Testing/Unit/PowerShell/Utility/Invoke-ScubaRestMethod.Tests.ps1
|
$UtilityPath = '../../../../Modules/Utility/Utility.psm1' Import-Module (Join-Path -Path $PSScriptRoot -ChildPath $UtilityPath) -Function 'Invoke-ScubaRestMethod' -Force InModuleScope Utility { Describe -Tag 'Utility' -Name 'Invoke-ScubaRestMethod' { BeforeAll { function New-FakeHttpWebResponse { param( [int]$StatusCode, [string]$RetryAfter ) $Headers = [System.Net.WebHeaderCollection]::new() if ($RetryAfter) { $Headers.Add('Retry-After', $RetryAfter) } $FakeResponse = [PSCustomObject]@{ StatusCode = $StatusCode StatusDescription = "Status $StatusCode" ContentType = "application/json" ContentLength = 0 Headers = $Headers } $FakeResponse | Add-Member -MemberType ScriptMethod -Name GetResponseStream -Value { return $null } return $FakeResponse } function New-FakeRestException { param( [int]$StatusCode, [string]$RetryAfter ) $Ex = New-Object System.Exception "Simulated HTTP $StatusCode" $FakeResponse = New-FakeHttpWebResponse -StatusCode $StatusCode -RetryAfter $RetryAfter $Ex | Add-Member -NotePropertyName Response -NotePropertyValue $FakeResponse -Force return $Ex } } Context 'Successful call' { It 'Returns the response on the first attempt without retrying' { Mock -ModuleName Utility Invoke-RestMethod { return [pscustomobject]@{ result = 'ok' } } $Result = Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' -MaxRetries 3 $Result.result | Should -Be 'ok' Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly } } Context '429 retry behavior' { It 'Retries on 429 and succeeds once the throttling clears' { $script:CallCount = 0 Mock -ModuleName Utility Invoke-RestMethod { $script:CallCount++ if ($script:CallCount -eq 1) { throw (New-FakeRestException -StatusCode 429) } return [pscustomobject]@{ result = 'ok' } } $Result = Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 2 -RetryDelaySeconds 0 -WarningAction SilentlyContinue $Result.result | Should -Be 'ok' Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 2 -Exactly } It 'Exhausts retries on persistent 429 and throws the original exception' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-FakeRestException -StatusCode 429) } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 2 -RetryDelaySeconds 0 -WarningAction SilentlyContinue -InformationAction SilentlyContinue } | Should -Throw # 1 initial attempt + 2 retries = 3 calls Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 3 -Exactly } It 'Honors the Retry-After header value when sleeping between attempts' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-FakeRestException -StatusCode 429 -RetryAfter '12') } Mock -ModuleName Utility Start-Sleep { } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 1 -RetryDelaySeconds 5 -WarningAction SilentlyContinue -InformationAction SilentlyContinue } | Should -Throw Should -Invoke -ModuleName Utility Start-Sleep -Times 1 -Exactly -ParameterFilter { $Seconds -eq 12 } } It 'Honors a PS 5.1-style HTTP-date Retry-After header value' { $RetryAfter = [DateTimeOffset]::UtcNow.AddSeconds(60).ToString('R') $Response = New-FakeHttpWebResponse -StatusCode 429 -RetryAfter $RetryAfter $Seconds = Get-RetryAfterSeconds -HttpResponseObject $Response -DefaultSeconds 5 $Seconds | Should -BeGreaterOrEqual 59 $Seconds | Should -BeLessOrEqual 60 } It 'Honors a PS 7-style HTTP-date Retry-After header value' { Add-Type -AssemblyName System.Net.Http -ErrorAction SilentlyContinue $Response = [System.Net.Http.HttpResponseMessage]::new() try { $RetryAfter = [DateTimeOffset]::UtcNow.AddSeconds(60).ToString('R') $Response.Headers.RetryAfter = [System.Net.Http.Headers.RetryConditionHeaderValue]::Parse($RetryAfter) $Seconds = Get-RetryAfterSeconds -HttpResponseObject $Response -DefaultSeconds 5 $Seconds | Should -BeGreaterOrEqual 59 $Seconds | Should -BeLessOrEqual 60 } finally { $Response.Dispose() } } It 'Clamps a past HTTP-date Retry-After header value to zero' { $RetryAfter = [DateTimeOffset]::UtcNow.AddMinutes(-1).ToString('R') $Response = New-FakeHttpWebResponse -StatusCode 429 -RetryAfter $RetryAfter Get-RetryAfterSeconds -HttpResponseObject $Response -DefaultSeconds 5 | Should -Be 0 } It 'Caps an excessively large Retry-After value at 3600 seconds' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-FakeRestException -StatusCode 429 -RetryAfter '999999999') } Mock -ModuleName Utility Start-Sleep { } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 1 -RetryDelaySeconds 5 -WarningAction SilentlyContinue -InformationAction SilentlyContinue } | Should -Throw Should -Invoke -ModuleName Utility Start-Sleep -Times 1 -Exactly -ParameterFilter { $Seconds -eq 3600 } } } Context '500/503 retry behavior' { It 'Retries on 503 with backoff and eventually throws after exhausting retries' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-FakeRestException -StatusCode 503) } Mock -ModuleName Utility Start-Sleep { } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 2 -RetryDelaySeconds 5 -WarningAction SilentlyContinue -InformationAction SilentlyContinue } | Should -Throw Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 3 -Exactly # First retry waits 5s, second retry doubles to 10s Should -Invoke -ModuleName Utility Start-Sleep -Times 1 -Exactly -ParameterFilter { $Seconds -eq 5 } Should -Invoke -ModuleName Utility Start-Sleep -Times 1 -Exactly -ParameterFilter { $Seconds -eq 10 } } } Context 'Transient connection error retry behavior' { BeforeAll { Add-Type -AssemblyName System.Net.Http -ErrorAction SilentlyContinue } It 'Retries on a connection timeout (WebException) and succeeds once the connection recovers' { $script:CallCount = 0 Mock -ModuleName Utility Invoke-RestMethod { $script:CallCount++ if ($script:CallCount -eq 1) { throw (New-Object System.Net.WebException('The operation has timed out', [System.Net.WebExceptionStatus]::Timeout)) } return [pscustomobject]@{ result = 'ok' } } $Result = Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 2 -RetryDelaySeconds 0 -WarningAction SilentlyContinue $Result.result | Should -Be 'ok' Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 2 -Exactly } It 'Exhausts retries on a persistent connection timeout and throws the original exception' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-Object System.Net.WebException('The operation has timed out', [System.Net.WebExceptionStatus]::Timeout)) } Mock -ModuleName Utility Start-Sleep { } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 2 -RetryDelaySeconds 1 -WarningAction SilentlyContinue -InformationAction SilentlyContinue } | Should -Throw '*timed out*' Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 3 -Exactly } It 'Does not retry on a non-transient WebException status with no response object' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-Object System.Net.WebException('Trust failure', [System.Net.WebExceptionStatus]::TrustFailure)) } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 3 -InformationAction SilentlyContinue } | Should -Throw Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly } It 'Retries on a PS7-style HttpRequestException with no response object' { $script:CallCount2 = 0 Mock -ModuleName Utility Invoke-RestMethod { $script:CallCount2++ if ($script:CallCount2 -eq 1) { throw (New-Object System.Net.Http.HttpRequestException('Connection reset by peer')) } return [pscustomobject]@{ result = 'ok' } } $Result = Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 2 -RetryDelaySeconds 0 -WarningAction SilentlyContinue $Result.result | Should -Be 'ok' Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 2 -Exactly } } Context 'Non-retryable errors' { It 'Does not retry on 404 and throws immediately' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-FakeRestException -StatusCode 404) } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -MaxRetries 3 -InformationAction SilentlyContinue } | Should -Throw Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly } It 'Does not retry when MaxRetries is not specified (defaults to 0)' { Mock -ModuleName Utility Invoke-RestMethod { throw (New-FakeRestException -StatusCode 429) } { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -InformationAction SilentlyContinue } | Should -Throw Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly } } Context 'Header, timeout, and body pass-through' { It 'Passes AdditionalHeaders, TimeoutSec, Method, and Body to Invoke-RestMethod' { Mock -ModuleName Utility Invoke-RestMethod { return [pscustomobject]@{ result = 'ok' } } $null = Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -Method