private/Get-AdsiADObject.ps1

<#
    .SYNOPSIS
        This function retrieves an Active Directory object by name or LDAP filter.
 
    .DESCRIPTION
        The Get-AdsiADObject function retrieves an Active Directory object by name or LDAP filter. It searches for the object in the domain of the current user and returns the object's name, sAMAccountName, distinguishedName, objectClass, and other properties.
 
    .PARAMETER Identity
        Specifies the identity (Name) of the Active Directory object to retrieve.
 
    .PARAMETER SearchLimit
        Specifies the maximum number of search results to return. Default is 200.
 
    .PARAMETER SearchBase
        Specifies the search base for the object search. If not specified, the search will be performed in the domain of the current user.
 
    .PARAMETER LDAPFilter
        Specifies an LDAP filter to narrow down the search results. This parameter is mandatory when using the 'LDAPFilter' parameter set.
 
    .PARAMETER Credential
        Specifies the credentials to use for the search. If not specified, the search will be performed with the credentials of the current user.
 
    .PARAMETER Server
        Specifies the domain controller to connect to for the search. If not specified, the search will be performed on the default domain controller.
 
    .PARAMETER Port
        Specifies the port number to use for the LDAP connection. Default is 389.
 
    .PARAMETER ObjectType
        Specifies the type of object to search for. Valid values are "*", "user", "group", and "computer". Default is "*".
 
    .PARAMETER Properties
        Specifies the properties to retrieve for the object. Default is "*".
 
    .EXAMPLE
        Get-AdsiADObject -Identity "JohnDoe"
        This command retrieves the Active Directory object with the name "JohnDoe".
 
    .EXAMPLE
        Get-AdsiADObject -LDAPFilter "(|(objectClass=user)(objectClass=group))"
        This command retrieves all Active Directory objects that are either users or groups.
 
    .NOTES
        Function : Get-AdsiADObject
        Author : John Billekens
        Copyright : Copyright (c) John Billekens Consultancy
        Version : 1.0
#>


function Get-AdsiADObject {
    [CmdletBinding(DefaultParameterSetName = 'Identity')]
    Param (
        [Parameter(Mandatory = $true, ParameterSetName = 'Identity')]
        [String]$Identity,

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [Int]$SearchLimit = 200,

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [String]$SearchBase,

        [Parameter(Mandatory = $true, ParameterSetName = 'LDAPFilter')]
        [String]$LDAPFilter,

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [Management.Automation.PSCredential]
        [Management.Automation.Credential()]$Credential = [Management.Automation.PSCredential]::Empty,

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [String]$Server,

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [ValidateSet('*', 'user', 'group', 'computer')]
        [String]$ObjectType = "*",

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [String[]]$Properties = "*",

        [Parameter(ParameterSetName = 'Identity')]
        [Parameter(ParameterSetName = 'LDAPFilter')]
        [ValidateSet(0, 389, 636)]
        [Int]$Port = 389,

        [Parameter(ParameterSetName = 'Identity')]
        [Switch]$WildcardSearch

    )
    Write-Verbose "Starting function : Get-AdsiADObject"
    if ($Port -eq 0) { $Port = 389 }
    $adsiADParams = @{
        Port   = $Port
        Server = $Server
    }

    if (-not ($Credential -is [Management.Automation.PSCredential])) {
        $Credential = [Management.Automation.PSCredential]::Empty
    }
    $adsiADParams.Credential = $Credential
    $adsiADDomain = Get-AdsiADDomain @adsiADParams
    Write-Verbose "Domain : $($adsiADDomain.DistinguishedName)"
    Write-Verbose "Server : $($adsiADDomain.DirectoryServer)"
    Write-Verbose "LDAPPath : $($adsiADDomain.LDAPPath)"

    if ([String]::IsNullOrEmpty($ObjectType) -or $ObjectType -eq "*") {
        $ObjectClass = "(|(objectClass=group)(objectClass=user)(objectClass=computer))"
    } else {
        $ObjectClass = "(objectClass=$ObjectType)"
    }

