AzStackHciNetwork/AzStackHciNetwork.psm1

<#############################################################
 # #
 # Copyright (C) Microsoft Corporation. All rights reserved. #
 # #
 #############################################################>

 $MetaData = @{
    "OperationType" =  @("Deployment", "AddNode", "Upgrade", "PreUpdate", "PreUpdateJIT")
    "UIName" = 'Azure Stack HCI Network'
    "UIDescription" = 'Check network requirements'
}
function Test-AzStackHciNetwork
{
    param (
        [parameter(Mandatory = $true)]
        [ValidateNotNullOrEmpty()]
        $Parameters,

        [parameter(Mandatory = $true)]
        [ValidateSet('AddNode','Deployment','Upgrade', 'PreUpdate')]
        $OperationType,

        [parameter(Mandatory = $false)]
        [ValidateSet('Small','Medium','Large')]
        [String]
        $HardwareClass = "Medium",

        [parameter(Mandatory = $false)]
        [ValidateSet('Standard','Stretch','RackAware')]
        [String]
        $ClusterPattern = "Standard",

        [parameter(Mandatory = $false)]
        [switch]
        $FailFast
    )
    try
    {
        $backupPSModuleAutoLoadingPreference = $PSModuleAutoLoadingPreference
        # Disable module auto-loading and explicitly import modules needed.
        $PSModuleAutoLoadingPreference = [System.Management.Automation.PSModuleAutoLoadingPreference]::None
        Import-Module Microsoft.PowerShell.Utility -Verbose:$false
        Import-Module Microsoft.PowerShell.Management -Verbose:$false
        Import-Module NetTCPIP -Verbose:$false
        Import-Module Hyper-V -Verbose:$false
        Import-Module NetAdapter -Verbose:$false
        Import-Module DnsClient -Verbose:$false

        # Import Module via Helper in case this is update
        [EnvironmentValidator]::EnvironmentValidatorImport($Parameters)
        $ENV:EnvChkrOp = $OperationType
        if (Get-Command -Name IsDHCPEnabled -ErrorAction SilentlyContinue)
        {
            $dhcpEnabled = IsDHCPEnabled -Parameters $Parameters
        }
        else
        {
            $dhcpEnabled = $false
        }

        Trace-Execution "DHCP Enabled (ECE): $dhcpEnabled"

        $networkRole = $Parameters.Roles["Network"].PublicConfiguration
        $mgmtNetValue = $networkRole.NetworkDefinitions.Node.Networks.Network | Where-Object { $_.Name -eq "Management"}
        $mgmtSubnetValue =  $mgmtNetValue.IPv4.Subnet

        $hostNetworkRole = $Parameters.Roles["HostNetwork"].PublicConfiguration
        $atcHostNetworkConfiguration = $hostNetworkRole.PublicInfo.ATCHostNetwork.Configuration | ConvertFrom-JSON

        $physicalMachinesPublicConfig = $Parameters.Roles["BareMetal"].PublicConfiguration
        $nodesCount = $physicalMachinesPublicConfig.Nodes.Node.Count

        [PSObject[]] $allIntentInfoForTesting = @()

        switch ($OperationType)
        {
            { $_ -in @("AddNode", "Upgrade", "PreUpdate") }
            {
                $allIntentInfoForTesting = CreateAtcHostIntentsInfoFromSystem
            }
            default
            {
                $allIntentInfoForTesting = $atcHostNetworkConfiguration.Intents

                if (($null -eq $allIntentInfoForTesting) -or ($allIntentInfoForTesting.Count -eq 0))
                {
                    # If no intents are provided in these scenarios, we will try to get info from the running system.
                    $allIntentInfoForTesting = CreateAtcHostIntentsInfoFromSystem
                }
            }
        }

        # At this point, we should have the valid intent info from ECE or the running system.
        if ($allIntentInfoForTesting.Count -eq 0)
        {
            throw "No ATC Host Intents found. Please provide ATC Host Intents in the configuration."
        }

        [PSObject[]] $storageNetworkDefinition = $atcHostNetworkConfiguration.storageNetworks

