NetScalerToolkit

2026.817.2045

NetScalerToolkit.Common/Private/Request-NSACMECertificateDnsOrder.ps1

                                function Request-NSACMECertificateDnsOrder {

<#

    .SYNOPSIS

        Requests an ACME certificate using Posh-ACME DNS validation.

    .DESCRIPTION

        Uses Posh-ACME New-PACertificate for DNS plugin validation. When

        UseNetScalerDNS is enabled, it publishes DNS-01 TXT records directly on the

        NetScaler and drives the ACME order manually.

    .PARAMETER Request

        Certificate request object.

    .PARAMETER Domains

        Domains for the certificate order.

    .PARAMETER PfxSecret

        PFX password as SecureString.

    .PARAMETER AcmeOptions

        Normalized ACME options hashtable.

    .PARAMETER Force

        Forces Posh-ACME to renew the DNS validated certificate.

    .NOTES

        Function  : Request-NSACMECertificateDnsOrder

        Author    : John Billekens

        Copyright : Copyright (c) John Billekens Consultancy

        Version   : 2026.0525.2218

#>

    [CmdletBinding()]

    param(

        [Parameter(Mandatory)][object]$Request,

        [Parameter(Mandatory)][string[]]$Domains,

        [Parameter(Mandatory)][securestring]$PfxSecret,

        [Parameter(Mandatory)][hashtable]$AcmeOptions,

        [Parameter()][psobject]$Session,

        [Parameter()][object]$Account,

        [switch]$Force

    )

    if ($Request.UseNetScalerDNS) {

        if (-not $Session) { throw 'A NetScaler session is required when UseNetScalerDNS is enabled.' }

        if (-not $Account) { $Account = Get-PAAccount -ErrorAction Stop }

        $orderParams = @{

            Domain        = $Domains

            KeyLength     = [string]$Request.KeyLength

            FriendlyName  = $Request.FriendlyName

            PfxPassSecure = $PfxSecret

            Force         = $true

            ErrorAction   = 'Stop'

        }

        if ($AcmeOptions.UseModernPfxEncryption) { $orderParams.UseModernPfxEncryption = $true }

        if ($AcmeOptions.PreferredChain) { $orderParams.PreferredChain = $AcmeOptions.PreferredChain }

        if ($AcmeOptions.Profile) { $orderParams.Profile = $AcmeOptions.Profile }

        if ($AcmeOptions.LifetimeDays) { $orderParams.LifetimeDays = [int]$AcmeOptions.LifetimeDays }

        if ($AcmeOptions.ValidationTimeout) { $orderParams.ValidationTimeout = [int]$AcmeOptions.ValidationTimeout }

        if ($AcmeOptions.DnsAlias) { $orderParams.DnsAlias = $AcmeOptions.DnsAlias }

        if ($AcmeOptions.AlwaysNewKey -or [bool]$Force -or [bool]$Request.ForceCertRenew) { $orderParams.AlwaysNewKey = $true }

        if ([bool]$Force -or [bool]$Request.ForceCertRenew) {

            try { Remove-PAOrder -MainDomain $Request.CN -Force -ErrorAction SilentlyContinue | Out-Null } catch {}

        }

        $validationTimeout = if ($AcmeOptions.ValidationTimeout) { [int]$AcmeOptions.ValidationTimeout } else { 240 }

        Write-NSACMECertificateLog Info 'ACME' "Creating ACME DNS order for $($Domains -join ', ') using NetScaler DNS."

        $order = New-PAOrder @orderParams

        $publishedRecords = @()

        try {

            $authzs = $order | Posh-ACME\Get-PAOrder -Refresh | Posh-ACME\Get-PAAuthorizations

            $pendingAuthzs = @($authzs | Where-Object { $_.status -ne 'valid' -and $_.DNS01Status -ne 'valid' })

            foreach ($authz in $pendingAuthzs) {

                $domainName = [string]$authz.fqdn

                $sanitizedDomain = $domainName -replace '^\*\.', ''

                $recordName = if ($authz.DnsAlias) {

                    [string]$authz.DnsAlias

                } elseif ($AcmeOptions.DnsAlias) {

                    $index = [array]::IndexOf([string[]]$Domains, $domainName)

                    if ($index -ge 0 -and @($AcmeOptions.DnsAlias).Count -gt $index) { [string]@($AcmeOptions.DnsAlias)[$index] } else { [string]@($AcmeOptions.DnsAlias)[0] }

                } else {

                    "_acme-challenge.$sanitizedDomain"

                }

                $recordName = $recordName.TrimEnd('.')

                $txtValue = Posh-ACME\Get-KeyAuthorization -Token $authz.DNS01Token -Account $Account -ForDNS

                Add-NSACMECertificateSensitiveValue -Value $txtValue -Placeholder '<ACMEDnsTxtValue>'

                Write-NSACMECertificateLog Info 'NetScalerDNS' "Adding DNS-01 TXT record '$recordName' for $domainName."

                $existingRecords = @(Invoke-NSGetDNSTXTRecord -Session $Session -Domain $recordName -ReturnNullOnNotFound -ErrorAction SilentlyContinue)

                $existing = @($existingRecords | Where-Object {

                        $values = @($_.String) + @($_.string)

                        $values -contains $txtValue

                    })

                if (-not $existing) {

                    Invoke-NSAddDNSTXTRecord -Session $Session -Domain $recordName -String $txtValue -Ttl 300 | Out-Null

                } else {

                    Write-NSACMECertificateLog Debug 'NetScalerDNS' "DNS-01 TXT record '$recordName' already exists."

                }

                $publishedRecords += [PSCustomObject]@{ Domain = $recordName; String = $txtValue; Fqdn = $domainName }

                Write-NSStatusTick

            }

            $dnsWaitTime = if ($Request.DNSWaitTime) { [int]$Request.DNSWaitTime } else { [int]$AcmeOptions.DNSWaitTime }

            if ($dnsWaitTime -gt 0) {

                Write-NSACMECertificateLog Info 'NetScalerDNS' "Waiting $dnsWaitTime seconds for DNS records to settle."

                # One second at a time so the wait shows progress.

                for ($second = 0; $second -lt $dnsWaitTime; $second++) {

                    Start-Sleep -Seconds 1

                    Write-NSStatusTick

                }

            }

            foreach ($authz in $pendingAuthzs) {

                Write-NSACMECertificateLog Info 'ACME' "Acknowledging DNS-01 challenge for $($authz.fqdn)."

