Microsoft.AzLocal.CSSTools

1.2608.31.1

packages/AzStackHci.DiagnosticSettings.0.6.9/Private/AzStackHci.Results.Helpers.ps1

# ////////////////////////////////////////////////////////////////////////////
# Strict Mode v1 (PS 5.1 safe) - surfaces reads of uninitialised variables at runtime.
Set-StrictMode -Version 1.0

# Function to process results
Function Publish-Results {
    param (
        [ValidateSet('HTML', 'CSV')]
        [string]$OutputFormat = 'HTML'
    )

    begin {
        # Write-Debug "Publish-Results: Beginning results processing and publishing"
    }

    process {
        # Assign Row IDs and reorder columns
        $rowIdCounter = 1
        foreach ($result in $script:Results) {
            $result.RowID = $rowIdCounter
            $rowIdCounter++
        }

        # NOTE: Select-Object below acts as the canonical column ORDER + FILTER for
        # the published HTML / CSV / JSON outputs and the -PassThru ArrayList.
        # Properties NOT named here are silently DROPPED. MachineName (added v0.6.7
        # for -Scope Cluster) MUST appear here or every row's origin host is lost
        # in the published output and cluster fan-out cannot attribute results.
        # New columns should be appended at the END so the existing column order
        # (relied on by the HTML row-colour regex below — counts cells UP TO the
        # Layer7Status column) is preserved.
        #
        # v0.6.7: snapshot the run-level detection lists ONCE so the per-row
        # ResultCategory classifier (the trailing calculated column) doesn't
        # re-enumerate module-scope state for every row. Both arrays are seeded by
        # Initialize-ModuleState and populated during the test run, so they are always
        # initialised by the time Publish-Results executes.
        $sslInspectedSnapshot = @($script:SSLInspectedURLs)
        $privateLinkSnapshot   = @($script:PrivateLinkDetectedArray)
        [System.Collections.ArrayList]$script:Results = @($script:Results | Select-Object RowID, URL, Port, ArcGateway, IsWildcard, Source, IPAddress, Layer7Status, Layer7Response, Layer7ResponseTime, Note, TCPStatus, CertificateIssuer, CertificateSubject, CertificateThumbprint, IntermediateCertificateIssuer, IntermediateCertificateSubject, IntermediateCertificateThumbprint, RootCertificateIssuer, RootCertificateSubject, RootCertificateThumbprint, MachineName, @{ Name = 'ResultCategory'; Expression = { Get-ConnectivityResultCategory -Row $_ -SSLInspectedURLs $sslInspectedSnapshot -PrivateLinkURLs $privateLinkSnapshot } })


        # Sort the array by the properties Layer7Status (Failed first, then Success, then Skipped), Source, Url
        $statusOrder = @{ 'Failed' = 0; 'Success' = 1; 'Skipped' = 2 }
        [System.Collections.ArrayList]$script:Results = @($script:Results | Sort-Object -Property @{Expression={$statusOrder[$_.Layer7Status]}; Ascending=$true}, Source, Url)

