ExoHelper

2.0.1

ExoHelper.psm1

                                using namespace ExoHelper

#region Public functions

function New-ExoConnection

{

<#

.SYNOPSIS

    Initializes EXO connection

.DESCRIPTION

    Initializes EXO connection

.OUTPUTS

    None

.EXAMPLE

New-AadAuthenticationFactory -ClientId (Get-ExoDefaultClientId) -TenantId 'mydomain.onmicrosoft.com' -AuthMode Interactive

New-ExoConnection -authenticationfactory $factory

Description

-----------

This command initializes connection to EXO REST API.

It uses instance of AADAuthenticationFactory for authentication with EXO REST API

.EXAMPLE

New-AadAuthenticationFactory -ClientId (Get-ExoDefaultClientId) -TenantId 'mydomain.onmicrosoft.com' -AuthMode Interactive | New-ExoConnection -IPPS

Description

-----------

This command initializes connection to IPPS REST API.

It uses instance of AADAuthenticationFactory for authentication with IPPS REST API passed via pipeline

#>

param

    (

        [Parameter(Mandatory, ValueFromPipeline)]

        #AAD authentication factory created via New-AadAuthenticationFactory

        #for user context, user factory created with clientId = fb78d390-0c51-40cd-8e17-fdbfab77341b (clientId of ExchangeOnlineManagement module) or your app with appropriate scopes assigned

        $AuthenticationFactory,

        [Parameter()]

        #Tenant ID when not the same as specified for factory - tenant native domain (xxx.onmicrosoft.com, or tenant GUID)

        [string]

        $TenantId,

        [Parameter()]

        #UPN of anchor mailbox

        #Default: UPN of caller or static system mailbox  (for app-only context)

        [string]

        $AnchorMailbox,

        [switch]

        #Connection is specialized to call IPPS commands

        #If not present, connection is specialized to call Exchange Online commands

        $IPPS

    )

    process

    {

        $Connection = [PSCustomObject]@{

            AuthenticationFactory = $AuthenticationFactory

            ConnectionId = [Guid]::NewGuid().ToString()

            TenantId = $null

            AnchorMailbox = $null

            ConnectionUri = $null

            IsIPPS = $IPPS.IsPresent

        }

        $claims = Get-ExoToken -Connection $Connection | Test-AadToken -PayloadOnly

        $Connection.TenantId = $claims.tid

        if($IPPS)

        {

            $Connection.ConnectionUri = "https://eur01b.ps.compliance.protection.outlook.com/AdminApi/beta/$($Connection.TenantId)/InvokeCommand"

        }

        else

        {

            $Connection.ConnectionUri = "https://outlook.office365.com/adminapi/beta/$($Connection.TenantId)/InvokeCommand"

        }

        if([string]::IsNullOrEmpty($AnchorMailbox))

        {

            if($null -ne $claims.upn)

            {

                #using caller's mailbox

                $Connection.AnchorMailbox = "UPN:$($claims.upn)"

            }

            else

            {

                #likely app-only context - use same static anchor mailbox as ExchangeOnlineManagement module uses

                $Connection.AnchorMailbox = "DiscoverySearchMailbox{D919BA05-46A6-415f-80AD-7E09334BB852}@$tenantId"

            }

        }

        else

        {

            $Connection.AnchorMailbox = "UPN:$AnchorMailbox"

        }

        $script:ConnectionContext = $Connection

        $script:ConnectionContext

    }

}

function Get-ExoDefaultClientId

{

    [CmdletBinding()]

    param ( )

    process

    {

        'fb78d390-0c51-40cd-8e17-fdbfab77341b'

    }

}

function Get-ExoToken

{

<#

.SYNOPSIS

    Retrieves access token for authentication with EXO REST API

.DESCRIPTION

    Retrieves access token for authentication with EXO REST API via authentication factory

.OUTPUTS

    Hash table with authorization header containing access token, ready to be passed as headers to web request

.EXAMPLE

Get-ExoToken

Description

-----------

Retieve authorizatin header for calling EXO REST API

#>

param

    (

        [Parameter()]

        #Connection context as returned by New-ExoConnection

        #When not specified, uses most recently created connection context

        $Connection = $script:ConnectionContext,

        #Forces reauthentication

        #Usefiu when want to continue working after PIN JIT re-elevation

        [switch]$ForceRefresh

    )

    begin

    {

        if($null -eq $Connection )

        {

            throw 'Call New-ExoConnection first'

        }

    }

    process

    {

        if($Connection.IsIPPS)

        {

           $Scopes = "https://ps.compliance.protection.outlook.com/.default"

