Remove-AaddsResourceForestTrust

1.1

Remove-AaddsResourceForestTrust.ps1

                                <#PSScriptInfo

.VERSION 1.1

.GUID 28e4c489-94b3-4699-b7c8-1bb701278bb9

.AUTHOR aaddsfb@microsoft.com

.COMPANYNAME Microsoft Corporation

.COPYRIGHT (c) Microsoft Corporation

.TAGS Azure-AD-Domain-Services ResourceForest

.LICENSEURI 

.PROJECTURI 

.ICONURI 

.EXTERNALMODULEDEPENDENCIES 

.REQUIREDSCRIPTS 

.EXTERNALSCRIPTDEPENDENCIES 

.RELEASENOTES

    07/19/2020 - Initial release

#>

<#

.SYNOPSIS

    Remove a forest trust from Azure AD Domain Services resource forest. 

.DESCRIPTION

    Remove a forest trust from Azure AD Domain Services resource forest. 

.PARAMETER ManagedDomainFqdn [MANADATORY]

    The fqdn of the managed domain (aadds.corp.contoso.com).

.PARAMETER TrustFqdn [MANADATORY]

    The FQDN of the trusted forest.

    Not used with All switch 

.PARAMETER All [OPTIONAL]

    Remove all the trusts from the Azure AD Domain Services resource forest    

.PARAMETER Credential [OPTIONAL]

    The credentials used to authenticate to Azure.

#>

[CmdletBinding()]

Param (

    [Parameter(

        Mandatory=$true,

        ParameterSetName="Specific")]

    [Parameter(

        Mandatory=$true,

        ParameterSetName="All")]

        [string]

        $ManagedDomainFqdn,

    [Parameter(

        Mandatory=$true,

        ParameterSetName="Specific")]

        [string]

        $TrustFqdn,

    [Parameter(

        Mandatory=$true,

        ParameterSetName="All")]

        [switch]

        $All,    

    [Parameter(

        Mandatory=$false,

        ParameterSetName="Specific")]

    [Parameter(

        Mandatory=$false,

        ParameterSetName="All")]

        [pscredential]

        $Credentials

)

Process

{

    #

    # Create empty trust settings 

    $TrustSettingsValue = [System.Collections.ArrayList]@()

    $azProfile = $null

    Write-Host ([string]::Empty)

    Write-Host ([string]::Empty)

    Write-Host "Authenticating to Azure... " -NoNewline

    #

    # Collect credentials from the user for authentication     

    if($null -ne $creds)

    {

        $creds = Get-Credential -ErrorAction SilentlyContinue        

        $azProfile = Connect-AzAccount -Credential $creds -ErrorAction SilentlyContinue

    }

    else

    {

        $azProfile = Connect-AzAccount -ErrorAction SilentlyContinue

    }

    if($null -eq $azProfile)

    {

        # Authentication failed

        Write-Host -ForegroundColor Red "[Failed!]"

        Write-Host -ForegroundColor Red "ERROR: Could not authenticate to Azure. Check your credentials and try again."

        Return

    }

    else

    {

        Write-Host -ForegroundColor Green "[Success!]"

    }

    Write-Host "INFO: Authenticated to Azure as $($azProfile.Account.Id)..."

    Write-Host "Getting Azure AD Domain Services instance..." -NoNewline

    $aadds = Get-AzResource -Name $ManagedDomainFqdn -ApiVersion "2020-01-01" -ExpandProperties -ErrorAction SilentlyContinue

    if($null -eq $aadds)

    {

        Write-Host -ForegroundColor Red "[Failed!]"

        Write-Host -ForegroundColor Red "ERROR: Could not find an Azure AD Domain Services resource with the name $ManagedDomainFqdn."

        Return

    }

    #region Prerequisites checking...

    Write-Host ([string]::Empty)

    Write-Host "Checking prerequisites..."

    $pass = $true

    Write-Host "Validating resource type..." -NoNewline

    if($aadds.ResourceType -ne "Microsoft.AAD/domainServices")

    {

        $pass = $false

        Write-Host -ForegroundColor Red "[Failed!]"

        Write-Host -ForegroundColor Red "ERROR: The resource is not an Azure AD Domain Services resource (Status:$($aadds.ResourceType)."

