PureStorage.AzureNative.Tools

1.0.48-dev

PureStorage.AzureNative.Tools.psm1

                                . $PSScriptRoot/PureStorage.AzureNative.Util.ps1

$PluginPrivileges = @(

    'Datastore.AllocateSpace',

    'Datastore.Browse',

    'Datastore.Config',

    'Datastore.Delete',

    'Datastore.DeleteFile',

    'Datastore.FileManagement',

    'Datastore.Move',

    'Datastore.Rename',

    'Datastore.UpdateVirtualMachineFiles',

    'Datastore.UpdateVirtualMachineMetadata',

    'Extension.Register',

    'Extension.Unregister',

    'Extension.Update',

    'Folder.Create',

    'Folder.Delete',

    'Folder.Move',

    'Folder.Rename',

    'Global.CancelTask',

    'Global.ManageCustomFields',

    'Global.SetCustomField',

    'ScheduledTask.Create',

    'ScheduledTask.Delete',

    'ScheduledTask.Edit',

    'ScheduledTask.Run',

    'Sessions.ValidateSession',

    'StorageProfile.Update',

    'StorageProfile.View',

    'StorageViews.View',

    'Task.Create',

    'Task.Update',

    'VirtualMachine.Config.AddExistingDisk',

    'VirtualMachine.Config.AddNewDisk',

    'VirtualMachine.Config.AddRemoveDevice',

    'VirtualMachine.Config.RemoveDisk',

    'VirtualMachine.Interact.PowerOff',

    'VirtualMachine.Interact.PowerOn',

    'VirtualMachine.Inventory.Create',

    'VirtualMachine.Inventory.CreateFromExisting',

    'VirtualMachine.Inventory.Delete',

    'VirtualMachine.Inventory.Move',

    'VirtualMachine.Inventory.Register',

    'VirtualMachine.Inventory.Unregister',

    'VirtualMachine.Provisioning.Clone',

    'VirtualMachine.Provisioning.CloneTemplate',

    'VirtualMachine.Provisioning.CreateTemplateFromVM',

    'VirtualMachine.Provisioning.GetVmFiles',

    'VirtualMachine.State.CreateSnapshot',

    'VirtualMachine.State.RemoveSnapshot',

    'VirtualMachine.State.RenameSnapshot',

    'VirtualMachine.State.RevertToSnapshot'

)

# AVS resource ID for the dev environment

$AvsResourceIdDev = "/subscriptions/96798833-9949-4913-a555-b0f2de70a444/resourceGroups/rg-krypton-sddc-network-dev-eastus/providers/Microsoft.AVS/privateClouds/krypton-private-cloud-dev"

# Time window for the request (set to 60 minutes for now, can be adjusted as discussed)

$TimeWindowInMinutes = 60

# Service account name prefix

$AccountNamePrefix = "psserviceaccount"

# Service account role name

$RoleName = "PureStorageService"

Function Get-SSLThumbprintFromCertString {

    param (

        [String]$CertString

    )

    $CertString = $CertString -replace '-----BEGIN CERTIFICATE-----', ''

    $CertString = $CertString -replace '-----END CERTIFICATE-----', ''

    $CertString = $CertString -replace '\s', ''

    $certificate = [Security.Cryptography.X509Certificates.X509Certificate2]::new([Convert]::FromBase64String($CertString))

    $thumbprint = $certificate.Thumbprint

    $thumbprint = $thumbprint -replace '(.{2})', '$1:'

    $thumbprint = $thumbprint.TrimEnd(':')

    return $thumbprint

}

Function Register-RemotePlugin {

    param(

        [parameter(Mandatory = $true)]

        [VMware.Vim.ExtensionManager]$ExtensionMgr,

        [parameter(Mandatory = $true)]

        [String]$RegistrationUrl,

        [parameter(Mandatory = $true)]

        [String]$PluginVersion,

        [parameter(Mandatory = $true)]

        [String]$PluginThumbprint,

        [parameter(Mandatory = $false)]

        [String]$PluginCertificate

    )

    #build extension to register. Will pull the SSL thumprint from the target address

    $description = New-Object VMware.Vim.Description

    $description.label = "Pure Storage Manager"

    $description.summary = "Pure Storage Management Plugin for the vSphere Client"

    $extensionClientInfo = New-Object VMware.Vim.ExtensionClientInfo

    $extensionClientInfo.Company = "Pure Storage, Inc."

    $extensionClientInfo.Description = $description

    $extensionClientInfo.Type = "vsphere-client-remote"

    $extensionClientInfo.Version = $PluginVersion

    $extensionClientInfo.Url = $RegistrationUrl

    $extensionServerInfo = New-Object VMware.Vim.ExtensionServerInfo

    $extensionServerInfo.AdminEmail = "noreply@purestorage.com"

    $extensionServerInfo.Company = "Pure Storage, Inc."

    $extensionServerInfo.Description = $description

    $extensionServerInfo.Url = $RegistrationUrl

    $extensionServerInfo.Type = "HTTPS"

    $extensionServerInfo.ServerThumbprint = $PluginThumbprint

    if ($PluginCertificate) {

        $extensionServerInfo.ServerCertificate = $PluginCertificate

    }

    $extensionSpec = New-Object VMware.Vim.Extension

    $extensionSpec.key = "com.purestorage.integrations.vmware.pureplugin"

    $extensionSpec.version = $PluginVersion

    $extensionSpec.Description = $description

    $extensionSpec.Client += $extensionClientInfo

    $extensionSpec.Server += $extensionServerInfo

    $extensionSpec.LastHeartbeatTime = get-date

    Write-Verbose "Registering new plugin"

    $ExtensionMgr.RegisterExtension($extensionSpec)

}

<#

    .SYNOPSIS

     This function unregisters the vSphere remote plugin extension from AVS

    .EXAMPLE

     Unregister-PureStorageAvsRemotePlugin

    .INPUTS

     No inputs are required

    .OUTPUTS

     None

#>

Function Unregister-PureStorageAvsRemotePlugin {

    [CmdletBinding()]

    [AVSAttribute(10, UpdatesSDDC = $false, AutomationOnly = $true)]

    param()

    $services = Get-View 'ServiceInstance'

    $extensionMgr = Get-View $services.Content.ExtensionManager

    $extensionMgr.UnregisterExtension("com.purestorage.integrations.vmware.pureplugin")

    Write-Host "PureStorage Remote Plugin un-registered successfully"

}

<#

    .SYNOPSIS

     This function registers the vSphere remote plugin extension with AVS

    .PARAMETER RegistrationUrl

     vSphere remote plugin registration URL

    .PARAMETER PluginVersion

     The version of the plugin that is being registered

    .PARAMETER PluginCertificate

     The full SSL certificate of the vSphere remote plugin being registered, in pem format. i.e.

