ORCAPreview

2.8.2

Checks/check-ORCA108_1.ps1

                                using module "..\ORCA.psm1"

class ORCA108_1 : ORCACheck

{

    <#

        CONSTRUCTOR with Check Header Data

    #>

    ORCA108_1()

    {

        $this.Control="108-1"

        $this.Area="DKIM"

        $this.Name="DNS Records"

        $this.PassText="DNS Records have been set up to support DKIM"

        $this.FailRecommendation="Set up the required selector DNS records in order to support DKIM"

        $this.Importance="DKIM signing can help protect the authenticity of your messages in transit and can assist with deliverability of your email messages."

        $this.ExpandResults=$True

        $this.ItemName="Domain"

        $this.DataType="DNS Record"

        $this.ChiValue=[ORCACHI]::Low

        $this.Links= @{

            "Use DKIM to validate outbound email sent from your custom domain in Office 365"="https://aka.ms/orca-dkim-docs-1"

        }

    }

    <#

        RESULTS

    #>

    GetResults($Config)

    {

        $Check = "DKIM"

        # Check pre-requisites for DNS resolution

        If(!(Get-Command "Resolve-DnsName" -ErrorAction:SilentlyContinue))

        {

            # No Resolve-DnsName command

            ForEach($AcceptedDomain in $Config["AcceptedDomains"])

            {

                $ConfigObject = [ORCACheckConfig]::new()

                $ConfigObject.Object = $($AcceptedDomain.Name)

                $ConfigObject.SetResult([ORCAConfigLevel]::All,[ORCAResult]::Informational)

                $ConfigObject.ConfigItem = "Pre-requisites not installed"

                $ConfigObject.ConfigData = "Resolve-DnsName is not found on ORCA computer. Required for DNS checks."

                $this.AddConfig($ConfigObject)

            }

            $this.CheckFailed = $true

            $this.CheckFailureReason = "Resolve-DnsName is not found on ORCA computer and is required for DNS checks."

        } 

        else 

        {

            # Check DKIM is enabled

            ForEach($AcceptedDomain in $Config["AcceptedDomains"]) 

            {

                $HasMailbox = $false

                try

                {

                    If($AcceptedDomain.Name -notlike "*.onmicrosoft.com") 

                { 

                        $mailbox = Resolve-DnsName -Name $($AcceptedDomain.Name) -Type MX -ErrorAction:Stop

                        if($null -ne $mailbox -and $mailbox.Count -gt 0)

                        {

                            $HasMailbox = $true

                        }

                    }

                }

                Catch{}

                If($HasMailbox) 

                {

                    # Get matching DKIM signing configuration

                    $DkimSigningConfig = $Config["DkimSigningConfig"] | Where-Object {$_.Name -eq $AcceptedDomain.Name}

                    If($DkimSigningConfig)

                    {  

                        if($DkimSigningConfig.Enabled -eq $true)

                        {

                            <#

                            SELECTOR1

                            #>

                                $ConfigObject = [ORCACheckConfig]::new()

                                $ConfigObject.ConfigItem=$($DkimSigningConfig.Domain)

                                # Check DKIM Selector Records

                                $Selector1 = $Null

                                if($null -ne $this.ORCAParams.AlternateDNS)

                                {

                                    Try { $Selector1 = Resolve-DnsName -Type CNAME -Name "selector1._domainkey.$($DkimSigningConfig.Domain)" -Server $this.ORCAParams.AlternateDNS -ErrorAction:stop } Catch {}

                                }

                                else 

                                {

                                    Try { $Selector1 = Resolve-DnsName -Type CNAME -Name "selector1._domainkey.$($DkimSigningConfig.Domain)" -ErrorAction:stop } Catch {}

                                }

                                If($Selector1.Type -eq "CNAME" -and $Selector1.NameHost -eq $DkimSigningConfig.Selector1CNAME)

                                {

                                    # DKIM Selector1 Correctly Configured

                                    $ConfigObject.ConfigData="Selector1 CNAME $($DkimSigningConfig.Selector1CNAME)"

                                    $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Pass")

