ADFSToolkit

2.3.0-RC1

Public/Import-ADFSTkMetadata.ps1

                                #Requires -Version 5.1

#Requires -RunAsAdministrator

function Import-ADFSTkMetadata {

    [CmdletBinding(DefaultParameterSetName = 'AllSPs',

        SupportsShouldProcess = $true)]

    param (

        [Parameter(ParameterSetName = 'SingleSP',

            Mandatory = $true,

            ValueFromPipelineByPropertyName = $true,

            Position = 0)]

        $EntityId,

        [Parameter(ParameterSetName = 'SingleSP',

            Mandatory = $false,

            ValueFromPipelineByPropertyName = $true,

            Position = 1)]

        $EntityBase,

        [string]$ConfigFile,

        [string]$LocalMetadataFile,

        [string[]]$ForcedEntityCategories,

        [Parameter(ParameterSetName = 'AllSPs')]

        [switch]

        $ProcessWholeMetadata,

        [switch]$ForceUpdate,

        [Parameter(ParameterSetName = 'AllSPs')]

        [switch]

        $AddRemoveOnly,

        #The time in minutes the chached metadatafile live

        [int]

        $CacheTime = 15,

        #The maximum SPs to add in one run (to prevent throttling). Is used when the script recusrive calls itself

        [int]

        $MaxSPAdditions = 80,

        [switch]$Silent,

        [switch]$criticalHealthChecksOnly,

        #If this switch is not provided the memory cache will be deleted

        [switch]

        $PreserveMemoryCache

    )

    process {

        #$CompatibleConfigVersion = "1.3"

        #Check if we should avoid deleting memory cache

        if (!$PSBoundParameters.ContainsKey('PreserveMemoryCache') -or ($PSBoundParameters.ContainsKey('PreserveMemoryCache') -and $PreserveMemoryCache -eq $false)) {

            Remove-ADFSTkCache -AttributeMemoryCache

        }

        try {

            # load configuration file

            if (!(Test-Path ( $ConfigFile ))) {

                throw (Get-ADFSTkLanguageText cFileDontExist -f $ConfigFile)

            }

            else {

                [xml]$Settings = Get-Content ($ConfigFile)

                $Global:ADFSTkCurrentInstitutionConfig = $ConfigFile

            }

            # set appropriate logging via EventLog mechanisms

            if (Verify-ADFSTkEventLogUsage) {

                #If we evaluated as true, the eventlog is now set up and we link the WriteADFSTklog to it

                Write-ADFSTkLog -SetEventLogName $Settings.configuration.logging.LogName -SetEventLogSource $Settings.configuration.logging.Source

            }

            else {

                # No Event logging is enabled, just this one to a file

                Write-ADFSTkLog (Get-ADFSTkLanguageText importEventLogMissingInSettings) -MajorFault            

            }

            #Check against compatible version

            #if ([float]$Settings.configuration.ConfigVersion -lt [float]$CompatibleConfigVersion)

            #{

            #    Write-ADFSTkLog (Get-ADFSTkLanguageText importIncompatibleInstitutionConfigVersion -f $Settings.configuration.ConfigVersion, $CompatibleConfigVersion) -MajorFault

            #}

            if ($PSBoundParameters.ContainsKey('criticalHealthChecksOnly') -and $criticalHealthChecksOnly -ne $false) {

                $healthCheckResult = Get-ADFSTkHealth -ConfigFile $ConfigFile -HealthCheckMode CriticalOnly -Silent

            }

            else {

                $healthCheckResult = Get-ADFSTkHealth -ConfigFile $ConfigFile -Silent

            }

            if ($healthCheckResult -eq $false) {

                Write-ADFSTkLog "The Health Check of ADFS Toolkit did not pass! Check earlier log entries to see what's wrong." -MajorFault

            }

            #region Get static values from configuration file

            $mypath = $ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath('.\')

            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importStarted) -EntryType Information

            Write-ADFSTkLog (Get-ADFSTkLanguageText importCurrentPath -f $Global:ADFSTkPaths.modulePath) -EventID 1

            #endregion

            #region Get SP Hash

            if ([string]::IsNullOrEmpty($Settings.configuration.SPHashFile)) {

                Write-ADFSTkLog  (Get-ADFSTkLanguageText importMissingSPHashFileInConfig -f $ConfigFile) -MajorFault

            }

            else {

                $SPHashFile = Join-Path $Global:ADFSTkPaths.cacheDir $Settings.configuration.SPHashFile

                Write-ADFSTkLog (Get-ADFSTkLanguageText importSettingSPHashFileTo -f $SPHashFile) -EventID 2

            }

            if (Test-Path $SPHashFile) {

                try {

                    $SPHashList = Import-Clixml $SPHashFile

                }

                catch {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importCouldNotImportSPHashFile)

                    $SPHashFileItem = Get-ChildItem $SPHashFile

                    Rename-Item -Path $SPHashFile -NewName ("{0}_{1}.{2}" -f $SPHashFileItem.BaseName, ([guid]::NewGuid()).Guid, $SPHashFileItem.Extension)

                    $SPHashList = @{}

                }

            }

            else {

                $SPHashList = @{}

            }

            #endregion

            #region Getting Metadata

            #Cached Metadata file

            #$CachedMetadataFile = Join-Path $Settings.configuration.WorkingPath -ChildPath $Settings.configuration.CacheDir | Join-Path -ChildPath $Settings.configuration.MetadataCacheFile

            $CachedMetadataFile = Join-Path $Global:ADFSTkPaths.cacheDir $Settings.configuration.MetadataCacheFile

            Write-ADFSTkLog (Get-ADFSTkLanguageText importSettingCachedMetadataFile -f $CachedMetadataFile) -EventID 3

            if ($LocalMetadataFile) {

                try {

                    $MetadataXML = new-object Xml.XmlDocument

                    $MetadataXML.PreserveWhitespace = $true

                    $MetadataXML.Load($LocalMetadataFile)

