AzStackHci.DiagnosticSettings

0.6.6

AzStackHci.DiagnosticSettings.psd1

                                #

# Module manifest for module 'AzStackHci.DiagnosticSettings'

#

# Generated by: Microsoft Corporation.

#

# Generated on: April 28th 2026.

#

@{

    # Script module or binary module file associated with this manifest.

    RootModule = 'AzStackHci.DiagnosticSettings.psm1'

    # Version number of this module.

    ModuleVersion = '0.6.6'

    # Supported PSEditions of this module (Desktop, Core, CoreCLR, etc.)

    CompatiblePSEditions = @('Desktop', 'Core')

    # ID used to uniquely identify this module.

    GUID = '741476f0-267c-4a20-9830-c8478444638e'

    # Author of this module.

    Author = 'Microsoft Corporation'

    # Company or vendor of this module.

    CompanyName = 'Microsoft Corporation'

    # Copyright statement for this module.

    Copyright = '(c) 2026 Microsoft Corporation. All rights reserved.'

    # Description of the functionality provided by this module.

    Description = 'Microsoft Azure Local - Diagnostics settings and connectivity tests support module'

    # Minimum version of the Windows PowerShell engine required by this module.

    PowerShellVersion = '5.1'

    # Name of the Windows PowerShell host required by this module.

    # PowerShellHostName = ''

    # Minimum version of the Windows PowerShell host required by this module.

    # PowerShellHostVersion = ''

    # Minimum version of Microsoft .NET Framework required by this module. This prerequisite is valid for the PowerShell Desktop edition only.

    # DotNetFrameworkVersion = ''

    # Minimum version of the common language runtime (CLR) required by this module. This prerequisite is valid for the PowerShell Desktop edition only.

    # CLRVersion = ''

    # Processor architecture (None, X86, Amd64) required by this module.

    # ProcessorArchitecture = ''

    # Modules that must be imported into the global environment prior to importing this module

    #RequiredModules = ''

    # Assemblies that must be loaded prior to importing this module

    # RequiredAssemblies = @()

    # Script files (.ps1) that are run in the caller's environment prior to importing this module.

    # ScriptsToProcess = @()

    # Type files (.ps1xml) to be loaded when importing this module

    # TypesToProcess = @()

    # Format files (.ps1xml) to be loaded when importing this module

    # FormatsToProcess = @()

    # Modules to import as nested modules of the module specified in RootModule/ModuleToProcess

    # IMPORTANT: .ps1 files listed here are dot-sourced into the root module scope.

    # Private (internal) helpers are listed first, then Public (exported) functions.

    NestedModules = @(

        # Constants and module state initialization (loaded first)

        'Private\AzStackHci.Constants.ps1',

        # Private helpers (loaded after constants - order matters)

        'Private\AzStackHci.MemoryDump.Helpers.ps1',

        'Private\AzStackHci.Connectivity.Helpers.ps1',

        'Private\AzStackHci.Layer7.Helpers.ps1',

        'Private\AzStackHci.DNS.Helpers.ps1',

        'Private\AzStackHci.WildcardAndSubdomain.Helpers.ps1',

        'Private\AzStackHci.HardwareOEM.Helpers.ps1',

        'Private\AzStackHci.ModuleManagement.Helpers.ps1',

        'Private\AzStackHci.Network.Helpers.ps1',

        'Private\AzStackHci.Results.Helpers.ps1',

        'Private\AzStackHci.OsConfigReport.Helpers.ps1',

        'Private\AzStackHci.Utility.Helpers.ps1',

        # Public exported functions

        'Public\AzStackHci.MemoryDumpSettings.ps1',

        'Public\AzStackHci.PageFileSettings.ps1',

        'Public\AzStackHci.UserModeCrashDumpSettings.ps1',

        'Public\AzStackHci.SSLInspection.ps1',

        'Public\AzStackHci.ClusterPerformance.ps1',

        'Public\AzStackHci.ConnectivityTests.ps1',

        'Public\AzStackHci.OsConfigSettings.ps1',

        'Public\AzStackHci.PrivateLinkScope.ps1'

    )

    # Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.

