ORCA

2.8.0

Checks/check-ORCA231.ps1

                                <#

231 - Check for duplicate anti-spam policies

#>

using module "..\ORCA.psm1"

class ORCA231 : ORCACheck

{

    <#

        CONSTRUCTOR with Check Header Data

    #>

    ORCA231()

    {

        $this.Control=231

        $this.Area="Anti-Spam Policies"

        $this.Name="Anti-Spam Policy Rules"

        $this.PassText="Each domain has a anti-spam policy applied to it, or the default policy is being used"

        $this.FailRecommendation="Check your anti-spam policies for duplicate rules. Some policies and settings may not be applying."

        $this.Importance="Exchange Online Protection anti-spam policies are applied using rules. The default policy applies in the absence of a custom policy. When creating custom policies, there may be duplication of settings and depending on the rules and priority, some policies or settings may not even apply. It's important in this circumstance to check that the desired settings are applied to the right users."

        $this.ExpandResults=$True

        $this.CheckType=[CheckType]::ObjectPropertyValue

        $this.ObjectType="Domain"

        $this.ItemName="Policy"

        $this.DataType="Priority"

        $this.ChiValue=[ORCACHI]::Medium

        $this.Links= @{

            "Microsoft 365 Defender Portal - Anti-spam policies"="https://security.microsoft.com/antispam"

            "Order and precedence of email protection"="https://aka.ms/orca-antispam-docs-5"

        }

    }

    <#

        RESULTS

    #>

    GetResults($Config)

    {

        ForEach($AcceptedDomain in $Config["AcceptedDomains"]) 

        {

            # Set up the config object

            $Rules = @()

            # Go through each Safe Links Policy

            ForEach($Rule in ($Config["HostedContentFilterRule"] | Sort-Object Priority)) 

            {

                if( $Rule.State -eq "Enabled")

                {

                    if($Rule.RecipientDomainIs -contains $AcceptedDomain.Name -and ($Rule.ExceptIfRecipientDomainIs -notcontains $AcceptedDomain.Name) -and ($null -eq $Rule.ExceptIfSentToMemberOf ) -and ($null -eq $Rule.ExceptIfSentTo) )

                    {

                        # Policy applies to this domain

                        $Rules += New-Object -TypeName PSObject -Property @{

                            PolicyName=$($Rule.HostedContentFilterPolicy)

                            IsPreset=$($Rule.IsPreset)

                            Priority=$($Rule.Priority)

                        }

                    }

                }

            }

            ForEach($Rule in ($Config["EOPProtectionPolicyRule"] | Sort-Object Priority)) 

            {

                if(($Rule.HostedContentFilterPolicy -ne "") -and ($null -ne $Rule.HostedContentFilterPolicy ))

                { 

                   if($Rule.State -eq "Enabled")

                   {

                    if($Rule.RecipientDomainIs -contains $AcceptedDomain.Name -and ($Rule.ExceptIfRecipientDomainIs -notcontains $AcceptedDomain.Name) -and ($null -eq $Rule.ExceptIfSentToMemberOf ) -and ($null -eq $Rule.ExceptIfSentTo) )

                    {

                            # Policy applies to this domain

                            $Rules += New-Object -TypeName PSObject -Property @{

                                PolicyName=$($Rule.HostedContentFilterPolicy)

                                IsPreset=$($Rule.IsPreset)

                                Priority=$($Rule.Priority)

                            }

                        }   

                    }

                }

            }

            If($Rules.Count -gt 0)

            {

                $Count = 0

                $CountOfPolicies = ($Rules).Count

                ForEach($r in ($Rules | Sort-Object Priority))

                {

                    $IsBuiltIn = $false

                    $Count++

                    $ConfigObject = [ORCACheckConfig]::new()

                    $ConfigObject.Object=$($AcceptedDomain.Name)

                    $ConfigObject.ConfigItem=$r.PolicyName

                    $ConfigObject.ConfigData=$r.Priority

                    If($Count -eq 1)

                    {

                        # First policy based on priority is a pass

                        $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Pass")

                    }

                    else

                    {

                        # Additional policies based on the priority should be listed as informational

                        $ConfigObject.InfoText = "There are multiple policies that apply to this domain, only the policy with the lowest priority will apply. This policy may not apply based on a lower priority."