                Posh-ACME\Send-ChallengeAck -ChallengeUrl $authz.DNS01Url -Account $Account -ErrorAction Stop

                Write-NSStatusTick

            }

            Wait-NSACMECertificateAuthorization -MainDomain $Request.CN -TimeoutSeconds $validationTimeout | Out-Null

            Write-NSACMECertificateLog Info 'ACME' "Finalizing ACME order for $($Request.CN)."

            $null = Submit-OrderFinalize -Order (Get-PAOrder -MainDomain $Request.CN -Refresh) -ErrorAction Stop

            Wait-NSACMECertificateOrderFinal -MainDomain $Request.CN -TimeoutSeconds $validationTimeout | Out-Null

            Write-NSACMECertificateLog Info 'ACME' "Downloading ACME certificate artifacts for $($Request.CN)."

            $null = Complete-PAOrder -Order (Get-PAOrder -MainDomain $Request.CN -Refresh) -ErrorAction Stop

            return Get-PACertificate -MainDomain $Request.CN -ErrorAction Stop

        } finally {

            foreach ($record in $publishedRecords) {

                try {

                    Write-NSACMECertificateLog Info 'NetScalerDNS' "Removing DNS-01 TXT record '$($record.Domain)' for $($record.Fqdn)."

                    Invoke-NSDeleteDNSTXTRecord -Session $Session -Domain $record.Domain -String $record.String -IgnoreNotFound -Confirm:$false -ErrorAction SilentlyContinue | Out-Null

                } catch {

                    Write-NSACMECertificateLog Warning 'NetScalerDNS' "Could not remove DNS-01 TXT record '$($record.Domain)': $($_.Exception.Message)"

                }

            }

        }

    }

    $plugin = if ($Request.DNSPlugin) { $Request.DNSPlugin } elseif ($AcmeOptions.DNSPlugin) { $AcmeOptions.DNSPlugin } else { 'Manual' }

    $pluginValues = @($plugin)

    if ($pluginValues.Count -eq 1 -and @($Domains).Count -gt 1) {

        $expandedPlugin = @()

        for ($index = 0; $index -lt @($Domains).Count; $index++) {

            $expandedPlugin += [string]$pluginValues[0]

        }

        $plugin = $expandedPlugin

    }

    $pluginArgs = if ($Request.DNSParams) { ConvertTo-NSACMECertificateHashtable -InputObject $Request.DNSParams } else { ConvertTo-NSACMECertificateHashtable -InputObject $AcmeOptions.DNSParams }

    $dnsSleep = if ($Request.DNSWaitTime -and [int]$Request.DNSWaitTime -gt 0) {

        [int]$Request.DNSWaitTime

    } elseif ($AcmeOptions.DNSWaitTime -and [int]$AcmeOptions.DNSWaitTime -gt 0) {

        [int]$AcmeOptions.DNSWaitTime

    } else {

        120

    }

    $params = @{

        Domain          = $Domains

        Contact         = $Request.EmailAddress

        AcceptTOS       = $true

        Plugin          = $plugin

        PluginArgs      = $pluginArgs

        DnsSleep        = $dnsSleep

        PfxPassSecure   = $PfxSecret

        FriendlyName    = $Request.FriendlyName

        Force           = ([bool]$Force -or [bool]$Request.ForceCertRenew)

        ErrorAction     = 'Stop'

    }

    if ($Request.KeyLength) { $params.CertKeyLength = [string]$Request.KeyLength }

    if ($AcmeOptions.UseModernPfxEncryption) { $params.UseModernPfxEncryption = $true }

    if ($AcmeOptions.PreferredChain) { $params.PreferredChain = $AcmeOptions.PreferredChain }

    if ($AcmeOptions.Profile) { $params.Profile = $AcmeOptions.Profile }

    if ($AcmeOptions.LifetimeDays) { $params.LifetimeDays = [int]$AcmeOptions.LifetimeDays }

    if ($AcmeOptions.ValidationTimeout) { $params.ValidationTimeout = [int]$AcmeOptions.ValidationTimeout }

    if ($AcmeOptions.DnsAlias) { $params.DnsAlias = $AcmeOptions.DnsAlias }

    if ($AcmeOptions.AlwaysNewKey) { $params.AlwaysNewKey = $true }

    Write-NSACMECertificateLog Info 'ACME' "Requesting DNS certificate for $($Domains -join ', ') using plugin '$($pluginValues[0])'."

    Write-NSACMECertificateLog Debug 'ACME' "DNS propagation wait is $dnsSleep seconds." -Data ([ordered]@{

            Plugin    = $pluginValues[0]

            DnsSleep  = $dnsSleep

            Domains   = ($Domains -join ', ')

            DnsAlias  = if ($AcmeOptions.DnsAlias) { @($AcmeOptions.DnsAlias) -join ', ' } else { $null }

        }) -ConsoleDataKeys @('DnsSleep', 'Plugin')

    try {

        New-PACertificate @params

    } catch {

        if ($_.Exception.Message -match 'Incorrect TXT record') {

            Write-NSACMECertificateLog Warning 'ACME' 'DNS-01 validation saw stale or missing TXT records.' -Data ([ordered]@{

                    Plugin   = $pluginValues[0]

                    DnsSleep = $dnsSleep

                    Domains  = ($Domains -join ', ')

                    Action   = 'Remove old _acme-challenge TXT values, wait for public DNS, or increase DNSWaitTime.'

                }) -ConsoleDataKeys @('DnsSleep', 'Action')

        }

        throw

    }

}

# SIG # Begin signature block

# MII6AgYJKoZIhvcNAQcCoII58zCCOe8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCyaLIGNAkdt0WB

# AGjxGKUtkODmZI9KBhUCui3jAgsXM6CCIiYwggXMMIIDtKADAgECAhBUmNLR1FsZ

# lUgTecgRwIeZMA0GCSqGSIb3DQEBDAUAMHcxCzAJBgNVBAYTAlVTMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jvc29mdCBJZGVu

# dGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAy

# MDAeFw0yMDA0MTYxODM2MTZaFw00NTA0MTYxODQ0NDBaMHcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xSDBGBgNVBAMTP01pY3Jv

