AzStackHciArcIntegration/AzStackHci.ArcIntegration.Helpers.psm1
|
Import-LocalizedData -BindingVariable lanTxt -FileName AzStackHci.ArcIntegration.Strings.psd1 class HealthModel { # Attributes for Azure Monitor schema [string]$Name #Name of the individual test/rule/alert that was executed. Unique, not exposed to the customer. [string]$Title #User-facing name; one or more sentences indicating the direct issue. [string]$Severity #Severity of the result (Critical, Warning, Informational, Hidden) - this answers how important the result is. Critical is the only update-blocking severity. [string]$Description #Detailed overview of the issue and what impact the issue has on the stamp. [psobject]$Tags #Key-value pairs that allow grouping/filtering individual tests. For example, "Group": "ReadinessChecks", "UpdateType": "ClusterAware" [string]$Status #The status of the check running (i.e. Failed, Succeeded, In Progress) - this answers whether the check ran, and passed or failed. [string]$Remediation #Set of steps that can be taken to resolve the issue found. [string]$TargetResourceID #The unique identifier for the affected resource (such as a node or drive). [string]$TargetResourceName #The name of the affected resource. [string]$TargetResourceType #The type of resource being referred to (well-known set of nouns in infrastructure, aligning with Monitoring). [datetime]$Timestamp #The Time in which the HealthCheck was called. [psobject[]]$AdditionalData #Property bag of key value pairs for additional information. [string]$HealthCheckSource #The name of the services called for the HealthCheck (I.E. Test-AzureStack, Test-Cluster). } class AzStackHciArcIntegrationTarget : HealthModel {} function Test-ExistingArcResources { [CmdletBinding()] param ( [string] $SubscriptionId, [string] $ArcResourceGroupName, [string[]] $NodeNames ) try { #TODO:check if the cmdlet is there, if it is not there, it means it is a different machine, we will fail the test $hciRegCmdlet = Get-Command Get-AzureStackHCI -Type Cmdlet -ErrorAction Ignore if($null -eq $hciRegCmdlet) { # If Get-AzureStackHCI, is not found, fail validation, indicating, validation can only run on HCI OS $detail = $lanTxt.ArcValidationNotSupported $status = 'Failed' Log-Info $detail } elseif ($(Get-AzureStackHCI).RegistrationStatus -ne "NotYet") { # Validation can only be done on un-registred cluster, when run on any other registration state, we will skip the validation $detail = $lanTxt.ClusterAlreadyRegistered $status = 'Succeeded' Log-Info $detail } elseif (!$(Get-AzContext)) { $detail = $lanTxt.AzureContextRequired $status = 'Failed' Log-Info $detail -Type Warning } else { $HCApiVersion = "2022-03-10" $sameNodeNames = [System.Collections.ArrayList]::new() $msg = "Verifying subscription ID : {0}, Resource Group: {1}, Node Names {2}" -f $SubscriptionId, $ArcResourceGroupName, ($NodeNames -join ',') Log-Info $msg forEach ($clusNode in $NodeNames) { $machineResourceId = "/Subscriptions/" + $SubscriptionId + "/resourceGroups/" + $ArcResourceGroupName + "/providers/Microsoft.HybridCompute/machines/" + $clusNode $arcMachineResource = Get-AzResource -ResourceId $machineResourceId -ApiVersion $HCApiVersion -ErrorAction Ignore if ($Null -ne $arcMachineResource) { $sameNodeNames.Add($clusNode) | Out-Null } } if ($sameNodeNames.Count -gt 0) { $sameNodeNamesAsList = $sameNodeNames -join "," $detail = $lanTxt.ArcMachineAlreadyExistsInResourceGroupError -f $sameNodeNamesAsList, $ArcResourceGroupName $status = 'Failed' Log-Info $detail -Type Warning } else { $detail = $lanTxt.ArcMachineNotFound -f $ArcResourceGroupName $status = 'Succeeded' Log-Info $detail } } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_ArcIntegration_ResourceGroup_Check' $instanceResult.Title = 'Test ARC ResourceGroup' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Checking ARC ResourceGroup clean" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'ARC