Okta.PowerShell

1.0.3

Private/OktaHttpSignatureAuth.ps1

                                #

# Okta Management

# Allows customers to easily access the Okta Management APIs

# Version: 3.0.0

# Contact: devex-public@okta.com

# Generated by OpenAPI Generator: https://openapi-generator.tech

#

<#

.SYNOPSIS

    Gets the headers for HTTP signature.

.DESCRIPTION

    Gets the headers for the http signature.

.PARAMETER Method

   HTTP method

.PARAMETER UriBuilder

    UriBuilder for url and query parameter

.PARAMETER Body

    Request body

.OUTPUTS

    Hashtable

#>

function Get-OktaHttpSignedHeader {

    param(

        [string]$Method,

        [System.UriBuilder]$UriBuilder,

        [string]$Body,

        [hashtable]$RequestHeader

    )

    $HEADER_REQUEST_TARGET = '(request-target)'

    # The time when the HTTP signature was generated.

    $HEADER_CREATED = '(created)'

    # The time when the HTTP signature expires. The API server should reject HTTP requests

    # that have expired.

    $HEADER_EXPIRES = '(expires)'

    # The 'Host' header.

    $HEADER_HOST = 'Host'

    # The 'Date' header.

    $HEADER_DATE = 'Date'

    # When the 'Digest' header is included in the HTTP signature, the client automatically

    # computes the digest of the HTTP request body, per RFC 3230.

    $HEADER_DIGEST = 'Digest'

    # The 'Authorization' header is automatically generated by the client. It includes

    # the list of signed headers and a base64-encoded signature.

    $HEADER_AUTHORIZATION = 'Authorization'

    #Hash table to store singed headers

    $HttpSignedRequestHeader = @{ }

    $HttpSignatureHeader = @{ }

    $TargetHost = $UriBuilder.Host

    $httpSigningConfiguration = Get-OktaConfigurationHttpSigning

    $Digest = $null

    #get the body digest

    $bodyHash = Get-OktaStringHash -String $Body -HashName $httpSigningConfiguration.HashAlgorithm

    if ($httpSigningConfiguration.HashAlgorithm -eq "SHA256") {

        $Digest = [String]::Format("SHA-256={0}", [Convert]::ToBase64String($bodyHash))

    } elseif ($httpSigningConfiguration.HashAlgorithm -eq "SHA512") {

        $Digest = [String]::Format("SHA-512={0}", [Convert]::ToBase64String($bodyHash))

    }

    $dateTime = Get-Date

    #get the date in UTC

    $currentDate = $dateTime.ToUniversalTime().ToString("r")

    foreach ($headerItem in $httpSigningConfiguration.HttpSigningHeader) {

        if ($headerItem -eq $HEADER_REQUEST_TARGET) {

            $requestTargetPath = [string]::Format("{0} {1}{2}", $Method.ToLower(), $UriBuilder.Path, $UriBuilder.Query)

            $HttpSignatureHeader.Add($HEADER_REQUEST_TARGET, $requestTargetPath)

        } elseif ($headerItem -eq $HEADER_CREATED) {

            $created = Get-OktaUnixTime -Date $dateTime -TotalTime TotalSeconds

            $HttpSignatureHeader.Add($HEADER_CREATED, $created)

        } elseif ($headerItem -eq $HEADER_EXPIRES) {

            $expire = $dateTime.AddSeconds($httpSigningConfiguration.SignatureValidityPeriod)

            $expireEpocTime = Get-OktaUnixTime -Date $expire -TotalTime TotalSeconds

            $HttpSignatureHeader.Add($HEADER_EXPIRES, $expireEpocTime)

        } elseif ($headerItem -eq $HEADER_HOST) {

            $HttpSignedRequestHeader[$HEADER_HOST] = $TargetHost

            $HttpSignatureHeader.Add($HEADER_HOST.ToLower(), $TargetHost)

        } elseif ($headerItem -eq $HEADER_DATE) {

            $HttpSignedRequestHeader[$HEADER_DATE] = $currentDate

            $HttpSignatureHeader.Add($HEADER_DATE.ToLower(), $currentDate)

        } elseif ($headerItem -eq $HEADER_DIGEST) {

            $HttpSignedRequestHeader[$HEADER_DIGEST] = $Digest

            $HttpSignatureHeader.Add($HEADER_DIGEST.ToLower(), $Digest)

        } elseif($RequestHeader.ContainsKey($headerItem)) {

            $HttpSignatureHeader.Add($headerItem.ToLower(), $RequestHeader[$headerItem])

        } else {

            throw "Cannot sign HTTP request. Request does not contain the $headerItem header."

