OwnerLens

0.1.14-preview0

Private/Invoke-OwnerLensPrepareResourceSnapshot.ps1

<#
.SYNOPSIS
Creates an OwnerLens Azure resource snapshot file.
 
.DESCRIPTION
Exports subscriptions, resource groups, resources, identities, role assignments, and optional Azure Monitor activity logs into the local JSON snapshot consumed by OwnerLens.
#>

function Invoke-OwnerLensPrepareResourceSnapshot {
  [CmdletBinding()]
  param(
  [string]$OutputPath = ".\data\snapshot.json",
  [int]$ActivityDays = 90,
  [int]$MaxActivityRecords = 10000,
  [switch]$SkipAuditLogsExport,
  [string]$SubscriptionIds = "",
  [switch]$ExpandResourceProperties
  )

if (-not (Get-Command Get-AzContext -ErrorAction SilentlyContinue)) {
  throw "Az PowerShell module missing. Install: Install-Module Az -Scope CurrentUser"
}

if (-not (Get-Command Invoke-AzRestMethod -ErrorAction SilentlyContinue)) {
  throw "Invoke-AzRestMethod missing. Update Az.Accounts: Update-Module Az.Accounts"
}

function Write-SnapshotProgress {
  param([string]$Message)

  $timestamp = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss")
  Write-Host "[$timestamp] $Message"
}

function Get-ScopeParts {
  param([string]$Scope)

  $parts = [ordered]@{
    scopeType = "Unknown"
    scopeSubscriptionId = $null
    scopeResourceGroup = $null
    scopeResourceProvider = $null
    scopeResourceType = $null
    scopeResourceName = $null
    scopeManagementGroup = $null
  }

  if ([string]::IsNullOrWhiteSpace($Scope)) {
    return [pscustomobject]$parts
  }

  if ($Scope -match "^/providers/Microsoft\.Management/managementGroups/([^/]+)$") {
    $parts.scopeType = "ManagementGroup"
    $parts.scopeManagementGroup = $Matches[1]
    return [pscustomobject]$parts
  }

  if ($Scope -match "^/subscriptions/([^/]+)$") {
    $parts.scopeType = "Subscription"
    $parts.scopeSubscriptionId = $Matches[1]
    return [pscustomobject]$parts
  }

  if ($Scope -match "^/subscriptions/([^/]+)/resourceGroups/([^/]+)$") {
    $parts.scopeType = "ResourceGroup"
    $parts.scopeSubscriptionId = $Matches[1]
    $parts.scopeResourceGroup = $Matches[2]
    return [pscustomobject]$parts
  }

  if ($Scope -match "^/subscriptions/([^/]+)/resourceGroups/([^/]+)/providers/(.+)$") {
    $parts.scopeType = "Resource"
    $parts.scopeSubscriptionId = $Matches[1]
    $parts.scopeResourceGroup = $Matches[2]

    $providerPathSegments = $Matches[3].Split("/")
    if ($providerPathSegments.Count -gt 0) {
      $parts.scopeResourceProvider = $providerPathSegments[0]
    }

    $typeParts = @()
    $nameParts = @()

    for ($i = 1; $i -lt $providerPathSegments.Count; $i += 2) {
      $typeParts += $providerPathSegments[$i]
      if (($i + 1) -lt $providerPathSegments.Count) {
        $nameParts += $providerPathSegments[$i + 1]
      }
    }

    if ($typeParts.Count -gt 0 -and $parts.scopeResourceProvider) {
      $parts.scopeResourceType = ($parts.scopeResourceProvider + "/" + ($typeParts -join "/"))
    }
    if ($nameParts.Count -gt 0) {
      $parts.scopeResourceName = ($nameParts -join "/")
    }

    return [pscustomobject]$parts
  }

  return [pscustomobject]$parts
}

Write-SnapshotProgress "Checking Azure context"
$context = Get-AzContext

if (-not $context) {
  throw "Not connected. Run: Connect-AzAccount"
}

$activityStartTime = (Get-Date).AddDays(-$ActivityDays)
$subscriptionFilters = @()

if ([string]::IsNullOrWhiteSpace($SubscriptionIds)) {
  $subscriptionFilters = @($context.Subscription.Id)
} else {
  $subscriptionFilters = $SubscriptionIds.Split(",") | ForEach-Object { $_.Trim() } | Where-Object { $_ }
}

Write-SnapshotProgress "Preparing Azure resource snapshot"
Write-SnapshotProgress "Output path: $OutputPath"
Write-SnapshotProgress "Activity window: last $ActivityDays days starting $($activityStartTime.ToUniversalTime().ToString("o"))"
Write-SnapshotProgress "Requested subscriptions: $($subscriptionFilters -join ', ')"
if ($SkipAuditLogsExport) {
  Write-SnapshotProgress "Activity log export: skipped"
} else {
  Write-SnapshotProgress "Activity log export: enabled, max $MaxActivityRecords records per subscription"
}
if ($ExpandResourceProperties) {
  Write-SnapshotProgress "Resource property expansion: enabled"
} else {
  Write-SnapshotProgress "Resource property expansion: disabled"
}

$snapshot = [ordered]@{
  meta = [ordered]@{
    provider = "azure"
    snapshotVersion = "0.4"
    createdAt = (Get-Date).ToUniversalTime().ToString("o")
    activityDays = $ActivityDays
    activityStartTime = $activityStartTime.ToUniversalTime().ToString("o")
    maxActivityRecords = $MaxActivityRecords
    skipAuditLogsExport = [bool]$SkipAuditLogsExport
    requestedSubscriptions = $subscriptionFilters
  }
  subscriptions = [System.Collections.Generic.List[object]]::new()
  resourceGroups = [System.Collections.Generic.List[object]]::new()
  resources = [System.Collections.Generic.List[object]]::new()
  userAssignedManagedIdentities = [System.Collections.Generic.List[object]]::new()
  roleAssignments = [System.Collections.Generic.List[object]]::new()
  activityLogs = [System.Collections.Generic.List[object]]::new()
}

Write-SnapshotProgress "Loading enabled subscriptions"
$enabledSubscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
$subs = @()

if (-not (Get-Command Get-AzUserAssignedIdentity -ErrorAction SilentlyContinue)) {
  throw "Az.ManagedServiceIdentity PowerShell module missing. Install: Install-Module Az.ManagedServiceIdentity -Scope CurrentUser"
}

foreach ($filter in $subscriptionFilters) {
  Write-SnapshotProgress "Resolving subscription filter: $filter"
  $sub = $enabledSubscriptions | Where-Object { $_.Id -eq $filter -or $_.Name -eq $filter } | Select-Object -First 1

  if (-not $sub) {
    throw "Subscription not found or not enabled: $filter"
  }

  if (-not ($subs | Where-Object Id -eq $sub.Id)) {
    $subs += $sub
    Write-SnapshotProgress "Selected subscription: $($sub.Name) ($($sub.Id))"
  }
}