    if (-Not [String]::IsNullOrEmpty($Identity)) {
        if ($WildcardSearch) {
            $searchIdentityString = "*$Identity*"
        } else {
            $searchIdentityString = $Identity
        }
        $LDAPFilter = "(&$($ObjectClass)(|(Name=$searchIdentityString)(UserPrincipalName=$searchIdentityString)(SamAccountName=$searchIdentityString)(Sn=$searchIdentityString)(GivenName=$searchIdentityString)(ObjectSid=$searchIdentityString)))"
    }
    if ($adsiADDomain.LDAPPath -like "LDAP://*") {
        $LDAPPath = '{0}/' -f $adsiADDomain.LDAPPath.TrimEnd("/")
    } else {
        $LDAPPath = "LDAP://"
        if (-Not [String]::IsNullOrEmpty($Server)) {
            $LDAPPath += "$($Server):$($Port)/"
        }
    }
    if ([String]::IsNullOrEmpty($SearchBase)) {
        $LDAPPath += $adsiADDomain.DistinguishedName
    } elseif ($SearchBase -like "LDAP://*") {
        $LDAPPath += $SearchBase -replace "LDAP://", $null
    } elseif ($SearchBase -match '(?im)^(?:(?<cn>CN=(?<name>[^,]*)),)?(?:(?<path>(?:(?:CN|OU)=[^,]+,?)+),)?(?<domain>(?:DC=[^,]+,?)+)$') {
        $LDAPPath += $SearchBase
    } else {
        $LDAPPath += $adsiADDomain.DistinguishedName
    }
    Write-Verbose "LDAPPath : $LDAPPath"
    Write-Verbose "LDAPFilter : $LDAPFilter"

    $searchRoot = $null
    $searcher = $null
    $result = $null
    try {
        if ($null -eq $Credential -or $Credential -eq [Management.Automation.PSCredential]::Empty) {
            $searchRoot = New-Object System.DirectoryServices.DirectoryEntry $LDAPPath
            Write-Verbose "Connecting : Without credential"
        } else {
            $searchRoot = New-Object System.DirectoryServices.DirectoryEntry $LDAPPath, $($Credential.UserName), $($Credential.GetNetworkCredential().password)
            Write-Verbose "Connecting : With credential"
        }

        $searcher = New-Object -TypeName system.directoryservices.directorysearcher

        $searcher.SearchRoot = $searchRoot
        $searcher.Filter = $LDAPFilter

        # Add requested properties
        Foreach ($property in $Properties) {
            $searcher.PropertiesToLoad.Add("$($property)".ToLower()) | Out-Null
        }

        # Ensure required properties are always loaded (unless using wildcard)
        $requiredProperties = @("distinguishedname", "name", "objectclass", "samaccountname", "objectsid")
        $hasWildcard = $searcher.PropertiesToLoad -contains "*"

        foreach ($requiredProp in $requiredProperties) {
            if (-not $hasWildcard -and -not ($searcher.PropertiesToLoad -contains $requiredProp)) {
                $searcher.PropertiesToLoad.Add($requiredProp) | Out-Null
                Write-Verbose "Added required property: $requiredProp"
            }
        }

        Write-Verbose "Properties to load: $($searcher.PropertiesToLoad -join ', ')"

        $searcher.PageSize = $SearchLimit

        $result = $searcher.FindAll()
        Write-Verbose "Result count : $($result.count)"

        if ($result.count -gt 0) {

            ForEach ($entry in $result) {
                $entryProperties = @{}
                ForEach ($propertyName in $entry.Properties.PropertyNames) {
                    $propertyValue = $entry.Properties[$propertyName]

                    # Use centralized conversion function for all property values
                    $entryProperties[$propertyName] = ConvertFrom-ResultPropertyValue -PropertyName $propertyName -PropertyValue $propertyValue
                }

                Write-Output ([PSCustomObject]@{
                        Name              = "$($entryProperties["name"])"
                        sAMAccountName    = "$($entryProperties["samaccountname"])"
                        DistinguishedName = "$($entryProperties["distinguishedname"])"
                        objectClass       = "$($entryProperties["objectclass"])"
                        OtherProperties   = [PSCustomObject]$entryProperties
                    })
            }
        } else {
            if ($PSCmdlet.MyInvocation.BoundParameters.ContainsKey('Identity')) {
                Write-Warning "Object with name '$Identity' not found in Active Directory."
            }
            if ($PSCmdlet.MyInvocation.BoundParameters.ContainsKey('LDAPFilter')) {
                Write-Warning "Object with LDAP filter '$LDAPFilter' not found in Active Directory."
            }
            Write-Output (@())
        }
    } finally {
        if ($null -ne $result) {
            $result.Dispose()
        }
        if ($null -ne $searcher) {
            $searcher.Dispose()
        }
        if ($null -ne $searchRoot) {
            $searchRoot.Dispose()
        }
    }
    Write-Verbose "Ending function : Get-AdsiADObject"
}