        # Export results based on the OutputFormat parameter (HTML or CSV)
        try {
            switch ($OutputFormat) {
                'HTML' {
                    $htmlStyle = @"
<meta charset="utf-8" />
<style>
    body { font-family: Segoe UI, Arial, sans-serif; margin: 20px; background-color: #f5f5f5; }
    h1 { color: #0078d4; border-bottom: 2px solid #0078d4; padding-bottom: 8px; }
    .summary { background: #fff; padding: 12px 20px; margin-bottom: 20px; border-left: 4px solid #0078d4; box-shadow: 0 1px 3px rgba(0,0,0,0.12); }
    .summary li { list-style: none; padding: 2px 0; }
    .summary ul { padding-left: 0; margin: 8px 0; }
    .table-wrapper { overflow-x: auto; max-width: 100%; box-shadow: 0 1px 3px rgba(0,0,0,0.12); }
    .top-scroll { overflow-x: auto; max-width: 100%; }
    .top-scroll div { height: 1px; }
    table { border-collapse: collapse; white-space: nowrap; background: #fff; }
    th { background-color: #0078d4; color: #fff; padding: 10px 8px; text-align: left; font-size: 13px; position: sticky; top: 0; }
    td { padding: 8px; border-bottom: 1px solid #e0e0e0; font-size: 13px; }
    tr:nth-child(even) { background-color: #f9f9f9; }
    tr:hover { background-color: #e8f4fd; }
    tr.status-failed { background-color: #fde7e9; }
    tr.status-config-gap { background-color: #fff4ce; }
    tr.status-success { background-color: #e6f4ea; }
    tr.status-skipped { background-color: #fff4ce; }
    .finding-error { color: #a4262c; }
    .finding-warning { color: #856404; }
    h2 { color: #0078d4; margin-top: 24px; }
</style>
"@
                    $preContent = "<h1>Azure Local Connectivity Test Results</h1><!-- SUMMARY -->"
                    $htmlBody = $script:Results | ConvertTo-Html -Title 'Azure Local Connectivity Test Results' -Head $htmlStyle -PreContent $preContent
                    # Color-code rows based on Layer7Status
                    $htmlBody = $htmlBody -replace '<tr><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>Failed</td>', '<tr class="status-failed"><td>$1</td><td>$2</td><td>$3</td><td>$4</td><td>$5</td><td>$6</td><td>$7</td><td>Failed</td>'
                    $htmlBody = $htmlBody -replace '<tr><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>Success</td>', '<tr class="status-success"><td>$1</td><td>$2</td><td>$3</td><td>$4</td><td>$5</td><td>$6</td><td>$7</td><td>Success</td>'
                    $htmlBody = $htmlBody -replace '<tr><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>Skipped</td>', '<tr class="status-skipped"><td>$1</td><td>$2</td><td>$3</td><td>$4</td><td>$5</td><td>$6</td><td>$7</td><td>Skipped</td>'
                    # Bold the Layer7Status cell text
                    $htmlBody = $htmlBody -replace '<td>(Failed|Success|Skipped)</td>', '<td><strong>$1</strong></td>'
                    # ConfigGap is a caller-input warning, not a network connectivity failure.
                    $htmlBody = $htmlBody -replace '<tr class="status-failed">(?=(?:(?!</tr>).)*<td>ConfigGap</td></tr>)', '<tr class="status-config-gap">'
                    # Wrap the table in a scrollable div with a synced top scrollbar
                    $htmlBody = $htmlBody -replace '<table>', '<div class="top-scroll" id="topScroll"><div></div></div><div class="table-wrapper" id="bottomScroll"><table>'
                    $htmlBody = $htmlBody -replace '</table>', '</table></div>'
                    # Add JavaScript to sync the top and bottom scrollbars and size the top scroll spacer to match the table width
                    $scrollScript = @"
<script>
document.addEventListener('DOMContentLoaded', function() {
    var top = document.getElementById('topScroll');
    var bottom = document.getElementById('bottomScroll');
    var table = bottom.querySelector('table');
    top.firstElementChild.style.width = table.scrollWidth + 'px';
    top.addEventListener('scroll', function() { bottom.scrollLeft = top.scrollLeft; });
    bottom.addEventListener('scroll', function() { top.scrollLeft = bottom.scrollLeft; });
});
</script>
"@
                    $htmlBody = $htmlBody -replace '</body>', "$scrollScript`n</body>"
                    Write-Utf8NoBom -Path $script:OutputFile -Content $htmlBody
                }
                'CSV' {
                    $script:Results | Export-Csv -Path $script:OutputFile -NoTypeInformation
                }
            }
        } catch {
            Write-HostAzS "Failed to save test results to $($script:OutputFile)"
            Write-Error "Error: $($_.Exception.Message)"
        }

        # Always generate JSON output file (in addition to HTML/CSV)
        try {
            Write-Utf8NoBom -Path $script:JsonOutputFile -Content ($script:Results | ConvertTo-Json -Depth 3 -Compress)
        } catch {
            Write-HostAzS "Failed to save JSON results to $($script:JsonOutputFile)"
            Write-Error "Error: $($_.Exception.Message)"
        }

        # // Calculate the number of successful, failed, and skipped URLs
        # Use TCP Status, if using TCP Connectivity Test switch
        [array]$successResults = @()
        if($IncludeTCPConnectivityTests.IsPresent){
            # Use TCPStatus for successful results
            [array]$successResults = $script:Results | Where-Object { $_.TCPStatus -eq "Success" }
        } else {
            # Otherwise default to Layer7Status
            [array]$successResults = $script:Results | Where-Object { $_.Layer7Status -eq "Success" }
        }
        # Failed URLs results
        [array]$failedResults = @()
        [array]$failedResults = $script:Results | Where-Object { $_.Layer7Status -eq "Failed" }
        # Skipped URLs results
        [array]$skippedResults = @()
        [array]$skippedResults = $script:Results | Where-Object { $_.TCPStatus -like "Skipped*" -or $_.Layer7Status -eq "Skipped" }

