ScubaGear

1.5.0-rc2

Modules/CreateReport/CreateReport.psm1

                                Import-Module -Name (Join-Path -Path $PSScriptRoot -ChildPath "..\Utility")

function New-Report {

     <#

    .Description

    This function creates the individual HTML/json reports using the TestResults.json.

    Output will be stored as HTML/json files in the InvidualReports folder in the OutPath Folder.

    The report Home page and link tree will be named BaselineReports.html

    .Functionality

    Internal

    #>

    [CmdletBinding()]

    param (

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [ValidateSet("Teams", "EXO", "Defender", "AAD", "PowerPlatform", "SharePoint", IgnoreCase = $false)]

        [string]

        $BaselineName,

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [ValidateSet("Microsoft Teams", "Exchange Online", "Microsoft 365 Defender", "Azure Active Directory", "Microsoft Power Platform", "SharePoint Online", IgnoreCase = $false)]

        [string]

        $FullName,

        # The location to save the html report in.

        [Parameter(Mandatory=$true)]

        [ValidateScript({Test-Path -PathType Container $_})]

        [ValidateNotNullOrEmpty()]

        [string]

        $IndividualReportPath,

        # The location to save the html report in.

        [Parameter(Mandatory=$true)]

        [ValidateScript({Test-Path -PathType Container $_})]

        [ValidateScript({Test-Path -IsValid $_})]

        [string]

        $OutPath,

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [string]

        $OutProviderFileName,

        [Parameter(Mandatory=$true)]

        [ValidateScript({Test-Path -IsValid $_})]

        [string]

        $OutRegoFileName,

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [switch]

        $DarkMode,

        [Parameter(Mandatory=$true)]

        [ValidateNotNull()]

        [object]

        $SecureBaselines

    )

    $ScubaGitHubUrl = "https://github.com/cisagov/ScubaGear"

    $ProductSecureBaseline = $SecureBaselines.$BaselineName

    $FileName = Join-Path -Path $OutPath -ChildPath "$($OutProviderFileName).json" -Resolve

    $SettingsExport =  Get-Utf8NoBom -FilePath $FileName | ConvertFrom-Json

    $FileName = Join-Path -Path $OutPath -ChildPath "$($OutRegoFileName).json" -Resolve

    $TestResults =  Get-Utf8NoBom -FilePath $FileName | ConvertFrom-Json

    $Fragments = @()

    $MetaData += [pscustomobject]@{

        "Tenant Display Name" = $SettingsExport.tenant_details.DisplayName;

        "Report Date" = $SettingsExport.date;

        "Baseline Version" = $SettingsExport.baseline_version;

        "Module Version" = $SettingsExport.module_version

    }

    # Json version of the product-specific report

    $ReportJson = @{

        "MetaData" = $MetaData

        "Results" = @()

    };

    $MetaDataTable = $MetaData | ConvertTo-HTML -Fragment

    $MetaDataTable = $MetaDataTable -replace '^(.*?)<table>','<table id="tenant-data" style = "text-align:center;">'

    $Fragments += $MetaDataTable

    $ReportSummary = @{

        "Warnings" = 0;

        "Failures" = 0;

        "Passes" = 0;

        "Omits" = 0;

        "Manual" = 0;

        "Errors" = 0;

        "Date" = $SettingsExport.date;

    }

    foreach ($BaselineGroup in $ProductSecureBaseline) {

        $Fragment = @()

        foreach ($Control in $BaselineGroup.Controls){

            $Test = $TestResults | Where-Object -Property PolicyId -eq $Control.Id

            if ($null -ne $Test){

                # Check if the config file indicates the control should be omitted

                $Config = $SettingsExport.scuba_config

                $Omit = Get-OmissionState $Config $Control.Id

                if ($Omit) {

                    $ReportSummary.Omits += 1

                    $OmitRationale = $Config.OmitPolicy.$($Control.Id).Rationale

                    if ([string]::IsNullOrEmpty($OmitRationale)) {

                        Write-Warning "Config file indicates omitting $($Control.Id), but no rationale provided."

                        $OmitRationale = "Rationale not provided."

                    }

                    else {

                        $OmitRationale = "`"$($OmitRationale)`""

                    }

                    $Fragment += [pscustomobject]@{

                        "Control ID"=$Control.Id

                        "Requirement"=$Control.Value

                        "Result"= "Omitted"

                        "Criticality"= $Test.Criticality

                        "Details"= "Test omitted by user. $($OmitRationale)"

                    }

                    continue

                }

                $MissingCommands = $Test.Commandlet | Where-Object {$SettingsExport."$($BaselineName)_successful_commands" -notcontains $_}

                if ($MissingCommands.Count -gt 0) {

                    $Result = "Error"

                    $ReportSummary.Errors += 1

                    $MissingString = $MissingCommands -Join ", "

                    $Test.ReportDetails = "This test depends on the following command(s) which did not execute successfully: $($MissingString). See terminal output for more details."

