AzStackHci.EnvironmentChecker

1.2100.2685.481

Obs/bin/ObsDep/content/Powershell/Roles/Common/JustEnoughAdministrationDSC.psm1

                                <###################################################

 #                                                 #

 #  Copyright (c) Microsoft. All rights reserved.  #

 #                                                 #

 ##################################################>

Import-Module -Name "$PSScriptRoot\..\..\Common\Helpers.psm1"

Import-Module -Name "$PSScriptRoot\..\..\Common\StorageHelpers.psm1" -Force

Import-Module -Name "$PSScriptRoot\DscHelper.psm1"

Import-Module -Name "$PSScriptRoot\JeaHelper.psm1"

<#

.Synopsis

    Generates DSC configuration document(s) for the target node(s), as specified

    by the Role configuration. Returns the list of the JEA endpoints captured in the

    configuration.

#>

function New-JustEnoughAdministrationConfiguration

{

    [CmdletBinding()]

    param (

        [Parameter(Mandatory=$true)]

        [CloudEngine.Configurations.EceInterfaceParameters]

        $Parameters,

        [Parameter(Mandatory=$true)]

        [IO.DirectoryInfo] $ModulesRootPath,

        [Parameter(Mandatory=$false)]

        [IO.DirectoryInfo] $MofOutputPath=$null,

        [Parameter(Mandatory=$false)]

        [string] $TargetComputerName = 'localhost',

        [string[]] $TargetImageRole = $Parameters.Configuration.Role.Id,

        [string[]] $SourceImageRole

    )

    $ErrorActionPreference = 'Stop'

    if ($MofOutputPath -eq $null)

    {

        $MofOutputPath = Join-Path $ModulesRootPath "DSCConfigs\ConfigureJustEnoughAdministration"

    }

    Trace-Execution "$($MyInvocation.InvocationName) : BEGIN on $($env:COMPUTERNAME) as $($env:USERDOMAIN)\$($env:USERNAME)"

    $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration

    $securityInfo = $cloudRole.PublicInfo.SecurityInfo

    $domainRole = $Parameters.Roles["Domain"].PublicConfiguration

    $domainName = $domainRole.PublicInfo.DomainConfiguration.DomainName

    # Get all the roles that have JEA information

    $RolesToConfigure = $Parameters.Roles.GetEnumerator() |

        Where-Object { $Parameters.Roles[$_.Name].PublicConfiguration.PublicInfo.JEA } |

        Foreach-Object { $_.Name }

    if ($SourceImageRole)

    {

        Trace-Execution "Getting list of JEA endpoints defined under the following roles: $($SourceImageRole -join ', ')."

        $RolesToConfigure = $RolesToConfigure | where { $_ -in $SourceImageRole }

    }

    $endpoints = @()

    foreach($role in $RolesToConfigure)

    {

        $configuration = $Parameters.Roles[$role].PublicConfiguration.PublicInfo.JEA.Endpoints.Endpoint

        # Loop through all the endpoints defined

        foreach($endpoint in $configuration)

        {

            if (!$endpoint.TargetRoles)

            {

                if (-not ($TargetImageRole -contains $role))

                {

                    continue

                }

            }

            else

            {

                $applicable = $endpoint.TargetRoles.TargetRole | Where-Object { $TargetImageRole -contains $_.Id }

                if (!$applicable)

                {

                    continue

                }

            }

            $runAsGmsa = $endpoint.RunAsGmsa -and ($endpoint.RunAsGmsa -eq "True")

            $runAsVirtualAccount = $endpoint.RunAsVirtualAccount -and ($endpoint.RunAsVirtualAccount -eq "True")

            if ( -not ($runAsGmsa -or $runAsVirtualAccount) )

            {

                Trace-Execution "Create JEA endpoint '$($endpoint.Name)' as non-GMSA and non-virtual account (will use pass-through credential)."

