AzStackHciNetwork/AzStackHci.Network.psm1

<#############################################################
 # #
 # Copyright (C) Microsoft Corporation. All rights reserved. #
 # #
 #############################################################>


Import-Module $PSScriptRoot\AzStackHci.Network.Helpers.psm1 -Force -DisableNameChecking -Global
Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Utilities.psm1 -Force -DisableNameChecking -Global
Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Reporting.psm1 -Force -DisableNameChecking -Global
Import-LocalizedData -BindingVariable lnTxt -FileName AzStackHci.Network.Strings.psd1
function Invoke-AzStackHciNetworkValidation
{
    <#
    .SYNOPSIS
        Perform AzStackHci Network Validation
    .DESCRIPTION
        Perform AzStackHci Network Validation by attempting below tests:
        - Validate management IP range (for deployment)
        - Validate IP range against K8s reserved networks
        - Validate host network configuration readiness
        - Validate adapter readiness
        - Validate DHCP status for host (for DHCP deployment)
        - Validate new node readiness and network intent status (during add server)
        - Validate host network intents requirement and storage connectivity type (for deployment)
    .EXAMPLE
        # Using a deployment answer file to validate network configurations
 
        $allServers = @("Server 1 IP", "Server 2 IP") # you need to use IP for the connection
        $userName = "<LOCALADMIN>"
        $secPassWord = ConvertTo-SecureString "<LOCALADMINPASSWORD>" -AsPlainText -Force
        $hostCred = New-Object System.Management.Automation.PSCredential($username, $secPassWord)
        [System.Management.Automation.Runspaces.PSSession[]] $allServerSessions = @();
        foreach ($currentServer in $allServers) {
            $currentSession = Microsoft.PowerShell.Core\New-PSSession -ComputerName $currentServer -Credential $hostCred -ErrorAction Stop
            $allServerSessions += $currentSession
        }
        $answerFilePath = "<ANSWERFILELOCATION>" # Like C:\MASLogs\Unattended-2024-07-18-20-44-48.json
        Invoke-AzStackHciNetworkValidation -DeployAnswerFile $answerFilePath -PSSession $allServerSessions -ProxyEnabled $false
    .EXAMPLE
        # Using indivudual parameter to validate network configurations
 
        $answerFilePath = "<ANSWERFILELOCATION>"
        $managementSubnetCIDR = "<CIDR string for management subnet>"
        $logOutputPath = "<LOGFILELOCATION>"
        $userName = "<LOCALADMIN>"
        $secPassWord = ConvertTo-SecureString "<LOCALADMINPASSWORD>" -AsPlainText -Force
        $hostCred = New-Object System.Management.Automation.PSCredential($username, $secPassWord)
        $answerFileContent = Get-Content $answerFilePath -Raw | ConvertFrom-Json
        $ipPools = New-Object System.Collections.ArrayList
        [System.Management.Automation.Runspaces.PSSession[]] $allServerSessions = @();
        foreach ($ippool in $answerFileContent.scaleUnits[0].deploymentData.infrastructureNetwork[0].ipPools) {
            $currentPoolObject = [PSCustomObject] @{
                StartingAddress = $ipPool.StartingAddress
                EndingAddress= $ipPool.EndingAddress
            }
            $ipPools.Add($currentPoolObject)
        }
        [PSObject] $atcHostNetworkInfo = $answerFileContent.scaleUnits[0].deploymentData.hostNetwork
        [System.String[]]$allServers = $answerFileContent.scaleUnits[0].deploymentData.physicalNodes.Name
        [System.Management.Automation.Runspaces.PSSession[]] $allServerSessions = @();
        foreach ($currentServer in $allServers) {
            $currentSession = Microsoft.PowerShell.Core\New-PSSession -ComputerName $currentServer -Credential $hostCred -ErrorAction Stop
            $allServerSessions += $currentSession
        }
        Invoke-AzStackHciNetworkValidation -IpPools $ipPools -ManagementSubnetValue $managementSubnetCIDR -PSSession $allServerSessions -OutputPath $logOutputPath -HostNetworkInfo $atcHostNetworkInfo
    .PARAMETER PassThru
        Return PSObject result.
    .PARAMETER HardwareClass
        Hardware class: Small, Medium, or Large.
    .PARAMETER ClusterPattern
        Hardware class: Standard, Stretch, or RackAware.
    .PARAMETER OutputPath
        Directory path for log and report output.
    .PARAMETER CleanReport
        Remove all previous progress and create a clean report.
    .INPUTS
        Inputs (if any)
    .OUTPUTS
        Output (if any)
    .LINK
        https://docs.microsoft.com/en-us/azure-stack/hci/manage/use-environment-checker?tabs=network
    #>