# SIG # Begin signature block
# MIImdwYJKoZIhvcNAQcCoIImaDCCJmQCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD88Y43oQd1jf7k
# cZI4nfDeSdliQaDMVed5ATgDbPKi36CCIAowggYUMIID/KADAgECAhB6I67aU2mW
# D5HIPlz0x+M/MA0GCSqGSIb3DQEBDAUAMFcxCzAJBgNVBAYTAkdCMRgwFgYDVQQK
# Ew9TZWN0aWdvIExpbWl0ZWQxLjAsBgNVBAMTJVNlY3RpZ28gUHVibGljIFRpbWUg
# U3RhbXBpbmcgUm9vdCBSNDYwHhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5
# WjBVMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMSwwKgYD
# VQQDEyNTZWN0aWdvIFB1YmxpYyBUaW1lIFN0YW1waW5nIENBIFIzNjCCAaIwDQYJ
# KoZIhvcNAQEBBQADggGPADCCAYoCggGBAM2Y2ENBq26CK+z2M34mNOSJjNPvIhKA
# VD7vJq+MDoGD46IiM+b83+3ecLvBhStSVjeYXIjfa3ajoW3cS3ElcJzkyZlBnwDE
# JuHlzpbN4kMH2qRBVrjrGJgSlzzUqcGQBaCxpectRGhhnOSwcjPMI3G0hedv2eNm
# GiUbD12OeORN0ADzdpsQ4dDi6M4YhoGE9cbY11XxM2AVZn0GiOUC9+XE0wI7CQKf
# OUfigLDn7i/WeyxZ43XLj5GVo7LDBExSLnh+va8WxTlA+uBvq1KO8RSHUQLgzb1g
# bL9Ihgzxmkdp2ZWNuLc+XyEmJNbD2OIIq/fWlwBp6KNL19zpHsODLIsgZ+WZ1AzC
# s1HEK6VWrxmnKyJJg2Lv23DlEdZlQSGdF+z+Gyn9/CRezKe7WNyxRf4e4bwUtrYE
# 2F5Q+05yDD68clwnweckKtxRaF0VzN/w76kOLIaFVhf5sMM/caEZLtOYqYadtn03
# 4ykSFaZuIBU9uCSrKRKTPJhWvXk4CllgrwIDAQABo4IBXDCCAVgwHwYDVR0jBBgw
# FoAU9ndq3T/9ARP/FqFsggIv0Ao9FCUwHQYDVR0OBBYEFF9Y7UwxeqJhQo1SgLqz
# YZcZojKbMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMBMGA1Ud
# JQQMMAoGCCsGAQUFBwMIMBEGA1UdIAQKMAgwBgYEVR0gADBMBgNVHR8ERTBDMEGg
# P6A9hjtodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNUaW1lU3Rh
# bXBpbmdSb290UjQ2LmNybDB8BggrBgEFBQcBAQRwMG4wRwYIKwYBBQUHMAKGO2h0
# dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY1RpbWVTdGFtcGluZ1Jv
# b3RSNDYucDdjMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAN
# BgkqhkiG9w0BAQwFAAOCAgEAEtd7IK0ONVgMnoEdJVj9TC1ndK/HYiYh9lVUacah
# RoZ2W2hfiEOyQExnHk1jkvpIJzAMxmEc6ZvIyHI5UkPCbXKspioYMdbOnBWQUn73
# 3qMooBfIghpR/klUqNxx6/fDXqY0hSU1OSkkSivt51UlmJElUICZYBodzD3M/SFj
# eCP59anwxs6hwj1mfvzG+b1coYGnqsSz2wSKr+nDO+Db8qNcTbJZRAiSazr7KyUJ
# Go1c+MScGfG5QHV+bps8BX5Oyv9Ct36Y4Il6ajTqV2ifikkVtB3RNBUgwu/mSiSU
# ice/Jp/q8BMk/gN8+0rNIE+QqU63JoVMCMPY2752LmESsRVVoypJVt8/N3qQ1c6F
# ibbcRabo3azZkcIdWGVSAdoLgAIxEKBeNh9AQO1gQrnh1TA8ldXuJzPSuALOz1Uj
# b0PCyNVkWk7hkhVHfcvBfI8NtgWQupiaAeNHe0pWSGH2opXZYKYG4Lbukg7HpNi/
# KqJhue2Keak6qH9A8CeEOB7Eob0Zf+fU+CCQaL0cJqlmnx9HCDxF+3BLbUufrV64
# EbTI40zqegPZdA+sXCmbcZy6okx/SjwsusWRItFA3DE8MORZeFb6BmzBtqKJ7l93
# 