            }

            Trace-Execution "Creating JEA Endpoint $($endpoint.Name) for Role $($TargetImageRole -join ', ')"

            # Define transportation options

            $transportOption = $null

            if ($endpoint.TransportOptions)

            {

                $transportOption = @{}

                $endpoint.TransportOptions.GetEnumerator() | foreach {

                    if ([Microsoft.PowerShell.Commands.WSManConfigurationOption].GetProperties().Name.Contains($_.Name))

                    {

                        $transportOption[$_.Name] = $_.Value

                    }

                    else

                    {

                        throw "Transport Option '$($_.Name)' for JEA endpoint not valid for WSManConfigurationOption"

                    }

                }

                $endpoint | Add-Member -MemberType NoteProperty -Name "TransportOption" -Value $transportOption -Force

            }

            # Path to the Powershell Modules folder

            $modulePath = Join-Path $ModulesRootPath "Program Files\WindowsPowerShell\Modules\"

            # Path where the psrc file will be stored

            $rcPath = Join-Path $modulePath "JEA\RoleCapabilities"

            # Create the folder where the RC files will be stored

            New-Item -Path $rcPath -ItemType Directory -Force | Out-Null

            $deployLatestVersion = -not($endpoint.AllVersions -and $endpoint.AllVersions -eq "True")

            # This flag checks if the endpoint gathers its rolecapability configuration from a nuget.

            # If there is no rc nuget dependency, then conduct the custom configuration

            $psrcFromNuget = $false

            $endpointVersion = ""

            $sourceVersionExtensionList = @()

            # If the endpoint has nuget defined, copy the contents inside the nuget to the right location.

            if($endpoint.Nugets)

            {

                $clusterName = Get-ManagementClusterName $Parameters

                $nugets = $endpoint.Nugets.Nuget

                foreach($nuget in $nugets)

                {

                    $nugetName = $nuget.Name

                    Trace-Execution "EndpointName: $($endpoint.Name) , NugetName: $nugetName"

                    # Get nuget store location on the library share

                    $virtualMachinesRole = $Parameters.Roles["VirtualMachines"].PublicConfiguration

                    $libraryShareNugetStorePath = Get-SharePath $Parameters $virtualMachinesRole.PublicInfo.LibraryShareNugetStoreFolder.Path $clusterName

                    $buildLocally = $Parameters.Context.ExecutionContext.BuildVhdLocally -and [bool]::Parse($Parameters.Context.ExecutionContext.BuildVhdLocally)

                    # Use the NuGet store on the file share, unless explicitly told not to (BuildVhdLocally) or the file share is not reachable.

                    $useLibrarySharePath = -not $buildLocally -and (Test-Path $libraryShareNugetStorePath)

                    Trace-Execution "useLibrarySharePath: $useLibrarySharePath"

                    # Collect all versions of the JEA endpoint nugets to support upgrading from an unknown stamp version

                    $getNugetVersionsParams = @{

                        NugetName = $NugetName

                        MostRecent = $deployLatestVersion

                    }

                    if($useLibrarySharePath)

                    {

                        $getNugetVersionsParams.NugetStorePath = $libraryShareNugetStorePath

                    }

                    $versionList = Get-NugetVersions @getNugetVersionsParams

                    # If version is required, but none are found, throw

                    if ($endpoint.RequiresVersion -and ($versionList.Count -eq 0)) {

                        Trace-Error "Requires version was specified, but no versions were found for endpoint '$($endpoint.Name)'"

                    }

                    # Loop through the list of versions and copy the content and PSRC(if applicable) to the right location

                    foreach($nugetVersion in $versionList)

                    {

                        if ($nuget.PackagedModules -and $nuget.PackagedModules.Path)

                        {

                            # Temporary location where the JEA module source code will be extracted

                            $tempPath = Join-Path -Path ([System.IO.Path]::GetTempPath()) -ChildPath ([System.IO.Path]::GetRandomFileName())

                            New-Item -Path $tempPath -ItemType Directory -Force | Out-Null

                            try

                            {

                                # Unpack the scripts for the JEA endpoint at a temporary location

                                Trace-Execution "Expand nuget: $nugetName  with content from: $($nuget.PackagedModules.Path) to : $tempPath "

                                $expandNugetContentParams = @{

                                    NugetName = $NugetName

                                    SourcePath = $nuget.PackagedModules.Path

                                    DestinationPath = $tempPath

                                    Version = $nugetVersion

                                }

                                if($useLibrarySharePath)

                                {

                                    $expandNugetContentParams.NugetStorePath = $libraryShareNugetStorePath

                                }

                                Expand-NugetContent @expandNugetContentParams

                                # Define what the module path will look like and if the path does not exist, create it

                                $targetModulePath = $modulePath

                                if($nuget.PackagedModules.Destination)

                                {

                                    $targetModulePath = Join-Path $modulePath $nuget.PackagedModules.Destination

                                    if ((Test-Path -Path $targetModulePath) -eq $false)

