AzStackHci.DiagnosticSettings

0.6.4

Private/AzStackHci.Connectivity.Helpers.ps1

                                # ////////////////////////////////////////////////////////////////////////////

# Function to test version of PowerShell

# This function checks the version of PowerShell and returns an error if the version is greater than 5.1.x

Function Test-PowerShellVersion5 {

    param

    (

        [Parameter(Mandatory = $false)]

        [bool]$NoVerboseOutput = $false

    )

    begin {

        # Check if the PowerShell version is 5.1.x

        $versionMaximum = [version]'5.1.99999.999'

        # Get the PowerShell version from the PSVersionTable

        $PowerShellVersion = [version]$PSVersionTable.PSVersion

    }

    process {

        # Compare the PowerShell version with the maximum version

        if($PowerShellVersion -gt $versionMaximum) {

            # PowerShell version is greater than 5.1.x, return an error

            if(-not($NoVerboseOutput)){

                Write-Verbose "PowerShell version $($PSVersionTable.PSVersion.ToString()) detected."

            }

            # $PowerShell5 = $false

            $PowerShell5 = $false

        } else {

            # PowerShell version is 5.1.x or lower, continue

            if(-not($NoVerboseOutput)){

                Write-Verbose "PowerShell version $($PSVersionTable.PSVersion.ToString()) detected."

            }

            # $PowerShell5 = $true

            $PowerShell5 = $true

        }

    } # End of process block

    end {

        # Write-Debug "Completed Test-PowerShellVersion5 function"

        return $PowerShell5

    }

}

# ////////////////////////////////////////////////////////////////////////////

# This function converts a hashtable to a string representation

Function Convert-HashTableToString {

    param

    (

        [Parameter(Mandatory = $true)]

        [System.Collections.Hashtable]

        $HashTable

    )

    begin {

        # Write-Verbose "Starting Convert-HashTableToString function"

    }

    process {

        $HashString = "@{"

        $Keys = $HashTable.keys

        foreach ($Key in $Keys)

        {

            $v = $HashTable[$key]

            if ($key -match "\s")

            {

                $HashString += "`"$key`"" + "=" + "`"$v`"" + ";"

            }

            else

            {

                $HashString += $key + "=" + "`"$v`"" + ";"

            }

        }

        $HashString += "}"

    } # End of process block

    end {

        # Write-Debug "Completed Convert-HashTableToString function"

        return $HashString

    }

}

# ////////////////////////////////////////////////////////////////////////////    

# Function to extract domains from URLs

Function Get-DomainFromURL {

    param (

        [string]$url

    )

    begin {

        # Write-Verbose "Starting Get-DomainFromURL function"

    }

    process {

        # Remove the protocol (http:// or https://) and extract the domain and port

        $url = $url -replace "^https?://", ""

        # Check if the URL contains a port number

        # If the URL contains a port number, extract it

        if ($url -match ":(\d+)$") {

            $port = [int]($url -replace ".*:(\d+)$", '$1')

            $url = $url -replace ":(\d+)$", ""

        } else {

            $port = $null

        }

        $domain = $url -split '/' | Select-Object -First 1

        return @{ Domain = $domain; Port = $port }

    }

    end {

        # Write-Debug "Completed Get-DomainFromURL function"

    }

}

# ////////////////////////////////////////////////////////////////////////////

# Helper function to normalize URL with protocol based on port

# This is a private helper function for Test-Layer7Connectivity

Function Initialize-WebRequestUrl {

    param (

        [Parameter(Mandatory=$true)]

        [string]$url,

        [Parameter(Mandatory=$true)]

        [int]$port

    )

    # Check if the port is 80 for HTTP or port 443, 8084 or 8443 for HTTPS and update the URL accordingly

    if ($port -eq $script:PORT_HTTPS -or $port -eq $script:PORT_HTTPS_ALT1 -or $port -eq $script:PORT_HTTPS_ALT2) {

        if($url -notmatch "^https://") {

            # If the URL does not start with https://, add it

            $url = "https://$url"

        }

    } elseif($port -eq $script:PORT_HTTP) {

        if($url -notmatch "^http://") {

            # If the URL does not start with http://, add it

            $url = "http://$url"

        }

    } else {

        # For custom ports, use http as the default

        if($url -notmatch "^http") {

            Write-Verbose "Custom port $port detected, using http as the default"

