ExoHelper

3.0.0-beta1

ExoHelper.psm1

                                #region Public commands

function Get-ExoDefaultClientId

{

    [CmdletBinding()]

    param ( )

    process

    {

        'fb78d390-0c51-40cd-8e17-fdbfab77341b'

    }

}

function Get-ExoToken

{

<#

.SYNOPSIS

    Retrieves access token for authentication with EXO REST API

.DESCRIPTION

    Retrieves access token for authentication with EXO REST API via authentication factory

.OUTPUTS

    Hash table with authorization header containing access token, ready to be passed as headers to web request

.EXAMPLE

Get-ExoToken

Description

-----------

Retieve authorizatin header for calling EXO REST API

#>

param

    (

        [Parameter()]

        #Connection context as returned by New-ExoConnection

        #When not specified, uses most recently created connection context

        $Connection = $script:ConnectionContext,

        #Forces reauthentication

        #Usefiu when want to continue working after PIN JIT re-elevation

        [switch]$ForceRefresh

    )

    begin

    {

        if($null -eq $Connection )

        {

            throw 'Call New-ExoConnection first'

        }

    }

    process

    {

        if($Connection.IsIPPS)

        {

           $Scopes = "https://ps.compliance.protection.outlook.com/.default"

        }

        else

        {

            $Scopes = "https://outlook.office365.com/.default"

        }

        Get-AadToken -Factory $Connection.AuthenticationFactory -Scopes $scopes -ForceRefresh:$ForceRefresh

    }

}

function Invoke-ExoCommand

{

<#

.SYNOPSIS

    Invokes EXO REST API to execute command provided

.DESCRIPTION

    Invokes EXO REST API to execute command provided along with parameters for the command and optional list of properties to return if full object is not desired

.OUTPUTS

    Data returned by executed command

.EXAMPLE

Invoke-ExoCommand -Name 'Get-Mailbox' -Parameters @{Identity = 'JohnDoe'} -PropertiesToLoad 'netId'

Description

-----------

This command retrieves mailbox of user JohnDoe and returns just netId property

.EXAMPLE

$connection = New-AadAuthenticationFactory -ClientId (Get-ExoDefaultClientId) -TenantId 'mydomain.onmicrosoft.com' -AuthMode Interactive | New-ExoConnection -IPPS

Invoke-ExoCommand -Connection $connection -Name 'Get-Label' -PropertiesToLoad 'ImmutableId','DisplayName' -RemoveOdataProperties -ShowWarnings

Description

-----------

This command creates connection for IPPS REST API, retrieves list of sensitivity labels returning only ImmutableId and DisplayName properties, and shows any warnings returned by IPPS REST API

#>

    param

    (

        [Parameter(Mandatory)]

        [string]

            #Name of the command to execute

        $Name,

        [Parameter()]

        [hashtable]

            #Hashtable with parameters of the command

        $Parameters = @{},

        [Parameter()]

        [string[]]

            #List of properties to return if not interested in full object

        $PropertiesToLoad,

        [Parameter()]

        [int]

            #Max retries when throttling occurs

        $MaxRetries = 10,

        [Parameter()]

        [int]

            #Max results to return

            #1000 is a minimum, and min increment is 1000

        $ResultSize = [int]::MaxValue,

        [Parameter()]

        [int]

            #Max results to return in single request

            #Default is 100

        $PageSize = 100,

        [switch]

            #If we want to write any warnings returned by EXO REST API

        $ShowWarnings,

        [switch]

            #If we want to remove odata type descriptor properties from the output

        $RemoveOdataProperties,

        [switch]

        #If we want to include rate limits reported by REST API to verbose output

        $ShowRateLimits,

        [Parameter()]

        #Connection context as returned by New-ExoConnection

        #When not specified, uses most recently created connection context

        $Connection = $script:ConnectionContext

    )

    begin

    {

        $body = @{}

        if($PageSize -gt 1000)

        {

            $batchSize = 1000

        }

        if($PageSize -le 0)

        {

            $batchSize = 100

        }

        $batchSize = $pageSize

        $uri = $Connection.ConnectionUri

        if($PropertiesToLoad.Count -gt 0)

        {

            $props = $PropertiesToLoad -join ','

            $uri = "$uri`?`$select=$props"

        }

    }

    process

    {

        $headers = @{}

        $headers['X-CmdletName'] = $Name

        $headers['Prefer'] = "odata.maxpagesize=$batchSize"

        $headers['connection-id'] = $Connection.connectionId

        $headers['X-AnchorMailbox'] = $Connection.anchorMailbox

        $headers['X-ClientApplication'] ='ExoHelper'

