Engines/Terraform/Invoke-AvmTerraformUtilityMigration.ps1
|
function Get-AvmTerraformUtilityInspection { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $expression = '{ calls = data.module.utility.result, variables = data.variable.utility.result, ' + 'requirements = data.terraform.utility.required_providers, resources = data.resource.utility.result, ' + 'data_sources = data.data.utility.result, ephemeral = data.ephemeral.utility.result }' $result = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList @( 'debug', '--tf-dir', $Path, '--mptf-dir', $Options.ProfileDirs['utility-module'], '--eval', $expression ) -WorkingDirectory $Path -EnvVars $Options.EnvVars try { $inspection = ConvertFrom-Json -InputObject $result.StdOut -AsHashtable -ErrorAction Stop } catch { throw [AvmConfigurationException]::new("Cannot inspect utility module calls in '$Path': invalid native JSON. $($_.Exception.Message)") } foreach ($key in @('calls', 'variables', 'requirements', 'resources', 'data_sources', 'ephemeral')) { if ($inspection -isnot [System.Collections.IDictionary] -or $inspection[$key] -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect utility module calls in '$Path': update the utility-module profile to expose '$key'.") } } foreach ($name in $inspection.calls.Keys) { $call = $inspection.calls[$name] if ($call -isnot [System.Collections.IDictionary] -or $call['source'] -isnot [string] -or $call['mptf'] -isnot [System.Collections.IDictionary] -or $call.mptf['block_address'] -cne "module.$name") { throw [AvmConfigurationException]::new("Cannot inspect utility module call '$name' in '$Path': missing native source metadata.") } } return $inspection } function Get-AvmTerraformUtilityMigrationPlan { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [object[]] $Targets, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $versions = @{ 'azure/avm-utl-regions/azurerm' = '0.13.0' 'azure/avm-utl-interfaces/azure' = '0.9.0' 'azure/naming/azurerm' = '0.2.0' } $scopes = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) foreach ($target in $Targets) { $inspection = Get-AvmTerraformUtilityInspection -Path $target.Path -Options $Options $calls = @{} foreach ($name in $inspection.calls.Keys) { $call = $inspection.calls[$name] $source = $call.source.ToLowerInvariant() -creplace '^registry[.]terraform[.]io/', '' if (-not $versions.ContainsKey($source)) { continue } $pin = [regex]::Match([string]$call['version'], '\A(?:=\s*)?(0|[1-9][0-9]*)[.](0|[1-9][0-9]*)[.](0|[1-9][0-9]*)\z') if (-not $pin.Success) { throw [AvmConfigurationException]::new( "Utility module '$name' in '$($target.Path)' requires review: use a literal exact version pin before automatic migration; ranges, missing versions and expressions are not rewritten.") } $version = $pin.Value -creplace '^=\s*', '' $parsedVersion = $null if (-not [version]::TryParse($version, [ref]$parsedVersion)) { throw [AvmConfigurationException]::new("Utility module '$name' in '$($target.Path)' has an unsupported version pin that requires review.") } $legacyNaming = $source -ceq 'azure/naming/azurerm' if (-not $legacyNaming -and $parsedVersion -gt [version]$versions[$source]) { continue } $upgrade = $legacyNaming -or $parsedVersion -lt [version]$versions[$source] $calls[$name] = [pscustomobject]@{ Source = if ($legacyNaming) { 'Azure/avm-utl-naming/azure' } else { $call.source } Version = if ($upgrade) { $versions[$source] } else { $version } Upgrade = $upgrade LegacyNaming = $legacyNaming Telemetry = -not $legacyNaming } } $scopes[$target.Path] = [pscustomobject]@{ Target = $target Before = $inspection Calls = $calls Dependencies = @{} Affected = $calls.Count -gt 0 Telemetry = @($calls.Values | Where-Object Telemetry).Count -gt 0 } } foreach ($scope in $scopes.Values) { foreach ($name in $scope.Before.calls.Keys) { $source = $scope.Before.calls[$name].source if ($source.StartsWith('./', [System.StringComparison]::Ordinal) -or $source.StartsWith('../', [System.StringComparison]::Ordinal)) { $path = [System.IO.Path]::TrimEndingDirectorySeparator( [System.IO.Path]::GetFullPath($source, $scope.Target.Path)) if ($scopes.ContainsKey($path)) { $scope.Dependencies[$name] = $path } } } } do { $changed = $false foreach ($scope in $scopes.Values) { foreach ($path in $scope.Dependencies.Values) { if ($scopes[$path].Affected -and -not $scope.Affected) { $scope.Affected = $true $changed = $true } if ($scopes[$path].Telemetry -and -not $scope.Telemetry) { $scope.Telemetry = $true $changed = $true } } } } while ($changed) $ordered = [System.Collections.Generic.List[object]]::new() $visiting = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $visited = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $visit = { param([string] $Path) if ($visited.Contains($Path)) { return } if (-not $visiting.Add($Path)) { throw [AvmConfigurationException]::new("Cannot migrate utility modules in '$Path': cyclic local module calls require review.") } foreach ($dependency in @($scopes[$Path].Dependencies.Values | Sort-Object)) { & $visit $dependency } $null = $visiting.Remove($Path) $null = $visited.Add($Path) $ordered.Add($scopes[$Path]) } foreach ($target in $Targets) { if ($scopes[$target.Path].Affected) { & $visit $target.Path } } foreach ($scope in $ordered) { foreach ($file in Get-ChildItem -LiteralPath $scope.Target.Path -File -Filter '*.tf.json') { Assert-AvmTerraformLocalsOnlyJson -Path $file.FullName ` -ReviewMessage 'Utility module migration requires review of JSON configuration' } } return $ordered.ToArray() } function Invoke-AvmTerraformUtilityPatch { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [object] $Options, [hashtable] $Updates = @{}, [hashtable] $Mappings = @{}, [string[]] $RemoveMaps = @(), [hashtable] $Inputs = @{}, [string] $Requirement = '', [string[]] $RemoveRequirements = @() ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Updates.Count + $Mappings.Count + $RemoveMaps.Count + $Inputs.Count + $Requirement.Length + $RemoveRequirements.Count -eq 0) { return } $variables = [ordered]@{ module_updates = $Updates provider_mappings = $Mappings remove_provider_maps = @($RemoveMaps) new_inputs = $Inputs provider_requirement = $Requirement remove_requirements = @($RemoveRequirements) } $arguments = @('transform', '--tf-dir', $Path, '--mptf-dir', $Options.ProfileDirs['utility-module']) foreach ($entry in $variables.GetEnumerator()) { $json = (ConvertTo-Json -InputObject $entry.Value -Depth 10 -Compress).Replace('${', '$${').Replace('%{', '%%{') $arguments += @('--mptf-var', "$($entry.Key)=$json") } $capabilities = @' alltrue(concat( [for name, body in var.module_updates : try(transform.update_in_place.utility_calls[name].target_block_address == "module.${name}" && transform.update_in_place.utility_calls[name].dynamic_block_body == body, false)], [for name, mapping in var.provider_mappings : try(!transform.update_in_place.utility_provider_mappings[name].merge_object_attributes && transform.update_in_place.utility_provider_mappings[name].target_block_address == "module.