M365Documentation

3.7.0

Functions/New-M365DocAppRegistration.ps1

                                Function New-M365DocAppRegistration(){

    <#

    .DESCRIPTION

    This script will create an App registration (WPNinjas.eu Automatic Documentation) in Azure AD. Global Admin privileges are required during execution of this function. Afterwards the created client secret can be used to execute the documentation silently.

    Both Microsoft Graph delegated and application permissions are requested when available.

    Application roles are granted for app-only authentication; delegated permissions require separate consent.

    Existing registrations are not updated. For registrations created before 3.7.0, add and grant admin consent for

    User.Read.All, AuditLog.Read.All and Policy.Read.PermissionGrant as application permissions.

    Permissions that resolve only as delegated are reported and cannot be used by app-only tokens.

    Acquire a new token after granting consent.

    .EXAMPLE

    $p = New-M365DocAppRegistration

    $p | fl

    ClientID               : d5cf6364-82f7-4024-9ac1-73a9fd2a6ec3

    ClientSecret           : S03AESdMlhLQIPYYw/cYtLkGkQS0H49jXh02AS6Ek0U=

    ClientSecretExpiration : 21.07.2025 21:39:02

    TenantId               : d873f16a-73a2-4ccf-9d36-67b8243ab99a

    .NOTES

    Author: Thomas Kurth/baseVISION

    Date:   21.7.2020

    History

        See Release Notes in Github.

    #>

    [CmdletBinding(SupportsShouldProcess, ConfirmImpact='Medium')]

    Param(

        [string]

        $displayName = "WPNinjas.eu Automatic Documentation Custom"

    )

    #region Initialization

    ########################################################

    $AzureAD = Get-Module -Name Microsoft.Graph.Authentication

    if($AzureAD){

        Write-Verbose -Message "Microsoft.Graph.Authentication module is loaded."

    } else {

        Write-Warning -Message "Microsoft.Graph.Authentication module is not loaded, please install by 'Install-Module Microsoft.Graph.Authentication'."

    }

    $AzureAD2 = Get-Module -Name Microsoft.Graph.Applications

    if($AzureAD2){

        Write-Verbose -Message "Microsoft.Graph.Applications module is loaded."

    } else {

        Write-Warning -Message "Microsoft.Graph.Applications module is not loaded, please install by 'Install-Module Microsoft.Graph.Applications'."

    }

    #region Authentication

    try{

        Get-MgContract -ErrorAction Stop | Out-Null

    } catch {

        Connect-MgGraph -Scopes "Application.ReadWrite.All"

    }

    #endregion

    #region Main Script

    ########################################################

    $appPermissionsRequired = @("AccessReview.Read.All","Agreement.Read.All","AgentCommunicationConfiguration.ReadWrite.All","AgentIdentityBlueprint.Read.All","AppCatalog.Read.All","Application.Read.All","AuditLog.Read.All","CloudPC.Read.All","ConsentRequest.Read.All","Device.Read.All","DeviceManagementApps.Read.All","DeviceManagementConfiguration.Read.All","DeviceManagementManagedDevices.Read.All","DeviceManagementRBAC.Read.All","DeviceManagementServiceConfig.Read.All","Directory.Read.All","Domain.Read.All","EntitlementManagement.Read.All","Organization.Read.All","Policy.Read.All","Policy.Read.PermissionGrant","Policy.ReadWrite.AuthenticationMethod","Policy.ReadWrite.FeatureRollout","PrintConnector.Read.All","Printer.Read.All","PrinterShare.Read.All","PrintSettings.Read.All","PrivilegedAccess.Read.AzureAD","PrivilegedAccess.Read.AzureADGroup","PrivilegedAccess.Read.AzureResources","User.Read.All" ,"IdentityProvider.Read.All","InformationProtectionPolicy.Read","InformationProtectionPolicy.Read.All","PrivilegedEligibilitySchedule.Read.AzureADGroup","RoleEligibilitySchedule.Read.Directory"  )

    $appPermissionsRequiredResolved = @(Find-MgGraphPermission -All -PermissionType Any -Online -ErrorAction Stop | Select-Object Name, PermissionType, Id | Where-Object { $_.Name -in $appPermissionsRequired } | Sort-Object -Property Name)

    $missingPermissions = @($appPermissionsRequired | Where-Object { $_ -notin $appPermissionsRequiredResolved.Name })

    if($missingPermissions.Count -gt 0){

        throw "Unable to resolve required Microsoft Graph permissions: $($missingPermissions -join ', '). Update Microsoft.Graph.Authentication and retry."

