Private/Invoke-OwnerLensPrepareEntraSnapshot.ps1

<#
.SYNOPSIS
Creates an OwnerLens Microsoft Entra snapshot file.
 
.DESCRIPTION
Exports service principals, application registrations, groups, group membership facts, owners, credentials, and permissions into the local JSON snapshot consumed by OwnerLens.
#>


function Invoke-OwnerLensPrepareEntraSnapshot {
  [CmdletBinding()]
  param(
  [string]$OutputPath = ".\data\entra-snapshot.json"
  )

$ownerExpand = "owners(`$select=id,displayName,userPrincipalName,mail)"

function Write-EntraSnapshotProgress {
  param([string]$Message)

  $timestamp = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss")
  Write-Host "[$timestamp] $Message"
}

function Get-EntraGroupMembersIncludingServicePrincipals {
  param(
    [Parameter(Mandatory = $true)]
    [string]$GroupId
  )

  $members = @()
  $uri = "/beta/groups/$($GroupId)/members?`$select=id,displayName,userPrincipalName,mail,appId,servicePrincipalType&`$top=999"

  while ($uri) {
    $currentUri = $uri
    $response = Invoke-OwnerLensRestRequestWithRetry `
      -OperationName "Microsoft Graph group members request" `
      -Request {
        return Invoke-MgGraphRequest -Method GET -Uri $currentUri -OutputType PSObject -ErrorAction Stop
      }
    $members += @($response.value)

    $nextLinkProperty = $response.PSObject.Properties["@odata.nextLink"]
    $uri = if ($nextLinkProperty) { $nextLinkProperty.Value } else { $null }
  }

  return $members
}

function Get-EntraOAuth2PermissionGrants {
  $grants = @()
  $uri = "/v1.0/oauth2PermissionGrants?`$select=id,clientId,consentType,principalId,resourceId,scope&`$top=999"

  while ($uri) {
    $currentUri = $uri
    $response = Invoke-OwnerLensRestRequestWithRetry `
      -OperationName "Microsoft Graph OAuth2 permission grants request" `
      -Request {
        return Invoke-MgGraphRequest -Method GET -Uri $currentUri -OutputType PSObject -ErrorAction Stop
      }
    $grants += @($response.value)

    $nextLinkProperty = $response.PSObject.Properties["@odata.nextLink"]
    $uri = if ($nextLinkProperty) { $nextLinkProperty.Value } else { $null }
  }

  return $grants
}

function ConvertTo-GraphBatchRelativeUrl {
  param(
    [Parameter(Mandatory = $true)]
    [string]$Url
  )

  if ($Url.StartsWith("https://graph.microsoft.com/v1.0", [System.StringComparison]::OrdinalIgnoreCase)) {
    return $Url.Substring("https://graph.microsoft.com/v1.0".Length)
  }

  if ($Url.StartsWith("/v1.0/", [System.StringComparison]::OrdinalIgnoreCase)) {
    return $Url.Substring("/v1.0".Length)
  }

  if ($Url.StartsWith("/", [System.StringComparison]::Ordinal)) {
    return $Url
  }

  return "/$Url"
}

function Get-EntraServicePrincipalAppRoleAssignmentsBatch {
  param(
    [array]$ServicePrincipals = @()
  )

  $assignments = @()
  $pendingRequests = @(
    foreach ($sp in @($ServicePrincipals)) {
      if ($sp -and -not [string]::IsNullOrWhiteSpace([string]$sp.Id)) {
        [pscustomobject]@{
          servicePrincipalId = [string]$sp.Id
          servicePrincipalDisplayName = [string]$sp.DisplayName
          url = "/servicePrincipals/$($sp.Id)/appRoleAssignments?`$select=id,appRoleId,principalId,principalDisplayName,resourceId,resourceDisplayName&`$top=999"
        }
      }
    }
  )
  $completedRequestCount = 0
  $totalInitialRequestCount = $pendingRequests.Count
  $batchSize = 20

  while ($pendingRequests.Count -gt 0) {
    $currentBatch = @($pendingRequests | Select-Object -First $batchSize)
    $pendingRequests = @($pendingRequests | Select-Object -Skip $currentBatch.Count)

    $batchRequests = @()
    $requestById = @{}

    for ($requestIndex = 0; $requestIndex -lt $currentBatch.Count; $requestIndex++) {
      $requestId = [string]($requestIndex + 1)
      $request = $currentBatch[$requestIndex]
      $requestById[$requestId] = $request
      $batchRequests += [pscustomobject]@{
        id = $requestId
        method = "GET"
        url = $request.url
      }
    }

    $body = @{ requests = $batchRequests } | ConvertTo-Json -Depth 10
    $currentBody = $body
    $response = Invoke-OwnerLensRestRequestWithRetry `
      -OperationName "Microsoft Graph app role assignments batch request" `
      -Request {
        return Invoke-MgGraphRequest -Method POST -Uri "/v1.0/`$batch" -Body $currentBody -ContentType "application/json" -OutputType PSObject -ErrorAction Stop
      }

    foreach ($batchResponse in @($response.responses)) {
      $request = $requestById[[string]$batchResponse.id]

      if (-not $request) {
        continue
      }

      if ($batchResponse.status -lt 200 -or $batchResponse.status -ge 300) {
        throw "Graph batch app role assignment query failed for service principal $($request.servicePrincipalDisplayName) ($($request.servicePrincipalId)) with status $($batchResponse.status)."
      }

      $assignments += @($batchResponse.body.value)
      $nextLinkProperty = $batchResponse.body.PSObject.Properties["@odata.nextLink"]

      if ($nextLinkProperty) {
        $pendingRequests += [pscustomobject]@{
          servicePrincipalId = $request.servicePrincipalId
          servicePrincipalDisplayName = $request.servicePrincipalDisplayName
          url = ConvertTo-GraphBatchRelativeUrl -Url $nextLinkProperty.Value
        }
      }

      $completedRequestCount += 1
    }

    Write-EntraSnapshotProgress "Loaded app role assignment pages: $completedRequestCount; initial service principal requests: $totalInitialRequestCount; pending page requests: $($pendingRequests.Count)"
  }

  return $assignments
}

$requiredGraphModules = @(
  "Microsoft.Graph.Authentication",
  "Microsoft.Graph.Applications"
)

foreach ($moduleName in $requiredGraphModules) {
  try {
    Import-Module $moduleName -ErrorAction Stop
  } catch {
    throw "Microsoft Graph PowerShell module missing: $moduleName. Install: Install-Module Microsoft.Graph -Scope CurrentUser"
  }
}

Write-EntraSnapshotProgress "Checking Microsoft Graph context"
$context = Get-MgContext

if (-not $context) {
  throw 'Not connected. Run: Connect-MgGraph -TenantId "<tenant-id>" -Scopes "Application.Read.All","Group.Read.All","Directory.Read.All"'
}

$snapshot = [ordered]@{
  meta = [ordered]@{
    provider = "entra"
    snapshotVersion = "0.4"
    createdAt = (Get-Date).ToUniversalTime().ToString("o")
    tenantId = $context.TenantId
    account = $context.Account
    scopes = $context.Scopes
  }
  servicePrincipals = @()
  applications = @()
  oauth2PermissionGrants = @()
  appRoleAssignments = @()
  groups = @()
  groupMembers = @()
}

