Maester

1.3.14-preview

public/maester/entra/Test-MtHighRiskAppPermissions.ps1

                                <#

.SYNOPSIS

    Check if any applications or service principals have high risk Graph permissions that can lead to direct or indirect paths

    to Global Admin and full tenant takeover. The permissions are based on the research published at https://github.com/emiliensocchi/azure-tiering/tree/main.

.DESCRIPTION

    Applications that use Graph API permissions with a risk of having a direct or indirect path to Global Admin and full tenant takeover.

.EXAMPLE

    Test-MtHighRiskAppPermissions

    Returns true if no application has Tier-0 graph permissions

.LINK

    https://maester.dev/docs/commands/Test-MtHighRiskAppPermissions

#>

function Test-MtHighRiskAppPermissions {

    [CmdletBinding()]

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseSingularNouns', '', Justification = 'This test checks multiple permissions.')]

    [OutputType([bool])]

    param(

        # Check for direct path to Global Admin or indirect path through a combination of permissions. Default is "All".

        [ValidateSet('All', 'Direct', 'Indirect')]

        [String] $AttackPath = 'All'

    )

    if (-not (Test-MtConnection Graph)) {

        Add-MtTestResultDetail -SkippedBecause NotConnectedGraph

        return $null

    }

    $allCriticalGraphPermissions = @(

        [pscustomobject]@{

            Id   = '2f6817f8-7b12-4f0f-bc18-eeaf60705a9e'

            Name = 'PrivilegedAccess.ReadWrite.AzureADGroup'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '32531c59-1f32-461f-b8df-6f8a3b89f73b'

            Name = 'PrivilegedAccess.ReadWrite.AzureADGroup'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '41202f2c-f7ab-45be-b001-85c9728b9d69'

            Name = 'PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '06dbc45d-6708-4ef0-a797-f797ee68bf4b'

            Name = 'PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = 'dd199f4a-f148-40a4-a2ec-f0069cc799ec'

            Name = 'RoleAssignmentSchedule.ReadWrite.Directory'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '8c026be3-8e26-4774-9372-8d5d6f21daff'

            Name = 'RoleAssignmentSchedule.ReadWrite.Directory'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '9e3f62cf-ca93-4989-b6ce-bf83c28f9fe8'

            Name = 'RoleManagement.ReadWrite.Directory'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = 'd01b97e9-cbc0-49fe-810a-750afd5527a3'

            Name = 'RoleManagement.ReadWrite.Directory'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = 'eccc023d-eccf-4e7b-9683-8813ab36cecc'

            Name = 'User.DeleteRestore.All'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '4bb440cd-2cf2-4f90-8004-aa2acd2537c5'

            Name = 'User.DeleteRestore.All'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '3011c876-62b7-4ada-afa2-506cbbecc68c'

            Name = 'User.EnableDisableAccount.All'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = 'f92e74e7-2563-467f-9dd0-902688cb5863'

            Name = 'User.EnableDisableAccount.All'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '50483e42-d915-4231-9639-7fdb7fd190e5'

            Name = 'UserAuthenticationMethod.ReadWrite.All'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = 'b7887744-6746-4312-813d-72daeaee7e2d'

            Name = 'UserAuthenticationMethod.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = '5eb59dd3-1da2-4329-8733-9dabdc435916'

            Name = 'AdministrativeUnit.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '7b8a2d34-6b3f-4542-a343-54651608ad81'

            Name = 'AdministrativeUnit.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9'

            Name = 'Application.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'bdfbf15f-ee85-4955-8675-146e8e5296b5'

            Name = 'Application.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '18a4783c-866b-4cc7-a460-3d5e5662c884'

            Name = 'Application.ReadWrite.OwnedBy'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '06b708a9-e830-4db3-a914-8e69da51d44f'

            Name = 'AppRoleAssignment.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '84bccea3-f856-4a8a-967b-dbe0a3d53a64'

            Name = 'AppRoleAssignment.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '9241abd9-d0e6-425a-bd4f-47ba86e767a4'

            Name = 'DeviceManagementConfiguration.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '0883f392-0a7a-443d-8c76-16a6d39c7b63'

            Name = 'DeviceManagementConfiguration.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'e330c4f0-4170-414e-a55a-2f022ec2b57b'

            Name = 'DeviceManagementRBAC.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '0c5e8a55-87a6-4556-93ab-adc52c4d862d'

