AzSKPreview.ADO

1.3.0

Framework/Abstracts/ADOSVTBase.ps1

                                class ADOSVTBase: SVTBase {

    hidden [ControlStateExtension] $ControlStateExt;

    hidden [AzSKSettings] $AzSKSettings;

    ADOSVTBase() {

    }

    ADOSVTBase([string] $subscriptionId):

    Base($subscriptionId) {

        $this.CreateInstance();

    }

    ADOSVTBase([string] $subscriptionId, [SVTResource] $svtResource):

    Base($subscriptionId) {        

        $this.CreateInstance($svtResource);

    }

    #Create instance for organization scan 

    hidden [void] CreateInstance() {

        [Helpers]::AbstractClass($this, [SVTBase]);

        Write-Host -ForegroundColor Yellow "No mapping!? Do we use this .ctor?"

        #$this.LoadSvtConfig([SVTMapping]::SubscriptionMapping.JsonFileName);

        $this.ResourceId = $this.SubscriptionContext.Scope;    

    }

    #Add PreviewBaselineControls

    hidden [bool] CheckBaselineControl($controlId) {

        if (($null -ne $this.ControlSettings) -and [Helpers]::CheckMember($this.ControlSettings, "BaselineControls.ResourceTypeControlIdMappingList")) {

            $baselineControl = $this.ControlSettings.BaselineControls.ResourceTypeControlIdMappingList | Where-Object { $_.ControlIds -contains $controlId }

            if (($baselineControl | Measure-Object).Count -gt 0 ) {

                return $true

            }

        }

        return $false

    }

    hidden [bool] CheckPreviewBaselineControl($controlId) {

        if (($null -ne $this.ControlSettings) -and [Helpers]::CheckMember($this.ControlSettings, "PreviewBaselineControls.ResourceTypeControlIdMappingList")) {

            $PreviewBaselineControls = $this.ControlSettings.PreviewBaselineControls.ResourceTypeControlIdMappingList | Where-Object { $_.ControlIds -contains $controlId }

            if (($PreviewBaselineControls | Measure-Object).Count -gt 0 ) {

                return $true

            }

        }

        return $false

    }

    hidden [void] UpdateControlStates([SVTEventContext[]] $ControlResults) {

        if ($null -ne $this.ControlStateExt -and $this.ControlStateExt.HasControlStateWriteAccessPermissions() -and ($ControlResults | Measure-Object).Count -gt 0 -and ($this.ResourceState | Measure-Object).Count -gt 0) {

            $effectiveResourceStates = @();

            if (($this.DirtyResourceStates | Measure-Object).Count -gt 0) {

                $this.ResourceState | ForEach-Object {

                    $controlState = $_;

                    if (($this.DirtyResourceStates | Where-Object { $_.InternalId -eq $controlState.InternalId -and $_.ChildResourceName -eq $controlState.ChildResourceName } | Measure-Object).Count -eq 0) {

                        $effectiveResourceStates += $controlState;

                    }

                }

            }

            else {

                #If no dirty states found then no action needed.

                return;

            }

            #get the uniqueid from the first control result. Here we can take first as it would come here for each resource.

            $id = $ControlResults[0].GetUniqueId();

            $resourceType = $ControlResults[0].FeatureName

            $resourceName = $ControlResults[0].ResourceContext.ResourceName

            $this.ControlStateExt.SetControlState($id, $effectiveResourceStates, $true, $resourceType, $resourceName, $ControlResults[0].ResourceContext.ResourceGroupName)

        }

    }

    #isRescan parameter is added to check if method is called from rescan. state data is fetching for rescan

    hidden [ControlState[]] GetResourceState([bool] $isRescan = $false) {

        if ($null -eq $this.ResourceState) {

            $this.ResourceState = @();

            if ($this.ControlStateExt -and $this.ControlStateExt.HasControlStateReadAccessPermissions()) {

                $resourceType = "";

                if ($this.ResourceContext) {

                    $resourceType = $this.ResourceContext.ResourceTypeName

                }

                #Fetch control state for organization only if project is configured for org spesific control attestation (Check for Organization only, for other resource go inside without project check).

                if($resourceType -ne "Organization" -or $this.ControlStateExt.GetProject())

                {

                    $resourceStates = $this.ControlStateExt.GetControlState($this.ResourceId, $resourceType, $this.ResourceContext.ResourceName, $this.ResourceContext.ResourceGroupName, $isRescan)

                    if ($null -ne $resourceStates) {

                        $this.ResourceState += $resourceStates

                    }

                }        

            }

        }

        return $this.ResourceState;

    }

    hidden [void] PostProcessData([SVTEventContext] $eventContext) {

        $tempHasRequiredAccess = $true;