        }

    }

    # header's name separated by space

    $headersKeysString = $HttpSignatureHeader.Keys -join " "

    $headerValuesList = @()

    foreach ($item in $HttpSignatureHeader.GetEnumerator()) {

        $headerValuesList += [string]::Format("{0}: {1}", $item.Name, $item.Value)

    }

    #Concatenate headers value separated by new line

    $headerValuesString = $headerValuesList -join "`n"

    #Gets the hash of the headers value

    $signatureHashString = Get-OktaStringHash -String $headerValuesString -HashName $httpSigningConfiguration.HashAlgorithm

    #Gets the Key type to select the correct signing algorithm

    $KeyType = Get-OktaKeyTypeFromFile -KeyFilePath $httpSigningConfiguration.KeyFilePath

    if ($keyType -eq "RSA") {

        $headerSignatureStr = Get-OktaRSASignature -PrivateKeyFilePath $httpSigningConfiguration.KeyFilePath `

            -DataToSign $signatureHashString `

            -HashAlgorithmName $httpSigningConfiguration.HashAlgorithm `

            -KeyPassPhrase $httpSigningConfiguration.KeyPassPhrase `

            -SigningAlgorithm $httpSigningConfiguration.SigningAlgorithm

    } elseif ($KeyType -eq "EC") {

        $headerSignatureStr = Get-OktaECDSASignature -ECKeyFilePath $httpSigningConfiguration.KeyFilePath `

            -DataToSign $signatureHashString `

            -HashAlgorithmName $httpSigningConfiguration.HashAlgorithm `

            -KeyPassPhrase $httpSigningConfiguration.KeyPassPhrase

    }

    #Deprecated

    <#$cryptographicScheme = Get-OktaCryptographicScheme -SigningAlgorithm $httpSigningConfiguration.SigningAlgorithm `

                                                 -HashAlgorithm $httpSigningConfiguration.HashAlgorithm

    #>

    $cryptographicScheme = "hs2019"

    $authorizationHeaderValue = [string]::Format("Signature keyId=""{0}"",algorithm=""{1}""",

        $httpSigningConfiguration.KeyId, $cryptographicScheme)

    if ($HttpSignatureHeader.ContainsKey($HEADER_CREATED)) {

        $authorizationHeaderValue += [string]::Format(",created={0}", $HttpSignatureHeader[$HEADER_CREATED])

    }

    if ($HttpSignatureHeader.ContainsKey($HEADER_EXPIRES)) {

        $authorizationHeaderValue += [string]::Format(",expires={0}", $HttpSignatureHeader[$HEADER_EXPIRES])

    }

    $authorizationHeaderValue += [string]::Format(",headers=""{0}"",signature=""{1}""",

        $headersKeysString , $headerSignatureStr)

    $HttpSignedRequestHeader[$HEADER_AUTHORIZATION] = $authorizationHeaderValue

    return $HttpSignedRequestHeader

}

<#

.SYNOPSIS

    Gets the RSA signature

.DESCRIPTION

    Gets the RSA signature for the http signing

.PARAMETER PrivateKeyFilePath

    Specify the API key file path

.PARAMETER DataToSign

    Specify the data to sign

.PARAMETER HashAlgorithmName

    HashAlgorithm to calculate the hash

.PARAMETER KeyPassPhrase

    KeyPassPhrase for the encrypted key

.OUTPUTS

    Base64String

#>

function Get-OktaRSASignature {

    Param(

        [string]$PrivateKeyFilePath,

        [byte[]]$DataToSign,

        [string]$HashAlgorithmName,

        [string]$SigningAlgorithm,

        [securestring]$KeyPassPhrase

    )

    try {

        if ($hashAlgorithmName -eq "sha256") {

            $hashAlgo = [System.Security.Cryptography.HashAlgorithmName]::SHA256

        } elseif ($hashAlgorithmName -eq "sha512") {

            $hashAlgo = [System.Security.Cryptography.HashAlgorithmName]::SHA512

        }

        if ($PSVersionTable.PSVersion.Major -ge 7) {

            $ecKeyHeader = "-----BEGIN RSA PRIVATE KEY-----"

            $ecKeyFooter = "-----END RSA PRIVATE KEY-----"

            $keyStr = Get-Content -Path $PrivateKeyFilePath -Raw

            $ecKeyBase64String = $keyStr.Replace($ecKeyHeader, "").Replace($ecKeyFooter, "").Trim()

            $keyBytes = [System.Convert]::FromBase64String($ecKeyBase64String)

            $rsa = [System.Security.Cryptography.RSA]::Create()

            [int]$bytCount = 0

            $rsa.ImportRSAPrivateKey($keyBytes, [ref] $bytCount)

            if ($SigningAlgorithm -eq "RSASSA-PSS") {

                $signedBytes = $rsa.SignHash($DataToSign, $hashAlgo, [System.Security.Cryptography.RSASignaturePadding]::Pss)

            } else {

                $signedBytes = $rsa.SignHash($DataToSign, $hashAlgo, [System.Security.Cryptography.RSASignaturePadding]::Pkcs1)

            }

        } else {

            $rsa_provider_path = Join-Path -Path $PSScriptRoot -ChildPath "OktaRSAEncryptionProvider.cs"

            $rsa_provider_sourceCode = Get-Content -Path $rsa_provider_path -Raw

            Add-Type -TypeDefinition $rsa_provider_sourceCode

            [System.Security.Cryptography.RSA]$rsa = [RSAEncryption.RSAEncryptionProvider]::GetRSAProviderFromPemFile($PrivateKeyFilePath, $KeyPassPhrase)

            if ($SigningAlgorithm -eq "RSASSA-PSS") {

                throw "$SigningAlgorithm is not supported on $($PSVersionTable.PSVersion)"

            } else {

                $signedBytes = $rsa.SignHash($DataToSign, $hashAlgo, [System.Security.Cryptography.RSASignaturePadding]::Pkcs1)