        }

        else

        {

            $Scopes = "https://outlook.office365.com/.default"

        }

        Get-AadToken -Factory $Connection.AuthenticationFactory -Scopes $scopes -ForceRefresh:$ForceRefresh

    }

}

function Invoke-ExoCommand

{

<#

.SYNOPSIS

    Invokes EXO REST API to execute command provided

.DESCRIPTION

    Invokes EXO REST API to execute command provided along with parameters for the command and optional list of properties to return if full object is not desired

.OUTPUTS

    Data returned by executed command

.EXAMPLE

Invoke-ExoCommand -Name 'Get-Mailbox' -Parameters @{Identity = 'JohnDoe'} -PropertiesToLoad 'netId'

Description

-----------

This command retrieves mailbox of user JohnDoe and returns just netId property

.EXAMPLE

$connection = New-AadAuthenticationFactory -ClientId (Get-ExoDefaultClientId) -TenantId 'mydomain.onmicrosoft.com' -AuthMode Interactive | New-ExoConnection -IPPS

Invoke-ExoCommand -Connection $connection -Name 'Get-Label' -PropertiesToLoad 'ImmutableId','DisplayName' -RemoveOdataProperties -ShowWarnings

Description

-----------

This command creates connection for IPPS REST API, retrieves list of sensitivity labels returning only ImmutableId and DisplayName properties, and shows any warnings returned by IPPS REST API

#>

    param

    (

        [Parameter(Mandatory)]

        [string]

            #Name of the command to execute

        $Name,

        [Parameter()]

        [hashtable]

            #Hashtable with parameters of the command

        $Parameters = @{},

        [Parameter()]

        [string[]]

            #List of properties to return if not interested in full object

        $PropertiesToLoad,

        [Parameter()]

        [int]

            #Max retries when throttling occurs

        $MaxRetries = 10,

        [Parameter()]

        [int]

            #Max results to return

            #1000 is a minimum, and min increment is 1000

        $ResultSize = [int]::MaxValue,

        [Parameter()]

        [int]

            #Max results to return in single request

            #Default is 100

        $PageSize = 100,

        [switch]

            #If we want to write any warnings returned by EXO REST API

        $ShowWarnings,

        [switch]

            #If we want to remove odata type descriptor properties from the output

        $RemoveOdataProperties,

        [switch]

        #If we want to include rate limits reported by REST API to verbose output

        $ShowRateLimits,

        [Parameter()]

        #Connection context as returned by New-ExoConnection

        #When not specified, uses most recently created connection context

        $Connection = $script:ConnectionContext

    )

    begin

    {

        $body = @{}

        if($PageSize -gt 1000)

        {

            $batchSize = 1000

        }

        if($PageSize -le 0)

        {

            $batchSize = 100

        }

        $batchSize = $pageSize

        $uri = $Connection.ConnectionUri

        if($PropertiesToLoad.Count -gt 0)

        {

            $props = $PropertiesToLoad -join ','

            $uri = "$uri`?`$select=$props"

        }

        #do not show progress from Invoke-WebRequest

        $pref = $progressPreference

        $progressPreference = 'SilentlyContinue'

    }

    process

    {

        $headers = @{}

        $headers['X-CmdletName'] = $Name

        $headers['Prefer'] = "odata.maxpagesize=$batchSize"

        $headers['connection-id'] = $Connection.connectionId

        $headers['X-AnchorMailbox'] = $Connection.anchorMailbox

        $headers['X-ClientApplication'] ='ExoHelper'

        #make sure that hashTable in parameters is properly decorated

        $keys = @()

        $Parameters.Keys | ForEach-Object { $keys += $_ }

        foreach($key in $Keys)

        {

            if($Parameters[$key] -is [hashtable])

            {

                $Parameters[$key]['@odata.type'] =  '#Exchange.GenericHashTable'

            }

            if($Parameters[$key] -is [System.Security.SecureString])

            {

                $cred = new-object System.Net.NetworkCredential -ArgumentList @($null, $Parameters[$key])

                $Parameters[$key] = EncryptValue -UnsecureString $cred.Password

            }

        }

        $body['CmdletInput'] = @{

            CmdletName = $Name

            Parameters = $Parameters

        }

        $retries = 0

        $resultsRetrieved = 0

        $pageUri = $uri

        $shouldContinue = $true #to support ErrorAction = SilentlyContinue that does not throw

        do

        {

            try {

                #new request id for each request

                $headers['client-request-id'] = [Guid]::NewGuid().ToString()

                #provide up to date token for each request of commands returning paged results that may take long to complete