        # If the PassThru switch is not present, display the results
        if(-not($PassThru.IsPresent) -and -not($script:SilentMode)){

            # Console-display-only URL projection: reuse Get-DomainFromURL to strip scheme,
            # path and :port suffix so Format-Table -AutoSize doesn't wrap on long URLs.
            # The underlying $script:Results objects are UNCHANGED — CSV, HTML and JSON output
            # continue to emit the full URL exactly as tested. Wildcard URLs
            # (e.g. '*.blob.core.windows.net') are left as-is by Get-DomainFromURL.
            $UrlColumn = @{ Name = 'URL'; Expression = { (Get-DomainFromURL -url ([string]$_.URL)).Domain } }

            if($failedResults.Count -gt 0) {
                Write-HostAzS "`nThe following URLs failed:" -ForegroundColor Red
                if($IncludeTCPConnectivityTests.IsPresent){
                    $failedResults | Format-Table -Property RowID, Source, $UrlColumn, Port, TCPStatus, IpAddress, Layer7Response -AutoSize | Out-Host
                } else {
                    $failedResults | Format-Table -Property RowID, Source, $UrlColumn, Port, IpAddress, Layer7Response -AutoSize | Out-Host
                }

            } else {
                Write-HostAzS "`nNo URLs failed.`n" -ForegroundColor Green
            }

            if($successResults.Count -gt 0) {
                Write-HostAzS "The following URLs were successful:" -ForegroundColor Green
                if($IncludeTCPConnectivityTests.IsPresent){
                    $successResults | Format-Table -Property RowID, Source, $UrlColumn, Port, TCPStatus, IpAddress, Layer7Response -AutoSize | Out-Host
                } else {
                    $successResults | Format-Table -Property RowID, Source, $UrlColumn, Port, IpAddress, Layer7Response -AutoSize | Out-Host
                }
            } else {
                Write-HostAzS "No URLs were successful.`n"
            }

            if($skippedResults.Count -gt 0) {
                Write-HostAzS "The following URLs were skipped:"
                $skippedResults | Format-Table -Property RowID, Source, $UrlColumn, Port, Layer7Status, Note -AutoSize | Out-Host
            } else {
                Write-HostAzS "No URLs were skipped.`n" -ForegroundColor Green
            }

            # Display test results summary
            Write-HostAzS "`nTest results summary:"
            Write-HostAzS "---------------------------------`n"

            Write-HostAzS "Total URLs tested: $($script:Results.Count)"
            Write-HostAzS "Successful URLs: $($successResults.Count)" -ForegroundColor Green
            if($failedResults.Count -gt 0){
                Write-HostAzS "Failed URLs: $($failedResults.Count)" -ForegroundColor Red
            } else {
                Write-HostAzS "Failed URLs: $($failedResults.Count)"
            }
            Write-HostAzS "Skipped URLs: $($skippedResults.Count)`n" -ForegroundColor Yellow

            Write-HostAzS "The test result for each endpoint is shown above. For detailed output, including certificate information see the $OutputFormat output file listed below."
            
        } elseif($PassThru.IsPresent -or $script:SilentMode) {
        
            # If PassThru or NoOutput switches are present, return the results as an array of objects instead of displaying in the console
            return $script:Results
        
        } else {
            # Not expected to hit this else block, but included for safety
        }

        Write-HostAzS "`nIMPORTANT: Only URLs with a Source of 'GitHub', 'Environment Checker' or '<OEM Name> SBE' are required on firewall / proxy outbound allow rules." -ForegroundColor Yellow -NoNewline
        Write-HostAzS " Any URLs with a Source of 'Redirect for ', 'Test for ' are only used for testing connectivity to the required endpoints using the automation in this module." -ForegroundColor Yellow

        Write-HostAzS "`nAzure Local product documentation for firewall requirements can be accessed using this URL from a device with a browser:`n`n`tMicrosoft documentation: 'https://learn.microsoft.com/azure/azure-local/concepts/firewall-requirements'`n" -ForegroundColor Green

    } # End of Process block

    end {
        # Write-Debug "Publish-Results: Results processing and publishing completed"
    }
} # End of Publish-Results