        [System.Collections.Hashtable] $storageNetworksVlanIdInfo = @{}
        foreach ($storagenetworkInfo in $storageNetworkDefinition)
        {
            $storageNetworksVlanIdInfo.Add($storagenetworkInfo.networkAdapterName, $storagenetworkInfo.VlanId)
        }

        Trace-Execution "Starting network validation for $($OperationType), detail output can be found in $($env:LocalRootFolderPath)\MASLogs\AzStackHciEnvironmentChecker*"

        $IpPools = New-Object System.Collections.ArrayList

        $ipPool = [PSCustomObject]@{
            StartingAddress = $mgmtNetValue.IPv4.StartAddress # Infra IP Pool Starting Address
            EndingAddress   = $mgmtNetValue.IPv4.EndAddress # Infra IP Pool Ending Address
        }

        $IpPools.Add($ipPool) | Out-Null

        $AdditionalInfrastructureSubnetsValue = $null
        if ($hostNetworkRole.PublicInfo.AdditionalInternalSubnets)
        {
            try
            {
                $AdditionalInfrastructureSubnetsText = $hostNetworkRole.PublicInfo.AdditionalInternalSubnets.configuration
                $AdditionalInfrastructureSubnetsValue = ConvertFrom-JSON $AdditionalInfrastructureSubnetsText -ErrorAction Stop
            }
            catch
            {
                # In case of upgrade, the parameter won't have any value in it but just a string "[AdditionalInternalSubnets]""
                Trace-Execution "Failed to parse AdditionalInfrastructureSubnets.Configuration. $_. Ignore error and continue."
            }
        }

        if ($AdditionalInfrastructureSubnetsValue)
        {
            foreach ($pool in $AdditionalInfrastructureSubnetsValue)
            {
                $ipPool = [PSCustomObject]@{
                    StartingAddress = $pool.StartingAddress # Infra IP Pool Starting Address
                    EndingAddress   = $pool.EndingAddress # Infra IP Pool Ending Address
                }

                $IpPools.Add($ipPool) | Out-Null
            }
        }

        Trace-Execution "Trying to get IP pools information"

        foreach ($ipPool in $ipPools)
        {
            $startingAddress = $ipPool.StartingAddress
            $endingAddress = $ipPool.EndingAddress
            Trace-Execution "Found pool with StartingAddress: $startingAddress EndingAddress: $endingAddress"
        }

        Trace-Execution "Starting $($OperationType) Network Validation"

        switch ($OperationType)
        {
            { $_ -in @("Deployment", "Upgrade", "PreUpdate") }
            {
                # Network Validation Checks
                [System.Boolean] $isProxyEnabled= $false
                $proxySettings = Get-ASProxySettings -Parameters $Parameters
                $isProxyEnabled = $proxySettings -and ($proxySettings.HTTP -or $proxySettings.HTTPS)

                $psSession = [EnvironmentValidator]::NewPsSessionAllHosts($Parameters)

                $ConnectionCredential = [EnvironmentValidator]::GetDomainAdminCredential($Parameters)
                $allStampNodes = [EnvironmentValidator]::GetAllHostNicIps($Parameters)
                $testNode = $allStampNodes[-1]

                Import-Module -Name Microsoft.WSMan.Management -Force -Verbose:$false -Scope Global -ErrorAction SilentlyContinue | Out-Null

                if (Test-WSMan -ComputerName $testNode -Credential $ConnectionCredential -Authentication Default -ErrorAction SilentlyContinue)
                {
                    Trace-Execution "Attempting PsSession $testNode with domain credentials"
                }
                else
                {
                    Trace-Execution "Attempting PsSession $testNode with local credentials"
                    $ConnectionCredential = [EnvironmentValidator]::GetLocalAdminCredential($Parameters)
                    if ($null -eq $ConnectionCredential)
                    {
                        throw "Unable to create a valid session to $testNode. No local admin credential found."
                    }
                }

                $param = @{
                    IpPools = $IpPools
                    ManagementSubnetValue = $mgmtSubnetValue
                    HostNetworkInfo = $atcHostNetworkConfiguration
                    ATCHostIntents = $allIntentInfoForTesting
                    ProxyEnabled = $isProxyEnabled
                    PSSession = $psSession
                    PassThru = $true
                    dhcpEnabled = $dhcpEnabled
                    OutputPath = "$($env:LocalRootFolderPath)\MASLogs\"
                    OperationType = $OperationType
                    HardwareClass = $HardwareClass
                    ClusterPattern = $ClusterPattern
                    NodesInCluster = $nodesCount
                }

