cross-reference in Notes column" -ForegroundColor Green if(($match.Note -notlike "URL matches *") -and ($match.Note -notlike "Manually defined URL *")){ # Update the note to include the matching URL Write-Verbose "Updating Note of matched URL: $($match.URL)" ($script:Results | Where-Object { $PSItem.URL -eq $match.URL } | Select-Object -First 1).Note = "URL matches $($wildcard.Source), to test URL $($wildcard.URL) - $($match.Note)" } # Continue to the next matching URL Continue } elseif ($script:Results.URL -notcontains $match.URL){ # Specific URL matched to Wildcard URL does not exist in the results, unexpected, but will add it Write-HostAzS "`tEndpoint matches wildcard '$($wildcard.URL)', adding to results" -ForegroundColor Green $newEntry = $wildcard.PSObject.Copy() $newEntry.URL = $match.URL $newEntry.Port = $match.Port $newEntry.ArcGateway = $match.ArcGateway $newEntry.Source = "$($match.Source)" $newEntry.Note = "URL matches $($match.Source), to test URL $($wildcard.URL) - $($match.Note)" # Set IsWildcard to false, as this is no longer a wildcard URL, it is a specific URL to test a wildcard URL $newEntry.IsWildcard = $false if($ArcGatewayDeployment.IsPresent){ # Skip URLs with ArcGateway -eq $True if($match.ArcGateway){ # Skip URLs that support Arc Gateway Write-HostAzS "Skipped URL: '$($newEntry.URL)' as supported by Arc Gateway" -ForegroundColor Yellow $newEntry.TCPStatus = "Skipped" $newEntry.Note = "Skipped, URL is supported by Arc Gateway - $($match.Note)" $newEntry.IPAddress = "N/A" $newEntry.Layer7Status = "Skipped" $newEntry.Layer7Response = "N/A" $newEntry.Layer7ResponseTime = "N/A" $newEntry.CertificateIssuer = "N/A" $newEntry.CertificateSubject = "N/A" $newEntry.CertificateThumbprint = "N/A" $newEntry.IntermediateCertificateIssuer = "N/A" $newEntry.IntermediateCertificateSubject = "N/A" $newEntry.IntermediateCertificateThumbprint = "N/A" $newEntry.RootCertificateIssuer = "N/A" $newEntry.RootCertificateSubject = "N/A" $newEntry.RootCertificateThumbprint = "N/A" } else { # Does not support Arc Gateway - run connectivity tests # $RequestMethod resolves from the Test-AzureLocalConnectivity call frame (dynamic scope), like $IncludeTCPConnectivityTests / $ArcGatewayDeployment above. $testResult = Invoke-EndpointConnectivityTest -Url $match.URL -Port $match.Port -IncludeTCPConnectivityTests:$IncludeTCPConnectivityTests.IsPresent -RequestMethod $RequestMethod Copy-ConnectivityResultsToUrlObject -UrlObject $newEntry -TestResult $testResult } # End of ArcGateway -eq $True check } else { # Else process URLs with ArcGateway -eq $False # $RequestMethod resolves from the Test-AzureLocalConnectivity call frame (dynamic scope), like $IncludeTCPConnectivityTests / $ArcGatewayDeployment above. $testResult = Invoke-EndpointConnectivityTest -Url $match.URL -Port $match.Port -IncludeTCPConnectivityTests:$IncludeTCPConnectivityTests.IsPresent -RequestMethod $RequestMethod Copy-ConnectivityResultsToUrlObject -UrlObject $newEntry -TestResult $testResult } # End of DNS check # Add the new match to the expanded results $script:Results.Add($newEntry) | Out-Null Write-Verbose "Added: '$($newEntry.URL)' that matches Wildcard '$($wildcard.URL)'" } else { # Unexpected condition, should not occur, as we use the Results array for the list of Wildcards, so the URL should always exist Write-Warning "Unexpected: URL '$($match.URL)' matches Wildcard '$($wildcard.URL)', but conditions not met, skipping" Continue } # End of URL exists check } else { Write-Warning "Port not valid for url: '$($match.URL)', port: '$($match.Port)', note: '$($match.Source)' - skipping" } } # End of matching URLs loop } else { # Unexpected