Resources/bicep/conventions/Compiled.Tests.ps1

#Requires -Version 7.4
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'leaf', Justification = 'Pester BeforeAll shares this value with It blocks.')]
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'description', Justification = 'Pester BeforeAll shares this value with It blocks.')]
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', 'required', Justification = 'Pester BeforeAll shares this value with It blocks.')]
param(
    [Parameter(Mandatory)]
    [System.Collections.IDictionary] $Convention
)

$cases = @($Convention.CompiledInputs | ForEach-Object { @{ Case = $_; Label = $_.Label; IssuePath = $_.IssuePath } })
$Convention.NativeCompiledExpected = 0

Describe 'Compiled Bicep: <Label>' -ForEach $cases {
    $rgSchema = 'https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#'
    $requiresTelemetry = $Case.Versioned -and $Case.Resources.Count -gt 0
    $checksPrefix = $requiresTelemetry -or $Case.LegacyPrefix -or $Case.ScaffoldPrefix
    $disableChildren = $Case.Scope.ModuleType -ceq 'res' -and
    -not ($Case.Scope.IsTopLevel -and $Case.Scope.ScopeDirectories.Count -gt 0)
    $commonParameters = @('diagnosticSettings', 'roleAssignments', 'lock', 'managedIdentities', 'privateEndpoints', 'customerManagedKey')
    $commonCases = @(if ($Case.Scope.ModuleType -ceq 'res') {
            foreach ($name in $commonParameters) {
                if ($Case.TemplateParameters.Contains($name)) { @{ Name = $name } }
            }
        })
    $primaryLocations = @($Case.PrimaryResources | Where-Object {
            $_.Resource['location'] -and $_.Resource['location'] -cne 'global'
        } | ForEach-Object { @{ Resource = $_; Identifier = $_.Identifier } })
    $hasIdentity = $Case.Scope.ModuleType -ceq 'res' -and
    $Case.IdentityDefinition -is [System.Collections.IDictionary] -and
    $Case.IdentityDefinition['properties'] -is [System.Collections.IDictionary] -and
    $Case.IdentityDefinition['properties'].Contains('systemAssigned')
    $Convention.NativeCompiledExpected += 11 + (6 * $Case.Parameters.Count) +
    (4 * $Case.Definitions.psbase.Count) + $Case.Variables.psbase.Count + (2 * $Case.Outputs.psbase.Count) +
    (3 * $Case.Telemetry.Count) + $Case.Referenced.Count + $commonCases.Count + $primaryLocations.Count
    if ($Case.ArtifactInspectable) {
        $Convention.NativeCompiledExpected++
        if ($null -ne $Case.ArtifactBytes) { $Convention.NativeCompiledExpected++ }
    }
    if ($Case.Template['$schema'] -ceq $rgSchema -and $Case.TemplateParameters.Contains('location')) { $Convention.NativeCompiledExpected++ }
    if ($Case.TemplateParameters.Contains('tags')) { $Convention.NativeCompiledExpected++ }
    if ($requiresTelemetry) { $Convention.NativeCompiledExpected += 3 }
    if ($checksPrefix) { $Convention.NativeCompiledExpected += 4 }
    if ($Case.Referenced.Count -gt 0 -and $disableChildren) { $Convention.NativeCompiledExpected++ }
    if ($Case.Resources.Count -gt 0 -and $Case.Template['$schema'] -ceq $rgSchema) { $Convention.NativeCompiledExpected++ }
    if ($Case.Resources.Count -gt 0 -and $Case.Scope.ModuleType -ceq 'res') { $Convention.NativeCompiledExpected++ }
    if ($Case.PrimaryResources.Count -gt 0) { $Convention.NativeCompiledExpected += 2 }
    if ($hasIdentity) { $Convention.NativeCompiledExpected++ }

    It 'uses a current deployment schema' -Tag 'avm.bicep.compiled-schema' {
        $Case.Template['$schema'] | Should -BeIn @(
