Internal/Collector/Intune/Get-MdmManagementSummary.ps1
|
Function Get-MdmManagementSummary(){ <# .SYNOPSIS This function provides a management summary of Intune operational metrics. .DESCRIPTION The function collects summary counters for managed device OS distribution, application count, and failed deployments in the last 30 days. .EXAMPLE Get-MdmManagementSummary Returns an Intune management summary section. .NOTES NAME: Get-MdmManagementSummary #> [OutputType('DocSection')] [cmdletbinding()] param() function ConvertTo-Array { param([object]$InputObject) if($null -eq $InputObject){ return @() } if($InputObject.PSObject.Properties.Name -contains "value"){ if($null -eq $InputObject.value){ return @() } if($InputObject.value -is [System.Array]){ return $InputObject.value } return @($InputObject.value) } if($InputObject -is [System.Array]){ return $InputObject } return @($InputObject) } function Get-RecordDate { param([object]$Record) $dateProperties = @( "lastReportedDateTime", "lastStateUpdateDateTime", "occurrenceDateTime", "createdDateTime", "lastModifiedDateTime" ) foreach($property in $dateProperties){ if($Record.PSObject.Properties.Name -contains $property -and $null -ne $Record.$property){ try { return [datetime]$Record.$property } catch { continue } } } return $null } function Test-IsFailureRecord { param([object]$Record) $failureWords = "fail|failed|error|noncompliant|remediationfailed" $nonFailureWords = "success|succeeded|compliant|notapplicable" $statusProperties = @( "status", "complianceStatus", "deploymentStatus", "installState", "runState", "detectionState", "preRemediationDetectionScriptOutput", "postRemediationDetectionScriptOutput" ) foreach($property in $statusProperties){ if($Record.PSObject.Properties.Name -contains $property -and $null -ne $Record.$property){ $statusValue = "$($Record.$property)".ToLowerInvariant() if($statusValue -match $failureWords -and $statusValue -notmatch $nonFailureWords){ return $true } } } if($Record.PSObject.Properties.Name -contains "errorCode"){ try { if([int]$Record.errorCode -gt 0){ return $true } } catch {} } return $false } function Get-FailureCountInWindow { param( [object[]]$Records, [datetime]$WindowStart ) $count = 0 foreach($record in $Records){ $recordDate = Get-RecordDate -Record $record if($null -eq $recordDate -or $recordDate -lt $WindowStart){ continue } if(Test-IsFailureRecord -Record $record){ $count++ } } return $count } function Get-OperatingSystemFamily { param([string]$OperatingSystem) if([string]::IsNullOrWhiteSpace($OperatingSystem)){ return "Unknown" } $os = $OperatingSystem.ToLowerInvariant() if($os -match "windows"){ return "Windows" } if($os -match "ios|ipados"){ return "iOS/iPadOS" } if($os -match "android"){ return "Android" } if($os -match "mac|osx"){ return "macOS" } return "Other" } function Get-RecordLabel { param( [object]$Record, [string[]]$PropertyNames, [string]$Fallback = "Unknown" ) foreach($propertyName in $PropertyNames){ if($Record.PSObject.Properties.Name -contains $propertyName -and -not [string]::IsNullOrWhiteSpace("$($Record.$propertyName)")){ return "$($Record.$propertyName)" } } return $Fallback } function Add-Counter { param( [hashtable]$Counter, [string]$Key, [int]$Value = 1 ) if([string]::IsNullOrWhiteSpace($Key)){ $Key = "Unknown" } if($Counter.ContainsKey($Key)){ $Counter[$Key] += $Value } else { $Counter[$Key] = $Value } } function Get-TopCounterItems { param( [hashtable]$Counter, [string]$NameProperty, [string]$CountProperty, [int]$Top = 10 ) $items = @() foreach($key in $Counter.Keys){ $items += [PSCustomObject]@{ $NameProperty = $key $CountProperty = $Counter[$key] } } return $items | Sort-Object -Property $CountProperty, $NameProperty -Descending | Select-Object -First $Top } function Get-CompliancePosture { param([string]$ComplianceState) if([string]::IsNullOrWhiteSpace($ComplianceState)){ return "Unknown" } $state = $ComplianceState.ToLowerInvariant() if($state -eq "compliant"){ return "Compliant" } if($state -eq "noncompliant"){ return "NonCompliant" } if($state -eq "ingraceperiod"){ return "InGracePeriod" } if($state -eq "configmanager"){ return "ConfigManager" } if($state -eq "error"){ return "Error" } return $ComplianceState } function Get-StaleBucket { param( [datetime]$SyncDate, [datetime]$NowDate ) if($null -eq $SyncDate){ return "Unknown" } $ageInDays = [Math]::Floor(($NowDate.ToUniversalTime() - $SyncDate.ToUniversalTime()).TotalDays) if($ageInDays -lt 0){ $ageInDays = 0 } if($ageInDays -le 7){ return "0-7 days" } if($ageInDays -le 30){ return "8-30 days" } if($ageInDays -le 60){ return "31-60 days" } return "61+ days" } $DocSec = New-Object DocSection $DocSec.Title = "Management Summary" $DocSec.Text = "This section contains an Intune management summary with device, compliance, app, and failed deployment metrics for the last 30 days." $DocSec.SubSections = @() $windowStart = (Get-Date).AddDays(-30) $now = Get-Date $managedDevices = @() $mobileApps = @() $failedAppDeployments = 0 $failedConfigurationDeployments = 0 $failedComplianceDeployments = 0 $failedScriptDeployments = 0 $appFailureCounter = @{} $configurationFailureByPolicy = @{} $complianceFailureByPolicy = @{} try { $managedDevices = ConvertTo-Array (Invoke-DocGraph -Path "/deviceManagement/managedDevices" -Beta -FollowNextLink $true) } catch { Write-Warning "Unable to collect managed devices summary." } try { $mobileApps = ConvertTo-Array (Invoke-DocGraph -Path "/deviceAppManagement/mobileApps" -Beta -FollowNextLink $true) } catch { Write-Warning "Unable to collect mobile application summary." } try { $appTroubleshootingEvents = ConvertTo-Array (Invoke-DocGraph -Path "/deviceAppManagement/mobileAppTroubleshootingEvents" -Beta -FollowNextLink $true) $failedAppDeployments = Get-FailureCountInWindow -Records $appTroubleshootingEvents -WindowStart $windowStart foreach($event in $appTroubleshootingEvents){ $recordDate = Get-RecordDate -Record $event if($null -eq $recordDate -or $recordDate -lt $windowStart){ continue } if(-not (Test-IsFailureRecord -Record $event)){ continue } $appLabel = Get-RecordLabel -Record $event -PropertyNames @("appDisplayName", "applicationName", "mobileAppDisplayName", "appName", "displayName") if($appLabel -eq "Unknown"){ $appLabel = Get-RecordLabel -Record $event -PropertyNames @("appId", "mobileAppId", "applicationId") } Add-Counter -Counter $appFailureCounter -Key $appLabel } } catch { Write-Warning "Unable to collect app deployment failure summary." } try { $configurationPolicies = ConvertTo-Array (Invoke-DocGraph -Path "/deviceManagement/deviceConfigurations" -Beta) foreach($policy in $configurationPolicies){ $deviceStatuses = ConvertTo-Array (Invoke-DocGraph -Path "/deviceManagement/deviceConfigurations/$($policy.id)/deviceStatuses" -Beta -FollowNextLink $true) $currentFailureCount = Get-FailureCountInWindow -Records $deviceStatuses -WindowStart $windowStart $failedConfigurationDeployments += $currentFailureCount if($currentFailureCount -gt 0){ $policyLabel = if([string]::IsNullOrWhiteSpace($policy.displayName)){ "$($policy.id)" } else { "$($policy.displayName)" } Add-Counter -Counter $configurationFailureByPolicy -Key $policyLabel -Value $currentFailureCount } } } catch { Write-Warning "Unable to collect configuration deployment failure summary." } try { $compliancePolicies = ConvertTo-Array (Invoke-DocGraph -Path "/deviceManagement/deviceCompliancePolicies" -Beta) foreach($policy in $compliancePolicies){ $deviceStatuses = ConvertTo-Array (Invoke-DocGraph -Path "/deviceManagement/deviceCompliancePolicies/$($policy.id)/deviceStatuses" -Beta -FollowNextLink $true) $currentFailureCount = Get-FailureCountInWindow -Records $deviceStatuses -WindowStart $windowStart $failedComplianceDeployments += $currentFailureCount if($currentFailureCount -gt 0){ $policyLabel = if([string]::IsNullOrWhiteSpace($policy.displayName)){ "$($policy.id)" } else { "$($policy.displayName)" } Add-Counter -Counter $complianceFailureByPolicy -Key $policyLabel -Value $currentFailureCount } } } catch { Write-Warning "Unable to collect compliance deployment failure summary." } try { $scriptPathDefinitions = @( @{ List = "/deviceManagement/deviceManagementScripts"; States = "/deviceManagement/deviceManagementScripts/{0}/deviceRunStates" }, @{ List = "/deviceManagement/deviceShellScripts"; States = "/deviceManagement/deviceShellScripts/{0}/deviceRunStates" }, @{ List = "/deviceManagement/deviceHealthScripts"; States = "/deviceManagement/deviceHealthScripts/{0}/deviceRunStates" }, @{ List = "/deviceManagement/deviceComplianceScripts"; States = "/deviceManagement/deviceComplianceScripts/{0}/deviceRunStates" } ) foreach($pathDefinition in $scriptPathDefinitions){ $scripts = ConvertTo-Array (Invoke-DocGraph -Path $pathDefinition.List -Beta) foreach($script in $scripts){ if($null -eq $script.id){ continue } $statePath = [string]::Format($pathDefinition.States, $script.id) $runStates = ConvertTo-Array (Invoke-DocGraph -Path $statePath -Beta -FollowNextLink $true) $failedScriptDeployments += Get-FailureCountInWindow -Records $runStates -WindowStart $windowStart } } } catch { Write-Warning "Unable to collect script deployment failure summary." } $osCounter = @{} foreach($device in $managedDevices){ $family = Get-OperatingSystemFamily -OperatingSystem $device.operatingSystem if($osCounter.ContainsKey($family)){ $osCounter[$family] += 1 } else { $osCounter[$family] = 1 } } $osSummary = @() foreach($family in $osCounter.Keys){ $osSummary += [PSCustomObject]@{ OperatingSystem = $family DeviceCount = $osCounter[$family] } } $complianceCounter = @{} $staleDeviceBuckets = @{ "0-7 days" = 0 "8-30 days" = 0 "31-60 days" = 0 "61+ days" = 0 "Unknown" = 0 } foreach($device in $managedDevices){ $compliancePosture = Get-CompliancePosture -ComplianceState $device.complianceState Add-Counter -Counter $complianceCounter -Key $compliancePosture $syncDate = $null if($device.PSObject.Properties.Name -contains "lastSyncDateTime" -and $null -ne $device.lastSyncDateTime){ try { $syncDate = [datetime]$device.lastSyncDateTime } catch { $syncDate = $null } } $staleBucket = Get-StaleBucket -SyncDate $syncDate -NowDate $now $staleDeviceBuckets[$staleBucket] += 1 } $complianceSummary = @() foreach($posture in $complianceCounter.Keys){ $complianceSummary += [PSCustomObject]@{ ComplianceState = $posture DeviceCount = $complianceCounter[$posture] } } $staleSummary = @( [PSCustomObject]@{ CheckInAge = "0-7 days"; DeviceCount = $staleDeviceBuckets["0-7 days"] }, [PSCustomObject]@{ CheckInAge = "8-30 days"; DeviceCount = $staleDeviceBuckets["8-30 days"] }, [PSCustomObject]@{ CheckInAge = "31-60 days"; DeviceCount = $staleDeviceBuckets["31-60 days"] }, [PSCustomObject]@{ CheckInAge = "61+ days"; DeviceCount = $staleDeviceBuckets["61+ days"] }, [PSCustomObject]@{ CheckInAge = "Unknown"; DeviceCount = $staleDeviceBuckets["Unknown"] } ) $topFailingApps = Get-TopCounterItems -Counter $appFailureCounter -NameProperty "Application" -CountProperty "FailedDeployments" -Top 10 $combinedProfileCounter = @{} foreach($profileName in $configurationFailureByPolicy.Keys){ Add-Counter -Counter $combinedProfileCounter -Key ("Configuration: " + $profileName) -Value $configurationFailureByPolicy[$profileName] } foreach($profileName in $complianceFailureByPolicy.Keys){ Add-Counter -Counter $combinedProfileCounter -Key ("Compliance: " + $profileName) -Value $complianceFailureByPolicy[$profileName] } $topFailingProfiles = Get-TopCounterItems -Counter $combinedProfileCounter -NameProperty "Profile" -CountProperty "FailedDeployments" -Top 10 if($null -eq $topFailingApps -or $topFailingApps.Count -eq 0){ $topFailingApps = @( [PSCustomObject]@{ Application = "No data available" FailedDeployments = 0 } ) } if($null -eq $topFailingProfiles -or $topFailingProfiles.Count -eq 0){ $topFailingProfiles = @( [PSCustomObject]@{ Profile = "No data available" FailedDeployments = 0 } ) } $kpiSummary = [PSCustomObject]@{ WindowStartUtc = $windowStart.ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ") WindowEndUtc = $now.ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ") ManagedDeviceCount = $managedDevices.Count ApplicationCount = $mobileApps.Count FailedAppDeployments = $failedAppDeployments FailedConfigurationDeployments = $failedConfigurationDeployments FailedComplianceDeployments = $failedComplianceDeployments FailedScriptDeployments = $failedScriptDeployments TotalFailedDeployments = ($failedAppDeployments + $failedConfigurationDeployments + $failedComplianceDeployments + $failedScriptDeployments) StaleDevices31DaysOrMore = ($staleDeviceBuckets["31-60 days"] + $staleDeviceBuckets["61+ days"]) } $DocSec.Objects = $kpiSummary $DocSec.Transpose = $true $DocSecOperatingSystem = New-Object DocSection $DocSecOperatingSystem.Title = "Managed Devices by Operating System" $DocSecOperatingSystem.Text = "Count of managed devices grouped by operating system family." $DocSecOperatingSystem.Objects = $osSummary | Sort-Object OperatingSystem $DocSecOperatingSystem.Transpose = $false $DocSecStaleDevices = New-Object DocSection $DocSecStaleDevices.Title = "Stale Device Distribution" $DocSecStaleDevices.Text = "Count of managed devices by last check-in age bucket." $DocSecStaleDevices.Objects = $staleSummary $DocSecStaleDevices.Transpose = $false $DocSecCompliancePosture = New-Object DocSection $DocSecCompliancePosture.Title = "Compliance Posture" $DocSecCompliancePosture.Text = "Count of managed devices by compliance state." $DocSecCompliancePosture.Objects = $complianceSummary | Sort-Object ComplianceState $DocSecCompliancePosture.Transpose = $false $DocSecFailure = New-Object DocSection $DocSecFailure.Title = "Failed Deployments (Last 30 Days)" $DocSecFailure.Text = "Counts of failed deployments by workload in the last 30 days." $DocSecFailure.Objects = @( [PSCustomObject]@{ Workload = "Applications"; FailedDeployments = $failedAppDeployments }, [PSCustomObject]@{ Workload = "Configuration Policies"; FailedDeployments = $failedConfigurationDeployments }, [PSCustomObject]@{ Workload = "Compliance Policies"; FailedDeployments = $failedComplianceDeployments }, [PSCustomObject]@{ Workload = "Scripts"; FailedDeployments = $failedScriptDeployments } ) $DocSecFailure.Transpose = $false $DocSecTopFailingApps = New-Object DocSection $DocSecTopFailingApps.Title = "Top Failing Applications (Last 30 Days)" $DocSecTopFailingApps.Text = "Top 10 applications by failed deployment events in the last 30 days." $DocSecTopFailingApps.Objects = $topFailingApps $DocSecTopFailingApps.Transpose = $false $DocSecTopFailingProfiles = New-Object DocSection $DocSecTopFailingProfiles.Title = "Top Failing Profiles (Last 30 Days)" $DocSecTopFailingProfiles.Text = "Top 10 configuration/compliance