Private/Types.psm1

<#
SAMPLE CODE NOTICE
 
THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED,
OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY.
THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER.
NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO.
#>


class CertificateInformation{
    [string] $Issuer
    [string] $Subject
    [string] $SignatureAlgorithm
    [bool] $IsExpired
    [bool] $IsSelfSigned
}

class SSLInformation{
    [string] $Protocols
    [bool] $Success
    [string] $SslErrors
    [string] $CipherSuite
    [string] $ExceptionMessage
}

class ConnectivityInformation{
    [bool] $TCPSuccess
    [string] $TCPErrorMessage
    [string] $Destination
    [int] $Port
    [string] $ContainerIpAddress
}

class ApplicationInsightsInformation{
    [bool] $ConnectionStringValid
    [bool] $TestMessageSent
    [string] $ErrorMessage
    [string] $ContainerIpAddress
}

class HostResolutionInformation{
    [bool] $Success
    [string] $HostName
    [string[]] $IPAddresses
    [string[]] $DnsServers
    [string] $ErrorMessage
    [string] $ContainerIpAddress
}

class TLSConnectivityInformation{
    [bool] $TCPConnectivity
    [CertificateInformation] $Certificate
    [SSLInformation] $SSLWithoutCRL
    [SSLInformation] $SSLWithCRL
    [string] $ContainerIpAddress
}

class VnetInformation{
    [object] $VnetResource
    [string] $SubnetName

    VnetInformation([object]$VnetResource, [string]$SubnetName) {
        $this.VnetResource = $VnetResource
        $this.SubnetName = $SubnetName
    }
}

class NetworkUsage{
    [string] $AzureRegion
    [string] $EnvironmentId
    [string] $VnetId
    [string] $SubnetName
    [string] $SubnetIpRange
    [string] $ContainerReservedIpCount
    [string[]] $DnsServers
}

class NetworkUsageData{
    [string] $TimeStamp
    [string] $NormalizedTimestamp
    [int] $TotalIpUsage
    [hashtable] $IpAllocations
}

class EnvironmentNetworkUsageDocument{
    [string] $Id
    [string] $EnvironmentId
    [string] $TenantId
    [string] $EnterprisePolicyId
    [string] $VnetId
    [string] $SubnetName
    [int] $SubnetSize
    [string] $AzureRegion
    [NetworkUsageData[]] $NetworkUsageData
}

class SubnetUsageDocument{
    [string] $TenantId
    [string] $EnterprisePolicyId
    [string] $VnetId
    [string] $SubnetName
    [int] $SubnetSize
    [string] $AzureRegion
    [NetworkUsageData[]] $NetworkUsageDataByWorkload
    [NetworkUsageData[]] $NetworkUsageDataByEnvironment
}

class ValidateAzureResourceIdAttribute : System.Management.Automation.ValidateArgumentsAttribute {
    [string]$ResourceType

    ValidateAzureResourceIdAttribute([string]$resourceType) {
        $this.ResourceType = $resourceType
    }

    [void] Validate([object]$arguments, [System.Management.Automation.EngineIntrinsics]$engineIntrinsics) {
        $value = [string]$arguments

        if ([string]::IsNullOrWhiteSpace($value)) {
            throw [System.Management.Automation.ValidationMetadataException]::new("Value cannot be null or empty.")
        }

        if ($value.EndsWith('/')) {
            throw [System.Management.Automation.ValidationMetadataException]::new(
                "Resource ID cannot have a trailing slash."
            )
        }

        # Pattern: /subscriptions/{guid}/resourceGroups/{name}/providers/{provider}/{type}/{name}
        # GUID format: 8-4-4-4-12 hexadecimal characters
        $guidPattern = "[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}"
        $escapedType = [regex]::Escape($this.ResourceType)
        $pattern = "^/subscriptions/$guidPattern/resourceGroups/[^/]+/providers/$escapedType/[^/]+$"

        if ($value -notmatch $pattern) {
            throw [System.Management.Automation.ValidationMetadataException]::new(
                "Invalid resource ID format. Expected: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/$($this.ResourceType)/{name}"
            )
        }
    }
}

enum PolicyType{
    Encryption
    NetworkInjection
    Identity
}

enum PPEndpoint{
    unknown # Used for defaulting to this value, not meant to be used.
    tip1
    tip2
    prod
    usgovhigh
    dod
    china
}

enum LinkOperation{
    link
    unlink
}

enum AzureEnvironment{
    AzureCloud
    AzureChinaCloud
    AzureUSGovernment
    EastUs2Euap
    CentralUSEuap
}

