Testing/Unit/PowerShell/ScubaConfigApp/ScubaConfigAnalyzerTenantGovernance.Tests.ps1

Describe -Tag 'Analyzer' -Name 'ScubaConfigAnalyzer tenant governance configuration' {
    BeforeAll {
        $scubaGearRoot = (Resolve-Path "$PSScriptRoot\..\..\..\..").Path
        $configAppRoot = Join-Path $scubaGearRoot 'Modules\ScubaConfigApp'
        $helperPath = Join-Path $configAppRoot 'ScubaConfigAnalyzerHelpers\ScubaConfigAnalyzerTenantGovernanceHelper.psm1'
        $controlPath = Join-Path $configAppRoot 'ScubaConfigAnalyzer_Control_en-US.json'
        $xamlPath = Join-Path $configAppRoot 'ScubaConfigAppResources\ScubaConfigAnalyzerUI.xaml'
        $policyStubPath = Join-Path $scubaGearRoot 'Testing\Unit\PowerShell\CreateReport\CreateReportStubs\ProviderSettingsExport.json'

        Import-Module $helperPath -Force
        $control = Get-Content $controlPath -Raw | ConvertFrom-Json
        # $script: scope so the It blocks (separate scriptblocks) can read these without tripping PSUseDeclaredVarsMoreThanAssignments.
        [xml]$script:xaml = Get-Content $xamlPath -Raw
        $policies = @(Get-Content $policyStubPath -Raw | ConvertFrom-Json | Select-Object -ExpandProperty conditional_access_policies)
        $script:document = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 'test-tenant' `
            -SchemaUrl $control.tenantGovernanceSchemaURL | ConvertFrom-Json
    }

    It 'is disabled by default and declares the UTCM schema URL' {
        $control.GenerateTenantGovernanceConfig | Should -BeFalse
        $control.tenantGovernanceSchemaURL | Should -Be 'https://www.schemastore.org/utcm-monitor.json'
    }

    It 'provides the feature-gated tab and its copy and export controls' {
        foreach ($name in @('TenantGovernanceTab', 'TenantGovernanceJson_TextBox', 'CopyTenantGovernance_Button', 'ExportTenantGovernance_Button')) {
            $xaml.SelectSingleNode("//*[@*[local-name()='Name']='$name']") | Should -Not -BeNullOrEmpty
        }
        $xaml.SelectSingleNode("//*[@*[local-name()='Name']='TenantGovernanceTab']").Visibility | Should -Be 'Collapsed'
    }

    It 'emits a flat baseline object with parameters as an array' {
        $document.PSObject.Properties.Name | Should -Not -Contain 'baseline'
        $document.PSObject.Properties.Name | Should -Contain 'resources'
        (Get-Content $policyStubPath -Raw | ConvertFrom-Json) | Out-Null
        $rawParameters = (ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 'test-tenant' | ConvertFrom-Json).parameters
        ,$rawParameters | Should -BeOfType [System.Object[]]
    }

    It 'creates one Entra Conditional Access resource per collected policy' {
        @($document.resources).Count | Should -Be $policies.Count
        @($document.resources | Where-Object { $_.resourceType -ne 'microsoft.entra.conditionalaccesspolicy' }).Count | Should -Be 0
        @($document.resources | Where-Object { [string]::IsNullOrWhiteSpace($_.properties.DisplayName) }).Count | Should -Be 0
    }

    It 'preserves UTCM collection fields as arrays when a source policy has one value' {
        $singleValuePolicy = $document.resources | Where-Object { $_.properties.IncludeApplications.Count -eq 1 } | Select-Object -First 1
        $singleValuePolicy | Should -Not -BeNullOrEmpty
        ($singleValuePolicy.properties.IncludeApplications -is [array]) | Should -BeTrue
    }

    It 'declares the role/named-location lookup operations and resolves include + exclude group/role/user/app/location references' {
        $control.apiOperations.PSObject.Properties.Name | Should -Contain 'roleLookup'
        $control.apiOperations.PSObject.Properties.Name | Should -Contain 'namedLocationLookup'
        $lookupPaths = @($control.conditionalAccessAnalysis.displayNameLookup.rules | ForEach-Object { $_.policyPath })
        foreach ($p in @(
            'conditions.users.includeGroups', 'conditions.users.excludeGroups',
            'conditions.users.includeRoles', 'conditions.users.excludeRoles',
            'conditions.users.includeUsers', 'conditions.users.excludeUsers',
            'conditions.applications.includeApplications', 'conditions.applications.excludeApplications',
            'conditions.locations.includeLocations', 'conditions.locations.excludeLocations')) {
            $lookupPaths | Should -Contain $p
        }
    }

