ScubaGear

2.0.0-rc1

Testing/Unit/PowerShell/Permissions/ScubaGearApiCatalog.Tests.ps1

                                BeforeDiscovery {

    $ModuleRootPath = Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules/Permissions' -Resolve

    Import-Module (Join-Path -Path $ModuleRootPath -ChildPath 'PermissionsHelper.psm1') -Force

    $CatalogFile = Join-Path -Path $PSScriptRoot -ChildPath '../../../../schemas/ScubaGearApiCatalog.json' -Resolve

    $CatalogEntries = @((Get-Content -Path $CatalogFile -Raw | ConvertFrom-Json) | ForEach-Object { $_ })

    $script:RestHelperCases = @(

        $CatalogEntries |

            Where-Object { $_.entryType -eq 'restHelper' } |

            ForEach-Object { @{ FunctionName = $_.functionName; Entry = $_ } }

    )

    $script:ProductCases = 'aad', 'exo', 'securitysuite', 'teams', 'sharepoint', 'powerplatform' | ForEach-Object { @{ Product = $_ } }

    # --- Scan production module code so removing a catalog entry that code still calls fails a test. ---

    $ModulesRoot = Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules' -Resolve

    $CodeFiles = Get-ChildItem -Path $ModulesRoot -Include '*.psm1', '*.ps1' -Recurse -File

    $GraphCmdletRefs = [System.Collections.Generic.List[string]]::new()

    $RestHelperRefs = [System.Collections.Generic.List[string]]::new()

    foreach ($File in $CodeFiles) {

        $Text = Get-Content -Path $File.FullName -Raw

        # Graph cmdlets invoked via Invoke-GraphDirectly -Commandlet X (X optionally quoted; $variables are skipped).

        foreach ($m in [regex]::Matches($Text, '-Commandlet\s+["'']?([A-Za-z][A-Za-z0-9-]+)')) { $GraphCmdletRefs.Add($m.Groups[1].Value) }

        # Graph cmdlets resolved directly via Get-ScubaGearGraphEndpoint / Get-ScubaGearApiHeader -CmdletName X.

        foreach ($m in [regex]::Matches($Text, 'Get-ScubaGear(?:GraphEndpoint|ApiHeader)\s+-CmdletName\s+["'']?([A-Za-z][A-Za-z0-9-]+)')) { $GraphCmdletRefs.Add($m.Groups[1].Value) }

        # REST helper functions resolved via Get-ScubaGearRestEndpoint -FunctionName 'X'.

        foreach ($m in [regex]::Matches($Text, "Get-ScubaGearRestEndpoint\s+-FunctionName\s+'([^']+)'")) { $RestHelperRefs.Add($m.Groups[1].Value) }

    }

    $script:GraphCmdletCases = @($GraphCmdletRefs | Sort-Object -Unique | ForEach-Object { @{ Cmdlet = $_ } })

    $script:RestHelperRefCases = @($RestHelperRefs | Sort-Object -Unique | ForEach-Object { @{ FunctionName = $_ } })

}

# The catalog is a single uniform array. Every entry has the same 16 keys and an entryType of

# graphConnect | graphResource | restBase | restHelper. Get-ScubaGearPermissions (and the dedicated

# Get-ScubaGear* lookup functions) read every entry except restHelper; Get-ScubaGearRestEndpoint reads

# only restHelper entries.

Describe -Tag 'PermissionsHelper' -Name 'ScubaGearApiCatalog.json structure' {

    BeforeAll {

        $CatalogFile = Join-Path -Path $PSScriptRoot -ChildPath '../../../../schemas/ScubaGearApiCatalog.json' -Resolve

        $script:Catalog = @((Get-Content -Path $CatalogFile -Raw | ConvertFrom-Json) | ForEach-Object { $_ })

        $script:ExpectedKeys = @(

            'functionName', 'entryType', 'scubaGearProduct', 'supportedEnv', 'endpointPath', 'parameters',

            'apiFilter', 'apiHeader', 'leastPermissions', 'higherPermissions', 'spRolePermissions',