# c29mdCBJZGVudGl0eSBWZXJpZmljYXRpb24gUm9vdCBDZXJ0aWZpY2F0ZSBBdXRo

# b3JpdHkgMjAyMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALORKgeD

# Bmf9np3gx8C3pOZCBH8Ppttf+9Va10Wg+3cL8IDzpm1aTXlT2KCGhFdFIMeiVPvH

# or+Kx24186IVxC9O40qFlkkN/76Z2BT2vCcH7kKbK/ULkgbk/WkTZaiRcvKYhOuD

# PQ7k13ESSCHLDe32R0m3m/nJxxe2hE//uKya13NnSYXjhr03QNAlhtTetcJtYmrV

# qXi8LW9J+eVsFBT9FMfTZRY33stuvF4pjf1imxUs1gXmuYkyM6Nix9fWUmcIxC70

# ViueC4fM7Ke0pqrrBc0ZV6U6CwQnHJFnni1iLS8evtrAIMsEGcoz+4m+mOJyoHI1

# vnnhnINv5G0Xb5DzPQCGdTiO0OBJmrvb0/gwytVXiGhNctO/bX9x2P29Da6SZEi3

# W295JrXNm5UhhNHvDzI9e1eM80UHTHzgXhgONXaLbZ7LNnSrBfjgc10yVpRnlyUK

# xjU9lJfnwUSLgP3B+PR0GeUw9gb7IVc+BhyLaxWGJ0l7gpPKWeh1R+g/OPTHU3mg

# trTiXFHvvV84wRPmeAyVWi7FQFkozA8kwOy6CXcjmTimthzax7ogttc32H83rwjj

# O3HbbnMbfZlysOSGM1l0tRYAe1BtxoYT2v3EOYI9JACaYNq6lMAFUSw0rFCZE4e7

# swWAsk0wAly4JoNdtGNz764jlU9gKL431VulAgMBAAGjVDBSMA4GA1UdDwEB/wQE

# AwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIftJqhSobyhmYBAcnz1AQ

# T2ioojAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQwFAAOCAgEAr2rd5hnn

# LZRDGU7L6VCVZKUDkQKL4jaAOxWiUsIWGbZqWl10QzD0m/9gdAmxIR6QFm3FJI9c

# Zohj9E/MffISTEAQiwGf2qnIrvKVG8+dBetJPnSgaFvlVixlHIJ+U9pW2UYXeZJF

# xBA2CFIpF8svpvJ+1Gkkih6PsHMNzBxKq7Kq7aeRYwFkIqgyuH4yKLNncy2RtNwx

# AQv3Rwqm8ddK7VZgxCwIo3tAsLx0J1KH1r6I3TeKiW5niB31yV2g/rarOoDXGpc8

# FzYiQR6sTdWD5jw4vU8w6VSp07YEwzJ2YbuwGMUrGLPAgNW3lbBeUU0i/OxYqujY

# lLSlLu2S3ucYfCFX3VVj979tzR/SpncocMfiWzpbCNJbTsgAlrPhgzavhgplXHT2

# 6ux6anSg8Evu75SjrFDyh+3XOjCDyft9V77l4/hByuVkrrOj7FjshZrM77nq81YY

# uVxzmq/FdxeDWds3GhhyVKVB0rYjdaNDmuV3fJZ5t0GNv+zcgKCf0Xd1WF81E+Al

# GmcLfc4l+gcK5GEh2NQc5QfGNpn0ltDGFf5Ozdeui53bFv0ExpK91IjmqaOqu/dk

# ODtfzAzQNb50GQOmxapMomE2gj4d8yu8l13bS3g7LfU772Aj6PXsCyM2la+YZr9T

# 03u4aUoqlmZpxJTG9F9urJh4iIAGXKKy7aIwggbAMIIEqKADAgECAhMzAAQyFPAY

# SugxouNXAAAABDIUMA0GCSqGSIb3DQEBDAUAMFoxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJ

# RCBWZXJpZmllZCBDUyBFT0MgQ0EgMDMwHhcNMjYwODExMjAwMzQ0WhcNMjYwODE0

# MjAwMzQ0WjCBgzELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUJyYWJhbnQx

# EjAQBgNVBAcTCVNjaGlqbmRlbDEjMCEGA1UEChMaSm9obiBCaWxsZWtlbnMgQ29u

# c3VsdGFuY3kxIzAhBgNVBAMTGkpvaG4gQmlsbGVrZW5zIENvbnN1bHRhbmN5MIIB

# ojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAl2pkW+UFmY9d2Kcm7Z8wApSf

# 2dHEsgry/XBR2+rZFXU6NR/8sfKW0Djh0yw/PpCKJG69CDyklZRDwjLpJL3brooU

# e4iUMF7XO/28YR8iiGPPR0rDSmJj9Z02wOgeCmdW9VxLcCgFa9079oB1LvJuAlFJ

# 13+BdZ5xfQjlULe/RFLHbCynnDCKZNewx2x3vQ6ySbiLXm9bWQX2PQtIs4cma/1B

# wobcm2uS+LKPv8f3ZMaQJi0+ig3lf/xhsPPxz+fxf+Lx6lKSA+NLo7if9u4KHemA

# 6fmQinE/19Vs0Ih0aeEoNjzDlJMz7Qf9pUpOiQ6fZwejmYASKS3wxcu56YGVIK08

# ZIeyKFO9nFQ+1jp4ojgV9mAjl/XfQmZ+QDelGcD4XqMEQBDWprScS2KkNENSHe0U

# VtYGnDc8dbzMOJYxLVGsnWM8pps7z4B0IQIJNsVL/CYpF3S7UhZJyfOLyzZaZDKq

# r7aBenR2VW1WYlDk+KtvgS+11jrlKEltzBYm0lc1AgMBAAGjggHTMIIBzzAMBgNV

# HRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIHgDA6BgNVHSUEMzAxBgorBgEEAYI3YQEA

# BggrBgEFBQcDAwYZKwYBBAGCN2HK9PELgrHSgxH33KNOluu6MTAdBgNVHQ4EFgQU

# fU2TCJo1YcxscqAZk3GlzoyzeW0wHwYDVR0jBBgwFoAUa16lNMMFxWJKIVqOq3Ng

# YtSsY4UwZwYDVR0fBGAwXjBcoFqgWIZWaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwSUQlMjBWZXJpZmllZCUyMENTJTIwRU9D

# JTIwQ0ElMjAwMy5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhodHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElE

# JTIwVmVyaWZpZWQlMjBDUyUyMEVPQyUyMENBJTIwMDMuY3J0MFQGA1UdIARNMEsw

# SQYEVR0gADBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v

# cGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wDQYJKoZIhvcNAQEMBQADggIBADVM

# Raa+z8SOmFvQ/jMHIi5omZ80bW9uDvA++DM0WKcI05jqXD1RbKP/BoqJa3wICSFx

# yIV5qJXtM3UV1+/U591POTI2GYUrSdrHHbAnJUHkmmx+H6MxuCuamQzz7Yl4I3L5

# EbbAtQThwvBarD5f27jKh5xS+TOVzGo8CR8r3E5RjKhhAGQeKq7rRma7iKZBvTeK

# CzOel+eUoqqXPGHN7pqWqqy/WVO2ErH43fjvFViXI7fPxy257J1OpIOLD7ofm+St

# x2jQV7rv4iGAPnEnxpM1ZWt1oNffPJ9sawsjhoeZ/VM0MMJ6mZsfKOMJQvcCUI7L

# Xq1QqhWURvGVlwWbl16ywiK1iNQjAFf6NmpQumD0kMO0CmL6VN/CXCelqP5zGDwL

# DfSuf4/6HBq3goPY/8J6ZoKzKlc4H/fWtsdL6pA+Q+lcTr3aqKz0fXJ94zwLdHQE

# TnPiGX2hlQVntCNOEhhARIda1S2wUiFLv11JbMicpskPDv/l4rlYyGwKFu1ecz+J

# JJWzhCbIcp6O2v+t8pEU2LG4bhCmn3nWa17UTDo5vJeVOI8vYOoNYGw6GV9ctS+e

# k6MemZXh/nNkHk9tbxX75ps3ar93h22Bs0HXC2im64sANJCsWEXPf8Xram9rOkGp

# nEtZHWVkVFX1lsftyqV1MB57/OazLgvkkN+uy196MIIGwDCCBKigAwIBAgITMwAE

# MhTwGEroMaLjVwAAAAQyFDANBgkqhkiG9w0BAQwFADBaMQswCQYDVQQGEwJVUzEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSswKQYDVQQDEyJNaWNyb3Nv

# ZnQgSUQgVmVyaWZpZWQgQ1MgRU9DIENBIDAzMB4XDTI2MDgxMTIwMDM0NFoXDTI2

# MDgxNDIwMDM0NFowgYMxCzAJBgNVBAYTAk5MMRYwFAYDVQQIEw1Ob29yZC1CcmFi

# YW50MRIwEAYDVQQHEwlTY2hpam5kZWwxIzAhBgNVBAoTGkpvaG4gQmlsbGVrZW5z

# IENvbnN1bHRhbmN5MSMwIQYDVQQDExpKb2huIEJpbGxla2VucyBDb25zdWx0YW5j

# eTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAJdqZFvlBZmPXdinJu2f

# MAKUn9nRxLIK8v1wUdvq2RV1OjUf/LHyltA44dMsPz6QiiRuvQg8pJWUQ8Iy6SS9

# 266KFHuIlDBe1zv9vGEfIohjz0dKw0piY/WdNsDoHgpnVvVcS3AoBWvdO/aAdS7y

# bgJRSdd/gXWecX0I5VC3v0RSx2wsp5wwimTXsMdsd70Oskm4i15vW1kF9j0LSLOH

# Jmv9QcKG3Jtrkviyj7/H92TGkCYtPooN5X/8YbDz8c/n8X/i8epSkgPjS6O4n/bu

# Ch3pgOn5kIpxP9fVbNCIdGnhKDY8w5STM+0H/aVKTokOn2cHo5mAEikt8MXLuemB

# lSCtPGSHsihTvZxUPtY6eKI4FfZgI5f130JmfkA3pRnA+F6jBEAQ1qa0nEtipDRD

# Uh3tFFbWBpw3PHW8zDiWMS1RrJ1jPKabO8+AdCECCTbFS/wmKRd0u1IWScnzi8s2

# WmQyqq+2gXp0dlVtVmJQ5Pirb4EvtdY65ShJbcwWJtJXNQIDAQABo4IB0zCCAc8w

# DAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwOgYDVR0lBDMwMQYKKwYBBAGC

# N2EBAAYIKwYBBQUHAwMGGSsGAQQBgjdhyvTxC4Kx0oMR99yjTpbrujEwHQYDVR0O

# BBYEFH1NkwiaNWHMbHKgGZNxpc6Ms3ltMB8GA1UdIwQYMBaAFGtepTTDBcViSiFa

# jqtzYGLUrGOFMGcGA1UdHwRgMF4wXKBaoFiGVmh0dHA6Ly93d3cubWljcm9zb2Z0

# LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMElEJTIwVmVyaWZpZWQlMjBDUyUy

# MEVPQyUyMENBJTIwMDMuY3JsMHQGCCsGAQUFBwEBBGgwZjBkBggrBgEFBQcwAoZY

# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQl

# MjBJRCUyMFZlcmlmaWVkJTIwQ1MlMjBFT0MlMjBDQSUyMDAzLmNydDBUBgNVHSAE

# TTBLMEkGBFUdIAAwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMA0GCSqGSIb3DQEBDAUAA4IC

# AQA1TEWmvs/Ejphb0P4zByIuaJmfNG1vbg7wPvgzNFinCNOY6lw9UWyj/waKiWt8

# CAkhcciFeaiV7TN1Fdfv1OfdTzkyNhmFK0naxx2wJyVB5Jpsfh+jMbgrmpkM8+2J

# eCNy+RG2wLUE4cLwWqw+X9u4yoecUvkzlcxqPAkfK9xOUYyoYQBkHiqu60Zmu4im

# Qb03igsznpfnlKKqlzxhze6alqqsv1lTthKx+N347xVYlyO3z8ctueydTqSDiw+6

# H5vkrcdo0Fe67+IhgD5xJ8aTNWVrdaDX3zyfbGsLI4aHmf1TNDDCepmbHyjjCUL3

# AlCOy16tUKoVlEbxlZcFm5dessIitYjUIwBX+jZqULpg9JDDtApi+lTfwlwnpaj+

# cxg8Cw30rn+P+hwat4KD2P/CemaCsypXOB/31rbHS+qQPkPpXE692qis9H1yfeM8

# C3R0BE5z4hl9oZUFZ7QjThIYQESHWtUtsFIhS79dSWzInKbJDw7/5eK5WMhsChbt

# XnM/iSSVs4QmyHKejtr/rfKRFNixuG4Qpp951mte1Ew6ObyXlTiPL2DqDWBsOhlf

# XLUvnpOjHpmV4f5zZB5PbW8V++abN2q/d4dtgbNB1wtopuuLADSQrFhFz3/F62pv

# azpBqZxLWR1lZFRV9ZbH7cqldTAee/zmsy4L5JDfrstfejCCBygwggUQoAMCAQIC

# EzMAAAAVBT5uGY6TKdkAAAAAABUwDQYJKoZIhvcNAQEMBQAwYzELMAkGA1UEBhMC

# VVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE0MDIGA1UEAxMrTWlj

# cm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2lnbmluZyBQQ0EgMjAyMTAeFw0yNjAz

# MjYxODExMjhaFw0zMTAzMjYxODExMjhaMFoxCzAJBgNVBAYTAlVTMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzApBgNVBAMTIk1pY3Jvc29mdCBJRCBW