                $headers['Authorization'] = (Get-ExoToken -Connection $Connection).CreateAuthorizationHeader()

                Write-Verbose "$([DateTime]::UtcNow.ToString('o'))`tResults:$resultsRetrieved`tRequestId: $($headers['client-request-id'])`tUri: $pageUri"

                $splat = @{

                    Uri = $pageUri

                    Method = 'Post'

                    Body = ($body | ConvertTo-Json -Depth 9)

                    Headers = $headers

                    ContentType = 'application/json'

                    ErrorAction = 'Stop'

                    Verbose = $false

                }

                #add edition-specific parameters

                if($PSEdition -eq 'Desktop')

                {

                    $splat['UseBasicParsing'] = $true

                }

                else

                {

                    if($psversionTable.PSVersion -gt '7.4') #7.4+ supports ProgressAction

                    {

                        #disable progress bar that slows things down

                        $splat['ProgressAction'] = 'SilentlyContinue'

                    }

                }

                $response = Invoke-WebRequest @splat

                #we may process the headers in the future to see rate limit remaining, etc.

                $responseHeaders = $response.Headers

                $responseData = $response.Content | ConvertFrom-Json

                if($ShowWarnings)

                {

                    foreach($warning in $responseData.'@adminapi.warnings')

                    {

                        Write-Warning $warning

                    }

                }

                $resultsRetrieved+=$responseData.value.Count

                if($RemoveOdataProperties)

                {

                    $responseData.value | RemoveExoOdataProperties

                }

                else {

                    $responseData.value

                }

                $pageUri = $responseData.'@odata.nextLink'

            }

            catch  {

                $ex = $_.exception

                $responseHeaders = $ex.Response.Headers

                if(($PSVersionTable.psEdition -eq 'Desktop' -and $ex -is [System.Net.WebException]) -or ($PSVersionTable.psEdition -eq 'Core' -and $ex -is [Microsoft.PowerShell.Commands.HttpResponseException]))

                {

                    $exoException = $_ | Get-ExoException

                    if($ex.response.statusCode -ne 429 -or $retries -ge $MaxRetries)

                    {

                        #different error or max retries exceeded

                        $shouldContinue = $false

                        if($null -ne $exoException)

                        {

                            throw $exoException

                        }

                        else

                        {

                            throw

                        }

                    }

                }

                else

                {

                    #different exception type

                    $shouldContinue = $false

                    throw

                }

                $retries++

                if($ShowWarnings)

                {

                    Write-Warning "Retry #$retries"

                }

                else

                {

                    Write-Verbose "Retry #$retries"

                }

                #wait some time

                Start-Sleep -Seconds $retries

            }

            finally

            {

                if($ShowRateLimits)

                {

                    if($null -ne $responseHeaders -and $null -ne $responseHeaders['Rate-Limit-Remaining'] -and $null -ne $responseHeaders['Rate-Limit-Reset'])

                    {

                        if($PSVersionTable.psEdition -eq 'Desktop')

                        {

                            Write-Verbose "Rate limit remaining: $($responseHeaders['Rate-Limit-Remaining'])`tRate limit reset: $($responseHeaders['Rate-Limit-Reset'])"

                        }

                        else

                        {

                            #Core

                            Write-Verbose "Rate limit remaining: $($responseHeaders['Rate-Limit-Remaining'][0])`tRate limit reset: $($responseHeaders['Rate-Limit-Reset'][0])"

                        }

                    }

                }

            }

        }while($null -ne $pageUri -and $resultsRetrieved -lt $ResultSize -and $shouldContinue)

    }

    end

    {

        #restore progress preference

        $progressPreference = $pref

    }

}

#endregion Public functions

#region Private functions

#removes odata type descriptor properties from the object

function RemoveExoOdataProperties

{

    [CmdletBinding()]

    param (

        [Parameter(Mandatory, ValueFromPipeline)]

        [PSCustomObject]

        $Object

    )

    begin

    {

        $propsToRemove = $null

    }

    process

    {

        if($null -eq $propsToRemove)

        {

            $propsToRemove = $Object.PSObject.Properties | Where-Object { $_.Name.IndexOf('@') -ge 0 }

        }

        foreach($prop in $propsToRemove)

        {

            $Object.PSObject.Properties.Remove($prop.Name)

        }

        $Object

    }

}

#parses Exo REST Api error response into ExoException object. if possible

function Get-ExoException

{

    param

    (

        [Parameter(Mandatory, ValueFromPipeline)]

        [System.Management.Automation.ErrorRecord]

        $ErrorRecord

    )

    process

    {

        try

        {

            $ex = $ErrorRecord.exception

            if($null -ne $ErrorRecord.ErrorDetails.Message)