                                    {

                                        $null = New-Item -Path $targetModulePath -ItemType Directory -Force

                                    }

                                }

                                # Copy content from the temporary path to the target path

                                $copy = @{ Path = "$tempPath\*"; Destination = "$targetModulePath\"; Recurse = $true; Force = $true}

                                if ($nuget.PackagedModules.Filter)

                                {

                                    $copy["Filter"] = $nuget.PackagedModules.Filter

                                }

                                Trace-Execution "Copying content from $tempPath to $targetModulePath"

                                try

                                {

                                    Copy-Item @copy

                                }

                                catch [System.IO.IOException]

                                {

                                    Trace-Execution "I/O exception ignored during copying of existing JEA modules, potentially due to module already being loaded"

                                }

                            }

                            catch

                            {

                                # Printing error message here as Remove-Item occasionally throws errors that mask the original issue.

                                Trace-Execution ($_ | Format-List *)

                                throw

                            }

                            finally

                            {

                                Remove-Item -Recurse $tempPath -Force -ErrorAction SilentlyContinue

                                if (Test-Path $tempPath)

                                {

                                    Remove-Item -Recurse $tempPath -Force -ErrorAction Stop

                                }

                            }

                        }

                        # If the RoleCapability is present and has a path value, psrc files will be picked up from the nuget

                        if ($nuget.RoleCapability -and $nuget.RoleCapability.Path)

                        {

                            Trace-Execution "Role Capability for the endpoint is defined in the nuget with path: $($nuget.RoleCapability.Path)"

                            # Recurse over all available versions of the target package

                            # There may be multiple RC files within the nuget, each representing a versioned endpoint.

                            # The customer config will only define one broad endpoint, so need to expand the endpoints

                            # to register by the versioned names.

                            $tempPath = Join-Path -Path ([System.IO.Path]::GetTempPath()) -ChildPath ([System.IO.Path]::GetRandomFileName())

                            New-Item -Path $tempPath -ItemType Directory -Force | Out-Null

                            $psrcFromNuget = $true

                            try

                            {

                                $expandNugetContentParams = @{

                                    NugetName = $NugetName

                                    SourcePath = $nuget.RoleCapability.Path

                                    DestinationPath = $tempPath

                                    Version = $nugetVersion

                                }

                                if($useLibrarySharePath)

                                {

                                    $expandNugetContentParams.NugetStorePath = $libraryShareNugetStorePath

                                }

                                Expand-NugetContent @expandNugetContentParams

                                # Copy each RC file for each whitelist

                                foreach($whiteList in $endpoint.WhiteList)

                                {

                                    $copy = @{ Path = "$tempPath\*"; Filter = "$($whiteList.Name)*"; Destination = $rcPath; Recurse = $true; Force = $true }

                                    Trace-Execution "Copying content from: $tempPath to: $rcPath with whitelist name: $($whiteList.Name)"

                                    Copy-Item @copy

                                    Trace-Execution "Get version for the endpoint:$($endpoint.Name)"

                                    # If the version is not set yet, pick up the RC file with the name as (endpointName + Version)

                                    if ($whiteList.Name -like "$($endpoint.Name)*")

                                    {

                                        $rcFile = Get-ChildItem -Path $rcPath -Filter "$($whiteList.Name)*"

                                        foreach ($whitelistFile in $rcFile)

                                        {

                                            $roleCapabilityName = [System.IO.Path]::GetFileNameWithoutExtension($whitelistFile.FullName)

                                            $endpointVersion = $roleCapabilityName.Substring($whitelist.Name.Length, $roleCapabilityName.Length - $whitelist.Name.Length)

                                            if (-not($sourceVersionExtensionList -contains $endpointVersion))

                                            {

                                                $sourceVersionExtensionList += $endpointVersion

                                            }

                                        }

                                    }

                                }

                            }

                            catch

                            {

                                # Printing error message here as Remove-Item occasionally throws errors that mask the original issue.

                                Trace-Execution ($_ | Format-List *)

                                throw

                            }

                            finally

                            {

                                Remove-Item -Recurse $tempPath -Force -ErrorAction SilentlyContinue

                                if (Test-Path $tempPath)