    FunctionsToExport = @(

        'Get-AzStackHciMemoryDumpSettings',

        'Set-AzStackHciMemoryDumpSettings',

        'Restore-AzStackHciMemoryDumpSettings',

        'Get-AzStackHciPageFileSettings',

        'Restore-AzStackHciPageFileSettings',

        'Set-AzStackHciPageFileSettings',

        'Set-AzStackHciPageFileSettingsMinimal',

        'Get-AzStackHciUserModeCrashDumpSettings',

        'Set-AzStackHciUserModeCrashDumpSettings',

        'Restore-AzStackHciUserModeCrashDumpSettings',

        'Test-AzStackHciSSLInspection',

        'Send-ClusterPerformanceHistory',

        'Test-AzureLocalConnectivity',

        'Test-Layer7Connectivity',

        'Test-TCPConnectivity',

        'Get-AzStackHciOsConfigSettings',

        'Test-ArcMachinePrivateLinkScopeEnabled'

    )

    # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.

    CmdletsToExport = @()

    # Variables to export from this module

    # Set to empty array to prevent leaking internal script-scoped variables to consumers

    VariablesToExport = @()

    # Aliases to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no aliases to export.

    # AliasesToExport = '*'

    # DSC resources to export from this module

    # DscResourcesToExport = @()

    # List of all modules packaged with this module

    # ModuleList = @()

    # List of all files packaged with this module

    # FileList = @()

    # Private data to pass to the module specified in RootModule/ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell.

    PrivateData = @{

        PSData = @{

            # Tags applied to this module. These help with module discovery in online galleries.

            Tags = @('Microsoft', 'AzStackHci', 'Diagnostic', 'Settings', 'Connectivity', 'AzureLocal')

            # A URL to the license for this module.

            LicenseUri = 'https://github.com/Azure/AzureLocal-Supportability/blob/main/LICENSE'

            # A URL to the main website for this project.

            ProjectUri = 'https://github.com/Azure/AzureLocal-Supportability'

            # A URL to an icon representing this module.

            # IconUri = ''

            # ReleaseNotes of this module — full history in CHANGELOG.md shipped with the module

            ReleaseNotes = @'

## v0.6.6

### Test-AzureLocalConnectivity — longer initial timeout + single retry with extended timeout for slow-responding endpoints

- Initial timeout raised from 60 s -> 90 s ($script:HTTP_TIMEOUT_INITIAL_SEC). Some Azure data-plane endpoints (notably guestnotificationservice.azure.com/urls/allowlist?...) can legitimately take longer than 60 seconds to respond, especially on slow links or proxied paths.

- Test-Layer7Connectivity now performs a single retry with an extended timeout ($script:HTTP_TIMEOUT_RETRY_SEC, default 120 seconds) when the first attempt returns exactly "The operation has timed out.". Gated by: one retry per endpoint, only on the first request (not redirected hops). No per-run budget cap, so customers on a uniformly slow link still get every endpoint a fair chance on the second attempt. The 'DNS resolved or proxy in path' precondition is implicit — .NET only emits that exact message after the connection has already been initiated.

- On retry success, Layer7Response is annotated with " (succeeded on retry @ 120s)" so the slow-path success is visible in the output.

### Test-AzureLocalConnectivity — fix "Collection was modified" enumeration crash when CRL/OCSP rows appended

- Fixed: when the new CRL/OCSP-unreachable classification fired during the main endpoint loop, Add-CrlDependencyRowToResults appended new dependency rows to $script:Results while it was still being enumerated by `ForEach ($urlObj in $script:Results)`, throwing "Collection was modified; enumeration operation may not execute." and aborting the test run. The main loop now enumerates a snapshot (`@($script:Results)`); newly-appended rows have Layer7Status="" and are still picked up by the existing remaining-URLs loop later in the run.

### Test-AzureLocalConnectivity — fix "AllowAutoRedirect" certificate-detail errors caused by name collision with AzStackHci.EnvironmentChecker

- Fixed regression triggered by AzStackHci.EnvironmentChecker 10.2509+: every HTTPS endpoint was reporting "Error processing certificate details for '<url>': A parameter cannot be found that matches parameter name 'AllowAutoRedirect'". Root cause: EnvironmentChecker now exports a public function named Get-SslCertificateChain (different parameter set, no -AllowAutoRedirect), and our Get-AzStackHciEnvironmentCheckerModule helper Import-Module'd it without -Global, so EnvironmentChecker's exported function shadowed our private helper of the same name inside our module's session state. Result: every HTTPS endpoint had empty certificate Subject/Issuer/Thumbprint columns in the output.

