Engines/Terraform/Initialize-AvmTerraformPolicyStage.ps1
|
function Assert-AvmTerraformPolicyPath { [CmdletBinding()] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $StageRoot ) $root = [System.IO.Path]::GetFullPath($StageRoot) $full = [System.IO.Path]::GetFullPath($Path) $relative = [System.IO.Path]::GetRelativePath($root, $full) if ([System.IO.Path]::IsPathRooted($relative) -or @($relative -split '[\\/]' | Where-Object { $_ -eq '..' }).Count -gt 0) { throw [AvmConfigurationException]::new( "Policy configuration '$full' is outside its isolated staging directory. Use module sources inside the repository or downloaded by Terraform.") } $current = $root foreach ($segment in @('.') + @($relative -split '[\\/]')) { $current = Join-Path $current $segment $item = Get-Item -LiteralPath $current -Force -ErrorAction Stop if (($item.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { throw [AvmConfigurationException]::new( "Policy configuration '$full' traverses a link. Use regular files in the isolated module tree so provider safeguards cannot change another scope.") } } } function Get-AvmTerraformPolicyEnvironment { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $StageRoot, [hashtable] $Environment = @{} ) foreach ($name in @('TF_CLI_ARGS', 'TF_CLI_ARGS_init', 'TF_CLI_ARGS_providers', 'TF_CLI_ARGS_validate', 'TF_CLI_ARGS_plan', 'TF_CLI_ARGS_show')) { $value = if ($Environment.ContainsKey($name)) { $Environment[$name] } else { [Environment]::GetEnvironmentVariable($name) } if (-not [string]::IsNullOrWhiteSpace([string]$value)) { throw [AvmConfigurationException]::new( "Unset '$name' for policy checks; extra Terraform arguments can bypass isolated planning. Supply inputs through .tfvars or TF_VAR_* instead.") } } $result = @{} + $Environment $result.TF_DATA_DIR = Join-Path $StageRoot 'data' $result.ARM_SKIP_PROVIDER_REGISTRATION = 'true' $result.ARM_RESOURCE_PROVIDER_REGISTRATIONS = 'legacy' return $result } function Read-AvmTerraformPolicyConfiguration { [CmdletBinding()] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $StageRoot, [Parameter(Mandatory)] [string] $ConftestPath ) Assert-AvmTerraformPolicyPath -Path $Path -StageRoot $StageRoot $directoryFiles = @(Get-ChildItem -LiteralPath $Path -File -Force | Where-Object { -not $_.Name.StartsWith('.') }) if (@($directoryFiles | Where-Object { $_.Name -cmatch '\.(tfquery|tfmigrate)\.(hcl|json)$' }).Count -gt 0) { throw [AvmConfigurationException]::new( "Policy configuration '$Path' contains query or state-migration files outside normal provider override precedence. Use a dedicated example without those files for policy checks.") } $files = @($directoryFiles | Where-Object { ($_.Name -clike '*.tf' -or $_.Name -clike '*.tf.json') -and -not $_.Name.EndsWith('~') }) $documents = [System.Collections.Generic.List[object]]::new() $hclFiles = @($files | Where-Object { $_.Name -clike '*.tf' }) foreach ($file in $files) { Assert-AvmTerraformPolicyPath -Path $file.FullName -StageRoot $StageRoot } if ($hclFiles.Count -gt 0) { $parsed = Invoke-AvmProcess -FilePath $ConftestPath ` -ArgumentList (@('parse', '--parser', 'hcl2', '--combine') + @($hclFiles.FullName)) ` -WorkingDirectory $Path -IgnoreExitCode if ($parsed.ExitCode -ne 0) { throw [AvmConfigurationException]::new( "Cannot parse Terraform configuration in '$Path' for provider-registration safeguards. Correct the HCL before retrying policy checks.") } try { $records = ConvertFrom-Json -InputObject $parsed.StdOut -AsHashtable -Depth 100 -NoEnumerate -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new("The HCL parser returned invalid JSON for '$Path'. Reinstall the configured Conftest tool.") } if ($records -isnot [array] -or $records.Count -ne $hclFiles.Count) { throw [AvmConfigurationException]::new("The HCL parser did not return every Terraform file in '$Path'. Policy planning is blocked.") } $remaining = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($file in $hclFiles) { $null = $remaining.Add($file.FullName) } foreach ($record in $records) { if ($record -isnot [System.Collections.IDictionary] -or -not $record.Contains('path') -or -not $record.Contains('contents') -or $record.path -isnot [string] -or -not $remaining.Remove($record.path) -or $record.contents -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("The HCL parser returned an incomplete or ambiguous file set for '$Path'. Policy planning is blocked.") } $documents.Add($record.contents) } } foreach ($file in @($files | Where-Object { $_.Name -clike '*.tf.json' })) { try { $document = ConvertFrom-Json -InputObject ([System.IO.File]::ReadAllText($file.FullName)) -AsHashtable -Depth 100 -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new("Cannot parse Terraform JSON configuration '$($file.FullName)' for provider safeguards.") } if ($document -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Terraform JSON configuration '$($file.FullName)' must be an object.") } $documents.Add($document) } $sources = [System.Collections.Generic.Dictionary[string, string]]::new([System.StringComparer]::Ordinal) $providers = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) $hasModules = $false $hasBackend = $false foreach ($document in $documents) { if ($document.Contains('module')) { if ($document.module -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect module declarations in '$Path'. Correct the configuration before policy checks.") } if ($document.module.Count -gt 0) { $hasModules = $true } } if ($document.Contains('terraform')) { foreach ($terraform in @($document.terraform)) { if ($terraform -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect a Terraform block in '$Path' for provider safeguards.") } if ($terraform.Contains('backend') -or $terraform.Contains('cloud')) { $hasBackend = $true } if (-not $terraform.Contains('required_providers')) { continue } foreach ($requirements in @($terraform.required_providers)) { if ($requirements -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect required_providers in '$Path'. Use explicit provider source addresses.") } foreach ($name in $requirements.Keys) { $requirement = $requirements[$name] $source = "hashicorp/$name" if ($requirement -is [System.Collections.IDictionary] -and $requirement.Contains('source')) { if ($requirement.source -isnot [string] -or $requirement.source -cnotmatch '^(?:[a-zA-Z0-9.-]+/)?[a-zA-Z0-9-]+/[a-zA-Z0-9-]+$') { throw [AvmConfigurationException]::new("Provider '$name' in '$Path' must have a static source address for policy safeguards.") } $source = $requirement.source } if (($source -split '/').Count -eq 2) { $source = "registry.terraform.io/$source" } $source = $source.ToLowerInvariant() if ($sources.ContainsKey($name) -and $sources[$name] -cne $source) { throw [AvmConfigurationException]::new("Provider '$name' in '$Path' has conflicting source declarations. Consolidate them before policy checks.") } $sources[$name] = $source } } } } if (-not $document.Contains('provider')) { continue } if ($document.provider -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect provider blocks in '$Path'. Policy planning is blocked.") } foreach ($name in $document.provider.Keys) { foreach ($provider in @($document.provider[$name])) { if ($provider -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect provider '$name' in '$Path'. Policy planning is blocked.") } $alias = '' if ($provider.Contains('alias')) { if ($provider.alias -isnot [string] -or $provider.alias -cnotmatch '^[\p{L}_][\p{L}\p{N}_-]*$') { throw [AvmConfigurationException]::new("Provider '$name' in '$Path' must have a static alias for policy safeguards.") } $alias = $provider.alias } $key = "$name`0$alias" $configured = @($provider.Keys | Where-Object { $_ -cnotin @('alias', 'version') }).Count -gt 0 if ($providers.ContainsKey($key)) { $configured = $configured -or $providers[$key].Configured } $providers[$key] = [pscustomobject]@{ Name = $name; Alias = $alias; Configured = $configured } } } } return [pscustomobject]@{ Path = $Path Files = $files Sources = $sources Providers = @($providers.Values) HasModules = $hasModules HasBackend = $hasBackend } } function Get-AvmTerraformPolicyProviderSetting { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $Payload ) try { $schema = ConvertFrom-Json -InputObject $Payload -AsHashtable -Depth 100 -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new('Terraform returned invalid provider schemas. Policy planning is blocked; reinitialize the configured providers.') } if ($schema -isnot [System.Collections.IDictionary] -or -not $schema.Contains('provider_schemas') -or $schema.provider_schemas -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new('Terraform did not return provider_schemas. Policy planning is blocked.') } $settings = @{} foreach ($address in $schema.provider_schemas.Keys) { $source = $address.ToLowerInvariant() $providerName = ($source -split '/')[-1] if ($providerName -notin @('azurerm', 'azapi')) { continue } if ($source -notin @('registry.terraform.io/hashicorp/azurerm', 'registry.terraform.io/azure/azapi')) { throw [AvmConfigurationException]::new("Policy checks cannot enforce automatic registration for '$address'. Use the official AzureRM or AzAPI provider source.") } $provider = $schema.provider_schemas[$address] if ($provider -isnot [System.Collections.IDictionary] -or -not $provider.Contains('provider') -or $provider.provider -isnot [System.Collections.IDictionary] -or -not $provider.provider.Contains('block') -or $provider.provider.block -isnot [System.Collections.IDictionary] -or -not $provider.provider.block.Contains('attributes') -or $provider.provider.block.attributes -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Provider '$address' has no inspectable configuration schema. Policy planning is blocked.") } $attributes = $provider.provider.block.attributes $required = @{ skip_provider_registration = 'bool' } $values = @{ skip_provider_registration = $true } if ($providerName -eq 'azurerm' -and $attributes.Contains('resource_provider_registrations')) { $required = @{ resource_provider_registrations = 'string'; resource_providers_to_register = @('list', 'string') } $values = @{ resource_provider_registrations = 'none'; resource_providers_to_register = @() } if ($attributes.Contains('skip_provider_registration')) { $required.skip_provider_registration = 'bool' $values.skip_provider_registration = $false } } foreach ($name in $required.Keys) { if (-not $attributes.Contains($name) -or $attributes[$name] -isnot [System.Collections.IDictionary] -or -not $attributes[$name].Contains('optional') -or $attributes[$name].optional -isnot [bool] -or -not $attributes[$name].optional -or -not $attributes[$name].Contains('type') -or (ConvertTo-Json -InputObject $attributes[$name].type -Compress) -cne (ConvertTo-Json -InputObject $required[$name] -Compress)) { throw [AvmConfigurationException]::new("Provider '$address' has an unsupported '$name' schema. Select a supported AzureRM/AzAPI version before policy checks.") } } $settings[$source] = $values } return $settings } function Set-AvmTerraformPolicyProviderOverride { [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Low')] param( [Parameter(Mandatory)] $Configuration, [Parameter(Mandatory)] [hashtable] $Settings ) $providers = [ordered]@{} foreach ($provider in $Configuration.Providers) { if (-not $provider.Configured) { continue } $source = if ($Configuration.Sources.ContainsKey($provider.Name)) { $Configuration.Sources[$provider.Name] } else { "registry.terraform.io/hashicorp/$($provider.Name)".ToLowerInvariant() } if (-not $Settings.ContainsKey($source)) { if (($source -split '/')[-1] -in @('azurerm', 'azapi')) { throw [AvmConfigurationException]::new("Provider '$($provider.Name)' in '$($Configuration.Path)' does not match a protected provider schema. Declare its official required_providers source.") } continue } $values = @{} + $Settings[$source] if ($provider.Alias) { $values.alias = $provider.Alias } if (-not $providers.Contains($provider.Name)) { $providers[$provider.Name] = @() } $providers[$provider.Name] += $values } if ($providers.Count -eq 0) { return } $lastName = '' $lastKey = '' foreach ($file in $Configuration.Files) { if ($file.Name -cnotmatch '(^override|_override)\.tf(\.json)?$') { continue } $key = [Convert]::ToHexString([System.Text.Encoding]::UTF8.GetBytes($file.Name)) if ([System.StringComparer]::Ordinal.Compare($key, $lastKey) -gt 0) { $lastName = $file.Name $lastKey = $key } } $name = if ($lastName) { "$lastName.avm_override.tf.json" } else { 'avm_provider_safety_override.tf.json' } $destination = Join-Path $Configuration.Path $name if ([System.Text.Encoding]::UTF8.GetByteCount($name) -gt 255 -or (Test-Path -LiteralPath $destination)) { throw [AvmConfigurationException]::new("Cannot create a final provider override in '$($Configuration.Path)'. Shorten or rename the authored override filenames.") } if (-not $PSCmdlet.ShouldProcess($destination, 'Disable automatic Azure provider registration in the staged policy configuration')) { throw [System.OperationCanceledException]::new('Policy provider safeguards were not approved; planning is blocked.') } $json = ConvertTo-Json -InputObject @{ provider = $providers } -Depth 20 [System.IO.File]::WriteAllText($destination, $json.ReplaceLineEndings("`n") + "`n", [System.Text.UTF8Encoding]::new($false)) } function Initialize-AvmTerraformPolicyStage { [CmdletBinding()] param( [Parameter(Mandatory)] [string] $WorkingDirectory, [Parameter(Mandatory)] [string] $StageRoot, [Parameter(Mandatory)] [string] $TerraformPath, [Parameter(Mandatory)] [string] $ConftestPath, [Parameter(Mandatory)] [hashtable] $EnvVars ) $root = Read-AvmTerraformPolicyConfiguration -Path $WorkingDirectory -StageRoot $StageRoot -ConftestPath $ConftestPath if ($root.HasBackend) { throw [AvmConfigurationException]::new( "Policy example '$WorkingDirectory' declares a backend or cloud execution. Use a local, backend-free example so provider safeguards are enforced in isolated staging.") } $null = Invoke-AvmTerraformInit -TerraformPath $TerraformPath -WorkingDirectory $WorkingDirectory ` -EnvVars $EnvVars -NoColor -SkipPluginCacheLock -Label 'terraform init (policy safeguards)' $directories = @() $manifestPath = Join-Path -Path $EnvVars.TF_DATA_DIR -ChildPath 'modules' -AdditionalChildPath 'modules.json' if (Test-Path -LiteralPath $manifestPath -PathType Leaf) { Assert-AvmTerraformPolicyPath -Path $manifestPath -StageRoot $StageRoot $payload = [System.IO.File]::ReadAllText($manifestPath) $directories = @(ConvertFrom-AvmTerraformModuleManifest -Payload $payload -WorkingDirectory $WorkingDirectory) $manifest = ConvertFrom-Json -InputObject $payload -AsHashtable $rootRecord = @($manifest.Modules | Where-Object { $_.Key -ceq '' })[0] $manifestRoot = [System.IO.Path]::GetFullPath($rootRecord.Dir, $WorkingDirectory) if ([System.IO.Path]::GetRelativePath($WorkingDirectory, $manifestRoot) -cne '.') { throw [AvmConfigurationException]::new('The installed module manifest does not identify this isolated example as its root. Policy planning is blocked.') } } elseif ($root.HasModules) { throw [AvmConfigurationException]::new("Terraform did not produce an installed module manifest for '$WorkingDirectory'. Policy planning is blocked.") } $configurations = [System.Collections.Generic.List[object]]::new() $configurations.Add($root) foreach ($directory in $directories) { if ($directory -ceq $WorkingDirectory) { continue } $configurations.Add((Read-AvmTerraformPolicyConfiguration -Path $directory -StageRoot $StageRoot -ConftestPath $ConftestPath)) } $schema = Invoke-AvmProcess -FilePath $TerraformPath -ArgumentList @('providers', 'schema', '-json') ` -WorkingDirectory $WorkingDirectory -EnvVars $EnvVars -Label 'terraform provider schemas (policy safeguards)' $settings = Get-AvmTerraformPolicyProviderSetting -Payload $schema.StdOut $azureRm = 'registry.terraform.io/hashicorp/azurerm' # Implicit and inherited configurations use skip=true/legacy; explicit modern blocks use skip=false/none. if ($settings.ContainsKey($azureRm) -and -not $settings[$azureRm].ContainsKey('skip_provider_registration')) { $EnvVars.ARM_RESOURCE_PROVIDER_REGISTRATIONS = 'none' } foreach ($configuration in $configurations) { Set-AvmTerraformPolicyProviderOverride -Configuration $configuration -Settings $settings } $validation = Invoke-AvmProcess -FilePath $TerraformPath -ArgumentList @('validate', '-json') ` -WorkingDirectory $WorkingDirectory -EnvVars $EnvVars -Label 'terraform validate (policy safeguards)' -IgnoreExitCode try { $validated = ConvertFrom-Json -InputObject $validation.StdOut -AsHashtable -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new('Terraform returned invalid validation output after provider safeguards; policy planning is blocked.') } if ($validation.ExitCode -ne 0 -or $validated -isnot [System.Collections.IDictionary] -or -not $validated.Contains('valid') -or $validated.valid -isnot [bool] -or -not $validated.valid) { throw [AvmConfigurationException]::new( "Terraform configuration in '$WorkingDirectory' failed validation after provider safeguards. Run terraform validate on the source and correct the configuration; no policy plan was started.") } if ($settings.Count -gt 0) { Write-AvmLog 'policy: automatic AzureRM/AzAPI provider registration is disabled in the staged plan.' -Level Info | Out-Null } } # SIG # Begin signature block # MIInUgYJKoZIhvcNAQcCoIInQzCCJz8CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDa4Neje+qCpURD # nlex9UDtSwtg0AOP2fBBmjxMaoBs0KCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnfMIIZ2wIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIEn4PbRYGVOUTHUtpQI0S9N9PghX # 5S/QauMiZBHlEIy5MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEAkOaazo9Lpyk2kq+JhnZJPQ8lKrSXMEFDn4lrTh6C4XS1YrOLqkOdtaaG2b0l # I8iaqIOogm7j7rc6AqSd+26rS0wc6vStON8lgGnFjNU5M9O280dTqkY2aK3cUwK3 # 9W/ehn6BIhJEzPlAQZ7fCJv3E4vaVkzvpYF1ChPgMHijajZ5ogcr6gvV65Q79PiQ # 7vB+a2iSilROllT75WbZ5IrloRLdy8/jHh4KqtKIXRzinYBIc7tptjSUDnYVoWX0 # zzR6YM3vei0WCG4PWcUuWNY6dpNBPt6Y9BzOKELSvt4GB+8CdTh//5dHrr+V2zpg # z+Ctpl/mvOzdUDRuzc1TlfuIcKGCF68wgherBgorBgEEAYI3AwMBMYIXmzCCF5cG # CSqGSIb3DQEHAqCCF4gwgheEAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG # 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCCJWPPtjcE5ixydQ11rQUyrCcntwggd+vgM6g0eFpBkOAIGasTkwCeCGBMy # MDI2MTAwNjIyMjMzMi42OTZaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoz # MjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaCCEf0wggcoMIIFEKADAgECAhMzAAACGqmgHQagD0OqAAEAAAIaMA0GCSqG # SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgx # NDE4NDgyOFoXDTI2MTExMzE4NDgyOFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh # dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjMyMUEtMDVF # MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC # IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmYEAwSTz79q2V3ZWzQ5Ev7RK # gadQtMBy7+V3XQ8R0NL8R9mupxcqJQ/KPeZGJTER+9Qq/t7HOQfBbDy6e0TepvBF # V/RY3w+LOPMKn0Uoh2/8IvdSbJ8qAWRVoz2S9VrJzZpB8/f5rQcRETgX/t8N66D2 # JlEXv4fZQB7XzcJMXr1puhuXbOt9RYEyN1Q3Z7YjRkhfBsRc+SD/C9F4iwZqfQgo # 82GG4wguIhjJU7+XMfrv4vxAFNVg3mn1PoMWGZWio+e14+PGYPVLKlad+0IhdHK5 # AgPyXKkqAhEZpYhYYVEItHOOvqrwukxVAJXMvWA3GatWkRZn33WDJVtghCW6XPLi # 1cDKiGE5UcXZSV4OjQIUB8vp2LUMRXud5I49FIBcE9nT00z8A+EekrPM+OAk07aD # fwZbdmZ56j7ub5fNDLf8yIb8QxZ8Mr4RwWy/czBuV5rkWQQ+msjJ5AKtYZxJdnaZ # ehUgUNArU/u36SH1eXKMQGRXr/xeKFGI8vvv5Jl1knZ8UqEQr9PxDbis7OXp2WSM # K5lLGdYVH8VownYF3sbOiRkx5Q5GaEyTehOQp2SfdbsJZlg0SXmHphGnoW1/gQ/5 # P6BgSq4PAWIZaDJj6AvLLCdbURgR5apNQQed2zYUgUbjACA/TomA8Ll7Arrv2oZG # iUO5Vdi4xxtA3BRTQTUCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTwqyIJ3QMoPasD # cGdGovbaY8IlNjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV # HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny # bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI # KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy # MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI # MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEA1a72WFq7B6bJT3VO # J21nnToPJ9O/q51bw1bhPfQy67uy+f8x8akipzNL2k5b6mtxuPbZGpBqpBKguDwQ # mxVpX8cGmafeo3wGr4a8Yk6Sy09tEh/Nwwlsyq7BRrJNn6bGOB8iG4OTy+pmMUh7 # FejNPRgvgeo/OPytm4NNrMMg98UVlrZxGNOYsifpRJFg5jE/Yu6lqFa1lTm9cHuP # YxWa2oEwC0sEAsTFb69iKpN0sO19xBZCr0h5ClU9Pgo6ekiJb7QJoDzrDoPQHwbN # A87Cto7TLuphj0m9l/I70gLjEq53SHjuURzwpmNxdm18Qg+rlkaMC6Y2KukOfJ7o # CSu9vcNGQM+inl9gsNgirZ6yJk9VsXEsoTtoR7fMNU6Py6ufJQGMTmq6ZCq2eIGO # XWMBb79ZF6tiKTa4qami3US0mTY41J129XmAglVy+ujSZkHu2lHJDRHs7FjnIXZV # UE5pl6yUIl23jG50fRTLQcStdwY/LvJUgEHCIzjvlLTqLt6JVR5bcs5aN4Dh0YPG # 95B9iDMZrq4rli5SnGNWev5LLsDY1fbrK6uVpD+psvSLsNpht27QcHRsYdAMALXM # +HNsz2LZ8xiOfwt6rOsVWXoiHV86/TeMy5TZFUl7qB59INoMSJgDRladVXeT9fwO # uirFIoqgjKGk3vO2bELrYMN0QVwwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ # AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK # V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0 # IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0 # ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa # MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT # HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF # AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1 # V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9 # alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv # Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928 # jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t # pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe # HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o # ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C # vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug # poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps # xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C # AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE # FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT # NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo # dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o # dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD # AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW # y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t # aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt # MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y # My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc # FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT # Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j # VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3 # +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR # sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw # ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b # RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx # aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX # HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0 # W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0 # HVUzWLOhcGbyoYIDWDCCAkACAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoz # MjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaIjCgEBMAcGBSsOAwIaAxUA8YrutmKpSrubCaAYsU4pt1Ft8DaggYMwgYCk # fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF # AO5vYy0wIhgPMjAyNjEwMDYxMjA4MTNaGA8yMDI2MTAwNzEyMDgxM1owdjA8Bgor # BgEEAYRZCgQBMS4wLDAKAgUA7m9jLQIBADAJAgEAAgEuAgH/MAcCAQACAhJIMAoC # BQDucLStAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEA # AgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBADAXR/fqWT2wAlvB # huheSd3zIjbO92sXybPeyFmuCViJm4FYxNcrsOy8qFGofi0JoX8n48EVdbjLhrAM # kjQi7WHmifklgp1DGAmEsObXlSxxpsQMbXi4M8pQl348izPN+HXP/uKKL6w3uyxh # IRBIYzNd0DZ6XHej5/ziKEIKA6BNj9KjVJR9DfBWH8EUF1jH3oECmcYxuLuy+eCH # 2bPfN2BCeuQy20Jhz0MZCbpyKdMk8FFf+GwyhgixTbKd1O/zwiu66ge59rjBzcPe # jY6QanmVOmOyOFgsaSoZJQAn5kvX4DGZnR4t9lYPdUfv8YhSyRRRu0qNBGPOLceI # VikzFnUxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz # aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv # cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx # MAITMwAAAhqpoB0GoA9DqgABAAACGjANBglghkgBZQMEAgEFAKCCAUowGgYJKoZI # hvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCAYlrTkL8JNIair # /rK691bUmyZxtVmIvSSt+e5hDRXNrjCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQw # gb0EIJ16Icetu2kpzAHbR2hVTz1Ycg4fxLvDfu5odwOZ6Yr7MIGYMIGApH4wfDEL # MAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v # bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWlj # cm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIaqaAdBqAPQ6oAAQAAAhow # IgQgxlaM62uq7SIh3d9WYqAANbpVxQjBnjEIwR6NjiCcmWswDQYJKoZIhvcNAQEL # BQAEggIAfLd6VluOM1p2649eT3897beaX5xjSSgqxqrCYEe+EI5OVAaVsGv/n4qh # 1qGzd70ThLlfqBjC182VHbvudD36UDgxS9lYjldQlMA0L2I6mVctqAg4QMjnoVls # CQIxKCuUMm72vFvD5k2jq/G0q2O19SYnA8EwsqF/SEx/D+Bj2/8f3uFlGzhVe79C # VeV09YQZ4vH6qcTO8ADeBLV4VxWlbstAIoQFwjw0HZzqF3CtdXxV90t49IKv6sdy # 3Bk/a6dmVorAvR9BxHHsGegMh6eL5YA24dAB6ADRqQbyYIl11CSeD+TwUlGbnFvJ # Y/u7cWUzSrXbUyMEybCoZpIq2BNTE+wscOLCcrgErRyX7z3ccQO1ZzDUzypW7ZA1 # ZrD/32E/Yw7kZIhIUsM4PfTJQg05IEOotRRFMNIEWdHob5GxwRJthDchJToi1QSe # NAfuMku/3oimRtKlKIqEub2KobZzo+9YqVMC9++nNp+RpEjxiETJNSzkyxKA67fT # Yk/vXuWjPtZ7V3OKveFNIB8ovCGyOyge+xLCfo9lhz/Vi2r/MutYgGzyRLu1kQem # bU3EB20Ll8ven4oURBCryy96cC1SdnlIiDWhyVnE5bfNk15KIFBURwHuQyz32jRh # OUDMFO0gieoGHwL2/hLrx9pK8T8ScGzen2bMo8jS0W89tuBHhbA= # SIG # End signature block |