$subscriptionIndex = 0
foreach ($sub in $subs) {
  $subscriptionIndex += 1
  Write-SnapshotProgress "[$subscriptionIndex/$($subs.Count)] Starting subscription: $($sub.Name) ($($sub.Id))"

  Write-SnapshotProgress "[$($sub.Name)] Setting Azure context"
  Set-AzContext -SubscriptionId $sub.Id | Out-Null

  $snapshot.subscriptions.Add([pscustomobject]@{
    subscriptionId = $sub.Id
    subscriptionName = $sub.Name
    tenantId = $sub.TenantId
    state = $sub.State
    tags = $null
  }) | Out-Null

  Write-SnapshotProgress "[$($sub.Name)] Loading resource groups"
  $rgs = Get-AzResourceGroup
  Write-SnapshotProgress "[$($sub.Name)] Loaded $($rgs.Count) resource groups"

  if ($ExpandResourceProperties) {
    Write-SnapshotProgress "[$($sub.Name)] Loading resources with expanded properties"
    $resources = Get-AzResource -ExpandProperties
  } else {
    Write-SnapshotProgress "[$($sub.Name)] Loading resources"
    $resources = Get-AzResource
  }
  Write-SnapshotProgress "[$($sub.Name)] Loaded $($resources.Count) resources"

  Write-SnapshotProgress "[$($sub.Name)] Loading user-assigned managed identities"
  $userAssignedIdentities = Get-AzUserAssignedIdentity
  Write-SnapshotProgress "[$($sub.Name)] Loaded $($userAssignedIdentities.Count) user-assigned managed identities"

  Write-SnapshotProgress "[$($sub.Name)] Loading role assignments"
  $roleAssignments = Get-AzRoleAssignment
  Write-SnapshotProgress "[$($sub.Name)] Loaded $($roleAssignments.Count) role assignments"

  $activityLogs = @()
  if (-not $SkipAuditLogsExport) {
    Write-SnapshotProgress "[$($sub.Name)] Loading Azure Monitor activity logs"
    $activityLogs = Get-AzureMonitorActivityLogs -SubscriptionId $sub.Id -StartTime $activityStartTime -MaxRecord $MaxActivityRecords
    Write-SnapshotProgress "[$($sub.Name)] Loaded $($activityLogs.Count) activity log records"
  }

  Write-SnapshotProgress "[$($sub.Name)] Adding resources to snapshot"
  foreach ($resource in $resources) {
    $identity = $resource.Identity

    $userAssignedIdentityResourceIds = @()
    if ($identity -and $identity.UserAssignedIdentities) {
      $userAssignedIdentityResourceIds = @($identity.UserAssignedIdentities.PSObject.Properties.Name)
    }

    $snapshot.resources.Add([pscustomobject]@{
      subscriptionId = $sub.Id
      subscriptionName = $sub.Name
      resourceId = $resource.ResourceId
      resourceName = $resource.Name
      resourceGroup = $resource.ResourceGroupName
      resourceType = $resource.ResourceType
      kind = $resource.Kind
      location = $resource.Location
      tags = $resource.Tags
      identityType = $identity.Type
      identityPrincipalId = $identity.PrincipalId
      identityTenantId = $identity.TenantId
      userAssignedIdentityResourceIds = $userAssignedIdentityResourceIds
      userAssignedIdentities = $identity.UserAssignedIdentities
    }) | Out-Null
  }

  Write-SnapshotProgress "[$($sub.Name)] Adding role assignments to snapshot"
  foreach ($assignment in $roleAssignments) {
    $scopeParts = Get-ScopeParts $assignment.Scope
    $principalId = [string]$assignment.ObjectId

    $snapshot.roleAssignments.Add([pscustomobject]@{
      subscriptionId = $sub.Id
      subscriptionName = $sub.Name
      roleAssignmentId = $assignment.RoleAssignmentId
      scope = $assignment.Scope
      scopeType = $scopeParts.scopeType
      scopeSubscriptionId = $scopeParts.scopeSubscriptionId
      scopeResourceGroup = $scopeParts.scopeResourceGroup
      scopeResourceProvider = $scopeParts.scopeResourceProvider
      scopeResourceType = $scopeParts.scopeResourceType
      scopeResourceName = $scopeParts.scopeResourceName
      scopeManagementGroup = $scopeParts.scopeManagementGroup
      principalId = $principalId
      principalType = $assignment.ObjectType
      principalDisplayName = $assignment.DisplayName
      signInName = $assignment.SignInName
      roleDefinitionId = $assignment.RoleDefinitionId
      roleDefinitionName = $assignment.RoleDefinitionName
      canDelegate = $assignment.CanDelegate
      condition = $assignment.Condition
      conditionVersion = $assignment.ConditionVersion
    }
    ) | Out-Null
  }

  Write-SnapshotProgress "[$($sub.Name)] Adding user-assigned managed identities to snapshot"
  foreach ($identity in $userAssignedIdentities) {
    $snapshot.userAssignedManagedIdentities.Add([pscustomobject]@{
      subscriptionId = $sub.Id
      subscriptionName = $sub.Name
      resourceId = $identity.Id
      name = $identity.Name
      resourceGroup = $identity.ResourceGroupName
      location = $identity.Location
      clientId = $identity.ClientId
      principalId = $identity.PrincipalId
      tenantId = $identity.TenantId
      tags = $identity.Tags
    }) | Out-Null
  }

  Write-SnapshotProgress "[$($sub.Name)] Adding resource groups to snapshot"
  foreach ($rg in $rgs) {

    $snapshot.resourceGroups.Add([pscustomobject]@{
      subscriptionId = $sub.Id
      subscriptionName = $sub.Name
      resourceGroup = $rg.ResourceGroupName
      location = $rg.Location
      tags = $rg.Tags
    }) | Out-Null
  }

  Write-SnapshotProgress "[$($sub.Name)] Adding activity logs to snapshot"
  foreach ($log in $activityLogs) {
    $snapshot.activityLogs.Add([pscustomobject]@{
      subscriptionId = $sub.Id
      subscriptionName = $sub.Name
      eventTimestamp = $log.EventTimestamp
      submissionTimestamp = $log.SubmissionTimestamp
      caller = $log.Caller
      callerUserPrincipalName = $log.CallerUserPrincipalName
      callerName = $log.CallerName
      callerEmail = $log.CallerEmail
      callerObjectId = $log.CallerObjectId
      callerIdentityType = $log.CallerIdentityType
      callerAppId = $log.CallerAppId
      callerIpAddress = $log.CallerIpAddress
      callerTenantId = $log.CallerTenantId
      operationName = $log.OperationName
      operationNameValue = $log.OperationNameValue
      status = $log.Status
      subStatus = $log.SubStatus
      category = $log.Category
      resourceGroupName = $log.ResourceGroupName
      resourceId = $log.ResourceId
      resourceProviderName = $log.ResourceProviderName
      resourceType = $log.ResourceType
      authorizationAction = $log.authorizationAction
      authorizationScope = $log.authorizationScope
    }) | Out-Null
  }

