ScubaGear

2.0.0-rc2

Testing/Unit/PowerShell/ScubaConfigApp/ScubaConfigAnalyzerTenantGovernance.Tests.ps1

                                Describe -Tag 'Analyzer' -Name 'ScubaConfigAnalyzer tenant governance configuration' {

    BeforeAll {

        $scubaGearRoot = (Resolve-Path "$PSScriptRoot\..\..\..\..").Path

        $configAppRoot = Join-Path $scubaGearRoot 'Modules\ScubaConfigApp'

        $helperPath = Join-Path $configAppRoot 'ScubaConfigAnalyzerHelpers\ScubaConfigAnalyzerTenantGovernanceHelper.psm1'

        $controlPath = Join-Path $configAppRoot 'ScubaConfigAnalyzer_Control_en-US.json'

        $xamlPath = Join-Path $configAppRoot 'ScubaConfigAppResources\ScubaConfigAnalyzerUI.xaml'

        $policyStubPath = Join-Path $scubaGearRoot 'Testing\Unit\PowerShell\CreateReport\CreateReportStubs\ProviderSettingsExport.json'

        Import-Module $helperPath -Force

        $control = Get-Content $controlPath -Raw | ConvertFrom-Json

        # $script: scope so the It blocks (separate scriptblocks) can read these without tripping PSUseDeclaredVarsMoreThanAssignments.

        [xml]$script:xaml = Get-Content $xamlPath -Raw

        $policies = @(Get-Content $policyStubPath -Raw | ConvertFrom-Json | Select-Object -ExpandProperty conditional_access_policies)

        $script:document = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 'test-tenant' `

            -SchemaUrl $control.tenantGovernanceSchemaURL | ConvertFrom-Json

    }

    It 'is disabled by default and declares the UTCM schema URL' {

        $control.GenerateTenantGovernanceConfig | Should -BeFalse

        $control.tenantGovernanceSchemaURL | Should -Be 'https://www.schemastore.org/utcm-monitor.json'

    }

    It 'provides the feature-gated tab and its copy and export controls' {

        foreach ($name in @('TenantGovernanceTab', 'TenantGovernanceJson_TextBox', 'CopyTenantGovernance_Button', 'ExportTenantGovernance_Button')) {

            $xaml.SelectSingleNode("//*[@*[local-name()='Name']='$name']") | Should -Not -BeNullOrEmpty

        }

        $xaml.SelectSingleNode("//*[@*[local-name()='Name']='TenantGovernanceTab']").Visibility | Should -Be 'Collapsed'

    }

    It 'emits a flat baseline object with parameters as an array' {

        $document.PSObject.Properties.Name | Should -Not -Contain 'baseline'

        $document.PSObject.Properties.Name | Should -Contain 'resources'

        (Get-Content $policyStubPath -Raw | ConvertFrom-Json) | Out-Null

        $rawParameters = (ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 'test-tenant' | ConvertFrom-Json).parameters

        ,$rawParameters | Should -BeOfType [System.Object[]]

    }

    It 'creates one Entra Conditional Access resource per collected policy' {

        @($document.resources).Count | Should -Be $policies.Count

        @($document.resources | Where-Object { $_.resourceType -ne 'microsoft.entra.conditionalaccesspolicy' }).Count | Should -Be 0

        @($document.resources | Where-Object { [string]::IsNullOrWhiteSpace($_.properties.DisplayName) }).Count | Should -Be 0

    }

    It 'preserves UTCM collection fields as arrays when a source policy has one value' {

        $singleValuePolicy = $document.resources | Where-Object { $_.properties.IncludeApplications.Count -eq 1 } | Select-Object -First 1

        $singleValuePolicy | Should -Not -BeNullOrEmpty

        ($singleValuePolicy.properties.IncludeApplications -is [array]) | Should -BeTrue

    }

    It 'declares the role/named-location lookup operations and resolves include + exclude group/role/user/app/location references' {

        $control.apiOperations.PSObject.Properties.Name | Should -Contain 'roleLookup'

        $control.apiOperations.PSObject.Properties.Name | Should -Contain 'namedLocationLookup'