        #make sure that hashTable in parameters is properly decorated

        $keys = @()

        $Parameters.Keys | ForEach-Object { $keys += $_ }

        foreach($key in $Keys)

        {

            if($Parameters[$key] -is [hashtable])

            {

                $Parameters[$key]['@odata.type'] =  '#Exchange.GenericHashTable'

            }

            if($Parameters[$key] -is [System.Security.SecureString])

            {

                $cred = new-object System.Net.NetworkCredential -ArgumentList @($null, $Parameters[$key])

                $Parameters[$key] = EncryptValue -UnsecureString $cred.Password

            }

        }

        $body['CmdletInput'] = @{

            CmdletName = $Name

            Parameters = $Parameters

        }

        $retries = 0

        $resultsRetrieved = 0

        $pageUri = $uri

        $shouldContinue = $true #to support ErrorAction = SilentlyContinue that does not throw

        do

        {

            try {

                #new request id for each request

                $headers['client-request-id'] = [Guid]::NewGuid().ToString()

                #provide up to date token for each request of commands returning paged results that may take long to complete

                $headers['Authorization'] = (Get-ExoToken -Connection $Connection).CreateAuthorizationHeader()

                Write-Verbose "$([DateTime]::UtcNow.ToString('o'))`tResults:$resultsRetrieved`tRequestId: $($headers['client-request-id'])`tUri: $pageUri"

                $requestMessage = GetRequestMessage -Uri $pageUri -Headers $headers -Body ($body | ConvertTo-Json -Depth 9)

                $response = $Connection.HttpClient.SendAsync($requestMessage).GetAwaiter().GetResult()

                $requestMessage.Dispose()

                if($null -ne $response.Content -and $response.StatusCode -ne [System.Net.HttpStatusCode]::NoContent)

                {

                    $payload = $response.Content.ReadAsStringAsync().GetAwaiter().GetResult()

                    $responseData = $Payload | ConvertFrom-Json

                }

                else

                {

                    $responseData = $null

                }

                if($response.IsSuccessStatusCode)

                {

                    if($null -ne $responseData)

                    {

                        if($ShowWarnings -and $null -ne $responseData.'@adminapi.warnings')

                        {

                            foreach($warning in $responseData.'@adminapi.warnings')

                            {

                                Write-Warning $warning

                            }

                        }

                        $resultsRetrieved+=$responseData.value.Count

                        if($RemoveOdataProperties)

                        {

                            $responseData.value | RemoveExoOdataProperties

                        }

                        else {

                            $responseData.value

                        }

                        $pageUri = $responseData.'@odata.nextLink'

                    }

                }

                else

                {

                    #request failed

                    $ex = $null

                    if($response.StatusCode -ne [System.Net.HttpStatusCode]::TooManyRequests)

                    {

                        $shouldContinue = $false

                        $ex = $responseData | Get-ExoException -httpCode $response.StatusCode

                    }

                    else

                    {

                        if($retries -ge $MaxRetries)

                        {

                            $shouldContinue = $false

                            $ex = New-Object ExoHelper.ExoException($response.StatusCode, 'ExoTooManyRequests', '', 'Max retry count for throttled request exceeded')

                        }

                    }

                    if($null -ne $ex)

                    {

                        switch($ErrorActionPreference)

                        {

                            'Stop' { throw $ex }

                            'Continue' { Write-Error -Exception $ex; return }

                            default { return }

                        }

                    }

                    #TooManyRequests --> let's wait and retry

                    $retries++

                    switch($WarningPreference)

                    {

                        'Continue' { Write-Warning "Retry #$retries" }

                        'SilentlyContinue' { Write-Verbose "Retry #$retries" }

                    }

                    #wait some time

                    Start-Sleep -Seconds $retries

                }

            }

            catch

            {

                $shouldContinue = $false

                throw

            }

            finally

            {

                if($ShowRateLimits)

                {

                    $val = $null

                    if($response.Headers.TryGetValues('Rate-Limit-Remaining', [ref]$val)) 

                    {

                        $rateLimitRemaining = $val

                        if($response.Headers.TryGetValues('Rate-Limit-Reset', [ref]$val))

                        {

                            $rateLimitReset = $val

                            Write-Verbose "Rate limit remaining: $rateLimitRemaining`tRate limit reset: $rateLimitReset"

                        }

                    }

                }

            }

        }while($null -ne $pageUri -and ($resultsRetrieved -lt $ResultSize) -and $shouldContinue)

    }

}

function New-ExoConnection

{

<#

.SYNOPSIS

    Initializes EXO connection

.DESCRIPTION

    Initializes EXO connection

.OUTPUTS

    None

.EXAMPLE

New-AadAuthenticationFactory -ClientId (Get-ExoDefaultClientId) -TenantId 'mydomain.onmicrosoft.com' -AuthMode Interactive

New-ExoConnection -authenticationfactory $factory

Description

-----------

This command initializes connection to EXO REST API.

