OwnerLens

0.1.11-preview14

Private/Invoke-OwnerLensPrepareEntraSnapshot.ps1

                                <#

.SYNOPSIS

Creates an OwnerLens Microsoft Entra snapshot file.

.DESCRIPTION

Exports service principals, application registrations, groups, group membership facts, owners, credentials, and permissions into the local JSON snapshot consumed by OwnerLens.

#>

function Invoke-OwnerLensPrepareEntraSnapshot {

  [CmdletBinding()]

  param(

  [string]$OutputPath = ".\data\entra-snapshot.json"

  )

$ownerExpand = "owners(`$select=id,displayName,userPrincipalName,mail)"

function Write-EntraSnapshotProgress {

  param([string]$Message)

  $timestamp = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss")

  Write-Host "[$timestamp] $Message"

}

function Get-EntraGroupMembersIncludingServicePrincipals {

  param(

    [Parameter(Mandatory = $true)]

    [string]$GroupId

  )

  $members = @()

  $uri = "/beta/groups/$($GroupId)/members?`$select=id,displayName,userPrincipalName,mail,appId,servicePrincipalType&`$top=999"

  while ($uri) {

    $response = Invoke-MgGraphRequest -Method GET -Uri $uri -OutputType PSObject

    $members += @($response.value)

    $nextLinkProperty = $response.PSObject.Properties["@odata.nextLink"]

    $uri = if ($nextLinkProperty) { $nextLinkProperty.Value } else { $null }

  }

  return $members

}

function Get-EntraOAuth2PermissionGrants {

  $grants = @()

  $uri = "/v1.0/oauth2PermissionGrants?`$select=id,clientId,consentType,principalId,resourceId,scope&`$top=999"

  while ($uri) {

    $response = Invoke-MgGraphRequest -Method GET -Uri $uri -OutputType PSObject

    $grants += @($response.value)

    $nextLinkProperty = $response.PSObject.Properties["@odata.nextLink"]

    $uri = if ($nextLinkProperty) { $nextLinkProperty.Value } else { $null }

  }

  return $grants

}

function ConvertTo-GraphBatchRelativeUrl {

  param(

    [Parameter(Mandatory = $true)]

    [string]$Url

  )

  if ($Url.StartsWith("https://graph.microsoft.com/v1.0", [System.StringComparison]::OrdinalIgnoreCase)) {

    return $Url.Substring("https://graph.microsoft.com/v1.0".Length)

  }

  if ($Url.StartsWith("/v1.0/", [System.StringComparison]::OrdinalIgnoreCase)) {

    return $Url.Substring("/v1.0".Length)

  }

  if ($Url.StartsWith("/", [System.StringComparison]::Ordinal)) {

    return $Url

  }

  return "/$Url"

}

function Get-EntraServicePrincipalAppRoleAssignmentsBatch {

  param(

    [array]$ServicePrincipals = @()

  )

  $assignments = @()

  $pendingRequests = @(

    foreach ($sp in @($ServicePrincipals)) {

      if ($sp -and -not [string]::IsNullOrWhiteSpace([string]$sp.Id)) {

        [pscustomobject]@{

          servicePrincipalId = [string]$sp.Id

          servicePrincipalDisplayName = [string]$sp.DisplayName

          url = "/servicePrincipals/$($sp.Id)/appRoleAssignments?`$select=id,appRoleId,principalId,principalDisplayName,resourceId,resourceDisplayName&`$top=999"

        }

      }

    }

  )

  $completedRequestCount = 0

  $totalInitialRequestCount = $pendingRequests.Count

  $batchSize = 20

  while ($pendingRequests.Count -gt 0) {

    $currentBatch = @($pendingRequests | Select-Object -First $batchSize)

    $pendingRequests = @($pendingRequests | Select-Object -Skip $currentBatch.Count)

    $batchRequests = @()

    $requestById = @{}

    for ($requestIndex = 0; $requestIndex -lt $currentBatch.Count; $requestIndex++) {

      $requestId = [string]($requestIndex + 1)

      $request = $currentBatch[$requestIndex]

      $requestById[$requestId] = $request

      $batchRequests += [pscustomobject]@{

        id = $requestId

        method = "GET"

        url = $request.url

      }

    }

    $body = @{ requests = $batchRequests } | ConvertTo-Json -Depth 10

    $response = Invoke-MgGraphRequest -Method POST -Uri "/v1.0/`$batch" -Body $body -ContentType "application/json" -OutputType PSObject

    foreach ($batchResponse in @($response.responses)) {

      $request = $requestById[[string]$batchResponse.id]

      if (-not $request) {

        continue

      }

      if ($batchResponse.status -lt 200 -or $batchResponse.status -ge 300) {

        throw "Graph batch app role assignment query failed for service principal $($request.servicePrincipalDisplayName) ($($request.servicePrincipalId)) with status $($batchResponse.status)."

      }

      $assignments += @($batchResponse.body.value)

      $nextLinkProperty = $batchResponse.body.PSObject.Properties["@odata.nextLink"]

      if ($nextLinkProperty) {

        $pendingRequests += [pscustomobject]@{

          servicePrincipalId = $request.servicePrincipalId

          servicePrincipalDisplayName = $request.servicePrincipalDisplayName

          url = ConvertTo-GraphBatchRelativeUrl -Url $nextLinkProperty.Value

        }

      }

      $completedRequestCount += 1

    }

    Write-EntraSnapshotProgress "Loaded app role assignment pages: $completedRequestCount; initial service principal requests: $totalInitialRequestCount; pending page requests: $($pendingRequests.Count)"

  }

  return $assignments

}

$requiredGraphModules = @(

  "Microsoft.Graph.Authentication",

  "Microsoft.Graph.Applications"

)

foreach ($moduleName in $requiredGraphModules) {

  try {

    Import-Module $moduleName -ErrorAction Stop

  } catch {

    throw "Microsoft Graph PowerShell module missing: $moduleName. Install: Install-Module Microsoft.Graph -Scope CurrentUser"

  }

}

Write-EntraSnapshotProgress "Checking Microsoft Graph context"

$context = Get-MgContext

if (-not $context) {

  throw 'Not connected. Run: Connect-MgGraph -TenantId "<tenant-id>" -Scopes "Application.Read.All","Group.Read.All","Directory.Read.All"'

}

$snapshot = [ordered]@{

  meta = [ordered]@{

    provider = "entra"

    snapshotVersion = "0.4"

    createdAt = (Get-Date).ToUniversalTime().ToString("o")

    tenantId = $context.TenantId

    account = $context.Account

    scopes = $context.Scopes

  }

  servicePrincipals = @()

  applications = @()

  oauth2PermissionGrants = @()

  appRoleAssignments = @()

  groups = @()

  groupMembers = @()

}

$oauth2PermissionGrantIds = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)

function Add-OAuth2PermissionGrantSnapshot {

  param(

    [Parameter(Mandatory = $true)]