        $controlState = @();

        $controlStateValue = @();

        try {

            $resourceStates = $this.GetResourceState($false)

            if (!$this.AzSKSettings) 

            {

                $this.AzSKSettings = [ConfigurationManager]::GetAzSKSettings();    

            }        

            $enableOrgControlAttestation = $this.AzSKSettings.EnableOrgControlAttestation

            if (($resourceStates | Measure-Object).Count -ne 0) {

                $controlStateValue += $resourceStates | Where-Object { $_.InternalId -eq $eventContext.ControlItem.Id };

                $controlStateValue | ForEach-Object {

                    $currentControlStateValue = $_;

                    if ($null -ne $currentControlStateValue) {

                        if ($this.IsStateActive($eventContext, $currentControlStateValue)) {

                            $controlState += $currentControlStateValue;

                        }

                        else {

                            #add to the dirty state list so that it can be removed later

                            $this.DirtyResourceStates += $currentControlStateValue;

                        }

                    }

                }

            }

            # If Project name is not configured in ext storage & policy project parameter is not used or attestation repo is not present in policy project, 

            # then 'IsOrgAttestationProjectFound' will be false so that HasRequiredAccess for org controls can be set as false

            elseif (($eventContext.FeatureName -eq "Organization" -and [ControlStateExtension]::IsOrgAttestationProjectFound -eq $false) -and ($enableOrgControlAttestation -eq $true)){

                $tempHasRequiredAccess = $false;

            }

            elseif ($null -eq $resourceStates) {

                $tempHasRequiredAccess = $false;

            }

        }

        catch {

            $this.EvaluationError($_);

        }

        $eventContext.ControlResults |

        ForEach-Object {

            try {

                $currentItem = $_;

                # Copy the current result to Actual Result field

                $currentItem.ActualVerificationResult = $currentItem.VerificationResult;

                #Logic to append the control result with the permissions metadata

                [SessionContext] $sc = $currentItem.CurrentSessionContext;

                $sc.Permissions.HasAttestationWritePermissions = $this.ControlStateExt.HasControlStateWriteAccessPermissions();

                $sc.Permissions.HasAttestationReadPermissions = $this.ControlStateExt.HasControlStateReadAccessPermissions();

                # marking the required access as false if there was any error reading the attestation data

                $sc.Permissions.HasRequiredAccess = $sc.Permissions.HasRequiredAccess -and $tempHasRequiredAccess;

                # Disable the fix control feature

                if (-not $this.GenerateFixScript) {

                    $currentItem.EnableFixControl = $false;

                }

                if ($currentItem.StateManagement.CurrentStateData -and $currentItem.StateManagement.CurrentStateData.DataObject -and $eventContext.ControlItem.DataObjectProperties) {

                    $currentItem.StateManagement.CurrentStateData.DataObject = [Helpers]::SelectMembers($currentItem.StateManagement.CurrentStateData.DataObject, $eventContext.ControlItem.DataObjectProperties);

                }

                if ($controlState.Count -ne 0) {

                    # Process the state if its available

                    $childResourceState = $controlState | Where-Object { $_.ChildResourceName -eq $currentItem.ChildResourceName } | Select-Object -First 1;

                    if ($childResourceState) {

                        # Skip passed ones from State Management

                        if ($currentItem.ActualVerificationResult -ne [VerificationResult]::Passed) {

                            #compare the states

                            if (($childResourceState.ActualVerificationResult -eq $currentItem.ActualVerificationResult) -and $childResourceState.State) {

                                $currentItem.StateManagement.AttestedStateData = $childResourceState.State;

                                # Compare dataobject property of State

                                if ($null -ne $childResourceState.State.DataObject) {

                                    if ($currentItem.StateManagement.CurrentStateData -and $null -ne $currentItem.StateManagement.CurrentStateData.DataObject) {

                                        $currentStateDataObject = [JsonHelper]::ConvertToJsonCustom($currentItem.StateManagement.CurrentStateData.DataObject) | ConvertFrom-Json

                                        try {

                                            # Objects match, change result based on attestation status

                                            if ($eventContext.ControlItem.AttestComparisionType -and $eventContext.ControlItem.AttestComparisionType -eq [ComparisionType]::NumLesserOrEqual) {

                                                if ([Helpers]::CompareObject($childResourceState.State.DataObject, $currentStateDataObject, $true, $eventContext.ControlItem.AttestComparisionType)) {

                                                    $this.ModifyControlResult($currentItem, $childResourceState);

                                                }

                                            }

                                            else {

                                                if ([Helpers]::CompareObject($childResourceState.State.DataObject, $currentStateDataObject, $true)) {