                }

                elseif ($Test.RequirementMet) {

                    $Result = "Pass"

                    $ReportSummary.Passes += 1

                }

                elseif ($Test.Criticality -eq "Should") {

                    $Result = "Warning"

                    $ReportSummary.Warnings += 1

                }

                elseif ($Test.Criticality.EndsWith('3rd Party') -or $test.Criticality.EndsWith('Not-Implemented')) {

                    $Result = "N/A"

                    $ReportSummary.Manual += 1

                }

                else {

                    $Result = "Fail"

                    $ReportSummary.Failures += 1

                }

                $Fragment += [pscustomobject]@{

                    "Control ID"=$Control.Id

                    "Requirement"=$Control.Value

                    "Result"= if ($Control.Deleted) {

                        "-"

                    }

                    elseif ($Control.MalformedDescription) {

                        $ReportSummary.Errors += 1

                        "Error"

                    }

                    else {

                        $Result

                    }

                    "Criticality"=if ($Control.Deleted -or $Control.MalformedDescription) {"-"} else {$Test.Criticality}

                    "Details"=if ($Control.Deleted) {

                        "-"

                    }

                    elseif ($Control.MalformedDescription){

                        "Report issue on <a href=`"$ScubaGitHubUrl/issues`" target=`"_blank`">GitHub</a>"

                    }

                    else {

                        $Test.ReportDetails

                    }

                }

            }

            else {

                $ReportSummary.Errors += 1

                $Fragment += [pscustomobject]@{

                    "Control ID"=$Control.Id

                    "Requirement"=$Control.Value

                    "Result"= "Error - Test results missing"

                    "Criticality"= "-"

                    "Details"= "Report issue on <a href=`"$ScubaGitHubUrl/issues`" target=`"_blank`">GitHub</a>"

                }

                Write-Warning -Message "WARNING: No test results found for Control Id $($Control.Id)"

            }

        }

        # Build the markdown links for each policy table, append as a child inside header tags

        # Example: "AAD-1 Legacy Authentication"

        $Number = $BaselineName.ToUpper() + '-' + $BaselineGroup.GroupNumber

        $Name = $BaselineGroup.GroupName

        $GroupAnchor = New-MarkdownAnchor -GroupNumber $BaselineGroup.GroupNumber -GroupName $BaselineGroup.GroupName

        $GroupReferenceURL = "$($ScubaGitHubUrl)/blob/v$($SettingsExport.module_version)/PowerShell/ScubaGear/baselines/$($BaselineName.ToLower()).md$GroupAnchor"

        $MarkdownLink = "<a class='control_group' href=`"$($GroupReferenceURL)`" target=`"_blank`">$Name</a>"

        $Fragments += $Fragment | ConvertTo-Html -PreContent "<h2>$Number $MarkdownLink</h2>" -Fragment

        # Package Assessment Report into Report JSON by Policy Group

        $ReportJson.Results += [pscustomobject]@{

            GroupName = $BaselineGroup.GroupName;

            GroupNumber = $BaselineGroup.GroupNumber;

            GroupReferenceURL = $GroupReferenceURL;

            Controls = $Fragment;

        }

        # Regex will filter out any <table> tags without an id attribute (replace new fragments only, not <table> tags which have already been modified)

        $Fragments = $Fragments -replace ".*(<table(?![^>]+id)*>)", "<table class='policy-data' id='$Number'>"

    }

    # Craft the json report

    $ReportJson.ReportSummary = $ReportSummary

    $JsonFileName = Join-Path -Path $IndividualReportPath -ChildPath "$($BaselineName)Report.json"

    $ReportJson = ConvertTo-Json @($ReportJson) -Depth 5

    # ConvertTo-Json for some reason converts the <, >, and ' characters into unicode escape sequences.

    # Convert those back to ASCII.

    $ReportJson = $ReportJson.replace("\u003c", "<")

    $ReportJson = $ReportJson.replace("\u003e", ">")

    $ReportJson = $ReportJson.replace("\u0027", "'")

    $ReportJson | Out-File $JsonFileName

    # Finish building the html report

    $Title = "$($FullName) Baseline Report"

    $AADWarning = "Exclusions must only be used if they are approved within an organization's security risk acceptance process.

    Please reference <a href=`"$($ScubaGitHubUrl)/blob/v$($SettingsExport.module_version)/docs/configuration/configuration.md#entra-id-configuration`" target=`"_blank`">this section in the README file</a>

    file for a list of the policies that accept exclusions and the instructions for setting up exclusions in the configuration file.