# ZXJpZmllZCBDUyBFT0MgQ0EgMDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK

# AoICAQDg9Ms9AqovDnMePvMOe+KybhCd8+lokzYORlS3kBVXseecbyGwBcsenlm5

# bLtMGPjiIFLzBQF+ghlVV/U29q5GcdeEEBCHTTGhL2koIrLc4UrliMRcbv9mOMtR

# /l7/xAmv0Fx4BJHn1dHt37fvrBqXmKjKfGf5DpyO/+hnV7TEreMtS19iO+bjZ/9H

# npg3PCk0e7YSbRTFkx97FZwRWpC4s3NepRfRXQh/WMAj7JmsYeVZohi4TF5yW2JM

# rJZqwHcyzJZYtD2Hlno5ZEJkdiZcEaxHOobmwO06Z1J9c23ps9PGIhGaq1sKLEAz

# 9Doc5rLkYWGteDrscKhAp2kIc/oYlH9Ij6BkOqqgWINEkEtC8ZNG1Mak+h3o65aj

# 0iQKmdxW7IZaHO5cuyoMi+KtYfXeIIg3sVIbS2EL8kUtsDGdEqNqAq/isqTi1jXq

# Le6iKp1ni1SPdvPW9G03CTsYF68b/yuIQRwbdoBCXemMNJCS0dorCRY4b2WAAy4n

# g7SANcEgrBgZf535+QfLU5hGzrKjIpbMabauWb5FKWUKkMsPcXFkXRWO4noKPm4K

# WlFypqOpbJ/KONVReIlxHQRegAOBzIhRB7gr9IDQ1sc2MgOgQ+xVGW4oq4HD0mfA

# iwiyLskZrkaQ7JoanYjBNcR9RS26YxAVbcBtLitFTzCIEg5ZdQIDAQABo4IB3DCC

# AdgwDgYDVR0PAQH/BAQDAgGGMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRr

# XqU0wwXFYkohWo6rc2Bi1KxjhTBUBgNVHSAETTBLMEkGBFUdIAAwQTA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9z

# aXRvcnkuaHRtMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMBIGA1UdEwEB/wQI

# MAYBAf8CAQAwHwYDVR0jBBgwFoAU2UEpsA8PY2zvadf1zSmepEhqMOYwcAYDVR0f

# BGkwZzBloGOgYYZfaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv

# TWljcm9zb2Z0JTIwSUQlMjBWZXJpZmllZCUyMENvZGUlMjBTaWduaW5nJTIwUENB

# JTIwMjAyMS5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMElEJTIw

# VmVyaWZpZWQlMjBDb2RlJTIwU2lnbmluZyUyMFBDQSUyMDIwMjEuY3J0MA0GCSqG

# SIb3DQEBDAUAA4ICAQBdbiI8zwXLX8glJEh/8Q22UMCUhWBO46Z9FPhwOR3mdlqR

# VLkYOon/MczUwrjDhx3X99SPH5PSflkGoTvnO9ZWHM5YFVYpO7NYuB+mfVSGAGZw

# iGOASWk0i2B7vn9nElJJmoiXxugfH5YdBsrUgTt0AFNXkzmqTgk+S1Hxb1u/0HCq

# EHVZPk2A/6eJXYbtpRM5Fcz00jisUl9BRZgSebODV85bBzOveqyC3f0PnHCxRJNh

# Mb8xP/sB/VI7pf2rheSV7zqUSv8vn/fIMblXeaVIlpqoq8SP9BJMjE/CoVXJxnkZ

# QRM1Fa7kN9yztvReOhxSgPgpZx/Xl/jkwyEFVJTBfBp3sTgfIc/pmqv2ehtakL2A

# Ej78EmOPQohxJT3wyX+P78GA25tLpAvzj3RMMHd8z18ZuuVi+60MAzGpOASH1L8N

# lr3fZRZnQO+pyye2DCvYmHaIfdUgYJqn7noxxGVv89+RaETh1tgCDvwNpFCSG7vl

# 5A4ako+2fx409r9TWjXC7Oif1IQ5ZJzB4Rf8GvBiHYjvMmHpledp1FGRLdSRFVpC

# 3/OKpZY6avIqZp7+8pP/WQP903DdgrvAT6W4xPOBxXPa4tGksN3SuqJaiFYHSNye

# Bufn8iseujW4IbBSbHD4BPqbF3qZ+7nG9d/d/G2/Lx4kH9cCmBfmsZdSkHmukDCC

# B54wggWGoAMCAQICEzMAAAAHh6M0o3uljhwAAAAAAAcwDQYJKoZIhvcNAQEMBQAw

# dzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjFI

# MEYGA1UEAxM/TWljcm9zb2Z0IElkZW50aXR5IFZlcmlmaWNhdGlvbiBSb290IENl

# cnRpZmljYXRlIEF1dGhvcml0eSAyMDIwMB4XDTIxMDQwMTIwMDUyMFoXDTM2MDQw

# MTIwMTUyMFowYzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjE0MDIGA1UEAxMrTWljcm9zb2Z0IElEIFZlcmlmaWVkIENvZGUgU2ln

# bmluZyBQQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALLw

# wK8ZiCji3VR6TElsaQhVCbRS/3pK+MHrJSj3Zxd3KU3rlfL3qrZilYKJNqztA9OQ

# acr1AwoNcHbKBLbsQAhBnIB34zxf52bDpIO3NJlfIaTE/xrweLoQ71lzCHkD7A4A

# s1Bs076Iu+mA6cQzsYYH/Cbl1icwQ6C65rU4V9NQhNUwgrx9rGQ//h890Q8JdjLL

# w0nV+ayQ2Fbkd242o9kH82RZsH3HEyqjAB5a8+Ae2nPIPc8sZU6ZE7iRrRZywRmr

# KDp5+TcmJX9MRff241UaOBs4NmHOyke8oU1TYrkxh+YeHgfWo5tTgkoSMoayqoDp

# HOLJs+qG8Tvh8SnifW2Jj3+ii11TS8/FGngEaNAWrbyfNrC69oKpRQXY9bGH6jn9

# NEJv9weFxhTwyvx9OJLXmRGbAUXN1U9nf4lXezky6Uh/cgjkVd6CGUAf0K+Jw+GE

# /5VpIVbcNr9rNE50Sbmy/4RTCEGvOq3GhjITbCa4crCzTTHgYYjHs1NbOc6brH+e

# KpWLtr+bGecy9CrwQyx7S/BfYJ+ozst7+yZtG2wR461uckFu0t+gCwLdN0A6cFtS

# RtR8bvxVFyWwTtgMMFRuBa3vmUOTnfKLsLefRaQcVTgRnzeLzdpt32cdYKp+dhr2

# ogc+qM6K4CBI5/j4VFyC4QFeUP2YAidLtvpXRRo3AgMBAAGjggI1MIICMTAOBgNV

# HQ8BAf8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFNlBKbAPD2Ns

# 72nX9c0pnqRIajDmMFQGA1UdIARNMEswSQYEVR0gADBBMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o

# dG0wGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwDwYDVR0TAQH/BAUwAwEB/zAf

# BgNVHSMEGDAWgBTIftJqhSobyhmYBAcnz1AQT2ioojCBhAYDVR0fBH0wezB5oHeg

# dYZzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwSWRlbnRpdHklMjBWZXJpZmljYXRpb24lMjBSb290JTIwQ2VydGlmaWNhdGUl

# MjBBdXRob3JpdHklMjAyMDIwLmNybDCBwwYIKwYBBQUHAQEEgbYwgbMwgYEGCCsG

# AQUFBzAChnVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y3Jvc29mdCUyMElkZW50aXR5JTIwVmVyaWZpY2F0aW9uJTIwUm9vdCUyMENlcnRp

# ZmljYXRlJTIwQXV0aG9yaXR5JTIwMjAyMC5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6

# Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDANBgkqhkiG9w0BAQwFAAOCAgEA

# fyUqnv7Uq+rdZgrbVyNMul5skONbhls5fccPlmIbzi+OwVdPQ4H55v7VOInnmezQ

# EeW4LqK0wja+fBznANbXLB0KrdMCbHQpbLvG6UA/Xv2pfpVIE1CRFfNF4XKO8XYE

# a3oW8oVH+KZHgIQRIwAbyFKQ9iyj4aOWeAzwk+f9E5StNp5T8FG7/VEURIVWArbA

# zPt9ThVN3w1fAZkF7+YU9kbq1bCR2YD+MtunSQ1Rft6XG7b4e0ejRA7mB2IoX5hN

# h3UEauY0byxNRG+fT2MCEhQl9g2i2fs6VOG19CNep7SquKaBjhWmirYyANb0RJSL

# WjinMLXNOAga10n8i9jqeprzSMU5ODmrMCJE12xS/NWShg/tuLjAsKP6SzYZ+1Ry

# 358ZTFcx0FS/mx2vSoU8s8HRvy+rnXqyUJ9HBqS0DErVLjQwK8VtsBdekBmdTbQV

# oCgPCqr+PDPB3xajYnzevs7eidBsM71PINK2BoE2UfMwxCCX3mccFgx6UsQeRSdV

# VVNSyALQe6PT12418xon2iDGE81OGCreLzDcMAZnrUAx4XQLUz6ZTl65yPUiOh3k

# 7Yww94lDf+8oG2oZmDh5O1Qe38E+M3vhKwmzIeoB1dVLlz4i3IpaDcR+iuGjH2Td

# aC1ZOmBXiCRKJLj4DT2uhJ04ji+tHD6n58vhavFIrmcxghcyMIIXLgIBATBxMFox

# CzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKzAp

# BgNVBAMTIk1pY3Jvc29mdCBJRCBWZXJpZmllZCBDUyBFT0MgQ0EgMDMCEzMABDIU

# 8BhK6DGi41cAAAAEMhQwDQYJYIZIAWUDBAIBBQCgXjAQBgorBgEEAYI3AgEMMQIw

# ADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAvBgkqhkiG9w0BCQQxIgQgTdR4

# Y0f8toztiFC+BksWsdvhi3SKKqkV/Igh4J6ycAYwDQYJKoZIhvcNAQEBBQAEggGA

# BSxbfJYp0NoQkLgeMdo5mO4XfucHkHoHcuEgCAC1xzlaWtEnVPfghkd6ayxe7R6i

# 7FVEBDr62yk5ViVldPyGfu3okHuqd5KdgZNZ+xfP81N/MmTkRtyiX/SXiiIc2Xtz

# V13ed+yBxFolgTIzInH90KHPlKj6aQEWT5UV/j+6qbSnn1JCLN1BwnHn1vhtU0ip

# L9UYZaKnT21f40HteRsfCYvhNZ8Ac3M6J/X6QZQU+8aDNqLEF67hcKWq2BQ5Hnpl

# 01r9C6DzQ4E/z3Mz2Mk0/0v0rgWujLPRPm0eYDi8rD9Sgkn3QvJvf5XLSpnoDrQt

# runw1ZtyztAYsquyJ8DgxHpdVzxxEiTCe9f8LbYWWJdo0L294nqmyqCupJBONl05

# c7LuFvkFzTiDDwIfbAvLxUwy5RYNmhWtodtR0cOkLyLE4tpOoWSdQ0iDKK/yBeqE

# /9g4jlc0MXmaCM+o+lcA/2H2Iu1C83BWrkDTbX1GfZKTWkSOeEtQDWBYD0hdKSTs

# oYIUsjCCFK4GCisGAQQBgjcDAwExghSeMIIUmgYJKoZIhvcNAQcCoIIUizCCFIcC

# AQMxDzANBglghkgBZQMEAgEFADCCAWoGCyqGSIb3DQEJEAEEoIIBWQSCAVUwggFR

# AgEBBgorBgEEAYRZCgMBMDEwDQYJYIZIAWUDBAIBBQAEIBjpz3DDjQHBEfkx7T7z

# A2yaaUpZb/T/+r8PxScwr2PgAgZqNTB6FOIYEzIwMjYwODEzMDUzOTE4LjM3Nlow

# BIACAfSggemkgeYwgeMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRl

# ZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjQ5MUEtMDVFMC1EOTQ3MTUwMwYD

# VQQDEyxNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lIFN0YW1waW5nIEF1dGhvcml0

# eaCCDykwggeCMIIFaqADAgECAhMzAAAABeXPD/9mLsmHAAAAAAAFMA0GCSqGSIb3

# DQEBDAUAMHcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xSDBGBgNVBAMTP01pY3Jvc29mdCBJZGVudGl0eSBWZXJpZmljYXRpb24g