            }

        }

        $signedString = [Convert]::ToBase64String($signedBytes)

        return $signedString

    } catch {

        throw $_

    }

}

<#

.SYNOPSIS

    Gets the ECDSA signature

.DESCRIPTION

    Gets the ECDSA signature for the http signing

.PARAMETER PrivateKeyFilePath

    Specify the API key file path

.PARAMETER DataToSign

    Specify the data to sign

.PARAMETER HashAlgorithmName

    HashAlgorithm to calculate the hash

.PARAMETER KeyPassPhrase

    KeyPassPhrase for the encrypted key

.OUTPUTS

    Base64String

#>

function Get-OktaECDSASignature {

    param(

        [Parameter(Mandatory = $true)]

        [string]$ECKeyFilePath,

        [Parameter(Mandatory = $true)]

        [byte[]]$DataToSign,

        [Parameter(Mandatory = $false)]

        [String]$HashAlgorithmName,

        [Parameter(Mandatory = $false)]

        [securestring]$KeyPassPhrase

    )

    if (!(Test-Path -Path $ECKeyFilePath)) {

        throw "key file path does not exist."

    }

    if ($PSVersionTable.PSVersion.Major -lt 7) {

        throw "ECDSA key is not supported on PowerShell version $($PSVersionTable.PSVersion), Use PowerShell v7.0 and above"

    }

    $ecKeyHeader = "-----BEGIN EC PRIVATE KEY-----"

    $ecKeyFooter = "-----END EC PRIVATE KEY-----"

    $keyStr = Get-Content -Path $ECKeyFilePath -Raw

    $ecKeyBase64String = $keyStr.Replace($ecKeyHeader, "").Replace($ecKeyFooter, "").Trim()

    $keyBytes = [System.Convert]::FromBase64String($ecKeyBase64String)

    $ecdsa = [System.Security.Cryptography.ECDsa]::Create()

    [int]$bytCount =0

    if (![string]::IsNullOrEmpty($KeyPassPhrase)) {

        $ecdsa.ImportEncryptedPkcs8PrivateKey($KeyPassPhrase,$keyBytes,[ref]$bytCount)

    } else {

        $ecdsa.ImportPkcs8PrivateKey($keyBytes,[ref]$bytCount)

    }

    $signedBytes = $ecdsa.SignHash($DataToSign)

    $derBytes =  ConvertTo-ECDSAANS1Format -RawBytes $signedBytes

    $signedString = [System.Convert]::ToBase64String($derBytes)

    return $signedString

}

<#

.Synopsis

    Gets the hash of string.

.Description

    Gets the hash of string

.Parameter String

    Specifies the string to calculate the hash

.Parameter HashName

    Specifies the hash name to calculate the hash, Accepted values are "SHA1", "SHA256" and "SHA512"

    It is recommended not to use "SHA1" to calculate the Hash

.Outputs

    String

#>

Function Get-OktaStringHash {

    param(

        [Parameter(Mandatory = $true)]

        [AllowEmptyString()]

        [string]$String,

        [Parameter(Mandatory = $true)]

        [ValidateSet("SHA1", "SHA256", "SHA512")]

        $HashName

    )

    $hashAlgorithm = [System.Security.Cryptography.HashAlgorithm]::Create($HashName)

    $hashAlgorithm.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($String))

}

<#

.Synopsis

    Gets the Unix time.

.Description

    Gets the Unix time

.Parameter Date

    Specifies the date to calculate the unix time

.Parameter ToTalTime

    Specifies the total time , Accepted values are "TotalDays", "TotalHours", "TotalMinutes", "TotalSeconds" and "TotalMilliseconds"

.Outputs

Integer

#>

function Get-OktaUnixTime {

    param(

        [Parameter(Mandatory = $true)]

        [DateTime]$Date,

        [Parameter(Mandatory = $false)]

        [ValidateSet("TotalDays", "TotalHours", "TotalMinutes", "TotalSeconds", "TotalMilliseconds")]

        [string]$TotalTime = "TotalSeconds"

    )

    $date1 = Get-Date -Date "01/01/1970"

    $timespan = New-TimeSpan -Start $date1 -End $Date

    switch ($TotalTime) {

        "TotalDays" { [int]$timespan.TotalDays }

        "TotalHours" { [int]$timespan.TotalHours }

        "TotalMinutes" { [int]$timespan.TotalMinutes }

        "TotalSeconds" { [int]$timespan.TotalSeconds }

        "TotalMilliseconds" { [int]$timespan.TotalMilliseconds }

    }

}

function Get-OktaCryptographicScheme {

    param(

        [Parameter(Mandatory = $true)]

        [string]$SigningAlgorithm,

        [Parameter(Mandatory = $true)]

        [string]$HashAlgorithm

    )

    $rsaSignatureType = @("RSASSA-PKCS1-v1_5", "RSASSA-PSS")

    $SigningAlgorithm = $null

    if ($rsaSignatureType -contains $SigningAlgorithm) {

        switch ($HashAlgorithm) {

            "sha256" { $SigningAlgorithm = "rsa-sha256" }

            "sha512" { $SigningAlgorithm = "rsa-sha512" }

        }

    }

    return $SigningAlgorithm

}

<#

.Synopsis

    Gets the key type from the pem file.