    }

    $applicationPermissions = @($appPermissionsRequiredResolved | Where-Object { $_.PermissionType -eq "Application" })

    $delegatedOnlyPermissions = @($appPermissionsRequired | Where-Object { $_ -notin $applicationPermissions.Name })

    if($delegatedOnlyPermissions.Count -gt 0){

        Write-Warning "The following Microsoft Graph permissions resolved only as delegated: $($delegatedOnlyPermissions -join ', '). App-only tokens cannot use these permissions."

    }

    if (!(Get-MgApplication | Where-Object {$_.DisplayName -eq $displayName})) {

        $app = New-MgApplication -DisplayName $displayName -SignInAudience "AzureADMyOrg" -Web @{ RedirectUris="urn:ietf:wg:oauth:2.0:oob"; }

        $RequiredResourceAccessArray = @($appPermissionsRequiredResolved | ForEach-Object {

            $permissionType = if($_.PermissionType -eq "Application"){ "Role" } else { "Scope" }

            @{

                Id = $_.Id

                Type = $permissionType

            }

        })

        Update-MgApplication -ApplicationId $app.Id -RequiredResourceAccess @{

            ResourceAppId = "00000003-0000-0000-c000-000000000000"

            ResourceAccess = $RequiredResourceAccessArray

        }

        # create SPN for App Registration

        Write-Debug ('Creating SPN for App Registration {0}' -f $displayName)

        $graphSpId = $(Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'").Id

        $sp = New-MgServicePrincipal -AppId $app.appId

        $applicationPermissions | ForEach-Object {

            New-MgServicePrincipalAppRoleAssignment -ServicePrincipalId $sp.Id -PrincipalId $sp.Id -AppRoleId $_.Id -ResourceId $graphSpId -ErrorAction Stop

        }

        # create a password (spn key)

        $cred = Add-MgApplicationPassword -ApplicationId $app.id

    } else {

        Write-Debug ('App Registration {0} already exists' -f $displayName)

    }

    #endregion

    #region Finishing

    ########################################################

    [PSCustomObject]@{

        ClientID = $app.AppId

        ClientSecret = $cred.secretText

        ClientSecretExpiration = $cred.EndDateTime

        TenantId = $($(Get-MgContext).TenantId)

    }

    Write-Warning "Please close the Powershell session and reopen it. Otherwise the connection may fail."

