Obs/bin/ObsDep/content/Powershell/Roles/Common/Servicing/Scripts/Install-Update.psm1
|
<###################################################
# # # Copyright (c) Microsoft. All rights reserved. # # # ##################################################> # TODO: Use Common functions for session re-use # TODO: Clean up trace execution to full sentences. # FUTURE: Implement MSPs - postponed # FUTURE: Allow computer arrays rather than just one at a time # FUTURE: Use other mechanisms in Test-UpdateRebootRequested similar to MSFT_xPendingReboot from DSC $Script:UpdateRebootRequestedPath = Join-Path $env:SystemDrive UpdateRebootRequest.xml <# .Synopsis Updates a running computer. .Description Runs PowerShell scripts and KB .MSUs from the source path, without rebooting it. Requires CredSSP enabled from this computer to each of the targets. Does not reboot targets, caller can use Test-UpdateRebootRequired to determine status and reboot it if necessary. It is assumed that additional orchestration with existing roles is necessary, so it is not safe to do this "all in one" similar to Cluster Aware Updating. For scripts: Scripts will be invoked directly from the source location, allowing the script to know and reference additional materials relative to the script location. Default execution policy of the computer will be respected unless BypassExecutionPolicy is set. This allows the source directory to be remote to the computer, yet not require signing for test scenarios. .Link Test-UpdateRebootRequested #> function Install-Update { [CmdletBinding()] Param ( # Computer name to update [Parameter(Mandatory=$true)] [string] $ComputerName, # Explicit Credential for CredSSP [Parameter(Mandatory=$true)] [PSCredential] [System.Management.Automation.Credential()] $Credential, # Source for updates [Parameter(Mandatory=$true)] [string] $SourcePath, # Optional Scratch directory for update installation [string] $ScratchDirectory = $null, # Bypass default execution policy [switch] $BypassExecutionPolicy ) $ErrorActionPreference = "Stop" Install-UpdateScript -ComputerName $ComputerName -Credential $Credential -SourcePath (Join-Path $SourcePath "Script") -BypassExecutionPolicy:$BypassExecutionPolicy Install-UpdateKB -ComputerName $ComputerName -Credential $Credential -SourcePath $SourcePath -ScratchDirectory $ScratchDirectory } <# .Synopsis Indicates whether a computer needs a reboot to complete updating .Description Timestamp in file indicates when reboot was last requested, Test-UpdateRebootRequested will compare this timestamp to the actual time of last reboot. This function does not check other side effect locations of other software install or update processes. Update scripts, in particular, may need a reboot without marking the other locations so this mechanism provides a definitive marking. Future implementations may check the other locations, such as those checked by the DSC resource MSFT_xPendingReboot. .Link Install-Update .Link Set-UpdateRebootRequested #> function Test-UpdateRebootRequested { [CmdletBinding()] Param ( [Parameter(Mandatory=$true)] [string] $ComputerName, [Parameter(Mandatory=$true)] [PSCredential] [System.Management.Automation.Credential()] $Credential ) $ErrorActionPreference = "Stop" $result = Invoke-Command -ComputerName $ComputerName -Credential $Credential -ScriptBlock { if (!(Test-Path $using:UpdateRebootRequestedPath)) { return $false } $request = [DateTime]::MaxValue try { # incoming time is in UTC ticks [DateTime] $request = Import-Clixml -Path $using:UpdateRebootRequestedPath } catch { Write-Warning "Invalid incoming UpdateRebootRequestedPath time, assuming reboot required" } $os = Get-CimInstance -Class Win32_OperatingSystem [DateTime] $lastBoot = $os.LastBootUpTime.ToUniversalTime() if ($lastBoot -lt $request) { return $true } else { Remove-Item -Path $using:UpdateRebootRequestedPath return $false } } return $result } <# .Synopsis Marks a computer to indicate a reboot is needed to complete updating .Description Timestamp in file indicates when reboot was last requested, Test-UpdateRebootRequested will compare this timestamp to