.Description

    Gets the key type from the pem file.

.Parameter KeyFilePath

    Specifies the key file path (pem file)

.Outputs

String

#>

function Get-OktaKeyTypeFromFile {

    param(

        [Parameter(Mandatory = $true)]

        [string]$KeyFilePath

    )

    if (-not(Test-Path -Path $KeyFilePath)) {

        throw "Key file path does not exist."

    }

    $ecPrivateKeyHeader = "BEGIN EC PRIVATE KEY"

    $ecPrivateKeyFooter = "END EC PRIVATE KEY"

    $rsaPrivateKeyHeader = "BEGIN RSA PRIVATE KEY"

    $rsaPrivateFooter = "END RSA PRIVATE KEY"

    $pkcs8Header = "BEGIN PRIVATE KEY"

    $pkcs8Footer = "END PRIVATE KEY"

    $keyType = $null

    $key = Get-Content -Path $KeyFilePath

    if ($key[0] -match $rsaPrivateKeyHeader -and $key[$key.Length - 1] -match $rsaPrivateFooter) {

        $KeyType = "RSA"

    } elseif ($key[0] -match $ecPrivateKeyHeader -and $key[$key.Length - 1] -match $ecPrivateKeyFooter) {

        $keyType = "EC"

    } elseif ($key[0] -match $ecPrivateKeyHeader -and $key[$key.Length - 1] -match $ecPrivateKeyFooter) {

        <#this type of key can hold many type different types of private key, but here due lack of pem header

        Considering this as EC key

        #>

        #TODO :- update the key based on oid

        $keyType = "EC"

    } else {

        throw "Either the key is invalid or key is not supported"

    }

    return $keyType

}

<#

.Synopsis

    Converts sequence of R and S bytes to ANS1 format for ECDSASignature.

.Description

    Converts sequence of R and S bytes to ANS1 format for ECDSASignature.

.Parameter RawBytes[]

    Specifies the R and S bytes of ECDSA signature.

.Outputs

    Byte[]

#>

function ConvertTo-ECDSAANS1Format{

    Param(

        [Parameter(Mandatory = $true)]

        [byte[]]$RawBytes

    )

    $derLength = 68 #default length for ECDSA code signing bit 0x44

    $rbytesLength = 32 #R length 0x20

    $sbytesLength = 32 #S length 0x20

    [byte[]]$rBytes = $signedBytes[0..31]

    [byte[]]$sBytes = $signedBytes[32..63]

    if($rBytes[0] -gt 0x7F){

        $derLength++

        $rbytesLength++

        $rBytes = [byte[]]@(0x00) + $rBytes

    }

    if($sBytes[0] -gt 0x7F){

        $derLength++

        $sbytesLength++

        $sBytes = [byte[]]@(0x00) + $sBytes

    }

    [byte[]]$derBytes = @()