            Name = 'DeviceManagementRBAC.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '19dbc75e-c2e2-444c-a770-ec69d8559fc7'

            Name = 'Directory.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'c5366453-9fb0-48a5-a156-24f0c49a4b84'

            Name = 'Directory.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '9acd699f-1e81-4958-b001-93b1d2506e19'

            Name = 'EntitlementManagement.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'ae7a573d-81d7-432b-ad44-4ed5c9d89038'

            Name = 'EntitlementManagement.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '62a82d76-70ea-41e2-9197-370581804d09'

            Name = 'Group.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '4e46008b-f24c-477d-8fff-7bb4ec7aafe0'

            Name = 'Group.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'dbaae8cf-10b5-4b86-a4a1-f871c94c6695'

            Name = 'GroupMember.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'f81125ac-d3b7-4573-a3b2-7099cc39df9e'

            Name = 'GroupMember.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '29c18626-4985-4dcd-85c0-193eef327366'

            Name = 'Policy.ReadWrite.AuthenticationMethod'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '7e823077-d88e-468f-a337-e18f1f0e6c7c'

            Name = 'Policy.ReadWrite.AuthenticationMethod'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'a402ca1c-2696-4531-972d-6e5ee4aa11ea'

            Name = 'Policy.ReadWrite.PermissionGrant'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '2672f8bb-fd5e-42e0-85e1-ec764dd2614e'

            Name = 'Policy.ReadWrite.PermissionGrant'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '618b6020-bca8-4de6-99f6-ef445fa4d857'

            Name = 'PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'ba974594-d163-484e-ba39-c330d5897667'

            Name = 'PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'fee28b28-e1f3-4841-818e-2704dc62245f'

            Name = 'RoleEligibilitySchedule.ReadWrite.Directory'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '62ade113-f8e0-4bf9-a6ba-5acb31db32fd'

            Name = 'RoleEligibilitySchedule.ReadWrite.Directory'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'b38dcc4d-a239-4ed6-aa84-6c65b284f97c'

            Name = 'RoleManagementPolicy.ReadWrite.AzureADGroup'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '0da165c7-3f15-4236-b733-c0b0f6abe41d'

            Name = 'RoleManagementPolicy.ReadWrite.AzureADGroup'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '31e08e0a-d3f7-4ca2-ac39-7343fb83e8ad'

            Name = 'RoleManagementPolicy.ReadWrite.Directory'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '1ff1be21-34eb-448c-9ac9-ce1f506b2a68'

            Name = 'RoleManagementPolicy.ReadWrite.Directory'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '741f803b-c850-494e-b5df-cde7c675a1ca'

            Name = 'User.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '204e0828-b5ca-4ad8-b9f3-f32a958e7cc4'

            Name = 'User.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'cc117bb9-00cf-4eb8-b580-ea2a878fe8f7'

            Name = 'User-PasswordProfile.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '56760768-b641-451f-8906-e1b8ab31bca7'

            Name = 'User-PasswordProfile.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '9241abd9-d0e6-425a-bd4f-47ba86e767a4'

            Name = 'DeviceManagementConfiguration.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '0883f392-0a7a-443d-8c76-16a6d39c7b63'

            Name = 'DeviceManagementConfiguration.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = 'e330c4f0-4170-414e-a55a-2f022ec2b57b'

            Name = 'DeviceManagementRBAC.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '0c5e8a55-87a6-4556-93ab-adc52c4d862d'

            Name = 'DeviceManagementRBAC.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '7e05723c-0bb0-42da-be95-ae9f08a6e53c'

            Name = 'Domain.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '0b5d694c-a244-4bde-86e6-eb5cd07730fe'

            Name = 'Domain.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '292d869f-3427-49a8-9dab-8c70152b74e9'

            Name = 'Organization.ReadWrite.All'

            Type = 'Application'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '46ca0847-7e6b-426e-9775-ea810a948356'

            Name = 'Organization.ReadWrite.All'

            Type = 'Delegated'

            Path = 'Indirect'

        }

        [pscustomobject]@{

            Id   = '01c0a623-fc9b-48e9-b794-0756f8e8f067'

            Name = 'Policy.ReadWrite.ConditionalAccess'

            Type = 'Application'

            Path = 'Direct'

