Private/Nutanix.ps1

<#
Prism Central v4 inventory and host-history primitives.

Cluster and host inventory come from the clustermgmt config API; host history from the clustermgmt
stats API, one request per host. Host requests use a bounded worker pool and one shared request-start
limiter (see Private/NutanixApi.ps1). The VM side and the cycle orchestrator live in
Private/NutanixPrismCentral.ps1.

Each host-stat response contains one time series per selected metric. The series are joined by
timestamp so the payload builder receives one sample per bucket.
#>


# ----------------------------
# Phase 1: Inventory - clusters and hosts (Config APIs)
# ----------------------------
function Get-NutanixClusters {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [pscustomobject]$Context
    )

    Write-CustomLog -Message "Retrieving clusters from Prism Central" -Severity 'DEBUG'
    $clusters = @(Get-NutanixPaginatedResults -Context $Context -Path 'clustermgmt/v4.0/config/clusters' -ExtraQuery @{ '$select' = $script:NUTANIX_CLUSTER_SELECT })
    Write-CustomLog -Message "Found $($clusters.Count) clusters" -Severity 'DEBUG'
    return $clusters
}

function Get-NutanixHosts {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [pscustomobject]$Context,

        [Parameter(Mandatory = $true)]
        [string]$ClusterExtId,

        [Parameter(Mandatory = $true)]
        [string]$ClusterName
    )

    $path = "clustermgmt/v4.0/config/clusters/$ClusterExtId/hosts"
    # Request the complete host object so optional host-native values can be used when the target
    # PC/AOS version exposes them. No VM endpoint is needed for host-only collection.
    $hosts = @(Get-NutanixPaginatedResults -Context $Context -Path $path)

    foreach ($hostItem in $hosts) {
        # Annotate with cluster identity resolved from the outer loop rather than re-parsing the host's own
        # cluster reference - we already know it since we fetched hosts scoped to this cluster.
        $hostItem | Add-Member -NotePropertyName 'ClusterExtId' -NotePropertyValue $ClusterExtId -Force
        $hostItem | Add-Member -NotePropertyName 'ClusterName' -NotePropertyValue $ClusterName -Force
    }

    return $hosts
}

# ----------------------------
# Phase 2: Stats (Performance APIs)
# ----------------------------
function Get-NutanixStatSamples {
    <#
    .SYNOPSIS
        Converts a Nutanix metric-series object into one combined sample per timestamp.
    .NOTES
        Nutanix v4 returns each selected metric as its own TimeValuePair[] property. This function joins
        those series by timestamp so the payload builder receives the same per-timestamp shape as the
        vSphere QueryPerf path.
    #>

    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [AllowNull()]
        [object]$StatsObject,

        [Parameter(Mandatory = $true)]
        [string[]]$FieldNames
    )

    if ($null -eq $StatsObject) {
        return @()
    }

    $samplesByTimestamp = @{}
    $invalidTimestamps = [System.Collections.Generic.List[string]]::new()
    foreach ($fieldName in $FieldNames) {
        $seriesProperty = $StatsObject.PSObject.Properties[$fieldName]
        foreach ($timeValuePair in @($seriesProperty.Value)) {
            $invalidEntry = Add-NutanixStatSample -SamplesByTimestamp $samplesByTimestamp -FieldName $fieldName -TimeValuePair $timeValuePair
            if ($null -ne $invalidEntry) { $invalidTimestamps.Add($invalidEntry) }
        }
    }
    if ($invalidTimestamps.Count -gt 0) {
        # One line per response: a malformed series repeats the same bad value for every sample.
        Write-CustomLog -Message "Ignored $($invalidTimestamps.Count) Nutanix metric sample(s) with an invalid timestamp. First: $($invalidTimestamps[0])" -Severity 'WARNING'
    }

    return @($samplesByTimestamp.Keys | Sort-Object | ForEach-Object {
        [pscustomobject]$samplesByTimestamp[$_]
    })
}

function Add-NutanixStatSample {
    param(
        [Parameter(Mandatory = $true)]
        [hashtable]$SamplesByTimestamp,

        [Parameter(Mandatory = $true)]
        [string]$FieldName,

        [Parameter(Mandatory = $false)]
        [AllowNull()]
        [object]$TimeValuePair
    )

    # Returns nothing for a sample it adds or skips, and a description of the sample when its timestamp
    # is invalid, so the caller can report all of them once.
    if ($null -eq $TimeValuePair -or $null -eq $TimeValuePair.timestamp) {
        return
    }

    try {
        $timestampKey = ConvertTo-NutanixTimestampKey -Value $TimeValuePair.timestamp
    }
    catch {
        return "'$($TimeValuePair.timestamp)' for '$FieldName'"
    }

    if (-not $SamplesByTimestamp.ContainsKey($timestampKey)) {
        $SamplesByTimestamp[$timestampKey] = [ordered]@{ timestamp = $timestampKey }
    }
    $SamplesByTimestamp[$timestampKey][$FieldName] = $TimeValuePair.value
}

function New-NutanixHostStatsWorkItem {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [object]$Host,

