ExchangeOnline

1.4.1

ExchangeOnline.psm1

                                <#

.Synopsis Validates a given Uri

#>

function Test-Uri

{

    [CmdletBinding()]

    [OutputType([bool])]

    Param

    (

        # Uri to be validated

        [Parameter(Mandatory=$true, ValueFromPipelineByPropertyName=$true, Position=0)]

        [string]

        $UriString

    )

    [Uri]$uri = $UriString -as [Uri]

    $uri.AbsoluteUri -ne $null -and $uri.Scheme -eq 'https'

}

<#

.Synopsis Is Cloud Shell Environment

#>

function global:IsCloudShellEnvironment()

{

    if ((-not (Test-Path env:"ACC_CLOUD")) -or ((get-item env:"ACC_CLOUD").Value -ne "PROD"))

    {

        return $false

    }

    return $true

}

<#

.Synopsis Override Get-PSImplicitRemotingSession function for reconnection

#>

function global:UpdateImplicitRemotingHandler()

{

    $modules = Get-Module tmp_*

    foreach ($module in $modules)

    {

        [bool]$moduleProcessed = $false

        [string] $moduleUrl = $module.Description

        [int] $queryStringIndex = $moduleUrl.IndexOf("?")

        if ($queryStringIndex -gt 0)

        {

            $moduleUrl = $moduleUrl.SubString(0,$queryStringIndex)

        }

        if ($moduleUrl.EndsWith("/PowerShell-LiveId", [StringComparison]::OrdinalIgnoreCase) -or $moduleUrl.EndsWith("/PowerShell", [StringComparison]::OrdinalIgnoreCase))

        {

            & $module { ${function:Get-PSImplicitRemotingSession} = `

            {

                param(

                    [Parameter(Mandatory = $true, Position = 0)]

                    [string]

                    $commandName

                )

                if (($script:PSSession -eq $null) -or ($script:PSSession.Runspace.RunspaceStateInfo.State -ne 'Opened'))

                {

                    Set-PSImplicitRemotingSession `

                        (& $script:GetPSSession `

                            -InstanceId $script:PSSession.InstanceId.Guid `

                            -ErrorAction SilentlyContinue )

                }

                if (($script:PSSession -ne $null) -and ($script:PSSession.Runspace.RunspaceStateInfo.State -eq 'Disconnected'))

                {

                    # If we are handed a disconnected session, try re-connecting it before creating a new session.

                    Set-PSImplicitRemotingSession `

                        (& $script:ConnectPSSession `

                            -Session $script:PSSession `

                            -ErrorAction SilentlyContinue)

                }

                if (($script:PSSession -eq $null) -or ($script:PSSession.Runspace.RunspaceStateInfo.State -ne 'Opened'))

                {

                    Write-PSImplicitRemotingMessage ('Creating a new Remote PowerShell session using MFA for implicit remoting of "{0}" command ...' -f $commandName)

                    if (($isCloudShell = IsCloudShellEnvironment) -eq $false)

                    {

                        $session = New-ExoPSSession -UserPrincipalName $global:UserPrincipalName -ConnectionUri $global:ConnectionUri -AzureADAuthorizationEndpointUri $global:AzureADAuthorizationEndpointUri -PSSessionOption $global:PSSessionOption -Credential $global:Credential -BypassMailboxAnchoring:$global:BypassMailboxAnchoring -DelegatedOrg $global:DelegatedOrganization 

                    }

                    else

                    {

                        $session = New-ExoPSSession -ConnectionUri $global:ConnectionUri -AzureADAuthorizationEndpointUri $global:AzureADAuthorizationEndpointUri -PSSessionOption $global:PSSessionOption -BypassMailboxAnchoring:$global:BypassMailboxAnchoring -DelegatedOrg $global:DelegatedOrganization

                    }

                    if ($session -ne $null)

                    {

                        Set-PSImplicitRemotingSession -CreatedByModule $true -PSSession $session

                    }

                    RemoveBrokenOrClosedPSSession

                }

                if (($script:PSSession -eq $null) -or ($script:PSSession.Runspace.RunspaceStateInfo.State -ne 'Opened'))

                {

                    throw 'No session has been associated with this implicit remoting module'

