Engines/Terraform/Invoke-AvmTerraformUtilityMigration.ps1
|
function Get-AvmTerraformUtilityInspection { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $expression = '{ calls = data.module.utility.result, variables = data.variable.utility.result, ' + 'requirements = data.terraform.utility.required_providers, resources = data.resource.utility.result, ' + 'data_sources = data.data.utility.result, ephemeral = data.ephemeral.utility.result }' $result = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList @( 'debug', '--tf-dir', $Path, '--mptf-dir', $Options.ProfileDirs['utility-module'], '--eval', $expression ) -WorkingDirectory $Path -EnvVars $Options.EnvVars try { $inspection = ConvertFrom-Json -InputObject $result.StdOut -AsHashtable -ErrorAction Stop } catch { throw [AvmConfigurationException]::new("Cannot inspect utility module calls in '$Path': invalid native JSON. $($_.Exception.Message)") } foreach ($key in @('calls', 'variables', 'requirements', 'resources', 'data_sources', 'ephemeral')) { if ($inspection -isnot [System.Collections.IDictionary] -or $inspection[$key] -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect utility module calls in '$Path': update the utility-module profile to expose '$key'.") } } foreach ($name in $inspection.calls.Keys) { $call = $inspection.calls[$name] if ($call -isnot [System.Collections.IDictionary] -or $call['source'] -isnot [string] -or $call['mptf'] -isnot [System.Collections.IDictionary] -or $call.mptf['block_address'] -cne "module.$name") { throw [AvmConfigurationException]::new("Cannot inspect utility module call '$name' in '$Path': missing native source metadata.") } } return $inspection } function Get-AvmTerraformUtilityMigrationPlan { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [object[]] $Targets, [Parameter(Mandatory)] [object] $Options, [switch] $PreserveSelections ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $versions = @{ 'azure/avm-utl-regions/azurerm' = '0.13.0' 'azure/avm-utl-interfaces/azure' = '0.9.0' 'azure/naming/azurerm' = '0.2.0' } $scopes = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) foreach ($target in $Targets) { $inspection = Get-AvmTerraformUtilityInspection -Path $target.Path -Options $Options $calls = @{} foreach ($name in $inspection.calls.Keys) { $call = $inspection.calls[$name] $source = $call.source.ToLowerInvariant() -creplace '^registry[.]terraform[.]io/', '' if (-not $versions.ContainsKey($source)) { continue } $pin = [regex]::Match([string]$call['version'], '\A(?:=\s*)?(0|[1-9][0-9]*)[.](0|[1-9][0-9]*)[.](0|[1-9][0-9]*)\z') if (-not $pin.Success) { throw [AvmConfigurationException]::new( "Utility module '$name' in '$($target.Path)' requires review: use a literal exact version pin before automatic migration; ranges, missing versions and expressions are not rewritten.") } $version = $pin.Value -creplace '^=\s*', '' $parsedVersion = $null if (-not [version]::TryParse($version, [ref]$parsedVersion)) { throw [AvmConfigurationException]::new("Utility module '$name' in '$($target.Path)' has an unsupported version pin that requires review.") } if ($PreserveSelections) { continue } $legacyNaming = $source -ceq 'azure/naming/azurerm' if (-not $legacyNaming -and $parsedVersion -gt [version]$versions[$source]) { continue } $upgrade = $legacyNaming -or $parsedVersion -lt [version]$versions[$source] $calls[$name] = [pscustomobject]@{ Source = if ($legacyNaming) { 'Azure/avm-utl-naming/azure' } else { $call.source } Version = if ($upgrade) { $versions[$source] } else { $version } Upgrade = $upgrade LegacyNaming = $legacyNaming Telemetry = -not $legacyNaming } } $scopes[$target.Path] = [pscustomobject]@{ Target = $target Before = $inspection Calls = $calls Dependencies = @{} Affected = $calls.Count -gt 0 Telemetry = @($calls.Values | Where-Object Telemetry).Count -gt 0 } } foreach ($scope in $scopes.Values) { foreach ($name in $scope.Before.calls.Keys) { $source = $scope.Before.calls[$name].source if ($source.StartsWith('./', [System.StringComparison]::Ordinal) -or $source.StartsWith('../', [System.StringComparison]::Ordinal)) { $path = [System.IO.Path]::TrimEndingDirectorySeparator( [System.IO.Path]::GetFullPath($source, $scope.Target.Path)) if ($scopes.ContainsKey($path)) { $scope.Dependencies[$name] = $path } } } } do { $changed = $false foreach ($scope in $scopes.Values) { foreach ($path in $scope.Dependencies.Values) { if ($scopes[$path].Affected -and -not $scope.Affected) { $scope.Affected = $true $changed = $true } if ($scopes[$path].Telemetry -and -not $scope.Telemetry) { $scope.Telemetry = $true $changed = $true } } } } while ($changed) $ordered = [System.Collections.Generic.List[object]]::new() $visiting = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $visited = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $visit = { param([string] $Path) if ($visited.Contains($Path)) { return } if (-not $visiting.Add($Path)) { throw [AvmConfigurationException]::new("Cannot migrate utility modules in '$Path': cyclic local module calls require review.") } foreach ($dependency in @($scopes[$Path].Dependencies.Values | Sort-Object)) { & $visit $dependency } $null = $visiting.Remove($Path) $null = $visited.Add($Path) $ordered.Add($scopes[$Path]) } foreach ($target in $Targets) { if ($scopes[$target.Path].Affected) { & $visit $target.Path } } do { $previousCount = $visited.Count foreach ($target in $Targets) { if (-not $visited.Contains($target.Path) -and @($scopes[$target.Path].Dependencies.Values | Where-Object { $visited.Contains($_) }).Count -gt 0) { & $visit $target.Path } } } while ($visited.Count -gt $previousCount) foreach ($scope in $ordered) { foreach ($file in Get-ChildItem -LiteralPath $scope.Target.Path -File -Filter '*.tf.json') { Assert-AvmTerraformLocalsOnlyJson -Path $file.FullName ` -ReviewMessage 'Utility module migration requires review of JSON configuration' } } return $ordered.ToArray() } function Invoke-AvmTerraformUtilityPatch { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [object] $Options, [hashtable] $Updates = @{}, [hashtable] $Mappings = @{}, [string[]] $RemoveMaps = @(), [hashtable] $Inputs = @{}, [string] $Requirement = '', [string[]] $RemoveRequirements = @() ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Updates.Count + $Mappings.Count + $RemoveMaps.Count + $Inputs.Count + $Requirement.Length + $RemoveRequirements.Count -eq 0) { return } $variables = [ordered]@{ module_updates = $Updates provider_mappings = $Mappings remove_provider_maps = @($RemoveMaps) new_inputs = $Inputs provider_requirement = $Requirement remove_requirements = @($RemoveRequirements) } $arguments = @('transform', '--tf-dir', $Path, '--mptf-dir', $Options.ProfileDirs['utility-module']) foreach ($entry in $variables.GetEnumerator()) { $json = (ConvertTo-Json -InputObject $entry.Value -Depth 10 -Compress).Replace('${', '$${').Replace('%{', '%%{') $arguments += @('--mptf-var', "$($entry.Key)=$json") } $capabilities = @' alltrue(concat( [for name, body in var.module_updates : try(transform.update_in_place.utility_calls[name].target_block_address == "module.