     -----BEGIN CERTIFICATE-----

     Base64–encoded certificate

     -----END CERTIFICATE-----

    .EXAMPLE

     Register-PureStorageAvsRemotePlugin -PluginHost 'https://10.20.30.40/plugin-manifest-location.zip' -PluginVersion '1.0.0' -PluginCertificate @"

       -----BEGIN CERTIFICATE-----

       Base64–encoded certificate

       -----END CERTIFICATE-----

       "@

    .INPUTS

     vSphere remote plugin registration URL, version, and SSL certificate

    .OUTPUTS

     None

#>

Function Register-PureStorageAvsRemotePlugin {

    [CmdletBinding()]

    [AVSAttribute(10, UpdatesSDDC = $false, AutomationOnly = $true)]

    param(

        [Parameter(

            Mandatory = $true,

            HelpMessage = 'vSphere remote plugin registration URL')]

        [ValidateNotNull()]

        [String]$RegistrationUrl,

        [Parameter(

            Mandatory = $true,

            HelpMessage = 'version of the vSphere remote plugin being registered')]

        [ValidateNotNull()]

        [String]$PluginVersion,

        [Parameter(

            Mandatory = $true,

            HelpMessage = 'full SSL certificate of the vSphere remote plugin being registered')]

        [ValidateNotNull()]

        [String]$PluginCertificate

    )

    $services = Get-View 'ServiceInstance'

    $extensionMgr = Get-View $services.Content.ExtensionManager

    $serverVersion = $services.Content.About.Version

    $CERT_SUPPORTED_VCENTER_VERSION = "8.0.2";

    $thumbprint = Get-SSLThumbprintFromCertString -CertString $PluginCertificate

    if ([System.Version]$ServerVersion -ge [System.Version]$CERT_SUPPORTED_VCENTER_VERSION) {

        Write-Host "Host Version $serverVersion, registering using Remote Plugin public certificate"

        Register-RemotePlugin -ExtensionMgr $extensionMgr -RegistrationUrl $RegistrationUrl -PluginVersion $PluginVersion -PluginThumbprint $thumbprint -PluginCertificate $PluginCertificate

    }

    else {

        Write-Host "Host Version $serverVersion, registering using Remote Plugin thumbprint"

        Register-RemotePlugin -ExtensionMgr $extensionMgr -RegistrationUrl $RegistrationUrl -PluginVersion $PluginVersion -PluginThumbprint $thumbprint

    }

    Write-Host "PureStorage Remote Plugin (Version: $PluginVersion) registered successfully"

}

<#

    .SYNOPSIS

     This function get the version of vSphere remote plugin extension with AVS

    .EXAMPLE

     Get-PureStorageAvsRemotePluginVersion

    .INPUTS

     No inputs are required

     .OUTPUTS

     Named Plugin Version stored under Key "PureStorageAvsPluginVersion" in NamedOutput if Plugin is registered

#>

Function Get-PureStorageAvsRemotePluginVersion {

    [CmdletBinding()]

    [AVSAttribute(10, UpdatesSDDC = $false, AutomationOnly = $true)]

    param()

    $services = Get-View 'ServiceInstance'

    $extensionMgr = Get-View $services.Content.ExtensionManager

    $version = ($extensionMgr.FindExtension("com.purestorage.integrations.vmware.pureplugin")).version

    if ($null -eq $version) {

        Write-Warning "No Pure Storage Avs Remote Plugin Installed $version"

    }

    else {

        Write-Host "Pure Storage Avs Remote Plugin Version $version is currently installed"

    }

    $NamedOutputs = @{}

    $NamedOutputs["PureStorageAvsPluginVersion"] = $version

    Set-Variable -Name NamedOutputs -Value $NamedOutputs -Scope Global

}

<#

.SYNOPSIS

Creates a new service account and assigns it a role with specific privileges.

.DESCRIPTION

The New-ServiceAccount function creates a new service account with the specified name and password. It then creates a role named 'PureStorageService'

if it doesn't already exist, and assigns the role to the service account. The function also adds permissions for the service account on all VM hosts.

.PARAMETER InitializationHandle

The InitializationHandle is a base64 encoded JSON object that contains the following fields:

{

     "data": "<Base64 encoded InitializationHandle>",

     "signature": "<Signature>"

}

.EXAMPLE

$InitializationDataEnc = New-ServiceAccount -InitializationHandle "eyJkYXRh"

This example decodes the InitializationHandle and validates the signature first.

It then creates a new service account with the name defined in data.serviceAccountUsername wiht random password.

It assigns the 'PureStorageService' role to the service account and adds permissions for the service account on all VM hosts.

It returns an encrypted initialization data which is base64 encoded that contains the service account username, password and vSphere IP.

#>

function New-AvsServiceAccount {

    [CmdletBinding()]

    [AVSAttribute(10, UpdatesSDDC = $false, AutomationOnly = $true)]

    param(

        [Parameter(Mandatory = $true)]

        [string]$InitializationHandle

    )

    # Convert the InitializationHandle to a JSON object

    $DecodedInitializationHandle = ConvertFrom-Base64 -Base64Text $InitializationHandle | ConvertFrom-Json

    $Data = $DecodedInitializationHandle.data

    $Signature = $DecodedInitializationHandle.signature

    # Convert the data to a JSON object

    $DecodedData = ConvertFrom-Base64 -Base64Text $Data | ConvertFrom-Json

    # The data is a JSON object with the following structure:

    #  {

    #    "sddcResourceId": "string",

    #    "requestDatetime": "string",

    #    "ephemeralPublicKey": "string",

    #    "serviceAccountUserame": "string"

    #  }

    $SddcResourceId = $DecodedData.sddcResourceId

    $RequestDatetime = $DecodedData.requestDatetime

    $EphemeralPublicKey = $DecodedData.ephemeralPublicKey

    $AccountName = $DecodedData.serviceAccountUsername

    # Validate the prefix of the account name

    if (-not $AccountName.StartsWith($AccountNamePrefix)) {

        throw "The account name must start with '$AccountNamePrefix'"

    }

    # Make sure user doesn't try to use the data with a different SDDC

    if ($env:SddcResourceId -and $env:SddcResourceId -ne $SddcResourceId) {

        throw "The SDDC resource ID in the request does not match the current SDDC resource ID"