                }

                return [Management.Automation.Runspaces.PSSession]$script:PSSession

            }}

        }

    }

}

<#

.Synopsis Remove broken and closed sessions

#>

function global:RemoveBrokenOrClosedPSSession()

{

    $psBroken = Get-PSSession | where-object {$_.State -like "*Broken*"}

    $psClosed = Get-PSSession | where-object {$_.State -like "*Closed*"}

    if ($psBroken.count -gt 0)

    {

        for ($index = 0; $index -lt $psBroken.count; $index++)

        {

            Remove-PSSession -session $psBroken[$index]

        }

    }

    if ($psClosed.count -gt 0)

    {

        for ($index = 0; $index -lt $psClosed.count; $index++)

        {

            Remove-PSSession -session $psClosed[$index]

        }

    }

}

<#

.SYNOPSIS Extract organization name from UserPrincipalName

#>

function Get-OrgNameFromUPN

{

    param([string] $UPN)

    $fields = $UPN -split '@'

    return $fields[-1]

}

###### Begin Main ######

function Connect-EXOService 

{

    <#

        .SYNOPSIS

            To connect in other Office 365 offerings, use the following settings:

             - Office 365 operated by 21Vianet: -ConnectionURI https://partner.outlook.cn/PowerShell-LiveID -AzureADAuthorizationEndpointUri https://login.chinacloudapi.cn/common

             - Office 365 Germany: -ConnectionURI https://outlook.office.de/PowerShell-LiveID -AzureADAuthorizationEndpointUri https://login.microsoftonline.de/common

             - Office 365 U.S. Government GCC High: -ConnectionURI https://outlook.office365.us -AzureADAuthorizationEndpointUri https://login.microsoftonline.us/common

             - Office 365 U.S. Government DoD: -ConnectionURI https://outlook-dod.office365.us -AzureADAuthorizationEndpointUri https://login.microsoftonline.us/common

            - PSSessionOption accept object created using New-PSSessionOption

            - EnableEXOTelemetry To collect telemetry on Exchange cmdlets. Default value is False.

            - TelemetryFilePath Telemetry records will be written to this file. Default value is %TMP%\EXOCmdletTelemetry\EXOCmdletTelemetry-yyyymmdd-hhmmss.csv

            - DoLogErrorMessage Switch to enable/disable error message logging in telemetry file. Default value is True.

            - DelegatedOrg Domain name of Delegated Organization if you want to manage another tenant

        .DESCRIPTION

            This PowerShell module allows you to connect to Exchange Online service

        .LINK

            https://go.microsoft.com/fwlink/p/?linkid=837645

    #>

    [CmdletBinding()]

    param(

        # Connection Uri for the Remote PowerShell endpoint

        [string] $ConnectionUri = 'https://outlook.office365.com/PowerShell-LiveId',

        # Azure AD Authorization endpoint Uri that can issue the OAuth2 access tokens

        [string] $AzureADAuthorizationEndpointUri = 'https://login.windows.net/common',

        # PowerShell session options to be used when opening the Remote PowerShell session

        [System.Management.Automation.Remoting.PSSessionOption] $PSSessionOption = $null,

        # Switch to bypass use of mailbox anchoring hint.

        [switch] $BypassMailboxAnchoring = $false,

        # Delegated Organization Name

        [string] $DelegatedOrganization = '',

        # Support for Prefixes

        [string] $Prefix = ''

    )

    DynamicParam

    {

        if (($isCloudShell = IsCloudShellEnvironment) -eq $false)

        {

            $attributes = New-Object System.Management.Automation.ParameterAttribute

            $attributes.Mandatory = $false

            $attributeCollection = New-Object System.Collections.ObjectModel.Collection[System.Attribute]

            $attributeCollection.Add($attributes)

            # User Principal Name or email address of the user

            $UserPrincipalName = New-Object System.Management.Automation.RuntimeDefinedParameter('UserPrincipalName', [string], $attributeCollection)

            $UserPrincipalName.Value = ''

            # User Credential to Logon

            $Credential = New-Object System.Management.Automation.RuntimeDefinedParameter('Credential', [System.Management.Automation.PSCredential], $attributeCollection)

            $Credential.Value = $null

            # Switch to collect telemetry on command execution. 

            $EnableEXOTelemetry = New-Object System.Management.Automation.RuntimeDefinedParameter('EnableEXOTelemetry', [switch], $attributeCollection)

