PSPKI

3.4.1.0

Client/Convert-PemToPfx.ps1

                                function Convert-PemToPfx {

<#

.ExternalHelp PSPKI.Help.xml

#>

[OutputType('[System.Security.Cryptography.X509Certificates.X509Certificate2]')]

[CmdletBinding()]

    param(

        [Parameter(Mandatory = $true, Position = 0)]

        [string]$InputPath,

        [string]$KeyPath,

        [string]$OutputPath,

        [Security.Cryptography.X509Certificates.X509KeySpecFlags]$KeySpec = "AT_KEYEXCHANGE",

        [Security.SecureString]$Password,

        [string]$ProviderName = "Microsoft Enhanced RSA and AES Cryptographic Provider",

        [Security.Cryptography.X509Certificates.StoreLocation]$StoreLocation = "CurrentUser",

        [switch]$Install

    )

    if ($PSBoundParameters.Verbose) {$VerbosePreference = "continue"}

    if ($PSBoundParameters.Debug) {

        $Host.PrivateData.DebugForegroundColor = "Cyan"

        $DebugPreference = "continue"

    }

    #region helper functions

    function __normalizeAsnInteger ($array) {

        $padding = $array.Length % 8

        if ($padding) {

            $array = $array[$padding..($array.Length - 1)]

        }

        [array]::Reverse($array)

        [Byte[]]$array

    }

    function __extractCert([string]$Text) {

        if ($Text -match "(?msx).*-{5}BEGIN\sCERTIFICATE-{5}(.+)-{5}END\sCERTIFICATE-{5}") {

        $keyFlags = [Security.Cryptography.X509Certificates.X509KeyStorageFlags]::Exportable

        if ($Install) {

            $keyFlags += if ($StoreLocation -eq "CurrentUser") {

                [Security.Cryptography.X509Certificates.X509KeyStorageFlags]::UserKeySet

            } else {

                [Security.Cryptography.X509Certificates.X509KeyStorageFlags]::MachineKeySet

            }

        }

        $RawData = [Convert]::FromBase64String($matches[1])

            try {

                New-Object Security.Cryptography.X509Certificates.X509Certificate2 -ArgumentList $RawData, "", $keyFlags

            } catch {throw "The data is not valid security certificate."}

            Write-Debug "X.509 certificate is correct."

        } else {throw "Missing certificate file."}

    }

    # returns [byte[]]

    function __composePRIVATEKEYBLOB($modulus, $PublicExponent, $PrivateExponent, $Prime1, $Prime2, $Exponent1, $Exponent2, $Coefficient) {

        Write-Debug "Calculating key length."

        $bitLen = "{0:X4}" -f $($modulus.Length * 8)

        Write-Debug "Key length is $($modulus.Length * 8) bits."

        [byte[]]$bitLen1 = Invoke-Expression 0x$([int]$bitLen.Substring(0,2))

        [byte[]]$bitLen2 = Invoke-Expression 0x$([int]$bitLen.Substring(2,2))

        [Byte[]]$PrivateKey = 0x07,0x02,0x00,0x00,0x00,0x24,0x00,0x00,0x52,0x53,0x41,0x32,0x00

        [Byte[]]$PrivateKey = $PrivateKey + $bitLen1 + $bitLen2 + $PublicExponent + ,0x00 + `

            $modulus + $Prime1 + $Prime2 + $Exponent1 + $Exponent2 + $Coefficient + $PrivateExponent

        $PrivateKey

    }

    # returns RSACryptoServiceProvider for dispose purposes

    function __attachPrivateKey($Cert, [Byte[]]$PrivateKey) {

        $cspParams = New-Object Security.Cryptography.CspParameters -Property @{

            ProviderName = $ProviderName

            KeyContainerName = "pspki-" + [Guid]::NewGuid().ToString()

            KeyNumber = [int]$KeySpec

        }

        if ($Install -and $StoreLocation -eq "LocalMachine") {

            $cspParams.Flags += [Security.Cryptography.CspProviderFlags]::UseMachineKeyStore

        }

        $rsa = New-Object Security.Cryptography.RSACryptoServiceProvider $cspParams

        $rsa.ImportCspBlob($PrivateKey)

        $Cert.PrivateKey = $rsa

        $rsa

    }

    # returns Asn1Reader

    function __decodePkcs1($base64) {

        Write-Debug "Processing PKCS#1 RSA KEY module."