            {

                $details = ($ErrorRecord.errordetails.message | ConvertFrom-Json).error

                if($null -ne $details.details.message)

                {

                    $errorData = $details.details.message.split('|')

                }

                else

                {   if($null -ne $details.message)

                    {

                        $errorData = $details.message.split('|')

                    }

                }

                if($errorData.count -eq 3)

                {

                    new-object ExoException -ArgumentList @($ex.Response.StatusCode, $errorData[0], $errorData[1], $errorData[2], $ex)

                }

                else

                {

                    new-object ExoException -ArgumentList @($ex.Response.StatusCode, 'ExoGeneralError', $details.code, $details.message, $ex)

                }

            }

        }

        catch

        {

            #do nothing

        }

        # does not return anything if not in the expected format

    }

}

#encrypts data using MS provided public key

#key stored in module private data

#MS rotates the key regularly; at least one version back is supported

function EncryptValue

{

    [CmdletBinding()]

    param(

        [Parameter(Mandatory, ValueFromPipeline)]

        [AllowEmptyString()]

        [AllowNull()]

        $UnsecureString,

        [Parameter()]

        [string]$Key = $script:PublicKey

    )

    process

    {

        # Handling public key unavailability in client module for protection gracefully

        if ([string]::IsNullOrWhiteSpace($Key))

        {

            # Error out if we are not in a position to protect the sensitive data before sending it over wire.

            throw 'Public key not loaded. Cannot encrypt sensitive data.';

        }

        if (-not [string]::IsNullOrWhiteSpace($UnsecureString))

        {

            $RSA = New-Object -TypeName System.Security.Cryptography.RSACryptoServiceProvider;

            $RSA.FromXmlString($Key);

            $bytes = [System.Text.Encoding]::UTF8.GetBytes($UnsecureString);

            $result = [byte[]]$RSA.Encrypt($bytes, $false);

            $RSA.Dispose();

            $result = [System.Convert]::ToBase64String($result);

            return $result;

        }

        return $UnsecureString;

    }

}

Function Init

{

    param()

    process

    {

        $PublicKeyConfig = $MyInvocation.MyCommand.Module.PrivateData.Configuration.ExoPublicKey

        $cacheFile = [System.IO.Path]::Combine($env:TEMP, $PublicKeyConfig.LocalFile)

        $needsRefresh = $false

        if(-not [System.IO.File]::Exists($cacheFile))

        {

            $needsRefresh = $true

        }

        else {

            # local file exists

            $fileInfo = [System.IO.FileInfo]::new($cacheFile)

            if($fileInfo.LastWriteTime -lt (Get-Date).AddDays(-7))

            {

                $needsRefresh = $true

            }

        }

        if($needsRefresh)

        {

            try

            {

                Invoke-WebRequest -Uri $PublicKeyConfig.Link -OutFile $cacheFile -ErrorAction Stop

            }

            catch

            {

                write-warning 'Local copy of public key file is ooutdated or does not exist and failed to download public key. Module may not work correctly.'

                $script:PublicKey = $null

                return

            }

        }

        $script:PublicKey = [System.IO.File]::ReadAllText($cacheFile)

    }

}

#endregion Private functions

#region Compiled helpers

Add-Type -TypeDefinition @'

    using System;

    using System.Net;

    namespace ExoHelper

    {

        public static class ExoHelperStringExtensions

        {

            //converts Exo size string to long

            public static long FromExoSize(this string input)

            {

                var start = input.IndexOf('(');

                var end = input.IndexOf(' ', start);

                long output = -1;

                long.TryParse(input.Substring(start + 1, end - start - 1).Replace(",", string.Empty), out output);

                return output;

            }

        }

        //exception class for ExoHelper module

        public class ExoException : Exception

        {

            public HttpStatusCode? StatusCode { get; set; }

            public string ExoErrorCode { get; set; }

            public string ExoErrorType { get; set; }

            public ExoException(HttpStatusCode? statusCode, string exoCode, string exoErrorType, string message):this(statusCode, exoCode, exoErrorType, message, null)

            {

            }

            public ExoException(HttpStatusCode? statusCode, string exoCode, string exoErrorType, string message, Exception innerException):base(message, innerException)

            {

                StatusCode = statusCode;

                ExoErrorCode = exoCode;

                ExoErrorType = exoErrorType;