            'resourceAPIAppId', 'oauthScope', 'poshModule', 'supportLinks', 'notes'

        )

        $script:ValidTypes = @('graphConnect', 'graphResource', 'restBase', 'restHelper')

    }

    It 'parses as a JSON array' {

        $script:Catalog.Count | Should -BeGreaterThan 0

    }

    It 'gives every entry the same 16 keys' {

        $Bad = $script:Catalog | Where-Object {

            $Keys = $_.PSObject.Properties.Name

            $null -ne (Compare-Object -ReferenceObject $script:ExpectedKeys -DifferenceObject $Keys)

        }

        $Bad | Should -BeNullOrEmpty

    }

    It 'gives every entry a non-empty functionName and a valid entryType' {

        $Bad = $script:Catalog | Where-Object {

            [string]::IsNullOrWhiteSpace($_.functionName) -or ($script:ValidTypes -notcontains $_.entryType)

        }

        $Bad | Should -BeNullOrEmpty

    }

    It 'has at least one entry of each entryType' {

        foreach ($Type in $script:ValidTypes) {

            @($script:Catalog | Where-Object { $_.entryType -eq $Type }).Count | Should -BeGreaterThan 0 -Because "entryType '$Type' should exist"

        }

    }

    It 'contains the pinned number of entries per entryType (update deliberately when adding/removing an API)' {

        $ByType = @{}

        $script:Catalog | Group-Object entryType | ForEach-Object { $ByType[$_.Name] = $_.Count }

        $ByType['graphConnect']  | Should -Be 3  -Because 'Connect-MgGraph base URL, one per environment grouping'

        $ByType['graphResource'] | Should -Be 45 -Because 'one Graph cmdlet resource record each'

        $ByType['restBase']      | Should -Be 19 -Because 'per-product REST API host records across environments'

        $ByType['restHelper']    | Should -Be 12 -Because 'provider REST helper functions with a fixed path'

        $script:Catalog.Count    | Should -Be 79 -Because 'total catalog size; change this only when intentionally adding or removing an API'

    }

    It 'has a unique functionName for every graphResource (exactly one entry per Graph cmdlet)' {

        $GraphResource = @($script:Catalog | Where-Object { $_.entryType -eq 'graphResource' } | ForEach-Object { $_.functionName })

        ($GraphResource | Group-Object | Where-Object Count -gt 1 | ForEach-Object Name) | Should -BeNullOrEmpty -Because 'a cmdlet resolving to two different entries is ambiguous'

        $GraphResource.Count | Should -Be (@($GraphResource | Sort-Object -Unique).Count)

    }

    It 'has no duplicate restHelper functionName (Get-ScubaGearRestEndpoint resolves by functionName)' {

        $Names = $script:Catalog | Where-Object { $_.entryType -eq 'restHelper' } | ForEach-Object { $_.functionName }

        ($Names | Group-Object | Where-Object Count -gt 1 | ForEach-Object Name) | Should -BeNullOrEmpty

    }

    It 'gives every restHelper a fixed endpointPath beginning with /' {

        $Bad = $script:Catalog | Where-Object { $_.entryType -eq 'restHelper' -and ($_.endpointPath -notlike '/*') }

        $Bad | Should -BeNullOrEmpty

    }

}

Describe -Tag 'PermissionsHelper' -Name 'REST helpers resolve and declare their permissions in ScubaGearApiCatalog.json' {

    BeforeAll {

        Import-Module (Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules/Permissions/PermissionsHelper.psm1') -Force

        Import-Module (Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules/Utility/Utility.psm1') -Force

    }

    Context 'Every restHelper endpoint resolves' {

        It 'resolves an endpointPath for <FunctionName>' -ForEach $script:RestHelperCases {

            # Supply any declared placeholders so resolution does not fail on missing path parameters.

            $PathParameters = @{}

            foreach ($Key in @($Entry.parameters)) { if ($Key) { $PathParameters[$Key] = 'value' } }

            $Resolved = if ($PathParameters.Count -gt 0) {

                Get-ScubaGearRestEndpoint -FunctionName $FunctionName -PathParameters $PathParameters

