AzStackHci.EnvironmentChecker

1.2100.2790.560

Obs/bin/ObsDep/content/Powershell/Roles/Common/CompleteBootDSC.ps1

$waitForTimeSyncScript = "$PSScriptRoot\WaitForTimeSyncBeforeDSC.ps1"
if (Test-Path $waitForTimeSyncScript)
{
    # Wait for time on this machine to syncrhonize before we begin the boot-time DSC process.
    # This ensures that our transcript times don't get messed up by clock changes during this time.
    & $waitForTimeSyncScript
}

$logFile = "$env:windir\SetupComplete.log"
Start-Transcript -Path $logFile -Append

function Trace-Execution
{
    param(
        [Parameter(ValueFromPipeline=$true)]
        [string] $message,
        $ForegroundColor = "White")

    Process {
        if ($message)
        {
            "$message - $([DateTime]::Now.ToString())" | Write-Host
        }
    }
}

Trace-Execution "Starting CompleteBootDSC"

function Start-WaitForLCM
{
    $ErrorActionPreference = 'Stop'
    $waitingForLCM = $true
    $maxRetryCount = 180  # 180 retries X once every 10 seconds = 30 minutes
    $currentIteration = 1

    Trace-Execution "Waiting for LCM"
    while ($waitingForLCM) {
        Trace-Execution "Attempt# $currentIteration"
        $lcmStatus = Get-DscLocalConfigurationManager
        if (($lcmStatus.LCMState -like 'Idle') -or ($lcmStatus.LCMState -like 'PendingConfiguration')) {
            $waitingForLCM = $false
        }
        else
        {
            if($currentIteration -ge $maxRetryCount)
            {
                Trace-Execution "LCM did not reach a stable state after $currentIteration attempts."
                return $false
            }
            Trace-Execution "Waiting 10 seconds for LCM to stabilize"
            sleep 10
        }
        $currentIteration++
    }
    Trace-Execution "LCM Ready"
    return $true
}

function Start-DSCWithCatch
{
    param(
        [CimSession]$CimSession
    )

    # WINRM may restart and fail the connection used use by Start-DscConfiguration.
    # It will continue processing in the background, but Get-DscConfiguration will need to
    # wait for it to finish.
    try
    {
        # Log redirection through DCOM is minimal, unfortunately.
        Start-DscConfiguration -CimSession $CimSession -Force -Wait -UseExisting -Verbose -ErrorAction Stop *>&1 | Trace-Execution
        return $true
    }
    catch
    {
        # If an exception is encountered, wait until LCM is done processing the configuration in the background,
        # and then check whether it succeeded.
        Trace-Execution "*** Start-DscConfiguration threw exception '$_'. This may be expected due to WinRM restarts. Wait for LCM to stabilize."
        $lcmReady = Start-WaitForLCM
        Trace-Execution "LCM ready: $lcmReady"
        Trace-Execution "Testing DSC configuration."
        $result = Test-DscConfiguration -Detailed -Verbose
        Trace-Execution "Converged resources: $(Get-ResourceListAsString $result.ResourcesInDesiredState)"
        Trace-Execution "Unconverged resources: $(Get-ResourceListAsString $result.ResourcesNotInDesiredState)"
        return $result.InDesiredState
    }
}

<#
.Synopsis
    Writes DSC status file at the specified location
.Parameter TargetFolderPath
    Target folder where the DSC status file will be written
.Parameter Version
    Current version being deployed or the version to which the stamp is being updated.
    The name of the status file will contain the version to detect completion of DSC.
.Parameter Status
    Status of CompleteBootDSC script.
#>

function Write-DscStatusFile
{
    param(
        [Parameter(Mandatory)]
        [System.Xml.XmlElement] $TargetPaths,

        [Parameter(Mandatory)]
        [string] $Version,

        [Parameter(Mandatory)]
        [ValidateSet("Started", "Completed", "Failed")]
        [string] $Status,