        }

        [pscustomobject]@{

            Id   = 'ad902697-1014-4ef5-81ef-2b4301988e8c'

            Name = 'Policy.ReadWrite.ConditionalAccess'

            Type = 'Delegated'

            Path = 'Direct'

        }

    )

    $return = $true

    Write-Verbose 'Test-MtHighRiskAppPermissions: Checking applications for high-risk permissions'

    try {

        $allApiAssignments = [System.Collections.Generic.List[PSCustomObject]]::new()

        $allServicePrincipals = Invoke-MtGraphRequest -RelativeUri 'servicePrincipals'

        foreach ($sp in $allServicePrincipals) {

            if (([string]::IsNullOrEmpty($sp.Id))) {

                continue

            }

            $spUrl = "https://entra.microsoft.com/#view/Microsoft_AAD_IAM/ManagedAppMenuBlade/~/Overview/objectId/$($sp.id)/appId/$($sp.appId)"

            $spAppRoleAssignments = Invoke-MgGraphRequest -Uri "https://graph.microsoft.com/v1.0/servicePrincipals/$($sp.Id)/appRoleAssignments" -Method GET

            $spAppRoleAssignments.value | ForEach-Object {

                $allApiAssignments.Add([PSCustomObject]@{

                        appDisplayName = $sp.appDisplayName

                        objectId       = $sp.Id

                        appId          = $sp.appId

                        appUrl         = $spUrl

                        permissionId   = $_.appRoleId

                        permissionName = $null

                        type           = 'Application'

                    })

            }

            $spOauth2PermissionGrants = Invoke-MgGraphRequest -Uri "https://graph.microsoft.com/v1.0/servicePrincipals/$($sp.Id)/oauth2PermissionGrants" -Method GET

            $spOauth2PermissionGrants.value | ForEach-Object {

                $_.scope.Split(' ') | ForEach-Object {

                    $allApiAssignments.Add([PSCustomObject]@{

                            appDisplayName = $sp.appDisplayName

                            objectId       = $sp.Id

                            appId          = $sp.appId

                            appUrl         = $spUrl

                            permissionId   = $null

                            permissionName = $_.Trim()

                            type           = 'Delegated'

                        })

                }

            }

        }

        if ($attackPath -ne 'All') {

            $allCriticalGraphPermissionsToCheck = $allCriticalGraphPermissions | Where-Object { $_.Path -eq $attackPath }

            $attackPathStr = $attackPath.ToLower()

        } else {

            $attackPathStr = 'direct or indirect'

            $allCriticalGraphPermissionsToCheck = $allCriticalGraphPermissions

        }

        $allAssignedCriticalPermissions = [System.Collections.Generic.List[PSCustomObject]]::new()

        foreach ($apiAssignment in $allApiAssignments) {

            foreach ($criticalGraphPermission in $allCriticalGraphPermissionsToCheck) {

                $compareAssignment = if ($apiAssignment.type -eq 'Application') { $apiAssignment.permissionId } else { $apiAssignment.permissionName }

                $compareGraphPermission = if ($apiAssignment.type -eq 'Application') { $criticalGraphPermission.Id } else { $criticalGraphPermission.Name }

                if (($compareAssignment -eq $compareGraphPermission) -and ($apiAssignment.type -eq $criticalGraphPermission.Type)) {

                    $allAssignedCriticalPermissions.Add([PSCustomObject]@{

                            ApplicationName = $apiAssignment.appDisplayName

                            ApplicationId   = $apiAssignment.appId

                            ApplicationUrl  = $apiAssignment.appUrl

                            PermissionName  = $criticalGraphPermission.Name

                            PermissionType  = $criticalGraphPermission.Type

                            AttackPath      = $criticalGraphPermission.Path

                        })

                }

            }

        }

        $return = if (($allAssignedCriticalPermissions | Measure-Object).Count -eq 0) { $true } else { $false }

        if ($return) {

            $testResultMarkdown = "Well done. No application has graph permissions with a risk of having a $($attackPathStr) path to Global Admin and full tenant takeover."

