Testing/Unit/PowerShell/Connection/Connect-Tenant.PowerBILicense.Tests.ps1

<#
 # Power BI license detection in Connect-Tenant.
 #
 # The Power BI Admin REST API returns 403/401 unless the caller is licensed and has signed into
 # the Power BI portal, so Connect-Tenant pre-checks licensing and sets PBILicenseFound to avoid
 # triggering a pointless consent prompt.
#>


Import-Module (Join-Path -Path $PSScriptRoot -ChildPath "../../../../Modules/Connection/Connection.psm1") -Function 'Connect-Tenant' -Force

InModuleScope Connection {
    Import-Module (Join-Path -Path $PSScriptRoot -ChildPath "../../../../Modules/Permissions/PermissionsHelper.psm1") -Force

    Describe -Tag 'Connection' -Name 'Connect-Tenant Power BI license detection' {
        BeforeAll {
            $script:ServicePrincipalParams = @{
                CertThumbprintParams = @{
                    AppID                 = "00000000-0000-0000-0000-000000000000"
                    CertificateThumbprint = "0000000000000000000000000000000000000000"
                    Organization          = "contoso.onmicrosoft.com"
                }
            }

            # Tenant-level service plans, as /subscribedSkus would report them.
            function New-SubscribedSku {
                param(
                    [string]$PlanName = "POWER_BI_STANDARD",
                    [string]$Status = "Success"
                )
                [pscustomobject]@{
                    Value = [pscustomobject]@{
                        ServicePlans = @(
                            [pscustomobject]@{ ServicePlanName = $PlanName; ProvisioningStatus = $Status }
                        )
                    }
                }
            }

            function New-OrgDetails {
                [pscustomobject]@{
                    Value = [pscustomobject]@{
                        DisplayName     = "DisplayName"
                        Id              = "305102d0-7ccc-4007-83bb-ac1f44f8d620"
                        VerifiedDomains = @(
                            @{ isInitial = $false; Name = "example.onmicrosoft.com" },
                            @{ isInitial = $true; Name = "contoso.onmicrosoft.com" }
                        )
                    }
                }
            }

            # Per-user licenses, as /v1.0/me/licenseDetails would report them (via Invoke-GraphDirectly -Uri).
            function New-UserLicense {
                param(
                    [string]$PlanName = "POWER_BI_STANDARD",
                    [string]$Status = "Success"
                )
                [pscustomobject]@{
                    value = @(
                        [pscustomobject]@{
                            servicePlans = @(
                                [pscustomobject]@{ servicePlanName = $PlanName; provisioningStatus = $Status }
                            )
                        }
                    )
                }
            }

            # These stubs mirror the real signatures on purpose. Pester binds mock arguments from
            # the stub's metadata, so a parameterless stub leaves $commandlet (and friends) $null
            # inside the mock body, and omitting [CmdletBinding()] makes -ErrorAction fail to bind.
            function Connect-GraphHelper { throw 'this will be mocked' }

            # The bodies never run (Pester replaces them); the assignments just keep PSSA from
            # flagging the deliberately-declared parameters as unused.
            function Get-MsalAccessToken {
                [CmdletBinding()]
                param($Scope, $CertificateThumbprint, $AppID, $ClientId, $Tenant, $M365Environment)
                $null = $Scope, $CertificateThumbprint, $AppID, $ClientId, $Tenant, $M365Environment
                throw 'this will be mocked'
            }

            function Invoke-GraphDirectly {
                [CmdletBinding()]
                param($commandlet, $M365Environment, $queryParams, $ID, $Body, $Uri, $Method)
                $null = $commandlet, $M365Environment, $queryParams, $ID, $Body, $Uri, $Method
                throw 'this will be mocked'
            }

            function Get-MgContext { throw 'this will be mocked' }
            function Get-M365EnvironmentByDomain { throw 'this will be mocked' }
        }