                $RegistrationCloudName = $Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.RegistrationCloudName
                if ($RegistrationCloudName -ieq 'Azure.local')
                {
                    $param += @{
                        RegionName = 'AzureLocal'
                    }
                }

                [array]$Result = AzStackHci.EnvironmentChecker\Invoke-AzStackHciNetworkValidation @param

                # If this is a CI environment downgrade inbox driver test result
                if (Get-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\SQMClient -Name IsCIEnv -ErrorAction SilentlyContinue)
                {
                    Trace-Execution "CI Environment. Downgrade inbox driver result severity from CRITICAL to WARNING"
                    $Result | Where-Object Name -eq 'AzStackHci_Network_Test_AdapterDriver' | Where-Object { if ($_.Severity -eq "CRITICAL") { $_.Severity = "WARNING" } }

                    if (($ClusterPattern -eq 'RackAware') -and ((Get-WmiObject -Class Win32_ComputerSystem).Model -eq "Virtual Machine"))
                    {
                        Trace-Execution "CI Virtual RackAware Environment. Downgrade network intent result severity from CRITICAL to WARNING"
                        $Result | Where-Object Name -eq 'AzStackHci_Network_Test_NetworkIntentRequirement' | Where-Object { if ($_.Severity -eq "CRITICAL") { $_.Severity = "WARNING" } }
                    }
                }

                return [EnvironmentValidator]::ParseResult($Result, 'Network', $FailFast)
            }
            "AddNode"
            {
                # Get nodes name from runtime parameters "NodeName", which is a string separated by space
                $runtimeParameters = $Parameters.RunInformation['RuntimeParameter']

                Trace-Execution "Node to be added: $($runtimeParameters['NodeName'])"
                [System.String[]] $allNodeNamesToBeAdded = $runtimeParameters['NodeName'].Split()
                [System.Management.Automation.Runspaces.PSSession[]] $psSession =  [EnvironmentValidator]::NewPsSessionByHost($Parameters, $allNodeNamesToBeAdded, $false)

                # IpAddress is not a runtime parameter during Repair-Server run, so set the array to null
                [System.String[]] $allNodeIpAddresses = if ($runtimeParameters['IpAddress']) { $runtimeParameters['IpAddress'].Split() } else { @() }
                Trace-Execution "Node IP found: $($allNodeIpAddresses -join ', ')"

                # Add the node to the map if it's not already there
                $nodeToIPMap = Get-NetworkMgmtIPv4FromECEForAllHosts -Parameters $Parameters

                foreach ($nodeToBeAdded in $allNodeNamesToBeAdded)
                {
                    if ($nodeToBeAdded -notin $nodeToIPMap.Keys)
                    {
                        $Ipv4OrHostName = if ($allNodeIpAddresses.Count -gt 0) { $allNodeIpAddresses[$allNodeNamesToBeAdded.IndexOf($nodeToBeAdded)] } else { $null }

                        if ($dhcpEnabled -or ([string]::IsNullOrEmpty($Ipv4OrHostName)))
                        {
                            # IpAddress is not a runtime parameter during Repair-Server call, so need to get from network helper instead
                            $Ipv4OrHostName = ([EnvironmentValidator]::GetHostNicIpByName($Parameters, $nodeToBeAdded) | Select-Object -First 1)
                        }

                        $nodeToIPMap.Add($nodeToBeAdded, $Ipv4OrHostName)
                    }
                }

                # Check to see if BrownfieldUpgrade or GreenfieldDeployment
                $InstallationMethod = Get-InstallationMethod -Parameters $Parameters

                $param = @{
                    IpPools = $IpPools
                    ManagementSubnetValue = $mgmtSubnetValue
                    PSSession = $psSession
                    ATCHostIntents = $allIntentInfoForTesting
                    NodeToManagementIPMap = $nodeToIPMap
                    PassThru = $true
                    dhcpEnabled = $dhcpEnabled
                    OutputPath = "$($env:LocalRootFolderPath)\MASLogs\"
                    OperationType = $OperationType
                    HardwareClass = $HardwareClass
                    ClusterPattern = $ClusterPattern
                    InstallationMethod = $InstallationMethod
                    NodesInCluster = $nodesCount
                }