        [Parameter(Mandatory = $true)]
        [datetime]$StartUtc,

        [Parameter(Mandatory = $true)]
        [datetime]$EndUtc
    )

    $path = "clustermgmt/v4.0/stats/clusters/$($Host.ClusterExtId)/hosts/$($Host.extId)"
    $query = @{
        '$startTime'         = $StartUtc.ToString('o')
        '$endTime'           = $EndUtc.ToString('o')
        '$samplingInterval'  = $script:NUTANIX_STATS_SAMPLING_INTERVAL_SECONDS
        '$select'            = $script:NUTANIX_HOST_STATS_SELECT
    }

    return [pscustomobject]@{
        Host     = $Host
        StartUtc = $StartUtc
        EndUtc   = $EndUtc
        Path     = $path
        Query    = $query
    }
}

function ConvertFrom-NutanixHostStatsResponse {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [object]$Response
    )

    $data = @($Response.data)
    if ($data.Count -ne 1) {
        throw "Expected one HostStats object but received $($data.Count)."
    }

    # The series are top-level properties of the HostStats object; tolerate a nested 'stats' wrapper too.
    $statsObject = $data[0]
    $statsProperty = $statsObject.PSObject.Properties['stats']
    if ($null -ne $statsProperty -and $null -ne $statsProperty.Value -and $null -eq $statsObject.PSObject.Properties['hypervisorCpuUsagePpm']) {
        $statsObject = $statsProperty.Value
    }

    $fieldNames = @($script:NUTANIX_HOST_STATS_SELECT -split ',' | ForEach-Object { ($_ -split '/')[-1] })
    return @(Get-NutanixStatSamples -StatsObject $statsObject -FieldNames $fieldNames)
}

function Format-NutanixErrorResponse {
    <#
    .SYNOPSIS
        One-line, length-capped form of the error body Prism Central sent with a failed request.
    .NOTES
        Prism Central explains a 4xx in the JSON body (for example a VMM-30102 error code).
    #>

    param(
        [AllowNull()]
        [AllowEmptyString()]
        [string]$ErrorDetails
    )

    if ([string]::IsNullOrWhiteSpace($ErrorDetails)) {
        return ''
    }
    $details = ($ErrorDetails -replace '\s+', ' ').Trim()
    if ($details.Length -gt 500) { $details = $details.Substring(0, 500) + '...' }
    return $details
}

function ConvertFrom-NutanixHostStatsResult {
    <#
    .SYNOPSIS
        Turns one raw host-stats request result into its samples, or into the cause of its failure.
    #>

    param(
        [Parameter(Mandatory = $true)]
        [object]$Result
    )

    # FailureCause groups hosts, so it holds only what is the same for every host failing the same way.
    # The response body is kept apart: it carries a timestamp and the per-host request path.
    if (-not $Result.Succeeded) {
        $statusLabel = if ($null -eq $Result.StatusCode) { 'no response' } else { $Result.StatusCode }
        $errorMessage = if ($null -ne $Result.Exception) { Get-ExceptionMessageChain -Exception $Result.Exception } else { '' }
        return [pscustomobject]@{
            Samples         = @()
            FailureCause    = "HTTP=$statusLabel Attempts=$($Result.Attempts) Error=$errorMessage"
            FailureResponse = Format-NutanixErrorResponse -ErrorDetails $Result.ErrorDetails
        }
    }

    try {
        $samples = @(ConvertFrom-NutanixHostStatsResponse -Response ($Result.Content | ConvertFrom-Json))
        return [pscustomobject]@{ Samples = $samples; FailureCause = $null; FailureResponse = '' }
    }
    catch {
        return [pscustomobject]@{ Samples = @(); FailureCause = "Unparseable response. Error=$($_.Exception.Message)"; FailureResponse = '' }
    }
}

function Write-NutanixHostStatsFailureSummary {
    <#
    .SYNOPSIS
        Logs one ERROR per distinct host-stats failure cause and one WARNING for hosts that needed retries.
    #>

    param(
        [Parameter(Mandatory = $true)]
        [System.Collections.Specialized.OrderedDictionary]$FailuresByCause,

        [Parameter(Mandatory = $true)]
        [int]$RetriedHostCount,

        [Parameter(Mandatory = $true)]
        [int]$HostCount
    )

    foreach ($failureCause in $FailuresByCause.Keys) {
        $group = $FailuresByCause[$failureCause]
        $hostIds = @($group.HostIds)
        $sampleIds = ($hostIds | Select-Object -First 3) -join ','
        $moreSuffix = if ($hostIds.Count -gt 3) { " (+$($hostIds.Count - 3) more)" } else { '' }
        $responseSuffix = if ([string]::IsNullOrEmpty($group.FirstResponse)) { '' } else { " First response=$($group.FirstResponse)" }
        Write-CustomLog -Message "Host stats collection failed for $($hostIds.Count) of $HostCount host(s). $failureCause Hosts=$sampleIds$moreSuffix$responseSuffix" -Severity 'ERROR'
    }
    if ($RetriedHostCount -gt 0) {
        Write-CustomLog -Message "Host stats collection needed retries for $RetriedHostCount of $HostCount host(s) before succeeding." -Severity 'WARNING'
    }
}

function Get-NutanixHostStatsConcurrent {
    <#
    .SYNOPSIS
        Collects one host-stat request per work item with bounded concurrency and one shared
        request-start limiter.
    #>