                                                    $this.ModifyControlResult($currentItem, $childResourceState);

                                                }

                                            }

                                        }

                                        catch {

                                            $this.EvaluationError($_);

                                        }

                                    }

                                }

                                else {

                                    if ($currentItem.StateManagement.CurrentStateData) {

                                        if ($null -eq $currentItem.StateManagement.CurrentStateData.DataObject) {

                                            # No object is persisted, change result based on attestation status

                                            $this.ModifyControlResult($currentItem, $childResourceState);

                                        }

                                    }

                                    else {

                                        # No object is persisted, change result based on attestation status

                                        $this.ModifyControlResult($currentItem, $childResourceState);

                                    }

                                }

                            }

                        }

                        else {

                            #add to the dirty state list so that it can be removed later

                            $this.DirtyResourceStates += $childResourceState

                        }

                    }

                }

            }

            catch {

                $this.EvaluationError($_);

            }

        };

    }

    # State Machine implementation of modifying verification result

    hidden [void] ModifyControlResult([ControlResult] $controlResult, [ControlState] $controlState) {

        # No action required if Attestation status is None OR verification result is Passed

        if ($controlState.AttestationStatus -ne [AttestationStatus]::None -or $controlResult.VerificationResult -ne [VerificationResult]::Passed) {

            $controlResult.AttestationStatus = $controlState.AttestationStatus;

            $controlResult.VerificationResult = [Helpers]::EvaluateVerificationResult($controlResult.VerificationResult, $controlState.AttestationStatus);

        }

    }

    #Function to validate attestation data expiry validation

    hidden [bool] IsStateActive([SVTEventContext] $eventcontext, [ControlState] $controlState) {

        try {

            $expiryIndays = $this.CalculateExpirationInDays([SVTEventContext] $eventcontext, [ControlState] $controlState);

            #Validate if expiry period is passed

            #Added a condition so as to expire attested controls that were in 'Error' state.

            if (($expiryIndays -ne -1 -and $controlState.State.AttestedDate.AddDays($expiryIndays) -lt [DateTime]::UtcNow) -or ($controlState.ActualVerificationResult -eq [VerificationResult]::Error)) {

                return $false

            }

            else {

                $controlState.State.ExpiryDate = ($controlState.State.AttestedDate.AddDays($expiryIndays)).ToString("MM/dd/yyyy");

                return $true

            }

        }

        catch {

            #if any exception occurs while getting/validating expiry period, return true.

            $this.EvaluationError($_);

            return $true

        }

    }

    hidden [int] CalculateExpirationInDays([SVTEventContext] $eventcontext, [ControlState] $controlState) {

        try {

            #For exempt controls, either the no. of days for expiry were provided at the time of attestation or a default of 6 motnhs was already considered,

            #therefore skipping this flow and calculating days directly using the expiry date already saved.

            if ($controlState.AttestationStatus -ne [AttestationStatus]::ApprovedException) {

                #Get controls expiry period. Default value is zero

                $controlAttestationExpiry = $eventcontext.controlItem.AttestationExpiryPeriodInDays

                $controlSeverity = $eventcontext.controlItem.ControlSeverity

                $controlSeverityExpiryPeriod = 0

                $defaultAttestationExpiryInDays = [Constants]::DefaultControlExpiryInDays;

                $expiryInDays = -1;

                if (($eventcontext.ControlResults | Measure-Object).Count -gt 0) {

                    $isControlInGrace = $eventcontext.ControlResults.IsControlInGrace;

                }

                else {

                    $isControlInGrace = $true;

                }

                if ([Helpers]::CheckMember($this.ControlSettings, "AttestationExpiryPeriodInDays") `

                        -and [Helpers]::CheckMember($this.ControlSettings.AttestationExpiryPeriodInDays, "Default") `

                        -and $this.ControlSettings.AttestationExpiryPeriodInDays.Default -gt 0) {

                    $defaultAttestationExpiryInDays = $this.ControlSettings.AttestationExpiryPeriodInDays.Default

                }            

                #Expiry in the case of WillFixLater or StateConfirmed/Recurring Attestation state will be based on Control Severity.

                if ($controlState.AttestationStatus -eq [AttestationStatus]::NotAnIssue -or $controlState.AttestationStatus -eq [AttestationStatus]::NotApplicable) {

                    $expiryInDays = $defaultAttestationExpiryInDays;

                }

                else {

                    # Expire WillFixLater if GracePeriod has expired

                    if (-not($isControlInGrace) -and $controlState.AttestationStatus -eq [AttestationStatus]::WillFixLater) {

                        $expiryInDays = 0;

