PSPKI

3.5

Client/New-SelfSignedCertificateEx.ps1

                                function New-SelfSignedCertificateEx {

<#

.ExternalHelp PSPKI.Help.xml

#>

[OutputType('[System.Security.Cryptography.X509Certificates.X509Certificate2]')]

[CmdletBinding(DefaultParameterSetName = '__runtime')]

    param (

        [Parameter(Mandatory = $true, Position = 0)]

        [string]$Subject,

        [Parameter(Position = 1)]

        [datetime]$NotBefore = [DateTime]::Now.AddDays(-1),

        [Parameter(Position = 2)]

        [datetime]$NotAfter = $NotBefore.AddDays(365),

        [string]$SerialNumber,

        [Alias('CSP')]

        [string]$ProviderName = "Microsoft Enhanced RSA and AES Cryptographic Provider",

        [string]$AlgorithmName = "RSA",

        [int]$KeyLength = 2048,

        [validateSet("Exchange","Signature")]

        [string]$KeySpec = "Exchange",

        [Alias('EKU')]

        [Security.Cryptography.Oid[]]$EnhancedKeyUsage,

        [Alias('KU')]

        [Security.Cryptography.X509Certificates.X509KeyUsageFlags]$KeyUsage = 0,

        [Alias('SAN')]

        [String[]]$SubjectAlternativeName,

        [bool]$IsCA,

        [int]$PathLength = -1,

        [Security.Cryptography.X509Certificates.X509ExtensionCollection]$CustomExtension,

        [ValidateSet('MD5','SHA1','SHA256','SHA384','SHA512')]

        [string]$SignatureAlgorithm = "SHA256",

        [switch]$AlternateSignatureFormat,

        [Security.Cryptography.X509Certificates.X509Certificate2]$Issuer,

        [string]$FriendlyName,

        [Parameter(ParameterSetName = '__runtime')]

        [switch]$Runtime,

        [Parameter(ParameterSetName = '__store')]

        [Security.Cryptography.X509Certificates.StoreLocation]$StoreLocation,

        [Parameter(Mandatory = $true, ParameterSetName = '__file')]

        [Alias('OutFile','OutPath','Out')]

        [IO.FileInfo]$Path,

        [Parameter(Mandatory = $true, ParameterSetName = '__file')]

        [Security.SecureString]$Password,

        [switch]$AllowSMIME,

        [switch]$Exportable

    )

    $ErrorActionPreference = "Stop"

    if ($OSVersion.Major -lt 6) {

        $NotSupported = New-Object NotSupportedException -ArgumentList "Windows XP and Windows Server 2003 are not supported!"

        throw $NotSupported

    }

    $builder = New-Object SysadminsLV.PKI.Cryptography.X509Certificates.X509CertificateBuilder

#region Fields

    if (![string]::IsNullOrEmpty($SerialNumber)) {

        if ($SerialNumber -match "[^0-9a-fA-F]") {

            throw "Serial number must be a hexadecimal string."

        }

        if ($SerialNumber.Length % 2) {$SerialNumber = "0" + $SerialNumber}

        $builder.SerialNumber = $SerialNumber

    }

    if ($Subject) {

        $builder.SubjectName = $Subject

    }

    $builder.NotBefore = $NotBefore

    $builder.NotAfter = $NotAfter

    $builder.HashingAlgorithm = New-Object Security.Cryptography.Oid2 $SignatureAlgorithm, $false

    $builder.AlternateSignatureFormat = $AlternateSignatureFormat

    $builder.FriendlyName = $FriendlyName

#endregion

#region private key

    $builder.PrivateKeyInfo.ProviderName = $ProviderName

    $builder.PrivateKeyInfo.PublicKeyAlgorithm = [Security.Cryptography.Oid]$AlgorithmName

    $builder.PrivateKeyInfo.KeySpec = switch ($KeySpec) {"Exchange" {1}; "Signature" {2}}

    $builder.PrivateKeyInfo.KeyLength = $KeyLength

    $builder.PrivateKeyInfo.Exportable = $Exportable    

    switch ($PSCmdlet.ParameterSetName) {

        '__store' {

            $builder.PrivateKeyInfo.MachineContext = if ($StoreLocation -eq "LocalMachine") {$true} else {$false}