9bbKBy2jvxcJI98Va95Q5JnlKor3m0E7xpMeYRriWklUPsetMSf2NvUQa/E5vVye
# fQIwggZFMIIELaADAgECAhAIMk+dt9qRb2Pk8qM8Xl1RMA0GCSqGSIb3DQEBCwUA
# MFYxCzAJBgNVBAYTAlBMMSEwHwYDVQQKExhBc3NlY28gRGF0YSBTeXN0ZW1zIFMu
# QS4xJDAiBgNVBAMTG0NlcnR1bSBDb2RlIFNpZ25pbmcgMjAyMSBDQTAeFw0yNDA0
# MDQxNDA0MjRaFw0yNzA0MDQxNDA0MjNaMGsxCzAJBgNVBAYTAk5MMRIwEAYDVQQH
# DAlTY2hpam5kZWwxIzAhBgNVBAoMGkpvaG4gQmlsbGVrZW5zIENvbnN1bHRhbmN5
# MSMwIQYDVQQDDBpKb2huIEJpbGxla2VucyBDb25zdWx0YW5jeTCCAaIwDQYJKoZI
# hvcNAQEBBQADggGPADCCAYoCggGBAMslntDbSQwHZXwFhmibivbnd0Qfn6sqe/6f
# os3pKzKxEsR907RkDMet2x6RRg3eJkiIr3TFPwqBooyXXgK3zxxpyhGOcuIqyM9J
# 28DVf4kUyZHsjGO/8HFjrr3K1hABNUszP0o7H3o6J31eqV1UmCXYhQlNoW9FOmRC
# 1amlquBmh7w4EKYEytqdmdOBavAD5Xq4vLPxNP6kyA+B2YTtk/xM27TghtbwFGKn
# u9Vwnm7dFcpLxans4ONt2OxDQOMA5NwgcUv/YTpjhq9qoz6ivG55NRJGNvUXsM3w
# 2o7dR6Xh4MuEGrTSrOWGg2A5EcLH1XqQtkF5cZnAPM8W/9HUp8ggornWnFVQ9/6M
# ga+ermy5wy5XrmQpN+x3u6tit7xlHk1Hc+4XY4a4ie3BPXG2PhJhmZAn4ebNSBwN
# Hh8z7WTT9X9OFERepGSytZVeEP7hgyptSLcuhpwWeR4QdBb7dV++4p3PsAUQVHFp
# wkSbrRTv4EiJ0Lcz9P1HPGFoHiFAQQIDAQABo4IBeDCCAXQwDAYDVR0TAQH/BAIw
# ADA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY2NzY2EyMDIxLmNybC5jZXJ0dW0u
# cGwvY2NzY2EyMDIxLmNybDBzBggrBgEFBQcBAQRnMGUwLAYIKwYBBQUHMAGGIGh0
# dHA6Ly9jY3NjYTIwMjEub2NzcC1jZXJ0dW0uY29tMDUGCCsGAQUFBzAChilodHRw
# Oi8vcmVwb3NpdG9yeS5jZXJ0dW0ucGwvY2NzY2EyMDIxLmNlcjAfBgNVHSMEGDAW
# gBTddF1MANt7n6B0yrFu9zzAMsBwzTAdBgNVHQ4EFgQUO6KtBpOBgmrlANVAnyiQ
# C6W6lJwwSwYDVR0gBEQwQjAIBgZngQwBBAEwNgYLKoRoAYb2dwIFAQQwJzAlBggr
# BgEFBQcCARYZaHR0cHM6Ly93d3cuY2VydHVtLnBsL0NQUzATBgNVHSUEDDAKBggr
# BgEFBQcDAzAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBAEQsN8wg
# PMdWVkwHPPTN+jKpdns5AKVFjcn00psf2NGVVgWWNQBIQc9lEuTBWb54IK6Ga3hx
# QRZfnPNo5HGl73YLmFgdFQrFzZ1lnaMdIcyh8LTWv6+XNWfoyCM9wCp4zMIDPOs8
# LKSMQqA/wRgqiACWnOS4a6fyd5GUIAm4CuaptpFYr90l4Dn/wAdXOdY32UhgzmSu
# xpUbhD8gVJUaBNVmQaRqeU8y49MxiVrUKJXde1BCrtR9awXbqembc7Nqvmi60tYK
# lD27hlpKtj6eGPjkht0hHEsgzU0Fxw7ZJghYG2wXfpF2ziN893ak9Mi/1dmCNmor
# GOnybKYfT6ff6YTCDDNkod4egcMZdOSv+/Qv+HAeIgEvrxE9QsGlzTwbRtbm6gwY
# YcVBs/SsVUdBn/TSB35MMxRhHE5iC3aUTkDbceo/XP3uFhVL4g2JZHpFfCSu2TQr
# rzRn2sn07jfMvzeHArCOJgBW1gPqR3WrJ4hUxL06Rbg1gs9tU5HGGz9KNQMfQFQ7
# 0Wz7UIhezGcFcRfkIfSkMmQYYpsc7rfzj+z0ThfDVzzJr2dMOFsMlfj1T6l22GBq
# 9XQx0A4lcc5Fl9pRxbOuHHWFqIBD/BCEhwniOCySzqENd2N+oz8znKooSISStnkN
# aYXt6xblJF2dx9Dn89FK7d1IquNxOwt0tI5dMIIGYjCCBMqgAwIBAgIRAKQpO24e
