metadata/SSH/2504.1.psd1

# Copyright (c) Microsoft Corporation. All rights reserved.

# Autogenerated. Do not edit.

@{
    Metadata = @'
{"name":"SSH","description":"Recommendations by Microsoft to secure OpenSSH server configurations for Windows Server machines","version":"2504.1","include":{"installationType":"Server*","minVersion":"24H2"},"settings":[{"id":"d9868b1f-0c8e-4adb-889e-14e374874ece","name":"AllowGroups","description":"Allowed groups for SSH","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","delimiter":" ","items":{"type":"string"}},"default":["administrators","openssh users"],"compliance":{"items":{"enum":["administrators","openssh users"]},"minItems":2,"maxItems":2,"uniqueItems":true}},{"id":"dc8da71d-aeba-4c03-8835-36fe158e372a","name":"AllowUsers","description":"Allowed users for SSH","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","delimiter":" ","items":{"type":"string"}},"default":[],"compliance":{"items":true,"minItems":0,"maxItems":0,"uniqueItems":true}},{"name":"AuthenticationMethods","description":"Authentication Method that can be used.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string","enum":["password","publickey","any"]},"default":"any","compliance":{"items":{"enum":["password","publickey","any"]}}},{"name":"AuthorizedKeysFile","description":"Specifies the file that contains the public keys used for user authentication.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string"},"default":"%programdata%/ssh/administrators_authorized_keys","compliance":{"const":"%programdata%/ssh/administrators_authorized_keys"}},{"id":"9e240540-5e0a-4b60-beb2-57421c65a0b9","name":"Banner","description":"The contents of the banner file that is sent to the remote user before authentication is allowed.","severity":"informational","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string"},"default":"#######################################################################\r\n\r\nAuthorized access only!\r\n\r\nIf you are not authorized to access or use this system, disconnect now!\r\n\r\n#######################################################################\r\n","compliance":{"const":"#######################################################################\r\n\r\nAuthorized access only!\r\n\r\nIf you are not authorized to access or use this system, disconnect now!\r\n\r\n#######################################################################\r\n"}},{"id":"b07d4c69-a1d9-4c22-a486-634ec3b8c380","name":"Ciphers","description":"The list of allowed ciphers","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metatype":"multistring","delimiter":",","items":{"type":"string","enum":["3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com"]}},"default":["aes128-ctr","aes192-ctr","aes256-ctr"],"compliance":{"items":{"enum":["aes128-ctr","aes192-ctr","aes256-ctr"]},"minItems":3,"maxItems":3,"uniqueItems":true}},{"id":"fd9f1554-6b72-8610-826e-78578e6f7811","name":"ClientAliveCountMax","description":"The number of client alive messages which may be sent without sshd receiving any messages back from the client","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":0,"compliance":{"const":0}},{"id":"c848bba4-93b1-4756-b08a-ff94c2b4814c","name":"ClientAliveInterval","description":"Timeout interval in seconds after which if no data has been received from the client, sshd will send a message to request a response","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":3600,"compliance":{"const":3600}},{"id":"f85c04a4-427b-4ee1-b988-c3ff7b4998cc","name":"DenyGroups","description":"Denied groups for