    [CmdletBinding()]
    param (
        [Parameter(Mandatory = $true, ParameterSetName = 'AnswerFile', HelpMessage = "Specify the answer file used for deployment validation.")]
        [ValidateScript({ Test-Path -Path $_ -PathType Leaf })]
        [System.String]
        $DeployAnswerFile,

        [Parameter(Mandatory = $true, ParameterSetName = 'EceParameter', HelpMessage = "Specify end infra IP Range pools")]
        [System.Collections.ArrayList]
        $IpPools,

        [Parameter(Mandatory = $true, ParameterSetName = 'EceParameter', HelpMessage = "Specify string of management subnet value in CIDR format")]
        [string] $ManagementSubnetValue,

        [Parameter(Mandatory = $true, ParameterSetName = 'AnswerFile', HelpMessage = "Specify the PSSession(s) used to validation from")]
        [Parameter(Mandatory = $true, ParameterSetName = 'EceParameter', HelpMessage = "Specify the PSSession(s) used to validation from")]
        [System.Management.Automation.Runspaces.PSSession[]]
        $PSSession,

        [Parameter(Mandatory = $false, ParameterSetName = 'EceParameter', HelpMessage = "Specify Host and Mgmt IP Mapping for Nodes")]
        [Hashtable]
        $NodeToManagementIPMap = $null,

        [Parameter(Mandatory = $false, ParameterSetName = 'EceParameter', HelpMessage = "Run tests specific to DHCP case")]
        [switch]
        $dhcpEnabled,

        [Parameter(Mandatory = $true, ParameterSetName = 'EceParameter', HelpMessage = "How many nodes in the cluster")]
        [System.Int16] $NodesInCluster,

        [Parameter(Mandatory = $false, ParameterSetName = 'EceParameter', HelpMessage = "Specify PSObject of HostNetwork info")]
        [PSObject] $HostNetworkInfo = $null,

        [Parameter(Mandatory = $true, ParameterSetName = 'EceParameter', HelpMessage = "Specify PSObject array of ATC Host Intents.")]
        [PSObject[]] $AtcHostIntents,

        [Parameter(Mandatory = $false, ParameterSetName = 'EceParameter', HelpMessage = "Specify the installation method of the system")]
        [ValidateSet('Deployment','Upgrade')]
        [string] $InstallationMethod = "Deployment",

        [Parameter(Mandatory = $true, ParameterSetName = 'AnswerFile', HelpMessage = "System proxy information")]
        [Parameter(Mandatory = $false, ParameterSetName = 'EceParameter', HelpMessage = "System proxy information")]
        [System.Boolean] $ProxyEnabled = $false,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the region name to target for connectivity validation.")]
        [string]
        $RegionName,

        [Parameter(Mandatory = $false, HelpMessage = "Return PSObject result.")]
        [switch]
        $PassThru,

        [Parameter(Mandatory = $false, HelpMessage = "Hardware class: Small, Medium, or Large")]
        [ValidateSet('Small','Medium','Large')]
        [String] $HardwareClass = "Medium",

        [Parameter(Mandatory = $false, HelpMessage = "Cluster Pattern: Standard, Stretch, or RackAware")]
        [ValidateSet('Standard','Stretch','RackAware')]
        [String]
        $ClusterPattern = "Standard",

        [Parameter(Mandatory = $false, HelpMessage = "Directory path for log and report output")]
        [string]$OutputPath,

        [Parameter(Mandatory = $false, HelpMessage = "Remove all previous progress and create a clean report")]
        [switch]$CleanReport = $false,

        [Parameter(Mandatory = $false, HelpMessage = "Show only failed results on screen.")]
        [switch]$ShowFailedOnly,

        [Parameter(Mandatory = $false, HelpMessage = "Indicating Operation Type")]
        [ValidateSet('AddNode','Deployment','Upgrade', 'PreUpdate')]
        [String]$OperationType = "Deployment"
    )

    $callingTestParam = @{}

    Import-Module $PSScriptRoot\AzStackHci.Network.Helpers.psm1 -Force -DisableNameChecking -Global

    # Prepare validator call parameters
    switch ($PSCmdlet.ParameterSetName)
    {
        "AnswerFile"
        {
            # If the function is called with the AnswerFile parameter set, we need to set the other parameters
            Log-Info -Message "Performing Network Validation using AnswerFile"
            $deployAnswerFileContent = Get-Content $DeployAnswerFile -Raw | ConvertFrom-Json