                    }

                    else {

                        if ($controlAttestationExpiry -ne 0) {

                            $expiryInDays = $controlAttestationExpiry

                        }

                        elseif ([Helpers]::CheckMember($this.ControlSettings, "AttestationExpiryPeriodInDays")) {

                            $controlsev = $this.ControlSettings.ControlSeverity.PSobject.Properties | Where-Object Value -eq $controlSeverity | Select-Object -First 1

                            $controlSeverity = $controlsev.name                                    

                            #Check if control severity has expiry period

                            if ([Helpers]::CheckMember($this.ControlSettings.AttestationExpiryPeriodInDays.ControlSeverity, $controlSeverity) ) {

                                $expiryInDays = $this.ControlSettings.AttestationExpiryPeriodInDays.ControlSeverity.$controlSeverity

                            }

                            #If control item and severity does not contain expiry period, assign default value

                            else {

                                $expiryInDays = $defaultAttestationExpiryInDays

                            }

                        }

                        #Return -1 when expiry is not defined

                        else {

                            $expiryInDays = -1

                        }

                    }

                }                

            }

            else {                

                #Calculating the expiry in days for exempt controls

                if ([String]::IsNullOrEmpty($controlState.State.ExpiryDate))

                {

                    $expiryPeriod = $this.ControlSettings.DefaultAttestationPeriodForExemptControl

                    $expiryDate = ($controlState.State.AttestedDate).AddDays($expiryPeriod)

                }

                else

                {

                    $expiryDate = [DateTime]$controlState.State.ExpiryDate

                }

                # #Adding 1 explicitly to the days since the differnce below excludes the expiryDate and that also needs to be taken into account.

                # $expiryInDays = ($expiryDate - $controlState.State.AttestedDate).Days + 1

                # #Calculating the expiry in days for exempt controls

                # $expiryDate = [DateTime]$controlState.State.ExpiryDate

                # #Adding 1 explicitly to the days since the differnce below excludes the expiryDate and that also needs to be taken into account.

                $expiryInDays = ($expiryDate - $controlState.State.AttestedDate).Days + 1

            }                                

        }

        catch {

            #if any exception occurs while getting/validating expiry period, return -1.

            $this.EvaluationError($_);

            $expiryInDays = -1

        }

        return $expiryInDays

    }

    [SVTEventContext[]] FetchStateOfAllControls() {

        [SVTEventContext[]] $resourceSecurityResult = @();

        if (-not $this.ValidateMaintenanceState()) {

            if ($this.GetApplicableControls().Count -eq 0) {

                $this.PublishCustomMessage("No security controls match the input criteria specified", [MessageType]::Warning);

            }

            else {

                $this.EvaluationStarted();

                $resourceSecurityResult += $this.GetControlsStateResult();

                if (($resourceSecurityResult | Measure-Object).Count -gt 0) {

                    $this.EvaluationCompleted($resourceSecurityResult);

                }

            }

        }

        return $resourceSecurityResult;

    }

    hidden [SVTEventContext[]] GetControlsStateResult() {

        [SVTEventContext[]] $automatedControlsResult = @();

        $this.DirtyResourceStates = @();

        try {

            $this.GetApplicableControls() |

            ForEach-Object {

                $eventContext = $this.FetchControlState($_);

                #filter controls if there is no state found

                if ($eventContext) {

                    $eventContext.ControlResults = $eventContext.ControlResults | Where-Object { $_.AttestationStatus -ne [AttestationStatus]::None }

                    if ($eventContext.ControlResults) {

                        $automatedControlsResult += $eventContext;

                    }

                }

            };

        }

        catch {

            $this.EvaluationError($_);

        }

        return $automatedControlsResult;

    }

 #isRescan parameter is added to check if method is called from rescan. 

    hidden [SVTEventContext] FetchControlState([ControlItem] $controlItem, $isRescan = $false) {

        [SVTEventContext] $singleControlResult = $this.CreateSVTEventContextObject();

        $singleControlResult.ControlItem = $controlItem;

        $controlState = @();

        $controlStateValue = @();

        try {

            $resourceStates = $this.GetResourceState($isRescan);

            if (($resourceStates | Measure-Object).Count -ne 0) {

                $controlStateValue += $resourceStates | Where-Object { $_.InternalId -eq $singleControlResult.ControlItem.Id };

                $controlStateValue | ForEach-Object {

                    $currentControlStateValue = $_;

                    if ($null -ne $currentControlStateValue) {

                        #assign expiry date

                        $expiryIndays = $this.CalculateExpirationInDays($singleControlResult, $currentControlStateValue);

                        if ($expiryIndays -ne -1) {

                            $currentControlStateValue.State.ExpiryDate = ($currentControlStateValue.State.AttestedDate.AddDays($expiryIndays)).ToString("MM/dd/yyyy");