    <i>Exclusions can introduce grave risks to your system and must be managed carefully.</i>"

    $NoWarning = "<br/>"

    Add-Type -AssemblyName System.Web

    $ReporterPath = $PSScriptRoot

    $ReportHTMLPath = Join-Path -Path $ReporterPath -ChildPath "IndividualReport"

    $ReportHTML = (Get-Content $(Join-Path -Path $ReportHTMLPath -ChildPath "IndividualReport.html")) -Join "`n"

    $ReportHTML = $ReportHTML.Replace("{TITLE}", $Title)

    $BaselineURL = "<a href=`"$($ScubaGitHubUrl)/blob/v$($SettingsExport.module_version)/PowerShell/ScubaGear/baselines/$($BaselineName.ToLower()).md`" target=`"_blank`"><h3 style=`"width: 100px;`">Baseline Documents</h3></a>"

    $ReportHTML = $ReportHTML.Replace("{BASELINE_URL}", $BaselineURL)

    # Handle AAD-specific reporting

    if ($BaselineName -eq "aad") {

        # Load the CSV file

        $csvPath = Join-Path -Path $PSScriptRoot -ChildPath "MicrosoftLicenseToProductNameMappings.csv"

        $csvData = Import-Csv -Path $csvPath

        $LicenseInfoArray = $SettingsExport.license_information | ForEach-Object {

            $SkuID = $_.SkuId

            # Find the corresponding product name

            $matchingRow = $csvData | Where-Object { $_.GUID -eq $SkuID } | Select-Object -First 1

            $productName = "Unknown SKU Name"

            if ($matchingRow) {

                $productName = $matchingRow.'Product_Display_Name'

            }

            # Create a custom object with relevant properties

            [pscustomobject]@{

                "Product Name" = $productName

                "License SKU Identifier" = $_.SkuPartNumber

                "Licenses in Use" = $_.ConsumedUnits

                "Total Licenses" = $_.PrepaidUnits.Enabled

            }

        }

        # Convert the custom objects to an HTML table

        $LicenseTable = $LicenseInfoArray | ConvertTo-Html -As Table -Fragment

        $LicenseTable = $LicenseTable -replace '^(.*?)<table>','<table id="license-info" style = "text-align:center;">'

        # Create a section header for the licensing information

        $LicensingHTML = "<h2>Tenant Licensing Information</h2>" + $LicenseTable

        $ReportHTML = $ReportHTML.Replace("{AADWARNING}", $AADWarning)

        $ReportHTML = $ReportHTML.Replace("{LICENSING_INFO}", $LicensingHTML)

        $CapJson = ConvertTo-Json $SettingsExport.cap_table_data

    }

    else {

        $ReportHTML = $ReportHTML.Replace("{AADWARNING}", $NoWarning)

        $ReportHTML = $ReportHTML.Replace("{LICENSING_INFO}", "")

        $CapJson = "null"

    }

    $CssPath = Join-Path -Path $ReporterPath -ChildPath "styles"

    $MainCSS = (Get-Content $(Join-Path -Path $CssPath -ChildPath "main.css")) -Join "`n"

    $ReportHTML = $ReportHTML.Replace("{MAIN_CSS}", "<style>

        $($MainCSS)

    </style>")

    $ScriptsPath = Join-Path -Path $ReporterPath -ChildPath "scripts"

    $MainJS = (Get-Content $(Join-Path -Path $ScriptsPath -ChildPath "main.js")) -Join "`n"

    $MainJS = "const caps = $($CapJson);`n$($MainJS)"

    $UtilsJS = (Get-Content $(Join-Path -Path $ScriptsPath -ChildPath "utils.js")) -Join "`n"

    $MainJS = "$($MainJS)`n$($UtilsJS)"

    $ReportHTML = $ReportHTML.Replace("{MAIN_JS}", "<script>

        let darkMode = $($DarkMode.ToString().ToLower());

        $($MainJS)

    </script>")

    $ReportHTML = $ReportHTML.Replace("{TABLES}", $Fragments)

    $FileName = Join-Path -Path $IndividualReportPath -ChildPath "$($BaselineName)Report.html"

    [System.Web.HttpUtility]::HtmlDecode($ReportHTML) | Out-File $FileName

    $ReportSummary

}

function Get-OmissionState {

    <#

    .Description

    Determine if the supplied control was marked for omission in the config file.

    .Functionality

    Internal

    #>

    [CmdletBinding()]

    param (

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [PSCustomObject]

        $Config,

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [string]

        $ControlId

    )

    $Omit = $false

    if ($Config.psobject.properties.name -Contains "OmitPolicy") {

        if ($Config.OmitPolicy.psobject.properties.name -Contains $ControlId) {

            # The config indicates the control should be omitted

            if ($Config.OmitPolicy.$($ControlId).psobject.properties.name -Contains "Expiration") {

                # An expiration date for the omission expiration was provided. Evaluate the date

                # to see if the control should still be omitted.

                if ($Config.OmitPolicy.$($ControlId).Expiration -eq "") {

                    # If the Expiration date is an empty string, omit the policy

                    $Omit = $true

                }

                else {

                    # An expiration date was provided and it's not an empty string

                    $Now = Get-Date

                    $ExpirationString = $Config.OmitPolicy.$($ControlId).Expiration

                    try {

                        $ExpirationDate = Get-Date -Date $ExpirationString

                        if ($ExpirationDate -lt $Now) {

                            # The expiration date is passed, don't omit the policy

                            $Warning = "Config file indicates omitting $($ControlId), but the provided "

                            $Warning += "expiration date, $ExpirationString, has passed. Control will "

                            $Warning += "not be omitted."