    It 'emits AuthenticationStrength as the display name, not the id' {
        $policy = [pscustomobject]@{
            DisplayName   = 'CA-PhishResistant'
            Id            = '11111111-1111-1111-1111-111111111111'
            State         = 'enabled'
            GrantControls = [pscustomobject]@{
                Operator               = 'OR'
                AuthenticationStrength = [pscustomobject]@{
                    Id          = '00000000-0000-0000-0000-000000000004'
                    DisplayName = 'Phishing-resistant MFA'
                }
            }
        }
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' | ConvertFrom-Json
        ($doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-PhishResistant' }).properties.AuthenticationStrength |
            Should -Be 'Phishing-resistant MFA'
    }

    It 'falls back to the AuthenticationStrength id when the policy has no strength display name' {
        $policy = [pscustomobject]@{
            DisplayName   = 'CA-NoStrengthName'
            Id            = '22222222-2222-2222-2222-222222222222'
            State         = 'enabled'
            GrantControls = [pscustomobject]@{
                AuthenticationStrength = [pscustomobject]@{
                    Id          = '00000000-0000-0000-0000-000000000004'
                    DisplayName = $null
                }
            }
        }
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' | ConvertFrom-Json
        ($doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-NoStrengthName' }).properties.AuthenticationStrength |
            Should -Be '00000000-0000-0000-0000-000000000004'
    }

    It 'emits users by UPN and groups/roles/apps/locations by display name' {
        $policy = [pscustomobject]@{
            DisplayName = 'CA-Refs'
            Id          = '33333333-3333-3333-3333-333333333333'
            State       = 'enabled'
            Conditions  = [pscustomobject]@{
                Applications = [pscustomobject]@{
                    IncludeApplications = @('All')
                    ExcludeApplications = @('44444444-4444-4444-4444-444444444444')
                }
                Users        = [pscustomobject]@{
                    IncludeUsers  = @('All')
                    ExcludeUsers  = @('55555555-5555-5555-5555-555555555555')
                    IncludeGroups = @('66666666-6666-6666-6666-666666666666')
                    ExcludeGroups = @('77777777-7777-7777-7777-777777777777')
                    IncludeRoles  = @('88888888-8888-8888-8888-888888888888')
                }
                Locations    = [pscustomobject]@{
                    IncludeLocations = @('a1a1a1a1-a1a1-a1a1-a1a1-a1a1a1a1a1a1')
                    ExcludeLocations = @('AllTrusted')
                }
            }
        }
        $names = @{
            '44444444-4444-4444-4444-444444444444' = 'My App'
            '55555555-5555-5555-5555-555555555555' = 'Break Glass Account'   # display name - must NOT win for users
            '66666666-6666-6666-6666-666666666666' = 'All Employees'
            '77777777-7777-7777-7777-777777777777' = 'Exclude Group'
            '88888888-8888-8888-8888-888888888888' = 'Global Administrator'
            'a1a1a1a1-a1a1-a1a1-a1a1-a1a1a1a1a1a1' = 'Corporate Network'
        }
        $upns = @{ '55555555-5555-5555-5555-555555555555' = 'breakglass@contoso.com' }
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' -DisplayNameLookup $names -UserPrincipalNameLookup $upns | ConvertFrom-Json
        $res = $doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-Refs' }
        $res.properties.ExcludeUsers        | Should -Be 'breakglass@contoso.com'   # UPN, not display name
        $res.properties.ExcludeApplications | Should -Be 'My App'
        $res.properties.IncludeGroups       | Should -Be 'All Employees'
        $res.properties.ExcludeGroups       | Should -Be 'Exclude Group'
        $res.properties.IncludeRoles        | Should -Be 'Global Administrator'
        $res.properties.IncludeLocations    | Should -Be 'Corporate Network'
        $res.properties.ExcludeLocations    | Should -Be 'AllTrusted'   # non-id literals are preserved
        $res.properties.IncludeUsers        | Should -Be 'All'          # non-id literals are preserved
    }