    }

    if ($SddcResourceId -eq $AvsResourceIdDev)

    {

        $AVS_PUBLIC_KEY_PATH = "$PSScriptRoot/avs_public_key_dev.pem"

    } elseif (-not [string]::IsNullOrEmpty($SddcResourceId)) {

        $AVS_PUBLIC_KEY_PATH = "$PSScriptRoot/avs_public_key_prod.pem"

    } else {

        # Default to local test environment when AVS is not set

        $AVS_PUBLIC_KEY_PATH = "$PSScriptRoot/avs_public_key_test.pem"

    }

    $publicKey = Get-Content $AVS_PUBLIC_KEY_PATH -Raw

    # Validate the signature

    $IsValidSignature = Test-TextSignarure -Text $Data -Signature $Signature -PublicKey $publicKey

    if (-not $IsValidSignature) {

        throw "The data signature is not valid"

    }

    # Make sure the request date is in UTC

    if ($RequestDatetime.Kind -ne [System.DateTimeKind]::Utc) {

        throw "Request datetime must be in UTC"

    }

    # Validate the request datetime is within the time window

    Test-RequestDatetimeInUTC -RequestDatetime $RequestDatetime -TimeWindowInMinutes $TimeWindowInMinutes

    # Generate a random password for the service account

    $AccountPassword = New-RandomPassword

    # If the user already exists, update the password

    $User = Get-SsoPersonUser -Domain 'vsphere.local' | Where-Object { $_.Name -eq $AccountName }

    if ($User) {

        Write-Warning "User $AccountName already exists, updating the password"

        Set-SsoPersonUser -User $User -NewPassword $AccountPassword -ErrorAction Stop

    } else {

        $User = New-SsoPersonUser -UserName $AccountName -Password $AccountPassword -Description "Pure Storage Service Account" -ErrorAction Stop

    }

    # Create Role and assign Role to user

    $Role = Get-VIRole -Name $RoleName -ErrorAction SilentlyContinue

    if ($Role) {

        Write-Warning "Role $RoleName already exists"

    }

    else {

        $Privileges = @()

        foreach ($priv in $PluginPrivileges) {

            Write-Debug "Adding privilege: $priv"

            $Privileges += Get-VIPrivilege -Id $priv

        }

        $Role = New-VIRole -Name $RoleName -Privilege $Privileges

    }

    $Account = Get-VIAccount -Domain $User.Domain | Where-Object { $_.Id -eq $AccountName }

    if (-not $Account) {

        throw "Failed to create account for user $User"

    }

    $RootFolder = Get-Folder -NoRecursion

    if (-not $RootFolder) {

        throw "Failed to retrieve root folder"

    }

    Write-Host "Adding permissions for Account $AccountName on $($RootFolder.Name)  with Role $RoleName"

    New-VIPermission -Entity $RootFolder -Principal $Account -Role $Role -Propagate $true

    $vSphereIP = $Account.Server.ServiceUri.Host

    $InitializationData= @{

        "serviceAccountUsername" = $AccountName

        "serviceAccountPassword" = $AccountPassword

        "vSphereIP" = $vSphereIP

    } | ConvertTo-Json

    $InitializationDataEnc = ConvertTo-EncryptedText -Text $InitializationData -PublicKey $EphemeralPublicKey

    $NamedOutputs = @{}

    $NamedOutputs["InitializationDataEnc"] = $InitializationDataEnc

    Set-Variable -Name NamedOutputs -Value $NamedOutputs -Scope Global

}

<#

.SYNOPSIS

Removes a service account and the role assigned to it.

.DESCRIPTION

The Remove-AvsServiceAccount function removes the service account with "psserviceaccount" as the name prefix and an optional suffix in dev enviroment.

It removes the account only when it has the "PureStorageService" role assigned to it.

It also removes the role "PureStorageService" after the removal of the account.

.PARAMETER Suffix

The suffix of the account name which is only needed in dev enviroment and is empty in production.

.EXAMPLE

Remove-AvsServiceAccount -Suffix "1234"

This example tries to remove a service account named "psserviceaccount1234".

It checks if the account has the "PureStorageService" role assigned to it and removes the account and the role if it does.

#>

function Remove-AvsServiceAccount

{

    [CmdletBinding()]

    [AVSAttribute(10, UpdatesSDDC = $false, AutomationOnly = $true)]

    param(

        [Parameter(Mandatory = $false)]

        [string]$Suffix

    )

    $AccountName = $AccountNamePrefix + $Suffix

    $User = Get-SsoPersonUser -Domain 'vsphere.local' | Where-Object { $_.Name -eq $AccountName }

    if ($User) {

        # Get the roles assigned to the user

        $name = "VSPHERE.LOCAL\" + $User.Name

        $accountPermissions = Get-VIPermission -Principal $name

        # Check if the user has the PureStorageService role

        $hasRole = $false

        foreach ($permission in $accountPermissions) {

            if ($permission.Role -eq $RoleName) {

                $hasRole = $true

                break

            }

        }

        if ($hasRole) {

            Write-Host "Removing user $AccountName"

            try {

                Remove-SsoPersonUser -User $User

                # Removes the permission (user and role association)

                Remove-VIPermission -Permission $accountPermissions -Confirm:$false

                Write-Output "Removed user $name from the role $RoleName."

            }

            catch {

                throw "Failed to remove user $AccountName with error: $_"

            }

            $Role = Get-VIRole -Name $RoleName

            if ($Role) {

                # Filter permissions by role name

                $Permissions = Get-VIPermission

                $accountWithRole = $Permissions | Where-Object { $_.Role -eq $RoleName }

                # Remove the PureStorageService role if there is no account assigned to it

                if ($accountWithRole.Count -eq 0) {

                    Write-Host "Removing role $Role "

                    try {

                        Remove-VIRole -Role $Role -Force -Confirm:$false

                    }

                    catch {

                        throw "Failed to remove role $Role with error: $_"

                    }

                } else {

                    Write-Warning "Role $RoleName still has other accounts assigned to it"

                }

            }

            else {

                Write-Warning "Failed to find role $Role"

            }

        } else {

            Write-Warning "This command is only supposed to remove the account with the role $RoleName"

        }

    }

    else {

        Write-Warning "Failed to find user $AccountName"