                            Write-Warning $Warning

                        }

                        else {

                            # The expiration date is in the future, omit the policy

                            $Omit = $true

                        }

                    }

                    catch {

                        # Malformed date, don't omit the policy

                        $Warning = "Config file indicates omitting $($ControlId), but the provided "

                        $Warning += "expiration date, $ExpirationString, is malformed. The expected "

                        $Warning += "format is yyyy-mm-dd. Control will not be omitted."

                        Write-Warning $Warning

                    }

                }

            }

            else {

                # The expiration date was not provided, omit the policy

                $Omit = $true

            }

        }

    }

    $Omit

}

function Import-SecureBaseline{

    <#

    .Description

    This function parses the secure baseline via each product markdown document to align policy with the

    software baseline.

    .Functionality

    Internal

    #>

    [CmdletBinding()]

    param (

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [ValidateSet("teams", "exo", "defender", "aad", "powerplatform", "sharepoint", 'powerbi', IgnoreCase = $false)]

        [string[]]

        $ProductNames,

        [Parameter(Mandatory = $false)]

        [ValidateScript({Test-Path -PathType Container $_})]

        [string]

        $BaselinePath = (Join-Path -Path $PSScriptRoot -ChildPath "..\..\baselines\")

    )

    $Output = @{}

    foreach ($Product in $ProductNames) {

        try {

            Write-Debug "Processing secure baseline markdown for $Product"

            $Output[$Product] = @()

            $ProductPath = Join-Path -Path $BaselinePath -ChildPath "$Product.md"

            $MdLines = Get-Content -Path $ProductPath

            # Select-String line numbers aren't 0-indexed, hence the "-1" on the next line

            $LineNumbers = Select-String "^## [0-9]+\." $ProductPath | ForEach-Object {$_."LineNumber"-1}

            $Groups = $LineNumbers | ForEach-Object {$MdLines[$_]}

            Write-Debug "Found $($Groups.Count) groups"

            foreach ($GroupName in $Groups) {

                $Group = @{}

                $Group.GroupNumber = $GroupName.Split(".")[0].SubString(3) # 3 to remove the "## "

                $Group.GroupName = $GroupName.Split(".")[1].Trim() # 1 to remove the leading space

                $Group.Controls = @()

                $IdRegex =  "#### MS\.[$($Product.ToUpper())]+\.$($Group.GroupNumber)\.\d+v\d+\s*$"

                # Select-String line numbers aren't 0-indexed, hence the "-1" on the next line

                $LineNumbers = Select-String $IdRegex $ProductPath | ForEach-Object {$_."LineNumber"-1}

                # Iterate over matched policy ids found

                foreach ($LineNumber in $LineNumbers) {

                    $Value = [System.Net.WebUtility]::HtmlEncode($Value)

                    $Id = [string]$MdLines[$LineNumber].Substring(5)

                    if ($Id.EndsWith("X")){

                        $Deleted = $true

                        $Id = $Id -Replace ".$"

                        $Value = "[DELETED] " + $Value

                    }

                    else {

                        $Deleted = $false

                    }

                    # This assumes that the value is on the immediate next line after the ID and ends in a period.

                    $LineAdvance = 1;

                    $MaxLineSearch = 20;

                    $Value = ([string]$MdLines[$LineNumber+$LineAdvance]).Trim()

                    $IsMalformedDescription = $false

                    $IsList = $false

                    try {

                        if ([string]::IsNullOrWhiteSpace($Value)){

                            $IsMalformedDescription = $true

                            $Value = "Error - The baseline policy text is malformed. Description should start immediately after Policy Id."

                            Write-Error "Expected description for $Id to start on line $($LineNumber+$LineAdvance)"

                        }

                        # Processing multiline description.

                        # TODO: Improve processing GitHub issue #526

                        while ($Value.Substring($Value.Length-1,1) -ne "."){

                            $LineAdvance++

                            if ($Value -match [regex]::Escape("<!--")){

                                # Reached Criticality comment so policy description is complete.

                                break

                            }

                            # Policy description contains a list assuming list is denoted by a colon character.

                            if ($Value[-1] -eq ":") {

                                $isList = $true

                            }

                            if (-not [string]::IsNullOrWhiteSpace([string]$MdLines[$LineNumber+$LineAdvance])) {

                                # List case, use newline character between value text

                                if ($isList) {

                                    $Value += "`n" + ([string]$MdLines[$LineNumber+$LineAdvance]).Trim()

                                }

                                else { # Value ending with newline char, use whitespace character between value text

                                    $Value += " " + ([string]$MdLines[$LineNumber+$LineAdvance]).Trim()

                                }

                            }

                            if ($LineAdvance -gt $MaxLineSearch){

                                Write-Warning "Expected description for $id to end with period and be less than $MaxLineSearch lines"

                                break

                            }

                        }

                        # Description italics substitution

                        $Value = Resolve-HTMLMarkdown -OriginalString $Value -HTMLReplace "italic"

                        # Description bold substitution

                        $Value = Resolve-HTMLMarkdown -OriginalString $Value -HTMLReplace "bold"

                        $Group.Controls += @{"Id"=$Id; "Value"=$Value; "Deleted"=$Deleted; MalformedDescription=$IsMalformedDescription}

                    }

                    catch {

                        Write-Error "Error parsing for policies in Group $($Group.GroupNumber). $($Group.GroupName)"

                    }

                }

                $Output[$Product] += $Group

            }

        }

        catch {

            Write-Error -RecommendedAction "Check validity of $Product secure baseline markdown at $ProductPath" `

                -Message "Failed to parse $ProductName secure baseline markdown."