            } else {

                Get-ScubaGearRestEndpoint -FunctionName $FunctionName

            }

            $Resolved | Should -Not -BeNullOrEmpty

            $Resolved | Should -Not -Match '\{.+\}' -Because 'all placeholders should be substituted'

        }

    }

    Context 'REST (restHelper) records do not leak into permission lookups' {

        It 'returns only non-restHelper records for <Product>' -ForEach $script:ProductCases {

            $Records = @(Get-ScubaGearProductRecord -Product $Product)

            $Records.Count | Should -BeGreaterThan 0

            @($Records | Where-Object { $_.entryType -eq 'restHelper' }) | Should -BeNullOrEmpty

        }

    }

}

# Deeper per-field invariants so a malformed or partially-removed entry fails fast.

Describe -Tag 'PermissionsHelper' -Name 'ScubaGearApiCatalog.json schema integrity' {

    BeforeAll {

        $CatalogFile = Join-Path -Path $PSScriptRoot -ChildPath '../../../../schemas/ScubaGearApiCatalog.json' -Resolve

        $script:Catalog = @((Get-Content -Path $CatalogFile -Raw | ConvertFrom-Json) | ForEach-Object { $_ })

        $script:ValidEnvs = @('commercial', 'gcc', 'gcchigh', 'dod')

        $script:KnownProducts = @('aad', 'exo', 'securitysuite', 'teams', 'teamsunified', 'sharepoint', 'powerplatform', 'powerbi', 'scubatank', 'ServicePrincipal')

        $script:ArrayFields = @('scubaGearProduct', 'supportedEnv', 'parameters', 'apiHeader', 'leastPermissions', 'higherPermissions', 'spRolePermissions', 'poshModule', 'supportLinks')

        $script:StringFields = @('functionName', 'entryType', 'endpointPath', 'apiFilter', 'oauthScope')

    }

    It 'uses only known supportedEnv values' {

        $Bad = $script:Catalog | Where-Object { @($_.supportedEnv | Where-Object { $_ -notin $script:ValidEnvs }).Count -gt 0 }

        $Bad | ForEach-Object { $_.functionName } | Should -BeNullOrEmpty

    }

    It 'uses only known scubaGearProduct values' {

        $Bad = $script:Catalog | Where-Object { @($_.scubaGearProduct | Where-Object { $_ -notin $script:KnownProducts }).Count -gt 0 }

        $Bad | ForEach-Object { $_.functionName } | Should -BeNullOrEmpty

    }

    It 'keeps every array-typed field an array' {

        $Bad = foreach ($Entry in $script:Catalog) {

            foreach ($Field in $script:ArrayFields) {

                $Value = $Entry.$Field

                if ($null -ne $Value -and $Value -isnot [array]) { "$($Entry.functionName).$Field" }

            }

        }

        $Bad | Should -BeNullOrEmpty

    }

    It 'keeps every string-typed field a string' {

        $Bad = foreach ($Entry in $script:Catalog) {

            foreach ($Field in $script:StringFields) {

                if ($Entry.$Field -isnot [string]) { "$($Entry.functionName).$Field" }

            }

        }

        $Bad | Should -BeNullOrEmpty

    }

    It 'gives every graphConnect, graphResource and restBase a non-empty endpointPath' {

        $Bad = $script:Catalog |

            Where-Object { $_.entryType -in @('graphConnect', 'graphResource', 'restBase') -and [string]::IsNullOrWhiteSpace($_.endpointPath) }

        $Bad | ForEach-Object { $_.functionName } | Should -BeNullOrEmpty

    }

    It 'gives every restBase a non-empty oauthScope so a token can be minted' {

        $Bad = $script:Catalog | Where-Object { $_.entryType -eq 'restBase' -and [string]::IsNullOrWhiteSpace($_.oauthScope) }

        $Bad | ForEach-Object { $_.functionName } | Should -BeNullOrEmpty

    }

    It "keeps each entry's parameters in sync with the {placeholders} in its endpointPath / apiFilter / oauthScope" {

