AzStackHciConnectivity/AzStackHci.Connectivity.psm1

<#############################################################
 # #
 # Copyright (C) Microsoft Corporation. All rights reserved. #
 # #
 #############################################################>


Import-Module $PSScriptRoot\AzStackHci.Connectivity.Helpers.psm1 -Force -DisableNameChecking -Global
Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Utilities.psm1 -Force -DisableNameChecking -Global
Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Reporting.psm1 -Force -DisableNameChecking -Global
Import-LocalizedData -BindingVariable lcTxt -FileName AzStackHci.Connectivity.Strings.psd1
function Invoke-AzStackHciConnectivityValidation
{
    <#
    .SYNOPSIS
        Perform AzStackHci Network Validation
    .DESCRIPTION
        Perform AzStackHci Network Validation against a mandatory set of endpoints.
    .EXAMPLE
        PS C:\> Invoke-AzStackHciConnectivityValidation
        Perform network validation against all built in service targets from localhost.
    .EXAMPLE
        PS C:\> $Credential = Get-Credential -Message "Credential for local cluster"
        PS C:\> Invoke-AzStackHciConnectivityValidation -Credential $Credential
        Perform network validation against all built in service targets from all cluster nodes of local system.
    .EXAMPLE
        PS C:\> Invoke-AzStackHciConnectivityValidation -Service 'Azure Kubernetes Service'
        Perform network validation against all mandatory targets and Azure Kubernetes targets from localhost.
    .EXAMPLE
        PS C:\> Invoke-AzStackHciConnectivityValidation -Include 'Windows Admin Center','Windows Admin Center in Azure Portal'
        Perform network validation against all mandatory targets, Windows Admin Center targets and Windows Admin Center in Azure Portal targets from localhost.
    .EXAMPLE
        PS C:\> Invoke-AzStackHciConnectivityValidation -Exclude 'Qualys','Arc For Servers'
        Perform network validation against all targets excluding Qualys & Arc for Servers from localhost.
    .EXAMPLE
        PS C:\> $Credential = Get-Credential -Message "Credential for $RemoteSystem"
        PS C:\> $RemoteSystemSession = New-PSSession -Computer 10.0.0.4 -Credential $Credential
        PS C:\> Invoke-AzStackHciConnectivityValidation -PsSession $RemoteSystemSession
        Perform network validation against all built in service target from pre-existing remote PS session.
    .EXAMPLE
        PS C:\> $RemoteSystem = 'node01.contoso.com'
        PS C:\> $Credential = Get-Credential -Message "Credential for $RemoteSystem"
        PS C:\> Invoke-AzStackHciConnectivityValidation -ComputerName $RemoteSystem -Credential $Credential
        Perform network validation against all built in service target from a remote system.
    .EXAMPLE
        PS C:\> Invoke-AzStackHciConnectivityValidation -RegionName EastUS -ARCGateway
        Perform network validation for ARCGateway support in EastUS region.
    .PARAMETER PsSession
        Specify the PsSession(s) used to validation from. If null the local machine will be used.
    .PARAMETER Service
        Specify the services to target for connectivity validation. (Aliases: Include)
    .PARAMETER OperationType
        Specify the Operation Type to target for connectivity validation. e.g. Deployment, Update, etc.
    .PARAMETER Exclude
        Specify the services to exclude for connectivity validation.
    .PARAMETER Proxy
        Specify proxy server.
    .PARAMETER ProxyCredential
        Specify proxy server credential.
    .PARAMETER CustomDefinitionUri
        Specify a Uri to retrieve a custom definition of endpoints to check.
    .PARAMETER RuntimeConnectivityTarget
        Specify runtime targets. Must contain DisplayName, Description, Service, Endpoint, Protocol, Severity, Remediation. e.g. @{'DisplayName'='Bing Home';'Description'='Bing Homepage';'Service'='Bing';'Endpoint'='bing.com';'Protocol'='HTTPS'; 'Severity'='CRITICAL'; 'Remediation' = 'https://aka.ms/myserviceconnnectionrequirements}
    .PARAMETER UseLocalDefinitionsOnly
        Retrieve endpoint definitions locally.
    .PARAMETER RegionName
        Specify the region name to target for connectivity validation.
    .PARAMETER ARCGatewayName
        Specify the ARC Gateway Name support to target for connectivity validation. It will be similar to contoso.gw.arc.azure.net, where contoso is unique for each gateway.
    .PARAMETER PassThru
        Return PSObject result.
    .PARAMETER OutputPath
        Directory path for log and report output.
    .PARAMETER CleanReport
        Remove all previous progress and create a clean report.
    .INPUTS
        Inputs (if any)
    .OUTPUTS
        Output (if any)
    .LINK
        https://docs.microsoft.com/en-us/azure-stack/hci/manage/use-environment-checker?tabs=connectivity
    .NOTES
        Mandatory Targets are always invoked, unless explicitly excluded. Use Get-AzStackHciConnectivityTarget | Select Service, Title, Mandatory, Endpoint for more information.
        File-based exclusions can be made by creating a file exlcudetests.txt in the root modules root folder (e.g. PSModulePath\AzStackHci.EnvironmentChecker\<version>).
        This file can support multiple exclusions for all validators e.g.
        --Start sample--
        Test-Processor
        Observability
        microsoftonline
        --End sample--
        This file would have the following affect. After any include/exclude filtering from the parameter inputs:
        Invoke-AzStackHciHardwareValidation would exclude Test-Processor in its tests
        Invoke-AzStackHciConnectivityValidation would exclude the Observability service AND any service target who's endpoints contains a match for microsoftonline.
    #>