            'https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#'
            'https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#'
            'https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#'
            'https://schema.management.azure.com/schemas/2019-08-01/tenantDeploymentTemplate.json#'
        )
    }
    It 'uses HTTPS for the deployment schema' -Tag 'avm.bicep.compiled-schema-https' {
        [string]$Case.Template['$schema'] | Should -MatchExactly '^https://'
    }
    It 'contains the required ARM template elements' -Tag 'avm.bicep.compiled-required-fields' {
        foreach ($name in @('$schema', 'contentVersion', 'resources')) {
            $Case.Template.Contains($name) | Should -BeTrue -Because "$name is required in an ARM template"
        }
    }
    It 'has a nonempty compiled metadata name' -Tag 'avm.bicep.compiled-metadata-name' {
        $Case.Template['metadata'] | Should -BeOfType ([System.Collections.IDictionary])
        [string]$Case.Template['metadata']['name'] | Should -Not -BeNullOrEmpty
        [string]$Case.Template['metadata']['name'] | Should -Match '\S'
    }
    It 'has a nonempty compiled metadata description' -Tag 'avm.bicep.compiled-metadata-description' {
        $Case.Template['metadata'] | Should -BeOfType ([System.Collections.IDictionary])
        [string]$Case.Template['metadata']['description'] | Should -Match '\S'
    }
    It 'has a parseable ARM resource collection' -Tag 'avm.bicep.compiled-resource-shape' {
        $Case.ResourceError | Should -BeNullOrEmpty
    }
    It 'has parseable parameter and UDT schemas' -Tag 'avm.bicep.compiled-parameter-shape' {
        $Case.ParameterError | Should -BeNullOrEmpty
    }
    It 'represents compiled variables as an object' -Tag 'avm.bicep.variable-shape' {
        ($null -eq $Case.Template['variables'] -or $Case.Template['variables'] -is [System.Collections.IDictionary]) |
            Should -BeTrue
    }
    It 'represents compiled outputs as an object' -Tag 'avm.bicep.output-shape' {
        ($null -eq $Case.Template['outputs'] -or $Case.Template['outputs'] -is [System.Collections.IDictionary]) |
            Should -BeTrue
    }
    It 'does not hardcode a telemetry prefix in source' -Tag 'avm.bicep.telemetry-literal' {
        $Case.Source | Should -Not -Match '46d3xbcp\.'
    }
    It 'does not declare two metadata-backed telemetry readers' -Tag 'avm.bicep.telemetry-source' {
        ($Case.LegacyPrefix -and $Case.ScaffoldPrefix) | Should -BeFalse
    }

    if ($Case.ArtifactInspectable) {
        It 'includes the checked-in compiled template' -Tag 'avm.bicep.json-missing', 'file:main.json' {
            ($null -ne $Case.ArtifactBytes) | Should -BeTrue -Because 'run avm pre-commit and commit main.json'
        }
        if ($null -ne $Case.ArtifactBytes) {
            It 'matches the checked-in template to the compiler output' -Tag 'avm.bicep.json-stale', 'file:main.json' {
                [System.Linq.Enumerable]::SequenceEqual(
                    [byte[]]$Case.ArtifactBytes,
                    [System.Text.UTF8Encoding]::new($false).GetBytes($Case.CompiledJson)) |
                    Should -BeTrue -Because 'run avm pre-commit and commit the generated main.json'
            }
        }
    }
    if ($Case.Template['$schema'] -ceq $rgSchema -and $Case.TemplateParameters.Contains('location')) {
        It 'defaults resource-group location to the resource group or global' -Tag 'avm.bicep.parameter-location' {