        }

    }

    $Output

}

function New-MarkdownAnchor{

    param (

        [Parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        [string]

        $GroupNumber,

        [Parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        [string]

        $GroupName

    )

    [Int32]$OutNumber = $null

    if ($true -eq [Int32]::TryParse($GroupNumber, [ref]$OutNumber)){

        $MangledName = $GroupName.ToLower().Trim().Replace(' ', '-')

        return "#$($GroupNumber.Trim())-$MangledName"

    }

    else {

        $InvalidGroupNumber = New-Object System.ArgumentException "$GroupNumber is not valid"

        throw $InvalidGroupNumber

    }

}

function Resolve-HTMLMarkdown{

    param (

        [Parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        [string]

        $OriginalString,

        [Parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        [string]

        $HTMLReplace

    )

    # Replace markdown with italics substitution

    if ($HTMLReplace.ToLower() -match "italic") {

        $ResolvedString = $OriginalString -replace '(_)([^\v][^_]*[^\v])?(_)', '<i>${2}</i>'

        return $ResolvedString

    } elseif($HTMLReplace.ToLower() -match "bold") {

        $ResolvedString = $OriginalString -replace '(\*\*)(.*?)(\*\*)', '<b>${2}</b>'

        return $ResolvedString

    } else {

        $InvalidHTMLReplace = New-Object System.ArgumentException "$HTMLReplace is not valid"

        throw $InvalidHTMLReplace

        return $OriginalString

    }

}

Export-ModuleMember -Function @(

    'New-Report',

    'Import-SecureBaseline'

)

# SIG # Begin signature block

# MIIuugYJKoZIhvcNAQcCoIIuqzCCLqcCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC1KHd/TDbXK0iZ

# fbhIhvOfixEL4z23/eaPzdV7DNBH5KCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggdXMIIFP6ADAgECAhANkQ8dPvvR0q3Ytt4H0T3aMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjQwMTMwMDAwMDAwWhcNMjUwMTI5MjM1OTU5WjBfMQsw

# CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV

# BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCT1y7uJCQax8JfiDEYgpiU9URj

# EXCTRqtZbDALM9rPUudiuM3mj6A1SUSAAWYv6DTsvGPvxyMI2Idg0mQunl4Ms9DJ

# yVwe5k4+Anj/73Nx1AbOPYP8xRZcD10FkctKGhV0PzvrDcwU15hsQWtiepFgg+bX

# fHkGMeu426oc69f43vKE43DiqKTf0/UBX/qgpj3JZvJ3zc1kilBOv4sBCksfCjbW

# tLZD0tqAgBsNPo3Oy5mQG31E1eZdTNvrdTnEXacSwb3k615z7mHy7nqBUkOruZ9E

# tnvC2qla+uL3ks91O/e/LnKzH9Lj1JmEBf6jwPN/MYR9Dymni4Mi3AQ8mpQMyFmi

# XcSHymibSNbtTMavpdBWjFfrcvPETX7krROUOoLzMQmNgHArceSh55tgvDRdSU5c

# WK3BTvK3l3mgCdgjre7XGYxV3W8apyxk5+RKfHdbv9cpRwpSuDnI8sHeqmB3fnfo

# Cr1PPu4WhKegt20CobhDVybiBdhDVqUdR53ful4N/coQOEHDrIExB5nJf9Pvdrza

# DyIGKAMIXD79ba5/rQEo+2cA66oJkPlvB5hEGI/jtDcYwDBgalbwB7Kc8zAAhl6+

# JvHfYpXOkppSfEQbaRXZI+LGXWQAFa5pJDfDEAyZSXprStgw594sWUOysp+UOxFe

# kSA4mBr0o1jVpdaulwIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R

# hvv+YXsIiGX0TkIwHQYDVR0OBBYEFAmyTB5bcWyA+8+rq540jPRLJ1nYMD4GA1Ud

# IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl

# cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw

# gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp

# Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j

# cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0

# ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF

# BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t

# MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ

# BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQAh2Jnt9IPoBvOQlYQUlCP9iJ5y

# XAvEWe1camOwedqMZsHEPpT2yd6+fMzPZmV3/bYJgaN2OrDS1snf62S7yc+AulVw

# PAXSp1lSAiFEbZ6PFEdEBIag9B65Mp/cvRtJsIWQIc//jWqFMHpkU6r3MW9YARRu

# vaIf5/0qlM4VEwn3lTf+jJdxhhyoOFTWWd3BrlMPcT06z6F6hFfyycQkZ3Y9wEJ3

# uOU9bCNLZL1HCjlKT+oI0WsgeRdbe2sYrnvv9NmDY9oEi8PEq+DGjiTgLbY5OcAX

# uUogPPw6gbcuNn8Hq6FFKPIQxaksB8dF8Gw4m2lQoUWESPRF8Zaq9lmZN3+QzA79

# yskfJtAFqz3gUP5wJBdNfi/u1sGbLI0QnJQkIKfFuz7DfDPldw0gIl05BIYwZBmj

# TpFRu1/+gIlP1Ul4L/wt9Lxk6pglObLsdxHP2UQrG30JaUN0gv3xZMBBByHGVVTe

# cyU4qwJ0ulMdv/kjHwh+m58uOF8gHXLfyBmOjYpohN3+l0rS0qdArZMNSmLTA7N8

# n3V3AZLKB//1yhPt++gR4pCFdXmgwYDDLRxjlV0cMsG1UeSQUdI0aieh/grg5TQO

# CergVXS5h3sz5U0ZQPWND41LJhA0gF2OGZNHdUc9+0dwTsfxAERrjaTdeZp0/rdZ

# 9iGBoiRsS4U86S8xkDGCGm0wghppAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV

# BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0

# IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDZEPHT770dKt

# 2LbeB9E92jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh

# AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM

# BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCDHUxCwbomrE9IgweGZV/ZXVTUg

# wshHwPulg57AynUZezANBgkqhkiG9w0BAQEFAASCAgCQCjGIkK7ZlcNv5AfpgwYM