        [Parameter(Mandatory = $false)]
        [object[]] $ResourcesNotInDesiredState
    )

    $fileName = $env:COMPUTERNAME + "." + $Version + ".xml"
    $filePath = Join-Path -Path $TargetPaths.TargetShare.PrimaryPath -ChildPath $fileName
    Trace-Execution "DSC status file will be written at: $filePath"
    $fileDirectory = Split-Path $filePath
    if (-not (Test-Path $fileDirectory))
    {
        Trace-Execution "Creating directory for the status file: $fileDirectory"
        New-Item -Type Directory -Path $fileDirectory -Force | Out-Null
    }

    Add-Type -AssemblyName System.Xml.Linq

    $xml = [System.Xml.Linq.XElement]::new("DeploymentDSC", [System.Xml.Linq.XElement]::new("Status", $Status))

    if ($ResourcesNotInDesiredState -and $ResourcesNotInDesiredState.Length -gt 0)
    {
        $childElement = [System.Xml.Linq.XElement]::new([System.Xml.Linq.XName]"ResourcesNotInDesiredState")

        foreach ($resource in $ResourcesNotInDesiredState)
        {
            $childElement.Add([System.Xml.Linq.XElement]::new("ResourceId", $resource.ResourceId))
        }

        $xml.Add($childElement)
    }

    $xml.Save($filePath)
}

function Get-ResourceListAsString
{
    param
    (
        [object[]]$Resources
    )

    if ($Resources)
    {
        return ( ($Resources | % { "$($_.ConfigurationName): $($_.ResourceId)" }) -join ", " )
    }

    return [string]::Empty
}

# Apply settings to the LCM
function Set-LcmMetaConfig
{
    param
    (
        [string[]] $PartialConfigs
    )

    Trace-Execution "Importing $PSScriptRoot\DscMetaConfig.psm1"
    Import-Module "$PSScriptRoot\DscMetaConfig.psm1" -Force

    $metaMofPath = Join-Path -Path $env:temp -ChildPath 'lcm'
    New-Item -Path $metaMofPath -ItemType Directory -Force -ErrorAction SilentlyContinue
    Remove-Item $metaMofPath\localhost.meta.mof -Force -ErrorAction SilentlyContinue
    Trace-Execution "*** Generating LCM configuration"
    $null = MetaMof -OutputPath $metaMofPath -CredentialEncryptionThumbprint $encryptionCert.ThumbPrint -PartialConfigList $PartialConfigs
    $lcmConfig = $false
    do {
        try
        {
            Trace-Execution "*** Setting LCM configuration from $metaMofPath"
            Set-DscLocalConfigurationManager -Path $metaMofPath -Force -ErrorAction Stop
            $lcmConfig = $true
        }
        catch
        {
            $errorMessage = $_.Exception.ToString()
            Trace-Execution "Error setting LCM configuration : '$errorMessage'"
            Start-Sleep 60
        }
    } until ($lcmConfig)
}

$ErrorActionPreference = 'Stop'

Import-Module "$PSScriptRoot\Helpers.psm1" -Force

# Test binary hashes at First Boot start
Test-BinaryHash -FileSystemRoot 'C:' -OutputFileName 'firstBootStartHash.json' -BaselineFileName 'baselineHash.json'

try {
    $partialConfigListFileName = "c:\DSCConfigs\DscPartialConfigList.xml"

    # wait for up to 5 minutes for WinRM service to start on it's own
    $retryCount = 0
    do
    {
        $retryCount++
        try
        {
            Trace-Execution "Getting WinRM service, attempt $retryCount"
            $getWinRM = (Get-Service -Name WinRM -ErrorAction Stop).Status
            Trace-Execution "WinRM service status is $getWinRM"
            if ($getWinRM -ne 'Running')
            {
                Start-Sleep -Seconds 15
            }
        }
        catch
        {
            $errorMessage = $_.Exception.Message
            Trace-Execution "Error getting WinRM service : '$errorMessage'"
            Start-Sleep -Seconds 15
        }
    } until (($getWinRM -eq 'Running') -or ($retryCount -ge 20))