# Um9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMDAeFw0yMDExMTkyMDMyMzFa

# Fw0zNTExMTkyMDQyMzFaMGExCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBQdWJsaWMgUlNBIFRp

# bWVzdGFtcGluZyBDQSAyMDIwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC

# AgEAnnznUmP94MWfBX1jtQYioxwe1+eXM9ETBb1lRkd3kcFdcG9/sqtDlwxKoVIc

# aqDb+omFio5DHC4RBcbyQHjXCwMk/l3TOYtgoBjxnG/eViS4sOx8y4gSq8Zg49RE

# Af5huXhIkQRKe3Qxs8Sgp02KHAznEa/Ssah8nWo5hJM1xznkRsFPu6rfDHeZeG1W

# a1wISvlkpOQooTULFm809Z0ZYlQ8Lp7i5F9YciFlyAKwn6yjN/kR4fkquUWfGmMo

# pNq/B8U/pdoZkZZQbxNlqJOiBGgCWpx69uKqKhTPVi3gVErnc/qi+dR8A2MiAz0k

# N0nh7SqINGbmw5OIRC0EsZ31WF3Uxp3GgZwetEKxLms73KG/Z+MkeuaVDQQheang

# OEMGJ4pQZH55ngI0Tdy1bi69INBV5Kn2HVJo9XxRYR/JPGAaM6xGl57Ei95HUw9N

# V/uC3yFjrhc087qLJQawSC3xzY/EXzsT4I7sDbxOmM2rl4uKK6eEpurRduOQ2hTk

# mG1hSuWYBunFGNv21Kt4N20AKmbeuSnGnsBCd2cjRKG79+TX+sTehawOoxfeOO/j

# R7wo3liwkGdzPJYHgnJ54UxbckF914AqHOiEV7xTnD1a69w/UTxwjEugpIPMIIE6

# 7SFZ2PMo27xjlLAHWW3l1CEAFjLNHd3EQ79PUr8FUXetXr0CAwEAAaOCAhswggIX

# MA4GA1UdDwEB/wQEAwIBhjAQBgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUa2ko

# OjUvSGNAz3vYr0npPtk92yEwVAYDVR0gBE0wSzBJBgRVHSAAMEEwPwYIKwYBBQUH

# AgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0

# b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMA

# dQBiAEMAQTAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFMh+0mqFKhvKGZgE

# ByfPUBBPaKiiMIGEBgNVHR8EfTB7MHmgd6B1hnNodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBJZGVudGl0eSUyMFZlcmlmaWNh