# 3denNAiHrXpOtyQwDQYJKoZIhvcNAQEMBQAwVTELMAkGA1UEBhMCR0IxGDAWBgNV
# BAoTD1NlY3RpZ28gTGltaXRlZDEsMCoGA1UEAxMjU2VjdGlnbyBQdWJsaWMgVGlt
# ZSBTdGFtcGluZyBDQSBSMzYwHhcNMjUwMzI3MDAwMDAwWhcNMzYwMzIxMjM1OTU5
# WjByMQswCQYDVQQGEwJHQjEXMBUGA1UECBMOV2VzdCBZb3Jrc2hpcmUxGDAWBgNV
# BAoTD1NlY3RpZ28gTGltaXRlZDEwMC4GA1UEAxMnU2VjdGlnbyBQdWJsaWMgVGlt
# ZSBTdGFtcGluZyBTaWduZXIgUjM2MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEA04SV9G6kU3jyPRBLeBIHPNyUgVNnYayfsGOyYEXrn3+SkDYTLs1crcw/
# ol2swE1TzB2aR/5JIjKNf75QBha2Ddj+4NEPKDxHEd4dEn7RTWMcTIfm492TW22I
# 8LfH+A7Ehz0/safc6BbsNBzjHTt7FngNfhfJoYOrkugSaT8F0IzUh6VUwoHdYDpi
# ln9dh0n0m545d5A5tJD92iFAIbKHQWGbCQNYplqpAFasHBn77OqW37P9BhOASdmj
# p3IijYiFdcA0WQIe60vzvrk0HG+iVcwVZjz+t5OcXGTcxqOAzk1frDNZ1aw8nFhG
# EvG0ktJQknnJZE3D40GofV7O8WzgaAnZmoUn4PCpvH36vD4XaAF2CjiPsJWiY/j2
# xLsJuqx3JtuI4akH0MmGzlBUylhXvdNVXcjAuIEcEQKtOBR9lU4wXQpISrbOT8ux
# +96GzBq8TdbhoFcmYaOBZKlwPP7pOp5Mzx/UMhyBA93PQhiCdPfIVOCINsUY4U23
# p4KJ3F1HqP3H6Slw3lHACnLilGETXRg5X/Fp8G8qlG5Y+M49ZEGUp2bneRLZoyHT
# yynHvFISpefhBCV0KdRZHPcuSL5OAGWnBjAlRtHvsMBrI3AAA0Tu1oGvPa/4yeei
# Ayu+9y3SLC98gDVbySnXnkujjhIh+oaatsk/oyf5R2vcxHahajMCAwEAAaOCAY4w
# ggGKMB8GA1UdIwQYMBaAFF9Y7UwxeqJhQo1SgLqzYZcZojKbMB0GA1UdDgQWBBSI
# YYyhKjdkgShgoZsx0Iz9LALOTzAOBgNVHQ8BAf8EBAMCBsAwDAYDVR0TAQH/BAIw
# ADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDBKBgNVHSAEQzBBMDUGDCsGAQQBsjEB
# AgEDCDAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZn
# gQwBBAIwSgYDVR0fBEMwQTA/oD2gO4Y5aHR0cDovL2NybC5zZWN0aWdvLmNvbS9T
# ZWN0aWdvUHVibGljVGltZVN0YW1waW5nQ0FSMzYuY3JsMHoGCCsGAQUFBwEBBG4w
# bDBFBggrBgEFBQcwAoY5aHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUHVi
# bGljVGltZVN0YW1waW5nQ0FSMzYuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
# cC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAYEAAoE+pIZyUSH5ZakuPVKK
# 4eWbzEsTRJOEjbIu6r7vmzXXLpJx4FyGmcqnFZoa1dzx3JrUCrdG5b//LfAxOGy9
# Ph9JtrYChJaVHrusDh9NgYwiGDOhyyJ2zRy3+kdqhwtUlLCdNjFjakTSE+hkC9F5
# ty1uxOoQ2ZkfI5WM4WXA3ZHcNHB4V42zi7Jk3ktEnkSdViVxM6rduXW0jmmiu71Z
# pBFZDh7Kdens+PQXPgMqvzodgQJEkxaION5XRCoBxAwWwiMm2thPDuZTzWp/gUFz
# i7izCmEt4pE3Kf0MOt3ccgwn4Kl2FIcQaV55nkjv1gODcHcD9+ZVjYZoyKTVWb4V
# qMQy/j8Q3aaYd/jOQ66Fhk3NWbg2tYl5jhQCuIsE55Vg4N0DUbEWvXJxtxQQaVR5
# xzhEI+BjJKzh3TQ026JxHhr2fuJ0mV68AluFr9qshgwS5SpN5FFtaSEnAwqZv3IS