            $EnableEXOTelemetry.Value = $false

            # Where to store EXO command telemetry data. By default telemetry is stored in 

            # %TMP%/EXOTelemetry/EXOCmdletTelemetry-yyyymmdd-hhmmss.csv.

            $TelemetryFilePath = New-Object System.Management.Automation.RuntimeDefinedParameter('TelemetryFilePath', [string], $attributeCollection)

            $TelemetryFilePath.Value = ''

            # Switch to Disable error message logging in telemetry file.

            $DoLogErrorMessage = New-Object System.Management.Automation.RuntimeDefinedParameter('DoLogErrorMessage', [switch], $attributeCollection)

            $DoLogErrorMessage.Value = $true

            $paramDictionary = New-object System.Management.Automation.RuntimeDefinedParameterDictionary

            $paramDictionary.Add('UserPrincipalName', $UserPrincipalName)

            $paramDictionary.Add('Credential', $Credential)

            $paramDictionary.Add('EnableEXOTelemetry', $EnableEXOTelemetry)

            $paramDictionary.Add('TelemetryFilePath', $TelemetryFilePath)

            $paramDictionary.Add('DoLogErrorMessage', $DoLogErrorMessage)

            return $paramDictionary

        }

        else

        {

            $attributes = New-Object System.Management.Automation.ParameterAttribute

            $attributes.Mandatory = $false

            $attributeCollection = New-Object System.Collections.ObjectModel.Collection[System.Attribute]

            $attributeCollection.Add($attributes)

            # Switch to MSI auth 

            $Device = New-Object System.Management.Automation.RuntimeDefinedParameter('Device', [switch], $attributeCollection)

            $Device.Value = $false

            $paramDictionary = New-object System.Management.Automation.RuntimeDefinedParameterDictionary

            $paramDictionary.Add('Device', $Device)

            return $paramDictionary

        }

    }

    process {

        # Validate parameters

        if (-not (Test-Uri $ConnectionUri))

        {

            throw "Invalid ConnectionUri parameter '$ConnectionUri'"

        }

        if (-not (Test-Uri $AzureADAuthorizationEndpointUri))

        {

            throw "Invalid AzureADAuthorizationEndpointUri parameter '$AzureADAuthorizationEndpointUri'"

        }

        # Keep track of error count at beginning.

        $errorCountAtStart = $global:Error.Count;

        try

        {

            # Cleanup old ps sessions

            Get-PSSession | Remove-PSSession

            $ExoPowershellModule = "Microsoft.Exchange.Management.ExoPowershellModule.dll";

            $ModulePath = [System.IO.Path]::Combine($PSScriptRoot, $ExoPowershellModule);

            $global:ConnectionUri = $ConnectionUri;

            $global:AzureADAuthorizationEndpointUri = $AzureADAuthorizationEndpointUri;

            $global:PSSessionOption = $PSSessionOption;

            $global:BypassMailboxAnchoring = $BypassMailboxAnchoring;

            $global:DelegatedOrganization = $DelegatedOrganization;

            if ($isCloudShell -eq $false)

            {

                $global:UserPrincipalName = $UserPrincipalName.Value;

                $global:Credential = $Credential.Value;

            }

            else

            {

                $global:Device = $Device.Value;

            }

            Import-Module $ModulePath;

            if ($isCloudShell -eq $false)

            {

                $PSSession = New-ExoPSSession -UserPrincipalName $UserPrincipalName.Value -ConnectionUri $ConnectionUri -AzureADAuthorizationEndpointUri $AzureADAuthorizationEndpointUri -PSSessionOption $PSSessionOption -Credential $Credential.Value -BypassMailboxAnchoring:$BypassMailboxAnchoring -DelegatedOrg $DelegatedOrganization

            }

            else

            {

                $PSSession = New-ExoPSSession -ConnectionUri $ConnectionUri -AzureADAuthorizationEndpointUri $AzureADAuthorizationEndpointUri -PSSessionOption $PSSessionOption -BypassMailboxAnchoring:$BypassMailboxAnchoring -Device:$Device.Value -DelegatedOrg $DelegatedOrganization

            }

            if ($PSSession -ne $null)