        }

        default {

            $builder.PrivateKeyInfo.MachineContext = $false

        }

    }

#endregion

#region Extensions

#region Enhanced Key Usages processing

    if ($EnhancedKeyUsage) {

        $OIDs = New-Object Security.Cryptography.OidCollection

        $EnhancedKeyUsage | ForEach-Object {

            [void]$OIDs.Add($_)

        }

        $EKU = New-Object Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension $OIDs, $false

        [void]$builder.Extensions.Add($EKU)

    }

#endregion

#region Key Usages processing

    $LocalKeyUsage = $KeyUsage

    if ($PSBoundParameters.Keys.Contains("IsCA") -and $IsCA) {

        $LocalKeyUsage = $LocalKeyUsage -bor [Security.Cryptography.X509Certificates.X509KeyUsageFlags]::CrlSign

        $LocalKeyUsage = $LocalKeyUsage -bor [Security.Cryptography.X509Certificates.X509KeyUsageFlags]::KeyCertSign

    }

    $KU = New-Object Security.Cryptography.X509Certificates.X509KeyUsageExtension $LocalKeyUsage, $true

    [void]$builder.Extensions.Add($KU)

#endregion

#region Basic Constraints processing

    if ($PSBoundParameters.Keys.Contains("IsCA")) {

        if (!$IsCA) {$PathLength = -1}

        $critical = $IsCA

        $hasPathLengthConstraint = $PathLength -ge 0

        $BasicConstraints = New-Object Security.Cryptography.X509Certificates.X509BasicConstraintsExtension $IsCA, $hasPathLengthConstraint, $PathLength, $critical

        [void]$builder.Extensions.Add($BasicConstraints)

    }

#endregion

#region SAN processing

    if ($SubjectAlternativeName) {

        $Names = New-Object Security.Cryptography.X509Certificates.X509AlternativeNameCollection

        foreach ($altname in $SubjectAlternativeName) {

            $Name = switch -Regex ($altname) {

                "^dns:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "DnsName", $Matches[1]

                }

                "^email:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "Rfc822Name", $Matches[1]

                }

                "^upn:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "UserPrincipalName", $Matches[1]

                }

                "^ip:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "IpAddress", $Matches[1]

                }

                "^dn:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "DirectoryName", $Matches[1]

                }

                "^oid:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "RegisteredId", $Matches[1]

                }

                "^url:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "URL", $Matches[1]

                }

                "^guid:(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "Guid", $Matches[1]

                }

                "other:(.+):(.+)" {

                    New-Object Security.Cryptography.X509Certificates.X509AlternativeName "OtherName", $Matches[2], $Matches[1]

                }

            }

            $Names.Add($Name)

        }

        $SAN = New-Object Security.Cryptography.X509Certificates.X509SubjectAlternativeNamesExtension $Names, $false

        [void]$builder.Extensions.Add($SAN)

    }

#endregion

if ($CustomExtension) {

    $CustomExtension | ForEach-Object {

        [void]$builder.Extensions.Add($_)

    }

}

#endregion

    $Cert = $builder.Build($Issuer)

    switch ($PSCmdlet.ParameterSetName) {

        '__store' {

            $store = New-Object Security.Cryptography.X509Certificates.X509Store "My", $StoreLocation

            try {

                $store.Open("ReadWrite")

                $store.Add($cert)

            } finally {

                $store.Close()

            }            

        }

        '__file' {

            $pfxBytes = $Cert.Export("Pkcs12", $Password)