the actual time of last reboot. Scripts can mark local machine request with the following snippet: $UpdateRebootRequestedPath = Join-Path $env:SystemDrive UpdateRebootRequest.xml [DateTime]::UtcNow.Ticks | Export-Clixml -Path $Script:UpdateRebootRequestedPath .Link Test-UpdateRebootRequested #> function Set-UpdateRebootRequested { [CmdletBinding(SupportsShouldProcess=$true)] Param ( [Parameter(Mandatory=$true)] [string] $ComputerName, [Parameter(Mandatory=$true)] [PSCredential] [System.Management.Automation.Credential()] $Credential ) $ErrorActionPreference = "Stop" Trace-Execution "Setting UpdateRebootRequest on $ComputerName" # Using UTC and Ticks to avoid format and timezone change issues if ($PSCmdlet.ShouldProcess($ComputerName)) { Invoke-Command -ComputerName $ComputerName -Credential $Credential -ScriptBlock { [DateTime]::UtcNow.Ticks | Export-Clixml -Path $using:UpdateRebootRequestedPath } } } <# .Synopsis Internal function to apply cabs for KBs to a computer .Link Install-Update #> function Install-UpdateKB { Param ( # Computer name to update [Parameter(Mandatory=$true)] [string] $ComputerName, # Explicit Credential for CredSSP [Parameter(Mandatory=$true)] [PSCredential] [System.Management.Automation.Credential()] $Credential, # Source for updates. [Parameter(Mandatory=$true)] [string] $SourcePath, # Optional Scratch directory for update installation [string] $ScratchDirectory = $null, # Install KBs sequentially - test hook [switch] $Sequential ) Install-UpdateKBSubFolder -ComputerName $ComputerName -Credential $Credential -SourcePath (Join-Path $SourcePath "SSU") -ScratchDirectory $ScratchDirectory -Sequential:$Sequential Install-UpdateKBSubFolder -ComputerName $ComputerName -Credential $Credential -SourcePath (Join-Path $SourcePath "LCU") -ScratchDirectory $ScratchDirectory -Sequential:$Sequential } <# .Synopsis Internal function to apply cabs for KBs to a computer #> function Install-UpdateKBSubFolder { Param ( # Computer name to update [Parameter(Mandatory=$true)] [string] $ComputerName, # Explicit Credential for CredSSP [Parameter(Mandatory=$true)] [PSCredential] [System.Management.Automation.Credential()] $Credential, # Source for updates. [Parameter(Mandatory=$true)] [string] $SourcePath, # Optional Scratch directory for update installation [string] $ScratchDirectory = $null, # Install KBs sequentially - test hook [switch] $Sequential ) $ErrorActionPreference = "Stop" $stopWatch = New-Object Diagnostics.Stopwatch $stopWatch.Start() Trace-Execution "$([DateTime]::Now): Starting Install-UpdateKB" Trace-Execution ($PSBoundParameters | Out-String) Trace-Execution "invoking to $computername" [ScriptBlock] $block = { Write-Verbose "At $env:COMPUTERNAME, using $using:SourcePath" if (!(Test-Path $using:SourcePath)) { Write-Warning "$using:SourcePath not reachable" return } if (!(Get-ChildItem -Path $using:SourcePath -Filter "*.cab")) { Write-Warning "There is no KB existing in $using:SourcePath" return } Write-Verbose "Tested sourcepath" $stopWatch = New-Object Diagnostics.Stopwatch $stopWatch.Start() Write-Verbose "$([DateTime]::Now): Starting Add-WindowsPackage" $PackageArgs = @{ Online = $true NoRestart = $true PackagePath = $using:SourcePath Verbose=$true } if ($using:ScratchDirectory) { Write-Verbose "Installing updates using ScratchDirectory '$($using:ScratchDirectory)'" New-Item -ItemType Directory -Path $using:ScratchDirectory -Force try { $result = Add-WindowsPackage @PackageArgs -ScratchDirectory $using:ScratchDirectory } finally { Remove-Item -Force -Recurse -Path $using:ScratchDirectory -ErrorAction Ignore } } else { $result = Add-WindowsPackage @PackageArgs } $stopWatch.Stop() Write-Verbose "$([DateTime]::Now), Elapsed: $($stopWatch.Elapsed), Restart Needed $($result.RestartNeeded)" return $result } $result = $null if (!