        $asn = New-Object SysadminsLV.Asn1Parser.Asn1Reader @(,[Convert]::FromBase64String($base64))

        if ($asn.Tag -ne 48) {throw "The data is invalid."}

        $asn

    }

    # returns Asn1Reader

    function __decodePkcs8($base64) {

        Write-Debug "Processing PKCS#8 Private Key module."

        $asn = New-Object SysadminsLV.Asn1Parser.Asn1Reader @(,[Convert]::FromBase64String($base64))

        if ($asn.Tag -ne 48) {throw "The data is invalid."}

        # version

        if (!$asn.MoveNext()) {throw "The data is invalid."}

        # algorithm identifier

        if (!$asn.MoveNext()) {throw "The data is invalid."}

        # octet string

        if (!$asn.MoveNextCurrentLevel()) {throw "The data is invalid."}

        if ($asn.Tag -ne 4) {throw "The data is invalid."}

        if (!$asn.MoveNext()) {throw "The data is invalid."}

        $asn

    }

    #endregion

    $ErrorActionPreference = "Stop"

    $File = Get-Item $InputPath -Force -ErrorAction Stop

    if ($KeyPath) {$Key = Get-Item $KeyPath -Force -ErrorAction Stop}

    # parse content

    $Text = Get-Content -Path $InputPath -Raw -ErrorAction Stop

    Write-Debug "Extracting certificate information..."

    $Cert = __extractCert $Text

    if ($Key) {$Text = Get-Content -Path $KeyPath -Raw -ErrorAction Stop}

    $asn = if ($Text -match "(?msx).*-{5}BEGIN\sPRIVATE\sKEY-{5}(.+)-{5}END\sPRIVATE\sKEY-{5}") {

        __decodePkcs8 $matches[1]

    } elseif ($Text -match "(?msx).*-{5}BEGIN\sRSA\sPRIVATE\sKEY-{5}(.+)-{5}END\sRSA\sPRIVATE\sKEY-{5}") {

        __decodePkcs1 $matches[1]

    }  else {throw "The data is invalid."}

    # private key version

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    # modulus n

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $modulus = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "Modulus length: $($modulus.Length)"

    # public exponent e

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    # public exponent must be 4 bytes exactly.

    $PublicExponent = if ($asn.GetPayload().Length -eq 3) {

        ,0 + $asn.GetPayload()

    } else {

        $asn.GetPayload()

    }

    Write-Debug "PublicExponent length: $($PublicExponent.Length)"

    # private exponent d

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $PrivateExponent = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "PrivateExponent length: $($PrivateExponent.Length)"

    # prime1 p

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $Prime1 = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "Prime1 length: $($Prime1.Length)"

    # prime2 q

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $Prime2 = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "Prime2 length: $($Prime2.Length)"

    # exponent1 d mod (p-1)

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $Exponent1 = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "Exponent1 length: $($Exponent1.Length)"

    # exponent2 d mod (q-1)

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $Exponent2 = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "Exponent2 length: $($Exponent2.Length)"

    # coefficient (inverse of q) mod p

    if (!$asn.MoveNext()) {throw "The data is invalid."}

    $Coefficient = __normalizeAsnInteger $asn.GetPayload()

    Write-Debug "Coefficient length: $($Coefficient.Length)"

    # creating Private Key BLOB structure

    $PrivateKey = __composePRIVATEKEYBLOB $modulus $PublicExponent $PrivateExponent $Prime1 $Prime2 $Exponent1 $Exponent2 $Coefficient

    #region key attachment and export

    try {

        $rsaKey = __attachPrivateKey $Cert $PrivateKey

        if (![string]::IsNullOrEmpty($OutputPath)) {

            if (!$Password) {

                $Password = Read-Host -Prompt "Enter PFX password" -AsSecureString

            }

            $pfxBytes = $Cert.Export("pfx", $Password)

            Set-Content -Path $OutputPath -Value $pfxBytes -Encoding Byte

        }

        #endregion

        if ($Install) {

            $store = New-Object Security.Cryptography.X509Certificates.X509Store "my", $StoreLocation