  Write-SnapshotProgress "[$subscriptionIndex/$($subs.Count)] Finished subscription: $($sub.Name)"
}

Write-SnapshotProgress "Finalizing snapshot metadata"
$snapshot.meta.subscriptionCount = $snapshot.subscriptions.Count
$snapshot.meta.resourceGroupCount = $snapshot.resourceGroups.Count
$snapshot.meta.resourceCount = $snapshot.resources.Count
$snapshot.meta.userAssignedManagedIdentityCount = $snapshot.userAssignedManagedIdentities.Count
$snapshot.meta.roleAssignmentCount = $snapshot.roleAssignments.Count
$snapshot.meta.activityLogCount = $snapshot.activityLogs.Count

$outputDirectory = Split-Path -Parent $OutputPath
if (-not [string]::IsNullOrWhiteSpace($outputDirectory) -and -not (Test-Path $outputDirectory)) {
  Write-SnapshotProgress "Creating output directory: $outputDirectory"
  New-Item -ItemType Directory -Path $outputDirectory -Force | Out-Null
}

Write-SnapshotProgress "Writing snapshot JSON to $OutputPath"
$snapshot | ConvertTo-Json -Depth 20 | Out-File $OutputPath -Encoding utf8
Write-SnapshotProgress "Snapshot complete: $($snapshot.meta.subscriptionCount) subscriptions, $($snapshot.meta.resourceGroupCount) resource groups, $($snapshot.meta.resourceCount) resources, $($snapshot.meta.userAssignedManagedIdentityCount) user-assigned managed identities, $($snapshot.meta.roleAssignmentCount) role assignments, $($snapshot.meta.activityLogCount) activity logs"
}