            {                

                $PSSessionModuleInfo = Import-PSSession $PSSession -AllowClobber

                #Import-Module (Import-PSSession $PSSession -AllowClobber -DisableNameChecking -Verbose:$false) -Global -DisableNameChecking

                if($prefix -ne ''){

                    Import-Module $PSSessionModuleInfo -Global -DisableNameChecking -Prefix $Prefix

                }

                else{

                    Import-Module $PSSessionModuleInfo -Global -DisableNameChecking

                }

                UpdateImplicitRemotingHandler

                # If we are configured to collect telemetry, add telemetry wrappers. 

                if ($EnableEXOTelemetry.Value -eq $true)

                {

                    $TelemetryFilePath.Value = Add-EXOClientTelemetryWrapper -Organization (Get-OrgNameFromUPN -UPN $UserPrincipalName.Value) -PSSessionModuleName $PSSessionModuleInfo.Name -TelemetryFilePath $TelemetryFilePath.Value -DoLogErrorMessage:$DoLogErrorMessage.Value

                }

            }

        }

        catch

        {

            throw $_

        }

        Finally 

        {

            # If telemetry is enabled, log errors generated from this cmdlet also. 

            if ($EnableEXOTelemetry.Value -eq $true)

            {

                $errorCountAtProcessEnd = $global:Error.Count 

                # If we have any errors during this cmdlet execution, log it. 

                if ($errorCountAtProcessEnd -gt $errorCountAtStart)

                {

                    if (!$TelemetryFilePath.Value)

                    {

                        $TelemetryFilePath.Value = New-EXOClientTelemetryFilePath

                    }

                    # Log errors which are encountered during Connect-EXOPSSession execution. 

                    Write-Warning("Writing Connect-EXOPSSession errors to " + $TelemetryFilePath.Value)

                    Push-EXOTelemetryRecord -TelemetryFilePath $TelemetryFilePath.Value -CommandName Connect-EXOPSSession -OrganizationName  $global:ExPSTelemetryOrganization -ScriptName $global:ExPSTelemetryScriptName  -ScriptExecutionGuid $global:ExPSTelemetryScriptExecutionGuid -ErrorObject $global:Error -ErrorRecordsToConsider ($errorCountAtProcessEnd - $errorCountAtStart) 

                }

            }

        }

    }

}

function Connect-IPPSSession

{

    <#

        .SYNOPSIS

            Connect-IPPSSession -ConnectionURI https://ps.compliance.protection.outlook.com/PowerShell-LiveId -AzureADAuthorizationEndpointUri https://login.windows.net/common

            NOTE: PSSessionOption accept object created using New-PSSessionOption

                  Please add -DelegatedOrganization para name and its value (domain name) if you want manage another tenant

        .DESCRIPTION

            This cmdlet allows you to connect to Exchange Online Protection Service

    #>

    [CmdletBinding()]

    param(

        # Connection Uri for the Remote PowerShell endpoint

        [string] $ConnectionUri = 'https://ps.compliance.protection.outlook.com/PowerShell-LiveId',

        # Azure AD Authorization endpoint Uri that can issue the OAuth2 access tokens

        [string] $AzureADAuthorizationEndpointUri = 'https://login.windows.net/common',

        # Delegated Organization Name

        [string] $DelegatedOrganization = '',

        # PowerShell session options to be used when opening the Remote PowerShell session

        [System.Management.Automation.Remoting.PSSessionOption] $PSSessionOption = $null,

        # Switch to bypass use of mailbox anchoring hint.

        [switch] $BypassMailboxAnchoring = $false

    )

    DynamicParam

    {

        if (($isCloudShell = IsCloudShellEnvironment) -eq $false)

        {

            $attributes = New-Object System.Management.Automation.ParameterAttribute

            $attributes.Mandatory = $false

            $attributeCollection = New-Object System.Collections.ObjectModel.Collection[System.Attribute]

            $attributeCollection.Add($attributes)

            # User Principal Name or email address of the user

            $UserPrincipalName = New-Object System.Management.Automation.RuntimeDefinedParameter('UserPrincipalName', [string], $attributeCollection)

            $UserPrincipalName.Value = ''

            # User Credential to Logon

            $Credential = New-Object System.Management.Automation.RuntimeDefinedParameter('Credential', [System.Management.Automation.PSCredential], $attributeCollection)