            }

        }

    }

'@

#endregion Compiled helpers

Init

# SIG # Begin signature block

# MIIt/QYJKoZIhvcNAQcCoIIt7jCCLeoCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDzvy7jUWodd/4p

# GOlPqxeooJWzRPAy3oEJ5zNa+EWPpqCCE2AwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggcUMIIE/KADAgECAhAP9xCe9qf4ax3LBs7uih/sMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjMxMTA4MDAwMDAwWhcNMjYxMDAxMjM1OTU5WjCBnDET

# MBEGCysGAQQBgjc8AgEDEwJDWjEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRp

# b24xETAPBgNVBAUTCDA0OTIzNjkzMQswCQYDVQQGEwJDWjEOMAwGA1UEBxMFUHJh

# aGExGjAYBgNVBAoTEUdyZXlDb3JiZWwgcy5yLm8uMRowGAYDVQQDExFHcmV5Q29y

# YmVsIHMuci5vLjCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAJ8t/Qga

# dJKtGC7EqH4pmIU73fInH+j1scmVnrJtXL8tGlKzWZ7qlWDWOJBR3owF9CVqL4IX

# BGImH8Miowj6RKKqhEe9UtxiH5ipV6msnzAjTFkwqR9vjfEm9vrU1JuXWvAWAfYx

# qYg92oyCEBDQxpURpZmqAVSBy9U/ScDwE4NykZGzb0oYSPtzStd8RJvtUkc4126w

# YKMbVe/kdY1mDbKO9DLfpbSIj3vghrH6XeHwEb7/jAVYI7Vl+jUyyqfmYHD7FldQ

# X2fZfwvoGSibY1uWvvP0/vm0yd6uDbDjCDOTQW8Lxl5wvlXEf5ewn2oaPSoa6ov3

# 1XmnxL5iT8c1LM06JFCwfHS9e0NSyNr86IiKaxQO9/MANrYciTicObtD3cBcSRDO

# pEUfhc4TvA5DQZaakSduVJWPdMhxQs9iWeYMOzh5NDTB3xAx8eLBn7Uj++hjI3FQ

# WGEPw4Ew6WoDsJShU0HemlDJGTPW9EZSWHGdNFr1BxXEPb4F7DbjJZn33QIDAQAB

# o4ICAjCCAf4wHwYDVR0jBBgwFoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHQYDVR0O

# BBYEFP2yViJvcgO05qXIH6aJSXB/QcEhMD0GA1UdIAQ2MDQwMgYFZ4EMAQMwKTAn

# BggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB

# /wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBP

# hk1odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2Rl

# U2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDBToFGgT4ZNaHR0cDovL2Ny

# bDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0

# MDk2U0hBMzg0MjAyMUNBMS5jcmwwgZQGCCsGAQUFBwEBBIGHMIGEMCQGCCsGAQUF

# BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wXAYIKwYBBQUHMAKGUGh0dHA6

# Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWdu

# aW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3J0MAkGA1UdEwQCMAAwDQYJKoZIhvcN

# AQELBQADggIBADCe9Fh40HN9RneCehz5MrBy4O9WYsYCMJ7qJ9DsBT+Hed98UOKB

# k/XjgSLfsj5eZRHRmz3HzhGDK1PaRI+yIUVQx96a4qL7adktmrHex3fW39Iq+tPB

# rHtiEIp9rwunATeZpk+876u0AXYD1VDRWCtkL8zwZU0oqL6U/mWEIXzkryCB5N3x

# xtE54jMmW7MKi1+To4yQcrK3zQ394e2dr50L+aF2fgJ5mo1/YJvzyLLhigbqpoYG

# U/gjZonhNJXUaYogpHSTgUaBRlIKZ5xCnrFfJlOsbkhex4QAcdkU6XC+XyYfEQka

# 7ERwgxmEoRT3NlZ8/EbrQxJP4S1H8Z29M4D3L6rXNXXmv0IbfA9FQcqEco3Y3tRW

# dgdcFEwJmYTo0mCZrYTJHgkKW8xDvQ5BJISAp/ydOX5tSa71ojx1/Kp7qizqjBN/

# W77jdqJ89N1y+N/SOiHOCH9NO5pDLsHpTWW/arvjZT0I8dVYkqK0V39rh95XELI+

