Engines/Terraform/Invoke-AvmTerraformUtilityMigration.ps1
|
function Get-AvmTerraformUtilityInspection { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $expression = '{ calls = data.module.utility.result, variables = data.variable.utility.result, ' + 'requirements = data.terraform.utility.required_providers, resources = data.resource.utility.result, ' + 'data_sources = data.data.utility.result, ephemeral = data.ephemeral.utility.result }' $result = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList @( 'debug', '--tf-dir', $Path, '--mptf-dir', $Options.ProfileDirs['utility-module'], '--eval', $expression ) -WorkingDirectory $Path -EnvVars $Options.EnvVars try { $inspection = ConvertFrom-Json -InputObject $result.StdOut -AsHashtable -ErrorAction Stop } catch { throw [AvmConfigurationException]::new("Cannot inspect utility module calls in '$Path': invalid native JSON. $($_.Exception.Message)") } foreach ($key in @('calls', 'variables', 'requirements', 'resources', 'data_sources', 'ephemeral')) { if ($inspection -isnot [System.Collections.IDictionary] -or $inspection[$key] -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect utility module calls in '$Path': update the utility-module profile to expose '$key'.") } } foreach ($name in $inspection.calls.Keys) { $call = $inspection.calls[$name] if ($call -isnot [System.Collections.IDictionary] -or $call['source'] -isnot [string] -or $call['mptf'] -isnot [System.Collections.IDictionary] -or $call.mptf['block_address'] -cne "module.$name") { throw [AvmConfigurationException]::new("Cannot inspect utility module call '$name' in '$Path': missing native source metadata.") } } return $inspection } function Get-AvmTerraformUtilityMigrationPlan { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [object[]] $Targets, [Parameter(Mandatory)] [object] $Options, [switch] $PreserveSelections ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $versions = @{ 'azure/avm-utl-regions/azurerm' = '0.13.0' 'azure/avm-utl-interfaces/azure' = '0.9.0' 'azure/naming/azurerm' = '0.2.0' } $scopes = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) foreach ($target in $Targets) { $inspection = Get-AvmTerraformUtilityInspection -Path $target.Path -Options $Options $calls = @{} foreach ($name in $inspection.calls.Keys) { $call = $inspection.calls[$name] $source = $call.source.ToLowerInvariant() -creplace '^registry[.]terraform[.]io/', '' if (-not $versions.ContainsKey($source)) { continue } $pin = [regex]::Match([string]$call['version'], '\A(?:=\s*)?(0|[1-9][0-9]*)[.](0|[1-9][0-9]*)[.](0|[1-9][0-9]*)\z') if (-not $pin.Success) { throw [AvmConfigurationException]::new( "Utility module '$name' in '$($target.Path)' requires review: use a literal exact version pin before automatic migration; ranges, missing versions and expressions are not rewritten.") } $version = $pin.Value -creplace '^=\s*', '' $parsedVersion = $null if (-not [version]::TryParse($version, [ref]$parsedVersion)) { throw [AvmConfigurationException]::new("Utility module '$name' in '$($target.Path)' has an unsupported version pin that requires review.") } if ($PreserveSelections) { continue } $legacyNaming = $source -ceq 'azure/naming/azurerm' if (-not $legacyNaming -and $parsedVersion -gt [version]$versions[$source]) { continue } $upgrade = $legacyNaming -or $parsedVersion -lt [version]$versions[$source] $calls[$name] = [pscustomobject]@{ Source = if ($legacyNaming) { 'Azure/avm-utl-naming/azure' } else { $call.source } Version = if ($upgrade) { $versions[$source] } else { $version } Upgrade = $upgrade LegacyNaming = $legacyNaming Telemetry = -not $legacyNaming } } $scopes[$target.Path] = [pscustomobject]@{ Target = $target Before = $inspection Calls = $calls Dependencies = @{} Affected = $calls.Count -gt 0 Telemetry = @($calls.Values | Where-Object Telemetry).Count -gt 0 } } foreach ($scope in $scopes.Values) { foreach ($name in $scope.Before.calls.Keys) { $source = $scope.Before.calls[$name].source if ($source.StartsWith('./', [System.StringComparison]::Ordinal) -or $source.StartsWith('../', [System.StringComparison]::Ordinal)) { $path = [System.IO.Path]::TrimEndingDirectorySeparator( [System.IO.Path]::GetFullPath($source, $scope.Target.Path)) if ($scopes.ContainsKey($path)) { $scope.Dependencies[$name] = $path } } } } do { $changed = $false foreach ($scope in $scopes.Values) { foreach ($path in $scope.Dependencies.Values) { if ($scopes[$path].Affected -and -not $scope.Affected) { $scope.Affected = $true $changed = $true } if ($scopes[$path].Telemetry -and -not $scope.Telemetry) { $scope.Telemetry = $true $changed = $true } } } } while ($changed) $ordered = [System.Collections.Generic.List[object]]::new() $visiting = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $visited = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $visit = { param([string] $Path) if ($visited.Contains($Path)) { return } if (-not $visiting.Add($Path)) { throw [AvmConfigurationException]::new("Cannot migrate utility modules in '$Path': cyclic local module calls require review.") } foreach ($dependency in @($scopes[$Path].Dependencies.Values | Sort-Object)) { & $visit $dependency } $null = $visiting.Remove($Path) $null = $visited.Add($Path) $ordered.Add($scopes[$Path]) } foreach ($target in $Targets) { if ($scopes[$target.Path].Affected) { & $visit $target.Path } } do { $previousCount = $visited.Count foreach ($target in $Targets) { if (-not $visited.Contains($target.Path) -and @($scopes[$target.Path].Dependencies.Values | Where-Object { $visited.Contains($_) }).Count -gt 0) { & $visit $target.Path } } } while ($visited.Count -gt $previousCount) foreach ($scope in $ordered) { foreach ($file in Get-ChildItem -LiteralPath $scope.Target.Path -File -Filter '*.tf.json') { Assert-AvmTerraformLocalsOnlyJson -Path $file.FullName ` -ReviewMessage 'Utility module migration requires review of JSON configuration' } } return $ordered.ToArray() } function Invoke-AvmTerraformUtilityPatch { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [object] $Options, [hashtable] $Updates = @{}, [hashtable] $Mappings = @{}, [string[]] $RemoveMaps = @(), [hashtable] $Inputs = @{}, [string] $Requirement = '', [string[]] $RemoveRequirements = @() ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Updates.Count + $Mappings.Count + $RemoveMaps.Count + $Inputs.Count + $Requirement.Length + $RemoveRequirements.Count -eq 0) { return } $variables = [ordered]@{ module_updates = $Updates provider_mappings = $Mappings remove_provider_maps = @($RemoveMaps) new_inputs = $Inputs provider_requirement = $Requirement remove_requirements = @($RemoveRequirements) } $arguments = @('transform', '--tf-dir', $Path, '--mptf-dir', $Options.ProfileDirs['utility-module']) foreach ($entry in $variables.GetEnumerator()) { $json = (ConvertTo-Json -InputObject $entry.Value -Depth 10 -Compress).Replace('${', '$${').Replace('%{', '%%{') $arguments += @('--mptf-var', "$($entry.Key)=$json") } $capabilities = @' alltrue(concat( [for name, body in var.module_updates : try(transform.update_in_place.utility_calls[name].target_block_address == "module.${name}" && transform.update_in_place.utility_calls[name].dynamic_block_body == body, false)], [for name, mapping in var.provider_mappings : try(!transform.update_in_place.utility_provider_mappings[name].merge_object_attributes && transform.update_in_place.utility_provider_mappings[name].target_block_address == "module.