                                {

                                    Remove-Item -Recurse $tempPath -Force -ErrorAction Stop

                                }

                            }

                        }

                    }

                 }

            } # Nuget expansion completed

            # No versions were found, so ensure that at least the non-versioned endpoint is created

            if([string]::IsNullOrEmpty($endpointVersion))

            {

                $sourceVersionExtensionList = @("")

            }

            # As we are done with Nuget expansion, if the PSRC file was not picked up from the nuget, create it.

            if(-not $psrcFromNuget)

            {

                # Simple endpoint from configuration definition, with no versions

                # Loop through all the whitelists and generate the PSRC files at the desired location.

                foreach($whiteList in $endpoint.Whitelist)

                {

                    $RCParams = Get-RoleCapabilityParams($whitelist)

                    Trace-Execution "Role Capabilities for endpoint '$($endpoint.Name)': "

                    Trace-Execution ($RCParams | ConvertTo-Json -depth 3)

                    New-Item -Path $rcPath -ItemType Directory -Force | Out-Null

                    New-PSRoleCapabilityFile -Path "$rcPath\$($whitelist.Name).psrc" @RCParams

                }

            }

            foreach ($endpointVersion in $sourceVersionExtensionList)

            {

                # Gather information needed to create the PSSC file and also for registration of JEA endpoint.

                # Clone the endpoint

                $e = $endpoint.Clone()

                # Session configuration

                $sessionConfigurationArgs = @{

                    SessionConfig = $endpoint.SessionConfiguration;

                    Endpointname = $endpoint.Name;

                }

                # If version was found add it to the name of the endpoint as it will be a versioned endpoint

                if([string]::IsNullOrEmpty($endpointVersion) -eq $false)

                {

                    $e.Name = $endpoint.Name + $endpointVersion

                    $sessionConfigurationArgs["Endpointname"] = $e.Name

                    $sessionConfigurationArgs["VersionExtension"] = $endpointVersion

                }

                # RunAs accounts

                if ($runAsGmsa)

                {

                    $RunAsAccountUser = "$domainName\$($endpoint.RunAsAccountID)"

                    $sessionConfigurationArgs["RunAsAccountUser"] = $RunAsAccountUser

                    $sessionConfigurationArgs["RunAsGmsa"] = $true

                    $e | Add-Member -MemberType NoteProperty -Name "RunAsAccountUser" -Value $RunAsAccountUser -Force

                }

                elseif($runAsVirtualAccount)

                {

                    Trace-Execution "[$($endpoint.Name)] will run under virtual admin account"

                    $e | Add-Member -MemberType NoteProperty -Name "RunAsVirtualAccount" -Value $true -Force

                    $sessionConfigurationArgs["RunAsVirtualAccount"] = $true

                }

                else

                {

                    Trace-Execution "Endpoint $($endpoint.Name) will use user pass-through credential"

                    $sessionConfigurationArgs["RunAsPassThroughCredential"] = $true

                }

                $scParams = Get-SessionConfigurationParams @sessionConfigurationArgs

                $e | Add-Member -MemberType NoteProperty -Name "RoleDefinitions" -Value $scParams.RoleDefinitions -Force

                if($scParams.TranscriptDirectory)

                {

                    $e | Add-Member -MemberType NoteProperty -Name "TranscriptDirectory" -Value $scParams.TranscriptDirectory -Force

                }

                if($scParams.SessionType)

                {

                    $e | Add-Member -MemberType NoteProperty -Name "SessionType" -Value $scParams.SessionType -Force

                }

                if($scParams.LanguageMode)

                {

                    $e | Add-Member -MemberType NoteProperty -Name "LanguageMode" -Value $scParams.LanguageMode -Force

                }

                $endpoints += $e

            }

        }

    }

    # If no endpoints are defined, move on.

    if ($endpoints.Count -eq 0)

    {

        Trace-Execution "No endpoints to deploy for role [$TargetImageRole]"

        return;

    }

    # DSC is slow to import at module parse time. Defer import of all DSC configurations until runtime.

    Import-Module "$PSScriptRoot\JustEnoughAdministrationDSCconfig.psm1" -DisableNameChecking

    $dscEncryptionCert = GetDscEncryptionCert

    $ConfigData= @{

        AllNodes = @(

                @{

                    NodeName = $TargetComputerName

                    CertificateFile = "$env:temp\DscEncryptionPublicKey.cer"

                    ThumbPrint = $dscEncryptionCert.ThumbPrint

                };

            );

