@microsoft/windows-admin-center-sdk
Version:
Microsoft - Windows Admin Center Shell
951 lines (948 loc) • 48.5 kB
JavaScript
// 1DS documentation found at
// https://1dsdocs.azurewebsites.net/getting-started/javascript-getting_started.html
import { EMPTY, Observable, of } from 'rxjs';
import { catchError, delay, retry, shareReplay, take, tap } from 'rxjs/operators';
import { NotificationState } from '../notification/notification-state';
import { GatewayInstallationType, GatewayMode, GatewayOperationalMode } from '../shared/gateway-inventory/gateway-inventory';
import { GatewayInventoryCache } from '../shared/gateway-inventory/gateway-inventory-cache';
import { Logging } from './logging';
import { SmeMetaLabels, TelemetryActionTypes, TelemetryEvents, TelemetryEventStates, TelemetryEventTypes } from './sme-web-telemetry-models';
export class SmeWebTelemetry {
/**
* The source name to use when logging about this service.
*/
static get logSourceName() {
return 'WebTelemetry';
}
/**
* Gets the name of current shell or module.
*/
static get nameOfModule() {
return MsftSme.self().Init.moduleName ? MsftSme.self().Init.moduleName : SmeWebTelemetry.testMode;
}
static get backlogHasSpace() {
return this.eventBacklog.length < 50;
}
static eventBacklog = [];
static telemetryHandler = null;
static testMode = 'test';
static rpcInitAlready = false;
static metaTags = {};
static powershellIdMap = {};
static isProd = true;
static get isProduction() {
return this.isProd;
}
// AppId/Tenant Token provided by MarTech support
// AppId is not used, but it will be mapped to later in the pipeline
// Full keys are JS:WindowsAdminCenter and o:f78e2b7c9ae4461399c360160d82dcfc for
// AppId/Tenant token respectively. In Cosmos, only the initial portion of the tenant token is used.
// private static windowsAdminCenterAppId = 'WindowsAdminCenter';
static windowsAdminCenterTenantToken = 'f78e2b7c9ae4461399c360160d82dcfc-9371288c-a1b9-4fdc-a196-0340fc5f9880-7071';
/**
* Map of module versions used in this instance of web telemetry - memoize values here.
*/
static moduleVersions = {};
/**
* Get the list of module versions for use in telemetry where the event is sent via RPC to shell
* from the actual module the event is called in.
* @returns list of module mappings to versions
*/
static getModuleVersion(moduleName) {
if (this.moduleVersions[moduleName]) {
return this.moduleVersions[moduleName];
}
const environment = MsftSme.self().Environment;
const moduleObject = environment.modules.find((module) => {
return module.name === moduleName;
});
const version = moduleObject ? moduleObject.version : 'N/A';
this.moduleVersions[moduleName] = version;
return version;
}
/**
* Send any manual events that were triggered prior to telemetry initializing.
*/
static sendBacklogEvents() {
this.eventBacklog.forEach(([type, body]) => {
switch (type) {
case TelemetryEvents.Performance: {
const overrideVals = body.overrideValues;
this.tracePerformanceData(body.performance, overrideVals ? overrideVals.content : null);
break;
}
case TelemetryEvents.Lighthouse: {
this.traceLighthouseData(body.lighthouse, body.overrideValues);
break;
}
case TelemetryEvents.ModuleOpenPerformance:
this.traceModuleOpenPerformance(body.performance);
break;
case TelemetryEvents.Action: {
const overrideVals = body.overrideValues;
this.traceAction(body.element, overrideVals, body.customProperties);
break;
}
case TelemetryEvents.ContentUpdate: {
const overrideVals = body.overrideValues;
this.traceContentUpdate(overrideVals, body.customProperties);
break;
}
case TelemetryEvents.PageView: {
const overrideVals = body.overrideValues;
this.tracePageView(overrideVals, body.customProperties);
break;
}
case TelemetryEvents.Notification:
this.traceClientNotification(body.notification);
break;
default: return;
}
});
this.eventBacklog = [];
}
/**
* Helper to combine setting metaTags, initialize handler, and
* send any telemetry events that occurred prior to initialization
*/
static configureAndInitTelemetry() {
this.setMetaInDom();
this.initTelemetryHandler().subscribe({
next: () => {
this.sendBacklogEvents();
},
error: (error) => {
Logging.logError(this.logSourceName, '{0}: {1}'.format(error.name, error.message));
}
});
}
/**
* Helper function to set metaTags in DOM
*/
static setMetaInDom() {
// create an indexed table of current meta data.
