AzStackHci.EnvironmentChecker

10.2506.0.2017

Obs/scripts/StandaloneObservabilityHelper.psm1

##------------------------------------------------------------------
## <copyright file="StandaloneObservabilityHelper.psm1" company="Microsoft">
## Copyright (C) Microsoft. All rights reserved.
## </copyright>
##------------------------------------------------------------------

Import-Module "$PSScriptRoot\GMATenantJsonHelper.psm1" -Force
Import-Module "$PSScriptRoot\StandaloneObservabilityConstants.psm1" -Force
Import-Module "$PSScriptRoot\ExtensionHelper.psm1" -Force

function Install-AzureConnectedMachineAgent
{
    param (
        [Parameter(Mandatory)]
        [System.String] $ResourceName,

        [Parameter(Mandatory)]
        [System.String] $ResourceGroupName,

        [Parameter(Mandatory)]
        [System.String] $TenantId,

        [Parameter(Mandatory)]
        [System.String] $RegionName,

        [Parameter(Mandatory)]
        [System.String] $SubscriptionId,

        [Parameter(Mandatory)]
        [System.String] $Cloud,

        [Parameter(Mandatory)]
        [System.String] $StampId,

        [Parameter(Mandatory = $true, ParameterSetName = "ServicePrincipal")]
        [PSCredential] $RegistrationSPCredential,

        [Parameter(Mandatory = $true, ParameterSetName = "DefaultSet")]
        [System.String] $AccessToken
    )

    ## Run connect command
    $timestamp = [DateTime]::Now.ToString("yyyyMMdd-HHmmss")
    $logPath = Get-LogFolderPath
    $logFile = Join-Path -Path $logPath -ChildPath "ArcForServerInstall_${timestamp}.txt"

    $AgentWebLink = $PipelineConstants.ArcForServerAgentWebLink
    $AgentMsiPath = Join-Path -Path $logPath -ChildPath $PipelineConstants.ArcForServerMsiFileName
    $AgentExePath = $PipelineConstants.ArcForServerExePath

    Write-Host "Starting Arc-for-server agent install AgentWebLink: $AgentWebLink AgentMsiPath: $AgentMsiPath AgentExePath: $AgentExePath logs: $logFile"
    if ($PSCmdlet.ParameterSetName -eq "ServicePrincipal") {
        $regSpNetworkCreds = $RegistrationSPCredential.GetNetworkCredential()
        Write-Host "Creating ArcContext for SPN: $($regSpNetworkCreds.UserName)"
        $arcContext = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcContextSpn
        $arcContext.SubscriptionId = $SubscriptionId
        $arcContext.ResourceGroup = $ResourceGroupName
        $arcContext.Location = $RegionName
        $arcContext.Cloud = $Cloud
        $arcContext.ResourceName = $ResourceName
        $arcContext.TenantId = $TenantId
        $arcContext.ServicePrincipalId = $regSpNetworkCreds.UserName
        $arcContext.ServicePrincipalSecret = $regSpNetworkCreds.Password
    }
    else {
        Write-Host "Creating ArcContext with AccessToken Length: $($AccessToken.Length)"
        $arcContext = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcContext
        $arcContext.SubscriptionId = $SubscriptionId
        $arcContext.ResourceGroup = $ResourceGroupName
        $arcContext.Location = $RegionName
        $arcContext.Cloud = $Cloud
        $arcContext.ResourceName = $ResourceName
        $arcContext.TenantId = $TenantId
        $arcContext.AccessToken = $AccessToken
    }

    $arcAgent = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcAgent
    $res = $arcAgent.Onboard($arcContext, $AgentWebLink, $AgentMsiPath, $logFile, $AgentExePath)

    Write-Host "Arc-for-server agent install $env:COMPUTERNAME. Status $res"

    if($res -eq $true) {
        Write-Host -ForegroundColor yellow "To view your onboarded server(s), navigate to https://ms.portal.azure.com/#blade/Microsoft_Azure_HybridCompute/AzureArcCenterBlade/servers"
    }
    else {
        throw "Hybrid agent connection failed. LogPath: $logFile"
    }
}

function Remove-AzureConnectedMachineAgent
{
    param (
        [Parameter(Mandatory = $true, ParameterSetName = "ServicePrincipal")]
        [PSCredential] $RegistrationSPCredential,