ResourceGroup' $instanceResult.TargetResourceName = 'ARC ResourceGroup' $instanceResult.TargetResourceType = 'ResourceGroup' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'ARC ResourceGroup' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } catch { throw ("Error validating ARC Resource Group : {0}" -f $_.Exception) } } function Test-ArcAgentNotConnectedToDifferentResource { param ( [string] $SubscriptionId, [string] $ArcResourceGroupName, [string[]] $NodeNames, [System.Management.Automation.Runspaces.PSSession[]] $PSSession ) try { #TODO:check if the cmdlet is there, if it is not there, it means it is a different machine, we will fail the test $hciRegCmdlet = Get-Command Get-AzureStackHCI -Type Cmdlet -ErrorAction Ignore if($null -eq $hciRegCmdlet) { # If Get-AzureStackHCI, is not found, fail validation, indicating, validation can only run on HCI OS $detail = $lanTxt.ArcValidationNotSupported $status = 'Failed' Log-Info $detail } elseif ($(Get-AzureStackHCI).RegistrationStatus -ne "NotYet") { # Validation can only be done on un-registred cluster, when run on any other registration state, we will skip the validation $detail = $lanTxt.ClusterAlreadyRegistered $status = 'Succeeded' Log-Info $detail } elseif ($null -eq $PSSession) { $detail = $lanTxt.SessionNotProvided $status = 'Succeeded' Log-Info $detail } else { $NodesAlreadyArcEnabledDifferentResource = [System.Collections.ArrayList]::new() foreach ($nodeSession in $PSSession) { try { Microsoft.PowerShell.Core\Invoke-Command -Session $nodeSession -ErrorAction Stop -ArgumentList $lanTxt.ArcAgentExePath -ScriptBlock { if(Test-Path -Path $args[0]) { $arcAgentStatus = Invoke-Expression -Command "& 'C:\Program Files\AzureConnectedMachineAgent\azcmagent.exe' show -j" # Parsing the status received from Arc agent $arcAgentStatusParsed = $arcAgentStatus | ConvertFrom-Json # Throw an error if the node is Arc enabled to a different resource group or subscription id # Agent can be is "Connected" or disconnected state. If the resource name property on the agent is empty, that means, it is cleanly disconnected , and just the exe exists # If the resourceName exists and agent is in "Disconnected" state, indicates agent has temporary connectivity issues to the cloud if(-not ([string]::IsNullOrEmpty($arcAgentStatusParsed.resourceName)) -And (($arcAgentStatusParsed.subscriptionId -ne $Using:SubscriptionId) -or ($arcAgentStatusParsed.resourceGroup -ne $Using:ArcResourceGroupName))) { $differentResourceExceptionMessage = ("{0}: Subscription Id: {1}, Resource Group: {2}" -f $Using:nodeSession.ComputerName, $arcAgentStatusParsed.subscriptionId, $arcAgentStatusParsed.resourceGroup) throw $differentResourceExceptionMessage } } } } catch { if(($null -ne $_.Exception.Message) -and $_.Exception.Message.Contains($nodeSession.ComputerName) -and $_.Exception.Message.Contains("Subscription Id") -and $_.Exception.Message.Contains("Resource Group")) { $NodesAlreadyArcEnabledDifferentResource.Add($_.Exception.Message) | Out-Null } else { throw ("Error verifying Arc registration state for node: {0} with exception: {1}" -f $nodeSession.ComputerName, $_.Exception.Message) } } } if($NodesAlreadyArcEnabledDifferentResource.Length -gt 0) { $NodesAlreadyArcEnabledDifferentResource = $NodesAlreadyArcEnabledDifferentResource -join "`n" $detail = $lanTxt.ArcAlreadyEnabledInADifferentResourceError -f $NodesAlreadyArcEnabledDifferentResource $status = 'Failed' Log-Info $detail } else { $detail = $lanTxt.ArcNotEnabledInADifferentResource $status = 'Succeeded' Log-Info $detail } } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_ArcIntegration_ArcMachinesState_Check' $instanceResult.Title = 'Check Arc for servers machines state' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Check if Arc for servers machines are already connected to a different subscription id or resource group" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'Arc for Servers' $instanceResult.TargetResourceName = 'Arc for Servers' $instanceResult.TargetResourceType = 'Arc for Servers' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'Arc for Servers' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } catch { throw ("Exception while checking Nodes Arc connection state: {0}" -f $_.Exception.Message) } } function Test-IsRegionValid { [CmdletBinding()] param ( [string] $Region ) try { if(!