        $Bad = foreach ($Entry in $script:Catalog) {

            $Text = @($Entry.endpointPath, $Entry.apiFilter, $Entry.oauthScope) -join ' '

            $Found = @([regex]::Matches($Text, '\{([^}]+)\}') | ForEach-Object { $_.Groups[1].Value } | Sort-Object -Unique)

            $Declared = @($Entry.parameters | Sort-Object -Unique)

            if (Compare-Object -ReferenceObject $Found -DifferenceObject $Declared) { $Entry.functionName }

        }

        $Bad | Should -BeNullOrEmpty

    }

}

# Checks and balances: whatever production code calls MUST exist in the catalog, so deleting an entry

# (or adding a new call without a catalog entry) fails here instead of at runtime.

Describe -Tag 'PermissionsHelper' -Name 'ScubaGearApiCatalog.json covers every API production code calls' {

    BeforeAll {

        $CatalogFile = Join-Path -Path $PSScriptRoot -ChildPath '../../../../schemas/ScubaGearApiCatalog.json' -Resolve

        $script:Catalog = @((Get-Content -Path $CatalogFile -Raw | ConvertFrom-Json) | ForEach-Object { $_ })

        # Re-scan at run time (the BeforeDiscovery scan is only in scope for -ForEach generation).

        $ModulesRoot = Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules' -Resolve

        $Graph = [System.Collections.Generic.List[string]]::new()

        $Rest = [System.Collections.Generic.List[string]]::new()

        foreach ($File in (Get-ChildItem -Path $ModulesRoot -Include '*.psm1', '*.ps1' -Recurse -File)) {

            $Text = Get-Content -Path $File.FullName -Raw

            foreach ($m in [regex]::Matches($Text, '-Commandlet\s+["'']?([A-Za-z][A-Za-z0-9-]+)')) { $Graph.Add($m.Groups[1].Value) }

            foreach ($m in [regex]::Matches($Text, 'Get-ScubaGear(?:GraphEndpoint|ApiHeader)\s+-CmdletName\s+["'']?([A-Za-z][A-Za-z0-9-]+)')) { $Graph.Add($m.Groups[1].Value) }

            foreach ($m in [regex]::Matches($Text, "Get-ScubaGearRestEndpoint\s+-FunctionName\s+'([^']+)'")) { $Rest.Add($m.Groups[1].Value) }

        }

        $script:GraphRefCount = @($Graph | Sort-Object -Unique).Count

        $script:RestRefCount = @($Rest | Sort-Object -Unique).Count

    }

    It 'found Graph cmdlet references to validate' {

        $script:GraphRefCount | Should -BeGreaterThan 0

    }

    It 'has a graphConnect/graphResource entry for Graph cmdlet <Cmdlet> that production code invokes' -ForEach $script:GraphCmdletCases {

        @($script:Catalog | Where-Object { $_.functionName -eq $Cmdlet -and $_.entryType -in @('graphConnect', 'graphResource') }).Count |

            Should -BeGreaterThan 0 -Because "production code invokes '$Cmdlet' via Invoke-GraphDirectly/Get-ScubaGearGraphEndpoint"

    }

    It 'found REST helper references to validate' {

        $script:RestRefCount | Should -BeGreaterThan 0

    }

    It 'has a restHelper entry with a fixed path for <FunctionName> that production code requests' -ForEach $script:RestHelperRefCases {

        $Entry = @($script:Catalog | Where-Object { $_.functionName -eq $FunctionName -and $_.entryType -eq 'restHelper' })

        $Entry.Count | Should -BeGreaterThan 0 -Because "production code requests '$FunctionName' via Get-ScubaGearRestEndpoint"

        $Entry[0].endpointPath | Should -Match '^/' -Because 'the catalog must provide a fixed REST path'