        [Parameter(Mandatory = $true, ParameterSetName = "DefaultSet")]
        [System.String] $AccessToken
    )

    $timestamp = [DateTime]::Now.ToString("yyyyMMdd-HHmmss")
    $logPath = Get-LogFolderPath
    $logFile = Join-Path -Path $logPath -ChildPath "ArcForServerUninstall_${timestamp}.txt"

    $AgentExePath = $PipelineConstants.ArcForServerExePath
    $AgentMsiPath = Join-Path -Path $logPath -ChildPath $PipelineConstants.ArcForServerMsiFileName

    if ($PSCmdlet.ParameterSetName -eq "ServicePrincipal") {
        $regSpNetworkCreds = $RegistrationSPCredential.GetNetworkCredential()
        Write-Host "Creating ArcContext for SPN: $($regSpNetworkCreds.UserName)"
        $arcContext = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcContextSpn
        $arcContext = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcContextSpn
        $arcContext.ServicePrincipalId = $regSpNetworkCreds.UserName
        $arcContext.ServicePrincipalSecret = $regSpNetworkCreds.Password
    }
    else {
        Write-Host "Creating ArcContext with AccessToken Length: $($AccessToken.Length)"
        $arcContext = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcContext
        $arcContext.AccessToken = $AccessToken
    }

    $arcAgent = New-Object Microsoft.AzureStack.Observability.ObservabilityCommon.ArcForServer.ArcAgent
    $res = $arcAgent.Offboard($arcContext, $logFile, $AgentExePath, $AgentMsiPath)
    if($res -eq $true) {
        Write-Host -ForegroundColor yellow "ArcAgent uninstall succeeded"
    }
    else {
        throw "ArcAgent uninstall failed. LogPath: $logFile"
    }
}

function Get-GmaStateFolders {
    param (
        [Parameter(Mandatory)]
        [System.String] $ObsRootFolderPath
    )
    
    $gmaCacheDirectories = [ordered] @{
        RuntimeSettings = "$ObsRootFolderPath\RuntimeSettings"
        GMACache = "$ObsRootFolderPath\GMACache"
        DiagnosticsCache = "$ObsRootFolderPath\GMACache\DiagnosticsCache"
        HealthCache = "$ObsRootFolderPath\GMACache\HealthCache"
        JsonDropLocation = "$ObsRootFolderPath\GMACache\JsonDropLocation"
        MonAgentHostCache = "$ObsRootFolderPath\GMACache\MonAgentHostCache"
        TelemetryCache = "$ObsRootFolderPath\GMACache\TelemetryCache"
    }

    return $gmaCacheDirectories

}

function New-GmaStateFolders {
    param (
        [Parameter(Mandatory)]
        [System.String] $ObsRootFolderPath
    )
    
    $gmaCacheDirectories = Get-GmaStateFolders -ObsRootFolderPath $ObsRootFolderPath

    foreach ($directory in $gmaCacheDirectories.Values) {
        if (-not (Test-Path $directory -PathType Container)) {
            New-Item -ItemType Directory -Path $directory -Force -Verbose *>> $temp
        }
    }
}

function Test-IsArcAgentConnected() {
    [CmdletBinding()]
    param (
    )

    Write-Host "Checking if Arc connection already exists..."
    try {
        $arcAgentInfo = @{}
        $arcAgentExePath = $PipelineConstants.ArcForServerExePath
        $arcshow = & $arcAgentExePath show
        $arcshow | ForEach-Object {
            $arcProperty = $_.split(':')
            $arcAgentInfo[$arcProperty[0].trim()] =  if ($arcProperty.Count -eq 2) { $arcProperty[1].trim() } else {""}
        }

        Write-Host "Checking Agent connection status: $($arcAgentInfo.'Agent Status')"
        return ($arcAgentInfo.'Agent Status' -eq "Connected")
    }
    catch {
        Write-Host "Error $_ checking if Arc Agent is connected"
        return $false
    }
}

function Test-IsAzure() {
    [CmdletBinding()]
    param (
    )