    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [pscustomobject]$Context,

        [Parameter(Mandatory = $true)]
        [AllowEmptyCollection()]
        [array]$WorkItems
    )

    if ($WorkItems.Count -eq 0) {
        return [pscustomobject]@{ SamplesByHostExtId = @{}; FailedWorkItems = @() }
    }

    $baseUri = $Context.BaseUri
    $headers = $Context.Headers
    $skipCertificateCheck = [bool]$Context.SkipCertificateCheck
    $requestsPerSecond = [int]$script:NUTANIX_API_MAX_REQUESTS_PER_SECOND
    $maxRetries = [int]$script:NUTANIX_API_MAX_RETRIES
    $maxConcurrency = [int]$script:NUTANIX_HOST_STATS_MAX_CONCURRENCY
    $rateGate = $Context.RateGate
    $requestStarts = $Context.RequestStarts

    $preparedWorkItems = foreach ($workItem in $WorkItems) {
        $uri = "$baseUri/$($workItem.Path)" + (Build-NutanixQueryString -Query $workItem.Query)
        [pscustomobject]@{
            Host     = $workItem.Host
            StartUtc = $workItem.StartUtc
            EndUtc   = $workItem.EndUtc
            Uri      = $uri
        }
    }

    $rawResults = @($preparedWorkItems | ForEach-Object -ThrottleLimit $maxConcurrency -Parallel {
        function Wait-NutanixHostStatsRequestSlot {
            param($RateGate, $RequestStarts, [int]$RequestsPerSecond)

            do {
                [void]$RateGate.Wait()
                $waitMilliseconds = 1
                $slotAcquired = $false
                try {
                    $nowMilliseconds = [DateTimeOffset]::UtcNow.ToUnixTimeMilliseconds()
                    [long]$oldestStart = 0
                    while ($RequestStarts.TryPeek([ref]$oldestStart) -and ($nowMilliseconds - $oldestStart) -ge 1000) {
                        [long]$discardedStart = 0
                        $null = $RequestStarts.TryDequeue([ref]$discardedStart)
                    }

                    if ($RequestStarts.Count -lt $RequestsPerSecond) {
                        $RequestStarts.Enqueue($nowMilliseconds)
                        $slotAcquired = $true
                    }
                    elseif ($RequestStarts.TryPeek([ref]$oldestStart)) {
                        $waitMilliseconds = [Math]::Max(1, 1000 - ($nowMilliseconds - $oldestStart))
                    }
                }
                finally {
                    $null = $RateGate.Release()
                }

                if (-not $slotAcquired) {
                    Start-Sleep -Milliseconds $waitMilliseconds
                }
            } while (-not $slotAcquired)
        }

        function Get-NutanixHostStatsRetryDelay {
            param([int]$Attempt, [Nullable[int]]$StatusCode, $Response)

            $backoffSeconds = [Math]::Min(30, [Math]::Pow(2, $Attempt))
            if ($StatusCode -ne 429 -or $null -eq $Response.Headers) {
                return $backoffSeconds
            }

            $retryAfterSeconds = 0
            $retryAfter = [string]$Response.Headers['Retry-After']
            if ([int]::TryParse($retryAfter, [ref]$retryAfterSeconds) -and $retryAfterSeconds -gt 0) {
                return [Math]::Min(60, $retryAfterSeconds)
            }
            return $backoffSeconds
        }

        function New-NutanixHostStatsRequestResult {
            param($WorkItem, [bool]$Succeeded, [AllowNull()][string]$Content, [Nullable[int]]$StatusCode, [int]$Attempts, [AllowNull()][System.Exception]$Exception, [AllowNull()][string]$ErrorDetails)

            return [pscustomobject]@{
                Succeeded  = $Succeeded
                WorkItem   = $WorkItem
                Content    = $Content
                StatusCode = $StatusCode
                Attempts   = $Attempts
                # Returned raw: the error text is built after the parallel block, where module functions exist.
                Exception    = $Exception
                ErrorDetails = $ErrorDetails
            }
        }

        function Invoke-NutanixHostStatsRequest {
            param($WorkItem, $RateGate, $RequestStarts, [int]$RequestsPerSecond, [int]$MaxRetries, $Headers, [bool]$SkipCertificateCheck)