    }

}

AfterAll {

    Remove-Module PermissionsHelper -ErrorAction SilentlyContinue

}

# SIG # Begin signature block

# MIIu9gYJKoZIhvcNAQcCoIIu5zCCLuMCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA3z6GRDrDIubgX

# u7gP2udxok3dqNl5d7frB0lZ2sEtyKCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggdXMIIFP6ADAgECAhAMM6tnPejLgA9WVhXroQvSMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjYwMTE0MDAwMDAwWhcNMjcwMTEzMjM1OTU5WjBfMQsw

# CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV

# BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuXYolNHqlh6smLTE592waXheZ

# 8VHzxeds4pMaepGuwmjf8d1jG9wUNuJX9/qb0a1dgGz5D/EAz5NRTIin4SZYQEE8

# qvdl2yQJ5uWxXIjsFbrOyc1fWscUXw0Kt7OPLOafcEkdDoe8K0tO4h2GL3RWRzjp

# uLfQhhnAmD6NT1l+ughnfmarV/ODgIn/RFR4YORlu4YP2xQX6KRxeTDslg7F+z6X

# +t87/U8m8gQ9XTm5kBmteP4GcE/ytnyI+ScIxNRybzGomWIBm848XDE5yYhlYQ2R

# SnCoo6M4CRqp9WFGVyoLkoPP0OlxzryKWaE1/nuPbYG/kf/rUB1OhqxvSSGwmNhs

# vkkjsC0Z9H5Jy6heFdoxOu/+ZQksKoP/fMvHxuCCtkIJbV8tk0oT6MQ8EJbgsWDZ

# TKhui1wxW6JIZyBOMPWoZUOouOzo2h5Cz7LBPKME5FkcUzcs47lpRlDkJco4PLcj

# wJSo4XPnx3G/2DIjNEFNyfKCWfH8uW6nJjmDBiveFZ2j0YvgdQ+7MOjQnw7R/MAD

# DTagrKl3rLV60+X2TY6/onKhCUuU3pMAjVbOwZ3PkzDLZnsEGRfm6hgp6014aXml

# t8h4nu+uC41U8vUSGHl0vqKuzvmShLmnI+Iv0l95pmnqomuCZzRDrjEoaLPx7OxL

# Dy/Id9E7yQDip4jBdQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R

# hvv+YXsIiGX0TkIwHQYDVR0OBBYEFN30sVU+fpfQQfPQWMhkO1qd+MxoMD4GA1Ud

# IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl

# cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw

# gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp

# Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j

# cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0

# ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF

# BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t

# MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ

# BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA77T42YiOx5wWPItgo+kvB+Gzb

# ZFCRHRFfTAZZNQt9o/0CqNmyA2xFklX4t5Z9VNdiIOx14AnmJdQkcRdk3vsU5gby

# jKEup7LTWtvcWrl6hQwGNt3l892BgUbPKsPBE+AriktVqn5yMSXVVzeboqsqAG8e

# Syei0B54/QdgR4whfHvQ/qpCACsJTlJgAykXVgDPJNKnQ7wc17loLQutqF1JUcbO

# XKWt1AA9Zas5q30LDZzZeK4B56yojK68CTQXN7toSRFIuZDMKKDfIZpCX8cmbaaO

# DFOOu44/QWMv+Xc6+ISYGkrTTzqWhOqiXgLVBeXGn/WrOJJ8R29mZMneCpBesCLs

# YII1gCFOo7Vt6mvOKxAPQ3KhJYBFEHkp+GI65koaQkO2xv50iLS0+/j2YC66uviU

# MFe0JEOdXuE7Rn/OmWNSzQ+6kPNYDJQASQ974C3wUejJoMtGZEzoTbly/HufQTrd

# rhcL2aC69CxSN+idTXPLC9UT3xo4sFdOw+hXkmbXtoB1GDsd5p1TWFgRbnTXDkbM

# YMBWYVB6/Tk1bzwj4iTp4g0YrtB628FXPX/ko+JWZlv0Ea865S23w1uGlnDNVxIi

# +8oi74G5DM66Q6ENt6+3WoRGRrdoyE6uCh1haY+oPYSgumb0ozzrp8tw89TRKVrK

# KSXGBxlExEvjQ6dYwjGCGqkwghqlAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV

# BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0

# IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDDOrZz3oy4AP

# VlYV66EL0jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh

# AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM

# BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCBssMI6WBqlUN+XygMjQGCPrxAS

# SLNaxC33YehXf4tFSjANBgkqhkiG9w0BAQEFAASCAgBMqY6DLrhrIMFi9kpGP0o2

# cL0KHCHgTmzQHPmgoSzf72mX5dyqurPA2rV5XI0S3z7RxEv0KsnJu8yBcQi9CWM0

# IR08ynV/Ifn4fb4W3xVykiv/UqE5OzPfazj+lrh1Y36SwfQbZBF3jHpvKGxwc2M8

# fVQgxAt0waxV7CVsUaP8dPw2rZvx+ju372xFmTkfXPUN0G9R6KuoBhPemfAUZOKN

# dJxHUm/TqInRiIyLJYKlx38bjHZfjglDpmQTBOPSqCc9XaejES5YdtuosnkpSgbX

# qhvMd6rSKp8I+Fa1ssZSY/rWI2WRTkzjPgQS/QLKefGCW2NJJWcckCRI+WSQS2nt

# k4skhh91hLqDmUyRTgYJKkAc2Y/od4RlRyFdP0mVRER3ZYZdJThDGRANJBbJMzYO

# kSPJwaRdcWPC4VwkFsMqWTxtKDX/n/Kzs7q+ri9Dx7djC0wU1XK8oGmD8gUR2LEu

# Z6lmM4Sy8D/A5soJz8a1VELenAkiLKUkiROb/sMFAMNrCd5YaXPPBm6FI4fmfZVS

# SAMishhHNNNNbFnvsh3QAupD6GMY7oqaJ7Hh1LLc4nSlEeOBcrUfQUjNWEC8xhA9

# vX660aJNdHv3Wz7VSLHy5378syeimAoplsxp+ahfcLmuabWKu3x4Qi8bGz58BNoF

# 5z0oImPzG49/FawG1XgxEKGCF3YwghdyBgorBgEEAYI3AwMBMYIXYjCCF14GCSqG

# SIb3DQEHAqCCF08wghdLAgEDMQ8wDQYJYIZIAWUDBAIBBQAwdwYLKoZIhvcNAQkQ

# AQSgaARmMGQCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCDbMUnWWyDv

# 8OFLkKIbMC5xdVq/hDxrVVdK4jzg32/PWAIQCICTx//YGo4U3uR5l+UyJBgPMjAy

# NjEwMDgxOTE0MjRaoIITOjCCBu0wggTVoAMCAQICEAhP3DNPfkVO28MPj/mSGDUw

# DQYJKoZIhvcNAQELBQAwaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0

# LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGlu

# ZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMTAeFw0yNjA4MDUwMDAwMDBaFw0zNzEx

# MDQyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5j

# LjE7MDkGA1UEAxMyRGlnaUNlcnQgU0hBMjU2IFJTQTQwOTYgVGltZXN0YW1wIFJl

# c3BvbmRlciAyMDI2IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2

# e6byyf7NSvjUm0xls/04xjD4fAkOkbnGQi7+Wpx81iYxfzViaxSIctuH3KSl5YEY

# pMuFgGsA31N2D9ATMbfZdw5uaAhuWevQKhDdZIB4NnqcfpfpWQXJiQnDdAElETC+

# bhSEvNLGbA8DtwUpFMQ4yyYQSPqomT92osQAv6hBi47ATZS6JfVWe6XxhF4jJZ3i

# SAuf2Cros1czRSmWRHqMv9AfGZvp8ygYElhudpQjtcPpwoOl6QrZJUyV3iINvN4c

# O05prGV0fkjG426xDr2d3z9lcSIHkdvGPdGUrXdxfVbgOUVcp2/8ISEzwKPW++Wa

# +E2ujI91EZtukGWDJ/xZ27k3oHKEXBRGfRTqjOU+jE3ba/5++JSE/7oNHnjs5mek

# ExYN96LV/mxUbCKJb8pBNY4r3uD7hEmk/M81XhVgwDA7aMzYC3LZBg9WY5BMmbSa

# y5ecmtJuXaB/0nKWmQmVZeqTVDgsmzHP5MQuhAJkiWNuC9MmCg9TZHXbJ2/yLVSo

# v9p16UDTLtT0+aa1vN71fHeu1qMLlLNB3WOB/ADCxr3S/1hxI92Z6jKgEED/btwI

# vbfuXkNNhg8MtDg43c4tMZae9FvqMOt/9PvmAxF9TNIsIFB8G6yb36ZJZGUL8N/p

# L971DyLXcK6HM5PYnH5X+eVtczhCgHCVQCF6XDAlPQIDAQABo4IBlTCCAZEwDAYD

# VR0TAQH/BAIwADAdBgNVHQ4EFgQUFMljijAu1Er7bpTz5uNAfvXszeIwHwYDVR0j

# BBgwFoAU729TSunkBnx6yuKQVvYv1Ensy04wDgYDVR0PAQH/BAQDAgeAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMIGVBggrBgEFBQcBAQSBiDCBhTAkBggrBgEFBQcw

# AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMF0GCCsGAQUFBzAChlFodHRwOi8v

# Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBp

# bmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5jcnQwXwYDVR0fBFgwVjBUoFKgUIZOaHR0

# cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1w

# aW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQC

# MAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsFAAOCAgEAjcU6YR6dUgrfmawJgH59

# KECxa9Ji8sEi2g10CBDaMiqsaxWyW5cwlT/6ZF5sFznazqVsoC85U9dqLOYqQwst

# +UQQoNlDHgKRLa3xoc+OReFreFhnTXSG0Vrd2E2CZqUfm+5a+He1MJ/h+tNLuA+0

# Zzhn/Fo+FDYAHWZHx4R79ZsfRFYe9UiXpXBDf6DkUo183Y38NYmR/XfDYf7YZ+oR

# 9t3flbDwK+hgGMs0gNNp1w9Z2CyOyI5or/sSwomAuNQ0hWC9xoU4stD8aWsD7Rkc

# mgVRs6vlIk3zPKQ+ylcheWkMlj+CoVRlFE55pv0ZWCaFt04lwP/rdGHE9qEVQZty

# RE42ox7oNgC/r+Y4bSlZ3dw9K2x1xLtu6PkPKeLBFjzKigwfqm3Hm+k/+lnME8F5

# kPZTgiy2HLEHklpryqs6QHnPXrRNeIzkAMyylnRN8P0wmirS0WkU+ywpEWFZ4QNg

# +9xS43tTuW9x0eXh7NDc1P/sV+zWxHXKH8tFt1ncHdVzqrZaYPyYMLSn2TOXajve

# JW1L3joiQSPsWRGxkbDDW15jERFE4LvjnGu2O9zD1nLJSMdlYZEikl4w2w+q4IN/

# R+TIe0H4ngCI1moJCTbevGH4punIxM1Uoi0nmX3ZK+XbRT01uowE5ViXWHng0Rgs

# mrX/EdYUo80r3TfMlkD0/YMwgga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmG

# MA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5

# NTlaMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8G

# A1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBT

# SEEyNTYgMjAyNSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0

# eDHTCphBcr48RsAcrHXbo0ZodLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+Ruw

# OnPhof6pvF4uGjwjqNjfEvUi6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4B

# t0mAxAHeHYNnQxqXmRinvuNgxVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1U

# kxBvMgEdgkFiDNYiOTx4OtiFcMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTca

# arps0wjUjsZvkgFkriK9tUKJm/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zb

# CclF83bRVFLeGkuAhHiGPMvSGmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnG

# pTXiUOeSLsJygoLPp66bkDX1ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/

# AMOMCZIVNSaz7BX8VtYGqLt9MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v

# 5ydPpOjL6s36czwzsucuoKs7Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoi

# wOrUG2ZdSoQbU2rMkpLiQ6bGRinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm

# 2qA+sdFUeEY0qVjPKOWug/G6X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYD

# VR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04w

# HwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGG

# MBMGA1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcw

# AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8v

# Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBD

# BgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgB

# hv1sBwEwDQYJKoZIhvcNAQELBQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Q

# h8WIGjB/T8ObXAZz8OjuhUxjaaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3

# YTj+IQhQE7jU/kXjjytJgnn0hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQ

# wr8Myb9rEVKChHyfpzee5kH0F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/

# wdG2th9y1IsA0QF8dTXqvcnTmpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81

# hjajV/gxdEkMx1NKU4uHQcKfZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00

# TYr2Lr3ty9qIijanrUR3anzEwlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNj

# qFzeGxcytL5TTLL4ZaoBdqbhOhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0