                $RegistrationCloudName = $Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.RegistrationCloudName
                if ($RegistrationCloudName -ieq 'Azure.local')
                {
                    $param += @{
                        RegionName = 'AzureLocal'
                    }
                }

                [array]$Result = AzStackHci.EnvironmentChecker\Invoke-AzStackHciNetworkValidation @param

                # If this is a CI environment downgrade inbox driver test result
                if (Get-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\SQMClient -Name IsCIEnv -ErrorAction SilentlyContinue)
                {
                    Trace-Execution "CI Environment. Downgrade inbox driver result severity from CRITICAL to WARNING"
                    $Result | Where-Object Name -eq 'AzStackHci_Network_Test_AdapterDriver' | Where-Object { if ($_.Severity -eq "CRITICAL") { $_.Severity = "WARNING" } }
                }

                return ([EnvironmentValidator]::ParseResult($Result, 'Network', $FailFast))
            }
            default
            {
                Trace-Execution "No interface found for $OperationType"
            }
        }
    }
    catch
    {
        Trace-Execution "Validator failed. $_"
        Trace-Execution "$($_.ScriptStackTrace)"
        throw $_
    }
    finally
    {
        if ($backupPSModuleAutoLoadingPreference)
        {
            $PSModuleAutoLoadingPreference = $backupPSModuleAutoLoadingPreference
        }
        $PsSession | Microsoft.PowerShell.Core\Remove-PSSession -ErrorAction SilentlyContinue
    }
}

function CreateAtcHostIntentsInfoFromSystem
{
    Import-Module -Name NetworkATC -Force -Verbose:$false -Scope Global -ErrorAction SilentlyContinue | Out-Null

    [PSObject[]] $atcHostIntents = Get-NetIntent
    [PSObject[]] $allIntentInfo = @()

    foreach ($intent in $atcHostIntents)
    {
        [PSObject] $currentIntentInfo = New-Object PSObject
        $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "Name" -Value $intent.IntentName

        [String[]] $currentIntentType = @()
        if ($intent.IsManagementIntentSet)
        {
            $currentIntentType += "Management"
        }
        if ($intent.IsStorageIntentSet)
        {
            $currentIntentType += "Storage"
        }
        if ($intent.IsComputeIntentSet)
        {
            $currentIntentType += "Compute"
        }
        $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "TrafficType" -Value $currentIntentType
        $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "Adapter" -Value $intent.NetAdapterNamesAsList

        # Check if the intent has any overrides, note that we only convert the overrides that we supported right now
        if (($null -ne $intent.AdapterAdvancedParametersOverride.NetworkDirect) -or ($null -ne $intent.AdapterAdvancedParametersOverride.JumboPacket))
        {
            [PSObject] $tempAdapterOverride = New-Object PSObject

            if ($null -ne $intent.AdapterAdvancedParametersOverride.JumboPacket)
            {
                $tempAdapterOverride | Add-Member -MemberType NoteProperty -Name "JumboPacket" -Value $intent.AdapterAdvancedParametersOverride.JumboPacket
            }
            else
            {
                $tempAdapterOverride | Add-Member -MemberType NoteProperty -Name "JumboPacket" -Value $null
            }

            if ($null -ne $intent.AdapterAdvancedParametersOverride.NetworkDirect)
            {

                $tempAdapterOverride | Add-Member -MemberType NoteProperty -Name "NetworkDirect" -Value $intent.AdapterAdvancedParametersOverride.NetworkDirect
            }
            else
            {
                $tempAdapterOverride | Add-Member -MemberType NoteProperty -Name "NetworkDirect" -Value $null
            }

            if ($null -ne $intent.AdapterAdvancedParametersOverride.NetworkDirectTechnology)
            {
                $tempAdapterOverride | Add-Member -MemberType NoteProperty -Name "NetworkDirectTechnology" -Value $intent.AdapterAdvancedParametersOverride.NetworkDirectTechnology
            }
            else
            {
                $tempAdapterOverride | Add-Member -MemberType NoteProperty -Name "NetworkDirectTechnology" -Value $null
            }

