Engines/Terraform/Initialize-AvmTerraformPolicyStage.ps1
|
function Assert-AvmTerraformPolicyPath { [CmdletBinding()] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $StageRoot ) $root = [System.IO.Path]::GetFullPath($StageRoot) $full = [System.IO.Path]::GetFullPath($Path) $relative = [System.IO.Path]::GetRelativePath($root, $full) if ([System.IO.Path]::IsPathRooted($relative) -or @($relative -split '[\\/]' | Where-Object { $_ -eq '..' }).Count -gt 0) { throw [AvmConfigurationException]::new( "Policy configuration '$full' is outside its isolated staging directory. Use module sources inside the repository or downloaded by Terraform.") } $current = $root foreach ($segment in @('.') + @($relative -split '[\\/]')) { $current = Join-Path $current $segment $item = Get-Item -LiteralPath $current -Force -ErrorAction Stop if (($item.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { throw [AvmConfigurationException]::new( "Policy configuration '$full' traverses a link. Use regular files in the isolated module tree so provider safeguards cannot change another scope.") } } } function Get-AvmTerraformPolicyEnvironment { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $StageRoot, [hashtable] $Environment = @{} ) foreach ($name in @('TF_CLI_ARGS', 'TF_CLI_ARGS_init', 'TF_CLI_ARGS_providers', 'TF_CLI_ARGS_validate', 'TF_CLI_ARGS_plan', 'TF_CLI_ARGS_show')) { $value = if ($Environment.ContainsKey($name)) { $Environment[$name] } else { [Environment]::GetEnvironmentVariable($name) } if (-not [string]::IsNullOrWhiteSpace([string]$value)) { throw [AvmConfigurationException]::new( "Unset '$name' for policy checks; extra Terraform arguments can bypass isolated planning. Supply inputs through .tfvars or TF_VAR_* instead.") } } $result = @{} + $Environment $result.TF_DATA_DIR = Join-Path $StageRoot 'data' $result.ARM_SKIP_PROVIDER_REGISTRATION = 'true' $result.ARM_RESOURCE_PROVIDER_REGISTRATIONS = 'legacy' return $result } function Read-AvmTerraformPolicyConfiguration { [CmdletBinding()] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [string] $Path, [Parameter(Mandatory)] [string] $StageRoot, [Parameter(Mandatory)] [string] $ConftestPath ) Assert-AvmTerraformPolicyPath -Path $Path -StageRoot $StageRoot $directoryFiles = @(Get-ChildItem -LiteralPath $Path -File -Force | Where-Object { -not $_.Name.StartsWith('.') }) if (@($directoryFiles | Where-Object { $_.Name -cmatch '\.(tfquery|tfmigrate)\.(hcl|json)$' }).Count -gt 0) { throw [AvmConfigurationException]::new( "Policy configuration '$Path' contains query or state-migration files outside normal provider override precedence. Use a dedicated example without those files for policy checks.") } $files = @($directoryFiles | Where-Object { ($_.Name -clike '*.tf' -or $_.Name -clike '*.tf.json') -and -not $_.Name.EndsWith('~') }) $documents = [System.Collections.Generic.List[object]]::new() $hclFiles = @($files | Where-Object { $_.Name -clike '*.tf' }) foreach ($file in $files) { Assert-AvmTerraformPolicyPath -Path $file.FullName -StageRoot $StageRoot } if ($hclFiles.Count -gt 0) { $parsed = Invoke-AvmProcess -FilePath $ConftestPath ` -ArgumentList (@('parse', '--parser', 'hcl2', '--combine') + @($hclFiles.FullName)) ` -WorkingDirectory $Path -IgnoreExitCode if ($parsed.ExitCode -ne 0) { throw [AvmConfigurationException]::new( "Cannot parse Terraform configuration in '$Path' for provider-registration safeguards. Correct the HCL before retrying policy checks.") } try { $records = ConvertFrom-Json -InputObject $parsed.StdOut -AsHashtable -Depth 100 -NoEnumerate -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new("The