enum AuthorizationPrincipalType{
    User
    Group
    ApplicationUser
}

enum ServicePrincipalAuthMethod{
    ManagedIdentity
    Certificate
}

# Define the types to export with type accelerators.
$ExportableTypes = @(
    [ApplicationInsightsInformation]
    [ConnectivityInformation]
    [HostResolutionInformation]
    [TLSConnectivityInformation]
    [SSLInformation]
    [CertificateInformation]
    [VnetInformation]
    [ValidateAzureResourceIdAttribute]
    [PolicyType]
    [PPEndpoint]
    [LinkOperation]
    [NetworkUsage]
    [AzureEnvironment]
    [NetworkUsageData]
    [EnvironmentNetworkUsageDocument]
    [SubnetUsageDocument]
    [AuthorizationPrincipalType]
    [ServicePrincipalAuthMethod]
)

# Get the internal TypeAccelerators class to use its static methods.
$TypeAcceleratorsClass = [psobject].Assembly.GetType(
    'System.Management.Automation.TypeAccelerators'
)

# Ensure none of the types would clobber an existing type accelerator.
# If a type accelerator with the same name exists, throw an exception.
$ExistingTypeAccelerators = $TypeAcceleratorsClass::Get

foreach ($Type in $ExportableTypes) {
    if($Type.FullName -in $global:ImportedTypes) {
        continue
    }
    if ($Type.FullName -in $ExistingTypeAccelerators.Keys) {
        $Message = @(
            "Unable to register type accelerator '$($Type.FullName)'"
            'Accelerator already exists.'
        ) -join ' - '

        throw [System.Management.Automation.ErrorRecord]::new(
            [System.InvalidOperationException]::new($Message),
            'TypeAcceleratorAlreadyExists',
            [System.Management.Automation.ErrorCategory]::InvalidOperation,
            $Type.FullName
        )
    }
}
# Add type accelerators for every exportable type.
foreach ($Type in $ExportableTypes) {
    if($Type.FullName -in $global:ImportedTypes) {
        continue
    }
    $TypeAcceleratorsClass::Add($Type.FullName, $Type)
    [string[]]$global:ImportedTypes += $Type.FullName

    # For attribute types, also register the short name (without Attribute suffix)
    # This allows [ValidateAzureResourceId] to resolve to ValidateAzureResourceIdAttribute
    if ($Type.Name.EndsWith('Attribute')) {
        $shortName = $Type.Name.Substring(0, $Type.Name.Length - 9)
        if ($shortName -notin $ExistingTypeAccelerators.Keys -and $shortName -notin $global:ImportedTypes) {
            $TypeAcceleratorsClass::Add($shortName, $Type)
            [string[]]$global:ImportedTypes += $shortName
        }
    }
}

# Remove type accelerators when the module is removed.
$MyInvocation.MyCommand.ScriptBlock.Module.OnRemove = {
    foreach($Type in $ExportableTypes) {
        $TypeAcceleratorsClass::Remove($Type.FullName)
        # Also remove the short name for attribute types
        if ($Type.Name.EndsWith('Attribute')) {
            $shortName = $Type.Name.Substring(0, $Type.Name.Length - 9)
            $TypeAcceleratorsClass::Remove($shortName)
        }
    }
}.GetNewClosure()