    # if WinRM service isn't started after 5 minutes, attempt to start it
    $retryCount = 0
    while ((Get-Service -Name WinRM -ErrorAction SilentlyContinue).Status -ne 'Running')
    {
        $retryCount++
        try
        {
            Trace-Execution "Starting WinRM service, attempt $retryCount"
            Start-Service -Name WinRM -ErrorAction Stop
        }
        catch
        {
            $errorMessage = $_.Exception.Message
            Trace-Execution "Error starting WinRM service : '$errorMessage'"
            Start-Sleep 60
        }
    }

    # Get the configuration file with the information needed to generate the DSC status file
    $configFile = "C:\DscConfigs\CompleteBootDscStatusConfig.xml"
    Trace-Execution "Extracting data from configuration file present at: $configFile"
    $content = [xml] (Get-Content -Path $configFile)

    # Define the path of the file where the status will be defined
    $targetFolderPaths = $content.Configuration.TargetShares
    $version = $content.Configuration.Version

    # Boot-time DSC configuration for hosts sets up the vSwitches, so prior to the convergence of
    # those resources hosts have no network connectivity. We skip attempting to write the initial
    # 'Started' status for hosts because it will always fail.
    if (Test-Path $partialConfigListFileName)
    {
        $isHostDscConfig = Get-Item $partialConfigListFileName | Select-String -SimpleMatch "NewComputeBootstrapDscConfiguration"
    }

    if ($isHostDscConfig)
    {
        Trace-Execution "Not writing initial DSC status for a host configuration, because host networking has not been configured yet."
    }
    else
    {
        Trace-Execution "Trying to write DSC status file with status: Started"
        Write-DscStatusFile -TargetPaths $targetFolderPaths -Version $version -Status Started
    }

    Trace-Execution "Installing DSC Configuration decryption certificate"

    # This code is structured to be idempotent, partly for debugging and partly because a one-node POC
    # host will already have the certificates installed, because it is where the deployment collateral
    # runs.
    # Import the cert necessary for verifying DSC MOF signatures.
    $signingCert = Get-ChildItem Cert:\LocalMachine\My | % {if ($_.Subject -like '*DscSigningCert*') {$_}}
    $encryptionCert = Get-ChildItem Cert:\LocalMachine\My | % {if ($_.Subject -like '*DscEncryptionCert*') {$_}}
    $certPasswordPlaintext = Get-Content -Path c:\DSCConfigs\DscCertPassword.txt -ErrorAction SilentlyContinue
    if ($certPasswordPlaintext -ne $null)
    {
        $certPassword = $certPasswordPlaintext | ConvertTo-SecureString -AsPlainText -Force

        # Import the cert necessary for verifying DSC MOF signatures.
        if (-not $signingCert)
        {
            # This can loop indefinitely since deployment will fail on timeout if the certificate is not imported.
            # We need to retry here since the certificate is not always immediately available from Cert:\ path after import.
            do
            {
                Trace-Execution "Installing DSC Configuration signature verification certificate"
                try
                {
                    Import-PfxCertificateSafe -FilePath c:\DSCConfigs\DscSigning.pfx `
                                        -CertStoreLocation Cert:\LocalMachine\My `
                                        -Password $certPassword `
                                        -Exportable `
                                        -ErrorAction Stop
                    $signingCert = Get-ChildItem Cert:\LocalMachine\My | % {if ($_.Subject -like '*DscSigningCert*') {$_}}
                }
                catch
                {
                    Trace-Execution "Failed to import DSC Configuration signature verification certificate due to '$_'."
                }
                finally
                {
                    if (-not $signingCert)
                    {
                        Trace-Execution "Failed to find DSC signature verification certificate, will retry in 10 seconds"
                        Start-Sleep -Seconds 10
                    }
                }
            } until ($signingCert)
            Trace-Execution "Deleting DSC signature verification cert files"
            Remove-Item -Path c:\DSCConfigs\DscSigning.pfx -Force
        }