        $lookupPaths = @($control.conditionalAccessAnalysis.displayNameLookup.rules | ForEach-Object { $_.policyPath })

        foreach ($p in @(

            'conditions.users.includeGroups', 'conditions.users.excludeGroups',

            'conditions.users.includeRoles', 'conditions.users.excludeRoles',

            'conditions.users.includeUsers', 'conditions.users.excludeUsers',

            'conditions.applications.includeApplications', 'conditions.applications.excludeApplications',

            'conditions.locations.includeLocations', 'conditions.locations.excludeLocations')) {

            $lookupPaths | Should -Contain $p

        }

    }

    It 'emits AuthenticationStrength as the display name, not the id' {

        $policy = [pscustomobject]@{

            DisplayName   = 'CA-PhishResistant'

            Id            = '11111111-1111-1111-1111-111111111111'

            State         = 'enabled'

            GrantControls = [pscustomobject]@{

                Operator               = 'OR'

                AuthenticationStrength = [pscustomobject]@{

                    Id          = '00000000-0000-0000-0000-000000000004'

                    DisplayName = 'Phishing-resistant MFA'

                }

            }

        }

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' | ConvertFrom-Json

        ($doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-PhishResistant' }).properties.AuthenticationStrength |

            Should -Be 'Phishing-resistant MFA'

    }

    It 'falls back to the AuthenticationStrength id when the policy has no strength display name' {

        $policy = [pscustomobject]@{

            DisplayName   = 'CA-NoStrengthName'

            Id            = '22222222-2222-2222-2222-222222222222'

            State         = 'enabled'

            GrantControls = [pscustomobject]@{

                AuthenticationStrength = [pscustomobject]@{

                    Id          = '00000000-0000-0000-0000-000000000004'

                    DisplayName = $null

                }

            }

        }

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' | ConvertFrom-Json

        ($doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-NoStrengthName' }).properties.AuthenticationStrength |

            Should -Be '00000000-0000-0000-0000-000000000004'

    }

    It 'emits users by UPN and groups/roles/apps/locations by display name' {

        $policy = [pscustomobject]@{

            DisplayName = 'CA-Refs'

            Id          = '33333333-3333-3333-3333-333333333333'

            State       = 'enabled'

            Conditions  = [pscustomobject]@{

                Applications = [pscustomobject]@{

                    IncludeApplications = @('All')

                    ExcludeApplications = @('44444444-4444-4444-4444-444444444444')

                }

                Users        = [pscustomobject]@{

                    IncludeUsers  = @('All')

                    ExcludeUsers  = @('55555555-5555-5555-5555-555555555555')

                    IncludeGroups = @('66666666-6666-6666-6666-666666666666')

                    ExcludeGroups = @('77777777-7777-7777-7777-777777777777')

                    IncludeRoles  = @('88888888-8888-8888-8888-888888888888')

                }

                Locations    = [pscustomobject]@{

                    IncludeLocations = @('a1a1a1a1-a1a1-a1a1-a1a1-a1a1a1a1a1a1')

                    ExcludeLocations = @('AllTrusted')

                }

            }

        }

        $names = @{

            '44444444-4444-4444-4444-444444444444' = 'My App'

            '55555555-5555-5555-5555-555555555555' = 'Break Glass Account'   # display name - must NOT win for users

            '66666666-6666-6666-6666-666666666666' = 'All Employees'

            '77777777-7777-7777-7777-777777777777' = 'Exclude Group'

            '88888888-8888-8888-8888-888888888888' = 'Global Administrator'

            'a1a1a1a1-a1a1-a1a1-a1a1-a1a1a1a1a1a1' = 'Corporate Network'

        }

        $upns = @{ '55555555-5555-5555-5555-555555555555' = 'breakglass@contoso.com' }

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' -DisplayNameLookup $names -UserPrincipalNameLookup $upns | ConvertFrom-Json

        $res = $doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-Refs' }

        $res.properties.ExcludeUsers        | Should -Be 'breakglass@contoso.com'   # UPN, not display name

        $res.properties.ExcludeApplications | Should -Be 'My App'

        $res.properties.IncludeGroups       | Should -Be 'All Employees'

        $res.properties.ExcludeGroups       | Should -Be 'Exclude Group'

        $res.properties.IncludeRoles        | Should -Be 'Global Administrator'

        $res.properties.IncludeLocations    | Should -Be 'Corporate Network'