It uses instance of AADAuthenticationFactory for authentication with EXO REST API

.EXAMPLE

New-AadAuthenticationFactory -ClientId (Get-ExoDefaultClientId) -TenantId 'mydomain.onmicrosoft.com' -AuthMode Interactive | New-ExoConnection -IPPS

Description

-----------

This command initializes connection to IPPS REST API.

It uses instance of AADAuthenticationFactory for authentication with IPPS REST API passed via pipeline

#>

param

    (

        [Parameter(Mandatory, ValueFromPipeline)]

        #AAD authentication factory created via New-AadAuthenticationFactory

        #for user context, user factory created with clientId = fb78d390-0c51-40cd-8e17-fdbfab77341b (clientId of ExchangeOnlineManagement module) or your app with appropriate scopes assigned

        $AuthenticationFactory,

        [Parameter()]

        #Tenant ID when not the same as specified for factory - tenant native domain (xxx.onmicrosoft.com, or tenant GUID)

        [string]

        $TenantId,

        [Parameter()]

        #UPN of anchor mailbox

        #Default: UPN of caller or static system mailbox  (for app-only context)

        [string]

        $AnchorMailbox,

        [switch]

        #Connection is specialized to call IPPS commands

        #If not present, connection is specialized to call Exchange Online commands

        $IPPS

    )

    process

    {

        $Connection = [PSCustomObject]@{

            PSTypeName = "ExoHelper.Connection"

            AuthenticationFactory = $AuthenticationFactory

            ConnectionId = [Guid]::NewGuid().ToString()

            TenantId = $null

            AnchorMailbox = $null

            ConnectionUri = $null

            IsIPPS = $IPPS.IsPresent

            HttpClient = new-object System.Net.Http.HttpClient

        }

        $claims = Get-ExoToken -Connection $Connection | Test-AadToken -PayloadOnly

        $Connection.TenantId = $claims.tid

        if($IPPS)

        {

            $Connection.ConnectionUri = "https://eur02b.ps.compliance.protection.outlook.com/adminapi/beta/$($Connection.TenantId)/InvokeCommand"

        }

        else

        {

            $Connection.ConnectionUri = "https://outlook.office365.com/adminapi/beta/$($Connection.TenantId)/InvokeCommand"

        }

        if([string]::IsNullOrEmpty($AnchorMailbox))

        {

            if($null -ne $claims.upn)

            {

                #using caller's mailbox

                $Connection.AnchorMailbox = "UPN:$($claims.upn)"

            }

            else

            {

                #likely app-only context - use same static anchor mailbox as ExchangeOnlineManagement module uses

                $Connection.AnchorMailbox = "DiscoverySearchMailbox{D919BA05-46A6-415f-80AD-7E09334BB852}@$tenantId"

            }

        }

        else

        {

            $Connection.AnchorMailbox = "UPN:$AnchorMailbox"

        }

        $script:ConnectionContext = $Connection

        $script:ConnectionContext

    }

}

#endregion Public commands

#region Internal commands

#encrypts data using MS provided public key

#key stored in module private data

#MS rotates the key regularly; at least one version back is supported

function EncryptValue

{

    [CmdletBinding()]

    param(

        [Parameter(Mandatory, ValueFromPipeline)]

        [AllowEmptyString()]

        [AllowNull()]

        $UnsecureString,

        [Parameter()]

        [string]$Key = $script:PublicKey

    )

    process

    {

        # Handling public key unavailability in client module for protection gracefully

        if ([string]::IsNullOrWhiteSpace($Key))

        {

            # Error out if we are not in a position to protect the sensitive data before sending it over wire.

            throw 'Public key not loaded. Cannot encrypt sensitive data.';

        }

        if (-not [string]::IsNullOrWhiteSpace($UnsecureString))

        {

            $RSA = New-Object -TypeName System.Security.Cryptography.RSACryptoServiceProvider;

            $RSA.FromXmlString($Key);

            $bytes = [System.Text.Encoding]::UTF8.GetBytes($UnsecureString);

            $result = [byte[]]$RSA.Encrypt($bytes, $false);

            $RSA.Dispose();

            $result = [System.Convert]::ToBase64String($result);

            return $result;

        }

        return $UnsecureString;

    }

}

function Get-ExoException

{

    param

    (

        [Parameter(Mandatory, ValueFromPipeline)]