    $derBytes += 48  # start of the sequence 0x30

    $derBytes += $derLength  # total length r length, type and r bytes

    $derBytes += 2 # tag for integer

    $derBytes += $rbytesLength # length of r

    $derBytes += $rBytes

    $derBytes += 2 #tag for integer

    $derBytes += $sbytesLength #length of s

    $derBytes += $sBytes

    return $derBytes

}

# SIG # Begin signature block

# MIIoFwYJKoZIhvcNAQcCoIIoCDCCKAQCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD/yj7cMxXXYYuN

# 9iUtNPftCc5kZQynvwONjP/hJ24+iaCCIRowggWNMIIEdaADAgECAhAOmxiO+dAt

# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV

# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa

# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E

# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy

# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF

# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1

# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB

# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR

# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6

# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB

# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S

# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x

# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB

# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP

# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC

# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp

# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB

# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc

# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov

# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy

# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW

# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF

# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z

# twGpn1eqXijiuZQwggauMIIElqADAgECAhAHNje3JFR82Ees/ShmKl5bMA0GCSqG

# SIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMx

# GTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRy

# dXN0ZWQgUm9vdCBHNDAeFw0yMjAzMjMwMDAwMDBaFw0zNzAzMjIyMzU5NTlaMGMx

# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMy

# RGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1NiBUaW1lU3RhbXBpbmcg

# Q0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGhjUGSbPBPXJJUVXH

# JQPE8pE3qZdRodbSg9GeTKJtoLDMg/la9hGhRBVCX6SI82j6ffOciQt/nR+eDzMf

# UBMLJnOWbfhXqAJ9/UO0hNoR8XOxs+4rgISKIhjf69o9xBd/qxkrPkLcZ47qUT3w

# 1lbU5ygt69OxtXXnHwZljZQp09nsad/ZkIdGAHvbREGJ3HxqV3rwN3mfXazL6IRk

# tFLydkf3YYMZ3V+0VAshaG43IbtArF+y3kp9zvU5EmfvDqVjbOSmxR3NNg1c1eYb

# qMFkdECnwHLFuk4fsbVYTXn+149zk6wsOeKlSNbwsDETqVcplicu9Yemj052FVUm

# cJgmf6AaRyBD40NjgHt1biclkJg6OBGz9vae5jtb7IHeIhTZgirHkr+g3uM+onP6

# 5x9abJTyUpURK1h0QCirc0PO30qhHGs4xSnzyqqWc0Jon7ZGs506o9UD4L/wojzK

# QtwYSH8UNM/STKvvmz3+DrhkKvp1KCRB7UK/BZxmSVJQ9FHzNklNiyDSLFc1eSuo

# 80VgvCONWPfcYd6T/jnA+bIwpUzX6ZhKWD7TA4j+s4/TXkt2ElGTyYwMO1uKIqjB

# Jgj5FBASA31fI7tk42PgpuE+9sJ0sj8eCXbsq11GdeJgo1gJASgADoRU7s7pXche

# MBK9Rp6103a50g5rmQzSM7TNsQIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB

# /wIBADAdBgNVHQ4EFgQUuhbZbU2FL3MpdpovdYxqII+eyG8wHwYDVR0jBBgwFoAU

# 7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoG

# CCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29j

# c3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdp

# Y2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDig

# NqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9v

# dEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZI

# hvcNAQELBQADggIBAH1ZjsCTtm+YqUQiAX5m1tghQuGwGC4QTRPPMFPOvxj7x1Bd

# 4ksp+3CKDaopafxpwc8dB+k+YMjYC+VcW9dth/qEICU0MWfNthKWb8RQTGIdDAiC

# qBa9qVbPFXONASIlzpVpP0d3+3J0FNf/q0+KLHqrhc1DX+1gtqpPkWaeLJ7giqzl

# /Yy8ZCaHbJK9nXzQcAp876i8dU+6WvepELJd6f8oVInw1YpxdmXazPByoyP6wCeC

# RK6ZJxurJB4mwbfeKuv2nrF5mYGjVoarCkXJ38SNoOeY+/umnXKvxMfBwWpx2cYT

# gAnEtp/Nh4cku0+jSbl3ZpHxcpzpSwJSpzd+k1OsOx0ISQ+UzTl63f8lY5knLD0/

# a6fxZsNBzU+2QJshIUDQtxMkzdwdeDrknq3lNHGS1yZr5Dhzq6YBT70/O3itTK37

# xJV77QpfMzmHQXh6OOmc4d0j/R0o08f56PGYX/sr2H7yRp11LB4nLCbbbxV7HhmL

# NriT1ObyF5lZynDwN7+YAN8gFk8n+2BnFqFmut1VwDophrCYoCvtlUG3OtUVmDG0

# YgkPCr2B2RP+v6TR81fZvAT6gt4y3wSJ8ADNXcL50CN/AAvkdgIm2fBldkKmKYcJ

# RyvmfxqkhQ/8mJb2VVQrH4D6wPIOK+XW+6kvRBVK5xMOHds3OBqhK/bt1nz8MIIG

# sDCCBJigAwIBAgIQCK1AsmDSnEyfXs2pvZOu2TANBgkqhkiG9w0BAQwFADBiMQsw

# CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu

# ZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQw

# HhcNMjEwNDI5MDAwMDAwWhcNMzYwNDI4MjM1OTU5WjBpMQswCQYDVQQGEwJVUzEX

# MBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0

# ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMIICIjAN

# BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1bQvQtAorXi3XdU5WRuxiEL1M4zr

# PYGXcMW7xIUmMJ+kjmjYXPXrNCQH4UtP03hD9BfXHtr50tVnGlJPDqFX/IiZwZHM

# gQM+TXAkZLON4gh9NH1MgFcSa0OamfLFOx/y78tHWhOmTLMBICXzENOLsvsI8Irg

# nQnAZaf6mIBJNYc9URnokCF4RS6hnyzhGMIazMXuk0lwQjKP+8bqHPNlaJGiTUyC

# EUhSaN4QvRRXXegYE2XFf7JPhSxIpFaENdb5LpyqABXRN/4aBpTCfMjqGzLmysL0

# p6MDDnSlrzm2q2AS4+jWufcx4dyt5Big2MEjR0ezoQ9uo6ttmAaDG7dqZy3SvUQa

# khCBj7A7CdfHmzJawv9qYFSLScGT7eG0XOBv6yb5jNWy+TgQ5urOkfW+0/tvk2E0

# XLyTRSiDNipmKF+wc86LJiUGsoPUXPYVGUztYuBeM/Lo6OwKp7ADK5GyNnm+960I

# HnWmZcy740hQ83eRGv7bUKJGyGFYmPV8AhY8gyitOYbs1LcNU9D4R+Z1MI3sMJN2

# FKZbS110YU0/EpF23r9Yy3IQKUHw1cVtJnZoEUETWJrcJisB9IlNWdt4z4FKPkBH

# X8mBUHOFECMhWWCKZFTBzCEa6DgZfGYczXg4RTCZT/9jT0y7qg0IU0F8WD1Hs/q2

# 7IwyCQLMbDwMVhECAwEAAaOCAVkwggFVMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD

# VR0OBBYEFGg34Ou2O/hfEYb7/mF7CIhl9E5CMB8GA1UdIwQYMBaAFOzX44LScV1k

# TN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcD

# AzB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj

# ZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t

# L0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYyaHR0

# cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcmww

# HAYDVR0gBBUwEzAHBgVngQwBAzAIBgZngQwBBAEwDQYJKoZIhvcNAQEMBQADggIB

# ADojRD2NCHbuj7w6mdNW4AIapfhINPMstuZ0ZveUcrEAyq9sMCcTEp6QRJ9L/Z6j

# fCbVN7w6XUhtldU/SfQnuxaBRVD9nL22heB2fjdxyyL3WqqQz/WTauPrINHVUHmI

# moqKwba9oUgYftzYgBoRGRjNYZmBVvbJ43bnxOQbX0P4PpT/djk9ntSZz0rdKOtf

# JqGVWEjVGv7XJz/9kNF2ht0csGBc8w2o7uCJob054ThO2m67Np375SFTWsPK6Wrx

# oj7bQ7gzyE84FJKZ9d3OVG3ZXQIUH0AzfAPilbLCIXVzUstG2MQ0HKKlS43Nb3Y3

# LIU/Gs4m6Ri+kAewQ3+ViCCCcPDMyu/9KTVcH4k4Vfc3iosJocsL6TEa/y4ZXDlx

# 4b6cpwoG1iZnt5LmTl/eeqxJzy6kdJKt2zyknIYf48FWGysj/4+16oh7cGvmoLr9

# Oj9FpsToFpFSi0HASIRLlk2rREDjjfAVKM7t8RhWByovEMQMCGQ8M4+uKIw8y4+I

# Cw2/O/TOHnuO77Xry7fwdxPm5yg/rBKupS8ibEH5glwVZsxsDsrFhsP2JjMMB0ug

# 0wcCampAMEhLNKhRILutG4UI4lkNbcoFUCvqShyepf2gpx8GdOfy1lKQ/a+FSCH5

# Vzu0nAPthkX0tGFuv2jiJmCG6sivqf6UHedjGzqGVnhOMIIGvDCCBKSgAwIBAgIQ

# C65mvFq6f5WHxvnpBOMzBDANBgkqhkiG9w0BAQsFADBjMQswCQYDVQQGEwJVUzEX

# MBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0

# ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0YW1waW5nIENBMB4XDTI0MDkyNjAw

# MDAwMFoXDTM1MTEyNTIzNTk1OVowQjELMAkGA1UEBhMCVVMxETAPBgNVBAoTCERp

# Z2lDZXJ0MSAwHgYDVQQDExdEaWdpQ2VydCBUaW1lc3RhbXAgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBAL5qc5/2lSGrljC6W23mWaO16P2RHxjE