$(Get-AzContext)) { $detail = $lanTxt.AzureContextRequired $status = 'Failed' Log-Info $detail } elseif ([string]::IsNullOrEmpty($Region)) { $detail = $lanTxt.RegionRequired $status = 'Succeeded' Log-Info $detail } else { $Region = Normalize-RegionName -Region $Region $locations = Retry-Command -ScriptBlock { (Get-AzResourceProvider -ProviderNamespace Microsoft.AzureStackHCI).Where{($_.ResourceTypes.ResourceTypeName -eq 'clusters' -and $_.RegistrationState -eq 'Registered')}.Locations } -RetryIfNullOutput $true Log-Info ("RP supported regions : $locations") $locations | foreach { $regionName = Normalize-RegionName -Region $_ if ($regionName -eq $Region) { # Supported region $detail = $lanTxt.RegionVerified $status = 'Succeeded' Log-Info $detail } } if($status -ne 'Succeeded') { $detail = $lanTxt.RegionNotVerified -f $Region $status = 'Failed' Log-Info $detail } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_ArcIntegration_Region_Check' $instanceResult.Title = 'Verify Azure Region' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Checking Azure Region" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'Azure Region' $instanceResult.TargetResourceName = 'Azure Region' $instanceResult.TargetResourceType = 'Region' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'Azure Region' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } } catch { throw ("Exception while validating Region : {0}" -f $_.Exception) } } function Test-ResourceGroupLimit { [CmdletBinding()] param ( [string] $SubscriptionId, [string] $ArcResourceGroupName, [string] $RegistrationResourceGroupName ) try { $azureContext = Get-AzContext if(!$azureContext) { $detail = $lanTxt.AzureContextRequired $status = 'Failed' Log-Info $detail } else { $newRGCount = 0 $hciRG = Get-AzResourceGroup -Name $RegistrationResourceGroupName -ErrorAction SilentlyContinue if([string]::IsNullOrEmpty($hciRG)) { $newRGCount++ } if($ArcResourceGroupName -ne $RegistrationResourceGroupName) { $arcRG = Get-AzResourceGroup -Name $ArcResourceGroupName -ErrorAction SilentlyContinue if([string]::IsNullOrEmpty($arcRG)) { $newRGCount++ } } $totalRGCount = (Get-AzResourceGroup -ErrorAction SilentlyContinue).Count if(($totalRGCount + $newRGCount) -gt 980) { $detail = $lanTxt.ResourceGroupLimitReached -f $SubscriptionId, ($totalRGCount + $newRGCount - 980) $status = 'Failed' Log-Info $detail } else { $detail = $lanTxt.ResourceGroupLimitCheckSucceeded -f $SubscriptionId $status = 'Succeeded' Log-Info $detail } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_ArcIntegration_ResourceGroupLimit_Check' $instanceResult.Title = 'Verify Resource group limit' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Checking Azure Resource group limit" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'Azure Resource Group' $instanceResult.TargetResourceName = 'Azure Resource Group' $instanceResult.TargetResourceType = 'ResourceGroup' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'Azure Resource Group' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } } catch { throw ("Exception while verifying resource group limit : {0}" -f $_.Exception) } } function Test-ResourceCountLimit { [CmdletBinding()] param ( [string] $SubscriptionId, [string] $RegistrationResourceGroupName ) try { $azureContext = Get-AzContext if(!