profiles by failed deployment events in the last 30 days." $DocSecTopFailingProfiles.Objects = $topFailingProfiles $DocSecTopFailingProfiles.Transpose = $false $DocSec.SubSections += @( $DocSecOperatingSystem, $DocSecStaleDevices, $DocSecCompliancePosture, $DocSecFailure, $DocSecTopFailingApps, $DocSecTopFailingProfiles ) return $DocSec } # SIG # Begin signature block # MIIoaQYJKoZIhvcNAQcCoIIoWjCCKFYCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBwiVlNJfYCP8/d # zPgWM5nP81lOeycl9/yKwl0/WwNIs6CCIWYwggWNMIIEdaADAgECAhAOmxiO+dAt # 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK # EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV # BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa # Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy # dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD # ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC # ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E # MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy # unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF # xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1 # 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB # MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR # WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6 # nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB # YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S # UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x # q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB # NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP # TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC # AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp # Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv # bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0 # aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB # LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc # Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov # Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy # oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW # juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF # mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z # twGpn1eqXijiuZQwggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0GCSqG # SIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMx # GTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRy # dXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTlaMGkx # CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4 # RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEzODQg # MjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C0Cit # eLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce2vnS # 1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0daE6ZM # swEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6TSXBC # Mo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoAFdE3 # /hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7OhD26j # q22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM1bL5 # OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z8ujo # 7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05huzU # tw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNYmtwm # KwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP/2NP # TLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0TAQH/ # BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYDVR0j # BBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1Ud # JQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0 # cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0 # cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8E # PDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVz # dGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATANBgkq # hkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95RysQDK # r2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HLIvda # qpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5BtfQ/g+ # lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnhOE7a # brs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIhdXNS # y0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV9zeK # iwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/jwVYb # KyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYHKi8Q # xAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmCXBVm # zGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l/aCn # HwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZWeE4w # gga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmGMA0GCSqGSIb3DQEBCwUAMGIx # CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 # dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBH # NDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5NTlaMGkxCzAJBgNVBAYTAlVT # MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1 # c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwggIi # MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0eDHTCphBcr48RsAcrHXbo0Zo # dLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+RuwOnPhof6pvF4uGjwjqNjfEvUi # 6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4Bt0mAxAHeHYNnQxqXmRinvuNg # xVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1UkxBvMgEdgkFiDNYiOTx4OtiF # cMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTcaarps0wjUjsZvkgFkriK9tUKJ # m/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zbCclF83bRVFLeGkuAhHiGPMvS # GmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnGpTXiUOeSLsJygoLPp66bkDX1 # ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/AMOMCZIVNSaz7BX8VtYGqLt9 # MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v5ydPpOjL6s36czwzsucuoKs7 # Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoiwOrUG2ZdSoQbU2rMkpLiQ6bG # RinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm2qA+sdFUeEY0qVjPKOWug/G6 # X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAd # BgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04wHwYDVR0jBBgwFoAU7NfjgtJx # XWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF # BwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln # aWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j # b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJo # dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNy # bDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQEL # BQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Qh8WIGjB/T8ObXAZz8OjuhUxj # aaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3YTj+IQhQE7jU/kXjjytJgnn0 # hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQwr8Myb9rEVKChHyfpzee5kH0 # F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/wdG2th9y1IsA0QF8dTXqvcnT # mpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81hjajV/gxdEkMx1NKU4uHQcKf # ZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00TYr2Lr3ty9qIijanrUR3anzE # wlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNjqFzeGxcytL5TTLL4ZaoBdqbh # OhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0cuJG7uEBYTptMSbhdhGQDpOX # gpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9sC+NJpud/v4+7RWsWCiKi9EO # LLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0LckTetiSuEtQvLsNz3Qbp7wG # WqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2tszWkPZPubdcMIIG7TCCBNWg # AwIBAgIQCE/cM09+RU7bww+P+ZIYNTANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQG # EwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0 # IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0Ex # MB4XDTI2MDgwNTAwMDAwMFoXDTM3MTEwNDIzNTk1OVowYzELMAkGA1UEBhMCVVMx # FzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdpQ2VydCBTSEEy # NTYgUlNBNDA5NiBUaW1lc3RhbXAgUmVzcG9uZGVyIDIwMjYgMTCCAiIwDQYJKoZI # hvcNAQEBBQADggIPADCCAgoCggIBALZ7pvLJ/s1K+NSbTGWz/TjGMPh8CQ6RucZC # Lv5anHzWJjF/NWJrFIhy24fcpKXlgRiky4WAawDfU3YP0BMxt9l3Dm5oCG5Z69Aq # EN1kgHg2epx+l+lZBcmJCcN0ASURML5uFIS80sZsDwO3BSkUxDjLJhBI+qiZP3ai # xAC/qEGLjsBNlLol9VZ7pfGEXiMlneJIC5/YKuizVzNFKZZEeoy/0B8Zm+nzKBgS # WG52lCO1w+nCg6XpCtklTJXeIg283hw7TmmsZXR+SMbjbrEOvZ3fP2VxIgeR28Y9 # 0ZStd3F9VuA5RVynb/whITPAo9b75Zr4Ta6Mj3URm26QZYMn/FnbuTegcoRcFEZ9 # FOqM5T6MTdtr/n74lIT/ug0eeOzmZ6QTFg33otX+bFRsIolvykE1jive4PuESaT8 # zzVeFWDAMDtozNgLctkGD1ZjkEyZtJrLl5ya0m5doH/ScpaZCZVl6pNUOCybMc/k # xC6EAmSJY24L0yYKD1Nkddsnb/ItVKi/2nXpQNMu1PT5prW83vV8d67WowuUs0Hd # Y4H8AMLGvdL/WHEj3ZnqMqAQQP9u3Ai9t+5eQ02GDwy0ODjdzi0xlp70W+ow63/0 # ++YDEX1M0iwgUHwbrJvfpklkZQvw3+kv3vUPItdwroczk9icflf55W1zOEKAcJVA # IXpcMCU9AgMBAAGjggGVMIIBkTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQUyWOK # MC7USvtulPPm40B+9ezN4jAfBgNVHSMEGDAWgBTvb1NK6eQGfHrK4pBW9i/USezL # TjAOBgNVHQ8BAf8EBAMCB4AwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwgZUGCCsG # AQUFBwEBBIGIMIGFMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j # b20wXQYIKwYBBQUHMAKGUWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp # Q2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNy # dDBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln # aUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5j # cmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEB # CwUAA4ICAQCNxTphHp1SCt+ZrAmAfn0oQLFr0mLywSLaDXQIENoyKqxrFbJblzCV # P/pkXmwXOdrOpWygLzlT12os5ipDCy35RBCg2UMeApEtrfGhz45F4Wt4WGdNdIbR # Wt3YTYJmpR+b7lr4d7Uwn+H600u4D7RnOGf8Wj4UNgAdZkfHhHv1mx9EVh71SJel # cEN/oORSjXzdjfw1iZH9d8Nh/thn6hH23d+VsPAr6GAYyzSA02nXD1nYLI7Ijmiv # +xLCiYC41DSFYL3GhTiy0PxpawPtGRyaBVGzq+UiTfM8pD7KVyF5aQyWP4KhVGUU # Tnmm/RlYJoW3TiXA/+t0YcT2oRVBm3JETjajHug2AL+v5jhtKVnd3D0rbHXEu27o # +Q8p4sEWPMqKDB+qbceb6T/6WcwTwXmQ9lOCLLYcsQeSWmvKqzpAec9etE14jOQA # zLKWdE3w/TCaKtLRaRT7LCkRYVnhA2D73FLje1O5b3HR5eHs0NzU/+xX7NbEdcof # y0W3Wdwd1XOqtlpg/JgwtKfZM5dqO94lbUveOiJBI+xZEbGRsMNbXmMREUTgu+Oc # a7Y73MPWcslIx2VhkSKSXjDbD6rgg39H5Mh7QfieAIjWagkJNt68Yfim6cjEzVSi # LSeZfdkr5dtFPTW6jATlWJdYeeDRGCyatf8R1hSjzSvdN8yWQPT9gzCCB3QwggVc # oAMCAQICEATxuaBOthmGPBQf/T19vOkwDQYJKoZIhvcNAQELBQAwaTELMAkGA1UE # BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2Vy # dCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENB # MTAeFw0yMzEwMDkwMDAwMDBaFw0yNjExMjAyMzU5NTlaMHwxCzAJBgNVBAYTAkNI # MRIwEAYDVQQIEwlTb2xvdGh1cm4xDjAMBgNVBAcTBU9sdGVuMRYwFAYDVQQKEw1i # YXNlVklTSU9OIEFHMRkwFwYDVQQLExBJbnRlcm5hbCBTY3JpcHRzMRYwFAYDVQQD # Ew1iYXNlVklTSU9OIEFHMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA # ufaKcpNEghlaO8FJ9JxMxyWtjYDMzK6NEc/2Ey9j3eDKs5MtSDaH6jCZwVIoy0gh # VM7qQp4mDq7VxTy+LF+EvKOUZ7cBFAM9BF+e0r7Wypq0zloEBB//7YJcnqgwzdco # Fb2tv1NeVwgE5hzbjpp9ZGtp+WOr0PiDQT7uI7WHMz7CjyeZyBf06wkntnwneuKy # N3XLzWnbJbwGR0ku+uWZyxni/IqO6Aif+r5fdOed2giizFVrDPJRZ8tu9od+DmAJ # 7B8Am5Ki3EnxlEyHL3oOolignkrZlt+TyFDAOGyA2f1wV+3MhYCngGDIl+sjcQIB # A8ObAULMU27iFgdtWmPc5NanibHRkUdXgXnWczMFmpTBnbwJV5CJGMDwBtSU8Tnb # edOmpF6iIh+nKbxLEOVF90WPrG86rp6ou4BjHz+djua9GO/W3R3HmGCspMl53+r8 # 74zx+B01QRA78JDKdENaa6W9VOICHtZ8s1CISrjw7dvI45cmwopIBivVweCo5OXm # r1eBcKFbsH2wtGdoO5h12aW7yXEm0sqYMWHRsN/DXgCbW5Aq7o1v7CSNpcSZW+wB # Ncf9surdMLzwT6vbo3GwqbSxrjeLbHOinn9cV9e2ROA4E7PMQLlyPvffcXn9QWAv # kTYm/gMbpXepQATcupfEzTnSmHMJwEbAqP0XqbcftckCAwEAAaOCAgMwggH/MB8G # A1UdIwQYMBaAFGg34Ou2O/hfEYb7/mF7CIhl9E5CMB0GA1UdDgQWBBRm81EbqiBD # YIXuCPS2E6CaB1RXyjA+BgNVHSAENzA1MDMGBmeBDAEEATApMCcGCCsGAQUFBwIB # FhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgeAMBMG # A1UdJQQMMAoGCCsGAQUFBwMDMIG1BgNVHR8Ega0wgaowU6BRoE+GTWh0dHA6Ly9j # cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNB # NDA5NlNIQTM4NDIwMjFDQTEuY3JsMFOgUaBPhk1odHRwOi8vY3JsNC5kaWdpY2Vy # dC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQy # MDIxQ0ExLmNybDCBlAYIKwYBBQUHAQEEgYcwgYQwJAYIKwYBBQUHMAGGGGh0dHA6 # Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBcBggrBgEFBQcwAoZQaHR0cDovL2NhY2VydHMu # ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2 # U0hBMzg0MjAyMUNBMS5jcnQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAgEA # eDbtA8CjFmSEjjq3jgM7utHOhN56IwIVyL4RuVCxPyRwZ1qg9RRzK6LetRwQ969P # TSXfJFNP1JWGHRkkmKUH/yk5AdTz8vTFLWeYQSrdY5tf246HMFzjassGQnRMdOUr # IOf+yeGDRy7ktBZGWCIxRZWtT/naIl1lgplLx3O+a5iRV6eTGq20ns1mXnJHyjQ4 # YoPW77YigKFqeJ0Sc/7MzxO9soqr37pRHrgCjuZYso6ExRorvy8cXFINLF+2cyoi # XXiimWbKA6gxWte+ZyRgGbgmYgTCDqGSH7bCyIJy7oHhcSU5mOauX4b1IgAVwJDf # frZpQhcDgAy3w4USlO8wmZ616Kdvj1/FG6/7Wh1/3fyxdNfDGx8h2HA6C5wjbmMP # NaxwS4Cua7MItgVQgHx3FrKLUkGZZoNogSKX3vXAkF1ezDOec8kOeJgHo148esAV # py9mMWWBbwAbOnxyiC9uMs135xSxEkai2AFjfNYbIKmmEC6l21dNdxz3RRLJzbsB # McWZ/IHHvD2L702sNDow4N13vDrZfT2G+TbRgzKfq2iCA3OXSMwwofz24RTxkDof # BKb7ySKnnE6FZwe4u3NHoUOkfrsMyxpmugnOpFiRf2lK0Qzuu9W4sW0+4PEPnokM # mvymlpDldO5AIqud0quQfdu70cmTzpHVPPMz9wCDR3AxggZZMIIGVQIBATB9MGkx # CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4 # RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEzODQg # MjAyMSBDQTECEATxuaBOthmGPBQf/T19vOkwDQYJYIZIAWUDBAIBBQCggYQwGAYK # KwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIB # BDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQg # dmosDYgi71UbtCxBevZZcfc1yRyn9x73zInrdXF+l1wwDQYJKoZIhvcNAQEBBQAE # ggIALgT3TxlM1ab9wYb0gzN0a0OVX/ax58r3yuZITxRyV6orif+Ru7WiD7M8yEgy # dRDGPAax2D/zQOlpOLT6lbn5Sh2CxGHar0vLDfYKKNf8uQfiiKEs0STlYE2UkWck # KZeWGcbWE4mW9Mnulg/v1So3FYpD4ZqvbFJIf7uxBFF3QTEkCT6ud3jQa/+Gl92/ # rG2dBoNurqjeGx9dBeEqxKl90RG+9/pLE+Nz9WLAtpfqt6rTX1ytNiwrfd2R+isV # gZFkNZAk7+WhEbAzBXvgNbZAXbqTIc4idRFg6W8PUTJu10SZNDXVQF8IBNwspont # h2FR/2cmAH6rOasTFzwvR/GJ4FgI2orlf/JADuHtZxVMkMpXbBVe4IhAjaQi4fiX # drtZRTcpLjzutyO6P9Mrdqm8BAV7MxttvkLasHku1ebjm8/D3X87xj4gmjKhcZO/ # mkwnLWvyw1XGo9SKc8qbh3uKTRWmwSMppebeKb04HqggsSLhqpLHbe0VXwhgOSSB # yBHd6eUDqL85KhC1NSSqyQADdGYSoQD9csgfBUwTUdBBr/jGVQli+JlIIYGxkmbx # Ppe4Ya9hdFFO1XeNBphjuIV6FWJWKS+6EF1AEoh6HDkLaf5M6xhFt5odfUh/1GPJ # dwlo0KgH3yHNg2tddQYfs7wu+0HibV0HqfEBp4JhCL8qJ6GhggMmMIIDIgYJKoZI # hvcNAQkGMYIDEzCCAw8CAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGln # aUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0 # YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExAhAIT9wzT35FTtvDD4/5khg1 # MA0GCWCGSAFlAwQCAQUAoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkq # hkiG9w0BCQUxDxcNMjYxMDA4MjM0MjE1WjAvBgkqhkiG9w0BCQQxIgQgaXuoWO/n # Se40zAxl8Qjo1K97B5rqRBLjPVrQdkQgnPgwDQYJKoZIhvcNAQEBBQAEggIAQwB2 # A6gTQMRj63AXiDCV9xtwyiUeBtz68YO82wHj8aEEefvFnKvLoYBNbA3OBUBeqBos # PMsWmVbzU72jOCU6YsqXp6eYsil/dLZvWk9xBBn0NcJ4nfXkfq6hNo3tXqs9FPtY # aAvONCNGf7uvLKZsuwYxk7Aw+9XyYgxXqnAdpgYNU70fatoYCAFfa/oeIw5WkRGC # 9MmdxjS2LrBSLNXIslGOlP1VF3znjEJ/XxC5RoEu/EHpa2VVPkRES1t/BRwSyGjp # tFwhHgonEhOo0AIT254WlgQ0gZ6xxrq1PwUmk48+ApyzaVImD6IydjkB0FKCu5QN # Yv83QyDHvEdESAeISvLKd2xW/Y8mQEE6HRDYTYaCMjTLdYxn1H7d0gaMAHUSmlQR # JtOn8DPeIDW6c1ApXFnsRtYISS/tc6or1/kSJqu+ZWd5OEyRT7E2NXLEf22z7hOA # I+hTHwXiaylKPzLLa2tVQVyG4Gvtak5jCCspk6241X04h2e1TULUsxTDYrafeyNj # O6lwBt25RbvKpNRMsfqV+FHf2YAUR+FJlglC4lUecWlv9ev7PgPl6BCLL3fPLI1J # PXM0mGzLZnPgzDcgwMRFhHVA9EjgIUO6esVtBXMGqFAz6t1ywPUxwiLRDuShlZBO # R+wN34fBwKQ9w8c7RDkykFX3WsK/mN5FeUkCc0Y= # SIG # End signature block |