$Sequential) { # ISSUE: This a long running job, potentially affected by network glitches # or service fabric failovers. # Consider potentially converting to a scheduled task type approach. # Even creating PS Jobs as in Common\Helpers\Invoke-JobCommon wouldn't # necessarily re-connect if the PS session goes away. Need to verify # underlying DISM behavior when this disconnects abruptly. try { $result = Invoke-Command -Credential $Credential -Authentication Credssp -ComputerName $ComputerName -ScriptBlock $block if ($result.RestartNeeded) { Set-UpdateRebootRequested -ComputerName $ComputerName -Credential $Credential } } catch { # Due to throw, unable to determine if batch application required reboot. Assume yes. Set-UpdateRebootRequested -ComputerName $ComputerName -Credential $Credential if ($_.Exception -imatch "0x800f081e") { Trace-Warning "Skipping not applicable update $($package.PackageName) from $($cab.Name), HRESULT 0x$('{0:X8}' -f $_.Exception.HResult)" } else { throw $_.Exception } } } else # Sequential install of updates { # build install state list $targetPackages = Invoke-Command -Credential $Credential -ComputerName $ComputerName -ScriptBlock { Get-WindowsPackage -Online -Verbose } $installStates = @{} foreach ($package in $targetPackages) { $installStates[$package.PackageName] = $package } $originalSourcePath = $SourcePath $cabs = Get-ChildItemLocalOrUnc -Path $originalSourcePath -Include "*.cab" -ComputerName $ComputerName -Credential $Credential $rebootRequested = $false $thrownException = @() try { foreach ($cab in $cabs) { $package = Invoke-Command -Credential $Credential -ComputerName $ComputerName -Authentication Credssp -ScriptBlock { return Get-WindowsPackage -Online -PackagePath $using:cab } $remotePackage = $installStates[$package.PackageName] Trace-Execution "$cab, Target package state: $($remotePackage.PackageState), $($package.PackageName)" if ((!$remotePackage) -or ($remotePackage.PackageState -ne "Installed")) { $SourcePath = $cab.FullName try { $result = Invoke-Command -Credential $Credential -Authentication Credssp -ComputerName $ComputerName -ScriptBlock $block if ($result.RestartNeeded) { $rebootRequested = $true } } catch { if ($_.Exception -imatch "0x800f081e") { Trace-Warning "Skipping not applicable update $($package.PackageName) from $($cab.Name), HRESULT 0x$('{0:X8}' -f $_.Exception.HResult)" } else { # Something unexpected happened. Continue applying other updates, # but assume reboot is probably required. $rebootRequested = $true $thrownException += $_ } } } else { Trace-Execution "Skipping $cab, $($package.InstallTime), $($package.PackageName)" } } } finally { if ($rebootRequested) { Set-UpdateRebootRequested -ComputerName $ComputerName -Credential $Credential } } if ($thrownException) { Trace-Warning "Re-throwing aggregated exceptions from sequential update installs" throw $thrownException } } $stopWatch.Stop() Trace-Execution "$([DateTime]::Now): Ending Install-UpdateKB, Elapsed: $($stopWatch.Elapsed), $ComputerName" return $result } <# .Synopsis Internal function to apply update scripts to computer. .Link Install-Update #> function Install-UpdateScript { Param ( # Computer name to update [Parameter(Mandatory=$true)] [string] $ComputerName, # Explicit Credential for CredSSP [Parameter(Mandatory=$true)] [PSCredential] [System.Management.Automation.Credential()] $Credential, # Source for updates [Parameter(Mandatory=$true)] [string] $SourcePath, # Allow unsigned PowerShell scripts [switch] $BypassExecutionPolicy ) $ErrorActionPreference = "Stop" $scripts = Get-ChildItemLocalOrUnc -Path $SourcePath -Include "*.ps1" -ComputerName $ComputerName -Credential $Credential foreach ($script in $scripts) { # Execute scripts on computers, respecting the signing requirements for remote scripts unless a bypass is set. Trace-Execution "Invoking $script at $ComputerName, BypassExecutionPolicy: $BypassExecutionPolicy" Invoke-Command -Verbose -Credential $Credential -Authentication Credssp -ComputerName $ComputerName -ScriptBlock { if ($using:BypassExecutionPolicy) { Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass } & $using:script } | Out-Null } } <# .Synopsis Internal function to validate KBs were installed successfully to a computer. #> function Test-UpdateKB { Param ( # Computer name to validate [Parameter(Mandatory=$true)] [string] $ComputerName, # Explicit Credential for CredSSP [Parameter(Mandatory=$true)] [PSCredential] $Credential, # Source for updates. [Parameter(Mandatory=$true)] [string] $SourcePath ) $ErrorActionPreference = "Stop" Trace-Execution "$([DateTime]::Now): Starting Test-UpdateKB" Trace-Execution "Testing state of Windows Update installation on $ComputerName." $cabs = @() $cabPaths = @((Join-Path $SourcePath "SSU"), (Join-Path $SourcePath "LCU")) $cabs = Get-ChildItemLocalOrUnc -Path $cabPaths -Include "*.cab" -ComputerName $ComputerName -Credential $Credential $notInstalledKBs = @() foreach ($cab in $cabs) { try { $package = Invoke-Command -Credential $Credential -ComputerName $ComputerName -Authentication Credssp -ScriptBlock { return Get-WindowsPackage -Online -PackagePath $using:cab } if ($package -and ($package.PackageState -ieq "Installed" -or $package.PackageState -ieq "Superseded")) { Trace-Execution "$cab was installed successfully on $ComputerName." } else { Trace-Warning "$cab was not installed on $ComputerName." $notInstalledKBs += $cab } } catch { Trace-Warning "$cab was not installed on $ComputerName." $notInstalledKBs += $cab } } if ($notInstalledKBs.Count -ge 1) { Trace-Error "The following KBs were not installed on $ComputerName : $notInstalledKBs." } Trace-Execution "$([DateTime]::Now): Test-UpdateKB completed successfully on $ComputerName." } <# .Synopsis Pre-processes a directory containing to extract the underlying cabs. .Description This is typically a pre-packaging step not performed on a running stamp. Caller is assumed to have access to Source and Destination, without requiring credentials. #> function Copy-ContentToStagingFolder { [CmdletBinding()] Param ( # Folder containing raw MSUs downloaded from Microsoft Catalog [Parameter(Mandatory=$true)] [string] $Source, # Output directory for flat folder of .CAB files suitable for DISM Add-WindowsPackage [Parameter(Mandatory=$true)] [string] $Destination, # Source is a WSUS Export [switch] $WSUSExport = $false, # Delete all existing content in the staging folder [switch] $PurgeExisting ) $ErrorActionPreference = "Stop" # Imports Import-Module (Join-Path $PSScriptRoot "Modules\Get-FreeDriveLetter.psm1") $stopWatch = New-Object Diagnostics.Stopwatch $stopWatch.Start() Trace-Execution "$([DateTime]::Now): Starting Copy-ContentToStagingFolder from $Source to $Destination, Purge: $PurgeExisting" # Find all MSUs, expand, copy the .CAB to a single folder if (!(Test-Path $Source)) { Trace-Error "$Source not accessible as source for MSUs" } $DestinationDrive = $null $SourceDrive = $null # MSU folder and file names can be very long and will exceed .NET limits in # a reasonably named share. Persistent PS drives will act as shortened # path names. # PSDrives, even though declared persistent, will only remain # mapped for the duration of their scope. No finally clean-up needed. $SourceDrive = New-PSDrive -Scope Local -Persist -Name (Get-FreeDriveLetter) -Root $Source -Description "Source for MSUs" -PSProvider FileSystem $Source = "$SourceDrive`:" $DestinationDrive = New-PSDrive -Scope Local -Persist -Name (Get-FreeDriveLetter) -Root $Destination -Description "Destination for extracted cabinets" -PSProvider FileSystem $Destination = "$DestinationDrive`:" if ($PurgeExisting) { Remove-Item (Join-Path $Destination *) -Include "*.cab" } if ($WSUSExport) { Copy-WSUSContentToStagingFolder -Source $Source -Destination $Destination } else { Copy-MSUContentToStagingFolder -Source $Source -Destination $Destination } $stopWatch.Stop() Trace-Execution "Ending Copy-ContentCabsToStagingFolder $([DateTime]::Now), Elapsed: $($stopWatch.Elapsed)" } function Copy-FileViaRoboCopy { [Diagnostics.CodeAnalysis.SuppressMessage("PSAvoidGlobalVars", "global:LASTEXITCODE", Scope="Function")] Param ( [Parameter(Mandatory=$true)] [string] $Source, [Parameter(Mandatory=$true)] [string] $Destination, [Parameter(Mandatory=$true)] [string] $Name ) # Robocopy can handle the long file names robocopy /R:5 /W:5 /NP /NJH /NJS /NDL /NFL $cab.DirectoryName $Destination $cab.Name $result = $LASTEXITCODE switch ($result) { 0 { # No file copied, okay in a merging (non-Purge) scenario if ($PurgeExisting) { Trace-Error "No file copied, but -Purge was specified" $global:LASTEXITCODE = 1 } } 1 { # Expected result $global:LASTEXITCODE = 0 } default { Trace-Error "RoboCopy returned unexpected LastExitCode: $result" } } } function Copy-MSUContentToStagingFolder { Param ( # Folder containing raw Content [Parameter(Mandatory=$true)] [string] $Source, # Output directory for flat folder of .CAB files suitable for DISM Add-WindowsPackage [Parameter(Mandatory=$true)] [string] $Destination ) # Extracted files are assumed not to hit long file name issues $extractTemp = Join-Path $env:TEMP "UpdateContentExpansion" $packages = Get-ChildItem -Recurse -Path $Source -Include "*.msu" foreach ($msu in $Packages) { if (Test-Path $extractTemp) { Remove-Item $extractTemp -Recurse -Force } New-Item -ItemType Directory $extractTemp | Out-Null try { #Expand.exe can handle the long file names. # Note that a non-compressed file will "expand" with no error - it's just a straight file copy. expand.exe -F:* $msu $extractTemp | Out-Null $result = $LastExitCode if (0 -ne $result) { Trace-Error "Expand.exe returned unexpected non-zero result: $result" } $cab = Get-ChildItem "$extractTemp\*" -Include "*.cab" -Exclude "WSUSSCAN.cab" if ($cab -and $cab.Count -eq 1) { Trace-Execution "Writing $($cab.Name) from $msu" Copy-FileViaRoboCopy $cab.DirectoryName $Destination $cab.Name } else { Trace-Error "Unexpected cabinet state found in $msu" } } finally { Remove-Item $extractTemp -Recurse -Force } } } function Copy-WSUSContentToStagingFolder { Param ( # Folder containing raw Content [Parameter(Mandatory=$true)] [string] $Source, # Output directory for flat folder of .CAB files suitable for DISM Add-WindowsPackage [Parameter(Mandatory=$true)] [string] $Destination ) # Extracted files are assumed not to hit long file name issues $extractTemp = Join-Path $env:TEMP "UpdateContentExpansion" $packages = Get-ChildItem -Recurse -Path $Source -Include "*.cab" if ($PurgeExisting) { Remove-Item (Join-Path $Destination *) -Include "*.cab" } foreach ($cab in $packages) { if (Test-Path $extractTemp) { Remove-Item $extractTemp -Recurse -Force } New-Item -ItemType Directory $extractTemp | Out-Null try { $keyFile = "update.cat" # Expand.exe can handle the long file names. # Note that a non-compressed file will "expand" with no error - it's just a straight file copy. expand.exe -F:$keyFile $cab $extractTemp | Out-Null $result = $LastExitCode if (0 -ne $result) { Trace-Error "Expand.exe returned unexpected non-zero result: $result" } $manifest = Get-ChildItem "$extractTemp\*" -Include $keyFile if ($manifest) { Trace-Execution "Staging $($cab.Name) from $Source" Copy-FileViaRoboCopy $cab.DirectoryName $Destination $cab.Name } else { Trace-Execution "Skipping non MSU package $($cab.Name)" } } finally { Remove-Item $extractTemp -Recurse -Force } } } # Test if the specified path is a UNC path. function Test-IsUncPath { [CmdletBinding()] param ( [Parameter(Mandatory=$true)] [string] $Path ) Trace-Execution "Testing if $Path is a UNC path." if ($Path.Contains(":")) { return $false } else { return $true } } # If the path is a UNC path we can directly find the files from this path. However if this is a local CSV path # used for host update, we have to do the file search in a remote session to the node being updated. function Get-ChildItemLocalOrUnc { [CmdletBinding()] param ( [Parameter(Mandatory=$true)] $Path, [Parameter(Mandatory=$true)] $Include, [Parameter(Mandatory=$true)] $ComputerName, [Parameter(Mandatory=$true)] $Credential ) if (Test-IsUncPath -Path $Path) { return Get-ChildItem -Path (Join-Path $Path *) -Include $Include } else { return (Invoke-Command -Credential $Credential -ComputerName $ComputerName -ScriptBlock { if (-not (Test-Path $using:Path)) { return $null } else { Get-ChildItem -Path (Join-Path $using:Path *) -Include $using:Include } }) } } # Public Export-ModuleMember -Function Set-UpdateRebootRequested Export-ModuleMember -Function Test-UpdateRebootRequested Export-ModuleMember -Function Install-Update Export-ModuleMember -Function Copy-ContentToStagingFolder # Internal