            $Case.TemplateParameters['location']['defaultValue'] | Should -BeIn @('[resourceGroup().Location]', 'global')
        }
    }

    if ($Case.Parameters.Count -gt 0) {
        Context 'Parameter <Parameter.Name>' -ForEach @($Case.Parameters | ForEach-Object { @{ Parameter = $_ } }) {
            BeforeAll {
                $schema = $Parameter.Schema
                $leaf = ($Parameter.Name -split '\.')[-1]
                $description = if ($schema['metadata'] -is [System.Collections.IDictionary] -and
                    $schema['metadata']['description'] -is [string]) { $schema['metadata']['description'] } else { '' }
                $nullableDefinition = $false
                if ($schema.Contains('$ref')) {
                    $reference = [regex]::Match([string]$schema['$ref'], '^#/definitions/(?<name>.+)$')
                    $definitionName = $reference.Groups['name'].Value.Replace('~1', '/').Replace('~0', '~')
                    $nullableDefinition = $Case.Definitions[$definitionName]['nullable'] -eq $true
                }
                $required = -not $schema.Contains('defaultValue') -and $schema['nullable'] -ne $true -and -not $nullableDefinition
            }
            It 'uses camelCase unless explicitly exempted' -Tag 'avm.bicep.parameter-name' {
                $excepted = @($Case.ParameterNameExceptions | Where-Object {
                        $Case.Scope.ModuleRelativePath -clike $_['modulePathPattern'] -and $leaf -cin $_['parameters']
                    }).Count -gt 0
                ($excepted -or ($leaf -cmatch '^[a-z]' -and -not $leaf.Contains('-') -and -not $leaf.Contains('_'))) |
                    Should -BeTrue
            }
            It 'has a category and complete description' -Tag 'avm.bicep.parameter-description' {
                $description | Should -MatchExactly '(?s)^[A-Z][a-zA-Z]+\. .+\.$'
            }
            It 'explains when a conditional value is required' -Tag 'avm.bicep.parameter-condition' {
                (-not $description.StartsWith('Conditional.', [System.StringComparison]::Ordinal) -or
                $description -cmatch '\. Required if .+') | Should -BeTrue
            }
            It 'does not describe an optional value as required' -Tag 'avm.bicep.parameter-optional' {
                ($required -or -not $description.StartsWith('Required.', [System.StringComparison]::Ordinal)) | Should -BeTrue
            }
            It 'describes required values as Required or Conditional' -Tag 'avm.bicep.parameter-required' {
                (-not $required -or $description.StartsWith('Required.', [System.StringComparison]::Ordinal) -or
                $description.StartsWith('Conditional.', [System.StringComparison]::Ordinal)) | Should -BeTrue
            }
            It 'uses explicit object, UDT or resource-derived types' -Tag @(
                'avm.bicep.parameter-untyped-object'
                $(if ($Case.StrictObjects) { 'severity:error' } else { 'severity:warning' })
            ) {
                $item = $schema['items']
                $arrayOfObjects = $schema['type'] -ceq 'array' -and
                $item -is [System.Collections.IDictionary] -and $item['type'] -ceq 'object'
                $target = if ($arrayOfObjects) { $item } else { $schema }
                $derived = $target['metadata'] -is [System.Collections.IDictionary] -and
                $target['metadata'].Contains('__bicep_resource_derived_type!')