POST -Body '{"a":1}' -TimeoutSec 30 -AdditionalHeaders @{ 'X-Custom' = 'value' } Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly -ParameterFilter { $Method -eq 'POST' -and $Body -eq '{"a":1}' -and $TimeoutSec -eq 30 -and $Headers['X-Custom'] -eq 'value' -and $Headers['Authorization'] -eq 'Bearer tok' } } It 'Does not allow AdditionalHeaders to override the Authorization header' { Mock -ModuleName Utility Invoke-RestMethod { return [pscustomobject]@{ result = 'ok' } } $null = Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' ` -AdditionalHeaders @{ 'Authorization' = 'Bearer spoofed' } -WarningAction SilentlyContinue Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly -ParameterFilter { $Headers['Authorization'] -eq 'Bearer tok' } } } Context 'Parameter validation' { It 'Rejects a negative MaxRetries value' { { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' -MaxRetries -1 } | Should -Throw } It 'Rejects a negative RetryDelaySeconds value' { { Invoke-ScubaRestMethod -BaseUrl 'https://example.com' -AccessToken 'tok' -Endpoint '/x' -RetryDelaySeconds -1 } | Should -Throw } } } } $TenantId = '11111111-2222-3333-4444-555555555555' $restApiCases = @( @{ Function = 'Get-SPOTenantRest'; Product = 'sharepoint'; Method = 'GET'; Path = '/_api/SPO.Tenant' }, @{ Function = 'Get-PowerPlatformTenantSettingsRest'; Product = 'powerplatform'; Method = 'POST'; Path = '/providers/Microsoft.BusinessAppPlatform/listTenantSettings?api-version=2023-06-01' }, @{ Function = 'Get-PowerPlatformEnvironmentsRest'; Product = 'powerplatform'; Method = 'GET'; Path = '/providers/Microsoft.BusinessAppPlatform/scopes/admin/environments?api-version=2023-06-01' }, @{ Function = 'Get-PowerPlatformDlpPoliciesRest'; Product = 'powerplatform'; Method = 'GET'; Path = '/providers/Microsoft.BusinessAppPlatform/scopes/admin/apiPolicies?api-version=2016-11-01' }, @{ Function = 'Get-PowerPlatformTenantIsolationRest'; Product = 'powerplatform'; Method = 'GET'; Path = "/providers/PowerPlatform.Governance/v1/tenants/$TenantId/tenantIsolationPolicy?api-version=2020-06-01" }, @{ Function = 'Get-TeamsMeetingPolicyRest'; Product = 'teams'; Method = 'GET'; Path = '/Skype.Policy/configurations/TeamsMeetingPolicy' }, @{ Function = 'Get-TeamsTenantFederationConfigurationRest'; Product = 'teams'; Method = 'GET'; Path = '/Skype.Policy/configurations/TenantFederationSettings' }, @{ Function = 'Get-TeamsClientConfigurationRest'; Product = 'teams'; Method = 'GET'; Path = '/Skype.Policy/configurations/TeamsClientConfiguration' }, @{ Function = 'Get-TeamsAppPermissionPolicyRest'; Product = 'teams'; Method = 'GET'; Path = '/Skype.Policy/configurations/TeamsAppPermissionPolicy' }, @{ Function = 'Get-TeamsMeetingBroadcastPolicyRest'; Product = 'teams'; Method = 'GET'; Path = '/Skype.Policy/configurations/TeamsMeetingBroadcastPolicy' }, @{ Function = 'Get-TeamsM365UnifiedTenantSettingsRest'; Product = 'teamsunified'; Method = 'GET'; Path = '/AdminAppCatalog/ps/v2/admin/unifiedApp/settings' }, @{ Function = 'Get-PowerBITenantSettingsRest'; Product = 'powerbi'; Method = 'GET'; Path = '/v1/admin/tenantsettings' }, # EXO and Security & Compliance post to the default (non-redirected) InvokeCommand endpoint. @{ Function = 'Invoke-EXORestMethod'; Product = 'exo'; Method = 'POST'; Path = "/adminapi/beta/$TenantId/InvokeCommand" }, @{ Function = 'Invoke-EXORestMethod'; Product = 'securitysuite'; Method = 'POST'; Path = "/adminapi/beta/$TenantId/InvokeCommand" } ) # SharePoint URLs use 'contoso' for the {domain} placeholder. $serviceBaseUrls = @{ sharepoint = [ordered]@{ commercial = 'https://contoso-admin.sharepoint.com'; gcc = 'https://contoso-admin.sharepoint.com'; gcchigh = 'https://contoso-admin.sharepoint.us'; dod = 'https://contoso-admin.sharepoint-mil.us' } powerplatform = [ordered]@{ commercial = 'https://api.bap.microsoft.com'; gcc = 'https://gov.api.bap.microsoft.us'; gcchigh = 'https://high.api.bap.microsoft.us'; dod = 'https://api.appsplatform.us' } teams = [ordered]@{ commercial = 'https://api.interfaces.records.teams.microsoft.com'; gcc = 'https://api.interfaces.records.teams.microsoft.com'; gcchigh = 'https://api.interfaces.records.gov.teams.microsoft.us'; dod = 'https://api.interfaces.records.gov.teams.microsoft.us' } teamsunified = [ordered]@{ commercial = 'https://substrate.office.com'; gcc = 'https://substrate.office.com' } powerbi = [ordered]@{ commercial = 'https://api.powerbi.com'; gcc = 'https://api.powerbigov.us'; gcchigh = 'https://api.high.powerbigov.us'; dod = 'https://api.mil.powerbigov.us' } exo = [ordered]@{ commercial = 'https://outlook.office365.com'; gcc = 'https://outlook.office365.com'; gcchigh = 'https://outlook.office365.us'; dod = 'https://outlook-dod.office365.us' } securitysuite = [ordered]@{ commercial = 'https://ps.compliance.protection.outlook.com'; gcc = 'https://ps.compliance.protection.outlook.com'; gcchigh = 'https://ps.compliance.protection.office365.us'; dod = 'https://ps.compliance.protection.office365.us' } } # Build a case for each API in every environment its product supports $combinedRestCases = [System.Collections.ArrayList]::new() foreach ($testCase in $restApiCases) { foreach ($env in $serviceBaseUrls[$testCase.Product].GetEnumerator()) { $null = $combinedRestCases.Add(@{ EnvName = $env.Key Function = $testCase.Function Product = $testCase.Product ExpectedMethod = $testCase.Method ExpectedUri = "$($env.Value)$($testCase.Path)" TenantId = $TenantId }) } } $coverageCase = @{ Covered = @($combinedRestCases | ForEach-Object { "$($_.Function)|$($_.EnvName)" }) } Describe -Tag 'Utility' -Name 'Invoke-ScubaRestMethod API endpoints' { BeforeAll { # This Describe sits outside InModuleScope on purpose. InModuleScope binds to the Utility copy that existed at # discovery, and other test files remove that copy in AfterAll. The REST helpers then load a new copy, so a mock # applied to the old one never reaches them and the tests send real requests. Load Utility here so the helpers # and the mock below share the same loaded copy. Import-Module (Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules/Utility/Utility.psm1') -Function Get-ScubaGearServiceEndpoint, Get-ScubaGearCatalog -Force $HelperPath = Join-Path -Path $PSScriptRoot -ChildPath '../../../../Modules/Providers/ProviderHelpers' foreach ($Helper in 'SPORestHelper', 'PowerPlatformRestHelper', 'TeamsRestHelper', 'PowerBIRestHelper', 'EXORestHelper') { Import-Module (Join-Path -Path $HelperPath -ChildPath "$Helper.psm1") -Force } Mock -ModuleName Utility Invoke-RestMethod { return [pscustomobject]@{ value = @(); d = [pscustomobject]@{} } } # These tests use real service URLs and a fake token, so prove the mock is wired in before any of them run. # The .invalid host can never resolve, so a bypassed mock fails here instead of calling a live endpoint. $null = Get-SPOTenantRest -AdminUrl 'https://mock-wiring-check.invalid' -AccessToken 'tok' Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly -ParameterFilter { $Uri -eq 'https://mock-wiring-check.invalid/_api/SPO.Tenant' } } # Tests that each REST helper sends the expected URL and method. The base URL and path come from ScubaGearApiCatalog.json. It 'calls <ExpectedUri> with <ExpectedMethod> for <Function> in <EnvName>' -TestCases $combinedRestCases { param($EnvName, $Function, $Product, $ExpectedMethod, $ExpectedUri, $TenantId) # ExpectedMethod and ExpectedUri are only read inside the -ParameterFilter below, which PSScriptAnalyzer cannot see. $null = $ExpectedMethod, $ExpectedUri $BaseUrl = Get-ScubaGearServiceEndpoint -Product $Product -Environment $EnvName -Domain 'contoso' $Params = @{ AccessToken = 'tok' } switch ($Function) { 'Get-SPOTenantRest' { $Params.AdminUrl = $BaseUrl } 'Get-PowerPlatformTenantIsolationRest' { $Params.BaseUrl = $BaseUrl; $Params.TenantId = $TenantId } 'Invoke-EXORestMethod' { $Params.ApiEndpoint = "$BaseUrl/adminapi/beta/$TenantId/InvokeCommand"; $Params.CmdletName = 'Get-OrganizationConfig' } default { $Params.BaseUrl = $BaseUrl } } $null = & $Function @Params Should -Invoke -ModuleName Utility Invoke-RestMethod -Times 1 -Exactly -ParameterFilter { $Uri -eq $ExpectedUri -and $Method -eq $ExpectedMethod -and $Headers['Authorization'] -eq 'Bearer tok' } } It 'covers every REST helper in the catalog for each supported environment' -TestCases @($coverageCase) { param($Covered) $Missing = Get-ScubaGearCatalog | Where-Object { $_.entryType -eq 'restHelper' } | ForEach-Object { $Entry = $_ $Entry.supportedEnv | ForEach-Object { "$($Entry.functionName)|$_" } } | Where-Object { $_ -notin $Covered } $Missing | Should -BeNullOrEmpty -Because 'each REST helper and environment in the catalog should have an expected URL above' } } AfterAll { Remove-Module SPORestHelper, PowerPlatformRestHelper, TeamsRestHelper, PowerBIRestHelper, EXORestHelper -Force -ErrorAction SilentlyContinue } # SIG # Begin signature block # MIIu9gYJKoZIhvcNAQcCoIIu5zCCLuMCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAbXYDpbclkWEBK # XuNyMlt19uiiNuYcEVupy1OiWyVt/KCCE6MwggWQMIIDeKADAgECAhAFmxtXno4h # MuI5B72nd3VcMA0GCSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQK # EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNV # BAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0xMzA4MDExMjAwMDBaFw0z # ODAxMTUxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ # bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0 # IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB # AL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3EMB/z # G6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKyunWZ # anMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsFxl7s # Wxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU15zHL # 2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJBMtfb # BHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObURWBf3 # JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6nj3c # AORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxBYKqx # YxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5SUUd0 # viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+xq4aL # T8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjQjBAMA8GA1Ud # EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTs1+OC0nFdZEzf # Lmc/57qYrhwPTzANBgkqhkiG9w0BAQwFAAOCAgEAu2HZfalsvhfEkRvDoaIAjeNk # aA9Wz3eucPn9mkqZucl4XAwMX+TmFClWCzZJXURj4K2clhhmGyMNPXnpbWvWVPjS # PMFDQK4dUPVS/JA7u5iZaWvHwaeoaKQn3J35J64whbn2Z006Po9ZOSJTROvIXQPK # 7VB6fWIhCoDIc2bRoAVgX+iltKevqPdtNZx8WorWojiZ83iL9E3SIAveBO6Mm0eB # cg3AFDLvMFkuruBx8lbkapdvklBtlo1oepqyNhR6BvIkuQkRUNcIsbiJeoQjYUIp # 5aPNoiBB19GcZNnqJqGLFNdMGbJQQXE9P01wI4YMStyB0swylIQNCAmXHE/A7msg # dDDS4Dk0EIUhFQEI6FUy3nFJ2SgXUE3mvk3RdazQyvtBuEOlqtPDBURPLDab4vri # RbgjU2wGb2dVf0a1TD9uKFp5JtKkqGKX0h7i7UqLvBv9R0oN32dmfrJbQdA75PQ7 # 9ARj6e/CVABRoIoqyc54zNXqhwQYs86vSYiv85KZtrPmYQ/ShQDnUBrkG5WdGaG5 # nLGbsQAe79APT0JsyQq87kP6OnGlyE0mpTX9iV28hWIdMtKgK1TtmlfB2/oQzxm3 # i0objwG2J5VT6LaJbVu8aNQj6ItRolb58KaAoNYes7wPD1N1KarqE3fk3oyBIa0H # EEcRrYc9B9F1vM/zZn4wggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0G # CSqGSIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ # bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0 # IFRydXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTla # MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE # AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz # ODQgMjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C # 0CiteLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce # 2vnS1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0da # E6ZMswEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6T # SXBCMo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoA # FdE3/hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7Oh # D26jq22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM # 1bL5OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z # 8ujo7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05 # huzUtw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNY # mtwmKwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP # /2NPTLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0T # AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYD # VR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMG # A1UdJQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY # aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj # ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNV # HR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU # cnVzdGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATAN # BgkqhkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95Ry # sQDKr2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HL # IvdaqpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5Btf # Q/g+lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnh # OE7abrs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIh # dXNSy0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV # 9zeKiwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/j # wVYbKyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYH # Ki8QxAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmC # XBVmzGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l # /aCnHwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZW # eE4wggdXMIIFP6ADAgECAhAMM6tnPejLgA9WVhXroQvSMA0GCSqGSIb3DQEBCwUA # MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UE # AxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEz # ODQgMjAyMSBDQTEwHhcNMjYwMTE0MDAwMDAwWhcNMjcwMTEzMjM1OTU5WjBfMQsw # CQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNV # BAcTCldhc2hpbmd0b24xDTALBgNVBAoTBENJU0ExDTALBgNVBAMTBENJU0EwggIi # MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuXYolNHqlh6smLTE592waXheZ # 8VHzxeds4pMaepGuwmjf8d1jG9wUNuJX9/qb0a1dgGz5D/EAz5NRTIin4SZYQEE8 # qvdl2yQJ5uWxXIjsFbrOyc1fWscUXw0Kt7OPLOafcEkdDoe8K0tO4h2GL3RWRzjp # uLfQhhnAmD6NT1l+ughnfmarV/ODgIn/RFR4YORlu4YP2xQX6KRxeTDslg7F+z6X # +t87/U8m8gQ9XTm5kBmteP4GcE/ytnyI+ScIxNRybzGomWIBm848XDE5yYhlYQ2R # SnCoo6M4CRqp9WFGVyoLkoPP0OlxzryKWaE1/nuPbYG/kf/rUB1OhqxvSSGwmNhs # vkkjsC0Z9H5Jy6heFdoxOu/+ZQksKoP/fMvHxuCCtkIJbV8tk0oT6MQ8EJbgsWDZ # TKhui1wxW6JIZyBOMPWoZUOouOzo2h5Cz7LBPKME5FkcUzcs47lpRlDkJco4PLcj # wJSo4XPnx3G/2DIjNEFNyfKCWfH8uW6nJjmDBiveFZ2j0YvgdQ+7MOjQnw7R/MAD # DTagrKl3rLV60+X2TY6/onKhCUuU3pMAjVbOwZ3PkzDLZnsEGRfm6hgp6014aXml # t8h4nu+uC41U8vUSGHl0vqKuzvmShLmnI+Iv0l95pmnqomuCZzRDrjEoaLPx7OxL # Dy/Id9E7yQDip4jBdQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8R # hvv+YXsIiGX0TkIwHQYDVR0OBBYEFN30sVU+fpfQQfPQWMhkO1qd+MxoMD4GA1Ud # IAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl # cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMw # gbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp # Z2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5j # cmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0 # ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEF # BQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t # MFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl # cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJ # BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA77T42YiOx5wWPItgo+kvB+Gzb # ZFCRHRFfTAZZNQt9o/0CqNmyA2xFklX4t5Z9VNdiIOx14AnmJdQkcRdk3vsU5gby # jKEup7LTWtvcWrl6hQwGNt3l892BgUbPKsPBE+AriktVqn5yMSXVVzeboqsqAG8e # Syei0B54/QdgR4whfHvQ/qpCACsJTlJgAykXVgDPJNKnQ7wc17loLQutqF1JUcbO # XKWt1AA9Zas5q30LDZzZeK4B56yojK68CTQXN7toSRFIuZDMKKDfIZpCX8cmbaaO # DFOOu44/QWMv+Xc6+ISYGkrTTzqWhOqiXgLVBeXGn/WrOJJ8R29mZMneCpBesCLs # YII1gCFOo7Vt6mvOKxAPQ3KhJYBFEHkp+GI65koaQkO2xv50iLS0+/j2YC66uviU # MFe0JEOdXuE7Rn/OmWNSzQ+6kPNYDJQASQ974C3wUejJoMtGZEzoTbly/HufQTrd # rhcL2aC69CxSN+idTXPLC9UT3xo4sFdOw+hXkmbXtoB1GDsd5p1TWFgRbnTXDkbM # YMBWYVB6/Tk1bzwj4iTp4g0YrtB628FXPX/ko+JWZlv0Ea865S23w1uGlnDNVxIi # +8oi74G5DM66Q6ENt6+3WoRGRrdoyE6uCh1haY+oPYSgumb0ozzrp8tw89TRKVrK # KSXGBxlExEvjQ6dYwjGCGqkwghqlAgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNV # BAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0 # IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQDDOrZz3oy4AP # VlYV66EL0jANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3AgEMMQowCKACgACh # AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM # BgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCCsC14YZ+DuTVAIFYs4bprctsr8 # CL+UVy/dR2/I5kNaqTANBgkqhkiG9w0BAQEFAASCAgBoQ4V9oOSWkopsLOmeEslV # tAqFHDrw1Juosr5730TRIA+kfr5fL0N8saHWzbS5X7eLsLbTzIaH5qRGKgUdfjsc # aTllHjVlTri8xxG7JdT5j2ei77+qdAOLv07BIDb2gaxtVqieS/hhqVom1NNE6sGo # O+W/aGSichyoOm+8R+2k9uH6tTPZzTVhBHBBGewolF4yzdvx0qsonAAyMaCRmEmf # VhhNjsqFGKp5vZcB/ynMrhE45Co/WGN49xWNYlEp43jQMB5sAPLN4BNQLXRtznmi # pFz2wXk5ICjyJ2+hktmrtnZ+BelX8QLHXJsqO8NV5eG0+TibEgmW94y5y/FmEXDR # HN+s84nnnHU4ZOGqe2xrOHSv27tcTzTrkyxrmXiZSH7c1OJcw/hn4JULmKtI+XdC # 2jPrwp70LdfeTG623d6QA5hT8E0NwGKWw3TSi10oetYlQ7DBa+dVfOXTr8YSvWBz # PIB3qmTkhBwwNyrlHR9DOq6bEXC/Z5nGkfpbTLKjRfzztp5mwSw6TFF102A/xi4s # HT0hLSG1dqwAIVEHAjtrMRXNf2Znsl0YQLV8GygQAGtISpEPxX6q4YosqTVbeAW6 # jdGkVBII4mWXo2q132OnMvCo3g+WxxF+4U4UKFhh7rSbmbVgCn2gySk/yviV8DpA # LxuSfTaHHw3N8e/7+c4zg6GCF3YwghdyBgorBgEEAYI3AwMBMYIXYjCCF14GCSqG # SIb3DQEHAqCCF08wghdLAgEDMQ8wDQYJYIZIAWUDBAIBBQAwdwYLKoZIhvcNAQkQ # AQSgaARmMGQCAQEGCWCGSAGG/WwHATAxMA0GCWCGSAFlAwQCAQUABCCrR5S0udbj # gBWoC8YGthuNeGngZnEDV3/TpQeO6RgnWwIQfP7FObcuf8lIOoGwEOdvdhgPMjAy # NjEwMDgyMzI5NTZaoIITOjCCBu0wggTVoAMCAQICEAhP3DNPfkVO28MPj/mSGDUw # DQYJKoZIhvcNAQELBQAwaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0 # LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGlu # ZyBSU0E0MDk2IFNIQTI1NiAyMDI1IENBMTAeFw0yNjA4MDUwMDAwMDBaFw0zNzEx # MDQyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5j # LjE7MDkGA1UEAxMyRGlnaUNlcnQgU0hBMjU2IFJTQTQwOTYgVGltZXN0YW1wIFJl # c3BvbmRlciAyMDI2IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2 # e6byyf7NSvjUm0xls/04xjD4fAkOkbnGQi7+Wpx81iYxfzViaxSIctuH3KSl5YEY # pMuFgGsA31N2D9ATMbfZdw5uaAhuWevQKhDdZIB4NnqcfpfpWQXJiQnDdAElETC+ # bhSEvNLGbA8DtwUpFMQ4yyYQSPqomT92osQAv6hBi47ATZS6JfVWe6XxhF4jJZ3i # SAuf2Cros1czRSmWRHqMv9AfGZvp8ygYElhudpQjtcPpwoOl6QrZJUyV3iINvN4c # O05prGV0fkjG426xDr2d3z9lcSIHkdvGPdGUrXdxfVbgOUVcp2/8ISEzwKPW++Wa # +E2ujI91EZtukGWDJ/xZ27k3oHKEXBRGfRTqjOU+jE3ba/5++JSE/7oNHnjs5mek # ExYN96LV/mxUbCKJb8pBNY4r3uD7hEmk/M81XhVgwDA7aMzYC3LZBg9WY5BMmbSa # y5ecmtJuXaB/0nKWmQmVZeqTVDgsmzHP5MQuhAJkiWNuC9MmCg9TZHXbJ2/yLVSo # v9p16UDTLtT0+aa1vN71fHeu1qMLlLNB3WOB/ADCxr3S/1hxI92Z6jKgEED/btwI # vbfuXkNNhg8MtDg43c4tMZae9FvqMOt/9PvmAxF9TNIsIFB8G6yb36ZJZGUL8N/p # L971DyLXcK6HM5PYnH5X+eVtczhCgHCVQCF6XDAlPQIDAQABo4IBlTCCAZEwDAYD # VR0TAQH/BAIwADAdBgNVHQ4EFgQUFMljijAu1Er7bpTz5uNAfvXszeIwHwYDVR0j # BBgwFoAU729TSunkBnx6yuKQVvYv1Ensy04wDgYDVR0PAQH/BAQDAgeAMBYGA1Ud # JQEB/wQMMAoGCCsGAQUFBwMIMIGVBggrBgEFBQcBAQSBiDCBhTAkBggrBgEFBQcw # AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMF0GCCsGAQUFBzAChlFodHRwOi8v # Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBp # bmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5jcnQwXwYDVR0fBFgwVjBUoFKgUIZOaHR0 # cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1w # aW5nUlNBNDA5NlNIQTI1NjIwMjVDQTEuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQC # MAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsFAAOCAgEAjcU6YR6dUgrfmawJgH59 # KECxa9Ji8sEi2g10CBDaMiqsaxWyW5cwlT/6ZF5sFznazqVsoC85U9dqLOYqQwst # +UQQoNlDHgKRLa3xoc+OReFreFhnTXSG0Vrd2E2CZqUfm+5a+He1MJ/h+tNLuA+0 # Zzhn/Fo+FDYAHWZHx4R79ZsfRFYe9UiXpXBDf6DkUo183Y38NYmR/XfDYf7YZ+oR # 9t3flbDwK+hgGMs0gNNp1w9Z2CyOyI5or/sSwomAuNQ0hWC9xoU4stD8aWsD7Rkc # mgVRs6vlIk3zPKQ+ylcheWkMlj+CoVRlFE55pv0ZWCaFt04lwP/rdGHE9qEVQZty # RE42ox7oNgC/r+Y4bSlZ3dw9K2x1xLtu6PkPKeLBFjzKigwfqm3Hm+k/+lnME8F5 # kPZTgiy2HLEHklpryqs6QHnPXrRNeIzkAMyylnRN8P0wmirS0WkU+ywpEWFZ4QNg # +9xS43tTuW9x0eXh7NDc1P/sV+zWxHXKH8tFt1ncHdVzqrZaYPyYMLSn2TOXajve # JW1L3joiQSPsWRGxkbDDW15jERFE4LvjnGu2O9zD1nLJSMdlYZEikl4w2w+q4IN/ # R+TIe0H4ngCI1moJCTbevGH4punIxM1Uoi0nmX3ZK+XbRT01uowE5ViXWHng0Rgs # mrX/EdYUo80r3TfMlkD0/YMwgga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmG # MA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy # dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD # ZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5 # NTlaMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8G # A1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBT # SEEyNTYgMjAyNSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0 # eDHTCphBcr48RsAcrHXbo0ZodLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+Ruw # OnPhof6pvF4uGjwjqNjfEvUi6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4B # t0mAxAHeHYNnQxqXmRinvuNgxVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1U # kxBvMgEdgkFiDNYiOTx4OtiFcMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTca # arps0wjUjsZvkgFkriK9tUKJm/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zb # CclF83bRVFLeGkuAhHiGPMvSGmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnG # pTXiUOeSLsJygoLPp66bkDX1ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/ # AMOMCZIVNSaz7BX8VtYGqLt9MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v # 5ydPpOjL6s36czwzsucuoKs7Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoi # wOrUG2ZdSoQbU2rMkpLiQ6bGRinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm # 2qA+sdFUeEY0qVjPKOWug/G6X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYD # VR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04w # HwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGG # MBMGA1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcw # AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8v # Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBD # BgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl # cnRUcnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgB # hv1sBwEwDQYJKoZIhvcNAQELBQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Q # h8WIGjB/T8ObXAZz8OjuhUxjaaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3 # YTj+IQhQE7jU/kXjjytJgnn0hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQ # wr8Myb9rEVKChHyfpzee5kH0F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/ # wdG2th9y1IsA0QF8dTXqvcnTmpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81 # hjajV/gxdEkMx1NKU4uHQcKfZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00 # TYr2Lr3ty9qIijanrUR3anzEwlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNj # qFzeGxcytL5TTLL4ZaoBdqbhOhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0 # cuJG7uEBYTptMSbhdhGQDpOXgpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9 # sC+NJpud/v4+7RWsWCiKi9EOLLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0 # LckTetiSuEtQvLsNz3Qbp7wGWqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2 # tszWkPZPubdcMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG # 9w0BAQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw # FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1 # cmVkIElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBi # MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 # d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg # RzQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAi # MGkz7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnny # yhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE # 5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm # 7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5 # w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsD # dV14Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1Z # XUJ2h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS0 # 0mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hk # pjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m8 # 00ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+i # sX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB # /zAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReui # r/SSy4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0w # azAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUF # BzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk # SURSb290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2lj # ZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAG # BgRVHSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9 # mqyhhyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxS # A8hO0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/ # 6Fmo8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSM # b++hUD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt # 9H5xaiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMYIDfDCC # A3gCAQEwfTBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4x # QTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQw # OTYgU0hBMjU2IDIwMjUgQ0ExAhAIT9wzT35FTtvDD4/5khg1MA0GCWCGSAFlAwQC # AQUAoIHRMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUx # DxcNMjYxMDA4MjMyOTU2WjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRR2avaA0lz # 2E9CZqykgkjms2nEOTAvBgkqhkiG9w0BCQQxIgQgcz4sn9lS1ou6JVR82r5XuaTd # HjIgmTW/yqG5oD9qGB0wNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQgLaCdp/QTH5/n # LbbF5unJZWdVrwQ/HqdCzA0hIOFB6/wwDQYJKoZIhvcNAQEBBQAEggIANqUZ9qc0 # JrIFTLMOdn9zZP9oXCSlSeVjr7FpZKq9eyk2ZF6FFahlP3UbLLgaXxUXo71OkM8H # BHPVN7qjtdbekhInf56sAS1TsnyO+DPD45oSUkZvjEo4X+XyJvfBAbB+D/r66w6S # RACvdB+plpch9AN2eSS5iK7w3labyJeBxNUE+/Z656GYMQPSTQt2FHxtPEKqNxRj # oSVauO5XQzonjOXUyMkfGR6ClziKkGbobtf4CWlMJIppOtjh2r7YHlriR7JjKgjE # kl1GgRsH1I8p6MBEQUK45ljbrjNscZlXXACnoyX0cpj5fHDvSLQjnyjPJNiqO/k6 # JKVdgFkxilMFJSI1uGnjBRXTTIw3MIOTU+R4GQ94qX/l0U1F+Q0RdA0HSPTpdEK+ # GA3PT2K0GUAJyTztJSgW2awuMv9JzhXkJOextfdm/B38I5zjZAVuCIbvb/gt6IAh # I6xUc0BFc1hZm+WeIAmQk/XpS7A4cg38Vn/qy647RWQlDsShRPdUwm3+rvXPTCvK # Bpyy7G4CDKI/b90ACAGYSQVNpRHkaYiVq8kj5FW2d8vRQsq7VCJBsgbaKo1K8iRJ # CtlAJLa2XdiNsM0gm5sRp6cNIrJFvTavfcZ8T+Vqk/5k+o0oihWOs+x2rp5McXKp # MhCukndPt8Pd7J+Htpv3cuWi866vSV0OAqQ= # SIG # End signature block |