    }

    else {Write-Host -ForegroundColor Green "[Pass!]"}

    Write-Host "Validating service status..." -NoNewline

    if($null -ne $aadds.Properties.ReplicaSets)

    {

        $replicaSetCount = $aadds.Properties.ReplicaSets.Count

    }

    else { $replicaSetCount = 0 }

    $serviceStatus = $null

    if($replicaSetCount -eq 1)

    {

        $serviceStatus = $aadds.Properties.ReplicaSets[0].serviceStatus

    }

    elseif($replicaSetCount -gt 1)

    {

        $syncOwner = $aadds.Properties.SyncOwner

        $primaryReplicaSet = $aadds.Properties.ReplicaSets | Where-Object { $_.ReplicaSetId -eq $syncOwner }

        $serviceStatus = $primaryReplicaSet.serviceStatus

    }

    else { $serviceStatus = $null }

    if($serviceStatus -ne "Running")

    {

        $pass = $false

        Write-Host -ForegroundColor Red "[Failed!]"

        Write-Host -ForegroundColor Red "ERROR: The managed domain $($aadds.Name) must be running (Status:$($aadds.properties.serviceStatus))."

    }

    else { Write-Host -ForegroundColor Green "[Pass!]" }

    Write-Host "Validating domain configuration..." -NoNewline

    if($aadds.properties.domainConfigurationType -ne "ResourceTrusting")

    {

        $pass = $false

        Write-Host -ForegroundColor red "[Failed!]"

        Write-Host -ForegroundColor Red "ERROR: The managed domain $($aadds.Name) is not a resource forest (Status:$($aadds.properties.domainConfigurationType))."        

    }

    else

    { Write-Host -ForegroundColor Green "[Pass!]"}

    Write-Host "Finding trust name..." -NoNewline

    #

    # Check the $all switch and skip if $true

    if($all -eq $true)

    {

        Write-Host -ForegroundColor Green "[Skip!]" -NoNewline

        Write-Host -ForegroundColor "INFO: All parameter detected."

    }

    else

    {

        # User provided an explicit trust

        #Get the list of current trusts.

        $tempTrustSettingsValue = $aadds.Properties.resourceForestSettings.settings

        if(0 -lt $tempTrustSettingsValue.Count)

        {

            $found = $false

            foreach($tempTrustValue in $tempTrustSettingsValue)

            {    

                #check for matching #fqdn

                if($TrustFqdn -eq $tempTrustValue.trustedDomainFqdn)

                { 

                    $found = $true

                    break;             

                }

            }

            if($found)

            { 

                Write-Host -ForegroundColor Green "[Pass!]"

            }

            else

            {

                $pass = $false

                Write-Host -ForegroundColor Red "[Failed!]"

                Write-Host -ForegroundColor Red "The trust $TrustFqdn does not exist in the managed domain $($aadds.Name)."

            }

        }

        else # There are no existing trusts to edit

        {

            $pass = $false

            Write-Host -ForegroundColor Red "[Failed!]"

            Write-Host -ForegroundColor Red  "The managed domain $($aadds.Name) does not have any trusts. Use Add-AaddsResourceForestTrust to add a trust."

        }

    }

    if($pass -eq $false)

    {

        Write-Host ([string]::Empty)

        Write-Host -ForegroundColor Red "ERROR: One or more prerequisites checks failed."

        Return

    }

    #endregion

    #

    # TrustSettingsValue is empty. The -all case is covered

    # When -all is false (not present)

    # Add existing trust but leave out the named trust

    if($all -eq $false)

    {

        foreach($tempTrustValue in $tempTrustSettingsValue)

        {        

            # Check for matching #fqdn

            if($TrustFqdn -eq $tempTrustValue.trustedDomainFqdn)

            { 

                # Save the old trust for display.

                # Skip adding it to the new trust list

                $oldTrust = $tempTrustValue                

            }        

            else

            {

                $catchOutput = $TrustSettingsValue.Add( $tempTrustValue)

            }

        }

    }

    Write-Host ([string]::Empty)

    if($all -eq $true)

    {

        $msg = "Type 'Yes' to confirm you want to delete *ALL* the trust in the $($aadds.Name) managed domain."

    }

    else

    {

        #

        # Show the trust         

        Write-Host -ForegroundColor Yellow "Trust Settings"

        Write-Host "FriendlyName: " $oldTrust.FriendlyName

        Write-Host "TrustedDomainFqdn: " $oldTrust.trustedDomainFqdn

        Write-Host "DNS IP Addresses: " $oldTrust.remoteDNSIPs

        $msg = "Type 'Yes' to confirm you want to delete the trust $($TrustFqdn) with these settings."