const metaList = document.head.getElementsByTagName("meta");
const metaIndex = {};
for (let i = 0; i < metaList.length; i++) {
const metaName = metaList[i].getAttribute("name");
if (metaName && metaName.indexOf('awa-') === 0) {
metaIndex[metaName] = metaList[i];
}
}
// set or replace meta tags in the DOM
for (const [key, value] of Object.entries(this.metaTags)) {
const metaName = `awa-${key}`;
const oldMeta = metaIndex[metaName];
if (oldMeta) {
document.head.removeChild(oldMeta);
}
const newMeta = document.createElement('meta');
newMeta.name = metaName;
newMeta.content = value;
document.head.appendChild(newMeta);
}
}
/**
* Update Meta-tags and/or initialize telemetry, depending on whether rpc message came before or after app-context init.
* @param newMetaTags Primarily contains WAC-Session-Id & extension-version, received from RPC message
*/
static updateFromRpcInit(newMetaTags) {
// All the fields will be updated at the same time here, checking one (wac-session-id is the main one) is enough for the check
const shouldInitHere = SmeMetaLabels.SessionId in this.metaTags
&& this.metaTags[SmeMetaLabels.SessionId] === 'N/A';
this.rpcInitAlready = true;
MsftSme.deepAssign(this.metaTags, newMetaTags);
// If metaTags contains session ID but it's N/A (ie initial init was called already), call the init. If not,
// just wait for normal init to be called in app-context. Depending on timing RPC update can happen before or after.
if (shouldInitHere) {
this.configureAndInitTelemetry();
}
}
/**
* Load 1DS if does not already exist.
* @param appContext App context currently being used
*/
static init(appContext) {
if (this.telemetryHandler) {
return EMPTY;
}
// Set fields we don't need gateway for, if connection to gateway fails, initialize telemetry with limited fields
this.metaTags[SmeMetaLabels.Language] = MsftSme.self().Resources.localeId;
this.metaTags[SmeMetaLabels.Market] = MsftSme.self().Resources.localeId;
this.metaTags[SmeMetaLabels.IsProduction] = MsftSme.self().Init.isProduction.toString();
this.metaTags[SmeMetaLabels.Environment] = MsftSme.self().Init.isProduction.toString();
this.metaTags[SmeMetaLabels.ExtensionVersion] = MsftSme.self().Environment.version;
this.metaTags[SmeMetaLabels.SessionId] = MsftSme.sessionId();
// Instantiate these initially so they aren't empty values
this.metaTags[SmeMetaLabels.InstallationType] = 'N/A';
this.metaTags[SmeMetaLabels.Build] = 'N/A';
this.metaTags[SmeMetaLabels.GatewayMode] = GatewayMode[MsftSme.self().Init.mode];
this.metaTags[SmeMetaLabels.GatewayOperationalMode] = 'N/A';
this.isProd = MsftSme.self().Init.isProduction;
const gatewayInventoryCache = new GatewayInventoryCache(appContext);
return gatewayInventoryCache.query({})
.pipe(retry({
count: 2,
delay: error => error.pipe(delay(1000), tap(() => Logging.logDebug(this.logSourceName, 'Attempting to query gateway again...')))