$oauth2PermissionGrantIds = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)

function Add-OAuth2PermissionGrantSnapshot {
  param(
    [Parameter(Mandatory = $true)]
    $Grant
  )

  if ([string]::IsNullOrWhiteSpace([string]$Grant.Id)) {
    return
  }

  if (-not $oauth2PermissionGrantIds.Add([string]$Grant.Id)) {
    return
  }

  $snapshot.oauth2PermissionGrants += [pscustomobject]@{
    id = $Grant.Id
    clientId = $Grant.ClientId
    consentType = $Grant.ConsentType
    principalId = $Grant.PrincipalId
    resourceId = $Grant.ResourceId
    scope = $Grant.Scope
  }
}

Write-EntraSnapshotProgress "Loading service principals from Microsoft Graph"
$servicePrincipals = Get-MgServicePrincipal `
  -All `
  -Property Id,AppId,DisplayName,ServicePrincipalType,PublisherName,AccountEnabled,AppOwnerOrganizationId,AppDisplayName,Homepage,LoginUrl,ReplyUrls,ServicePrincipalNames,Tags,AppRoles `
  -ExpandProperty $ownerExpand
$servicePrincipals = @($servicePrincipals)
Write-EntraSnapshotProgress "Loaded $($servicePrincipals.Count) service principals"

$servicePrincipalById = @{}

foreach ($sp in $servicePrincipals) {
  $servicePrincipalById[$sp.Id] = $sp
}

Write-EntraSnapshotProgress "Loading applications from Microsoft Graph"
$applications = Get-MgApplication `
  -All `
  -Property Id,AppId,DisplayName,SignInAudience,PublisherDomain,IdentifierUris,Tags,AppRoles,Api,RequiredResourceAccess,Web,Spa,PublicClient,PasswordCredentials,KeyCredentials,CreatedDateTime,DeletedDateTime,DisabledByMicrosoftStatus,Info,Notes `
  -ExpandProperty $ownerExpand
$applications = @($applications)
Write-EntraSnapshotProgress "Loaded $($applications.Count) applications"

$applicationOwnersByAppId = New-ApplicationOwnerIndex -Applications $applications

foreach ($app in $applications) {
  $applicationOwners = Get-ApplicationOwnersByAppId -AppId $app.AppId -ApplicationOwnersByAppId $applicationOwnersByAppId

  $snapshot.applications += [pscustomobject]@{
    id = $app.Id
    appId = $app.AppId
    displayName = $app.DisplayName
    signInAudience = $app.SignInAudience
    publisherDomain = $app.PublisherDomain
    identifierUris = $app.IdentifierUris
    tags = @(ConvertTo-EntraSnapshotTags -Tags $app.Tags)
    appRoles = @($app.AppRoles | ForEach-Object { ConvertTo-ApplicationAppRoleSnapshot -AppRole $_ })
    oauth2PermissionScopes = @($app.Api.Oauth2PermissionScopes | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })
    requiredResourceAccess = @($app.RequiredResourceAccess | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })
    web = ConvertTo-SafeSnapshotValue -Value $app.Web
    spa = ConvertTo-SafeSnapshotValue -Value $app.Spa
    publicClient = ConvertTo-SafeSnapshotValue -Value $app.PublicClient
    passwordCredentials = @($app.PasswordCredentials | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })
    keyCredentials = @($app.KeyCredentials | ForEach-Object { ConvertTo-SafeSnapshotValue -Value $_ })
    createdDateTime = if ($app.CreatedDateTime) { $app.CreatedDateTime.ToUniversalTime().ToString("o") } else { $null }
    deletedDateTime = if ($app.DeletedDateTime) { $app.DeletedDateTime.ToUniversalTime().ToString("o") } else { $null }
    disabledByMicrosoftStatus = $app.DisabledByMicrosoftStatus
    info = ConvertTo-SafeSnapshotValue -Value $app.Info
    notes = $app.Notes
    owners = @($applicationOwners)
  }
}

foreach ($sp in $servicePrincipals) {
  $servicePrincipalOwners = Get-ExpandedOwnerSnapshots -DirectoryObject $sp
  $applicationOwners = Get-ApplicationOwnersByAppId -AppId $sp.AppId -ApplicationOwnersByAppId $applicationOwnersByAppId

  $snapshot.servicePrincipals += [pscustomobject]@{
    id = $sp.Id
    appId = $sp.AppId
    displayName = $sp.DisplayName
    appDisplayName = $sp.AppDisplayName
    servicePrincipalType = $sp.ServicePrincipalType
    publisherName = $sp.PublisherName
    accountEnabled = $sp.AccountEnabled
    appOwnerOrganizationId = $sp.AppOwnerOrganizationId
    homepage = $sp.Homepage
    loginUrl = $sp.LoginUrl
    replyUrls = $sp.ReplyUrls
    servicePrincipalNames = $sp.ServicePrincipalNames
    tags = @(ConvertTo-EntraSnapshotTags -Tags $sp.Tags)
    servicePrincipalOwners = @($servicePrincipalOwners)
    applicationOwners = @($applicationOwners)
    appRoles = @(
      $sp.AppRoles | ForEach-Object {
        [pscustomobject]@{
          id = $_.Id
          value = $_.Value
          displayName = $_.DisplayName
          description = $_.Description
          isEnabled = $_.IsEnabled
          allowedMemberTypes = $_.AllowedMemberTypes
        }
      }
    )
  }
}

Write-EntraSnapshotProgress "Loading global OAuth2 permission grants from Microsoft Graph REST"
$oauth2PermissionGrants = @(Get-EntraOAuth2PermissionGrants)
Write-EntraSnapshotProgress "Loaded $($oauth2PermissionGrants.Count) global OAuth2 permission grants"

foreach ($grant in $oauth2PermissionGrants) {
  Add-OAuth2PermissionGrantSnapshot -Grant $grant
}

Write-EntraSnapshotProgress "Loading app role assignments from Microsoft Graph REST batch for $($servicePrincipals.Count) service principals"
$appRoleAssignments = @(Get-EntraServicePrincipalAppRoleAssignmentsBatch -ServicePrincipals $servicePrincipals)
Write-EntraSnapshotProgress "Loaded $($appRoleAssignments.Count) app role assignments"

foreach ($assignment in $appRoleAssignments) {
  $resourceServicePrincipal = $servicePrincipalById[$assignment.ResourceId]
  $appRole = $null

  if ($resourceServicePrincipal -and $resourceServicePrincipal.AppRoles) {
    $appRole = $resourceServicePrincipal.AppRoles | Where-Object { [string]$_.Id -eq [string]$assignment.AppRoleId } | Select-Object -First 1
  }

  $snapshot.appRoleAssignments += [pscustomobject]@{
    id = $assignment.Id
    appRoleId = $assignment.AppRoleId
    appRoleDisplayName = if ($appRole) { $appRole.DisplayName } else { $null }
    appRoleValue = if ($appRole) { $appRole.Value } else { $null }
    principalId = $assignment.PrincipalId
    principalDisplayName = $assignment.PrincipalDisplayName
    resourceId = $assignment.ResourceId
    resourceDisplayName = $assignment.ResourceDisplayName
  }
}