        [PSCustomObject]

        $ErrorRecord,

        [Parameter()]

        $httpCode

    )

    process

    {

        if($null -ne $errorRecord.error.details.message)

        {

            $message = $errorRecord.error.details.message

            $errorData = $message.split('|')

            if($errorData.count -eq 3)

            {

                return new-object ExoHelper.ExoException -ArgumentList @($httpCode, $errorData[0], $errorData[1], $errorData[2])

            }

            else

            {

                return new-object ExoHelper.ExoException -ArgumentList @($httpCode, 'ExoErrorWithUnknownDetail', '', $message)

            }

        }

        if($null -ne $errorRecord.error)

        {

            return new-object ExoHelper.ExoException -ArgumentList @($httpCode, 'ExoErrorWithMissingDetail', '', "$($errorRecord.error)")

        }

        return new-object ExoHelper.ExoException -ArgumentList @($httpCode, 'ExoUnknownError', '', "$($errorRecord.error)")

    }

}

function GetRequestMessage

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory)]

        [string]

        $Uri,

        [Parameter()]

        [hashtable]

        $Headers,

        [Parameter()]

        [string]

        $Body

    )

    begin

    {

        $ContentType = 'application/json'

        $Method = [System.Net.Http.HttpMethod]::Post

    }

    process

    {

        $request = [System.Net.Http.HttpRequestMessage]::new([System.Net.Http.HttpMethod]::$Method, (new-object System.Uri($Uri)))

        if($null -ne $Headers)

        {

            foreach($header in $Headers.Keys)

            {

                $request.Headers.TryAddWithoutValidation($header, $Headers[$header]) | Out-Null

            }

        }

        if($null -ne $Body)

        {

            $request.Content = [System.Net.Http.StringContent]::new($Body, [System.Text.Encoding]::UTF8, $ContentType)

        }

        $request.Method = $Method

        $request

    }

}

Function Init

{

    param()

    process

    {

        #Add JIT compiled helpers. Load only if not loaded previously

        $referencedAssemblies=@()

        $helpers = 'ExoException', 'StringExtensions'

        foreach($helper in $helpers)

        {

            #compiled helpers are in ExoHelper namespace

            if($null -eq ("ExoHelper.$helper" -as [type]))

            {

                $helperDefinition = Get-Content "$PSScriptRoot\Helpers\$helper.cs" -Raw

                Add-Type -TypeDefinition $helperDefinition -ReferencedAssemblies $referencedAssemblies -WarningAction SilentlyContinue -IgnoreWarnings

            }

        }

        #refresh cached public key, if needed

        $PublicKeyConfig = $MyInvocation.MyCommand.Module.PrivateData.Configuration.ExoPublicKey

        $cacheFile = [System.IO.Path]::Combine($env:TEMP, $PublicKeyConfig.LocalFile)

        $needsRefresh = $false

        if(-not [System.IO.File]::Exists($cacheFile))

        {

            $needsRefresh = $true

        }

        else {

            # local file exists

            $fileInfo = [System.IO.FileInfo]::new($cacheFile)

            if($fileInfo.LastWriteTime -lt (Get-Date).AddDays(-7))

            {

                $needsRefresh = $true

            }

        }

        if($needsRefresh)

        {

            try

            {

                Invoke-WebRequest -Uri $PublicKeyConfig.Link -OutFile $cacheFile -ErrorAction Stop

            }

            catch

            {

                write-warning 'Local copy of public key file is ooutdated or does not exist and failed to download public key. Module may not work correctly.'

                $script:PublicKey = $null

                return

            }

        }

        $script:PublicKey = [System.IO.File]::ReadAllText($cacheFile)

    }

}

#removes odata type descriptor properties from the object

function RemoveExoOdataProperties

{

    [CmdletBinding()]

    param (

        [Parameter(Mandatory, ValueFromPipeline)]

        [PSCustomObject]

        $Object

    )

    begin

    {

        $propsToRemove = $null

    }

    process

    {

        if($null -eq $propsToRemove)

        {

            $propsToRemove = $Object.PSObject.Properties | Where-Object { $_.Name.IndexOf('@') -ge 0 }

        }

        foreach($prop in $propsToRemove)

        {

            $Object.PSObject.Properties.Remove($prop.Name)

        }

        $Object

    }

}

#endregion Internal commands

#region Module initialization

Init

#endregion Module initialization

# SIG # Begin signature block

# MIIt9wYJKoZIhvcNAQcCoIIt6DCCLeQCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC9A2efF02E+adQ

# EFfCN7igpFy7DiRyXVi0ZRUeRLl6oaCCE2AwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggcUMIIE/KADAgECAhAP9xCe9qf4ax3LBs7uih/sMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjMxMTA4MDAwMDAwWhcNMjYxMDAxMjM1OTU5WjCBnDET