            $attempt = 0
            while ($true) {
                $attempt++
                Wait-NutanixHostStatsRequestSlot -RateGate $RateGate -RequestStarts $RequestStarts -RequestsPerSecond $RequestsPerSecond
                try {
                    $requestParameters = @{ Uri = $WorkItem.Uri; Method = 'GET'; Headers = $Headers; UseBasicParsing = $true; ErrorAction = 'Stop' }
                    if ($SkipCertificateCheck) {
                        $requestParameters['SkipCertificateCheck'] = $true
                    }
                    $response = Invoke-WebRequest @requestParameters
                    return New-NutanixHostStatsRequestResult -WorkItem $WorkItem -Succeeded $true -Content ([string]$response.Content) -StatusCode ([int]$response.StatusCode) -Attempts $attempt -Exception $null -ErrorDetails $null
                }
                catch {
                    $statusCode = if ($null -ne $_.Exception.Response -and $null -ne $_.Exception.Response.StatusCode) { [int]$_.Exception.Response.StatusCode } else { $null }
                    if ($null -ne $statusCode -and $statusCode -notin @(408, 429, 502, 503, 504)) {
                        return New-NutanixHostStatsRequestResult -WorkItem $WorkItem -Succeeded $false -Content $null -StatusCode $statusCode -Attempts $attempt -Exception $_.Exception -ErrorDetails $(if ($null -ne $_.ErrorDetails) { $_.ErrorDetails.Message })
                    }
                    if ($attempt -gt $MaxRetries) {
                        return New-NutanixHostStatsRequestResult -WorkItem $WorkItem -Succeeded $false -Content $null -StatusCode $statusCode -Attempts $attempt -Exception $_.Exception -ErrorDetails $(if ($null -ne $_.ErrorDetails) { $_.ErrorDetails.Message })
                    }
                    Start-Sleep -Seconds (Get-NutanixHostStatsRetryDelay -Attempt $attempt -StatusCode $statusCode -Response $_.Exception.Response)
                }
            }
        }

        Invoke-NutanixHostStatsRequest -WorkItem $_ -RateGate $using:rateGate -RequestStarts $using:requestStarts -RequestsPerSecond $using:requestsPerSecond -MaxRetries $using:maxRetries -Headers $using:headers -SkipCertificateCheck $using:skipCertificateCheck
    })

    $samplesByHostExtId = @{}
    $failedWorkItems = [System.Collections.Generic.List[object]]::new()
    # One line per distinct failure instead of one per host: an auth or TLS problem fails every host
    # the same way, and a thousand identical lines hide everything else in the run.
    $failuresByCause = [ordered]@{}
    $retriedHostCount = 0
    # Parallel results arrive in completion order; restore the work-item order so the same failures
    # always produce the same log lines.
    $workItemOrder = @{}
    for ($index = 0; $index -lt $WorkItems.Count; $index++) {
        $workItemOrder[[string]$WorkItems[$index].Host.extId] = $index
    }
    $rawResults = @($rawResults | Sort-Object -Property { $workItemOrder[[string]$_.WorkItem.Host.extId] })
    foreach ($result in $rawResults) {
        $hostExtId = [string]$result.WorkItem.Host.extId
        $outcome = ConvertFrom-NutanixHostStatsResult -Result $result
        if ($null -eq $outcome.FailureCause) {
            $samplesByHostExtId[$hostExtId] = $outcome.Samples
            if ($result.Attempts -gt 1) { $retriedHostCount++ }
            continue
        }

        Write-CustomLog -Message "Host stats collection failed for '$hostExtId'. $($outcome.FailureCause) Response=$($outcome.FailureResponse)" -Severity 'DEBUG'
        $failedWorkItems.Add($result.WorkItem)
        if (-not $failuresByCause.Contains($outcome.FailureCause)) {
            $failuresByCause[$outcome.FailureCause] = [pscustomobject]@{
                HostIds       = [System.Collections.Generic.List[string]]::new()
                FirstResponse = $outcome.FailureResponse
            }
        }
        $failuresByCause[$outcome.FailureCause].HostIds.Add($hostExtId)
    }

    Write-NutanixHostStatsFailureSummary -FailuresByCause $failuresByCause -RetriedHostCount $retriedHostCount -HostCount $WorkItems.Count

    return [pscustomobject]@{
        SamplesByHostExtId = $samplesByHostExtId
        FailedWorkItems    = @($failedWorkItems)
    }
}

# ----------------------------
# Helpers
# ----------------------------
function Get-NutanixStatValueOrNull {
    param(
        [Parameter(Mandatory = $true)]
        [AllowNull()]
        [object]$Sample,

        [Parameter(Mandatory = $true)]
        [string]$FieldName
    )

    if ($null -eq $Sample) { return $null }
    $prop = $Sample.PSObject.Properties[$FieldName]
    if ($null -eq $prop -or $null -eq $prop.Value) { return $null }
    return [string]$prop.Value
}

function Get-NutanixSampleTimestampKey {
    <#
    .SYNOPSIS
        Normalizes a stat sample's 'timestamp' field into the key used to join host and VM samples.
        Joining is an exact value match - no nearest/fuzzy matching (see lab-validation gaps at top of file).
    #>

    param(
        [Parameter(Mandatory = $true)]
        [AllowNull()]
        [object]$Sample
    )

    if ($null -eq $Sample) { return $null }
    $prop = $Sample.PSObject.Properties['timestamp']
    if ($null -eq $prop -or $null -eq $prop.Value) { return $null }
    try {
        return ConvertTo-NutanixTimestampKey -Value $prop.Value
    }
    catch {
        return $null
    }
}