    }

}

# SIG # Begin signature block

# MIIuggYJKoZIhvcNAQcCoIIuczCCLm8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDHs9eL9aIOmTgp

# LTzcRR3PbpcZ8DetbzSD57ddlS56aaCCE2gwggVyMIIDWqADAgECAhB2U/6sdUZI

# k/Xl10pIOk74MA0GCSqGSIb3DQEBDAUAMFMxCzAJBgNVBAYTAkJFMRkwFwYDVQQK

# ExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBHbG9iYWxTaWduIENvZGUgU2ln

# bmluZyBSb290IFI0NTAeFw0yMDAzMTgwMDAwMDBaFw00NTAzMTgwMDAwMDBaMFMx

# CzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQD

# EyBHbG9iYWxTaWduIENvZGUgU2lnbmluZyBSb290IFI0NTCCAiIwDQYJKoZIhvcN

# AQEBBQADggIPADCCAgoCggIBALYtxTDdeuirkD0DcrA6S5kWYbLl/6VnHTcc5X7s

# k4OqhPWjQ5uYRYq4Y1ddmwCIBCXp+GiSS4LYS8lKA/Oof2qPimEnvaFE0P31PyLC

# o0+RjbMFsiiCkV37WYgFC5cGwpj4LKczJO5QOkHM8KCwex1N0qhYOJbp3/kbkbuL

# ECzSx0Mdogl0oYCve+YzCgxZa4689Ktal3t/rlX7hPCA/oRM1+K6vcR1oW+9YRB0

# RLKYB+J0q/9o3GwmPukf5eAEh60w0wyNA3xVuBZwXCR4ICXrZ2eIq7pONJhrcBHe

# OMrUvqHAnOHfHgIB2DvhZ0OEts/8dLcvhKO/ugk3PWdssUVcGWGrQYP1rB3rdw1G

# R3POv72Vle2dK4gQ/vpY6KdX4bPPqFrpByWbEsSegHI9k9yMlN87ROYmgPzSwwPw

# jAzSRdYu54+YnuYE7kJuZ35CFnFi5wT5YMZkobacgSFOK8ZtaJSGxpl0c2cxepHy

# 1Ix5bnymu35Gb03FhRIrz5oiRAiohTfOB2FXBhcSJMDEMXOhmDVXR34QOkXZLaRR

# kJipoAc3xGUaqhxrFnf3p5fsPxkwmW8x++pAsufSxPrJ0PBQdnRZ+o1tFzK++Ol+

# A/Tnh3Wa1EqRLIUDEwIrQoDyiWo2z8hMoM6e+MuNrRan097VmxinxpI68YJj8S4O

# JGTfAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0G

# A1UdDgQWBBQfAL9GgAr8eDm3pbRD2VZQu86WOzANBgkqhkiG9w0BAQwFAAOCAgEA

# Xiu6dJc0RF92SChAhJPuAW7pobPWgCXme+S8CZE9D/x2rdfUMCC7j2DQkdYc8pzv

# eBorlDICwSSWUlIC0PPR/PKbOW6Z4R+OQ0F9mh5byV2ahPwm5ofzdHImraQb2T07

# alKgPAkeLx57szO0Rcf3rLGvk2Ctdq64shV464Nq6//bRqsk5e4C+pAfWcAvXda3

# XaRcELdyU/hBTsz6eBolSsr+hWJDYcO0N6qB0vTWOg+9jVl+MEfeK2vnIVAzX9Rn

# m9S4Z588J5kD/4VDjnMSyiDN6GHVsWbcF9Y5bQ/bzyM3oYKJThxrP9agzaoHnT5C

# JqrXDO76R78aUn7RdYHTyYpiF21PiKAhoCY+r23ZYjAf6Zgorm6N1Y5McmaTgI0q

# 41XHYGeQQlZcIlEPs9xOOe5N3dkdeBBUO27Ql28DtR6yI3PGErKaZND8lYUkqP/f

# obDckUCu3wkzq7ndkrfxzJF0O2nrZ5cbkL/nx6BvcbtXv7ePWu16QGoWzYCELS/h

# AtQklEOzFfwMKxv9cW/8y7x1Fzpeg9LJsy8b1ZyNf1T+fn7kVqOHp53hWVKUQY9t

# W76GlZr/GnbdQNJRSnC0HzNjI3c/7CceWeQIh+00gkoPP/6gHcH1Z3NFhnj0qinp

# J4fGGdvGExTDOUmHTaCX4GUT9Z13Vunas1jHOvLAzYIwggbmMIIEzqADAgECAhB3

# vQ4DobcI+FSrBnIQ2QRHMA0GCSqGSIb3DQEBCwUAMFMxCzAJBgNVBAYTAkJFMRkw

# FwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBHbG9iYWxTaWduIENv

# ZGUgU2lnbmluZyBSb290IFI0NTAeFw0yMDA3MjgwMDAwMDBaFw0zMDA3MjgwMDAw

# MDBaMFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS8w

# LQYDVQQDEyZHbG9iYWxTaWduIEdDQyBSNDUgQ29kZVNpZ25pbmcgQ0EgMjAyMDCC

# AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANZCTfnjT8Yj9GwdgaYw90g9