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importSuccessfullyLoadedLocalMetadataFile) -EntryType Information

                }

                catch {

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importCouldNotLoadLocalMetadataFile) -MajorFault -EventID 4

                }

            }

            if ($MetadataXML -eq $null) {

                #        $UseCachedMetadata = $false

                #        if (($CacheTime -eq -1 -or $CacheTime -gt 0) -and (Test-Path $CachedMetadataFile)) #CacheTime = -1 allways use cached metadata if exists

                #        {

                #            if ($CacheTime -eq -1 -or (Get-ChildItem $CachedMetadataFile).LastWriteTime.AddMinutes($CacheTime) -ge (Get-Date))

                #            {

                #                $UseCachedMetadata =  $true

                #                try 

                #                {

                #                    #[xml]$MetadataXML = Get-Content $CachedMetadataFile

                #                    $MetadataXML = new-object Xml.XmlDocument

                #                    $MetadataXML.PreserveWhitespace = $true

                #                    $MetadataXML.Load($CachedMetadataFile)

                #                    

                #                    if ([string]::IsNullOrEmpty($MetadataXML))

                #                    {

                #                        Write-ADFSTkLog (Get-ADFSTkLanguageText importCachedMetadataEmptyDownloading) -EntryType Error -EventID 5

                #                        $UseCachedMetadata =  $false

                #                    }

                #                }

                #                catch

                #                {

                #                    Write-ADFSTkLog (Get-ADFSTkLanguageText importCachedMetadataCorruptDownloading) -EntryType Error -EventID 6

                #                    $UseCachedMetadata =  $false

                #                }

                #            }

                #            else

                #            {

                #                $UseCachedMetadata = $false

                #                Remove-Item $CachedMetadataFile -Confirm:$false

                #            }

                #        }

                #

                #        if (!$UseCachedMetadata)

                #        {

                #            

                #            #Get Metadata URL from config

                #            if ([string]::IsNullOrEmpty($Settings.configuration.metadataURL))

                #            {

                #                $metadataURL = 'https://localhost/metadata.xml' #Just for fallback

                #            }

                #            else

                #            {

                #                $metadataURL = $Settings.configuration.metadataURL

                #            }

                #

                #            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importDownloadingMetadataFrom) -EntryType Information

                #            

                #            try

                #            {

                #                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importDownloadingFromTo -f $metadataURL, $CachedMetadataFile) -EntryType Information

                #               

                #                $webClient = New-Object System.Net.WebClient 

                #                $webClient.Headers.Add("user-agent", "ADFSToolkit")

                #                $webClient.DownloadFile($metadataURL, $CachedMetadataFile)

                #                

                #                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importSuccesfullyDownloadedMetadataFrom -f $metadataURL) -EntryType Information

                #            }

                #            catch

                #            {

                #                Write-ADFSTkLog (Get-ADFSTkLanguageText importCouldNotDownloadMetadataFrom -f $metadataURL) -MajorFault -EventID 7

                #            }

                #        

                #            try

                #            {

                #                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importParsingMetadataXML) -EntryType Information

                #                $MetadataXML = new-object Xml.XmlDocument

                #                $MetadataXML.PreserveWhitespace = $true

                #                $MetadataXML.Load($CachedMetadataFile)            

                #                #$MetadataXML = [xml]$Metadata.Content

                #                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importSuccessfullyParsedMetadataXMLFrom -f $metadataURL) -EntryType Information

                #            }

                #            catch

                #            {

                #                Write-ADFSTkLog (Get-ADFSTkLanguageText importCouldNotParseMetadataFrom -f $metadataURL) -MajorFault -EventID 8

                #            }

                #        }

                $MetadataXML = Get-ADFSTkMetadata -CacheTime $CacheTime -CachedMetadataFile $CachedMetadataFile -metadataURL $Settings.configuration.metadataURL

            }

            # Assert that the metadata we are about to process is not zero bytes after all this

            if (Test-Path $CachedMetadataFile) {

                $MyFileSize = (Get-Item $CachedMetadataFile).length 

                if ((Get-Item $CachedMetadataFile).length -gt 0kb) {

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importMetadataFileSize -f $MyFileSize) -EventID 9

                } 

                else {

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importCachedMetadataFileIsZeroBytes -f $CachedMetadataFile) -EventID 10

                }

            }

            #endregion

            #Verify Metadata Signing Cert

            if ($Global:ADFSTkSkipMetadataSignatureCheck -ne $true) {

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importVerifyingSigningCert) -EntryType Information

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importEnsuringSHA256) -EntryType Information

                Update-SHA256AlgXmlDSigSupport

                if (Verify-ADFSTkSigningCert $MetadataXML.EntitiesDescriptor.Signature.KeyInfo.X509Data.X509Certificate) {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importSuccessfullyVerifiedMetadataCert) -EntryType Information

                }

                else {

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importMetadataCertIncorrect) -MajorFault -EventID 11

                }

                #Verify Metadata Signature

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importVerifyingMetadataSignature) -EntryType Information

                if (Verify-ADFSTkMetadataSignature $MetadataXML) {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importSuccessfullyVerifiedMetadataSignature) -EntryType Information

                }

                else {

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importMetadataSignatureFailed) -MajorFault -EventID 12

                }

            }

            #region Read/Create file with 

            $RawAllSPs = $MetadataXML.EntitiesDescriptor.EntityDescriptor | ? { $_.SPSSODescriptor -ne $null }

            $myRawAllSPsCount = $RawALLSps.count

            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importTotalNumberOfSPs -f $myRawAllSPsCount)

            if ($ProcessWholeMetadata) {

                Write-ADFSTkLog (Get-ADFSTkLanguageText importProcessingWholeMetadata) -EntryType Information -EventID 13

                $AllSPs = $MetadataXML.EntitiesDescriptor.EntityDescriptor | ? { $_.SPSSODescriptor -ne $null }