                                } 

                                else

                                {

                                    $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Fail")   

                                }

                                # Add selector 1 result

                                $this.AddConfig($ConfigObject)

                            <#

                            SELECTOR2

                            #>

                                # Selector 2 Config Object

                                $ConfigObject = [ORCACheckConfig]::new()

                                $ConfigObject.ConfigItem=$($DkimSigningConfig.Domain)

                                # Check DKIM Selector Records

                                $Selector2 = $Null

                                if($null -ne $this.ORCAParams.AlternateDNS)

                                {

                                    Try { $Selector2 = Resolve-DnsName -Type CNAME -Name "selector2._domainkey.$($DkimSigningConfig.Domain)" -Server $this.ORCAParams.AlternateDNS -ErrorAction:stop } Catch {}

                                }

                                else 

                                {

                                    Try { $Selector2 = Resolve-DnsName -Type CNAME -Name "selector2._domainkey.$($DkimSigningConfig.Domain)" -ErrorAction:stop } Catch {}

                                }

                                If($Selector2.Type -eq "CNAME" -and $Selector2.NameHost -eq $DkimSigningConfig.Selector2CNAME)

                                {

                                    # DKIM Selector1 Correctly Configured

                                    $ConfigObject.ConfigData="Selector2 CNAME $($DkimSigningConfig.Selector2CNAME)"

                                    $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Pass")

                                }

                                else

                                {

                                    $ConfigObject.SetResult([ORCAConfigLevel]::Standard,"Fail")  

                                }    

                                # Add selector 2 result

                                $this.AddConfig($ConfigObject)

                        }

                    }

                }

            }     

        }

    }

}

# SIG # Begin signature block

# MIImZgYJKoZIhvcNAQcCoIImVzCCJlMCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCYOx7Isbpat7og

# 7KtPNTveZfY7ub7OvL1KoRIlPikt26CCC7UwggUaMIIEAqADAgECAhMzAAAFwWtu

# fQG/Bj+tAAEAAAXBMA0GCSqGSIb3DQEBCwUAMHkxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xIzAhBgNVBAMTGk1pY3Jvc29mdCBUZXN0aW5nIFBD

# QSAyMDEwMB4XDTIzMDkyMTE4MTE0MloXDTI0MDkxODE4MTE0MlowfDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdQ29kZSBTaWdu