${name}" && transform.update_in_place.utility_calls[name].dynamic_block_body == body, false)], [for name, mapping in var.provider_mappings : try(!transform.update_in_place.utility_provider_mappings[name].merge_object_attributes && transform.update_in_place.utility_provider_mappings[name].target_block_address == "module.${name}" && transform.update_in_place.utility_provider_mappings[name].dynamic_block_body == "providers = ${mapping}\n", false)], [for name in var.remove_provider_maps : try(transform.remove_block_element.utility_provider_maps[name].target_block_address == "module.${name}" && jsonencode(transform.remove_block_element.utility_provider_maps[name].paths) == jsonencode(["providers"]), false)], [for name, mode in var.new_inputs : try(transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].new_block_type == "variable" && jsonencode(transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].labels) == jsonencode([name]) && transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].filename == "variables.tf", false)], [for name in var.remove_requirements : try(transform.remove_block_element.utility_requirements[name].target_block_address == "terraform" && jsonencode(transform.remove_block_element.utility_requirements[name].paths) == jsonencode(["required_providers.${name}"]), false)], [length(var.provider_requirement) == 0 || try(transform.update_in_place.utility_requirement["1"].merge_object_attributes && transform.update_in_place.utility_requirement["1"].dynamic_block_body == var.provider_requirement, try(transform.new_block.utility_requirement["1"].body == "\n${var.provider_requirement}", false))] )) '@ $check = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList (@('debug') + $arguments[1..($arguments.Count - 1)] + @('--eval', $capabilities)) ` -WorkingDirectory $Path -EnvVars $Options.EnvVars if ($check.StdOut.Trim() -cne 'true') { throw [AvmConfigurationException]::new("Cannot safely migrate utility modules in '$Path': update MaPoTF and the utility-module profile to support the exact native patches.") } if ($PSCmdlet.ShouldProcess($Path, 'migrate authored utility module calls and proven unused provider requirements')) { $null = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList $arguments ` -WorkingDirectory $Path -EnvVars $Options.EnvVars } } function Get-AvmTerraformUtilityProviderSource { [CmdletBinding()] [OutputType([string[]])] param( [Parameter(Mandatory)] [object] $Call, [Parameter(Mandatory)] [object] $Options, [Parameter(Mandatory)] [hashtable] $Cache ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $key = "$($Call.Source)|$($Call.Version)" if (-not $Cache.ContainsKey($key)) { $path = Join-Path $Options.InspectionRoot ('utility-' + [guid]::NewGuid().ToString('N')) $null = New-Item -ItemType Directory -Path $path -Force -ErrorAction Stop $source = ConvertTo-Json -InputObject $Call.Source -Compress $version = ConvertTo-Json -InputObject $Call.Version -Compress $inputs = if ($Call.Telemetry) { " location = `"eastus`"`n enable_telemetry = false`n" } else { '' } [System.IO.File]::WriteAllText((Join-Path $path 'main.tf'), "module `"utility`" {`n source = $source`n version = $version`n$inputs}`n", [System.Text.UTF8Encoding]::new($false)) $Cache[$key] = @(Get-AvmTerraformUnitTestProviderSource -Path $path ` -ModuleTargets @([pscustomobject]@{ Path = $path }) -Options $Options) } return $Cache[$key] } function Get-AvmTerraformUtilityProviderMapping { [CmdletBinding()] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [object] $Call, [Parameter(Mandatory)] [AllowEmptyCollection()] [string[]] $ProviderSources, [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $Name ) Set-StrictMode -Version 3.0 if (@($ProviderSources | Where-Object { $_ -match '/modtm$' -and $_ -ine 'registry.terraform.io/azure/modtm' }).Count -gt 0) { throw [AvmConfigurationException]::new("Cannot migrate utility module '$Name' in '$Path': an unexpected ModTM provider source requires review.") } if (-not $Call.Contains('providers') -or $ProviderSources -contains 'registry.terraform.io/azure/modtm') { return $null } $mapping = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $Call.providers ` -ProviderNames @() -AllowUnlistedProviders -RetiredProviderNames modtm if ($null -eq $mapping) { throw [AvmConfigurationException]::new( "Cannot migrate utility module '$Name' in '$Path': computed, aliased target keys or cross-provider module bindings require review.") } if (-not $mapping.Changed) { return $null } $remainingCount = $mapping.Bindings.Count - 1 $expression = $mapping.Expression if ($ProviderSources -contains 'registry.terraform.io/azure/azapi' -and -not $mapping.Bindings.ContainsKey('azapi')) { $expression = $expression.Insert($expression.LastIndexOf('}'), "`n azapi = azapi`n") $remainingCount++ } return [pscustomobject]@{ Expression = $expression; Changed = $true; RemoveMap = $remainingCount -eq 0 } } function Invoke-AvmTerraformUtilityMigration { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Plans, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $cache = @{} $telemetryPaths = @($Plans | Where-Object Telemetry | ForEach-Object { $_.Target.Path }) foreach ($scope in $Plans | Where-Object Affected) { $updates = @{} $mappings = @{} $removeMaps = [System.Collections.Generic.List[string]]::new() $inputs = @{} $requiresAzapi = $scope.Telemetry -and -not $scope.Before.requirements.Contains('azapi') -and $scope.Target.Profiles -notcontains 'root' foreach ($name in $scope.Calls.Keys) { $plan = $scope.Calls[$name] $call = $scope.Before.calls[$name] $body = [System.Collections.Generic.List[string]]::new() if ($plan.Upgrade) { $body.Add('version = "' + $plan.Version + '"') } if ($plan.LegacyNaming) { $body.Add('source = "' + $plan.Source + '"') if ($call.Contains('legacy_mode')) { $body.Add('legacy_mode = false') } } if ($plan.Telemetry) { if (-not $call.Contains('location')) { $body.Add('location = var.location') if (-not $scope.Before.variables.Contains('location')) { $inputs.location = if ($scope.Target.Scope -ceq 'example') { 'example' } else { 'required' } } } if ($scope.Target.Scope -cne 'test' -and -not $call.Contains('enable_telemetry')) { $body.Add('enable_telemetry = var.enable_telemetry') if (-not $scope.Before.variables.Contains('enable_telemetry')) { $inputs.enable_telemetry = 'default' } } } if ($call.Contains('providers')) { $bindings = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $call.providers -ProviderNames @() -AllowUnlistedProviders if ($null -eq $bindings) { throw [AvmConfigurationException]::new("Cannot migrate utility module '$name' in '$($scope.Target.Path)': its provider mapping requires review.") } if ($bindings.Bindings.ContainsKey('modtm')) { $sources = @(Get-AvmTerraformUtilityProviderSource -Call $plan -Options $Options -Cache $cache) $mapping = Get-AvmTerraformUtilityProviderMapping -Call $call -ProviderSources $sources -Path $scope.Target.Path -Name $name if ($null -ne $mapping) { if ($mapping.RemoveMap) { $removeMaps.Add($name) } else { $mappings[$name] = $mapping.Expression } } } } if ($body.Count -gt 0) { $updates[$name] = ($body -join "`n") + "`n" } } $requirement = '' $localTelemetryCalls = @($scope.Dependencies.Keys | Where-Object { $scope.Dependencies[$_] -cin $telemetryPaths }) if ($requiresAzapi -or $localTelemetryCalls.Count -gt 0) { if ($requiresAzapi) { $requirement = "required_providers {`n azapi = {`n source = `"Azure/azapi`"`n version = `"~> 2.12`"`n }`n}`n" } $azapiCalls = @($scope.Before.calls.Keys | Where-Object { ($requiresAzapi -and $scope.Calls.ContainsKey($_) -and $scope.Calls[$_].Telemetry) -or $_ -cin $localTelemetryCalls }) foreach ($name in $azapiCalls) { $call = $scope.Before.calls[$name] $expression = if ($mappings.ContainsKey($name)) { $mappings[$name] } elseif ($call.Contains('providers') -and -not $removeMaps.Contains($name)) { $call.providers } else { '{}' } $mapping = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $expression -ProviderNames @() -AllowUnlistedProviders if ($null -eq $mapping) { throw [AvmConfigurationException]::new("Cannot introduce AzAPI for utility module '$name' in '$($scope.Target.Path)': review its provider mapping.") } if (-not $mapping.Bindings.ContainsKey('azapi')) { $mappings[$name] = $expression.Insert($expression.LastIndexOf('}'), "`n azapi = azapi`n") } $null = $removeMaps.Remove($name) } } if ($PSCmdlet.ShouldProcess($scope.Target.Path, 'upgrade utility modules before telemetry transformation')) { Invoke-AvmTerraformUtilityPatch -Path $scope.Target.Path -Options $Options -Updates $updates ` -Mappings $mappings -RemoveMaps $removeMaps.ToArray() -Inputs $inputs -Requirement $requirement } } } function Invoke-AvmTerraformUtilityProviderCleanup { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Plans, [Parameter(Mandatory)] [object[]] $ModuleTargets, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $requirements = @{} $sources = $Options.UtilityProviderSources $moduleSources = @{} $manifests = @{} $providerWarnings = @{} $originalRequirements = @{} $requirementPlans = @{} $appliedRequirements = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $planningPaths = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($scope in $Plans) { $originalRequirements[$scope.Target.Path] = $scope.Before.requirements } foreach ($scope in $Plans) { $path = $scope.Target.Path if (-not $PSCmdlet.ShouldProcess($path, 'retire utility-only provider references using fresh dependency evidence')) { continue } $inspection = Get-AvmTerraformUtilityInspection -Path $path -Options $Options $mappings = @{} $removeMaps = [System.Collections.Generic.List[string]]::new() $requiresAzapi = $false foreach ($name in $scope.Dependencies.Keys) { $dependency = $scope.Dependencies[$name] if (-not $sources.ContainsKey($dependency)) { continue } $mapping = Get-AvmTerraformUtilityProviderMapping -Call $inspection.calls[$name] ` -ProviderSources $sources[$dependency] -Path $path -Name $name if ($null -ne $mapping) { if ($mapping.RemoveMap) { $removeMaps.Add($name) } else { $mappings[$name] = $mapping.Expression } if ($sources[$dependency] -contains 'registry.terraform.io/azure/azapi') { $requiresAzapi = $true } } } $requirement = '' if ($requiresAzapi -and -not $inspection.requirements.Contains('azapi')) { $requirement = "required_providers {`n azapi = {`n source = `"Azure/azapi`"`n version = `"~> 2.12`"`n }`n}`n" } Invoke-AvmTerraformUtilityPatch -Path $path -Options $Options -Mappings $mappings ` -RemoveMaps $removeMaps.ToArray() -Requirement $requirement $inspection = Get-AvmTerraformUtilityInspection -Path $path -Options $Options $moduleSources[$path] = @{} $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests ` -AllowMissingProviderConfiguration -ProviderWarnings $providerWarnings) $requirements[$path] = $inspection.requirements $retire = @( foreach ($provider in @('modtm', 'random')) { $source = if ($provider -ceq 'modtm') { 'registry.terraform.io/azure/modtm' } else { 'registry.terraform.io/hashicorp/random' } if (-not $inspection.requirements.Contains($provider)) { continue } $declared = [string]$inspection.requirements[$provider]['source'] if ($declared.ToLowerInvariant() -cnotin @($source, $source.Substring('registry.terraform.io/'.Length))) { continue } $used = @( foreach ($kind in @('resources', 'data_sources', 'ephemeral')) { $inspection[$kind].Keys | Where-Object { $_.StartsWith("$($provider)_", [System.StringComparison]::Ordinal) } } foreach ($providers in $moduleSources[$path].Values) { $providers | Where-Object { $_ -ceq $source } } foreach ($call in $inspection.calls.Values) { if ($call.Contains('providers') -and $call.providers -cmatch "\b$provider\b") { $provider } } foreach ($file in Get-ChildItem -LiteralPath $path -File -Filter '*.tf') { $text = [System.IO.File]::ReadAllText($file.FullName) if ($text -cmatch ('\bprovider\s+"' + $provider + '"') -or $text -cmatch '\bconfiguration_aliases\s*=') { $provider } } ) if ($used.Count -eq 0) { $provider } } ) if ($retire.Count -gt 0) { Invoke-AvmTerraformUtilityPatch -Path $path -Options $Options -RemoveRequirements $retire $requirements[$path] = Get-AvmTerraformUnitTestRequiredProvider -Path $path -Options $Options $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests ` -AllowMissingProviderConfiguration -ProviderWarnings $providerWarnings) } if ($sources[$path] -contains 'registry.terraform.io/azure/modtm') { $null = Get-AvmTerraformUnitTestModtmRequirementPlan -Path $path -ModuleTargets $ModuleTargets ` -Options $Options -RequiredProviders $requirements -ProviderSources $sources ` -ModuleProviderSources $moduleSources -ModuleManifests $manifests -OriginalRequirements $originalRequirements ` -Plans $requirementPlans -PlanningPaths $planningPaths -BindDependencies foreach ($plan in @($requirementPlans.Values | Where-Object { -not $appliedRequirements.Contains($_.Path) })) { $check = Invoke-AvmProcess -FilePath $Options.ToolPath ` -ArgumentList (@('debug') + $plan.Arguments[1..($plan.Arguments.Count - 1)] + @('--eval', $plan.Capabilities)) ` -WorkingDirectory $plan.Path -EnvVars $Options.EnvVars if ($check.StdOut.Trim() -cne 'true') { throw [AvmConfigurationException]::new("Cannot retain required ModTM bindings in '$($plan.Path)': update the native module profile.") } $null = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList $plan.Arguments -WorkingDirectory $plan.Path -EnvVars $Options.EnvVars $null = $appliedRequirements.Add($plan.Path) if ($plan.Path -cne $path) { Invoke-AvmMapotfTransformTarget -Target ([pscustomobject]@{ Path = $plan.Path; Scope = 'module'; Profiles = @('variable-order', 'common') }) -Options $Options } } } if ($providerWarnings.ContainsKey($path)) { $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests) } Invoke-AvmMapotfTransformTarget -Target ([pscustomobject]@{ Path = $path; Scope = $scope.Target.Scope; Profiles = @('variable-order', 'common') }) -Options $Options } } # SIG # Begin signature block # MIInUAYJKoZIhvcNAQcCoIInQTCCJz0CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDwlUSgU2D/NktF # 9z9T4sInUCEroyEwg6guclKD3GFnIKCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIJPwPmUUA1MGQQiRJqivwqCQtJ0E # s760fjYmWYiXKcnWMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEATNiRfaH4QE3Z1ce1ANPug/aUQ09icszcOP1fhfCCUh7D3jqqMtkx4UVTUsAG # Lq5jPW0PNASkQTYLnm1wVO/3tl8kmG0yA+JWH//o3ZgnHS8302VpZCows4wwySAb # rzbHuEWK6F10JcHywJJfopCq4BFt0ruwwe/TL8L3rzLXKCar4IO/qlsWDqxqaj+Z # +1lJpNUzuyTo+0/MigZspRZsJha/5xHEMXCP7QyPvtXQ55z/IdRSPD4MQ4j4Fbwj # s6acnm9lyN7iCHI6+7amVpNJAQ4JZt/s9hf0A07pwIlFG23p+2EoRTAImC4IR46O # 4F2FKSMVuy/15XCSnB+x6xIVc6GCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UG # CSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG # 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCCzNdVdTL0GVSIKh32i5Vg8JIcDs3zFbRA/ISM15iVykgIGaq9WlSj+GBMy # MDI2MTAyMDIyMjAyMy43NDJaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2 # NTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaCCEfswggcoMIIFEKADAgECAhMzAAACFRgD04EHJnxTAAEAAAIVMA0GCSqG # SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgx # NDE4NDgyMFoXDTI2MTExMzE4NDgyMFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh # dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVF # MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC # IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw3HV3hVxL0lEYPV03XeNKZ51 # 7VIbgexhlDPdpXwDS0BYtxPwi4XYpZR1ld0u6cr2Xjuugdg50DUx5WHL0QhY2d9v # kJSk02rE/75hcKt91m2Ih287QRxRMmFu3BF6466k8qp5uXtfe6uciq49YaS8p+dz # v3uTarD4hQ8UT7La95pOJiRqxxd0qOGLECvHLEXPXioNSx9pyhzhm6lt7ezLxJeF # VYtxShkavPoZN0dOCiYeh4KgoKoyagzMuSiLCiMUW4Ue4Qsm658FJNGTNh7V5qXY # VA6k5xjw5WeWdKOz0i9A5jBcbY9fVOo/cA8i1bytzcDTxb3nctcly8/OYeNstkab # /Isq3Cxe1vq96fIHE1+ZGmJjka1sodwqPycVp/2tb+BjulPL5D6rgUXTPF84U82R # LKHV57bB8fHRpgnjcWBQuXPgVeSXpERWimt0NF2lCOLzqgrvS/vYqde5Ln9YlKKh # AZ/xDE0TLIIr6+I/2JTtXP34nfjTENVqMBISWcakIxAwGb3RB5yHCxynIFNVLcfK # AsEdC5U2em0fAvmVv0sonqnv17cuaYi2eCLWhoK1Ic85Dw7s/lhcXrBpY4n/Rl5l # 3wHzs4vOIhu87DIy5QUaEupEsyY0NWqgI4BWl6v1wgse+l8DWFeUXofhUuCgVTuT # HN3K8idoMbn8Q3edUIECAwEAAaOCAUkwggFFMB0GA1UdDgQWBBSJIXfxcqAwFqGj # 9jdwQtdSqadj1zAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV # HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny # bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI # KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy # MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI # MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAd42HtV+kGbvxzLBT # C5O7vkCIBPy/BwpjCzeL53hAiEOebp+VdNnwm9GVCfYq3KMfrj4UvKQTUAaS5Zkw # e1gvZ3ljSSnCOyS5OwNu9dpg3ww+QW2eOcSLkyVAWFrLn6Iig3TC/zWMvVhqXtdF # hG2KJ1lSbN222csY3E3/BrGluAlvET9gmxVyyxNy59/7JF5zIGcJibydxs94JL1B # tPgXJOfZzQ+/3iTc6eDtmaWT6DKdnJocp8wkXKWPIsBEfkD6k1Qitwvt0mHrORah # 75SjecOKt4oWayVLkPTho12e0ongEg1cje5fxSZGthrMrWKvI4R7HEC7k8maH9eP # A3ViH0CVSSOefaPTGMzIhHCo5p3jG5SMcyO3eA9uEaYQJITJlLG3BwwGmypY7C/8 # /nj1SOhgx1HgJ0ywOJL9xfP4AOcWmCfbsqgGbCaC7WH5sINdzfMar8V7YNFqkbCG # UKhc8GpIyE+MKnyVn33jsuaGAlNRg7dVRUSoYLJxvUsw9GOwyBpBwbE9sqOLm+Hs # O00oF23PMio7WFXcFTZAjp3ujihBAfLrXICgGOHPdkZ042u1LZqOcnlr3XzvgMe+ # mPPyasW8f0rtzJj3V5E/EKiyQlPxj9Mfq2x9himnlXWGZCVPeEBROrNbDYBfazTy # LNCOTsRtksOSV3FBtPnpQtLN754wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ # AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK # V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0 # IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0 # ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa # MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT # HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF # AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1 # V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9 # alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv # Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928 # jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t # pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe # HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o # ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C # vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug # poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps # xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C # AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE # FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT # NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo # dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o # dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD # AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW # y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t # aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt # MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y # My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc # FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT # Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j # VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3 # +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR # sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw # ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b # RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx # aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX # HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0 # W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0 # HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2 # NTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaIjCgEBMAcGBSsOAwIaAxUAj6eTejbuYE1Ifjbfrt6tXevCUSCggYMwgYCk # fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF # AO6CB0UwIhgPMjAyNjEwMjAxNTI5MDlaGA8yMDI2MTAyMTE1MjkwOVowdDA6Bgor # BgEEAYRZCgQBMSwwKjAKAgUA7oIHRQIBADAHAgEAAgIbbzAHAgEAAgIS0DAKAgUA # 7oNYxQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAID # B6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQBXyHehplMN253/fA8z # c/QD49uIeq2vBuGH3zy4H8F1dXUV6jxK48kE7lwPIGpLywpj8//6hW/4POj9TMQK # +e/qgiVEkDYUn9F/ciParZkRVkrJzWuLEdjZLoLXBPGYeeM7V4+EOBbs+SYyllQN # HiBtfE+O4AXWkOdIOo6LrDrNcJzMxxAOA8yBmp9rNuQ+350gFkzhCNLLWwiQVQJ6 # kn53OKhdKnneOjncSun3IQP8EqIf2B3gt4DC07I6vDKp17dl4vODe8m102Juy48V # mx/T2fyn63sYLfcNZYz21+ImHmr6Ksh1FRl0gIRHPEMi7MPK7K70VmPUfbY3SAQn # J6rkMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC # EzMAAAIVGAPTgQcmfFMAAQAAAhUwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3 # DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgspZQuoMhkU1tt0Jb # 68d5KTxbhE3CDxzA3TdTfUGYjEswgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9 # BCBwEPR2PDrTFLcrtQsKrUi7oz5JNRCF/KRHMihSNe7sijCBmDCBgKR+MHwxCzAJ # BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv # c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACFRgD04EHJnxTAAEAAAIVMCIE # IKArYsmdwC3yrVFomp1HaBdAJ2XTRT7rqTVERN1ICeYmMA0GCSqGSIb3DQEBCwUA # BIICABgFACgAeJZlGUH3Bow4MENo5jE9gu9S7IISs3pHTTOxSJucoUmQR6WycjST # yQKYIJJLVaj7Ro6CX79E9H2Gjlzq8JRtZYUkh/PLBthWu/adlrybXSKQt7HhNSUe # b2FdyCxpqz7czslb0J9UcPQ8YaOGi66+RidfpcBzmRCUxFFwCRroN5tMyNpW6j3w # zT8JpqVHPmeMK/Rnl1sJf4h2+L255XX058CSl5r3P5hPeMTLLQD5gfpQ3qZHTlJo # 07381PCVIXplaKcvvByviTYHASR0yWZmPisoJacjpRMTiPNOcMsMVSeJKsCj3Cvd # iPe7gHeG8FZblsoI5XvaqMXhwgqN5j6mwZtxe0FfY0h1EoZa4fkKyw+5qOtWvSnK # E/hbog53tRPIMhJwOpUcyuVDLlzNa3zKBinbuKcGpKZ4ioPav00xJaI24MQwcR5G # QY2Z0nxXSIv0vSNjP0qJ9hMbMDYcibX6f6dSuED/8gNgVPAkFlx2IRgzJ+6Gkbav # sm242WVgSWoY+SC11DekbtS07FiSHEP6eiZWmkzXyodo7jMeXfh6woVuav/AV16F # hQGgOgZQzoSsw3zTmDF9tXzpsFwKUxEAbWQIRMWX1LFaoFdsZeaRHxPA5eVITxOA # dkYc48XC1UMUdUP+rIv11jEmo64VE7Q5X9OLwhPTOuHYOtFv # SIG # End signature block |