        } else {

            $testResultMarkdown = "At least one application has graph permissions with a risk of having a $($attackPathStr) path to Global Admin and full tenant takeover.`n`n%TestResult%"

            $result = "| ApplicationName | ApplicationId | PermissionName | PermissionType | AttackPath |`n"

            $result += "| --- | --- | --- | --- | --- |`n"

            foreach ($assignedCriticalPermission in $allAssignedCriticalPermissions) {

                $appMdLink = "[$($assignedCriticalPermission.ApplicationName)]($($assignedCriticalPermission.ApplicationUrl))"

                $result += "| $($appMdLink) | $($assignedCriticalPermission.ApplicationId) | $($assignedCriticalPermission.PermissionName) | $($assignedCriticalPermission.PermissionType) | $($assignedCriticalPermission.AttackPath) |`n"

            }

            $testResultMarkdown = $testResultMarkdown -replace '%TestResult%', $result

        }

        Add-MtTestResultDetail -Result $testResultMarkdown

        return $return

    } catch {

        Add-MtTestResultDetail -SkippedBecause Error -SkippedError $_

        return $null

    }

}

# SIG # Begin signature block

# MIIu5QYJKoZIhvcNAQcCoIIu1jCCLtICAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDKmBwX7mdUWrkm

# 3C0kcNwc2dQT9zoqwZtUcy7yPHC3CKCCE5EwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggdFMIIFLaADAgECAhAP1Kd7fuviGgjvj8ZCqpTVMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjUwNDEwMDAwMDAwWhcNMjgwNzA2MjM1OTU5WjBNMQsw