# IFRlc3QgKERPIE5PVCBUUlVTVCkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK

# AoIBAQCjZPhOmWqhsCZshcxkJdnaUWYvbT72V/l1hgVjHnd6h5WrFUenJ0EswFmi

# f0kY9NnUq0R/WB1mo0kIjRgqxnVUdCbaHEl7Dl2yq2Qa086tf/zbRBXo5kitssgq

# zzQr/pvNTM93zH5SVcWsRCOFyLyEgR2foSzdC83bUpaSNT9YskbkiWUD5S4nyLBi

# HRMP2fshdykl6q0XP2RM0020vv93miIrnc69ZmQak1KmZlwWgWtK9uSc/3m3T1sk

# 9piA5LP2csBfgi37qtGuuyh+2D3e9Ds25JutIvlOSFVrWVrQlYhvvyztwzbrAlbG

# ZGivyw6zO4S59daxxsRUWFDWPKtFAgMBAAGjggGWMIIBkjAOBgNVHQ8BAf8EBAMC

# B4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwHQYDVR0OBBYEFGByvk1Je5Cl5oP8kQWu

# IV7lpwtVMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu

# ZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUTDTIzMDA3Mis1MDE1NjcwHwYD

# VR0jBBgwFoAUv2Wiq291o05FllcFzzmH9MAVHBwwXAYDVR0fBFUwUzBRoE+gTYZL

# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIw

# VGVzdGluZyUyMFBDQSUyMDIwMTAoMSkuY3JsMGkGCCsGAQUFBwEBBF0wWzBZBggr

# BgEFBQcwAoZNaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9N

# aWNyb3NvZnQlMjBUZXN0aW5nJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/

# BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAntepJCM1sNEpjz+qB6VNV+W3+m4tLLA/

# 3S+8iay6i7OOndw7+QZ18l0aYaVzBTUXkCFARqYCCoXNOWdQ5QODJpUgdcOjDCK6

# X+/EPOx4jh0nLMTnJrwg0LGWpBEOv+rG+kR5Aoy3NG1NAbNaGcGl10wlpuMDjOFO

# GVDTYqBM8XsgtmnekyUzmWxfzdAN532ABD+NwOy35LdrBJbsjIARh8ydZA8qeuBV

# IKVngA/JGGx55N9QsbilyKVipuL+kxZJb1qYXusnqNufi8MEU3vgwfQFjVtj3k13

# R4H5vbHaHc0arlodPjhRrBcAAl0di6Lo+SI8J96X48GZUeC8iud24TCCBpMwggR7

# oAMCAQICEzMAAAAtNXpGiMkHcdgAAAAAAC0wDQYJKoZIhvcNAQELBQAwgZAxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xOjA4BgNVBAMTMU1pY3Jv

# c29mdCBUZXN0aW5nIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcN

# MjAxMjEwMjA0MzIwWhcNMzUwNjE3MjEwNDExWjB5MQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSMwIQYDVQQDExpNaWNyb3NvZnQgVGVzdGluZyBQ

# Q0EgMjAxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL88YIGrvuz/

# 1xdj8qZC0RNinLAXzrpGGnsiLlVzmlS5xtTRypj+d0cNjp3wXsz4VO/yzyrUYvGp

# NAoE18UFhvIQ9U3TlghmhdsCfRjc4nojp5opXa55GM8MY/Aa/4GpqUM/qQu5UfGz

# SDr8RC5fEcVWOv/KDs2ICMH9x9X1Pu/qThtyiyO9RTeeH3DBp8m4IHPt82w9iyEF

# z3cS/qHcB+kNW3gJbDJVEEfQN8jH9/pz/kY05FYWqDdkU9Y1+8OAto62hpGhENbB

# SvbjetQRCrLeLp4Ql+CBrhJdiAFdzKTEKFKcYPAK5oivS+lXiuyjDzceKfZdIdPX

# 2l0OyU7bjW0CAwEAAaOCAfowggH2MA4GA1UdDwEB/wQEAwIBhjASBgkrBgEEAYI3

# FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBTqn18zttBfnq3rLabBArtAOMvntTAd

# BgNVHQ4EFgQUv2Wiq291o05FllcFzzmH9MAVHBwwVAYDVR0gBE0wSzBJBgRVHSAA

# MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# RG9jcy9SZXBvc2l0b3J5Lmh0bTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAP

# BgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKMBBH4wiDPruTGcyuuFdmf8ZbTR

# MFkGA1UdHwRSMFAwTqBMoEqGSGh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kv

# Y3JsL3Byb2R1Y3RzL01pY1Rlc1Jvb0NlckF1dF8yMDEwLTA2LTE3LmNybDCBjQYI

# KwYBBQUHAQEEgYAwfjBNBggrBgEFBQcwAoZBaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraS9jZXJ0cy9NaWNUZXNSb29DZXJBdXRfMjAxMC0wNi0xNy5jcnQwLQYI

# KwYBBQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDANBgkq

# hkiG9w0BAQsFAAOCAgEAJ7TQhbKezA+kKlNz1W3a1zEAyPb/Y8j2ARG1GJLa3LT5

# rybo/Ep5vcFnsIgDeWXPNTUFWI7igwaW9bp+EllQm+Dw1T2dCfO7Rs2HvXTid9BG

# BnoiGmkrZCy5izmADOqCJyKiMFciJNkhP6tpRrfDr8HGXrzZj5FWI5Op8iYuRHb0

# unIj0ZlvW0VkU+KVlPG2SEC/d/CxOJRzkAIsawEIlnrOUs6dlPORNJy3Wg6+cPyN

# vCf2dfuM1tTWqNaa1Qjqq6LJ6DVH1X9ZL7MH1txWNpdT4gGKfLBsjuexms7V3QaB

# DgXAy3nX3D62vfjS3RBd+jZBNIPvXW6JBWOysYVCfFqTIgpjeMo/SyhS70G3LRjC

# SWPRMBxYn5tqYGommnyhdRss/ja7icxBIKcrDKP3/QFQUP6gnT0EBhFqd0AyGnn+

# LbPUE8fkZgyggQzExS4BZpoW7VGNCVoy5Cp+7KM/yyHA1JXv6eU4hQ+FYX2ZwHL2

# EB137rJZ8qfsroVswEpwEDZziDun3NSRSMJA5HDPpP07KXwGo8x6KEgMF5Kzlq40

# Q1esCNGMzFR6xMkNIWeTZyF2y95a05Dj439zQbtZ2kjRGsknbkrQ2xVY1d016BDR

# J2YroCSmEsJoc6GBzNZ4IqTeazXaiYiubpKehPCw84t5ef+13LSUGN/mYBwyaLIx

# ghoHMIIaAwIBATCBkDB5MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSMwIQYDVQQDExpNaWNyb3NvZnQgVGVzdGluZyBQQ0EgMjAxMAITMwAABcFr

# bn0BvwY/rQABAAAFwTANBglghkgBZQMEAgEFAKCBsDAZBgkqhkiG9w0BCQMxDAYK

# KwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGCNwIBFTAvBgkqhkiG

# 9w0BCQQxIgQgWNHSEP7ji5LAWNlvLEGFcCVIUqOReBRLUntBLhzSG7EwRAYKKwYB

# BAGCNwIBDDE2MDSgFIASAE0AaQBjAHIAbwBzAG8AZgB0oRyAGmh0dHBzOi8vd3d3

# Lm1pY3Jvc29mdC5jb20gMA0GCSqGSIb3DQEBAQUABIIBAF31nXT3S7DPe8pnWvGj

# a7sIWyRcItk8/mmj1EV6HgdmCVsFIKEW8UHXNk/NqYTDP8YnIFsyFmF51jCz/nbs

# 7AAtPLOLuquaHMfr8BJVVR1Mbxfhqwb8VDe5yGkJjx9e3VNcPNIoF8iTlNZqXSPN

# wcrhR3+Um7kMv6iPfli3o2qT/vc8aDQi7w/TG/+KLkk8dVu/G/MN2HeVmlYjyhmj

# /tWlj+hrWcD//nXZtXutOuMK+gXlUcpowKosYc3evxF84Na9ZVtHYDFgmB99qlK6

# xoL34zQLuwIxD67ZOwn5dq9Lx9Yjc1D6AJD7gtUYzqPo3F2B6GawGUFVmZsy6HQj

# H36hgheUMIIXkAYKKwYBBAGCNwMDATGCF4Awghd8BgkqhkiG9w0BBwKgghdtMIIX

# aQIBAzEPMA0GCWCGSAFlAwQCAQUAMIIBUgYLKoZIhvcNAQkQAQSgggFBBIIBPTCC

# ATkCAQEGCisGAQQBhFkKAwEwMTANBglghkgBZQMEAgEFAAQgmymbqQZJFsTUzmHy

# nyO/QooX4PNBcSWZswlk9wpnRQwCBmVWyFJT8xgTMjAyMzEyMDcyMDA2MjQuNjk3

# WjAEgAIB9KCB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0

# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh

# dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG

# A1UECxMeblNoaWVsZCBUU1MgRVNOOkE5MzUtMDNFMC1EOTQ3MSUwIwYDVQQDExxN

# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR6jCCByAwggUIoAMCAQICEzMA

# AAHRsltAKGwu0kUAAQAAAdEwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgUENBIDIwMTAwHhcNMjMwNTI1MTkxMjE4WhcNMjQwMjAxMTkxMjE4WjCB

# yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc

# TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU

# U1MgRVNOOkE5MzUtMDNFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T

# dGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmUza

# NDnhs9lxXdoC4OZ05QZvFzqbsCSIl7DFOta8KtWSg6WuON0a0hv6R/Bs+lzZxUCh

# pwqjQrZr6ClCwKcK0/7O/3tV9JTRSpo+1O1+KdNEtLkG1ui8Ep/81h2htnOeGV7B

# mPgWH4Vg4GxaQk8Uc050Qhutm5Fj6emR22T4OB7dQkQgDIYThk0fMCOBu8MFmcHT

# HOlL1FJatKpfQMQH85GEaYtrUbwxzHZmd78l6aoRcL0RvHIAh/00wo1uaumjW3ai

# i9wRQz81LbgjbD1y9/xNHUdmwzKmtGjR/oiH4RguP73MLrXjjAj1CA1UqgwjXyGj

# wxMGHItX3fYLtc1cPhxIQ2TOxGt58SFK87fkX6eU6DDI+EAJielGnZvkz2w26PJB

# SCu9EoZlvMJ/HyZPUXkEBKU7SDeN3kb/UJl8t1HnfNKLDgRPlpHTL0ghYfqoArCn

# c0MUCRutnE3qFNnqjYR96KaV5sn1VMG7Hn0MzD7W4pwmXdBVJZpTP3R/uDp4qkMm

# h767WMt8KiGn2N83hSE5VQKD/avbxeFuyh0f7hdJr06QC+TWkwzdaZUEtDHYzJIM

# 2SuYLcKjnv9605agc8cGu2GKd7qz+clpE8yEhp4TViGTsTskCDsWX24iGwB25tzP

# IY+9ykFnAkeSWr4JMFJp3BRxEmkH+A66rPv9S9UCAwEAAaOCAUkwggFFMB0GA1Ud

# DgQWBBQLjvFMxew3B9JprBeF0McR0L0tozAfBgNVHSMEGDAWgBSfpxVdAF5iXYP0

# 5dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIw

# MjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUt

# U3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB

# /wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOC

# AgEAm7va0wB1duJmNKqBuXhJyJs+WpBl074gcCqdmOdbNusPKA61qK/ptNEeP9wX

# A5mJVCvDa8f2rmBWInWXXXFI8ONkMUkrZr/6lpwkIv9jpx99ilR0PpDDmTwAUExt

# V5HJ2D1DjhBKK+n/9ybNbo+MIx8xOFeGrpmFwQLK+C+SkfLynrObRcYTJFjQ/zu1

# v0Wh2MCTIzJMVaLAaJO1dtbCQJcUnBF8XyWvv6pKlK+wmYMN0eIwh0ZD6kITFom1

# zzGGq/4hdGbiwfTvPQzCTYYyvQUn+oqoGaDLsyFbfhAaE86b//aeMEOsaAQrNvZp

# I/xCFhXXPuWt9JLgkDkhDo9O/liNvQOJOkCEQecPnjJmdCXnNLEsnkAeSo8ROdYm

# DIbZTK1CnK9OpwagrEij2LEgCEwM4LLCQ/mf3E0uwrt+Xya1oTPTWF9uLgMWCwFt

# IqTbVqbSHlempLmRHhFegTbTN1U5PpgJVef3gv9GNe2lUoyuf4Mg6CzZq4FcL+Uw

# GgZqv8IEURR5lvVCd87/C5pOpiKAMk6agW7lIzC8q7Wo7krAP5tg5yjDtEIs9b/h

# UlW6jN/Cfz05YQk1GxTsdJC0+2P+/mcq4pVQs8gGHxSIpwyI1pTPObQ3lPGXyQox

# SsKtw7EcVeCWNfMcMPE05qHd5ZK/TahkOeC5sj1XPuYmza4wggdxMIIFWaADAgEC

# AhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQg

# Um9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVa

# Fw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7V

# gtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeF

# RiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3X

# D9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoP

# z130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+

# tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5Jas

# AUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/b

# fV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuv

# XsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg

# 8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzF

# a/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqP

# nhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEw

# IwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSf

# pxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBB

# MD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0Rv

# Y3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGC

# NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8w

# HwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmg

# R4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWlj

# Um9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEF

# BQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29D

# ZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEs

# H2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHk

# wo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinL

# btg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCg

# vxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsId

# w2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2

# zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23K

# jgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beu

# yOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/

# tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjm

# jJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBj

# U02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDTTCCAjUCAQEwgfmhgdGkgc4wgcsx

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1p

# Y3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNT

# IEVTTjpBOTM1LTAzRTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3Rh

# bXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUARyWNhb/hoS0LUQ0dryMwWkr/+yyg

# gYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYw

# JAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0B

# AQsFAAIFAOkcS4MwIhgPMjAyMzEyMDcxMzQ3NDdaGA8yMDIzMTIwODEzNDc0N1ow

# dDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA6RxLgwIBADAHAgEAAgIayjAHAgEAAgIT

# SjAKAgUA6R2dAwIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAow

# CAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQAISRxVygLq

# 16Wakb/oukeYmDcg096Y9bvtOoYkMYC497PW1LTRivkOu94YAuYfX4m0+plMqOT+

# 8c3qwJYqV0BbBKRs9b+BFFwCgjM1FBTsJYLy52ycPN6eQUcm+oRN9hQjMgVp31aW

# 0e956dmuZxHFMDtnImpk79UjgLnwM4a2xWVC5dR0/TajxcL4M7yzCtq513id7GVq

# QN4HdrSc4haLID8m+dkWQ3sRNLo14YE6OnwdA8GTsrxoIoOiQiwIeyJB/iFPQpIM

# 8XrrUKmyV5+BdGVROlyvIzDX60DsoYPk5IVBOd3V0/+nB+fSxcPAeBVuz4vb91+k

# e9eG6o//cQwLMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT

# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB

# IDIwMTACEzMAAAHRsltAKGwu0kUAAQAAAdEwDQYJYIZIAWUDBAIBBQCgggFKMBoG

# CSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgqXRIAQBB

# J7vD6sVRziuUR0jIHtTpTEF+JbY0fGYpGt4wgfoGCyqGSIb3DQEJEAIvMYHqMIHn

# MIHkMIG9BCDMvGF5AgC7+e3ObEYaz07m9auE8CeqFQN+pPCIiPwHDDCBmDCBgKR+

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB0bJbQChsLtJFAAEA

# AAHRMCIEIB8tjRllCGkSLuynzvJ2fTJ4i/16jKqtgQ7zVPphDcb3MA0GCSqGSIb3

# DQEBCwUABIICAGTnTmxq8ROtB3vrmnh0wARJKGXfCJ4ASPHz/qIQ/YAGcnTAbqUD

# l28v1lPAr6QLUAFvWHRAPM9SFz7dByqmidTI01Ly9H4t23pMLlKdDabZV0AGeCrg

# R7ZxHgErU4/DHIouLX9QzMj8Ans1adgDbe3lijx9hcPw0hFgfl1pteWFs/9TIbsf

# Fov3jVGEtQc5szYWL+Ha4O04I1iz0HM2EbzVrPYzg1nvs9hZVXPDmfIDtT0rJfh2

# SE5jIreOCMvCkVPOi3RqDEBeqVKZUDyTxe5rSa1r20eMCebMcC0MJAzpjFBThonR

# EkRFE+yOeWCcVeOL1yMu2dnKnbadFtDLF9iTOrUd0vhqFDa/3hR36MtHPU1Uucai

# 6mgg9jHc1c7U9mfBFrNKI9HZ0+t4tq1FEOojKnSORJ/0TC5GJTK9E821pgP3Q6gh

# xHoe+lJ+BeRDze+Qz0Gy4zVPQ/toDQWlo2pTUIZqD19jJdykXx/3Jsxat+KgDGyP

# IJ6TCgdp6JfAp3cVP4d8FeJnITnEV03Z0Q6m+wKG6L3uHw4j6OHMIzbr4SqYHM9/

# nyUzT4nuH7YrWONA3WOElPTa8e+T0Jpa3ux5AQBEYc0xL8QpemMLE6axwWuj5R/Y

# F4nwk+zwBmJmZH2uha1Rxhd4kI2zPjSMT/MB4eh8rYvm/yQ+J+SinpX4

# SIG # End signature block