        $res.properties.ExcludeLocations    | Should -Be 'AllTrusted'   # non-id literals are preserved

        $res.properties.IncludeUsers        | Should -Be 'All'          # non-id literals are preserved

    }

    It 'falls back to display name for a user with no UPN entry, and keeps the id when unresolved' {

        $policy = [pscustomobject]@{

            DisplayName = 'CA-UserFallback'

            Id          = 'b2b2b2b2-b2b2-b2b2-b2b2-b2b2b2b2b2b2'

            State       = 'enabled'

            Conditions  = [pscustomobject]@{

                Users = [pscustomobject]@{

                    ExcludeUsers = @('cccccccc-cccc-cccc-cccc-cccccccccccc', 'dddddddd-dddd-dddd-dddd-dddddddddddd')

                }

            }

        }

        $names = @{ 'cccccccc-cccc-cccc-cccc-cccccccccccc' = 'Named User' }

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' -DisplayNameLookup $names -UserPrincipalNameLookup @{} | ConvertFrom-Json

        $res = $doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-UserFallback' }

        @($res.properties.ExcludeUsers) | Should -Contain 'Named User'

        @($res.properties.ExcludeUsers) | Should -Contain 'dddddddd-dddd-dddd-dddd-dddddddddddd'

    }

    It 'leaves object ids unchanged when the lookup has no matching entry' {

        $policy = [pscustomobject]@{

            DisplayName = 'CA-Unresolved'

            Id          = '99999999-9999-9999-9999-999999999999'

            State       = 'enabled'

            Conditions  = [pscustomobject]@{

                Users = [pscustomobject]@{

                    ExcludeGroups = @('aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa')

                }

            }

        }

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies @($policy) -TenantId 't' -DisplayNameLookup @{} | ConvertFrom-Json

        ($doc.resources | Where-Object { $_.properties.DisplayName -eq 'CA-Unresolved' }).properties.ExcludeGroups |

            Should -Be 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa'

    }

    It 'emits every policy when no IncludePolicyId filter is supplied' {

        $policies = @(

            [pscustomobject]@{ DisplayName = 'P1'; Id = 'id-1'; State = 'enabled' }

            [pscustomobject]@{ DisplayName = 'P2'; Id = 'id-2'; State = 'enabled' }

        )

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 't' | ConvertFrom-Json

        @($doc.resources).Count | Should -Be 2

    }

    It 'scopes the document to the supplied policy ids (case-insensitive)' {

        $policies = @(

            [pscustomobject]@{ DisplayName = 'P1'; Id = 'AAA-111'; State = 'enabled' }

            [pscustomobject]@{ DisplayName = 'P2'; Id = 'BBB-222'; State = 'enabled' }

            [pscustomobject]@{ DisplayName = 'P3'; Id = 'CCC-333'; State = 'enabled' }

        )

        $doc = ConvertTo-ScATenantGovernanceJson -ConditionalAccessPolicies $policies -TenantId 't' -IncludePolicyId @('aaa-111', 'CCC-333') | ConvertFrom-Json

        @($doc.resources).Count | Should -Be 2

        @($doc.resources.properties.DisplayName) | Should -Contain 'P1'

        @($doc.resources.properties.DisplayName) | Should -Contain 'P3'

        @($doc.resources.properties.DisplayName) | Should -Not -Contain 'P2'

    }

    It 'collects the best-match (identified) policy id from each finding, excluding other candidates' {

        $findings = @(

            [pscustomobject]@{

                AllPolicies      = @([pscustomobject]@{ Id = 'p-a' }, [pscustomobject]@{ Id = 'p-b' })

                BestMatch        = [pscustomobject]@{ Id = 'p-a' }

                SelectedPolicyId = 'p-a'

            }

            [pscustomobject]@{

                AllPolicies      = @([pscustomobject]@{ Id = 'p-c' })

                BestMatch        = [pscustomobject]@{ Id = 'p-c' }

                SelectedPolicyId = 'p-c'

            }

            [pscustomobject]@{

                AllPolicies      = @([pscustomobject]@{ Id = 'p-d' })

                BestMatch        = $null

                SelectedPolicyId = $null

            }

        )

        $ids = @(Get-ScATenantGovernanceMatchedPolicyId -Findings $findings)