                        }

                        $controlState += $currentControlStateValue;

                    }

                }

            }

        }

        catch {

            $this.EvaluationError($_);

        }

        if (($controlState | Measure-Object).Count -gt 0) {

        #Added check to resolve duplicate log issue in rescan

            if (!$isRescan) {

               $this.ControlStarted($singleControlResult);

            }

            if ($controlItem.Enabled -eq $false) {

                $this.ControlDisabled($singleControlResult);

            }

            else {

                $controlResult = $this.CreateControlResult($controlItem.FixControl);

                $singleControlResult.ControlResults += $controlResult;          

                $singleControlResult.ControlResults | 

                ForEach-Object {

                    try {

                        $currentItem = $_;

                        if ($controlState.Count -ne 0) {

                            # Process the state if it's available

                            $childResourceState = $controlState | Where-Object { $_.ChildResourceName -eq $currentItem.ChildResourceName } | Select-Object -First 1;

                            if ($childResourceState) {

                                $currentItem.StateManagement.AttestedStateData = $childResourceState.State;

                                $currentItem.AttestationStatus = $childResourceState.AttestationStatus;

                                $currentItem.ActualVerificationResult = $childResourceState.ActualVerificationResult;

                                $currentItem.VerificationResult = [VerificationResult]::NotScanned

                            }

                        }

                    }

                    catch {

                        $this.EvaluationError($_);

                    }

                };

            }

            #Added check to resolve duplicate log issue in rescan

            if (!$isRescan) {

               $this.ControlCompleted($singleControlResult);

            }

        }

        return $singleControlResult;

    }

    hidden [void] GetManualSecurityStatusExt($arg) {

        $this.PostProcessData($arg);

    }

    hidden [void] RunControlExt($singleControlResult) {

        $this.PostProcessData($singleControlResult);

    }

    hidden [void] EvaluateAllControlsExt($resourceSecurityResult) {

        $this.PostEvaluationCompleted($resourceSecurityResult);

    }

    hidden [void] PostEvaluationCompleted([SVTEventContext[]] $ControlResults) {        

        $this.UpdateControlStates($ControlResults);

        $BugLogParameterValue =$this.InvocationContext.BoundParameters["AutoBugLog"]

        #perform bug logging after control scans for the current resource

        if ($BugLogParameterValue) 

        {

            #added check azuretable check here, if ((azuretable is used for storing bug info and scan mode is CA) OR azuretable bug info is disabed) then only allow bug logging

            $scanSource = [AzSKSettings]::GetInstance().GetScanSource();

            $isAzureTableEnabled = [Helpers]::CheckMember($this.ControlSettings.BugLogging, "UseAzureStorageAccount");

            if (!$isAzureTableEnabled -or ($isAzureTableEnabled -and ($scanSource -eq "CA")) )

            {

                if (($ControlResults.ControlResults.VerificationResult -contains "Failed") -or ($ControlResults.ControlResults.VerificationResult -contains "Verify")) {

                    $this.BugLoggingPostEvaluation($ControlResults, $BugLogParameterValue)

                }

            }

        }

    }

    #function to call AutoBugLog class for performing bug logging

    hidden [void] BugLoggingPostEvaluation([SVTEventContext []] $ControlResults,[string] $BugLogParameterValue)

    {

        $AutoBugLog = [AutoBugLog]::AutoBugInstance

        if (!$AutoBugLog) {

            #Settting initial value true so will evaluate in all different cmds.(Powershell keeping static variables in memory in next command also.)

            [BugLogPathManager]::checkValidPathFlag = $true;

            $AutoBugLog = [AutoBugLog]::GetInstance($this.SubscriptionContext.SubscriptionName, $this.InvocationContext, $this.ControlStateExt, $BugLogParameterValue);

        }

        $AutoBugLog.LogBugInADO($ControlResults)

    }

}

# SIG # Begin signature block

# MIIjlQYJKoZIhvcNAQcCoIIjhjCCI4ICAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCe5o6hT/SguJ4u

# i/luhEtjo6s2DqxoJ0iFPwqkDVCLoqCCDYUwggYDMIID66ADAgECAhMzAAABiK9S

# 1rmSbej5AAAAAAGIMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjAwMzA0MTgzOTQ4WhcNMjEwMzAzMTgzOTQ4WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQCSCNryE+Cewy2m4t/a74wZ7C9YTwv1PyC4BvM/kSWPNs8n0RTe+FvYfU+E9uf0