        # Import the cert necessary for decrypting creds in DSC MOFs.
        if (-not $encryptionCert)
        {
            # This can loop indefinitely since deployment will fail on timeout if the certificate is not imported.
            # We need to retry here since the certificate is not always immediately available from Cert:\ path after import.
            do
            {
                try
                {
                    Trace-Execution "Installing DSC Configuration decryption certificate"
                    Import-PfxCertificateSafe -FilePath c:\DSCConfigs\DscEncryption.pfx `
                                        -CertStoreLocation Cert:\LocalMachine\My `
                                        -Password $certPassword `
                                        -Exportable `
                                        -ErrorAction Stop
                    $encryptionCert = Get-ChildItem Cert:\LocalMachine\My | % {if ($_.Subject -like '*DscEncryptionCert*') {$_}}
                }
                catch
                {
                    Trace-Execution "Failed to import DSC Configuration decryption certificate"
                }
                finally
                {
                    if (-not $encryptionCert)
                    {
                        Trace-Execution "Failed to find DSC decryption certificate, will retry in 10 seconds"
                        Start-Sleep -Seconds 10
                    }
                }
            } until ($encryptionCert)
            Trace-Execution "Deleting DSC Configuration decryption cert files"
            Remove-Item -Path c:\DSCConfigs\DscEncryption.pfx -Force
        }
        Remove-Item -Path c:\DSCConfigs\DscCertPassword.txt -Force
    }

    if (-not $encryptionCert)
    {
        Trace-Execution "Failed to find DSC Signing Certificate"
        throw
    }

    Trace-Execution "Reexporting public key for LCM configuration"
    $encryptionCert | Export-Certificate -FilePath c:\DSCConfigs\DscDecryption.cer -Force

    $partialConfigList = @()
    $partialConfigListFile = Get-ChildItem -Path $partialConfigListFileName -ErrorAction SilentlyContinue
    $partialConfigListFileContent = $null
    if ($partialConfigListFile)
    {
        $partialConfigListFileContent = [xml](Get-Content -Path $partialConfigListFile)
        $partialConfigList = [array] ($partialConfigListFileContent.PartialConfigurations.PartialConfiguration.Name)
        Trace-Execution "Read list of $($partialConfigList.Count) partial configs: $($partialConfigList -join ',')"
    }

    Trace-Execution "Configuring LCM without enabling partial configurations."
    Set-LcmMetaConfig -PartialConfigs @()

    # Use DCOM for invoke the Start-DscConfiguration to avoid complications with WINRM restarting during JEA resources.
    $opt = New-CimSessionOption -Protocol Dcom
    $session = New-CimSession -ComputerName localhost -SessionOption $opt

    # Don't call DSC via WINRM between the Publish and when configuration is complete.
    # After publishing configurations, DSC configuration may auto-start on a timer.
    # When configurations re-start WINRM, calls to DSC through WINRM may cause a dead-lock.

    # If starting the DSC configs in this secion fails, we will make one final attempt below
    # to re-converge them before failing the overall action.