            $store.Open("ReadWrite")

            $store.Add($Cert)

            $store.Close()

        }

    } finally {

        if ($rsaKey -ne $null) {

            $rsaKey.Dispose()

            $Cert

        }

    }

}

# SIG # Begin signature block

# MIIcgAYJKoZIhvcNAQcCoIIccTCCHG0CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCT7JUlngrKZ1w3

# a/SSO89Kw2FHbeCzktIiRAt9N20E06CCF4owggUTMIID+6ADAgECAhAJwnVp5a70

# RHscglFEfEqLMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNV

# BAMTKERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDb2RlIFNpZ25pbmcgQ0EwHhcN

# MTcwNDE3MDAwMDAwWhcNMjAwNDIxMTIwMDAwWjBQMQswCQYDVQQGEwJMVjENMAsG

# A1UEBxMEUmlnYTEYMBYGA1UEChMPU3lzYWRtaW5zIExWIElLMRgwFgYDVQQDEw9T

# eXNhZG1pbnMgTFYgSUswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo

# NCCuzEogktL+1+lvPHu7ctNtCD7wA5Nalebh0FaKz3v1944APtg7A5oQfh6c20f7

# xYyTw4wVuo6L6S3dlMUa+bfXvTXIco0ilTIz0uqUKW8WGYwJtbFpu6PvCs0LHDRD

# rD8sEFgGHQhbz+J4gtV8BI7OID+yNfgbUk4JeSBGNzgeqZMdf/xceMoLx+fHi9tU

# OdTtgs/dXQYg3M3J+rGxFdpxOO7JmUZ8nqVALlnU9cHBGKUY4hDvDxfp7EukhnHv

# RpkhacZB1RBw0q8q+ekvLVCZwpG4N1Pnq2ksHiBzqRWQQE89iV+UwgRnLx2igywk

# 2kX+JPSZYsQCbDGo4DqBAgMBAAGjggHFMIIBwTAfBgNVHSMEGDAWgBRaxLl7Kgqj

# pepxA8Bg+S32ZXUOWDAdBgNVHQ4EFgQU9Mh+66y4uf1WQl9FmsWMHdk2HrswDgYD

# VR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMDMHcGA1UdHwRwMG4wNaAz

# oDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtY3MtZzEu

# Y3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1hc3N1cmVk

# LWNzLWcxLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwDATAqMCgGCCsGAQUFBwIB

# FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEEATCBhAYIKwYB

# BQUHAQEEeDB2MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20w

# TgYIKwYBBQUHMAKGQmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy

# dFNIQTJBc3N1cmVkSURDb2RlU2lnbmluZ0NBLmNydDAMBgNVHRMBAf8EAjAAMA0G

# CSqGSIb3DQEBCwUAA4IBAQCfpLMUerP0WXkcb9+dunMLt3jowZEd8X6ISxxzdsdB

# 8jOZ92L88qKqjWD1I9HBceba4tdJZCLV33S9a3eoxUunIlJH4GmYH/HSrc2qgNxg

# PyobmWf556c7Wd3q6ZUKgos0bw++TtLqb/jvoKN19epTEkwQDIwVFzOAxZ4T+sYr

# jmFhd9KeaRhTLZRBVdKNTKtXaoWFrfNSQTp8NcNYdkEM05cUnEUMDOoeLSmxPnIv

# pl8KbripxtVQ591rCLJN2uMtrtSE1nvjiYfSFQI00EiB33ZoI2T1eCNuP1M6c+ex

# KzQQC8UDp7J+duzl1j605TwSfLS/MJsaiwftNzc3FfgSMIIFMDCCBBigAwIBAgIQ

# BAkYG1/Vu2Z1U0O1b5VQCDANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJVUzEV

# MBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29t

# MSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMTMxMDIy

# MTIwMDAwWhcNMjgxMDIyMTIwMDAwWjByMQswCQYDVQQGEwJVUzEVMBMGA1UEChMM

# RGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMTEwLwYDVQQD

# EyhEaWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQgQ29kZSBTaWduaW5nIENBMIIBIjAN

# BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NOzHH8OEa9ndwfTCzFJGc/Q+0WZ

# sTrbRPV/5aid2zLXcep2nQUut4/6kkPApfmJ1DcZ17aq8JyGpdglrA55KDp+6dFn

# 08b7KSfH03sjlOSRI5aQd4L5oYQjZhJUM1B0sSgmuyRpwsJS8hRniolF1C2ho+mI

# LCCVrhxKhwjfDPXiTWAYvqrEsq5wMWYzcT6scKKrzn/pfMuSoeU7MRzP6vIK5Fe7

# SrXpdOYr/mzLfnQ5Ng2Q7+S1TqSp6moKq4TzrGdOtcT3jNEgJSPrCGQ+UpbB8g8S

# 9MWOD8Gi6CxR93O8vYWxYoNzQYIH5DiLanMg0A9kczyen6Yzqf0Z3yWT0QIDAQAB

# o4IBzTCCAckwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwEwYD

# VR0lBAwwCgYIKwYBBQUHAwMweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhho

# dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNl

# cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwgYEG

# A1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy

# dEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0

# LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwTwYDVR0gBEgwRjA4Bgpg

# hkgBhv1sAAIEMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv

# bS9DUFMwCgYIYIZIAYb9bAMwHQYDVR0OBBYEFFrEuXsqCqOl6nEDwGD5LfZldQ5Y

# MB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA0GCSqGSIb3DQEBCwUA

# A4IBAQA+7A1aJLPzItEVyCx8JSl2qB1dHC06GsTvMGHXfgtg/cM9D8Svi/3vKt8g

# VTew4fbRknUPUbRupY5a4l4kgU4QpO4/cY5jDhNLrddfRHnzNhQGivecRk5c/5Cx

# GwcOkRX7uq+1UcKNJK4kxscnKqEpKBo6cSgCPC6Ro8AlEeKcFEehemhor5unXCBc

# 2XGxDI+7qPjFEmifz0DLQESlE/DmZAwlCEIysjaKJAL+L3J+HNdJRZboWR3p+nRk

# a7LrZkPas7CM1ekN3fYBIM6ZMWM9CBoYs4GbT8aTEAb8B4H6i9r5gkn3Ym6hU/oS

# lBiFLpKR6mhsRDKyZqHnGKSaZFHvMIIGajCCBVKgAwIBAgIQAwGaAjr/WLFr1tXq

# 5hfwZjANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGln

# aUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhE

# aWdpQ2VydCBBc3N1cmVkIElEIENBLTEwHhcNMTQxMDIyMDAwMDAwWhcNMjQxMDIy

# MDAwMDAwWjBHMQswCQYDVQQGEwJVUzERMA8GA1UEChMIRGlnaUNlcnQxJTAjBgNV

# BAMTHERpZ2lDZXJ0IFRpbWVzdGFtcCBSZXNwb25kZXIwggEiMA0GCSqGSIb3DQEB

# AQUAA4IBDwAwggEKAoIBAQCjZF38fLPggjXg4PbGKuZJdTvMbuBTqZ8fZFnmfGt/

# a4ydVfiS457VWmNbAklQ2YPOb2bu3cuF6V+l+dSHdIhEOxnJ5fWRn8YUOawk6qhL

# LJGJzF4o9GS2ULf1ErNzlgpno75hn67z/RJ4dQ6mWxT9RSOOhkRVfRiGBYxVh3lI

# RvfKDo2n3k5f4qi2LVkCYYhhchhoubh87ubnNC8xd4EwH7s2AY3vJ+P3mvBMMWSN

# 4+v6GYeofs/sjAw2W3rBerh4x8kGLkYQyI3oBGDbvHN0+k7Y/qpA8bLOcEaD6dpA

# oVk62RUJV5lWMJPzyWHM0AjMa+xiQpGsAsDvpPCJEY93AgMBAAGjggM1MIIDMTAO

# BgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEF

# BQcDCDCCAb8GA1UdIASCAbYwggGyMIIBoQYJYIZIAYb9bAcBMIIBkjAoBggrBgEF

# BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCCAWQGCCsGAQUFBwIC

# MIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0

# AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABhAGMAYwBl

# AHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABD

# AFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABh

# AHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBp

# AHQAIABsAGkAYQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBv

# AHIAcABvAHIAYQB0AGUAZAAgAGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQBy

# AGUAbgBjAGUALjALBglghkgBhv1sAxUwHwYDVR0jBBgwFoAUFQASKxOYspkH7R7f

# or5XDStnAs0wHQYDVR0OBBYEFGFaTSS2STKdSip5GoNL9B6Jwcp9MH0GA1UdHwR2

# MHQwOKA2oDSGMmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3Vy

# ZWRJRENBLTEuY3JsMDigNqA0hjJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGln

# aUNlcnRBc3N1cmVkSURDQS0xLmNybDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUH

# MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDov

# L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEQ0EtMS5jcnQw

# DQYJKoZIhvcNAQEFBQADggEBAJ0lfhszTbImgVybhs4jIA+Ah+WI//+x1GosMe06

# FxlxF82pG7xaFjkAneNshORaQPveBgGMN/qbsZ0kfv4gpFetW7easGAm6mlXIV00

# Lx9xsIOUGQVrNZAQoHuXx/Y/5+IRQaa9YtnwJz04HShvOlIJ8OxwYtNiS7Dgc6aS

# wNOOMdgv420XEwbu5AO2FKvzj0OncZ0h3RTKFV2SQdr5D4HRmXQNJsQOfxu19aDx

# xncGKBXp2JPlVRbwuwqrHNtcSCdmyKOLChzlldquxC5ZoGHd2vNtomHpigtt7BIY

# vfdVVEADkitrwlHCCkivsNRu4PQUCjob4489yq9qjXvc2EQwggbNMIIFtaADAgEC

# AhAG/fkDlgOt6gAK6z8nu7obMA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNVBAYTAlVT

# MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j

# b20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0wNjEx

# MTAwMDAwMDBaFw0yMTExMTAwMDAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMTCCASIwDQYJKoZIhvcNAQEBBQAD

# ggEPADCCAQoCggEBAOiCLZn5ysJClaWAc0Bw0p5WVFypxNJBBo/JM/xNRZFcgZ/t

# LJz4FlnfnrUkFcKYubR3SdyJxArar8tea+2tsHEx6886QAxGTZPsi3o2CAOrDDT+

# GEmC/sfHMUiAfB6iD5IOUMnGh+s2P9gww/+m9/uizW9zI/6sVgWQ8DIhFonGcIj5

# BZd9o8dD3QLoOz3tsUGj7T++25VIxO4es/K8DCuZ0MZdEkKB4YNugnM/JksUkK5Z

# ZgrEjb7SzgaurYRvSISbT0C58Uzyr5j79s5AXVz2qPEvr+yJIvJrGGWxwXOt1/HY

# zx4KdFxCuGh+t9V3CidWfA9ipD8yFGCV/QcEogkCAwEAAaOCA3owggN2MA4GA1Ud

# DwEB/wQEAwIBhjA7BgNVHSUENDAyBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUF

# BwMDBggrBgEFBQcDBAYIKwYBBQUHAwgwggHSBgNVHSAEggHJMIIBxTCCAbQGCmCG

# SAGG/WwAAQQwggGkMDoGCCsGAQUFBwIBFi5odHRwOi8vd3d3LmRpZ2ljZXJ0LmNv

# bS9zc2wtY3BzLXJlcG9zaXRvcnkuaHRtMIIBZAYIKwYBBQUHAgIwggFWHoIBUgBB

# AG4AeQAgAHUAcwBlACAAbwBmACAAdABoAGkAcwAgAEMAZQByAHQAaQBmAGkAYwBh

# AHQAZQAgAGMAbwBuAHMAdABpAHQAdQB0AGUAcwAgAGEAYwBjAGUAcAB0AGEAbgBj

# AGUAIABvAGYAIAB0AGgAZQAgAEQAaQBnAGkAQwBlAHIAdAAgAEMAUAAvAEMAUABT

# ACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkAaQBuAGcAIABQAGEAcgB0AHkAIABB

# AGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAgAGwAaQBtAGkAdAAgAGwAaQBh

# AGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAgAGkAbgBjAG8AcgBwAG8AcgBh

# AHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMAZQAu

# MAsGCWCGSAGG/WwDFTASBgNVHRMBAf8ECDAGAQH/AgEAMHkGCCsGAQUFBwEBBG0w

# azAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUF

# BzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk

# SURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdp

# Y2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMDqgOKA2hjRodHRw

# Oi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3Js

# MB0GA1UdDgQWBBQVABIrE5iymQftHt+ivlcNK2cCzTAfBgNVHSMEGDAWgBRF66Kv

# 9JLLgjEtUYunpyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEARlA+ybcoJKc4HbZb

# Ka9Sz1LpMUerVlx71Q0LQbPv7HUfdDjyslxhopyVw1Dkgrkj0bo6hnKtOHisdV0X

# FzRyR4WUVtHruzaEd8wkpfMEGVWp5+Pnq2LN+4stkMLA0rWUvV5PsQXSDj0aqRRb

# poYxYqioM+SbOafE9c4deHaUJXPkKqvPnHZL7V/CSxbkS3BMAIke/MV5vEwSV/5f

# 4R68Al2o/vsHOE8Nxl2RuQ9nRc3Wg+3nkg2NsWmMT/tZ4CMP0qquAHzunEIOz5HX

# J7cW7g/DvXwKoO4sCFWFIrjrGBpN/CohrUkxg0eVd3HcsRtLSxwQnHcUwZ1PL1qV

# CCkQJjGCBEwwggRIAgEBMIGGMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdp

# Q2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERp

# Z2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDb2RlIFNpZ25pbmcgQ0ECEAnCdWnlrvRE

# exyCUUR8SoswDQYJYIZIAWUDBAIBBQCggYQwGAYKKwYBBAGCNwIBDDEKMAigAoAA

# oQKAADAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4w

# DAYKKwYBBAGCNwIBFTAvBgkqhkiG9w0BCQQxIgQgjhTvpMumWsrGis+q6UAvJO8C

# jn7DUiaHSuGPcAFmACowDQYJKoZIhvcNAQEBBQAEggEAcKeKW44MxVXoxrvLu47k

# RNmaw7g58epGKw3TiRAUruCPCTruJEP4PzGvXsAjXpIqgs6uGzipyxMBYHu/u+8S

# z5pV8guj+JGEOzBOaZe+A1ve0lDqWJRwhLZqpDZ9TseWrb03buVLWJcwGhwUoF3J

# P+qjRhlfoi+DO1eRL7MssvrcApIpm38hhCvM4OBAPxSn+zepYte/zTT3gMhp9NKE

# jHOnrIAgmF0kXrZjjsZHMwjGh5CRcjkIRhyysYz7LMXnvD7VBKqgy4rJUj50lio9

# T9oA5nn/WU8NMf5qVgFto8OAfCLsb2KOhDclyO7Wm4M/EBQ/2Xh0FKuEt/mS5gnA

# KKGCAg8wggILBgkqhkiG9w0BCQYxggH8MIIB+AIBATB2MGIxCzAJBgNVBAYTAlVT

# MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j

# b20xITAfBgNVBAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMQIQAwGaAjr/WLFr

# 1tXq5hfwZjAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc

# BgkqhkiG9w0BCQUxDxcNMTgxMDIyMTYyODE1WjAjBgkqhkiG9w0BCQQxFgQUhGLH

# nR0X7+PUforEL0MrQbjtz8MwDQYJKoZIhvcNAQEBBQAEggEAj9IVYsPHY5oC3uak

# MjVM6daz9UL6oBvISQ2q6FzIfwyAIzYGOKkVrO4LVIATEtDMTCxasUCOa9RzQiGo

# rzrknHKr5UVKvau+QUWkU1xQcrfJzPZLu9U/wk+Lkr4FUy61r4hyD2tIzVmXngZy

# hdGoLyCame12SIOLfltCevFzQER8qP/rSnHxo+hfFQuidgNU9hTz13Z+I5tHKlK3

# CkWZy1TdY9W2NDF+9dyyoIcINEkU/w4xxk/+OcxWMgWJgpNc+7NKH+hkgntpzGcn

# wW92r4Y5wzFLSRP2H990YkX0RU1s/sDakgZ2xZoM9o7VMJynA145zYCdszTM+x/e

# MTV36Q==

# SIG # End signature block