    It 'falls back to display name for a user with no UPN entry, and keeps the id when unresolved' {
        $policy = [pscustomobject]@{
            DisplayName = 'CA-UserFallback'
            Id          = 'b2b2b2b2-b2b2-b2b2-b2b2-b2b2b2b2b2b2'
            State       = 'enabled'
            Conditions  = [pscustomobject]@{
                Users = [pscustomobject]@{
                    ExcludeUsers = @('cccccccc-cccc-cccc-cccc-cccccccccccc', 'dddddddd-dddd-dddd-dddd-dddddddddddd')
                }
            }
        }
        $names = @{ 'cccccccc-cccc-cccc-cccc-cccccccccccc' = 'Named User' }
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' -DisplayNameLookup $names -UserPrincipalNameLookup @{} | ConvertFrom-Json
        $res = $doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-UserFallback' }
        @($res.properties.ExcludeUsers) | Should -Contain 'Named User'
        @($res.properties.ExcludeUsers) | Should -Contain 'dddddddd-dddd-dddd-dddd-dddddddddddd'
    }

    It 'leaves object ids unchanged when the lookup has no matching entry' {
        $policy = [pscustomobject]@{
            DisplayName = 'CA-Unresolved'
            Id          = '99999999-9999-9999-9999-999999999999'
            State       = 'enabled'
            Conditions  = [pscustomobject]@{
                Users = [pscustomobject]@{
                    ExcludeGroups = @('aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa')
                }
            }
        }
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' -DisplayNameLookup @{} | ConvertFrom-Json
        ($doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-Unresolved' }).properties.ExcludeGroups |
            Should -Be 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa'
    }

    It 'emits every policy when no IncludePolicyId filter is supplied' {
        $policies = @(
            [pscustomobject]@{ DisplayName = 'P1'; Id = 'id-1'; State = 'enabled' }
            [pscustomobject]@{ DisplayName = 'P2'; Id = 'id-2'; State = 'enabled' }
        )
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 't' | ConvertFrom-Json
        @($doc.resources).Count | Should -Be 2
    }

    It 'scopes the document to the supplied policy ids (case-insensitive)' {
        $policies = @(
            [pscustomobject]@{ DisplayName = 'P1'; Id = 'AAA-111'; State = 'enabled' }
            [pscustomobject]@{ DisplayName = 'P2'; Id = 'BBB-222'; State = 'enabled' }
            [pscustomobject]@{ DisplayName = 'P3'; Id = 'CCC-333'; State = 'enabled' }
        )
        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 't' -IncludePolicyId @('aaa-111', 'CCC-333') | ConvertFrom-Json
        @($doc.resources).Count | Should -Be 2
        @($doc.resources.properties.DisplayName) | Should -Contain 'P1'
        @($doc.resources.properties.DisplayName) | Should -Contain 'P3'
        @($doc.resources.properties.DisplayName) | Should -Not -Contain 'P2'
    }

    It 'collects the best-match (identified) policy id from each finding, excluding other candidates' {
        $findings = @(
            [pscustomobject]@{
                AllPolicies      = @([pscustomobject]@{ Id = 'p-a' }, [pscustomobject]@{ Id = 'p-b' })
                BestMatch        = [pscustomobject]@{ Id = 'p-a' }
                SelectedPolicyId = 'p-a'
            }
            [pscustomobject]@{
                AllPolicies      = @([pscustomobject]@{ Id = 'p-c' })
                BestMatch        = [pscustomobject]@{ Id = 'p-c' }
                SelectedPolicyId = 'p-c'
            }
            [pscustomobject]@{
                AllPolicies      = @([pscustomobject]@{ Id = 'p-d' })
                BestMatch        = $null
                SelectedPolicyId = $null
            }
        )
        $ids = @(Get-ScATenantGovernanceMatchedPolicyId -Findings $findings)
        $ids.Count | Should -Be 2
        $ids | Should -Contain 'p-a'
        $ids | Should -Contain 'p-c'
        $ids | Should -Not -Contain 'p-b'   # relevant-but-not-best candidates are excluded
        $ids | Should -Not -Contain 'p-d'   # findings with no match contribute nothing
    }

    It 'provides the ScubaGear-only checkbox on the tenant governance tab' {
        $xaml.SelectSingleNode("//*[@*[local-name()='Name']='TenantGovernanceScubaOnly_CheckBox']") | Should -Not -BeNullOrEmpty
        $control.localeContext.TenantGovernanceScubaOnly_CheckBox | Should -Not -BeNullOrEmpty
    }
}