            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "AdapterPropertyOverrides" -Value $tempAdapterOverride
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "OverrideAdapterProperty" -Value $true
        }
        else
        {
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "AdapterPropertyOverrides" -Value $null
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "OverrideAdapterProperty" -Value $false
        }

        if (($null -ne $intent.QosPolicyOverride.PriorityValue8021Action_SMB) -or ($null -ne $intent.QosPolicyOverride.PriorityValue8021Action_Cluster) -or ($null -ne $intent.QosPolicyOverride.BandwidthPercentage_SMB))
        {
            [PSObject] $tempQosOverride = New-Object PSObject

            if ($null -ne $intent.QosPolicyOverride.PriorityValue8021Action_SMB)
            {
                $tempQosOverride | Add-Member -MemberType NoteProperty -Name "PriorityValue8021Action_SMB" -Value $intent.QosPolicyOverride.PriorityValue8021Action_SMB
            }
            else
            {
                $tempQosOverride | Add-Member -MemberType NoteProperty -Name "PriorityValue8021Action_SMB" -Value $null
            }

            if ($null -ne $intent.QosPolicyOverride.PriorityValue8021Action_Cluster)
            {
                $tempQosOverride | Add-Member -MemberType NoteProperty -Name "PriorityValue8021Action_Cluster" -Value $intent.QosPolicyOverride.PriorityValue8021Action_Cluster
            }
            else
            {
                $tempQosOverride | Add-Member -MemberType NoteProperty -Name "PriorityValue8021Action_Cluster" -Value $null
            }

            if ($null -ne $intent.QosPolicyOverride.BandwidthPercentage_SMB)
            {
                $tempQosOverride | Add-Member -MemberType NoteProperty -Name "BandwidthPercentage_SMB" -Value $intent.QosPolicyOverride.BandwidthPercentage_SMB
            }
            else
            {
                $tempQosOverride | Add-Member -MemberType NoteProperty -Name "BandwidthPercentage_SMB" -Value $null
            }

            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "QoSPolicyOverrides" -Value $tempQosOverride
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "OverrideQoSPolicy" -Value $true
        }
        else
        {
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "QoSPolicyOverrides" -Value $null
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "OverrideQoSPolicy" -Value $false
        }

        if (($null -ne $intent.SwitchConfigOverride.EnableIov) -or ($null -ne $intent.SwitchConfigOverride.LoadBalancingAlgorithm))
        {
            [PSObject] $tempVMSwitchOverride = New-Object PSObject

            if ($null -ne $intent.SwitchConfigOverride.EnableIov)
            {
                $tempVMSwitchOverride | Add-Member -MemberType NoteProperty -Name "EnableIov" -Value $intent.SwitchConfigOverride.EnableIov
            }
            else
            {
                $tempVMSwitchOverride | Add-Member -MemberType NoteProperty -Name "EnableIov" -Value $null
            }

            if ($null -ne $intent.SwitchConfigOverride.LoadBalancingAlgorithm)
            {
                $tempVMSwitchOverride | Add-Member -MemberType NoteProperty -Name "LoadBalancingAlgorithm" -Value $intent.SwitchConfigOverride.LoadBalancingAlgorithm
            }
            else
            {
                $tempVMSwitchOverride | Add-Member -MemberType NoteProperty -Name "LoadBalancingAlgorithm" -Value $null
            }

            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "VirtualSwitchConfigurationOverrides" -Value $tempVMSwitchOverride
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "OverrideVirtualSwitchConfiguration" -Value $true
        }
        else
        {
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "VirtualSwitchConfigurationOverrides" -Value $null
            $currentIntentInfo | Add-Member -MemberType NoteProperty -Name "OverrideVirtualSwitchConfiguration" -Value $false
        }