}), take(1), tap((status) => {
const inventory = status.instance;
this.isProd = this.isProd
&& inventory.gatewayOperationalMode === GatewayOperationalMode.Production;
this.metaTags[SmeMetaLabels.InstallationType] = inventory.installationType || GatewayInstallationType.Standard;
this.metaTags[SmeMetaLabels.Build] = inventory.gatewayVersion;
this.metaTags[SmeMetaLabels.GatewayMode] = GatewayMode[inventory.mode];
this.metaTags[SmeMetaLabels.GatewayOperationalMode] = GatewayOperationalMode[inventory.gatewayOperationalMode];
this.metaTags[SmeMetaLabels.IsProduction] = this.isProd.toString();
this.metaTags[SmeMetaLabels.Environment] = this.isProd.toString();
// If not shell, handle in RPC handler, because some fields will init after 1DS inits
// If rpc handler has happened already, go ahead with this
if (MsftSme.isShell() || this.rpcInitAlready) {
this.configureAndInitTelemetry();
}
}), catchError((error) => {
Logging.logWarning(this.logSourceName, 'Telemetry failed to initialized with error {}'.format(error.message));
return of(false);
}));
}
/**
* Set config and initialize telemetry library handler
*/
static initTelemetryHandler() {
const observable = new Observable(observer => {
const script = document.createElement('script');
script.type = 'text/javascript';
script.src = MsftSme.self().Environment.configuration.telemetry.sourceLibraryCdnLink;
script.integrity = MsftSme.self().Environment.configuration.telemetry.sourceLibraryCdnIntegrityHash;
script.crossOrigin = 'anonymous';
script.async = true;
script.onload = () => {
this.telemetryHandler = new oneDS.ApplicationInsights();
const entryType = MsftSme.self().Init.entryPointType;
const entryName = MsftSme.self().Init.entryPointName;
const config = {
instrumentationKey: this.windowsAdminCenterTenantToken,
// post channel configuration
channelConfiguration: {
eventsLimitInMem: 50
},
// Properties Plugin configuration
propertyConfiguration: {
userAgent: 'Windows Admin Center',
sessionAsGuid: true
},
// Web Analytics Plugin configuration
webAnalyticsConfiguration: {
autoCapture: {
scroll: false,
pageView: true,
onLoad: false,
onUnload: true,
click: true,
resize: true,
jsError: true,
lineage: true
},
coreData: {
pageName: this.nameOfModule,
// to prevent personal data from being sent in URI
referrerUri: 'windows.admin.center',
requestUri: 'windows.admin.center',
pageTags: {
entryPointName: entryName || '',
entryPointType: entryType || ''
}
},
useShortNameForContentBlob: false
}
};
this.telemetryHandler.initialize(config, []);
this.telemetryHandler.addTelemetryInitializer((event) => {
// If we send an event that originates from a different module (eg notifications in shell)
// change the extension version to match module
if (event.baseData.name !== this.nameOfModule) {
event.baseData.properties.pageTags.metaTags[SmeMetaLabels.ExtensionVersion] =
this.getModuleVersion(event.baseData.name);
}
event.baseData.properties.pageTags.screenResolution = {
availableHeight: window.screen.availHeight,
availableWidth: window.screen.availWidth
};
event.baseData.properties.pageTags.frameDetails = { height: window.innerHeight, width: window.innerWidth };
});
observer.next();
observer.complete();
};
script.onerror = () => {
script.remove();
observer.error(new Error('1DS Script could not be loaded'));
};
document.body.appendChild(script);
}).pipe(shareReplay(1));
return observable;
}
/**
* Send a Page-Action event through Web Telemetry.
* @param element Element action is being executed on
* @param overrideValues Various values to override within default Web Telemetry page action fields, see Web Telemetry documentation.
* @param properties Extra properties in an index signature. These are placed under the data field in partC data.
*/
static traceAction(element, overrideValues, properties) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.Action, {
element: element, overrideValues: overrideValues,
customProperties: properties
}]);
}
return;
}
if (!overrideValues.actionType) {
overrideValues.actionType = TelemetryActionTypes.Automatic;
}
this.telemetryHandler.capturePageAction(element, overrideValues, properties);
}
/**
* Send a Page-View event through Web Telemetry.
* @param overrideValues Various values to override within default Web Telemetry page view fields, see Web Telemetry documentation.
* @param properties Extra properties in an index signature. These are placed under the data field in partC data.
*/
static tracePageView(overrideValues, properties) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.PageView, { overrideValues: overrideValues }]);
}
return;
}
this.telemetryHandler.capturePageView(overrideValues, properties);
}
/**
* Send a Content-Update event through Web Telemetry.