${name}" && transform.update_in_place.utility_provider_mappings[name].dynamic_block_body == "providers = ${mapping}\n", false)], [for name in var.remove_provider_maps : try(transform.remove_block_element.utility_provider_maps[name].target_block_address == "module.${name}" && jsonencode(transform.remove_block_element.utility_provider_maps[name].paths) == jsonencode(["providers"]), false)], [for name, mode in var.new_inputs : try(transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].new_block_type == "variable" && jsonencode(transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].labels) == jsonencode([name]) && transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].filename == "variables.tf", false)], [for name in var.remove_requirements : try(transform.remove_block_element.utility_requirements[name].target_block_address == "terraform" && jsonencode(transform.remove_block_element.utility_requirements[name].paths) == jsonencode(["required_providers.${name}"]), false)], [length(var.provider_requirement) == 0 || try(transform.update_in_place.utility_requirement["1"].merge_object_attributes && transform.update_in_place.utility_requirement["1"].dynamic_block_body == var.provider_requirement, try(transform.new_block.utility_requirement["1"].body == "\n${var.provider_requirement}", false))] )) '@ $check = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList (@('debug') + $arguments[1..($arguments.Count - 1)] + @('--eval', $capabilities)) ` -WorkingDirectory $Path -EnvVars $Options.EnvVars if ($check.StdOut.Trim() -cne 'true') { throw [AvmConfigurationException]::new("Cannot safely migrate utility modules in '$Path': update MaPoTF and the utility-module profile to support the exact native patches.") } if ($PSCmdlet.ShouldProcess($Path, 'migrate authored utility module calls and proven unused provider requirements')) { $null = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList $arguments ` -WorkingDirectory $Path -EnvVars $Options.EnvVars } } function Get-AvmTerraformUtilityProviderSource { [CmdletBinding()] [OutputType([string[]])] param( [Parameter(Mandatory)] [object] $Call, [Parameter(Mandatory)] [object] $Options, [Parameter(Mandatory)] [hashtable] $Cache ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $key = "$($Call.Source)|$($Call.Version)" if (-not $Cache.ContainsKey($key)) { $path = Join-Path $Options.InspectionRoot ('utility-' + [guid]::NewGuid().ToString('N')) $null = New-Item -ItemType Directory -Path $path -Force -ErrorAction Stop $source = ConvertTo-Json -InputObject $Call.Source -Compress $version = ConvertTo-Json -InputObject $Call.Version -Compress $inputs = if ($Call.Telemetry) { " location = `"eastus`"`n enable_telemetry = false`n" } else { '' } [System.IO.File]::WriteAllText((Join-Path $path 'main.tf'), "module `"utility`" {`n source = $source`n version = $version`n$inputs}`n", [System.Text.UTF8Encoding]::new($false)) $Cache[$key] = @(Get-AvmTerraformUnitTestProviderSource -Path $path ` -ModuleTargets @([pscustomobject]@{ Path = $path }) -Options $Options) } return $Cache[$key] } function Get-AvmTerraformUtilityProviderMapping { [CmdletBinding()] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [object] $Call, [Parameter(Mandatory)] [AllowEmptyCollection()] [string[]] $ProviderSources, [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $Name ) Set-StrictMode -Version 3.0 if (@($ProviderSources | Where-Object { $_ -match '/modtm$' -and $_ -ine 'registry.terraform.io/azure/modtm' }).Count -gt 