            $url = "http://$url"

        }

    }

    return $url

}

# ////////////////////////////////////////////////////////////////////////////

# Helper function to register a redirected URL into the RedirectedResults array

# Prevents duplicates by checking both RedirectedResults and Results arrays.

# Called from the redirect-handling section of Test-Layer7Connectivity.

Function Add-RedirectedUrlToResults {

    param (

        [Parameter(Mandatory=$true)]

        [string]$RedirectedURL,

        [Parameter(Mandatory=$true)]

        [string]$FullRedirectUrl,

        [Parameter(Mandatory=$true)]

        [int]$DestinationPort,

        [Parameter(Mandatory=$true)]

        [string]$OriginalURL,

        [Parameter(Mandatory=$true)]

        [int]$OriginalPort

    )

    Write-HostAzS "Redirected to '$FullRedirectUrl'" -ForegroundColor Yellow

    # Update the Note on the original result to show the redirect target (only if not already set)

    $ResultsToUpdate = $script:Results | Where-Object { $_.url -eq $OriginalURL -and ($_.Port -eq $OriginalPort) }

    ForEach ($ResultToUpdate in $ResultsToUpdate) {

        if (-not($ResultToUpdate.Note -like "Redirects to *")) {

            if ($ResultToUpdate.Note) {

                $ResultToUpdate.Note = "Redirects to '$($RedirectedURL)' - $($ResultToUpdate.Note)"

            } else {

                $ResultToUpdate.Note = "Redirects to '$($RedirectedURL)'"

            }

        }

    }

    if ([string]::IsNullOrWhiteSpace($RedirectedURL)) {

        Write-Warning "Redirected URL is null for $FullRedirectUrl, skipping"

        return

    }

    # Check if the URL already exists in the Results array

    [bool]$RedirectExistsInResults = $false

    ForEach ($result in $script:Results) {

        if ((Get-DomainFromURL -url $result.url).Domain -eq $RedirectedURL -and ($result.Port -eq $DestinationPort)) {

            Write-Debug "Redirected URL already exists in Results array, skipping"

            $RedirectExistsInResults = $true

            break

        }

    }

    # Add to RedirectedResults if it doesn't already exist in either array

    # Note: -notcontains works correctly on an empty @() array, no special first-entry handling needed

    if (($script:RedirectedResults.url -notcontains $RedirectedURL) -and (-not($RedirectExistsInResults))) {

        $OriginalResult = $script:Results | Where-Object { ((Get-DomainFromURL -url $_.URL).Domain -eq (Get-DomainFromURL -url $OriginalURL).Domain) -and ($_.Port -eq $OriginalPort) } | Select-Object -First 1

        $script:RedirectedResults.Add([PSCustomObject]@{

            RowID = 0

            url = $RedirectedURL

            redirect = $FullRedirectUrl

            Port = $DestinationPort

            ArcGateway = $false

            IsWildcard = $false

            Source = "Redirect for $($OriginalResult.Source)"

            Note = "Redirected URL from $($OriginalURL) - $($OriginalResult.Note)"

            TCPStatus = ""

            IPAddress = ""

            Layer7Status = ""

            Layer7Response = ""

            Layer7ResponseTime = ""

            CertificateSubject = ""

            CertificateIssuer = ""

            CertificateThumbprint = ""

            IntermediateCertificateIssuer = ""

            IntermediateCertificateSubject = ""

            IntermediateCertificateThumbprint = ""

            RootCertificateIssuer = ""

            RootCertificateSubject = ""

            RootCertificateThumbprint = ""

        }) | Out-Null

        Write-Debug "Added $($script:RedirectedResults[-1]) to RedirectedResults array"

    } else {

        Write-Debug "Redirected URL $RedirectedURL already exists in RedirectedResults or Results array, skipping"

    }

}

# ////////////////////////////////////////////////////////////////////////////

# Helper function to initialize ServerCertificateValidationCallback for SSL bypass

# This is a private helper function for Test-Layer7Connectivity

Function Initialize-CertificateCallback {

    # IMPORTANT: This sets a PROCESS-WIDE callback on ServicePointManager.ServerCertificateValidationCallback

    # that accepts all certificates. This is intentional — the module needs to connect to endpoints even when 

    # SSL inspection replaces certificates, so it can detect and report SSL inspection to the user.

    # The callback is reset to $null in the end block of Test-Layer7Connectivity and Test-AzureLocalConnectivity.

    # Check if ServerCertificateValidationCallback class is already defined

    if (-not ([System.Management.Automation.PSTypeName]'ServerCertificateValidationCallback').Type) {