# MBEGCysGAQQBgjc8AgEDEwJDWjEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRp

# b24xETAPBgNVBAUTCDA0OTIzNjkzMQswCQYDVQQGEwJDWjEOMAwGA1UEBxMFUHJh

# aGExGjAYBgNVBAoTEUdyZXlDb3JiZWwgcy5yLm8uMRowGAYDVQQDExFHcmV5Q29y

# YmVsIHMuci5vLjCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAJ8t/Qga

# dJKtGC7EqH4pmIU73fInH+j1scmVnrJtXL8tGlKzWZ7qlWDWOJBR3owF9CVqL4IX

# BGImH8Miowj6RKKqhEe9UtxiH5ipV6msnzAjTFkwqR9vjfEm9vrU1JuXWvAWAfYx

# qYg92oyCEBDQxpURpZmqAVSBy9U/ScDwE4NykZGzb0oYSPtzStd8RJvtUkc4126w

# YKMbVe/kdY1mDbKO9DLfpbSIj3vghrH6XeHwEb7/jAVYI7Vl+jUyyqfmYHD7FldQ

# X2fZfwvoGSibY1uWvvP0/vm0yd6uDbDjCDOTQW8Lxl5wvlXEf5ewn2oaPSoa6ov3

# 1XmnxL5iT8c1LM06JFCwfHS9e0NSyNr86IiKaxQO9/MANrYciTicObtD3cBcSRDO

# pEUfhc4TvA5DQZaakSduVJWPdMhxQs9iWeYMOzh5NDTB3xAx8eLBn7Uj++hjI3FQ

# WGEPw4Ew6WoDsJShU0HemlDJGTPW9EZSWHGdNFr1BxXEPb4F7DbjJZn33QIDAQAB

# o4ICAjCCAf4wHwYDVR0jBBgwFoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHQYDVR0O

# BBYEFP2yViJvcgO05qXIH6aJSXB/QcEhMD0GA1UdIAQ2MDQwMgYFZ4EMAQMwKTAn

# BggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB

# /wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBP

# hk1odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2Rl

# U2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDBToFGgT4ZNaHR0cDovL2Ny

# bDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0

# MDk2U0hBMzg0MjAyMUNBMS5jcmwwgZQGCCsGAQUFBwEBBIGHMIGEMCQGCCsGAQUF

# BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wXAYIKwYBBQUHMAKGUGh0dHA6

# Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWdu

# aW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3J0MAkGA1UdEwQCMAAwDQYJKoZIhvcN

# AQELBQADggIBADCe9Fh40HN9RneCehz5MrBy4O9WYsYCMJ7qJ9DsBT+Hed98UOKB

# k/XjgSLfsj5eZRHRmz3HzhGDK1PaRI+yIUVQx96a4qL7adktmrHex3fW39Iq+tPB

# rHtiEIp9rwunATeZpk+876u0AXYD1VDRWCtkL8zwZU0oqL6U/mWEIXzkryCB5N3x

# xtE54jMmW7MKi1+To4yQcrK3zQ394e2dr50L+aF2fgJ5mo1/YJvzyLLhigbqpoYG

# U/gjZonhNJXUaYogpHSTgUaBRlIKZ5xCnrFfJlOsbkhex4QAcdkU6XC+XyYfEQka

# 