            Log-Info -Message "Get IpPools info from answerfile `"infrastructureNetwork | ipPools`" section"
            $allIpPools = New-Object System.Collections.ArrayList
            foreach ($ippool in $deployAnswerFileContent.scaleUnits[0].deploymentData.infrastructureNetwork[0].ipPools)
            {
                $currentPoolObject = [PSCustomObject] @{
                    StartingAddress =  $ipPool.StartingAddress
                    EndingAddress= $ipPool.EndingAddress
                }

                $allIpPools.Add($currentPoolObject)
            }

            # calculate the infra network CIDR string
            Log-Info -Message "Calculate ManagementSubnetValue (infra network CIDR string) from answerfile `"infrastructureNetwork | subnetMask`" and StartingAddress of 1st element of `"infrastructureNetwork | ipPools`""
            $infraSubnetMask = $deployAnswerFileContent.scaleUnits[0].deploymentData.infrastructureNetwork[0].subnetMask
            $infraSubnetMaskBytes = $infraSubnetMask -split '\.' | ForEach-Object { [Convert]::ToString([int]$_, 2).PadLeft(8, '0') }
            $infraBinarySubnetMask = $infraSubnetMaskBytes -join ''
            $prefixLength = ($infraBinarySubnetMask -split '1').Count - 1
            $testIP = $deployAnswerFileContent.scaleUnits[0].deploymentData.infrastructureNetwork[0].ipPools[0].StartingAddress
            # Note that all IP pools must be in same subnet so we can use the first IP pool to calculate the subnet CIDR
            $managementSubnetCIDR = (EnvValidatorNormalizeIPv4Subnet -cidrSubnet "$testIP/$prefixLength").ToString()
            Log-Info -Message "Got management subnet CIDR: $managementSubnetCIDR"

            [PSObject] $hostNetworkInfoFromAnswerFile = $deployAnswerFileContent.scaleUnits[0].deploymentData.hostNetwork
            [PSObject[]] $atcHostIntentsInfo = $hostNetworkInfoFromAnswerFile.intents

            # Calculate switchless flag from answer file
            # using "-eq $true" here just in case some deployment does not have this "StorageConnectivitySwitchless" in the JSON
            $switchlessFlag = $hostNetworkInfoFromAnswerFile.storageConnectivitySwitchless -eq $true

            $callingTestParam = @{
                IpPools = $allIpPools
                ManagementSubnetValue = $managementSubnetCIDR
                PSSession = $PSSession
                dhcpEnabled = $deployAnswerFileContent.scaleUnits[0].deploymentData.infrastructureNetwork[0].useDhcp
                AtcHostIntents = $atcHostIntentsInfo
                HostNetworkInfo = $hostNetworkInfoFromAnswerFile
                ProxyEnabled = $ProxyEnabled
                HardwareClass = $HardwareClass
                ClusterPattern = $ClusterPattern
                SwitchlessDeploy = $switchlessFlag
                NodeCount = $deployAnswerFileContent.scaleUnits[0].deploymentData.physicalNodes.Count
                OperationType = $OperationType
            }
        }
        "EceParameter"
        {
            Log-Info -Message "Performing Network Validation using Deploy parameters"

            # If current deployment is switchless, using "-eq $true" here just in case some deployment does not have this "StorageConnectivitySwitchless" in the JSON
            $switchlessFlag = $HostNetworkInfo.StorageConnectivitySwitchless -eq $true

            [PSObject[]] $atcHostIntentsInfo = $null

            if ($HostNetworkInfo)
            {
                Log-Info -Message "Getting ATC Host Intents from HostNetworkInfo"
                $atcHostIntentsInfo = $HostNetworkInfo.intents
            }
            else
            {
                Log-Info -Message "HostNetworkInfo parameter is null. Upgrade path. Getting ATC Host Intents from passed in parameter."
                $atcHostIntentsInfo = $AtcHostIntents
            }

            if ($null -eq $atcHostIntentsInfo)
            {
                throw "No ATC Host Intents found. Please provide ATC Host Intents info. For deployment: provide in unattended JSON; for upgrade: make sure system has intent configured."
            }

            $callingTestParam = @{
                IpPools = $IpPools
                ManagementSubnetValue = $ManagementSubnetValue
                PSSession = $PSSession
                dhcpEnabled = $dhcpEnabled
                AtcHostIntents = $atcHostIntentsInfo
                HostNetworkInfo = $HostNetworkInfo
                ProxyEnabled = $ProxyEnabled
                HardwareClass = $HardwareClass
                ClusterPattern = $ClusterPattern
                SwitchlessDeploy = $switchlessFlag
                NodeToManagementIPMap = $NodeToManagementIPMap
                NodeCount = $NodesInCluster
                OperationType = $OperationType
            }
        }
    }

    try
    {
        $script:ErrorActionPreference = 'Stop'
        Set-AzStackHciOutputPath -Path $OutputPath

        if ($RegionName -eq 'AzureLocal') {
            $params = @{
                RegionName = 'AzureLocal'
            }
            $callingTestParam += $params
        }