# SIG # Begin signature block
# MII9MQYJKoZIhvcNAQcCoII9IjCCPR4CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBIy3e5uyDF6pYT
# XxNo1eNf7pAPp16ZPSCnLYRufTsTHKCCIfYwggXMMIIDtKADAgECAhBUmNLR1FsZ
# lUgTecgRwIeZMA0GCSqGSIb3DQEBDAUAMHcxCzAJBgNVBAYTAlVTMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jvc29mdCBJZGVu
# dGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAy
# MDAeFw0yMDA0MTYxODM2MTZaFw00NTA0MTYxODQ0NDBaMHcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jv
# c29mdCBJZGVudGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRo
# b3JpdHkgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALORKgeD
# Bmf9np3gx8C3pOZCBH8Ppttf+9Va10Wg+3cL8IDzpm1aTXlT2KCGhFdFIMeiVPvH
# or+Kx24186IVxC9O40qFlkkN/76Z2BT2vCcH7kKbK/ULkgbk/WkTZaiRcvKYhOuD
# PQ7k13ESSCHLDe32R0m3m/nJxxe2hE//uKya13NnSYXjhr03QNAlhtTetcJtYmrV
# qXi8LW9J+eVsFBT9FMfTZRY33stuvF4pjf1imxUs1gXmuYkyM6Nix9fWUmcIxC70
# ViueC4fM7Ke0pqrrBc0ZV6U6CwQnHJFnni1iLS8evtrAIMsEGcoz+4m+mOJyoHI1
# vnnhnINv5G0Xb5DzPQCGdTiO0OBJmrvb0/gwytVXiGhNctO/bX9x2P29Da6SZEi3
# W295JrXNm5UhhNHvDzI9e1eM80UHTHzgXhgONXaLbZ7LNnSrBfjgc10yVpRnlyUK
# xjU9lJfnwUSLgP3B+PR0GeUw9gb7IVc+BhyLaxWGJ0l7gpPKWeh1R+g/OPTHU3mg
# trTiXFHvvV84wRPmeAyVWi7FQFkozA8kwOy6CXcjmTimthzax7ogttc32H83rwjj
# O3HbbnMbfZlysOSGM1l0tRYAe1BtxoYT2v3EOYI9JACaYNq6lMAFUSw0rFCZE4e7
# swWAsk0wAly4JoNdtGNz764jlU9gKL431VulAgMBAAGjVDBSMA4GA1UdDwEB/wQE
# AwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIftJqhSobyhmYBAcnz1AQ
# T2ioojAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQwFAAOCAgEAr2rd5hnn
# LZRDGU7L6VCVZKUDkQKL4jaAOxWiUsIWGbZqWl10QzD0m/9gdAmxIR6QFm3FJI9c
# Zohj9E/MffISTEAQiwGf2qnIrvKVG8+dBetJPnSgaFvlVixlHIJ+U9pW2UYXeZJF
# xBA2CFIpF8svpvJ+1Gkkih6PsHMNzBxKq7Kq7aeRYwFkIqgyuH4yKLNncy2RtNwx
# AQv3Rwqm8ddK7VZgxCwIo3tAsLx0J1KH1r6I3TeKiW5niB31yV2g/rarOoDXGpc8
# FzYiQR6sTdWD5jw4vU8w6VSp07YEwzJ2YbuwGMUrGLPAgNW3lbBeUU0i/OxYqujY
# lLSlLu2S3ucYfCFX3VVj979tzR/SpncocMfiWzpbCNJbTsgAlrPhgzavhgplXHT2
# 6ux6anSg8Evu75SjrFDyh+3XOjCDyft9V77l4/hByuVkrrOj7FjshZrM77nq81YY
# uVxzmq/FdxeDWds3GhhyVKVB0rYjdaNDmuV3fJZ5t0GNv+zcgKCf0Xd1WF81E+Al
# GmcLfc4l+gcK5GEh2NQc5QfGNpn0ltDGFf5Ozdeui53bFv0ExpK91IjmqaOqu/dk
# ODtfzAzQNb50GQOmxapMomE2gj4d8yu8l13bS3g7LfU772Aj6PXsCyM2la+YZr9T
# 03u4aUoqlmZpxJTG9F9urJh4iIAGXKKy7aIwggaoMIIEkKADAgECAhMzAAJQgQIM
# z27eN/obAAAAAlCBMA0GCSqGSIb3DQEBDAUAMFoxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJ
# RCBWZXJpZmllZCBDUyBFT0MgQ0EgMDQwHhcNMjYwNjI0MTI0MzI5WhcNMjYwNjI3
# MTI0MzI5WjBpMQswCQYDVQQGEwJQTDEXMBUGA1UECB4OAUEA8wBkAHoAawBpAGUx
# DzANBgNVBAcTBldpZWx1bjEXMBUGA1UEChMOc29mdDRwbSBzcCB6b28xFzAVBgNV
# BAMTDnNvZnQ0cG0gc3Agem9vMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC
# AYEAzsCWjXdq8z2T5hgMu3Geir+Pjuk+RgV6Ui812e6Iw/1gMksqG1jvwErArmXV
# NfFkj8Ie2HnmZaoVCb4t4U4nOMHxb6ZEmztRQhYcg2xScidXVlj6QR983cIkQ/dG
# 2WBQR6sxkqChxi0yO1tgDVE4IsXf/Had/hwgPD7SEoVNjh/a0wfDQ09lIguDZGC1
# RShCEuMU80RrhvDxwoGLd2AAePLl7jy+8+GoohdLykzBSail66r+zl49rMIdr6Jr
# aDpzwFCLDjdqBMO5HZrwo+fjxaOSnS92BAQGfyUhc4OM9ZzshgIUWcQu2y4G4PMr
# RXiXzuZAJVUSzQvT5WvoK2PJYQdZH52R11FHfY1mE5pB7cL8PI1HYHCz6aKZkfzZ
# VlEAFr0IL1rwy5I3RCCplV5Mdx/uDUw5Dbb+IbmGWnynONKhEQPAEsmt+Woqd4DI
# 9PC+AbRWm+tMFa/U0NNU1pwv6bglwpz4iR2/DrfPi7ESbVyX4hfn4P++zm+CwrqG
# TJlZAgMBAAGjggHWMIIB0jAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIHgDA9
# BgNVHSUENjA0BgorBgEEAYI3YQEABggrBgEFBQcDAwYcKwYBBAGCN2GCycz3dYGA
# 0Y0Tg469piSB0sq0aDAdBgNVHQ4EFgQUGFoHA6U2h1TWtqZ3GRGTUiaSR7swHwYD
# VR0jBBgwFoAUmvFUd3UMhxY3RqCs3nn59H/BeOkwZwYDVR0fBGAwXjBcoFqgWIZW
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw
# SUQlMjBWZXJpZmllZCUyMENTJTIwRU9DJTIwQ0ElMjAwNC5jcmwwdAYIKwYBBQUH
# AQEEaDBmMGQGCCsGAQUFBzAChlhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp
# b3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUyMEVPQyUy
# MENBJTIwMDQuY3J0MFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o
# dG0wDQYJKoZIhvcNAQEMBQADggIBAC8+jFOGbfR609oAZR92NLTVv+rD2SAJSEEs
# XktLH8wp7vrmV75AryaQbOIjcfI8Ii2yCj/l9O18+TsDD5ao5ab+EGrmjeqqKMHf
# KKqCSssEGSN+w7zhAyGCqjkFcaJbdOaU5ZwUdPk/1yBT5TBAeCZLAc+gOesU9oFR
# zl3cAqoB4xGl0aT++CY9KYmt3e743/Sj373LD9SDIxpsblJ+/SKaBb3NtCbrDdWz
# ftfdzCuC3Gljxacl4TokM9JFypKplNlvj+i+1f9wSNLgZFMnEFv+51un6OINpf83
# u7T2Xs2y1G7i8qUlymvFdSJ6y7o8WXz9l7H48IG868iS1Pz9oNyWhFb0XLU9fqrT
# v+9wkf5lRoXc4p0jml7lOphqbOoa0Vc8rFiUqNdd+Sd1IVNBEJNrvKtXa6iQ119u