* @param overrideValues Various values to override within default Web Telemetry content update fields, see Web Telemetry documentation
* @param properties Extra properties in an index signature. These are placed under the data field in partC data.
*/
static traceContentUpdate(overrideValues, properties) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.ContentUpdate, { overrideValues: overrideValues, customProperties: properties }]);
}
return;
}
if (!overrideValues.actionType) {
overrideValues.actionType = TelemetryActionTypes.Automatic;
}
this.telemetryHandler.captureContentUpdate(overrideValues, properties);
}
/**
* Add standard fields onto performance data
* @param data SmePerformanceData to be sent
*/
static fillStandardPerformanceData(data) {
const fullDataPayload = {
extension: MsftSme.self().Environment.name,
entryPointName: MsftSme.self().Init.entryPointName || '',
url: window.location.pathname,
moduleOpened: false,
totalLoadTime: '',
label: data.label,
sme: {},
resources: {},
navigation: {}
};
// Truncate all decimals to 5 places to avoid cosmos stream from redacting any
// Convert PerformanceNavigationTiming to JSON so we can manipulate it via Object.() methods.
fullDataPayload.totalLoadTime = data.totalLoadTime.toFixed(5);
const timingData = {
'sme': data.sme || {},
'resources': data.resources || {},
'navigation': data.navigation ? data.navigation.toJSON() : {}
};
for (const [sourceKey, sourceVal] of Object.entries(timingData)) {
for (const [resourceKey, resourceVal] of Object.entries(sourceVal)) {
// navigation has some string-string maps, ignore the string values.
// Convert all numbers back into numbers to preserve types in cosmos stream
if (!MsftSme.isEmpty(sourceVal) && typeof resourceVal === 'number') {
fullDataPayload[sourceKey][resourceKey] = parseFloat(resourceVal.toFixed(7));
}
}
}
// Set this here if need - often the appLoad times happen before Init is populated,
// so check again to make sure if its actually empty.
if (fullDataPayload.navigation) {
fullDataPayload.entryPointName = MsftSme.self().Init.entryPointName || '';
}
return fullDataPayload;
}
/**
* Send a content update event. This content update contains an updated sme-specific timings structure with relevant
* performance data under the data field. The original timings data is also contained under the navigation field.
* The structure of the event is such:
* data : { ...,
* "timings": {
* "extension": [extension-name],
* "entryPointName": [entryPointName],
* "url": [url-endpoint],
* "moduleOpened" : [isModuleOpened],
* "sme": {
* [sme-mark] : [mark-timestamps],
* ...
* },
* "resources": {
* [resource-endpoint] : [resource-load-complete-timestamps],
* ...
* },
* "navigation": {
* [performance-navigation-event]: [navigation-event-timestamps]
* }
* }, ...
* }
* Certain fields are set within this class instead of outside modules since they will always be the same.
* @param dataPayload performance data to be sent through telemetry.
* @param contentOverrides any content overriding behavior wanted in the performance event
*/
static tracePerformanceData(dataPayload, contentOverrides) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.Performance,
{
performance: dataPayload,
overrideValues: { content: contentOverrides }
}]);
}
return;
}
const data = SmeWebTelemetry.fillStandardPerformanceData(dataPayload);
// A for automatic, performance tracking is done automatically.
const overrideValues = {
actionType: TelemetryActionTypes.Automatic,
content: contentOverrides || dataPayload
};
const customProps = { timings: data, type: TelemetryEventTypes.Performance };
this.telemetryHandler.captureContentUpdate(overrideValues, customProps);
}
/**
* Send a content update event - this event will contain timings for lighthouse calculation in the backend
* This can potentially be sent a couple times with overlapping data for one page load event, depending
* on when the TTI is calculated. In this scenario, it will be handled on the backend.