${name}" && transform.update_in_place.utility_provider_mappings[name].dynamic_block_body == "providers = ${mapping}\n", false)], [for name in var.remove_provider_maps : try(transform.remove_block_element.utility_provider_maps[name].target_block_address == "module.${name}" && jsonencode(transform.remove_block_element.utility_provider_maps[name].paths) == jsonencode(["providers"]), false)], [for name, mode in var.new_inputs : try(transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].new_block_type == "variable" && jsonencode(transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].labels) == jsonencode([name]) && transform.new_block[name == "location" ? "utility_location_${mode}" : "utility_enable_telemetry"][name].filename == "variables.tf", false)], [for name in var.remove_requirements : try(transform.remove_block_element.utility_requirements[name].target_block_address == "terraform" && jsonencode(transform.remove_block_element.utility_requirements[name].paths) == jsonencode(["required_providers.${name}"]), false)], [length(var.provider_requirement) == 0 || try(transform.update_in_place.utility_requirement["1"].merge_object_attributes && transform.update_in_place.utility_requirement["1"].dynamic_block_body == var.provider_requirement, try(transform.new_block.utility_requirement["1"].body == "\n${var.provider_requirement}", false))] )) '@ $check = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList (@('debug') + $arguments[1..($arguments.Count - 1)] + @('--eval', $capabilities)) ` -WorkingDirectory $Path -EnvVars $Options.EnvVars if ($check.StdOut.Trim() -cne 'true') { throw [AvmConfigurationException]::new("Cannot safely migrate utility modules in '$Path': update MaPoTF and the utility-module profile to support the exact native patches.") } if ($PSCmdlet.ShouldProcess($Path, 'migrate authored utility module calls and proven unused provider requirements')) { $null = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList $arguments ` -WorkingDirectory $Path -EnvVars $Options.EnvVars } } function Get-AvmTerraformUtilityProviderSource { [CmdletBinding()] [OutputType([string[]])] param( [Parameter(Mandatory)] [object] $Call, [Parameter(Mandatory)] [object] $Options, [Parameter(Mandatory)] [hashtable] $Cache ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $key = "$($Call.Source)|$($Call.Version)" if (-not $Cache.ContainsKey($key)) { $path = Join-Path $Options.InspectionRoot ('utility-' + [guid]::NewGuid().ToString('N')) $null = New-Item -ItemType Directory -Path $path -Force -ErrorAction Stop $source = ConvertTo-Json -InputObject $Call.Source -Compress $version = ConvertTo-Json -InputObject $Call.Version -Compress $inputs = if ($Call.Telemetry) { " location = `"eastus`"`n enable_telemetry = false`n" } else { '' } [System.IO.File]::WriteAllText((Join-Path $path 'main.tf'), "module `"utility`" {`n source = $source`n version = $version`n$inputs}`n", [System.Text.UTF8Encoding]::new($false)) $Cache[$key] = @(Get-AvmTerraformUnitTestProviderSource -Path $path ` -ModuleTargets @([pscustomobject]@{ Path = $path }) -Options $Options) } return $Cache[$key] } function Get-AvmTerraformUtilityProviderMapping { [CmdletBinding()] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [object] $Call, [Parameter(Mandatory)] [AllowEmptyCollection()] [string[]] $ProviderSources, [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $Name ) Set-StrictMode -Version 3.0 if (@($ProviderSources | Where-Object { $_ -match '/modtm$' -and $_ -ine 'registry.terraform.io/azure/modtm' }).Count -gt 0) { throw [AvmConfigurationException]::new("Cannot migrate utility module '$Name' in '$Path': an unexpected ModTM provider source requires review.") } if (-not $Call.Contains('providers') -or $ProviderSources -contains 'registry.terraform.io/azure/modtm') { return $null } $mapping = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $Call.providers ` -ProviderNames @() -AllowUnlistedProviders -RetiredProviderNames modtm if ($null -eq $mapping) { throw [AvmConfigurationException]::new( "Cannot migrate utility module '$Name' in '$Path': computed, aliased target keys or cross-provider module bindings require review.") } if (-not $mapping.Changed) { return $null } $remainingCount = $mapping.Bindings.Count - 1 $expression = $mapping.Expression if ($remainingCount -gt 0 -and $ProviderSources -contains 'registry.terraform.io/azure/azapi' -and -not $mapping.Bindings.ContainsKey('azapi')) { $expression = $expression.Insert($expression.LastIndexOf('}'), "`n azapi = azapi`n") $remainingCount++ } return [pscustomobject]@{ Expression = $expression; Changed = $true; RemoveMap = $remainingCount -eq 0 } } function Invoke-AvmTerraformUtilityMigration { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Plans, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $cache = @{} $telemetryPaths = @($Plans | Where-Object Telemetry | ForEach-Object { $_.Target.Path }) foreach ($scope in $Plans | Where-Object Affected) { $updates = @{} $mappings = @{} $removeMaps = [System.Collections.Generic.List[string]]::new() $inputs = @{} $requiresAzapi = $false foreach ($name in $scope.Calls.Keys) { $plan = $scope.Calls[$name] $call = $scope.Before.calls[$name] $body = [System.Collections.Generic.List[string]]::new() if ($plan.Upgrade) { $body.Add('version = "' + $plan.Version + '"') } if ($plan.LegacyNaming) { $body.Add('source = "' + $plan.Source + '"') if ($call.Contains('legacy_mode')) { $body.Add('legacy_mode = false') } } if ($plan.Telemetry) { if (-not $call.Contains('location')) { $body.Add('location = var.location') if (-not $scope.Before.variables.Contains('location')) { $inputs.location = if ($scope.Target.Scope -ceq 'example') { 'example' } else { 'required' } } } if ($scope.Target.Scope -cne 'test' -and -not $call.Contains('enable_telemetry')) { $body.Add('enable_telemetry = var.enable_telemetry') if (-not $scope.Before.variables.Contains('enable_telemetry')) { $inputs.enable_telemetry = 'default' } } } if ($call.Contains('providers')) { $bindings = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $call.providers -ProviderNames @() -AllowUnlistedProviders if ($null -eq $bindings) { throw [AvmConfigurationException]::new("Cannot migrate utility module '$name' in '$($scope.Target.Path)': its provider mapping requires review.") } if ($bindings.Bindings.ContainsKey('modtm')) { $sources = @(Get-AvmTerraformUtilityProviderSource -Call $plan -Options $Options -Cache $cache) $mapping = Get-AvmTerraformUtilityProviderMapping -Call $call -ProviderSources $sources -Path $scope.Target.Path -Name $name if ($null -ne $mapping) { if ($mapping.RemoveMap) { $removeMaps.Add($name) } else { $mappings[$name] = $mapping.Expression } } } } if ($body.Count -gt 0) { $updates[$name] = ($body -join "`n") + "`n" } } $localTelemetryCalls = @($scope.Dependencies.Keys | Where-Object { $scope.Dependencies[$_] -cin $telemetryPaths }) if ($scope.Telemetry -or $localTelemetryCalls.Count -gt 0) { $azapiCalls = @($scope.Before.calls.Keys | Where-Object { ($scope.Calls.ContainsKey($_) -and $scope.Calls[$_].Telemetry) -or $_ -cin $localTelemetryCalls }) foreach ($name in $azapiCalls) { $call = $scope.Before.calls[$name] $expression = if ($mappings.ContainsKey($name)) { $mappings[$name] } elseif ($call.Contains('providers') -and -not $removeMaps.Contains($name)) { $call.providers } else { continue } $mapping = ConvertFrom-AvmTerraformUnitTestProviderMapping -Expression $expression -ProviderNames @() -AllowUnlistedProviders if ($null -eq $mapping) { throw [AvmConfigurationException]::new("Cannot introduce AzAPI for utility module '$name' in '$($scope.Target.Path)': review its provider mapping.") } if (-not $mapping.Bindings.ContainsKey('azapi')) { $mappings[$name] = $expression.Insert($expression.LastIndexOf('}'), "`n azapi = azapi`n") } $requiresAzapi = $true $null = $removeMaps.Remove($name) } } $requirement = '' if ($requiresAzapi -and -not $scope.Before.requirements.Contains('azapi')) { $requirement = "required_providers {`n azapi = {`n source = `"Azure/azapi`"`n version = `"~> 2.12`"`n }`n}`n" } if ($PSCmdlet.ShouldProcess($scope.Target.Path, 'upgrade utility modules before telemetry transformation')) { Invoke-AvmTerraformUtilityPatch -Path $scope.Target.Path -Options $Options -Updates $updates ` -Mappings $mappings -RemoveMaps $removeMaps.ToArray() -Inputs $inputs -Requirement $requirement } } } function Invoke-AvmTerraformUtilityProviderCleanup { [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Plans, [Parameter(Mandatory)] [object[]] $ModuleTargets, [Parameter(Mandatory)] [object] $Options ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $requirements = @{} $sources = $Options.UtilityProviderSources $moduleSources = @{} $manifests = @{} $providerWarnings = @{} $originalRequirements = @{} $requirementPlans = @{} $appliedRequirements = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) $planningPaths = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($scope in $Plans) { $originalRequirements[$scope.Target.Path] = $scope.Before.requirements } foreach ($scope in $Plans) { $path = $scope.Target.Path if (-not $PSCmdlet.ShouldProcess($path, 'retire utility-only provider references using fresh dependency evidence')) { continue } $inspection = Get-AvmTerraformUtilityInspection -Path $path -Options $Options $mappings = @{} $removeMaps = [System.Collections.Generic.List[string]]::new() $requiresAzapi = $false foreach ($name in $scope.Dependencies.Keys) { $dependency = $scope.Dependencies[$name] if (-not $sources.ContainsKey($dependency)) { continue } $mapping = Get-AvmTerraformUtilityProviderMapping -Call $inspection.calls[$name] ` -ProviderSources $sources[$dependency] -Path $path -Name $name if ($null -ne $mapping) { if ($mapping.RemoveMap) { $removeMaps.Add($name) } else { $mappings[$name] = $mapping.Expression } if (-not $mapping.RemoveMap -and $sources[$dependency] -contains 'registry.terraform.io/azure/azapi') { $requiresAzapi = $true } } } $requirement = '' if ($requiresAzapi -and -not $inspection.requirements.Contains('azapi')) { $requirement = "required_providers {`n azapi = {`n source = `"Azure/azapi`"`n version = `"~> 2.12`"`n }`n}`n" } Invoke-AvmTerraformUtilityPatch -Path $path -Options $Options -Mappings $mappings ` -RemoveMaps $removeMaps.ToArray() -Requirement $requirement $inspection = Get-AvmTerraformUtilityInspection -Path $path -Options $Options $moduleSources[$path] = @{} $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests ` -AllowMissingProviderConfiguration -ProviderWarnings $providerWarnings) $requirements[$path] = $inspection.requirements $retire = @( foreach ($provider in @('modtm', 'random')) { $source = if ($provider -ceq 'modtm') { 'registry.terraform.io/azure/modtm' } else { 'registry.terraform.io/hashicorp/random' } if (-not $inspection.requirements.Contains($provider)) { continue } $declared = [string]$inspection.requirements[$provider]['source'] if ($declared.ToLowerInvariant() -cnotin @($source, $source.Substring('registry.terraform.io/'.Length))) { continue } $used = @( foreach ($kind in @('resources', 'data_sources', 'ephemeral')) { $inspection[$kind].Keys | Where-Object { $_.StartsWith("$($provider)_", [System.StringComparison]::Ordinal) } } foreach ($providers in $moduleSources[$path].Values) { $providers | Where-Object { $_ -ceq $source } } foreach ($call in $inspection.calls.Values) { if ($call.Contains('providers') -and $call.providers -cmatch "\b$provider\b") { $provider } } foreach ($file in Get-ChildItem -LiteralPath $path -File -Filter '*.tf') { $text = [System.IO.File]::ReadAllText($file.FullName) if ($text -cmatch ('\bprovider\s+"' + $provider + '"') -or $text -cmatch '\bconfiguration_aliases\s*=') { $provider } } ) if ($used.Count -eq 0) { $provider } } ) if ($retire.Count -gt 0) { Invoke-AvmTerraformUtilityPatch -Path $path -Options $Options -RemoveRequirements $retire $requirements[$path] = Get-AvmTerraformUnitTestRequiredProvider -Path $path -Options $Options $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests ` -AllowMissingProviderConfiguration -ProviderWarnings $providerWarnings) } if ($sources[$path] -contains 'registry.terraform.io/azure/modtm') { $null = Get-AvmTerraformUnitTestModtmRequirementPlan -Path $path -ModuleTargets $ModuleTargets ` -Options $Options -RequiredProviders $requirements -ProviderSources $sources ` -ModuleProviderSources $moduleSources -ModuleManifests $manifests -OriginalRequirements $originalRequirements ` -Plans $requirementPlans -PlanningPaths $planningPaths -BindDependencies foreach ($plan in @($requirementPlans.Values | Where-Object { -not $appliedRequirements.Contains($_.Path) })) { $check = Invoke-AvmProcess -FilePath $Options.ToolPath ` -ArgumentList (@('debug') + $plan.Arguments[1..($plan.Arguments.Count - 1)] + @('--eval', $plan.Capabilities)) ` -WorkingDirectory $plan.Path -EnvVars $Options.EnvVars if ($check.StdOut.Trim() -cne 'true') { throw [AvmConfigurationException]::new("Cannot retain required ModTM bindings in '$($plan.Path)': update the native module profile.") } $null = Invoke-AvmProcess -FilePath $Options.ToolPath -ArgumentList $plan.Arguments -WorkingDirectory $plan.Path -EnvVars $Options.EnvVars $null = $appliedRequirements.Add($plan.Path) if ($plan.Path -cne $path) { Invoke-AvmMapotfTransformTarget -Target ([pscustomobject]@{ Path = $plan.Path; Scope = 'module'; Profiles = @('variable-order', 'common') }) -Options $Options } } } if ($providerWarnings.ContainsKey($path)) { $sources[$path] = @(Get-AvmTerraformUnitTestProviderSource -Path $path -ModuleTargets $ModuleTargets -Options $Options ` -ModuleProviderSources $moduleSources[$path] -ModuleManifests $manifests) } Invoke-AvmMapotfTransformTarget -Target ([pscustomobject]@{ Path = $path; Scope = $scope.Target.Scope; Profiles = @('variable-order', 'common') }) -Options $Options } } # SIG # Begin signature block # MIInJwYJKoZIhvcNAQcCoIInGDCCJxQCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBuDcSkrZu5p+6L # BZT5cSY76FOfIWhR7q3Uz8L3lUtrK6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnDMIIZvwIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIL6YWzWgaTwKpDmNCbu8txsocMHk3Kl/V6zyD0KZZVKkMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAIlS29Hvjgf3wCA/g # iWllrFIssPbHv5Wvfioi1Ex2CIt/mTAWqDgj9GYzyZpfeWs5fg7KrCiHGFS9uLET # wvTLlZL6uyCR1VTZaNbQWaQnAFm264ZDd4f4fQBkROnp5GEVtZ1u0DXPrcn3wZzO # 2aiqpbYhGXC7xR46OysUPEOwE6X5K1urMRk0IcKgAYZH/zCK3gsl0bXEItXLsr/N # VU++ClwqTHqj6FvFNUkaov8nTwOC+uA/cjOrmKNA/+ZmWfEPyHBnSNYOnlUHUtsJ # RfcdyYbauJjkHeaZsju1TYeJWsn5Hv/QaXs2P6e6DqsVZKsdy/HKfraYAp+IlxMF # JmgFqKGCF5MwghePBgorBgEEAYI3AwMBMYIXfzCCF3sGCSqGSIb3DQEHAqCCF2ww # ghdoAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8 # MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCBISs/v1A/c67Ro # 1lkufM9Dfqs/YPXKPqnILm7+GIM8AgIGaqqN92r+GBIyMDI2MTAyMTA4NTQyOS4w # MlowBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl # BgNVBAsTHm5TaGllbGQgVFNTIEVTTjpGMDAyLTA1RTAtRDk0NzElMCMGA1UEAxMc # TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEeowggcgMIIFCKADAgECAhMz # AAACICTh5uAXubSOAAEAAAIgMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5Mzk1MloXDTI3MDUxNzE5Mzk1Mlow # gcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsT # HE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQg # VFNTIEVTTjpGMDAyLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt # U3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANFh # jvKvuKNboJHXvy4q94gy5+61Y6JzGAnAo5x7/YY5Bx66zplZ9fXiLeM2Dck4/swY # kyQ4C5zBYHCIDxRGn5liQaOlWhWQZmxXbtaOovCl/YDCoGwn9POrATskUVrG6nct # 3GPwaN0nKYMVGt1U3+lgegEWuMPUiQgO7xvUJafy2CiaIpFJj5JO8mr32ZWR2mEw # EhQY56BCfLypF3bhUwTTGLw6iaSz1mr0SMN4ocam8BtdQRDqbdxE6gQ+FMT+aLB5 # Af1Oom3cg6yo+/cvy6uiMHvjtcELbLQIMgeUotwuXdkbwPslcqdZMV6feaww8mly # +tDfNQFUmsf+YjdHEeYKH2mkM/S4bX48nCTof/H6x+gb2FbrjGheSnHoMR81k19x # d0ptcXbxcRd0s2fOjdIs1XKZ5AmE2o5IqGdTzhCcqauMSTnjUmK6uUMKQJY72VQF # Qxv3HSfJ9dRs1E9UuA/49MxF1c6jAl1gLMJB83ZmovSzhgjbwXUNufsGDDYTg/UT # 26ey8zMke3OFLZOHdOkJ8Fs4ZqUiUX3H8Mln+yyb/LLNP1i0gV6qZ83EE9MTdo66 # HofGZMgLN9gABO9Y2EFujX1DCyM94D0m+GpMsLYpQ2CteugbLh4NmjSfuMViNmRS # KHVPL7wTqoS9XY1rpnmBTIPlr60cYOarr0KZSId/AgMBAAGjggFJMIIBRTAdBgNV # HQ4EFgQU28ic4IiHEYDyZjuXWDTtQe/I2DMwHwYDVR0jBBgwFoAUn6cVXQBeYl2D # 9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3Nv # ZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUy # MDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDov # L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1l # LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUB # Af8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQAD # ggIBAK0oYG2jUFK+bhYUj4nQ1LJWFTUscvsXd9uNnZ3sXkqf8UJMFlenOsNWXrcU # tE1wgWmcnLj+eWDjevtPmwk92jgyzwANIdAQmcdK7fH1SmMLNEQE+L36ceG8OBHH # /VaYEPqBBRkks6Fw3ZPFbgonKGKcy2IEW2Q1Fna+ZnUwB01dObl3QvCTfDOP79/t # UIJNYJclKio1rdVT/qwAIcj3sS9ufODxt3eHGt/PoJwJW5/vt6C9EeKe2Em7BJF4 # 8/tpWZx69vWdZQgAgJ0F5sdA6vM0h5YEhDC9wVpLdIVz7j2uqvBA4wUNHgVgHNLt # vRB4FXEW4svaJW7goAcw1SEstIPiIosMUE1M61PNOWEa8yAbvsDVyN5CsMwdrqhF # 4wN5QOodSvG/yDshF0iH6HSAMuTM3TEi7OWLQG/sm3JsYltXonFoMXgLNIIgxGkr # n2cjqIqjguCdtAFklbv7pqRiwob+lc+V/E2/YiekPXS1IKQK/D2SvpbX41E34S5l # zNGADBaVwr1clne67+/+jEe07v+SZUiznUX2pXpjZA1d3q1Tjpg+sr3ybZAPKz6W # 8s2KYrR7XFntnUZrAqiEoa+UsAtYOVlCqAd8nfUIHQuUgMjuIvJhOl3aLIqOqyRt # CLIy0gIf5GYf+gKDsk4rRkDdcgxtr1pJaAEXdBnqkbcQZ5CqMIIHcTCCBVmgAwIB # AgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UE # BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc # BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0 # IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1 # WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCC # AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O # 1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZn # hUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t # 1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxq # D89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmP # frVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSW # rAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv # 231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zb # r17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYcten # IPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQc # xWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17a # j54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQAB # MCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQU # n6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEw # QTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9E # b2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/ # MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJ # oEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01p # Y1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYB # BQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9v # Q2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3h # LB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x # 5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74p # y27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1A # oL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbC # HcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB # 9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNt # yo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3 # rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcV # v7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A24 # 5oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lw # Y1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA00wggI1AgEBMIH5oYHRpIHOMIHL # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN # aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT # UyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAJMYD2+mwnqCWoIuYjSuCAbHhgQS # oIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO # BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm # MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcN # AQELBQACBQDugoJcMCIYDzIwMjYxMDIxMDAxNDIwWhgPMjAyNjEwMjIwMDE0MjBa # MHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAO6CglwCAQAwBwIBAAICHUIwBwIBAAIC # E6kwCgIFAO6D09wCAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoDAqAK # MAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAAiM5C0E4 # PBsJjdpiEFGePMdvVtDjLKxO5tWgNl+6P6khk8NP0df/31DUJLuJjB6GTJJ6gY8m # 79dnp2/t4HaFkD42GdNspthYHZ8XOf3uDfENIBqsB1ACwq1cBPykrLpmYp0Rq/hX # DHkpq6mRtQ+Tf1EYZh3VziAa1ejm5YJuWS63FUyDgz6Hf99LK7cS+P+t6K/a/108 # zpoWXYR4OqxlPiWSvmaudRuOphBfyY63FcgJ16scNVU6rIPIIHajuh7T03I1MCIJ # gzbioC0YKSssIkoRB5UUl9I7clhMgO9rCV9+aL4yTvYQrxj/NLMISgY/4Evjt1EG # ngJrIUQdTMVe/DGCBA0wggQJAgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwAhMzAAACICTh5uAXubSOAAEAAAIgMA0GCWCGSAFlAwQCAQUAoIIBSjAa # BgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIKRmY/mo # FW1TbUgdkebQeh3L8aTfaQn28Q+STUb3V+k8MIH6BgsqhkiG9w0BCRACLzGB6jCB # 5zCB5DCBvQQg43u/I6U8DVWqUSnRAhUaU13xLlhYGcqP3su5NYdI7a8wgZgwgYCk # fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiAk4ebgF7m0jgAB # AAACIDAiBCCQJolfDAyt1gANJ7bpq25uGRQ+yFYHerxYT0pWG2pCuTANBgkqhkiG # 9w0BAQsFAASCAgAkwGSOkwOcFEh4pqIl8T80SUvEB1ljXQSUJ3lrnNm89hmGeKh6 # NwmeZBSkA7x5PIlww5sHJjyNIVVGY8Dy4tM9drRRiijFl5O31GXQoqhCp9yd8pEf # uTKhgBIdGM+aqKIAuiOqzfOmttcR5da0zIwLR8Gq9B6sF9/senk7+YZag9V2wOI1 # sOjBN6nkvIIfkS+JUXSB79MHsfEnIN/IpJhfU/9IhzG1llEU62BnmiQ+XLRLuqv2 # LlpORUIgJhMlcl0rpMMTyfv6alMkvJr8MZFnAuNC45lC4dqE/rewXv0ZOtjBYhtt # +AeraMLEyKmMShGPts16ptfel7WX1vwe5BfqPOk5L20L5DTIsKiD6iL/B/GgmVKe # x1lHcOs7k9KbbTmRWjBcBjEQVbhNjYCz2kJ0SzSdr03f2uWoSsqDGbNZZ+q4w91U # Grie7wQkElnAjqk7EOb3FOBQVIkD8gbm7qvdYaIyVbYwsvcvSUu+lqzWMD1Rmg4x # KfIbkvedg34l4ibdqcgyKcCoi7iSJomkza92X+4itMgaB9BifkIUHOmBM6MrKMum # SEIrIDZYRIuKRQpDOYjt3CGd3htQ5ier0JFqcD/eZCuZljd1U7B3Lq6anWobaCZI # gAh6A3jSBsSvq0Hx+FhLSUeNVjlsSi7+TDsDCyrwkInXQuphyqIh88RGmA== # SIG # End signature block |