condition, should not occur, as we use the Results array for the list of Wildcards, so the URL should always exist Write-Warning "Unexpected: Wildcard URL $($wildcard.URL) should match either zero or more results, but matches status unknown, skipping" Continue } # End of matching URLs check } # End of wildcard loop Write-Progress -Id 1 -Activity "Expanding Wildcard URLs" -Completed } # End of process block end { # Write-Debug "Completed Expand-WildcardUrlsDynamically function" } } # End of Expand-WildcardUrlsDynamically function # //////////////////////////////////////////////////////////////////////////// # Function to manually test known subdomains for wildcard URLs Function Test-ManuallyDefinedSubdomains { Param ( ) begin { # Incremental counter for subdomains (separate from the main progress bar) [int]$urlCount = 0 # Total number of manually defined subdomains for sub-progress tracking [int]$totalSubdomains = $script:MANUAL_SUBDOMAIN_COUNT # Use the constant subdomain list $manualSubdomains = $script:MANUAL_SUBDOMAINS $endpointInventory = @($script:Results | Where-Object { $_.Source -match '^(GitHub|Environment Checker)( Wildcard)?$' }) } process { # Test each manual subdomain for each wildcard to validate connectivity. ForEach ($entry in $manualSubdomains) { $wildcard = $entry.Wildcard $subdomains = $entry.Subdomains Write-HostAzS "`nTesting manually defined subdomains for wildcard $wildcard" # ForEach loop to process each subdomain ForEach ($subdomain in $subdomains) { $matchedEndpoints = @($endpointInventory | Where-Object { $subdomain -like (Get-DomainFromURL -url $_.URL).Domain -and (-not $ArcGatewayDeployment.IsPresent -or $_.ArcGateway -ne $true) }) if (-not $matchedEndpoints.Count) { Write-Verbose "Info: No applicable GitHub or Environment endpoint matches '$subdomain'; skipping manual tests." Continue } $ports = @($matchedEndpoints | Select-Object -ExpandProperty Port -Unique) # Test each subdomain for TCP and Layer 7 connectivity $urlCount++ if ($totalSubdomains -gt 0) { Write-Progress -Id 1 -ParentId 0 -Activity "Validating Wildcard Endpoints" -Status "Subdomain $urlCount of $($totalSubdomains): $subdomain" -PercentComplete (($urlCount / $totalSubdomains) * 100) } Write-HostAzS "`nWildcard validation $urlCount of $($totalSubdomains): Subdomain: $subdomain" ForEach ($port in $ports) { $portEndpoints = @($matchedEndpoints | Where-Object { $_.Port -eq $port }) $existingEntry = $script:Results | Where-Object { (Get-DomainFromURL -url $_.URL).Domain -eq $subdomain -and $_.Port -eq $port } | Select-Object -First 1 if ($existingEntry -and -not [string]::IsNullOrWhiteSpace([string]$existingEntry.Layer7Status)) { Write-Verbose "Info: Reusing completed test for '$subdomain' on port $port." foreach ($parentEndpoint in $portEndpoints | Where-Object IsWildcard -eq $true) { if ($parentEndpoint.Note -notlike 'Wildcard URL,*') { $parentEndpoint.Note = "Wildcard URL, tested by example endpoint $subdomain - $($parentEndpoint.Note)" } } Continue } # Run connectivity tests using shared helper # $RequestMethod resolves from the Test-AzureLocalConnectivity call frame (dynamic scope), like $IncludeTCPConnectivityTests / $ArcGatewayDeployment. Write-HostAzS "Testing $subdomain on port $port" $testResult = Invoke-EndpointConnectivityTest -Url $subdomain -Port $port -IncludeTCPConnectivityTests:$IncludeTCPConnectivityTests.IsPresent -RequestMethod $RequestMethod $TCPstatus = $testResult.TCPStatus $ipAddress = $testResult.IPAddress $Layer7Status = $testResult.Layer7Status $Layer7Response = $testResult.Layer7Response $Layer7ResponseTime = $testResult.Layer7ResponseTime $CertificateIssuer = $testResult.CertificateIssuer $CertificateSubject = $testResult.CertificateSubject $CertificateThumbprint = $testResult.CertificateThumbprint $CertificateIntermediateIssuer = $testResult.CertificateIntermediateIssuer $CertificateIntermediateSubject = $testResult.CertificateIntermediateSubject $CertificateIntermediateThumbprint = $testResult.CertificateIntermediateThumbprint $CertificateRootIssuer = $testResult.CertificateRootIssuer $CertificateRootSubject = $testResult.CertificateRootSubject $CertificateRootThumbprint = $testResult.CertificateRootThumbprint # MachineName (v0.6.7): identifies which node generated this row when bundles # from multiple nodes are merged via -Scope Cluster. $subdomainEntry = [PSCustomObject]@{ RowID = 0 MachineName = $env:COMPUTERNAME URL = $subdomain Port = $port ArcGateway = (@($portEndpoints | Where-Object { $_.ArcGateway -ne $true }).Count -eq 0) IsWildcard = $false Source = "Test for $(($portEndpoints.Source | Sort-Object -Unique) -join ' / ')" Note = "Example endpoint used to test connectivity for wildcard(s): $(($portEndpoints.URL | Sort-Object -Unique) -join ', ') on port $port" TCPStatus = $TCPstatus TCPDiagnostics = $testResult.TCPDiagnostics DNSDiagnostics = $testResult.DNSDiagnostics DNSFailureCode = $testResult.DNSFailureCode DNSResolutionStatus = $testResult.DNSResolutionStatus IPAddress = $ipAddress Layer7Status = $Layer7Status Layer7Response = $Layer7Response Layer7ResponseTime = $Layer7ResponseTime CertificateIssuer = $CertificateIssuer CertificateSubject = $CertificateSubject CertificateThumbprint = $CertificateThumbprint IntermediateCertificateIssuer = $CertificateIntermediateIssuer IntermediateCertificateSubject = $CertificateIntermediateSubject IntermediateCertificateThumbprint = $CertificateIntermediateThumbprint RootCertificateIssuer = $CertificateRootIssuer RootCertificateSubject = $CertificateRootSubject RootCertificateThumbprint = $CertificateRootThumbprint } if ($existingEntry) { foreach ($property in $subdomainEntry.PSObject.Properties) { if ($property.Name -notin @('RowID', 'MachineName', 'URL', 'Port', 'ArcGateway', 'IsWildcard', 'Source', 'Note')) { Add-Member -InputObject $existingEntry -NotePropertyName $property.Name -NotePropertyValue $property.Value -Force } } } else { $script:Results.Add($subdomainEntry) | Out-Null } foreach ($parentEndpoint in $portEndpoints | Where-Object IsWildcard -eq $true) { if ($parentEndpoint.Note -notlike 'Wildcard URL,*') { $parentEndpoint.Note = "Wildcard URL, tested by example endpoint $subdomain - $($parentEndpoint.Note)" } } } } # End of ForEach per $port } # End of ForEach $subdomain } # End of Process block end { # Progress bar is managed by the caller (unified with main endpoint testing) } } # End of Test-ManuallyDefinedSubdomains function # //////////////////////////////////////////////////////////////////////////// # Function to parse endpoints from markdown lines Function Get-EndpointsFromMarkdown { <# .SYNOPSIS Parse endpoints from markdown lines. .DESCRIPTION This function parses the provided markdown lines to extract endpoint URLs. #> [CmdletBinding()] param ( [Parameter(Mandatory=$true)] [AllowEmptyCollection()] [string[]]$InputMarkdown, [Parameter(Mandatory=$true)] [ValidateNotNullOrEmpty()] [string]$Source ) begin { # Write-Debug "Get-EndpointsFromMarkdown: Beginning endpoint parsing from markdown lines" # Initialize counter to store the number of parsed endpoints [int]$parsedEndpoints = 0 # Validate input is not empty if (-not $InputMarkdown -or $InputMarkdown.Count -eq 0) { Write-Warning "No markdown content provided to parse in function: 'Get-EndpointsFromMarkdown'. Returning 0 endpoints." return $parsedEndpoints } } process { # Parse markdown table rows to extract endpoint URLs. # Expected format: | RowNum | ... | URL | Ports | Note | ArcGateway | ... # The regex matches lines starting with | followed by a number (the row ID column). # Columns are split on '|' and indexed: [3]=URL, [4]=Ports, [5]=Note, [6]=ArcGateway. ForEach ($line in $InputMarkdown) { if ($line -match "^\|\s*(\d+)\s*\|") { # $rowId = [int]($line -replace "^\|\s*(\d+)\s*\|.