# NwBZvV4AsKLirjrkZU3pwCz6O99VmPkBqp9TA5wl13NdTpDHuQ6QyVT7hbC8LF5p

# z6x/xO/+tEGxG+1A31UTJPmkxhhUlR+NE3ZXiXhcG72CFHYUUvqwlThPkFYe4Ygf

# j9ADmss08k0JhVU5rkbrC2h+549HPlFu/XOSIrps4SXzInjHPEYuBETzMYIZ8zCC

# Ge8CAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x

# QTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQw

# OTYgU0hBMzg0IDIwMjEgQ0ExAhAP9xCe9qf4ax3LBs7uih/sMA0GCWCGSAFlAwQC

# AQUAoIGEMBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEICqyjEHDd/AihpWFA/aNJNsI0cva3gphF0gKtFGJNK2xMA0GCSqG

# SIb3DQEBAQUABIIBgGWUA0ZvmywQC+xFqdFtPorSxnDW7tAYqEM4oyi4w2qyqCDs

# cMo5kSImY6s9katIQE2wtH2B1KiB/DtS9W8ZRcZTMvJ5/Zf//1CF9h0U7rjPiuua

# Lr1UK4ov29OwZc/Qnp6cB0PoGIgQqvY1wIaR33M+0G+62Cldu7oiQvILvbk8+b20

# K1H0ale4oVpiuVeDopBuyF4Npg6UWubeVExRtItLfCMq3I2QxtGq5QMS1ymm1GXv

# y6oIXjox5GR8YX8qITaokLkugFAec9UYCmQ3lHLyBOcO0ojIP99LAcIvoHdlbRTO

# 1niHsmlthmRYDGU9BfoXRJ1HTySuRD4ah8JK6D+9NlHq3Rhaz+EZIPCuUW+KGeqr

# Xw3/Mctcb1oqQnuL3H8WZtxRR0zaYNY99PY69xm4LIZFOZBv55ToijwtHAXPCubI

# ai4sgBP1Mr9Dp5XknaAm64s6TjLpx0Il7mfKxso4iqGbZZJWEikUKnjKxpm5LhtZ

# XUKrYBfNpOwSa+3BWKGCF0Awghc8BgorBgEEAYI3AwMBMYIXLDCCFygGCSqGSIb3

# DQEHAqCCFxkwghcVAgEDMQ8wDQYJYIZIAWUDBAIBBQAweAYLKoZIhvcNAQkQAQSg

# aQRnMGUCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCDmsWzoNjOy3Sk9

# ZDVx6a4+46WVtcAfIovM8nVz/kNZHQIRAKKbI/blfDsXPzJgR9cQhjIYDzIwMjQw

# OTAxMDgwNjQ5WqCCEwkwggbCMIIEqqADAgECAhAFRK/zlJ0IOaa/2z9f5WEWMA0G

# CSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwg

# SW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1

# NiBUaW1lU3RhbXBpbmcgQ0EwHhcNMjMwNzE0MDAwMDAwWhcNMzQxMDEzMjM1OTU5

# WjBIMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xIDAeBgNV

# BAMTF0RpZ2lDZXJ0IFRpbWVzdGFtcCAyMDIzMIICIjANBgkqhkiG9w0BAQEFAAOC

# Ag8AMIICCgKCAgEAo1NFhx2DjlusPlSzI+DPn9fl0uddoQ4J3C9Io5d6OyqcZ9xi

# FVjBqZMRp82qsmrdECmKHmJjadNYnDVxvzqX65RQjxwg6seaOy+WZuNp52n+W8PW

# KyAcwZeUtKVQgfLPywemMGjKg0La/H8JJJSkghraarrYO8pd3hkYhftF6g1hbJ3+

# cV7EBpo88MUueQ8bZlLjyNY+X9pD04T10Mf2SC1eRXWWdf7dEKEbg8G45lKVtUfX

# eCk5a+B4WZfjRCtK1ZXO7wgX6oJkTf8j48qG7rSkIWRw69XloNpjsy7pBe6q9iT1

# HbybHLK3X9/w7nZ9MZllR1WdSiQvrCuXvp/k/XtzPjLuUjT71Lvr1KAsNJvj3m5k

# GQc3AZEPHLVRzapMZoOIaGK7vEEbeBlt5NkP4FhB+9ixLOFRr7StFQYU6mIIE9Np

# HnxkTZ0P387RXoyqq1AVybPKvNfEO2hEo6U7Qv1zfe7dCv95NBB+plwKWEwAPoVp

# dceDZNZ1zY8SdlalJPrXxGshuugfNJgvOuprAbD3+yqG7HtSOKmYCaFxsmxxrz64

# b5bV4RAT/mFHCoz+8LbH1cfebCTwv0KCyqBxPZySkwS0aXAnDU+3tTbRyV8IpHCj

# 7ArxES5k4MsiK8rxKBMhSVF+BmbTO77665E42FEHypS34lCh8zrTioPLQHsCAwEA

# AaOCAYswggGHMA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB

# /wQMMAoGCCsGAQUFBwMIMCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG/WwH

# ATAfBgNVHSMEGDAWgBS6FtltTYUvcyl2mi91jGogj57IbzAdBgNVHQ4EFgQUpbbv

# E+fvzdBkodVWqWUxo97V40kwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybDMu

# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5NlNIQTI1NlRpbWVT