$canReadGroups = $false

try {
  Import-Module Microsoft.Graph.Groups -ErrorAction Stop
  $canReadGroups = $true
} catch {
  Write-Warning "Microsoft.Graph.Groups could not be loaded. Skipping group snapshot. $($_.Exception.Message)"
}

if ($canReadGroups) {
  Write-EntraSnapshotProgress "Loading groups from Microsoft Graph"
  $groups = Get-MgGroup `
    -All `
    -Property Id,DisplayName,Description,Mail,MailEnabled,SecurityEnabled,GroupTypes,ProxyAddresses,Visibility
  $groups = @($groups)
  Write-EntraSnapshotProgress "Loaded $($groups.Count) groups"

  for ($groupIndex = 0; $groupIndex -lt $groups.Count; $groupIndex++) {
    $group = $groups[$groupIndex]
    Write-EntraSnapshotProgress "[$($groupIndex + 1)/$($groups.Count)] Loading group members for group: $($group.DisplayName) ($($group.Id))"
    $members = Get-EntraGroupMembersIncludingServicePrincipals -GroupId $group.Id
    $members = @($members)
    Write-EntraSnapshotProgress "[$($groupIndex + 1)/$($groups.Count)] Loaded $($members.Count) group members"

    $memberEmails = @(
      $members | ForEach-Object {
        $mail = Get-DirectoryObjectSnapshotValue -DirectoryObject $_ -Name "Mail"
        $userPrincipalName = Get-DirectoryObjectSnapshotValue -DirectoryObject $_ -Name "UserPrincipalName"

        if ($mail) {
          $mail
        } elseif ($userPrincipalName) {
          $userPrincipalName
        }
      } | Where-Object { $_ } | Select-Object -Unique
    )

    foreach ($member in $members) {
      $memberSnapshot = ConvertTo-GroupMemberSnapshot -Group $group -Member $member -ServicePrincipalById $servicePrincipalById
      if ($memberSnapshot.memberId) {
        $snapshot.groupMembers += $memberSnapshot
      }
    }

    $snapshot.groups += [pscustomobject]@{
      id = $group.Id
      displayName = $group.DisplayName
      description = $group.Description
      mail = $group.Mail
      mailEnabled = $group.MailEnabled
      securityEnabled = $group.SecurityEnabled
      groupTypes = $group.GroupTypes
      proxyAddresses = $group.ProxyAddresses
      visibility = $group.Visibility
      memberEmails = $memberEmails
      memberEmailCount = $memberEmails.Count
    }
  }
}

$snapshot.meta.servicePrincipalCount = $snapshot.servicePrincipals.Count
$snapshot.meta.applicationCount = $snapshot.applications.Count
$snapshot.meta.oauth2PermissionGrantCount = $snapshot.oauth2PermissionGrants.Count
$snapshot.meta.appRoleAssignmentCount = $snapshot.appRoleAssignments.Count
$snapshot.meta.groupCount = $snapshot.groups.Count
$snapshot.meta.groupMemberCount = $snapshot.groupMembers.Count

$outputDirectory = Split-Path -Parent $OutputPath
if (-not [string]::IsNullOrWhiteSpace($outputDirectory) -and -not (Test-Path $outputDirectory)) {
  New-Item -ItemType Directory -Path $outputDirectory -Force | Out-Null
}