        BeforeEach {
            Mock Connect-GraphHelper -MockWith {}
            Mock -CommandName Write-Progress -MockWith {}
            Mock Get-MsalAccessToken -MockWith { return "mock-pbi-access-token" }
            Mock Get-MgContext -MockWith {
                return [pscustomobject]@{ TenantId = "305102d0-7ccc-4007-83bb-ac1f44f8d620" }
            }
            Mock Get-M365EnvironmentByDomain -MockWith { return 'commercial' }

            # Tenant has a Power BI plan, and the running user has one too. Individual tests
            # override whichever half of this they are exercising.
            Mock Invoke-GraphDirectly -MockWith {
                if ($Commandlet -eq 'Get-MgBetaSubscribedSku') { return New-SubscribedSku }
                return New-OrgDetails
            }
            Mock Invoke-GraphDirectly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' } -MockWith { return New-UserLicense }
        }

        Context 'When the tenant has a Power BI license and the user is licensed' {
            It 'sets PBILicenseFound to true' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial'
                $Result.PBILicenseFound | Should -BeTrue
            }

            It 'acquires a Power BI access token and base URL' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial'
                $Result.PBIAccessToken | Should -Be 'mock-pbi-access-token'
                $Result.PBIBaseUrl | Should -Be 'https://api.powerbi.com'
            }

            It 'leaves PBILicenseReason empty' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial'
                $Result.PBILicenseReason | Should -BeNullOrEmpty
            }

            It 'does not report an auth failure' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial'
                @($Result.ProdAuthFailed).Count | Should -Be 0
            }

            It 'recognizes Fabric plans as a Power BI license' {
                Mock Invoke-GraphDirectly -MockWith {
                    if ($Commandlet -eq 'Get-MgBetaSubscribedSku') { return New-SubscribedSku -PlanName 'FABRIC_FREE' }
                    return New-OrgDetails
                }
                Mock Invoke-GraphDirectly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' } -MockWith { return New-UserLicense -PlanName 'FABRIC_FREE' }
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial'
                $Result.PBILicenseFound | Should -BeTrue
            }

            It 'recognizes premium-per-user plans as a Power BI license' {
                Mock Invoke-GraphDirectly -MockWith {
                    if ($Commandlet -eq 'Get-MgBetaSubscribedSku') { return New-SubscribedSku -PlanName 'PBI_PREMIUM_PER_USER' }
                    return New-OrgDetails
                }
                Mock Invoke-GraphDirectly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' } -MockWith { return New-UserLicense -PlanName 'PBI_PREMIUM_PER_USER' }
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial'
                $Result.PBILicenseFound | Should -BeTrue
            }
        }

        Context 'When the tenant has no Power BI license' {
            BeforeEach {
                Mock Invoke-GraphDirectly -MockWith {
                    if ($Commandlet -eq 'Get-MgBetaSubscribedSku') {
                        return New-SubscribedSku -PlanName 'EXCHANGE_S_STANDARD'
                    }
                    return New-OrgDetails
                }
            }

            It 'sets PBILicenseFound to false' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseFound | Should -BeFalse
            }

            It 'reports the tenant as the reason' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseReason | Should -Match 'No Power BI or Fabric license found in the tenant'
            }

            # The whole point of the pre-check: never request the Power BI scope without a license,
            # because that triggers a consent/sign-in prompt that cannot succeed.
            It 'does not acquire a Power BI token' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBIAccessToken | Should -BeNullOrEmpty
                Should -Invoke -CommandName Get-MsalAccessToken -Times 0 -Exactly
            }

            It 'does not check the per-user license once the tenant has none' {
                Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue | Out-Null
                Should -Invoke -CommandName Invoke-GraphDirectly -Times 0 -Exactly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' }
            }

            It 'does not report an auth failure' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                @($Result.ProdAuthFailed).Count | Should -Be 0
            }

            # A plan that exists but never finished provisioning must not count as licensed.
            It 'ignores Power BI plans that are not provisioned successfully' {
                Mock Invoke-GraphDirectly -MockWith {
                    if ($Commandlet -eq 'Get-MgBetaSubscribedSku') {
                        return New-SubscribedSku -PlanName 'POWER_BI_STANDARD' -Status 'Disabled'
                    }
                    return New-OrgDetails
                }
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseFound | Should -BeFalse
            }
        }