    #endregion

}

# SIG # Begin signature block

# MIIoaQYJKoZIhvcNAQcCoIIoWjCCKFYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAmjfdiWZ8dgbVL

# Vj49wIKuJXFI67Dm7DsW4UdAOsQONaCCIWYwggWNMIIEdaADAgECAhAOmxiO+dAt

# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV

# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa

# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E

# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy

# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF

# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1

# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB

# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR

# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6

# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB

# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S

# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x

# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB

# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP

# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC

# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp

# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB

# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc

# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov

# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy

# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW

# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF

# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z

# twGpn1eqXijiuZQwggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0GCSqG

# SIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMx

# GTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRy

# dXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTlaMGkx

# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4

# RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEzODQg

# MjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C0Cit

# eLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce2vnS

# 1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0daE6ZM

# swEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6TSXBC

# Mo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoAFdE3

# /hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7OhD26j

# q22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM1bL5

# OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z8ujo

# 7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05huzU

# tw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNYmtwm

# KwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP/2NP

# TLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0TAQH/

# BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYDVR0j

# BBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1Ud

# JQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0

# cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0

# cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8E

# PDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVz

# dGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATANBgkq

# hkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95RysQDK

# r2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HLIvda

# qpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5BtfQ/g+

# lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnhOE7a

# brs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIhdXNS

# y0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV9zeK

# iwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/jwVYb

# KyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYHKi8Q

# xAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmCXBVm

# zGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l/aCn

# HwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZWeE4w

# gga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmGMA0GCSqGSIb3DQEBCwUAMGIx

# CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3

# dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBH

# NDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5NTlaMGkxCzAJBgNVBAYTAlVT

# MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1

# c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0eDHTCphBcr48RsAcrHXbo0Zo

# dLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+RuwOnPhof6pvF4uGjwjqNjfEvUi

# 6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4Bt0mAxAHeHYNnQxqXmRinvuNg

# xVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1UkxBvMgEdgkFiDNYiOTx4OtiF

# cMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTcaarps0wjUjsZvkgFkriK9tUKJ

# m/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zbCclF83bRVFLeGkuAhHiGPMvS

# GmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnGpTXiUOeSLsJygoLPp66bkDX1

# ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/AMOMCZIVNSaz7BX8VtYGqLt9

# MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v5ydPpOjL6s36czwzsucuoKs7

# Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoiwOrUG2ZdSoQbU2rMkpLiQ6bG

# RinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm2qA+sdFUeEY0qVjPKOWug/G6

# X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAd

# BgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04wHwYDVR0jBBgwFoAU7NfjgtJx

# XWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF

# BwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln

# aWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j

# b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJo

# dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNy

# bDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQEL

# BQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Qh8WIGjB/T8ObXAZz8OjuhUxj

# aaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3YTj+IQhQE7jU/kXjjytJgnn0

# hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQwr8Myb9rEVKChHyfpzee5kH0

# F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/wdG2th9y1IsA0QF8dTXqvcnT

# mpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81hjajV/gxdEkMx1NKU4uHQcKf

# ZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00TYr2Lr3ty9qIijanrUR3anzE

# wlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNjqFzeGxcytL5TTLL4ZaoBdqbh

# OhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0cuJG7uEBYTptMSbhdhGQDpOX

# gpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9sC+NJpud/v4+7RWsWCiKi9EO

# LLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0LckTetiSuEtQvLsNz3Qbp7wG

# WqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2tszWkPZPubdcMIIG7TCCBNWg

# AwIBAgIQCE/cM09+RU7bww+P+ZIYNTANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQG

# EwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0

# IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0Ex

# MB4XDTI2MDgwNTAwMDAwMFoXDTM3MTEwNDIzNTk1OVowYzELMAkGA1UEBhMCVVMx

# FzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdpQ2VydCBTSEEy

# NTYgUlNBNDA5NiBUaW1lc3RhbXAgUmVzcG9uZGVyIDIwMjYgMTCCAiIwDQYJKoZI

# hvcNAQEBBQADggIPADCCAgoCggIBALZ7pvLJ/s1K+NSbTGWz/TjGMPh8CQ6RucZC

# Lv5anHzWJjF/NWJrFIhy24fcpKXlgRiky4WAawDfU3YP0BMxt9l3Dm5oCG5Z69Aq

# EN1kgHg2epx+l+lZBcmJCcN0ASURML5uFIS80sZsDwO3BSkUxDjLJhBI+qiZP3ai

# xAC/qEGLjsBNlLol9VZ7pfGEXiMlneJIC5/YKuizVzNFKZZEeoy/0B8Zm+nzKBgS

# WG52lCO1w+nCg6XpCtklTJXeIg283hw7TmmsZXR+SMbjbrEOvZ3fP2VxIgeR28Y9

# 0ZStd3F9VuA5RVynb/whITPAo9b75Zr4Ta6Mj3URm26QZYMn/FnbuTegcoRcFEZ9

# FOqM5T6MTdtr/n74lIT/ug0eeOzmZ6QTFg33otX+bFRsIolvykE1jive4PuESaT8

# zzVeFWDAMDtozNgLctkGD1ZjkEyZtJrLl5ya0m5doH/ScpaZCZVl6pNUOCybMc/k

# xC6EAmSJY24L0yYKD1Nkddsnb/ItVKi/2nXpQNMu1PT5prW83vV8d67WowuUs0Hd

# Y4H8AMLGvdL/WHEj3ZnqMqAQQP9u3Ai9t+5eQ02GDwy0ODjdzi0xlp70W+ow63/0

# ++YDEX1M0iwgUHwbrJvfpklkZQvw3+kv3vUPItdwroczk9icflf55W1zOEKAcJVA

# IXpcMCU9AgMBAAGjggGVMIIBkTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQUyWOK

# MC7USvtulPPm40B+9ezN4jAfBgNVHSMEGDAWgBTvb1NK6eQGfHrK4pBW9i/USezL

# TjAOBgNVHQ8BAf8EBAMCB4AwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwgZUGCCsG

# AQUFBwEBBIGIMIGFMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j

# b20wXQYIKwYBBQUHMAKGUWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp

# Q2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNy

# dDBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln

# aUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5j

# cmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEB

# CwUAA4ICAQCNxTphHp1SCt+ZrAmAfn0oQLFr0mLywSLaDXQIENoyKqxrFbJblzCV

# P/pkXmwXOdrOpWygLzlT12os5ipDCy35RBCg2UMeApEtrfGhz45F4Wt4WGdNdIbR

# Wt3YTYJmpR+b7lr4d7Uwn+H600u4D7RnOGf8Wj4UNgAdZkfHhHv1mx9EVh71SJel

# cEN/oORSjXzdjfw1iZH9d8Nh/thn6hH23d+VsPAr6GAYyzSA02nXD1nYLI7Ijmiv

# +xLCiYC41DSFYL3GhTiy0PxpawPtGRyaBVGzq+UiTfM8pD7KVyF5aQyWP4KhVGUU

# Tnmm/RlYJoW3TiXA/+t0YcT2oRVBm3JETjajHug2AL+v5jhtKVnd3D0rbHXEu27o

# +Q8p4sEWPMqKDB+qbceb6T/6WcwTwXmQ9lOCLLYcsQeSWmvKqzpAec9etE14jOQA

# zLKWdE3w/TCaKtLRaRT7LCkRYVnhA2D73FLje1O5b3HR5eHs0NzU/+xX7NbEdcof

# y0W3Wdwd1XOqtlpg/JgwtKfZM5dqO94lbUveOiJBI+xZEbGRsMNbXmMREUTgu+Oc

# a7Y73MPWcslIx2VhkSKSXjDbD6rgg39H5Mh7QfieAIjWagkJNt68Yfim6cjEzVSi

# LSeZfdkr5dtFPTW6jATlWJdYeeDRGCyatf8R1hSjzSvdN8yWQPT9gzCCB3QwggVc

# oAMCAQICEATxuaBOthmGPBQf/T19vOkwDQYJKoZIhvcNAQELBQAwaTELMAkGA1UE

# BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2Vy

# dCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENB

# MTAeFw0yMzEwMDkwMDAwMDBaFw0yNjExMjAyMzU5NTlaMHwxCzAJBgNVBAYTAkNI

# MRIwEAYDVQQIEwlTb2xvdGh1cm4xDjAMBgNVBAcTBU9sdGVuMRYwFAYDVQQKEw1i

# YXNlVklTSU9OIEFHMRkwFwYDVQQLExBJbnRlcm5hbCBTY3JpcHRzMRYwFAYDVQQD

# Ew1iYXNlVklTSU9OIEFHMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# ufaKcpNEghlaO8FJ9JxMxyWtjYDMzK6NEc/2Ey9j3eDKs5MtSDaH6jCZwVIoy0gh