                        $ConfigObject.SetResult([ORCAConfigLevel]::Informational,"Fail")

                    }    

                    $this.AddConfig($ConfigObject)

                }

            } 

            elseif($Rules.Count -eq 0)

            {

                <#

                    No policy is applying to this domain

                    For anti spam policies this is OK because we fall back to the default

                #>

                $ConfigObject = [ORCACheckConfig]::new()

                $ConfigObject.Object=$($AcceptedDomain.Name)

                $ConfigObject.ConfigItem="Default"

                $ConfigObject.ConfigData="Default"

                $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Pass")

                $this.AddConfig($ConfigObject)

            }

        }

    }

}

# SIG # Begin signature block

# MIImVwYJKoZIhvcNAQcCoIImSDCCJkQCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAIKEJ1vrXhuN5A

# JbG2kUBUt+Akjw3paTLgAaBYLAORnaCCC6YwggULMIID86ADAgECAhMzAAAFwlgA

# 087+f22BAAEAAAXCMA0GCSqGSIb3DQEBCwUAMHkxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xIzAhBgNVBAMTGk1pY3Jvc29mdCBUZXN0aW5nIFBD

# QSAyMDEwMB4XDTIzMDkyMTE4MTE0M1oXDTI0MDkxODE4MTE0M1owfDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdQ29kZSBTaWdu

# IFRlc3QgKERPIE5PVCBUUlVTVCkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK

# AoIBAQD5++3gGQURCZ5RFx3f6hxBcryv+l9JDcB/ue8Nf4lxtCZ3BYkCuFTxGzQs

# lXh4SBgmfcoDr8X9mqmYlAhGlQn5WdhIlIjY7cyO+Jj9qH6ir7kKmqnxX5UMl2e8

# 1Xd78imtyJHeK3X/mReHaJItcbdObmRrJeq1cJm2qgiadjJK9aFPIGTd/2jgBIMc

# G1LVd+lHU7fPU+wlvJshXoo7rj82PhSGoMqTN4s30oaUlIpKwhyn6eO7UIlD77Ez

# NikN8J35LSlUGAWR7UW/qBrlVM9JURkIsAFfHUdZbsCu0wB3dHMBru+oDim+X/R9

# ko+B0F3Me40uod5i5D8m8HqIazstAgMBAAGjggGHMIIBgzAOBgNVHQ8BAf8EBAMC

# B4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwHQYDVR0OBBYEFJfRokzB8QH6nZ8MnJQI

# ahPRxmYhMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQLExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xFjAUBgNVBAUTDTIzMDA3Mis1MDE1NjYwHwYDVR0jBBgwFoAUv2Wiq291

# o05FllcFzzmH9MAVHBwwXAYDVR0fBFUwUzBRoE+gTYZLaHR0cDovL3d3dy5taWNy

# b3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGVzdGluZyUyMFBDQSUy

# MDIwMTAoMSkuY3JsMGkGCCsGAQUFBwEBBF0wWzBZBggrBgEFBQcwAoZNaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUZXN0

# aW5nJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B

# AQsFAAOCAQEAMmCxC2x6fhzNJHnCk9zTlYQo0e/MzR5BHxJul6XfH7L2K+EOr+Wv

# wiAvkkA47zgupON7XKs+NQFkTQAAw/tgzpZ95d2KyRUxbwfik44uLSqvgVNlSDSk

# Ant8qiTj3+EhxYhcHQJwA4vz4Ow+rLIQOvPIHB0cOj1bJ/Z0olgCXfo/oORtXQe3

# 9M6dO7XvQ2i0SRvnfn95hodbpPWDmSvyHvZU5rHVLTBwyh9oTQ4v30P8eeAONxp6

# Sp6X7hLDy14Q0L4nfBeRFdf9M/DK6LjJ3bUWlYcqRpFwqMjAJQkW8RMtWuV8uSgD

# PAR/tnqsaUFRAILpmfqPUwgXIVGT0/89iDCCBpMwggR7oAMCAQICEzMAAAAtNXpG

# iMkHcdgAAAAAAC0wDQYJKoZIhvcNAQELBQAwgZAxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xOjA4BgNVBAMTMU1pY3Jvc29mdCBUZXN0aW5nIFJv

# b3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcNMjAxMjEwMjA0MzIwWhcN

# MzUwNjE3MjEwNDExWjB5MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSMwIQYDVQQDExpNaWNyb3NvZnQgVGVzdGluZyBQQ0EgMjAxMDCCASIwDQYJ