        Context 'When the tenant is licensed but the interactive user is not' {
            BeforeEach {
                Mock Invoke-GraphDirectly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' } -MockWith { return [pscustomobject]@{ value = @() } }
            }

            It 'sets PBILicenseFound to false' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseFound | Should -BeFalse
            }

            It 'reports the running user as the reason, not the tenant' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseReason | Should -Match 'Current user does not have a Power BI or Fabric license assigned'
                $Result.PBILicenseReason | Should -Not -Match 'found in the tenant'
            }

            It 'does not acquire a Power BI token' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBIAccessToken | Should -BeNullOrEmpty
            }

            It 'ignores user plans that are not provisioned successfully' {
                Mock Invoke-GraphDirectly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' } -MockWith { return New-UserLicense -Status 'PendingActivation' }
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseFound | Should -BeFalse
            }

            It 'ignores user plans unrelated to Power BI' {
                Mock Invoke-GraphDirectly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' } -MockWith { return New-UserLicense -PlanName 'EXCHANGE_S_STANDARD' }
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -WarningAction SilentlyContinue
                $Result.PBILicenseFound | Should -BeFalse
            }
        }

        Context 'When authenticating as a service principal' {
            # Service principals cannot hold a user license; access is granted through the Power BI
            # tenant setting plus a security group, so the per-user check must be skipped entirely.
            It 'does not perform the per-user license check' {
                Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -ServicePrincipalParams $script:ServicePrincipalParams | Out-Null
                Should -Invoke -CommandName Invoke-GraphDirectly -Times 0 -Exactly -ParameterFilter { $Uri -eq '/v1.0/me/licenseDetails' }
            }

            It 'sets PBILicenseFound to true when the tenant is licensed' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -ServicePrincipalParams $script:ServicePrincipalParams
                $Result.PBILicenseFound | Should -BeTrue
            }

            It 'still honors the tenant-level license check' {
                Mock Invoke-GraphDirectly -MockWith {
                    if ($Commandlet -eq 'Get-MgBetaSubscribedSku') {
                        return New-SubscribedSku -PlanName 'EXCHANGE_S_STANDARD'
                    }
                    return New-OrgDetails
                }
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -ServicePrincipalParams $script:ServicePrincipalParams -WarningAction SilentlyContinue
                $Result.PBILicenseFound | Should -BeFalse
            }

            It 'acquires the token with the certificate thumbprint' {
                Connect-Tenant -ProductNames @('powerbi') -M365Environment 'commercial' -ServicePrincipalParams $script:ServicePrincipalParams | Out-Null
                Should -Invoke -CommandName Get-MsalAccessToken -ParameterFilter {
                    $CertificateThumbprint -eq '0000000000000000000000000000000000000000'
                }
            }
        }

        Context 'When resolving the Power BI base URL per environment' -ForEach @(
            @{ Environment = 'commercial'; ExpectedUrl = 'https://api.powerbi.com' }
            @{ Environment = 'gcc';        ExpectedUrl = 'https://api.powerbigov.us' }
            @{ Environment = 'gcchigh';    ExpectedUrl = 'https://api.high.powerbigov.us' }
            @{ Environment = 'dod';        ExpectedUrl = 'https://api.mil.powerbigov.us' }
        ) {
            It 'uses <ExpectedUrl> for <Environment>' {
                $Result = Connect-Tenant -ProductNames @('powerbi') -M365Environment $Environment -ServicePrincipalParams $script:ServicePrincipalParams
                $Result.PBIBaseUrl | Should -Be $ExpectedUrl
            }
        }
    }
}

AfterAll {
    Remove-Module Connection -ErrorAction SilentlyContinue
    Remove-Module ConnectHelpers -ErrorAction SilentlyContinue
    Remove-Module PermissionsHelper -ErrorAction SilentlyContinue
}