    }

    Write-Host ([string]::Empty)

    $answer = Read-host -Prompt $msg

    if("Yes" -cne $answer)

    {

        Write-Host "User canceled."

        Return 

    }

    # Assign the trust values to the trust settings

    $trustSettings = @{"settings" = $TrustSettingsValue}

    # Assign the trust settings to the ResourceForestSettings

    $resourceForestSettings = @{"resourceForestSettings" = $trustSettings}

    $actionStart = Get-Date

    Write-Host ([string]::Empty)

    Write-Host "Sending request to Azure. This action may take up to five minutes to complete. Please wait..."

    Set-AzResource -ResourceId $aadds.ResourceId -ApiVersion "2020-01-01" -Properties $resourceForestSettings -force

    $actionStop = Get-Date

    Write-Host "Elapsed Time: " ($actionStop - $actionStart)

}

# SIG # Begin signature block

# MIInMwYJKoZIhvcNAQcCoIInJDCCJyACAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCB/EOB8jZKrTDSL

# 5HtXzt8UHix5CEsHLOzGf7GH+rklEqCCEW8wggiBMIIHaaADAgECAhM2AAABDBla

# ELMo09izAAEAAAEMMA0GCSqGSIb3DQEBCwUAMEExEzARBgoJkiaJk/IsZAEZFgNH

# QkwxEzARBgoJkiaJk/IsZAEZFgNBTUUxFTATBgNVBAMTDEFNRSBDUyBDQSAwMTAe

# Fw0yMDAyMDkxMzI1MDFaFw0yMTAyMDgxMzI1MDFaMC8xLTArBgNVBAMTJE1pY3Jv

# c29mdCBBenVyZSBEZXBlbmRlbmN5IENvZGUgU2lnbjCCASIwDQYJKoZIhvcNAQEB

# BQADggEPADCCAQoCggEBAJL4kx4D2erD4cliqomE3dMX+gvfMz/ovrjRwJqG80Kl

# kGP+kOn35E80o/Ua/SdfQq3gjLNJSJpa6Yn0ph8FOf7U4NT7a8+zrwBTpZ/7llv9

# /jGf037eKxEWsCtMTRfL1dKBOQhn1lHAZvjKdgIgJAFG7ydg1oKsn0wfGBXSgile

# g1IWbTNpR5luLpuHPWRspqDtXCXif/+rjukP5tvDqZmxYP0tQXER4I1eUXiJIXHf

# 7dFZR7VxjZ4BP1rEUU8Gk+BMGpTJTTB21MjwtEjF2U5WAv1KeUpxxlYPKEYGgr2/

# lCXgkoWmPWqSLMbLjcX5uLfMP9j/IW/UnpoaReR1gVsCAwEAAaOCBYIwggV+MCkG

# CSsGAQQBgjcVCgQcMBowDAYKKwYBBAGCN1sDATAKBggrBgEFBQcDAzA8BgkrBgEE

# AYI3FQcELzAtBiUrBgEEAYI3FQiGkOMNhNW0eITxiz6Fm90Wzp0SgWDigi2HkK4D

# AgFkAgEOMIICdgYIKwYBBQUHAQEEggJoMIICZDBiBggrBgEFBQcwAoZWaHR0cDov

# L2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NlcnRzL0JZMlBLSUNTQ0EwMS5B

# TUUuR0JMX0FNRSUyMENTJTIwQ0ElMjAwMSgxKS5jcnQwUgYIKwYBBQUHMAKGRmh0

# dHA6Ly9jcmwxLmFtZS5nYmwvYWlhL0JZMlBLSUNTQ0EwMS5BTUUuR0JMX0FNRSUy

# MENTJTIwQ0ElMjAwMSgxKS5jcnQwUgYIKwYBBQUHMAKGRmh0dHA6Ly9jcmwyLmFt

# ZS5nYmwvYWlhL0JZMlBLSUNTQ0EwMS5BTUUuR0JMX0FNRSUyMENTJTIwQ0ElMjAw