            $Credential.Value = $null

            $paramDictionary = New-object System.Management.Automation.RuntimeDefinedParameterDictionary

            $paramDictionary.Add('UserPrincipalName', $UserPrincipalName)

            $paramDictionary.Add('Credential', $Credential)

            return $paramDictionary

        }

        else

        {

            $attributes = New-Object System.Management.Automation.ParameterAttribute

            $attributes.Mandatory = $false

            $attributeCollection = New-Object System.Collections.ObjectModel.Collection[System.Attribute]

            $attributeCollection.Add($attributes)

            # Switch to MSI auth 

            $Device = New-Object System.Management.Automation.RuntimeDefinedParameter('Device', [switch], $attributeCollection)

            $Device.Value = $false

            $paramDictionary = New-object System.Management.Automation.RuntimeDefinedParameterDictionary

            $paramDictionary.Add('Device', $Device)

            return $paramDictionary

        }

    }

    process {

        [string]$newUri = $null;

        if (![string]::IsNullOrWhiteSpace($DelegatedOrganization))

        {

            [UriBuilder] $uriBuilder = New-Object -TypeName UriBuilder -ArgumentList $ConnectionUri;

            [string] $queryToAppend = "DelegatedOrg={0}" -f $DelegatedOrganization;

            if ($uriBuilder.Query -ne $null -and $uriBuilder.Query.Length -gt 0)

            {

                [string] $existingQuery = $uriBuilder.Query.Substring(1);

                $uriBuilder.Query = $existingQuery + "&" + $queryToAppend;

            }

            else

            {

                $uriBuilder.Query = $queryToAppend;

            }

            $newUri = $uriBuilder.ToString();

        }

        else

        {

           $newUri = $ConnectionUri;

        }

        if ($isCloudShell -eq $false)

        {

            Connect-EXOPSSession -ConnectionUri $newUri -AzureADAuthorizationEndpointUri $AzureADAuthorizationEndpointUri -UserPrincipalName $UserPrincipalName.Value -PSSessionOption $PSSessionOption -Credential $Credential.Value -BypassMailboxAnchoring:$BypassMailboxAnchoring

        }

        else

        {

            Connect-EXOPSSession -ConnectionUri $newUri -AzureADAuthorizationEndpointUri $AzureADAuthorizationEndpointUri -PSSessionOption $PSSessionOption -BypassMailboxAnchoring:$BypassMailboxAnchoring -Device:$Device.Value

        }

    }

}

# SIG # Begin signature block

# MIIdrgYJKoZIhvcNAQcCoIIdnzCCHZsCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUnt7EaigNa3AXCnXLRWjFxpl3

# 0IGgghhqMIIE2jCCA8KgAwIBAgITMwAAAR+XYwozuYPXKwAAAAABHzANBgkqhkiG

# 9w0BAQUFADB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSEw

# HwYDVQQDExhNaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EwHhcNMTgxMDI0MjEwNzM3

# WhcNMjAwMTEwMjEwNzM3WjCByjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEm

# MCQGA1UECxMdVGhhbGVzIFRTUyBFU046NDlCQy1FMzdBLTIzM0MxJTAjBgNVBAMT

# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggEiMA0GCSqGSIb3DQEBAQUA

# A4IBDwAwggEKAoIBAQCppklVnT29zi13dODY0ejMsdoe7n2iCvC6QdH5FJkRYfy+

# cXoHBmpDgDF/65Kt9GMmu/K8HKAzjKHeG18rgRXQagLwIIH5yCRbXGwOfuHIu1dC

# 26o/CT22+YlRvBJwH36WVjML8BLNDT3Fr+yhU4ZM7Hbegql4r5kSgsrrjyx5bJY5

# r2N0G7RDnbhRd79iqXbvDnvkatjB5xgluzfQEAPbJjXjmRb5685DEEZg1qFsQJer

# XuBA+ZVevuCX0DuDj8UmhHGC5Y32sulFTn283R6LU+8+AALtbHOOIHV7QHNYV8mN

# jxHuKLvE9tNEGIpbG2WF2yQkSGe3sRbGQmaILWeHAgMBAAGjggEJMIIBBTAdBgNV

# HQ4EFgQUuPNVyPmK8/JJioMtQFlTUeF3IOgwHwYDVR0jBBgwFoAUIzT42VJGcArt

# QPt2+7MrsMM1sw8wVAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5taWNyb3Nv

# ZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljcm9zb2Z0VGltZVN0YW1wUENBLmNy

# bDBYBggrBgEFBQcBAQRMMEowSAYIKwYBBQUHMAKGPGh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2kvY2VydHMvTWljcm9zb2Z0VGltZVN0YW1wUENBLmNydDATBgNV