# SIG # Begin signature block
# MIIu9wYJKoZIhvcNAQcCoIIu6DCCLuQCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAMdNCP60I69sIZ
# ogw/1P7ZwAk+bEP1K4TsBCa+gCD9AKCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h
# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV
# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z
# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ
# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0
# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z
# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ
# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s
# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL
# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb
# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3
# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c
# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx
# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0
# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL
# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud
# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf
# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk
# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS
# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK
# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB
# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp
# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg
# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri
# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7
# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5
# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3
# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H
# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G
# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ
# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0
# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla
# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE
# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz
# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C
# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce
# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da
# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T
# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA
# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh
# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM
# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z
# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05
# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY
# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP
# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T
# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD
# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG
# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY
# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj
# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV
# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU
# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN
# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry
# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL
# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf
# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh
# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh
# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV
# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j
# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH
# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC
# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l
# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW
# eE4wggdXMIIFP6ADAgECAhAMM6tnPejLgA9WVhXroQvSMA0GCSqGSIb3DQEBCwUA
# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE
# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz
# ODQgMjAyMSBDQTEwHhcNMjYwMTE0MDAwMDAwWhcNMjcwMTEzMjM1OTU5WjBfMQsw
# CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV
# BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuXYolNHqlh6smLTE592waXheZ
# 8VHzxeds4pMaepGuwmjf8d1jG9wUNuJX9/qb0a1dgGz5D/EAz5NRTIin4SZYQEE8
# qvdl2yQJ5uWxXIjsFbrOyc1fWscUXw0Kt7OPLOafcEkdDoe8K0tO4h2GL3RWRzjp
# uLfQhhnAmD6NT1l+ughnfmarV/ODgIn/RFR4YORlu4YP2xQX6KRxeTDslg7F+z6X
# +t87/U8m8gQ9XTm5kBmteP4GcE/ytnyI+ScIxNRybzGomWIBm848XDE5yYhlYQ2R
# SnCoo6M4CRqp9WFGVyoLkoPP0OlxzryKWaE1/nuPbYG/kf/rUB1OhqxvSSGwmNhs
# vkkjsC0Z9H5Jy6heFdoxOu/+ZQksKoP/fMvHxuCCtkIJbV8tk0oT6MQ8EJbgsWDZ
# TKhui1wxW6JIZyBOMPWoZUOouOzo2h5Cz7LBPKME5FkcUzcs47lpRlDkJco4PLcj
# wJSo4XPnx3G/2DIjNEFNyfKCWfH8uW6nJjmDBiveFZ2j0YvgdQ+7MOjQnw7R/MAD
# DTagrKl3rLV60+X2TY6/onKhCUuU3pMAjVbOwZ3PkzDLZnsEGRfm6hgp6014aXml
# t8h4nu+uC41U8vUSGHl0vqKuzvmShLmnI+Iv0l95pmnqomuCZzRDrjEoaLPx7OxL
# Dy/Id9E7yQDip4jBdQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R
# hvv+YXsIiGX0TkIwHQYDVR0OBBYEFN30sVU+fpfQQfPQWMhkO1qd+MxoMD4GA1Ud
# IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl
# cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw
# gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp
# Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j
# cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0
# ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF
# BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
# MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ
# BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA77T42YiOx5wWPItgo+kvB+Gzb
# ZFCRHRFfTAZZNQt9o/0CqNmyA2xFklX4t5Z9VNdiIOx14AnmJdQkcRdk3vsU5gby
# jKEup7LTWtvcWrl6hQwGNt3l892BgUbPKsPBE+AriktVqn5yMSXVVzeboqsqAG8e
# Syei0B54/QdgR4whfHvQ/qpCACsJTlJgAykXVgDPJNKnQ7wc17loLQutqF1JUcbO
# XKWt1AA9Zas5q30LDZzZeK4B56yojK68CTQXN7toSRFIuZDMKKDfIZpCX8cmbaaO
# DFOOu44/QWMv+Xc6+ISYGkrTTzqWhOqiXgLVBeXGn/WrOJJ8R29mZMneCpBesCLs
# YII1gCFOo7Vt6mvOKxAPQ3KhJYBFEHkp+GI65koaQkO2xv50iLS0+/j2YC66uviU
# MFe0JEOdXuE7Rn/OmWNSzQ+6kPNYDJQASQ974C3wUejJoMtGZEzoTbly/HufQTrd
# rhcL2aC69CxSN+idTXPLC9UT3xo4sFdOw+hXkmbXtoB1GDsd5p1TWFgRbnTXDkbM
# YMBWYVB6/Tk1bzwj4iTp4g0YrtB628FXPX/ko+JWZlv0Ea865S23w1uGlnDNVxIi
# +8oi74G5DM66Q6ENt6+3WoRGRrdoyE6uCh1haY+oPYSgumb0ozzrp8tw89TRKVrK
# KSXGBxlExEvjQ6dYwjGCGqowghqmAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV
# BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0
# IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDDOrZz3oy4AP
# VlYV66EL0jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh
# AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM
# BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCBkoxQDl7FhN5NYfSjPFfiGIJie
# 3gyTnRmflvIDv45RvzANBgkqhkiG9w0BAQEFAASCAgAi5751Ee9Nsux8Az11f9Rx
# X87YuVC3obd5bc829MjyayywF6s8BNEYe/wUbtvvP2zc85j+4M9/pIcNgBKyIpFc
# kCduumo1I4+QyoRXdnUaVPwK4F6rU/1tr36OUR/c8SQk4K9PZ350SnM8xd5y87sF
# wLQb7+o9oCR3U5zMIvOCzn3DBjTsVcuR/44hluU+U1N/A6rJDyBpgfo6/wkJLGFJ
# 4lE323vlewG2yCdRlht6AM+bTor7kbELSIBQ5kxs9I2hy5t78dzEPD10AeuP1KyG
# zkyVw7pviYVIi+cevjZA/GVkcqMJY+3eanVQ58vo8jbb/BKr5NnNXRzyMzyChClU
# ZMmlv16JqAr9BvV1rqRzetC2eZw8ht6I4O5YMzmvWxZDsTGbw4bmd6J5Vzag1Uxy
# 4rOW4LdKZV0ueWFDx8sI9QHJaQKPtAzhstoYQhYkXDXJdc+19E8mH1U8QcFG0iV1
# amCXQZpnVtm7eXVKsvNX///Z095STePrbsyAhCTPWv64dfgKjCq1Dv4NtysbQYDN
# f4mxqE8tRNS6XuvzJ/d1vpxv9eXKwM1Nn/zO+2R/iNdZMWds3x9sNgQX2fVBBaET
# WlXtFWS17ymxhWUt0bzYyPjGuLfZ20fjdexTTzUHBQ12A4ya2cAOoWJWj9/fF5Fz
# G/EAWU63gYndE6JA6psrFKGCF3cwghdzBgorBgEEAYI3AwMBMYIXYzCCF18GCSqG
# SIb3DQEHAqCCF1AwghdMAgEDMQ8wDQYJYIZIAWUDBAIBBQAweAYLKoZIhvcNAQkQ
# AQSgaQRnMGUCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCDMyebz5UDd
# OTnlRnMoGVj7XGyVz/jskCezBCguix78LQIRALl+F0TjTQaKYpO+RfljwK8YDzIw
# MjYxMDA4MTkxNDIyWqCCEzowggbtMIIE1aADAgECAhAIT9wzT35FTtvDD4/5khg1
# MA0GCSqGSIb3DQEBCwUAMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2Vy
# dCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBp
# bmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwHhcNMjYwODA1MDAwMDAwWhcNMzcx
# MTA0MjM1OTU5WjBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIElu
# Yy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFNIQTI1NiBSU0E0MDk2IFRpbWVzdGFtcCBS
# ZXNwb25kZXIgMjAyNiAxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
# tnum8sn+zUr41JtMZbP9OMYw+HwJDpG5xkIu/lqcfNYmMX81YmsUiHLbh9ykpeWB
# GKTLhYBrAN9Tdg/QEzG32XcObmgIblnr0CoQ3WSAeDZ6nH6X6VkFyYkJw3QBJREw
# vm4UhLzSxmwPA7cFKRTEOMsmEEj6qJk/dqLEAL+oQYuOwE2UuiX1Vnul8YReIyWd
# 4kgLn9gq6LNXM0UplkR6jL/QHxmb6fMoGBJYbnaUI7XD6cKDpekK2SVMld4iDbze
# HDtOaaxldH5IxuNusQ69nd8/ZXEiB5Hbxj3RlK13cX1W4DlFXKdv/CEhM8Cj1vvl
# mvhNroyPdRGbbpBlgyf8Wdu5N6ByhFwURn0U6ozlPoxN22v+fviUhP+6DR547OZn
# pBMWDfei1f5sVGwiiW/KQTWOK97g+4RJpPzPNV4VYMAwO2jM2Aty2QYPVmOQTJm0
# msuXnJrSbl2gf9JylpkJlWXqk1Q4LJsxz+TELoQCZIljbgvTJgoPU2R12ydv8i1U
# qL/adelA0y7U9Pmmtbze9Xx3rtajC5SzQd1jgfwAwsa90v9YcSPdmeoyoBBA/27c
# CL237l5DTYYPDLQ4ON3OLTGWnvRb6jDrf/T75gMRfUzSLCBQfBusm9+mSWRlC/Df
# 6S/e9Q8i13CuhzOT2Jx+V/nlbXM4QoBwlUAhelwwJT0CAwEAAaOCAZUwggGRMAwG
# A1UdEwEB/wQCMAAwHQYDVR0OBBYEFBTJY4owLtRK+26U8+bjQH717M3iMB8GA1Ud
# IwQYMBaAFO9vU0rp5AZ8esrikFb2L9RJ7MtOMA4GA1UdDwEB/wQEAwIHgDAWBgNV
# HSUBAf8EDDAKBggrBgEFBQcDCDCBlQYIKwYBBQUHAQEEgYgwgYUwJAYIKwYBBQUH
# MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBdBggrBgEFBQcwAoZRaHR0cDov
# L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1w
# aW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3J0MF8GA1UdHwRYMFYwVKBSoFCGTmh0
# dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFRpbWVTdGFt
# cGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNybDAgBgNVHSAEGTAXMAgGBmeBDAEE
# AjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQELBQADggIBAI3FOmEenVIK35msCYB+
# fShAsWvSYvLBItoNdAgQ2jIqrGsVsluXMJU/+mRebBc52s6lbKAvOVPXaizmKkML
# LflEEKDZQx4CkS2t8aHPjkXha3hYZ010htFa3dhNgmalH5vuWvh3tTCf4frTS7gP
# tGc4Z/xaPhQ2AB1mR8eEe/WbH0RWHvVIl6VwQ3+g5FKNfN2N/DWJkf13w2H+2Gfq