SSH","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","delimiter":" ","items":{"type":"string"}},"default":[],"compliance":{"items":true,"minItems":0,"maxItems":0,"uniqueItems":true}},{"id":"1db7d147-3a75-4637-8cdc-c119e22d0206","name":"DenyUsers","description":"Denied users for SSH","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","delimiter":" ","items":{"type":"string"}},"default":[],"compliance":{"items":true,"minItems":0,"maxItems":0,"uniqueItems":true}},{"name":"GSSAPIAuthentication","description":"Specifies whether user authentication based on GSSAPI is allowed.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"boolean","metatype":"yesorno"},"default":false,"compliance":{"const":false}},{"name":"HostKey","description":"Specifies a file containing the private host key used by ssh","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string"},"default":"__PROGRAMDATA__/ssh/ssh_host_ecdsa_key","compliance":{"const":"__PROGRAMDATA__/ssh/ssh_host_ecdsa_key"}},{"id":"39aa5c2b-5b36-84a7-4022-570a53c86ff9","name":"LoginGraceTime","description":"The time in seconds after which the server disconnects if the user has not successfully logged in","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":60,"compliance":{"const":60}},{"id":"483e8b0c-7572-8467-7e0c-26e1e9ce6359","name":"MACs","description":"The list of available MAC algorithms, known as MACs","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metatype":"multistring","delimiter":",","items":{"type":"string","enum":["hmac-md5","hmac-md5-96","hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-512","umac-64@openssh.com","umac-128@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com"]}},"default":["hmac-sha2-256"],"compliance":{"items":{"enum":["hmac-sha2-256"]},"minItems":1,"maxItems":1,"uniqueItems":true}},{"id":"e7708534-5d98-406f-83ae-1de835b2906e","name":"MaxAuthTries","description":"Maximum number of authentication attempts","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":6,"compliance":{"const":6}},{"id":"d50c3f39-264c-4cdc-b0ba-89de8a0f6828","name":"PermitEmptyPasswords","description":"Whether the server allows login to account with empty password strings","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"boolean","metatype":"yesorno"},"default":false,"compliance":{"const":false}},{"id":"1310042d-193f-414a-a7e3-b2c4e89aa537","name":"Port","description":"The SSH port","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0,"maximum":65535},"default":22,"compliance":{"const":22}},{"name":"SyslogFacility","description":"Gives the facility code that is used when logging messages.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string","enum":["DAEMON","USER","AUTH","LOCAL0","LOCAL1","LOCAL2","LOCAL3","LOCAL4","LOCAL5","LOCAL6","LOCAL7"]},"default":"LOCAL0","compliance":{"const":"LOCAL0"}}],"alias":{"get":"msftinventory","set":"msftpolicies"},"context":"device"}
'@

}

# SIG # Begin signature block
# MIIoOAYJKoZIhvcNAQcCoIIoKTCCKCUCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCADcXBJ93aI7CAJ
# +nD3eQictvULtXmLJrhYxfY3agaD7qCCDYUwggYDMIID66ADAgECAhMzAAAEhJji
# EuB4ozFdAAAAAASEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM1WhcNMjYwNjE3MTgyMTM1WjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDtekqMKDnzfsyc1T1QpHfFtr+rkir8ldzLPKmMXbRDouVXAsvBfd6E82tPj4Yz
# aSluGDQoX3NpMKooKeVFjjNRq37yyT/h1QTLMB8dpmsZ/70UM+U/sYxvt1PWWxLj
# MNIXqzB8PjG6i7H2YFgk4YOhfGSekvnzW13dLAtfjD0wiwREPvCNlilRz7XoFde5
# KO01eFiWeteh48qUOqUaAkIznC4XB3sFd1LWUmupXHK05QfJSmnei9qZJBYTt8Zh
# ArGDh7nQn+Y1jOA3oBiCUJ4n1CMaWdDhrgdMuu026oWAbfC3prqkUn8LWp28H+2S
# LetNG5KQZZwvy3Zcn7+PQGl5AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUBN/0b6Fh6nMdE4FAxYG9kWCpbYUw
# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwNTM2MjAfBgNVHSMEGDAW
# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw
# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx
# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB
# AGLQps1XU4RTcoDIDLP6QG3NnRE3p/WSMp61Cs8Z+JUv3xJWGtBzYmCINmHVFv6i
# 8pYF/e79FNK6P1oKjduxqHSicBdg8Mj0k8kDFA/0eU26bPBRQUIaiWrhsDOrXWdL
# m7Zmu516oQoUWcINs4jBfjDEVV4bmgQYfe+4/MUJwQJ9h6mfE+kcCP4HlP4ChIQB
# UHoSymakcTBvZw+Qst7sbdt5KnQKkSEN01CzPG1awClCI6zLKf/vKIwnqHw/+Wvc
# Ar7gwKlWNmLwTNi807r9rWsXQep1Q8YMkIuGmZ0a1qCd3GuOkSRznz2/0ojeZVYh
# ZyohCQi1Bs+xfRkv/fy0HfV3mNyO22dFUvHzBZgqE5FbGjmUnrSr1x8lCrK+s4A+
# bOGp2IejOphWoZEPGOco/HEznZ5Lk6w6W+E2Jy3PHoFE0Y8TtkSE4/80Y2lBJhLj
# 27d8ueJ8IdQhSpL/WzTjjnuYH7Dx5o9pWdIGSaFNYuSqOYxrVW7N4AEQVRDZeqDc
# fqPG3O6r5SNsxXbd71DCIQURtUKss53ON+vrlV0rjiKBIdwvMNLQ9zK0jy77owDy
# XXoYkQxakN2uFIBO1UNAvCYXjs4rw3SRmBX9qiZ5ENxcn/pLMkiyb68QdwHUXz+1
# fI6ea3/jjpNPz6Dlc/RMcXIWeMMkhup/XEbwu73U+uz/MIIHejCCBWKgAwIBAgIK
# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm
# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw
# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD
# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG
# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la
# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc
# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D
# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+
# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk
# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6
# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd
# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL
# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd
# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3
# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS
# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI
# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL
# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD
# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv
# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h
# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA
# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn
# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7
# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b
# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/
# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy
# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp
# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi
# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb
# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS
# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL
# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX
# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGgkwghoFAgEBMIGVMH4x
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p
# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAASEmOIS4HijMV0AAAAA
# BIQwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw
# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIDr9
# y9RbX87Ob5oP8Dz6rVOi6PFT3h1sVaOfUR7ER3iGMEIGCisGAQQBgjcCAQwxNDAy
# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20wDQYJKoZIhvcNAQEBBQAEggEApudm09tl0OCh90Ay6xctKKEFb/mX0KfG27bz