# KoZIhvcNAQEBBQADggEPADCCAQoCggEBAL88YIGrvuz/1xdj8qZC0RNinLAXzrpG

# GnsiLlVzmlS5xtTRypj+d0cNjp3wXsz4VO/yzyrUYvGpNAoE18UFhvIQ9U3Tlghm

# hdsCfRjc4nojp5opXa55GM8MY/Aa/4GpqUM/qQu5UfGzSDr8RC5fEcVWOv/KDs2I

# CMH9x9X1Pu/qThtyiyO9RTeeH3DBp8m4IHPt82w9iyEFz3cS/qHcB+kNW3gJbDJV

# EEfQN8jH9/pz/kY05FYWqDdkU9Y1+8OAto62hpGhENbBSvbjetQRCrLeLp4Ql+CB

# rhJdiAFdzKTEKFKcYPAK5oivS+lXiuyjDzceKfZdIdPX2l0OyU7bjW0CAwEAAaOC

# AfowggH2MA4GA1UdDwEB/wQEAwIBhjASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsG

# AQQBgjcVAgQWBBTqn18zttBfnq3rLabBArtAOMvntTAdBgNVHQ4EFgQUv2Wiq291

# o05FllcFzzmH9MAVHBwwVAYDVR0gBE0wSzBJBgRVHSAAMEEwPwYIKwYBBQUHAgEW

# M2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5

# Lmh0bTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAPBgNVHRMBAf8EBTADAQH/

# MB8GA1UdIwQYMBaAFKMBBH4wiDPruTGcyuuFdmf8ZbTRMFkGA1UdHwRSMFAwTqBM

# oEqGSGh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01p

# Y1Rlc1Jvb0NlckF1dF8yMDEwLTA2LTE3LmNybDCBjQYIKwYBBQUHAQEEgYAwfjBN

# BggrBgEFBQcwAoZBaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9N

# aWNUZXNSb29DZXJBdXRfMjAxMC0wNi0xNy5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6

# Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDANBgkqhkiG9w0BAQsFAAOCAgEA