$azureContext) { $detail = $lanTxt.AzureContextRequired $status = 'Failed' Log-Info $detail } else { try { $resourcesInHCIRg = Get-AzResource -ResourceGroupName $RegistrationResourceGroupName -ResourceType "Microsoft.AzureStackHCI/clusters" -ErrorAction Stop if($resourcesInHCIRg.Count -ge 800) { $detail = $lanTxt.ResourceLimitReached -f $RegistrationResourceGroupName, $SubscriptionId $status = 'Failed' Log-Info $detail } else { $detail = $lanTxt.ResourceLimitCheckSucceeded -f $RegistrationResourceGroupName $status = 'Succeeded' Log-Info $detail } } catch { $detail = $lanTxt.MissingPermissions -f "Verify Resource count limit in Registration resource group" $status = 'Succeeded' Log-Info $detail } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_ArcIntegration_ResourceLimit_Check' $instanceResult.Title = 'Verify Resource limit' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Checking Azure Stack HCI Cluster Resource limit in Registration resource group" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'Azure Stack HCI Cluster Resource' $instanceResult.TargetResourceName = 'Azure Stack HCI Cluster Resource' $instanceResult.TargetResourceType = 'Cluster' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'Azure Stack HCI Cluster Resource' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } } catch { throw ("Exception while verifying azure stack hci resource count limit : {0}" -f $_.Exception) } } function Test-RoleAssignmentCountLimit { [CmdletBinding()] param ( [string] $SubscriptionId ) try { $azureContext = Get-AzContext if(!$azureContext) { $detail = $lanTxt.AzureContextRequired $status = 'Failed' Log-Info $detail } else { try { $roleAssignments = Get-AzRoleAssignment -ErrorAction Stop if($roleAssignments.Count -ge 4000) { $detail = $lanTxt.RoleAssignmentLimitReached -f $SubscriptionId $status = 'Failed' Log-Info $detail } else { $detail = $lanTxt.RoleAssignmentLimitSuccessfullyVerified -f $SubscriptionId $status = 'Succeeded' Log-Info $detail } } catch { $detail = $lanTxt.MissingPermissions -f "Verify Role Assignment count" $status = 'Succeeded' Log-Info $detail } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_ArcIntegration_RoleAssignmentLimit_Check' $instanceResult.Title = 'Verify Role Assignment Limit' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Checking Role Assignment limit in Subscription Id" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'Azure Subscription Id' $instanceResult.TargetResourceName = 'Azure Subscription Id' $instanceResult.TargetResourceType = 'SubscriptionId' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'Azure Subscription Id' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } } catch { throw ("Exception while verifying azure stack hci role assignment count limit : {0}" -f $_.Exception) } } function Test-ExistingHCIResource { [CmdletBinding()] param ( [string] $SubscriptionId, [string] $RegistrationResourceGroupName, [string] $RegistrationResourceName ) try { #TODO:check if the cmdlet is there, if it is not there, it means it is a different machine, we will fail the test $hciRegCmdlet = Get-Command Get-AzureStackHCI -Type Cmdlet -ErrorAction Ignore if($null -eq $hciRegCmdlet) { # If Get-AzureStackHCI, is not found, fail validation, indicating, validation can only run on HCI OS $detail = $lanTxt.ArcValidationNotSupported $status = 'Failed' Log-Info $detail } elseif ($(Get-AzureStackHCI).RegistrationStatus -ne "NotYet") { # Validation can only be done on un-registred cluster, when run on any other registration state, we will skip the validation $detail = $lanTxt.ClusterAlreadyRegistered $status = 'Succeeded' Log-Info $detail } elseif (!