# SIG # Begin signature block
# MIIncAYJKoZIhvcNAQcCoIInYTCCJ10CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBb30TAO3ylsEgm
# W8f3az7hYsVcmOlEHXwZKlQ3Lz/HZqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN
# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1
# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP
# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC
# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf
# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j
# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT
# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL
# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT
# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw
# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w
# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl
# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC
# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN
# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK
# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK
# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY
# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu
# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE
# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz
# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6
# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO
# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD
# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC
# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS
# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX
# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ
# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq
# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo
# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv
# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a
# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1
# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO
# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7
# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ
# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS
# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm
# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3
# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E
# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX
# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB
# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP
# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw
# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv
# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC
# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D
# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY
# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI
# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6
# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w
# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7
# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK
# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK
# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw
# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT
# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn9MIIZ+QIBATBu
# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc
# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG
# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI
# hvcNAQkEMSIEIAB2XlMpzDmQjZXsoq2TgsCZShv6U3qAHiRskNNQvbnYMEIGCisG
# AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEArlVgm5/K93tc+KdGAWJG
# i3lAlHgMgrwnzHOPtvpY49p4dVL7ftpkCwfTmEqDnPY1amY//hx9fgdOgmIywf9C
# dfEkdcJe2mkDnnF2Ub2FRcCWj1mJVC2QqWV3jAPJeYvoU6YX4DphaeQAzat8Q2UB
# gCJ6qWqPjQqsoEIuuPnNEOri+ua4PEA4bvqN1XShAsqMocAzMRrsgqb4PWVB/JgS
# yPG84BzA0aikULdLATOutQzEgLoHQwOSc5nxjSqCBSSuEa3jLCMd5rEp8iEBvO4f
# boGMYumdp7vRrcOYx1kM7y2Toh0Wth8d1yRU7nrIgCCIOkmJzqprosBk9BQDd44Y
# x6GCF68wgherBgorBgEEAYI3AwMBMYIXmzCCF5cGCSqGSIb3DQEHAqCCF4gwgheE
# AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG9w0BCRABBKCCAUgEggFEMIIB
# QAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCBxJdMm2wurWuWR4BsY
# UIHZrZpVwtq7krZCmSrvPe45bAIGanJOQjWIGBIyMDI2MDgwNzE2MTEzMi4wMVow
# BIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRl
# ZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUwIwYD
# VQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR/jCCBygwggUQoAMC
# AQICEzMAAAIVGAPTgQcmfFMAAQAAAhUwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UE
# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc
# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0
# IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjUwODE0MTg0ODIwWhcNMjYxMTEzMTg0
# ODIwWjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV
# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsG
# A1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScwJQYD
# VQQLEx5uU2hpZWxkIFRTUyBFU046NjUxQS0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1p
# Y3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4IC
# DwAwggIKAoICAQDDcdXeFXEvSURg9XTdd40pnnXtUhuB7GGUM92lfANLQFi3E/CL
# hdillHWV3S7pyvZeO66B2DnQNTHlYcvRCFjZ32+QlKTTasT/vmFwq33WbYiHbztB
# HFEyYW7cEXrjrqTyqnm5e197q5yKrj1hpLyn53O/e5NqsPiFDxRPstr3mk4mJGrH
# F3So4YsQK8csRc9eKg1LH2nKHOGbqW3t7MvEl4VVi3FKGRq8+hk3R04KJh6HgqCg
# qjJqDMy5KIsKIxRbhR7hCybrnwUk0ZM2HtXmpdhUDqTnGPDlZ5Z0o7PSL0DmMFxt
# j19U6j9wDyLVvK3NwNPFvedy1yXLz85h42y2Rpv8iyrcLF7W+r3p8gcTX5kaYmOR
# rWyh3Co/JxWn/a1v4GO6U8vkPquBRdM8XzhTzZEsodXntsHx8dGmCeNxYFC5c+BV
# 5JekRFaKa3Q0XaUI4vOqCu9L+9ip17kuf1iUoqEBn/EMTRMsgivr4j/YlO1c/fid
# +NMQ1WowEhJZxqQjEDAZvdEHnIcLHKcgU1Utx8oCwR0LlTZ6bR8C+ZW/Syieqe/X
# ty5piLZ4ItaGgrUhzzkPDuz+WFxesGljif9GXmXfAfOzi84iG7zsMjLlBRoS6kSz
# JjQ1aqAjgFaXq/XCCx76XwNYV5Reh+FS4KBVO5Mc3cryJ2gxufxDd51QgQIDAQAB
# o4IBSTCCAUUwHQYDVR0OBBYEFIkhd/FyoDAWoaP2N3BC11Kpp2PXMB8GA1UdIwQY
# MBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6
# Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUt
# U3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYB
# BQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWlj
# cm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB
# /wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0G
# CSqGSIb3DQEBCwUAA4ICAQB3jYe1X6QZu/HMsFMLk7u+QIgE/L8HCmMLN4vneECI
# Q55un5V02fCb0ZUJ9ircox+uPhS8pBNQBpLlmTB7WC9neWNJKcI7JLk7A2712mDf
# DD5BbZ45xIuTJUBYWsufoiKDdML/NYy9WGpe10WEbYonWVJs3bbZyxjcTf8GsaW4
# CW8RP2CbFXLLE3Ln3/skXnMgZwmJvJ3Gz3gkvUG0+Bck59nND7/eJNzp4O2ZpZPo
# Mp2cmhynzCRcpY8iwER+QPqTVCK3C+3SYes5FqHvlKN5w4q3ihZrJUuQ9OGjXZ7S
# ieASDVyN7l/FJka2GsytYq8jhHscQLuTyZof148DdWIfQJVJI559o9MYzMiEcKjm
# neMblIxzI7d4D24RphAkhMmUsbcHDAabKljsL/z+ePVI6GDHUeAnTLA4kv3F8/gA
# 5xaYJ9uyqAZsJoLtYfmwg13N8xqvxXtg0WqRsIZQqFzwakjIT4wqfJWffeOy5oYC
# U1GDt1VFRKhgsnG9SzD0Y7DIGkHBsT2yo4ub4ew7TSgXbc8yKjtYVdwVNkCOne6O
# KEEB8utcgKAY4c92RnTja7Utmo5yeWvdfO+Ax76Y8/Jqxbx/Su3MmPdXkT8QqLJC
# U/GP0x+rbH2GKaeVdYZkJU94QFE6s1sNgF9rNPIs0I5OxG2Sw5JXcUG0+elC0s3v
# njCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQEL
# BQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNV
# BAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4X
# DTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzAR
# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p
# Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh
# bXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM
# 57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm
# 95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzB
# RMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBb
# fowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCO
# Mcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYw
# XE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW
# /aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/w
# EPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPK
# Z6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2
# BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfH
# CBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYB
# BAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8v
# BO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYM
# KwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0
# LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEF
# BQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBW
# BgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUH
# AQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp
# L2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsF
# AAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518Jx
# Nj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+
# iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2
# pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefw
# C2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7
# T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFO
# Ry3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhL
# mm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3L
# wUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5
# m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE
# 0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNZMIICQQIB
# ATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRl
# ZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUwIwYD
# VQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoD
# FQCPp5N6Nu5gTUh+Nt+u3q1d68JRIKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7iAYNzAiGA8yMDI2MDgwNzA4
# MzkxOVoYDzIwMjYwODA4MDgzOTE5WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDu
# IBg3AgEAMAoCAQACAiMKAgH/MAcCAQACAhQxMAoCBQDuIWm3AgEAMDYGCisGAQQB
# hFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAw
# DQYJKoZIhvcNAQELBQADggEBACuf9z3PdZovXPyDmKftAqzwzeVcmzeQTcndm27l
# LD7kRkRUi5aBBwcOtcSe97//UJLj19XRC+Lgj32sYEQfbSIfsjQx5pJUt5A+8ViD
# gZN8oN+cJdrM3L2xvvP0a4pNZF1H+TPFiM80F3xLYz8oanHPnB1rgCjTVaneRrg8
# SDyiAwSj31ckrrsy29PMD/inDy4Wy6gnIFkzzm2kMxTeHozy3+gPFrvwuiHzVATo
# K2cVYU+70Juvl9a+PHGG96u//aizyBOJ0iLS0/uId0zW73mdmN2jnqFOZqdCWtaV
# +QwJm7eP96fPSajCnzXUJmtOJ3wyvSop30Pufj+LJcOLH20xggQNMIIECQIBATCB
# kzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAhUYA9OBByZ8UwAB
# AAACFTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJ
# EAEEMC8GCSqGSIb3DQEJBDEiBCCgNttFvfWrjmZ2RT+9BiTNHQBzqaJkyxMBDc7Z
# XzpOEzCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIHAQ9HY8OtMUtyu1Cwqt
# SLujPkk1EIX8pEcyKFI17uyKMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# UENBIDIwMTACEzMAAAIVGAPTgQcmfFMAAQAAAhUwIgQgZBgWfyGyT5O+qDrgSh63
# Hl9oDzmxr8yHwEzjNnSKeK0wDQYJKoZIhvcNAQELBQAEggIAcjTvZ60WSHraRV1O
# 0gb8BvryjQsF19dGi0cc8zCoJOL88kgibeHK5XwzcsLcSOqyW8fkwBJHovoZyla2
# EWpchtkrfzbYFsg3Zj7tXGicd6AYrQYgBB+1Eq2liIvuO2f0Anknzap90zHB3bvm
# +v0Be7jM8A5M9Uma+IShLRUO1kZOntJP7LUv2t9YecLM91JJMGcqLWZVeCjgP2h5
# azcNMgpq4M2J5fioIGB28maWi/h985bqUu9WpTKAun9bPvWYp3C4sY+w/T2IPXMN
# chwL2y49saXVOpQlWJDF8CBzNOzTTcjHbYHlvPxjOmKKb3PjJQ44KcYjZQ/Gvxpt
# Gbp80ekSHa7sdAgSn+ZdI8fWh2P5u/FdDiwuJe4XMUWdMW/MHXa0NsBILvqFs6Do
# 4cf0Dg945K92n4ak7oC6HA8CZtNATZ4suFvITUYzmtl76XMISAh8fhzniXKvfiT1
# MMctUlhVmxjSbx38Sf7do9Xho1l9oWNpTLkF7k+6Hb5syurGLHYOJrqlUkcXSMqL
# NX2QcODZUTrUYx68g5TvqUxDDDGK2qVLjXQMOHgA7RpTIzBMQZg2LwqDm5rr7ne9
# P6GODXt8doVDKmabQxdTGnpk+vYAEnvbAINZ1ew4d2EWVoTCUPWQyQ7uuw1Dn07l
# nl4d931a1sNRwEIOFt4COsnmeLo=
# SIG # End signature block