# SIG # Begin signature block
# MIIu9gYJKoZIhvcNAQcCoIIu5zCCLuMCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDyJKfhiFBXfccd
# SDAufF2cIlUee5Xg46Jq1/lm5CwcjKCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h
# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV
# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z
# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ
# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0
# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z
# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ
# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s
# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL
# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb
# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3
# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c
# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx
# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0
# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL
# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud
# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf
# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk
# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS
# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK
# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB
# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp
# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg
# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri
# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7
# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5
# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3
# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H
# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G
# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ
# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0
# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla
# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE
# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz
# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C
# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce
# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da
# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T
# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA
# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh
# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM
# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z
# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05
# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY
# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP
# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T
# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD
# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG
# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY
# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj
# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV
# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU
# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN
# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry
# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL
# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf
# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh
# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh
# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV
# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j
# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH
# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC
# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l
# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW
# eE4wggdXMIIFP6ADAgECAhAMM6tnPejLgA9WVhXroQvSMA0GCSqGSIb3DQEBCwUA
# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE
# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz
# ODQgMjAyMSBDQTEwHhcNMjYwMTE0MDAwMDAwWhcNMjcwMTEzMjM1OTU5WjBfMQsw
# CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV
# BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuXYolNHqlh6smLTE592waXheZ
# 8VHzxeds4pMaepGuwmjf8d1jG9wUNuJX9/qb0a1dgGz5D/EAz5NRTIin4SZYQEE8
# qvdl2yQJ5uWxXIjsFbrOyc1fWscUXw0Kt7OPLOafcEkdDoe8K0tO4h2GL3RWRzjp
# uLfQhhnAmD6NT1l+ughnfmarV/ODgIn/RFR4YORlu4YP2xQX6KRxeTDslg7F+z6X
# +t87/U8m8gQ9XTm5kBmteP4GcE/ytnyI+ScIxNRybzGomWIBm848XDE5yYhlYQ2R
# SnCoo6M4CRqp9WFGVyoLkoPP0OlxzryKWaE1/nuPbYG/kf/rUB1OhqxvSSGwmNhs
# vkkjsC0Z9H5Jy6heFdoxOu/+ZQksKoP/fMvHxuCCtkIJbV8tk0oT6MQ8EJbgsWDZ
# TKhui1wxW6JIZyBOMPWoZUOouOzo2h5Cz7LBPKME5FkcUzcs47lpRlDkJco4PLcj
# wJSo4XPnx3G/2DIjNEFNyfKCWfH8uW6nJjmDBiveFZ2j0YvgdQ+7MOjQnw7R/MAD
# DTagrKl3rLV60+X2TY6/onKhCUuU3pMAjVbOwZ3PkzDLZnsEGRfm6hgp6014aXml
# t8h4nu+uC41U8vUSGHl0vqKuzvmShLmnI+Iv0l95pmnqomuCZzRDrjEoaLPx7OxL
# Dy/Id9E7yQDip4jBdQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R
# hvv+YXsIiGX0TkIwHQYDVR0OBBYEFN30sVU+fpfQQfPQWMhkO1qd+MxoMD4GA1Ud
# IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl
# cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw
# gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp
# Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j
# cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0
# ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF
# BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
# MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ
# BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA77T42YiOx5wWPItgo+kvB+Gzb
# ZFCRHRFfTAZZNQt9o/0CqNmyA2xFklX4t5Z9VNdiIOx14AnmJdQkcRdk3vsU5gby
# jKEup7LTWtvcWrl6hQwGNt3l892BgUbPKsPBE+AriktVqn5yMSXVVzeboqsqAG8e
# Syei0B54/QdgR4whfHvQ/qpCACsJTlJgAykXVgDPJNKnQ7wc17loLQutqF1JUcbO
# XKWt1AA9Zas5q30LDZzZeK4B56yojK68CTQXN7toSRFIuZDMKKDfIZpCX8cmbaaO
# DFOOu44/QWMv+Xc6+ISYGkrTTzqWhOqiXgLVBeXGn/WrOJJ8R29mZMneCpBesCLs
# YII1gCFOo7Vt6mvOKxAPQ3KhJYBFEHkp+GI65koaQkO2xv50iLS0+/j2YC66uviU
# MFe0JEOdXuE7Rn/OmWNSzQ+6kPNYDJQASQ974C3wUejJoMtGZEzoTbly/HufQTrd
# rhcL2aC69CxSN+idTXPLC9UT3xo4sFdOw+hXkmbXtoB1GDsd5p1TWFgRbnTXDkbM
# YMBWYVB6/Tk1bzwj4iTp4g0YrtB628FXPX/ko+JWZlv0Ea865S23w1uGlnDNVxIi
# +8oi74G5DM66Q6ENt6+3WoRGRrdoyE6uCh1haY+oPYSgumb0ozzrp8tw89TRKVrK
# KSXGBxlExEvjQ6dYwjGCGqkwghqlAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV
# BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0
# IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDDOrZz3oy4AP
# VlYV66EL0jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh
# AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM
# BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCDkGycAN0ObZx3aCzm4xjkrUP+9
# d66eY1edD1vZ6/AhqjANBgkqhkiG9w0BAQEFAASCAgAOqwpDPm0h9wjFRbo84rwg
# +y/yTclOde1uUOrCSWRkPU0Llw/qUgwE1Fd+H035HM5rrY8zyw5aWWaC+gyrVXbR
# y/qtUv4AI9WnNxsWaH+9GRZXQ5CzGH334kkwXVZx/+UBXTi5/6HqKiW/kpd0sHKW
# Og6bnLSxiXqip9NxubEA0f48z/p6KLuIH0SKwxgtlwSryAmhAJwRMwM+bMKqGdWt
# 2fWZ4hVb76R4UJB8MVV6WYhCb7yGuTceZw40lMY43Q9rEudtkqcvFhAt7dWe2ZgC
# htZhCL15lh4APY737PNmKmUKNmCLsHMVw/CLKlwazXnXUj1qHA9Cmllwkdx8qx7K
# XLRgzmf7vbQSW7d7KMxG43iInpkl2M8CZgy3cOx/32f3JFbi99tfkXyTG7rfP+bG
# R92nP7aVl5v/GRHA6YzpgF/tfQELr5F/zh3cPu+RIUzCOICHpq1odhJaRI+hzPvI
# eBs7lZXfOd6fB0EngDv1p6N681AQTqM4YX6YO+ym6TMfdrnB76SES+y5hlbpjGDk
# /qfRsA/Ol8rs0OSuT12O3Y5Bym1MOFhJL0YvMDB4wGpwUuFas79m4ST7KhP0U2/j
# Qdl4nARRkeh5llxipKb0RXfsjXjaMzxrHcG5EUkncZZbJhxot5U8GMQIq9tfE8KH
# l6zhbYm9K2qN9i5fYdxhZaGCF3YwghdyBgorBgEEAYI3AwMBMYIXYjCCF14GCSqG
# SIb3DQEHAqCCF08wghdLAgEDMQ8wDQYJYIZIAWUDBAIBBQAwdwYLKoZIhvcNAQkQ
# AQSgaARmMGQCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCAr1pMfWADp
# FinHJsVgOFfc6M98f0CGfoV/TbjPmFtHpwIQMdnLB7NKqqO64LC2wBcfZxgPMjAy
# NjEwMDgxOTE0MjZaoIITOjCCBu0wggTVoAMCAQICEAhP3DNPfkVO28MPj/mSGDUw
# DQYJKoZIhvcNAQELBQAwaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0
# LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGlu
# ZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMTAeFw0yNjA4MDUwMDAwMDBaFw0zNzEx
# MDQyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5j
# LjE7MDkGA1UEAxMyRGlnaUNlcnQgU0hBMjU2IFJTQTQwOTYgVGltZXN0YW1wIFJl