            Set-Content -Path $Path -Value $pfxBytes -Encoding Byte

        }

    }

    $Cert

}

# SIG # Begin signature block

# MIIfhgYJKoZIhvcNAQcCoIIfdzCCH3MCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBFwfuc/KvpOmea

# xr6eUbH0sujRiAVYPVu86WEn6ilEMKCCGYYwggX1MIID3aADAgECAhAdokgwb5sm

# GNCC4JZ9M9NqMA0GCSqGSIb3DQEBDAUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE

# CBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAcBgNVBAoTFVRo

# ZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJTQSBDZXJ0

# aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xODExMDIwMDAwMDBaFw0zMDEyMzEyMzU5

# NTlaMHwxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIx

# EDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDEkMCIG

# A1UEAxMbU2VjdGlnbyBSU0EgQ29kZSBTaWduaW5nIENBMIIBIjANBgkqhkiG9w0B

# AQEFAAOCAQ8AMIIBCgKCAQEAhiKNMoV6GJ9J8JYvYwgeLdx8nxTP4ya2JWYpQIZU

# RnQxYsUQ7bKHJ6aZy5UwwFb1pHXGqQ5QYqVRkRBq4Etirv3w+Bisp//uLjMg+gwZ

# iahse60Aw2Gh3GllbR9uJ5bXl1GGpvQn5Xxqi5UeW2DVftcWkpwAL2j3l+1qcr44

# O2Pej79uTEFdEiAIWeg5zY/S1s8GtFcFtk6hPldrH5i8xGLWGwuNx2YbSp+dgcRy

# QLXiX+8LRf+jzhemLVWwt7C8VGqdvI1WU8bwunlQSSz3A7n+L2U18iLqLAevRtn5

# RhzcjHxxKPP+p8YU3VWRbooRDd8GJJV9D6ehfDrahjVh0wIDAQABo4IBZDCCAWAw

# HwYDVR0jBBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFA7hOqhT

# OjHVir7Bu61nGgOFrTQOMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/

# AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMDBggrBgEFBQcDCDARBgNVHSAECjAIMAYG

# BFUdIAAwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC51c2VydHJ1c3QuY29t

# L1VTRVJUcnVzdFJTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHYGCCsGAQUF

# BwEBBGowaDA/BggrBgEFBQcwAoYzaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VT

# RVJUcnVzdFJTQUFkZFRydXN0Q0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2Nz

# cC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBDAUAA4ICAQBNY1DtRzRKYaTb3moq

# jJvxAAAeHWJ7Otcywvaz4GOz+2EAiJobbRAHBE++uOqJeCLrD0bs80ZeQEaJEvQL

# d1qcKkE6/Nb06+f3FZUzw6GDKLfeL+SU94Uzgy1KQEi/msJPSrGPJPSzgTfTt2Sw

# piNqWWhSQl//BOvhdGV5CPWpk95rcUCZlrp48bnI4sMIFrGrY1rIFYBtdF5KdX6l

# uMNstc/fSnmHXMdATWM19jDTz7UKDgsEf6BLrrujpdCEAJM+U100pQA1aWy+nyAl

# EA0Z+1CQYb45j3qOTfafDh7+B1ESZoMmGUiVzkrJwX/zOgWb+W/fiH/AI57SHkN6

# RTHBnE2p8FmyWRnoao0pBAJ3fEtLzXC+OrJVWng+vLtvAxAldxU0ivk2zEOS5LpP

# 8WKTKCVXKftRGcehJUBqhFfGsp2xvBwK2nxnfn0u6ShMGH7EezFBcZpLKewLPVdQ

# 0srd/Z4FUeVEeN0B3rF1mA1UJP3wTuPi+IO9crrLPTru8F4XkmhtyGH5pvEqCgul

# ufSe7pgyBYWe6/mDKdPGLH29OncuizdCoGqC7TtKqpQQpOEN+BfFtlp5MxiS47V1

# +KHpjgolHuQe8Z9ahyP/n6RRnvs5gBHN27XEp6iAb+VT1ODjosLSWxr6MiYtaldw

# HDykWC6j81tLB9wyWfOHpxptWDCCBkowggUyoAMCAQICEBdBS6OH2/E/xEs3Bf5c

# krcwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0

# ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGln

# byBMaW1pdGVkMSQwIgYDVQQDExtTZWN0aWdvIFJTQSBDb2RlIFNpZ25pbmcgQ0Ew

# HhcNMTkwODEzMDAwMDAwWhcNMjIwODEyMjM1OTU5WjCBmTELMAkGA1UEBhMCVVMx

# DjAMBgNVBBEMBTk3MjE5MQ8wDQYDVQQIDAZPcmVnb24xETAPBgNVBAcMCFBvcnRs

# YW5kMRwwGgYDVQQJDBMxNzEwIFNXIE1pbGl0YXJ5IFJkMRswGQYDVQQKDBJQS0kg

# U29sdXRpb25zIEluYy4xGzAZBgNVBAMMElBLSSBTb2x1dGlvbnMgSW5jLjCCAiIw

# DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANC9ao+Uw7Owaxi+v5FF1+eKGIpv

# QnKBFu61VsoHFyotJ8yoeC8tiRjmHggRbmQm0sTAdAXw23Rj5ZW6ndMWgA258car

# a6+oWB071e3ctsHoavc7NkDoCkKS2uh5tTmqclNMg6xaU1IIp9IWFq00K1jkeXex

# HIFLjTF2AA2SEteJO6VY08EiN6ktAOa1P4NbB0fTRUmca0j3W552hvU5Ig8G0DJt

# b4IDMMnu6WllNuxfqyNJiUOYkDET1p52XzvhMFMFnhbsH9JPcR4IA7Pp4xc1mRhe

# D9uE+KVx1astA/GvWtkpeZy/efbaMOxY4VuTW9kdgc8tB4VPamQQpoVmD3ULsaPz