# z9DljeUgIpYHRDVdBs8PHXBg5iZU+lMjYAKoXwIC947Jbj2peAW9jvVPGSSZfM8R

# Fpsfe2vSo3toZXer2LEsP9NyBjJcW6xQZywlTVYGNvzBYkx9fYYWlZpdVLpQ0LB/

# okQZ6dZubD4Twp8R1F80W1FoMWMK+FvQ3rpZXzGviWg4QD4I6FNnTmO2IY7v3Y2F

# QVWeHLw33JWgxHGnHxulSW4KIFl+iaNYFZcAJWnf3sJqUGVOU/troZ8YHooOX1Re

# veBbz/IMBNLeCKEQJvey83ouwo6WwT/Opdr0WSiMN2WhMZYLjqR2dxVJhGaCJedD

# CndSsZlRQv+hst2c0twY2cGGqUAdQZdihryo/6LHYxcG/WZ6NpQBIIl4H5D0e6lS

# TmpPVAYqgK+ex1BC+mUK4wH0sW6sDqjjgRmoOMieAyiGpHSnR5V+cloqexVqHMRp

# 5rC+QBmZy9J9VU4inBDgoVvDsy56i8Te8UsfjCh5MEV/bBO2PSz/LUqKKuwoDy3K

# 1JyYikptWjYsL9+6y+JBSgh3GIitNWGUEvOkcuvuNp6nUSeRPPeiGsz8h+WX4VGH

# aekizIPAtw9FbAfhQ0/UjErOz2OxtaQQevkNDCiwazT+IWgnb+z4+iaEW3VCzYkm

# eVmda6tjcWKQJQ0IIPH/AgMBAAGjggGuMIIBqjAOBgNVHQ8BAf8EBAMCAYYwEwYD

# VR0lBAwwCgYIKwYBBQUHAwMwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU

# 2rONwCSQo2t30wygWd0hZ2R2C3gwHwYDVR0jBBgwFoAUHwC/RoAK/Hg5t6W0Q9lW

# ULvOljswgZMGCCsGAQUFBwEBBIGGMIGDMDkGCCsGAQUFBzABhi1odHRwOi8vb2Nz

# cC5nbG9iYWxzaWduLmNvbS9jb2Rlc2lnbmluZ3Jvb3RyNDUwRgYIKwYBBQUHMAKG

# Omh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2NvZGVzaWduaW5n

# cm9vdHI0NS5jcnQwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC5nbG9iYWxz

# aWduLmNvbS9jb2Rlc2lnbmluZ3Jvb3RyNDUuY3JsMFYGA1UdIARPME0wQQYJKwYB

# BAGgMgEyMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t

# L3JlcG9zaXRvcnkvMAgGBmeBDAEEATANBgkqhkiG9w0BAQsFAAOCAgEACIhyJsav

# +qxfBsCqjJDa0LLAopf/bhMyFlT9PvQwEZ+PmPmbUt3yohbu2XiVppp8YbgEtfjr

# y/RhETP2ZSW3EUKL2Glux/+VtIFDqX6uv4LWTcwRo4NxahBeGQWn52x/VvSoXMNO

# Ca1Za7j5fqUuuPzeDsKg+7AE1BMbxyepuaotMTvPRkyd60zsvC6c8YejfzhpX0FA

# Z/ZTfepB7449+6nUEThG3zzr9s0ivRPN8OHm5TOgvjzkeNUbzCDyMHOwIhz2hNab

# XAAC4ShSS/8SS0Dq7rAaBgaehObn8NuERvtz2StCtslXNMcWwKbrIbmqDvf+28rr

# vBfLuGfr4z5P26mUhmRVyQkKwNkEcUoRS1pkw7x4eK1MRyZlB5nVzTZgoTNTs/Z7

# KtWJQDxxpav4mVn945uSS90FvQsMeAYrz1PYvRKaWyeGhT+RvuB4gHNU36cdZytq

# tq5NiYAkCFJwUPMB/0SuL5rg4UkI4eFb1zjRngqKnZQnm8qjudviNmrjb7lYYuA2

# eDYB+sGniXomU6Ncu9Ky64rLYwgv/h7zViniNZvY/+mlvW1LWSyJLC9Su7UpkNpD

# R7xy3bzZv4DB3LCrtEsdWDY3ZOub4YUXmimi/eYI0pL/oPh84emn0TCOXyZQK8ei

# 4pd3iu/YTT4m65lAYPM8Zwy2CHIpNVOBNNwwggcEMIIE7KADAgECAgxcuW61kTkv

# +4t8zgQwDQYJKoZIhvcNAQELBQAwWTELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEds

# b2JhbFNpZ24gbnYtc2ExLzAtBgNVBAMTJkdsb2JhbFNpZ24gR0NDIFI0NSBDb2Rl

# U2lnbmluZyBDQSAyMDIwMB4XDTI0MDMxMTE0MDQxMloXDTI3MDMxMjE0MDQxMlow

# cjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFDASBgNVBAcTC1Nh

# bnRhIENsYXJhMRswGQYDVQQKExJQdXJlIFN0b3JhZ2UsIEluYy4xGzAZBgNVBAMT

# ElB1cmUgU3RvcmFnZSwgSW5jLjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAMCQrioSn48IvHpTg5dofsUYj/pNTDidwjYUrcxVu78NoyhSweG8FhcxDi/S