# HSUEDDAKBggrBgEFBQcDCDANBgkqhkiG9w0BAQUFAAOCAQEAmAYfr1fEosYv9VTf

# 0Msya6aFm0Id6Zq1O5jNy74ByTh7EEac/l/4e3DOyrczHS6zwvMKYzLtmifeGZvD

# 70qbbUfF+yjpzpyu00uuzZ1HNOpktp5/dJXkzz0NyVnEeFGOXLpNyZNIA9dKGDwN

# XbsEUukTX9lJFx5RcBhE8AOl22IHSgJ6NYf4DpATCjSJbC9IrKYGBchHobCLZHEt

# cLBjxXiWJRG2YY+LBAVW95gwNdPmLCKrob7SdNLK1VnM35Q2VgNF7YfDc5nw4E7C

# 4VaZvlyuDET6fYycIVPx5GsLhx3it4a+WKcBwarK7inH9skUArxMZrpWmjuQ/o4b

# GprEnjCCBf8wggPnoAMCAQICEzMAAAEDXiUcmR+jHrgAAAAAAQMwDQYJKoZIhvcN

# AQELBQAwfjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEoMCYG

# A1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAxMTAeFw0xODA3MTIy

# MDA4NDhaFw0xOTA3MjYyMDA4NDhaMHQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xHjAcBgNVBAMTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjCCASIw

# DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANGUdjbmhqs2/mn5RnyLiFDLkHB/

# sFWpJB1+OecFnw+se5eyznMK+9SbJFwWtTndG34zbBH8OybzmKpdU2uqw+wTuNLv

# z1d/zGXLr00uMrFWK040B4n+aSG9PkT73hKdhb98doZ9crF2m2HmimRMRs621TqM

# d5N3ZyGctloGXkeG9TzRCcoNPc2y6aFQeNGEiOIBPCL8r5YIzF2ZwO3rpVqYkvXI

# QE5qc6/e43R6019Gl7ziZyh3mazBDjEWjwAPAf5LXlQPysRlPwrjo0bb9iwDOhm+

# aAUWnOZ/NL+nh41lOSbJY9Tvxd29Jf79KPQ0hnmsKtVfMJE75BRq67HKBCMCAwEA

# AaOCAX4wggF6MB8GA1UdJQQYMBYGCisGAQQBgjdMCAEGCCsGAQUFBwMDMB0GA1Ud

# DgQWBBRHvsDL4aY//WXWOPIDXbevd/dA/zBQBgNVHREESTBHpEUwQzEpMCcGA1UE

# CxMgTWljcm9zb2Z0IE9wZXJhdGlvbnMgUHVlcnRvIFJpY28xFjAUBgNVBAUTDTIz

# MDAxMis0Mzc5NjUwHwYDVR0jBBgwFoAUSG5k5VAF04KqFzc3IrVtqMp1ApUwVAYD

# VR0fBE0wSzBJoEegRYZDaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j

# cmwvTWljQ29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNybDBhBggrBgEFBQcBAQRV

# MFMwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljQ29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNydDAMBgNVHRMBAf8E

# AjAAMA0GCSqGSIb3DQEBCwUAA4ICAQCf9clTDT8NJuyiRNgN0Z9jlgZLPx5cxTOj

# pMNsrx/AAbrrZeyeMxAPp6xb1L2QYRfnMefDJrSs9SfTSJOGiP4SNZFkItFrLTuo

# LBWUKdI3luY1/wzOyAYWFp4kseI5+W4OeNgMG7YpYCd2NCSb3bmXdcsBO62CEhYi

# gIkVhLuYUCCwFyaGSa/OfUUVQzSWz4FcGCzUk/Jnq+JzyD2jzfwyHmAc6bAbMPss

# uwculoSTRShUXM2W/aDbgdi2MMpDsfNIwLJGHF1edipYn9Tu8vT6SEy1YYuwjEHp

# qridkPT/akIPuT7pDuyU/I2Au3jjI6d4W7JtH/lZwX220TnJeeCDHGAK2j2w0e02

# v0UH6Rs2buU9OwUDp9SnJRKP5najE7NFWkMxgtrYhK65sB919fYdfVERNyfotTWE

# cfdXqq76iXHJmNKeWmR2vozDfRVqkfEU9PLZNTG423L6tHXIiJtqv5hFx2ay1//O

# kpB15OvmhtLIG9snwFuVb0lvWF1pKt5TS/joynv2bBX5AxkPEYWqT5q/qlfdYMb1

# cSD0UaiayunR6zRHPXX6IuxVP2oZOWsQ6Vo/jvQjeDCy8qY4yzWNqphZJEC4Omek

# B1+g/tg7SRP7DOHtC22DUM7wfz7g2QjojCFKQcLe645b7gPDHW5u5lQ1ZmdyfBrq

# UvYixHI/rjCCBgcwggPvoAMCAQICCmEWaDQAAAAAABwwDQYJKoZIhvcNAQEFBQAw

# XzETMBEGCgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29m

# dDEtMCsGA1UEAxMkTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# MB4XDTA3MDQwMzEyNTMwOVoXDTIxMDQwMzEzMDMwOVowdzELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEhMB8GA1UEAxMYTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgUENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Fssd/b