# dGlvbiUyMFJvb3QlMjBDZXJ0aWZpY2F0ZSUyMEF1dGhvcml0eSUyMDIwMjAuY3Js

# MIGUBggrBgEFBQcBAQSBhzCBhDCBgQYIKwYBBQUHMAKGdWh0dHA6Ly93d3cubWlj

# cm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwSWRlbnRpdHklMjBW

# ZXJpZmljYXRpb24lMjBSb290JTIwQ2VydGlmaWNhdGUlMjBBdXRob3JpdHklMjAy

# MDIwLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAX4h2x35ttVoVdedMeGj6TuHYRJkl

# FaW4sTQ5r+k77iB79cSLNe+GzRjv4pVjJviceW6AF6ycWoEYR0LYhaa0ozJLU5Yi

# +LCmcrdovkl53DNt4EXs87KDogYb9eGEndSpZ5ZM74LNvVzY0/nPISHz0Xva71Qj

# D4h+8z2XMOZzY7YQ0Psw+etyNZ1CesufU211rLslLKsO8F2aBs2cIo1k+aHOhrw9

# xw6JCWONNboZ497mwYW5EfN0W3zL5s3ad4Xtm7yFM7Ujrhc0aqy3xL7D5FR2J7x9

# cLWMq7eb0oYioXhqV2tgFqbKHeDick+P8tHYIFovIP7YG4ZkJWag1H91KlELGWi3

# SLv10o4KGag42pswjybTi4toQcC/irAodDW8HNtX+cbz0sMptFJK+KObAnDFHEsu

# kxD+7jFfEV9Hh/+CSxKRsmnuiovCWIOb+H7DRon9TlxydiFhvu88o0w35JkNbJxT

# k4MhF/KgaXn0GxdH8elEa2Imq45gaa8D+mTm8LWVydt4ytxYP/bqjN49D9NZ81co

# E6aQWm88TwIf4R4YZbOpMKN0CyejaPNN41LGXHeCUMYmBx3PkP8ADHD1J2Cr/6tj

# uOOCztfp+o9Nc+ZoIAkpUcA/X2gSMkgHAPUvIdtoSAHEUKiBhI6JQivRepyvWcl+

# JYbYbBh7pmgAXVswggefMIIFh6ADAgECAhMzAAAAWvYNZ4yF7d0IAAAAAABaMA0G

# CSqGSIb3DQEBDAUAMGExCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBQdWJsaWMgUlNBIFRpbWVz

# dGFtcGluZyBDQSAyMDIwMB4XDTI2MDEwODE4NTkwM1oXDTI3MDEwNzE4NTkwM1ow

# geMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsT

# JE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMe

# blNoaWVsZCBUU1MgRVNOOjQ5MUEtMDVFMC1EOTQ3MTUwMwYDVQQDEyxNaWNyb3Nv

# ZnQgUHVibGljIFJTQSBUaW1lIFN0YW1waW5nIEF1dGhvcml0eTCCAiIwDQYJKoZI

# hvcNAQEBBQADggIPADCCAgoCggIBAO/0O0eWjgUb9rnHcQLRdfWPN4H+91a3Ynla

# P46E1m4uD+JKx6csWMStX79fxLJUAqHJqQWE19UlNMhS9jEB32dAJ4yuWsHyUuM+

# dphjDz4E5jl4gYGZEmaOrKvNt+KqlFayyg/oTg3BlLRu4aBq8668A5qlHcfsuh6D

# dSqFID1ixJFZzHrZFG1iGBG7U1Bn2ONLDo7jbwX5rMcPduTAUw/c7M3WhSxQBuZp

# Qiz8RQGKIqCKfIxgQkKdzpCpU0SWQOE/DgTXbz3c15KMRCdkGlL2zb+lnuSV4sse

# Qm3qflZiZckLyn2xJI8ZXDkq+Ig+b/rsPPIfI8di228WvK1j67JXpyeVCaSUO9Er

# zlLnTrnjQkeXVQIp73xuVBVrmvoTf/v4a7MnrmuKSyIXc5vJUHEGB345+O8omFt1

# w8b+Xg9D9PKIRqDPEv7HRk0C+Yvxu8FvHJvSocSIZK+v/FmKFOipYnpP76yAmJNn

# yheucShOgk8QiU53USn/+AyMb7xW905gZnyNqb29HeVdQ175pDHJGEz8Cx5wiHeV

# liGz5hABucFDylR9z3LSTmB6+3ZuIxeG9BZS46P6ANPkuVuD5m8wgc7GLLzg73Cs

# DF09ukt8Uf8dTcMBX3ro+7/k9M6Xt8WPG7IL9v/4DvyMY03tkb9Y9Ri6HWavXRPY

# RCUePspPAgMBAAGjggHLMIIBxzAdBgNVHQ4EFgQUjmOyQ6twMcP1ZbRytJxI4fnX

# mcIwHwYDVR0jBBgwFoAUa2koOjUvSGNAz3vYr0npPtk92yEwbAYDVR0fBGUwYzBh

# oF+gXYZbaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9z

# b2Z0JTIwUHVibGljJTIwUlNBJTIwVGltZXN0YW1waW5nJTIwQ0ElMjAyMDIwLmNy

# bDB5BggrBgEFBQcBAQRtMGswaQYIKwYBBQUHMAKGXWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwUHVibGljJTIwUlNBJTIw

# VGltZXN0YW1waW5nJTIwQ0ElMjAyMDIwLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDBmBgNVHSAEXzBdMFEG

# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQQCMA0GCSqG

# SIb3DQEBDAUAA4ICAQCAlM8r+t3hIb2h1lDTAx+iYkQlxFuU7QONeyIFIBZ29xvG

# l8pehKxErDzIniOpIX/eluUAwQKoaI0zwuKAdR0mrSHXCniMoLNko5W+5r7sXNam

# KX7QMV3BfGOX3gi9qVfxyUe7AHXbqQ8KBQHNYCnNFtQQHgARrlYhtyAKol5ctM0C

# Ac/y3oY7bTMsVJvnA5u7DVWPeXoST2KEMDeLBvJYq0IJZ6yMpDOWLZ4UP82bksyS

# hIB/XdawirIGLdseudryRxVMk313mAcjGRb59+Ittt6otVvYQWqH+PGrTUzEcez8

# aQuO3umoNZjKuFoX5VsPP/gSZse+orhG3zfZk9IDyE3DfUFrhvkv6H0tijK1D0uI

# GhwMBWSm9ktQ6oeU+aurZFx3MI+LODnHsbRFZAy11uMvwKq+ZNC1Se4tIM1u9piW

# AhnTPoh6mULKikHOVhHaO953tkzDCtjsse5GUKOx9yg9nqHKWMgnODp62/uPPzC/

# yDEISrXCcU7UB7tATr3zWNEdtM4d009iXWI6dV/SdcIIX44rpoLyCLw+nXjxp+fY

# /dygLO7UdSQaVaUFVj3K2nVyuujPspt5Lunc5FvuYPqmi/z8kASmmwbiF+W0P0UT

# WFaC84MWfU2h6MDg5s0oxmdNFK76jXr3wZfdSoV7FCKfq5GdeGoy5UwDQwMC0DGC

# A9QwggPQAgEBMHgwYTELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFB1YmxpYyBSU0EgVGltZXN0

# YW1waW5nIENBIDIwMjACEzMAAABa9g1njIXt3QgAAAAAAFowDQYJYIZIAWUDBAIB

# BQCgggEtMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQx

# IgQgoxoVoP3cNT8pMUG13t+ncija2TqcjY/RV10edqi+EqEwgd0GCyqGSIb3DQEJ

# EAIvMYHNMIHKMIHHMIGgBCBiuWRAi+p96PRsBt3TwW3jNozgPQS+Qco1CVm/NaU0

# QzB8MGWkYzBhMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUHVibGljIFJTQSBUaW1lc3RhbXBp

# bmcgQ0EgMjAyMAITMwAAAFr2DWeMhe3dCAAAAAAAWjAiBCD6E8rCIqVKMdY61HJq

# NxoFI6Cbjzy2IIyc5mKrpSg8ZTANBgkqhkiG9w0BAQsFAASCAgC2jqHClcgqUDyo

# DY6pQ++ZGjx29rfYUvR4VKMVaL833hDJowcAQifwoFHwoEu0tQL/bR/TYnV4JOu9

# 9v1ch2jlDLKprMG8xmXIrzSW37Tp7eIlP5CU04i6rhxEHJGc3wswRWLH21sM9fVq

# o2vZU3gMpqpijiEg7stGGUMAO+Dn+2X5V+l61eFRJwFfNVBsq122hQCeRx0c893p

# 4qlOmxauy17vgmg2kVEvJTvDZDr6OrcbATMaXtc72Iotb5s2rEUTP0JwrRWcZA8P

# x7E7vlR9csslx7OoCVDxoCm0k3BvXGyqWZS5gMPGRTBQxMXPFVUFnvRH8xHbRFxz

# OhgYMSSD8SoUcOPk81JF4FbUVhGs+5U/a0sEK/UePzz6yCbeG5i79o7RcrbqLfAs

# 06DZMbWybNJT7r0CCnMLJVx1JUc5cFZYEiTrAVGpsbf+1FUGeYSipfxJu7hkx+Sg

# SuGfNoLADveizss7dgv7ACDIFK4fCCzUwP/0383XBRlhKPu+kqLpruq4ZPKlwg33

# StHkOzOeTOBko07E0YcQ3/cLRZo9Vcx2PWEazZG/ni4bP94nkqfLQ5jB2RQ52OhC

# PCxDl3ASpgWW51/o+1tkwIzyOEfR18yPBIwqI3XZRSgiG7JDpSw1ZPlq6OyhgXGZ

# 8UQ53FYng492ysreOO9/bGnwvSOOOg==

# SIG # End signature block