        $allIntentInfo += $currentIntentInfo
    }

    return $allIntentInfo
}

Export-ModuleMember -Function Test-AzStackHciNetwork -Variable MetaData
# SIG # Begin signature block
# MIIoRgYJKoZIhvcNAQcCoIIoNzCCKDMCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDnfuctEcRoz7Uk
# FgsmyFFEtbG2d0rT3cR7yC/oq2+gPqCCDXYwggX0MIID3KADAgECAhMzAAAEhV6Z
# 7A5ZL83XAAAAAASFMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM3WhcNMjYwNjE3MTgyMTM3WjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDASkh1cpvuUqfbqxele7LCSHEamVNBfFE4uY1FkGsAdUF/vnjpE1dnAD9vMOqy
# 5ZO49ILhP4jiP/P2Pn9ao+5TDtKmcQ+pZdzbG7t43yRXJC3nXvTGQroodPi9USQi
# 9rI+0gwuXRKBII7L+k3kMkKLmFrsWUjzgXVCLYa6ZH7BCALAcJWZTwWPoiT4HpqQ
# hJcYLB7pfetAVCeBEVZD8itKQ6QA5/LQR+9X6dlSj4Vxta4JnpxvgSrkjXCz+tlJ
# 67ABZ551lw23RWU1uyfgCfEFhBfiyPR2WSjskPl9ap6qrf8fNQ1sGYun2p4JdXxe
# UAKf1hVa/3TQXjvPTiRXCnJPAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUuCZyGiCuLYE0aU7j5TFqY05kko0w
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwNTM1OTAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBACjmqAp2Ci4sTHZci+qk
# tEAKsFk5HNVGKyWR2rFGXsd7cggZ04H5U4SV0fAL6fOE9dLvt4I7HBHLhpGdE5Uj
# Ly4NxLTG2bDAkeAVmxmd2uKWVGKym1aarDxXfv3GCN4mRX+Pn4c+py3S/6Kkt5eS
# DAIIsrzKw3Kh2SW1hCwXX/k1v4b+NH1Fjl+i/xPJspXCFuZB4aC5FLT5fgbRKqns
# WeAdn8DsrYQhT3QXLt6Nv3/dMzv7G/Cdpbdcoul8FYl+t3dmXM+SIClC3l2ae0wO
# lNrQ42yQEycuPU5OoqLT85jsZ7+4CaScfFINlO7l7Y7r/xauqHbSPQ1r3oIC+e71
# 5s2G3ClZa3y99aYx2lnXYe1srcrIx8NAXTViiypXVn9ZGmEkfNcfDiqGQwkml5z9
# nm3pWiBZ69adaBBbAFEjyJG4y0a76bel/4sDCVvaZzLM3TFbxVO9BQrjZRtbJZbk
# C3XArpLqZSfx53SuYdddxPX8pvcqFuEu8wcUeD05t9xNbJ4TtdAECJlEi0vvBxlm
# M5tzFXy2qZeqPMXHSQYqPgZ9jvScZ6NwznFD0+33kbzyhOSz/WuGbAu4cHZG8gKn
# lQVT4uA2Diex9DMs2WHiokNknYlLoUeWXW1QrJLpqO82TLyKTbBM/oZHAdIc0kzo
# STro9b3+vjn2809D0+SOOCVZMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGiYwghoiAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAASFXpnsDlkvzdcAAAAABIUwDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIDF/zlsmjV6+hTXAUzlJ32Wk
# NNobp/+U0vze04EpGhTbMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAKrLNfr1vg30U/UP9BhU0OYEgYRZdfOuPsMQTLzDWrByHsL0WwKaAxB6e
# HyaLkVZ5ZUUwN1PRVb0Jy0+4xK2b/Qqlszly3TiLkC06Z/LxAhThLrYnvDEBbEWd
# UQuxOhkKNxXf1kDVLPynBD5JhxsQFp/3nCUUASdndIpwzM7lqK53PqhW+CiqCdfB
# 7kyT9fA7uc4VIoo9TM6tnh5pUBHFQPX+WaDuQ18GoXpOod15G76NObXcB7voO+qV
# F6Q8AFMebmsS2rxM4IZlLu+ogEQlwTG85ESdxdAkSqujhNeTmMbE0OX+4soXjd6q
# Cf6g6Cw+ORM5bIUZ0rgcvwre2y94rKGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCC
# F5gGCSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsq
# hkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCDkLDJ/HuQd9ZFFGc6+g66Snqtk3idymbETazinjlXLKgIGaKSi6gN6
# GBMyMDI1MDkwOTE5MjIwMy4zMDRaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT
# Tjo2RjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# U2VydmljZaCCEf4wggcoMIIFEKADAgECAhMzAAAB/Bigr8xpWoc6AAEAAAH8MA0G
# CSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0
# MDcyNTE4MzExNFoXDTI1MTAyMjE4MzExNFowgdMxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9w
# ZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjZGMUEt
# MDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl
# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp1DAKLxpbQcPVYPHlJHy