    [CmdletBinding()]
    param (

        [Parameter(Mandatory = $false, HelpMessage = "Specify the PsSession(s) used to validation from. If null the local machine will be used.")]
        [System.Management.Automation.Runspaces.PSSession[]]
        $PsSession,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the services to target for connectivity validation.")]
        #[ArgumentCompleter({ Get-AzStackHciConnectivityServiceName })]
        [ValidateScript({ $_ -in (Get-AzStackHciConnectivityServiceName) })]
        [Alias("Include")]
        [string[]]
        $Service,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the Operation Type to target for connectivity validation. e.g. Deployment, Update, etc...")]
        #[ArgumentCompleter({ Get-AzStackHciConnectivityOperationName })]
        [ValidateScript({ $_ -in (Get-AzStackHciConnectivityOperationName) })]
        [string[]]
        $OperationType,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the services to exclude for connectivity validation.")]
        #[ArgumentCompleter({ Get-AzStackHciConnectivityServiceName })]
        [ValidateScript({ $_ -in (Get-AzStackHciConnectivityServiceName) })]
        [string[]]
        $Exclude,

        [Parameter(Mandatory = $false, HelpMessage = "Specify proxy server.")]
        [string]
        $Proxy,

        [Parameter(Mandatory = $false, HelpMessage = "Specify proxy server credential.")]
        [pscredential]
        $ProxyCredential,

        [Parameter(Mandatory = $false, HelpMessage = "Specify a Uri to retrieve a custom definition of endpoints to check.")]
        [system.uri]
        $CustomDefinitionUri,

        [Parameter(Mandatory = $false, HelpMessage = "Specify runtime targets. Must contain DisplayName, Description, Service, Endpoint, Protocol, Severity, Remediation. e.g. @{'DisplayName'='Bing Home';'Description'='Bing Homepage';'Service'='Bing';'Endpoint'='bing.com';'Protocol'='HTTPS'; 'Severity'='CRITICAL'; 'Remediation' = 'https://aka.ms/myserviceconnnectionrequirements}")]
        [psobject[]]
        $RuntimeConnectivityTarget,

        [Parameter(Mandatory = $false, HelpMessage = "Retrieve endpoint definitions locally.")]
        [switch]
        $UseLocalDefinitionsOnly,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the region name to target for connectivity validation.")]
        [string]
        $RegionName,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the ARC Gateway scenario")]
        [switch]
        $ARCGateway,

        [Parameter(Mandatory = $false, HelpMessage = "Return PSObject result.")]
        [switch]
        $PassThru,

        [Parameter(Mandatory = $false, HelpMessage = "Directory path for log and report output")]
        [string]$OutputPath,

        [Parameter(Mandatory = $false, HelpMessage = "Remove all previous progress and create a clean report")]
        [switch]$CleanReport = $false

    )

    try
    {
        $script:ErrorActionPreference = 'Stop'
        Set-AzStackHciOutputPath -Path $OutputPath

        Write-AzStackHciHeader -invocation $MyInvocation -params $PSBoundParameters -PassThru:$PassThru
        Test-ModuleUpdate -PassThru:$PassThru