$snapshot | ConvertTo-Json -Depth 20 | Out-File $OutputPath -Encoding utf8
}

# SIG # Begin signature block
# MII9MQYJKoZIhvcNAQcCoII9IjCCPR4CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAADdVdV4H2hfke
# bzB5+5q9zaJlAil2VzZz99PInb8vJqCCIfYwggXMMIIDtKADAgECAhBUmNLR1FsZ
# lUgTecgRwIeZMA0GCSqGSIb3DQEBDAUAMHcxCzAJBgNVBAYTAlVTMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jvc29mdCBJZGVu
# dGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAy
# MDAeFw0yMDA0MTYxODM2MTZaFw00NTA0MTYxODQ0NDBaMHcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jv
# c29mdCBJZGVudGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRo
# b3JpdHkgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALORKgeD
# Bmf9np3gx8C3pOZCBH8Ppttf+9Va10Wg+3cL8IDzpm1aTXlT2KCGhFdFIMeiVPvH
# or+Kx24186IVxC9O40qFlkkN/76Z2BT2vCcH7kKbK/ULkgbk/WkTZaiRcvKYhOuD
# PQ7k13ESSCHLDe32R0m3m/nJxxe2hE//uKya13NnSYXjhr03QNAlhtTetcJtYmrV
# qXi8LW9J+eVsFBT9FMfTZRY33stuvF4pjf1imxUs1gXmuYkyM6Nix9fWUmcIxC70
# ViueC4fM7Ke0pqrrBc0ZV6U6CwQnHJFnni1iLS8evtrAIMsEGcoz+4m+mOJyoHI1
# vnnhnINv5G0Xb5DzPQCGdTiO0OBJmrvb0/gwytVXiGhNctO/bX9x2P29Da6SZEi3
# W295JrXNm5UhhNHvDzI9e1eM80UHTHzgXhgONXaLbZ7LNnSrBfjgc10yVpRnlyUK
# xjU9lJfnwUSLgP3B+PR0GeUw9gb7IVc+BhyLaxWGJ0l7gpPKWeh1R+g/OPTHU3mg
# trTiXFHvvV84wRPmeAyVWi7FQFkozA8kwOy6CXcjmTimthzax7ogttc32H83rwjj
# O3HbbnMbfZlysOSGM1l0tRYAe1BtxoYT2v3EOYI9JACaYNq6lMAFUSw0rFCZE4e7
# swWAsk0wAly4JoNdtGNz764jlU9gKL431VulAgMBAAGjVDBSMA4GA1UdDwEB/wQE
# AwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIftJqhSobyhmYBAcnz1AQ
# T2ioojAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQwFAAOCAgEAr2rd5hnn
# LZRDGU7L6VCVZKUDkQKL4jaAOxWiUsIWGbZqWl10QzD0m/9gdAmxIR6QFm3FJI9c
# Zohj9E/MffISTEAQiwGf2qnIrvKVG8+dBetJPnSgaFvlVixlHIJ+U9pW2UYXeZJF
# xBA2CFIpF8svpvJ+1Gkkih6PsHMNzBxKq7Kq7aeRYwFkIqgyuH4yKLNncy2RtNwx
# AQv3Rwqm8ddK7VZgxCwIo3tAsLx0J1KH1r6I3TeKiW5niB31yV2g/rarOoDXGpc8
# FzYiQR6sTdWD5jw4vU8w6VSp07YEwzJ2YbuwGMUrGLPAgNW3lbBeUU0i/OxYqujY
# lLSlLu2S3ucYfCFX3VVj979tzR/SpncocMfiWzpbCNJbTsgAlrPhgzavhgplXHT2
# 6ux6anSg8Evu75SjrFDyh+3XOjCDyft9V77l4/hByuVkrrOj7FjshZrM77nq81YY
# uVxzmq/FdxeDWds3GhhyVKVB0rYjdaNDmuV3fJZ5t0GNv+zcgKCf0Xd1WF81E+Al
# GmcLfc4l+gcK5GEh2NQc5QfGNpn0ltDGFf5Ozdeui53bFv0ExpK91IjmqaOqu/dk
# ODtfzAzQNb50GQOmxapMomE2gj4d8yu8l13bS3g7LfU772Aj6PXsCyM2la+YZr9T
# 03u4aUoqlmZpxJTG9F9urJh4iIAGXKKy7aIwggaoMIIEkKADAgECAhMzAAJ4V/U8
# qgzRmfYJAAAAAnhXMA0GCSqGSIb3DQEBDAUAMFoxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJ
# RCBWZXJpZmllZCBDUyBBT0MgQ0EgMDQwHhcNMjYwNjI1MTI0NTAzWhcNMjYwNjI4
# MTI0NTAzWjBpMQswCQYDVQQGEwJQTDEXMBUGA1UECB4OAUEA8wBkAHoAawBpAGUx
# DzANBgNVBAcTBldpZWx1bjEXMBUGA1UEChMOc29mdDRwbSBzcCB6b28xFzAVBgNV
# BAMTDnNvZnQ0cG0gc3Agem9vMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC
# AYEAuPBlbn53cMibaGR245K9vL2/yCCQchiHeYTVTY682dov+ITdla7t5ZZbQo/5
# 6UPPdCD5g++gUCL8+w6faHd3ocntt1BWbApXFOLV76InWbsGakogDm4Z/KDMHOKo
# IAK3bHCWZU5DRh7fVxvJbgdl1m5Jb1wLJfSakUhBaVHmVVXb1dI3S/UIPzhhwFQe
# R3Zqy3jb9ZanZK0FP3/QjMxrzglAknuV2Mj2XKdu/n7oIHhy9p9H9d4HIbJX0zMq
# bBpUl6n9AR5tx28Zhtgni6ymlRaPQmz4aqr0a2CevkCSBz23LmlUW9vYK1Bl2jiJ
# yQobRIGJHXEuqgUsUnKUxoPwbeY0S2FfCS+VpHUabGxXNZKIS5txyoDI9qrZqRTV
# /Stl/ypjTTJ3pUgGjHxLgPUtkY9DhzMb6k17jr0g3J016+97ppmzVgabnbkW45Mb
# EmUgkDT7UpS1K9kZZS8L09OVvhKb1XMJyzFRsdrOhR+MoS0nzQkeC4nBwTnAnZTa
# RF1BAgMBAAGjggHWMIIB0jAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIHgDA9
# BgNVHSUENjA0BgorBgEEAYI3YQEABggrBgEFBQcDAwYcKwYBBAGCN2GCycz3dYGA
# 0Y0Tg469piSB0sq0aDAdBgNVHQ4EFgQUC3TR4z+u3NeCL6E9kH0m33eJQ14wHwYD
# VR0jBBgwFoAUayVB3vtrfP0YgAotf492XapzPbgwZwYDVR0fBGAwXjBcoFqgWIZW
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw
# SUQlMjBWZXJpZmllZCUyMENTJTIwQU9DJTIwQ0ElMjAwNC5jcmwwdAYIKwYBBQUH
# AQEEaDBmMGQGCCsGAQUFBzAChlhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp
# b3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUyMEFPQyUy
# MENBJTIwMDQuY3J0MFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o
# dG0wDQYJKoZIhvcNAQEMBQADggIBAGgkNRfToOtvheMuLBxF1Cw55qwAacMzpygX
# mS+5mKCmQWHZlo7klGkBvExdm4sNofuaCfBLmcJ7XxIvle/RXMLcQp812FH3sJb9
# ZiVT9/getsvUKrrYVPsfU302Rup6Ick4wRq4LEJKKKG89JsRUk8U3OiFCPkyFd8+
# 484tGbFUPrOCUD74ag5x3ehoyVYxq+JmiVjy81iaNKiM4zYU7HFXfMmmGx/FFzRQ
# N/ELfO9g9SV4cnwmioncOEU6ZvvZxxTg23D8QIaqEggXxRirMiBdi7WGG+AYGDne
# cIpMGzNuCFw8enHyVnR2eD/ClEmSGI4ZMNh01fvefThuUQSjXEEncepTGSvjEVml