        Write-AzStackHciHeader -invocation $MyInvocation -params $PSBoundParameters -PassThru:$PassThru

        # Call/Initialise reporting
        $envcheckerReport = Get-AzStackHciEnvProgress -clean:$CleanReport
        $envcheckerReport = Add-AzStackHciEnvJob -report $envcheckerReport

        #region Get test list
        Write-Progress -Id 1 -Activity "Checking AzStackHci Dependencies" -Status "Network Configuration" -PercentComplete 0 -ErrorAction SilentlyContinue

        # We could use function "Get-TestListByFunction" to get the list of tests to run.
        # However, that function will return all tests in the module that matching to a specific function name.
        # The inexplicit selection of the validator might make the maintenance of the validator list
        # harder: if a new validator is added, the function will automatically include it to be run for
        # a specific scenario. It will be easy to forget that implication. It might be easier to maintain
        # the list of tests to run in the script explicitly. With the explicit list, the user can clearly
        # see what tests are run for a specific scenario and can easily add or remove tests from the list.
        Log-Info -Message "[NetworkValidator] [$($OperationType)] scenario"
        switch ($OperationType)
        {
            "Deployment"
            {
                Log-Info -Message "Will check all network configuration needed for a successful deployment"
                $script:envchktestList = @( "Test-NwkValidator_StorageAdapterReadiness",
                                            "Test-NwkValidator_StorageConnection",
                                            "Test-NwkValidator_InfraIpPoolReadiness",
                                            "Test-NwkValidator_AKS_CidrOverlaps",
                                            "Test-NwkValidator_HostNetworkConfigurationReadiness",
                                            "Test-NwkValidator_AdapterDriverMgmtAdapterReadiness",
                                            "Test-NwkValidator_MgmtIPIPPoolRequirement",
                                            "Test-NwkValidator_NetworkIntentrequirement",
                                            "Test-NwkValidator_StorageConnectivityType",
                                            "Test-MwkValidator_StorageVlanFor2NodeSwitchLessDeployment")

                if (Get-AzStackHciARCGatewaySetting)
                {
                    # Deployment with ArcGateway enabled, will skip Test-NwkValidator_InfraIpPoolReadiness
                    Log-Info -Message "Deployment with ArcGateway enabled, will skip Test-NwkValidator_InfraIpPoolReadiness"
                    $script:envchktestList = $script:envchktestList | Where-Object { $_ -ne "Test-NwkValidator_InfraIpPoolReadiness" }
                }
                Log-Info -Message "Network validator to run: [ $($script:envchktestList -join ', ') ]"
            }
            "AddNode"
            {
                if ($null -eq $callingTestParam.NodeToManagementIPMap)
                {
                    throw "NodeToManagementIPMap parameter is required for AddNode scenario."
                }

                Log-Info -Message "Will check network configuration needed for adding new node(s) into existing cluster"
                $script:envchktestList = @( "Test-NwkValidator_StorageAdapterReadiness",
                                            "Test-NwkValidator_HostNetworkConfigurationReadiness",
                                            "Test-NwkValidator_AdapterDriverMgmtAdapterReadiness",
                                            "Test-NwkValidator_MgmtIPIPPoolRequirement",
                                            "Test-NwkValidator_ClusterNetworkIntentStatus",
                                            "Test-NwkValidator_StorageIntentExistance",
                                            "Test-NwkValidator_NetworkATCFeatureStatusOnNewNode")

                # Check if DHCP enabled or Brownfield upgrade. envType will be "Upgrade" for brownfield, "Deployment" for greenfield
                $envType = $null

                if ($null -ne $InstallationMethod)
                {
                    $envType = $InstallationMethod
                }

                if ($dhcpEnabled -or ($envType -eq "Upgrade"))
                {
                    Log-Info -Message "No need to run TestMgmtIPForNewNode for Add Node scenario when DHCP enabled or Brownfield upgrade"
                }
                else
                {
                    Log-Info -Message "Need to run TestMgmtIPForNewNode for Add Node scenario if not DHCP enabled and not Brownfield upgrade"
                    $script:envchktestList += "Test-NwkValidator_MgmtIPForNewNode"
                }
            }
            "Upgrade"
            {
                Log-Info -Message "[NetworkValidator][Upgrade] scenario. Only need to run Test-NwkValidator_InfraIpPoolReadiness for non ArcGateway connection type"
                $script:envchktestList = "Test-NwkValidator_InfraIpPoolReadiness"