# CQYDVQQGEwJERTEQMA4GA1UEBxMHSGFtYnVyZzEVMBMGA1UEChMMRmFiaWFuIEJh

# ZGVyMRUwEwYDVQQDEwxGYWJpYW4gQmFkZXIwggIiMA0GCSqGSIb3DQEBAQUAA4IC

# DwAwggIKAoICAQCJI0Z1dyHcnutVp/vdHkC2p3oq9xB8JqGYqLRMR/SoBLgI5i+V

# 3AWxu45/ue9MKtlBRlV5d7UAgVoFd9E/aB/aExr0Oj69sPmuI+O2zPozn6UMc9ci

# tp8L2JRHNpN9KWuA06dmUD/VYPRgqmNtGQFW57XaEJ8klHPDxGuigxzudqJveifK

# QjRoRlSileoVhyjlt6tEyorfRgd1VVWFxkso1qVEjn3ucml+DzrA+ZKiDp//C8+N

# TMu9qMecEsXWPk4qhCla7MO1XpDJb8NE/4WY+PYFrwpxSwiBisWlpA8cgf7i7dhI

# 4P9kTMZz8Cl5OB8/DrsZuv0Fxwmmu88b4uo7nI3HwzfnU/wkNO92g8cywdXHgMDp

# IT++srZXnSQG+Pc4TFAQ8dHHBHxabqTSoZpNYQXQySVSvbpavpcAOhgBg4x2gefD

# Y7Y+iEoLXxwFMIQE908pFHj6+iLlmiKHWLt5eSXtwXoJ83XykFlUXTQ9WW+eo9YI

# lB0GZrwq/4g6nx7mWVG3lIcbfF7oDLUt1d7FhqhWHboYTlRMfkVpOz3TCjma9PY3

# R34n7ejn6cF+kkBK6EX3otlmBtb2sXdPModfceLJbfoU0X1la5tExpQjDHbQ8p/5

# HZLFQ0aGe7BDqBKW3HvIQjw81KMUXBToYvODHXiTNlQl1AZHpZCAf/YnKQIDAQAB

# o4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHQYDVR0O

# BBYEFM+bqr/hMxUPyRKDe3JjUSSVDqK/MD4GA1UdIAQ3MDUwMwYGZ4EMAQQBMCkw

# JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B

# Af8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwgbUGA1UdHwSBrTCBqjBToFGg

# T4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29k

# ZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwU6BRoE+GTWh0dHA6Ly9j

# cmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNB

# NDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEFBQcBAQSBhzCBhDAkBggrBgEF

# BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFwGCCsGAQUFBzAChlBodHRw

# Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2ln

# bmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJBgNVHRMEAjAAMA0GCSqGSIb3

# DQEBCwUAA4ICAQBKBhy38Rsh6QNW5pFN6JD9MFjRO9NBJGtwVo1J4/DGrtBVQuyV

# wQC9eB1LFgUsKcUWb0hjnS2/J0W3sC9Tt9LHVvhyh+g0Vba+kq3hE284I0C33gaG

# P0Orfepx03oSOX/js0OK3+M5f47bSpeOP4t30ms7STRQKK4KQIAN2MBv3uZ0zO/5

# 695DjB9N1chLPEm82Vn6jtdrq3IJTpPBfksd3V8Ex215LiJLeU2E5EuIfiu/PI22

# M8L4zpXkXlZRUXCfppQA7vjQtzFudl2PqqVVb4+4gyAu/bWRNkVx+D6lAN0hMewh

# PiFwKDoPwO+cycQ5I6IaFEHONcEEANov6XoaCxQoIoXMd3tm3VEl5Wr9yXEEL+hn

# CpcPmGE1d1iloJC0/Uf/TCsf1dSYd2vY4aRdess1GAidk2T27SrkmoHpdvZdYdNA

# ts2doFCTyI6sV2c/jYMpL2NJOYWbhq5AxOuu+DLiw1kDsc/KPmrTuSzBGb7nBuJs

# 0QHR4toabNeYUGyKzMJGeibhy434gfyXXLKOWaik8NceybN4M1kROqHL/+PtB5zf

# Z1me2ygRrKtaP6RJXGvc8EcP5CEdlQOL6tiCg2ARMTYNxnsiLN9mRU9hkzo9BSJ4

# Vm+C6RKABzZj0whAObyqL/PceLKuAqvGoXbhGx8fXhKEgbnSoJ3VsqROFjGCGqow

# ghqmAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMu

# MUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBSU0E0

# MDk2IFNIQTM4NCAyMDIxIENBMQIQD9Sne37r4hoI74/GQqqU1TANBglghkgBZQME

# AgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqGSIb3DQEJAzEM

# BgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqG

# SIb3DQEJBDEiBCCigWP29umxJqWasicU7zMVX5wh4u/3uXTkMoCb98uHZTANBgkq

# hkiG9w0BAQEFAASCAgACsC62Z2OnjjqSpK9ZsYQaXC4tblTgwZiiSW8GjaTht81Q

# d8RsHPDPj3fbvW1gHaWUKMzh6X09482jsHoJwrIEdTvlpmSzPBqtsGw07L4nvajY

# HbQB62z/KLqXfLNbmx7Q2d6yu1RmNt9wpaT13+/AxeomcqXb470WsQ+iJP3kTo+J

# zUKk0Kgu+i+MZ6lCmBLKN2dxBf3NHY4NQ7Ddi+U8ckce+YRzdtzJx4lDv6s6jIvN

# rgVcEFmtquonIo28rARWUV80koeXSliclLKvLcTvNEHYXS5WUOqf+fk8WSOdT5UL

# 0HHy41Sx2QjkVWISSza1Axpm7S2QUj5zqNp6bQKQDGsZ/Cug/eB3rKhxa5fPLv5W

# wBpy9V3JH7G/ZhnjiFG4UeEO2lVahST3Gis9uxvjq8NCvX0clgT5USfFwrH+/1Pn

# x8AeQHA48FrhFewX3pxqalJ4o6efgKj7buRK1dsjQYHVIU6Je5y9XQUraSecOFgs

# gnUxh3dLOPe8xgtna7PL89lid3lZme5Tuhb1/dPtVruemT9NxJddwv/Z3uTeLNIY

# qdnK1OBk14V/jvTFTGlHCfhs1kJdYRNZ2P+O0GDEPm3nlAWtN+M3Rw7JzY0B74dH

# NaPCshvBEYt1ASVyTtutFW6J0GpAVazGVMY6v1fccmnk+DtgUSoI3MCWEt1QJKGC

# F3cwghdzBgorBgEEAYI3AwMBMYIXYzCCF18GCSqGSIb3DQEHAqCCF1AwghdMAgED

# MQ8wDQYJYIZIAWUDBAIBBQAweAYLKoZIhvcNAQkQAQSgaQRnMGUCAQEGCWCGSAGG

# /WwHATAxMA0GCWCGSAFlAwQCAQUABCCe0xRZgVwoMVUPJB7yHk9pIZ47pejkabXe

# V9JLDOo1FAIRAKoJVKZepI6TsCZDVgEwW/sYDzIwMjUwNzEzMjEzMTIzWqCCEzow

# ggbtMIIE1aADAgECAhAKgO8YS43xBYLRxHanlXRoMA0GCSqGSIb3DQEBCwUAMGkx

# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4

# RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYg

# MjAyNSBDQTEwHhcNMjUwNjA0MDAwMDAwWhcNMzYwOTAzMjM1OTU5WjBjMQswCQYD

# VQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lD

# ZXJ0IFNIQTI1NiBSU0E0MDk2IFRpbWVzdGFtcCBSZXNwb25kZXIgMjAyNSAxMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0EasLRLGntDqrmBWsytXum9R