    Trace-Execution "*** Publishing DSC configurations in C:\DSCConfigs"

    # If there are partial configurations, publish them all. If not, just apply them serially.
    if ($partialConfigListFile)
    {
        $availablePhases = [array] (($partialConfigListFileContent.PartialConfigurations.PartialConfiguration.Phase) | Select-Object -Unique | Sort-Object)
        $publishedPhaseCount = 0
        foreach($phase in $availablePhases)
        {
            Trace-Execution "Get list of partial configurations in phase: $phase"
            $selectedPartials = $partialConfigListFileContent.PartialConfigurations.PartialConfiguration | Where-Object {$_.Phase -eq $phase}
            $partialsForCurrentPhase = $selectedPartials.Name
            Trace-Execution "Configurations for this phase: $($partialsForCurrentPhase -join ',')"

            foreach ($configName in $partialsForCurrentPhase)
            {
                $publishedPhaseCount++
                if ($publishedPhaseCount -eq $availablePhases.Count)
                {
                    Trace-Execution "Configuration for all phases has been published. Setting marker file."
                    New-Item -Type File -Name dsc.published -Path C:\DSCConfigs -Force | Out-Null
                }

                $configDirectory = Get-ChildItem "C:\DSCConfigs" -Directory | Where-Object Name -eq $configName
                if ($configDirectory)
                {
                    Trace-Execution "Publishing configuration $configName from directory $($configDirectory.FullName)"
                    Publish-DscConfiguration -Path $configDirectory.FullName -Force -ErrorAction Stop

                    Trace-Execution "Applying configuration $configName"
                    $result = Start-DSCWithCatch -CimSession $session
                    Trace-Execution "Result of applying DSC for phase $($phase) and configuration $($configName): $result"
                }
                else
                {
                    Trace-Execution "Configuration $configName is defined in $partialConfigListFileName but is not present under C:\DSCConfigs"
                }
            }
        }
    }
    else
    {
        $partialDirs = Get-ChildItem C:\DSCConfigs -Directory
        foreach ($partialDir in $partialDirs)
        {
            Trace-Execution "*** Applying DSC configuration from $($partialDir.FullName)"
            Publish-DscConfiguration -Path $partialDir.FullName -Force -ErrorAction Stop
            $result = Start-DSCWithCatch -CimSession $session
            Trace-Execution "Result of applying DSC for directory $($partialDir.FullName): $result"
        }
    }

    $lcmStatusResult = Start-WaitForLCM
    if($lcmStatusResult -eq $false)
    {
        Trace-Execution "Failed to find LCM in acceptable state. Trying to write status file to orchestrator(s)."
        Write-DscStatusFile -TargetPaths $targetFolderPaths -Version $version -Status Failed
        return
    }

    Trace-Execution "*** DSC configuration complete"

    Trace-Execution "*** Checking for errors from Get-WinEvent -LogName 'Microsoft-Windows-DSC/Operational' | Sort-Object -Property TimeCreated"
    $evt = Get-WinEvent -LogName "Microsoft-Windows-DSC/Operational" | Sort-Object -Property TimeCreated
    [object[]] $dscErrors = $evt | Where-Object { $_.LevelDisplayName -eq "Error" }
    Trace-Execution "$($dscErrors.Count) errors processing initial DSC configuration. See event log."
    $dscErrors | Format-List TimeCreated, Message

    # At this point WinRM should be stable.
    Trace-Execution "*** Testing whether DSC configuration is in expected states."
    $t = Test-DscConfiguration -Verbose -Detailed

    if(($t -eq $null) -or ($t.InDesiredState -eq $false))
    {
        Trace-Execution "*** Some resources are not in the desired state. Attempt to mitigate by running Start-DscConfiguration again."
        $result = Start-DSCWithCatch -CimSession $session
        Trace-Execution "Result of last DSC convergence attempt: $result"
        Trace-Execution "*** Testing whether DSC configuration is in expected states."
        $t = Test-DscConfiguration -Verbose -Detailed
    }

    Trace-Execution "*** DSC results:"
    Trace-Execution "In desired state: $($t.InDesiredState)"
    Trace-Execution "ResourcesInDesiredState: $(Get-ResourceListAsString $t.ResourcesInDesiredState)"
    Trace-Execution "ResourcesNotInDesiredState: $(Get-ResourceListAsString $t.ResourcesNotInDesiredState)"