# dGFtcGluZ0NBLmNybDCBkAYIKwYBBQUHAQEEgYMwgYAwJAYIKwYBBQUHMAGGGGh0

# dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBYBggrBgEFBQcwAoZMaHR0cDovL2NhY2Vy

# dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5NlNIQTI1NlRp

# bWVTdGFtcGluZ0NBLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAgRrW3qCptZgXvHCN

# T4o8aJzYJf/LLOTN6l0ikuyMIgKpuM+AqNnn48XtJoKKcS8Y3U623mzX4WCcK+3t

# PUiOuGu6fF29wmE3aEl3o+uQqhLXJ4Xzjh6S2sJAOJ9dyKAuJXglnSoFeoQpmLZX

# eY/bJlYrsPOnvTcM2Jh2T1a5UsK2nTipgedtQVyMadG5K8TGe8+c+njikxp2oml1

# 01DkRBK+IA2eqUTQ+OVJdwhaIcW0z5iVGlS6ubzBaRm6zxbygzc0brBBJt3eWpdP

# M43UjXd9dUWhpVgmagNF3tlQtVCMr1a9TMXhRsUo063nQwBw3syYnhmJA+rUkTfv

# TVLzyWAhxFZH7doRS4wyw4jmWOK22z75X7BC1o/jF5HRqsBV44a/rCcsQdCaM0qo

# NtS5cpZ+l3k4SF/Kwtw9Mt911jZnWon49qfH5U81PAC9vpwqbHkB3NpE5jreODsH

# XjlY9HxzMVWggBHLFAx+rrz+pOt5Zapo1iLKO+uagjVXKBbLafIymrLS2Dq4sUaG

# a7oX/cR3bBVsrquvczroSUa31X/MtjjA2Owc9bahuEMs305MfR5ocMB3CtQC4Fxg

# uyj/OOVSWtasFyIjTvTs0xf7UGv/B3cfcZdEQcm4RtNsMnxYL2dHZeUbc7aZ+Wss

# BkbvQR7w8F/g29mtkIBEr4AQQYowggauMIIElqADAgECAhAHNje3JFR82Ees/Shm

# Kl5bMA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdp

# Q2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERp

# Z2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yMjAzMjMwMDAwMDBaFw0zNzAzMjIy

# MzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7

# MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2IFNIQTI1NiBUaW1l

# U3RhbXBpbmcgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGhjUG

# SbPBPXJJUVXHJQPE8pE3qZdRodbSg9GeTKJtoLDMg/la9hGhRBVCX6SI82j6ffOc

# iQt/nR+eDzMfUBMLJnOWbfhXqAJ9/UO0hNoR8XOxs+4rgISKIhjf69o9xBd/qxkr

# PkLcZ47qUT3w1lbU5ygt69OxtXXnHwZljZQp09nsad/ZkIdGAHvbREGJ3HxqV3rw

# N3mfXazL6IRktFLydkf3YYMZ3V+0VAshaG43IbtArF+y3kp9zvU5EmfvDqVjbOSm

# xR3NNg1c1eYbqMFkdECnwHLFuk4fsbVYTXn+149zk6wsOeKlSNbwsDETqVcplicu

# 9Yemj052FVUmcJgmf6AaRyBD40NjgHt1biclkJg6OBGz9vae5jtb7IHeIhTZgirH

# kr+g3uM+onP65x9abJTyUpURK1h0QCirc0PO30qhHGs4xSnzyqqWc0Jon7ZGs506

# o9UD4L/wojzKQtwYSH8UNM/STKvvmz3+DrhkKvp1KCRB7UK/BZxmSVJQ9FHzNklN

# iyDSLFc1eSuo80VgvCONWPfcYd6T/jnA+bIwpUzX6ZhKWD7TA4j+s4/TXkt2ElGT

# yYwMO1uKIqjBJgj5FBASA31fI7tk42PgpuE+9sJ0sj8eCXbsq11GdeJgo1gJASgA

# DoRU7s7pXcheMBK9Rp6103a50g5rmQzSM7TNsQIDAQABo4IBXTCCAVkwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUuhbZbU2FL3MpdpovdYxqII+eyG8wHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1s