$(Get-AzContext)) { $detail = $lanTxt.AzureContextRequired $status = 'Failed' Log-Info $detail -Type Warning } elseif ([string]::IsNullOrEmpty($RegistrationResourceName)) { $detail = $lanTxt.ResourceNameEmpty $status = 'Succeeded' Log-Info $detail } else { $RPAPIVersion = "2022-12-01" Log-Info ($lanTxt.VerifyingIfHCIResourceExistsInHCIRG -f $RegistrationResourceName, $SubscriptionId, $RegistrationResourceGroupName) $hciClusterResourceId = "/Subscriptions/" + $SubscriptionId + "/resourceGroups/" + $RegistrationResourceGroupName + "/providers/Microsoft.AzureStackHCI/clusters/" + $RegistrationResourceName $hciClusterResource = Get-AzResource -ResourceId $hciClusterResourceId -ApiVersion $RPAPIVersion -ErrorAction Ignore if ($null -ne $hciClusterResource) { $detail = $lanTxt.HCIClusterResourceAlreadyExistsError -f $RegistrationResourceName, $RegistrationResourceGroupName $status = 'Failed' Log-Info $detail -Type Warning } else { $detail = $lanTxt.HCIClusterNotFound -f $RegistrationResourceName, $RegistrationResourceGroupName $status = 'Succeeded' Log-Info $detail } } $instanceResult = New-Object AzStackHciArcIntegrationTarget $instanceResult.Name = 'AzStackHci_HCI_ResourceGroup_Check' $instanceResult.Title = 'Test HCI Resource Group' $instanceResult.Severity = 'Critical' $instanceResult.Description = "Checking HCI Resource Group clean" $instanceResult.Remediation = 'https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-prerequisites' $instanceResult.TargetResourceID = 'HCI ResourceGroup' $instanceResult.TargetResourceName = 'HCI ResourceGroup' $instanceResult.TargetResourceType = 'ResourceGroup' $instanceResult.Timestamp = [datetime]::UtcNow $instanceResult.HealthCheckSource = $ENV:EnvChkrId $AdditionalData = @() $AdditionalData += New-Object -TypeName PSObject -Property @{ Source = $ENV:COMPUTERNAME Resource = 'HCI ResourceGroup' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } $instanceResult.AdditionalData = $AdditionalData $instanceResult.Status = if ($AdditionalData.Status -contains 'Failed') { 'Failed' } else { 'Succeeded' } $instanceResult } catch { throw ("Error validating HCI Resource Group : {0}" -f $_.Exception) } } function Normalize-RegionName{ param( [string] $Region ) $regionName = $Region -replace '\s','' $regionName = $regionName.ToLower() return $regionName } function Retry-Command { param ( [parameter(Mandatory=$true)] [ValidateNotNullOrEmpty()] [scriptblock] $ScriptBlock, [int] $Attempts = 8, [int] $MinWaitTimeInSeconds = 5, [int] $MaxWaitTimeInSeconds = 60, [int] $BaseBackoffTimeInSeconds = 2, [bool] $RetryIfNullOutput = $true ) $attempt = 0 $completed = $false $result = $null if($MaxWaitTimeInSeconds -lt $MinWaitTimeInSeconds) { throw "MaxWaitTimeInSeconds($MaxWaitTimeInSeconds) is less than MinWaitTimeInSeconds($MinWaitTimeInSeconds)" } while (-not $completed) { try { $attempt = $attempt + 1 $result = Invoke-Command -ScriptBlock $ScriptBlock if($RetryIfNullOutput) { if($result -ne $null) { $completed = $true } else { throw "Null result received." } } else { $completed = $true } } catch { $exception = $_.Exception if([int]$exception.ErrorCode -eq [int][system.net.httpstatuscode]::Forbidden) { throw } else { if ($attempt -ge $Attempts) { throw } else { $secondsDelay = $MinWaitTimeInSeconds + [int]([Math]::Pow($BaseBackoffTimeInSeconds,($attempt-1))) if($secondsDelay -gt $MaxWaitTimeInSeconds) { $secondsDelay = $MaxWaitTimeInSeconds } Start-Sleep $secondsDelay } } } } return $result } Export-ModuleMember -Function Test-* # SIG # Begin signature block # MIIoKgYJKoZIhvcNAQcCoIIoGzCCKBcCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBD0zs/ZtEckrK7 # L+w84+xqgrgSnPW0sxvypu4y91Y0yaCCDXYwggX0MIID3KADAgECAhMzAAADTrU8 # esGEb+srAAAAAANOMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p # bmcgUENBIDIwMTEwHhcNMjMwMzE2MTg0MzI5WhcNMjQwMzE0MTg0MzI5WjB0MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB # AQDdCKiNI6IBFWuvJUmf6WdOJqZmIwYs5G7AJD5UbcL6tsC+EBPDbr36pFGo1bsU # p53nRyFYnncoMg8FK0d8jLlw0lgexDDr7gicf2zOBFWqfv/nSLwzJFNP5W03DF/1 # 1oZ12rSFqGlm+O46cRjTDFBpMRCZZGddZlRBjivby0eI1VgTD1TvAdfBYQe82fhm # WQkYR/lWmAK+vW/1+bO7jHaxXTNCxLIBW07F8PBjUcwFxxyfbe2mHB4h1L4U0Ofa # +HX/aREQ7SqYZz59sXM2ySOfvYyIjnqSO80NGBaz5DvzIG88J0+BNhOu2jl6Dfcq # jYQs1H/PMSQIK6E7lXDXSpXzAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE # AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUnMc7Zn/ukKBsBiWkwdNfsN5pdwAw # RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW # MBQGA1UEBRMNMjMwMDEyKzUwMDUxNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci # tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG # CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu # Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0 # MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAD21v9pHoLdBSNlFAjmk # mx4XxOZAPsVxxXbDyQv1+kGDe9XpgBnT1lXnx7JDpFMKBwAyIwdInmvhK9pGBa31 # TyeL3p7R2s0L8SABPPRJHAEk4NHpBXxHjm4TKjezAbSqqbgsy10Y7KApy+9UrKa2 # kGmsuASsk95PVm5vem7OmTs42vm0BJUU+JPQLg8Y/sdj3TtSfLYYZAaJwTAIgi7d # hzn5hatLo7Dhz+4T+MrFd+6LUa2U3zr97QwzDthx+RP9/RZnur4inzSQsG5DCVIM # pA1l2NWEA3KAca0tI2l6hQNYsaKL1kefdfHCrPxEry8onJjyGGv9YKoLv6AOO7Oh # JEmbQlz/xksYG2N/JSOJ+QqYpGTEuYFYVWain7He6jgb41JbpOGKDdE/b+V2q/gX # UgFe2gdwTpCDsvh8SMRoq1/BNXcr7iTAU38Vgr83iVtPYmFhZOVM0ULp/kKTVoir # IpP2KCxT4OekOctt8grYnhJ16QMjmMv5o53hjNFXOxigkQWYzUO+6w50g0FAeFa8 # 5ugCCB6lXEk21FFB1FdIHpjSQf+LP/W2OV/HfhC3uTPgKbRtXo83TZYEudooyZ/A # Vu08sibZ3MkGOJORLERNwKm2G7oqdOv4Qj8Z0JrGgMzj46NFKAxkLSpE5oHQYP1H # tPx1lPfD7iNSbJsP6LiUHXH1MIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq # hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x # EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv # bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 # IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG # EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG # A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg # Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC # CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03 # a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr # rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg # OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy # 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9 # sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh # dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k # A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB # w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn # Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90 # lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w # ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o # ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD # VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa # BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny # bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG # AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV # HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG # AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl # AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb # C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l # hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6 # I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0 # wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560 # STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam # ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa # J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah # XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA # 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt # Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr # /Xmfwb1tbWrJUnMTDXpQzTGCGgowghoGAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp # Z25pbmcgUENBIDIwMTECEzMAAANOtTx6wYRv6ysAAAAAA04wDQYJYIZIAWUDBAIB # BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO # MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIGJjHNmUOxfEZ8jvDvi2ULnX # IRkRcvYP/OqE+30xRlOfMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A # cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB # BQAEggEAlval2xIlQXoPqBkAYxjiRBKAs1g0I1xNkV8pUtmb2UYW5D8Y5BjNz/iJ # D/AJCitB3mbkoC4o002TzRQTxGyJZzJJDppEXdqfKANwoK/5xV3nez/OF6n0my3k # rYiKiwmbBt/SPDkW0mxBMqY9vWz/TfOvlg90vA80THlb2a/MiIXTxZvSUjcLIwRu # eBBuQc2fofmBKZcQAWwEA/+q2j1Jve/2inH7yB8Lqzfe/jJuagLowT41lVxmLJDE # 0eA7s/ATL9lLYEdHzMt2v009n402rNi2GAHfm5BhYyqn4Z/NnSIEsGHZHtUa/WDX # /9nghUUr4SeQ4zN42Z9crlVpWyoJVaGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCC # F3wGCSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsq # hkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl # AwQCAQUABCDdTH+mqeM6FC/LpbADsmDLvjbZeNgdvZp9g8tahELFggIGZQQDzWvw # GBMyMDIzMDkyMjA4MzA1OC42NDRaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1l # cmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046REMwMC0w # NUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2Wg # ghHqMIIHIDCCBQigAwIBAgITMwAAAdIhJDFKWL8tEQABAAAB0jANBgkqhkiG9w0B # AQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD # VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yMzA1MjUxOTEy # MjFaFw0yNDAyMDExOTEyMjFaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz # aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv # cnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25z # MScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046REMwMC0wNUUwLUQ5NDcxJTAjBgNV # BAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEB # AQUAA4ICDwAwggIKAoICAQDcYIhC0QI/SPaT5+nYSBsSdhBPO2SXM40Vyyg8Fq1T # PrMNDzxChxWUD7fbKwYGSsONgtjjVed5HSh5il75jNacb6TrZwuX+Q2++f2/8CCy # u8TY0rxEInD3Tj52bWz5QRWVQejfdCA/n6ZzinhcZZ7+VelWgTfYC7rDrhX3TBX8 # 9elqXmISOVIWeXiRK8h9hH6SXgjhQGGQbf2bSM7uGkKzJ/pZ2LvlTzq+mOW9iP2j # cYEA4bpPeurpglLVUSnGGQLmjQp7Sdy1wE52WjPKdLnBF6JbmSREM/Dj9Z7okxRN # UjYSdgyvZ1LWSilhV/wegYXVQ6P9MKjRnE8CI5KMHmq7EsHhIBK0B99dFQydL1vd # uC7eWEjzz55Z/DyH6Hl2SPOf5KZ4lHf6MUwtgaf+MeZxkW0ixh/vL1mX8VsJTHa8 # AH+0l/9dnWzFMFFJFG7g95nHJ6MmYPrfmoeKORoyEQRsSus2qCrpMjg/P3Z9WJAt # FGoXYMD19NrzG4UFPpVbl3N1XvG4/uldo1+anBpDYhxQU7k1gfHn6QxdUU0TsrJ/ # JCvLffS89b4VXlIaxnVF6QZh+J7xLUNGtEmj6dwPzoCfL7zqDZJvmsvYNk1lcbyV # xMIgDFPoA2fZPXHF7dxahM2ZG7AAt3vZEiMtC6E/ciLRcIwzlJrBiHEenIPvxW15 # qwIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFCC2n7cnR3ToP/kbEZ2XJFFmZ1kkMB8G # A1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCG # Tmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUy # MFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4w # XAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2Vy # dHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwG # A1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQD # AgeAMA0GCSqGSIb3DQEBCwUAA4ICAQCw5iq0Ey0LlAdz2PcqchRwW5d+fitNISCv # qD0E6W/AyiTk+TM3WhYTaxQ2pP6Or4qOV+Du7/L+k18gYr1phshxVMVnXNcdjecM # tTWUOVAwbJoeWHaAgknNIMzXK3+zguG5TVcLEh/CVMy1J7KPE8Q0Cz56NgWzd9ur # G+shSDKkKdhOYPXF970Mr1GCFFpe1oXjEy6aS+Heavp2wmy65mbu0AcUOPEn+hYq # ijgLXSPqvuFmOOo5UnSV66Dv5FdkqK7q5DReox9RPEZcHUa+2BUKPjp+dQ3D4c9I # H8727KjMD8OXZomD9A8Mr/fcDn5FI7lfZc8ghYc7spYKTO/0Z9YRRamhVWxxrIsB # N5LrWh+18soXJ++EeSjzSYdgGWYPg16hL/7Aydx4Kz/WBTUmbGiiVUcE/I0aQU2U # /0NzUiIFIW80SvxeDWn6I+hyVg/sdFSALP5JT7wAe8zTvsrI2hMpEVLdStFAMqan # FYqtwZU5FoAsoPZ7h1ElWmKLZkXk8ePuALztNY1yseO0TwdueIGcIwItrlBYg1Xp # Pz1+pMhGMVble6KHunaKo5K/ldOM0mQQT4Vjg6ZbzRIVRoDcArQ5//0875jOUvJt # Yyc7Hl04jcmvjEIXC3HjkUYvgHEWL0QF/4f7vLAchaEZ839/3GYOdqH5VVnZrUIB # QB6DTaUILDCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZI # hvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # MjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAy # MDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMC # VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV # BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp # bWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC # AQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25Phdg # M/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPF # dvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6 # GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBp # Dco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50Zu # yjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3E # XzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0 # lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1q # GFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ # +QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PA # PBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkw # EgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxG # NSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARV # MFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWlj # cm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAK # BggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMC # AYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvX # zpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20v # cGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYI # KwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG # 9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0x # M7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmC # VgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449 # xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wM # nosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDS # PeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2d # Y3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxn # GSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+Crvs # QWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokL # jzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL # 6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNN # MIICNQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEn # MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOkRDMDAtMDVFMC1EOTQ3MSUwIwYDVQQD # ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQCJ # ptLCZsE06NtmHQzB5F1TroFSBqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w # IFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA6Le8iDAiGA8yMDIzMDkyMjA3MTEw # NFoYDzIwMjMwOTIzMDcxMTA0WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDot7yI # AgEAMAcCAQACAiIVMAcCAQACAhQhMAoCBQDouQ4IAgEAMDYGCisGAQQBhFkKBAIx # KDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZI # hvcNAQELBQADggEBAIX3iWYeNwmEkF0AgEnhcb1lXq5+ON1FrmRtRGAk6dA72cRG # LRWERZdI+EWS+t2TAweOW5L4eWYukhTu5yDM6y1p69WgV9b0QmZI90CiqqqNVl9J # cNbh8fjH24Gxe4u5WbVKRR6pVp0IIUEQ91zkHaaBCCySsjKVx8giknb0JYfP4Ou4 # XSKkObcUbdvfzqqlnVpnhUW0zKmcgqJrSdP3wwKqpNIKG47q6iGR4nGI8wMMho0H # JGM9p4YMtLQO0KZkXNGccH/y94cOUhH+OUbjFZAZIHD975oN7mUfjLPrdIQTcvwA # DAxYrXC3cEZbEQmfJoY5J28KJcVv7hDqzzAKJ2cxggQNMIIECQIBATCBkzB8MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNy # b3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAdIhJDFKWL8tEQABAAAB0jAN # BglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8G # CSqGSIb3DQEJBDEiBCD0N3m/LRkTZS4884TIQVbZoOrl4+uPtcCbH1ZB5HSfzjCB # +gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIMeAIJPf30i9ZbOExU557GwWNaLH # 0Z5s65JFga2DeaROMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh # c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD # b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw # MTACEzMAAAHSISQxSli/LREAAQAAAdIwIgQgo/VOETe+zJRyyikx/HdHN03ONGrb # FbBfi0eUT2omsFUwDQYJKoZIhvcNAQELBQAEggIApBABf7MmQNQveWgKpF45mBEp # yBqb1RUvwijbzO355HzdaGeevhqHrrf/DAM6CdsJuumQw8pjdsq8O2Nbm8RiLzDD # e+vKtQWH3Z1qDj9hxCpLwOH4/HkaQen0HKnQxIPdPVgdrR2Bx/MMWnIh9WEvP0Mk # C73hgYBeawlDSVDvByjlCPeaAjPcQhy3FLFkz9ACVTH8LsIpj4NVYGhzfec5SYGn # Tnb9m3Pn/zEJ+8L59OE/0BICP1eM5X9ZJRdWKg8hI4dVQ/1BLxr4vvKh2NK+G92m # 8RYw9mJuBYsn8pyADHTtED3RnUQKObYjYxex39p/iW6S1ko/Mp27B5Y2Iv3COMy/ # UGjfYYzklhp/urr70GwQ8ap6JY+xq7HE24lWZxbM44CSg4HDY0N2BL/mQN8Rj84+ # gw8pOlTpn2FZzXcrlwdxtg0aKHfi9UDGLmMmFas4fTAemCaLoJ8HCmc29ToSosY0 # EEWLHu1SCBamrCiJWStg5WHEhQLKb08/WgpKgGetxu9Hqk/JoVLjJQKiPlnwAx6y # yUI5bYx0r8/0d9baG8LyVQiLFgh9FAKjLmB8ILfU03vedySeqDr8NxLsEo5GEWks # PO5lYVyW0gwxAP/rTXrWBK/B78FOn7X6Z+zeIrsN+/ADU/wtrd3elXZvK/SFJDBY # UONLNQjqoBKqm0BAHDk= # SIG # End signature block |