                ($schema['type'] -cne 'object' -and -not $arrayOfObjects -or
                $target.Contains('properties') -or $derived -or (-not $arrayOfObjects -and $target.Contains('$ref'))) |
                    Should -BeTrue
            }
        }

    }
    if ($Case.Definitions.psbase.Count -gt 0) {
        Context 'UDT <Name>' -ForEach @($Case.Definitions.psbase.Keys | ForEach-Object { @{ Name = $_ } }) {
            It 'has an object schema' -Tag 'avm.bicep.udt-shape' {
                $Case.Definitions[$Name] | Should -BeOfType ([System.Collections.IDictionary])
            }
            It 'is not itself an array' -Tag 'avm.bicep.udt-array' {
                ($Case.Definitions[$Name] -isnot [System.Collections.IDictionary] -or
                $Case.Definitions[$Name]['type'] -cne 'array') | Should -BeTrue
            }
            It 'is not itself nullable' -Tag 'avm.bicep.udt-nullable' {
                ($Case.Definitions[$Name] -isnot [System.Collections.IDictionary] -or
                $Case.Definitions[$Name]['nullable'] -ne $true) | Should -BeTrue
            }
            It 'uses camelCase with a Type suffix' -Tag 'avm.bicep.udt-name' {
                [string]$Name | Should -MatchExactly '^(.+\.)?[a-z][a-zA-Z0-9]*Type$'
            }
        }
    }
    if ($commonCases.Count -gt 0) {
        It 'uses a UDT reference for common parameter <Name>' -ForEach $commonCases -Tag 'avm.bicep.parameter-udt-ref' {
            $schema = $Case.TemplateParameters[$Name]
            $reference = if ($schema['items'] -is [System.Collections.IDictionary]) { $schema['items']['$ref'] } else { $schema['$ref'] }
            [string]$reference | Should -MatchExactly '^#/definitions/.+$'
        }
    }
    if ($Case.TemplateParameters.Contains('tags')) {
        It 'makes tags nullable' -Tag 'avm.bicep.parameter-tags-nullable' {
            $Case.TemplateParameters['tags']['nullable'] | Should -Be $true
        }
    }
    if ($Case.Variables.psbase.Count -gt 0) {
        It 'uses a camelCase compiled variable <Name>' -ForEach @($Case.Variables.psbase.Keys | ForEach-Object { @{ Name = $_ } }) -Tag 'avm.bicep.variable-name' {
            [string]$Name | Should -MatchExactly '^(?:[a-z]+[a-zA-Z0-9]+|\$fxv#[0-9]+)$'
        }

    }
    if ($requiresTelemetry) {
        It 'provides the standard telemetry opt-out parameter' -Tag 'avm.bicep.telemetry-parameter' {
            $parameter = $Case.TemplateParameters['enableTelemetry']
            $parameter | Should -BeOfType ([System.Collections.IDictionary])
            $parameter['type'] | Should -BeExactly 'bool'
            $parameter['defaultValue'] | Should -BeOfType ([bool])
            $parameter['defaultValue'] | Should -BeTrue
            $parameter['metadata'] | Should -BeOfType ([System.Collections.IDictionary])
            $parameter['metadata']['description'] | Should -BeExactly $Case.TelemetryDescription
        }
        It 'includes a telemetry deployment for a versioned module with resources' -Tag 'avm.bicep.telemetry-deployment' {
            $Case.Telemetry.Count | Should -BeGreaterThan 0
        }
        It 'loads the telemetry prefix from metadata.json' -Tag 'avm.bicep.telemetry-source' {
            ($Case.LegacyPrefix -or $Case.ScaffoldPrefix) | Should -BeTrue
        }
    }
    if ($Case.Telemetry.Count -gt 0) {
        Context 'Telemetry deployment <Identifier>' -ForEach @($Case.Telemetry | ForEach-Object { @{ Deployment = $_; Identifier = $_.Identifier } }) {
            It 'is gated by enableTelemetry' -Tag 'avm.bicep.telemetry-condition' {
                $Deployment.Resource['condition'] | Should -BeExactly "[parameters('enableTelemetry')]"