# iv8cOum0CMrTtwKA/meas20A69u3xg8KeuDwxE0rysT4a68lXjFZViyHQQQzeZi4

# wAifk3URIABuKy6DQdQ4FJRjIvAXh5PD2WatY7aJJw9nc0biEB7bEjDNYufJ4OL9

# M9ibVqQxpLz0Vm9D+aCD1CJFySCcIOg7VRWCNyTqtDxDlWd6I7H1s2QwsiEWIOCE

# MtOlve+rZi9RgJhtrdoINgmgSPNH+lITexCMrNDvpEzYxggsTLcEs4jq6XzoD/bR

# G9gvSv/d5Di8Js0gjaqpwDZbLsProdRFX0AlAROarTVW0m9nqVHcP4o0Lc/jKCJ6

# 8073khO+aMOJKW/9AgMBAAGjggGoMIIBpDAfBgNVHSMEGDAWgBQO4TqoUzox1Yq+

# wbutZxoDha00DjAdBgNVHQ4EFgQUd9YCgc1i67qdUtY6jeRnT0YzsVAwDgYDVR0P

# AQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwMwEQYJ

# YIZIAYb4QgEBBAQDAgQQMEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQMCMCUwIwYI

# KwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMEMGA1UdHwQ8MDowOKA2

# oDSGMmh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQUNvZGVTaWduaW5n

# Q0EuY3JsMHMGCCsGAQUFBwEBBGcwZTA+BggrBgEFBQcwAoYyaHR0cDovL2NydC5z

# ZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ29kZVNpZ25pbmdDQS5jcnQwIwYIKwYBBQUH

# MAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMCAGA1UdEQQZMBeBFWluZm9AcGtp

# c29sdXRpb25zLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAa4IZBlHU1V6Dy+atjrwS

# YugL+ryvzR1eGH5+nzbwxAi4h3IaknQBIuWzoamR+hRUga9/Rd4jrBbXGTgkqM7A

# tnzXP7P5NZOmxOdFOl1UfgNIv5MfJNPzsvn54bnx9rgKWJlpmKPCr1xtfj2ERlhA

# f6ADOfUyCcTnSwlBi1Bai60wqqDPuj1zcDaD2XGddVmqVrplx1zNoX7vhyErA7V9

# psRWQYIflYY0L58gposEUVMKM6TJRRjndibRnO2CI9plXDBz4j3cTni3fXGM3UuB

# VInKSeC+mTsvJVYTHjBowWohhxMBdqD0xFVbysoRKGtWSJwErdAomjMCrY2q6oYc

# xzCCBmowggVSoAMCAQICEAMBmgI6/1ixa9bV6uYX8GYwDQYJKoZIhvcNAQEFBQAw

# YjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQ

# d3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBD

# QS0xMB4XDTE0MTAyMjAwMDAwMFoXDTI0MTAyMjAwMDAwMFowRzELMAkGA1UEBhMC

# VVMxETAPBgNVBAoTCERpZ2lDZXJ0MSUwIwYDVQQDExxEaWdpQ2VydCBUaW1lc3Rh

# bXAgUmVzcG9uZGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Rd

# /Hyz4II14OD2xirmSXU7zG7gU6mfH2RZ5nxrf2uMnVX4kuOe1VpjWwJJUNmDzm9m

# 7t3LhelfpfnUh3SIRDsZyeX1kZ/GFDmsJOqoSyyRicxeKPRktlC39RKzc5YKZ6O+

# YZ+u8/0SeHUOplsU/UUjjoZEVX0YhgWMVYd5SEb3yg6Np95OX+Koti1ZAmGIYXIY

# aLm4fO7m5zQvMXeBMB+7NgGN7yfj95rwTDFkjePr+hmHqH7P7IwMNlt6wXq4eMfJ

# Bi5GEMiN6ARg27xzdPpO2P6qQPGyznBGg+naQKFZOtkVCVeZVjCT88lhzNAIzGvs

# YkKRrALA76TwiRGPdwIDAQABo4IDNTCCAzEwDgYDVR0PAQH/BAQDAgeAMAwGA1Ud

# EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwggG/BgNVHSAEggG2MIIB

# sjCCAaEGCWCGSAGG/WwHATCCAZIwKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp

# Z2ljZXJ0LmNvbS9DUFMwggFkBggrBgEFBQcCAjCCAVYeggFSAEEAbgB5ACAAdQBz

# AGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYAaQBjAGEAdABlACAAYwBv

# AG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQAYQBuAGMAZQAgAG8AZgAg

# AHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMAIABhAG4AZAAg

# AHQAaABlACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwByAGUAZQBt

# AGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0

# AHkAIABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABo

# AGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wCwYJYIZIAYb9

# bAMVMB8GA1UdIwQYMBaAFBUAEisTmLKZB+0e36K+Vw0rZwLNMB0GA1UdDgQWBBRh

# Wk0ktkkynUoqeRqDS/QeicHKfTB9BgNVHR8EdjB0MDigNqA0hjJodHRwOi8vY3Js

# My5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURDQS0xLmNybDA4oDagNIYy

# aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEQ0EtMS5j

# cmwwdwYIKwYBBQUHAQEEazBpMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp

# Y2VydC5jb20wQQYIKwYBBQUHMAKGNWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRENBLTEuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQCd

# JX4bM02yJoFcm4bOIyAPgIfliP//sdRqLDHtOhcZcRfNqRu8WhY5AJ3jbITkWkD7

# 3gYBjDf6m7GdJH7+IKRXrVu3mrBgJuppVyFdNC8fcbCDlBkFazWQEKB7l8f2P+fi

# EUGmvWLZ8Cc9OB0obzpSCfDscGLTYkuw4HOmksDTjjHYL+NtFxMG7uQDthSr849D

# p3GdId0UyhVdkkHa+Q+B0Zl0DSbEDn8btfWg8cZ3BigV6diT5VUW8LsKqxzbXEgn

# Zsijiwoc5ZXarsQuWaBh3drzbaJh6YoLbewSGL33VVRAA5Ira8JRwgpIr7DUbuD0

# FAo6G+OPPcqvao173NhEMIIGzTCCBbWgAwIBAgIQBv35A5YDreoACus/J7u6GzAN

# BgkqhkiG9w0BAQUFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQg

# SW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2Vy

# dCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMjExMTEwMDAw

# MDAwWjBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD

# VQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBBc3N1cmVk

# IElEIENBLTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDogi2Z+crC

# QpWlgHNAcNKeVlRcqcTSQQaPyTP8TUWRXIGf7Syc+BZZ3561JBXCmLm0d0ncicQK

# 2q/LXmvtrbBxMevPOkAMRk2T7It6NggDqww0/hhJgv7HxzFIgHweog+SDlDJxofr

# Nj/YMMP/pvf7os1vcyP+rFYFkPAyIRaJxnCI+QWXfaPHQ90C6Ds97bFBo+0/vtuV

# SMTuHrPyvAwrmdDGXRJCgeGDboJzPyZLFJCuWWYKxI2+0s4Grq2Eb0iEm09AufFM

# 8q+Y+/bOQF1c9qjxL6/siSLyaxhlscFzrdfx2M8eCnRcQrhofrfVdwonVnwPYqQ/

# MhRglf0HBKIJAgMBAAGjggN6MIIDdjAOBgNVHQ8BAf8EBAMCAYYwOwYDVR0lBDQw

# MgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYIKwYBBQUHAwQGCCsGAQUF

# BwMIMIIB0gYDVR0gBIIByTCCAcUwggG0BgpghkgBhv1sAAEEMIIBpDA6BggrBgEF

# BQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5

# Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAg

# AHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0

# AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABE

# AGkAZwBpAEMAZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABS

# AGUAbAB5AGkAbgBnACAAUABhAHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3

# AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkAYQBiAGkAbABpAHQAeQAgAGEAbgBk

# ACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAgAGgAZQByAGUAaQBu

# ACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjALBglghkgBhv1sAxUwEgYDVR0T

# AQH/BAgwBgEB/wIBADB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6

# Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMu

# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDCBgQYDVR0f