    # Allow deployment to detect that the machine has finished processing DSC.
    # By this point, the host has been brought to the state expected by both Wait-BareMetalDeployment and Wait-VirtualNetwork.

    if($null -eq $t)
    {
        Write-DscStatusFile -TargetPaths $targetFolderPaths -Version $version -Status "Failed"
    }
    elseif ($t.InDesiredState -eq $false)
    {
        Write-DscStatusFile -TargetPaths $targetFolderPaths -Version $version -Status "Failed" -ResourcesNotInDesiredState $t.ResourcesNotInDesiredState
    }
    else
    {
        Write-DscStatusFile -TargetPaths $targetFolderPaths -Version $version -Status "Completed"
    }

    Trace-Execution "Resetting LCM to not use Partial Configuration mode."
    Set-LcmMetaConfig -PartialConfigs @()
}
catch
{
    # Attempt to write the DSC status file so the orchestrator has a chance to fail fast rather than timing out.
    Trace-Execution "Encountered an exception during boot-time DSC execution: $_"
    Write-DscStatusFile -TargetPaths $targetFolderPaths -Version $version -Status Failed
    throw
}
finally
{
    $session | Remove-CimSession -ErrorAction Ignore
    Trace-Execution "***CompleteBootDSC.ps1 complete***"
    Stop-Transcript -ErrorAction Ignore
}
# SIG # Begin signature block
# MIIoRgYJKoZIhvcNAQcCoIIoNzCCKDMCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA7hVgnbuh4DhSH
# gzsHw6RVTzQRdYjg22LiLqQFS6CI66CCDXYwggX0MIID3KADAgECAhMzAAADrzBA
# DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA
# hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG
# 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN
# xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL
# go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB
# tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd
# mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ
# 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY
# 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp
# XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn
# TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT
# e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG
# OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O
# PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk
# ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx
# HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt
# CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGiYwghoiAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIFnfE1NF2ONcEt8Uz5Xu8U2+
# oaXnOm531f0scCeP72E2MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAHx+7PLsz4W05vyyOAiI3ZjeneZ3I0HGVCQQeO0+IrpVxxwu/QFsTFAoQ
# S9WOGvLX6MxeM6f6P2AzRKPJ8NlpwvNcDokDhD7Z2T5Xi2xOkJXDyHVuoo6W1q5v
# RAvWhTz2iqdyuqJpicuf1kciwCVQKdHJXG+WkWuikRI2CLVuTXjRQ541tPjV6fF5
# Q4+Jdd2NEq0JdMZc7L+4Tz21KOX4hatwybOMbCI5v9X70k0VbgbfiAj5Bhd4DnjW
# +nRFZLxnsOy8bM8eiN1obdBxar2Xfr0S1FjIVzQPszIex3TDBC1zUOS6kK2/pVwq
# wOWydFkxd9qLnWcsWmP8kJ4cgia1sKGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCC
# F5gGCSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsq
# hkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCBL7GWv9G5368wlSMDoHqx8gz1krhMARsSSyH/JggcKwAIGZut9Kno3
# GBMyMDI0MTAwOTAxMTM0OS4wNjNaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT
# Tjo2RjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# U2VydmljZaCCEf4wggcoMIIFEKADAgECAhMzAAAB/Bigr8xpWoc6AAEAAAH8MA0G
# CSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0
# MDcyNTE4MzExNFoXDTI1MTAyMjE4MzExNFowgdMxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9w
# ZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjZGMUEt
# MDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl
# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp1DAKLxpbQcPVYPHlJHy