# /4ZwCgHfyjfMGUIwYzKomd8U1nH7C8Dr0cVMF3BsfAFI54um8+dnxk36+jx0Tb+k

# +87H9WPxNyFPJIDZHhAqlUPt281mHrBbZHqRK71Em3/hCGC5KyyneqiZ7syvFXJ9

# A72wzHpkBaMUNg7MOLxI6E9RaUueHTQKWXymOtRwJXcrcTTPPT2V1D/+cFllESvi

# H8YjoPFvZSjKs3SKO1QNUdFd2adw44wDcKgH+JRJE5Qg0NP3yiSyi5MxgU6cehGH

# r7zou1znOM8odbkqoK+lJ25LCHBSai25CFyD23DZgPfDrJJJK77epTwMP6eKA0kW

# a3osAe8fcpK40uhktzUd/Yk0xUvhDU6lvJukx7jphx40DQt82yepyekl4i0r8OEp

# s/FNO4ahfvAk12hE5FVs9HVVWcO5J4dVmVzix4A77p3awLbr89A90/nWGjXMGn7F

# QhmSlIUDy9Z2hSgctaepZTd0ILIUbWuhKuAeNIeWrzHKYueMJtItnj2Q+aTyLLKL

# M0MheP/9w6CtjuuVHJOVoIJ/DtpJRE7Ce7vMRHoRon4CWIvuiNN1Lk9Y+xZ66laz

# s2kKFSTnnkrT3pXWETTJkhd76CIDBbTRofOsNyEhzZtCGmnQigpFHti58CSmvEyJ

# cAlDVcKacJ+A9/z7eacCAwEAAaOCAZUwggGRMAwGA1UdEwEB/wQCMAAwHQYDVR0O

# BBYEFOQ7/PIx7f391/ORcWMZUEPPYYzoMB8GA1UdIwQYMBaAFO9vU0rp5AZ8esri

# kFb2L9RJ7MtOMA4GA1UdDwEB/wQEAwIHgDAWBgNVHSUBAf8EDDAKBggrBgEFBQcD

# CDCBlQYIKwYBBQUHAQEEgYgwgYUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp

# Z2ljZXJ0LmNvbTBdBggrBgEFBQcwAoZRaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu

# Y29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1waW5nUlNBNDA5NlNIQTI1NjIw

# MjVDQTEuY3J0MF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0

# LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYy

# MDI1Q0ExLmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJ

# KoZIhvcNAQELBQADggIBAGUqrfEcJwS5rmBB7NEIRJ5jQHIh+OT2Ik/bNYulCrVv

# hREafBYF0RkP2AGr181o2YWPoSHz9iZEN/FPsLSTwVQWo2H62yGBvg7ouCODwrx6

# ULj6hYKqdT8wv2UV+Kbz/3ImZlJ7YXwBD9R0oU62PtgxOao872bOySCILdBghQ/Z

# LcdC8cbUUO75ZSpbh1oipOhcUT8lD8QAGB9lctZTTOJM3pHfKBAEcxQFoHlt2s9s

# XoxFizTeHihsQyfFg5fxUFEp7W42fNBVN4ueLaceRf9Cq9ec1v5iQMWTFQa0xNqI

# tH3CPFTG7aEQJmmrJTV3Qhtfparz+BW60OiMEgV5GWoBy4RVPRwqxv7Mk0Sy4QHs

# 7v9y69NBqycz0BZwhB9WOfOu/CIJnzkQTwtSSpGGhLdjnQ4eBpjtP+XB3pQCtv4E

# 5UCSDag6+iX8MmB10nfldPF9SVD7weCC3yXZi/uuhqdwkgVxuiMFzGVFwYbQsiGn

# oa9F5AaAyBjFBtXVLcKtapnMG3VH3EmAp/jsJ3FVF3+d1SVDTmjFjLbNFZUWMXuZ

# yvgLfgyPehwJVxwC+UpX2MSey2ueIu9THFVkT+um1vshETaWyQo8gmBto/m3acaP

# 9QsuLj3FNwFlTxq25+T4QwX9xa6ILs84ZPvmpovq90K8eWyG2N01c4IhSOxqt81n

# MIIGtDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJhjANBgkqhkiG9w0BAQsFADBi

# MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3

# d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg

# RzQwHhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1OTU5WjBpMQswCQYDVQQGEwJV

# UzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRy

# dXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0ExMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtHgx0wqYQXK+PEbAHKx126NG