        $ids.Count | Should -Be 2

        $ids | Should -Contain 'p-a'

        $ids | Should -Contain 'p-c'

        $ids | Should -Not -Contain 'p-b'   # relevant-but-not-best candidates are excluded

        $ids | Should -Not -Contain 'p-d'   # findings with no match contribute nothing

    }

    It 'provides the ScubaGear-only checkbox on the tenant governance tab' {

        $xaml.SelectSingleNode("//*[@*[local-name()='Name']='TenantGovernanceScubaOnly_CheckBox']") | Should -Not -BeNullOrEmpty

        $control.localeContext.TenantGovernanceScubaOnly_CheckBox | Should -Not -BeNullOrEmpty

    }

}

# SIG # Begin signature block

# MIIu9wYJKoZIhvcNAQcCoIIu6DCCLuQCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDyJKfhiFBXfccd

# SDAufF2cIlUee5Xg46Jq1/lm5CwcjKCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h

# MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV

# BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z

# ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB

# AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z

# G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ

# anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s

# Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL

# 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb

# BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3

# JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c

# AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx

# YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0

# viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL

# T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud

# EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf

# Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk

# aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS

# PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK

# 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB

# cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp

# 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg

# dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri

# RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7

# 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5

# nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3

# i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H

# EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G

# CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C

# 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce

# 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da

# E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T

# SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA

# FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh

# D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM

# 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z

# 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05

# huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY

# mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP

# /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T

# AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD

# VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG

# A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV

# HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU

# cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN

# BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry

# sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL

# IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf

# Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh

# OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh

# dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV

# 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j

# wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH

# Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC

# XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l

# /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW

# eE4wggdXMIIFP6ADAgECAhAMM6tnPejLgA9WVhXroQvSMA0GCSqGSIb3DQEBCwUA

# MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE

# AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz

# ODQgMjAyMSBDQTEwHhcNMjYwMTE0MDAwMDAwWhcNMjcwMTEzMjM1OTU5WjBfMQsw

# CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV

# BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuXYolNHqlh6smLTE592waXheZ

# 8VHzxeds4pMaepGuwmjf8d1jG9wUNuJX9/qb0a1dgGz5D/EAz5NRTIin4SZYQEE8

# qvdl2yQJ5uWxXIjsFbrOyc1fWscUXw0Kt7OPLOafcEkdDoe8K0tO4h2GL3RWRzjp

# uLfQhhnAmD6NT1l+ughnfmarV/ODgIn/RFR4YORlu4YP2xQX6KRxeTDslg7F+z6X

# +t87/U8m8gQ9XTm5kBmteP4GcE/ytnyI+ScIxNRybzGomWIBm848XDE5yYhlYQ2R

# SnCoo6M4CRqp9WFGVyoLkoPP0OlxzryKWaE1/nuPbYG/kf/rUB1OhqxvSSGwmNhs

# vkkjsC0Z9H5Jy6heFdoxOu/+ZQksKoP/fMvHxuCCtkIJbV8tk0oT6MQ8EJbgsWDZ

# TKhui1wxW6JIZyBOMPWoZUOouOzo2h5Cz7LBPKME5FkcUzcs47lpRlDkJco4PLcj

# wJSo4XPnx3G/2DIjNEFNyfKCWfH8uW6nJjmDBiveFZ2j0YvgdQ+7MOjQnw7R/MAD

# DTagrKl3rLV60+X2TY6/onKhCUuU3pMAjVbOwZ3PkzDLZnsEGRfm6hgp6014aXml

# t8h4nu+uC41U8vUSGHl0vqKuzvmShLmnI+Iv0l95pmnqomuCZzRDrjEoaLPx7OxL

# Dy/Id9E7yQDip4jBdQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R

# hvv+YXsIiGX0TkIwHQYDVR0OBBYEFN30sVU+fpfQQfPQWMhkO1qd+MxoMD4GA1Ud

# IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl

# cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw

# gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp

# Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j

# cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0

# ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF

# BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t

# MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ

# BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA77T42YiOx5wWPItgo+kvB+Gzb

# ZFCRHRFfTAZZNQt9o/0CqNmyA2xFklX4t5Z9VNdiIOx14AnmJdQkcRdk3vsU5gby

# jKEup7LTWtvcWrl6hQwGNt3l892BgUbPKsPBE+AriktVqn5yMSXVVzeboqsqAG8e

# Syei0B54/QdgR4whfHvQ/qpCACsJTlJgAykXVgDPJNKnQ7wc17loLQutqF1JUcbO

# XKWt1AA9Zas5q30LDZzZeK4B56yojK68CTQXN7toSRFIuZDMKKDfIZpCX8cmbaaO

# DFOOu44/QWMv+Xc6+ISYGkrTTzqWhOqiXgLVBeXGn/WrOJJ8R29mZMneCpBesCLs

# YII1gCFOo7Vt6mvOKxAPQ3KhJYBFEHkp+GI65koaQkO2xv50iLS0+/j2YC66uviU

# MFe0JEOdXuE7Rn/OmWNSzQ+6kPNYDJQASQ974C3wUejJoMtGZEzoTbly/HufQTrd

# rhcL2aC69CxSN+idTXPLC9UT3xo4sFdOw+hXkmbXtoB1GDsd5p1TWFgRbnTXDkbM

# YMBWYVB6/Tk1bzwj4iTp4g0YrtB628FXPX/ko+JWZlv0Ea865S23w1uGlnDNVxIi

# +8oi74G5DM66Q6ENt6+3WoRGRrdoyE6uCh1haY+oPYSgumb0ozzrp8tw89TRKVrK

# KSXGBxlExEvjQ6dYwjGCGqowghqmAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV

# BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0

# IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDDOrZz3oy4AP

# VlYV66EL0jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh

# AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM

# BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCDkGycAN0ObZx3aCzm4xjkrUP+9

# d66eY1edD1vZ6/AhqjANBgkqhkiG9w0BAQEFAASCAgAOqwpDPm0h9wjFRbo84rwg

# +y/yTclOde1uUOrCSWRkPU0Llw/qUgwE1Fd+H035HM5rrY8zyw5aWWaC+gyrVXbR

# y/qtUv4AI9WnNxsWaH+9GRZXQ5CzGH334kkwXVZx/+UBXTi5/6HqKiW/kpd0sHKW

# Og6bnLSxiXqip9NxubEA0f48z/p6KLuIH0SKwxgtlwSryAmhAJwRMwM+bMKqGdWt

# 2fWZ4hVb76R4UJB8MVV6WYhCb7yGuTceZw40lMY43Q9rEudtkqcvFhAt7dWe2ZgC

# htZhCL15lh4APY737PNmKmUKNmCLsHMVw/CLKlwazXnXUj1qHA9Cmllwkdx8qx7K

# XLRgzmf7vbQSW7d7KMxG43iInpkl2M8CZgy3cOx/32f3JFbi99tfkXyTG7rfP+bG

# R92nP7aVl5v/GRHA6YzpgF/tfQELr5F/zh3cPu+RIUzCOICHpq1odhJaRI+hzPvI

# eBs7lZXfOd6fB0EngDv1p6N681AQTqM4YX6YO+ym6TMfdrnB76SES+y5hlbpjGDk

# /qfRsA/Ol8rs0OSuT12O3Y5Bym1MOFhJL0YvMDB4wGpwUuFas79m4ST7KhP0U2/j

# Qdl4nARRkeh5llxipKb0RXfsjXjaMzxrHcG5EUkncZZbJhxot5U8GMQIq9tfE8KH

# l6zhbYm9K2qN9i5fYdxhZaGCF3cwghdzBgorBgEEAYI3AwMBMYIXYzCCF18GCSqG

# SIb3DQEHAqCCF1AwghdMAgEDMQ8wDQYJYIZIAWUDBAIBBQAweAYLKoZIhvcNAQkQ

# AQSgaQRnMGUCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCAr1pMfWADp

# FinHJsVgOFfc6M98f0CGfoV/TbjPmFtHpwIRAKb6z2YuDn01fuiPlsNUll4YDzIw

# MjYxMDA4MjMyOTU1WqCCEzowggbtMIIE1aADAgECAhAIT9wzT35FTtvDD4/5khg1

# MA0GCSqGSIb3DQEBCwUAMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2Vy

# dCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBp

# bmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwHhcNMjYwODA1MDAwMDAwWhcNMzcx

# MTA0MjM1OTU5WjBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIElu

# Yy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFNIQTI1NiBSU0E0MDk2IFRpbWVzdGFtcCBS

# ZXNwb25kZXIgMjAyNiAxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# tnum8sn+zUr41JtMZbP9OMYw+HwJDpG5xkIu/lqcfNYmMX81YmsUiHLbh9ykpeWB