7ERwgxmEoRT3NlZ8/EbrQxJP4S1H8Z29M4D3L6rXNXXmv0IbfA9FQcqEco3Y3tRW

# dgdcFEwJmYTo0mCZrYTJHgkKW8xDvQ5BJISAp/ydOX5tSa71ojx1/Kp7qizqjBN/

# W77jdqJ89N1y+N/SOiHOCH9NO5pDLsHpTWW/arvjZT0I8dVYkqK0V39rh95XELI+

# NwBZvV4AsKLirjrkZU3pwCz6O99VmPkBqp9TA5wl13NdTpDHuQ6QyVT7hbC8LF5p

# z6x/xO/+tEGxG+1A31UTJPmkxhhUlR+NE3ZXiXhcG72CFHYUUvqwlThPkFYe4Ygf

# j9ADmss08k0JhVU5rkbrC2h+549HPlFu/XOSIrps4SXzInjHPEYuBETzMYIZ7TCC

# GekCAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x

# QTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQw

# OTYgU0hBMzg0IDIwMjEgQ0ExAhAP9xCe9qf4ax3LBs7uih/sMA0GCWCGSAFlAwQC

# AQUAoIGEMBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEIN9yJwgikleOKXFAWqrirYlueXrvML3dmehGLnMDH64xMA0GCSqG

# SIb3DQEBAQUABIIBgEZzwUdTi2wIqiab+fAOY73rq5qM39f4bvFlj/RtMtyDmWos

# h10HGDhjE7+fCxdCncWR/geMKR0KgDajILT/lxb0TqpEXW29nlVj8zueKKhts7P1

# pI6aCbhUYwO6LhvZ7swCvYY8PYn8ccqqKaLxU8BU4sYhpZSoHAcmGdyPAYtBWAGZ

# BgPB6PMnA/UZEWM+SqIpIgocLGvDHMUSWTICaEWmGyMLG/b54WW7JiUfAQv3fHcE

# bSHhw37uSAjJk0XGeAmq8DsIQtKCokMWNACudmxEaJy1Hn56EeLCuoH4fzs1QrCm

# fljzOf8vqq/QaYmtNXauZrhWmOagESPDgV07WLmuYphqwpS9yKP+6WNfYI7vAXc1

# 1js/zIRuT4jMoGLLyGYpN2OQb0ZKsoqSZTRRW32dgKJAbiLaT/zGsvYobcNm+QQp

# We72sY850P4XFDJZV+hgs13BIm7/vN5/dY/Nrtk0bOdamf94JwWOUEx18OS5aYUe

# 9o+IO8qXl/0/v52B2aGCFzowghc2BgorBgEEAYI3AwMBMYIXJjCCFyIGCSqGSIb3

# DQEHAqCCFxMwghcPAgEDMQ8wDQYJYIZIAWUDBAIBBQAweAYLKoZIhvcNAQkQAQSg

# aQRnMGUCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCCEgwxg4zM3Lnxy

# 3SXsDCgPgHxHOCK7Gj+vZ7rrOMEXJAIRALhOB5fdZwRGuV0dHDVRT8AYDzIwMjQx

# MDEzMTI1MzE0WqCCEwMwgga8MIIEpKADAgECAhALrma8Wrp/lYfG+ekE4zMEMA0G

# CSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwg

# SW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1

# NiBUaW1lU3RhbXBpbmcgQ0EwHhcNMjQwOTI2MDAwMDAwWhcNMzUxMTI1MjM1OTU5

# WjBCMQswCQYDVQQGEwJVUzERMA8GA1UEChMIRGlnaUNlcnQxIDAeBgNVBAMTF0Rp

# Z2lDZXJ0IFRpbWVzdGFtcCAyMDI0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAvmpzn/aVIauWMLpbbeZZo7Xo/ZEfGMSIO2qZ46XB/QowIEMSvgjEdEZ3