# I40+8Fccl3D5ZoqpjkFnGhzSwmpxU3J4AP7+fdTZht9eWD1I5qKY07esYwdPDV4y

# g+csPfdGPqI2XjRfT5UC3YkXQeUrX8KQZldD4KqvgxzpYcuBwsgHbTb/eArpi68Y

# gFR2jgZGyZigfy8RuJMrL1thcBOe/VWjUyK21wVT8cuunBYFaStLHhsRBRMDcZBD

# uTSGC4evE6oaCqlQbdMl9YFJ64mDQsKlCxrr7rmLVtcVzKGwmjp4b2xRwE+RmTh6

# JtrUL9Wx/3a3UzgAnDNimfwp85zoL48kyLtHqQ3FI8tVKGm+aBOgBZfmURoy7fbp

# 4zKhGgqFbpOmILO16i4f999YsEEJQgIF3CtyH1R60/ZZWlDmoeeEgjAGrnd14muU

# 5Hk3Cksr43uPUAg+fV78Y0fDV85ibm42ZwwPuz6MI4HhYNUlGzRwIQ31vjaGuAMW

# HNqFKkcO0JuIeHQ/gFKPnYIxnGC9H9R4Kw/uMezqtnYJwGU2epB/ABl/w7U4NgU2

# ZOxWB5BFy4frZ3f+hNgbjFUjMaXnVFotOJxXntzjdSl4znw8DaKiC5ooChteZMIT

# G9p078p/TUsOJQbUtFADSY1hsfCfB7t+gJSNt5peS9GOZIMVAgMBAAGjggGxMIIB

# rTAOBgNVHQ8BAf8EBAMCB4AwgZsGCCsGAQUFBwEBBIGOMIGLMEoGCCsGAQUFBzAC

# hj5odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2djY3I0NWNv

# ZGVzaWduY2EyMDIwLmNydDA9BggrBgEFBQcwAYYxaHR0cDovL29jc3AuZ2xvYmFs

# c2lnbi5jb20vZ3NnY2NyNDVjb2Rlc2lnbmNhMjAyMDBWBgNVHSAETzBNMEEGCSsG

# AQQBoDIBMjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv

# bS9yZXBvc2l0b3J5LzAIBgZngQwBBAEwCQYDVR0TBAIwADBFBgNVHR8EPjA8MDqg

# OKA2hjRodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjQ1Y29kZXNpZ25j

# YTIwMjAuY3JsMBMGA1UdJQQMMAoGCCsGAQUFBwMDMB8GA1UdIwQYMBaAFNqzjcAk

# kKNrd9MMoFndIWdkdgt4MB0GA1UdDgQWBBSzJ9KiDCa3UBiAajy+Iioj5kQjzDAN

# BgkqhkiG9w0BAQsFAAOCAgEAHsFQixeQEcoHurq9NWSUt4S39Q+UGP6crmVq3Wwy

# 9g23YbdWg+SgMxoLUqdoDfA4k4B6Dyoo0jEQzn2kxnsnT9lNHKrcZHH88dv0hjfi

# H2qAiQWazPjS3LhK2J6nhpyipJPpyRaSQG4x4aG0NB2D4WUfUz9CGAYsERJGww/w

# kTaaxMipttKDTaI1C49u1igDfRzIO+Q8vuyyBFLiYTno/df97xtjNC+KxxFhDhl/

# 4tawK6kwxaVzCMAfj48I67Wbo4DMH6pM1s19as7c3qp92i3MylGKsB6+u+o7UkbS

# dLNkS4ALI33CJOUc+GoK3Nt5IXXCFJTQFHBXkBdAur3gmlXEm8vlNG/1Sbxr0H7T

# 1e7ABGH/48o/+PeMLuCc72EeK5dJ4cX9NEQ3QnTsZHwGnYzjEOvOvP0s1c7yNsDb

# cUHoIqQvb5xS5aqMU5G+8sdPQ1nwpPf7gGaEEbAVW4w51Pam42qeN9HIPa+ZinXn

# sN02Kk1Qw0QwUqzaQy9W/gIquI0KOjw0LmoW9M/8S0lrjpEq2eEeUw9WQLhhUEIi

# rFxGPtjqiCLiiS9CZ+kf2vWLJKUspkYv+OHT3q805Zg1dJsBFAzEYUFLb1mhmigD

# EO9bsMorjECIL2ijE5zHtbGkalrrsPWu8tiDT/B7P9GSYzKfOOy4PoOIfWSK0Ixl

# S7IxghpwMIIabAIBATBpMFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxT

# aWduIG52LXNhMS8wLQYDVQQDEyZHbG9iYWxTaWduIEdDQyBSNDUgQ29kZVNpZ25p

# bmcgQ0EgMjAyMAIMXLlutZE5L/uLfM4EMA0GCWCGSAFlAwQCAQUAoIGcMBkGCSqG

# SIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3

# AgEVMC8GCSqGSIb3DQEJBDEiBCDdRy0vMfIPviSE0XonlDsGA9QyiS2MuOT7rtXS

# J7oa7jAwBgorBgEEAYI3AgEMMSIwIKACgAChGoAYaHR0cHM6Ly9wdXJlc3RvcmFn

# ZS5jb20gMA0GCSqGSIb3DQEBAQUABIICAAHaEM4v/qZGSu1WG1ZVxF0Inok8W/N9

# S02fE7bTPOosknLhS3jiWbAdrK6Uggoq3sYmYEPczh8df9qkFk4temNnxvhpsa7u

# ehLWGTOFBe9BYNULzqSbMB50WNPc9B7e+gic69sK3uPli3/n1FKTTiuPtFaa/orD

# 9m9GYgMT9w95n+sPWKN4uTs5v9KQfcZ3CJ8kvvr8Y1dfXWAHOeWpXhqK3FKH4yED

# bDItStTtIZ3UWc78aL39vSVOt0zeJmDTzw9XssVBEGnLwvjw2kxc/8tGjMzZwyPZ

# o28KEYyKioXhuOJMn7vR2i4WI73bC6Uzl69aqT/FjYEh+xBf25K9GAoGrkEptE9a

# EUuwnSLc4L3jmkHrYCegiyTIFZxXjwNkNuIYeRPHAwgah9ozZJBbatR+0C6KkJK4

# 21JAWVvevQZfpkzmyqU2avKxTMTO6wUeORJ3cw6lw0O3TTuk1TF8htjSpVaEeuEw

# im6c/CvCWOoNoaWHWZaY1HB8cVPMsPbGjeaRmeTaZBvd6La28Zk9oAz11ChBb8z6

# obqlQrwXUb7xRECdGqaQwoFGlIbUp0Do4pWhQE2df3xa22iBCD52gARCFHBancKv

# telc/uyJWK/wk0RdQXoujF3jztZtVRMcTestp7sCcHgSn0Xa7vi7I3MUzcvEB91O

# MsJ321RQSIiCoYIXOTCCFzUGCisGAQQBgjcDAwExghclMIIXIQYJKoZIhvcNAQcC

# oIIXEjCCFw4CAQMxDzANBglghkgBZQMEAgEFADB3BgsqhkiG9w0BCRABBKBoBGYw

# ZAIBAQYJYIZIAYb9bAcBMDEwDQYJYIZIAWUDBAIBBQAEINiFI1gkjWxyjKqrcFbk

# bxhyNAc6htInqBLVAsEa/UVsAhADTM/YrFhV2biJf+Efz0dOGA8yMDI0MTAxNjE4

# MTYxMFqgghMDMIIGvDCCBKSgAwIBAgIQC65mvFq6f5WHxvnpBOMzBDANBgkqhkiG

# 9w0BAQsFADBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x

# OzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGlt

# ZVN0YW1waW5nIENBMB4XDTI0MDkyNjAwMDAwMFoXDTM1MTEyNTIzNTk1OVowQjEL

# MAkGA1UEBhMCVVMxETAPBgNVBAoTCERpZ2lDZXJ0MSAwHgYDVQQDExdEaWdpQ2Vy

# dCBUaW1lc3RhbXAgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL5qc5/2lSGrljC6W23mWaO16P2RHxjEiDtqmeOlwf0KMCBDEr4IxHRGd7+L660x