            }
            It 'includes the standard telemetry information output' -Tag 'avm.bicep.telemetry-output' {
                $properties = $Deployment.Resource['properties']
                $properties | Should -BeOfType ([System.Collections.IDictionary])
                $properties['template'] | Should -BeOfType ([System.Collections.IDictionary])
                $properties['template']['outputs'] | Should -BeOfType ([System.Collections.IDictionary])
                $properties['template']['outputs']['telemetry'] | Should -BeOfType ([System.Collections.IDictionary])
                $properties['template']['outputs']['telemetry']['value'] |
                    Should -BeExactly 'For more information, see https://aka.ms/avm/TelemetryInfo'
            }
            It 'starts the deployment name with the metadata-backed prefix' -Tag 'avm.bicep.telemetry-name' {
                $prefix = [regex]::Escape("variables('$($Case.PrefixName)')")
                ([string]$Deployment.Resource['name'] -cmatch "^\[format\('\{0\}[^']*'\s*,\s*$prefix\s*(?:,|\))" -or
                [string]$Deployment.Resource['name'] -cmatch "^\[concat\(\s*$prefix\s*(?:,|\))") | Should -BeTrue
            }
        }
    }
    if ($checksPrefix) {
        It 'has a regular metadata file for telemetry verification' -Tag 'avm.bicep.telemetry-metadata', 'file:metadata.json' {
            $Case.MetadataRegular | Should -BeTrue
        }
        It 'has strict JSON metadata for telemetry verification' -Tag 'avm.bicep.telemetry-metadata', 'file:metadata.json' {
            $Case.MetadataError | Should -BeNullOrEmpty
        }
        It 'provides a nonempty metadata telemetry prefix' -Tag 'avm.bicep.telemetry-metadata', 'file:metadata.json' {
            $Case.Metadata | Should -BeOfType ([System.Collections.IDictionary])
            $Case.Metadata['telemetryIdPrefix'] | Should -BeOfType ([string])
            $Case.Metadata['telemetryIdPrefix'] | Should -Match '\S'
        }
        It 'matches the compiled telemetry prefix to metadata including one variable alias' -Tag 'avm.bicep.telemetry-prefix' {
            $compiled = $Case.Variables[$Case.PrefixName]
            if ($compiled -is [string]) {
                $alias = [regex]::Match($compiled, "^\[variables\('(?<name>[^']+)'\)\]$")
                if ($alias.Success) { $compiled = $Case.Variables[$alias.Groups['name'].Value] }
            }
            [string]$compiled | Should -Match '\S'
            if ($null -ne $Case.Metadata -and $Case.Metadata['telemetryIdPrefix'] -is [string]) {
                $compiled | Should -BeExactly $Case.Metadata['telemetryIdPrefix']
            }
        }
    }
    if ($Case.Referenced.Count -gt 0 -and $disableChildren) {
        It 'disables telemetry in referenced resource modules' -Tag 'avm.bicep.telemetry-child-variable' {
            $Case.Variables['enableReferencedModulesTelemetry'] | Should -BeOfType ([bool])
            $Case.Variables['enableReferencedModulesTelemetry'] | Should -BeFalse
        }
    }
    if ($Case.Referenced.Count -gt 0) {
        It 'forwards telemetry to referenced deployment <Identifier>' -ForEach @($Case.Referenced | ForEach-Object { @{ Deployment = $_; Identifier = $_.Identifier } }) -Tag 'avm.bicep.telemetry-child-forwarding' {
            $disable = $Case.Scope.ModuleType -ceq 'res' -and
            -not ($Case.Scope.IsTopLevel -and $Case.Scope.ScopeDirectories.Count -gt 0)
            $expected = if ($disable) { "[variables('enableReferencedModulesTelemetry')]" } else { "[parameters('enableTelemetry')]" }
            $parameters = $Deployment.Resource['properties']['parameters']