    $Grant

  )

  if ([string]::IsNullOrWhiteSpace([string]$Grant.Id)) {

    return

  }

  if (-not $oauth2PermissionGrantIds.Add([string]$Grant.Id)) {

    return

  }

  $snapshot.oauth2PermissionGrants += [pscustomobject]@{

    id = $Grant.Id

    clientId = $Grant.ClientId

    consentType = $Grant.ConsentType

    principalId = $Grant.PrincipalId

    resourceId = $Grant.ResourceId

    scope = $Grant.Scope

  }

}

Write-EntraSnapshotProgress "Loading service principals from Microsoft Graph"

$servicePrincipals = Get-MgServicePrincipal `

  -All `

  -Property Id,AppId,DisplayName,ServicePrincipalType,PublisherName,AccountEnabled,AppOwnerOrganizationId,AppDisplayName,Homepage,LoginUrl,ReplyUrls,ServicePrincipalNames,Tags,AppRoles `

  -ExpandProperty $ownerExpand

$servicePrincipals = @($servicePrincipals)

Write-EntraSnapshotProgress "Loaded $($servicePrincipals.Count) service principals"

$servicePrincipalById = @{}

foreach ($sp in $servicePrincipals) {

  $servicePrincipalById[$sp.Id] = $sp

}

Write-EntraSnapshotProgress "Loading applications from Microsoft Graph"

$applications = Get-MgApplication `

  -All `

  -Property Id,AppId,DisplayName,SignInAudience,PublisherDomain,IdentifierUris,Tags,AppRoles,Api,RequiredResourceAccess,Web,Spa,PublicClient,PasswordCredentials,KeyCredentials,CreatedDateTime,DeletedDateTime,DisabledByMicrosoftStatus,Info,Notes `

  -ExpandProperty $ownerExpand

$applications = @($applications)

Write-EntraSnapshotProgress "Loaded $($applications.Count) applications"

$applicationOwnersByAppId = New-ApplicationOwnerIndex -Applications $applications

foreach ($app in $applications) {

  $applicationOwners = Get-ApplicationOwnersByAppId -AppId $app.AppId -ApplicationOwnersByAppId $applicationOwnersByAppId

  $snapshot.applications += [pscustomobject]@{

    id = $app.Id

    appId = $app.AppId

    displayName = $app.DisplayName

    signInAudience = $app.SignInAudience

    publisherDomain = $app.PublisherDomain

    identifierUris = $app.IdentifierUris

    tags = @(ConvertTo-EntraSnapshotTags -Tags $app.Tags)

    appRoles = @($app.AppRoles | ForEach-Object { ConvertTo-ApplicationAppRoleSnapshot -AppRole $_ })

    oauth2PermissionScopes = @($app.Api.Oauth2PermissionScopes | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })

    requiredResourceAccess = @($app.RequiredResourceAccess | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })

    web = ConvertTo-SafeSnapshotValue -Value $app.Web

    spa = ConvertTo-SafeSnapshotValue -Value $app.Spa

    publicClient = ConvertTo-SafeSnapshotValue -Value $app.PublicClient

    passwordCredentials = @($app.PasswordCredentials | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })

    keyCredentials = @($app.KeyCredentials | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })

    createdDateTime = if ($app.CreatedDateTime) { $app.CreatedDateTime.ToUniversalTime().ToString("o") } else { $null }

    deletedDateTime = if ($app.DeletedDateTime) { $app.DeletedDateTime.ToUniversalTime().ToString("o") } else { $null }

    disabledByMicrosoftStatus = $app.DisabledByMicrosoftStatus

    info = ConvertTo-SafeSnapshotValue -Value $app.Info

    notes = $app.Notes

    owners = @($applicationOwners)

  }

}

foreach ($sp in $servicePrincipals) {

  $servicePrincipalOwners = Get-ExpandedOwnerSnapshots -DirectoryObject $sp

  $applicationOwners = Get-ApplicationOwnersByAppId -AppId $sp.AppId -ApplicationOwnersByAppId $applicationOwnersByAppId

  $snapshot.servicePrincipals += [pscustomobject]@{

    id = $sp.Id

    appId = $sp.AppId

    displayName = $sp.DisplayName

    appDisplayName = $sp.AppDisplayName

    servicePrincipalType = $sp.ServicePrincipalType

    publisherName = $sp.PublisherName

    accountEnabled = $sp.AccountEnabled

    appOwnerOrganizationId = $sp.AppOwnerOrganizationId

    homepage = $sp.Homepage

    loginUrl = $sp.LoginUrl

    replyUrls = $sp.ReplyUrls

    servicePrincipalNames = $sp.ServicePrincipalNames

    tags = @(ConvertTo-EntraSnapshotTags -Tags $sp.Tags)

    servicePrincipalOwners = @($servicePrincipalOwners)

    applicationOwners = @($applicationOwners)

    appRoles = @(

      $sp.AppRoles | ForEach-Object {

        [pscustomobject]@{

          id = $_.Id

          value = $_.Value

          displayName = $_.DisplayName

          description = $_.Description

          isEnabled = $_.IsEnabled

          allowedMemberTypes = $_.AllowedMemberTypes

        }

      }

    )

  }

}

Write-EntraSnapshotProgress "Loading global OAuth2 permission grants from Microsoft Graph REST"

$oauth2PermissionGrants = @(Get-EntraOAuth2PermissionGrants)

Write-EntraSnapshotProgress "Loaded $($oauth2PermissionGrants.Count) global OAuth2 permission grants"

foreach ($grant in $oauth2PermissionGrants) {

  Add-OAuth2PermissionGrantSnapshot -Grant $grant

}

Write-EntraSnapshotProgress "Loading app role assignments from Microsoft Graph REST batch for $($servicePrincipals.Count) service principals"

$appRoleAssignments = @(Get-EntraServicePrincipalAppRoleAssignmentsBatch -ServicePrincipals $servicePrincipals)

Write-EntraSnapshotProgress "Loaded $($appRoleAssignments.Count) app role assignments"

foreach ($assignment in $appRoleAssignments) {

  $resourceServicePrincipal = $servicePrincipalById[$assignment.ResourceId]

  $appRole = $null

  if ($resourceServicePrincipal -and $resourceServicePrincipal.AppRoles) {

    $appRole = $resourceServicePrincipal.AppRoles | Where-Object { [string]$_.Id -eq [string]$assignment.AppRoleId } | Select-Object -First 1

  }

  $snapshot.appRoleAssignments += [pscustomobject]@{

    id = $assignment.Id

    appRoleId = $assignment.AppRoleId

    appRoleDisplayName = if ($appRole) { $appRole.DisplayName } else { $null }

    appRoleValue = if ($appRole) { $appRole.Value } else { $null }

    principalId = $assignment.PrincipalId

    principalDisplayName = $assignment.PrincipalDisplayName

    resourceId = $assignment.ResourceId

    resourceDisplayName = $assignment.ResourceDisplayName

  }

}

$canReadGroups = $false

try {

  Import-Module Microsoft.Graph.Groups -ErrorAction Stop

  $canReadGroups = $true

} catch {

  Write-Warning "Microsoft.Graph.Groups could not be loaded. Skipping group snapshot. $($_.Exception.Message)"

}

if ($canReadGroups) {

  Write-EntraSnapshotProgress "Loading groups from Microsoft Graph"

  $groups = Get-MgGroup `

    -All `

    -Property Id,DisplayName,Description,Mail,MailEnabled,SecurityEnabled,GroupTypes,ProxyAddresses,Visibility