# W7W5lBZjJWWDjMfl5WyhuAylP/LDm2hb4ymUmSymV0EFRQcmM8BypwjhWP8F7x4i
# O88d+9GZ9MQmNh3jSDohhXXgf8rONEAyfCPVmJzM7ytsurZ9xocbuEL7+P7EkIwo
# OuMFlTF2G/zuqx1E+wANslpPqPpb8PC56BQxgJCI1LOF5lk3AePJ78OL3aw/Ndlk
# vdVl3VgBSPX4Nawt3UgUofuPn/cp9vwKKBwuIWQEFZ837GXXITshd2Mfs6oYfxXE
# tmj2SBGEhxVs7xERuWGb0cK6afy7naKkbZI2v1UqsxuZt94rn/ey2ynvunlx0R6/
# b6nNkC1rOTAfWlpsAj/QlzyM6uYTSxYZC2YWzLbbRl0lRtSz+4TdpUU/oAZSB+Y+
# s12Rqmgzi7RVxNcI2lm//sCEm6A63nCJCgYtM+LLe9pTshl/Wf8OOuPQRiA+stTs
# g89BOG9tblaz2kfeOkYf5hdH8phAbuOuDQfr6s5Ya6W+vZz6E0Zsenzi0OtMf5RC
# a2hADYVgUxD+grC8EptfWeVAWgYCaQFheNN/ZGNQMkk78V63yoPBffJEAu+B5xlT
# PYoijUdo9NXovJmoGXj6R8Tgso+QPaAGHKxCbHa1QL9ASMF3Os1jrogCHGiykfp1
# dKGnmA5wJT6Nx7BedlSDsAkCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBSY8aUrsUaz
# hxByH79dhiQCL/7QdjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBf
# BgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
# L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmww
# bAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29m
# dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El
# MjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUF
# BwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAT7ss/ZAZ0bTa
# FsrsiJYd//LQ6ImKb9JZSKiRw9xs8hwk5Y/7zign9gGtweRChC2lJ8GVRHgrFkBx
# ACjuuPprSz/UYX7n522JKcudnWuIeE1p30BZrqPTOnscD98DZi6WNTAymnaS7it5
# qAgNInreAJbTU2cAosJoeXAHr50YgSGlmJM+cN6mYLAL6TTFMtFYJrpK9TM5Ryh5
# eZmm6UTJnGg0jt1pF/2u8PSdz3dDy7DF7KDJad2qHxZORvM3k9V8Yn3JI5YLPuLs
# o2J5s3fpXyCVgR/hq86g5zjd9bRRyyiC8iLIm/N95q6HWVsCeySetrqfsDyYWStw
# L96hy7DIyLL5ih8YFMd0AdmvTRoylmADuKwE2TQCTvPnjnLk7ypJW29t17Yya4V+
# Jlz54sBnPU7kIeYZsvUT+YKgykP1QB+p+uUdRH6e79Vaiz+iewWrIJZ4tXkDMmL2
# 1nh0j+58E1ecAYDvT6B4yFIeonxA/6Gl9Xs7JLciPCIC6hGdliiEBpyYeUF0ohZF
# n7NKQu80IZ0jd511WA2bq6x9aUq/zFyf8Egw+dunUj1KtNoWpq7VuJqapckYsmvm
# mYHZXCjK1Eus7V1I+aXjrBYuqyM9QpeFZU4U01YG15uWwUCaj0uZlah/RGSYMd84
# y9DCqOpfeKE6PLMk7hLnhvcOQrnxP6kwggdxMIIFWaADAgECAhMzAAAAFcXna54C
# m0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE
# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z
# b2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZp
# Y2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMy
# MjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0B
# AQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51
# yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY
# 6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9
# cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN
# 7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDua
# Rr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74
# kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2
# K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5
# TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZk
# i1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q
# BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3Pmri
# Lq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUC
# BBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJl
# pxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIB
# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y