            $parameters | Should -BeOfType ([System.Collections.IDictionary])
            $parameters['enableTelemetry'] | Should -BeOfType ([System.Collections.IDictionary])
            $parameters['enableTelemetry']['value'] | Should -BeExactly $expected
        }

    }
    if ($Case.Outputs.psbase.Count -gt 0) {
        Context 'Output <Name>' -ForEach @($Case.Outputs.psbase.Keys | ForEach-Object { @{ Name = $_ } }) {
            It 'uses camelCase' -Tag 'avm.bicep.output-name' {
                ([string]$Name -cmatch '^[a-z]' -and -not ([string]$Name).Contains('-') -and -not ([string]$Name).Contains('_')) |
                    Should -BeTrue
            }
            It 'has a complete-sentence description' -Tag 'avm.bicep.output-description' {
                $output = $Case.Outputs[$Name]
                $output | Should -BeOfType ([System.Collections.IDictionary])
                $output['metadata'] | Should -BeOfType ([System.Collections.IDictionary])
                [string]$output['metadata']['description'] | Should -MatchExactly '(?s)^[A-Z].+\.$'
            }
        }
    }
    if ($Case.Resources.Count -gt 0 -and $Case.Template['$schema'] -ceq $rgSchema) {
        It 'outputs the resource-group name' -Tag 'avm.bicep.output-resource-group' {
            $Case.Outputs.Contains('resourceGroupName') | Should -BeTrue
        }
    }
    if ($Case.Resources.Count -gt 0 -and $Case.Scope.ModuleType -ceq 'res') {
        It 'identifies the primary ARM resource type in the README title' -Tag 'avm.bicep.primary-resource-type', 'file:README.md' {
            $Case.PrimaryType | Should -Not -BeNullOrEmpty
        }
    }
    if ($Case.PrimaryResources.Count -gt 0) {
        It 'outputs the primary resource name' -Tag 'avm.bicep.output-name' {
            $Case.Outputs.Contains('name') | Should -BeTrue
        }
        It 'outputs the primary resource ID' -Tag 'avm.bicep.output-resourceId' {
            $Case.Outputs.Contains('resourceId') | Should -BeTrue
        }
    }
    if ($primaryLocations.Count -gt 0) {
        It 'derives location from primary resource <Identifier>' -ForEach $primaryLocations -Tag 'avm.bicep.output-location' {
            $Case.Outputs['location'] | Should -BeOfType ([System.Collections.IDictionary])
            $expression = [string]$Case.Outputs['location']['value']
            $symbol = "reference\('" + [regex]::Escape($Resource.Identifier) + "'(?:,|\))"
            ($expression.Contains($Case.PrimaryType, [System.StringComparison]::OrdinalIgnoreCase) -or
            ($Resource.Identifier -and [regex]::IsMatch($expression, $symbol))) | Should -BeTrue
        }
    }
    if ($hasIdentity) {
        It 'outputs a nullable system-assigned principal ID without an empty-string fallback' -Tag 'avm.bicep.output-principal-id' {
            $principal = $Case.Outputs['systemAssignedMIPrincipalId']
            $principal | Should -BeOfType ([System.Collections.IDictionary])
            $principal['type'] | Should -BeExactly 'string'
            $principal['nullable'] | Should -Be $true
            [string]$principal['value'] | Should -Not -MatchExactly "coalesce\(.+, ''\)"
        }
    }
}

# SIG # Begin signature block
# MIInKAYJKoZIhvcNAQcCoIInGTCCJxUCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCu0RKU6WoM3p5/
# 1XvSsN47xCq3aI/8dSdlJmKdJZMnD6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ
# KoZIhvcNAQkEMSIEIEpGc7MocPtKPwJLI5Wjtl0QfDKdFSg2pywSvbmrTBZ8MEIG
# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAqhNZsuacYqxVmk5h
# WvgEJKwQJZc25tuRLv7eOFbGikcbltxtlNuZpz2t39HQxeDE0aDFXg6P+Y/DlWEK
# BROhK5+lJHd/l9QMk21D5+cSPMsTQarryVVKB+8HV7hub/mBbzqRNVEinFzBr0s/
# NUUwge4NmIWLpuZ7ZuXqItuBstbbtVz7ezb1hL4GS8I9GFQZeVsQ5cgc83V4yQxg
# XPs5i2dBnspsrVYxd89efaeIoLZuTWO19HNAT2tBRn2jfhb7VFg5e+g+Jskz9He4
# mq/VZCVt0AW5f9kOQlXFHjDb9nWDnKrJTcjamOxzZqnXG1C+2sHqja7Wn9Q4Yl7v
# 8m5fMqGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wGCSqGSIb3DQEHAqCCF20w
# ghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9
# MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCCRc7zzPFbZuh8O
# 34YiRr0E+nj91FgbEYS4tsZ/Y0oHJwIGaqqMaGsVGBMyMDI2MTAxMjE1NTE1Ny4z
# MjlaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHqMIIHIDCCBQigAwIBAgIT
# MwAAAiAk4ebgF7m0jgABAAACIDANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTJaFw0yNzA1MTcxOTM5NTJa
# MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL
# ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk
# IFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l
# LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDR
# YY7yr7ijW6CR178uKveIMufutWOicxgJwKOce/2GOQceus6ZWfX14i3jNg3JOP7M
# GJMkOAucwWBwiA8URp+ZYkGjpVoVkGZsV27WjqLwpf2AwqBsJ/TzqwE7JFFaxup3
# Ldxj8GjdJymDFRrdVN/pYHoBFrjD1IkIDu8b1CWn8tgomiKRSY+STvJq99mVkdph
# MBIUGOegQny8qRd24VME0xi8Oomks9Zq9EjDeKHGpvAbXUEQ6m3cROoEPhTE/miw
# eQH9TqJt3IOsqPv3L8urojB747XBC2y0CDIHlKLcLl3ZG8D7JXKnWTFen3msMPJp
# cvrQ3zUBVJrH/mI3RxHmCh9ppDP0uG1+PJwk6H/x+sfoG9hW64xoXkpx6DEfNZNf
# cXdKbXF28XEXdLNnzo3SLNVymeQJhNqOSKhnU84QnKmrjEk541JiurlDCkCWO9lU
# BUMb9x0nyfXUbNRPVLgP+PTMRdXOowJdYCzCQfN2ZqL0s4YI28F1Dbn7Bgw2E4P1
# E9unsvMzJHtzhS2Th3TpCfBbOGalIlF9x/DJZ/ssm/yyzT9YtIFeqmfNxBPTE3aO
# uh6HxmTICzfYAATvWNhBbo19QwsjPeA9JvhqTLC2KUNgrXroGy4eDZo0n7jFYjZk
# Uih1Ty+8E6qEvV2Na6Z5gUyD5a+tHGDmq69CmUiHfwIDAQABo4IBSTCCAUUwHQYD
# VR0OBBYEFNvInOCIhxGA8mY7l1g07UHvyNgzMB8GA1UdIwQYMBaAFJ+nFV0AXmJd
# g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El
# MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6
# Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt
# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l
# AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA
# A4ICAQCtKGBto1BSvm4WFI+J0NSyVhU1LHL7F3fbjZ2d7F5Kn/FCTBZXpzrDVl63
# FLRNcIFpnJy4/nlg43r7T5sJPdo4Ms8ADSHQEJnHSu3x9UpjCzREBPi9+nHhvDgR
# x/1WmBD6gQUZJLOhcN2TxW4KJyhinMtiBFtkNRZ2vmZ1MAdNXTm5d0Lwk3wzj+/f
# 7VCCTWCXJSoqNa3VU/6sACHI97Evbnzg8bd3hxrfz6CcCVuf77egvRHinthJuwSR
# ePP7aVmcevb1nWUIAICdBebHQOrzNIeWBIQwvcFaS3SFc+49rqrwQOMFDR4FYBzS
# 7b0QeBVxFuLL2iVu4KAHMNUhLLSD4iKLDFBNTOtTzTlhGvMgG77A1cjeQrDMHa6o
# ReMDeUDqHUrxv8g7IRdIh+h0gDLkzN0xIuzli0Bv7JtybGJbV6JxaDF4CzSCIMRp
# K59nI6iKo4LgnbQBZJW7+6akYsKG/pXPlfxNv2InpD10tSCkCvw9kr6W1+NRN+Eu
# ZczRgAwWlcK9XJZ3uu/v/oxHtO7/kmVIs51F9qV6Y2QNXd6tU46YPrK98m2QDys+
# lvLNimK0e1xZ7Z1GawKohKGvlLALWDlZQqgHfJ31CB0LlIDI7iLyYTpd2iyKjqsk
# bQiyMtICH+RmH/oCg7JOK0ZA3XIMba9aSWgBF3QZ6pG3EGeQqjCCB3EwggVZoAMC
# AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV
# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w
# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m
# dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy
# NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw
# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9
# DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2
# Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N