  $groups = @($groups)

  Write-EntraSnapshotProgress "Loaded $($groups.Count) groups"

  for ($groupIndex = 0; $groupIndex -lt $groups.Count; $groupIndex++) {

    $group = $groups[$groupIndex]

    Write-EntraSnapshotProgress "[$($groupIndex + 1)/$($groups.Count)] Loading group members for group: $($group.DisplayName) ($($group.Id))"

    $members = Get-EntraGroupMembersIncludingServicePrincipals -GroupId $group.Id

    $members = @($members)

    Write-EntraSnapshotProgress "[$($groupIndex + 1)/$($groups.Count)] Loaded $($members.Count) group members"

    $memberEmails = @(

      $members | ForEach-Object {

        $mail = Get-DirectoryObjectSnapshotValue -DirectoryObject $_ -Name "Mail"

        $userPrincipalName = Get-DirectoryObjectSnapshotValue -DirectoryObject $_ -Name "UserPrincipalName"

        if ($mail) {

          $mail

        } elseif ($userPrincipalName) {

          $userPrincipalName

        }

      } | Where-Object { $_ } | Select-Object -Unique

    )

    foreach ($member in $members) {

      $memberSnapshot = ConvertTo-GroupMemberSnapshot -Group $group -Member $member -ServicePrincipalById $servicePrincipalById

      if ($memberSnapshot.memberId) {

        $snapshot.groupMembers += $memberSnapshot

      }

    }

    $snapshot.groups += [pscustomobject]@{

      id = $group.Id

      displayName = $group.DisplayName

      description = $group.Description

      mail = $group.Mail

      mailEnabled = $group.MailEnabled

      securityEnabled = $group.SecurityEnabled

      groupTypes = $group.GroupTypes

      proxyAddresses = $group.ProxyAddresses

      visibility = $group.Visibility

      memberEmails = $memberEmails

      memberEmailCount = $memberEmails.Count

    }

  }

}

$snapshot.meta.servicePrincipalCount = $snapshot.servicePrincipals.Count

$snapshot.meta.applicationCount = $snapshot.applications.Count

$snapshot.meta.oauth2PermissionGrantCount = $snapshot.oauth2PermissionGrants.Count

$snapshot.meta.appRoleAssignmentCount = $snapshot.appRoleAssignments.Count

$snapshot.meta.groupCount = $snapshot.groups.Count

$snapshot.meta.groupMemberCount = $snapshot.groupMembers.Count

$outputDirectory = Split-Path -Parent $OutputPath

if (-not [string]::IsNullOrWhiteSpace($outputDirectory) -and -not (Test-Path $outputDirectory)) {

  New-Item -ItemType Directory -Path $outputDirectory -Force | Out-Null

}

$snapshot | ConvertTo-Json -Depth 20 | Out-File $OutputPath -Encoding utf8

}

# SIG # Begin signature block

# MII9MQYJKoZIhvcNAQcCoII9IjCCPR4CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCZvbIG0r3Cncwn

# /XIf+5nJNzD745aT/aaiPstlGsl31aCCIfYwggXMMIIDtKADAgECAhBUmNLR1FsZ

# lUgTecgRwIeZMA0GCSqGSIb3DQEBDAUAMHcxCzAJBgNVBAYTAlVTMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jvc29mdCBJZGVu

# dGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAy

# MDAeFw0yMDA0MTYxODM2MTZaFw00NTA0MTYxODQ0NDBaMHcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jv

# c29mdCBJZGVudGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRo

# b3JpdHkgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALORKgeD

# Bmf9np3gx8C3pOZCBH8Ppttf+9Va10Wg+3cL8IDzpm1aTXlT2KCGhFdFIMeiVPvH

# or+Kx24186IVxC9O40qFlkkN/76Z2BT2vCcH7kKbK/ULkgbk/WkTZaiRcvKYhOuD

# PQ7k13ESSCHLDe32R0m3m/nJxxe2hE//uKya13NnSYXjhr03QNAlhtTetcJtYmrV

# qXi8LW9J+eVsFBT9FMfTZRY33stuvF4pjf1imxUs1gXmuYkyM6Nix9fWUmcIxC70

# ViueC4fM7Ke0pqrrBc0ZV6U6CwQnHJFnni1iLS8evtrAIMsEGcoz+4m+mOJyoHI1

# vnnhnINv5G0Xb5DzPQCGdTiO0OBJmrvb0/gwytVXiGhNctO/bX9x2P29Da6SZEi3

# W295JrXNm5UhhNHvDzI9e1eM80UHTHzgXhgONXaLbZ7LNnSrBfjgc10yVpRnlyUK

# xjU9lJfnwUSLgP3B+PR0GeUw9gb7IVc+BhyLaxWGJ0l7gpPKWeh1R+g/OPTHU3mg

# trTiXFHvvV84wRPmeAyVWi7FQFkozA8kwOy6CXcjmTimthzax7ogttc32H83rwjj

# O3HbbnMbfZlysOSGM1l0tRYAe1BtxoYT2v3EOYI9JACaYNq6lMAFUSw0rFCZE4e7

# swWAsk0wAly4JoNdtGNz764jlU9gKL431VulAgMBAAGjVDBSMA4GA1UdDwEB/wQE

# AwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIftJqhSobyhmYBAcnz1AQ

# T2ioojAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQwFAAOCAgEAr2rd5hnn

# LZRDGU7L6VCVZKUDkQKL4jaAOxWiUsIWGbZqWl10QzD0m/9gdAmxIR6QFm3FJI9c

# Zohj9E/MffISTEAQiwGf2qnIrvKVG8+dBetJPnSgaFvlVixlHIJ+U9pW2UYXeZJF

# xBA2CFIpF8svpvJ+1Gkkih6PsHMNzBxKq7Kq7aeRYwFkIqgyuH4yKLNncy2RtNwx

# AQv3Rwqm8ddK7VZgxCwIo3tAsLx0J1KH1r6I3TeKiW5niB31yV2g/rarOoDXGpc8

# FzYiQR6sTdWD5jw4vU8w6VSp07YEwzJ2YbuwGMUrGLPAgNW3lbBeUU0i/OxYqujY

# lLSlLu2S3ucYfCFX3VVj979tzR/SpncocMfiWzpbCNJbTsgAlrPhgzavhgplXHT2

# 6ux6anSg8Evu75SjrFDyh+3XOjCDyft9V77l4/hByuVkrrOj7FjshZrM77nq81YY

# uVxzmq/FdxeDWds3GhhyVKVB0rYjdaNDmuV3fJZ5t0GNv+zcgKCf0Xd1WF81E+Al

# GmcLfc4l+gcK5GEh2NQc5QfGNpn0ltDGFf5Ozdeui53bFv0ExpK91IjmqaOqu/dk

# ODtfzAzQNb50GQOmxapMomE2gj4d8yu8l13bS3g7LfU772Aj6PXsCyM2la+YZr9T

# 03u4aUoqlmZpxJTG9F9urJh4iIAGXKKy7aIwggaoMIIEkKADAgECAhMzAAJQgQIM

# z27eN/obAAAAAlCBMA0GCSqGSIb3DQEBDAUAMFoxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJ

# RCBWZXJpZmllZCBDUyBFT0MgQ0EgMDQwHhcNMjYwNjI0MTI0MzI5WhcNMjYwNjI3

# MTI0MzI5WjBpMQswCQYDVQQGEwJQTDEXMBUGA1UECB4OAUEA8wBkAHoAawBpAGUx

# DzANBgNVBAcTBldpZWx1bjEXMBUGA1UEChMOc29mdDRwbSBzcCB6b28xFzAVBgNV

# BAMTDnNvZnQ0cG0gc3Agem9vMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC

# AYEAzsCWjXdq8z2T5hgMu3Geir+Pjuk+RgV6Ui812e6Iw/1gMksqG1jvwErArmXV

# NfFkj8Ie2HnmZaoVCb4t4U4nOMHxb6ZEmztRQhYcg2xScidXVlj6QR983cIkQ/dG

# 2WBQR6sxkqChxi0yO1tgDVE4IsXf/Had/hwgPD7SEoVNjh/a0wfDQ09lIguDZGC1

# RShCEuMU80RrhvDxwoGLd2AAePLl7jy+8+GoohdLykzBSail66r+zl49rMIdr6Jr

# aDpzwFCLDjdqBMO5HZrwo+fjxaOSnS92BAQGfyUhc4OM9ZzshgIUWcQu2y4G4PMr

# RXiXzuZAJVUSzQvT5WvoK2PJYQdZH52R11FHfY1mE5pB7cL8PI1HYHCz6aKZkfzZ

# VlEAFr0IL1rwy5I3RCCplV5Mdx/uDUw5Dbb+IbmGWnynONKhEQPAEsmt+Woqd4DI

# 9PC+AbRWm+tMFa/U0NNU1pwv6bglwpz4iR2/DrfPi7ESbVyX4hfn4P++zm+CwrqG

# TJlZAgMBAAGjggHWMIIB0jAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIHgDA9

# BgNVHSUENjA0BgorBgEEAYI3YQEABggrBgEFBQcDAwYcKwYBBAGCN2GCycz3dYGA

# 0Y0Tg469piSB0sq0aDAdBgNVHQ4EFgQUGFoHA6U2h1TWtqZ3GRGTUiaSR7swHwYD

# VR0jBBgwFoAUmvFUd3UMhxY3RqCs3nn59H/BeOkwZwYDVR0fBGAwXjBcoFqgWIZW

# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw

# SUQlMjBWZXJpZmllZCUyMENTJTIwRU9DJTIwQ0ElMjAwNC5jcmwwdAYIKwYBBQUH

# AQEEaDBmMGQGCCsGAQUFBzAChlhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp

# b3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUyMEVPQyUy

# MENBJTIwMDQuY3J0MFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o

# dG0wDQYJKoZIhvcNAQEMBQADggIBAC8+jFOGbfR609oAZR92NLTVv+rD2SAJSEEs

# XktLH8wp7vrmV75AryaQbOIjcfI8Ii2yCj/l9O18+TsDD5ao5ab+EGrmjeqqKMHf

# KKqCSssEGSN+w7zhAyGCqjkFcaJbdOaU5ZwUdPk/1yBT5TBAeCZLAc+gOesU9oFR

# zl3cAqoB4xGl0aT++CY9KYmt3e743/Sj373LD9SDIxpsblJ+/SKaBb3NtCbrDdWz

# ftfdzCuC3Gljxacl4TokM9JFypKplNlvj+i+1f9wSNLgZFMnEFv+51un6OINpf83

# u7T2Xs2y1G7i8qUlymvFdSJ6y7o8WXz9l7H48IG868iS1Pz9oNyWhFb0XLU9fqrT

# v+9wkf5lRoXc4p0jml7lOphqbOoa0Vc8rFiUqNdd+Sd1IVNBEJNrvKtXa6iQ119u

# rWtnBUoBBWbvyfmKukdycbDLPMH7z2kCyJubdDeJZUI4PoVPhWcjCUVlYJdjnqd9

# vzf8rDz50p1N4Z0LlfgYygg1x6N+qXyCNUWvsnydNoqujozEWwLR8aXznoDtcNac

# T3txfXHpO3R8ERHkfp3iQi68bUUvH1kK/8lMZYepDYvS5sgSklkNgCBM6YlmsWBT

# CUL/aKc2jawadSq7uIKVCu6RwKOmiHtFGwj14yS45eIgi6iJX0B5DTHnhPdAgU0m

# MgXaaxF3MIIGqDCCBJCgAwIBAgITMwACUIECDM9u3jf6GwAAAAJQgTANBgkqhkiG

# 9w0BAQwFADBaMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSswKQYDVQQDEyJNaWNyb3NvZnQgSUQgVmVyaWZpZWQgQ1MgRU9DIENB