# 5XltSVhhK64zi9CeC9B6lUdXM0s71EOcRe8+CEJp+3R2O8oo76EO7o5tLuslxdr9

# Qq82aKcpA9O//X6QE+AcaU/byaCagLD/GLoUb35SfWHh43rOH3bpLEx7pZ7avVnp

# UVmPvkxT8c2a2yC0WMp8hMu60tZR0ChaV76Nhnj37DEYTX9ReNZ8hIOYe4jl7/r4

# 19CvEYVIrH6sN00yx49boUuumF9i2T8UuKGn9966fR5X6kgXj3o5WHhHVO+NBikD

# O0mlUh902wS/Eeh8F/UFaRp1z5SnROHwSJ+QQRZ1fisD8UTVDSupWJNstVkiqLq+

# ISTdEjJKGjVfIcsgA4l9cbk8Smlzddh4EfvFrpVNnes4c16Jidj5XiPVdsn5n10j

# xmGpxoMc6iPkoaDhi6JjHd5ibfdp5uzIXp4P0wXkgNs+CO/CacBqU0R4k+8h6gYl

# dp4FCMgrXdKWfM4N0u25OEAuEa3JyidxW48jwBqIJqImd93NRxvd1aepSeNeREXA

# u2xUDEW8aqzFQDYmr9ZONuc2MhTMizchNULpUEoA6Vva7b1XCB+1rxvbKmLqfY/M

# /SdV6mwWTyeVy5Z/JkvMFpnQy5wR14GJcv6dQ4aEKOX5AgMBAAGjggGLMIIBhzAO

# BgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEF

# BQcDCDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwHwYDVR0jBBgw

# FoAUuhbZbU2FL3MpdpovdYxqII+eyG8wHQYDVR0OBBYEFJ9XLAN3DigVkGalY17u

# T5IfdqBbMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydFRydXN0ZWRHNFJTQTQwOTZTSEEyNTZUaW1lU3RhbXBpbmdDQS5j

# cmwwgZAGCCsGAQUFBwEBBIGDMIGAMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k

# aWdpY2VydC5jb20wWAYIKwYBBQUHMAKGTGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0

# LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFJTQTQwOTZTSEEyNTZUaW1lU3RhbXBpbmdD

# QS5jcnQwDQYJKoZIhvcNAQELBQADggIBAD2tHh92mVvjOIQSR9lDkfYR25tOCB3R

# KE/P09x7gUsmXqt40ouRl3lj+8QioVYq3igpwrPvBmZdrlWBb0HvqT00nFSXgmUr

# DKNSQqGTdpjHsPy+LaalTW0qVjvUBhcHzBMutB6HzeledbDCzFzUy34VarPnvIWr

# qVogK0qM8gJhh/+qDEAIdO/KkYesLyTVOoJ4eTq7gj9UFAL1UruJKlTnCVaM2UeU

# UW/8z3fvjxhN6hdT98Vr2FYlCS7Mbb4Hv5swO+aAXxWUm3WpByXtgVQxiBlTVYzq

# fLDbe9PpBKDBfk+rabTFDZXoUke7zPgtd7/fvWTlCs30VAGEsshJmLbJ6ZbQ/xll

# /HjO9JbNVekBv2Tgem+mLptR7yIrpaidRJXrI+UzB6vAlk/8a1u7cIqV0yef4uaZ

# FORNekUgQHTqddmsPCEIYQP7xGxZBIhdmm4bhYsVA6G2WgNFYagLDBzpmk9104WQ

# zYuVNsxyoVLObhx3RugaEGru+SojW4dHPoWrUhftNpFC5H7QEY7MhKRyrBe7ucyk

# W7eaCuWBsBb4HOKRFVDcrZgdwaSIqMDiCLg4D+TPVgKx2EgEdeoHNHT9l3ZDBD+X

# gbF+23/zBjeCtxz+dL/9NWR6P2eZRi7zcEO1xwcdcqJsyz/JceENc2Sg8h3KeFUC

# S7tpFk7CrDqkMIIGrjCCBJagAwIBAgIQBzY3tyRUfNhHrP0oZipeWzANBgkqhkiG

# 9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw

# FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVz

# dGVkIFJvb3QgRzQwHhcNMjIwMzIzMDAwMDAwWhcNMzcwMzIyMjM1OTU5WjBjMQsw

# CQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRp

# Z2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0YW1waW5nIENB

# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxoY1BkmzwT1ySVFVxyUD

# xPKRN6mXUaHW0oPRnkyibaCwzIP5WvYRoUQVQl+kiPNo+n3znIkLf50fng8zH1AT

# CyZzlm34V6gCff1DtITaEfFzsbPuK4CEiiIY3+vaPcQXf6sZKz5C3GeO6lE98NZW

# 1OcoLevTsbV15x8GZY2UKdPZ7Gnf2ZCHRgB720RBidx8ald68Dd5n12sy+iEZLRS

# 8nZH92GDGd1ftFQLIWhuNyG7QKxfst5Kfc71ORJn7w6lY2zkpsUdzTYNXNXmG6jB

# ZHRAp8ByxbpOH7G1WE15/tePc5OsLDnipUjW8LAxE6lXKZYnLvWHpo9OdhVVJnCY

# Jn+gGkcgQ+NDY4B7dW4nJZCYOjgRs/b2nuY7W+yB3iIU2YIqx5K/oN7jPqJz+ucf

# WmyU8lKVEStYdEAoq3NDzt9KoRxrOMUp88qqlnNCaJ+2RrOdOqPVA+C/8KI8ykLc

# GEh/FDTP0kyr75s9/g64ZCr6dSgkQe1CvwWcZklSUPRR8zZJTYsg0ixXNXkrqPNF

# YLwjjVj33GHek/45wPmyMKVM1+mYSlg+0wOI/rOP015LdhJRk8mMDDtbiiKowSYI

# +RQQEgN9XyO7ZONj4KbhPvbCdLI/Hgl27KtdRnXiYKNYCQEoAA6EVO7O6V3IXjAS

# vUaetdN2udIOa5kM0jO0zbECAwEAAaOCAV0wggFZMBIGA1UdEwEB/wQIMAYBAf8C

# AQAwHQYDVR0OBBYEFLoW2W1NhS9zKXaaL3WMaiCPnshvMB8GA1UdIwQYMBaAFOzX

# 44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggr

# BgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw

# LmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNl

# cnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDag

# NIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RH

# NC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3

# DQEBCwUAA4ICAQB9WY7Ak7ZvmKlEIgF+ZtbYIULhsBguEE0TzzBTzr8Y+8dQXeJL

# Kftwig2qKWn8acHPHQfpPmDI2AvlXFvXbYf6hCAlNDFnzbYSlm/EUExiHQwIgqgW

# valWzxVzjQEiJc6VaT9Hd/tydBTX/6tPiix6q4XNQ1/tYLaqT5Fmniye4Iqs5f2M