# t7nYlAzHjK+plif2BhD+NgdhIUQ8sVwWO39tjvQRHjP2//vSvIfmmkRoML1Ihnjs

# 9kQiZQzYRDYYRp9xSQYmRwQjk5hl8/U7RgOiQDitVHaU7BT1MI92lfZRuIIDDYBd

# vXtbclYJMVOwqZtv0O9zQCret6R+fRSGaDNfEEpcILL+D7RV3M4uaJE4Ta6KAOdv

# V+MVaJp1YXFTZPKtpjHO6d9pHQPZiG7NdC6QbnRGmsa48uNQrb6AfmLKDI1Lp31W

# MogTaX5tZf+CZT9PSuvjOCLNAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUj9RJL9zNrPcL10RZdMQIXZN7MG8w

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzQ1ODM4NjAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# ACnXo8hjp7FeT+H6iQlV3CcGnkSbFvIpKYafgzYCFo3UHY1VHYJVb5jHEO8oG26Q

# qBELmak6MTI+ra3WKMTGhE1sEIlowTcp4IAs8a5wpCh6Vf4Z/bAtIppP3p3gXk2X

# 8UXTc+WxjQYsDkFiSzo/OBa5hkdW1g4EpO43l9mjToBdqEPtIXsZ7Hi1/6y4gK0P

# mMiwG8LMpSn0n/oSHGjrUNBgHJPxgs63Slf58QGBznuXiRaXmfTUDdrvhRocdxIM

# i8nXQwWACMiQzJSRzBP5S2wUq7nMAqjaTbeXhJqD2SFVHdUYlKruvtPSwbnqSRWT

# GI8s4FEXt+TL3w5JnwVZmZkUFoioQDMMjFyaKurdJ6pnzbr1h6QW0R97fWc8xEIz

# LIOiU2rjwWAtlQqFO8KNiykjYGyEf5LyAJKAO+rJd9fsYR+VBauIEQoYmjnUbTXM

# SY2Lf5KMluWlDOGVh8q6XjmBccpaT+8tCfxpaVYPi1ncnwTwaPQvVq8RjWDRB7Pa

# 8ruHgj2HJFi69+hcq7mWx5nTUtzzFa7RSZfE5a1a5AuBmGNRr7f8cNfa01+tiWjV

# Kk1a+gJUBSP0sIxecFbVSXTZ7bqeal45XSDIisZBkWb+83TbXdTGMDSUFKTAdtC+

# r35GfsN8QVy59Hb5ZYzAXczhgRmk7NyE6jD0Ym5TKiW5MIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCFWYwghViAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAAGIr1LWuZJt6PkAAAAA

# AYgwDQYJYIZIAWUDBAIBBQCggbAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIBGI

# FYgIBExRStzL7RiSpgIk6D1Bzss11U2IYT0wrsAgMEQGCisGAQQBgjcCAQwxNjA0

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEcgBpodHRwczovL3d3dy5taWNyb3NvZnQu

# Y29tIDANBgkqhkiG9w0BAQEFAASCAQBEPkYwZ3ppFw/pFxG5g488S5RNOxUXIQD5

# rIKzARikVv5/WsQgLsNAzagAxWX8rdM/ybSUOUH7NAppY2yj+7r/Zy1e1i3SUySS

# o5+jcszGqkC9EmLhKB3uNjo58bci0Cej81a3ezoys2+/WhlGcbpWfhtNnFB066rP

# 0kAWVYHLR8jrvHroIJKmN7rSCbYe6ODNmf6TnvWrNUW6dZwEZUOsQDhzTiVUOaDz

# 8/1lytKO2kmnov0dKS2JIwJCQcblvCfYo6ukq/nRk2uI0L+5WqCMPhaABmPZqVBl

# IcqMNQNh+7wScqngfCYS25zTciL0Xl4hTTlQXLhrfjwGuJsyD3dyoYIS7jCCEuoG

# CisGAQQBgjcDAwExghLaMIIS1gYJKoZIhvcNAQcCoIISxzCCEsMCAQMxDzANBglg

# hkgBZQMEAgEFADCCAVUGCyqGSIb3DQEJEAEEoIIBRASCAUAwggE8AgEBBgorBgEE

# AYRZCgMBMDEwDQYJYIZIAWUDBAIBBQAEIN+Bqmhrdy8CkbPNAhMOauM4RHs319EK

# 0pV2xd1YC/USAgZf29NgFXIYEzIwMjEwMTE1MDUzODI3LjQ4MVowBIACAfSggdSk

# gdEwgc4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKTAnBgNV

# BAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1ZXJ0byBSaWNvMSYwJAYDVQQLEx1U

# aGFsZXMgVFNTIEVTTjo0NjJGLUUzMTktM0YyMDElMCMGA1UEAxMcTWljcm9zb2Z0

# IFRpbWUtU3RhbXAgU2VydmljZaCCDkEwggT1MIID3aADAgECAhMzAAABJMvNAqEX

# cFyaAAAAAAEkMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD

# QSAyMDEwMB4XDTE5MTIxOTAxMTQ1N1oXDTIxMDMxNzAxMTQ1N1owgc4xCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKTAnBgNVBAsTIE1pY3Jvc29m