                $myAllSPsCount = $ALLSPs.count

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importNumberOfSPsAfterFilter -f $myAllSPsCount)

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importCalculatingChanges)

                $AllSPs | % {

                    $SwamidSPs = @()

                    $SwamidSPsToProcess = @()

                } {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cWorkingWith -f $_.EntityID)

                    $SwamidSPs += $_.EntityId

                    if (Check-ADFSTkSPHasChanged $_) {

                        $SwamidSPsToProcess += $_

                    }

                    #else

                    #{

                    #    Write-ADFSTkVerboseLog "Skipped due to no changes in metadata..."

                    #}

                } {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cDone)

                    $n = $SwamidSPsToProcess.Count

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importFoundXNewChangedSPs -f $n)

                    $batches = [Math]::Ceiling($n / $MaxSPAdditions)

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importBatchCount -f $batches)

                    if ($n -gt 0) {

                        if ($batches -gt 1) {

                            for ($i = 1; $i -le $batches; $i++) {

                                $ADFSTkModuleBase = Join-Path $Global:ADFSTkPaths.modulePath ADFSToolkit.psm1

                                Write-ADFSTkLog (Get-ADFSTkLanguageText importWorkingWithBatch -f $i, $batches, $ADFSTkModuleBase) -EventID 14

                                $runCommand = "-Command & {"

                                if ($Global:ADFSTkSkipNotSignedHealthCheck -eq $true) {

                                    $runCommand += '$Global:ADFSTkSkipNotSignedHealthCheck = $true;'

                                }

                                $runCommand += "Import-ADFSTkMetadata -MaxSPAdditions $MaxSPAdditions -CacheTime -1 -ConfigFile '$ConfigFile'"

                                if ($PSBoundParameters.ContainsKey("Silent") -and $Silent -ne $false) {

                                    $runCommand += " -Silent"

                                }

                                if ($PSBoundParameters.ContainsKey("criticalHealthChecksOnly") -and $criticalHealthChecksOnly -ne $false) {

                                    $runCommand += " -criticalHealthChecksOnly"

                                }

                                if ($PSBoundParameters.ContainsKey("ForceUpdate") -and $ForceUpdate -ne $false) {

                                    $runCommand += " -ForceUpdate"

                                }

                                if ($PSBoundParameters.ContainsKey("WhatIf") -and $WhatIf -ne $false) {

                                    $runCommand += " -WhatIf"

                                }

                                $runCommand += " ;Exit}"

                                Start-Process -WorkingDirectory $ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath('.\') -FilePath "$env:SystemRoot\system32\WindowsPowerShell\v1.0\powershell.exe" -ArgumentList "-NoExit", $runCommand -Wait -NoNewWindow

                                Write-ADFSTkLog (Get-ADFSTkLanguageText cDone) -EventID 15

                            }

                        }

                        else {

                            $SwamidSPsToProcess | % {

                                Processes-ADFSTkRelyingPartyTrust $_

                            }

                        }

                    }

                    # Checking if any Relying Party Trusts show be removed

                    $NamePrefix = $Settings.configuration.MetadataPrefix 

                    $Sep = $Settings.configuration.MetadataPrefixSeparator      

                    $FilterString = "$NamePrefix$Sep"

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importCheckingForRemovedRPsUsingFilter -f $FilterString) -EventID 16

                    $CurrentSwamidSPs = Get-ADFSRelyingPartyTrust | ? { $_.Name -like "$FilterString*" } | select -ExpandProperty Identifier

                    if ($CurrentSwamidSPs -eq $null) {

                        $CurrentSwamidSPs = @()

                    }

                    #$RemoveSPs = Compare-ADFSTkObject $CurrentSwamidSPs $SwamidSPs | ? SideIndicator -eq "<=" | select -ExpandProperty InputObject

                    $CompareSets = Compare-ADFSTkObject -FirstSet $CurrentSwamidSPs -SecondSet $SwamidSPs -CompareType InFirstSetOnly

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importFoundRPsToRemove -f $CompareSets.MembersInCompareSet)

                    if ($ForceUpdate) {

                        foreach ($rp in $CompareSets.CompareSet) {

                            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cRemoving -f $rp)

                            try {

                                Remove-ADFSRelyingPartyTrust -TargetIdentifier $rp -Confirm:$false -ErrorAction Stop

                                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cDone)

                            }

                            catch {

                                Write-ADFSTkLog (Get-ADFSTkLanguageText cCouldNotRemove -f $rp, $_) -EntryType Error -EventID 17

                            }

                        }

                        Remove-ADFSTkEntityHash -EntityIDs $CompareSets.CompareSet

                    }

                    else {

                        $removeSet = $CompareSets.CompareSet | Get-ADFSTkAnswer -Caption (Get-ADFSTkLanguageText importDoYouWantToRemoveRPsNotInMetadata)

                        foreach ($rp in $removeSet) {

                            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cRemoving -f $rp)

                            try {

                                Remove-ADFSRelyingPartyTrust -TargetIdentifier $rp -Confirm:$false -ErrorAction Stop

                                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cDone)

                            }

                            catch {

                                Write-ADFSTkLog (Get-ADFSTkLanguageText importCouldNotRemove -f $rp, $_) -EntryType Error -EventID 18

                            }

                            Remove-ADFSTkEntityHash -EntityIDs $removeSet

                        }

                    }

                }

            }

            elseif ($PSBoundParameters.ContainsKey('MaxSPAdditions') -and $MaxSPAdditions -gt 0) {

                Write-ADFSTkLog (Get-ADFSTkLanguageText importProcessingXRPs -f $MaxSPAdditions) -EntryType Information -EventID 19

                $AllSPsInMetadata = $MetadataXML.EntitiesDescriptor.EntityDescriptor | ? { $_.SPSSODescriptor -ne $null }

                $i = 0

                $n = 0

                $m = $AllSPsInMetadata.Count - 1

                $SPsToProcess = @()

                do {

                    if (Check-ADFSTkSPHasChanged $AllSPsInMetadata[$i]) {

                        $SPsToProcess += $AllSPsInMetadata[$i]

                        $n++

                    }

                    else {

                        Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importSkippedNoChanges)

                    }

                    $i++

                }

                until ($n -ge $MaxSPAdditions -or $i -ge $m)

                $SPsToProcess | % {

                    Processes-ADFSTkRelyingPartyTrust $_

                }

            }

            elseif (! ([string]::IsNullOrEmpty($EntityID) ) ) {

                #Enter so that SP: N is checked against the can and ask if you want to force update. Insert the hash!