# GKTLhYBrAN9Tdg/QEzG32XcObmgIblnr0CoQ3WSAeDZ6nH6X6VkFyYkJw3QBJREw

# vm4UhLzSxmwPA7cFKRTEOMsmEEj6qJk/dqLEAL+oQYuOwE2UuiX1Vnul8YReIyWd

# 4kgLn9gq6LNXM0UplkR6jL/QHxmb6fMoGBJYbnaUI7XD6cKDpekK2SVMld4iDbze

# HDtOaaxldH5IxuNusQ69nd8/ZXEiB5Hbxj3RlK13cX1W4DlFXKdv/CEhM8Cj1vvl

# mvhNroyPdRGbbpBlgyf8Wdu5N6ByhFwURn0U6ozlPoxN22v+fviUhP+6DR547OZn

# pBMWDfei1f5sVGwiiW/KQTWOK97g+4RJpPzPNV4VYMAwO2jM2Aty2QYPVmOQTJm0

# msuXnJrSbl2gf9JylpkJlWXqk1Q4LJsxz+TELoQCZIljbgvTJgoPU2R12ydv8i1U

# qL/adelA0y7U9Pmmtbze9Xx3rtajC5SzQd1jgfwAwsa90v9YcSPdmeoyoBBA/27c

# CL237l5DTYYPDLQ4ON3OLTGWnvRb6jDrf/T75gMRfUzSLCBQfBusm9+mSWRlC/Df

# 6S/e9Q8i13CuhzOT2Jx+V/nlbXM4QoBwlUAhelwwJT0CAwEAAaOCAZUwggGRMAwG

# A1UdEwEB/wQCMAAwHQYDVR0OBBYEFBTJY4owLtRK+26U8+bjQH717M3iMB8GA1Ud

# IwQYMBaAFO9vU0rp5AZ8esrikFb2L9RJ7MtOMA4GA1UdDwEB/wQEAwIHgDAWBgNV

# HSUBAf8EDDAKBggrBgEFBQcDCDCBlQYIKwYBBQUHAQEEgYgwgYUwJAYIKwYBBQUH

# MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBdBggrBgEFBQcwAoZRaHR0cDov

# L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1w

# aW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3J0MF8GA1UdHwRYMFYwVKBSoFCGTmh0

# dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNFRpbWVTdGFt

# cGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNybDAgBgNVHSAEGTAXMAgGBmeBDAEE

# AjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQELBQADggIBAI3FOmEenVIK35msCYB+

# fShAsWvSYvLBItoNdAgQ2jIqrGsVsluXMJU/+mRebBc52s6lbKAvOVPXaizmKkML

# LflEEKDZQx4CkS2t8aHPjkXha3hYZ010htFa3dhNgmalH5vuWvh3tTCf4frTS7gP

# tGc4Z/xaPhQ2AB1mR8eEe/WbH0RWHvVIl6VwQ3+g5FKNfN2N/DWJkf13w2H+2Gfq

# Efbd35Ww8CvoYBjLNIDTadcPWdgsjsiOaK/7EsKJgLjUNIVgvcaFOLLQ/GlrA+0Z

# HJoFUbOr5SJN8zykPspXIXlpDJY/gqFUZRROeab9GVgmhbdOJcD/63RhxPahFUGb

# ckRONqMe6DYAv6/mOG0pWd3cPStsdcS7buj5DyniwRY8yooMH6ptx5vpP/pZzBPB

# eZD2U4IsthyxB5Jaa8qrOkB5z160TXiM5ADMspZ0TfD9MJoq0tFpFPssKRFhWeED

# YPvcUuN7U7lvcdHl4ezQ3NT/7Ffs1sR1yh/LRbdZ3B3Vc6q2WmD8mDC0p9kzl2o7

# 3iVtS946IkEj7FkRsZGww1teYxERROC745xrtjvcw9ZyyUjHZWGRIpJeMNsPquCD

# f0fkyHtB+J4AiNZqCQk23rxh+KbpyMTNVKItJ5l92Svl20U9NbqMBOVYl1h54NEY

# LJq1/xHWFKPNK903zJZA9P2DMIIGtDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJ

# hjANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNl

# cnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdp

# Q2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1

# OTU5WjBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/

# BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYg

# U0hBMjU2IDIwMjUgQ0ExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# tHgx0wqYQXK+PEbAHKx126NGaHS0URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkb

# sDpz4aH+qbxeLho8I6jY3xL1IusLopuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+

# AbdJgMQB3h2DZ0Mal5kYp77jYMVQXSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAkt

# VJMQbzIBHYJBYgzWIjk8eDrYhXDEpKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3

# Gmq6bNMI1I7Gb5IBZK4ivbVCiZv7PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv8

# 2wnJRfN20VRS3hpLgIR4hjzL0hpoYGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638Z

# xqU14lDnki7CcoKCz6eum5A19WZQHkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7V

# vwDDjAmSFTUms+wV/FbWBqi7fTJnjq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2N

# L+cnT6Toy+rN+nM8M7LnLqCrO2JP3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTK

# IsDq1BtmXUqEG1NqzJKS4kOmxkYp2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUoz

# ZtqgPrHRVHhGNKlYzyjlroPxul+bgIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIG

# A1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtO

# MB8GA1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIB

# hjATBgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUH

# MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDov

# L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQw

# QwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD

# ZXJ0VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZI

# AYb9bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N

# 0IfFiBowf0/Dm1wGc/Do7oVMY2mhXZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7J

# d2E4/iEIUBO41P5F448rSYJ59Ib61eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1j

# EMK/DMm/axFSgoR8n6c3nuZB9BfBwAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdog

# P8HRtrYfctSLANEBfHU16r3J05qX3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMv

# NYY2o1f4MXRJDMdTSlOLh0HCn2cQLwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBld

# NE2K9i697cvaiIo2p61Ed2p8xMJb82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjT

# Y6hc3hsXMrS+U0yy+GWqAXam4ToWd2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/B

# dHLiRu7hAWE6bTEm4XYRkA6Tl4KSFLFk43esaUeqGkH/wyW4N7OigizwJWeukcyI

# PbAvjSabnf7+Pu0VrFgoiovRDiyx3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8

# dC3JE3rYkrhLULy7Dc90G6e8BlqmyIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2j

# NrbM1pD2T7m3XDCCBY0wggR1oAMCAQICEA6bGI750C3n79tQ4ghAGFowDQYJKoZI

# hvcNAQEMBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZ

# MBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNz

# dXJlZCBJRCBSb290IENBMB4XDTIyMDgwMTAwMDAwMFoXDTMxMTEwOTIzNTk1OVow

# YjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQ

# d3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290

# IEc0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv+aQc2jeu+RdSjww

# IjBpM+zCpyUuySE98orYWcLhKac9WKt2ms2uexuEDcQwH/MbpDgW61bGl20dq7J5

# 