# MTJEa45qjuB38EFRrjJVFZQnOCzsLXx8HCGdVm8L1zIy99T7FBCG3wy0W3RDb7ow
# 1acaYyDzEQM+O79Cag9hzuHJW+nRtAJon2ID1qnkVnH2jnE3EvVu6/SmJV4QjgEX
# r7z3j3e6w97diJSPvpjyeI0djOLhy3FJt1tKrtVhN6RAA/586wBxyLyJz5OjxAej
# 2rXIxBfa89xKVSmDWLqmc2vdGwzYf3p/A33ocaPIibBg85X4rt17aISsk2VBR4gx
# JkWYIdOzIRNHOwYpICbz/GMP5dnytvSXayVz/7hHeaE78L1cw0pjYlaHGVzXDzAS
# IqGC9feNMIIGqDCCBJCgAwIBAgITMwACeFf1PKoM0Zn2CQAAAAJ4VzANBgkqhkiG
# 9w0BAQwFADBaMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSswKQYDVQQDEyJNaWNyb3NvZnQgSUQgVmVyaWZpZWQgQ1MgQU9DIENB
# IDA0MB4XDTI2MDYyNTEyNDUwM1oXDTI2MDYyODEyNDUwM1owaTELMAkGA1UEBhMC
# UEwxFzAVBgNVBAgeDgFBAPMAZAB6AGsAaQBlMQ8wDQYDVQQHEwZXaWVsdW4xFzAV
# BgNVBAoTDnNvZnQ0cG0gc3Agem9vMRcwFQYDVQQDEw5zb2Z0NHBtIHNwIHpvbzCC
# AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBALjwZW5+d3DIm2hkduOSvby9
# v8ggkHIYh3mE1U2OvNnaL/iE3ZWu7eWWW0KP+elDz3Qg+YPvoFAi/PsOn2h3d6HJ
# 7bdQVmwKVxTi1e+iJ1m7BmpKIA5uGfygzBziqCACt2xwlmVOQ0Ye31cbyW4HZdZu
# SW9cCyX0mpFIQWlR5lVV29XSN0v1CD84YcBUHkd2ast42/WWp2StBT9/0IzMa84J
# QJJ7ldjI9lynbv5+6CB4cvafR/XeByGyV9MzKmwaVJep/QEebcdvGYbYJ4usppUW
# j0Js+Gqq9Gtgnr5Akgc9ty5pVFvb2CtQZdo4ickKG0SBiR1xLqoFLFJylMaD8G3m
# NEthXwkvlaR1GmxsVzWSiEubccqAyPaq2akU1f0rZf8qY00yd6VIBox8S4D1LZGP
# Q4czG+pNe469INydNevve6aZs1YGm525FuOTGxJlIJA0+1KUtSvZGWUvC9PTlb4S
# m9VzCcsxUbHazoUfjKEtJ80JHguJwcE5wJ2U2kRdQQIDAQABo4IB1jCCAdIwDAYD
# VR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwPQYDVR0lBDYwNAYKKwYBBAGCN2EB
# AAYIKwYBBQUHAwMGHCsGAQQBgjdhgsnM93WBgNGNE4OOvaYkgdLKtGgwHQYDVR0O
# BBYEFAt00eM/rtzXgi+hPZB9Jt93iUNeMB8GA1UdIwQYMBaAFGslQd77a3z9GIAK
# LX+Pdl2qcz24MGcGA1UdHwRgMF4wXKBaoFiGVmh0dHA6Ly93d3cubWljcm9zb2Z0
# LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUy
# MEFPQyUyMENBJTIwMDQuY3JsMHQGCCsGAQUFBwEBBGgwZjBkBggrBgEFBQcwAoZY
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQl
# MjBJRCUyMFZlcmlmaWVkJTIwQ1MlMjBBT0MlMjBDQSUyMDA0LmNydDBUBgNVHSAE
# TTBLMEkGBFUdIAAwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMA0GCSqGSIb3DQEBDAUAA4IC
# AQBoJDUX06Drb4XjLiwcRdQsOeasAGnDM6coF5kvuZigpkFh2ZaO5JRpAbxMXZuL
# DaH7mgnwS5nCe18SL5Xv0VzC3EKfNdhR97CW/WYlU/f4HrbL1Cq62FT7H1N9Nkbq
# eiHJOMEauCxCSiihvPSbEVJPFNzohQj5MhXfPuPOLRmxVD6zglA++GoOcd3oaMlW
# MaviZolY8vNYmjSojOM2FOxxV3zJphsfxRc0UDfxC3zvYPUleHJ8JoqJ3DhFOmb7
# 2ccU4Ntw/ECGqhIIF8UYqzIgXYu1hhvgGBg53nCKTBszbghcPHpx8lZ0dng/wpRJ
# khiOGTDYdNX73n04blEEo1xBJ3HqUxkr4xFZpTEyRGuOao7gd/BBUa4yVRWUJzgs
# 7C18fBwhnVZvC9cyMvfU+xQQht8MtFt0Q2+6MNWnGmMg8xEDPju/QmoPYc7hyVvp
# 0bQCaJ9iA9ap5FZx9o5xNxL1buv0piVeEI4BF6+89493usPe3YiUj76Y8niNHYzi
# 4ctxSbdbSq7VYTekQAP+fOsAcci8ic+To8QHo9q1yMQX2vPcSlUpg1i6pnNr3RsM
# 2H96fwN96HGjyImwYPOV+K7de2iErJNlQUeIMSZFmCHTsyETRzsGKSAm8/xjD+XZ
# 8rb0l2slc/+4R3mhO/C9XMNKY2JWhxlc1w8wEiKhgvX3jTCCBygwggUQoAMCAQIC
# EzMAAAAWMZKNkgJle5oAAAAAABYwDQYJKoZIhvcNAQEMBQAwYzELMAkGA1UEBhMC
# VVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE0MDIGA1UEAxMrTWlj
# cm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2lnbmluZyBQQ0EgMjAyMTAeFw0yNjAz
# MjYxODExMjlaFw0zMTAzMjYxODExMjlaMFoxCzAJBgNVBAYTAlVTMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJRCBW
# ZXJpZmllZCBDUyBBT0MgQ0EgMDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
# AoICAQDKVfrI2+gJMM/0bQ5OVKNdvOASzLbUUMvXuf+Vl7YGuofPaZHVo3gMHF5i
# nT+GMSpIcfIZ9qtXU1UG68ry8vNbQtOL4Nm30ifXpqI1+ByiAWLO1YT0WnzG7XPO
# uoTeeWsNZv5FmjxCsReBZvyzyzCyXZbu1EQfJxWTH4ebUwtAiW9rqMf9eDj/wYhi
# EfNteJV3ZFeibD2ztCHr9JhFdd97XbnCHgQoTIqc02X5xlRKtUGBa++OtHBBjiJ/
# uwBnzTkqu4FjpZjQeJtrmda+ur1CT2jflWIB/ypn7u7V9tvW9wJbJYt/H2EtJ0GO
# NWxJZ7TEu8jWPindOO3lzPP7UtzS/mVDV94HucWaltmsra6zSG8BoEJ87IM8QSb7
# vfm/O41FhYkUv89WIj5ES2O4kxyiMSfe95CMivCuYrRP2hKvx7egPMrWgDDBkxML
# grKZO9hRNUMm8vk3w5b9SogHOyJVhxyFm8aFXfIxgqDF4S0g4bhbhnzljmSlCLlu
# mMZcXFGDjpF2tNoAu3VGFGYtHtTSNVKvZpgB3b4ynaoDkbPf+Wg4523jt4VneasB
# gZhC1srZI2NCnCBBfgjLq04pqEKAWEohyW2K29KSkkHvt5VaE1ac3Yt+oyiOzMS5
# 7tXwQDJLGvLg/OXFO0VNvczDndfIfXYExB/ab2PuMSwd5VIBOwIDAQABo4IB3DCC
# AdgwDgYDVR0PAQH/BAQDAgGGMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRr
# JUHe+2t8/RiACi1/j3ZdqnM9uDBUBgNVHSAETTBLMEkGBFUdIAAwQTA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9z
# aXRvcnkuaHRtMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMBIGA1UdEwEB/wQI
# MAYBAf8CAQAwHwYDVR0jBBgwFoAU2UEpsA8PY2zvadf1zSmepEhqMOYwcAYDVR0f
# BGkwZzBloGOgYYZfaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv
# TWljcm9zb2Z0JTIwSUQlMjBWZXJpZmllZCUyMENvZGUlMjBTaWduaW5nJTIwUENB
# JTIwMjAyMS5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIw
# VmVyaWZpZWQlMjBDb2RlJTIwU2lnbmluZyUyMFBDQSUyMDIwMjEuY3J0MA0GCSqG
# SIb3DQEBDAUAA4ICAQAG1VBeVHTVRBljlcZD3IiMxwPyMjQyLNaEnVu5mODm2hRB
# JfH8GsBLATmrHAc8F47jmk5CnpUPiIguCbw6Z/KVj4Dsoiq228NSLMLewFfGMri7
# uwNGLISC5ccp8vUdADDEIsS2dE+QI9OwkDpv3XuUD7d+hAgcLVcMOl1AsfEZtsZe
# nhGvSYUrm/FuLq0BqEGL9GXM5c+Ho9q8o+Vn/S+GWQN2y+gkRO15s0kI05nUpq/d
# OD4ri9rgVs6tipEd0YZqGgD+CZNiaZWrDTOQbNPncd2F9qOsUa20miYruoT5PwJA
# aI+QQiTE2ZJeMJOkOpzhTUgqVMZwZidEUZKCqudaeQA08WwnkQMfKyHzaU8j48UL
# cU4hUwvMsv7fSurOe9GAdRQCPvF8WcSK5oDHe8VVJM4tv6KKCm91HqLx9JamBgRI
# 6R2SfY3nu26EGznu0rCg/769z8xWm4PVcC2ZaL6VlKVqFp1NsN8YqMyf5t+bbGVb
# 09noFKcJG/UwyGlxRmQBlfeBUQx5/ytlzZzsEnhrJF9fTAfje8j3OdX5lEnePTFQ
# LRlvzZFBqUXnIeQKv3fHQjC9m2fo/Z01DII/qp3d8LhGVUW0BCG04fRwHJNH8iqq
# CG/qofMv+kym2AxBDnHzNgRjL60JOFiBgiurvLhYQNhB95KWojFA6shQnggkMTCC
# B54wggWGoAMCAQICEzMAAAAHh6M0o3uljhwAAAAAAAcwDQYJKoZIhvcNAQEMBQAw
# dzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjFI
# MEYGA1UEAxM/TWljcm9zb2Z0IElkZW50aXR5IFZlcmlmaWNhdGlvbiBSb290IENl
# cnRpZmljYXRlIEF1dGhvcml0eSAyMDIwMB4XDTIxMDQwMTIwMDUyMFoXDTM2MDQw
# MTIwMTUyMFowYzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjE0MDIGA1UEAxMrTWljcm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2ln
# bmluZyBQQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALLw
# wK8ZiCji3VR6TElsaQhVCbRS/3pK+MHrJSj3Zxd3KU3rlfL3qrZilYKJNqztA9OQ
# acr1AwoNcHbKBLbsQAhBnIB34zxf52bDpIO3NJlfIaTE/xrweLoQ71lzCHkD7A4A
# s1Bs076Iu+mA6cQzsYYH/Cbl1icwQ6C65rU4V9NQhNUwgrx9rGQ//h890Q8JdjLL
# w0nV+ayQ2Fbkd242o9kH82RZsH3HEyqjAB5a8+Ae2nPIPc8sZU6ZE7iRrRZywRmr
# KDp5+TcmJX9MRff241UaOBs4NmHOyke8oU1TYrkxh+YeHgfWo5tTgkoSMoayqoDp
# HOLJs+qG8Tvh8SnifW2Jj3+ii11TS8/FGngEaNAWrbyfNrC69oKpRQXY9bGH6jn9
# NEJv9weFxhTwyvx9OJLXmRGbAUXN1U9nf4lXezky6Uh/cgjkVd6CGUAf0K+Jw+GE
# /5VpIVbcNr9rNE50Sbmy/4RTCEGvOq3GhjITbCa4crCzTTHgYYjHs1NbOc6brH+e
# KpWLtr+bGecy9CrwQyx7S/BfYJ+ozst7+yZtG2wR461uckFu0t+gCwLdN0A6cFtS
# RtR8bvxVFyWwTtgMMFRuBa3vmUOTnfKLsLefRaQcVTgRnzeLzdpt32cdYKp+dhr2
# ogc+qM6K4CBI5/j4VFyC4QFeUP2YAidLtvpXRRo3AgMBAAGjggI1MIICMTAOBgNV
# HQ8BAf8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFNlBKbAPD2Ns
# 72nX9c0pnqRIajDmMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o
# dG0wGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwDwYDVR0TAQH/BAUwAwEB/zAf
# BgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2ioojCBhAYDVR0fBH0wezB5oHeg
# dYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBSb290JTIwQ2VydGlmaWNhdGUl
# MjBBdXRob3JpdHklMjAyMDIwLmNybDCBwwYIKwYBBQUHAQEEgbYwgbMwgYEGCCsG
# AQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p
# Y3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0aW9uJTIwUm9vdCUyMENlcnRp
# ZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6
# Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDANBgkqhkiG9w0BAQwFAAOCAgEA
# fyUqnv7Uq+rdZgrbVyNMul5skONbhls5fccPlmIbzi+OwVdPQ4H55v7VOInnmezQ
# EeW4LqK0wja+fBznANbXLB0KrdMCbHQpbLvG6UA/Xv2pfpVIE1CRFfNF4XKO8XYE
# a3oW8oVH+KZHgIQRIwAbyFKQ9iyj4aOWeAzwk+f9E5StNp5T8FG7/VEURIVWArbA
# zPt9ThVN3w1fAZkF7+YU9kbq1bCR2YD+MtunSQ1Rft6XG7b4e0ejRA7mB2IoX5hN
# h3UEauY0byxNRG+fT2MCEhQl9g2i2fs6VOG19CNep7SquKaBjhWmirYyANb0RJSL
# WjinMLXNOAga10n8i9jqeprzSMU5ODmrMCJE12xS/NWShg/tuLjAsKP6SzYZ+1Ry
# 358ZTFcx0FS/mx2vSoU8s8HRvy+rnXqyUJ9HBqS0DErVLjQwK8VtsBdekBmdTbQV
# oCgPCqr+PDPB3xajYnzevs7eidBsM71PINK2BoE2UfMwxCCX3mccFgx6UsQeRSdV
# VVNSyALQe6PT12418xon2iDGE81OGCreLzDcMAZnrUAx4XQLUz6ZTl65yPUiOh3k
# 7Yww94lDf+8oG2oZmDh5O1Qe38E+M3vhKwmzIeoB1dVLlz4i3IpaDcR+iuGjH2Td
# aC1ZOmBXiCRKJLj4DT2uhJ04ji+tHD6n58vhavFIrmcxghqRMIIajQIBATBxMFox
# CzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzAp
# BgNVBAMTIk1pY3Jvc29mdCBJRCBWZXJpZmllZCBDUyBBT0MgQ0EgMDQCEzMAAnhX
# 9TyqDNGZ9gkAAAACeFcwDQYJYIZIAWUDBAIBBQCgXjAQBgorBgEEAYI3AgEMMQIw
# ADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAvBgkqhkiG9w0BCQQxIgQgejU3
# aZ//Q8NB3UUB0Q1bDAL8yOINED60kxoGEvnuAcEwDQYJKoZIhvcNAQEBBQAEggGA
# G5pUcvcQ/UYQpZ6dJ+gidcC3IjAGm2NFv4/0GBYfAT2EIKRmLsW2JvUHFjyy+giN
# z0/7gmAg7kLkWRX1YEpKxivEjbaH51cY4iXy7Fb7b5lSJ/P6JPU1S+LKOPf9H9vu
# s3lkkgsm40ENhtaILnTpkbyshudKGg5DGh1h397VUprd5YmmHuw3YjI6axTNQU9G
# QM2O/fx0yeI3vIAxhG2xcbOkaIayWBX+aAneHhWeHaS8xQltThaJl9/3wd6TD9Xw