        # Call/Initialise reporting
        $envcheckerReport = Get-AzStackHciEnvProgress -clean:$CleanReport
        $envcheckerReport = Add-AzStackHciEnvJob -report $envcheckerReport

        # Validate customdefinition
        if ($CustomDefinitionUri)
        {
            Validate-CustomDefinitionUri -Uri $CustomDefinitionUri
        }
        # Validate any runtime targets
        if ($RuntimeConnectivityTarget)
        {
            Validate-RuntimeConnectivityTarget -RuntimeConnectivityTarget $RuntimeConnectivityTarget
        }

        # Add ARCGateway to the list of targets
        if ( -not $ARCGateway)
        {
            # attempt to detect if the user is using the ARCGateway scenario
            $azcmagent =  "$env:ProgramW6432\AzureConnectedMachineAgent\azcmagent.exe"
            if (Test-Path $azcmagent)
            {
                Log-Info "Detected Azure Connected Machine Agent" -Type INFO
                $arcConnectionType =  & $azcmagent config get connection.type
                if ( $arcConnectionType -eq "gateway")
                {
                    $ARCGateway = $true
                }
            }
            else
            {
                Log-Info "Azure Connected Machine Agent not detected" -Type INFO
            }
        }

        # TO DO: Omit system?
        $gtParams = @{}
        if ($PSBoundParameters.ContainsKey('Service')) { $gtParams.Service = $Service }
        if ($PSBoundParameters.ContainsKey('OperationType')) { $gtParams.OperationType = $OperationType }
        if ($PSBoundParameters.ContainsKey('Uri')) { $gtParams.Uri = $CustomDefinitionUri }
        if ($PSBoundParameters.ContainsKey('RuntimeConnectivityTarget')) { $gtParams.RuntimeConnectivityTarget = $RuntimeConnectivityTarget }
        if ($PSBoundParameters.ContainsKey('LocalOnly')) { $gtParams.LocalOnly = $UseLocalDefinitionsOnly }
        if ($PSBoundParameters.ContainsKey('RegionName')) { $gtParams.RegionName = $RegionName }
        $ConnectivityTargets = Get-AzStackHciConnectivityTarget @gtParams -ARCGateway:$ARCGateway
        $ConnectivityTargets = Select-AzStackHciConnectivityTarget -Targets $ConnectivityTargets -Exclude $Exclude

        Write-Progress -Id 1 -Activity "Checking AzStackHci Dependancies" -Status "Environment configuration" -PercentComplete 0 -ErrorAction SilentlyContinue

        # Run validation
        $i = 0
        $webResult = @()
        $diagnosticResults = @()
        $skipTests = $false
        if ($PsSession)
        {
            # Collect proxy info before TLS inspection probe.
            # ARCGateway flag omits consistency checks because they are not applicable.
            $diagnosticResults += Get-ProxyDiagnostics -PsSession $PsSession -ARCGateway:$ARCGateway
            foreach ($Session in $PsSession)
            {
                if ($Session.State -ne 'Opened')
                {
                    try
                    {
                        Connect-PSSession -Session $Session
                    }
                    catch
                    {
                        $PsSessionFail = $lcTxt.PsSessionFail -f $Session.ComputerName, $_.Exception.Message
                        Log-Info ($PsSessionFail) -type Error
                        throw $PsSessionFail
                    }
                }
                $diagnosticResults += Test-Dns -PsSession $Session
                # DNS must succeed when user doesn't specify a proxy.
                # If user specifies proxy, we will continue with other diagnostic tests and
                # lower the severity of the dns test, because external resolution could be done by proxy.
                if ($diagnosticResults[-1].Status -ne 'SUCCESS')
                {
                    if ([string]::IsNullOrEmpty($PSBoundParameters['Proxy']))
                    {
                        throw ($lcTxt.DnsFail -f $Session.ComputerName, ($diagnosticResults[-1].AdditionalData.Detail -join "`r`n"))
                    }
                    else
                    {
                        Log-Info ($lcTxt.DnsDowngrade -f $Session.ComputerName) -Type Warning
                        $diagnosticResults[-1].Severity = 'WARNING'
                    }
                }
                if (($diagnosticResults | Where-Object Severity -eq Critical).Status -contains 'FAILURE')
                {
                    $failedDiagnosticResult = $diagnosticResults | Where-Object {$_.Status -EQ 'FAILURE' -and $_.Severity -eq 'CRITICAL'} | Format-List | Out-String
                    $failedDiagnosticDetailMsg = ($diagnosticResults | Where-Object {$_.Status -EQ 'FAILURE' -and $_.Severity -eq 'CRITICAL'} | Select-Object -ExpandProperty AdditionalData).Detail -join "`r`n"
                    Log-Info ($lcTxt.DiagnosticSystemFailure -f $failedDiagnosticDetailMsg, $failedDiagnosticResult) -Type Critical -ConsoleOut
                    $skipTests = $true
                }