# W7W5lBZjJWWDjMfl5WyhuAylP/LDm2hb4ymUmSymV0EFRQcmM8BypwjhWP8F7x4i
# O88d+9GZ9MQmNh3jSDohhXXgf8rONEAyfCPVmJzM7ytsurZ9xocbuEL7+P7EkIwo
# OuMFlTF2G/zuqx1E+wANslpPqPpb8PC56BQxgJCI1LOF5lk3AePJ78OL3aw/Ndlk
# vdVl3VgBSPX4Nawt3UgUofuPn/cp9vwKKBwuIWQEFZ837GXXITshd2Mfs6oYfxXE
# tmj2SBGEhxVs7xERuWGb0cK6afy7naKkbZI2v1UqsxuZt94rn/ey2ynvunlx0R6/
# b6nNkC1rOTAfWlpsAj/QlzyM6uYTSxYZC2YWzLbbRl0lRtSz+4TdpUU/oAZSB+Y+
# s12Rqmgzi7RVxNcI2lm//sCEm6A63nCJCgYtM+LLe9pTshl/Wf8OOuPQRiA+stTs
# g89BOG9tblaz2kfeOkYf5hdH8phAbuOuDQfr6s5Ya6W+vZz6E0Zsenzi0OtMf5RC
# a2hADYVgUxD+grC8EptfWeVAWgYCaQFheNN/ZGNQMkk78V63yoPBffJEAu+B5xlT
# PYoijUdo9NXovJmoGXj6R8Tgso+QPaAGHKxCbHa1QL9ASMF3Os1jrogCHGiykfp1
# dKGnmA5wJT6Nx7BedlSDsAkCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBSY8aUrsUaz
# hxByH79dhiQCL/7QdjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBf
# BgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
# L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmww
# bAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29m
# dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El
# MjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUF
# BwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAT7ss/ZAZ0bTa
# FsrsiJYd//LQ6ImKb9JZSKiRw9xs8hwk5Y/7zign9gGtweRChC2lJ8GVRHgrFkBx
# ACjuuPprSz/UYX7n522JKcudnWuIeE1p30BZrqPTOnscD98DZi6WNTAymnaS7it5
# qAgNInreAJbTU2cAosJoeXAHr50YgSGlmJM+cN6mYLAL6TTFMtFYJrpK9TM5Ryh5
# eZmm6UTJnGg0jt1pF/2u8PSdz3dDy7DF7KDJad2qHxZORvM3k9V8Yn3JI5YLPuLs
# o2J5s3fpXyCVgR/hq86g5zjd9bRRyyiC8iLIm/N95q6HWVsCeySetrqfsDyYWStw
# L96hy7DIyLL5ih8YFMd0AdmvTRoylmADuKwE2TQCTvPnjnLk7ypJW29t17Yya4V+
# Jlz54sBnPU7kIeYZsvUT+YKgykP1QB+p+uUdRH6e79Vaiz+iewWrIJZ4tXkDMmL2
# 1nh0j+58E1ecAYDvT6B4yFIeonxA/6Gl9Xs7JLciPCIC6hGdliiEBpyYeUF0ohZF
# n7NKQu80IZ0jd511WA2bq6x9aUq/zFyf8Egw+dunUj1KtNoWpq7VuJqapckYsmvm
# mYHZXCjK1Eus7V1I+aXjrBYuqyM9QpeFZU4U01YG15uWwUCaj0uZlah/RGSYMd84
# y9DCqOpfeKE6PLMk7hLnhvcOQrnxP6kwggdxMIIFWaADAgECAhMzAAAAFcXna54C
# m0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE
# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z
# b2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZp
# Y2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMy
# MjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0B
# AQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51
# yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY
# 6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9
# cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN
# 7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDua
# Rr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74
# kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2
# K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5
# TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZk
# i1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q
# BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3Pmri
# Lq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUC
# BBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJl
# pxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIB
# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y