# v4vrrTHleW1JWGErrjOL0J4L0HqVR1czSzvUQ5xF7z4IQmn7dHY7yijvoQ7ujm0u

# 6yXF2v1CrzZopykD07/9fpAT4BxpT9vJoJqAsP8YuhRvflJ9YeHjes4fduksTHul

# ntq9WelRWY++TFPxzZrbILRYynyEy7rS1lHQKFpXvo2GePfsMRhNf1F41nyEg5h7

# iOXv+vjX0K8RhUisfqw3TTLHj1uhS66YX2LZPxS4oaf33rp9HlfqSBePejlYeEdU

# 740GKQM7SaVSH3TbBL8R6HwX9QVpGnXPlKdE4fBIn5BBFnV+KwPxRNUNK6lYk2y1

# WSKour4hJN0SMkoaNV8hyyADiX1xuTxKaXN12HgR+8WulU2d6zhzXomJ2PleI9V2

# yfmfXSPGYanGgxzqI+ShoOGLomMd3mJt92nm7Mheng/TBeSA2z4I78JpwGpTRHiT

# 7yHqBiV2ngUIyCtd0pZ8zg3S7bk4QC4RrcnKJ3FbjyPAGogmoiZ33c1HG93Vp6lJ

# 415ERcC7bFQMRbxqrMVANiav1k425zYyFMyLNyE1QulQSgDpW9rtvVcIH7WvG9sq

# Yup9j8z9J1XqbBZPJ5XLln8mS8wWmdDLnBHXgYly/p1DhoQo5fkCAwEAAaOCAYsw

# ggGHMA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoG

# CCsGAQUFBwMIMCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG/WwHATAfBgNV

# HSMEGDAWgBS6FtltTYUvcyl2mi91jGogj57IbzAdBgNVHQ4EFgQUn1csA3cOKBWQ

# ZqVjXu5Pkh92oFswWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybDMuZGlnaWNl

# cnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5NlNIQTI1NlRpbWVTdGFtcGlu

# Z0NBLmNybDCBkAYIKwYBBQUHAQEEgYMwgYAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v

# Y3NwLmRpZ2ljZXJ0LmNvbTBYBggrBgEFBQcwAoZMaHR0cDovL2NhY2VydHMuZGln

# aWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5NlNIQTI1NlRpbWVTdGFt

# cGluZ0NBLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAPa0eH3aZW+M4hBJH2UOR9hHb

# m04IHdEoT8/T3HuBSyZeq3jSi5GXeWP7xCKhVireKCnCs+8GZl2uVYFvQe+pPTSc

# VJeCZSsMo1JCoZN2mMew/L4tpqVNbSpWO9QGFwfMEy60HofN6V51sMLMXNTLfhVq

# s+e8haupWiArSozyAmGH/6oMQAh078qRh6wvJNU6gnh5OruCP1QUAvVSu4kqVOcJ

# VozZR5RRb/zPd++PGE3qF1P3xWvYViUJLsxtvge/mzA75oBfFZSbdakHJe2BVDGI

# GVNVjOp8sNt70+kEoMF+T6tptMUNlehSR7vM+C13v9+9ZOUKzfRUAYSyyEmYtsnp

# ltD/GWX8eM70ls1V6QG/ZOB6b6Yum1HvIiulqJ1Elesj5TMHq8CWT/xrW7twipXT

# J5/i5pkU5E16RSBAdOp12aw8IQhhA/vEbFkEiF2abhuFixUDobZaA0VhqAsMHOma

# T3XThZDNi5U2zHKhUs5uHHdG6BoQau75KiNbh0c+hatSF+02kULkftARjsyEpHKs

# F7u5zKRbt5oK5YGwFvgc4pEVUNytmB3BpIiowOIIuDgP5M9WArHYSAR16gc0dP2X

# dkMEP5eBsX7bf/MGN4K3HP50v/01ZHo/Z5lGLvNwQ7XHBx1yomzLP8lx4Q1zZKDy

# Hcp4VQJLu2kWTsKsOqQwggauMIIElqADAgECAhAHNje3JFR82Ees/ShmKl5bMA0G

# CSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMjAzMjMwMDAwMDBaFw0zNzAzMjIyMzU5NTla

# MGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UE

# AxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1NiBUaW1lU3RhbXBp

# bmcgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGhjUGSbPBPXJJ

# UVXHJQPE8pE3qZdRodbSg9GeTKJtoLDMg/la9hGhRBVCX6SI82j6ffOciQt/nR+e

# DzMfUBMLJnOWbfhXqAJ9/UO0hNoR8XOxs+4rgISKIhjf69o9xBd/qxkrPkLcZ47q

# UT3w1lbU5ygt69OxtXXnHwZljZQp09nsad/ZkIdGAHvbREGJ3HxqV3rwN3mfXazL

# 6IRktFLydkf3YYMZ3V+0VAshaG43IbtArF+y3kp9zvU5EmfvDqVjbOSmxR3NNg1c

# 1eYbqMFkdECnwHLFuk4fsbVYTXn+149zk6wsOeKlSNbwsDETqVcplicu9Yemj052

# FVUmcJgmf6AaRyBD40NjgHt1biclkJg6OBGz9vae5jtb7IHeIhTZgirHkr+g3uM+

# onP65x9abJTyUpURK1h0QCirc0PO30qhHGs4xSnzyqqWc0Jon7ZGs506o9UD4L/w

# ojzKQtwYSH8UNM/STKvvmz3+DrhkKvp1KCRB7UK/BZxmSVJQ9FHzNklNiyDSLFc1

# eSuo80VgvCONWPfcYd6T/jnA+bIwpUzX6ZhKWD7TA4j+s4/TXkt2ElGTyYwMO1uK

# IqjBJgj5FBASA31fI7tk42PgpuE+9sJ0sj8eCXbsq11GdeJgo1gJASgADoRU7s7p

# XcheMBK9Rp6103a50g5rmQzSM7TNsQIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgw

# BgEB/wIBADAdBgNVHQ4EFgQUuhbZbU2FL3MpdpovdYxqII+eyG8wHwYDVR0jBBgw

# FoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQM

# MAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDov

# L29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5k

# aWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6

# MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVk

# Um9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJ

# KoZIhvcNAQELBQADggIBAH1ZjsCTtm+YqUQiAX5m1tghQuGwGC4QTRPPMFPOvxj7

# x1Bd4ksp+3CKDaopafxpwc8dB+k+YMjYC+VcW9dth/qEICU0MWfNthKWb8RQTGId