                # Tolerance on SSL inspection: any success is good enough.
                $sslInspectionResults = @()
                $sslInspectionResults += Test-RootCA -PsSession $Session -Proxy $Proxy -ProxyCredential $ProxyCredential
                $diagnosticResults += $sslInspectionResults
                if ($sslInspectionResults.Status -notcontains 'SUCCESS')
                {
                    $failedDiagnosticResult = $sslInspectionResults | Where-Object {$_.Status -EQ 'FAILURE'} | Format-List | Out-String
                    $failedDiagnosticDetailMsg = ($sslInspectionResults | Where-Object {$_.Status -EQ 'FAILURE'} | Select-Object -ExpandProperty AdditionalData).Detail -join "`r`n"
                    Log-Info ($lcTxt.DiagnosticSystemFailure -f $failedDiagnosticDetailMsg, $failedDiagnosticResult) -Type Critical -ConsoleOut
                    $skipTests = $true
                }
            }
            if (-not $skipTests)
            {
                # Run connectivity tests
                $webResult += Invoke-WebRequestEx -Target $ConnectivityTargets -PsSession $PsSession -Proxy $Proxy -ProxyCredential $ProxyCredential
            }
        }
        else
        {
            $diagnosticResults += Test-Dns
            # DNS must succeed when user doesn't specify proxy.
            # If user specifies proxy, we will continue with other diagnostic tests and
            # lower the severity of the dns test, because external resolution could be done by proxy.
            if ($diagnosticResults[-1].Status -ne 'SUCCESS')
            {
                if ([string]::IsNullOrEmpty($PSBoundParameters['Proxy']))
                {
                    throw ($lcTxt.DnsFail -f $ENV:COMPUTERNAME, ($diagnosticResults[-1].AdditionalData.Detail -join "`r`n"))
                }
                else
                {
                    Log-Info ($lcTxt.DnsDowngrade -f $ENV:COMPUTERNAME) -Type Warning
                    $diagnosticResults[-1].Severity = 'WARNING'
                }
            }
            # ARCGateway flag omits consistency checks because they are not applicable.
            $diagnosticResults += Get-ProxyDiagnostics -ARCGateway:$ARCGateway
            if (($diagnosticResults | Where-Object Severity -eq Critical).Status -contains 'FAILURE')
            {
                $failedDiagnosticResult = $diagnosticResults | Where-Object {$_.Status -EQ 'FAILURE' -and $_.Severity -eq 'CRITICAL'} | Format-List | Out-String
                $failedDiagnosticDetailMsg = ($diagnosticResults | Where-Object {$_.Status -EQ 'FAILURE' -and $_.Severity -eq 'CRITICAL'} | Select-Object -ExpandProperty AdditionalData).Detail -join "`r`n"
                Log-Info ($lcTxt.DiagnosticSystemFailure -f $failedDiagnosticDetailMsg, $failedDiagnosticResult) -Type Critical -ConsoleOut
                $skipTests = $true
            }

            # Tolerance on SSL inspection: any success is good enough.
            $sslInspectionResults = @()
            $sslInspectionResults += Test-RootCA -Proxy $Proxy -ProxyCredential $ProxyCredential
            $diagnosticResults += $sslInspectionResults
            if ($sslInspectionResults.Status -notcontains 'SUCCESS')
            {
                $failedDiagnosticResult = $sslInspectionResults | Where-Object {$_.Status -EQ 'FAILURE'} | Format-List | Out-String
                $failedDiagnosticDetailMsg = ($sslInspectionResults | Where-Object {$_.Status -EQ 'FAILURE'} | Select-Object -ExpandProperty AdditionalData).Detail -join "`r`n"
                Log-Info ($lcTxt.DiagnosticSystemFailure -f $failedDiagnosticDetailMsg, $failedDiagnosticResult) -Type Critical -ConsoleOut
                $skipTests = $true
            }
            if (-not $skipTests)
            {
                # Run connectivity tests
                $webResult += Invoke-WebRequestEx -Target $ConnectivityTargets -Proxy $Proxy -ProxyCredential $ProxyCredential
            }
        }