# MSgxKS5jcnQwUgYIKwYBBQUHMAKGRmh0dHA6Ly9jcmwzLmFtZS5nYmwvYWlhL0JZ

# MlBLSUNTQ0EwMS5BTUUuR0JMX0FNRSUyMENTJTIwQ0ElMjAwMSgxKS5jcnQwUgYI

# KwYBBQUHMAKGRmh0dHA6Ly9jcmw0LmFtZS5nYmwvYWlhL0JZMlBLSUNTQ0EwMS5B

# TUUuR0JMX0FNRSUyMENTJTIwQ0ElMjAwMSgxKS5jcnQwga0GCCsGAQUFBzAChoGg

# bGRhcDovLy9DTj1BTUUlMjBDUyUyMENBJTIwMDEsQ049QUlBLENOPVB1YmxpYyUy

# MEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9

# QU1FLERDPUdCTD9jQUNlcnRpZmljYXRlP2Jhc2U/b2JqZWN0Q2xhc3M9Y2VydGlm

# aWNhdGlvbkF1dGhvcml0eTAdBgNVHQ4EFgQUkku2i4tvXu/fb2UHKKZiDd81U7Aw

# DgYDVR0PAQH/BAQDAgeAMFAGA1UdEQRJMEekRTBDMSkwJwYDVQQLEyBNaWNyb3Nv

# ZnQgT3BlcmF0aW9ucyBQdWVydG8gUmljbzEWMBQGA1UEBRMNMjM2MTY5KzQ1Nzc5

# NTCCAdQGA1UdHwSCAcswggHHMIIBw6CCAb+gggG7hjxodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpaW5mcmEvQ1JML0FNRSUyMENTJTIwQ0ElMjAwMS5jcmyGLmh0

# dHA6Ly9jcmwxLmFtZS5nYmwvY3JsL0FNRSUyMENTJTIwQ0ElMjAwMS5jcmyGLmh0

# dHA6Ly9jcmwyLmFtZS5nYmwvY3JsL0FNRSUyMENTJTIwQ0ElMjAwMS5jcmyGLmh0

# dHA6Ly9jcmwzLmFtZS5nYmwvY3JsL0FNRSUyMENTJTIwQ0ElMjAwMS5jcmyGLmh0

# dHA6Ly9jcmw0LmFtZS5nYmwvY3JsL0FNRSUyMENTJTIwQ0ElMjAwMS5jcmyGgbps

# ZGFwOi8vL0NOPUFNRSUyMENTJTIwQ0ElMjAwMSxDTj1CWTJQS0lDU0NBMDEsQ049

# Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNv

# bmZpZ3VyYXRpb24sREM9QU1FLERDPUdCTD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25M

# aXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwHwYDVR0j

# BBgwFoAUG2aiGfyb66XahI8YmOkQpMN7kr0wHwYDVR0lBBgwFgYKKwYBBAGCN1sD

# AQYIKwYBBQUHAwMwDQYJKoZIhvcNAQELBQADggEBAFdWLRaOg25JZG+Hm01zB/zB

# oSC3MUJ7lWHPIE44xH/7Ek9n0KnzXthnL345WNBcnW3pNbqHGVeLx7SlYJFbsiLi

# vKm3+FUc71F5AQvySUTOpRvHRmEBgzuZo9t6n211l2GQLWdGMGvzrIaeV81wsP2r

# W0G++acIHvczziw0mDTM3UYNeyxI6rFwsZsdfbvzbmsqcZuK9B699sEQoWQO19Fu

# 0sIkj3WPKlATUk9dAAhHkwl2dcPckrvhBvwa9rYPLPAjWsFTZLdRTBubE9ukikdd

# PDTqTM+9FhlPwo7PGMKyBngj9jp4WsfIyDfVfE1W/LgtDa+0SN7mPPNNbW5SKcMw

# ggjmMIIGzqADAgECAhMfAAAAFLTFH8bygL5xAAAAAAAUMA0GCSqGSIb3DQEBCwUA

# MDwxEzARBgoJkiaJk/IsZAEZFgNHQkwxEzARBgoJkiaJk/IsZAEZFgNBTUUxEDAO

# BgNVBAMTB2FtZXJvb3QwHhcNMTYwOTE1MjEzMzAzWhcNMjEwOTE1MjE0MzAzWjBB

# MRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRUwEwYD

# VQQDEwxBTUUgQ1MgQ0EgMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDVV4EC1vn60PcbgLndN80k3GZh/OGJcq0pDNIbG5q/rrRtNLVUR4MONKcWGyae