    Write-Host "Checking if this is an Azure virtual machine"
    try {
        $response = Invoke-WebRequest -UseBasicParsing -Uri "http://169.254.169.254/metadata/instance/compute?api-version=2019-06-01" -Headers @{Metadata = "true"} -TimeoutSec 1 -ErrorAction SilentlyContinue
    }
    catch {
        Write-Verbose "Error $_ checking if we are in Azure"
        return $false
    }
    if ($null -ne $response -and $response.StatusCode -eq 200) {
        Write-Verbose "Azure check indicates that we are in Azure"
        return $true
    }
    return $false
}

function Set-StampGuid() {
    [CmdletBinding()]
    param (
    )

    $StampGuid = $env:STAMP_GUID
    Write-Host "Checking if STAMP_GUID environment is empty: $StampGuid"
    if ($null -eq $env:STAMP_GUID) {
        $StampGuid = (Get-CimInstance -Class Win32_ComputerSystemProduct).UUID
        Write-Host "$functionName Setting the STAMP_GUID variable to $StampGuid"
        $env:STAMP_GUID = $StampGuid
    }

    return $StampGuid
}

function Set-HandlerEnvInfo {
    param (
        [Parameter(Mandatory)]
        [System.String] $ObsRootFolderPath,

        [Parameter(Mandatory)]
        [System.String] $CloudName,

        [Parameter(Mandatory)]
        [System.String] $RegionName
    )

    <#
    Sample HandlerEnvironment.json content:
    [
        {
            "handlerEnvironment": {
                "configFolder": "C:\\Packages\\Plugins\\Microsoft.AzureStack.Observability.Observability\\0.0.0.4\\RuntimeSettings",
                "deploymentid": "",
                "heartbeatFile": "C:\\Packages\\Plugins\\Microsoft.AzureStack.Observability.Observability\\0.0.0.4\\status\\HeartBeat.Json",
                "hostResolverAddress": "",
                "instance": "",
                "logFolder": "C:\\ProgramData\\GuestConfig\\extension_logs\\Microsoft.AzureStack.Observability.Observability",
                "rolename": "",
                "statusFolder": "C:\\Packages\\Plugins\\Microsoft.AzureStack.Observability.Observability\\0.0.0.4\\status"
            },
            "name": "Microsoft.RecoveryServices.Test.AzureSiteRecovery",
            "version": "1"
        }
    ]
    #>

    $handlerEnvironment = @{}
    $handlerEnvironment.configFolder = "$ObsRootFolderPath\RuntimeSettings"
    $handlerEnvironment.deploymentid = ""
    $handlerEnvironment.heartbeatFile = "$ObsRootFolderPath\HeartBeat.Json"
    $handlerEnvironment.hostResolverAddress = ""
    $handlerEnvironment.instance = ""
    $handlerEnvironment.logFolder = "$ObsRootFolderPath"
    $handlerEnvironment.rolename = ""
    $handlerEnvironment.statusFolder = "$ObsRootFolderPath"

    $jsonArray = @{}
    $jsonArray.Add("handlerEnvironment",$handlerEnvironment)
    $jsonArray.Add("name","Microsoft.AzureStack.Observability.Standalone")
    $jsonArray.Add("version","1")

    $jsonContent = ConvertTo-Json -InputObject $jsonArray

    $envFile = "$global:extensionRootLocation\HandlerEnvironment.json"
    $functionName = $MyInvocation.MyCommand.Name

    Write-Host "$functionName : HandlerEnvironment.json doesn't exist at path $envFile. So creating new file"
    Set-Content -Path $envFile -Value $jsonContent

    # Set the runtime settings
    $runtimeSettingsFile = "$ObsRootFolderPath\RuntimeSettings\0.settings"

    $publicSettings = @{}
    $publicSettings.cloudName = $CloudName
    $publicSettings.deviceType = "EnvValidatorStandAlone"
    $publicSettings.region = $RegionName

    $handlerSettings = @{}
    $handlerSettings.publicSettings = $publicSettings

    $jsonArray = @{}
    $jsonArray.Add("handlerSettings",$handlerSettings)

    $runtimeSettings = @{}
    $runtimeSettings.runtimeSettings = @($jsonArray)
    $jsonContent = ConvertTo-Json -InputObject $runtimeSettings -Depth 10

    Set-Content -Path $runtimeSettingsFile -Value $jsonContent
}

function Set-StandaloneScenarioRegistry {
    [CmdletBinding()]
    Param ()

    $functionName = $MyInvocation.MyCommand.Name
    Write-Host "[$functionName] Entering."