# dCBPcGVyYXRpb25zIFB1ZXJ0byBSaWNvMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVT

# Tjo0NjJGLUUzMTktM0YyMDElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg

# U2VydmljZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCbKjgNnhjv

# MlnRNAtx7X3N5ZZkSfUFULyWsVJ1pnyMsSITimg1q3OQ1Ikf0/3gg8UG5TIRm7wH

# 8sjBtoB3nuzFz11CegIFcanYnt050JvnrUTKeAPUR5pLpTeP3QEgL+CWOc4lTg/X

# xjnQv01FD7TTn9DEuO3kp0GQ87Mjd5ssxK0K1q4IWNFAyRpx5n8Vm3Vm1iiVL5FM

# DUKsl5G/SqQdiEDn8cqYbqWMVzWH94PdKdw1mIHToBRCNsR9BHHWzNkSS+R0WRip

# BSSorKT7cuLlEBYhDo8AY3uMGlv0kLRLHASZ+sz2nfkpW2CVt+bHhVmM6/5qiu2f

# 7eYoTYJucFECAwEAAaOCARswggEXMB0GA1UdDgQWBBS7HdFyrGKIhDxvypLA1lD/

# wGRSsDAfBgNVHSMEGDAWgBTVYzpcijGQ80N7fEYbxTNoWoVtVTBWBgNVHR8ETzBN

# MEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0

# cy9NaWNUaW1TdGFQQ0FfMjAxMC0wNy0wMS5jcmwwWgYIKwYBBQUHAQEETjBMMEoG

# CCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01p

# Y1RpbVN0YVBDQV8yMDEwLTA3LTAxLmNydDAMBgNVHRMBAf8EAjAAMBMGA1UdJQQM

# MAoGCCsGAQUFBwMIMA0GCSqGSIb3DQEBCwUAA4IBAQBo3QzNuNRgzdflwA4U7f3e

# 2CcGlwdg6ii498cBiSrTpWKO3qqz5pvgHAk4hh6y/FLY80R59inLwcVuyD24S3JE

# dSie4y1tC5JptweR1qlxRJCRM4vG7nPtIC4eAMKcXgovu0mTFv7xpFAVpRuvuepR

# 91gIde328lv1HTTJCV/LBBk83Xi7nCGPF59FxeIrcE32xt4YJgEpEAikeMqvWCTM

# yPqlmvx9J92fxU3cQcw2j2EWwqOD5T3Nz2HWfPV80sihD1A6Y5HhjpS9taDPs7CI

# 58I211F3ysegNyOesG3MTrSJHyPMLKYFDxcG1neV0liktv+TW927sUOVczcSUhQL

# MIIGcTCCBFmgAwIBAgIKYQmBKgAAAAAAAjANBgkqhkiG9w0BAQsFADCBiDELMAkG

# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx

# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9z

# b2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcNMTAwNzAxMjEz

# NjU1WhcNMjUwNzAxMjE0NjU1WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkdDbx3EYo6IOz8E5f1

# +n9plGt0VBDVpQoAgoX77XxoSyxfxcPlYcJ2tz5mK1vwFVMnBDEfQRsalR3OCROO

# fGEwWbEwRA/xYIiEVEMM1024OAizQt2TrNZzMFcmgqNFDdDq9UeBzb8kYDJYYEby

# WEeGMoQedGFnkV+BVLHPk0ySwcSmXdFhE24oxhr5hoC732H8RsEnHSRnEnIaIYqv

# S2SJUGKxXf13Hz3wV3WsvYpCTUBR0Q+cBj5nf/VmwAOWRH7v0Ev9buWayrGo8noq

# CjHw2k4GkbaICDXoeByw6ZnNPOcvRLqn9NxkvaQBwSAJk3jN/LzAyURdXhacAQVP

# Ik0CAwEAAaOCAeYwggHiMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBTVYzpc

# ijGQ80N7fEYbxTNoWoVtVTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNV

# HQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo

# 0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29m

# dC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5j

# cmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDCB

# oAYDVR0gAQH/BIGVMIGSMIGPBgkrBgEEAYI3LgMwgYEwPQYIKwYBBQUHAgEWMWh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9QS0kvZG9jcy9DUFMvZGVmYXVsdC5odG0w