# SJIqfGsuGeG94uPFmVEjUK3O3RhOJA/u0afRTK10MCAR6wfVVJUVSZQbQpKumFww

# JtoAa+h7veyJBw/3DgSY8InMH8szJIed8vRnHCz8e+eIHernTqOhwSNTyo36Rc8J

# 0F6v0LBCBKL5pmyTZ9co3EZTsIbQ5ShGLieshk9VUgzkAyz7apCQMG6H81kwnfp+

# 1pez6CGXfvjSE/MIt1NtUrRFkJ9IAEpHZhEnKWaol+TTBoFKovmEpxFHFAmCn4Tt

# VXj+AZodUAiFABAwRu233iNGu8QtVJ+vHnhBMXfMm987g5OhYQK1HQ2x/PebsgHO

# IktU//kFw8IgCwIDAQABo4IBqzCCAacwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E

# FgQUIzT42VJGcArtQPt2+7MrsMM1sw8wCwYDVR0PBAQDAgGGMBAGCSsGAQQBgjcV

# AQQDAgEAMIGYBgNVHSMEgZAwgY2AFA6sgmBAVieX5SUT/CrhClOVWeSkoWOkYTBf

# MRMwEQYKCZImiZPyLGQBGRYDY29tMRkwFwYKCZImiZPyLGQBGRYJbWljcm9zb2Z0

# MS0wKwYDVQQDEyRNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHmC

# EHmtFqFKoKWtTHNY9AcTLmUwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC5t

# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvbWljcm9zb2Z0cm9vdGNlcnQu

# Y3JsMFQGCCsGAQUFBwEBBEgwRjBEBggrBgEFBQcwAoY4aHR0cDovL3d3dy5taWNy

# b3NvZnQuY29tL3BraS9jZXJ0cy9NaWNyb3NvZnRSb290Q2VydC5jcnQwEwYDVR0l

# BAwwCgYIKwYBBQUHAwgwDQYJKoZIhvcNAQEFBQADggIBABCXisNcA0Q23em0rXfb

# znlRTQGxLnRxW20ME6vOvnuPuC7UEqKMbWK4VwLLTiATUJndekDiV7uvWJoc4R0B

# hqy7ePKL0Ow7Ae7ivo8KBciNSOLwUxXdT6uS5OeNatWAweaU8gYvhQPpkSokInD7

# 9vzkeJkuDfcH4nC8GE6djmsKcpW4oTmcZy3FUQ7qYlw/FpiLID/iBxoy+cwxSnYx

# PStyC8jqcD3/hQoT38IKYY7w17gX606Lf8U1K16jv+u8fQtCe9RTciHuMMq7eGVc

# WwEXChQO0toUmPU8uWZYsy0v5/mFhsxRVuidcJRsrDlM1PZ5v6oYemIp76KbKTQG

# dxpiyT0ebR+C8AvHLLvPQ7Pl+ex9teOkqHQ1uE7FcSMSJnYLPFKMcVpGQxS8s7Ow

# TWfIn0L/gHkhgJ4VMGboQhJeGsieIiHQQ+kr6bv0SMws1NgygEwmKkgkX1rqVu+m

# 3pmdyjpvvYEndAYR7nYhv5uCwSdUtrFqPYmhdmG0bqETpr+qR/ASb/2KMmyy/t9R

# yIwjyWa9nR2HEmQCPS2vWY+45CHltbDKY7R4VAXUQS5QrJSwpXirs6CWdRrZkocT

# dSIvMqgIbqBbjCW/oO+EyiHW6x5PyZruSeD3AWVviQt9yGnI5m7qp5fOMSn/DsVb

# XNhNG6HY+i+ePy5VFmvJE6P9MIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg

# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03

# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr

# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg

# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy

# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9

# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh

# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k

# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB

# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn

# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90

# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w

# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o

# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa

# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG

# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV

# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb

# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l

# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6

# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0

# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560

# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam

# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa

# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah

# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA

# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt

# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr

# /Xmfwb1tbWrJUnMTDXpQzTGCBK4wggSqAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp

# Z25pbmcgUENBIDIwMTECEzMAAAEDXiUcmR+jHrgAAAAAAQMwCQYFKw4DAhoFAKCB

# wjAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYK

# KwYBBAGCNwIBFTAjBgkqhkiG9w0BCQQxFgQUj4knr7pAhRrvQF1YovdewjvVXLMw

# YgYKKwYBBAGCNwIBDDFUMFKgLoAsAEMAcgBlAGEAdABlAEUAeABvAFAAUwBTAGUA

# cwBzAGkAbwBuAC4AcABzADGhIIAeaHR0cDovL21pY3Jvc29mdC5jb20vRXhjaGFu

# Z2UgMA0GCSqGSIb3DQEBAQUABIIBAKZIIT4qP0oktTFSzpszNuQHpICheuua8ZKn

# CX6MEif6+npTCilNB1NH5tfFLaxG+0uQgluw3bUA4Cktxdy697oQHuBOOdA8MfZJ

# mS6Wb+1+WCHsfO1Iag1QJ172+KIdMf+edIpPEFkYhadgCMV6EadQApftBQr3/bhc

# yDNzfrUwTpzEK4mThY299PVjGZHlDTa+CQHpdesxrdzLhRkWm3o+Yn/2OuCBp8tt

# 06yUoc0CpCseN7CDuc49j85qGbyvfClSlwA4QmH8BXeIqfFtnev+6BKhsYOj3tGw

# VlVJIY5av7nauEqI+m0iD8pD5BjEl3eoGmwvaOqkRkkbKSr/6pyhggIoMIICJAYJ

# KoZIhvcNAQkGMYICFTCCAhECAQEwgY4wdzELMAkGA1UEBhMCVVMxEzARBgNVBAgT

# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEhMB8GA1UEAxMYTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB

# AhMzAAABH5djCjO5g9crAAAAAAEfMAkGBSsOAwIaBQCgXTAYBgkqhkiG9w0BCQMx

# CwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xOTA1MDQwNDM0MzdaMCMGCSqG

# SIb3DQEJBDEWBBSibJ6Z524/3TREcffLwDzXwrHK6zANBgkqhkiG9w0BAQUFAASC

# AQCgVLCbDqnztL6DXCchKH3kSCqLmTzsxTdK/wQ6MWz4Yp7VeFbbJCfRinjbgc3M

# RBIsKF8jX1UsVLXTGksb8qaLRjNrGa/loZ0hvri23W3B21NJFqTmxXU0px5hRZjZ

# Omr/hyfEjEUh9zgWil6/MSD45DwnlhGne+95ycaY0TLpnC8JbU5UoyBfdfpr0OCb

# x3UiIuIiVxPo/25v1zsrKa+F0F2SG8LAIadRwCH4RWj9hABxM5i4VLlW+rxpIJej

# tR8/MXRggR+/UvI1yDVKDL/0n/3i8DFW5BX/eBHvUaPf6ypP6KSt3MPg4fb+zw85

# /2DS3vpd8q4DoThtBEfFfVGV

# SIG # End signature block