# VM7qQp4mDq7VxTy+LF+EvKOUZ7cBFAM9BF+e0r7Wypq0zloEBB//7YJcnqgwzdco

# Fb2tv1NeVwgE5hzbjpp9ZGtp+WOr0PiDQT7uI7WHMz7CjyeZyBf06wkntnwneuKy

# N3XLzWnbJbwGR0ku+uWZyxni/IqO6Aif+r5fdOed2giizFVrDPJRZ8tu9od+DmAJ

# 7B8Am5Ki3EnxlEyHL3oOolignkrZlt+TyFDAOGyA2f1wV+3MhYCngGDIl+sjcQIB

# A8ObAULMU27iFgdtWmPc5NanibHRkUdXgXnWczMFmpTBnbwJV5CJGMDwBtSU8Tnb

# edOmpF6iIh+nKbxLEOVF90WPrG86rp6ou4BjHz+djua9GO/W3R3HmGCspMl53+r8

# 74zx+B01QRA78JDKdENaa6W9VOICHtZ8s1CISrjw7dvI45cmwopIBivVweCo5OXm

# r1eBcKFbsH2wtGdoO5h12aW7yXEm0sqYMWHRsN/DXgCbW5Aq7o1v7CSNpcSZW+wB

# Ncf9surdMLzwT6vbo3GwqbSxrjeLbHOinn9cV9e2ROA4E7PMQLlyPvffcXn9QWAv

# kTYm/gMbpXepQATcupfEzTnSmHMJwEbAqP0XqbcftckCAwEAAaOCAgMwggH/MB8G

# A1UdIwQYMBaAFGg34Ou2O/hfEYb7/mF7CIhl9E5CMB0GA1UdDgQWBBRm81EbqiBD

# YIXuCPS2E6CaB1RXyjA+BgNVHSAENzA1MDMGBmeBDAEEATApMCcGCCsGAQUFBwIB

# FhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgeAMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMIG1BgNVHR8Ega0wgaowU6BRoE+GTWh0dHA6Ly9j

# cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNB

# NDA5NlNIQTM4NDIwMjFDQTEuY3JsMFOgUaBPhk1odHRwOi8vY3JsNC5kaWdpY2Vy

# dC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQy

# MDIxQ0ExLmNybDCBlAYIKwYBBQUHAQEEgYcwgYQwJAYIKwYBBQUHMAGGGGh0dHA6

# Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBcBggrBgEFBQcwAoZQaHR0cDovL2NhY2VydHMu

# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2

# U0hBMzg0MjAyMUNBMS5jcnQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAgEA

# eDbtA8CjFmSEjjq3jgM7utHOhN56IwIVyL4RuVCxPyRwZ1qg9RRzK6LetRwQ969P

# TSXfJFNP1JWGHRkkmKUH/yk5AdTz8vTFLWeYQSrdY5tf246HMFzjassGQnRMdOUr

# IOf+yeGDRy7ktBZGWCIxRZWtT/naIl1lgplLx3O+a5iRV6eTGq20ns1mXnJHyjQ4

# YoPW77YigKFqeJ0Sc/7MzxO9soqr37pRHrgCjuZYso6ExRorvy8cXFINLF+2cyoi

# XXiimWbKA6gxWte+ZyRgGbgmYgTCDqGSH7bCyIJy7oHhcSU5mOauX4b1IgAVwJDf

# frZpQhcDgAy3w4USlO8wmZ616Kdvj1/FG6/7Wh1/3fyxdNfDGx8h2HA6C5wjbmMP

# NaxwS4Cua7MItgVQgHx3FrKLUkGZZoNogSKX3vXAkF1ezDOec8kOeJgHo148esAV

# py9mMWWBbwAbOnxyiC9uMs135xSxEkai2AFjfNYbIKmmEC6l21dNdxz3RRLJzbsB

# McWZ/IHHvD2L702sNDow4N13vDrZfT2G+TbRgzKfq2iCA3OXSMwwofz24RTxkDof

# BKb7ySKnnE6FZwe4u3NHoUOkfrsMyxpmugnOpFiRf2lK0Qzuu9W4sW0+4PEPnokM

# mvymlpDldO5AIqud0quQfdu70cmTzpHVPPMz9wCDR3AxggZZMIIGVQIBATB9MGkx

# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4

# RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEzODQg

# MjAyMSBDQTECEATxuaBOthmGPBQf/T19vOkwDQYJYIZIAWUDBAIBBQCggYQwGAYK

# KwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIB

# BDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQg

# lAHBIT7srxelDsZ6KOOrfqkPSrdxz5Gc05x6k3oQi0UwDQYJKoZIhvcNAQEBBQAE

# ggIAeQrHc8CZf3qF7IjRA8MzsTGGjPbk0cpW8PmOILfnv2YRZWDXIORdZQiIU8n2

# w6GMhRiw5uhITe1XhGb3/dxQLwbPY4tHmvUAYXqH6eYjj4oMrYEYYw60dMRnu3Dw

# kF5hmlOucWr7dTHRVmC4nUySYNZjkEAYK083A41snEvPYP8USQliDF+aOuaZm0jj

# VxFeI8L3tIXBUUax3Jufd66baCAt/DP0u3cRtox1NvebnGCN1TZykOiQdr8L4LdL

# MXcAJePVy6ExB09mGUfO8BYt8t4RGZGR9al57/DuNnmuVwSt8JctJ+GS9U/x6BOw

# sNub/i2/JLBQ2pcyd10hCjltixHBiBi04USdXv/SNyIXqwJkGE4s5DTEVQWIu4s1

# 98D+p2/FiQTOWMyOKDiEy/Kv/GFPmXPmtnK24cSZaCIwo5fmw/kcSZml3uSE7BOI

# EhdRlwpMWu0Sl91a1OPNV940FA3qZ21XAofUlg1JL19JHEPCJ60E7qqC/BmJlLJt

# j8741UcF+/FxjX+RbhSSELfCoGZ3PdIWKPQebux2w8tBj2YSsd8JsYwJjREMpssa

# mLr/AsiyLQEtT+XKXdjfKzoHJ+RyiV2MbeoTxF/JAvfa/zs6wRDXc1qxf8SFba0X

# 7dn84huP9ls/ApAfxbHjFbeFKdxvk0PeimVJQHnM+eayo/ahggMmMIIDIgYJKoZI

# hvcNAQkGMYIDEzCCAw8CAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGln

# aUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0

# YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExAhAIT9wzT35FTtvDD4/5khg1

# MA0GCWCGSAFlAwQCAQUAoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkq

# hkiG9w0BCQUxDxcNMjYxMDA4MjMzOTEwWjAvBgkqhkiG9w0BCQQxIgQgfCc4Qg+R

# iaAmfPAxeocxF7GRnhBszKOnbyFS0NOz95AwDQYJKoZIhvcNAQEBBQAEggIAKYCz

# 7ZQMxiiFDfBI0/hmdy94FYmDUijGQb//nFkKaTZ6V34KWtVGKmcLvg0IAH+qT2ym

# qDqEiqZNYeEPR6zZZ+y4deaF67528erLAiR2409NjtkdmMSkGziYEMt4vzEITxBx

# I2ycaLRQTFA3PvLhjNEfyR+x9HDw/7n78VPKIf7uIdGg9iyVPpYXpR1VrKM0sqqR

# e3MPsc08HHaNMv077+bPDmf0n6pxpkPtZwYd5Ua3HmOONvwq8lv40p40zXxbr2Na

# o0Yhmh+iERImrf8jN/XZX++J5MS1cMeAwpXAr8TtQTX9vKCsA6z+8jFB5/erPdXZ

# 35Duvu4cNJHpWxmJNwDy2oMJfKdO7h6l3Jy22JXKlRaojhh6Ma6sImRDXwWc8Co3

# YshN91qCqgh+eqWpKFornBVmZfOGqUR6BTghDVO9upg6gXX1P3Hna79gfd1asJsX

# JXyGzwf6JO+6QsK9S2WHtjtmbNViGArWX7q63tZJgH0pVzfZD5j4CkEiQoXsw39+

# 3jI2HxKA7v1fXNACkVTrf2Av+3nPKON3xMAbU7mAhSHhu5AXmZhT1TRUOmTNNagQ

# TSNnr01B0rvZrVjxR1hgzDB/93vFq57DOKsBqdsnnBwc4FcNX6ljpXnZKmE4ZG20

# G5Cu/BmIFWBYUYLKJ4dKLKQeY/phX1kbqSTo4is=

# SIG # End signature block