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText cWorkingWith -f $EntityID)

                if ([string]::IsNullOrEmpty($EntityBase)) {

                    $sp = $MetadataXML.EntitiesDescriptor.EntityDescriptor | ? { $_.entityId -eq $EntityId }

                }

                else {

                    $sp = $MetadataXML.EntitiesDescriptor.EntityDescriptor | ? { $_.entityId -eq $EntityId -and $_.base -eq $EntityBase }

                }

                if ($sp.count -gt 1) { 

                    $sp = $sp[0]

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importMoreThanOneRPWithEntityID -f $EntityId) -EntryType Warning -EventID 29

                }

                if ([string]::IsNullOrEmpty($sp)) {

                    Write-ADFSTkLog (Get-ADFSTkLanguageText importNoSPsFound) -MajorFault -EventID 20

                }

                else {

                    Processes-ADFSTkRelyingPartyTrust $sp

                }

            }

            else {

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importNothingToDo)

            }

            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText importScriptEnded)

        }

        Catch {

            Throw $_

        }

    }

}

# SIG # Begin signature block

# MIItYQYJKoZIhvcNAQcCoIItUjCCLU4CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD11H4a/c+msRHU

# ik3YMZtsmEEWFtsrRPGTiy8+fPkXwqCCJmowggWNMIIEdaADAgECAhAOmxiO+dAt

# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV

# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa

# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E

# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy

# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF

# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1

# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB

# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR

# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6

# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB

# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S

# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x

# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB

# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP

# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC

# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp

# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB

# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc

# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov

# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy

# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW

# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF

# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z

# twGpn1eqXijiuZQwggXfMIIEx6ADAgECAhBOQOQ3VO3mjAAAAABR05R/MA0GCSqG

# SIb3DQEBCwUAMIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5j

# LjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcG

# A1UECxMwKGMpIDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVz

# ZSBvbmx5MTIwMAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRo

# b3JpdHkgLSBHMjAeFw0yMTA1MDcxNTQzNDVaFw0zMDExMDcxNjEzNDVaMGkxCzAJ

# BgNVBAYTAlVTMRYwFAYDVQQKDA1FbnRydXN0LCBJbmMuMUIwQAYDVQQDDDlFbnRy

# dXN0IENvZGUgU2lnbmluZyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0g

# Q1NCUjEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCngY/3FEW2YkPy

# 2K7TJV5IT1G/xX2fUBw10dZ+YSqUGW0nRqSmGl33VFFqgCLGqGZ1TVSDyV5oG6v2