        # Feedback results - user scenario
        if (-not $PassThru)
        {
            Write-Host 'Connectivity Results'
            $printed = @()
            $targetServices = $webresult.Tags.Service | Sort-Object | Get-Unique | Where-Object { $PSITEM -ne 'System' }
            Foreach ($targetService in $targetServices) {
                $thisResult = $webResult | Where-Object { $PSITEM -notin $printed -and $_.Tags.Service -EQ $targetService }
                Write-AzStackHciResult -Title $targetService -Result $thisResult
                $printed += $webResult | Where-Object Service -EQ $targetService
            }
            Write-AzStackHciResult -Title 'Diagnostics' -Result $diagnosticResults -Expand
            Write-Summary -Result $webResult -Property1 Source -Property2 Resource
            Write-FailedUrls -Result $webResult
        }
    }
    catch
    {
        Log-Info -Message "" -ConsoleOut
        Log-Info -Message "$($_.Exception.Message)" -ConsoleOut -Type Error
        Log-Info -Message "$($_.ScriptStackTrace)" -ConsoleOut -Type Error
        $cmdletException = $_
        throw $_.exception
    }
    finally
    {
        $Script:ErrorActionPreference = 'SilentlyContinue'
        # Write result to telemetry channel
        foreach ($r in ($webResult + $diagnosticResults))
        {
            Write-ETWResult -Result $r
        }
        # Write validation result to report object and close out report
        $envcheckerReport | Add-Member -MemberType NoteProperty -Name 'Connectivity' -Value $webResult -Force
        $envcheckerReport | Add-Member -MemberType NoteProperty -Name 'Diagnostics' -Value $diagnosticResults -Force
        $envcheckerReport = Close-AzStackHciEnvJob -report $envcheckerReport
        Write-AzStackHciEnvReport -report $envcheckerReport
        Write-AzStackHciFooter -invocation $MyInvocation -Exception $cmdletException -PassThru:$PassThru
        Remove-Variable -Name AzStackHciConnectivityTargets -Scope GLOBAL -ErrorAction SilentlyContinue
        if ($PassThru)
        {
            Write-Output ($webResult + $diagnosticResults)
        }
    }
}
# SIG # Begin signature block
# MIIoLAYJKoZIhvcNAQcCoIIoHTCCKBkCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBGGTIaXiKRrRwS
# GYaMFegJj93n82ZxHkOrX5VSU//a/qCCDXYwggX0MIID3KADAgECAhMzAAADrzBA
# DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA
# hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG
# 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN
# xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL
# go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB
# tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd
# mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ
# 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY
# 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp
# XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn
# TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT
# e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG
# OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O
# PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk
# ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx
# HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt
# CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGgwwghoIAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIAecd+EsA1I3fbj8JBUDCebZ
# cxtqXcvB+3Zl/OapWXxrMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAqwG4vPFSpreUBtqJFXq7wIlpqzYLb9maGN40S0GW+FSAVPl6B7otbENa
# HDJwE0ZnvPvK04MttrEHXY6tmK2rBc70h43eOqF55MoPGX2Mx8hOIVm0+PYggB5a
# 1xydS1PE1lwVRDZDsvkMtdmfK91TVrvUO39H9eRFHPwfzo4Xm/rdCZM5rHxb0lNd