# ////////////////////////////////////////////////////////////////////////////

# Function to remove PII from the transcript file
# ////////////////////////////////////////////////////////////////////////////
Function Remove-PIIFromTranscriptFile {
    <#
    .SYNOPSIS
        Redact the transcript file by removing sensitive information.
    .DESCRIPTION
        This function reads a transcript file, removes sensitive information (Username and RunAs User values),
        and overwrites the file in place with the redacted content.
        Returns a PSCustomObject with Success, RedactionCount, and Error fields so callers can verify
        the file was redacted before uploading or sharing.
    .OUTPUTS
        System.Management.Automation.PSCustomObject with properties:
            Success (bool), RedactionCount (int), Error (string)
    #>
    [CmdletBinding()]
    [OutputType([PSCustomObject])]
    param (
        [Parameter(Mandatory=$true)]
        [string]$TranscriptFilePath
    )

    begin {
        # Write-Debug "Remove-PIIFromTranscriptFile: Beginning PII removal from '$TranscriptFilePath'"
        $result = [PSCustomObject]@{
            Success        = $false
            RedactionCount = 0
            Error          = $null
        }
    }

    process {
        # Read the transcript file content
        try {
            $transcriptContent = Get-Content -Path $TranscriptFilePath -ErrorAction Stop
        } catch {
            $result.Error = "Failed to read the transcript file: $($_.Exception.Message)"
            Write-HostAzS "Error: $($result.Error)" -ForegroundColor Red
            return $result
        }

        # Check if the transcript file was read successfully
        if($transcriptContent) {

            # Set the variable to the original transcript file contents
            $redactedContent = $transcriptContent

            # Count matches per pattern for verbose logging, then apply the redaction.
            $usernamePattern = '(?i)(Username: )([a-zA-Z0-9._-]+\\[a-zA-Z0-9._-]+)'
            $runAsPattern    = '(?i)(RunAs User: )([a-zA-Z0-9._-]+\\[a-zA-Z0-9._-]+)'
            $usernameMatches = [regex]::Matches(($redactedContent -join "`n"), $usernamePattern).Count
            $runAsMatches    = [regex]::Matches(($redactedContent -join "`n"), $runAsPattern).Count
            Write-Verbose "Remove-PIIFromTranscriptFile: Username matches=$usernameMatches, RunAs User matches=$runAsMatches"

            # Redact: Username: <domain>\<username> -> <REDACTED>
            $redactedContent = $redactedContent -replace $usernamePattern, '$1<REDACTED>'
            # Redact: RunAs User: <domain>\<username> -> <REDACTED>
            $redactedContent = $redactedContent -replace $runAsPattern, '$1<REDACTED>'

            $result.RedactionCount = $usernameMatches + $runAsMatches

            # Write the redacted content back to the same file
            try {
                Set-Content -Path $TranscriptFilePath -Value $redactedContent -ErrorAction Stop -Force
                $result.Success = $true
            } catch {
                $result.Error = "Failed to update transcript file: $($_.Exception.Message)"
                Write-HostAzS "Error: $($result.Error)" -ForegroundColor Red
            }
        } else {
            $result.Error = "Transcript file was empty or could not be read."
            Write-HostAzS "Error: $($result.Error)" -ForegroundColor Red
        }

        return $result
    }

    end {
        # Write-Debug "Remove-PIIFromTranscriptFile: PII removal completed"
    }
} # End Function Remove-PIIFromTranscriptFile