# iDtqmeOlwf0KMCBDEr4IxHRGd7+L660x5XltSVhhK64zi9CeC9B6lUdXM0s71EOc

# Re8+CEJp+3R2O8oo76EO7o5tLuslxdr9Qq82aKcpA9O//X6QE+AcaU/byaCagLD/

# GLoUb35SfWHh43rOH3bpLEx7pZ7avVnpUVmPvkxT8c2a2yC0WMp8hMu60tZR0Cha

# V76Nhnj37DEYTX9ReNZ8hIOYe4jl7/r419CvEYVIrH6sN00yx49boUuumF9i2T8U

# uKGn9966fR5X6kgXj3o5WHhHVO+NBikDO0mlUh902wS/Eeh8F/UFaRp1z5SnROHw

# SJ+QQRZ1fisD8UTVDSupWJNstVkiqLq+ISTdEjJKGjVfIcsgA4l9cbk8Smlzddh4

# EfvFrpVNnes4c16Jidj5XiPVdsn5n10jxmGpxoMc6iPkoaDhi6JjHd5ibfdp5uzI

# Xp4P0wXkgNs+CO/CacBqU0R4k+8h6gYldp4FCMgrXdKWfM4N0u25OEAuEa3Jyidx

# W48jwBqIJqImd93NRxvd1aepSeNeREXAu2xUDEW8aqzFQDYmr9ZONuc2MhTMizch

# NULpUEoA6Vva7b1XCB+1rxvbKmLqfY/M/SdV6mwWTyeVy5Z/JkvMFpnQy5wR14GJ

# cv6dQ4aEKOX5AgMBAAGjggGLMIIBhzAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/

# BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAgBgNVHSAEGTAXMAgGBmeBDAEE

# AjALBglghkgBhv1sBwEwHwYDVR0jBBgwFoAUuhbZbU2FL3MpdpovdYxqII+eyG8w

# HQYDVR0OBBYEFJ9XLAN3DigVkGalY17uT5IfdqBbMFoGA1UdHwRTMFEwT6BNoEuG

# SWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFJTQTQw

# OTZTSEEyNTZUaW1lU3RhbXBpbmdDQS5jcmwwgZAGCCsGAQUFBwEBBIGDMIGAMCQG

# CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wWAYIKwYBBQUHMAKG

# TGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFJT

# QTQwOTZTSEEyNTZUaW1lU3RhbXBpbmdDQS5jcnQwDQYJKoZIhvcNAQELBQADggIB

# AD2tHh92mVvjOIQSR9lDkfYR25tOCB3RKE/P09x7gUsmXqt40ouRl3lj+8QioVYq

# 3igpwrPvBmZdrlWBb0HvqT00nFSXgmUrDKNSQqGTdpjHsPy+LaalTW0qVjvUBhcH

# zBMutB6HzeledbDCzFzUy34VarPnvIWrqVogK0qM8gJhh/+qDEAIdO/KkYesLyTV

# OoJ4eTq7gj9UFAL1UruJKlTnCVaM2UeUUW/8z3fvjxhN6hdT98Vr2FYlCS7Mbb4H

# v5swO+aAXxWUm3WpByXtgVQxiBlTVYzqfLDbe9PpBKDBfk+rabTFDZXoUke7zPgt

# d7/fvWTlCs30VAGEsshJmLbJ6ZbQ/xll/HjO9JbNVekBv2Tgem+mLptR7yIrpaid

# RJXrI+UzB6vAlk/8a1u7cIqV0yef4uaZFORNekUgQHTqddmsPCEIYQP7xGxZBIhd

# mm4bhYsVA6G2WgNFYagLDBzpmk9104WQzYuVNsxyoVLObhx3RugaEGru+SojW4dH

# PoWrUhftNpFC5H7QEY7MhKRyrBe7ucykW7eaCuWBsBb4HOKRFVDcrZgdwaSIqMDi

# CLg4D+TPVgKx2EgEdeoHNHT9l3ZDBD+XgbF+23/zBjeCtxz+dL/9NWR6P2eZRi7z

# cEO1xwcdcqJsyz/JceENc2Sg8h3KeFUCS7tpFk7CrDqkMIIHXzCCBUegAwIBAgIQ

# DqgNBeeiJHzhtzSGhFvtMzANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVUzEX

# MBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0

# ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMB4XDTIy

# MDMxMDAwMDAwMFoXDTI1MDYwNjIzNTk1OVowZDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xEzARBgNVBAoT

# Ck9rdGEsIEluYy4xEzARBgNVBAMTCk9rdGEsIEluYy4wggIiMA0GCSqGSIb3DQEB

# AQUAA4ICDwAwggIKAoICAQC4DJYrxv2fEdmd1f+rsCQdBo2hQ5R2qvbGJLLgqgMB

# cfKbM3mZafhtPhYM0qtPSvc6i5UNiLwwBYwzHcfi5ce1wj6YZsgV4G+ywRpITALn

# 05DOyoW1ZJyam8snJkf7FwhWgsyECJT2Y3tE2guCIpFW7gwHZMZuh3cKsHRDUSNw

# 67V9DZ0chP5IHlJsl48+6a8nPbil90tmaL7WhxwhZxEoJbbOvWZWkztjSxg8P1JA

# Ch6o4ORBPiNudXavKjWg/iBPWwHYstZQhvhIFBvkEf58FHDdZSkm1CEmyxBoA96p

# As0v5l7f+0BIuU/3EcXDwB4na0obm3q+/p2PzLUrhWONvoMxEMp1qRKkKsQtavqD

# 9AX4FTexQQlLPu/KkNklQfZaMOYrmQ3HOWMxLQW/YvuaT+Wp3Vhwmi0OL4WlmPZt

# /eeOW2NM9zK9rn+CycW48AcVwGwfKDmOcx5qe0dHwGllpy1pU049W+NeZMpAny5n

# s3RE/nggYYtxlWM23UUC+R1z2oOqnuwdl4JjeMwXBTK1shr22oD2eXk6ZH3sJSBO

# vf9c6arPm+vjkjbltJqaJ+eu3oAAUTXA5uD4QnezT5UMtMRmw8wZX5pPZ9SO+fkh

# oJKq/FGq9bPgnlf7H/XMSP0mehd56Hom8paB86TsinyTu/SC+xJrSnXas7fZXQG0

# bwIDAQABo4ICBjCCAgIwHwYDVR0jBBgwFoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIw

# HQYDVR0OBBYEFBxHuEbYWCgQ74B6P4bgvcmuhSvtMA4GA1UdDwEB/wQEAwIHgDAT

# BgNVHSUEDDAKBggrBgEFBQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBPhk1odHRwOi8v

# Y3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JT

# QTQwOTZTSEEzODQyMDIxQ0ExLmNybDBToFGgT4ZNaHR0cDovL2NybDQuZGlnaWNl

# cnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0

# MjAyMUNBMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBBAEwKTAnBggrBgEFBQcCARYb

# aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGUBggrBgEFBQcBAQSBhzCBhDAk

# BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFwGCCsGAQUFBzAC

# hlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRD

# b2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAMBgNVHRMBAf8EAjAA

# MA0GCSqGSIb3DQEBCwUAA4ICAQAnXIG8EflhKts6IYViBy/o4p5yEMQJosTJ1nxX

# 8EA/Vvf353BSFN14Vlm71TnQElbUdxMSjOmq8WXnPUeYID+Oac5tHrVXsCzeENuz

# K4YPhPLpSj9w57Fnnzh8LbojJetsCTdDnBgjcWWFq9nJ+c5IwZJLP1v6/XPEyRsD

# 2VOc7pS/FTeXrP9a5dcn7b0g5Tyd5DTt1xNx1YVreGoGb44JAPwHBH4l7nWwFIDI

# UP4llJFYsgkQytb76hVhXQoaGHrhodSMLJzekglGgrGLSN9eN/6KoncPIMuTUlAI

# mDv7N3lQFKk6X2Bp3GbpR8lPFHKTIoDcs65d/mRIZorR+tPJj7uMinJ7BlNNfDYe

# sfUL3YGgBeEh/HfVhm/OGO1VH+/nZNbkMNQq1O/YwSiAB8hdskV+X3zJszKC6D5T

# ctBefTGjObJZHeMg189EhBDscxa/x4AELVtuOVoBMfJfKIebTDW8xBWwzMdu+rOA

# G3S8/BC+i9Cxp3bikdP+goL7YLKAbZ3nFFrrQekwP2EpAOm1MCAioJ5a5pgh7yZF

# nyP2Ty3F8//sjxGINKuxnXmAz4fHSrEn6qkkdEJ6o00A/q15NCl8Bt2IMzuCE3NV

# r2M47b/vh0z6ShPHJQusFAJSKVlGqdTmF+ZampU6KS5KfVVtpYhp9D6txn7yJEHS

# i67F2TGCBlMwggZPAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lD

# ZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IENvZGUgU2ln

# bmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDqgNBeeiJHzhtzSGhFvtMzAN

# BglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqG

# SIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3

# AgEVMC8GCSqGSIb3DQEJBDEiBCChcSCyr/Tl1VYKmSXwDybUC65g3dPjReI895Bv

# fwB0RzANBgkqhkiG9w0BAQEFAASCAgAuFIYiEfyYsv1NNxcoFvzV5D9i9LjVk+q0

# YQMLJHk8nWRGxfpXX4dTXeNyHaSrmLVnMwFL6XB0oT+4Wf1PvuGtDevieKmS3FB6

# 2LZp0+e8oF435T8b5Cj6xcC2Hx2yyZOU4egd91zl+Md1v7UQgMYxf9jN47v5TMvr

# HFqMkPAarpkbqg3iq60xp+9AB+0WHy3TSTAwA5DlaR6kemPWzt+XLseU4zjFczOw

# ywR2MVi78bNKZERLKU52X2ZCnMRrffagHnGKQgfGm3vKLf0FbnaMAHl/CGNub/b8

# dNhW6A470j2BEmM9SGm63OFtSyaEX41v2NRhhTie/WBZxRcdIBDkNBovTC11eQUV

# 1xcWNUiJBmuUeC7uXYg8hT/YFcWw3fJDTddbNH9dVUcPf7LmNWYEu1FTV0HVn4U+

# SORgf23YpG8n98a0EPT0kqXhpzrAa7VodwwaonZ9yuYJUZpN7NRTeXrxis6v84Hl

# UD9YtqNcYP+yeScbapuul8QEP/ME5pwnRbTaUp49Vx0IORA8iTqGz+zUfH3sAt1q

# eDQY8THslxmqxu73LRn0hXsBLoD6o+ceHZjgQdFykYUZw8FoOTaEhkmHAuYGfWwp

# eDT4QNlwZrogOpp0FgP8QAQy+T70dYHAV35fDwlM14AQ0cSGxkyn0EH/g73WD6s9

# k0HIQCaXC6GCAyAwggMcBgkqhkiG9w0BCQYxggMNMIIDCQIBATB3MGMxCzAJBgNV

# BAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNl

# cnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1NiBUaW1lU3RhbXBpbmcgQ0ECEAuu

# Zrxaun+Vh8b56QTjMwQwDQYJYIZIAWUDBAIBBQCgaTAYBgkqhkiG9w0BCQMxCwYJ

# KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNDEwMzAyMTAxNDVaMC8GCSqGSIb3

# DQEJBDEiBCB7ji0paDZf4QSGJyd/zHw83bOY0s0kzgR1z/mAc4VCSDANBgkqhkiG

# 9w0BAQEFAASCAgCGK8usZD7bZoRNWAQgpv6PufdcEGGeVA+p+FIgqpQ9PerH4/mA

# 69idOfAuh9HfGHh/EWdYJLelAFANpwUMzNdRAKEhGzxpcPlEplPryOOYq+VvQ+vc

# QGOlvw0qlodcXgF29CGmRkk6vmtIWh0Vvf1+CvFun9EFFcJ2SnbNyzXHJyb+Cb28

# zgwRBGQqnpdzS2BKQQUlKLiK9JW5mUhRZMkiO1lmLyl1j5zVTwkiJHtalJGhEcR3

# abom4MiGkBmAoxtMhSVUSzGI00BHQWy0qEelCavBCjTP/hRBW7Ny62F9te2COZHk

# QUIAZmYQ4VrLcQ8kYcMUNxitJCmFBeeddwDBh7OUwvuMqUJ1PMfD3Y8MuMVniKRQ

# eCBE7wGqvu6Iza6Evd1tgKFWzuOApmv6vyz6ZcxE30GLZxrc6S5jUBdIyLal7S4m

# xYt6zxiqXuqXvmde2or1qGUHZvW7I1h56uiUKKB71Dbiuy/4tse36jsKxohg88Ed

# wXspj4zxoQJh3HAt3Lulg9rXTcpFcv9Li0PxTwUXobFMQdhJa8A2DEJrUKuM4Btl

# OLy3G0OzyLcbElKw2DdsV41XXEK3QHQH1cokdPtZVxNzuUGdiTluWxCN6ZLIUFaf

# BPdvg+cRZ00eUEijI1x6etaO0Yonbeu1l4bfsusbxRlaBLapCOV1Ia/Fuw==

# SIG # End signature block