# Efbd35Ww8CvoYBjLNIDTadcPWdgsjsiOaK/7EsKJgLjUNIVgvcaFOLLQ/GlrA+0Z
# HJoFUbOr5SJN8zykPspXIXlpDJY/gqFUZRROeab9GVgmhbdOJcD/63RhxPahFUGb
# ckRONqMe6DYAv6/mOG0pWd3cPStsdcS7buj5DyniwRY8yooMH6ptx5vpP/pZzBPB
# eZD2U4IsthyxB5Jaa8qrOkB5z160TXiM5ADMspZ0TfD9MJoq0tFpFPssKRFhWeED
# YPvcUuN7U7lvcdHl4ezQ3NT/7Ffs1sR1yh/LRbdZ3B3Vc6q2WmD8mDC0p9kzl2o7
# 3iVtS946IkEj7FkRsZGww1teYxERROC745xrtjvcw9ZyyUjHZWGRIpJeMNsPquCD
# f0fkyHtB+J4AiNZqCQk23rxh+KbpyMTNVKItJ5l92Svl20U9NbqMBOVYl1h54NEY
# LJq1/xHWFKPNK903zJZA9P2DMIIGtDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJ
# hjANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNl
# cnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdp
# Q2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1
# OTU5WjBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/
# BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYg
# U0hBMjU2IDIwMjUgQ0ExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
# tHgx0wqYQXK+PEbAHKx126NGaHS0URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkb
# sDpz4aH+qbxeLho8I6jY3xL1IusLopuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+
# AbdJgMQB3h2DZ0Mal5kYp77jYMVQXSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAkt
# VJMQbzIBHYJBYgzWIjk8eDrYhXDEpKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3
# Gmq6bNMI1I7Gb5IBZK4ivbVCiZv7PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv8
# 2wnJRfN20VRS3hpLgIR4hjzL0hpoYGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638Z
# xqU14lDnki7CcoKCz6eum5A19WZQHkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7V
# vwDDjAmSFTUms+wV/FbWBqi7fTJnjq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2N
# L+cnT6Toy+rN+nM8M7LnLqCrO2JP3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTK
# IsDq1BtmXUqEG1NqzJKS4kOmxkYp2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUoz
# ZtqgPrHRVHhGNKlYzyjlroPxul+bgIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIG
# A1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtO
# MB8GA1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIB
# hjATBgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUH
# MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDov
# L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQw
# QwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD
# ZXJ0VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZI
# AYb9bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N
# 0IfFiBowf0/Dm1wGc/Do7oVMY2mhXZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7J
# d2E4/iEIUBO41P5F448rSYJ59Ib61eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1j
# EMK/DMm/axFSgoR8n6c3nuZB9BfBwAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdog
# P8HRtrYfctSLANEBfHU16r3J05qX3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMv
# NYY2o1f4MXRJDMdTSlOLh0HCn2cQLwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBld
# NE2K9i697cvaiIo2p61Ed2p8xMJb82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjT
# Y6hc3hsXMrS+U0yy+GWqAXam4ToWd2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/B
# dHLiRu7hAWE6bTEm4XYRkA6Tl4KSFLFk43esaUeqGkH/wyW4N7OigizwJWeukcyI
# PbAvjSabnf7+Pu0VrFgoiovRDiyx3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8
# dC3JE3rYkrhLULy7Dc90G6e8BlqmyIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2j