0) { throw [AvmConfigurationException]::new("Cannot migrate utility module '$Name' in '$Path': an unexpected ModTM provider source requires review.") } if (-not $Call.Contains('providers') -or $ProviderSources -contains 'registry.terraform.io/azure/modtm') { return $null } $mapping = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $Call.providers ` -ProviderNames @() -AllowUnlistedProviders -RetiredProviderNames modtm if ($null -eq $mapping) { throw [AvmConfigurationException]::new( "Cannot migrate utility module '$Name' in '$Path': computed, aliased target keys or cross-provider module bindings require review.") } if (-not $mapping.Changed) { return $null } $remainingCount = $mapping.Bindings.Count - 1 $expression = $mapping.Expression if ($ProviderSources -contains 'registry.terraform.io/azure/azapi' -and -not $mapping.Bindings.ContainsKey('azapi')) { $expression = $expression.Insert($expression.LastIndexOf('}'), "`n azapi = azapi`n") $remainingCount++ } return [pscustomobject]@{ Expression = $expression; Changed = $true; RemoveMap = $remainingCount -eq 0 } } function Invoke-AvmTerraformUtilityMigration { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Plans, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $cache = @{} $telemetryPaths = @($Plans | Where-Object Telemetry | ForEach-Object { $_.Target.Path }) foreach ($scope in $Plans | Where-Object Affected) { $updates = @{} $mappings = @{} $removeMaps = [System.Collections.Generic.List[string]]::new() $inputs = @{} $requiresAzapi = $scope.Telemetry -and -not $scope.Before.requirements.Contains('azapi') -and $scope.Target.Profiles -notcontains 'root' foreach ($name in $scope.Calls.Keys) { $plan = $scope.Calls[$name] $call = $scope.Before.calls[$name] $body = [System.Collections.Generic.List[string]]::new() if ($plan.Upgrade) { $body.Add('version = "' + $plan.Version + '"') } if ($plan.LegacyNaming) { $body.Add('source = "' + $plan.Source + '"') if ($call.Contains('legacy_mode')) { $body.Add('legacy_mode = false') } } if ($plan.Telemetry) { if (-not $call.Contains('location')) { $body.Add('location = var.location') if (-not $scope.Before.variables.Contains('location')) { $inputs.location = if ($scope.Target.Scope -ceq 'example') { 'example' } else { 'required' } } } if ($scope.Target.Scope -cne 'test' -and -not $call.Contains('enable_telemetry')) { $body.Add('enable_telemetry = var.enable_telemetry') if (-not $scope.Before.variables.Contains('enable_telemetry')) { $inputs.enable_telemetry = 'default' } } } if ($call.Contains('providers')) { $bindings = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $call.providers -ProviderNames @() -AllowUnlistedProviders if ($null -eq $bindings) { throw [AvmConfigurationException]::new("Cannot migrate utility module '$name' in '$($scope.Target.Path)': its provider mapping requires review.") } if ($bindings.Bindings.ContainsKey('modtm')) { $sources = @(Get-AvmTerraformUtilityProviderSource -Call $plan -Options $Options -Cache $cache) $mapping = Get-AvmTerraformUtilityProviderMapping -Call $call -ProviderSources $sources -Path $scope.Target.Path -Name $name if ($null -ne $mapping) { if ($mapping.RemoveMap) { $removeMaps.Add($name) } else { $mappings[$name] = $mapping.Expression } } } } if ($body.Count -gt 0) { $updates[$name] = ($body -join "`n") + "`n" } } $requirement = '' $localTelemetryCalls = @($scope.Dependencies.Keys | Where-Object { $scope.Dependencies[$_] -cin $telemetryPaths }) if ($requiresAzapi -or $localTelemetryCalls.Count -gt 0) { if ($requiresAzapi) { $requirement = "required_providers {`n azapi = {`n source = `"Azure/azapi`"`n version = `"~> 2.12`"`n }`n}`n" } $azapiCalls = @($scope.Before.calls.Keys | Where-Object { ($requiresAzapi -and $scope.Calls.ContainsKey($_) -and $scope.Calls[$_].Telemetry) -or $_ -cin $localTelemetryCalls }) foreach ($name in $azapiCalls) { $call = $scope.Before.calls[$name] $expression = if ($mappings.ContainsKey($name)) { $mappings[$name] } elseif ($call.Contains('providers') -and -not $removeMaps.Contains($name)) { $call.providers } else { '{}' } $mapping = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $expression -ProviderNames @() -AllowUnlistedProviders if ($null -eq $mapping) { throw [AvmConfigurationException]::new("Cannot introduce AzAPI for utility module '$name' in '$($scope.Target.Path)': review its provider mapping.") } if (-not $mapping.Bindings.ContainsKey('azapi')) { $mappings[$name] = $expression.Insert($expression.LastIndexOf('}'), "`n azapi = azapi`n") } $null = $removeMaps.Remove($name) } } if ($PSCmdlet.ShouldProcess($scope.Target.Path, 'upgrade utility modules before telemetry transformation')) { Invoke-AvmTerraformUtilityPatch -Path $scope.Target.Path -Options $Options -Updates $updates ` -Mappings $mappings -RemoveMaps $removeMaps.ToArray() -Inputs $inputs -Requirement $requirement } } } function Invoke-AvmTerraformUtilityProviderCleanup { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Plans, [Parameter(Mandatory)] [object[]] $ModuleTargets, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $requirements = @{} $sources = $Options.UtilityProviderSources $moduleSources = @{} $manifests = @{} $providerWarnings = @{} $originalRequirements = @{} $requirementPlans = @{} $appliedRequirements = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $planningPaths = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($scope in $Plans) { $originalRequirements[$scope.Target.Path] = $scope.Before.requirements } foreach ($scope in $Plans) { $path = $scope.Target.Path if (-not $PSCmdlet.ShouldProcess($path, 'retire utility-only provider references using fresh dependency evidence')) { continue } $inspection = Get-AvmTerraformUtilityInspection -Path $path -Options $Options $mappings = @{} $removeMaps = [System.Collections.Generic.List[string]]::new() $requiresAzapi = $false foreach ($name in $scope.Dependencies.Keys) { $dependency = $scope.Dependencies[$name] if (-not $sources.ContainsKey($dependency)) { continue } $mapping = Get-AvmTerraformUtilityProviderMapping -Call $inspection.calls[$name] ` -ProviderSources $sources[$dependency] -Path $path -Name $name if ($null -ne $mapping) { if ($mapping.RemoveMap) { $removeMaps.Add($name) } else { $mappings[$name] = $mapping.Expression } if ($sources[$dependency] -contains 'registry.terraform.io/azure/azapi') { $requiresAzapi = $true } } } $requirement = '' if ($requiresAzapi -and -not $inspection.requirements.Contains('azapi')) { $requirement = "required_providers {`n azapi = {`n source = `"Azure/azapi`"`n version = `"~> 2.12`"`n }`n}`n" } Invoke-AvmTerraformUtilityPatch -Path $path -Options $Options -Mappings $mappings ` -RemoveMaps $removeMaps.ToArray() -Requirement $requirement $inspection = Get-AvmTerraformUtilityInspection -Path $path -Options $Options $moduleSources[$path] = @{} $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests ` -AllowMissingProviderConfiguration -ProviderWarnings $providerWarnings) $requirements[$path] = $inspection.requirements $retire = @( foreach ($provider in @('modtm', 'random')) { $source = if ($provider -ceq 'modtm') { 'registry.terraform.io/azure/modtm' } else { 'registry.terraform.io/hashicorp/random' } if (-not $inspection.requirements.Contains($provider)) { continue } $declared = [string]$inspection.requirements[$provider]['source'] if ($declared.ToLowerInvariant() -cnotin @($source, $source.Substring('registry.terraform.io/'.Length))) { continue } $used = @( foreach ($kind in @('resources', 'data_sources', 'ephemeral')) { $inspection[$kind].Keys | Where-Object { $_.StartsWith("$($provider)_", [System.StringComparison]::Ordinal) } } foreach ($providers in $moduleSources[$path].Values) { $providers | Where-Object { $_ -ceq $source } } foreach ($call in $inspection.calls.Values) { if ($call.Contains('providers') -and $call.providers -cmatch "\b$provider\b") { $provider } } foreach ($file in Get-ChildItem -LiteralPath $path -File -Filter '*.tf') { $text = [System.IO.File]::ReadAllText($file.FullName) if ($text -cmatch ('\bprovider\s+"' + $provider + '"') -or $text -cmatch '\bconfiguration_aliases\s*=') { $provider } } ) if ($used.Count -eq 0) { $provider } } ) if ($retire.Count -gt 0) { Invoke-AvmTerraformUtilityPatch -Path $path -Options $Options -RemoveRequirements $retire $requirements[$path] = Get-AvmTerraformUnitTestRequiredProvider -Path $path -Options $Options $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests ` -AllowMissingProviderConfiguration -ProviderWarnings $providerWarnings) } if ($sources[$path] -contains 'registry.terraform.io/azure/modtm') { $null = Get-AvmTerraformUnitTestModtmRequirementPlan -Path $path -ModuleTargets $ModuleTargets ` -Options $Options -RequiredProviders $requirements -ProviderSources $sources ` -ModuleProviderSources $moduleSources -ModuleManifests $manifests -OriginalRequirements $originalRequirements ` -Plans $requirementPlans -PlanningPaths $planningPaths -BindDependencies foreach ($plan in @($requirementPlans.Values | Where-Object { -not $appliedRequirements.Contains($_.Path) })) { $check = Invoke-AvmProcess -FilePath $Options.ToolPath ` -ArgumentList (@('debug') + $plan.Arguments[1..($plan.Arguments.Count - 1)] + @('--eval', $plan.Capabilities)) ` -WorkingDirectory $plan.Path -EnvVars $Options.EnvVars if ($check.StdOut.Trim() -cne 'true') { throw [AvmConfigurationException]::new("Cannot retain required ModTM bindings in '$($plan.Path)': update the native module profile.") } $null = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList $plan.Arguments -WorkingDirectory $plan.Path -EnvVars $Options.EnvVars $null = $appliedRequirements.Add($plan.Path) if ($plan.Path -cne $path) { Invoke-AvmMapotfTransformTarget -Target ([pscustomobject]@{ Path = $plan.Path; Scope = 'module'; Profiles = @('variable-order', 'common') }) -Options $Options } } } if ($providerWarnings.ContainsKey($path)) { $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests) } Invoke-AvmMapotfTransformTarget -Target ([pscustomobject]@{ Path = $path; Scope = $scope.Target.Scope; Profiles = @('variable-order', 'common') }) -Options $Options } } # SIG # Begin signature block # MIInKAYJKoZIhvcNAQcCoIInGTCCJxUCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAMKZPQt+bG8Ifa # Pa0IU2apuwnwQvWOzIwABZcvm6+NS6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIMi+GvEBamudLADrxpjs2a1YOb0zTlq8J49EruhjTzXUMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAG1/TqeeuHlYcy9DT # XK6TeY4oWxqywfca3n1HeEikoJmPHX5L9K/aF0+aYWcexCGyhyCWx/xXeVOpz9CA # VpzUc313e+ZvrQWfqyTFxo4v2fdi6x4GNqqhYu3tWRTCQZKsb2FeJwajTrpEFF6A # L/r9CDrv4YpOiJFfNrCskEONY53F1/2Lq3DOpxGNgUqHdubqrenf/OUCbxujgm26 # JK/zf0ntJPZIIO5FSj2amvyemHkWXQUSCemyPBwt71uqnovceI5LLmtnZiLGMfKi # skvZ8n+qe1yO82rWCbw7Zq3Ef9WyglGchLd7jJPcrom2rl7Ytd0TrtT2QdCDjCCJ # 0iJ+yKGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wGCSqGSIb3DQEHAqCCF20w # ghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9 # MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCBXohFEiIlvBKOu # cRLxnk38wTA3fVYS44yYMNoIYQtI+AIGaqqNbRvkGBMyMDI2MTAxNzEwNDAwNC42 # OTNaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHqMIIHIDCCBQigAwIBAgIT # MwAAAiAk4ebgF7m0jgABAAACIDANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTJaFw0yNzA1MTcxOTM5NTJa # MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL # ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk # IFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l # LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDR # YY7yr7ijW6CR178uKveIMufutWOicxgJwKOce/2GOQceus6ZWfX14i3jNg3JOP7M # GJMkOAucwWBwiA8URp+ZYkGjpVoVkGZsV27WjqLwpf2AwqBsJ/TzqwE7JFFaxup3 # Ldxj8GjdJymDFRrdVN/pYHoBFrjD1IkIDu8b1CWn8tgomiKRSY+STvJq99mVkdph # MBIUGOegQny8qRd24VME0xi8Oomks9Zq9EjDeKHGpvAbXUEQ6m3cROoEPhTE/miw # eQH9TqJt3IOsqPv3L8urojB747XBC2y0CDIHlKLcLl3ZG8D7JXKnWTFen3msMPJp # cvrQ3zUBVJrH/mI3RxHmCh9ppDP0uG1+PJwk6H/x+sfoG9hW64xoXkpx6DEfNZNf # cXdKbXF28XEXdLNnzo3SLNVymeQJhNqOSKhnU84QnKmrjEk541JiurlDCkCWO9lU # BUMb9x0nyfXUbNRPVLgP+PTMRdXOowJdYCzCQfN2ZqL0s4YI28F1Dbn7Bgw2E4P1 # E9unsvMzJHtzhS2Th3TpCfBbOGalIlF9x/DJZ/ssm/yyzT9YtIFeqmfNxBPTE3aO # uh6HxmTICzfYAATvWNhBbo19QwsjPeA9JvhqTLC2KUNgrXroGy4eDZo0n7jFYjZk # Uih1Ty+8E6qEvV2Na6Z5gUyD5a+tHGDmq69CmUiHfwIDAQABo4IBSTCCAUUwHQYD # VR0OBBYEFNvInOCIhxGA8mY7l1g07UHvyNgzMB8GA1UdIwQYMBaAFJ+nFV0AXmJd # g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6 # Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l # AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA # A4ICAQCtKGBto1BSvm4WFI+J0NSyVhU1LHL7F3fbjZ2d7F5Kn/FCTBZXpzrDVl63 # FLRNcIFpnJy4/nlg43r7T5sJPdo4Ms8ADSHQEJnHSu3x9UpjCzREBPi9+nHhvDgR # x/1WmBD6gQUZJLOhcN2TxW4KJyhinMtiBFtkNRZ2vmZ1MAdNXTm5d0Lwk3wzj+/f # 7VCCTWCXJSoqNa3VU/6sACHI97Evbnzg8bd3hxrfz6CcCVuf77egvRHinthJuwSR # ePP7aVmcevb1nWUIAICdBebHQOrzNIeWBIQwvcFaS3SFc+49rqrwQOMFDR4FYBzS # 7b0QeBVxFuLL2iVu4KAHMNUhLLSD4iKLDFBNTOtTzTlhGvMgG77A1cjeQrDMHa6o # ReMDeUDqHUrxv8g7IRdIh+h0gDLkzN0xIuzli0Bv7JtybGJbV6JxaDF4CzSCIMRp # K59nI6iKo4LgnbQBZJW7+6akYsKG/pXPlfxNv2InpD10tSCkCvw9kr6W1+NRN+Eu # ZczRgAwWlcK9XJZ3uu/v/oxHtO7/kmVIs51F9qV6Y2QNXd6tU46YPrK98m2QDys+ # lvLNimK0e1xZ7Z1GawKohKGvlLALWDlZQqgHfJ31CB0LlIDI7iLyYTpd2iyKjqsk # bQiyMtICH+RmH/oCg7JOK0ZA3XIMba9aSWgBF3QZ6pG3EGeQqjCCB3EwggVZoAMC # AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m # dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy # NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9 # DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2 # Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N # 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc # ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ # j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk # lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy # L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M # 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX # pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU # HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode # 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA # ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE # FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB # MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE # AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB # /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug # SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG # AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv # b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt # 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP # MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++ # Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9 # QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2 # wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR # AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z # bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx # t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3 # Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN # uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z # cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIICNQIBATCB+aGB0aSBzjCB # yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc # TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU # U1MgRVNOOkYwMDItMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T # dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQCTGA9vpsJ6glqCLmI0rggGx4YE # EqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3 # DQEBCwUAAgUA7n08XDAiGA8yMDI2MTAxNzAwMTQyMFoYDzIwMjYxMDE4MDAxNDIw # WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDufTxcAgEAMAcCAQACAhEzMAcCAQAC # AhvnMAoCBQDufo3cAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKg # CjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAAPUM3cy # AmuNVjClO1234SbnrhRuXZyBihaEWjftSAazgDlarVkW6c5gYwqeLzecnssNEm5j # NTbj9EXAxTOFcpbRXkwJsQWCpnZwKxOVECPQxXRtUSIUUwIzBjmkuJRXAOTrvTp8 # tFSkGbf0ABXS68wLad9SooqG6HNCzWUQ4AR03phAHobOJ7/2eJTgb4R+A3Bu1tdn # apEwgJvogDp70QaBQaXv8SzPhJN8KxL6Ytrrf8L/CJClODOQUk3AsKrTwlyoGOpS # PGzsSO+Kqe8+pQwJe76RH1i4HV0GtPd0BvuNmjgpEM18ZYM1w4z+AiDXDEEmjJyF # hK4oycYx2YjwXiQxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UE # CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z # b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ # Q0EgMjAxMAITMwAAAiAk4ebgF7m0jgABAAACIDANBglghkgBZQMEAgEFAKCCAUow # GgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCB1/79Y # FHPcN9EbI8tn9ECrELllLBi2+GE8FSkDhQX70DCB+gYLKoZIhvcNAQkQAi8xgeow # gecwgeQwgb0EION7vyOlPA1VqlEp0QIVGlNd8S5YWBnKj97LuTWHSO2vMIGYMIGA # pH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT # B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE # AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIgJOHm4Be5tI4A # AQAAAiAwIgQgJPZ4i7+19DHH+VAvtTqbNgWoj+4sUKniDsgJLlZh5rgwDQYJKoZI # hvcNAQELBQAEggIAvGgGbWwjinsydsY6aIH5v3XAE2Uj/tTJ8nxgP5XpVqaKnuE+ # nbPGlKAznf7Jqz5Xh64hidm1LheP1O2fblK20Yma3RmY3fNl/1cM9Sm61UmT2FC1 # opTv7akElqQ7W4u7I9pp5CjD2ffvr4dlST5T6D/vfoou3Qi0TPw9EIRiAJNf0i89 # 1XVBbYkJlrbPXPrlXk2bLpN/lzY/HQWRK4vhU2WLeuA8o2fxU+I0o21LDdfRzuD7 # DFlJ0HiZ3W5x2MoFtJWBkQGa8BBVu2TIQS7pJBM6SL00Zh7bBjPgno9yfxz14JFj # ZKNka+M9daoqWtwF7mzKB2s2+5a52xvbyArSin92FSYRrXlMMr0Li2P2fr9xqEvq # +4MveUPzjsVDM8qQwgkpGErkf3I+Eg980Np+WNQOD30HrG/8oHQ2jW2AiDS3dXwq # WZiS4yiJWdvRMDQNyFqnVp9L1ocBtdATTmNNbarub1zzIVFCMw63ORa6OLAZSlG7 # nR8D/7iQpkBNHOfA7vdnNOaSKYx0rstpi+SJV6GJYyFah++JxU7H6Ns4Hbcyd9m7 # aglDyocn+eVrEhqHKkogIGR9iq6Jh8DmfqrCRraBwQ68GiC5Sy45BEdFLf3ELa47 # OBT6ZwEwIiGlsMnTW/wO+1IO6JwlT8q+ZUqQve+taxFs1nRb3ubci2nipNE= # SIG # End signature block |