# aHS0URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkbsDpz4aH+qbxeLho8I6jY3xL1

# IusLopuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+AbdJgMQB3h2DZ0Mal5kYp77j

# YMVQXSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAktVJMQbzIBHYJBYgzWIjk8eDrY

# hXDEpKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3Gmq6bNMI1I7Gb5IBZK4ivbVC

# iZv7PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv82wnJRfN20VRS3hpLgIR4hjzL

# 0hpoYGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638ZxqU14lDnki7CcoKCz6eum5A1

# 9WZQHkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7VvwDDjAmSFTUms+wV/FbWBqi7

# fTJnjq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2NL+cnT6Toy+rN+nM8M7LnLqCr

# O2JP3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTKIsDq1BtmXUqEG1NqzJKS4kOm

# xkYp2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUozZtqgPrHRVHhGNKlYzyjlroPx

# ul+bgIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIGA1UdEwEB/wQIMAYBAf8CAQAw

# HQYDVR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtOMB8GA1UdIwQYMBaAFOzX44LS

# cV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEF

# BQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp

# Z2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQu

# Y29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYy

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5j

# cmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEB

# CwUAA4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N0IfFiBowf0/Dm1wGc/Do7oVM

# Y2mhXZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7Jd2E4/iEIUBO41P5F448rSYJ5

# 9Ib61eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1jEMK/DMm/axFSgoR8n6c3nuZB

# 9BfBwAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdogP8HRtrYfctSLANEBfHU16r3J

# 05qX3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMvNYY2o1f4MXRJDMdTSlOLh0HC

# n2cQLwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBldNE2K9i697cvaiIo2p61Ed2p8

# xMJb82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjTY6hc3hsXMrS+U0yy+GWqAXam

# 4ToWd2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/BdHLiRu7hAWE6bTEm4XYRkA6T

# l4KSFLFk43esaUeqGkH/wyW4N7OigizwJWeukcyIPbAvjSabnf7+Pu0VrFgoiovR

# Diyx3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8dC3JE3rYkrhLULy7Dc90G6e8

# BlqmyIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2jNrbM1pD2T7m3XDCCBY0wggR1

# oAMCAQICEA6bGI750C3n79tQ4ghAGFowDQYJKoZIhvcNAQEMBQAwZTELMAkGA1UE

# BhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj

# ZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4X

# DTIyMDgwMTAwMDAwMFoXDTMxMTEwOTIzNTk1OVowYjELMAkGA1UEBhMCVVMxFTAT

# BgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEh

# MB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290IEc0MIICIjANBgkqhkiG9w0B

# AQEFAAOCAg8AMIICCgKCAgEAv+aQc2jeu+RdSjwwIjBpM+zCpyUuySE98orYWcLh