function ConvertTo-NutanixTimestampKey {
    <#
    .SYNOPSIS
        Normalizes an API timestamp into the UTC round-trip string used as a join key.
    .NOTES
        ConvertFrom-Json already turns ISO-8601 strings such as '2026-09-09T10:00:00Z' into
        [DateTime] values. Stringifying those drops the zone, and a zoneless string is then parsed as
        local time, which shifted every sample by the machine's UTC offset. DateTime values are
        therefore converted directly; a Kind of Unspecified is taken as UTC, which is what Prism
        Central emits.
    #>

    param(
        [Parameter(Mandatory = $true)]
        [AllowNull()]
        [object]$Value
    )

    if ($null -eq $Value) { throw 'Timestamp is null.' }

    if ($Value -is [DateTimeOffset]) {
        return ([DateTimeOffset]$Value).UtcDateTime.ToString('o')
    }
    if ($Value -is [DateTime]) {
        $dateTime = [DateTime]$Value
        if ($dateTime.Kind -eq [DateTimeKind]::Unspecified) {
            $dateTime = [DateTime]::SpecifyKind($dateTime, [DateTimeKind]::Utc)
        }
        return $dateTime.ToUniversalTime().ToString('o')
    }

    return (ConvertFrom-RfcUtcTimestamp -Value ([string]$Value)).ToString('o')
}


function Get-HypervisorMetricsTimeRange {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory = $true)]
        [datetime]$Now,

        [Parameter(Mandatory = $true)]
        [datetime]$LastReceivedUtc,

        [Parameter(Mandatory = $true)]
        [int]$MaxMinutesRead
    )

    $start = $LastReceivedUtc

    # Round start to minute (floor/truncate)
    $start = [datetime]::new($start.Year, $start.Month, $start.Day, $start.Hour, $start.Minute, 0, [System.DateTimeKind]::Utc)

    # End = min(now - 1 minute, start + MaxMinutesRead)
    $nowMinus1 = $Now.AddMinutes(-1)
    $startPlusMax = $start.AddMinutes($MaxMinutesRead)
    $end = if ($nowMinus1 -lt $startPlusMax) { $nowMinus1 } else { $startPlusMax }

    if ($end -eq $startPlusMax -and $startPlusMax -lt $nowMinus1) {
        Write-CustomLog -Message "Metrics window capped at $MaxMinutesRead minutes: $start to $end." -Severity 'INFO'
    }

    # Round end to minute (floor/truncate)
    $end = [datetime]::new($end.Year, $end.Month, $end.Day, $end.Hour, $end.Minute, 0, [System.DateTimeKind]::Utc)