# IDA0MB4XDTI2MDYyNDEyNDMyOVoXDTI2MDYyNzEyNDMyOVowaTELMAkGA1UEBhMC

# UEwxFzAVBgNVBAgeDgFBAPMAZAB6AGsAaQBlMQ8wDQYDVQQHEwZXaWVsdW4xFzAV

# BgNVBAoTDnNvZnQ0cG0gc3Agem9vMRcwFQYDVQQDEw5zb2Z0NHBtIHNwIHpvbzCC

# AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAM7Alo13avM9k+YYDLtxnoq/

# j47pPkYFelIvNdnuiMP9YDJLKhtY78BKwK5l1TXxZI/CHth55mWqFQm+LeFOJzjB

# 8W+mRJs7UUIWHINsUnInV1ZY+kEffN3CJEP3RtlgUEerMZKgocYtMjtbYA1ROCLF

# 3/x2nf4cIDw+0hKFTY4f2tMHw0NPZSILg2RgtUUoQhLjFPNEa4bw8cKBi3dgAHjy

# 5e48vvPhqKIXS8pMwUmopeuq/s5ePazCHa+ia2g6c8BQiw43agTDuR2a8KPn48Wj

# kp0vdgQEBn8lIXODjPWc7IYCFFnELtsuBuDzK0V4l87mQCVVEs0L0+Vr6CtjyWEH

# WR+dkddRR32NZhOaQe3C/DyNR2Bws+mimZH82VZRABa9CC9a8MuSN0QgqZVeTHcf

# 7g1MOQ22/iG5hlp8pzjSoREDwBLJrflqKneAyPTwvgG0VpvrTBWv1NDTVNacL+m4

# JcKc+Ikdvw63z4uxEm1cl+IX5+D/vs5vgsK6hkyZWQIDAQABo4IB1jCCAdIwDAYD

# VR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwPQYDVR0lBDYwNAYKKwYBBAGCN2EB

# AAYIKwYBBQUHAwMGHCsGAQQBgjdhgsnM93WBgNGNE4OOvaYkgdLKtGgwHQYDVR0O

# BBYEFBhaBwOlNodU1ramdxkRk1Imkke7MB8GA1UdIwQYMBaAFJrxVHd1DIcWN0ag

# rN55+fR/wXjpMGcGA1UdHwRgMF4wXKBaoFiGVmh0dHA6Ly93d3cubWljcm9zb2Z0

# LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUy

# MEVPQyUyMENBJTIwMDQuY3JsMHQGCCsGAQUFBwEBBGgwZjBkBggrBgEFBQcwAoZY

# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQl

# MjBJRCUyMFZlcmlmaWVkJTIwQ1MlMjBFT0MlMjBDQSUyMDA0LmNydDBUBgNVHSAE

# TTBLMEkGBFUdIAAwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMA0GCSqGSIb3DQEBDAUAA4IC

# AQAvPoxThm30etPaAGUfdjS01b/qw9kgCUhBLF5LSx/MKe765le+QK8mkGziI3Hy

# PCItsgo/5fTtfPk7Aw+WqOWm/hBq5o3qqijB3yiqgkrLBBkjfsO84QMhgqo5BXGi

# W3TmlOWcFHT5P9cgU+UwQHgmSwHPoDnrFPaBUc5d3AKqAeMRpdGk/vgmPSmJrd3u

# +N/0o9+9yw/UgyMabG5Sfv0imgW9zbQm6w3Vs37X3cwrgtxpY8WnJeE6JDPSRcqS

# qZTZb4/ovtX/cEjS4GRTJxBb/udbp+jiDaX/N7u09l7NstRu4vKlJcprxXUiesu6

# PFl8/Zex+PCBvOvIktT8/aDcloRW9Fy1PX6q07/vcJH+ZUaF3OKdI5pe5TqYamzq

# GtFXPKxYlKjXXfkndSFTQRCTa7yrV2uokNdfbq1rZwVKAQVm78n5irpHcnGwyzzB

# +89pAsibm3Q3iWVCOD6FT4VnIwlFZWCXY56nfb83/Kw8+dKdTeGdC5X4GMoINcej

# fql8gjVFr7J8nTaKro6MxFsC0fGl856A7XDWnE97cX1x6Tt0fBER5H6d4kIuvG1F

# Lx9ZCv/JTGWHqQ2L0ubIEpJZDYAgTOmJZrFgUwlC/2inNo2sGnUqu7iClQrukcCj

# poh7RRsI9eMkuOXiIIuoiV9AeQ0x54T3QIFNJjIF2msRdzCCBygwggUQoAMCAQIC

# EzMAAAAXJ0UJC4uHr8YAAAAAABcwDQYJKoZIhvcNAQEMBQAwYzELMAkGA1UEBhMC

# VVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE0MDIGA1UEAxMrTWlj

# cm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2lnbmluZyBQQ0EgMjAyMTAeFw0yNjAz

# MjYxODExMzFaFw0zMTAzMjYxODExMzFaMFoxCzAJBgNVBAYTAlVTMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJRCBW

# ZXJpZmllZCBDUyBFT0MgQ0EgMDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK

# AoICAQCCx2T+Aw9mKgGVzJ+Tq0PMn49G3itIsYpbx7ClLSRHFe1RELdPcZ1sIqWO

# hsSfy6yyqEapClGH9Je9FXA1cQgZvvpQbkg+QInVLr/0EPrVBCwrM96lbRI2PxNe

# CwXG9LsyW2hG6KQgintDmNCBo4zpDIr377plVdSliZm6UB7rHwmvBnR02QT6tnrq

# Wq2ihzB6lRJVTEzuh0OafzIMeMnYM0+x+ve5EOLHdfiq+HXiMf9Jb7YLHtYgyHIi

# JA7bTWLqFSLGaTh7ZlbxbsLXA91OOroEpv7OjzFuu3tkpC9FflA4Dp2Euq4+qPmx

# UqfGp+TX0gLRJp9NJOzzILjcTD3rkFFFbxUv1xyg6avivFDLtoKBhM2Td138umE1

# pNOacanuSYtPHIeQHmB6haFi64avLBLwTTAm/Rbit860cFXR72wq+5Qh4hSmezHq

# KXERWPpVBe+APrJ4Iqc+aPeMmIkoCWZQO22HnLNFUFSXjiwyIbgvlH/LIAJEqTaf

# TzxDZgKhlLU7zr6gwsq3WNpcYQI6NuxWnwh3VVDDyF7onQqKs5Ll7bleVN0Y8Vvq

# gE45ppyBbvwqN/Run5fMCCRz3aYMY0kZhKO92eP7t4zHqZ5bQMAgZ0tE2Pz/jb0w

# iykUF/PcoOqqk3vVLiRDYst6vd3GEMNzMpUUvQcvBG46+COIbwIDAQABo4IB3DCC

# AdgwDgYDVR0PAQH/BAQDAgGGMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBSa

# 8VR3dQyHFjdGoKzeefn0f8F46TBUBgNVHSAETTBLMEkGBFUdIAAwQTA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9z

# aXRvcnkuaHRtMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMBIGA1UdEwEB/wQI

# MAYBAf8CAQAwHwYDVR0jBBgwFoAU2UEpsA8PY2zvadf1zSmepEhqMOYwcAYDVR0f

# BGkwZzBloGOgYYZfaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv

# TWljcm9zb2Z0JTIwSUQlMjBWZXJpZmllZCUyMENvZGUlMjBTaWduaW5nJTIwUENB

# JTIwMjAyMS5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIw

# VmVyaWZpZWQlMjBDb2RlJTIwU2lnbmluZyUyMFBDQSUyMDIwMjEuY3J0MA0GCSqG

# SIb3DQEBDAUAA4ICAQCQdVoZ/U0m38l2iKaZFlsxavptpoOLyaR1a9ZK2TSF1kOn

# FJhMDse6KkCgsveoiEjXTVc6Xt86IKHn76Nk5qZB0BXv2iMRQ2giAJmYvZcmstoZ

# qfB2M3Kd5wnJhUJOtF/b6HsqSelY6nhrF06zor1lDmDQixBZcLB9zR1+RKQso1je

# kNxYuUk+HaN3k1S57qk0O//YbkwU0mELCW04N5vICMZx5T5c7Nq/7uLvbVhCdD7f

# 2bZpA4U7vOkB1ooB4AaER3pjoJ0Mad5LFyi6Na9p9Zu/hrLeOjU5FItS5Yxsqvlf

# XxAThJ176CmkYstKRmytSHZ7JhKRfV6e9Zftk/ODb/CK4pGVAVqsOf4337bQGrOH

# HCQ3IvN9gmnUuDh8JdvbheoWPHxIN1GB5sUiY584tXN7xdD8LCSsRqJvQ8e7a3gZ

# WTgViugRs1QWq+N0G9Nje6JHlN1CjJehge+H5PGktJja+juGEr0P+ukSkcL6qaZx

# FQTh3SDI71lvW++3bl/Ezd6SO8N9Udw+reoyvRHCyTiSsplZQSBTVJdPmo3qCpGu

# yHFtPo5CBn3/FPTiqJd3M9BHoqKd0G9Kmg6fGcAvFwnLNXA2kov727wRljL3ypfq

# L7iAT/Ynpxul6RwHRlcOf9dDGg1RRvr92NP/CWVXIb68geR2rvU/NsfmtjF1wDCC

# B54wggWGoAMCAQICEzMAAAAHh6M0o3uljhwAAAAAAAcwDQYJKoZIhvcNAQEMBQAw

# dzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjFI

# MEYGA1UEAxM/TWljcm9zb2Z0IElkZW50aXR5IFZlcmlmaWNhdGlvbiBSb290IENl

# cnRpZmljYXRlIEF1dGhvcml0eSAyMDIwMB4XDTIxMDQwMTIwMDUyMFoXDTM2MDQw

# MTIwMTUyMFowYzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjE0MDIGA1UEAxMrTWljcm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2ln

# bmluZyBQQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALLw

# wK8ZiCji3VR6TElsaQhVCbRS/3pK+MHrJSj3Zxd3KU3rlfL3qrZilYKJNqztA9OQ

# acr1AwoNcHbKBLbsQAhBnIB34zxf52bDpIO3NJlfIaTE/xrweLoQ71lzCHkD7A4A

# s1Bs076Iu+mA6cQzsYYH/Cbl1icwQ6C65rU4V9NQhNUwgrx9rGQ//h890Q8JdjLL

# w0nV+ayQ2Fbkd242o9kH82RZsH3HEyqjAB5a8+Ae2nPIPc8sZU6ZE7iRrRZywRmr

# KDp5+TcmJX9MRff241UaOBs4NmHOyke8oU1TYrkxh+YeHgfWo5tTgkoSMoayqoDp

# HOLJs+qG8Tvh8SnifW2Jj3+ii11TS8/FGngEaNAWrbyfNrC69oKpRQXY9bGH6jn9

# NEJv9weFxhTwyvx9OJLXmRGbAUXN1U9nf4lXezky6Uh/cgjkVd6CGUAf0K+Jw+GE

# /5VpIVbcNr9rNE50Sbmy/4RTCEGvOq3GhjITbCa4crCzTTHgYYjHs1NbOc6brH+e

# KpWLtr+bGecy9CrwQyx7S/BfYJ+ozst7+yZtG2wR461uckFu0t+gCwLdN0A6cFtS

# RtR8bvxVFyWwTtgMMFRuBa3vmUOTnfKLsLefRaQcVTgRnzeLzdpt32cdYKp+dhr2

# ogc+qM6K4CBI5/j4VFyC4QFeUP2YAidLtvpXRRo3AgMBAAGjggI1MIICMTAOBgNV

# HQ8BAf8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFNlBKbAPD2Ns

# 72nX9c0pnqRIajDmMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o

# dG0wGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwDwYDVR0TAQH/BAUwAwEB/zAf

# BgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2ioojCBhAYDVR0fBH0wezB5oHeg

# dYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBSb290JTIwQ2VydGlmaWNhdGUl

# MjBBdXRob3JpdHklMjAyMDIwLmNybDCBwwYIKwYBBQUHAQEEgbYwgbMwgYEGCCsG

# AQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0aW9uJTIwUm9vdCUyMENlcnRp

# ZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6

# Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDANBgkqhkiG9w0BAQwFAAOCAgEA