# cuJG7uEBYTptMSbhdhGQDpOXgpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9

# sC+NJpud/v4+7RWsWCiKi9EOLLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0

# LckTetiSuEtQvLsNz3Qbp7wGWqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2

# tszWkPZPubdcMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG

# 9w0BAQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw

# FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1

# cmVkIElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBi

# MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3

# d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg

# RzQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAi

# MGkz7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnny

# yhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE

# 5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm

# 7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5

# w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsD

# dV14Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1Z

# XUJ2h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS0

# 0mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hk

# pjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m8

# 00ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+i

# sX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB

# /zAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReui

# r/SSy4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0w

# azAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUF

# BzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk

# SURSb290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2lj

# ZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAG

# BgRVHSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9

# mqyhhyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxS

# A8hO0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/

# 6Fmo8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSM

# b++hUD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt

# 9H5xaiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDfDCC

# A3gCAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x

# QTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQw

# OTYgU0hBMjU2IDIwMjUgQ0ExAhAIT9wzT35FTtvDD4/5khg1MA0GCWCGSAFlAwQC

# AQUAoIHRMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUx

# DxcNMjYxMDA4MTkxNDI0WjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRR2avaA0lz

# 2E9CZqykgkjms2nEOTAvBgkqhkiG9w0BCQQxIgQg4V3OyoiF0ZVY/z/KZmCcHXZG

# ZRqS5rqdLXnjHx8yV8cwNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQgLaCdp/QTH5/n

# LbbF5unJZWdVrwQ/HqdCzA0hIOFB6/wwDQYJKoZIhvcNAQEBBQAEggIATN2dYQ6r

# yfLWzqXjlGoo7EZuilcI5/GeHVz5g+aMf+dYTVn49f5UZZ6XBaxWisv76pezLG7v

# 3fM1Lt+OKjgICPawgVT5jg27vwaOgPwgOyEZbMi9yGoRiVjI0zxEY9QBzPnaUe7P

# yDOP30zLdPNeSnDgWT6KY4sc2aegwGcAigMLJVbSGY3svPObIAZqsvPApaLAdrlV

# ibZPgti5/dytuKJw/ipv4StYmnyA5pNTf0iUEtaQX8HXP+9avKQy0nue+lwWHwBb

# Mwh38NsifQttXe19296mTWFA3NYdrpsgp+lFnpmLDd8W2dcy52UMFsfut1L6z6d/

# 3UaEocq2zJDnUSpaEqO9Pitf/jA5QcA+bsjnYwa0Z6CcchLwRU6pT110oJs8o/4C

# VNaHTzH9+NrVfHqLaLk4i6SNcyqfx+1t+uP+2TKmGJTD5r4UhHkbkmO67Q+HUmwo

# v2TPNmF1ncf0ECddiMccdTtqq5VZMOSSWuuHdw0tbWiEUiydYKle1kV7Hba6Edzv

# HbC2/pUEiztjZfXsySNFFnmNExalUxXc0KWWcmG4j9pgkJmliUa8VvlLF/0fDE80

# gpwV1RcipQMcmfx2w1A3mdOhn+hLIpfqZAKhsKyVp7DOOJ5meeVeZ6XCPke5qiIJ

# rBTVg4oGM7SjZlFBd7gtBkCSQ4HKuYseHs4=

# SIG # End signature block