# J7TQhbKezA+kKlNz1W3a1zEAyPb/Y8j2ARG1GJLa3LT5rybo/Ep5vcFnsIgDeWXP

# NTUFWI7igwaW9bp+EllQm+Dw1T2dCfO7Rs2HvXTid9BGBnoiGmkrZCy5izmADOqC

# JyKiMFciJNkhP6tpRrfDr8HGXrzZj5FWI5Op8iYuRHb0unIj0ZlvW0VkU+KVlPG2

# SEC/d/CxOJRzkAIsawEIlnrOUs6dlPORNJy3Wg6+cPyNvCf2dfuM1tTWqNaa1Qjq

# q6LJ6DVH1X9ZL7MH1txWNpdT4gGKfLBsjuexms7V3QaBDgXAy3nX3D62vfjS3RBd

# +jZBNIPvXW6JBWOysYVCfFqTIgpjeMo/SyhS70G3LRjCSWPRMBxYn5tqYGommnyh

# dRss/ja7icxBIKcrDKP3/QFQUP6gnT0EBhFqd0AyGnn+LbPUE8fkZgyggQzExS4B

# ZpoW7VGNCVoy5Cp+7KM/yyHA1JXv6eU4hQ+FYX2ZwHL2EB137rJZ8qfsroVswEpw

# EDZziDun3NSRSMJA5HDPpP07KXwGo8x6KEgMF5Kzlq40Q1esCNGMzFR6xMkNIWeT

# ZyF2y95a05Dj439zQbtZ2kjRGsknbkrQ2xVY1d016BDRJ2YroCSmEsJoc6GBzNZ4

# IqTeazXaiYiubpKehPCw84t5ef+13LSUGN/mYBwyaLIxghoHMIIaAwIBATCBkDB5

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSMwIQYDVQQDExpN

# aWNyb3NvZnQgVGVzdGluZyBQQ0EgMjAxMAITMwAABcJYANPO/n9tgQABAAAFwjAN

# BglghkgBZQMEAgEFAKCBsDAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgor

# BgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQggsYlbEmx

# lgJ8xOmFPC2g4idZ+BboScViqJ2oibHNj60wRAYKKwYBBAGCNwIBDDE2MDSgFIAS

# AE0AaQBjAHIAbwBzAG8AZgB0oRyAGmh0dHBzOi8vd3d3Lm1pY3Jvc29mdC5jb20g

# MA0GCSqGSIb3DQEBAQUABIIBAPdXw7MDQ0bVNRfqnQ3chSiegyblu6kGAwRd0XuK

# F2jewAIP9K0zwzx7+ym2OAf8Z4WX5+JGhQpROKmnR5UxwwEsnkCE/WhuRes45jMw

# kUofM3dWnWHuWx3g+TPO1kipnHxOBMK/O0nFz0mYhpWr5kf5KYevqAvqkewftM3H

# mAmbcYdrNp1/qBwk7Q3ewKn6Ds0Wypqsvrc8ef0lZpvG6warzhE2GJqvBG2MRjOp

# wzuUj+7QqhU/fHh3MIiNh13mekGwbAE6rjYuuF2hxXpOjB5okpbOgpl3vRR/RXDz

# sNQtp0UzYAcRgscqxos2A6AXTzAySpi6iXr4+KzcrNxvGqahgheUMIIXkAYKKwYB

# BAGCNwMDATGCF4Awghd8BgkqhkiG9w0BBwKgghdtMIIXaQIBAzEPMA0GCWCGSAFl

# AwQCAQUAMIIBUgYLKoZIhvcNAQkQAQSgggFBBIIBPTCCATkCAQEGCisGAQQBhFkK

# AwEwMTANBglghkgBZQMEAgEFAAQgr36vJwxRUHQ7qasZ0BrLtIvhO8RHxtW2BjK2

# 7eGkKmYCBmVWyhOAbxgTMjAyMzEyMDQwNTIyNDcuMzIxWjAEgAIB9KCB0aSBzjCB

# yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc

# TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU

# U1MgRVNOOjg5MDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T

# dGFtcCBTZXJ2aWNloIIR6jCCByAwggUIoAMCAQICEzMAAAHTHTKaFztAMHMAAQAA

# AdMwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw

# HhcNMjMwNTI1MTkxMjI0WhcNMjQwMjAxMTkxMjI0WjCByzELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJp

# Y2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjg5MDAtMDVF

# MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtI6rkzeINcW4VwnPDFfnTrvF

# KnNym22lrYub3bAFjNQ+H1UovuDVoBrT/wVUWK1Y9qFZ5zMtHms4nUDieLlLHATG

# zx2jMWjaYG0RvRREERZ3AFKbVpyPlT5edzw+jDy9Ms/HBwtmQ98HheMPrjAwBpy9

# +gZJtLKzjV75zPXjb5xuXY6KRKoh6HVkmrkcnuLn7QUdrE8Bh1ZsSrtBkuHzvOzY

# GyeFRsyAkcmV8Pfkb71zBv44TNdR/AFisyqZ9KDBptTEjHjby1Fm99R0mXpMfzQR

# LV75naO+TldN9DR4CF4ocWBHkoFCMX2yOTpoDKv1QwkKdq/38v+TVWtyowkKDapp

# hDOqKwCdlyo2IRCc6KeJ1gnCfe9FOq16QTyuFxjSgRYYS2u+EzP8rExSKxFziRtX

# 1Ll33HVm9BMdBQHk06+oJpgqq3iTXozR33xv1RHheyzb1KrmBUZ3YglIYMutuK1u

# qbXJ0E4kXxNEC/4CxeNZANr2TGM3HNehImF0EAWhd1wLTHbodXaV6kzz0BDtzLOf

# +QfyrY4UrKTHD1L0b29+SFjfqvi/sxMIqYZpwhhU7sjjKnOUBNK7hjdzMdFb+sf4

# XDpml8ax0BqTSiOT5+/WJPPQHJalNplx89WR1qfigXNw+lT+y99iZcMYScd2rGtP

# Ocb9Fzw+fDEVtVmhr2kCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTSxyCGuBQA+PeM

# 9+Yb8wpptONeYjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV

# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny

# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI

# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy

# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI

# MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAQGJYWKFEPuGmkOeD

# BTXxOhMvL+K1r/i7Q0UozDNl/YOLmpwPXFO1YrXaSD1f8xOr+ABIXv1Z4NlAEeao

# 9kld7M/nw6jelS1lGbCkdEEdiWFypxT0VY9ens2cj+83eR/CLL7HBHKJ3l/mkRxd

# MRhjOLQy60vOL4+kZtG4KFi11pzE2eZD+KMJxpptC7JiJ7rtBiqw2Z5Hk1Zn5PIE

# 08vHdctz9iGHNlCOIiWFwrkmigrhXjtMKsrHKb4RkEp6NVwBSt6Gsm7g9ZkqEMU/

# au+/iwBhkG4kqBpYE40EGsmLEGj3BtUOEDcDjRqpAEgmU28yZZ5pB4JFpSki07pT

# mopViGOIUtRGfsPrF9ASfS3DNeNoedTpVyzKDy6cxwG+sdtoqWgCeSn97shWjils

# OIZ7tM1rPjyj3dfdp3XitqIFn2hXX5xL5Fgwx9naC/mQOUAXfF54LP5ndwa55Zdg

# ZGf4ImRP3ysqJa4kd2kwFgsRQlyiJfwpbtm254/an1WC6QFUBHD2gn0wH+zmQZV5

# pbhE76tWP0jYcQujCdUCwp5F0iP/4l2KZkSk+/N0CkYJqP+M7Y97i/We8W2xsSEo

# Pj9B00V9ecuE0XgWztkRTcgo/PIDjkZPrME9ZGil1HxgeM44OV7pcUm8t7izcUHm

# xOkxN3ACtPn52OVKR2hHZcOHu4owggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ

# AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1

# V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9

# alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv

# Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928

# jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t

# pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe

# HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o

# ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C

# vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug

# poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps

# xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C

# AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE

# FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT

# NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o

# dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD

# AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW

# y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t

# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt

# MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y

# My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc

# FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT

# Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j

# VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3

# +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR

# sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw

# ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b

# RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx

# aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX

# HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0

# W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0

# HVUzWLOhcGbyoYIDTTCCAjUCAQEwgfmhgdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh

# IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo4OTAwLTA1RTAt

# RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEB

# MAcGBSsOAwIaAxUAUsdt3DHDQdSEMLPy2JEV2uyOSbCggYMwgYCkfjB8MQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv

# ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAOkXsYIwIhgP

# MjAyMzEyMDQwMjAxMzhaGA8yMDIzMTIwNTAyMDEzOFowdDA6BgorBgEEAYRZCgQB

# MSwwKjAKAgUA6RexggIBADAHAgEAAgILsjAHAgEAAgITazAKAgUA6RkDAgIBADA2

# BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIB

# AAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQCKZcpSwcxS1IeaKqYt4HJrOXTNK5Lf

# 7PIkRDBTuI1zzkYjxome0iEB/OyiFIu/UWFu2pDb0weNA9PgBkmDwNI5O2A4XozM

# 3qPDzs/9i1Iqyr4GYepHvHyDc91YKMN5M7QPgPjZvtCDkMuI1WoFQzz0IXweh162

# 89ZxulHoo53sIkJR47bwI0u+dHWmNVE/dNHZ96mFvkL1Gla8isP9sqr73XK6mle6

# YoPVZ3omkZU2EHieNDkgykb5/3JMEHNUcvjJQCBBUBMi2dHpI8I89CawsYKdmw2H

# Dt3EpjCjDSMyHezqrInj2bWUX/J18soPraAdh1b1QqjdDyVfys35Br20MYIEDTCC

# BAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO

# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm

# MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAHTHTKa

# FztAMHMAAQAAAdMwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsq

# hkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgjUFQcuCikcSTnaQ3bEDilweU3TWq

# tsTIk6eWads7d0MwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCSZvTqxODu

# T1gNSmhWs7a/bj/eq0IBJ/rYBrWN8Tqq9TCBmDCBgKR+MHwxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQSAyMDEwAhMzAAAB0x0ymhc7QDBzAAEAAAHTMCIEIFjjc8ErV4fY

# SZKWWstFIqbSfpJthrlVSvt2s08iLbEFMA0GCSqGSIb3DQEBCwUABIICAIrIkejR

# UwNDJKuw3YiVcSt2on6UfmaxRB1EJwTnp5FbW6qFiZpcTLihvVqsLkni9U1QmwHD

# nV7ABBt/LyQflgZbERDjqR6oHJRAZRzKRKY8wVaCUfctAfFiEz9JFhpURaOB+X/z

# PSQHSAze4G2AqxD1wo1Fvn3L32IXbgoAl4dwt0L/kJuCo+VSbzbYYEParh5a5k9L

# sgEaQjy+BVkr39/siRFrYe9q1qsOUvx2AWih3q4xEdm52OudxilRd34+2g1K6laY

# NlKjVdi8YawiFEMPU3MMP1WOZxFRG0MQ/jpHG6fvHj94xUN2tuQXiQ++1dvSYiO3

# xjx8CpQWXQJ6NYp+b6/W8XYgMuFfUUF4roiY2BIGn+23aiPit7YUYm+/kFMcqKU6

# GWmO2AIlEYPqOuxMJlsaXHjKk4/1TB85fsW7rU3dEJrqAFkOBIrgOwD11wHWo256

# f4nmXqA8KNSGvWS4WxBlv7xwAB3KyBxMrqITgpP34k91WfSRFgf1A/KU2GcI/ZWC

# wHKt+x5Nw/4E0L9Gzhld855HumqfbdeF+EVU+lHPxT3Ql1pKgQAqeOD5ZDoCUKIS

# 1A4olE/gik9iEjutSSorEJ+5eZv3IyEXLt2Tb3J/gFC7iuQ5P2//OLRL54TL0rid

# uFVPGhrQo71lZSTfhv0aRnK6QiRMVmBwRx80

# SIG # End signature block