# rWtnBUoBBWbvyfmKukdycbDLPMH7z2kCyJubdDeJZUI4PoVPhWcjCUVlYJdjnqd9
# vzf8rDz50p1N4Z0LlfgYygg1x6N+qXyCNUWvsnydNoqujozEWwLR8aXznoDtcNac
# T3txfXHpO3R8ERHkfp3iQi68bUUvH1kK/8lMZYepDYvS5sgSklkNgCBM6YlmsWBT
# CUL/aKc2jawadSq7uIKVCu6RwKOmiHtFGwj14yS45eIgi6iJX0B5DTHnhPdAgU0m
# MgXaaxF3MIIGqDCCBJCgAwIBAgITMwACUIECDM9u3jf6GwAAAAJQgTANBgkqhkiG
# 9w0BAQwFADBaMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSswKQYDVQQDEyJNaWNyb3NvZnQgSUQgVmVyaWZpZWQgQ1MgRU9DIENB
# IDA0MB4XDTI2MDYyNDEyNDMyOVoXDTI2MDYyNzEyNDMyOVowaTELMAkGA1UEBhMC
# UEwxFzAVBgNVBAgeDgFBAPMAZAB6AGsAaQBlMQ8wDQYDVQQHEwZXaWVsdW4xFzAV
# BgNVBAoTDnNvZnQ0cG0gc3Agem9vMRcwFQYDVQQDEw5zb2Z0NHBtIHNwIHpvbzCC
# AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAM7Alo13avM9k+YYDLtxnoq/
# j47pPkYFelIvNdnuiMP9YDJLKhtY78BKwK5l1TXxZI/CHth55mWqFQm+LeFOJzjB
# 8W+mRJs7UUIWHINsUnInV1ZY+kEffN3CJEP3RtlgUEerMZKgocYtMjtbYA1ROCLF
# 3/x2nf4cIDw+0hKFTY4f2tMHw0NPZSILg2RgtUUoQhLjFPNEa4bw8cKBi3dgAHjy
# 5e48vvPhqKIXS8pMwUmopeuq/s5ePazCHa+ia2g6c8BQiw43agTDuR2a8KPn48Wj
# kp0vdgQEBn8lIXODjPWc7IYCFFnELtsuBuDzK0V4l87mQCVVEs0L0+Vr6CtjyWEH
# WR+dkddRR32NZhOaQe3C/DyNR2Bws+mimZH82VZRABa9CC9a8MuSN0QgqZVeTHcf
# 7g1MOQ22/iG5hlp8pzjSoREDwBLJrflqKneAyPTwvgG0VpvrTBWv1NDTVNacL+m4
# JcKc+Ikdvw63z4uxEm1cl+IX5+D/vs5vgsK6hkyZWQIDAQABo4IB1jCCAdIwDAYD
# VR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwPQYDVR0lBDYwNAYKKwYBBAGCN2EB
# AAYIKwYBBQUHAwMGHCsGAQQBgjdhgsnM93WBgNGNE4OOvaYkgdLKtGgwHQYDVR0O
# BBYEFBhaBwOlNodU1ramdxkRk1Imkke7MB8GA1UdIwQYMBaAFJrxVHd1DIcWN0ag
# rN55+fR/wXjpMGcGA1UdHwRgMF4wXKBaoFiGVmh0dHA6Ly93d3cubWljcm9zb2Z0
# LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUy
# MEVPQyUyMENBJTIwMDQuY3JsMHQGCCsGAQUFBwEBBGgwZjBkBggrBgEFBQcwAoZY
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQl
# MjBJRCUyMFZlcmlmaWVkJTIwQ1MlMjBFT0MlMjBDQSUyMDA0LmNydDBUBgNVHSAE
# TTBLMEkGBFUdIAAwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMA0GCSqGSIb3DQEBDAUAA4IC
# AQAvPoxThm30etPaAGUfdjS01b/qw9kgCUhBLF5LSx/MKe765le+QK8mkGziI3Hy
# PCItsgo/5fTtfPk7Aw+WqOWm/hBq5o3qqijB3yiqgkrLBBkjfsO84QMhgqo5BXGi
# W3TmlOWcFHT5P9cgU+UwQHgmSwHPoDnrFPaBUc5d3AKqAeMRpdGk/vgmPSmJrd3u
# +N/0o9+9yw/UgyMabG5Sfv0imgW9zbQm6w3Vs37X3cwrgtxpY8WnJeE6JDPSRcqS
# qZTZb4/ovtX/cEjS4GRTJxBb/udbp+jiDaX/N7u09l7NstRu4vKlJcprxXUiesu6
# PFl8/Zex+PCBvOvIktT8/aDcloRW9Fy1PX6q07/vcJH+ZUaF3OKdI5pe5TqYamzq
# GtFXPKxYlKjXXfkndSFTQRCTa7yrV2uokNdfbq1rZwVKAQVm78n5irpHcnGwyzzB
# +89pAsibm3Q3iWVCOD6FT4VnIwlFZWCXY56nfb83/Kw8+dKdTeGdC5X4GMoINcej
# fql8gjVFr7J8nTaKro6MxFsC0fGl856A7XDWnE97cX1x6Tt0fBER5H6d4kIuvG1F
# Lx9ZCv/JTGWHqQ2L0ubIEpJZDYAgTOmJZrFgUwlC/2inNo2sGnUqu7iClQrukcCj
# poh7RRsI9eMkuOXiIIuoiV9AeQ0x54T3QIFNJjIF2msRdzCCBygwggUQoAMCAQIC
# EzMAAAAXJ0UJC4uHr8YAAAAAABcwDQYJKoZIhvcNAQEMBQAwYzELMAkGA1UEBhMC
# VVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE0MDIGA1UEAxMrTWlj
# cm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2lnbmluZyBQQ0EgMjAyMTAeFw0yNjAz
# MjYxODExMzFaFw0zMTAzMjYxODExMzFaMFoxCzAJBgNVBAYTAlVTMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJRCBW
# ZXJpZmllZCBDUyBFT0MgQ0EgMDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
# AoICAQCCx2T+Aw9mKgGVzJ+Tq0PMn49G3itIsYpbx7ClLSRHFe1RELdPcZ1sIqWO
# hsSfy6yyqEapClGH9Je9FXA1cQgZvvpQbkg+QInVLr/0EPrVBCwrM96lbRI2PxNe
# CwXG9LsyW2hG6KQgintDmNCBo4zpDIr377plVdSliZm6UB7rHwmvBnR02QT6tnrq
# Wq2ihzB6lRJVTEzuh0OafzIMeMnYM0+x+ve5EOLHdfiq+HXiMf9Jb7YLHtYgyHIi
# JA7bTWLqFSLGaTh7ZlbxbsLXA91OOroEpv7OjzFuu3tkpC9FflA4Dp2Euq4+qPmx
# UqfGp+TX0gLRJp9NJOzzILjcTD3rkFFFbxUv1xyg6avivFDLtoKBhM2Td138umE1
# pNOacanuSYtPHIeQHmB6haFi64avLBLwTTAm/Rbit860cFXR72wq+5Qh4hSmezHq
# KXERWPpVBe+APrJ4Iqc+aPeMmIkoCWZQO22HnLNFUFSXjiwyIbgvlH/LIAJEqTaf
# TzxDZgKhlLU7zr6gwsq3WNpcYQI6NuxWnwh3VVDDyF7onQqKs5Ll7bleVN0Y8Vvq
# gE45ppyBbvwqN/Run5fMCCRz3aYMY0kZhKO92eP7t4zHqZ5bQMAgZ0tE2Pz/jb0w
# iykUF/PcoOqqk3vVLiRDYst6vd3GEMNzMpUUvQcvBG46+COIbwIDAQABo4IB3DCC
# AdgwDgYDVR0PAQH/BAQDAgGGMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBSa
# 8VR3dQyHFjdGoKzeefn0f8F46TBUBgNVHSAETTBLMEkGBFUdIAAwQTA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9z
# aXRvcnkuaHRtMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMBIGA1UdEwEB/wQI
# MAYBAf8CAQAwHwYDVR0jBBgwFoAU2UEpsA8PY2zvadf1zSmepEhqMOYwcAYDVR0f
# BGkwZzBloGOgYYZfaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv
# TWljcm9zb2Z0JTIwSUQlMjBWZXJpZmllZCUyMENvZGUlMjBTaWduaW5nJTIwUENB
# JTIwMjAyMS5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIw
# VmVyaWZpZWQlMjBDb2RlJTIwU2lnbmluZyUyMFBDQSUyMDIwMjEuY3J0MA0GCSqG
# SIb3DQEBDAUAA4ICAQCQdVoZ/U0m38l2iKaZFlsxavptpoOLyaR1a9ZK2TSF1kOn
# FJhMDse6KkCgsveoiEjXTVc6Xt86IKHn76Nk5qZB0BXv2iMRQ2giAJmYvZcmstoZ
# qfB2M3Kd5wnJhUJOtF/b6HsqSelY6nhrF06zor1lDmDQixBZcLB9zR1+RKQso1je
# kNxYuUk+HaN3k1S57qk0O//YbkwU0mELCW04N5vICMZx5T5c7Nq/7uLvbVhCdD7f
# 2bZpA4U7vOkB1ooB4AaER3pjoJ0Mad5LFyi6Na9p9Zu/hrLeOjU5FItS5Yxsqvlf
# XxAThJ176CmkYstKRmytSHZ7JhKRfV6e9Zftk/ODb/CK4pGVAVqsOf4337bQGrOH
# HCQ3IvN9gmnUuDh8JdvbheoWPHxIN1GB5sUiY584tXN7xdD8LCSsRqJvQ8e7a3gZ
# WTgViugRs1QWq+N0G9Nje6JHlN1CjJehge+H5PGktJja+juGEr0P+ukSkcL6qaZx
# FQTh3SDI71lvW++3bl/Ezd6SO8N9Udw+reoyvRHCyTiSsplZQSBTVJdPmo3qCpGu
# yHFtPo5CBn3/FPTiqJd3M9BHoqKd0G9Kmg6fGcAvFwnLNXA2kov727wRljL3ypfq
# L7iAT/Ynpxul6RwHRlcOf9dDGg1RRvr92NP/CWVXIb68geR2rvU/NsfmtjF1wDCC
# B54wggWGoAMCAQICEzMAAAAHh6M0o3uljhwAAAAAAAcwDQYJKoZIhvcNAQEMBQAw
# dzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjFI
# MEYGA1UEAxM/TWljcm9zb2Z0IElkZW50aXR5IFZlcmlmaWNhdGlvbiBSb290IENl
# cnRpZmljYXRlIEF1dGhvcml0eSAyMDIwMB4XDTIxMDQwMTIwMDUyMFoXDTM2MDQw
# MTIwMTUyMFowYzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjE0MDIGA1UEAxMrTWljcm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2ln
# bmluZyBQQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALLw
# wK8ZiCji3VR6TElsaQhVCbRS/3pK+MHrJSj3Zxd3KU3rlfL3qrZilYKJNqztA9OQ
# acr1AwoNcHbKBLbsQAhBnIB34zxf52bDpIO3NJlfIaTE/xrweLoQ71lzCHkD7A4A
# s1Bs076Iu+mA6cQzsYYH/Cbl1icwQ6C65rU4V9NQhNUwgrx9rGQ//h890Q8JdjLL
# w0nV+ayQ2Fbkd242o9kH82RZsH3HEyqjAB5a8+Ae2nPIPc8sZU6ZE7iRrRZywRmr
# KDp5+TcmJX9MRff241UaOBs4NmHOyke8oU1TYrkxh+YeHgfWo5tTgkoSMoayqoDp
# HOLJs+qG8Tvh8SnifW2Jj3+ii11TS8/FGngEaNAWrbyfNrC69oKpRQXY9bGH6jn9
# NEJv9weFxhTwyvx9OJLXmRGbAUXN1U9nf4lXezky6Uh/cgjkVd6CGUAf0K+Jw+GE
# /5VpIVbcNr9rNE50Sbmy/4RTCEGvOq3GhjITbCa4crCzTTHgYYjHs1NbOc6brH+e
# KpWLtr+bGecy9CrwQyx7S/BfYJ+ozst7+yZtG2wR461uckFu0t+gCwLdN0A6cFtS
# RtR8bvxVFyWwTtgMMFRuBa3vmUOTnfKLsLefRaQcVTgRnzeLzdpt32cdYKp+dhr2
# ogc+qM6K4CBI5/j4VFyC4QFeUP2YAidLtvpXRRo3AgMBAAGjggI1MIICMTAOBgNV
# HQ8BAf8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFNlBKbAPD2Ns
# 72nX9c0pnqRIajDmMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o
# dG0wGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwDwYDVR0TAQH/BAUwAwEB/zAf
# BgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2ioojCBhAYDVR0fBH0wezB5oHeg
# dYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBSb290JTIwQ2VydGlmaWNhdGUl
# MjBBdXRob3JpdHklMjAyMDIwLmNybDCBwwYIKwYBBQUHAQEEgbYwgbMwgYEGCCsG
# AQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p
# Y3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0aW9uJTIwUm9vdCUyMENlcnRp
# ZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6
# Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDANBgkqhkiG9w0BAQwFAAOCAgEA
# fyUqnv7Uq+rdZgrbVyNMul5skONbhls5fccPlmIbzi+OwVdPQ4H55v7VOInnmezQ
# EeW4LqK0wja+fBznANbXLB0KrdMCbHQpbLvG6UA/Xv2pfpVIE1CRFfNF4XKO8XYE
# a3oW8oVH+KZHgIQRIwAbyFKQ9iyj4aOWeAzwk+f9E5StNp5T8FG7/VEURIVWArbA
# zPt9ThVN3w1fAZkF7+YU9kbq1bCR2YD+MtunSQ1Rft6XG7b4e0ejRA7mB2IoX5hN
# h3UEauY0byxNRG+fT2MCEhQl9g2i2fs6VOG19CNep7SquKaBjhWmirYyANb0RJSL
# WjinMLXNOAga10n8i9jqeprzSMU5ODmrMCJE12xS/NWShg/tuLjAsKP6SzYZ+1Ry
# 358ZTFcx0FS/mx2vSoU8s8HRvy+rnXqyUJ9HBqS0DErVLjQwK8VtsBdekBmdTbQV
# oCgPCqr+PDPB3xajYnzevs7eidBsM71PINK2BoE2UfMwxCCX3mccFgx6UsQeRSdV
# VVNSyALQe6PT12418xon2iDGE81OGCreLzDcMAZnrUAx4XQLUz6ZTl65yPUiOh3k
# 7Yww94lDf+8oG2oZmDh5O1Qe38E+M3vhKwmzIeoB1dVLlz4i3IpaDcR+iuGjH2Td
# aC1ZOmBXiCRKJLj4DT2uhJ04ji+tHD6n58vhavFIrmcxghqRMIIajQIBATBxMFox
# CzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzAp
# BgNVBAMTIk1pY3Jvc29mdCBJRCBWZXJpZmllZCBDUyBFT0MgQ0EgMDQCEzMAAlCB
# AgzPbt43+hsAAAACUIEwDQYJYIZIAWUDBAIBBQCgXjAQBgorBgEEAYI3AgEMMQIw
# ADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAvBgkqhkiG9w0BCQQxIgQg9xP8
# Brr2+7Q0rNELeFwvt7Zi8hlvJILj7YEb3ePWtBEwDQYJKoZIhvcNAQEBBQAEggGA
# I9vAbb8BFZomS56Sn2OnxBTVJi1iHVyqHVBBj7T0VNbGg3K4D5qLcHRBUHtaYVii
# aaOKksjrtlVueut19t3OOoUinDeqSsW7ibAYVjVeufn5tCCo6APBRYiKsd2Djh6o
# wt9UPJr2IGhxOfzdKMQE04vSaJgfYQU0Y+MeJTjjqf+RSAhbC4x0PFb7HIbALd9z
# v51II0mXixOeX4AiV8X7wrD8T7jFq4Taw4HiCKHqi9Voex9sww8BscWsoIGBUnu2
# 3R/cU1XJ2dopfBgaIQFM5S9KBVV8mxiUZ+i2Q1FmaEmsB3lsicVtTI7OKYDzj0CJ