# eS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUA
# YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw
# MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/yp
# b+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulm
# ZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM
# 9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECW
# OKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4
# FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3Uw
# xTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPX
# fx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVX
# VAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGC
# onsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU
# 5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG
# ahC0HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT
# Tjo2RjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# U2VydmljZaIjCgEBMAcGBSsOAwIaAxUATkEpJXOaqI2wfqBsw4NLVwqYqqqggYMw
# gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD
# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsF
# AAIFAOxqzvkwIhgPMjAyNTA5MDkxNjA2MTdaGA8yMDI1MDkxMDE2MDYxN1owdzA9
# BgorBgEEAYRZCgQBMS8wLTAKAgUA7GrO+QIBADAKAgEAAgIr0AIB/zAHAgEAAgIS
# ejAKAgUA7GwgeQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAow
# CAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQAVprqUrZxJ
# gwzdg7MSmxboY57Y0ZX6UWrZTiLC312/FJi+ce+6jNCmbogA2006C4obY1WPfRvM
# P/pGkFxY797cWRIkBha7SBcIhTxgb3sNegFh1PbWJKjtRcpfhhaCu2hBfgd4OFC4
# dAegUrmsoMbSpnWe8xwCK3NIf6KllT7e0LwE1U/nLEnEq1e5G9sfW0GY46kKrSaU
# 9pVinhLn9xxhhmTAin66F91dZyrY8vdqGcN7kaYV240dpucE1bHvOAq7DYeFsGy7
# T+GizLksOe9yYiS+7G1/8wZDTd6BCRGjXHZO563lEtBCoeYvMrevcUbEAqgOJItD
# E4+G4pSSInaxMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB
# IDIwMTACEzMAAAH8GKCvzGlahzoAAQAAAfwwDQYJYIZIAWUDBAIBBQCgggFKMBoG
# CSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQglvrEDGBs
# qS+QIGpWEWJWlypVQOmthtleIIoZbuew8fAwgfoGCyqGSIb3DQEJEAIvMYHqMIHn
# MIHkMIG9BCCVQq+Qu+/h/BOVP4wweUwbHuCUhh+T7hq3d5MCaNEtYjCBmDCBgKR+
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB/Bigr8xpWoc6AAEA
# AAH8MCIEIEPJ8oQfJnY6HiQkEqo9my338xaO3c968u20P285iTtnMA0GCSqGSIb3
# DQEBCwUABIICAGIK1Pg3JrOGLU5WVQVf0A+QO5yi/plBBNrBLaFjK/CkZFYRqWGH
# /0q1N7SWnsx7F1P1o6T3mUJm99wi4zhWG9p9lTOcH8c43Y8aXRxQPeCucnaX2Rcx
# bIzUUK9nM+/3XLKVhixu/jLFrcOq6o7V20WJMxnvPN9lTMPBfLS9oP+JLZwkINwl
# d79vQsgX52KALCkLanMg6NfA6ZFKikSPGafweBsYToHdPrwK3hEdvhs/SU3mVCoZ
# 3EQnyOH8XIqVk7mv1sgEDu/DodozOLxOrKNHchVyG4Sn6oYErdD6k0sG+0GgUCWh
# 7AtAspUbaYazUsmueR8qIaIuESpl0mM6WfzAfu1N3HZjNajSkQqX52zdTgoW+MKf
# jTHds1yQZA2FQ058kmTKKXWI1Am1128tJTTl9sCSxUCxLl3BHYaDybkAX4kwod5e
# 6pd6ncsK79Pd0pqKSeABMj+q9UOFoUytOug1dsTgHHis88oASAjrJN03VpWZSbcY
# BiNI9XYLTjKbQFRJ8/MJQ9hbzH9p0VNwdh1cCQN8pnDpL9Qaq5rJ5yHjbzme5YLo
# TJj5UChzOwlSdVZz6GDU27Ot4enpBmynmgt2vfSG/OK5Pw1b0DU2JfDYuopRMUPk
# Tx3ux9a5rifU8bYOvSxDaddxpCCFHlwTEmKLVuFRHpmo99tzROYwGg92
# SIG # End signature block