8soR0uRf1gU8Ug9SH8aeFaV+vp+pVxZZVXKvaJNwwrK6dZlqczKU0RBEEC7fgvMH

# hOZ0O21x4i0MG+4g1ckgHWMpLc7sXk7Ik/ghYZs06wXGXuxbGrzryc/NrDRAX7F6

# Zu53yEioZldXn1RYjgwrt0+nMNlW7sp7XeOtyU9e5TXnMcvak17cjo+A2raRmECQ

# ecN4x7axxLVqGDgDEI3Y1DekLgV9iPWCPhCRcKtVgkEy19sEcypukQF8IUzUvK4b

# A3VdeGbZOjFEmjNAvwjXWkmkwuapoGfdpCe8oU85tRFYF/ckXEaPZPfBaYh2mHY9

# WV1CdoeJl2l6SPDgohIbZpp0yt5LHucOY67m1O+SkjqePdwA5EUlibaaRBkrfsCU

# tNJhbesz2cXfSwQAzH0clcOP9yGyshG3u3/y1YxwLEFgqrFjGESVGnZifvaAsPvo

# ZKYz0YkH4b235kOkGLimdwHhD5QMIR2yVCkliWzlDlJRR3S+Jqy2QXXeeqxfjT/J

# vNNBERJb5RBQ6zHFynIWIgnffEx1P2PsIV/EIFFrb7GrhotPwtZFX50g/KEexcCP

# orF+CiaZ9eRpL5gdLfXZqbId5RsCAwEAAaOCATowggE2MA8GA1UdEwEB/wQFMAMB

# Af8wHQYDVR0OBBYEFOzX44LScV1kTN8uZz/nupiuHA9PMB8GA1UdIwQYMBaAFEXr

# oq/0ksuCMS1Ri6enIZ3zbcgPMA4GA1UdDwEB/wQEAwIBhjB5BggrBgEFBQcBAQRt

# MGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEF

# BQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJl

# ZElEUm9vdENBLmNydDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsMy5kaWdp

# Y2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMBEGA1UdIAQKMAgw

# BgYEVR0gADANBgkqhkiG9w0BAQwFAAOCAQEAcKC/Q1xV5zhfoKN0Gz22Ftf3v1cH

# vZqsoYcs7IVeqRq7IviHGmlUIu2kiHdtvRoU9BNKei8ttzjv9P+Aufih9/Jy3iS8

# UgPITtAq3votVs/59PesMHqai7Je1M/RQ0SbQyHrlnKhSLSZy51PpwYDE3cnRNTn

# f+hZqPC/Lwum6fI0POz3A8eHqNJMQBk1RmppVLC4oVaO7KTVPeix3P0c2PR3WlxU

# jG/voVA9/HYJaISfb8rbII01YBwCA8sgsKxYoA5AY8WYIsGyWfVVa88nq2x2zm8j

# LfR+cWojayL/ErhULSd+2DrZ8LaHlv1b0VysGMNNn3O3AamfV6peKOK5lDGCA3ww

# ggN4AgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMu

# MUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0

# MDk2IFNIQTI1NiAyMDI1IENBMQIQCE/cM09+RU7bww+P+ZIYNTANBglghkgBZQME

# AgEFAKCB0TAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkF

# MQ8XDTI2MTAwODIzMjk1NVowKwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQUUdmr2gNJ

# c9hPQmaspIJI5rNpxDkwLwYJKoZIhvcNAQkEMSIEIBLl156kTSZYHzA5/F4SLdB+

# yYEazxxT4QJ8eZUyphlJMDcGCyqGSIb3DQEJEAIvMSgwJjAkMCIEIC2gnaf0Ex+f

# 5y22xebpyWVnVa8EPx6nQswNISDhQev8MA0GCSqGSIb3DQEBAQUABIICAFPjR+/w

# 7gm8blRCYcmtsi0FRJrtd4ptEzPMngRjpeUNg/IS5oV6EqCRqVMZZGrUbYYAVsnO

# MvG/07dXD9YYwHlKJcGEfDf1ewF1l6piM+4Em21O4td5XaszxkRwojkfcAAs824v

# M4GCqwuQWRPtye0PeP5HRz/dPUgFLpK0oQ19fB5dj5pRsrxtmntmAJuSu/P2sNml

# Hz/IOl/1XluDvtj+fxiF0WwhP8vLRK6SvNqGKPNpJmnHnR0BFaww5Gh7n6D0iMUp

# 1WFWxNqb3rBDXBthi1O5x3RfKkW4Vm3hiPzsLS9BjowKpJ3YIXK1vRM4GbIghJnV

# D32zJ7YiHenM+YeWeTo1HRrmLDyRYYFRg4MfOZlYGw0nzld8abpt7clh1xgol5yM

# cYV9k8nymw5VhD+xz7Iv8UGGsFoUkObVtgxixpot3+3xPsnU1vfDjFzlp5AbKo0t

# jm1CpEboLqKtkJEEz2UZvvCIIpuARIgZ2bFvsDC2P8kEQt5Bu8nc3ZxpYzQ81BA8

# 4IVO62Dhplp50snx2BNz6gIV2S2Bzk38w1DzXTVqMxrzeNAms/23TYQXGWWU3xIb

# I/kQllt70RUsh1tFJ31NE24CRrGb6v18uUjT+mkFgjnV92YLra03QRPfwoekOQmj

# tcCkNi0TQQAk8cxVFDIghevY/cE1c53/BkG1

# SIG # End signature block