# SIG # Begin signature block
# MIInUwYJKoZIhvcNAQcCoIInRDCCJ0ACAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBdfJuh87SLDkwN
# VSFeSRY1OtxJAFHEledsqxPnyy/Dx6CCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghngMIIZ3AIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEILjkwAcJehHB9adgnmbmlh0+uvqw
# VEsfMhz0Ka1Ebu/AMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv
# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE
# ggEAB6ScLoUYLTUlxsdxDsY8iA8sT80IM+ywdVbc/TaNS2Bq537gCRAXYjKvjdNQ
# k9vkSVWMrq20znirEvqh/zUd86h0TcCUNvVCVys3Cafs/lpnCVTQmPEkO+iQfoY7
# QRmag3as9kbhVBEf5X54+KXTaIPWgDlY4vf32SPgmBTgCswLQwUJmJnn8D7hC1AX
# jG45zLL06RiofAPj+/8uzCeB5JH4amXF6OqNFpisFkcTEoBn/7MgmEzZl1M/9weq
# l2z+LDn5AjBgXkZsqiToq7Sjw4g3gqT9aajjA/orbf5w6FfBp4MytvN5qpnAyhyI
# IQg+/eP2vmAZiTcRHhqaHjH2iKGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCCF5gG
# CSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG
# 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC
# AQUABCBrvTxusLt1aIUR3zfqsHfVsl0FMXYpR4JFz251hl7VhQIGaohPHq9UGBMy
# MDI2MDkwMjE1MjYzOC44NTVaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu
# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoz
# NjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy
# dmljZaCCEf4wggcoMIIFEKADAgECAhMzAAACE7BDNWbPr5XoAAEAAAITMA0GCSqG
# SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgx
# NDE4NDgxN1oXDTI2MTExMzE4NDgxN1owgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
# ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM2MDUtMDVF
# MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC
# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9Jl64LoZxDINSFgz+9KS5Ozv
# 5m548ePVzc9RXWe4T4/Mplfga4eq12RGdp5cVvnjde5vxfq2ax/jnu7vUW4rZN4m
# OUm5vh+kcYsQlYQ53FwgIB3nEjcQHomrG3mZe/ozjFSAr6JbglKtIeAySPzAcFzy
# Aer5lLNUHBEvQMM8BOjMyapCvh0xsg4xKFcVEJQLKEfCGBffMZI/amutHFb3CUTZ
# 7aVpG2KHEFUNlZ1vwMKvxXTPRDnbwPGzyyqJJznfsLNHQ4vXt2ttS1PeCoGI0hN1
# Peq8yGsIXM9oocwC06DGNSM/4LAx2uKvwmUn6NwLc0+tmvny6w28rZLejskRfnVW
# ofEv1mWY0jHUnHrwSGBS8gVP9gcBs6P5g0OpJPMfxdUkHXRkcMPPW0hIP8NbW8W5
# Sup8HuwnSKbjpyAlGBUdM/V5rZb0sZmkn714r6ULGK+cLLAN6R3FhX6N0nj64F27
# LTK2BbS0pJZaXjo0eDNz1QcxeIFLUgF+RBsLYDn8E8cCkexK8Nlt3Gi9zJf55w6U
# fTZ+kwTMxMqFxh7+Tfx7+aBObZ+nx961AtiqAy7zVV69o/LWRdKPZdvZn9ESyGbT
# nPfjkBERv22prSlETlRwzP6bmEVOKWLWVwxuwh7bUWUuUb1cj93zvttQYGQat5E9
# ALLJNmlvLKCskB7raLsCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBQTnhBKx+FryphQ
# WMRipH49sMFAOjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV
# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny
# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI
# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy
# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI
# MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAgmxaJrGqQ2D6UJhZ
# 6Ql2SZFOaNuGbW3LzB+ES+l2BB1MJtBRSFdi/hVY33NpxsJQhQ5TLVp0DXYOkIoP
# Qc17rH+IVhemO8jCt+U6I1TIw6cR7c+tEo/Jjp6EqEU1c4/mraMjgHhQ+raC/OUA
# m98A1r4bIPHtsBmLROGmeE5XLIFaBIZWHvh2COXITKObXVd5wGtJ1dZZdwaHACXF
# 506jta+uoUdyzAeuNlTPLTrZ8nyhxGwk9Vh6eiDQ7CQMWSSa8DJS9PUXjeoi9vTd
# S7ZMXqu+tv6Qz3xtoBF5+YFK4uE+miGs90Fxm0VK2lWrmFhjkRl5zyoHOdwG7spN
# YkDomCPNWIudUQmQYKpt/Hsspfcb+xpnWIDQdMzgE8pj1vpwLgWEnH7LtT4dZCeo
# Do9PK40RxBD8kKJ769ngkEwfwCD2EX/MQk79eIvOhpnH12GuVByvaKZk5XZvqtPO
# NNwr8q/qA3877IuWwWgnaeX+prpw0dZ/QLtbGGVrgP+TRQjt+2dcZA5P3X4LwANh
# iPsy0Ol4XCdj7OxBLFvOzsCPDPaVnkp+dfDFG+NOBir7aqTJ68622pymg1V+6gc/
# 1RvxC/wgvYyG033ecJqv0On0ZRNYr+i/OkwgA3HP1aLD0aHrEpw6lt0263iRkCvr
# cdcOW8w3jC8TJuaGWyC2S9jEjzgwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ
# AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK
# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0
# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0
# ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF
# AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1
# V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9
# alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv
# Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928
# jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t
# pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe
# HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o
# ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C
# vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug
# poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps
# xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C
# AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE
# FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT
# NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo
# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o
# dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD
# AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW
# y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t
# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt
# MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y
# My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc
# FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT
# Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j
# VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3
# +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR
# sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw
# ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b
# RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx
# aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX
# HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0
# W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0
# HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu
# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoz
# NjA1LTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy
# dmljZaIjCgEBMAcGBSsOAwIaAxUAmBE8SCjxgjacmy8/VEdk7NxpR6aggYMwgYCk
# fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF
# AO5CnmMwIhgPMjAyNjA5MDIxMzA4NTFaGA8yMDI2MDkwMzEzMDg1MVowdzA9Bgor
# BgEEAYRZCgQBMS8wLTAKAgUA7kKeYwIBADAKAgEAAgIS7wIB/zAHAgEAAgITxTAK
# AgUA7kPv4wIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIB
# AAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQClNesTJqqdyQ52
# ARTgQH7mTTp6r/HN7scyosOvPKCB0Pl8R167IVSZKzvEP6bt/meWS7eDWtgHVLvq
# 7V8HXfMBBgj+u6aV1eiErHYVWVFaOQfp1DtPwIR4+MVWFEAeon/JuRuMaTRWrCJr
# VpYgAW9WwtlrwcyCxBd/iB76RPiFJ6ogwHR2RhjmdndZt0y5k9h/EKoMFIPzahp/
# UlvNYStpQZ+HtSwDBV+CzGmn0QMfY/p2mpDGn0jhjtc2OSs3ykmY2OLTFTyIUUc8
# TWdM6ALgarvyEwwKWjREi7+Xu2OeTfEWkvjWIlozUQAYVUKVp6qdeZEsvCoHyZiv
# VhQ7dpBXMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh
# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw
# MTACEzMAAAITsEM1Zs+vlegAAQAAAhMwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqG
# SIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgjrjRNcaa+k5Q
# hFgX9qyJ3hWX5gp5Dwc4zcd57q3gpY4wgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHk
# MIG9BCDM4QltFIUz8J4DjAzP4nVodZvQxYGleUIfp86Oa5xYaDCBmDCBgKR+MHwx
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p
# Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACE7BDNWbPr5XoAAEAAAIT
# MCIEID+5cEuo/JWtMYNQ8nUk/bLV0XVNNSHWVyQf47ti33H/MA0GCSqGSIb3DQEB
# CwUABIICAGmnJPzjlpmW28noQb7n+XP4tiWy3HlWzYYtl4J1Q/UUNj6Qz3HbCsD2
# EGom84cegyJ16iUPXEoL254uRvAL0dhuLO4N6PJn6bbAkvRhP0m+MatC+p7jEbVi
# yRYEoufJZcR2PMa59BblcWnQSrfurccKPeHBmTC2+2rJdtEt2nSbmwnUxOU76VYm
# Jik4zC9gzJTPfFDaJTvWAQxa6YnaGtavGtkoOz8ZOMDoAfHYLUOFwNVb9huApyvC
# GNiyC/ZKUQY3Md6vEBhDSLHWyI8l40NJuxaYTvwxN5BpY9Hz9274csuWGRg35zoY
# e4z6VbiKzKacl2MA4ZfYSE8/zlvXSJN7V7ElG2uYnRdb7uV0MRWfife1RoZjo/sw
# 88+behPwXOjYKr8N7GILsQRtr74qnGQvF8AeB2QrAC9l+ibaWTt4D4VuePb+4L58
# 1pDJqruKEhyZNW+qfB0tGmJNzpGH7Y7lN5nVo+8P0ET+wi0lmQRvhKiXyN8L6zau
# fmDWQura4fuknH8jkfFB1DFSivM07St4wbHkZcwHShWmOohBEpYVLIxWnNPUL/tm
# 6NDKLsPpqzkqp2R5Ii1swP/qdlwCcIcZjgWynGnm2ejHmo1abjr5RXQZBVHU7DtI
# 3Bw0/rtYGQ8MMDfrDF9y1h6QOFvhgAeqm7gsy+9DsNL29ec3KrwL
# SIG # End signature block