# DAiCqBa9qVbPFXONASIlzpVpP0d3+3J0FNf/q0+KLHqrhc1DX+1gtqpPkWaeLJ7g

# iqzl/Yy8ZCaHbJK9nXzQcAp876i8dU+6WvepELJd6f8oVInw1YpxdmXazPByoyP6

# wCeCRK6ZJxurJB4mwbfeKuv2nrF5mYGjVoarCkXJ38SNoOeY+/umnXKvxMfBwWpx

# 2cYTgAnEtp/Nh4cku0+jSbl3ZpHxcpzpSwJSpzd+k1OsOx0ISQ+UzTl63f8lY5kn

# LD0/a6fxZsNBzU+2QJshIUDQtxMkzdwdeDrknq3lNHGS1yZr5Dhzq6YBT70/O3it

# TK37xJV77QpfMzmHQXh6OOmc4d0j/R0o08f56PGYX/sr2H7yRp11LB4nLCbbbxV7

# HhmLNriT1ObyF5lZynDwN7+YAN8gFk8n+2BnFqFmut1VwDophrCYoCvtlUG3OtUV

# mDG0YgkPCr2B2RP+v6TR81fZvAT6gt4y3wSJ8ADNXcL50CN/AAvkdgIm2fBldkKm

# KYcJRyvmfxqkhQ/8mJb2VVQrH4D6wPIOK+XW+6kvRBVK5xMOHds3OBqhK/bt1nz8

# MIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0BAQwFADBl

# MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3

# d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv

# b3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQswCQYDVQQG

# EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl

# cnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0G

# CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7J

# IT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxS

# D1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb

# 7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1ef

# VFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoY

# OAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSa

# M0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI

# 8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9L

# BADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfm

# Q6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDr

# McXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15Gkv

# mB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E

# FgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SSy4IxLVGL

# p6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAkBggrBgEF

# BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAChjdodHRw

# Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0Eu

# Y3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E

# aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRVHSAAMA0G

# CSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyhhyzshV6p

# Grsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO0Cre+i1W

# z/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo8L8vC6bp

# 8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++hUD38dglo

# hJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5xaiNrIv8S

# uFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDdjCCA3ICAQEwdzBj

# MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMT

# MkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0YW1waW5n

# IENBAhALrma8Wrp/lYfG+ekE4zMEMA0GCWCGSAFlAwQCAQUAoIHRMBoGCSqGSIb3

# DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjQxMDEzMTI1MzE0

# WjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBTb04XuYtvSPnvk9nFIUIck1YZbRTAv

# BgkqhkiG9w0BCQQxIgQgThK3EyTNsRm7Vg1fgDQgKiKS2Sige+V5ff1+lBunJIww

# NwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQgdnafqPJjLx9DCzojMK7WVnX+13PbBdZl

# uQWTmEOPmtswDQYJKoZIhvcNAQEBBQAEggIAoT/44zG7Uop231hSitTnirhzrZhs

# 0hZ8/dqBZBIsNjovB7zk0bOwJRa9S+q/uHGI/SVMCZQXxXLKpBqflk35Ys8KW0T9

# nf2mxJjKGA4Asaijdw+hcbrOOIDAmWAnoXy64iODJYuFvNNldkBt91Zb2RrRu/xh

# V4vno2IDkaOzCMf6/+duoqeSvCwZhee6g4lMJBRoEhsdH0ld2Gl7X0SnZ1Kj+miw

# HOFGBHSlDLboypEN9GZCkQ6EPLnagAiW2s1mgEf9fSV8MwBATSvA/5cQk2QDpSxF

# weDeeKKQPXMbhMVzGYUENAVqzmtpsUJDrULwGKDj7qwiPN6TBW6cDI8/R+2s6QUe

# wpQ7rW7CWLo31AnE5p15ucTuh6ee3vkYF3mBZMSBaDPo5r2IJU9CabhK3CmC++0S

# mn8LsRCSrixcHjHWsn/jMtWb3bwbdwS9O93LLHfoJMXLsEG8V3vOvS2fXzY6YFbS

# FnYSdqDMYCGfdC5qdpwY0jMl7uJS0WN16dVxs1HXZGyvEF3pfP8BUmZPzO8uE4Xa

# 7nxvZ/7pnPhA0ybN3iyNpqW13aMLog2g7QLtGdPZz/4ih0gHeokxPVqAhUfo1dS6

# 1myjgDqlWZNuPfcm8xqVI7Ymyy/hAiq2fbtF8n15318Z6Z3sDz+C6CaFQxfqbQlf

# alio9BzFqDwC8JE=

# SIG # End signature block