# XODpYGL/ul2GVF643eEOhviUWenHuwXG935KdNIEZtPW6xd8P+3jQJE0M6WtXUDI

# vGGvSDfW9KidmyVU4nDlOnkFvNpkP8JnC5tUqJJ0MVTDrLikwa/FMLRKo6ujfAOC

# Ze+ND8BZf/u8qgPLogcyZa4N/b0RNMvQYcjELP1SCxBsnXm2OaQmZKZplRdqCW/V

# +TIe06dYpPUTCHv+642/j5O8T5Y9Jb1Ed3B2ei7QoOpaaneTH60sZ/zOFDlybxs3

# Fl4xk8duINdIE+2tM8MQbvIThQ/DuaK4kcoat3Yj2qhjVbMiQiuLDQIPKpC8Evan

# 3RGpPXvXl5hdcFk8mveTXys+xNW5jsFj5fVfJignt5aUkbZAqqQWvuoYgJdi8OeI

# AGWU4/w4CTDEdynIK6/DG/4bYTK8mdCcmsoxlRGZ/rwG+LbjhplESAsSZTa9vSGR

# J8iNQf6MvEH2ulYOJqhRrtulcxdoHf+PY29zbwpiJmLMuDR3UzyPBAZA3dq8AMP3

# 5OyQk+xJ5h/yH18KmqwJK0LUw03v87gE24xe/1RTCSaSDatmw0TPv7YInDDt0y4w

# Iolwz9nFEft9kfz3pi45nrHt34Mj28Pt/Syt2oDETPAcX7KVBvlZgJNIuUrM4M2C

# UlVl0fb3DLqa8POyfk3LI6GCFzowghc2BgorBgEEAYI3AwMBMYIXJjCCFyIGCSqG

# SIb3DQEHAqCCFxMwghcPAgEDMQ8wDQYJYIZIAWUDBAIBBQAweAYLKoZIhvcNAQkQ

# AQSgaQRnMGUCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCCe1npBSJgH

# tfqnHhsaAqysQSS65IqbSs4qX02GFwcHsQIRAO04byCZ0u8hI9YJ+NlO19IYDzIw

# MjQxMjE5MTgzNjMwWqCCEwMwgga8MIIEpKADAgECAhALrma8Wrp/lYfG+ekE4zME

# MA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2Vy

# dCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNI

# QTI1NiBUaW1lU3RhbXBpbmcgQ0EwHhcNMjQwOTI2MDAwMDAwWhcNMzUxMTI1MjM1

# OTU5WjBCMQswCQYDVQQGEwJVUzERMA8GA1UEChMIRGlnaUNlcnQxIDAeBgNVBAMT

# F0RpZ2lDZXJ0IFRpbWVzdGFtcCAyMDI0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A

# MIICCgKCAgEAvmpzn/aVIauWMLpbbeZZo7Xo/ZEfGMSIO2qZ46XB/QowIEMSvgjE

# dEZ3v4vrrTHleW1JWGErrjOL0J4L0HqVR1czSzvUQ5xF7z4IQmn7dHY7yijvoQ7u

# jm0u6yXF2v1CrzZopykD07/9fpAT4BxpT9vJoJqAsP8YuhRvflJ9YeHjes4fduks

# THulntq9WelRWY++TFPxzZrbILRYynyEy7rS1lHQKFpXvo2GePfsMRhNf1F41nyE

# g5h7iOXv+vjX0K8RhUisfqw3TTLHj1uhS66YX2LZPxS4oaf33rp9HlfqSBePejlY

# eEdU740GKQM7SaVSH3TbBL8R6HwX9QVpGnXPlKdE4fBIn5BBFnV+KwPxRNUNK6lY

# k2y1WSKour4hJN0SMkoaNV8hyyADiX1xuTxKaXN12HgR+8WulU2d6zhzXomJ2Ple

# I9V2yfmfXSPGYanGgxzqI+ShoOGLomMd3mJt92nm7Mheng/TBeSA2z4I78JpwGpT

# RHiT7yHqBiV2ngUIyCtd0pZ8zg3S7bk4QC4RrcnKJ3FbjyPAGogmoiZ33c1HG93V

# p6lJ415ERcC7bFQMRbxqrMVANiav1k425zYyFMyLNyE1QulQSgDpW9rtvVcIH7Wv

# G9sqYup9j8z9J1XqbBZPJ5XLln8mS8wWmdDLnBHXgYly/p1DhoQo5fkCAwEAAaOC

# AYswggGHMA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQM

# MAoGCCsGAQUFBwMIMCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG/WwHATAf

# BgNVHSMEGDAWgBS6FtltTYUvcyl2mi91jGogj57IbzAdBgNVHQ4EFgQUn1csA3cO

# KBWQZqVjXu5Pkh92oFswWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybDMuZGln

# aWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5NlNIQTI1NlRpbWVTdGFt

# cGluZ0NBLmNybDCBkAYIKwYBBQUHAQEEgYMwgYAwJAYIKwYBBQUHMAGGGGh0dHA6

# Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBYBggrBgEFBQcwAoZMaHR0cDovL2NhY2VydHMu

# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5NlNIQTI1NlRpbWVT

# dGFtcGluZ0NBLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAPa0eH3aZW+M4hBJH2UOR

# 9hHbm04IHdEoT8/T3HuBSyZeq3jSi5GXeWP7xCKhVireKCnCs+8GZl2uVYFvQe+p

# PTScVJeCZSsMo1JCoZN2mMew/L4tpqVNbSpWO9QGFwfMEy60HofN6V51sMLMXNTL

# fhVqs+e8haupWiArSozyAmGH/6oMQAh078qRh6wvJNU6gnh5OruCP1QUAvVSu4kq

# VOcJVozZR5RRb/zPd++PGE3qF1P3xWvYViUJLsxtvge/mzA75oBfFZSbdakHJe2B

# VDGIGVNVjOp8sNt70+kEoMF+T6tptMUNlehSR7vM+C13v9+9ZOUKzfRUAYSyyEmY

# tsnpltD/GWX8eM70ls1V6QG/ZOB6b6Yum1HvIiulqJ1Elesj5TMHq8CWT/xrW7tw

# ipXTJ5/i5pkU5E16RSBAdOp12aw8IQhhA/vEbFkEiF2abhuFixUDobZaA0VhqAsM

# HOmaT3XThZDNi5U2zHKhUs5uHHdG6BoQau75KiNbh0c+hatSF+02kULkftARjsyE

# pHKsF7u5zKRbt5oK5YGwFvgc4pEVUNytmB3BpIiowOIIuDgP5M9WArHYSAR16gc0

# dP2XdkMEP5eBsX7bf/MGN4K3HP50v/01ZHo/Z5lGLvNwQ7XHBx1yomzLP8lx4Q1z

# ZKDyHcp4VQJLu2kWTsKsOqQwggauMIIElqADAgECAhAHNje3JFR82Ees/ShmKl5b

# MA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yMjAzMjMwMDAwMDBaFw0zNzAzMjIyMzU5

# NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkG

# A1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1NiBUaW1lU3Rh

# bXBpbmcgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGhjUGSbPB

# PXJJUVXHJQPE8pE3qZdRodbSg9GeTKJtoLDMg/la9hGhRBVCX6SI82j6ffOciQt/

# nR+eDzMfUBMLJnOWbfhXqAJ9/UO0hNoR8XOxs+4rgISKIhjf69o9xBd/qxkrPkLc

# Z47qUT3w1lbU5ygt69OxtXXnHwZljZQp09nsad/ZkIdGAHvbREGJ3HxqV3rwN3mf

# XazL6IRktFLydkf3YYMZ3V+0VAshaG43IbtArF+y3kp9zvU5EmfvDqVjbOSmxR3N

# Ng1c1eYbqMFkdECnwHLFuk4fsbVYTXn+149zk6wsOeKlSNbwsDETqVcplicu9Yem

# j052FVUmcJgmf6AaRyBD40NjgHt1biclkJg6OBGz9vae5jtb7IHeIhTZgirHkr+g

# 3uM+onP65x9abJTyUpURK1h0QCirc0PO30qhHGs4xSnzyqqWc0Jon7ZGs506o9UD

# 4L/wojzKQtwYSH8UNM/STKvvmz3+DrhkKvp1KCRB7UK/BZxmSVJQ9FHzNklNiyDS

# LFc1eSuo80VgvCONWPfcYd6T/jnA+bIwpUzX6ZhKWD7TA4j+s4/TXkt2ElGTyYwM

# O1uKIqjBJgj5FBASA31fI7tk42PgpuE+9sJ0sj8eCXbsq11GdeJgo1gJASgADoRU

# 7s7pXcheMBK9Rp6103a50g5rmQzSM7TNsQIDAQABo4IBXTCCAVkwEgYDVR0TAQH/

# BAgwBgEB/wIBADAdBgNVHQ4EFgQUuhbZbU2FL3MpdpovdYxqII+eyG8wHwYDVR0j

# BBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1Ud

# JQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0

# cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0

# cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8E

# PDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVz

# dGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEw

# DQYJKoZIhvcNAQELBQADggIBAH1ZjsCTtm+YqUQiAX5m1tghQuGwGC4QTRPPMFPO

# vxj7x1Bd4ksp+3CKDaopafxpwc8dB+k+YMjYC+VcW9dth/qEICU0MWfNthKWb8RQ

# TGIdDAiCqBa9qVbPFXONASIlzpVpP0d3+3J0FNf/q0+KLHqrhc1DX+1gtqpPkWae

# LJ7giqzl/Yy8ZCaHbJK9nXzQcAp876i8dU+6WvepELJd6f8oVInw1YpxdmXazPBy

# oyP6wCeCRK6ZJxurJB4mwbfeKuv2nrF5mYGjVoarCkXJ38SNoOeY+/umnXKvxMfB

# wWpx2cYTgAnEtp/Nh4cku0+jSbl3ZpHxcpzpSwJSpzd+k1OsOx0ISQ+UzTl63f8l

# Y5knLD0/a6fxZsNBzU+2QJshIUDQtxMkzdwdeDrknq3lNHGS1yZr5Dhzq6YBT70/

# O3itTK37xJV77QpfMzmHQXh6OOmc4d0j/R0o08f56PGYX/sr2H7yRp11LB4nLCbb

# bxV7HhmLNriT1ObyF5lZynDwN7+YAN8gFk8n+2BnFqFmut1VwDophrCYoCvtlUG3

# OtUVmDG0YgkPCr2B2RP+v6TR81fZvAT6gt4y3wSJ8ADNXcL50CN/AAvkdgIm2fBl

# dkKmKYcJRyvmfxqkhQ/8mJb2VVQrH4D6wPIOK+XW+6kvRBVK5xMOHds3OBqhK/bt

# 1nz8MIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0BAQwF

# ADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL

# ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElE

# IFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQswCQYD

# VQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGln

# aWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKn

# JS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/W

# BTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHi

# LQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhm

# V1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHE

# tWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6

# MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mX

# aXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZ

# xd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfh

# vbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvl

# EFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn1

# 5GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV

# HQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SSy4Ix

# LVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAkBggr

# BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAChjdo

# dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290

# Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRVHSAA

# MA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyhhyzs

# hV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO0Cre

# +i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo8L8v

# C6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++hUD38

# dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5xaiNr

# Iv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDdjCCA3ICAQEw

# dzBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNV

# BAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0YW1w

# aW5nIENBAhALrma8Wrp/lYfG+ekE4zMEMA0GCWCGSAFlAwQCAQUAoIHRMBoGCSqG

# SIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjQxMjE5MTgz

# NjMwWjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBTb04XuYtvSPnvk9nFIUIck1YZb

# RTAvBgkqhkiG9w0BCQQxIgQg/Fs5AqkaMIrJJ7vLqJGjKDtcuBkXk2Oxafbda76d

# 7WAwNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQgdnafqPJjLx9DCzojMK7WVnX+13Pb

# BdZluQWTmEOPmtswDQYJKoZIhvcNAQEBBQAEggIAcFvFo5fHWf/r09b97Vug89pf

# SZ6O71Lz0ydaLxJr8TK9KGCrkmXPJci9noebPVPho5esIslh+1RBdaBTXIIp3fjA

# vzl2O/AdSBsKkt9Y+Ok/AVXPGHctbnzNImf+dYEOGRakP79sLuFBlpgMeXj/NXTh

# HX2nqlSZe3qGS1OEtDybdk8jqJ2Mc+RHzbN/zpzAIubN0hmtsAdMfxH8ZbqmljEv

# 9WwCAR8Q1RAlMQ2IDTfJeAZBJgvklDRM/y22JCXxOLC9SIJVYVcy0QriYwv6+bC8

# 0h83kOpM1hefUKvmkB2UkxAw1RXKNae9/h1XvrIPWOVOxeD6RTK5uHrZmGzHbLvV

# hyZS9XG/qtFG2nQyJj8v2J1ZZZejcos6kRQr7GA4vhF3fVtKEgmJRUa8n4kkb+cQ

# ePfQup5yMAaCkxnIuxh3h/e9CKVHh4PWVy1jmMv4FS2klrpXAELnYW8WOZz1GGKp

# zW7Zxueuy1Gn5XLevY/P6QASFuvoTODfZJBqh4JWv2Hrw6VIpHJyzVyTjkXsU6lE

# NpxLikWhjcWTJudrcUKsXbYg3Oo/K+b+6NpTA7DWP1Jp1iLyJApsTA/4pwZtDZbO

# lM1RLMmqlLcQNvJB6XyUJzafFEy1N3YVgZ34P8XH6NvFjj3QO7V5mLQSsXjYtZUd

# 0a/OgUjX2YAurDvsbr0=

# SIG # End signature block