# vGQmh2ySvZ180HAKfO+ovHVPulr3qRCyXen/KFSJ8NWKcXZl2szwcqMj+sAngkSu

# mScbqyQeJsG33irr9p6xeZmBo1aGqwpFyd/EjaDnmPv7pp1yr8THwcFqcdnGE4AJ

# xLafzYeHJLtPo0m5d2aR8XKc6UsCUqc3fpNTrDsdCEkPlM05et3/JWOZJyw9P2un

# 8WbDQc1PtkCbISFA0LcTJM3cHXg65J6t5TRxktcma+Q4c6umAU+9Pzt4rUyt+8SV

# e+0KXzM5h0F4ejjpnOHdI/0dKNPH+ejxmF/7K9h+8kaddSweJywm228Vex4Ziza4

# k9Tm8heZWcpw8De/mADfIBZPJ/tgZxahZrrdVcA6KYawmKAr7ZVBtzrVFZgxtGIJ

# Dwq9gdkT/r+k0fNX2bwE+oLeMt8EifAAzV3C+dAjfwAL5HYCJtnwZXZCpimHCUcr

# 5n8apIUP/JiW9lVUKx+A+sDyDivl1vupL0QVSucTDh3bNzgaoSv27dZ8/DCCBY0w

# ggR1oAMCAQICEA6bGI750C3n79tQ4ghAGFowDQYJKoZIhvcNAQEMBQAwZTELMAkG

# A1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRp

# Z2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENB

# MB4XDTIyMDgwMTAwMDAwMFoXDTMxMTEwOTIzNTk1OVowYjELMAkGA1UEBhMCVVMx

# FTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNv

# bTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290IEc0MIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAv+aQc2jeu+RdSjwwIjBpM+zCpyUuySE98orY

# WcLhKac9WKt2ms2uexuEDcQwH/MbpDgW61bGl20dq7J58soR0uRf1gU8Ug9SH8ae

# FaV+vp+pVxZZVXKvaJNwwrK6dZlqczKU0RBEEC7fgvMHhOZ0O21x4i0MG+4g1ckg

# HWMpLc7sXk7Ik/ghYZs06wXGXuxbGrzryc/NrDRAX7F6Zu53yEioZldXn1RYjgwr

# t0+nMNlW7sp7XeOtyU9e5TXnMcvak17cjo+A2raRmECQecN4x7axxLVqGDgDEI3Y

# 1DekLgV9iPWCPhCRcKtVgkEy19sEcypukQF8IUzUvK4bA3VdeGbZOjFEmjNAvwjX

# WkmkwuapoGfdpCe8oU85tRFYF/ckXEaPZPfBaYh2mHY9WV1CdoeJl2l6SPDgohIb

# Zpp0yt5LHucOY67m1O+SkjqePdwA5EUlibaaRBkrfsCUtNJhbesz2cXfSwQAzH0c

# lcOP9yGyshG3u3/y1YxwLEFgqrFjGESVGnZifvaAsPvoZKYz0YkH4b235kOkGLim

# dwHhD5QMIR2yVCkliWzlDlJRR3S+Jqy2QXXeeqxfjT/JvNNBERJb5RBQ6zHFynIW

# IgnffEx1P2PsIV/EIFFrb7GrhotPwtZFX50g/KEexcCPorF+CiaZ9eRpL5gdLfXZ

# qbId5RsCAwEAAaOCATowggE2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOzX

# 44LScV1kTN8uZz/nupiuHA9PMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3z

# bcgPMA4GA1UdDwEB/wQEAwIBhjB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGG

# GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2Nh

# Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDBF

# BgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRBc3N1cmVkSURSb290Q0EuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG

# 9w0BAQwFAAOCAQEAcKC/Q1xV5zhfoKN0Gz22Ftf3v1cHvZqsoYcs7IVeqRq7IviH

# GmlUIu2kiHdtvRoU9BNKei8ttzjv9P+Aufih9/Jy3iS8UgPITtAq3votVs/59Pes

# MHqai7Je1M/RQ0SbQyHrlnKhSLSZy51PpwYDE3cnRNTnf+hZqPC/Lwum6fI0POz3

# A8eHqNJMQBk1RmppVLC4oVaO7KTVPeix3P0c2PR3WlxUjG/voVA9/HYJaISfb8rb

# II01YBwCA8sgsKxYoA5AY8WYIsGyWfVVa88nq2x2zm8jLfR+cWojayL/ErhULSd+

# 2DrZ8LaHlv1b0VysGMNNn3O3AamfV6peKOK5lDGCA3YwggNyAgEBMHcwYzELMAkG

# A1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdp

# Q2VydCBUcnVzdGVkIEc0IFJTQTQwOTYgU0hBMjU2IFRpbWVTdGFtcGluZyBDQQIQ

# C65mvFq6f5WHxvnpBOMzBDANBglghkgBZQMEAgEFAKCB0TAaBgkqhkiG9w0BCQMx

# DQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI0MTAxNjE4MTYxMFowKwYL

# KoZIhvcNAQkQAgwxHDAaMBgwFgQU29OF7mLb0j575PZxSFCHJNWGW0UwLwYJKoZI

# hvcNAQkEMSIEIMLe6YV9yP4isfiapquRFXsBIpTKT1CBiFOPx6No/mFWMDcGCyqG

# SIb3DQEJEAIvMSgwJjAkMCIEIHZ2n6jyYy8fQws6IzCu1lZ1/tdz2wXWZbkFk5hD

# j5rbMA0GCSqGSIb3DQEBAQUABIICAIk+CiLNE3IKlpeS/2EHIGZ4sB8FsfT4YK5I

# KPqX57GXQcxJy3eBzSe+Tx9e+5bG0oNhxacgluR1gfKIcJSBh7OrWaMWQdXSmMy2

# Ktf8wB822OMyzAhddey6ebT1eVsNwFhpM8UPWIL7mQKcGbSFcBC6N9uEuos3sYSQ

# JkUaN5tLhw7FDfv0QgvrhQ5LkgH5ts5BziVyHAFjnBED1IFjuBlIO6jElBZngO9o

# 34/U9uFWuhx74aNn/fkgEMHzYSXbpgHFKeHZRab9vdSAIzVyc7he3Q6xLc724tvN

# h8qiAj53tbmfqUxyXYc1De9lV3bLDjnvnPJigJu5umdOnLUCW7YCYbh5/SwnODv1

# JGcpfDqrkO89/1l9PpWBGc37bdUPFDcT8u29Awav4K+y2w4VgxBApx7yBkWODX83

# Z1GwqphV+oy32XZda+dhrbqkN/VgSe3xniN8TYEG2rzkXXSPF4zm2fFlu4RZRxHe

# 7PPcti7kERJwdQ+C9F6fLbe/u/TpLUuC9ij9Umv4AfElI2RqfcSEmeGwBhlgqPny

# 7b/tpTIhXYqQrN3864/Psbg8oBfObFlxvyX3GKOpjvm8mPoM5I7MPY1nCNOo0qKD

# jWmyu1fqYQUwBWgFzX856xq7QyoEbHXxjKrUtYEQlTjcBL9ezk7pQTpbj8YsmKaP

# 95XMv5fb

# SIG # End signature block