# +B6hQOunF4x+XQkDx9KhEEusTxr0x4rmRUWKEU5oqb8mkbC1qzxtrW72cDRxpkeH
# 8nntqqPHjKE6BvVbBSZujifaDlt5/XWQexX0+UlCHXVTKGk+F4+l6ANGQlJg6iGg
# LALF5xt9XLBMTRDzqcdFCuxYc6gWLpApajl5caZIjlF7IllA+yrl7jZzdJ9an+v3
# oYIYETCCGA0GCisGAQQBgjcDAwExghf9MIIX+QYJKoZIhvcNAQcCoIIX6jCCF+YC
# AQMxDzANBglghkgBZQMEAgEFADCCAWIGCyqGSIb3DQEJEAEEoIIBUQSCAU0wggFJ
# AgEBBgorBgEEAYRZCgMBMDEwDQYJYIZIAWUDBAIBBQAEIDwdlMAwx0IC0us3sJg6
# ET2WtY3YcdVxMVydRg/tR6xcAgZp6IGCCTUYEzIwMjYwNjI1MTQ0NTQ5LjE0MVow
# BIACAfSggeGkgd4wgdsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV
# BAsTHm5TaGllbGQgVFNTIEVTTjo3RDAwLTA1RTAtRDk0NzE1MDMGA1UEAxMsTWlj
# cm9zb2Z0IFB1YmxpYyBSU0EgVGltZSBTdGFtcGluZyBBdXRob3JpdHmggg8hMIIH
# gjCCBWqgAwIBAgITMwAAAAXlzw//Zi7JhwAAAAAABTANBgkqhkiG9w0BAQwFADB3
# MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMUgw
# RgYDVQQDEz9NaWNyb3NvZnQgSWRlbnRpdHkgVmVyaWZpY2F0aW9uIFJvb3QgQ2Vy
# dGlmaWNhdGUgQXV0aG9yaXR5IDIwMjAwHhcNMjAxMTE5MjAzMjMxWhcNMzUxMTE5
# MjA0MjMxWjBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBp
# bmcgQ0EgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ5851Jj
# /eDFnwV9Y7UGIqMcHtfnlzPREwW9ZUZHd5HBXXBvf7KrQ5cMSqFSHGqg2/qJhYqO
# QxwuEQXG8kB41wsDJP5d0zmLYKAY8Zxv3lYkuLDsfMuIEqvGYOPURAH+Ybl4SJEE
# Snt0MbPEoKdNihwM5xGv0rGofJ1qOYSTNcc55EbBT7uq3wx3mXhtVmtcCEr5ZKTk
# KKE1CxZvNPWdGWJUPC6e4uRfWHIhZcgCsJ+sozf5EeH5KrlFnxpjKKTavwfFP6Xa
# GZGWUG8TZaiTogRoAlqcevbiqioUz1Yt4FRK53P6ovnUfANjIgM9JDdJ4e0qiDRm
# 5sOTiEQtBLGd9Vhd1MadxoGcHrRCsS5rO9yhv2fjJHrmlQ0EIXmp4DhDBieKUGR+
# eZ4CNE3ctW4uvSDQVeSp9h1SaPV8UWEfyTxgGjOsRpeexIveR1MPTVf7gt8hY64X
# NPO6iyUGsEgt8c2PxF87E+CO7A28TpjNq5eLiiunhKbq0XbjkNoU5JhtYUrlmAbp
# xRjb9tSreDdtACpm3rkpxp7AQndnI0Shu/fk1/rE3oWsDqMX3jjv40e8KN5YsJBn
# czyWB4JyeeFMW3JBfdeAKhzohFe8U5w9WuvcP1E8cIxLoKSDzCCBOu0hWdjzKNu8
# Y5SwB1lt5dQhABYyzR3dxEO/T1K/BVF3rV69AgMBAAGjggIbMIICFzAOBgNVHQ8B
# Af8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFGtpKDo1L0hjQM97
# 2K9J6T7ZPdshMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNodHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0w
# EwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEw
# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2io
# ojCBhAYDVR0fBH0wezB5oHegdYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br
# aW9wcy9jcmwvTWljcm9zb2Z0JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBS
# b290JTIwQ2VydGlmaWNhdGUlMjBBdXRob3JpdHklMjAyMDIwLmNybDCBlAYIKwYB
# BQUHAQEEgYcwgYQwgYEGCCsGAQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0
# aW9uJTIwUm9vdCUyMENlcnRpZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQw
# DQYJKoZIhvcNAQEMBQADggIBAF+Idsd+bbVaFXXnTHho+k7h2ESZJRWluLE0Oa/p
# O+4ge/XEizXvhs0Y7+KVYyb4nHlugBesnFqBGEdC2IWmtKMyS1OWIviwpnK3aL5J
# edwzbeBF7POyg6IGG/XhhJ3UqWeWTO+Czb1c2NP5zyEh89F72u9UIw+IfvM9lzDm
# c2O2END7MPnrcjWdQnrLn1Ntday7JSyrDvBdmgbNnCKNZPmhzoa8PccOiQljjTW6
# GePe5sGFuRHzdFt8y+bN2neF7Zu8hTO1I64XNGqst8S+w+RUdie8fXC1jKu3m9KG
# IqF4aldrYBamyh3g4nJPj/LR2CBaLyD+2BuGZCVmoNR/dSpRCxlot0i79dKOChmo
# ONqbMI8m04uLaEHAv4qwKHQ1vBzbV/nG89LDKbRSSvijmwJwxRxLLpMQ/u4xXxFf
# R4f/gksSkbJp7oqLwliDm/h+w0aJ/U5ccnYhYb7vPKNMN+SZDWycU5ODIRfyoGl5
# 9BsXR/HpRGtiJquOYGmvA/pk5vC1lcnbeMrcWD/26ozePQ/TWfNXKBOmkFpvPE8C
# H+EeGGWzqTCjdAsno2jzTeNSxlx3glDGJgcdz5D/AAxw9Sdgq/+rY7jjgs7X6fqP
# TXPmaCAJKVHAP19oEjJIBwD1LyHbaEgBxFCogYSOiUIr0Xqcr1nJfiWG2GwYe6Zo
# AF1bMIIHlzCCBX+gAwIBAgITMwAAAFXZ3WkmKPn44gAAAAAAVTANBgkqhkiG9w0B
# AQwFADBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0
# aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcg
# Q0EgMjAyMDAeFw0yNTEwMjMyMDQ2NDlaFw0yNjEwMjIyMDQ2NDlaMIHbMQswCQYD
# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe
# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3Nv
# ZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046
# N0QwMC0wNUUwLUQ5NDcxNTAzBgNVBAMTLE1pY3Jvc29mdCBQdWJsaWMgUlNBIFRp
# bWUgU3RhbXBpbmcgQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAvbkfkh5ZSLP0MCUWafaw/KZoVZu9iQx8r5JwhZvdrUi86UjCCFQONjQa
# nrIxGF9hRGIZLQZ50gHrLC+4fpUEJff5t04VwByWC2/bWOuk6NmaTh9JpPZDcGzN
# R95QlryjfEjtl+gxj12zNPEdADPplVfzt8cYRWFBx/Fbfch08k6P9p7jX2q1jFPb
# UxWYJ+xOyGC1aKhDGY5b+8wL39v6qC0HFIx/v3y+bep+aEXooK8VoeWK+szfaFjX
# o8YTcvQ8UL4szu9HFTuZNv6vvoJ7Ju+o5aTj51sph+0+FXW38TlL/rDBd5ia79js
# kLtOeHbDjkbljilwzegcxv9i49F05ZrS/5ELZCCY1VaqO7EOLKVaxxdAO5oy1vb0
# Bx0ZRVX1mxFjYzay2EC051k6yGJHm58y1oe2IKRa/SM1+BTGse6vHNi5Q2d5ZnoR
# 9AOAUDDwJIIqRI4rZz2MSinh11WrXTG9urF2uoyd5Ve+8hxes9ABeP2PYQKlXYTA
# xvdaeanDTQ/vwmnM+yTcWzrVm84Z38XVFw4G7p/ZNZ2nscvv6uru2AevXcyV1t8h
# a7iWmhhgTWBNBrViuDlc3iPvOz2SVPbPeqhyY/NXwNZCAgc2H5pOztu6MwQxDIjt
# e3XM/FkKBxHofS2abNT/0HG+xZtFqUJDaxgbJa6lN1zh7spjuQ8CAwEAAaOCAcsw
# ggHHMB0GA1UdDgQWBBRWBF8QbdwIA/DIv6nJFsrB16xltjAfBgNVHSMEGDAWgBRr
# aSg6NS9IY0DPe9ivSek+2T3bITBsBgNVHR8EZTBjMGGgX6BdhltodHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBQdWJsaWMlMjBS
# U0ElMjBUaW1lc3RhbXBpbmclMjBDQSUyMDIwMjAuY3JsMHkGCCsGAQUFBwEBBG0w
# azBpBggrBgEFBQcwAoZdaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j
# ZXJ0cy9NaWNyb3NvZnQlMjBQdWJsaWMlMjBSU0ElMjBUaW1lc3RhbXBpbmclMjBD
# QSUyMDIwMjAuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUH
# AwgwDgYDVR0PAQH/BAQDAgeAMGYGA1UdIARfMF0wUQYMKwYBBAGCN0yDfQEBMEEw
# PwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9j
# cy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBBAIwDQYJKoZIhvcNAQEMBQADggIBAFIe
# 4ZJUe9qUKcWeWypchB58fXE/ZIWv2D5XP5/k/tB7LCN9BvmNSVKZ3VeclQM978wf
# EvuvdMQSUv6Y20boIM8DK1K1IU9cP21MG0ExiHxaqjrikf2qbfrXIip4Ef3v2bNY
# KQxCxN3Sczp1SX0H7uqK2L5OhfDEiXf15iou5hh+EPaaqp49czNQpJDOR/vfJghU
# c/qcslDPhoCZpZx8b2ODvywGQNXwqlbsmCS24uGmEkQ3UH5JUeN6c91yasVchS78
# riMrm6R9ZpAiO5pfNKMGU2MLm1A3pp098DcbFTAc95Hh6Qvkh//28F/Xe2bMFb6D
# L7Sw0ZO95v0gv0ZTyJfxS/LCxfraeEII9FSFOKAMEp1zNFSs2ue0GGjBt9yEEMUw
# vxq9ExFz0aZzYm8ivJfffpIVDnX/+rVRTYcxIkQyFYslIhYlWF9SjCw5r49qakjM
# RNh8W9O7aaoolSVZleQZjGt0K8JzMlyp6hp2lbW6XqRx2cOHbbxJDxmENzohGUzi
# I13lI2g2Bf5qibfC4bKNRpJo9lbE8HUbY0qJiE8u3SU8eDQaySPXOEhJjxRCQwwO
# vejYmBG5P7CckQNBSnnl12+FKRKgPoj0Mv+z5OMhj9z2MtpbnHLAkep0odQClEyy
# CG/uR5tK5rW6mZH5Oq56UWS0NI6NV1JGS7Jri6jFMYIHQzCCBz8CAQEweDBhMQsw
# CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD
# VQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMAIT
# MwAAAFXZ3WkmKPn44gAAAAAAVTANBglghkgBZQMEAgEFAKCCBJwwEQYLKoZIhvcN
# AQkQAg8xAgUAMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0B
# CQUxDxcNMjYwNjI1MTQ0NTQ5WjAvBgkqhkiG9w0BCQQxIgQg/OyX1nq676KiHSoY
# mFDZFi/K9WEMpVTYWo9Lnjno1XcwgbkGCyqGSIb3DQEJEAIvMYGpMIGmMIGjMIGg
# BCDYuTyXZIZiu799/v4PaqsmeSzBxh0rqkYq7sYYavj+zTB8MGWkYzBhMQswCQYD
# VQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQD
# EylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMAITMwAA
# AFXZ3WkmKPn44gAAAAAAVTCCA14GCyqGSIb3DQEJEAISMYIDTTCCA0mhggNFMIID
# QTCCAikCAQEwggEJoYHhpIHeMIHbMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25z
# MScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046N0QwMC0wNUUwLUQ5NDcxNTAzBgNV
# BAMTLE1pY3Jvc29mdCBQdWJsaWMgUlNBIFRpbWUgU3RhbXBpbmcgQXV0aG9yaXR5
# oiMKAQEwBwYFKw4DAhoDFQAdO1QBgmW/tuBZV5EGjhfsV4cN6qBnMGWkYzBhMQsw
# CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD
# VQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMDAN
# BgkqhkiG9w0BAQsFAAIFAO3nX3AwIhgPMjAyNjA2MjUwODA0MDBaGA8yMDI2MDYy
# NjA4MDQwMFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA7edfcAIBADAHAgEAAgJA
# QjAHAgEAAgISezAKAgUA7eiw8AIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEE
# AYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IB
# AQCfaaMKevMe2LpvoLc8M9+RRFcl5IvQOiMfN4p5XQEEyWN45mfEFWAFLx/7isHR
# cR0mM/UZoBrvoNhAyWYxoPaLYKAvQrppcoOGzHQ59lqIWlTdwX/Ulwy0hQ5bFqxU
# qITcybcgRHgCWIS+3NdyS9oM9+Co5Qxg2COhZVwkzLrpbwgZaj9ZYYoWcIr5pb6T
# pQWQ7uBNfP+KkVRPDZ6PDa50no2c+yKddrEHh9NzjaRoeKDlA75wOqX+PsRDav+Q
# 5sJgqzJhC/fVeJvI+TsBN8wfW9fzrSO9azBe7D9w2S+U2v0pz+d5aMnozQqJNovL
# VPD6gO8So/9eN9eG7rzjqj73MA0GCSqGSIb3DQEBAQUABIICAGcgvP4heJeWwBuI
# u3tgyfrCxbfxEha49MSEdxGCQ7AYh0a1qlHL+OSYqIz33u1UasixEzVuXiw9ekSB
# Z3B+pPcWF0e+rtqrjpnVRe+lFp5IeKzNIu3ptYSPPoQakVpjq32KY7O1mt9A3uw7
# ZT29DLpACnt6sje7q1j7K98Yw1c0iW9UPab401P3vgJcBw4vFhTcZsn8Uun0oqWH
# 5KbkUd6Otx33S3LimxtH0g5hrh+geqB2+/j943u/G2rr9KAb3Oj1HW17YNk/tB3f
# 4MD0DWsS1ensZKdjiAL+U1S5KzumNXPDIPMfoyTJCGQ2zddB/1BSJrfRkndV69Rt
# HVvR9kfaCWrmonDjuyjDoQlV/Tc+JEnLHPh+4udWEuOGVwOdYLRwmtXGibWVXa6F
# o5fu/ZVOErE5t1++QpBKR2NZ+POOidDSO5lthTYxza3xBFk6IRVUGtBMgTW2iYO4
# naFeyjj4huTkf3rTQys5jQnXe0Wm2AbYOA6R7raEgZsjAlXDB8ns33TPOaiF3a74
# sOwO9oa7dKihxgti3wrT2ljoIt/db4At7YwmFhWwo60RHHi5vFa/7ePTJuE2uJAo
# 7euB7EJIZDeOm3J/qJu037T3SxRYtRmYLMhMI4djFCCmqUgGI7K+n95iBgWR1Lmr
# Hxlc4Gan1wPM1To+m5ZQ1g8sLJt/
# SIG # End signature block