# QAYIKwYBBQUHAgIwNB4yIB0ATABlAGcAYQBsAF8AUABvAGwAaQBjAHkAXwBTAHQA

# YQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZIhvcNAQELBQADggIBAAfmiFEN4sbgmD+B

# cQM9naOhIW+z66bM9TG+zwXiqf76V20ZMLPCxWbJat/15/B4vceoniXj+bzta1RX

# CCtRgkQS+7lTjMz0YBKKdsxAQEGb3FwX/1z5Xhc1mCRWS3TvQhDIr79/xn/yN31a

# PxzymXlKkVIArzgPF/UveYFl2am1a+THzvbKegBvSzBEJCI8z+0DpZaPWSm8tv0E

# 4XCfMkon/VWvL/625Y4zu2JfmttXQOnxzplmkIz/amJ/3cVKC5Em4jnsGUpxY517

# IW3DnKOiPPp/fZZqkHimbdLhnPkd/DjYlPTGpQqWhqS9nhquBEKDuLWAmyI4ILUl

# 5WTs9/S/fmNZJQ96LjlXdqJxqgaKD4kWumGnEcua2A5HmoDF0M2n0O99g/DhO3EJ

# 3110mCIIYdqwUB5vvfHhAN/nMQekkzr3ZUd46PioSKv33nJ+YWtvd6mBy6cJrDm7

# 7MbL2IK0cs0d9LiFAR6A+xuJKlQ5slvayA1VmXqHczsI5pgt6o3gMy4SKfXAL1Qn

# IffIrE7aKLixqduWsqdCosnPGUFN4Ib5KpqjEWYw07t0MkvfY3v1mYovG8chr1m1

# rtxEPJdQcdeh0sVV42neV8HR3jDA/czmTfsNv11P6Z0eGTgvvM9YBS7vDaBQNdrv

# CScc1bN+NR4Iuto229Nfj950iEkSoYICzzCCAjgCAQEwgfyhgdSkgdEwgc4xCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKTAnBgNVBAsTIE1pY3Jv

# c29mdCBPcGVyYXRpb25zIFB1ZXJ0byBSaWNvMSYwJAYDVQQLEx1UaGFsZXMgVFNT

# IEVTTjo0NjJGLUUzMTktM0YyMDElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3Rh

# bXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAlwPlNCq+Un54UfxLe/wKS1Xc4nqg

# gYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYw

# JAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0B

# AQUFAAIFAOOrOu0wIhgPMjAyMTAxMTUwMTQ5MzNaGA8yMDIxMDExNjAxNDkzM1ow

# dDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA46s67QIBADAHAgEAAgIKqzAHAgEAAgIQ

# jzAKAgUA46yMbQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAow

# CAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBBQUAA4GBAGCTRy9+EjdR

# HkH6eGWVUqzgCLRlAbxEq8/8mQGBSl4i/XUD9O/vTdhvtv2c+BqsXK6I4GdNkJOU

# Bc6rTH5PHUXdDZQyLu3MZWkYIZXXJ68F4b5g32FmS1kLdXOM8nnjNv8m4BIYCTo/

# OL7t73vWYiunE4/LlWFAiO+6yGjpYGn2MYIDDTCCAwkCAQEwgZMwfDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0

# IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAEky80CoRdwXJoAAAAAASQwDQYJYIZI

# AWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG

# 9w0BCQQxIgQgAXmpJ7amLedA4rVo+wlsQpc7VHUlGWpYu8Vho1puj8YwgfoGCyqG

# SIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBiOOHoohqL+X7Xa/25jp1wTrQxYlYGLszi

# s/nATirjIDCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMz

# AAABJMvNAqEXcFyaAAAAAAEkMCIEIIKG0iNigx2zYmkfWbkjvjHmxHHslyP/CJjo

# SLvuIYNbMA0GCSqGSIb3DQEBCwUABIIBAFm/PqQXtxxbnaVmhFnX8cD8oF+cz2SO

# YfBIuMDzqVHcXwcIrVJuHVeqARH+N2QXjqHosdYE17nTNTdSu88wvQW1HgkPEsfd

# J2LW9S7SF9JrUAzMIwAq+SyCEJ0S0favWzhC3jyTO5MyD7qar9W2ouh/CiZZLNER

# 1Jrgg7xJTnuOKM/Puvi+8CfRa0L+WBJRGBaTR05eX3FpvhAk+EVw+Q6+Eo264yOs

# ZyZ1D48Fd/VZ5ZUZFQUTpLvdI37sDJf68ZeqRgUaCJAIJzMwTwu4WXkd5v7xgnFK

# 3GYEMjWjYJTMVRjafmpNH/ZURdsm5u/bt0iXDq38iMKs/3zH7zuquj0=

# SIG # End signature block