    if (-not (Test-Path $MiscConstants.GMAScenarioRegKey.Path)) {
        Write-Host "[$functionName] Creating GMAScenario registry key at path $($MiscConstants.GMAScenarioRegKey.Path) as it does not exists."
        New-Item -Path $MiscConstants.GMAScenarioRegKey.Path -Force
    }

    if (-not ((Test-RegKeyExists -Path $MiscConstants.GMAScenarioRegKey.Path -Name $MiscConstants.GMAScenarioRegKey.Name -GetValueIfExists) -eq $MiscConstants.GMAScenarioRegKey.OneP)) {
        New-ItemProperty `
            -Path $MiscConstants.GMAScenarioRegKey.Path `
            -Name $MiscConstants.GMAScenarioRegKey.Name `
            -PropertyType $MiscConstants.GMAScenarioRegKey.PropertyType `
            -Value $MiscConstants.GMAScenarioRegKey.OneP
    }

    Write-Host "[$functionName] Exiting."
}

function Confirm-IsArcAEnvironment {
    return (Test-RegKeyExists -Path $MiscConstants.ArcARegKey.Path -Name $MiscConstants.ArcARegKey.Name -GetValueIfExists) -eq $true
 }

function Wait-ForGcsConfigSync {
    [CmdletBinding()]
    Param (
        [Parameter(Mandatory=$False)]
        [System.String] $LogFile,

        [Parameter(Mandatory=$False)]
        [int] $TimeInSeconds = 60
    )

    $functionName = $MyInvocation.MyCommand.Name
    Write-Host "[$functionName] Entering. TimeOut: $TimeInSeconds"

    Write-Host "[$functionName] Going to wait for GCSConfig sync $TimeInSeconds"
    Start-Sleep -Seconds $TimeInSeconds
    
    $cacheDir = Join-Path -Path $env:SystemDrive -ChildPath "GMACache\DiagnosticsCache"
    $gcsConfigFiles = Get-ChildItem -Path $cacheDir -Filter GcsConfig -Recurse
    
    if ($gcsConfigFiles.Count -eq 0)
    {
        Write-Error "[$functionName] GCSConfig files are not found. Please check the logs for further investigation."
    }

    Write-Host "[$functionName] Exiting. GCSCongfile count: $($gcsConfigFiles.Count)"
}

 function Get-TenantId
 {
     [CmdletBinding()]
     param (
         [Parameter(Mandatory=$false)]
         [ValidateSet("AzureCloud", "AzureChinaCloud", "AzureGermanCloud", "AzureUSGovernment")]
         [string] $AzureEnvironment = "AzureCloud",

         [Parameter(Mandatory=$true)]
         [string] $SubscriptionId
     )

     $commandName = $MyInvocation.MyCommand
     $endpoints = Get-AzureURIs -AzureEnvironment $AzureEnvironment

     $params = @{
         UseBasicParsing = $true
         ErrorAction     = 'Stop'
         Uri             = $endpoints.ARMUri.TrimEnd('/') + "/subscriptions/${SubscriptionId}?api-version=1.0"
     }
     $response = try { Invoke-WebRequest @params } catch { $_.Exception.Response }

     if ($response.StatusCode -eq [System.Net.HttpStatusCode]::NotFound) {
         throw "[$commandName] SubscriptionId $SubscriptionId not found"
     }

     $header   = $response.GetResponseHeader('WWW-Authenticate')
     Write-Verbose "[$commandName] $header"
     $guidPattern = "[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}"
     $tenantId = $header.Split(' ') | Where-Object { $_ -like '*authorization_uri*' } | Select-Object -First 1 | ForEach-Object { [Regex]::Matches($_, $guidPattern).Value }

     if ([string]::IsNullOrEmpty($tenantId)) {
         Write-Verbose "[$commandName] Response $($response | ConvertTo-Json -depth 5)"
         throw "[$commandName] Unable to get tenantId for SubscriptionId $SubscriptionId"
     }

     Write-Verbose "[$commandName] Retrieved tenantId $tenantId"
     return ,$tenantId

 }

 <#
 .Synopsis
    Builds graph and login endpoints for a given AzureEnvironment
 #>
 function Get-AzureURIs {
     [CmdletBinding()]
     param (
         [Parameter(Mandatory=$false)]
         [ValidateSet("AzureCloud", "AzureChinaCloud", "AzureGermanCloud", "AzureUSGovernment")]
         [string] $AzureEnvironment = "AzureCloud"
     )