# BHoweDA6oDigNoY0aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNz

# dXJlZElEUm9vdENBLmNybDA6oDigNoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29t

# L0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDAdBgNVHQ4EFgQUFQASKxOYspkH

# 7R7for5XDStnAs0wHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJ

# KoZIhvcNAQEFBQADggEBAEZQPsm3KCSnOB22WymvUs9S6TFHq1Zce9UNC0Gz7+x1

# H3Q48rJcYaKclcNQ5IK5I9G6OoZyrTh4rHVdFxc0ckeFlFbR67s2hHfMJKXzBBlV

# qefj56tizfuLLZDCwNK1lL1eT7EF0g49GqkUW6aGMWKoqDPkmzmnxPXOHXh2lCVz

# 5Cqrz5x2S+1fwksW5EtwTACJHvzFebxMElf+X+EevAJdqP77BzhPDcZdkbkPZ0XN

# 1oPt55INjbFpjE/7WeAjD9KqrgB87pxCDs+R1ye3Fu4Pw718CqDuLAhVhSK46xga

# TfwqIa1JMYNHlXdx3LEbS0scEJx3FMGdTy9alQgpECYxggVWMIIFUgIBATCBkDB8

# MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD

# VQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxJDAiBgNVBAMT

# G1NlY3RpZ28gUlNBIENvZGUgU2lnbmluZyBDQQIQF0FLo4fb8T/ESzcF/lyStzAN

# BglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqG

# SIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3

# AgEVMC8GCSqGSIb3DQEJBDEiBCB8zVr/DaR1dH9fYZH1cMLn2TIlXHSvFjW9m5dm

# 9A5X8jANBgkqhkiG9w0BAQEFAASCAgB5lLS0quUqfCI7G+XwaIhrhh2WsC0YP98D

# m13pR6B8b+jJrDGsiwOAm9x1Z7+QxR27iof7Ft++wGaSsV3duPXrRIuPE8TLkpUW

# aKosbCzUhQiciGrU0s6vd/Isjcya/1x+U+lJdX2YGdW7K95bkt9xwQpib4mTZykG

# nfklZG83xowPPjs+ScsU90J34/quZi8wSuVnnFSn2x9sFVWbGFrmcw4eOps6V09Q

# gpSJa8JMgIlU8gP/sGxhyVqRsIOQalU7hkfwDhCddKqRtZg1dP1xDED+jmcC88A8

# XCK2Mo2hOpH8voH+ixncmXnHIZOj36zpMf/t/Zfi4XIjKrKePJe1e75DFrMRp8sX

# mDc4TQmcMmZpZ5oRA6+3n+gWUSATH0VnSeyXL7rQFs0IrMYbsajuAXIA4OzJBGQc

# GUNRa71pAXb5Otr3bvY821nBQ9tQCPGHfYFa9gqXB9ozi91WUAPjbfQ/tvlrrGri

# vRh573/aZFZMki+K4cMb9ypeEVBvfBO9ln546XfdJMTL4MK4lofsUIjlhvXIMqtL

# bA8UOtYm2O+ubxWhLIEQL/zAQHU4Tm3yStPq1KynM6j5MWeVQw0djsKYtybtxbv3

# tbS/FitP+elQAvj9MEpdVOBUaXqaHcumPBVl2Pap5rw+UZiTsA7Xs+uA2h4UuzUp

# JvH99B9rhqGCAg8wggILBgkqhkiG9w0BCQYxggH8MIIB+AIBATB2MGIxCzAJBgNV

# BAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdp

# Y2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMQIQAwGa

# Ajr/WLFr1tXq5hfwZjAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3

# DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMjIzMTMxNTM4WjAjBgkqhkiG9w0BCQQx

# FgQU2UdFl4PqBi9C4Gbcm0uQiGww11owDQYJKoZIhvcNAQEBBQAEggEAL/aN2Y2L

# CQujcK3m4eiHBUHCDZlE/3lVMVzTfrC2tO5EHWc55LeEsEOVis8dHUNXn6dzriLO

# 6T4QlRXzYqj9OZ63qrS6IkgwFqjB6QVDGnZ6GlKH4BUp2FyrUnDYvsUWj2YRuikm

# jvlblssXg4Yazw3liM0q0oJ3bWva00rzqWudj6/3syUD3bMTomKJykjfXrS7jYkh

# x+PbAfgTcz7/iWNjFnRDtUPak84Q/SS2I7FKY5Rat2D7lzc17DQTAvESiwCqVmd5

# sVGRWYAPnDDb90lTRH3JeQ83BASo+ehEebqMz31jl6hd+bnwTp3ggFDmkEMu7tuI

# AzScwycMWoHlNg==

# SIG # End signature block