    }

    Remove-Item  "$MofOutputPath\$TargetComputerName.mof" -Force -ErrorAction SilentlyContinue

    Trace-Execution "Generating JustEnoughAdministration endpoint MOFs"

    ConfigureJustEnoughAdministration -ConfigurationData $ConfigData -Endpoints $endpoints -OutputPath $MofOutputPath | Out-Null

    Trace-Execution "$($MyInvocation.InvocationName) : END on $($env:COMPUTERNAME) as $($env:USERDOMAIN)\$($env:USERNAME)"

    Trace-Execution "Created configuration for the following endpoints:$([System.Environment]::NewLine)$($endpoints.Name -join [System.Environment]::NewLine)"

    return $endpoints.Name

}

function Get-NugetVersions

{

    <#

    .SYNOPSIS

    Gets all versions of Nuget packages that exist in a specified source location.

    .EXAMPLE

    Get-NugetVersions -NugetName "MyNuget" -SourcePath "content"

    .PARAMETER NugetName

    The name of the nuget to filter by.

    .PARAMETER MostRecent

    Whether to report the most recent version only

    .PARAMETER NugetStorePath

    The path from which the nuget packages should be derived.

    #>

    [CmdletBinding()]

    PARAM (

        [Parameter(Mandatory=$true, Position=0)]

        [ValidateNotNullOrEmpty()]

        [string[]]

        $NugetName,

        [Parameter(Mandatory=$false)]

        [switch]

        $MostRecent,

        [Parameter()]

        [ValidateNotNullOrEmpty()]

        [string]

        $NugetStorePath = "$env:SystemDrive\CloudDeployment\NuGetStore"

    )

    PROCESS

    {

        $ErrorActionPreference = "stop"

        Trace-Execution "Finding nuget package $NugetName from store $NugetStorePath"

        $nugetPackageList = Find-Package -Source $NugetStorePath -Name $NugetName -ProviderName "nuget" -AllVersions:$(-not $MostRecent) -Verbose -Force

        if ($nugetPackageList)

        {

            $versionArray = $nugetPackageList.Version

        }

        else

        {

            $versionArray = @()