     $commandName = $MyInvocation.MyCommand

     $fullUri = "https://management.azure.com/metadata/endpoints?api-version=2023-01-01"
     try {
         $response = Invoke-RestMethod -Uri $fullUri -ErrorAction Stop -UseBasicParsing -TimeoutSec 30 -Verbose
     } catch {
         $message = "[$commandName] Error $($_.Exception)"
         Write-Verbose $message
         throw $message
     }

     $data = $response | Where-Object name -EQ $AzureEnvironment
     if (-not $data) {
         throw New-Object NotImplementedException("Unknown environment type $AzureEnvironment")
     }

     # sample @{ GraphUri = "https://graph.windows.net/"; LoginUri = "https://login.microsoftonline.com/"; ManagementServiceUri = "https://management.core.windows.net/"; ARMUri = "https://management.azure.com/" }
     $endpointProperties = @{
         GraphUri = $data.graph
         LoginUri = $data.authentication.loginEndpoint
         ManagementServiceUri = $data.authentication.audiences[0]
         ARMUri = $data.resourceManager
         MsGraphUri = $data.microsoftGraphResourceId
     }
     Write-Verbose "[$commandName] AzureEnvironment $AzureEnvironment, EndpointProperties $($endpointProperties | ConvertTo-Json -Depth 2)"

     return $endpointProperties
 }

function Test-UserIsElevated
{
    return ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')
}

function Write-InstanceGuidEvent {
    [CmdletBinding()]
    Param (
        [Parameter(Mandatory=$true)]
        [ValidateNotNullOrEmpty()]
        [System.String] $InstanceGuidValue
    )

    $session = New-PSSession
    $argumentList = @($PSScriptRoot, $InstanceGuidValue)
    Microsoft.Powershell.Core\Invoke-Command -Session $session -ArgumentList $argumentList -ScriptBlock {
        param($ScriptRoot, $InstanceGuidValue)
        Add-Type -Path "$ScriptRoot\Microsoft.AzureStack.Observability.Standalone.dll" -Verbose
        [Microsoft.AzureStack.Observability.Standalone.StandaloneTelEventSource]::Log.InstanceGuid($InstanceGuidValue)
        Write-Host "Successfully emitted InstanceGuid telemetry event."
    }
    $session | Remove-PSSession
}

# Export section
Export-ModuleMember -Function Remove-AzureConnectedMachineAgent
Export-ModuleMember -Function Install-AzureConnectedMachineAgent
Export-ModuleMember -Function New-GmaStateFolders
Export-ModuleMember -Function Set-HandlerEnvInfo
Export-ModuleMember -Function Test-IsAzure
Export-ModuleMember -Function Set-StampGuid
Export-ModuleMember -Function Test-IsArcAgentConnected
Export-ModuleMember -Function Test-UserIsElevated