* @param dataPayload Lighthouse data
* @param contentOverrides any content overriding behavior wanted in the performance event
*/
static traceLighthouseData(dataPayload, contentOverrides, properties) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.Lighthouse,
{
lighthouse: dataPayload,
overrideValues: { content: contentOverrides }
}]);
}
return;
}
const overrideValues = {
actionType: TelemetryActionTypes.Automatic,
content: contentOverrides || dataPayload
};
const customProps = { timings: dataPayload, type: TelemetryEventTypes.Lighthouse };
MsftSme.deepAssign(customProps, properties);
this.telemetryHandler.captureContentUpdate(overrideValues, customProps);
}
/**
* See tracePerformanceData comments, only difference is moduleOpened is true and the contentOverrides
* @param dataPayload performance data to be sent through telemetry.
*/
static traceModuleOpenPerformance(dataPayload) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.ModuleOpenPerformance, { performance: dataPayload }]);
}
return;
}
const data = SmeWebTelemetry.fillStandardPerformanceData(dataPayload);
data.moduleOpened = true;
const overrideValues = {
customTiming: JSON.stringify(data)
};
const customProps = { timings: data, type: TelemetryEventTypes.Performance };
this.telemetryHandler.capturePageViewPerformance(overrideValues, customProps);
}
/**
* Helper to create event boilerplate for notification
* @param clientNotification Client notification to send event for
*/
static traceClientNotification(clientNotification) {
if (!this.telemetryHandler) {
if (this.backlogHasSpace) {
this.eventBacklog.push([TelemetryEvents.Notification, { notification: clientNotification }]);
}
return;
}
const overrideValues = {
content: {
message: clientNotification.message,
title: clientNotification.title,
state: NotificationState[clientNotification.state],
contentType: TelemetryEventTypes.Notification
},
// If source is not shell, replace pagename with proper source.
pageName: clientNotification.sourceName ? clientNotification.sourceName : this.nameOfModule
};
this.traceContentUpdate(overrideValues, { type: TelemetryEventTypes.Notification });
}
/**
* Helper function to assign a command to an id in a multi-step workitem process
* @param id The ID of the powershell session to assign
* @param command The command to assign to the session ID
*/
static addPowershellId(id, command) {
this.powershellIdMap[id] = command;
}
/**
* Helper function to assign a command to an id in a multi-step workitem process
* @param id The ID of the powershell session to assign
* @param command The command to assign to the session ID
*/
static removePowershellId(id) {
delete this.powershellIdMap[id];
}
/**
* Helper to create event boilerplate for powershell event. In the case where command is not available,
* use an ID (usually ps session ID, which may correlate with work item id)
* @param command Powershell Command
* @param state State of powershell event (start/end/etc)
* @param details Optional details object - see interface for more detail.
*/
static tracePowershellEvent(command, state, details) {
const id = details ? details.id : null;
const response = details ? details.response : null;
const psCommand = command ? command : this.powershellIdMap[id];
// Ignore any events that are either null or un-named PS commands.
if ((psCommand && !psCommand.command) || !psCommand) {
return;
}
// If state is not started and id is provided, remove the ID from the map to save space.
if (state !== TelemetryEventStates.Started && id) {
this.removePowershellId(id);
}
const psContent = {
psCommand: psCommand.command, state: state, psModule: psCommand.module,
otherData: details && details.otherData ? details.otherData : {}
};
const sourceName = this.nameOfModule;
if (response && response.error) {
psContent['errorCodes'] = [response.error.code];
}
else if (response && response.errors) {
psContent['errorCodes'] = response.errors.map((e) => e.errorType);
psContent.otherData['hResult'] = response.errors.map((e) => e.detailRecord && e.detailRecord.hResult);
}
SmeWebTelemetry.traceAction(null, { content: psContent, pageName: sourceName }, { type: TelemetryEventTypes.Powershell });
}
/**
* Helper to create event boilerplate for powershell batch event. Batch doesn't deal with work items, so
* we can ignore the ID and sourceName handling that the above function handles.
* @param commands Powershell Commands List in properties stringified form. PS Batch events places PS command into a
* '{properties: PSCommand }' string structure.
* @param state State of powershell event (start/end/etc)
* @param details Optional details object contains various optional fields in powershell event.