# +mlG50rK7W3qXbWwi4hmpylUfygtYLEdLQukNEX1jiOKMIIGgjCCBGqgAwIBAgIQ
# NsKwvXwbOuejs902y8l1aDANBgkqhkiG9w0BAQwFADCBiDELMAkGA1UEBhMCVVMx
# EzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYD
# VQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBS
# U0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMjEwMzIyMDAwMDAwWhcNMzgw
# MTE4MjM1OTU5WjBXMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1p
# dGVkMS4wLAYDVQQDEyVTZWN0aWdvIFB1YmxpYyBUaW1lIFN0YW1waW5nIFJvb3Qg
# UjQ2MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAiJ3YuUVnnR3d6Lkm
# gZpUVMB8SQWbzFoVD9mUEES0QUCBdxSZqdTkdizICFNeINCSJS+lV1ipnW5ihkQy
# C0cRLWXUJzodqpnMRs46npiJPHrfLBOifjfhpdXJ2aHHsPHggGsCi7uE0awqKggE
# /LkYw3sqaBia67h/3awoqNvGqiFRJ+OTWYmUCO2GAXsePHi+/JUNAax3kpqstbl3
# vcTdOGhtKShvZIvjwulRH87rbukNyHGWX5tNK/WABKf+Gnoi4cmisS7oSimgHUI0
# Wn/4elNd40BFdSZ1EwpuddZ+Wr7+Dfo0lcHflm/FDDrOJ3rWqauUP8hsokDoI7D/
# yUVI9DAE/WK3Jl3C4LKwIpn1mNzMyptRwsXKrop06m7NUNHdlTDEMovXAIDGAvYy
# nPt5lutv8lZeI5w3MOlCybAZDpK3Dy1MKo+6aEtE9vtiTMzz/o2dYfdP0KWZwZIX
# bYsTIlg1YIetCpi5s14qiXOpRsKqFKqav9R1R5vj3NgevsAsvxsAnI8Oa5s2oy25
# qhsoBIGo/zi6GpxFj+mOdh35Xn91y72J4RGOJEoqzEIbW3q0b2iPuWLA911cRxgY
# 5SJYubvjay3nSMbBPPFsyl6mY4/WYucmyS9lo3l7jk27MAe145GWxK4O3m3gEFEI
# kv7kRmefDR7Oe2T1HxAnICQvr9sCAwEAAaOCARYwggESMB8GA1UdIwQYMBaAFFN5
# v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1UdDgQWBBT2d2rdP/0BE/8WoWyCAi/QCj0U
# JTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zATBgNVHSUEDDAKBggr
# BgEFBQcDCDARBgNVHSAECjAIMAYGBFUdIAAwUAYDVR0fBEkwRzBFoEOgQYY/aHR0
# cDovL2NybC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJTQUNlcnRpZmljYXRpb25B
# dXRob3JpdHkuY3JsMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDov
# L29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEADr5lQe1oRLjl
# ocXUEYfktzsljOt+2sgXke3Y8UPEooU5y39rAARaAdAxUeiX1ktLJ3+lgxtoLQhn
# 5cFb3GF2SSZRX8ptQ6IvuD3wz/LNHKpQ5nX8hjsDLRhsyeIiJsms9yAWnvdYOdEM
# q1W61KE9JlBkB20XBee6JaXx4UBErc+YuoSb1SxVf7nkNtUjPfcxuFtrQdRMRi/f
# InV/AobE8Gw/8yBMQKKaHt5eia8ybT8Y/Ffa6HAJyz9gvEOcF1VWXG8OMeM7Vy7B
# s6mSIkYeYtddU1ux1dQLbEGur18ut97wgGwDiGinCwKPyFO7ApcmVJOtlw9FVJxw
# /mL1TbyBns4zOgkaXFnnfzg4qbSvnrwyj1NiurMp4pmAWjR+Pb/SIduPnmFzbSN/
# G8reZCL4fvGlvPFk4Uab/JVCSmj59+/mB2Gn6G/UYOy8k60mKcmaAZsEVkhOFuoj
# 4we8CYyaR9vd9PGZKSinaZIkvVjbH/3nlLb0a7SBIkiRzfPfS9T+JesylbHa1LtR
# V9U/7m0q7Ma2CQ/t392ioOssXW7oKLdOmMBl14suVFBmbzrt5V5cQPnwtd3UOTpS