        }

        return $versionArray

    }

}

Export-ModuleMember New-JustEnoughAdministrationConfiguration

# SIG # Begin signature block

# MIInwgYJKoZIhvcNAQcCoIInszCCJ68CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCqAiA/u5EXKJ25

# cdRpgvdnQk4G9Wp9nEHgRODHkpP+D6CCDXYwggX0MIID3KADAgECAhMzAAADrzBA

# DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA

# hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG

# 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN

# xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL

# go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB

# tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw

# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW

# MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci

# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG

# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0

# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd

# mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ

# 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY

# 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp

# XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn

# TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT

# e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG

# OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O

# PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk

# ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx

# HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt

# CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg

# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03

# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr

# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg

# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy

# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9

# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh

# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k

# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB

# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn

# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90

# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w

# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o

# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa

# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG

# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV

# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb

# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l

# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6

# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0

# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560

# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam

# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa

# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah

# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA

# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt

# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr

# /Xmfwb1tbWrJUnMTDXpQzTGCGaIwghmeAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp

# Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB

# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO

# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIPdQ11oAHrmktdAw/ha3CecL

# ykCnX9UV4e7bw19fGD/rMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A

# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB

# BQAEggEAQvIXFzuX0CurwB281EipM5iNC/8lK8U9oZ2eh62zHGw54JQ2GI3htXti

# N3pzwypGfKLXMdZzMelmp2nxC5PzVyEAWqfaFJlxOViJpIH4QHO+8cRHBq/sCsKa

# suDVa3n7yJuyCKHo5jBbDYwfqTSCsQfFaTA+YuPM2BpqNgup9pejp9tZ9Y5nayEQ

# 2Sm0lKVB9xEEVFHBl3MMwflfn3nMjZxvQuO1aketFYcj8UarEOId8BRmIOI/OMTJ

# qZxSWd+bJRxdGrkIVmslEB4d3pfH6iuLRoQEEm6ZOrYqVcGJ5IwdKvd22py0+YwA

# LbTv5NYizGHG/CjciVQuI/mGN9eaWqGCFywwghcoBgorBgEEAYI3AwMBMYIXGDCC

# FxQGCSqGSIb3DQEHAqCCFwUwghcBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsq

# hkiG9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl

# AwQCAQUABCBDOfxf5fhL5wP6CyqdsiRjHjQZJIcMldeYIK7DOSCcDQIGZpfa9wZ2

# GBMyMDI0MDcyMzExMDA1OC4yMDNaMASAAgH0oIHYpIHVMIHSMQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl

# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNO

# OkQwODItNEJGRC1FRUJBMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBT

# ZXJ2aWNloIIRezCCBycwggUPoAMCAQICEzMAAAHcweCMwl9YXo4AAQAAAdwwDQYJ

# KoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjMx

# MDEyMTkwNzA2WhcNMjUwMTEwMTkwNzA2WjCB0jELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3Bl

# cmF0aW9ucyBMaW1pdGVkMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjpEMDgyLTRC

# RkQtRUVCQTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCC

# AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIvIsyA1sjg9kSKJzelrUWF5

# ShqYWL83amn3SE5JyIVPUC7F6qTcLphhHZ9idf21f0RaGrU8EHydF8NxPMR2KVNi

# AtCGPJa8kV1CGvn3beGB2m2ltmqJanG71mAywrkKATYniwKLPQLJ00EkXw5TSwfm

# JXbdgQLFlHyfA5Kg+pUsJXzqumkIvEr0DXPvptAGqkdFLKwo4BTlEgnvzeTfXukz

# X8vQtTALfVJuTUgRU7zoP/RFWt3WagahZ6UloI0FC8XlBQDVDX5JeMEsx7jgJDdE

# nK44Y8gHuEWRDq+SG9Xo0GIOjiuTWD5uv3vlEmIAyR/7rSFvcLnwAqMdqcy/iqQP

# MlDOcd0AbniP8ia1BQEUnfZT3UxyK9rLB/SRiKPyHDlg8oWwXyiv3+bGB6dmdM61

# ur6nUtfDf51lPcKhK4Vo83pOE1/niWlVnEHQV9NJ5/DbUSqW2RqTUa2O2KuvsyRG

# MEgjGJA12/SqrRqlvE2fiN5ZmZVtqSPWaIasx7a0GB+fdTw+geRn6Mo2S6+/bZEw

# S/0IJ5gcKGinNbfyQ1xrvWXPtXzKOfjkh75iRuXourGVPRqkmz5UYz+R5ybMJWj+

# mfcGqz2hXV8iZnCZDBrrnZivnErCMh5Flfg8496pT0phjUTH2GChHIvE4SDSk2hw