* @returns
*/
static tracePowershellBatchEvent(commands, state, details) {
// check that at least one command is valid
if (!commands || commands.length === 0) {
return;
}
let parsedCommands = [];
parsedCommands = commands.reduce((commandList, currentCommand) => {
if (currentCommand) {
const parsedCommand = JSON.parse(currentCommand).properties.command;
if (parsedCommand) {
commandList.push(parsedCommand);
}
return commandList;
}
}, parsedCommands);
const response = details ? details.response : null;
const psContent = { psCommands: parsedCommands, state: state, otherData: details && details.otherData ? details.otherData : {} };
if (response && response.error) {
psContent['errorCodes'] = [response.error.code];
}
else if (response && response.errors) {
psContent['errorCodes'] = response.errors.map((e) => e.errorType);
psContent.otherData['hResult'] = response.errors.map((e) => e.detailRecord && e.detailRecord.hResult);
}
SmeWebTelemetry.traceAction(null, { content: psContent }, { type: TelemetryEventTypes.Powershell });
}
/**
* Helper to redactGenericModel function
* Determines whether field should be redacted according to fields provided for redacting and exceptions
* @param key The field in question
* @param keywordsToRedact List of string inclusions to redact - if the field contains any part of this, it will be redacted
* @param exceptions Set of exceptions to the above - if the field matches an exception, it will not be redacted
* @returns True if field should be redacted, false otherwise
*/
static fieldShouldBeRedacted(key, keywordsToRedact, exceptions) {
if (exceptions.has(key)) {
return false;
}
for (const field of keywordsToRedact) {
if (key.toLowerCase().includes(field.toLowerCase())) {
return true;
}
}
return false;
}
/**
* Telemetry utility function to redact a model object. This function will traverse the model in BFS fashion and redact any fields
* that contain any string in the keywordsToRedact array, unless the field is an exception (in the exceptions array).
* This function will not affect keys in StringMaps or Maps - if names exist there, they should be handled separately.
*
* @param model Model to redact
* @param keywordsToRedact List of string inclusions to redact
* @param fieldExceptions List of exceptions to the above
* @returns Redacted model
*/
static redactGenericModel(model, keywordsToRedact, fieldExceptions) {
const redacted_model = JSON.parse(JSON.stringify(model));
const remainingObjects = [redacted_model];
const exceptionSet = new Set(fieldExceptions);
while (remainingObjects.length > 0) {
const currentTree = remainingObjects[0];
Object.keys(currentTree).forEach(key => {
if (MsftSme.isPlainObject(currentTree[key])) {
remainingObjects.push(currentTree[key]);
}
else if (Array.isArray(currentTree[key]) && currentTree[key].some((field) => MsftSme.isPlainObject(field))) {
// If array intermixes objects and non-objects, we will push the objects into the queue and ignore the non-objects.
// The non-objects will avoid redaction, but this should never be a concern in practice.
remainingObjects.push(currentTree[key].filter((field) => MsftSme.isPlainObject(field)));
}