# yeOob7PuSCrThYMpUwJNdOZ5Oi9U28LLMHEOtvOuw8bKRxUdhZvkvB2i6/jDpRbZ
# PHVWU/n4NufZh9kDplIQ/dZASX4yBKxpdvjSXuhh2ESQBYnn/VrVJkscxjvAWTKD
# z8UJj8JsielK+x9e90EhSFdILbDL4dTbzk4b5T+XHgGPpaoLArydf9HkFKjhBqPH
# q2DOWmnIFfcL/VUYskt32N0dCoUdNKCmSA6HleqqeefV2XKMjD0fWbCx1RoUjdAc
# oYIYETCCGA0GCisGAQQBgjcDAwExghf9MIIX+QYJKoZIhvcNAQcCoIIX6jCCF+YC
# AQMxDzANBglghkgBZQMEAgEFADCCAWIGCyqGSIb3DQEJEAEEoIIBUQSCAU0wggFJ
# AgEBBgorBgEEAYRZCgMBMDEwDQYJYIZIAWUDBAIBBQAEIPHE1PGjhLZEKi1j3KS4
# n4m1C9gn3BQDhioJhW478HvSAgZqF2ZCTWkYEzIwMjYwNjI3MTE0ODExLjAzM1ow
# BIACAfSggeGkgd4wgdsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV
# BAsTHm5TaGllbGQgVFNTIEVTTjo3QTAwLTA1RTAtRDk0NzE1MDMGA1UEAxMsTWlj
# cm9zb2Z0IFB1YmxpYyBSU0EgVGltZSBTdGFtcGluZyBBdXRob3JpdHmggg8hMIIH
# gjCCBWqgAwIBAgITMwAAAAXlzw//Zi7JhwAAAAAABTANBgkqhkiG9w0BAQwFADB3
# MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMUgw
# RgYDVQQDEz9NaWNyb3NvZnQgSWRlbnRpdHkgVmVyaWZpY2F0aW9uIFJvb3QgQ2Vy
# dGlmaWNhdGUgQXV0aG9yaXR5IDIwMjAwHhcNMjAxMTE5MjAzMjMxWhcNMzUxMTE5
# MjA0MjMxWjBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBp
# bmcgQ0EgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ5851Jj
# /eDFnwV9Y7UGIqMcHtfnlzPREwW9ZUZHd5HBXXBvf7KrQ5cMSqFSHGqg2/qJhYqO
# QxwuEQXG8kB41wsDJP5d0zmLYKAY8Zxv3lYkuLDsfMuIEqvGYOPURAH+Ybl4SJEE
# Snt0MbPEoKdNihwM5xGv0rGofJ1qOYSTNcc55EbBT7uq3wx3mXhtVmtcCEr5ZKTk
# KKE1CxZvNPWdGWJUPC6e4uRfWHIhZcgCsJ+sozf5EeH5KrlFnxpjKKTavwfFP6Xa
# GZGWUG8TZaiTogRoAlqcevbiqioUz1Yt4FRK53P6ovnUfANjIgM9JDdJ4e0qiDRm
# 5sOTiEQtBLGd9Vhd1MadxoGcHrRCsS5rO9yhv2fjJHrmlQ0EIXmp4DhDBieKUGR+
# eZ4CNE3ctW4uvSDQVeSp9h1SaPV8UWEfyTxgGjOsRpeexIveR1MPTVf7gt8hY64X
# NPO6iyUGsEgt8c2PxF87E+CO7A28TpjNq5eLiiunhKbq0XbjkNoU5JhtYUrlmAbp
# xRjb9tSreDdtACpm3rkpxp7AQndnI0Shu/fk1/rE3oWsDqMX3jjv40e8KN5YsJBn
# czyWB4JyeeFMW3JBfdeAKhzohFe8U5w9WuvcP1E8cIxLoKSDzCCBOu0hWdjzKNu8
# Y5SwB1lt5dQhABYyzR3dxEO/T1K/BVF3rV69AgMBAAGjggIbMIICFzAOBgNVHQ8B
# Af8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFGtpKDo1L0hjQM97
# 2K9J6T7ZPdshMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNodHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0w
# EwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEw
# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2io
# ojCBhAYDVR0fBH0wezB5oHegdYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br
# aW9wcy9jcmwvTWljcm9zb2Z0JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBS
# b290JTIwQ2VydGlmaWNhdGUlMjBBdXRob3JpdHklMjAyMDIwLmNybDCBlAYIKwYB
# BQUHAQEEgYcwgYQwgYEGCCsGAQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0
# aW9uJTIwUm9vdCUyMENlcnRpZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQw
# DQYJKoZIhvcNAQEMBQADggIBAF+Idsd+bbVaFXXnTHho+k7h2ESZJRWluLE0Oa/p
# O+4ge/XEizXvhs0Y7+KVYyb4nHlugBesnFqBGEdC2IWmtKMyS1OWIviwpnK3aL5J
# edwzbeBF7POyg6IGG/XhhJ3UqWeWTO+Czb1c2NP5zyEh89F72u9UIw+IfvM9lzDm
# c2O2END7MPnrcjWdQnrLn1Ntday7JSyrDvBdmgbNnCKNZPmhzoa8PccOiQljjTW6
# GePe5sGFuRHzdFt8y+bN2neF7Zu8hTO1I64XNGqst8S+w+RUdie8fXC1jKu3m9KG
# IqF4aldrYBamyh3g4nJPj/LR2CBaLyD+2BuGZCVmoNR/dSpRCxlot0i79dKOChmo
# ONqbMI8m04uLaEHAv4qwKHQ1vBzbV/nG89LDKbRSSvijmwJwxRxLLpMQ/u4xXxFf
# R4f/gksSkbJp7oqLwliDm/h+w0aJ/U5ccnYhYb7vPKNMN+SZDWycU5ODIRfyoGl5
# 9BsXR/HpRGtiJquOYGmvA/pk5vC1lcnbeMrcWD/26ozePQ/TWfNXKBOmkFpvPE8C
# H+EeGGWzqTCjdAsno2jzTeNSxlx3glDGJgcdz5D/AAxw9Sdgq/+rY7jjgs7X6fqP
# TXPmaCAJKVHAP19oEjJIBwD1LyHbaEgBxFCogYSOiUIr0Xqcr1nJfiWG2GwYe6Zo
# AF1bMIIHlzCCBX+gAwIBAgITMwAAAFhlzes/odf80gAAAAAAWDANBgkqhkiG9w0B
# AQwFADBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0
# aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcg
# Q0EgMjAyMDAeFw0yNTEwMjMyMDQ2NTVaFw0yNjEwMjIyMDQ2NTVaMIHbMQswCQYD
# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe
# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3Nv
# ZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046
# N0EwMC0wNUUwLUQ5NDcxNTAzBgNVBAMTLE1pY3Jvc29mdCBQdWJsaWMgUlNBIFRp
# bWUgU3RhbXBpbmcgQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAnXg0pHaQ7PVAlln+HZZrJFcLoKbekhW1yL+QNBUgFFUsjZIKaqqN4oIJ
# sJM3ps0rJNSO7ndCNRuZDX2Wgur3Ak77eXrloBXqZmO6ZVXeDNRCLldW4A0/Nfjz
# J7XXkdEhjr81ghXEpR7zC+wbaNN+sPSxzLAZBeibDFP7Xws5wX0ZtIsN1a2+Xq5b
# vWp3kRMytwskTjunRgeLZL/tBp237JVdRPFAQ9jYRKpCqUBo/v1xjBLRCV3PalKj
# nGfb3MN4U7jVyqifFHShcnW5CERRoBmUa6sygDzFSr8e3g93TPNLFUivUE0GmLfb
# X5ceD1Gt1FcZ6x/JLVATzk5+BWHbMxwJIVkVPTqSSMjQ6KTKdcnq3pH0c4AFJp/g
# lvcpq0U9fzZIjJGGvdpishlRl77RQtUhSjxHvCn3LC/xqQQwOHSQDsGh6NX2D0Rf
# sSyEtTAByAae+2w1HByTDTcmlTNLEuQLeCj1gNBdIWj0WOYyDtjjQ/8iTWY6ey1v
# b9qHljIj5HgIndT5P9MYk2Vg2e7hKUZNBNbA/hsgBsuoZ+IX89WvjEN9abF91S4O
# JVuinmKsLO/MLbnl7ikuD0dN6oA0YewyDQncs12sM9HOtu72QA/TZlefvW8r9xtM
# XAYoQlcGjsk8W4Uc7cfqVqbIPjdoc8ZxBzLcXcVyP4p5cyLwvkMCAwEAAaOCAcsw
# ggHHMB0GA1UdDgQWBBRyjU3Fer4VxXJ+hjPcRJnxnRIJsDAfBgNVHSMEGDAWgBRr
# aSg6NS9IY0DPe9ivSek+2T3bITBsBgNVHR8EZTBjMGGgX6BdhltodHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBQdWJsaWMlMjBS
# U0ElMjBUaW1lc3RhbXBpbmclMjBDQSUyMDIwMjAuY3JsMHkGCCsGAQUFBwEBBG0w
# azBpBggrBgEFBQcwAoZdaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j
# ZXJ0cy9NaWNyb3NvZnQlMjBQdWJsaWMlMjBSU0ElMjBUaW1lc3RhbXBpbmclMjBD
# QSUyMDIwMjAuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUH
# AwgwDgYDVR0PAQH/BAQDAgeAMGYGA1UdIARfMF0wUQYMKwYBBAGCN0yDfQEBMEEw
# PwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9j
# cy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBBAIwDQYJKoZIhvcNAQEMBQADggIBAHvr
# xIiVF1iHcXvxrJTCD8eOtbPUbK9x+Lz70iYehh+G0UoOMcMf04QD6tQPTeZ5HhGE
# Tkcn0raDJ5NpfbRBuKEH31rxbZK97o12KRDNJ3Nu4ePaUIpH/TcWz8PLVOCECywS
# xbEgEG20kyydGc46c591tXzpfkJDckjoYrypaerdeQLRQH9LaoTYZfdAzMo+Dy0O
# 1DzFJkF5YnsmAM8lt9r1NtXdFjdbFMCbV5dau64mV22s186A8Umi+l239+Ue0cbJ
# QIykWhIlhhWhxQgoksqHz7kp2GFZAAeySTmIOQOWyXOA8JA8TISJyn3JDOgStv58
# 3P3V0QSALT6JXDCW26FV208VGJMzkv0S22iOTZJ/oamTpk8RzD8oWT8pfbe1q/k/
# bxPiXYRbzps96a5YOko7n0Vdo61DOJhL/mhk01Y348gq6vhG/VTcdGHh1rCkwOM0
# 5B35AZZq9AtPpfRzJinrHzzGRx+r6fD3ccYMPMMX/Nwd2irzrph172fQcSf1fMwv
# wIhmfH4GWJJ+mf1HA6uXoAOVByckguXvlj8gPi7T2ES6RU8+QssfqTNTJKjsBheW
# KWv2W4ESVen2L7lCz7i79FhA+0kp0yXJnYwdzWS0ovTINULINmzVyMcSUm5WuVf8
# YZ33cAud2Opr6N1+RuLZDavDvjiehlI5dH+GEy56MYIHQzCCBz8CAQEweDBhMQsw
# CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD
# VQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMAIT
# MwAAAFhlzes/odf80gAAAAAAWDANBglghkgBZQMEAgEFAKCCBJwwEQYLKoZIhvcN
# AQkQAg8xAgUAMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0B
# CQUxDxcNMjYwNjI3MTE0ODExWjAvBgkqhkiG9w0BCQQxIgQg/90mGjRacc1LdfKg
# TLheEn37ShOYwDgxN5xl3qPOVecwgbkGCyqGSIb3DQEJEAIvMYGpMIGmMIGjMIGg
# BCDFIlS7sgfQ+wAo1cWbWz+WN69VBds58hbran919aLocTB8MGWkYzBhMQswCQYD
# VQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQD
# EylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMAITMwAA
# AFhlzes/odf80gAAAAAAWDCCA14GCyqGSIb3DQEJEAISMYIDTTCCA0mhggNFMIID
# QTCCAikCAQEwggEJoYHhpIHeMIHbMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25z
# MScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046N0EwMC0wNUUwLUQ5NDcxNTAzBgNV
# BAMTLE1pY3Jvc29mdCBQdWJsaWMgUlNBIFRpbWUgU3RhbXBpbmcgQXV0aG9yaXR5
# oiMKAQEwBwYFKw4DAhoDFQCdZHkb26ercF2O62vCdZUfUSvEXKBnMGWkYzBhMQsw
# CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD
# VQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBpbmcgQ0EgMjAyMDAN
# BgkqhkiG9w0BAQsFAAIFAO3qGlEwIhgPMjAyNjA2MjcwOTQ1NTNaGA8yMDI2MDYy
# ODA5NDU1M1owdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA7eoaUQIBADAHAgEAAgI6
# 7TAHAgEAAgISWjAKAgUA7etr0QIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEE
# AYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IB
# AQCTxM6aZLCmh6rJU5n8OPk/c5mpi77Po2rmgp8MF4i6JgcTLHPHZHIMsaRWIC5N
# dNKd09gzolu3tpm1clZvkU0pMuTgY17i9gj+x1SirjcXn8S8j3xERiS4DA8oj8Y6
# vq02KszafhjGBuUyfnCVeCcYnK7FfSspCncG4/Z6QniewJN7uz/4IHx1gEiOuM7a
# BYDDUAT6xSNNm6a4EItxyElO0J0jAfwbEKU4Vog6jboCxt3XeWPHM43qqptPtt18
# imGs9jsJLHKOL79n7+YfZJcXMCpDo9OsJ8+QM99USnYquhLTtHeCTjCZ1ETTtdi9
# OWxNPA+uzcuOK47CbjeELBaYMA0GCSqGSIb3DQEBAQUABIICADyLYINdDCtSIqia
# NTWuBEg9y/DNK/NdDXKGBpEFpw/uKulRsf7UWRu/qf7+49sqpyVFzk2OYC6YFMWk
# LbvjU1EZNn4LTc+P8YAWmDOq7A8/gGZKP26H+xaeTDTSunSS+qGBRBcOfYSAsXnY
# uv3+DZjQrQdgS3JX7oZkVBGdUCTWMg8fwaiF2qjB2rqpTSOHPd73ighx7eWV2M4T
# hBsJ+7y+8CyJ8hU1Wy+wC88FvfOkU+KXjjTxTPlcV8LgDsNg0SxTjcLL/+uYwUOL
# yAE+dgRkQX2iWPwQ0dyfvX49+KPBiFGdsDd2m0ip9f+rk1wgGTgIGUUi4onP4O+I
# yF3viciqi2CFNoaUntTnsPT3UeKPFMB4ZEp1XcWT1eDlSMjE0ve3caSYVG9eM48k
# DOtC1+RTKqLBltnT3MluXxtkLr9FAjuWQ56A1bjJvZ/nQTRkHbJrMXEOOJfBBM90
# X4jHlOMjsDkhKmIciCCjxlRyGgbnye7GHHeU4kI44NThO4lbnnPyzyYvD3CfewRJ
# nIVFKSLUXRSEk8hNQa28ZU/mBQlyjBMhXUPsdfkCY1I+A9dq4y5vR3NFRVzFRno0
# ZPah/KCHw8BG0h81csEi/OPNkyAmVHWGLkZihMU5Lu18xWzZxxQg/IbYj7X+chWM
# YjltpzldHI4IzEiHFHWjsxZLbA4W
# SIG # End signature block