# WP/uHB9gEs8p/9Pe/mt9AgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQU6HPSBd0OfEX3

# uNWsdkSraUGe3dswHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYD

# VR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j

# cmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwG

# CCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIw

# MjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcD

# CDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBANnrb8Ewr8eX/H1s

# Kt3rnwTDx4AqgHbkMNQo+kUGwCINXS3y1GUcdqsK/R1g6Tf7tNx1q0NpKk1JTupU

# JfHdExKtkuhHA+82lT7yISp/Y74dqJ03RCT4Q+8ooQXTMzxiewfErVLt8Wefebnc

# ST0i6ypKv87pCYkxM24bbqbM/V+M5VBppCUs7R+cETiz/zEA1AbZL/viXtHmryA0

# CGd+Pt9c+adsYfm7qe5UMnS0f/YJmEEMkEqGXCzyLK+dh+UsFi0d4lkdcE+Zq5JN

# jIHesX1wztGVAtvX0DYDZdN2WZ1kk+hOMblUV/L8n1YWzhP/5XQnYl03AfXErn+1

# Eatylifzd3ChJ1xuGG76YbWgiRXnDvCiwDqvUJevVRY1qy4y4vlVKaShtbdfgPyG

# eeJ/YcSBONOc0DNTWbjMbL50qeIEC0lHSpL2rRYNVu3hsHzG8n5u5CQajPwx9Pzp

# sZIeFTNHyVF6kujI4Vo9NvO/zF8Ot44IMj4M7UX9Za4QwGf5B71x57OjaX53gxT4

# vzoHvEBXF9qCmHRgXBLbRomJfDn60alzv7dpCVQIuQ062nyIZKnsXxzuKFb0TjXW

# w6OFpG1bsjXpOo5DMHkysribxHor4Yz5dZjVyHANyKo0bSrAlVeihcaG5F74SZT8

# FtyHAW6IgLc5w/3D+R1obDhKZ21WMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJ

# mQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT

# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNh

# dGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1

# WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD

# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEB

# BQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjK

# NVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhg

# fWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJp

# rx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/d

# vI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka9

# 7aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKR

# Hh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9itu

# qBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyO

# ArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItb

# oKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6

# bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6t

# AgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQW

# BBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacb

# UzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYz

# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnku

# aHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIA

# QwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2

# VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwu

# bWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEw

# LTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93

# d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYt

# MjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/q

# XBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6

# U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVt

# I1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis

# 9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTp

# kbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0

# sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138e

# W0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJ

# sWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7

# Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0

# dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQ

# tB1VM1izoXBm8qGCAtcwggJAAgEBMIIBAKGB2KSB1TCB0jELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxh

# bmQgT3BlcmF0aW9ucyBMaW1pdGVkMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjpE

# MDgyLTRCRkQtRUVCQTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy

# dmljZaIjCgEBMAcGBSsOAwIaAxUAHDn/cz+3yRkIUCJfSbL3djnQEqaggYMwgYCk

# fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD

# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQUFAAIF

# AOpJmQYwIhgPMjAyNDA3MjMxMDUwNDZaGA8yMDI0MDcyNDEwNTA0NlowdzA9Bgor

# BgEEAYRZCgQBMS8wLTAKAgUA6kmZBgIBADAKAgEAAgIL7AIB/zAHAgEAAgIRyDAK

# AgUA6krqhgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIB

# AAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBBQUAA4GBAEfLpdF85oYM5Bwj

# 1SmLVl8YjRHsbuT/iopll/sg31AX8ikgfYytUKEcTpuOaC3vWAtvtWZPUYq+VFmO

# xFlx+Nf9t+MUfzkc3llNw82WHZXXGNaviLtQeikuczgR1r3atDIdALcKZ4To7FIz

# LnOULpDGamgy0Z+1xIAoMMhFpraPMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTACEzMAAAHcweCMwl9YXo4AAQAAAdwwDQYJYIZIAWUD

# BAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0B

# CQQxIgQg1w0IzSavVZz8gv1J8pgupKGmsfkxOS+HiytaSdU8/CswgfoGCyqGSIb3

# DQEJEAIvMYHqMIHnMIHkMIG9BCBTpxeKatlEP4y8qZzjuWL0Ou0IqxELDhX2TLyl

# xIINNzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB

# 3MHgjMJfWF6OAAEAAAHcMCIEIKTqURuHLgM80AjSI1mL5xzb+1IQzEuuuZtdU4eZ

# PZL7MA0GCSqGSIb3DQEBCwUABIICAA9MLE5kOEolNCgeXtRoWYaMNwAoueMoueyG

# 52DqrSAOJAQ9zFUXutj4VG1IMAbfAwx6WV5ufpEOZwV2JCVDZcjinTbW4y7oXpCJ

# eor1qu1S8Lx33PamUfzwvHwVsuPE/lW6FOBrOmVqzOLrjvroVFETq/Zag+E9JNus

# F8pI3HIoa6aszQnDLsrRKeBSIwIko/PABD1U79thGEgchKCnpX/d+ngTvNHJV8EG

# KN8Vz1Vfyq21InopDzdwJKA0uqaKk3nQ0ySPw2VEghgmlHKkhq4gGbt4GokRPgpF

# 06HujmDRASr0jIZO+/DMttNT1Xm4OpjG8WTqmpRlQjPL53kw7TsBzRJj1DThbfj0

# 3//EG8qMcXgi0MwvqrjrJNM9hvb1pc+NcsvCb+85GJJ4FAuBnrQPykCfyO8F8KcV

# pSz/aijwvPHxUn+m9YdAk1IXe0JYzT2TaR2/Jvqio2FMLNHa4kvurhghdAviIC6E

# 6RNuTSJqgLQGPJi5+ynDjhl4T9vpD2ohYs9FXuUTnrctQ/yCJvqRZQcSjfS8RGwM

# 9J8V0mI+x9jw9VpNHLYtwsGrzGSwwzygNHrX4GFuUVjMNH+EcLwYg3psQtrFIMwl

# xWNkWdEUA4w5dIHoxqRJBFs629Z+KuJ51Hytb/eXB1lzbY1UnPjG6AZAaxYaLzVt

# nQRUNv/n

# SIG # End signature block