else if (this.fieldShouldBeRedacted(key, keywordsToRedact, exceptionSet)) {
if (Array.isArray(currentTree[key])) {
for (let i = 0; i < currentTree[key].length; ++i) {
currentTree[key][i] = '***';
}
}
else {
currentTree[key] = '***';
}
}
});
remainingObjects.shift();
}
return redacted_model;
}
}
//# sourceMappingURL=sme-web-telemetry.js.map
// SIG // Begin signature block
// SIG // MIIoKAYJKoZIhvcNAQcCoIIoGTCCKBUCAQExDzANBglg
// SIG // hkgBZQMEAgEFADB3BgorBgEEAYI3AgEEoGkwZzAyBgor
// SIG // BgEEAYI3AgEeMCQCAQEEEBDgyQbOONQRoqMAEEvTUJAC
// SIG // AQACAQACAQACAQACAQAwMTANBglghkgBZQMEAgEFAAQg
// SIG // krjQAqpKywO6El+QZVLGn0ppIG5rJJpwsmy+WAkUr6ug
// SIG // gg12MIIF9DCCA9ygAwIBAgITMwAABARsdAb/VysncgAA
// SIG // AAAEBDANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJV
// SIG // UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
// SIG // UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
// SIG // cmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQgQ29kZSBT
// SIG // aWduaW5nIFBDQSAyMDExMB4XDTI0MDkxMjIwMTExNFoX
// SIG // DTI1MDkxMTIwMTExNFowdDELMAkGA1UEBhMCVVMxEzAR
// SIG // BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v
// SIG // bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
// SIG // bjEeMBwGA1UEAxMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
// SIG // MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
// SIG // tCg32mOdDA6rBBnZSMwxwXegqiDEUFlvQH9Sxww07hY3
// SIG // w7L52tJxLg0mCZjcszQddI6W4NJYb5E9QM319kyyE0l8
// SIG // EvA/pgcxgljDP8E6XIlgVf6W40ms286Cr0azaA1f7vaJ
// SIG // jjNhGsMqOSSSXTZDNnfKs5ENG0bkXeB2q5hrp0qLsm/T
// SIG // WO3oFjeROZVHN2tgETswHR3WKTm6QjnXgGNj+V6rSZJO
// SIG // /WkTqc8NesAo3Up/KjMwgc0e67x9llZLxRyyMWUBE9co
// SIG // T2+pUZqYAUDZ84nR1djnMY3PMDYiA84Gw5JpceeED38O
// SIG // 0cEIvKdX8uG8oQa047+evMfDRr94MG9EWwIDAQABo4IB
// SIG // czCCAW8wHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYB
// SIG // BQUHAwMwHQYDVR0OBBYEFPIboTWxEw1PmVpZS+AzTDwo
// SIG // oxFOMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQLExVNaWNy
// SIG // b3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAx
// SIG // Mis1MDI5MjMwHwYDVR0jBBgwFoAUSG5k5VAF04KqFzc3
// SIG // IrVtqMp1ApUwVAYDVR0fBE0wSzBJoEegRYZDaHR0cDov
// SIG // L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWlj
// SIG // Q29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNybDBhBggr
// SIG // BgEFBQcBAQRVMFMwUQYIKwYBBQUHMAKGRWh0dHA6Ly93
// SIG // d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWlj
// SIG // Q29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNydDAMBgNV
// SIG // HRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQCI5g/S
// SIG // KUFb3wdUHob6Qhnu0Hk0JCkO4925gzI8EqhS+K4umnvS
// SIG // BU3acsJ+bJprUiMimA59/5x7WhJ9F9TQYy+aD9AYwMtb
// SIG // KsQ/rst+QflfML+Rq8YTAyT/JdkIy7R/1IJUkyIS6srf
// SIG // G1AKlX8n6YeAjjEb8MI07wobQp1F1wArgl2B1mpTqHND
// SIG // lNqBjfpjySCScWjUHNbIwbDGxiFr93JoEh5AhJqzL+8m
// SIG // onaXj7elfsjzIpPnl8NyH2eXjTojYC9a2c4EiX0571Ko
// SIG // mhENF3RtR25A7/X7+gk6upuE8tyMy4sBkl2MUSF08U+E
// SIG // 2LOVcR8trhYxV1lUi9CdgEU2CxODspdcFwxdT1+G8YNc
// SIG // gzHyjx3BNSI4nOZcdSnStUpGhCXbaOIXfvtOSfQX/UwJ
// SIG // oruhCugvTnub0Wna6CQiturglCOMyIy/6hu5rMFvqk9A