        # Define the ServerCertificateValidationCallback class

        # This class is used to bypass SSL certificate validation, to allow for SSL inspection detection

        $CertCallback = @"

using System;

using System.Net;

using System.Net.Security;

using System.Security.Cryptography.X509Certificates;

public class ServerCertificateValidationCallback

{

    public static void Ignore()

    {

        if(ServicePointManager.ServerCertificateValidationCallback == null)

        {

            ServicePointManager.ServerCertificateValidationCallback += 

                delegate

                (

                    Object obj, 

                    X509Certificate certificate, 

                    X509Chain chain, 

                    SslPolicyErrors errors

                )

                {

                    return true;

                };

        }

    }

}

"@

        Add-Type $CertCallback

    }

    # Call the Ignore method to bypass SSL certificate validation

    [ServerCertificateValidationCallback]::Ignore()

}

# ////////////////////////////////////////////////////////////////////////////

# Helper to set all connectivity result fields on a URL object to skip/N/A values.

# Used when a URL is skipped, wildcarded, or DNS resolution fails.

Function Set-UrlObjectSkipFields {

    param(

        [Parameter(Mandatory)][PSCustomObject]$UrlObject,

        [Parameter(Mandatory)][string]$TCPStatus,

        [Parameter(Mandatory)][string]$Layer7Status,

        [string]$IPAddress = "N/A",

        [string]$Layer7Response = "N/A",

        [string]$Layer7ResponseTime = "N/A"

    )

    $UrlObject.TCPStatus = $TCPStatus

    $UrlObject.IPAddress = $IPAddress

    $UrlObject.Layer7Status = $Layer7Status

    $UrlObject.Layer7Response = $Layer7Response

    $UrlObject.Layer7ResponseTime = $Layer7ResponseTime

    $UrlObject.CertificateIssuer = "N/A"

    $UrlObject.CertificateSubject = "N/A"

    $UrlObject.CertificateThumbprint = "N/A"

    $UrlObject.IntermediateCertificateIssuer = "N/A"

    $UrlObject.IntermediateCertificateSubject = "N/A"

    $UrlObject.IntermediateCertificateThumbprint = "N/A"

    $UrlObject.RootCertificateIssuer = "N/A"

    $UrlObject.RootCertificateSubject = "N/A"

    $UrlObject.RootCertificateThumbprint = "N/A"

}

# ////////////////////////////////////////////////////////////////////////////

# Helper to copy connectivity test results from an Invoke-EndpointConnectivityTest

# result hashtable to a URL result object.

Function Copy-ConnectivityResultsToUrlObject {

    param(

        [Parameter(Mandatory)][PSCustomObject]$UrlObject,

        [Parameter(Mandatory)][hashtable]$TestResult

    )

    $UrlObject.TCPStatus = $TestResult.TCPStatus

    $UrlObject.IPAddress = $TestResult.IPAddress

    $UrlObject.Layer7Status = $TestResult.Layer7Status

    $UrlObject.Layer7Response = $TestResult.Layer7Response

    $UrlObject.Layer7ResponseTime = $TestResult.Layer7ResponseTime

    $UrlObject.CertificateIssuer = $TestResult.CertificateIssuer

    $UrlObject.CertificateSubject = $TestResult.CertificateSubject

    $UrlObject.CertificateThumbprint = $TestResult.CertificateThumbprint

    $UrlObject.IntermediateCertificateIssuer = $TestResult.CertificateIntermediateIssuer

    $UrlObject.IntermediateCertificateSubject = $TestResult.CertificateIntermediateSubject

    $UrlObject.IntermediateCertificateThumbprint = $TestResult.CertificateIntermediateThumbprint