Export-ModuleMember -Function Get-TenantId
Export-ModuleMember -Function Get-AzureURIs
Export-ModuleMember -Function Get-GmaStateFolders
Export-ModuleMember -Function Set-StandaloneScenarioRegistry
Export-ModuleMember -Function Confirm-IsArcAEnvironment
Export-ModuleMember -Function Wait-ForGcsConfigSync
Export-ModuleMember -Function Write-InstanceGuidEvent
# SIG # Begin signature block
# MIIoUgYJKoZIhvcNAQcCoIIoQzCCKD8CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCMHugD7PFuKs2c
# kZ9Xa7FWpKtticeKqNalR6OFeSlnYaCCDYUwggYDMIID66ADAgECAhMzAAAEA73V
# lV0POxitAAAAAAQDMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjQwOTEyMjAxMTEzWhcNMjUwOTExMjAxMTEzWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQCfdGddwIOnbRYUyg03O3iz19XXZPmuhEmW/5uyEN+8mgxl+HJGeLGBR8YButGV
# LVK38RxcVcPYyFGQXcKcxgih4w4y4zJi3GvawLYHlsNExQwz+v0jgY/aejBS2EJY
# oUhLVE+UzRihV8ooxoftsmKLb2xb7BoFS6UAo3Zz4afnOdqI7FGoi7g4vx/0MIdi
# kwTn5N56TdIv3mwfkZCFmrsKpN0zR8HD8WYsvH3xKkG7u/xdqmhPPqMmnI2jOFw/
# /n2aL8W7i1Pasja8PnRXH/QaVH0M1nanL+LI9TsMb/enWfXOW65Gne5cqMN9Uofv
# ENtdwwEmJ3bZrcI9u4LZAkujAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQU6m4qAkpz4641iK2irF8eWsSBcBkw
# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwMjkyNjAfBgNVHSMEGDAW
# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw
# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx
# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB
# AFFo/6E4LX51IqFuoKvUsi80QytGI5ASQ9zsPpBa0z78hutiJd6w154JkcIx/f7r
# EBK4NhD4DIFNfRiVdI7EacEs7OAS6QHF7Nt+eFRNOTtgHb9PExRy4EI/jnMwzQJV
# NokTxu2WgHr/fBsWs6G9AcIgvHjWNN3qRSrhsgEdqHc0bRDUf8UILAdEZOMBvKLC
# rmf+kJPEvPldgK7hFO/L9kmcVe67BnKejDKO73Sa56AJOhM7CkeATrJFxO9GLXos
# oKvrwBvynxAg18W+pagTAkJefzneuWSmniTurPCUE2JnvW7DalvONDOtG01sIVAB
# +ahO2wcUPa2Zm9AiDVBWTMz9XUoKMcvngi2oqbsDLhbK+pYrRUgRpNt0y1sxZsXO
# raGRF8lM2cWvtEkV5UL+TQM1ppv5unDHkW8JS+QnfPbB8dZVRyRmMQ4aY/tx5x5+
# sX6semJ//FbiclSMxSI+zINu1jYerdUwuCi+P6p7SmQmClhDM+6Q+btE2FtpsU0W
# +r6RdYFf/P+nK6j2otl9Nvr3tWLu+WXmz8MGM+18ynJ+lYbSmFWcAj7SYziAfT0s
# IwlQRFkyC71tsIZUhBHtxPliGUu362lIO0Lpe0DOrg8lspnEWOkHnCT5JEnWCbzu
# iVt8RX1IV07uIveNZuOBWLVCzWJjEGa+HhaEtavjy6i7MIIHejCCBWKgAwIBAgIK
# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm
# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw
# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD
# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG
# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la
# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc
# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D
# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+
# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk
# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6
# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd
# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL
# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd
# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3
# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS
# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI
# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL
# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD
# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv
# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h
# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA
# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn
# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7
# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b
# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/
# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy
# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp
# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi
# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb
# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS
# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL
# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX
# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiMwghofAgEBMIGVMH4x
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p
# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAAQDvdWVXQ87GK0AAAAA
# BAMwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw
# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIAge
# p5LaoZMZljYmomgyuRpTWrvBE6Eo0hYIOXu8eHEKMEIGCisGAQQBgjcCAQwxNDAy
# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20wDQYJKoZIhvcNAQEBBQAEggEAQBLGTa1SJ+QwyzFopu+8I8GeUe4kt4GBV2LB
# cg4RGbXp7DEfJFA41FDtNX1rfcO9UwiJO60Fuf0RdiglvPh+XwgmUqC66OqQK8dX
# I7DtvH/jpHQEFGo+ktZIjfEqCrgfkGPU3poh9Saorkg+JoXnUkroriOKvcmdDtpg
# Tq1NFLANTPPQ1aVMafbFBDF6r17G9s8qhfVi5GhQdVXbU0c0yAQqhcmNlgHx4cdV
# O2Xeoqgoul4KOBj+DcQZGtY31XqbymgyBnK92MJUUlAeC7TJraYTEJFhkFqbPT7s
# 1CxWeVjl5ga0DC2wOtcqbZ+xBnn+uY8HDb8stuLHUkTZzgU7t6GCF60wghepBgor
# BgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZI
# AWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGE
# WQoDATAxMA0GCWCGSAFlAwQCAQUABCC5e1902QNldsTL/L9yPMCtywjBfetnbZv+
# friICO+ONQIGaC397RaqGBMyMDI1MDYxMDE1NDg0MC40MDFaMASAAgH0oIHZpIHW
# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT
# Hm5TaGllbGQgVFNTIEVTTjo0MDFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKADAgECAhMzAAAB/tCo
# wns0IQsBAAEAAAH+MA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w
# IFBDQSAyMDEwMB4XDTI0MDcyNTE4MzExOFoXDTI1MTAyMjE4MzExOFowgdMxCzAJ
# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jv
# c29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVs
# ZCBUU1MgRVNOOjQwMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
# vLwhFxWlqA43olsE4PCegZ4mSfsH2YTSKEYv8Gn3362Bmaycdf5T3tQxpP3NWm62
# YHUieIQXw+0u4qlay4AN3IonI+47Npi9fo52xdAXMX0pGrc0eqW8RWN3bfzXPKv0
# 7O18i2HjDyLuywYyKA9FmWbePjahf9Mwd8QgygkPtwDrVQGLyOkyM3VTiHKqhGu9
# BCGVRdHW9lmPMrrUlPWiYV9LVCB5VYd+AEUtdfqAdqlzVxA53EgxSqhp6JbfEKnT
# dcfP6T8Mir0HrwTTtV2h2yDBtjXbQIaqycKOb633GfRkn216LODBg37P/xwhodXT
# 81ZC2aHN7exEDmmbiWssjGvFJkli2g6dt01eShOiGmhbonr0qXXcBeqNb6QoF8jX
# /uDVtY9pvL4j8aEWS49hKUH0mzsCucIrwUS+x8MuT0uf7VXCFNFbiCUNRTofxJ3B
# 454eGJhL0fwUTRbgyCbpLgKMKDiCRub65DhaeDvUAAJT93KSCoeFCoklPavbgQya
# hGZDL/vWAVjX5b8Jzhly9gGCdK/qi6i+cxZ0S8x6B2yjPbZfdBVfH/NBp/1Ln7xb
# eOETAOn7OT9D3UGt0q+KiWgY42HnLjyhl1bAu5HfgryAO3DCaIdV2tjvkJay2qOn
# F7Dgj8a60KQT9QgfJfwXnr3ZKibYMjaUbCNIDnxz2ykCAwEAAaOCAUkwggFFMB0G
# A1UdDgQWBBRvznuJ9SU2g5l/5/b+5CBibbHF3TAfBgNVHSMEGDAWgBSfpxVdAF5i
# XYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jv
# c29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB
# JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRp
# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud
# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsF
# AAOCAgEAiT4NUvO2lw+0dDMtsBuxmX2o3lVQqnQkuITAGIGCgI+sl7ZqZOTDd8Lq
# xsH4GWCPTztc3tr8AgBvsYIzWjFwioCjCQODq1oBMWNzEsKzckHxAzYo5Sze7OPk
# MA3DAxVq4SSR8y+TRC2GcOd0JReZ1lPlhlPl9XI+z8OgtOPmQnLLiP9qzpTHwFze
# +sbqSn8cekduMZdLyHJk3Niw3AnglU/WTzGsQAdch9SVV4LHifUnmwTf0i07iKtT
# lNkq3bx1iyWg7N7jGZABRWT2mX+YAVHlK27t9n+WtYbn6cOJNX6LsH8xPVBRYAIR
# VkWsMyEAdoP9dqfaZzwXGmjuVQ931NhzHjjG+Efw118DXjk3Vq3qUI1re34zMMTR
# zZZEw82FupF3viXNR3DVOlS9JH4x5emfINa1uuSac6F4CeJCD1GakfS7D5ayNsaZ
# 2e+sBUh62KVTlhEsQRHZRwCTxbix1Y4iJw+PDNLc0Hf19qX2XiX0u2SM9CWTTjsz
# 9SvCjIKSxCZFCNv/zpKIlsHx7hQNQHSMbKh0/wwn86uiIALEjazUszE0+X6rcObD
# fU4h/O/0vmbF3BMR+45rAZMAETJsRDPxHJCo/5XGhWdg/LoJ5XWBrODL44YNrN7F
# RnHEAAr06sflqZ8eeV3FuDKdP5h19WUnGWwO1H/ZjUzOoVGiV3gwggdxMIIFWaAD
# AgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD
# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe
# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv
# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIy
# MjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo
# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw
# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5
# vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64
# NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhu
# je3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl
# 3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPg
# yY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I
# 5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2
# ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/
# TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy
# 16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y
# 1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H
# XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMB
# AAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQW
# BBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30B
# ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
# L0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYB
# BAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBL
# oEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggr
# BgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNS
# b29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq
# reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27
# DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pv
# vinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9Ak
# vUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWK
# NsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2
# kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+
# c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep
# 8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+Dvk
# txW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1Zyvg
# DbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/
# 2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHW
# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT
# Hm5TaGllbGQgVFNTIEVTTjo0MDFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAhGNHD/a7Q0bQ
# LWVG9JuGxgLRXseggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx
# MDANBgkqhkiG9w0BAQsFAAIFAOvyMYAwIhgPMjAyNTA2MTAwNDIyMjRaGA8yMDI1
# MDYxMTA0MjIyNFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA6/IxgAIBADAHAgEA
# AgIDjTAHAgEAAgISxzAKAgUA6/ODAAIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgor
# BgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUA
# A4IBAQCyKCZbZBxMpSvomu9qIh5Rq3AT8P23zyHuH7A25oDYK29kESupRGSOnQTj
# 593sRN0euDFu5qUsfBg9m2PkT48dA/P8BUi2Ha6O2CQ/L87q96bREwt2RlE6jhFH
# HEzXN242m2wmqmfoUVpYn9LHvMx7rH4Zhnf9sIkoGi7+7JhaTCT8ie5OyisVsNOJ
# q/T7DATdQEzr0bNVNp+j/ITJy3k3B58FEbPhHq0eQMPPLN1eSrB+RaORo317aT4f
# cFHuA6/xjSjrrDP3gUBgd44M76gmVo8KeRsZnED3xmzI/6BKwfgxOa38iuU4G1DL
# QSCP0gmauEy6kIxVgUwyhq/LRWlVMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMC
# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV
# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp
# bWUtU3RhbXAgUENBIDIwMTACEzMAAAH+0KjCezQhCwEAAQAAAf4wDQYJYIZIAWUD
# BAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0B
# CQQxIgQggzh+F0KON/ZnuWWXFI63KrPmjoZ7Pv9FMNTL9ogXRYMwgfoGCyqGSIb3
# DQEJEAIvMYHqMIHnMIHkMIG9BCARhczd/FPInxjR92m2hPWqc+vGOG1+/I0WtkCs
# tyh0eTCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB
# /tCowns0IQsBAAEAAAH+MCIEIOfhByReV8o8j+oBn7w8jI+xv6Rbs2+LIBdN81kv
# 6V52MA0GCSqGSIb3DQEBCwUABIICAFA6nXyIEwL7Z80Gsshz7VPQJogp7vFgirrs
# UeBa1j3eQNmMD+zkrD+gj1T5BPAOi+Y5dqQLItPD2OhHwNtv5D3M+gCFYDt8JQfZ
# 35QgXWYvLBG9mpx+HHjXNQtjM7frKbUjNljRJQTpVoKojzGQjofyN++O3Aq2V/d9
# uUZ+59bUbUpxw5xiSJ4NlAfFXuSh1XqLxw+6Q6DTFm1sAW/d4+va9BH8bIBna1bL
# 4ZRArNmd3Xcr1H2345+uKOLxQ18rXnTurDeipdvkYAdi4tSjsbskWagKk2E9IlwY
# tRDjGoRde8nF0ECIEeEjrCHiW17bV+VaVo4oioDh5UyGMdnVnAhPznQCHgAJVlvc
# sZWggC+iJjarpjXBHzgGXsnzv62FX9DAL5Oq1TJqPsXv+APATRByMKAVHhskNMIZ
# +MUYQkv+yWS4ULPZVUl4tTswF6JAUjwPK0wnH280iHNFz7d9GbnP7l+WqsACbxBA
# 66i/UhwU98HJ6xtgg9jST5cQP3Wam6ZB7/PTIMkSzruKUC+RFYUiYINOsWOUniPv
# F+W70pEU4ewXMA0o5amJLk3GmYGzJfph0Ih0rrspFoC6ecM88MpfhcLmP0JWYyt7
# GI5WPTMtphyq54mSfhto9SFbWFh63frJWVcl1gxxMzVtrWVOKy786D7RPp/AFDTG
# DmJ2/fwU
# SIG # End signature block