# W2Swra0gvVTvRmttAudFrnX2joq5Mi6LuHccUk15iF+lOhjJUCyXJy2/2gB9Y3/v

# MuxGh2Pbmp/DWiE2e/mb1cqgbnIs/OHxnnBNCFYVb5Cr+0i6udfBgniFZS5/tcnA

# 4hS3NxFBBuKK4Kj25X62eAUBw2DtTwdBLgoTSeOQm3/dvfqsv2RR0VybtPVc51z/

# O5uloBrXfQmywrf/bhy8yH3m6Sv8crMU6UpVEoScRCV1HfYq8E+lID1oJethl3wP

# 5bY9867DwRG8G47M4EcwXkIAhnHjWKwGymUfe5SmS1dnDH5erXhnW1XjXuvH2OxM

# bobL89z4n4eqclgSD32m+PhCOTs8LOQyTUmM4OEAwjignPqEPkHcblauxhpb9Gdo

# BQHNG7+uh7ydU/Yu6LZr5JnexU+HWKjSZR7IH9Vybu5ZHFc7CXKd18q3kMbNe0WS

# kUIDTH0/yvKquMIOhvMQn0YupGaGaFpoGHApOBGAYGuKQ6NzbOOzazf/5p1nAZKG

# 3y9I0ftQYNVc/iHTAUJj/u9wtBfAj6ju08FLXxLq/f0uDodEYOOp9MIYo+P9zgyE

# Ig3zp3jak/PbOM+5LzPG/wc8Xr5F0wIDAQABo4IBKzCCAScwDgYDVR0PAQH/BAQD

# AgGGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwMGCCsG

# AQUFBwMIMDsGA1UdIAQ0MDIwMAYEVR0gADAoMCYGCCsGAQUFBwIBFhpodHRwOi8v

# d3d3LmVudHJ1c3QubmV0L3JwYTAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAGG

# F2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6

# Ly9jcmwuZW50cnVzdC5uZXQvZzJjYS5jcmwwHQYDVR0OBBYEFIK61j2Xzp/PceiS

# N6/9s7VpNVfPMB8GA1UdIwQYMBaAFGpyJnrQHu995ztpUdRsjZ+QEmarMA0GCSqG

# SIb3DQEBCwUAA4IBAQAfXkEEtoNwJFMsVXMdZTrA7LR7BJheWTgTCaRZlEJeUL9P

# bG4lIJCTWEAN9Rm0Yu4kXsIBWBUCHRAJb6jU+5J+Nzg+LxR9jx1DNmSzZhNfFMyl

# cfdbIUvGl77clfxwfREc0yHd0CQ5KcX+Chqlz3t57jpv3ty/6RHdFoMI0yyNf02o

# FHkvBWFSOOtg8xRofcuyiq3AlFzkJg4sit1Gw87kVlHFVuOFuE2bRXKLB/GK+0m4

# X9HyloFdaVIk8Qgj0tYjD+uL136LwZNr+vFie1jpUJuXbheIDeHGQ5jXgWG2hZ1H

# 7LGerj8gO0Od2KIc4NR8CMKvdgb4YmZ6tvf6yK81MIIGgzCCBGugAwIBAgIQNa+3

# e500H2r8j4RGqzE1KzANBgkqhkiG9w0BAQ0FADBpMQswCQYDVQQGEwJVUzEWMBQG

# A1UECgwNRW50cnVzdCwgSW5jLjFCMEAGA1UEAww5RW50cnVzdCBDb2RlIFNpZ25p

# bmcgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIENTQlIxMB4XDTIxMDUw

# NzE5MTk1MloXDTQwMTIyOTIzNTkwMFowYzELMAkGA1UEBhMCVVMxFjAUBgNVBAoT

# DUVudHJ1c3QsIEluYy4xPDA6BgNVBAMTM0VudHJ1c3QgRXh0ZW5kZWQgVmFsaWRh

# dGlvbiBDb2RlIFNpZ25pbmcgQ0EgLSBFVkNTMjCCAiIwDQYJKoZIhvcNAQEBBQAD

# ggIPADCCAgoCggIBAL69pznJpX3sXWXx9Cuph9DnrRrFGjsYzuGhUY1y+s5YH1y4

# JEIPRtUxl9BKTeObMMm6l6ic/kU2zyeA53u4bsEkt9+ndNyF8qMkWEXMlJQ7AuvE

# jXxG9VxmguOkwdMfrG4MUyMO1Dr62kLxg1RfNTJW8rV4m1cASB6pYWEnDnMDQ7bW

# cJL71IWaMMaz5ppeS+8dKthmqxZG/wvYD6aJSgJRV0E8QThOl8dRMm1njmahXk2f

# NSKv1Wq3f0BfaDXMafrxBfDqhabqMoXLwcHKg2lFSQbcCWy6SWUZjPm3NyeMZJ41

# 4+Xs5wegnahyvG+FOiymFk49nM8I5oL1RH0owL2JrWwv3C94eRHXHHBL3Z0ITF4u

# +o29p91j9n/wUjGEbjrY2VyFRJ5jBmnQhlh4iZuHu1gcpChsxv5pCpwerBFgal7J

# aWUu7UMtafF4tzstNfKqT+If4wFvkEaq1agNBFegtKzjbb2dGyiAJ0bH2qpnlfHR

# h3vHyCXphAyPiTbSvjPhhcAz1aA8GYuvOPLlk4C/xsOre5PEPZ257kV2wNRobzBe

# PLQ2+ddFQuASBoDbpSH85wV6KI20jmB798i1SkesFGaXoFppcjFXa1OEzWG6cwcV

# cDt7AfynP4wtPYeM+wjX5S8Xg36Cq08J8inhflV3ZZQFHVnUCt2TfuMUXeK7AgMB

# AAGjggErMIIBJzASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBTOiU+CUaoV

# ooRiyjEjYdJh+/j+eDAfBgNVHSMEGDAWgBSCutY9l86fz3Hokjev/bO1aTVXzzAz

# BggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3Qu

# bmV0MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvY3Ni

# cjEuY3JsMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDAzBEBgNV

# HSAEPTA7MDAGBFUdIAAwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0

# Lm5ldC9ycGEwBwYFZ4EMAQMwDQYJKoZIhvcNAQENBQADggIBAD4AVLgq849mr2EW

# xFiTZPRBi2RVjRs1M6GbkdirRsqrX7y+fnDk0tcHqJYH14bRVwoI0NB4Tfgq37IE

# 85rh13zwwQB6wUCh34qMt8u0HQFh8piapt24gwXKqSwW3JwtDv6nl+RQqZeVwUsq

# jFHjxALga3w1TVO8S5QTi1MYFl6mCqe4NMFssess5DF9DCzGfOGkVugtdtWyE3Xq

# gwCuAHfGb6k97mMUgVAW/FtPEhkOWw+N6kvOBkyJS64gzI5HpnXWZe4vMOhdNI8f