# Kac9WKt2ms2uexuEDcQwH/MbpDgW61bGl20dq7J58soR0uRf1gU8Ug9SH8aeFaV+

# vp+pVxZZVXKvaJNwwrK6dZlqczKU0RBEEC7fgvMHhOZ0O21x4i0MG+4g1ckgHWMp

# Lc7sXk7Ik/ghYZs06wXGXuxbGrzryc/NrDRAX7F6Zu53yEioZldXn1RYjgwrt0+n

# MNlW7sp7XeOtyU9e5TXnMcvak17cjo+A2raRmECQecN4x7axxLVqGDgDEI3Y1Dek

# LgV9iPWCPhCRcKtVgkEy19sEcypukQF8IUzUvK4bA3VdeGbZOjFEmjNAvwjXWkmk

# wuapoGfdpCe8oU85tRFYF/ckXEaPZPfBaYh2mHY9WV1CdoeJl2l6SPDgohIbZpp0

# yt5LHucOY67m1O+SkjqePdwA5EUlibaaRBkrfsCUtNJhbesz2cXfSwQAzH0clcOP

# 9yGyshG3u3/y1YxwLEFgqrFjGESVGnZifvaAsPvoZKYz0YkH4b235kOkGLimdwHh

# D5QMIR2yVCkliWzlDlJRR3S+Jqy2QXXeeqxfjT/JvNNBERJb5RBQ6zHFynIWIgnf

# fEx1P2PsIV/EIFFrb7GrhotPwtZFX50g/KEexcCPorF+CiaZ9eRpL5gdLfXZqbId

# 5RsCAwEAAaOCATowggE2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOzX44LS

# cV1kTN8uZz/nupiuHA9PMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgP

# MA4GA1UdDwEB/wQEAwIBhjB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0

# dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2Vy

# dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDBFBgNV

# HR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRB

# c3N1cmVkSURSb290Q0EuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0B

# AQwFAAOCAQEAcKC/Q1xV5zhfoKN0Gz22Ftf3v1cHvZqsoYcs7IVeqRq7IviHGmlU

# Iu2kiHdtvRoU9BNKei8ttzjv9P+Aufih9/Jy3iS8UgPITtAq3votVs/59PesMHqa

# i7Je1M/RQ0SbQyHrlnKhSLSZy51PpwYDE3cnRNTnf+hZqPC/Lwum6fI0POz3A8eH

# qNJMQBk1RmppVLC4oVaO7KTVPeix3P0c2PR3WlxUjG/voVA9/HYJaISfb8rbII01

# YBwCA8sgsKxYoA5AY8WYIsGyWfVVa88nq2x2zm8jLfR+cWojayL/ErhULSd+2DrZ

# 8LaHlv1b0VysGMNNn3O3AamfV6peKOK5lDGCA3wwggN4AgEBMH0waTELMAkGA1UE

# BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2Vy

# dCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENB

# MQIQCoDvGEuN8QWC0cR2p5V0aDANBglghkgBZQMEAgEFAKCB0TAaBgkqhkiG9w0B

# CQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI1MDcxMzIxMzEyM1ow

# KwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQU3WIwrIYKLTBr2jixaHlSMAf7QX4wLwYJ

# KoZIhvcNAQkEMSIEIDmlbNh+K+OMSJ4M8DRwjIWZ0Zl/zgivvDUYP4yKCDttMDcG

# CyqGSIb3DQEJEAIvMSgwJjAkMCIEIEqgP6Is11yExVyTj4KOZ2ucrsqzP+NtJpqj

# NPFGEQozMA0GCSqGSIb3DQEBAQUABIICALb3nnqGnRbrqWAtxEwd4Dj0lVcpqB7a

# QSY7xFTKDGb1l7cHzvcqVzNOJZ38CVc4oLKBia/ORheauCc/1QRW5Y4pea3qLkkG

# QPL3VRW8L9naB0th3Z+/R/6TPTnZ0N7N/Z9DAPO7B3AuDD2sjvZGtHKK17JSTW1D

# 0TETpm20w78l2L0oh9iR34F5PfcDfM83CLWdyheqz4xx5l9+8ZaINZLlgLZtTssG

# Qf1P5nOACvL2bisBdaXkgmtCyjzmD3XrHbF7wjD1neb7p1Pw0fqeZLwfwoTXsHHb

# UAohvP54qi5nPIdq/0dOMUiGqBG699MeDgLgvyvs9bIn/BE3vouWprJz9kV/GRTj

# YJFkN3BQLtko56D1M4YtwyTvyms7Jc8cdSrNoDcqLaf/nnSvx9INuSUFgbFxFE2A

# /Ktt/OyxPWXTPk1t7yoTzD7KJEnEMH68Cpzo11D5e4y1du7NcGgHttJBMbaQ/KkJ

# nHGlGPGN+S+7p9n7mAlHRsSjWsjgxjmt7dMT4SResU8JX9sk+UU3DPWJh9lheEOH

# g5JnxgQZk5CW0vM2EENBl7hKbG4Rwh+NUaUyKK2oxNVSMAfibtyzEKroc/nOzl9U

# Zb/9/EuK0kya8b9BmiSJiN7CGoQ2qWiSg8MnqVkoBibyjIOk27IxePWkcPskKhnl

# fMO45POd2gPc

# SIG # End signature block