# 9oCG+ZZheiIvPgkDmA8FzPsnfXW5qHELB43ET7HHFHeRPRYrMBKjkb8/IN7Po0d0
# hQoF4TeMM+zYAJzoKQnVKOLg8pZVPT8wgga5MIIEoaADAgECAhEAmaOACiZVO2Wr
# 3G6EprPqOTANBgkqhkiG9w0BAQwFADCBgDELMAkGA1UEBhMCUEwxIjAgBgNVBAoT
# GVVuaXpldG8gVGVjaG5vbG9naWVzIFMuQS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0
# aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIGA1UEAxMbQ2VydHVtIFRydXN0ZWQgTmV0
# d29yayBDQSAyMB4XDTIxMDUxOTA1MzIxOFoXDTM2MDUxODA1MzIxOFowVjELMAkG
# A1UEBhMCUEwxITAfBgNVBAoTGEFzc2VjbyBEYXRhIFN5c3RlbXMgUy5BLjEkMCIG
# A1UEAxMbQ2VydHVtIENvZGUgU2lnbmluZyAyMDIxIENBMIICIjANBgkqhkiG9w0B
# AQEFAAOCAg8AMIICCgKCAgEAnSPPBDAjO8FGLOczcz5jXXp1ur5cTbq96y34vuTm
# flN4mSAfgLKTvggv24/rWiVGzGxT9YEASVMw1Aj8ewTS4IndU8s7VS5+djSoMcbv
# IKck6+hI1shsylP4JyLvmxwLHtSworV9wmjhNd627h27a8RdrT1PH9ud0IF+njvM
# k2xqbNTIPsnWtw3E7DmDoUmDQiYi/ucJ42fcHqBkbbxYDB7SYOouu9Tj1yHIohzu
# C8KNqfcYf7Z4/iZgkBJ+UFNDcc6zokZ2uJIxWgPWXMEmhu1gMXgv8aGUsRdaCtVD
# 2bSlbfsq7BiqljjaCun+RJgTgFRCtsuAEw0pG9+FA+yQN9n/kZtMLK+Wo837Q4QO
# ZgYqVWQ4x6cM7/G0yswg1ElLlJj6NYKLw9EcBXE7TF3HybZtYvj9lDV2nT8mFSkc
# SkAExzd4prHwYjUXTeZIlVXqj+eaYqoMTpMrfh5MCAOIG5knN4Q/JHuurfTI5XDY
# O962WZayx7ACFf5ydJpoEowSP07YaBiQ8nXpDkNrUA9g7qf/rCkKbWpQ5boufUnq
# 1UiYPIAHlezf4muJqxqIns/kqld6JVX8cixbd6PzkDpwZo4SlADaCi2JSplKShBS
# ND36E/ENVv8urPS0yOnpG4tIoBGxVCARPCg1BnyMJ4rBJAcOSnAWd18Jx5n858JS
# qPECAwEAAaOCAVUwggFRMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFN10XUwA
# 23ufoHTKsW73PMAywHDNMB8GA1UdIwQYMBaAFLahVDkCw6A/joq8+tT4HKbROg79
# MA4GA1UdDwEB/wQEAwIBBjATBgNVHSUEDDAKBggrBgEFBQcDAzAwBgNVHR8EKTAn
# MCWgI6Ahhh9odHRwOi8vY3JsLmNlcnR1bS5wbC9jdG5jYTIuY3JsMGwGCCsGAQUF
# BwEBBGAwXjAoBggrBgEFBQcwAYYcaHR0cDovL3N1YmNhLm9jc3AtY2VydHVtLmNv
# bTAyBggrBgEFBQcwAoYmaHR0cDovL3JlcG9zaXRvcnkuY2VydHVtLnBsL2N0bmNh
# Mi5jZXIwOQYDVR0gBDIwMDAuBgRVHSAAMCYwJAYIKwYBBQUHAgEWGGh0dHA6Ly93
# d3cuY2VydHVtLnBsL0NQUzANBgkqhkiG9w0BAQwFAAOCAgEAdYhYD+WPUCiaU58Q
# 7EP89DttyZqGYn2XRDhJkL6P+/T0IPZyxfxiXumYlARMgwRzLRUStJl490L94C9L
# GF3vjzzH8Jq3iR74BRlkO18J3zIdmCKQa5LyZ48IfICJTZVJeChDUyuQy6rGDxLU
# UAsO0eqeLNhLVsgw6/zOfImNlARKn1FP7o0fTbj8ipNGxHBIutiRsWrhWM2f8pXd
# d3x2mbJCKKtl2s42g9KUJHEIiLni9ByoqIUul4GblLQigO0ugh7bWRLDm0CdY9rN
# LqyA3ahe8WlxVWkxyrQLjH8ItI17RdySaYayX3PhRSC4Am1/7mATwZWwSD+B7eMc
# ZNhpn8zJ+6MTyE6YoEBSRVrs0zFFIHUR08Wk0ikSf+lIe5Iv6RY3/bFAEloMU+vU
# BfSouCReZwSLo8WdrDlPXtR0gicDnytO7eZ5827NS2x7gCBibESYkOh1/w1tVxTp