# BwEwDQYJKoZIhvcNAQELBQADggIBAH1ZjsCTtm+YqUQiAX5m1tghQuGwGC4QTRPP

# MFPOvxj7x1Bd4ksp+3CKDaopafxpwc8dB+k+YMjYC+VcW9dth/qEICU0MWfNthKW

# b8RQTGIdDAiCqBa9qVbPFXONASIlzpVpP0d3+3J0FNf/q0+KLHqrhc1DX+1gtqpP

# kWaeLJ7giqzl/Yy8ZCaHbJK9nXzQcAp876i8dU+6WvepELJd6f8oVInw1YpxdmXa

# zPByoyP6wCeCRK6ZJxurJB4mwbfeKuv2nrF5mYGjVoarCkXJ38SNoOeY+/umnXKv

# xMfBwWpx2cYTgAnEtp/Nh4cku0+jSbl3ZpHxcpzpSwJSpzd+k1OsOx0ISQ+UzTl6

# 3f8lY5knLD0/a6fxZsNBzU+2QJshIUDQtxMkzdwdeDrknq3lNHGS1yZr5Dhzq6YB

# T70/O3itTK37xJV77QpfMzmHQXh6OOmc4d0j/R0o08f56PGYX/sr2H7yRp11LB4n

# LCbbbxV7HhmLNriT1ObyF5lZynDwN7+YAN8gFk8n+2BnFqFmut1VwDophrCYoCvt

# lUG3OtUVmDG0YgkPCr2B2RP+v6TR81fZvAT6gt4y3wSJ8ADNXcL50CN/AAvkdgIm

# 2fBldkKmKYcJRyvmfxqkhQ/8mJb2VVQrH4D6wPIOK+XW+6kvRBVK5xMOHds3OBqh

# K/bt1nz8MIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0B

# AQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD

# VQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVk

# IElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQsw

# CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu

# ZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQw

# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz

# 7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS

# 5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7

# bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfI

# SKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jH

# trHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14

# Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2

# h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt

# 6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPR

# iQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ER

# ElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4K

# Jpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAd

# BgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SS

# y4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAk

# BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAC

# hjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS

# b290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0

# LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRV

# HSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyh

# hyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO

# 0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo

# 8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++h

# UD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5x

# aiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDdjCCA3IC

# AQEwdzBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xOzA5

# BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBTSEEyNTYgVGltZVN0

# YW1waW5nIENBAhAFRK/zlJ0IOaa/2z9f5WEWMA0GCWCGSAFlAwQCAQUAoIHRMBoG

# CSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjQwOTAx

# MDgwNjQ5WjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRm8CsywsLJD4JdzqqKycZP

# GZzPQDAvBgkqhkiG9w0BCQQxIgQgdIdvv/rwsTSiJWbdLADVkn/JPnlhxKx1g0EX

# wQWvThYwNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQg0vbkbe10IszR1EBXaEE2b4KK

# 2lWarjMWr00amtQMeCgwDQYJKoZIhvcNAQEBBQAEggIAJ6pu4aJDOvIvi8yUsMr0

# jSAwggTn3IIDkLurZO9AekcRE7DYJZQ0bgig9xJUP2QGdEN1CLTu9GDYM34J8Lko

# k091CuDcAfTKOptNEdKfBloTCyjQDEz+pSA2EkQxcmssPQd7RHAR+fmr8YYDdsvW

# o1rVMaYJulMvRpP5B61Odp0YfNcRRw698Ae6ayY+723rO69chmf95XwXlOdV7Dmc

# YnBnOzDBjvxsPvclS0TV5kJnQl9l7uI3nxwC8fkSPcKlJg6zL7EODn6ey8+YtDen

# c41IBhr95jwX4BJLfv6gizhcJPn/Z0AZC2P+UxAtQWjDixi1SkbIUMv49/Ru8LOQ

# Y05MkFbgI5+9ApsA8+4T8d20LHZrKvmJ5v32ElpfBRZPL3Nk3OKlvan90L0H9yWz

# 7Yl+ft2/KDwKyd4+hM5FkAi88/QXAwEx2JcEmMKzsIWz6+7Cy9zrMj4fkN16rt1H

# tdRCQkwRfnde/2thIQCiwEyQdeVfm1Y++UKh20LX5LtTBjIELVo20Kgku65wDsQI

# JKokFjP1/DkHMV5cLOxRksJuawhsn27Il8P6HWQo4+TQcs+uF5/gkqa968ieNM6s

# l+3IjzHXtbE0bL+NVRkUcoYVm3mnALaXUGuIHq9JmLPjYb3sv+Efd7QYnoDsfIBE

# NZPHPJwO57ZmPuELV9Dmdug=

# SIG # End signature block