# gk1cQqbyFExQIJwJonQkXDnYiTKFPK+M5Wqe5gQ6pRP/qh3NR0suAgW0ao/rhU+B

# 7wrbfZ8pj6XCP1I4UkGVO7w+W1QwQiMJY95QjYk1RfqruA+Poq17ehGT8Y8ohHto

# eUdq6GQpTR/0HS9tHsiUhjzTWpl6a3yrNfcrOUtPuT8Wku8pjI2rrAEazHFEOctA

# PiASzghw40f+3IDXCADRC2rqIbV5ZhfpaqpW3c0VeLEDwBStPkcYde0KU0syk83/

# gLGQ1hPl5EF4Iu1BguUO37DOlSFF5osB0xn39CtVrNlWc2MQ4LigbctUlpigmSFR

# BqqmDDorY8t52kO50hLM3o9VeukJ8+Ka0yXBezaS2uDlUmfN4+ZUCqWd1HOj0y9d

# BmSFA3d/YNjCvHTJlZFot7d+YRl1MIIGrjCCBJagAwIBAgIQBzY3tyRUfNhHrP0o

# ZipeWzANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGln

# aUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhE

# aWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjIwMzIzMDAwMDAwWhcNMzcwMzIy

# MjM1OTU5WjBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x

# OzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGlt

# ZVN0YW1waW5nIENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxoY1

# BkmzwT1ySVFVxyUDxPKRN6mXUaHW0oPRnkyibaCwzIP5WvYRoUQVQl+kiPNo+n3z

# nIkLf50fng8zH1ATCyZzlm34V6gCff1DtITaEfFzsbPuK4CEiiIY3+vaPcQXf6sZ

# Kz5C3GeO6lE98NZW1OcoLevTsbV15x8GZY2UKdPZ7Gnf2ZCHRgB720RBidx8ald6

# 8Dd5n12sy+iEZLRS8nZH92GDGd1ftFQLIWhuNyG7QKxfst5Kfc71ORJn7w6lY2zk

# psUdzTYNXNXmG6jBZHRAp8ByxbpOH7G1WE15/tePc5OsLDnipUjW8LAxE6lXKZYn

# LvWHpo9OdhVVJnCYJn+gGkcgQ+NDY4B7dW4nJZCYOjgRs/b2nuY7W+yB3iIU2YIq

# x5K/oN7jPqJz+ucfWmyU8lKVEStYdEAoq3NDzt9KoRxrOMUp88qqlnNCaJ+2RrOd

# OqPVA+C/8KI8ykLcGEh/FDTP0kyr75s9/g64ZCr6dSgkQe1CvwWcZklSUPRR8zZJ

# TYsg0ixXNXkrqPNFYLwjjVj33GHek/45wPmyMKVM1+mYSlg+0wOI/rOP015LdhJR

# k8mMDDtbiiKowSYI+RQQEgN9XyO7ZONj4KbhPvbCdLI/Hgl27KtdRnXiYKNYCQEo

# AA6EVO7O6V3IXjASvUaetdN2udIOa5kM0jO0zbECAwEAAaOCAV0wggFZMBIGA1Ud

# EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLoW2W1NhS9zKXaaL3WMaiCPnshvMB8G

# A1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjAT

# BgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGG

# GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2Nh

# Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYD

# VR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0

# VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9

# bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQB9WY7Ak7ZvmKlEIgF+ZtbYIULhsBguEE0T

# zzBTzr8Y+8dQXeJLKftwig2qKWn8acHPHQfpPmDI2AvlXFvXbYf6hCAlNDFnzbYS

# lm/EUExiHQwIgqgWvalWzxVzjQEiJc6VaT9Hd/tydBTX/6tPiix6q4XNQ1/tYLaq

# T5Fmniye4Iqs5f2MvGQmh2ySvZ180HAKfO+ovHVPulr3qRCyXen/KFSJ8NWKcXZl

# 2szwcqMj+sAngkSumScbqyQeJsG33irr9p6xeZmBo1aGqwpFyd/EjaDnmPv7pp1y

# r8THwcFqcdnGE4AJxLafzYeHJLtPo0m5d2aR8XKc6UsCUqc3fpNTrDsdCEkPlM05

# et3/JWOZJyw9P2un8WbDQc1PtkCbISFA0LcTJM3cHXg65J6t5TRxktcma+Q4c6um

# AU+9Pzt4rUyt+8SVe+0KXzM5h0F4ejjpnOHdI/0dKNPH+ejxmF/7K9h+8kaddSwe

# Jywm228Vex4Ziza4k9Tm8heZWcpw8De/mADfIBZPJ/tgZxahZrrdVcA6KYawmKAr

# 7ZVBtzrVFZgxtGIJDwq9gdkT/r+k0fNX2bwE+oLeMt8EifAAzV3C+dAjfwAL5HYC

# JtnwZXZCpimHCUcr5n8apIUP/JiW9lVUKx+A+sDyDivl1vupL0QVSucTDh3bNzga

# oSv27dZ8/DCCBsIwggSqoAMCAQICEAVEr/OUnQg5pr/bP1/lYRYwDQYJKoZIhvcN

# AQELBQAwYzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTsw

# OQYDVQQDEzJEaWdpQ2VydCBUcnVzdGVkIEc0IFJTQTQwOTYgU0hBMjU2IFRpbWVT

# dGFtcGluZyBDQTAeFw0yMzA3MTQwMDAwMDBaFw0zNDEwMTMyMzU5NTlaMEgxCzAJ

# BgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjEgMB4GA1UEAxMXRGln

# aUNlcnQgVGltZXN0YW1wIDIwMjMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK

# AoICAQCjU0WHHYOOW6w+VLMj4M+f1+XS512hDgncL0ijl3o7Kpxn3GIVWMGpkxGn

# zaqyat0QKYoeYmNp01icNXG/OpfrlFCPHCDqx5o7L5Zm42nnaf5bw9YrIBzBl5S0

# pVCB8s/LB6YwaMqDQtr8fwkklKSCGtpqutg7yl3eGRiF+0XqDWFsnf5xXsQGmjzw