# I0rZgKv8tTj+cxxWKwx0MuhiwCHm9YOTKB19tUHsQilwSvEFgspso9PRtW6vQG+u
# 0Q5AXw/XxnW7JHNoxqvU3dSZXoKIqkv6b1CVsvQXNn7ji4arwggdTs5bw+RjHRYS
# KPVwWbOdylappQJfRhVRDtW5OijO8KGCF5YwgheSBgorBgEEAYI3AwMBMYIXgjCC
# F34GCSqGSIb3DQEHAqCCF28wghdrAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsq
# hkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCBGwqLaru7s0uIbekAm/YuBBShMV2gLhjAglO4jd+cH8QIGZuLUzIMk
# GBIyMDI0MTAwOTAxMTM0Ny4xN1owBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVy
# aWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpGMDAyLTA1
# RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCC
# Ee0wggcgMIIFCKADAgECAhMzAAAB8j4y12SscJGUAAEAAAHyMA0GCSqGSIb3DQEB
# CwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTIzMTIwNjE4NDU1
# OFoXDTI1MDMwNTE4NDU1OFowgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo
# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
# cG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMx
# JzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpGMDAyLTA1RTAtRDk0NzElMCMGA1UE
# AxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEB
# BQADggIPADCCAgoCggIBALzl88sXCmliDHBjGRIR5i9AG2dglO0oqPYUrHMfHR+B
# XpeAgiuYJaakqX0g7O858n+TqI/RGehGjkXz0B3b153MZ2VZsKPVDLHkdQc1jzK7
# 0SUk6Z2B6429MrhFbjC72IHn/PZJ4K5irJf+/zPo+m/b2HW201axJz8o8566HNIB
# eqQDbrkFIVPmTKTG/MHQvGjFLqhahdYrrDHXvY1ElFhwg19cOFRG9R8PvSOKgT3a
# tb86CNw4rFmR9DEuXBoVKtKcazteEyun1OxSCbCzJxMQ4F0ZWZ/UcIPtY5rPkQRx
# DIhLYGlFhjCw8xsHre4eInXnyo2HVIle6gvnAYO79tlTM34HNwuP3qLELvAkZAwG
# LFYf1375XxuXXRFh1cNmWWNEC9LqIXA3OtqG7gOthvtvwzu+/CEQvTEI69vtYUyy
# y2xxd+R0TmD41JpymGAV9yh+1Dmo8PY81WasbfwOYcOhiGCP26o8s/u+ehd/uPr4
# tbxWifXnwPRauaTsK6a5xBOIdHJ6kRpUOecDYaSImh6H+vd9KEvoIeA+hMHuhhT9
# 3ok6dxGKgNiqpF9XbCWkpU7xv5VgcvyGfXUlEXHqnr2YvwFG1Jnp0b8YURUT59Wa
# DFh8gJSumCHJCURMk8hMQFLXkixpS5bQa9eUtKh8Z/a3kMCgOS4oJsL7dV0+aVhV
# AgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQUlVuHACbq0DEEzlwfwGDT5jrihnkwHwYD
# VR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZO
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw
# VGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBc
# BggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0
# cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYD
# VR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMC
# B4AwDQYJKoZIhvcNAQELBQADggIBAD1Lp47gex8HTRek6A9ptw3dBl7KKmCKVxBI
# NnyDpUK/0VUfN1Kr1ekCyWNlIo1ZIKWEkTPk6jdSb+1o+ehsX7wKQB2RwtCEt2RK
# F+v3WTPL28M+s6aUIDYVD2NWEVpq3ZAzffPWn4YI/m26+KsVpRbNRZUMU6mj87nM
# OnOg9i1OvRwWDe5dpEtPnhRDdji49heqfrC6dm1RBEyIkzPGlSW919YZS0K+dbd4
# MGKQOSLHVcT3xVxgjPb7l91y+sdV5RqsZfLgtG3DObCmwK1SHu1HrCEKtViRvoW5
# 0F1YztNW+OLukaB+N6yCcBJoP8KEu7Hro8bBohoX7EvOTRs3GwCPS6F3pB1avpNP
# f2b9I1nX9RdTuTMSh3S8BjeYifxfkDgj7397WcE2lREnpiIMpB3lhWDGy5kJa/hD
# BvSZeEch70K5t9KpmO8NrB/Yjbb03cuy0MlRKvW8YUHyJDlbxkszk/BPy+2woQHA
# cRibCy5aazGSKYgXkFBtLOD3DPU7qN1ZPEYbQ5S3VxdY4wlQnPIQfhZIpkc7Hnep
# wC8P2HRTqMQXZ+4GO0n9AOtZtvi6u8B+u+o2f2UfuBU+mWo08Mi9DwORneW9tCxi
# qXPrXt7vqBrtJjTDvX5A/XrkI93NRjfp63ZKbim+ykQryGWWrchhzJfS/z3v5f1h
# 55wzU9vWMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG
# 9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEy
# MDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw
# MTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
# AOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az
# /1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V2
# 9YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oa
# ezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkN
# yjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7K
# MtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRf
# NN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SU
# HDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoY
# WmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5
# C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8
# FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TAS
# BgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1
# Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUw
# UzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNy
# b3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoG
# CCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIB
# hjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fO
# mhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9w
# a2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggr
# BgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNv
# bS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3
# DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEz
# tTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJW
# AAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G
# 82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/Aye
# ixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI9
# 5ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1j
# dEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZ
# KCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xB
# Zj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuP
# Ntq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvp
# e784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1Aw
# ggI4AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAGuL
# 3jdwUsfZN9AR8HTlIsgKDvgIoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# UENBIDIwMTAwDQYJKoZIhvcNAQELBQACBQDqsECQMCIYDzIwMjQxMDA4MjMzNjQ4
# WhgPMjAyNDEwMDkyMzM2NDhaMHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAOqwQJAC
# AQAwCgIBAAICImACAf8wBwIBAAICFCkwCgIFAOqxkhACAQAwNgYKKwYBBAGEWQoE
# AjEoMCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkq
# hkiG9w0BAQsFAAOCAQEAntnnD9lOPg/kajWIS9h45j1P74Y7dmP+GS6WgttEaPu6
# E7+o94mMx2SjjGno8TQCF/d6nF+zB1JUwrY2h45zgKoNnwfIzd46nUtBKEW20dcP
# /+fNUA8S3bQXgxp1Kk9DTqdRN/t/BwiG1DLI1V3G6n2I54l09c/u8ufVjFPvToFa
# 5/Jtk8fdiJEs9dctENAzGScjkLkRzuGL83Aw0LGSxWw//WXWpN87jgW83zcsp+ky
# OMdVT1KRgBzjO1enI6bWMaN52EngDh/7Q7uw+FRz+QTAv6TpNOCGuM5qfmawO3VW
# r14HDXLtN40wXum1BfQN7Mj/GwEcUUi2vpp3VuJpCjGCBA0wggQJAgEBMIGTMHwx
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p
# Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB8j4y12SscJGUAAEAAAHy
# MA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQw
# LwYJKoZIhvcNAQkEMSIEIGDUhgp59SiC98x8oz2KpFwcQv3W3c0Ov5+gVqsN+9aF
# MIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQg+No+HS4xUlzTj5jhG7kFRRsc
# Tiy5nqdEdJS7RddKQ0QwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMK
# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0
# IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0Eg
# MjAxMAITMwAAAfI+MtdkrHCRlAABAAAB8jAiBCCNFnsS5qdYYhJZ0sbCKtUIoUBr
# XCf/tUDbBQCjUNJz7DANBgkqhkiG9w0BAQsFAASCAgB8G1KJh1cDWeTA2QmUFAOm
# ThqUuQ0A2ySVjKIPa72HZKHSB/hniwa1cvC83tMzZC7xp+C35Mm4Tof0STACAiR8
# 6CbuIVY7lsCXuCHs9ukXSBXN8x6wD62u3ktDi8LHvf80nPzt2NTOvbOjsa68uEdL
# AGTnAqlnecB91wPe0GR++mjI2EVXld69yAOVRRjXFBQu0GwCPPcTD91Jr9PyPyxt
# r8nByxDw5uyikywFYYa2bxrgmfAFxew2t851ceIxTNIqh9+glBb5WYMhpeOVB/OH
# CJFnVUgR5MxASS+ijKPWIoVVtUnJYcJPyOBrk/7cVecYxllhYqRpH78XWWVnM8Lp
# 9g4EXWDnTFpHmFciUfL+ZOrxB4ixAbNKe0isYY3/X/1DW5gJV59xzKk5l+Z+9Pdo
# qD8/I6NDb8COjTY16xCPTnjisWcEkjCHe1s67yT91T9fc3SjpZTPuzCXi5+9xKvN
# Y3AluLlFZ7wAkENKZOX7lDTbvmsQ7shLPSVzXhDJOO1DdBWPXPxfMLm7Qz6xMXGJ
# VMI1i1zUDMR5lyjDzoHgMadDsBIP5m/Z96h/At/Y+6SioEOAym0S/+TQojIlZfGB
# uHV8jbNioXa3C0ayD5DquKw7vwDn/DBNDuR1gESdEiqSd+P2S1qoxUyeYNPlHu2l
# VVdl5tvffg9cFmCrbIx/6w==
# SIG # End signature block