# 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc
# ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ
# j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk
# lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy
# L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M
# 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX
# pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU
# HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode
# 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA
# ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE
# FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB
# MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE
# AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
# /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug
# SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N
# aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG
# AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv
# b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt
# 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP
# MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++
# Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9
# QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2
# wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR
# AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z
# bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx
# t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3
# Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN
# uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z
# cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIICNQIBATCB+aGB0aSBzjCB
# yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc
# TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU
# U1MgRVNOOkYwMDItMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T
# dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQCTGA9vpsJ6glqCLmI0rggGx4YE
# EqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3
# DQEBCwUAAgUA7ndNnDAiGA8yMDI2MTAxMjEyMTQyMFoYDzIwMjYxMDEzMTIxNDIw
# WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDud02cAgEAMAcCAQACAi5KMAcCAQAC
# AhLlMAoCBQDueJ8cAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKg
# CjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAE9efTX2
# MMBeFzd5kXwktuesfJ4sov0q0H2JuK3WSCTuf7tirogisuY8rwGbSXXA7nOhZm1E
# /k0LI9BuDNvAvRQ+xz7wVrrPVvABbgARF2xTc3CYAeDIKAtNvf7sB3nVmgrrqSkC
# Mvf76m7s8CQODhliTl1j4OYfkOCJM7XZQ9lELkdjUkTD3qhWQEol9OYnqu3lxX9R
# 8Dhcf6jQVMpszhDG7bT0XJmzVuhlaqFUjnGTBTCilQ2kxVi/1YEDaB0RCx0Y7HoE
# W6JjtTjR9yjXHFA3P1BwM5Iek1ouLnb8jooEctzb8vcUsp7KDvv8AftRSwNBGylC
# f5VZXd61b308zOYxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UE
# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z
# b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ
# Q0EgMjAxMAITMwAAAiAk4ebgF7m0jgABAAACIDANBglghkgBZQMEAgEFAKCCAUow
# GgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCC2baMT
# BUzSE2DGOfoZyU0Z4mhEryUTfUHLv4WS9KUb5DCB+gYLKoZIhvcNAQkQAi8xgeow
# gecwgeQwgb0EION7vyOlPA1VqlEp0QIVGlNd8S5YWBnKj97LuTWHSO2vMIGYMIGA
# pH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE
# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIgJOHm4Be5tI4A
# AQAAAiAwIgQg1N63X4NyuK8DxiaI2wJAtfp0KVLLtMVYcSvQ8mF0vHUwDQYJKoZI
# hvcNAQELBQAEggIAna5lFJRleOqLh1e3xSP9tCHWAEE235XTT7l5AhxRfnn6TkoC
# LtsOzyraQmSP4LBKvbhDGYvhgDm7JpmqQTkrhQLPeAryp/EupCa6m2izN4x2mP9O
# PG8YRlLbU05LRgLc/gH506P6BO6Naevr0K8geA/IsogrOrLXKwXrnnRtm4sfGL5J
# LG80OhFA4/br1SRIKc8I7jOHFppm9F3goFn3nmSQ9vEQJxf0ZcOjx28TpsjCO4IB
# Sxb7o4RaiGdlo8i0FbLwNfdC5i3c2h9MGV2S4zHbAnEY5PrUVtp/Fr0pPfzqytnv
# 40w5DJbweUpNeaSupHD5pYifBW3BbsYxCXHVibXYC8A++yem6ROr0I9qV4PwdXR6
# DgnZjHvisraumuCAJFhIndv5ZXycieWVV905pWiO3bqJ0ryyjZRiu6nthraxl+zK
# 1GBmRJn2/APyxWpq1vABJxTjwMrHahSBF8YGw2iUxFEC9Q0Irgbv9c9VuZrebSVe
# r22hdT3xjst5W1nJ/04qfcW2FuGLeGsd8+0znRlBZU23tcakyXUcr7GyULxdvAMF
# Mkx3H4HJ9gro59JqIlZP0DlaulAJKzcnFymcyn49NUcX+7qGpeT4D6DWnYzWj4Po
# OZgFiEA56Sm6r5zo5sEU97JLuWG/sQ0bxc7mn3D9Vp/gX9sMnshe26Y9O+o=
# SIG # End signature block