# eS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUA
# YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw
# MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/yp
# b+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulm
# ZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM
# 9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECW
# OKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4
# FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3Uw
# xTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPX
# fx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVX
# VAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGC
# onsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU
# 5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG
# ahC0HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT
# Tjo2RjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# U2VydmljZaIjCgEBMAcGBSsOAwIaAxUATkEpJXOaqI2wfqBsw4NLVwqYqqqggYMw
# gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD
# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsF
# AAIFAOqvr74wIhgPMjAyNDEwMDgxMzE4NTRaGA8yMDI0MTAwOTEzMTg1NFowdzA9
# BgorBgEEAYRZCgQBMS8wLTAKAgUA6q+vvgIBADAKAgEAAgIaLQIB/zAHAgEAAgIU
# sjAKAgUA6rEBPgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAow
# CAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQAEAnaF4fTA
# XxZBtpscWKV1QQe1WFCg7AcIhB/9zWVZZMCwsFTuszZztk9qXqFlSeqvCaovRP2c
# 1U1r/NgBpID9fgeFizzz1IV7NX0TGgTrGqPQ7geHwE4CRXFhQKpdUBNk3Il8Y0x+
# dzvUx4IIyAViC36PkZmGRwbHYIPFaxeLJiK1ziJaUyf3m55c4m8mhX/u7RcVDiC/
# txcIDBTPc2dGj2ZSnSaQrSzEGt5zcYVX/C/tPA+PAJa/cDNW1xp3uWNQbrvfjRAD
# D7RIpOhV5gAaQ7aodtCR6gNLqu4oiGzyr2cZg5Cx8rU/rp9MzhOOPDCPo251+UEK
# Ou8SFhsjmUtJMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB
# IDIwMTACEzMAAAH8GKCvzGlahzoAAQAAAfwwDQYJYIZIAWUDBAIBBQCgggFKMBoG
# CSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgCdvk1ijp
# XC7KM9tvg1/D2wDBNL8OLagHwtEZB4+CiM8wgfoGCyqGSIb3DQEJEAIvMYHqMIHn
# MIHkMIG9BCCVQq+Qu+/h/BOVP4wweUwbHuCUhh+T7hq3d5MCaNEtYjCBmDCBgKR+
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB/Bigr8xpWoc6AAEA
# AAH8MCIEIMxYfNmHhx9iKzrkDVNqTQiVCk7BuKPik5Q9vehPX2zcMA0GCSqGSIb3
# DQEBCwUABIICACU3dSZUC6yDTN/a3YC5Nf/QTizLKjvCpRMKPi02BwBBX4FkCCXc
# xS9Kmjvsf7VuDdb+mJexwefeVdjaFQYXwM5qxmyuvPNXuIfzc0SnIX+mg1ucscY5
# ushYqe/m25grFnEpdaPLKlM36CW6aZlBL8VDZikKC0KTWcrOQrtp8h95Sw3qNfWL
# Dvk7UdCkOunueDQk3hVx2llvACI8pG/QdivxY5kPVXJxkTm7xpENFJLCO8Ji3uJx
# scdjYN8+S3S7ZqXHwgJoS7w6GZjSzDmrE8iqQfK2T9RgBmS0ZYR8t9YwC0sEwAwJ
# ra4/lOxWaL4dFXxr3kBQvRWlCLs8GYeznZ1u+ppjJmAj86NrOhfGbsZPbvj99ozN
# 2yDtxSiQ5C4XQXx1ikK3RXWXrNloU57Bul4o6VVNIvdV0bn1jNDeEiGqryFRC5bu
# DXCrnjmhgIdFsQ47pt0Hxoisw4JQnUuaNswrNKAA1NaXXSFTpPTCjs4M1m5m510P
# Eb9Mt5rLOJkJcHeVZu1kIqgR20njt0xlVgUVaj1QN5lF2tnvQuo+wUGpW+zzev6o
# vxIZLaTM7K7g+TOmwfbXWHdB7caHAVrzWMQDA2mIgfAb+5t4WJKDbeBOwTTmZIvj
# RjE2xYA+SpPRJC5jlmgMjqOHYEotaSetzgKsmgllrbUsBtcadZn6+HFr
# SIG # End signature block