# fyUqnv7Uq+rdZgrbVyNMul5skONbhls5fccPlmIbzi+OwVdPQ4H55v7VOInnmezQ

# EeW4LqK0wja+fBznANbXLB0KrdMCbHQpbLvG6UA/Xv2pfpVIE1CRFfNF4XKO8XYE

# a3oW8oVH+KZHgIQRIwAbyFKQ9iyj4aOWeAzwk+f9E5StNp5T8FG7/VEURIVWArbA

# zPt9ThVN3w1fAZkF7+YU9kbq1bCR2YD+MtunSQ1Rft6XG7b4e0ejRA7mB2IoX5hN

# h3UEauY0byxNRG+fT2MCEhQl9g2i2fs6VOG19CNep7SquKaBjhWmirYyANb0RJSL

# WjinMLXNOAga10n8i9jqeprzSMU5ODmrMCJE12xS/NWShg/tuLjAsKP6SzYZ+1Ry

# 358ZTFcx0FS/mx2vSoU8s8HRvy+rnXqyUJ9HBqS0DErVLjQwK8VtsBdekBmdTbQV

# oCgPCqr+PDPB3xajYnzevs7eidBsM71PINK2BoE2UfMwxCCX3mccFgx6UsQeRSdV

# VVNSyALQe6PT12418xon2iDGE81OGCreLzDcMAZnrUAx4XQLUz6ZTl65yPUiOh3k

# 7Yww94lDf+8oG2oZmDh5O1Qe38E+M3vhKwmzIeoB1dVLlz4i3IpaDcR+iuGjH2Td

# aC1ZOmBXiCRKJLj4DT2uhJ04ji+tHD6n58vhavFIrmcxghqRMIIajQIBATBxMFox

# CzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzAp

# BgNVBAMTIk1pY3Jvc29mdCBJRCBWZXJpZmllZCBDUyBFT0MgQ0EgMDQCEzMAAlCB

# AgzPbt43+hsAAAACUIEwDQYJYIZIAWUDBAIBBQCgXjAQBgorBgEEAYI3AgEMMQIw

# ADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAvBgkqhkiG9w0BCQQxIgQgoZp9

# 5Sc9ZVCW+3dWDMXQg6BKN99emXiCEEf6a1t4EG8wDQYJKoZIhvcNAQEBBQAEggGA

# OXvwXZezhAy3V9Tah5thzUBzuXk1z8dhEdXO30mxu7y65P4wGEfszgPeDTJxEdTM

# I2bDK8jyw2BSmNdPIbjFPVrMPwo56mkAvdexqA1gNDvOPcpgR8yJZs9tN7eXUoF3

# Tvc4cOIAhNf68KUIQsZaCjCEOkJmZ6vf/HnKVVeusuMnFRraqGiUoG6CkgkTRcfM

# FJNCQcirALrO41D+PTgwjQB7aVsk4bdV+0Sc0iqZtVuQl7ytWED3DAyYvOB+F6n0

# GqBW681roFq4qY1SRy6rjLeQg7yOIprEjRiVzGfZ56J6GwmUE/k3/nEniYunJPmk

# D/zzmNk4jBYcEffUU7xBq9OUQnSXsnoQzq9r1cAhj5dXj86hG+KfPEiYVuMRBETT

# A/5FGnFryTf7WiD92Vw5gHByz2vn1XW8ZI9lPy5fgryCayXFKWbcOsiQXmrvDjSd

# lYFMNbk+RDaEaZDfFzXeOvn7GbBFTNL9J9QzugWBvGkmaNAdmEYoHEFK3yqeMcNf

# oYIYETCCGA0GCisGAQQBgjcDAwExghf9MIIX+QYJKoZIhvcNAQcCoIIX6jCCF+YC

# AQMxDzANBglghkgBZQMEAgEFADCCAWIGCyqGSIb3DQEJEAEEoIIBUQSCAU0wggFJ

# AgEBBgorBgEEAYRZCgMBMDEwDQYJYIZIAWUDBAIBBQAEIHF1QnM1JbDG0g2DHOBb

# HbXkNV9Kxm5jZNBva5DxazfxAgZp6IF/dUAYEzIwMjYwNjI0MTQxODIwLjg1Nlow

# BIACAfSggeGkgd4wgdsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV

# BAsTHm5TaGllbGQgVFNTIEVTTjo3RDAwLTA1RTAtRDk0NzE1MDMGA1UEAxMsTWlj

# cm9zb2Z0IFB1YmxpYyBSU0EgVGltZSBTdGFtcGluZyBBdXRob3JpdHmggg8hMIIH

# gjCCBWqgAwIBAgITMwAAAAXlzw//Zi7JhwAAAAAABTANBgkqhkiG9w0BAQwFADB3

# MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMUgw

# RgYDVQQDEz9NaWNyb3NvZnQgSWRlbnRpdHkgVmVyaWZpY2F0aW9uIFJvb3QgQ2Vy

# dGlmaWNhdGUgQXV0aG9yaXR5IDIwMjAwHhcNMjAxMTE5MjAzMjMxWhcNMzUxMTE5

# MjA0MjMxWjBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBp

# bmcgQ0EgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ5851Jj

# /eDFnwV9Y7UGIqMcHtfnlzPREwW9ZUZHd5HBXXBvf7KrQ5cMSqFSHGqg2/qJhYqO

# QxwuEQXG8kB41wsDJP5d0zmLYKAY8Zxv3lYkuLDsfMuIEqvGYOPURAH+Ybl4SJEE

# Snt0MbPEoKdNihwM5xGv0rGofJ1qOYSTNcc55EbBT7uq3wx3mXhtVmtcCEr5ZKTk

# KKE1CxZvNPWdGWJUPC6e4uRfWHIhZcgCsJ+sozf5EeH5KrlFnxpjKKTavwfFP6Xa

# GZGWUG8TZaiTogRoAlqcevbiqioUz1Yt4FRK53P6ovnUfANjIgM9JDdJ4e0qiDRm

# 5sOTiEQtBLGd9Vhd1MadxoGcHrRCsS5rO9yhv2fjJHrmlQ0EIXmp4DhDBieKUGR+

# eZ4CNE3ctW4uvSDQVeSp9h1SaPV8UWEfyTxgGjOsRpeexIveR1MPTVf7gt8hY64X

# NPO6iyUGsEgt8c2PxF87E+CO7A28TpjNq5eLiiunhKbq0XbjkNoU5JhtYUrlmAbp

# xRjb9tSreDdtACpm3rkpxp7AQndnI0Shu/fk1/rE3oWsDqMX3jjv40e8KN5YsJBn

# czyWB4JyeeFMW3JBfdeAKhzohFe8U5w9WuvcP1E8cIxLoKSDzCCBOu0hWdjzKNu8

# Y5SwB1lt5dQhABYyzR3dxEO/T1K/BVF3rV69AgMBAAGjggIbMIICFzAOBgNVHQ8B

# Af8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFGtpKDo1L0hjQM97

# 2K9J6T7ZPdshMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNodHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0w

# EwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEw

# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2io

# ojCBhAYDVR0fBH0wezB5oHegdYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aW9wcy9jcmwvTWljcm9zb2Z0JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBS

# b290JTIwQ2VydGlmaWNhdGUlMjBBdXRob3JpdHklMjAyMDIwLmNybDCBlAYIKwYB

# BQUHAQEEgYcwgYQwgYEGCCsGAQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0

# aW9uJTIwUm9vdCUyMENlcnRpZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQw

# DQYJKoZIhvcNAQEMBQADggIBAF+Idsd+bbVaFXXnTHho+k7h2ESZJRWluLE0Oa/p

# O+4ge/XEizXvhs0Y7+KVYyb4nHlugBesnFqBGEdC2IWmtKMyS1OWIviwpnK3aL5J

# edwzbeBF7POyg6IGG/XhhJ3UqWeWTO+Czb1c2NP5zyEh89F72u9UIw+IfvM9lzDm

# c2O2END7MPnrcjWdQnrLn1Ntday7JSyrDvBdmgbNnCKNZPmhzoa8PccOiQljjTW6

# GePe5sGFuRHzdFt8y+bN2neF7Zu8hTO1I64XNGqst8S+w+RUdie8fXC1jKu3m9KG

# IqF4aldrYBamyh3g4nJPj/LR2CBaLyD+2BuGZCVmoNR/dSpRCxlot0i79dKOChmo

# ONqbMI8m04uLaEHAv4qwKHQ1vBzbV/nG89LDKbRSSvijmwJwxRxLLpMQ/u4xXxFf

# R4f/gksSkbJp7oqLwliDm/h+w0aJ/U5ccnYhYb7vPKNMN+SZDWycU5ODIRfyoGl5

# 9BsXR/HpRGtiJquOYGmvA/pk5vC1lcnbeMrcWD/26ozePQ/TWfNXKBOmkFpvPE8C

# H+EeGGWzqTCjdAsno2jzTeNSxlx3glDGJgcdz5D/AAxw9Sdgq/+rY7jjgs7X6fqP

# TXPmaCAJKVHAP19oEjJIBwD1LyHbaEgBxFCogYSOiUIr0Xqcr1nJfiWG2GwYe6Zo

# AF1bMIIHlzCCBX+gAwIBAgITMwAAAFXZ3WkmKPn44gAAAAAAVTANBgkqhkiG9w0B

# AQwFADBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcg

# Q0EgMjAyMDAeFw0yNTEwMjMyMDQ2NDlaFw0yNjEwMjIyMDQ2NDlaMIHbMQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3Nv

# ZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046

# N0QwMC0wNUUwLUQ5NDcxNTAzBgNVBAMTLE1pY3Jvc29mdCBQdWJsaWMgUlNBIFRp

# bWUgU3RhbXBpbmcgQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAvbkfkh5ZSLP0MCUWafaw/KZoVZu9iQx8r5JwhZvdrUi86UjCCFQONjQa

# nrIxGF9hRGIZLQZ50gHrLC+4fpUEJff5t04VwByWC2/bWOuk6NmaTh9JpPZDcGzN

# R95QlryjfEjtl+gxj12zNPEdADPplVfzt8cYRWFBx/Fbfch08k6P9p7jX2q1jFPb

# UxWYJ+xOyGC1aKhDGY5b+8wL39v6qC0HFIx/v3y+bep+aEXooK8VoeWK+szfaFjX

# o8YTcvQ8UL4szu9HFTuZNv6vvoJ7Ju+o5aTj51sph+0+FXW38TlL/rDBd5ia79js

# kLtOeHbDjkbljilwzegcxv9i49F05ZrS/5ELZCCY1VaqO7EOLKVaxxdAO5oy1vb0

# Bx0ZRVX1mxFjYzay2EC051k6yGJHm58y1oe2IKRa/SM1+BTGse6vHNi5Q2d5ZnoR

# 9AOAUDDwJIIqRI4rZz2MSinh11WrXTG9urF2uoyd5Ve+8hxes9ABeP2PYQKlXYTA

# xvdaeanDTQ/vwmnM+yTcWzrVm84Z38XVFw4G7p/ZNZ2nscvv6uru2AevXcyV1t8h

# a7iWmhhgTWBNBrViuDlc3iPvOz2SVPbPeqhyY/NXwNZCAgc2H5pOztu6MwQxDIjt

# e3XM/FkKBxHofS2abNT/0HG+xZtFqUJDaxgbJa6lN1zh7spjuQ8CAwEAAaOCAcsw

# ggHHMB0GA1UdDgQWBBRWBF8QbdwIA/DIv6nJFsrB16xltjAfBgNVHSMEGDAWgBRr

# aSg6NS9IY0DPe9ivSek+2T3bITBsBgNVHR8EZTBjMGGgX6BdhltodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBQdWJsaWMlMjBS

# U0ElMjBUaW1lc3RhbXBpbmclMjBDQSUyMDIwMjAuY3JsMHkGCCsGAQUFBwEBBG0w

# azBpBggrBgEFBQcwAoZdaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j

# ZXJ0cy9NaWNyb3NvZnQlMjBQdWJsaWMlMjBSU0ElMjBUaW1lc3RhbXBpbmclMjBD

# QSUyMDIwMjAuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUH

# AwgwDgYDVR0PAQH/BAQDAgeAMGYGA1UdIARfMF0wUQYMKwYBBAGCN0yDfQEBMEEw

# PwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9j

# cy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBBAIwDQYJKoZIhvcNAQEMBQADggIBAFIe

# 4ZJUe9qUKcWeWypchB58fXE/ZIWv2D5XP5/k/tB7LCN9BvmNSVKZ3VeclQM978wf

# EvuvdMQSUv6Y20boIM8DK1K1IU9cP21MG0ExiHxaqjrikf2qbfrXIip4Ef3v2bNY

# KQxCxN3Sczp1SX0H7uqK2L5OhfDEiXf15iou5hh+EPaaqp49czNQpJDOR/vfJghU

# c/qcslDPhoCZpZx8b2ODvywGQNXwqlbsmCS24uGmEkQ3UH5JUeN6c91yasVchS78

# riMrm6R9ZpAiO5pfNKMGU2MLm1A3pp098DcbFTAc95Hh6Qvkh//28F/Xe2bMFb6D

# L7Sw0ZO95v0gv0ZTyJfxS/LCxfraeEII9FSFOKAMEp1zNFSs2ue0GGjBt9yEEMUw

# vxq9ExFz0aZzYm8ivJfffpIVDnX/+rVRTYcxIkQyFYslIhYlWF9SjCw5r49qakjM

# RNh8W9O7aaoolSVZleQZjGt0K8JzMlyp6hp2lbW6XqRx2cOHbbxJDxmENzohGUzi

# I13lI2g2Bf5qibfC4bKNRpJo9lbE8HUbY0qJiE8u3SU8eDQaySPXOEhJjxRCQwwO

# vejYmBG5P7CckQNBSnnl12+FKRKgPoj0Mv+z5OMhj9z2MtpbnHLAkep0odQClEyy

# CG/uR5tK5rW6mZH5Oq56UWS0NI6NV1JGS7Jri6jFMYIHQzCCBz8CAQEweDBhMQsw

# CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD

# VQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMAIT

# MwAAAFXZ3WkmKPn44gAAAAAAVTANBglghkgBZQMEAgEFAKCCBJwwEQYLKoZIhvcN

# AQkQAg8xAgUAMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0B

# CQUxDxcNMjYwNjI0MTQxODIwWjAvBgkqhkiG9w0BCQQxIgQgYuJQdZYuhNkoF4K6

# e4ytjQ/es55qYj3P/nFTMnTw4AYwgbkGCyqGSIb3DQEJEAIvMYGpMIGmMIGjMIGg

# BCDYuTyXZIZiu799/v4PaqsmeSzBxh0rqkYq7sYYavj+zTB8MGWkYzBhMQswCQYD

# VQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQD

# EylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMAITMwAA

# AFXZ3WkmKPn44gAAAAAAVTCCA14GCyqGSIb3DQEJEAISMYIDTTCCA0mhggNFMIID

# QTCCAikCAQEwggEJoYHhpIHeMIHbMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25z

# MScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046N0QwMC0wNUUwLUQ5NDcxNTAzBgNV

# BAMTLE1pY3Jvc29mdCBQdWJsaWMgUlNBIFRpbWUgU3RhbXBpbmcgQXV0aG9yaXR5

# oiMKAQEwBwYFKw4DAhoDFQAdO1QBgmW/tuBZV5EGjhfsV4cN6qBnMGWkYzBhMQsw

# CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD

# VQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMDAN

# BgkqhkiG9w0BAQsFAAIFAO3mDfAwIhgPMjAyNjA2MjQwODA0MDBaGA8yMDI2MDYy

# NTA4MDQwMFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA7eYN8AIBADAHAgEAAgJK

# wjAHAgEAAgISmzAKAgUA7edfcAIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEE

# AYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IB

# AQBI9/sJMvO8jLfyrHCNQkfHSQzaPlO/Nu2r70QpCf2CUx7Di+6yz0u9iCY6M00b

# 1qvuLWqp4cot+etLd1jufJ+Equ9BIZYYsC5+iRqiZobpDgP6tK5ylpWinWJj6u18

# tSV2MquN8uNaIIqVP/hzb7PBD9rJEurRkxDA3nwtIcGmh7vZk7cLthMHs9xRgcLm

# 9LWdUbOl9oIzBRPvd6n9ZSIuw9f5XLpMbCx2UUyA+RpivJIgII0KmrU76FqoqZRd

# OXwMMkl2HpV0ciCz6I1pGRpTRubGhS6sktiMEz9xt0GuZYiMy9EXlg3p4jmFt9Jg

# 7gTbSaGMsomfDcBDeIoGIma3MA0GCSqGSIb3DQEBAQUABIICAAk5fY0z6S2VlF+2

# dhKPK/w3l8nOecTdLHM6srrIDLaEeEKtpL0N/EjLBfVJxGZenqQwA6c7y7UrE+T3

# qveMsMaUSnm+uNOzdnu0sRw+ZKO6im2OAnrxVqbA5IgU9TRq+tJwU1ycYIzXJMl3

# j5PEJctijbsNxTgKo9hO063mUGph9dgswx1t3gDK3dIKDse63q7ajCdTBGnHJmVS

# MfDAy1M6bISEijktpmWD8/IwEp6nRbBNOTrM3wViQFpJxZSS8C/N39ua8Ki81Hfk

# Gqnjwcsf77LVrc+fPdHVIa5DtG8BMOkxaIliE0aSW7qfvG5Lup3pOb9ZQYbL3IBQ

# wLGVGmZanAzQ77cCTqiJFgPVdG1nvKPf8Nfq7DASbG8JDF1X0RLTf90MWnvigd6B

# EbhBRVFInKS1SIWxG33tyLHSRQrh/TXWkYw2zRZZhlhbBGEjyB04pgmwICY34OLl

# 7HI0hBMdvD+DdIeXwAyQDxvLt12D0La8PxELc789xguZDScaDDkqsSmUEXGQVv7O

# QPkgHDGXZe1gtjwyBojhaUjvIGCka6jFpOzi1Q2tg2z6aOiQV+Pb4QUig9yTspt0

# 4L6Yq0uNyudVPdEcqdxAcryji8O1+cNIoCASfeAeltXTvliLfLDXCJB5JxOF4vON

# xw7KY957nTHFcG0WmsQlnFnz74uT

# SIG # End signature block