    return [pscustomobject]@{
        Start = $start
        End   = $end
    }
}

# SIG # Begin signature block
# MIIohQYJKoZIhvcNAQcCoIIodjCCKHICAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCdNeSIRiUgl/gv
# TlTH1SzcGIKL/fpi0GQS1/DQ9JSjGaCCIZ0wggWNMIIEdaADAgECAhAOmxiO+dAt
# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV
# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa
# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy
# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD
# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E
# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy
# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF
# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1
# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB
# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR
# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6
# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB
# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S
# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x
# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB
# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP
# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC
# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0
# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB
# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc
# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov
# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy
# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW
# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF
# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z
# twGpn1eqXijiuZQwggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0GCSqG
# SIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMx
# GTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRy
# dXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTlaMGkx
# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4
# RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEzODQg
# MjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C0Cit
# eLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce2vnS
# 1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0daE6ZM
# swEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6TSXBC
# Mo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoAFdE3
# /hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7OhD26j
# q22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM1bL5
# OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z8ujo
# 7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05huzU
# tw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNYmtwm
# KwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP/2NP
# TLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0TAQH/
# BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYDVR0j
# BBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1Ud
# JQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0
# cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0
# cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8E
# PDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVz
# dGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATANBgkq
# hkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95RysQDK
# r2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HLIvda
# qpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5BtfQ/g+
# lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnhOE7a
# brs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIhdXNS
# y0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV9zeK
# iwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/jwVYb
# KyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYHKi8Q
# xAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmCXBVm
# zGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l/aCn
# HwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZWeE4w
# gga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmGMA0GCSqGSIb3DQEBCwUAMGIx
# CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3
# dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBH
# NDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5NTlaMGkxCzAJBgNVBAYTAlVT
# MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1
# c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0eDHTCphBcr48RsAcrHXbo0Zo
# dLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+RuwOnPhof6pvF4uGjwjqNjfEvUi
# 6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4Bt0mAxAHeHYNnQxqXmRinvuNg
# xVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1UkxBvMgEdgkFiDNYiOTx4OtiF
# cMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTcaarps0wjUjsZvkgFkriK9tUKJ
# m/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zbCclF83bRVFLeGkuAhHiGPMvS
# GmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnGpTXiUOeSLsJygoLPp66bkDX1
# ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/AMOMCZIVNSaz7BX8VtYGqLt9
# MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v5ydPpOjL6s36czwzsucuoKs7
# Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoiwOrUG2ZdSoQbU2rMkpLiQ6bG
# RinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm2qA+sdFUeEY0qVjPKOWug/G6
# X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAd
# BgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04wHwYDVR0jBBgwFoAU7NfjgtJx
# XWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF
# BwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln
# aWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j
# b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJo
# dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNy
# bDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQEL
# BQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Qh8WIGjB/T8ObXAZz8OjuhUxj
# aaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3YTj+IQhQE7jU/kXjjytJgnn0
# hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQwr8Myb9rEVKChHyfpzee5kH0
# F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/wdG2th9y1IsA0QF8dTXqvcnT
# mpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81hjajV/gxdEkMx1NKU4uHQcKf
# ZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00TYr2Lr3ty9qIijanrUR3anzE
# wlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNjqFzeGxcytL5TTLL4ZaoBdqbh
# OhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0cuJG7uEBYTptMSbhdhGQDpOX
# gpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9sC+NJpud/v4+7RWsWCiKi9EO
# LLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0LckTetiSuEtQvLsNz3Qbp7wG
# WqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2tszWkPZPubdcMIIG7TCCBNWg
# AwIBAgIQCE/cM09+RU7bww+P+ZIYNTANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQG
# EwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0
# IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0Ex
# MB4XDTI2MDgwNTAwMDAwMFoXDTM3MTEwNDIzNTk1OVowYzELMAkGA1UEBhMCVVMx
# FzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdpQ2VydCBTSEEy
# NTYgUlNBNDA5NiBUaW1lc3RhbXAgUmVzcG9uZGVyIDIwMjYgMTCCAiIwDQYJKoZI
# hvcNAQEBBQADggIPADCCAgoCggIBALZ7pvLJ/s1K+NSbTGWz/TjGMPh8CQ6RucZC
# Lv5anHzWJjF/NWJrFIhy24fcpKXlgRiky4WAawDfU3YP0BMxt9l3Dm5oCG5Z69Aq
# EN1kgHg2epx+l+lZBcmJCcN0ASURML5uFIS80sZsDwO3BSkUxDjLJhBI+qiZP3ai
# xAC/qEGLjsBNlLol9VZ7pfGEXiMlneJIC5/YKuizVzNFKZZEeoy/0B8Zm+nzKBgS
# WG52lCO1w+nCg6XpCtklTJXeIg283hw7TmmsZXR+SMbjbrEOvZ3fP2VxIgeR28Y9
# 0ZStd3F9VuA5RVynb/whITPAo9b75Zr4Ta6Mj3URm26QZYMn/FnbuTegcoRcFEZ9
# FOqM5T6MTdtr/n74lIT/ug0eeOzmZ6QTFg33otX+bFRsIolvykE1jive4PuESaT8
# zzVeFWDAMDtozNgLctkGD1ZjkEyZtJrLl5ya0m5doH/ScpaZCZVl6pNUOCybMc/k
# xC6EAmSJY24L0yYKD1Nkddsnb/ItVKi/2nXpQNMu1PT5prW83vV8d67WowuUs0Hd
# Y4H8AMLGvdL/WHEj3ZnqMqAQQP9u3Ai9t+5eQ02GDwy0ODjdzi0xlp70W+ow63/0
# ++YDEX1M0iwgUHwbrJvfpklkZQvw3+kv3vUPItdwroczk9icflf55W1zOEKAcJVA
# IXpcMCU9AgMBAAGjggGVMIIBkTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQUyWOK
# MC7USvtulPPm40B+9ezN4jAfBgNVHSMEGDAWgBTvb1NK6eQGfHrK4pBW9i/USezL
# TjAOBgNVHQ8BAf8EBAMCB4AwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwgZUGCCsG
# AQUFBwEBBIGIMIGFMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
# b20wXQYIKwYBBQUHMAKGUWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp
# Q2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNy
# dDBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln
# aUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5j
# cmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEB
# CwUAA4ICAQCNxTphHp1SCt+ZrAmAfn0oQLFr0mLywSLaDXQIENoyKqxrFbJblzCV
# P/pkXmwXOdrOpWygLzlT12os5ipDCy35RBCg2UMeApEtrfGhz45F4Wt4WGdNdIbR
# Wt3YTYJmpR+b7lr4d7Uwn+H600u4D7RnOGf8Wj4UNgAdZkfHhHv1mx9EVh71SJel
# cEN/oORSjXzdjfw1iZH9d8Nh/thn6hH23d+VsPAr6GAYyzSA02nXD1nYLI7Ijmiv
# +xLCiYC41DSFYL3GhTiy0PxpawPtGRyaBVGzq+UiTfM8pD7KVyF5aQyWP4KhVGUU
# Tnmm/RlYJoW3TiXA/+t0YcT2oRVBm3JETjajHug2AL+v5jhtKVnd3D0rbHXEu27o
# +Q8p4sEWPMqKDB+qbceb6T/6WcwTwXmQ9lOCLLYcsQeSWmvKqzpAec9etE14jOQA
# zLKWdE3w/TCaKtLRaRT7LCkRYVnhA2D73FLje1O5b3HR5eHs0NzU/+xX7NbEdcof
# y0W3Wdwd1XOqtlpg/JgwtKfZM5dqO94lbUveOiJBI+xZEbGRsMNbXmMREUTgu+Oc
# a7Y73MPWcslIx2VhkSKSXjDbD6rgg39H5Mh7QfieAIjWagkJNt68Yfim6cjEzVSi
# LSeZfdkr5dtFPTW6jATlWJdYeeDRGCyatf8R1hSjzSvdN8yWQPT9gzCCB6swggWT
# oAMCAQICEA20PGu9jXp4I/Dy4yL8Si8wDQYJKoZIhvcNAQELBQAwaTELMAkGA1UE
# BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2Vy
# dCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENB
# MTAeFw0yNTExMTMwMDAwMDBaFw0yODExMTQyMzU5NTlaMIGzMRMwEQYLKwYBBAGC
# NzwCAQMTAkNIMRUwEwYLKwYBBAGCNzwCAQITBFZhdWQxHTAbBgNVBA8MFFByaXZh