# VvoaQ8J5iYInBaBkaz7ehYnzJp3f/9Wg/31tcbxrPNMmZPY8UzXIrFRdQmCLsj3L

# cLiWX8BN8HBsYZFcP7Y92R2VWnEpbN40Q9XBsK3FaNSEevoRzL1Ho7beP7b9FJlK

# B/Nhy0PMNaE1/Q+8Y9+WbfU9KTj6jNxrffv87O7T6doMqDmL/MUeF9IlmSrl088b

# oLzAOt2LAeHobkgasx3ZBeea8R+O2k+oT4bwx5ZuzNpbGXESNAlALo8HCf7xC3hW

# qVzRqbdnd8HDyTNG6c6zwyf/AgMBAAGjggTaMIIE1jAQBgkrBgEEAYI3FQEEAwIB

# ATAjBgkrBgEEAYI3FQIEFgQUkfwzzkKe9pPm4n1U1wgYu7jXcWUwHQYDVR0OBBYE

# FBtmohn8m+ul2oSPGJjpEKTDe5K9MIIBBAYDVR0lBIH8MIH5BgcrBgEFAgMFBggr

# BgEFBQcDAQYIKwYBBQUHAwIGCisGAQQBgjcUAgEGCSsGAQQBgjcVBgYKKwYBBAGC

# NwoDDAYJKwYBBAGCNxUGBggrBgEFBQcDCQYIKwYBBQUIAgIGCisGAQQBgjdAAQEG

# CysGAQQBgjcKAwQBBgorBgEEAYI3CgMEBgkrBgEEAYI3FQUGCisGAQQBgjcUAgIG

# CisGAQQBgjcUAgMGCCsGAQUFBwMDBgorBgEEAYI3WwEBBgorBgEEAYI3WwIBBgor

# BgEEAYI3WwMBBgorBgEEAYI3WwUBBgorBgEEAYI3WwQBBgorBgEEAYI3WwQCMBkG

# CSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjASBgNVHRMBAf8E

# CDAGAQH/AgEAMB8GA1UdIwQYMBaAFCleUV5krjS566ycDaeMdQHRCQsoMIIBaAYD

# VR0fBIIBXzCCAVswggFXoIIBU6CCAU+GI2h0dHA6Ly9jcmwxLmFtZS5nYmwvY3Js

# L2FtZXJvb3QuY3JshjFodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpaW5mcmEv

# Y3JsL2FtZXJvb3QuY3JshiNodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9hbWVyb290

# LmNybIYjaHR0cDovL2NybDMuYW1lLmdibC9jcmwvYW1lcm9vdC5jcmyGgapsZGFw

# Oi8vL0NOPWFtZXJvb3QsQ049QU1FUk9PVCxDTj1DRFAsQ049UHVibGljJTIwS2V5

# JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz1BTUUs

# REM9R0JMP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFz

# cz1jUkxEaXN0cmlidXRpb25Qb2ludDCCAasGCCsGAQUFBwEBBIIBnTCCAZkwNwYI

# KwYBBQUHMAKGK2h0dHA6Ly9jcmwxLmFtZS5nYmwvYWlhL0FNRVJPT1RfYW1lcm9v

# dC5jcnQwRwYIKwYBBQUHMAKGO2h0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2lp

# bmZyYS9jZXJ0cy9BTUVST09UX2FtZXJvb3QuY3J0MDcGCCsGAQUFBzAChitodHRw

# Oi8vY3JsMi5hbWUuZ2JsL2FpYS9BTUVST09UX2FtZXJvb3QuY3J0MDcGCCsGAQUF

# BzAChitodHRwOi8vY3JsMy5hbWUuZ2JsL2FpYS9BTUVST09UX2FtZXJvb3QuY3J0

# MIGiBggrBgEFBQcwAoaBlWxkYXA6Ly8vQ049YW1lcm9vdCxDTj1BSUEsQ049UHVi

# bGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhdGlv

# bixEQz1BTUUsREM9R0JMP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3RDbGFzcz1j

# ZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MA0GCSqGSIb3DQEBCwUAA4ICAQAot0qGmo8f

# pAFozcIA6pCLygDhZB5ktbdA5c2ZabtQDTXwNARrXJOoRBu4Pk6VHVa78Xbz0OZc

# 1N2xkzgZMoRpl6EiJVoygu8Qm27mHoJPJ9ao9603I4mpHWwaqh3RfCfn8b/NxNhL

# Gfkrc3wp2VwOtkAjJ+rfJoQlgcacD14n9/VGt9smB6j9ECEgJy0443B+mwFdyCJO

# 5OaUP+TQOqiC/MmA+r0Y6QjJf93GTsiQ/Nf+fjzizTMdHggpTnxTcbWg9JCZnk4c

# C+AdoQBKR03kTbQfIm/nM3t275BjTx8j5UhyLqlqAt9cdhpNfdkn8xQz1dT6hTnL

# iowvNOPUkgbQtV+4crzKgHuHaKfJN7tufqHYbw3FnTZopnTFr6f8mehco2xpU8bV

# KhO4i0yxdXmlC0hKGwGqdeoWNjdskyUyEih8xyOK47BEJb6mtn4+hi8TY/4wvuCz

# cvrkZn0F0oXd9JbdO+ak66M9DbevNKV71YbEUnTZ81toX0Ltsbji4PMyhlTg/669

# BoHsoTg4yoC9hh8XLW2/V2lUg3+qHHQf/2g2I4mm5lnf1mJsu30NduyrmrDIeZ0l

# dqKzHAHnfAmyFSNzWLvrGoU9Q0ZvwRlDdoUqXbD0Hju98GL6dTew3S2mcs+17Dgs

# dargsEPm6I1lUE5iixnoEqFKWTX5j/TLUjGCFRowghUWAgEBMFgwQTETMBEGCgmS

# JomT8ixkARkWA0dCTDETMBEGCgmSJomT8ixkARkWA0FNRTEVMBMGA1UEAxMMQU1F

# IENTIENBIDAxAhM2AAABDBlaELMo09izAAEAAAEMMA0GCWCGSAFlAwQCAQUAoIGu

# MBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgor

# BgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCDGiYgWfdSlbSM+MPM0kNkXOBxMfAsg

# beWquuBnbI/OszBCBgorBgEEAYI3AgEMMTQwMqAUgBIATQBpAGMAcgBvAHMAbwBm

# AHShGoAYaHR0cDovL3d3dy5taWNyb3NvZnQuY29tMA0GCSqGSIb3DQEBAQUABIIB

# AIyc02+n1rw0XHRNRZodDvzkQcDxDEqCUGTaxGG5GzxHxNjQOMdj0FzotB7COMuD

# zXYSNH+puUr2HJDA9t11EOjK0cNqTZZW0d82EkNUFLrDETDPD81XX+ln6VTDgF/F

# F+6lN2st+AAm2Eo4mZwUf3t0NkfSLuPmm2K9Gdsot4YFfi1Keium6hyrAl9KfEEj

# bpSY0TJ0ZPf0ozLtmNLpUxWNg0Vt0G5COJs2qYhpAcjcdLXqCBOcPBGAd7tPAR1k

# EkZTBe2STMMQ1EbzQ9UBpRBi8dYFfCxSYJPrcnYHpzIz3Dhbq3vAq9VwrGW0LXYu

# UFdFXo3nnCFT9WfUQotKSqKhghLiMIIS3gYKKwYBBAGCNwMDATGCEs4wghLKBgkq

# hkiG9w0BBwKgghK7MIIStwIBAzEPMA0GCWCGSAFlAwQCAQUAMIIBUQYLKoZIhvcN

# AQkQAQSgggFABIIBPDCCATgCAQEGCisGAQQBhFkKAwEwMTANBglghkgBZQMEAgEF

# AAQgOw7mMq/Q3HzY344EcPV3WmRdqfCgykd+NsrX0E6TJMUCBl8YTfLRORgTMjAy

# MDA3MjgwNDE4MDkuNDM5WjAEgAIB9KCB0KSBzTCByjELMAkGA1UEBhMCVVMxCzAJ

# BgNVBAgTAldBMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlv

# bnMgTGltaXRlZDEmMCQGA1UECxMdVGhhbGVzIFRTUyBFU046QTI0MC00QjgyLTEz

# MEUxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2Wggg45MIIE

# 8TCCA9mgAwIBAgITMwAAARENAp7u1O0F1AAAAAABETANBgkqhkiG9w0BAQsFADB8

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1N

# aWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0xOTEwMjMyMzE5MjBaFw0y

# MTAxMjEyMzE5MjBaMIHKMQswCQYDVQQGEwJVUzELMAkGA1UECBMCV0ExEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsG

# A1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMSYwJAYD

# VQQLEx1UaGFsZXMgVFNTIEVTTjpBMjQwLTRCODItMTMwRTElMCMGA1UEAxMcTWlj

# cm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCASIwDQYJKoZIhvcNAQEBBQADggEP

# ADCCAQoCggEBAKMS0oITwRtpi4HuDJbl2ZQ3mwGgxYVZpRv55E/fcwwbne+oeRUP

# 588F15tSuFNbsVdwDkecl7Plzc51nbnoL2DDHA7ReyWVkFZMxWhFMN2wxVXqKo2J

# nY9zughI6XeN0OhRIM5rOgnXi9ATdgrvXMxHj/XxXxn05wxI/xqgaXtpe2eRz+6O

# sCQ2PodNqcdsb+uq8qdPRUUVkDA88qIp4gmVmB/XWhqdjtZ1jIYyH0vEU5Y2fHNp

# cHlaRxWj8B5/HKyoPJMj+DpsWdrHVtdV1lf/D62l6kNP8VBGJuFlTv2GJtCZ5SB7

# 9gHwbhcDHCN91kyZ0x9vjguMtHHVEjZ20y8CAwEAAaOCARswggEXMB0GA1UdDgQW

# BBT6cN5BC6h2WMMQw9AMV1DftvkB8jAfBgNVHSMEGDAWgBTVYzpcijGQ80N7fEYb

# xTNoWoVtVTBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5j

# b20vcGtpL2NybC9wcm9kdWN0cy9NaWNUaW1TdGFQQ0FfMjAxMC0wNy0wMS5jcmww

# WgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpL2NlcnRzL01pY1RpbVN0YVBDQV8yMDEwLTA3LTAxLmNydDAMBgNV

# HRMBAf8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMIMA0GCSqGSIb3DQEBCwUAA4IB

# AQCPhmtdRJiu4gYWlF5XhsGRwwdjtn5xGjSnPnm441k99W0bLkKPDAM1EtRV7t7g

# uNw2jEw/bM9EJevUTTck9ziVA+zXVuEWOyVYDd/M9RavvIEy9lfFl0ysaddoDja0

# wbQouHqzMhMzgFwLhD2aIeAdIL0uEc0+z+ACfcJkZE1jCXGxexgkHrSeq+N4fTzr

# 4ok03UbWc8IVHYhisuDi5l3AlhM4e7ZZTDJmWHXIIpE4rYWR17SUFArxE95TurCq

# ZMJzVhK8s03yI4MldX1RejisFlHmu4lNuUNlrNuRhBNjEOvCwiF76l16zqRu8leX

# LphjiFTBE44jQeDgdBTk8UaDMIIGcTCCBFmgAwIBAgIKYQmBKgAAAAAAAjANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTAwHhcNMTAwNzAxMjEzNjU1WhcNMjUwNzAxMjE0NjU1WjB8MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQg

# VGltZS1TdGFtcCBQQ0EgMjAxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC

# ggEBAKkdDbx3EYo6IOz8E5f1+n9plGt0VBDVpQoAgoX77XxoSyxfxcPlYcJ2tz5m

# K1vwFVMnBDEfQRsalR3OCROOfGEwWbEwRA/xYIiEVEMM1024OAizQt2TrNZzMFcm

# gqNFDdDq9UeBzb8kYDJYYEbyWEeGMoQedGFnkV+BVLHPk0ySwcSmXdFhE24oxhr5

# hoC732H8RsEnHSRnEnIaIYqvS2SJUGKxXf13Hz3wV3WsvYpCTUBR0Q+cBj5nf/Vm

# wAOWRH7v0Ev9buWayrGo8noqCjHw2k4GkbaICDXoeByw6ZnNPOcvRLqn9NxkvaQB

# wSAJk3jN/LzAyURdXhacAQVPIk0CAwEAAaOCAeYwggHiMBAGCSsGAQQBgjcVAQQD

# AgEAMB0GA1UdDgQWBBTVYzpcijGQ80N7fEYbxTNoWoVtVTAZBgkrBgEEAYI3FAIE

# DB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNV

# HSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVo

# dHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29D

# ZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAC

# hj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1

# dF8yMDEwLTA2LTIzLmNydDCBoAYDVR0gAQH/BIGVMIGSMIGPBgkrBgEEAYI3LgMw

# gYEwPQYIKwYBBQUHAgEWMWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9QS0kvZG9j

# cy9DUFMvZGVmYXVsdC5odG0wQAYIKwYBBQUHAgIwNB4yIB0ATABlAGcAYQBsAF8A

# UABvAGwAaQBjAHkAXwBTAHQAYQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZIhvcNAQEL

# BQADggIBAAfmiFEN4sbgmD+BcQM9naOhIW+z66bM9TG+zwXiqf76V20ZMLPCxWbJ

# at/15/B4vceoniXj+bzta1RXCCtRgkQS+7lTjMz0YBKKdsxAQEGb3FwX/1z5Xhc1

# mCRWS3TvQhDIr79/xn/yN31aPxzymXlKkVIArzgPF/UveYFl2am1a+THzvbKegBv

# SzBEJCI8z+0DpZaPWSm8tv0E4XCfMkon/VWvL/625Y4zu2JfmttXQOnxzplmkIz/

# amJ/3cVKC5Em4jnsGUpxY517IW3DnKOiPPp/fZZqkHimbdLhnPkd/DjYlPTGpQqW

# hqS9nhquBEKDuLWAmyI4ILUl5WTs9/S/fmNZJQ96LjlXdqJxqgaKD4kWumGnEcua

# 2A5HmoDF0M2n0O99g/DhO3EJ3110mCIIYdqwUB5vvfHhAN/nMQekkzr3ZUd46Pio

# SKv33nJ+YWtvd6mBy6cJrDm77MbL2IK0cs0d9LiFAR6A+xuJKlQ5slvayA1VmXqH

# czsI5pgt6o3gMy4SKfXAL1QnIffIrE7aKLixqduWsqdCosnPGUFN4Ib5KpqjEWYw

# 07t0MkvfY3v1mYovG8chr1m1rtxEPJdQcdeh0sVV42neV8HR3jDA/czmTfsNv11P

# 6Z0eGTgvvM9YBS7vDaBQNdrvCScc1bN+NR4Iuto229Nfj950iEkSoYICyzCCAjQC

# AQEwgfihgdCkgc0wgcoxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJXQTEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYD

# VQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJjAkBgNV

# BAsTHVRoYWxlcyBUU1MgRVNOOkEyNDAtNEI4Mi0xMzBFMSUwIwYDVQQDExxNaWNy

# b3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBB7ubtvHon

# z32bk4mWhhsbX590x6CBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAy

# MDEwMA0GCSqGSIb3DQEBBQUAAgUA4soMkjAiGA8yMDIwMDcyODEwMzE0NloYDzIw

# MjAwNzI5MTAzMTQ2WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDiygySAgEAMAcC

# AQACAgGVMAcCAQACAhGoMAoCBQDiy14SAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwG

# CisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQEF

# BQADgYEAONJ6xjFgX29BJ6zT4NrwSN9dRTkUPgrpRQTGc/uDtZwNV/KIraF/y0eb

# laXsEEUHkvw2ZmQc+gUdl6iw02vBc0FQunYFrNU7J7qnDRJOw+nq/TMsvqN/Lb7p

# I39Gep+wA4Me2nlOYzykj/FjMT27ZG60PeLS2SRgSAaFniJpFCcxggMNMIIDCQIB

# ATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD

# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAARENAp7u1O0F

# 1AAAAAABETANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3

# DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCD1GboIhMxH107QV42/EnMD3qAt13bEXpLM

# IAaXznfmpTCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EII4+Eq+iBR4aQaFr

# G0Jm439S0PVPgP7IPFw7BXPpKLZbMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh

# bXAgUENBIDIwMTACEzMAAAERDQKe7tTtBdQAAAAAAREwIgQgLPOUPg3tA8GPEJLC

# Y9NIYHDCOBFDuStSrrx9OtyngpcwDQYJKoZIhvcNAQELBQAEggEAglCYbN1f2OQ9

# rjAY5U02MUqMvV/TUycc2NghDu33FwGQ3OHFd8lL2K+eGZ79ol1cQc/QLROq2PTC

# WbVlNOTctwZZHLEn9enpkSlT0K4r1JXjxRD29s24RcJ11xRi7mc2vmA5W9xE4IKO

# OB+Ubt2GjHRAzjR+ZAAfOYn4Dd4kemvwfQA8eUaa9rE2xN7rWWJ/Ikv0nTB/jeLK

# E+pbFUXpKYCrH/WWXoiRAyY414Ho5JVgudi+jxiJU0EyNQM4+We+grdBRfOHBaY0

# 7+BgW0tBIw3aKolQ8nvKdY+R5yz0wBIajcp6BcN9hOeenqP8ZfDfDXGUxWNcgGXc

# yJDkO/CVqg==

# SIG # End signature block