    $UrlObject.RootCertificateIssuer = $TestResult.CertificateRootIssuer

    $UrlObject.RootCertificateSubject = $TestResult.CertificateRootSubject

    $UrlObject.RootCertificateThumbprint = $TestResult.CertificateRootThumbprint

}

# SIG # Begin signature block

# MIIoUgYJKoZIhvcNAQcCoIIoQzCCKD8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBMexN+0IETV/dI

# IQoMSDbrGFu8L4ZpVlFgJD/AYXsgV6CCDYUwggYDMIID66ADAgECAhMzAAAEhJji

# EuB4ozFdAAAAAASEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM1WhcNMjYwNjE3MTgyMTM1WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDtekqMKDnzfsyc1T1QpHfFtr+rkir8ldzLPKmMXbRDouVXAsvBfd6E82tPj4Yz

# aSluGDQoX3NpMKooKeVFjjNRq37yyT/h1QTLMB8dpmsZ/70UM+U/sYxvt1PWWxLj

# MNIXqzB8PjG6i7H2YFgk4YOhfGSekvnzW13dLAtfjD0wiwREPvCNlilRz7XoFde5

# KO01eFiWeteh48qUOqUaAkIznC4XB3sFd1LWUmupXHK05QfJSmnei9qZJBYTt8Zh

# ArGDh7nQn+Y1jOA3oBiCUJ4n1CMaWdDhrgdMuu026oWAbfC3prqkUn8LWp28H+2S

# LetNG5KQZZwvy3Zcn7+PQGl5AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUBN/0b6Fh6nMdE4FAxYG9kWCpbYUw

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwNTM2MjAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# AGLQps1XU4RTcoDIDLP6QG3NnRE3p/WSMp61Cs8Z+JUv3xJWGtBzYmCINmHVFv6i

# 8pYF/e79FNK6P1oKjduxqHSicBdg8Mj0k8kDFA/0eU26bPBRQUIaiWrhsDOrXWdL

# m7Zmu516oQoUWcINs4jBfjDEVV4bmgQYfe+4/MUJwQJ9h6mfE+kcCP4HlP4ChIQB

# UHoSymakcTBvZw+Qst7sbdt5KnQKkSEN01CzPG1awClCI6zLKf/vKIwnqHw/+Wvc

# Ar7gwKlWNmLwTNi807r9rWsXQep1Q8YMkIuGmZ0a1qCd3GuOkSRznz2/0ojeZVYh

# ZyohCQi1Bs+xfRkv/fy0HfV3mNyO22dFUvHzBZgqE5FbGjmUnrSr1x8lCrK+s4A+

# bOGp2IejOphWoZEPGOco/HEznZ5Lk6w6W+E2Jy3PHoFE0Y8TtkSE4/80Y2lBJhLj

# 27d8ueJ8IdQhSpL/WzTjjnuYH7Dx5o9pWdIGSaFNYuSqOYxrVW7N4AEQVRDZeqDc

# fqPG3O6r5SNsxXbd71DCIQURtUKss53ON+vrlV0rjiKBIdwvMNLQ9zK0jy77owDy

# XXoYkQxakN2uFIBO1UNAvCYXjs4rw3SRmBX9qiZ5ENxcn/pLMkiyb68QdwHUXz+1

# fI6ea3/jjpNPz6Dlc/RMcXIWeMMkhup/XEbwu73U+uz/MIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiMwghofAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAASEmOIS4HijMV0AAAAA

# BIQwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIP55

# BuOV9uQRVYcKhRbay9nloki0MsAJ6NZWn9JNrBriMEIGCisGAQQBgjcCAQwxNDAy

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20wDQYJKoZIhvcNAQEBBQAEggEAFVccXAGDfNsg5AQi0d9an3XkhYXN7IKbigKO

# /cSm5nx16RrVGRa0z4k6SGPoMBSSNet1Ni3gSm0MSgvEK/62Bq787vpE+yyiWUog

# q97SR2M6iMTWBA+Y9YzKvSVeBLsLlEonXosgmCE9t5+hbQNu6aSXWFRmh2oD39qX

# Eg+aNrfBnN4VcU2s4rDdqigU24B2Wmtz0UezeclbiWYoFpYNvmIrmn2V2fYCDljx

# /vkG/454FNeql2cl2UL5cX1GK1rOx9kx5Dk8mmd11+zeSmSAeGg0iHBMDil+wgr+

# RgISdD6UMJRIve3WMHXbhqeuvl2ezUzS40zCivQB9VjllGx4kaGCF60wghepBgor

# BgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZI

# AWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGE

# WQoDATAxMA0GCWCGSAFlAwQCAQUABCDA1mbPryoyHErkYeZGPGsPI9TMgXCiC7UT

# rx1ZlBgiTwIGabxABD3IGBMyMDI2MDQxNzE1MDY0NS4xMjVaMASAAgH0oIHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjozMjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKADAgECAhMzAAACGqmg

# HQagD0OqAAEAAAIaMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgyOFoXDTI2MTExMzE4NDgyOFowgdMxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jv

# c29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVs

# ZCBUU1MgRVNOOjMyMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# mYEAwSTz79q2V3ZWzQ5Ev7RKgadQtMBy7+V3XQ8R0NL8R9mupxcqJQ/KPeZGJTER

# +9Qq/t7HOQfBbDy6e0TepvBFV/RY3w+LOPMKn0Uoh2/8IvdSbJ8qAWRVoz2S9VrJ

# zZpB8/f5rQcRETgX/t8N66D2JlEXv4fZQB7XzcJMXr1puhuXbOt9RYEyN1Q3Z7Yj

# RkhfBsRc+SD/C9F4iwZqfQgo82GG4wguIhjJU7+XMfrv4vxAFNVg3mn1PoMWGZWi

# o+e14+PGYPVLKlad+0IhdHK5AgPyXKkqAhEZpYhYYVEItHOOvqrwukxVAJXMvWA3

# GatWkRZn33WDJVtghCW6XPLi1cDKiGE5UcXZSV4OjQIUB8vp2LUMRXud5I49FIBc

# E9nT00z8A+EekrPM+OAk07aDfwZbdmZ56j7ub5fNDLf8yIb8QxZ8Mr4RwWy/czBu

# V5rkWQQ+msjJ5AKtYZxJdnaZehUgUNArU/u36SH1eXKMQGRXr/xeKFGI8vvv5Jl1

# knZ8UqEQr9PxDbis7OXp2WSMK5lLGdYVH8VownYF3sbOiRkx5Q5GaEyTehOQp2Sf

# dbsJZlg0SXmHphGnoW1/gQ/5P6BgSq4PAWIZaDJj6AvLLCdbURgR5apNQQed2zYU

# gUbjACA/TomA8Ll7Arrv2oZGiUO5Vdi4xxtA3BRTQTUCAwEAAaOCAUkwggFFMB0G

# A1UdDgQWBBTwqyIJ3QMoPasDcGdGovbaY8IlNjAfBgNVHSMEGDAWgBSfpxVdAF5i

# XYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB

# JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRp

# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsF

# AAOCAgEA1a72WFq7B6bJT3VOJ21nnToPJ9O/q51bw1bhPfQy67uy+f8x8akipzNL

# 2k5b6mtxuPbZGpBqpBKguDwQmxVpX8cGmafeo3wGr4a8Yk6Sy09tEh/Nwwlsyq7B

# RrJNn6bGOB8iG4OTy+pmMUh7FejNPRgvgeo/OPytm4NNrMMg98UVlrZxGNOYsifp

# RJFg5jE/Yu6lqFa1lTm9cHuPYxWa2oEwC0sEAsTFb69iKpN0sO19xBZCr0h5ClU9

# Pgo6ekiJb7QJoDzrDoPQHwbNA87Cto7TLuphj0m9l/I70gLjEq53SHjuURzwpmNx

# dm18Qg+rlkaMC6Y2KukOfJ7oCSu9vcNGQM+inl9gsNgirZ6yJk9VsXEsoTtoR7fM

# NU6Py6ufJQGMTmq6ZCq2eIGOXWMBb79ZF6tiKTa4qami3US0mTY41J129XmAglVy

# +ujSZkHu2lHJDRHs7FjnIXZVUE5pl6yUIl23jG50fRTLQcStdwY/LvJUgEHCIzjv

# lLTqLt6JVR5bcs5aN4Dh0YPG95B9iDMZrq4rli5SnGNWev5LLsDY1fbrK6uVpD+p

# svSLsNpht27QcHRsYdAMALXM+HNsz2LZ8xiOfwt6rOsVWXoiHV86/TeMy5TZFUl7

# qB59INoMSJgDRladVXeT9fwOuirFIoqgjKGk3vO2bELrYMN0QVwwggdxMIIFWaAD

# AgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv

# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIy

# MjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5

# vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64

# NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhu

# je3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl

# 3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPg

# yY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I

# 5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2

# ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/

# TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy

# 16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y

# 1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H

# XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMB

# AAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQW

# BBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30B

# ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz

# L0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYB

# BAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBL

# oEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggr

# BgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNS

# b29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq

# reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27

# DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pv

# vinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9Ak

# vUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWK

# NsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2

# kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+

# c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep

# 8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+Dvk

# txW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1Zyvg

# DbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/

# 2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjozMjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUA8YrutmKpSrub