# V2Na3PR7nxYVlPu1JPoRZCbH86gc96UTvuWiOruWmyOEMLOGGniR+x+zPF/2DaGg
# K2W1eEJfo2qyrBNPvF7wuAyQfiFXLwvWHamoYtPZo0LHuH8X3n9C+xN4YaNjt2yw
# zOr+tKyEVAotnyU9vyEVOaIYMk3IeBrmFnn0gbKeTTyYeEEUz/Qwt4HOUBCrW602
# NCmvO1nm+/80nLy5r0AZvCQxaQ4xggXDMIIFvwIBATBqMFYxCzAJBgNVBAYTAlBM
# MSEwHwYDVQQKExhBc3NlY28gRGF0YSBTeXN0ZW1zIFMuQS4xJDAiBgNVBAMTG0Nl
# cnR1bSBDb2RlIFNpZ25pbmcgMjAyMSBDQQIQCDJPnbfakW9j5PKjPF5dUTANBglg
# hkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqGSIb3
# DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEV
# MC8GCSqGSIb3DQEJBDEiBCBg03kmz8YVljgGq0e0YFErFJJsO/JMnA5HgKBWBIz5
# MjANBgkqhkiG9w0BAQEFAASCAYBc5XxLatKvFIseMFwvVA6UhRWkGqz9MzmlDq+L
# N2GJulMvoU7i7xNS3tENdey3JU5/Q1K0AuduJPP3lE7J/Z2QXJp7mC6r9nkYx/ru
# FZ/ujjczqqRMR+mF7MBySO92+Fn4Hz+QX8HW1SXmPFqyStm9Bc0fUE+m67NjboPF
# QBkGsruqtgoEOULxAho5WahfHPRPFNoPcUl8veTcQafjpSxTl9VxH1hptXVG0qV0
# 8KG38yBgjJPeKMidXZ1TBPYu3Whx6Umh6d15pHxeQwtoqZ/nRwypWtXq3gjfdnk7
# 45WxIb7GPQOMUEQzrF78I4rYXgbOhjWRS+9SZ7PYA8FlKUsKRnPmXFRtV2vDeqVB
# b49PQk5VFKE09gS9AYyWogYNSKZcLqsBCct9dm1ghGlfLeslZ4SpRrDkGf+yiYfu
# 5uJX9Fxr1wPBnzl5IpLjfM36m3tb3rYys9IZtzqvXLxd7tCsNUBI1YI+A2L3bmVv
# Epcc1Y1hXzuvT8vcFn45fm/RAhChggMjMIIDHwYJKoZIhvcNAQkGMYIDEDCCAwwC
# AQEwajBVMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMSww
# KgYDVQQDEyNTZWN0aWdvIFB1YmxpYyBUaW1lIFN0YW1waW5nIENBIFIzNgIRAKQp
# O24e3denNAiHrXpOtyQwDQYJYIZIAWUDBAICBQCgeTAYBgkqhkiG9w0BCQMxCwYJ
# KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjAxMDgxODM2MTFaMD8GCSqGSIb3
# DQEJBDEyBDCKIe1R6ipkj4joG1EJvHE7vy6FlNjq3jNcX3oozSCRxkPKhsC88sDO
# Ki63I/RvwzcwDQYJKoZIhvcNAQEBBQAEggIAanQDmZLjDcIVRzTYqxebJzXUCd9B
# DpiachvuIkmOOeFKzZGpzmuaH120XJuNnr9ftggwXJ6ouGqXgS0J4paJuigxgrST
# Eu0VctBha0KgtUsObP1KMAYzfsvIqAXj1Q57TVwRqvYCaFzwHAT7OaoxHtX5Tk49
# PNa0J7ltExI+MkjvzyiacJ66Ih0TBZJHNEdboNOuWZTAXZn0Wxvc0v2k2vn59V3h
# kHf3SS0WV+sQCvS0ud3DNyf4VytIIOvwioxOgfnQyLrXP3kwnDQWg0V3aDyAyJGv
# j4EiOZu57bkHrB7FpA/C2sGDu0VhGxZYti12lxvDXfgdmV0gVdT0yezJIdhS3Ao9
# GsyC+RroJj+g2ZfD/izg1jBBRnq+AE7WCR1LTSRuJm8WnxoOrPKmhuFzcn2eU0d5
# z3NtXQ1PYBK+dVMjd7e9DOMByCM8ftptMuooxN4B7+RJqRjZp7mjH9V0UCao7Nl/
# xEpMxZbD4dEFOfAxSzGoY6TLrTI62f9S9cMTGmvlh1XpE+/A2wRA+W4UP/P2Jvxt
# qo8deUIl8LiGKwBPgGM0NtGPeLZhZhW7tKQi6C8sOOiTsZCRYGFAJhSRd4W8bPBQ
# E8zb/4x/tIO6sor86PVy7wR4FXli3AtA0ZiXnO2cShdQSCorQNistG2P29K7dUGW
# dijqVa1w8c42pSk=
# SIG # End signature block