# NrbM1pD2T7m3XDCCBY0wggR1oAMCAQICEA6bGI750C3n79tQ4ghAGFowDQYJKoZI
# hvcNAQEMBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZ
# MBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNz
# dXJlZCBJRCBSb290IENBMB4XDTIyMDgwMTAwMDAwMFoXDTMxMTEwOTIzNTk1OVow
# YjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQ
# d3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290
# IEc0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv+aQc2jeu+RdSjww
# IjBpM+zCpyUuySE98orYWcLhKac9WKt2ms2uexuEDcQwH/MbpDgW61bGl20dq7J5
# 8soR0uRf1gU8Ug9SH8aeFaV+vp+pVxZZVXKvaJNwwrK6dZlqczKU0RBEEC7fgvMH
# hOZ0O21x4i0MG+4g1ckgHWMpLc7sXk7Ik/ghYZs06wXGXuxbGrzryc/NrDRAX7F6
# Zu53yEioZldXn1RYjgwrt0+nMNlW7sp7XeOtyU9e5TXnMcvak17cjo+A2raRmECQ
# ecN4x7axxLVqGDgDEI3Y1DekLgV9iPWCPhCRcKtVgkEy19sEcypukQF8IUzUvK4b
# A3VdeGbZOjFEmjNAvwjXWkmkwuapoGfdpCe8oU85tRFYF/ckXEaPZPfBaYh2mHY9
# WV1CdoeJl2l6SPDgohIbZpp0yt5LHucOY67m1O+SkjqePdwA5EUlibaaRBkrfsCU
# tNJhbesz2cXfSwQAzH0clcOP9yGyshG3u3/y1YxwLEFgqrFjGESVGnZifvaAsPvo
# ZKYz0YkH4b235kOkGLimdwHhD5QMIR2yVCkliWzlDlJRR3S+Jqy2QXXeeqxfjT/J
# vNNBERJb5RBQ6zHFynIWIgnffEx1P2PsIV/EIFFrb7GrhotPwtZFX50g/KEexcCP
# orF+CiaZ9eRpL5gdLfXZqbId5RsCAwEAAaOCATowggE2MA8GA1UdEwEB/wQFMAMB
# Af8wHQYDVR0OBBYEFOzX44LScV1kTN8uZz/nupiuHA9PMB8GA1UdIwQYMBaAFEXr
# oq/0ksuCMS1Ri6enIZ3zbcgPMA4GA1UdDwEB/wQEAwIBhjB5BggrBgEFBQcBAQRt
# MGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEF
# BQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJl
# ZElEUm9vdENBLmNydDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdp
# Y2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMBEGA1UdIAQKMAgw
# BgYEVR0gADANBgkqhkiG9w0BAQwFAAOCAQEAcKC/Q1xV5zhfoKN0Gz22Ftf3v1cH
# vZqsoYcs7IVeqRq7IviHGmlUIu2kiHdtvRoU9BNKei8ttzjv9P+Aufih9/Jy3iS8
# UgPITtAq3votVs/59PesMHqai7Je1M/RQ0SbQyHrlnKhSLSZy51PpwYDE3cnRNTn
# f+hZqPC/Lwum6fI0POz3A8eHqNJMQBk1RmppVLC4oVaO7KTVPeix3P0c2PR3WlxU
# jG/voVA9/HYJaISfb8rbII01YBwCA8sgsKxYoA5AY8WYIsGyWfVVa88nq2x2zm8j
# LfR+cWojayL/ErhULSd+2DrZ8LaHlv1b0VysGMNNn3O3AamfV6peKOK5lDGCA3ww
# ggN4AgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMu
# MUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0
# MDk2IFNIQTI1NiAyMDI1IENBMQIQCE/cM09+RU7bww+P+ZIYNTANBglghkgBZQME
# AgEFAKCB0TAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkF
# MQ8XDTI2MTAwODE5MTQyMlowKwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQUUdmr2gNJ
# c9hPQmaspIJI5rNpxDkwLwYJKoZIhvcNAQkEMSIEIPd/XEuEt7esC/almUQNDGl3
# qPpbOcgNEYr/jCtp5lpEMDcGCyqGSIb3DQEJEAIvMSgwJjAkMCIEIC2gnaf0Ex+f
# 5y22xebpyWVnVa8EPx6nQswNISDhQev8MA0GCSqGSIb3DQEBAQUABIICAAfrSCJb
# 3EuhBN+fe6YbmNwXpcldG7Dg6gOQnFirifzSNLupTP5UFtqGl2q0hVPnCCWy0ACn
# dCCaGZuCqixa2TN5fVdWyJuIbDqWMCwmoJXtjRpOXQMqR4nJXA3H/M3zyge/Yj9H
# AB1JGTq/9CL9AC2KHncf7xa70A9hUzy+6+TI0+4IvpdLRvDt7YdqnZpTt7qO7kZ2
# OGCxe+qSNVJsYXsQ/69tbCZewcJQx476dlyZSPWBR96WvrPUF2Zb8/FdjwH3XTYN
# wBhbDL+eRtZTlVUVm61rJD3QNGw7Q6u+zYf6siOwSmP8CoQOoDDDRPn8lVr0oooV
# AcZQ+0/yx3q83r2y4XA9f4L4/mm5nqKeY/pe/ELU6XgNNWgSCij91k7yXDBhTzt3
# RPO5qHqizzBOVZ6fU9Dt9Ah+XaOKkdPtL0XBmzB4TPknDtocbXFtQN3eV0MHiIJb
# bsenhjL/X6YO98X89ITbQyjDa5Rb00evrPZ88nGLVM5uDehBV9Vs7tQ9jlFm8nzV
# BkS1uYixjm0NQ5U3KtJK+DbSPdprDRHL+AeAjYv9nc3TKFpo9W8beu574f8l5QKY
# UBrUd8kFxef5uuyZqaWQSjXyT/nnIxUnBG0SGcPwnbxr87zj7vEfVIsgovb4iO2W
# +5Ysd19E6ACHVCFMhZb5klYqy6iibVMmLpxY
# SIG # End signature block