# c3BvbmRlciAyMDI2IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2
# e6byyf7NSvjUm0xls/04xjD4fAkOkbnGQi7+Wpx81iYxfzViaxSIctuH3KSl5YEY
# pMuFgGsA31N2D9ATMbfZdw5uaAhuWevQKhDdZIB4NnqcfpfpWQXJiQnDdAElETC+
# bhSEvNLGbA8DtwUpFMQ4yyYQSPqomT92osQAv6hBi47ATZS6JfVWe6XxhF4jJZ3i
# SAuf2Cros1czRSmWRHqMv9AfGZvp8ygYElhudpQjtcPpwoOl6QrZJUyV3iINvN4c
# O05prGV0fkjG426xDr2d3z9lcSIHkdvGPdGUrXdxfVbgOUVcp2/8ISEzwKPW++Wa
# +E2ujI91EZtukGWDJ/xZ27k3oHKEXBRGfRTqjOU+jE3ba/5++JSE/7oNHnjs5mek
# ExYN96LV/mxUbCKJb8pBNY4r3uD7hEmk/M81XhVgwDA7aMzYC3LZBg9WY5BMmbSa
# y5ecmtJuXaB/0nKWmQmVZeqTVDgsmzHP5MQuhAJkiWNuC9MmCg9TZHXbJ2/yLVSo
# v9p16UDTLtT0+aa1vN71fHeu1qMLlLNB3WOB/ADCxr3S/1hxI92Z6jKgEED/btwI
# vbfuXkNNhg8MtDg43c4tMZae9FvqMOt/9PvmAxF9TNIsIFB8G6yb36ZJZGUL8N/p
# L971DyLXcK6HM5PYnH5X+eVtczhCgHCVQCF6XDAlPQIDAQABo4IBlTCCAZEwDAYD
# VR0TAQH/BAIwADAdBgNVHQ4EFgQUFMljijAu1Er7bpTz5uNAfvXszeIwHwYDVR0j
# BBgwFoAU729TSunkBnx6yuKQVvYv1Ensy04wDgYDVR0PAQH/BAQDAgeAMBYGA1Ud
# JQEB/wQMMAoGCCsGAQUFBwMIMIGVBggrBgEFBQcBAQSBiDCBhTAkBggrBgEFBQcw
# AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMF0GCCsGAQUFBzAChlFodHRwOi8v
# Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBp
# bmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5jcnQwXwYDVR0fBFgwVjBUoFKgUIZOaHR0
# cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1w
# aW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQC
# MAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsFAAOCAgEAjcU6YR6dUgrfmawJgH59
# KECxa9Ji8sEi2g10CBDaMiqsaxWyW5cwlT/6ZF5sFznazqVsoC85U9dqLOYqQwst
# +UQQoNlDHgKRLa3xoc+OReFreFhnTXSG0Vrd2E2CZqUfm+5a+He1MJ/h+tNLuA+0
# Zzhn/Fo+FDYAHWZHx4R79ZsfRFYe9UiXpXBDf6DkUo183Y38NYmR/XfDYf7YZ+oR
# 9t3flbDwK+hgGMs0gNNp1w9Z2CyOyI5or/sSwomAuNQ0hWC9xoU4stD8aWsD7Rkc
# mgVRs6vlIk3zPKQ+ylcheWkMlj+CoVRlFE55pv0ZWCaFt04lwP/rdGHE9qEVQZty
# RE42ox7oNgC/r+Y4bSlZ3dw9K2x1xLtu6PkPKeLBFjzKigwfqm3Hm+k/+lnME8F5
# kPZTgiy2HLEHklpryqs6QHnPXrRNeIzkAMyylnRN8P0wmirS0WkU+ywpEWFZ4QNg
# +9xS43tTuW9x0eXh7NDc1P/sV+zWxHXKH8tFt1ncHdVzqrZaYPyYMLSn2TOXajve
# JW1L3joiQSPsWRGxkbDDW15jERFE4LvjnGu2O9zD1nLJSMdlYZEikl4w2w+q4IN/
# R+TIe0H4ngCI1moJCTbevGH4punIxM1Uoi0nmX3ZK+XbRT01uowE5ViXWHng0Rgs
# mrX/EdYUo80r3TfMlkD0/YMwgga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmG
# MA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy
# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD
# ZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5
# NTlaMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8G
# A1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBT
# SEEyNTYgMjAyNSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0
# eDHTCphBcr48RsAcrHXbo0ZodLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+Ruw
# OnPhof6pvF4uGjwjqNjfEvUi6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4B
# t0mAxAHeHYNnQxqXmRinvuNgxVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1U
# kxBvMgEdgkFiDNYiOTx4OtiFcMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTca
# arps0wjUjsZvkgFkriK9tUKJm/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zb
# CclF83bRVFLeGkuAhHiGPMvSGmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnG
# pTXiUOeSLsJygoLPp66bkDX1ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/
# AMOMCZIVNSaz7BX8VtYGqLt9MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v
# 5ydPpOjL6s36czwzsucuoKs7Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoi
# wOrUG2ZdSoQbU2rMkpLiQ6bGRinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm
# 2qA+sdFUeEY0qVjPKOWug/G6X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYD
# VR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04w
# HwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGG
# MBMGA1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcw
# AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8v
# Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBD
# BgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl
# cnRUcnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgB
# hv1sBwEwDQYJKoZIhvcNAQELBQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Q
# h8WIGjB/T8ObXAZz8OjuhUxjaaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3
# YTj+IQhQE7jU/kXjjytJgnn0hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQ
# wr8Myb9rEVKChHyfpzee5kH0F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/
# wdG2th9y1IsA0QF8dTXqvcnTmpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81
# hjajV/gxdEkMx1NKU4uHQcKfZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00
# TYr2Lr3ty9qIijanrUR3anzEwlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNj
# qFzeGxcytL5TTLL4ZaoBdqbhOhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0
# cuJG7uEBYTptMSbhdhGQDpOXgpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9
# sC+NJpud/v4+7RWsWCiKi9EOLLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0
# LckTetiSuEtQvLsNz3Qbp7wGWqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2
# tszWkPZPubdcMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG
# 9w0BAQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw
# FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1
# cmVkIElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBi
# MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
# d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
# RzQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAi
# MGkz7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnny
# yhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE
# 5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm
# 7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5
# w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsD
# dV14Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1Z
# XUJ2h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS0
# 0mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hk
# pjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m8
# 00ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+i
# sX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB
# /zAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReui
# r/SSy4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0w
# azAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUF
# BzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk
# SURSb290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2lj
# ZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAG
# BgRVHSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9
# mqyhhyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxS
# A8hO0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/
# 6Fmo8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSM
# b++hUD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt
# 9H5xaiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDfDCC
# A3gCAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x
# QTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQw
# OTYgU0hBMjU2IDIwMjUgQ0ExAhAIT9wzT35FTtvDD4/5khg1MA0GCWCGSAFlAwQC
# AQUAoIHRMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUx
# DxcNMjYxMDA4MTkxNDI2WjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRR2avaA0lz
# 2E9CZqykgkjms2nEOTAvBgkqhkiG9w0BCQQxIgQgUy5WIMX7EHoiO8IrbkaC8TMg
# muCsW+87nbtfwpzib8IwNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQgLaCdp/QTH5/n
# LbbF5unJZWdVrwQ/HqdCzA0hIOFB6/wwDQYJKoZIhvcNAQEBBQAEggIABZ9TSM6B
# H+FcrvDy74I2BSHOAdsbIpH9q/FpVxUlyiFkjjKxjBwv7a1/p4vNd02k1SS2VBVn
# fbDkM8fIBMv1jOudP4uXfK4ZHQcH9+7oAQsy8XAC9/1o9Rqz1KKzQZxFAHlDTXc7
# ODig3ch8q7RViwDn+vsq/h/QOiClMz7xh5zOeWd/Crvfa7oBm/CgB9upmFv+X6r8
# cesdst3JYTnrd7r2ZtzPlhBfarRcBSxMIUK2ncd1ZrrqtoqJCvKoTx1h0iYONNK7
# DoWvphlmU9G4WJG/OsxP3aCI6F4cs+tGInPr5ujXvE7W4z2mIbHKEjapTDBxDAgV
# MRCK+FX0RLJDMooMUH4rr0GExlpf8N2mwoTIDQMjVykHCv2scumVcFQ2AUK1Kuz8
# DYY3td4FcqU6dyGsByiSVnzeiJQ2Wx+O4nxzedr4q0uM/uJddpAOir4k7LRFRZcL
# 4cUcgAvQoT79Zh5s5PQeTwkI/tAAsNfWavNqZMqIoGqIfwiFW1F8mVlB2PAkR4eq
# A5eBHF+cCTcldjkFXHUfOX+7wuP7JI/R3lMFeFlqkM5+3mnmMFcO9KWm59ZE16Cw
# 1Jcm/2xXcL00AigQ6evMXU12vmmYLH68uubjTdBNjXvyfP7hCWWbQ0S4aah/yet0
# lMwRYqooGZ7ARiJ4jMbKUgwmEFYuylC2slc=
# SIG # End signature block