                if (Get-AzStackHciARCGatewaySetting)
                {
                    # Upgrade with ArcGateway enabled, will skip Test-NwkValidator_InfraIpPoolReadiness
                    Log-Info -Message "Upgrade with ArcGateway enabled, will skip Test-NwkValidator_InfraIpPoolReadiness"
                    $script:envchktestList = $script:envchktestList | Where-Object { $_ -ne "Test-NwkValidator_InfraIpPoolReadiness" }
                }
            }
            "PreUpdate"
            {
                Log-Info -Message "Will check network configuration needed for running a success patch and update operation"
                $script:envchktestList = @( "Test-NwkValidator_HostNetworkConfigurationReadiness",
                                            "Test-NwkValidator_AdapterDriverMgmtAdapterReadiness",
                                            "Test-NwkValidator_ClusterNetworkIntentStatus",
                                            "Test-NwkValidator_StorageAdapterIPConfigurationPreUpdate")
            }
        }
        #endregion

        Log-Info -Message "Network validator to run during [ $($OperationType) ]: [ $($script:envchktestList -join ', ') ]"

        $TotalTestCount = ($script:envchktestList).Count

        if($TotalTestCount -eq 0)
        {
            Log-Info "No test cases need to be run."
            return $result
        }

        # Run validation
        $i = 0
        $Result = @()
        $ProgressActivity = "Checking AzStackHci Network Compatibility"
        $i = 0
        $ProgressStatus = "Testing $ENV:ComputerName"
        $progressParams = @{
            Id          = 1
            Activity    = $ProgressActivity
            Status      = $ProgressStatus
            ErrorAction = 'SilentlyContinue'
        }
        Write-Progress @progressParams

        :noTestsBreak foreach ($test in $script:envchktestList)
        {
            $OpMsg = "Run network validator [{0}] on {1}" -f $test, $ENV:ComputerName
            Log-Info -Message $OpMsg
            Write-Progress @progressParams -CurrentOperation $OpMsg -PercentComplete (($i++ / $TotalTestCount) * 100)

            $invokeParameters = @{}
            Get-Command $test | Select-Object -ExpandProperty Parameters | Select-Object -ExpandProperty Keys | ForEach-Object {
                if ($callingTestParam[$PSITEM]) {
                    $invokeParameters += @{
                        $PSITEM = $callingTestParam[$PSITEM]
                    }
                }
            }

            Log-Info "Parameters used for current validator: [ $test ]"
            Log-Info -Message ($invokeParameters | Out-String)
            $Result += Invoke-Expression "$test @invokeParameters"

            $OpMsg = "End of network validator [{0}] run on {1}`n" -f $test, $ENV:ComputerName
            Log-Info -Message $OpMsg
        }