- Two-part fix: (1) renamed our private helper from Get-SslCertificateChain to Get-AzSHciSslCertificateChain so the names can no longer collide; (2) Get-AzStackHciEnvironmentCheckerModule now uses Import-Module -Global so EnvironmentChecker's exported functions land in the global session state instead of being injected into our module's scope (defence-in-depth for any future same-name collisions).

### Test-AzureLocalConnectivity — re-initialize CRL/OCSP-offline state per call

- Fixed: $script:CRLOfflineURLs was only initialized once at module import (in Initialize-ModuleState), so calling Test-AzureLocalConnectivity twice in the same PowerShell session would leak stale CRL/OCSP-offline URLs from the previous run into the new run's CRITICAL summary block. The ArrayList is now re-initialized at the top of Test-AzureLocalConnectivity alongside $script:SSLInspectedURLs, matching the pattern used by all other per-run state.

### Test-AzureLocalConnectivity — CRL/OCSP vs. SSL Inspection classification

- Fixed false positive: endpoints with a trusted certificate chain but an offline revocation check (CRL / OCSP endpoint unreachable) were incorrectly flagged as "SSL Inspection detected". Now classified as a distinct "CRL/OCSP unreachable" failure mode with its own summary block and clear remediation steps.

- Get-Layer7CertificateDetails performs a revocation-independent X509Chain build when Test-Certificate fails. If the chain is trusted locally and the captured chain status contains a revocation-offline token (RevocationStatusUnknown / OfflineRevocation / CERT_TRUST_REVOCATION_STATUS_UNKNOWN / CERT_TRUST_IS_OFFLINE_REVOCATION), the endpoint is reclassified. Otherwise the legacy SSL-Inspection path still fires.

- Parent endpoint row stays Failed (so the red badge isn't lost), Layer7Response now reads "(200) OK - CRL/OCSP unreachable [CRL: ..., OCSP: ...]" with the actual revocation URLs appended from the leaf certificate extensions.

- Suppressed Test-Certificate native `WARNING: Chain status:` output via -WarningAction SilentlyContinue (chain status is still captured via -ErrorVariable for classification).

### Test-AzureLocalConnectivity — CRL/OCSP endpoints added as first-class test rows

- When an endpoint is classified as CRL/OCSP unreachable, Test-AzureLocalConnectivity now extracts up to 1 CRL Distribution Point + 1 OCSP responder URL from the leaf certificate's X.509 extensions (OIDs 2.5.29.31 and 1.3.6.1.5.5.7.1.1 respectively) and appends them to $script:Results as dedicated rows on port 80. These rows are tested by the existing remaining-URLs loop, so the output tree makes the dependency failure actionable: parent HTTPS endpoint -> child http://crl*.ca/... row with its own Pass/Fail.

- New helper Get-CertRevocationEndpoints parses both extensions and filters out non-http schemes (e.g. ldap://).

- New helper Add-CrlDependencyRowToResults uses a two-tier dedupe strategy:

  - OCSP rows: host-level dedupe against $script:Results (single-host protocol).

  - CRL rows: exact-URL dedupe (different .crl paths on the same host can be independently blocked by path-based proxy filtering). When multiple parent endpoints share the same CRL URL, the row's Source field is extended to list all parent domains rather than duplicating the row.

- Caps via $script:CRL_MAX_DP_PER_CERT=1 and $script:CRL_MAX_OCSP_PER_CERT=1 keep the result table compact even for certs that list many distribution points.

### Test-AzureLocalConnectivity — console output fixes

- Fixed hardcoded message: "Please check the CSV file for detailed information" now correctly reads "See the <OutputFormat> output file for detailed information" (honours the actual -OutputFormat, default HTML).

- Fixed a second hardcoded CSV-specific string in Publish-Results: the tail summary line "...review the CSV file listed below" now also honours -OutputFormat and reads "...see the <OutputFormat> output file listed below".