HCL parser returned invalid JSON for '$Path'. Reinstall the configured Conftest tool.") } if ($records -isnot [array] -or $records.Count -ne $hclFiles.Count) { throw [AvmConfigurationException]::new("The HCL parser did not return every Terraform file in '$Path'. Policy planning is blocked.") } $remaining = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($file in $hclFiles) { $null = $remaining.Add($file.FullName) } foreach ($record in $records) { if ($record -isnot [System.Collections.IDictionary] -or -not $record.Contains('path') -or -not $record.Contains('contents') -or $record.path -isnot [string] -or -not $remaining.Remove($record.path) -or $record.contents -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("The HCL parser returned an incomplete or ambiguous file set for '$Path'. Policy planning is blocked.") } $documents.Add($record.contents) } } foreach ($file in @($files | Where-Object { $_.Name -clike '*.tf.json' })) { try { $document = ConvertFrom-Json -InputObject ([System.IO.File]::ReadAllText($file.FullName)) -AsHashtable -Depth 100 -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new("Cannot parse Terraform JSON configuration '$($file.FullName)' for provider safeguards.") } if ($document -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Terraform JSON configuration '$($file.FullName)' must be an object.") } $documents.Add($document) } $sources = [System.Collections.Generic.Dictionary[string, string]]::new([System.StringComparer]::Ordinal) $providers = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) $hasModules = $false $hasBackend = $false foreach ($document in $documents) { if ($document.Contains('module')) { if ($document.module -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect module declarations in '$Path'. Correct the configuration before policy checks.") } if ($document.module.Count -gt 0) { $hasModules = $true } } if ($document.Contains('terraform')) { foreach ($terraform in @($document.terraform)) { if ($terraform -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect a Terraform block in '$Path' for provider safeguards.") } if ($terraform.Contains('backend') -or $terraform.Contains('cloud')) { $hasBackend = $true } if (-not $terraform.Contains('required_providers')) { continue } foreach ($requirements in @($terraform.required_providers)) { if ($requirements -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect required_providers in '$Path'. Use explicit provider source addresses.") } foreach ($name in $requirements.Keys) { $requirement = $requirements[$name] $source = "hashicorp/$name" if ($requirement -is [System.Collections.IDictionary] -and $requirement.Contains('source')) { if ($requirement.source -isnot [string] -or $requirement.source -cnotmatch '^(?:[a-zA-Z0-9.-]+/)?[a-zA-Z0-9-]+/[a-zA-Z0-9-]+$') { throw [AvmConfigurationException]::new("Provider '$name' in '$Path' must have a static source address for policy safeguards.") } $source = $requirement.source } if (($source -split '/').Count -eq 2) { $source = "registry.terraform.io/$source" } $source = $source.ToLowerInvariant() if ($sources.ContainsKey($name) -and $sources[$name] -cne $source) { throw [AvmConfigurationException]::new("Provider '$name' in '$Path' has conflicting source declarations. Consolidate them before policy checks.") } $sources[$name] = $source } } } } if (-not $document.Contains('provider')) { continue } if ($document.provider -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect provider blocks in '$Path'. Policy planning is blocked.") } foreach ($name in $document.provider.Keys) { foreach ($provider in @($document.provider[$name])) { if ($provider -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Cannot inspect provider '$name' in '$Path'. Policy planning is blocked.") } $alias = '' if ($provider.Contains('alias')) { if ($provider.alias -isnot [string] -or $provider.alias -cnotmatch '^[\p{L}_][\p{L}\p{N}_-]*$') { throw [AvmConfigurationException]::new("Provider '$name' in '$Path' must have a static alias for policy safeguards.") } $alias = $provider.alias } $key = "$name`0$alias" $configured = @($provider.Keys | Where-Object { $_ -cnotin @('alias', 'version') }).Count -gt 0 if ($providers.ContainsKey($key)) { $configured = $configured -or $providers[$key].Configured } $providers[$key] = [pscustomobject]@{ Name = $name; Alias = $alias; Configured = $configured } } } } return [pscustomobject]@{ Path = $Path Files = $files Sources = $sources Providers = @($providers.Values) HasModules = $hasModules HasBackend = $hasBackend } } function Get-AvmTerraformPolicyProviderSetting { [CmdletBinding()] [OutputType([hashtable])] param( [Parameter(Mandatory)] [string] $Payload ) try { $schema = ConvertFrom-Json -InputObject $Payload -AsHashtable -Depth 100 -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new('Terraform returned invalid provider schemas. Policy planning is blocked; reinitialize the configured providers.') } if ($schema -isnot [System.Collections.IDictionary] -or -not $schema.Contains('provider_schemas') -or $schema.provider_schemas -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new('Terraform did not return provider_schemas. Policy planning is blocked.') } $settings = @{} foreach ($address in $schema.provider_schemas.Keys) { $source = $address.ToLowerInvariant() $providerName = ($source -split '/')[-1] if ($providerName -notin @('azurerm', 'azapi')) { continue } if ($source -notin @('registry.terraform.io/hashicorp/azurerm', 'registry.terraform.io/azure/azapi')) { throw [AvmConfigurationException]::new("Policy checks cannot enforce automatic registration for '$address'. Use the official AzureRM or AzAPI provider source.") } $provider = $schema.provider_schemas[$address] if ($provider -isnot [System.Collections.IDictionary] -or -not $provider.Contains('provider') -or $provider.provider -isnot [System.Collections.IDictionary] -or -not $provider.provider.Contains('block') -or $provider.provider.block -isnot [System.Collections.IDictionary] -or -not $provider.provider.block.Contains('attributes') -or $provider.provider.block.attributes -isnot [System.Collections.IDictionary]) { throw [AvmConfigurationException]::new("Provider '$address' has no inspectable configuration schema. Policy planning is blocked.") } $attributes = $provider.provider.block.attributes $required = @{ skip_provider_registration = 'bool' } $values = @{ skip_provider_registration = $true } if ($providerName -eq 'azurerm' -and $attributes.Contains('resource_provider_registrations')) { $required = @{ resource_provider_registrations = 'string'; resource_providers_to_register = @('list', 'string') } $values = @{ resource_provider_registrations = 'none'; resource_providers_to_register = @() } if ($attributes.Contains('skip_provider_registration')) { $required.skip_provider_registration = 'bool' $values.skip_provider_registration = $false } } foreach ($name in $required.Keys) { if (-not $attributes.Contains($name) -or $attributes[$name] -isnot [System.Collections.IDictionary] -or -not $attributes[$name].Contains('optional') -or $attributes[$name].optional -isnot [bool] -or -not $attributes[$name].optional -or -not $attributes[$name].Contains('type') -or (ConvertTo-Json -InputObject $attributes[$name].type -Compress) -cne (ConvertTo-Json -InputObject $required[$name] -Compress)) { throw [AvmConfigurationException]::new("Provider '$address' has an unsupported '$name' schema. Select a supported AzureRM/AzAPI version before policy checks.") } } $settings[$source] = $values } return $settings } function Set-AvmTerraformPolicyProviderOverride { [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Low')] param( [Parameter(Mandatory)] $Configuration, [Parameter(Mandatory)] [hashtable] $Settings ) $providers = [ordered]@{} foreach ($provider in $Configuration.Providers) { if (-not $provider.Configured) { continue } $source = if ($Configuration.Sources.ContainsKey($provider.Name)) { $Configuration.Sources[$provider.Name] } else { "registry.terraform.io/hashicorp/$($provider.Name)".ToLowerInvariant() } if (-not $Settings.ContainsKey($source)) { if (($source -split '/')[-1] -in @('azurerm', 'azapi')) { throw [AvmConfigurationException]::new("Provider '$($provider.Name)' in '$($Configuration.Path)' does not match a protected provider schema. Declare its official required_providers source.") } continue } $values = @{} + $Settings[$source] if ($provider.Alias) { $values.alias = $provider.Alias } if (-not $providers.Contains($provider.Name)) { $providers[$provider.Name] = @() } $providers[$provider.Name] += $values } if ($providers.Count -eq 0) { return } $lastName = '' $lastKey = '' foreach ($file in $Configuration.Files) { if ($file.Name -cnotmatch '(^override|_override)\.tf(\.json)?$') { continue } $key = [Convert]::ToHexString([System.Text.Encoding]::UTF8.GetBytes($file.Name)) if ([System.StringComparer]::Ordinal.Compare($key, $lastKey) -gt 0) { $lastName = $file.Name $lastKey = $key } } $name = if ($lastName) { "$lastName.avm_override.tf.json" } else { 'avm_provider_safety_override.tf.json' } $destination = Join-Path $Configuration.Path $name if ([System.Text.Encoding]::UTF8.GetByteCount($name) -gt 255 -or (Test-Path -LiteralPath $destination)) { throw [AvmConfigurationException]::new("Cannot create a final provider override in '$($Configuration.Path)'. Shorten or rename the authored override filenames.") } if (-not $PSCmdlet.ShouldProcess($destination, 'Disable automatic Azure provider registration in the staged policy configuration')) { throw [System.OperationCanceledException]::new('Policy provider safeguards were not approved; planning is blocked.') } $json = ConvertTo-Json -InputObject @{ provider = $providers } -Depth 20 [System.IO.File]::WriteAllText($destination, $json.ReplaceLineEndings("`n") + "`n", [System.Text.UTF8Encoding]::new($false)) } function Initialize-AvmTerraformPolicyStage { [CmdletBinding()] param( [Parameter(Mandatory)] [string] $WorkingDirectory, [Parameter(Mandatory)] [string] $StageRoot, [Parameter(Mandatory)] [string] $TerraformPath, [Parameter(Mandatory)] [string] $ConftestPath, [Parameter(Mandatory)] [hashtable] $EnvVars ) $root = Read-AvmTerraformPolicyConfiguration -Path $WorkingDirectory -StageRoot $StageRoot -ConftestPath $ConftestPath if ($root.HasBackend) { throw [AvmConfigurationException]::new( "Policy example '$WorkingDirectory' declares a backend or cloud execution. Use a local, backend-free example so provider safeguards are enforced in isolated staging.") } $null = Invoke-AvmTerraformInit -TerraformPath $TerraformPath -WorkingDirectory $WorkingDirectory ` -EnvVars $EnvVars -NoColor -SkipPluginCacheLock -PreserveDependencySelections ` -Label 'terraform init (policy safeguards)' $directories = @() $manifestPath = Join-Path -Path $EnvVars.TF_DATA_DIR -ChildPath 'modules' -AdditionalChildPath 'modules.json' if (Test-Path -LiteralPath $manifestPath -PathType Leaf) { Assert-AvmTerraformPolicyPath -Path $manifestPath -StageRoot $StageRoot $payload = [System.IO.File]::ReadAllText($manifestPath) $directories = @(ConvertFrom-AvmTerraformModuleManifest -Payload $payload -WorkingDirectory $WorkingDirectory) $manifest = ConvertFrom-Json -InputObject $payload -AsHashtable $rootRecord = @($manifest.Modules | Where-Object { $_.Key -ceq '' })[0] $manifestRoot = [System.IO.Path]::GetFullPath($rootRecord.Dir, $WorkingDirectory) if ([System.IO.Path]::GetRelativePath($WorkingDirectory, $manifestRoot) -cne '.') { throw [AvmConfigurationException]::new('The installed module manifest does not identify this isolated example as its root. Policy planning is blocked.') } } elseif ($root.HasModules) { throw [AvmConfigurationException]::new("Terraform did not produce an installed module manifest for '$WorkingDirectory'. Policy planning is blocked.") } $configurations = [System.Collections.Generic.List[object]]::new() $configurations.Add($root) foreach ($directory in $directories) { if ($directory -ceq $WorkingDirectory) { continue } $configurations.Add((Read-AvmTerraformPolicyConfiguration -Path $directory -StageRoot $StageRoot -ConftestPath $ConftestPath)) } $schema = Invoke-AvmProcess -FilePath $TerraformPath -ArgumentList @('providers', 'schema', '-json') ` -WorkingDirectory $WorkingDirectory -EnvVars $EnvVars -Label 'terraform provider schemas (policy safeguards)' $settings = Get-AvmTerraformPolicyProviderSetting -Payload $schema.StdOut $azureRm = 'registry.terraform.io/hashicorp/azurerm' # Implicit and inherited configurations use skip=true/legacy; explicit modern blocks use skip=false/none. if ($settings.ContainsKey($azureRm) -and -not $settings[$azureRm].ContainsKey('skip_provider_registration')) { $EnvVars.ARM_RESOURCE_PROVIDER_REGISTRATIONS = 'none' } foreach ($configuration in $configurations) { Set-AvmTerraformPolicyProviderOverride -Configuration $configuration -Settings $settings } $validation = Invoke-AvmProcess -FilePath $TerraformPath -ArgumentList @('validate', '-json') ` -WorkingDirectory $WorkingDirectory -EnvVars $EnvVars -Label 'terraform validate (policy safeguards)' -IgnoreExitCode try { $validated = ConvertFrom-Json -InputObject $validation.StdOut -AsHashtable -ErrorAction Stop } catch [System.ArgumentException] { throw [AvmConfigurationException]::new('Terraform returned invalid validation output after provider safeguards; policy planning is blocked.') } if ($validation.ExitCode -ne 0 -or $validated -isnot [System.Collections.IDictionary] -or -not $validated.Contains('valid') -or $validated.valid -isnot [bool] -or -not $validated.valid) { throw [AvmConfigurationException]::new( "Terraform configuration in '$WorkingDirectory' failed validation after provider safeguards. Run terraform validate on the source and correct the configuration; no policy plan was started.") } if ($settings.Count -gt 0) { Write-AvmLog 'policy: automatic AzureRM/AzAPI provider registration is disabled in the staged plan.' -Level Info | Out-Null } } # SIG # Begin signature block # MIInNwYJKoZIhvcNAQcCoIInKDCCJyQCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD4qjuY9OlUuiZ8 # PJVYxqum36JRIQutVegIeqoOEqBcJ6CCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIPJXOd//RRCmXSZxVbqx8tH1gsj+ # sffOwxUkELkyb6jbMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEAJL2+mOdzb3aveZ7eVBrzoTh9u8ARzWIKAyVoovVPt+HsyPSxfXVkxaBihsVv # NRdPtXaFUPU51tHNFy0IJ35m3D9r1Jex6JwM5x13SHj+AcS5C6bIwysvWqKJT7uH # k+H8E5oHAmuO7+2jNC5dewgclji6Z0g0cj0sQAwcUke7cEk3/xej6uEsV3iGShGu # 8WarBfJhtqXTfW++mld0eb2m/kEWz6yBmU9Z9PpvOXVk0guRbAtyPaPhTDpi9wfX # WA0W9+dvscJGV2xPr/73S9QAa0rZAbcASjChKAZB/j3puKlgUNP6GX6Bhb9bbCwp # Am8Qyc7znbJqDMkzcI1dirPp2qGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wG # CSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG # 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCDI+MaYrw0/qGu5HfrGDqbZGyfLndqne8mpZkD2fJd7FQIGateAsDuaGBMy # MDI2MTAyMTE3MTM1Ni4wMjVaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTQwMC0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHq # MIIHIDCCBQigAwIBAgITMwAAAijwpYfX88geQAABAAACKDANBgkqhkiG9w0BAQsF # ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMDZa # Fw0yNzA1MTcxOTQwMDZaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTQwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQCujvbk/sqcCSReZaJfCuf1NwRcc7XknhE6wkLofkNj1mxE # Ag35qy2xcFjgjartVvA09W8QHcpyMqVSXOTxNHJsmk0qP2CDLvUAulWg7aS5oBOR # pEX1oz3n0R2nPqeH0IHK1zJxjxaHW21AbuZ0Z+wM3WYNzkBlcHmVe03ZG7rlk28h # 72r5P5ME8FGpFmYW5Hl7psKbgLEfrYAitpttsb+sZsBUI+hMKl4uLJYotKyZv1ew # OIinBfRU8QosivjofaBezUf9NdV+iGrWh321WnSsK3A/Jl6GLtbSWXcJWULgbxuq # nobPK+YlB3174TMWTgX4YWjG7o0Otz/pjHNCKBbB788dynhLdGY6B08E9+4SGrRp # sty4iJHOydHCA5M4i5yYRwsdut+gmvxIpT8yNXJcjJCg0vO8mv/nFY9Wytv2qmCt # CFFivGUWqU20/sUeRooQZGiQOJQn095Cj3isIsvRP8KU7hN/EDI8HVsb/NPzMFLv # RznrRnj0TOnDiOTUcnYwmk+XfoS1owskcCCCwHnbC00D58z83y7K5ZJB745hcn4C # E2nR3e6RGsr42y5qtt6Mdz/s7MTnDS2UmVHWX1X/HZe3UlX8gj/t63L50xIPqkRC # BEdM1ADNUaSfo9OQiKb/bj1diZCGTfEDUBBLop1mhkwIF82faplV2busZ+U4kQID # AQABo4IBSTCCAUUwHQYDVR0OBBYEFKrJpYz48tzouvVkBVthASFpQ93DMB8GA1Ud # IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp # bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI # KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA # MA0GCSqGSIb3DQEBCwUAA4ICAQCQ6NfLmrRahgVtgWg383GaS07fHyod6bhcUONt # 2tet+6BaNuH0r7ABkVHheOpxBdrUrOEYVEaIii9dK3cuZLNmp1iUAx/VbmOZYl7x # z+tNrjCWqrg1jQmq0oRB8iE4QJpwNhGP67oY5huYIU0D4lhDoahqfgKJn/0Bk+9U # KDPw5XlUYmreFmJlj9YQzcPPep8MxBXxh/Y5I7vQeRaW5SjtiLQOLRk3ggvraDs5 # Sf49MJV6/BwxXC2rvUfEFX6SUDooqKIE9NgVIRq0RZu7Ot0i0Is+HvPP0hB6KwOx # Mg1SWKOfTtFpWpdo8MJvgKCHkPpXEzgprP+pyIHuO7gVRlSTsbYBFLh2yId/itM4 # uYL0R+2SSBBTpSSRthrGuEmElI5BCHMxzMg/oqHSPwZAIAkM2C4xxi0St7qMuA+m # +ZzFYkfoF41QoSJn+HjqhqWYQ0m/SO9/KnJRJJUwMd5TiMnjZ+E/DJiUry5udiWy # Qpvfj2hQFI0djhahoAXDazeEciLF2uEnTur9UfjcwOun/oMY+ULftnOi2jKLMrre # V097akzz/JxpnDgYJU/tgU7fQflg7IqiL9+0276+joQHo21mVeY5YD8Kh/kUaY6J # m/OTM88G7evTz/qnRumxovTjMStvpbAHNRhmSTdIPTV32CyuxDKS/V5a5iwA+f9V # iBo+wjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN # AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw # BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw # MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx # EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT # FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt # U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk # 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c # T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG # UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz # rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2 # LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV # wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd # EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0 # gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph # AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ # YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb # GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ # KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP # EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw # UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr # BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw # DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY # xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp # L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB # BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v # cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B # AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5 # 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD # sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo # 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ # iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK # PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI # LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk # ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9 # af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba # ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/ # OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIIC # NQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0 # b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh # dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG # A1UECxMeblNoaWVsZCBUU1MgRVNOOkE0MDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN # aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQB1rbmF # kzS7qAK1Oav08AUnhbNIUqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7oNQZDAiGA8yMDI2MTAyMTE0NTMyNFoY # DzIwMjYxMDIyMTQ1MzI0WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDug1BkAgEA # MAcCAQACAguqMAcCAQACAhj9MAoCBQDuhKHkAgEAMDYGCisGAQQBhFkKBAIxKDAm # MAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcN # AQELBQADggEBAAoM+ItsknUopTCix7cfjlxW5HEolrBaEikc+yqWpRQoPQmRkK5Q # jDs0/nx4SqfT1VuvyES38GnpNF7ZA2Ro6Iq/gdSaXhG8fuGYnr83zLR8q1/g3QuY # zeCJLTjkJG6qvzMRjTMdn8ajdYrgYdjVrvEMpygJG+UYcNr3KB/lr3cKRfNZvdkv # bZOY1UhRu9TnG1YHmK3Q0sWSFlkXPZhd6dnkgw+rFBVUanHxNnfurqKRS0XOnHs1 # F8OUtE2f6usSFcNY7oeZYudNh+CuC+EDDj0rZsy9eDKHBh3N+5EweaNLXzlhX5MO # svJ8tG7W2M5pnUFGDzGdNKvaSbr834uQVq0xggQNMIIECQIBATCBkzB8MQswCQYD # VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe # MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv # ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAijwpYfX88geQAABAAACKDANBglg # hkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqG # SIb3DQEJBDEiBCBk0xqo93NcTuxWRYidlr9WsSA1ia3tAWnoV1on7Y3PJTCB+gYL # KoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIFWxikZRYGNf4oEVZK1eT45H+3GQ3/qx # V75VwuBt+iLXMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC # EzMAAAIo8KWH1/PIHkAAAQAAAigwIgQgmJYmHSpqEQNlgjh39mD3lqCFZ3RQT7FB # sOvHP3+dbiEwDQYJKoZIhvcNAQELBQAEggIAKXcLeWQzEFv6rYO2zj6qZ/IDRFPR # s7g5sT7rvySMKrRreAx1Ef/ntyIqe77yWDxwMliyCMqghA9sQmupo6YLKX+WLNs5 # TupUMU5h1IIJk/P5MakBiIQ0yrAmjBFGcDpzZhyoW8RH5PTNJ3zkcZwFCc/3CyQN # +M+HYO3dZO28vIQEl6Adws7Rp69QFQDeR3NJaArCGTq/dYwCAfRfKYe+EwBjoQvm # pe1sqok9WpuOKZ1DOu6d2S/sDbyJ8FfMg+jx2Uu3LYcHQ3GsFnjDmrrSKSm1v8Ht # AO9Z+ITsIRRDnG3iUpj9yBHtFbuPnrZPLUxqLU3Ei7ssA/Ez6p0EyQt2y39r2wA0 # cLHTLDYV1qZKf+5sOjP5Ybkej4me/onWozzEN7Y86eOheREjQHCFeexizXlUP0a5 # +O9PQQJAlc6rBtWuQPvPCXJyoFH76cppOPxsKKe8UUBAAxch5ZfOUgIS1BpT+QaS # AFPislwvxE0BhB0NMQ8qOHk95xvpZZpwdYMNngkQM7y88XCHSjLZ2Uz1HylyLr04 # ivHOhw4BfBS42EFjz7N5tNC32I9REHJuRStTCJrDZUL7OFxnHyYmKM+Firq/jQQH # iR4JVs3/YgJ3CbnxK9I/vs813mtE5eapqr5E6HupmVLwH1PLvMZ3Pcs6G7Uzlftj # bnKqsfueyc9wHCI= # SIG # End signature block |