*", '$1') $columns = $line -split "\|" # Validate column count before accessing indices (need at least 7 columns: empty, rowId, desc, URL, Ports, Note, ArcGateway) if ($columns.Count -lt 7) { Write-Warning "Skipping malformed markdown row (expected at least 7 columns, found $($columns.Count)): $line" Continue } $url = $columns[3].Trim() # Sanitize URL: only allow FQDN characters (alphanumeric, hyphens, dots, wildcards, forward slashes, colons for port, underscores) # This prevents injection of unexpected values from crafted markdown files. if ($url -notmatch '^[a-zA-Z0-9\*\.\-\:/_]+$') { Write-Warning "Skipping invalid URL from markdown: '$url' - contains unexpected characters" Continue } $ports = $columns[4].Trim() -split ',' $note = $columns[5].Trim() $ArcGatewayText = $columns[6].Trim() if(($ArcGatewayText.Length -ge 2) -and ($ArcGatewayText.Substring(0,2) -eq "No")){ # "No" [bool]$ArcGateway = $false } elseif(($ArcGatewayText.Length -ge 3) -and ($ArcGatewayText.Substring(0,3) -eq "Yes")){ # "Yes" [bool]$ArcGateway = $true } else { # Unknown Write-Warning "Unknown ArcGateway status for url: '$url' : $ArcGatewayText" [bool]$ArcGateway = $false } # Use only the domain name from the URL, remove any absolute path from the endpoint when checking if it exists $urlcheck = (Get-DomainFromURL -url $url).Domain foreach ($port in $ports) { $isWildcard = $url.Contains("*") if($script:Results | Where-Object { ((Get-DomainFromURL -url $_.URL).Domain -eq $urlcheck) -and ($_.Port -eq $port) }) { Write-Debug "$($Source): Skipping '$url' with port '$port', as it already exists in the results array." # If the ArcGateway value is different, update it $script:Results | Where-Object { ((Get-DomainFromURL -url $_.URL).Domain -like $urlcheck) -and ($_.Port -eq $port) } | ForEach-Object { $_.ArcGateway = $ArcGateway } Continue } else { Write-Debug "$($Source): Adding '$urlcheck' with port '$port' to results array for processing." # MachineName (v0.6.7): identifies which node generated this row when bundles # from multiple nodes are merged via -Scope Cluster. This is the primary URL # ingestion path so the bulk of result rows in any run originate here. $script:Results.Add([PSCustomObject]@{ RowID = 0 MachineName = $env:COMPUTERNAME URL = $url Port = [int]$port ArcGateway = $ArcGateway IsWildcard = $isWildcard Source = if ($isWildcard) { "$Source Wildcard" } else { "$Source" } Note = $note TCPStatus = "" IPAddress = "" Layer7Status = "" Layer7Response = "" Layer7ResponseTime = "" CertificateIssuer = "" CertificateSubject = "" CertificateThumbprint = "" IntermediateCertificateIssuer = "" IntermediateCertificateSubject = "" IntermediateCertificateThumbprint = "" RootCertificateIssuer = "" RootCertificateSubject = "" RootCertificateThumbprint = "" }) | Out-Null # Increment the parsed endpoints counter $parsedEndpoints++ } } } } } # End of process block end { # Write-Debug "Get-EndpointsFromMarkdown: Endpoint parsing completed" Return $parsedEndpoints } } # End Function Get-EndpointsFromMarkdown # SIG # Begin signature block # MIInKAYJKoZIhvcNAQcCoIInGTCCJxUCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCfrNDVUou1YP7N # uV0TdBNzfArxgWQCJApQkDWQbBqXDKCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIFazH4a1GIMOH/+BGNNe983PcpvV48d/L0vijGZvFGF0MEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAu2mxZVcff1n57J83 # ipvAT9SX6A+ykXm6oJizDKLtYmsBl2RnLD6/k29yImT+qcZY4viqqa8N7aVWiuyz # B9Yy/U0jAerB86yu81pYv44Yn850AlyiKDlMvJad1hxXaab4yesV3v0q2jF3/aTZ # GZOK3844MfIA4bUDwnNMIgJjFcZF97+zzNtfrY7d49NGNt08Z8azIj091ImI7Ua1 # FREBXNnmEb9/taXOX4f29heC3UT/x42OMy44QjmprGC/o2RGSoSlShxcTmdLZfPD # rTQgxlgwPKkUmYAmseqhHhWMXV47LHsekfo84fkneC9b3BEXoiaKCj0VwDEMRjON # p4pJEqGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wGCSqGSIb3DQEHAqCCF20w # ghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9 # MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCA/xaZ3J0MWWgwt # yWSWzHx/KBNFunmVtaP+L3TOePOZDAIGaqmqYbaMGBMyMDI2MDkyNTE3MTEwMS44 # NjJaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODYwMy0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHqMIIHIDCCBQigAwIBAgIT # MwAAAiWAxzfGzap3SQABAAACJTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMDFaFw0yNzA1MTcxOTQwMDFa # MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL # ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk # IFRTUyBFU046ODYwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l # LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCm # 8RIP0eLA46VcCPovvmqsIlN6qkmz5IsHWmUU0neUqp8uGxadeo+SwWBCwQ5alZI/ # DNdpXfyiZLZR6XYgpRPFzepIl7OCDb4NtEskJCIZDkQMNwrH9YwUyu71GGigsLIx # eleHtA3utoVTeHjS1b8UnwORRtknKkyrUArT6ZpB2rodIcmcLcv3x3wwgYlOs0FE # g5EsVrZb7LNc/nd0bXDp+HTOWWui8eoTVwJeLxcVP869oF8li5SU81aa2tGJ6/Js # ejiz9JMW8SJXKBT2DCXMOUkCsGjonPZRqfvoMSIQZgtaOTyAJlrvsy0TZ78XrGqo # ygtQimQnbOAL4KNLSCuW5TZEQGTHLOQJGgggb3j5gKC778+RIPJA+n/hmHJ/x4qT # /HTTPoVeMCcuBKWrQXR1+/pYau3Fwe0tWIyG+LWzkRr/ZNPPupcA2Yci3qn8HR9R # wvQopqSNJwn2Ri6am8AQyfVVy/BBw0t6jpoRPjwKvuUjfCzpae6duOxQtQ1XDN9P # A2yl9sDko/+AXV/SOe8ea8QoQcv3s3ErkG+Lp6hnvw6OMPian4ggNkRtgtB7ro1O # iopOUXJn9Y5EO3JUAXNcuM9m+5My1VEuvGytgAH3uxmslTnW3YbrfazaySCSSnWk # haOZ33hgbuUQfH7n2NFEAUc/cFzfmCQUikWisnJYywIDAQABo4IBSTCCAUUwHQYD # VR0OBBYEFLE40qoXTuMHX3AfZUu1n8nx2h93MB8GA1UdIwQYMBaAFJ+nFV0AXmJd # g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6 # Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l # AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA # A4ICAQAHnfc2yUyoHZbvvyVKFuXh5HxxHIvIaR9JWpIfITJlc/Ki03juR+vckzq3 # tp5fFH5LL7eIFXRIuoewMsvWeFrWufrrW4HhmhCwkqArfA1C0xk+HaYs2O48YSxM # X9lgS1kTTIb3YsfoFdFpKurPf2nc2Yd4wLg+FgwmkxkeyE3MUKVna8SZeVpEjnS5 # ucFck4srPwK2ORAf70I23GGyPhqgIKZphNXhSscTAQsyIqB5GwDMdRV5LK37NfU4 # YmxvCYh3TFYE/Gh01Q6yJvf9HxiEZpwW+oUk0gruHobg3sgIR5rfgUo8l30vUnaD # YMcPAClaFMC/QbHZSaUhWXZG1OOcMp0g9vYQNLDEqFX2jlquvzVSSwtHtm1KTldC # jRED+kdCybcPxbPalwJigXc1BsI9CitnTf0ljwb9NkZ/JVI8/D62rXXzhz4F3u0i # VGzwncGaxRxHG/Xv4nTrpkOeepoYbNBbMWS2G1qP3Xj7pVf0+4qRyAqJ0stjQjoV # OJImVPWRjz5PR3Dn6adQVMBJDM6gDrj1rZTFVgCtTijqGZSGzvXpGkF3vYsyE6ZD # ma/kGdiUe5saeI6lH66PiWWXgqxt7sy2Ezv0yIjSVv+eMOT2QMUiZ6WCc7gVtAmX # pfeIus+NmgFvM+Ic1X58e4I9EL4ZSAidSpWW0GZTLNC02mryLjCCB3EwggVZoAMC # AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m # dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy # NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9 # DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2 # Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N # 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc # ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ # j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk # lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy # L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M # 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX # pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU # HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode # 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA # ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE # FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB # MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE # AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB # /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug # SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG # AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv # b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt # 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP # MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++ # Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9 # QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2 # wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR # AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z # bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx # t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3 # Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN # uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z # cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIICNQIBATCB+aGB0aSBzjCB # yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc # TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU # U1MgRVNOOjg2MDMtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T # dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBTb+bKOPAjCBflhzw5EXBuSWxe # DqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3 # DQEBCwUAAgUA7mCtizAiGA8yMDI2MDkyNTA4MjEzMVoYDzIwMjYwOTI2MDgyMTMx # WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDuYK2LAgEAMAcCAQACAh0RMAcCAQAC # AhLMMAoCBQDuYf8LAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKg # CjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAFmtahBM # L6Dr/9wJzjSZXEJSyhC0n8yNE/5E0G9LhzkiGHKzN2OtTCYHTZMmIhfVdub4TZuQ # +JzBJMzq0N58ysO5MDlCH//ivBNOpl4zVNe6imA1Ydwz6xmhc8FgTx+b8AT34+UX # b0vC1KBZRvMo8V5gjJUYQA73ygDYDHQiq0Ofj0X3yr0g6E+LsspxCp0f+C81n8v1 # mG4JCcbVjxzINGqQKbw5/WUG8ScU1sbqtVXPupOVVwWpWXZvyhUAMoXhKamC7DHr # QDURyjqTYJgnnRNq3JtHVCm/VK/e8RzSVm7Mlc3MsLaj6sOZ/WzgbOgOE7oF5LLD # YsgDr6cAXp8OJ3gxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UE # CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z # b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ # Q0EgMjAxMAITMwAAAiWAxzfGzap3SQABAAACJTANBglghkgBZQMEAgEFAKCCAUow # GgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCDU4pLv # 6DGy2RCORrsU53Jm6BofZJTtAYi+OmkeVLxCSDCB+gYLKoZIhvcNAQkQAi8xgeow # gecwgeQwgb0EIFYN7oh6ON3y92CmAl/lF0CYwrjWWQP6dCUxajPSHKEQMIGYMIGA # pH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT # B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE # AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIlgMc3xs2qd0kA # AQAAAiUwIgQgNbt381qU+Fy0zZS6Oxd77bZMO3xoIZ4/yeAa/2NgYdowDQYJKoZI # hvcNAQELBQAEggIAfg5GC94j17pd15m9grW//n2kv3BIhGp7e2ROL06FCW6/W1bC # 59zRO9ugno2IydTdpn+tqyAbZKw4b0Z1Y7X7nlzGm9kC9UR2g5Hf2hcfLgc1oaJZ # O80O4hzJbxBGCp5tENMUzRJeqMnGKlBumi5LCGOrUxkp7qfSn7qOPlBfKX3yMf2B # ClUZbp9nO4jvmB0c6zN4vOqEgLIONSLxR1PqXJrhb54aO+sAP3wV+dH0Mpw+h0py # 39KRmlL5I/oCigkdnNDRUNo0A5fBsy5e09VhC2EbtHLjWoG6EhR/bBPDHyxlu4U2 # /hZ4OpTXZJ1jqaOp078QWll1GWMoQVxG8l9bwfGcBhKe3cZs7ZgCCLOvXkFAvAyH # 0ECGIC++2BhqepT1O5PRWuMWbusLwS2Xgb3jPzX/ftzlW66wDsIvzxXKV8zI9gCE # Kx5nUdDuzVQX3z/IQuZt2BlPop4qkh6veqwDVbwXzyMZyi492yLapvjrfyeGN6lA # hg1KU8k6MUp5wZ0PpDCPcn6Yo32hHXACv9VMaXshZnVlrCMN8aOuXSPvMSsFCHYv # 8no1ZKkV2TcBT/d4E9AGYV7fWD+kjToTfpDwgQ8PwCm8JgO/37ORZStQ/Eu2L1T8 # om7QTGGPTdAbbTV6Su1PDx7VlBCEcxSLvTFa4krI362Mvh93Q0iBc8dWNdo= # SIG # End signature block |