        # Feedback results - user scenario
        Log-Info "Network validation finished!" -ConsoleOut:(-not $PassThru)

        if (-not $PassThru)
        {
            $progressParams = @{
                Id              = 3
                Activity        = "Formating Results"
                Status          = "Writing Results for $($ENV:ComputerName)"
                PercentComplete = 1
                ErrorAction     = 'SilentlyContinue'
            }
            Write-Progress @progressParams
            Write-AzStackHciResult -Title "$($ENV:COMPUTERNAME):" -Result $result -ShowFailedOnly:$ShowFailedOnly -Seperator ': '
            Write-Summary -Result $Result -Property1 Detail
        }
        else
        {
            return $result
        }
    }
    catch
    {
        Log-Info -Message "" -ConsoleOut
        Log-Info -Message "$($_.Exception.Message)" -ConsoleOut -Type Error
        Log-Info -Message "$($_.ScriptStackTrace)" -ConsoleOut -Type Error
        $cmdletException = $_
        throw $_
    }
    finally
    {
        $Script:ErrorActionPreference = 'SilentlyContinue'
        # Write result to telemetry channel
        foreach ($r in $result)
        {
            Write-ETWResult -Result $r
        }
        # Write validation result to report object and close out report
        $envcheckerReport | Add-Member -MemberType NoteProperty -Name 'Network' -Value $Result -Force
        $envcheckerReport = Close-AzStackHciEnvJob -report $envcheckerReport
        Write-AzStackHciEnvReport -report $envcheckerReport
        Write-AzStackHciFooter -invocation $MyInvocation -Exception $cmdletException -PassThru:$PassThru
    }
}
# SIG # Begin signature block
# MIIoUgYJKoZIhvcNAQcCoIIoQzCCKD8CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAisAcLCU2ySKri
# 04G7eBAGivI1PcXrKnVhM4pZ2oHwOqCCDYUwggYDMIID66ADAgECAhMzAAAEA73V
# lV0POxitAAAAAAQDMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjQwOTEyMjAxMTEzWhcNMjUwOTExMjAxMTEzWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQCfdGddwIOnbRYUyg03O3iz19XXZPmuhEmW/5uyEN+8mgxl+HJGeLGBR8YButGV
# LVK38RxcVcPYyFGQXcKcxgih4w4y4zJi3GvawLYHlsNExQwz+v0jgY/aejBS2EJY
# oUhLVE+UzRihV8ooxoftsmKLb2xb7BoFS6UAo3Zz4afnOdqI7FGoi7g4vx/0MIdi
# kwTn5N56TdIv3mwfkZCFmrsKpN0zR8HD8WYsvH3xKkG7u/xdqmhPPqMmnI2jOFw/
# /n2aL8W7i1Pasja8PnRXH/QaVH0M1nanL+LI9TsMb/enWfXOW65Gne5cqMN9Uofv
# ENtdwwEmJ3bZrcI9u4LZAkujAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQU6m4qAkpz4641iK2irF8eWsSBcBkw
# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwMjkyNjAfBgNVHSMEGDAW
# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw
# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx
# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB
# AFFo/6E4LX51IqFuoKvUsi80QytGI5ASQ9zsPpBa0z78hutiJd6w154JkcIx/f7r
# EBK4NhD4DIFNfRiVdI7EacEs7OAS6QHF7Nt+eFRNOTtgHb9PExRy4EI/jnMwzQJV
# NokTxu2WgHr/fBsWs6G9AcIgvHjWNN3qRSrhsgEdqHc0bRDUf8UILAdEZOMBvKLC
# rmf+kJPEvPldgK7hFO/L9kmcVe67BnKejDKO73Sa56AJOhM7CkeATrJFxO9GLXos
# oKvrwBvynxAg18W+pagTAkJefzneuWSmniTurPCUE2JnvW7DalvONDOtG01sIVAB
# +ahO2wcUPa2Zm9AiDVBWTMz9XUoKMcvngi2oqbsDLhbK+pYrRUgRpNt0y1sxZsXO
# raGRF8lM2cWvtEkV5UL+TQM1ppv5unDHkW8JS+QnfPbB8dZVRyRmMQ4aY/tx5x5+
# sX6semJ//FbiclSMxSI+zINu1jYerdUwuCi+P6p7SmQmClhDM+6Q+btE2FtpsU0W
# +r6RdYFf/P+nK6j2otl9Nvr3tWLu+WXmz8MGM+18ynJ+lYbSmFWcAj7SYziAfT0s
# IwlQRFkyC71tsIZUhBHtxPliGUu362lIO0Lpe0DOrg8lspnEWOkHnCT5JEnWCbzu
# iVt8RX1IV07uIveNZuOBWLVCzWJjEGa+HhaEtavjy6i7MIIHejCCBWKgAwIBAgIK
# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm
# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw
# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD
# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG
# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la
# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc
# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D
# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+
# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk
# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6
# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd
# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL
# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd
# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3
# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS
# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI
# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL
# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD
# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv
# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h
# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA
# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn
# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7
# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b
# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/
# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy
# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp
# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi
# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb
# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS
# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL
# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX
# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiMwghofAgEBMIGVMH4x
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p
# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAAQDvdWVXQ87GK0AAAAA
# BAMwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw
# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEICIt
# faGEiotkzx57eoJZMwcKPcySY7zKacvNQ78gBibIMEIGCisGAQQBgjcCAQwxNDAy
# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20wDQYJKoZIhvcNAQEBBQAEggEAd9T5nrewgxpLAKvr5jcnuiLqNHOZGAopLblr
# oXD8U3r2/ipQpZANb660n3ThAnvGAFEvIIMh190pYyCcu82RiBL4v6KAeq+VWlup
# 3Hw61eg8EnVNJApfx4IF98RfIr3ho+ZZnPVCC7QsDii/nzlnYfbfK57Mjqfi1DnD
# WX1r2zlIpIjmN0AQJDrHa/s6kTjVxsC3RLB4JkMkYoPdX6zVxh7Ms/uQJGb65Tyn
# L2yw9nQYFza49Ft+VrnFkm1I31L4Jz4h08C1+UMuRqDkaVZTevoT8tilzefzV7gb
# 7lnRh4q2DoMqA6wwP7moGRiRAISZJq+f5acfVCnDzJQsbzXkB6GCF60wghepBgor
# BgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZI
# AWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGE
# WQoDATAxMA0GCWCGSAFlAwQCAQUABCAGHkmurnINjB9xgYBuT1Pm/Uy8TmctQZt6
# xgYyHPza3gIGaC3IotNRGBMyMDI1MDYxMDE1NDg0NC41MDFaMASAAgH0oIHZpIHW
# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT
# Hm5TaGllbGQgVFNTIEVTTjozNjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKADAgECAhMzAAAB91gg
# dQTK+8L0AAEAAAH3MA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w
# IFBDQSAyMDEwMB4XDTI0MDcyNTE4MzEwNloXDTI1MTAyMjE4MzEwNlowgdMxCzAJ
# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jv
# c29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVs
# ZCBUU1MgRVNOOjM2MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
# 0OdHTBNom6/uXKaEKP9rPITkT6QxF11tjzB0Nk1byDpPrFTHha3hxwSdTcr8Y0a3
# k6EQlwqy6ROz42e0R5eDW+dCoQapipDIFUOYp3oNuqwX/xepATEkY17MyXFx6rQW
# 2NcWUJW3Qo2AuJ0HOtblSpItQZPGmHnGqkt/DB45Fwxk6VoSvxNcQKhKETkuzrt8
# U6DRccQm1FdhmPKgDzgcfDPM5o+GnzbiMu6y069A4EHmLMmkecSkVvBmcZ8VnzFH
# TDkGLdpnDV5FXjVObAgbSM0cnqYSGfRp7VGHBRqyoscvR4bcQ+CV9pDjbJ6S5rZn
# 1uA8hRhj09Hs33HRevt4oWAVYGItgEsG+BrCYbpgWMDEIVnAgPZEiPAaI8wBGemE
# 4feEkuz7TAwgkRBcUzLgQ4uvPqRD1A+Jkt26+pDqWYSn0MA8j0zacQk9q/AvciPX
# D9It2ez+mqEzgFRRsJGLtcf9HksvK8Jsd6I5zFShlqi5bpzf1Y4NOiNOh5QwW1pI
# vA5irlal7qFhkAeeeZqmop8+uNxZXxFCQG3R3s5pXW89FiCh9rmXrVqOCwgcXFIJ
# QAQkllKsI+UJqGq9rmRABJz5lHKTFYmFwcM52KWWjNx3z6odwz2h+sxaxewToe9G
# qtDx3/aU+yqNRcB8w0tSXUf+ylN4uk5xHEpLpx+ZNNsCAwEAAaOCAUkwggFFMB0G
# A1UdDgQWBBTfRqQzP3m9PZWuLf1p8/meFfkmmDAfBgNVHSMEGDAWgBSfpxVdAF5i
# XYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jv
# c29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB
# JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRp
# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud
# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsF
# AAOCAgEAN0ajafILeL6SQIMIMAXM1Qd6xaoci2mOrpR8vKWyyTsL3b83A7XGLiAb
# QxTrqnXvVWWeNst5YQD8saO+UTgOLJdTdfUADhLXoK+RlwjfndimIJT9MH9tUYXL
# zJXKhZM09ouPwNsrn8YOLIpdAi5TPyN8Cl11OGZSlP9r8JnvomW00AoJ4Pl9rlg0
# G5lcQknAXqHa9nQdWp1ZxXqNd+0JsKmlR8tcANX33ClM9NnaClJExLQHiKeHUUWt
# qyLMl65TW6wRM7XlF7Y+PTnC8duNWn4uLng+ON/Z39GO6qBj7IEZxoq4o3avEh9b
# a43UU6TgzVZaBm8VaA0wSwUe/pqpTOYFWN62XL3gl/JC2pzfIPxP66XfRLIxafjB
# VXm8KVDn2cML9IvRK02s941Y5+RR4gSAOhLiQQ6A03VNRup+spMa0k+XTPAi+2aM
# H5xa1Zjb/K8u9f9M05U0/bUMJXJDP++ysWpJbVRDiHG7szaca+r3HiUPjQJyQl2N
# iOcYTGV/DcLrLCBK2zG503FGb04N5Kf10XgAwFaXlod5B9eKh95PnXKx2LNBgLwG
# 85anlhhGxxBQ5mFsJGkBn0PZPtAzZyfr96qxzpp2pH9DJJcjKCDrMmZziXazpa5V
# VN36CO1kDU4ABkSYTXOM8RmJXuQm7mUF3bWmj+hjAJb4pz6hT5UwggdxMIIFWaAD
# AgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD
# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe
# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv
# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIy
# MjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo
# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw
# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5
# vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64
# NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhu
# je3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl
# 3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPg
# yY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I
# 5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2
# ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/
# TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy
# 16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y
# 1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H
# XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMB
# AAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQW
# BBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30B
# ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
# L0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYB
# BAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBL
# oEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggr
# BgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNS
# b29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq
# reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27
# DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pv
# vinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9Ak
# vUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWK
# NsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2
# kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+
# c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep
# 8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+Dvk
# txW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1Zyvg
# DbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/
# 2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHW
# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT
# Hm5TaGllbGQgVFNTIEVTTjozNjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAb28KDG/xXbNB
# jmM7/nqw3bgrEOaggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx
# MDANBgkqhkiG9w0BAQsFAAIFAOvypPYwIhgPMjAyNTA2MTAxMjM1MDJaGA8yMDI1
# MDYxMTEyMzUwMlowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA6/Kk9gIBADAHAgEA
# AgIdvTAHAgEAAgIUMzAKAgUA6/P2dgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgor
# BgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUA
# A4IBAQBgdbrIWUbRlhzl3hSsDHhOncHPU3GYRyf0+eyzVSphCCQMxNxBgn1HBOJs
# PqKei8zOZRF989PL6yu3Pd0P5RMb7/F7+Dmcj0Wyt1k1tH1q9BQDjJPXK3ZdFzw+
# Gm03ve75WapAnPiNfkMqZmDQapFW+Jo0fco1Fr12xAsqmKvXGMVEXmPNREplZDt0
# Ho1VFL84fze9b+eXoV8qPQ8VpA+8TUWtI/kCaGpGWgB30UJNlJUwek6R/Uz7WPVK
# VBZkkNnirc1sX3Tp/NmTzGXd4O6yR10zNUikhfoQkhLIZ1o31i9yPcL0ilhyo+r8
# +mUG1IYiLiV4TdWAVvbLiMkbWtXfMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMC
# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV
# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp
# bWUtU3RhbXAgUENBIDIwMTACEzMAAAH3WCB1BMr7wvQAAQAAAfcwDQYJYIZIAWUD
# BAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0B
# CQQxIgQgV+JAa5SXlkOsxUCXJaVIt15znY/Yob6dfExkEvixxjUwgfoGCyqGSIb3
# DQEJEAIvMYHqMIHnMIHkMIG9BCAh2pjaa3ca0ecYuhu60uYHP/IKnPbedbVQJ5So
# IH5Z4jCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB
# 91ggdQTK+8L0AAEAAAH3MCIEIDs1pkgIQ02VR9ca/osTmDWRil6pAff0703IFPia
# tRKQMA0GCSqGSIb3DQEBCwUABIICABMQzcLblnjqwIuxZ2Vt7lGDkVTabCJglKop
# u0ExUwwsIYJIZRqteT62x0uQOSepVHmHW5rd9Dc9TWhcdQjCO4NecMdU02eZlm6T
# J1eaa4rZRjhKF9qPjw7/AWM/Y6iW8asTfqfEdzG+z5m2m2kGXwfaJZ4pOZphMwCe
# 1/PYsrLdpgW15+QR76PIfu6zK92x4+BwJGeoiva+YTHdj81KORJS2k5OxS8rjirA
# AqLau/AjY6t4bPZF4GpDaQ2g75rNqFg1EC0Cb3gAeTZ50QBWLzfH9A/FJPi59kvW
# b9ETDWbF0aG3Wxkq2f/CD7qO61S8Z/CgsivjpC0UThKV+XsCNV3MYsEzUH4UlWky
# BOz/e/YpX8sA9xydjH1Gm4yhm9IifIq0YRBItbVgx6sqnvYmoQKYV1b2K2f39Lr9
# jXmkINnLb9ka4Mo+drfZ68MAS/eR0+veocBEBxOQ+ufA2fGc4eRQlhNNru18xKZq
# wrcGv36z4BA7XlTdGo6U71C/v6Ie+iTY+RH7a/uQpEGVEgQvoSmv9keIwS/5UZIW
# 4ErI2xaLA3hOG42B/6WeQb84AwW654p8quTsfkekoRm44RAvl762SPreq+UZdiTO
# j/0r6wSr3tsfjn+8ahSyNDrAMDoa1QXr4xwSvkMpbFq1OzpFDSMg2bTJ9hIS4AIW
# MjTAlHwZ
# SIG # End signature block