# QPIFC5BFNQy6NflEaDBW64Hw+h+qlUV8Ggfdnc+ZXHGh5zczX4LwF0yn7U32kI2h
# xGxhzA42YdcgxNdwNk/O8iu4vsjZjz3J4jnNgL6/1Zogi6PFv8wbOVsqgm7CfXUG
# tN9ZHO9g1XpR7NqwHLeyCqaVo1YdApTrnCfxrl2UC4K+iw9GqW57evKi7xt5MFQb
# GQinwAqARdzrfCzrbwfM1IjKLxIfA9ZTMe49FNYOiy49kAX98fnZLJty99kwX3vr
# 9BIOFl+Y2Vmays80t/XX+gST9zLwFAxbSUtv0YwYfQuv9KKTKqGCF5MwghePBgor
# BgEEAYI3AwMBMYIXfzCCF3sGCSqGSIb3DQEHAqCCF2wwghdoAgEDMQ8wDQYJYIZI
# AWUDBAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGE
# WQoDATAxMA0GCWCGSAFlAwQCAQUABCAmb8/WIk1ReHTKMLCvWrk46eb7Vgdy/Zu1
# yfhqIbADaAIGaKOmbQa/GBIyMDI1MDkyNjA0MTEzNC45N1owBIACAfSggdGkgc4w
# gcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsT
# HE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQg
# VFNTIEVTTjo5NjAwLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt
# U3RhbXAgU2VydmljZaCCEeowggcgMIIFCKADAgECAhMzAAACBNjgDgeXMliYAAEA
# AAIEMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo
# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw
# MB4XDTI1MDEzMDE5NDI0N1oXDTI2MDQyMjE5NDI0N1owgcsxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVy
# aWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo5NjAwLTA1
# RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCC
# AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPDdJtx57Z3rq+RYZMheF8aq
# qBAbFBdOerjheVS83MVK3sQu07gH3f2PBkVfsOtG3/h+nMY2QV0alzsQvlLzqopi
# /frR5eNb58i/WUCoMPfV3+nwCL38BnPwz3nOjSsOkrZyzP1YDJH0W1QPHnZU6z2o
# /f+mCke+BS8Pyzr/co0hPOazxALW0ndMzDVxGf0JmBUhjPDaIP9m85bSxsX8NF2A
# zxR23GMUgpNdNoj9smGxCB7dPBrIpDaPzlFp8UVUJHn8KFqmSsFBYbA0Vo/OmZg3
# jqY+I69TGuIhIL2dD8asNdQlbMsOZyGuavZtoAEl6+/DfVRiVOUtljrNSaOSBpF+
# mjN34aWr1NjYTcOCWvo+1MQqA+7aEzq/w2JTmdO/GEOfF2Zx/xQ3uCh5WUQtds6b
# uPzLDXEz0jLJC5QxaSisFo3/mv2DiW9iQyiFFcRgHS0xo4+3QWZmZAwsEWk1FWdc
# FNriFpe+fVp0qu9PPxWV+cfGQfquID+HYCWphaG/RhQuwRwedoNaCoDb2vL6MfT3
# sykn8UcYfGT532QfYvlok+kBi42Yw08HsUNM9YDHsCmOv8nkyFTHSLTuBXZusBn0
# n1EeL58w9tL5CbgCicLmI5OP50oK21VGz6Moq47rcIvCqWWO+dQKa5Jq85fnghc6
# 0pwVmR8N05ntwTgOKg/VAgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQUGnV2S0Bwalb8
# qbqqb6+7gzUZol8wHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYD
# VR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j
# cmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwG
# CCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIw
# MjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcD
# CDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBAF5y/qxHDYdMszJQ
# LVYkn4VH4OAD0mS/SUawi3jLr0KY6PxHregVuFKZx2lqTGo1uvy/13JNvhEPI2q2
# iGKJdu2teZArlfvL9D74XTMyi1O1OlM+8bd6W3JX8u87Xmasug1DtbhUfnxou3Tf
# S05HGzxWcBBAXkGZBAw65r4RCAfh/UXi4XquXcQLXskFInTCMdJ5r+fRZiIc9HSq
# TP81EB/yVJRRXSBsgxrAYiOfv5ErIKv7yXXF02Qr8XRRi5feEbScT71ZzQvgD96e
# W5Q3s9r285XpWLcE4lJPRFj9rHuJnjmV4zySoLDsEU9xMiRbPGmOvacK2KueTDs4
# FDoU2DAi4C9g1NTuvrRbjbVgU4vmlOwxlw0M46wDTXG/vKYIXrOScwalEe7DRFvY
# EAkL2q5TsJdZsxsAkt1npcg0pquJKYJff8wt3Nxblc7JwrRCGhE1F/hapdGyEQFp
# jbKYm8c7jyhJJj+Sm5i8FLeWMAC4s3tGnyNZLu33XqloZ4Tumuas/0UmyjLUsUqY
# Wdb6+DjcA2EHK4ARer0JrLmjsrYfk0WdHnCP9ItErArWLJRf3bqLVMS+ISICH89X
# IlsAPiSiKmKDbyn/ocO6Jg5nTBSSb9rlbyisiOg51TdewniLTwJ82nkjvcKy8HlA
# 9gxwukX007/Uu+hADDdQ90vnkzkdMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJ
# mQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNh
# dGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1
# WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEB
# BQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjK
# NVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhg
# fWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJp
# rx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/d
# vI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka9
# 7aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKR
# Hh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9itu
# qBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyO
# ArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItb
# oKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6
# bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6t
# AgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQW
# BBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacb
# UzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYz
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnku
# aHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIA
# QwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2
# VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwu
# bWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEw
# LTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93
# d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYt
# MjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/q
# XBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6
# U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVt
# I1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis
# 9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTp
# kbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0
# sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138e
# W0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJ
# sWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7
# Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0
# dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQ
# tB1VM1izoXBm8qGCA00wggI1AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj
# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTYwMC0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoB
# ATAHBgUrDgMCGgMVALo9gdHD371If7WnDLqrNUbeT2VuoIGDMIGApH4wfDELMAkG
# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx
# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQELBQACBQDsgDmnMCIY
# DzIwMjUwOTI1MjE1OTAzWhgPMjAyNTA5MjYyMTU5MDNaMHQwOgYKKwYBBAGEWQoE
# ATEsMCowCgIFAOyAOacCAQAwBwIBAAICMaUwBwIBAAICFGAwCgIFAOyBiycCAQAw
# NgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgC
# AQACAwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAHQwP1uc+xENC9xHbDCCVrg908d9p
# Dx5mW0xgafZI92rRR47osuT8GUdg4XOobHtEjFDWf6hx80owbN/miYYrJeG1mbtB
# nTDFcfPEHRobULq8g1nVgSMFNhPPteYWTc41Rb0TZ02qxteIe7yFNK6F5F8c5n92
# ZCdAmKqR2ezVusT3lBWUZ9wmdO9uUURjOr2AHKOFraG0csMTjjzeLYJ4L/NgSRkm
# +CEo0KpmyY51ft1vPkxDqGGWTeMGHLaRPu0n6eV3D6NaxmyDKYMHMAiPZsq38zPD
# 5iU0b/iedQblxPRl0Lu4lgEw2ijz12Zd5tTzisQYGpjVyIpBIMUSnAunbjGCBA0w
# ggQJAgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACBNjg
# DgeXMliYAAEAAAIEMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYL
# KoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIOQ+Xu/lKccR4w3+V3RK8vtXIZA8
# zsbNAxHWlUcLtoMCMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQg+e14Zf1b
# CrxV0kzqaN/HUYQmy7v/qRTqXRJLmtx5uf4wgZgwgYCkfjB8MQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBQQ0EgMjAxMAITMwAAAgTY4A4HlzJYmAABAAACBDAiBCB+8e5RMxmM
# HBE+Nak8R0xktA9nhmYVLeEhZg5gpFJMZDANBgkqhkiG9w0BAQsFAASCAgC3XK8q
# 4xPxsnX2l/zX2VbkWmoAE5e2zOazUTowxlEKqUZYwnMPKsgLi2dQCwv+Y0M3gNGg
# cT25CIEQtr37PH3GcXSKtiRNHGpoFoYZoSXBnkokJ4s3LAxsB3OG9srny3N/k+jt
# H7XABGVLyhGH60SE09icUtwooNj9/+LqTHTi8bjlnh8tLxLAC3/PCSK+BhIZ4L33
# HMHsgDt5H5kGsgIF4/Olubo5XvjP0qjpIkBaq2Pbg+DgfhT6RbCNKekSbE7d5sZf
# 3vtJoYQdCkacBjdDkMYa9xlMofoJihsjiOUVfpit/PUzgPvBRd5x27wck3PQK+82
# G/h70yw5XBosOzfk4NRAQ2bujf0haXhJtzkshOtsxRHNu6xIqA0CnR0WdEOg8O42
# eHMJ0yxby70H9tyLOOusSd+k5f2b1g5yNr8FI1OuuJCvn5LO3iZsTPX68P2/4I/D
# ySsi/xM8gZgEQpZW1iZBihKTYP8AXvpqEEFsSR3Ru7kM54EsarI7WbVSNaU9lhA7
# 3BfY45LRojhVO2gmFB4df7pVc42QTWFF/km1WCAkNhv2eI+Sarh2eef/6SjGLkec
# bFt4cRn1fv4yNW+q8iugfNQttXFD3BbIsC/A3fwhFpNIvwwPwFJJIT11J6n12vnF
# ZqhIFHjEGDrZt4TJ88/9G9JTu2CDWJm76/lF3Q==
# SIG # End signature block