- New CRITICAL console summary block for CRL/OCSP unreachable endpoints: correlates each parent HTTPS URL with the auto-generated CRL/OCSP dependency rows added for it, showing the tested status of each dependency next to the parent URL so the customer can immediately see which specific port-80 URLs their firewall/proxy is blocking.

### Test-AzureLocalConnectivity — -PassThru now exposes DownloadSpeed

- The -PassThru switch now attaches a DownloadSpeed NoteProperty to the returned results collection, so callers can retrieve the measured speed programmatically without having to parse the JSON output file. Example: $r = Test-AzureLocalConnectivity -PassThru; $r.DownloadSpeed.

- The return is wrapped with the comma operator (return ,$script:Results) to prevent PowerShell from auto-unrolling the ArrayList; enumeration, .Count, and indexing behaviour are unchanged for existing callers.

### Invoke-UploadDiagnosticResults — context-aware upload message

- Invoke-UploadDiagnosticResults now accepts a -Context parameter (default 'Connectivity Test results') and interpolates it into the "Sending the <Context> information to Microsoft..." console message. The OS-config caller (Get-AzStackHciOsConfigSettings) now passes -Context 'OS configuration data results', so the previously misleading "Sending the Connectivity Test results information to Microsoft..." wording no longer appears during OS-config uploads.

### State & constants

- New $script:CRLOfflineURLs ArrayList tracks CRL/OCSP-offline endpoints separately from $script:SSLInspectedURLs so the two summary blocks don't conflate.

- New constants: CERT_CHAIN_STATUS_REVOCATION_OFFLINE (token list), CRL_DP_OID, AIA_OID, CRL_MAX_DP_PER_CERT, CRL_MAX_OCSP_PER_CERT.

### Unit tests

- Added "CRL/OCSP offline vs SSL Inspection classification" Describe block: verifies revocation-only failures go to $script:CRLOfflineURLs (not $script:SSLInspectedURLs), untrusted chains still hit the legacy SSL-Inspection path, Get-CertRevocationEndpoints correctly parses CRL DP / AIA / ldap-filtering, and Add-CrlDependencyRowToResults dedupes OCSP by host + CRL by exact URL (with Source aggregation for shared URLs).

For full version history (including v0.6.5 and earlier) see CHANGELOG.md shipped with this module.

'@

            # External dependent modules of this module

            # ExternalModuleDependencies = ''

        } # End of PSData hashtable

    } # End of PrivateData hashtable

    # HelpInfo URI of this module

    HelpInfoURI = 'https://github.com/Azure/AzureLocal-Supportability/blob/main/TSG/Networking/Arc-Gateway-Outbound-Connectivity/Troubleshoot-Outbound-Connectivity.md'

    # Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.

    # DefaultCommandPrefix = ''

}

# Generated by: Microsoft Corporation.

# SIG # Begin signature block

# MIInbgYJKoZIhvcNAQcCoIInXzCCJ1sCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCCu17au5EIJtLV

# 3j18Pfbtik2QYrpqdxj/vjaI+0J6y6CCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn7MIIZ9wIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEIPVdXMtYnBQQYF9sWhXwVhyI3vNA8TfMhcbFgZ0jhQAuMEIGCisG

# AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEACkljj2KkH9p5PbEyWznm

# mi8DICL14SqGx2usap0AqUcUsaiMxFat39bJ3BPpl1Z+TQfpJeXpSXTMZxZAeDgD

# ILSAJwoU50vJ+irqo5x/MeLrYvF8OyAQ2QJI75HWESjyuAslffu2esw8uwkvRPYz

# g0Py1uw4vLQp+py8IqWm6DCA7G8UohpCBIdfd4BdaUYnJKdPwuqPSzQWQyWbyutM

# zrT3hNN7MFaBtR5DMkON4VGZ3znay0nWreZfB6IE1Nm5l3CkuTZNCoCx821u/e7P

# /+bC35jYWOO9z8yNud5k2RDfeZfWwTzP7HJ/VvWbvLRMXn9sJ0xS2UbaTuadqvN1

# tKGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheC

# AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIB

# QQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCC5cWQv9mVADUfKpJ5l

# NzQ8l5gUz8knhwuDAC0FmQZZmwIGaetNLxNSGBMyMDI2MDQyODIxNTI1Mi43NDla

# MASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2QjA1LTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKAD

# AgECAhMzAAACEUUYOZtDz/xsAAEAAAIRMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxM1oXDTI2MTExMzE4

# NDgxM1owgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTAr

# BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUG

# A1UECxMeblNoaWVsZCBUU1MgRVNOOjZCMDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxN

# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC

# Ag8AMIICCgKCAgEAz7m7MxAdL5Vayrk7jsMo3GnhN85ktHCZEvEcj4BIccHKd/NK

# C7uPvpX5dhO63W6VM5iCxklG8qQeVVrPaKvj8dYYJC7DNt4NN3XlVdC/voveJuPP

# hTJ/u7X+pYmV2qehTVPOOB1/hpmt51SzgxZczMdnFl+X2e1PgutSA5CAh9/Xz5NW

# 0CxnYVz8g0Vpxg+Bq32amktRXr8m3BSEgUs8jgWRPVzPHEczpbhloGGEfHaROmHh

# VKIqN+JhMweEjU2NXM2W6hm32j/QH/I/KWqNNfYchHaG0xJljVTYoUKPpcQDuhH9

# dQKEgvGxj2U5/3Fq1em4dO6Ih04m6R+ttxr6Y8oRJH9ZhZ3sciFBIvZh7E2YFXOj

# P4MGybSylQTPDEFAtHHgpkskeEUhsPDR9VvWWhekhQx3qXaAKh+AkLmz/hpE3e0y

# +RIKO2AREjULJAKgf+R9QnNvqMeMkz9PGrjsijqWGzB2k2JNyaUYKlbmQweOabsC

# ioiY2fJbimjVyFAGk5AeYddUFxvJGgRVCH7BeBPKAq7MMOmSCTOMZ0Sw6zyNx4Uh

# h5Y0uJ0ZOoTKnB3KfdN/ba/eKHFeEhi3WqAfzTxiy0rMvhsfsXZK7zoclqaRvVl8

# Q48J174+eyriypY9HhU+ohgiYi4uQGDDVdTDeKDtoC/hD2Cn+ARzwE1rFfECAwEA

# AaOCAUkwggFFMB0GA1UdDgQWBBRifUUDwOnqIcvfb53+yV0EZn7OcDAfBgNVHSME

# GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l

# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG

# AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB

# Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN

# BgkqhkiG9w0BAQsFAAOCAgEApEKdnMeIIUiU6PatZ/qbrwiDzYUMKRczC4Bp/XY1

# S9NmHI+2c3dcpwH2SOmDfdvIIqt7mRrgvBPYOvJ9CtZS5eeIrsObC0b0ggKTv2wr

# TgWG+qktqNFEhQeipdURNLN68uHAm5edwBytd1kwy5r6B93klxDsldOmVWtw/ngj

# 7knN09muCmwr17JnsMFcoIN/H59s+1RYN7Vid4+7nj8FcvYy9rbZOMndBzsTiosF

# 1M+aMIJX2k3EVFVsuDL7/R5ppI9Tg7eWQOWKMZHPdsA3ZqWzDuhJqTzoFSQShnZe

# nC+xq/z9BhHPFFbUtfjAoG6EDPjSQJYXmogja8OEa19xwnh3wVufeP+ck+/0gxNi

# 7g+kO6WaOm052F4siD8xi6Uv75L7798lHvPThcxHHsgXqMY592d1wUof3tL/eDaQ

# 0UhnYCU8yGkU2XJnctONnBKAvURAvf2qiIWDj4Lpcm0zA7VuofuJR1Tpuyc5p1ja

# 52bNZBBVqAOwyDhAmqWsJXAjYXnssC/fJkee314Fh+GIyMgvAPRScgqRZqV16dTB

# Yvoe+w1n/wWs/ySTUsxDw4T/AITcu5PAsLnCVpArDrFLRTFyut+eHUoG6UYZfj8/

# RsuQ42INse1pb/cPm7G2lcLJtkIKT80xvB1LiaNvPTBVEcmNSvFUM0xrXZXcYcxV

# XiYwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB

# CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD

# VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe

# Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm

# TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H

# ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc

# wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A

# W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w

# jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG

# MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ

# 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP

# 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz

# ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz

# NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3

# xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG

# AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/

# LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG

# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB

# BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G

# A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw

# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j

# cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF

# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL

# BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC

# cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF

# vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l

# 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn

# 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m

# O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx

# TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4

# S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9

# y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM

# +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw

# RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4C

# AQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2QjA1LTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIa

# AxUAKyp8q2VdgAq1VGkzd7PZwV6zNc2ggYMwgYCkfjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO2bEWowIhgPMjAyNjA0Mjgx

# MDU4NTBaGA8yMDI2MDQyOTEwNTg1MFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA

# 7ZsRagIBADAHAgEAAgIIOjAHAgEAAgISijAKAgUA7Zxi6gIBADA2BgorBgEEAYRZ

# CgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0G

# CSqGSIb3DQEBCwUAA4IBAQCN+0sM2jEj+sXNzcJzjDJtLW6uQZfOlLMwY1BKTjug

# QHu7GjCPolmFKmtV3RQdeow6YOsT8YSAOBAk7evgKcRhME3/O/WK4NM/TD5TlugQ

# /zdReO7nMwcqZ5jODm/OjZ0o1BTri3Eql2+kWD09Pp3O3vKNkewsiLGgt65ex6t8

# BmSeRtq/XvKPkyqvDcvSCsoTSwDx0JefMW7pppbV4xYv1VD/DJvOMieMDuxThPv7

# DVUCQLfBQquMmsNqCe7XqWdZHd9XXsLy12pAgKiHR6/egqiy46YDoaNAjbOlokw9

# O5MYo3W5gcFyNOyzIPCd889sMVWlT1c8iU7i0uZVAACvMYIEDTCCBAkCAQEwgZMw

# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIRRRg5m0PP/GwAAQAA

# AhEwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRAB

# BDAvBgkqhkiG9w0BCQQxIgQg6qGQxufMud7fkpA+cQeqUW+FtRN2U6ANJ6dKzl1z

# a6UwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCAsrTOpmu+HTq1aXFwvlhjF

# 8p2nUCNNCEX/OWLHNDMmtzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD

# QSAyMDEwAhMzAAACEUUYOZtDz/xsAAEAAAIRMCIEIHSFZWbf/ux0J6U5AOf/g9Xc

# 0T/VTSNHOU3qStz7ZdtxMA0GCSqGSIb3DQEBCwUABIICAGLQSsBpWTLEvSO3njeg

# s3wDLyhAVEf4CYaXXFK7vq5VMgIkKrU5fD1Ml9h1X7Qc2nM2wzi14+zz7ncFeSIk

# Gu8oBtWu24Bfogr9gpyyoLCn95F6x1A/siDnEkrU/v8pNO2HXlltk62mgKRe545M

# 0xTed5+Cnoy+dUvQ6CND7Z+R+pDNqsOxsnGeSDYBy7JJAy3+UXuQXebLwV5rFQa4

# OAPHHbddk9m4+IKCqUkwA9Dvj70wR2zLWxVOCCJliW93vfcH+lVFPut42LIWgdf3

# Dpkn/b7F5dZXFyl8O7FSWg6vzrpsMgAFxO74LN9tEnrCQYDJaBzSnAcJMDSnpedC

# +lmbPGZ5mdeiplJl3j0mXEbHysvESGTMMnQQWB/KoXxwlbM2p0Gm1CKNzEcng3r5

# Mq1aqAtnAGbk5cMneJMQ45Pyx6iBfPCxzomx1T6rNE5XHn8Q6bTPet4s6vgz7JT4

# cfSTiPHWds5AjkQXnxD5OcPhR57osENABrYYjdyVy9JWXlzQ00we3yUkjLMUa1b4

# UVwzAiFnqF/jYsJIpmgegsuaoLdKpxStwo8MNhz3sNjZQMpGB3t2UVRr/bceRLox

# hFR8vUtb9gA6jtYO2XcDwOn765pJDWvGgXJgqEBnQmXjfVV85QktUtLk9I7hp2mN

# 2ISb6UU5Yhi6I7qEFCXEkTsD

# SIG # End signature block