# dGUgT3JnYW5pemF0aW9uMRgwFgYDVQQFEw9DSEUtMTEyLjAwMC41NzkxCzAJBgNV
# BAYTAkNIMQ8wDQYDVQQHEwZQcmlsbHkxFjAUBgNVBAoTDU5FWFRoaW5rIFMuQS4x
# FjAUBgNVBAMTDU5FWFRoaW5rIFMuQS4wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
# ggIKAoICAQDIbNJpFq6aDbvQP7zFPymmt3WRPkvbmnRL4g0imzFNbaj+U/RIGPL0
# 3l9TtYxzraPbwDdidmT5P50mK1JqjF5FzcZEC4kZfMMojY4J/gOylo8jOdLjBscL
# SYwsY+85ZRs2bvxibPXIu4AcZttxBx5XdbVyt2Bd1vtuJGj+wfU1vJu7NB3GHjPy
# 4QE1BFrgidqQTL+1HASQaWwNMetW8B1U1POZjr6uWp6Ga3DF/MAKxpbvU3iVFI8b
# YFpKiVIQ9Namj3DQ7Xj26+fSEP959+bukG8LyObHN5DDkRdpnCSVVMT6qxZ2QGri
# DFkyjOVaGkjJTI6mbKY1JPUJhYVo+7Jqhu+2EFGRy6wSj9wZBubnbwfuvgr/XlH9
# /xQQuX9i/EJvxJRQQyz9IzLtB/DBSoEQvtyCh8Po87k9x9CGYn7k1HxUg1F6oBKa
# kemv3G474RWKZwSEIbwUlygFydEpTDkRTqBDZKOQf3VaUvfUgGmBmEfq1m+cljHj
# fLDBtkDIGaZ7SvyO72q9Uj0HrIWvJDHHIYK84gqhe58vKgaQ0uH9V5BCUT5cLvau
# +1w93iq5AMCTtG96SEyjI/T9Jzh+2sM+PoUwlLNLqYFUvMI+l19X+5UtQnjU5k1c
# ooxqCebatsS642gd3X1VoeNyfJ5FB67b6KGNfrDOXBt5FXgKZAUOHwIDAQABo4IC
# AjCCAf4wHwYDVR0jBBgwFoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHQYDVR0OBBYE
# FICGOh06CZAfMG3M4l2zy9590p0OMD0GA1UdIAQ2MDQwMgYFZ4EMAQMwKTAnBggr
# BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQE
# AwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBPhk1o
# dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2ln
# bmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDBToFGgT4ZNaHR0cDovL2NybDQu
# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2
# U0hBMzg0MjAyMUNBMS5jcmwwgZQGCCsGAQUFBwEBBIGHMIGEMCQGCCsGAQUFBzAB
# hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wXAYIKwYBBQUHMAKGUGh0dHA6Ly9j
# YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5n
# UlNBNDA5NlNIQTM4NDIwMjFDQTEuY3J0MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL
# BQADggIBALSLCU45H6xjr2Ce9mmr6WtqdnykOcc2s1iqd/UN88f4GlmzVmtA9Dts
# 9j8X77hxHYIAJwWM3NqKi8m55CB5HQBuOC3hOI8bWFdQLBsrAbBAApFh3cjRruGn
# r0mu7wlZo9HLgpM1PEy+hf90+cANYRBITrRkfVT4o2rTc8mmJyYzZM8WVwxGx+wm
# PAuvyjYKsjZNTeJ+miYqwJ/zHjc8LQP+/hYPNmP9ubYpMMkgC49vP9Uir0E4YI2C
# VTbUuhxao4Pmy2MnqhK20lDu50ZCNDNFurYhzXWBhK1cel6Ku4yuT6TlsjNye0AY
# v92FDyAaYH9VZuub7qZBNv/RwmcLUDqqh5rnEdeGMH7KFkUyN63RMEr7hLXV/Tav
# 7K0kWlXKPLIFenfqJnPYceni6PdJS/7WlxnBE0UwgoSoe4HawnEF0YvYBU3uyK+v
# TJWVau5Jptjp94uEQmW6PidWwUWNzVl4LQ7eEZe4ykZ0JLErbGnOeoUoZCeVzpx4
# uUEFiZv1KLeLEkB/8yFIrQp03sVMItqhNJ5mbDOoWW4y3Z8/jduhxVPwJMHhgglK
# 3z3sZr5xrpY3n1Qcqn1xFsI6U7rOrkzyQBw+d/yF82MW3LldZ7tPyU8LTEO89oOC
# EsGFwOfEb/wB7UJ1NulZ1R2nf5erYEnVsOsrGV0X1fYh2OoRQyxWMYIGPjCCBjoC
# AQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/
# BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYg
# U0hBMzg0IDIwMjEgQ0ExAhANtDxrvY16eCPw8uMi/EovMA0GCWCGSAFlAwQCAQUA
# oGowGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwG
# CisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIGhQV2IF5HAX3acxPL7e+xkD6EW1
# HS9wZ7p0s//iTpUkMA0GCSqGSIb3DQEBAQUABIICAIBSt/qczFK6OBlyiNBUFmfQ
# oGi7Nc7PVKlUEhwaSufLrRZWUzWUM6m5CCuEXvJ8ya3IGTtMB9NmP6Ry8IlvGZnz
# rYo/df+Eez9jf5I0gAOgHIjJG6jtEFIAJaL/Yk8YkdHvl1zS/nV/2eF89GHeXpLX
# zWY0lpNAQcL9ZJfqAVNKHPRq5fA7y9SlOUTTYSUly+9IR64RoBAj9wgrnyXy9mVi
# omAJgmYtuQrxpsJ9p8yiIiMM6ajkAR09jX8KlfXN4pG6ww3nFYoT9Z2dHvf0su4W
# OUD73hpMZOiZ9VgOM0mw+3pKAMPP7qP0W0yKiyts/jsAlS1x2qDRvFXFRErcm0xj
# UJAUeEiaHnLtLMhwQMWMZfPErWYJiY3YNtDLwrdmUrk3QXQJIyvgK9wNJacx4L42
# p3ejV7xkWz+YHMO2c4kF6nDaYVjSfl0gW4FVoAGMXNx9OlhcznmWntFOiqhEpsTC
# ZmsKhNnnwS2LStb3ji+XSOeC522OgeBrvQjXyLhpA1jg+m6gKmJPgLK/tJTXhZq+
# sX0hXcZoQIb4nYdWPJ3vlAGd5r4ze/ygBJEGB7SBqy/Hrob9oXoqH/iEBGxcPWzV
# 21zTyd7N/f1b2CR2odV07yeWXkgn6SYJYG9tAInvHhlUTyIWpLYer3QqKEi9GJr/
# q69kqCNCHFYcKFMaC+3woYIDJjCCAyIGCSqGSIb3DQEJBjGCAxMwggMPAgEBMH0w
# aTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQD
# EzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2IFNIQTI1
# NiAyMDI1IENBMQIQCE/cM09+RU7bww+P+ZIYNTANBglghkgBZQMEAgEFAKBpMBgG
# CSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI2MTAyMTA4
# NDUwNVowLwYJKoZIhvcNAQkEMSIEIKSxKYUBJtwW/dfrx5/rKo2ct4wq0+Dy02Yb
# 3ngfMdCbMA0GCSqGSIb3DQEBAQUABIICALLg76x9XsxGH8SIuWnKMAZQlQrBL1C3
# elyeChh8HDO6FaLfVsD+yBQBcr1BzRprkZjREA/jRFHL8BwZyhXdMzGO0UXL7h/x
# QHSLWSw3FtBwBKt/WONAKEv3+r0b4UGu/yF4EF82afKgw3zpecYW7toUELUPtfGq
# 3cm2CvD2Dnx4qEoEbO4Ypg5Fc38PNIYsXguGAQsjxWsd95NOAplPXOr3vOh/ITcO
# 0RdQk2AvpMlI7gFW2HvWT3T0lAsI8yslgZQmFmxKMrjNr4itDUSoqHxYjbPdtzKY
# U5ThupUAwfZjngO1xL/us+tBapfoMwDrbRs+A7cP++8BpyVcyL9NXTtXmcrhTCjC
# qN/TfJPFCihEdCNfgTXFBGyVk5apuiKpIeeCK2dKKK4cZjjwgnG8cA9kqfRPmHRX
# w/h3GNP2TkPG2667pVuhRuqeleDpi5V/dVzWFHZVy7ISHtbOmpuxr9eZYphux52o
# ZcuoGOHFqqcqioaUaXwVT+TEadkugzOUn9iJHKrqTIzCB5Sz36jpUCqAnZknvV4N
# 0CeTYBM1ytbRR3G0vo0FAIhT2gHOx/usITx+S/gkkgiX8IqpPS7l+xw7H391LDZm
# an2GD1tA7iBs+a3XCiTHQANBV7sUM8Z+bsWHlxkBPe9eDP11h3ZDXpuHjt3/3zJr
# Xo7Jtkcw6xX2
# SIG # End signature block