# CaAYsU4pt1Ft8DaggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MDANBgkqhkiG9w0BAQsFAAIFAO2MTvUwIhgPMjAyNjA0MTcwNjE3MjVaGA8yMDI2

# MDQxODA2MTcyNVowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA7YxO9QIBADAHAgEA

# AgIGhjAHAgEAAgIS3TAKAgUA7Y2gdQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgor

# BgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUA

# A4IBAQANhNp5BxthqKEXgPC3J6QnXrXJaWCNHZ1K0kfV3NtERTBWO2oXHcA1QhKA

# QZDaeJC+20Sr4M+rGmsgnZxg6ESgLflLr8woLrTgQ3umfgZB3Ad7q418rWe/EOzI

# iimkqzyg8lL82hfB4rgK0isffndo51Wuu+i/RfeAFO776/8Dr+yJi/EXcGjUS4dL

# uOZS4uG126kyHp1FtKSAGqEE+HANcjDBOSRdGOu0vK7D1PGKrdIEiOa1epzE5haD

# YFflI6PhdHFP1EdKKu0JpQwwgt41H062i9jPJ1IRQJxcptdzifUj6uWODe1M+apZ

# uM6mzYl5iUBSQjfdEj5HpFASpv8oMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTACEzMAAAIaqaAdBqAPQ6oAAQAAAhowDQYJYIZIAWUD

# BAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0B

# CQQxIgQgZJaHpKGAxGYG0EwKoVDJX6lrMytscBDSICA9IL/1ePMwgfoGCyqGSIb3

# DQEJEAIvMYHqMIHnMIHkMIG9BCCdeiHHrbtpKcwB20doVU89WHIOH8S7w37uaHcD

# memK+zCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAC

# GqmgHQagD0OqAAEAAAIaMCIEIOzw6EbfzIK8Mj4brBC1UkonSUTn7h7F3y2r5ScL

# wgH0MA0GCSqGSIb3DQEBCwUABIICAFEDWtMXjdQihNrM71V0ezSoWJ3PHrMu0sbE

# 6aTt3S4B/+G+FHtssd8iCKmTkebkIYxJeQgejqt+GyvMMRhX1+gybZoOO0lWP3ll

# fjx2knm66/JbntmxdbPNIt53Ex1AlS6eV7OqQD1LsG+XHAWeKCggXPGMIuXgY9AB

# Sl89dVRgr1P8g7JXoivzAfQATE4WNimW/XzdC2b99XoWGDdAxCCYZaOXW1gqI62M

# qslImcLbFC+x9iNm3Xukk1T6fvurk3FCXvh0Y8EgUOmzF+sXjQoZx56kV7OUYwBI

# 41WlJPqGUmZtGwdkgMgzTnf5k0Jrz3VqRp44abNhFTs47FMg/DnUYkC3czcn/wma

# Jq+Qy5N8PvrB5QbF2Q1851jMB3MSLhC9ddlvcaUcMdlwNyHwYlKq/Ro4+qGqtDuO

# 1bQue8/Bpb0xVOKWqwZoBffEHytx55zMIeBFT4SLfpHS471a8abz+c3ubkTvvLgH

# XW3wPbko+oAhbTCKf1xxKiAdr/3VuaYRiztcWYfVdUcliiJ55ilT8yGntfRDWxmb

# pIX1cymT5BCw7Bm9Dn1AKOYyYPxzCa0e9Sna/3WdhSTddhYq/Cli7HjUqdN2PF16

# i7TuZ13K32+INkA/k05Sm4aZzUPqgh4Dbz2MdlSvUa/eabO4aToQoT8878SVOaab

# 9VRTjh6q

# SIG # End signature block