Export-ModuleMember -Function Install-UpdateScript Export-ModuleMember -Function Install-UpdateKB Export-ModuleMember -Function Install-UpdateCIPolicy Export-ModuleMember -Function Test-UpdateKB Export-ModuleMember -Function Test-IsUncPath Export-ModuleMember -Function Get-ChildItemLocalOrUnc # SIG # Begin signature block # MIIoRQYJKoZIhvcNAQcCoIIoNjCCKDICAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCQWPm5eXrjpV6a # gTr+wnhmXDhod7yhkgVFRcICxlMuGKCCDXYwggX0MIID3KADAgECAhMzAAADrzBA # DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p # bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB # AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA # hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG # 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN # xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL # go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB # tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE # AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw # RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW # MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci # tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG # CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu # Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0 # MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd # mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ # 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY # 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp # XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn # TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT # e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG # OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O # PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk # ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx # HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt # CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq # hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x # EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv # bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 # IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG # EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG # A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg # Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC # CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03 # a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr # rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg # OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy # 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9 # sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh # dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k # A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB # w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn # Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90 # lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w # ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o # ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD # VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa # BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny # bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG # AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV # HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG # AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl # AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb # C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l # hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6 # I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0 # wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560 # STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam # ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa # J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah # XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA # 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt # Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr # /Xmfwb1tbWrJUnMTDXpQzTGCGiUwghohAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp # Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB # BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO # MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIHpSCoUokvw7evTjCvUhHcpg # IAuouFozI5lRHzOUQOivMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A # cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB # BQAEggEABW+acw7qy5z6LXiBzMDvp2AgHYgaHI5dZfQjZxKJ3KLxapr9O9d0VSmn # uj0EBNqdvm7dN58HYnezMNQ6XR1Y746j5+nYNPWhZ2Htn5FuCghRjitlS8azWwyx # 6jJ1DUoBZHHdb/cKtAmOdf7DYHberzRf7luJyW+jBI32nB72498HmC53WQyr+N+t # Q0gPO/wAZW3CbCqxrQTxXbhSh9Cl9Evjrsj2fs0UuLnmm5CHolFAkRdvYd6pLKaD # qfdqaNg0xd5q0C+z1cCL+tpy0dhNW14TiE/kUJBOmXadTv5XPDKxar89vCxEY3Ie # YJZ2j1GkMTF70kVr7V5OGvkHsRWBE6GCF68wgherBgorBgEEAYI3AwMBMYIXmzCC # F5cGCSqGSIb3DQEHAqCCF4gwgheEAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsq # hkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl # AwQCAQUABCD1ouSanN1geIyFNMo7JTVRsdoSKgrDkSB9LSqjUXHEOgIGZv8YCOXj # GBMyMDI0MTAwOTAxMTMyOS43OTZaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl # bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT # Tjo2QjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg # U2VydmljZaCCEf0wggcoMIIFEKADAgECAhMzAAAB9oMvJmpUXSLBAAEAAAH2MA0G # CSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u # MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp # b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0 # MDcyNTE4MzEwNFoXDTI1MTAyMjE4MzEwNFowgdMxCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9w # ZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjZCMDUt # MDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl # MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0UJeLMR/N9WPBZhuKVFF # +eWJZ68Wujdj4X6JR05cxO5CepNXo17rVazwWLkm5AjaVh19ZVjDChHzimxsoaXx # Nu8IDggKwpXvpAAItv4Ux50e9S2uVwfKv57p9JKG+Q7VONShujl1NCMkcgSrPdmd # /8zcsmhzcNobLomrCAIORZ8IwhYy4siVQlf1NKhlyAzmkWJD0N+60IiogFBzg3yI # SsvroOx0x1xSi2PiRIQlTXE74MggZDIDKqH/hb9FT2kK/nV/aXjuo9LMrrRmn44o # YYADe/rO95F+SG3uuuhf+H4IriXr0h9ptA6SwHJPS2VmbNWCjQWq5G4YkrcqbPMa # x7vNXUwu7T65E8fFPd1IuE9RsG4TMAV7XkXBopmPNfvL0hjxg44kpQn384V46o+z # dQqy5K9dDlWm/J6vZtp5yA1PyD3w+HbGubS0niEQ1L6wGOrPfzIm0FdOn+xFo48E # Rl+Fxw/3OvXM5CY1EqnzEznPjzJc7OJwhJVR3VQDHjBcEFTOvS9E0diNu1eocw+Z # Ckz4Pu/oQv+gqU+bfxL8e7PFktfRDlM6FyOzjP4zuI25gD8tO9zJg6g6fRpaZc43 # 9mAbkl3zCVzTLDgchv6SxQajJtvvoQaZxQf0tRiPcbr2HWfMoqqd9uiQ0hTUEhG4 # 4FBSTeUPZeEenRCWadCW4G8CAwEAAaOCAUkwggFFMB0GA1UdDgQWBBRIwZsJuOcJ # fScPWcXZuBA4B89K8jAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBf # BgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz # L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmww # bAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29m # dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUF # BwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEA13kBirH1cHu1 # WYR1ysj125omGtQ0PaQkEzwGb70xtqSoI+svQihsgdTYxaPfp2IVFdgjaMaBi81w # B8/nu866FfFKKdhdp3wnMZ91PpP4Ooe7Ncf6qICkgSuwgdIdQvqE0h8VQ5QW5sDV # 4Q0Jnj4f7KHYx4NiM8C4jTw8SQtsuxWiTH2Hikf3QYB71a7dB9zgHOkW0hgUEeWO # 9mh2wWqYS/Q48ASjOqYw/ha54oVOff22WaoH+/Hxd9NTEU/4vlvsRIMWT0jsnNI7 # 1jVArT4Q9Bt6VShWzyqraE6SKUoZrEwBpVsI0LMg2X3hOLblC1vxM3+wMyOh97aF # Os7sFnuemtI2Mfj8qg16BZTJxXlpPurWrG+OBj4BoTDkC9AxXYB3yEtuwMs7pRWL # yxIxw/wV9THKUGm+x+VE0POLwkrSMgjulSXkpfELHWWiCVslJbFIIB/4Alv+jQJS # KAJuo9CErbm2qeDk/zjJYlYaVGMyKuYZ+uSRVKB2qkEPcEzG1dO9zIa1Mp32J+zz # W3P7suJfjw62s3hDOLk+6lMQOR04x+2o17G3LceLkkxJm41ErdiTjAmdClen9yl6 # HgMpGS4okjFCJX+CpOFX7gBA3PVxQWubisAQbL5HgTFBtQNEzcCdh1GYw/6nzzNN # t+0GQnnobBddfOAiqkzvItqXjvGyK1QwggdxMIIFWaADAgECAhMzAAAAFcXna54C # m0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE # CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z # b2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZp # Y2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMy # MjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH # EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV # BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0B # AQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51 # yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY # 6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9 # cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN # 7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDua # Rr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74 # kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2 # K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5 # TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZk # i1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q # BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3Pmri # Lq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUC # BBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJl # pxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIB # FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y # eS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUA # YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw # MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov # L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w # Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/yp # b+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulm # ZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM # 9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECW # OKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4 # FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3Uw # xTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPX # fx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVX # VAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGC # onsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU # 5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG # ahC0HVUzWLOhcGbyoYIDWDCCAkACAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl # bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT # Tjo2QjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg # U2VydmljZaIjCgEBMAcGBSsOAwIaAxUAFU9eSpdxs0a06JFIuGFHIj/I+36ggYMw # gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD # VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsF # AAIFAOqwLa8wIhgPMjAyNDEwMDgyMjE2MTVaGA8yMDI0MTAwOTIyMTYxNVowdjA8 # BgorBgEEAYRZCgQBMS4wLDAKAgUA6rAtrwIBADAJAgEAAgFIAgH/MAcCAQACAhNu # MAoCBQDqsX8vAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAI # AgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAAhpXyidjJ/C # gfDnI19ICFdiaDPVjYNF6lrxndFkLtGZ5Huatq2ln3/sJaQQvEgKn92aXdWrJa/o # FGIbBcslptcBwwzDdwV7SGW3+xNPTWDEWPjzPBX7H3uYLKyzKewKEpjFv1Z3Zh/I # w1p+MnffVxMP3BDeHRppTuimX182EJRoqevtzggEBVNfGUqoT+XPYNyKLlv5taSB # X1nGzM6GzevB5zOw4YCwO3SLj/AQ4PouLNxSLbnlLzvUrr4veChQEoe0rfuJfnsq # R845cscovBFnBWXz1VqfdAAM/1lPOxfuR4C9rCEpys3EkCQZFRSU8o+jJ0yMOdJ5 # 8X6z/m8AfhkxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMK # V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0 # IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0Eg # MjAxMAITMwAAAfaDLyZqVF0iwQABAAAB9jANBglghkgBZQMEAgEFAKCCAUowGgYJ # KoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCDLW7Wv5a1P # SerU1wqHERnBSrZt7PEGpe4Ylx0AFpzuujCB+gYLKoZIhvcNAQkQAi8xgeowgecw # geQwgb0EICthTPGUXqblRItLh/w1cv/xqg0RV2wJlGYX4uVCMbaiMIGYMIGApH4w # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAH2gy8malRdIsEAAQAA # AfYwIgQgO+28egYuBCZWBO2Xc5vYxhlrUShSDYNOX98sONqb4pEwDQYJKoZIhvcN # AQELBQAEggIAzIKLIj5y+ZwXc2EhQFM93uc006/qGjHCiFMgW1colB7ImQtMUNPg # psM2a4MowLu+0FQIwPgp6FeEcdsbWXt3mNjqSwW94CWsBFuUokTdC9Hw0dhyJpkp # D+lx1pBOh1y+S/RmitkVUTsCvM5yev7jQsO/IytZxUcxMknT5k3VpZqmfgii/wfE # sy8WPo0W2iF1DKaFmasnSSxZK0Y4QnFjNmcSLTI0wAjqe5J2sItaYEFp3R8VolqR # /PXqxWpknQz4cXA+vpEi0xYdme4OYqkFCEqrUQMSwz0fnzgnOnjq9am3kNPpdNBs # WRWoTQXZZ1LLrAIvNYAWuGfcXIeMpjcXoOaIZ9+cy0xXAGdq1ObukMsvNPk+7mbY # sNNqI0+2T4RqQ+4WLIO6irHlHyXkrRL6oS/sfjFxpmWVWx1MIf3/3cCfY9NHyrn0 # 6x6NbF6RGp7uQB60aFxxvrKQwedV/MtAtBe0odLFtthm7ZXY298NOLu1Hw/aKZIx # sEGoK/3ZHcRa3EOt57jgg3bCx79a0rNK1wguT5NVpqj79S77I4mS8O1JQozXlqFI # DkZPJOCkaTqAo5WDDEOv/FC/TExnmWuab7cfKbizu4rs5GlVBNF1qEBTO1IKmv+G # psa7rEp4ZC5m3Rf6YW92+GkLCkQ3k3Q5QGKD8so+SVWIPY7w90Sva/4= # SIG # End signature block |