# xS55DxtmUuPI1j5f2kPThPXQx/ZILV5FdZZ1/t0QoRuDwbjmUpW1R9d4KTlr4HhZ

# l+NEK0rVlc7vCBfqgmRN/yPjyobutKQhZHDr1eWg2mOzLukF7qr2JPUdvJscsrdf

# 3/Dudn0xmWVHVZ1KJC+sK5e+n+T9e3M+Mu5SNPvUu+vUoCw0m+PebmQZBzcBkQ8c

# tVHNqkxmg4hoYru8QRt4GW3k2Q/gWEH72LEs4VGvtK0VBhTqYggT02kefGRNnQ/f

# ztFejKqrUBXJs8q818Q7aESjpTtC/XN97t0K/3k0EH6mXApYTAA+hWl1x4Nk1nXN

# jxJ2VqUk+tfEayG66B80mC866msBsPf7Kobse1I4qZgJoXGybHGvPrhvltXhEBP+

# YUcKjP7wtsfVx95sJPC/QoLKoHE9nJKTBLRpcCcNT7e1NtHJXwikcKPsCvERLmTg

# yyIryvEoEyFJUX4GZtM7vvrrkTjYUQfKlLfiUKHzOtOKg8tAewIDAQABo4IBizCC

# AYcwDgYDVR0PAQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYI

# KwYBBQUHAwgwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMB8GA1Ud

# IwQYMBaAFLoW2W1NhS9zKXaaL3WMaiCPnshvMB0GA1UdDgQWBBSltu8T5+/N0GSh

# 1VapZTGj3tXjSTBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsMy5kaWdpY2Vy

# dC5jb20vRGlnaUNlcnRUcnVzdGVkRzRSU0E0MDk2U0hBMjU2VGltZVN0YW1waW5n

# Q0EuY3JsMIGQBggrBgEFBQcBAQSBgzCBgDAkBggrBgEFBQcwAYYYaHR0cDovL29j

# c3AuZGlnaWNlcnQuY29tMFgGCCsGAQUFBzAChkxodHRwOi8vY2FjZXJ0cy5kaWdp

# Y2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRSU0E0MDk2U0hBMjU2VGltZVN0YW1w

# aW5nQ0EuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCBGtbeoKm1mBe8cI1PijxonNgl

# /8ss5M3qXSKS7IwiAqm4z4Co2efjxe0mgopxLxjdTrbebNfhYJwr7e09SI64a7p8

# Xb3CYTdoSXej65CqEtcnhfOOHpLawkA4n13IoC4leCWdKgV6hCmYtld5j9smViuw

# 86e9NwzYmHZPVrlSwradOKmB521BXIxp0bkrxMZ7z5z6eOKTGnaiaXXTUOREEr4g

# DZ6pRND45Ul3CFohxbTPmJUaVLq5vMFpGbrPFvKDNzRusEEm3d5al08zjdSNd311

# RaGlWCZqA0Xe2VC1UIyvVr1MxeFGxSjTredDAHDezJieGYkD6tSRN+9NUvPJYCHE

# Vkft2hFLjDLDiOZY4rbbPvlfsELWj+MXkdGqwFXjhr+sJyxB0JozSqg21Llyln6X

# eThIX8rC3D0y33XWNmdaifj2p8flTzU8AL2+nCpseQHc2kTmOt44OwdeOVj0fHMx

# VaCAEcsUDH6uvP6k63llqmjWIso765qCNVcoFstp8jKastLYOrixRoZruhf9xHds

# FWyuq69zOuhJRrfVf8y2OMDY7Bz1tqG4QyzfTkx9HmhwwHcK1ALgXGC7KP845VJa

# 1qwXIiNO9OzTF/tQa/8Hdx9xl0RBybhG02wyfFgvZ0dl5Rtztpn5aywGRu9BHvDw

# X+Db2a2QgESvgBBBijCCBvMwggTboAMCAQICEAOskDJ0+AevqWO8oNH/1wUwDQYJ

# KoZIhvcNAQELBQAwYzELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIElu

# Yy4xPDA6BgNVBAMTM0VudHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBDb2RlIFNp

# Z25pbmcgQ0EgLSBFVkNTMjAeFw0yMzAzMjExNTI3MzdaFw0yNDAzMjkxNTI3Mzda

# MIGjMQswCQYDVQQGEwJDQTEQMA4GA1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0

# YXdhMRMwEQYLKwYBBAGCNzwCAQMTAkNBMRQwEgYDVQQKEwtDQU5BUklFIElOQzEd

# MBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCDI5MDIwOC03

# MRQwEgYDVQQDEwtDQU5BUklFIElOQzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC

# AgoCggIBALlhEEulEk2r7fbTNCoo+p81y529qlp967G0SlY19u/IrhBxuATMiKa0

# 4rseAdQwkGxBkr/64lwzXV3o015QhNoMrKo2FZ4ocrbQByepU7RgDed3DyWuJem4

# j41839F9/Ckez1me1GMO8V2i1M1E2TPZNF0CwMSBgDXN2WzxwmOQ9hC8AvcmUZ3v

# o/xS4m1p49/DfOZSsjcq/56wdbTjSXOR/rdAvaiuIw+aXwgXLYhjNPG76Sih0up4

# Y0/9O4M1ZT7wuN7S5TG49u4jxiaFy+vasnwkZMdL9Fx32yvfM2Ix+QBA1snKveCd

# F4oCqvdXSRtdKZMfTKPjRLtYBbs7BmAYvQYigYiwi1sdwQUtuxfEwn/TmorXC4JQ

# xx0XUjJQAsWLyuw9dr5g/0BInrfjhoSPuScpEFHSc12YnxeAIGI4q8HA0YlFXeS9

# 6whXc1obZr6KiTUzWlj7LGhzhxvYF0e/5xw8PivdgBPTfRa5agaNb5lSJRXK/pag

# rJwdmBWs9Fy9KJhN4R4BNwjQCTwZy+25nXMDX3QuxhG7I9UnNSGA4K3xZHdzWOAj

# aREWHdXkN4hRZopagwsWLUxKp9cgr1l7oVJ9g4B+NzUGMX0BJjcrL1UX4gYmHfni

# lhcouRbTxN+5HwinLg5DNybYazo0zjIhAVqqQpm/Jmizl7LuyYJLAgMBAAGjggFg

# MIIBXDAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTTT76qZjZvAUxL46m0qcBIVpce

# BjAfBgNVHSMEGDAWgBTOiU+CUaoVooRiyjEjYdJh+/j+eDBnBggrBgEFBQcBAQRb

# MFkwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDIGCCsGAQUF

# BzAChiZodHRwOi8vYWlhLmVudHJ1c3QubmV0L2V2Y3MyLWNoYWluLnA3YzAxBgNV

# HR8EKjAoMCagJKAihiBodHRwOi8vY3JsLmVudHJ1c3QubmV0L2V2Y3MyLmNybDAO

# BgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwSwYDVR0gBEQwQjA3

# BgpghkgBhvpsCgECMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LmVudHJ1c3Qu

# bmV0L3JwYTAHBgVngQwBAzANBgkqhkiG9w0BAQsFAAOCAgEAY57938QM/Bjoxgsp

# AVzCErhur03VoDVmq6/JUOlVd47+ddlJgyjj8F3ezKFrm4y20CKV5W8FZXBAwnQ0

# hP+OQEmLizckn7pMXLM+k0wb2aBxpKXVhOe9I/oEKMICmQqD9XKDMs5T5OyjHG+p

# 170cPnxCBDxkC0fQVA915axL2CePDFrMInEYsIVB0W3qa0oeUAZVUv3zsDQunuEl

# ktGOTXENSjFgWU1Dpn6wNb4pN70GrQLD/gSCs05bRa0oseCfqTbhGEORVO0QaK9/

# k0TDjKDxzSuUrkfPrKLsincyaLA/KKIQFs8UFOb5Ku+4OnsgaqEgAC8KJqDdx5C0

# zU7MAHvKkRe3kvh1Z2p9qwU2tj9rCRZ3OF9D65Y/ajO/iiLQ55jWNiSoob8/Qzpp

# 0x4e6+dDyWH4rVllPO0WpIVVnzJNoKyYnm9erMmQ+S49EgDeAaRcnKtQHc+imszr

# UrqpCs8VsZgbseck5u84G4hgyymqM98ZuxQv2M5VwYb3Z1tPyINHbYhYTi7r6C62

# RbXKeOCAeuiobqRa51yX6WAi97kfWTmyaQ/8BsnpAkBE1uO42aHBnjkHPxlanNtH

# 8H5Rwc5GwDk2VBJxmeFnEGqR8zT0iNF7IzABJVrVTM96v7q/ZvaF9g0JeCDEZq3x

# FAFM0CygH6WWp6JaW3A1UaeMmWwxggZNMIIGSQIBATB3MGMxCzAJBgNVBAYTAlVT

# MRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTwwOgYDVQQDEzNFbnRydXN0IEV4dGVu

# ZGVkIFZhbGlkYXRpb24gQ29kZSBTaWduaW5nIENBIC0gRVZDUzICEAOskDJ0+Aev

# qWO8oNH/1wUwDQYJYIZIAWUDBAIBBQCggYQwGAYKKwYBBAGCNwIBDDEKMAigAoAA

# oQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4w

# DAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQgBCkWxLk0T7L+4PVBwkBe/4wV

# f8+vyafLCWTTkLK18fcwDQYJKoZIhvcNAQEBBQAEggIAlojHBNwmDQPfaZnt7NhI

# XIUUUxoCtdLlHkN0hxTbf8TgYBUj6dRgIbMUod7bWcZxkNHFsrEYJcWP9nD7tbNR

# bwHeMRcJm0ADa6SRUEMGODA4qurMJwwlM+9P6yXIqHH0TBb8738NiGvZaBsZcoIn

# fK63wb75ytM33KPYcaqYq1HVmne+BPLBBIYhzRLTO56Gfs0DHhIovf3JP5U0EkBl

# Dyti8uNC5jgAVuyqUeA8nNfdrHc0kUPjOX79fvhpkhdLvscuWhRAaK27gQLqL2gW

# qAaAomxUcomLD4FJcQDa5GFIYCA8ZDd+SLUTGq6ACVF/Af382KaIj0kk9smvoBLv

# oIf95ONS5GUgjULFWHXgM3X13VbUWwmrGc7t3PqjHQV8In/AhhuwrFjUIttQMKz0

# 1HPV+x756F9zpiic2XbUKyP0mYJpU0w0xpihoYR9XSi0MOkM+ttbXQPcWpQb3xCo

# Kubr39jSoCd/kfbRaT82ZCq/1nQqwY+zz4jazQM+k+32xZarL99R4+fO2bl7ehi1

# itpeexjICy2HGdHF1z8IZBu4+gz7r61A3FzZ9hgcEsWKqwKSgCrbQbyRIHYs9inC

# ar9hZvJSs6MPB4dC/klTrGSvPq9DH1wW9hzKASNNUU96q5OApqutoF/vFLWfHnl/

# FGi03lS9hkCcak1aFqnyJquhggMgMIIDHAYJKoZIhvcNAQkGMYIDDTCCAwkCAQEw

# dzBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5BgNV

# BAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0YW1w

# aW5nIENBAhAFRK/zlJ0IOaa/2z9f5WEWMA0GCWCGSAFlAwQCAQUAoGkwGAYJKoZI

# hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjMwOTE1MTYxMDE4

# WjAvBgkqhkiG9w0BCQQxIgQgn982Z0jrfPJKHEEvsdlGStBz2ZzzEYkqd52i1NsD

# 3wkwDQYJKoZIhvcNAQEBBQAEggIAXkHUtWgtNl9nFmBD+B2FVeCP1LYUfPM0dWiH

# GwWlaqsw6ji/uQuLuKnBcgEgCs1UccGXLoLktfqs3VTGkuXU6yX5oGtWoEUO6to8

# /82CJxV4mRlceoNu6u1jZ73O37oD8J/+c3qcxjZlpsgHQnDn66mJoz9InvRhH4+Z

# WJ+hi7NoN/wflGKlSQYWAwZGWxGxU7iDRFDwpvKSpOdGNT9q6M2QdRK8TdaD4c1d

# AKFTTuNp7rZ6uxCBjCvOOBy72n0UgPG7zBYwVoDhMRdw3H/2GCxJuGc4SxYjk94S

# SddIBeezg9BcAShf/yxYkzqYAPuRbfG6hiYalCy6zLkSILrWoIWidcqGM7Nj3dz4

# htLY+qNA2Df63D0zUx+efSgQAvk0s97vpAaUj6jPp536ikjYEuw2kifVZkM/4oQz

# vC4BnARygU1+BUE0YZax/R2piIaweiktpH62WqoZyxhD2974u3UcBZGh8eio7tVz

# A4y67Xtlig1XwuzwnAuC6BlHdZtVxkUHjvDt8NVvKPc/7WGZJEoaYJTvg6E5dQ+K

# KZLjljDIGkdq3biKALaC0+3MOTaKBBxEru0EgffxckE6Bzwg+a1uL9nHtWfa2TIA

# KLCbZpAEHGpRa2ELH7shvrGgpODbUAvdC6tGOE6roUZQvaLMxYEjpNza2Dv+tUsA

# JEjNLhQ=

# SIG # End signature block