// SIG // ltIJ0fSR5FwljW6PHHDJNbCWrZkaEgIn24M2mG1M/Ppb
// SIG // /iF8uRhbgJi5zWxo2nAdyDBqWvpWxYIoee/3yIWpquVY
// SIG // cYGhJp/1I1sq/nD4gBVrk1SKX7Do2xAMMO+cFETTNSJq
// SIG // fTSSsntTtuBLKRB5mw5qglHKuzapDiiBuD1Zt4QwxA/1
// SIG // kKcyQ5L7uBayG78kxlVNNbyrIOFH3HYmdH0Pv1dIX/Mq
// SIG // 7avQpAfIiLpOWwcbjzCCB3owggVioAMCAQICCmEOkNIA
// SIG // AAAAAAMwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYT
// SIG // AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
// SIG // EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
// SIG // cG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290
// SIG // IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTEx
// SIG // MDcwODIwNTkwOVoXDTI2MDcwODIxMDkwOVowfjELMAkG
// SIG // A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
// SIG // BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
// SIG // dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0
// SIG // IENvZGUgU2lnbmluZyBQQ0EgMjAxMTCCAiIwDQYJKoZI
// SIG // hvcNAQEBBQADggIPADCCAgoCggIBAKvw+nIQHC6t2G6q
// SIG // ghBNNLrytlghn0IbKmvpWlCquAY4GgRJun/DDB7dN2vG
// SIG // EtgL8DjCmQawyDnVARQxQtOJDXlkh36UYCRsr55JnOlo
// SIG // XtLfm1OyCizDr9mpK656Ca/XllnKYBoF6WZ26DJSJhIv
// SIG // 56sIUM+zRLdd2MQuA3WraPPLbfM6XKEW9Ea64DhkrG5k
// SIG // NXimoGMPLdNAk/jj3gcN1Vx5pUkp5w2+oBN3vpQ97/vj
// SIG // K1oQH01WKKJ6cuASOrdJXtjt7UORg9l7snuGG9k+sYxd
// SIG // 6IlPhBryoS9Z5JA7La4zWMW3Pv4y07MDPbGyr5I4ftKd
// SIG // gCz1TlaRITUlwzluZH9TupwPrRkjhMv0ugOGjfdf8NBS
// SIG // v4yUh7zAIXQlXxgotswnKDglmDlKNs98sZKuHCOnqWbs
// SIG // YR9q4ShJnV+I4iVd0yFLPlLEtVc/JAPw0XpbL9Uj43Bd
// SIG // D1FGd7P4AOG8rAKCX9vAFbO9G9RVS+c5oQ/pI0m8GLhE
// SIG // fEXkwcNyeuBy5yTfv0aZxe/CHFfbg43sTUkwp6uO3+xb
// SIG // n6/83bBm4sGXgXvt1u1L50kppxMopqd9Z4DmimJ4X7Iv
// SIG // hNdXnFy/dygo8e1twyiPLI9AN0/B4YVEicQJTMXUpUMv
// SIG // dJX3bvh4IFgsE11glZo+TzOE2rCIF96eTvSWsLxGoGyY
// SIG // 0uDWiIwLAgMBAAGjggHtMIIB6TAQBgkrBgEEAYI3FQEE
// SIG // AwIBADAdBgNVHQ4EFgQUSG5k5VAF04KqFzc3IrVtqMp1
// SIG // ApUwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYD
// SIG // VR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j
// SIG // BBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0f
// SIG // BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQu
// SIG // Y29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0
// SIG // MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRS
// SIG // MFAwTgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9z
// SIG // b2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
// SIG // MV8yMDExXzAzXzIyLmNydDCBnwYDVR0gBIGXMIGUMIGR
// SIG // BgkrBgEEAYI3LgMwgYMwPwYIKwYBBQUHAgEWM2h0dHA6
// SIG // Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvZG9jcy9w
// SIG // cmltYXJ5Y3BzLmh0bTBABggrBgEFBQcCAjA0HjIgHQBM
// SIG // AGUAZwBhAGwAXwBwAG8AbABpAGMAeQBfAHMAdABhAHQA
// SIG // ZQBtAGUAbgB0AC4gHTANBgkqhkiG9w0BAQsFAAOCAgEA
// SIG // Z/KGpZjgVHkaLtPYdGcimwuWEeFjkplCln3SeQyQwWVf
// SIG // Liw++MNy0W2D/r4/6ArKO79HqaPzadtjvyI1pZddZYSQ
// SIG // fYtGUFXYDJJ80hpLHPM8QotS0LD9a+M+By4pm+Y9G6XU
// SIG // tR13lDni6WTJRD14eiPzE32mkHSDjfTLJgJGKsKKELuk
// SIG // qQUMm+1o+mgulaAqPyprWEljHwlpblqYluSD9MCP80Yr
// SIG // 3vw70L01724lruWvJ+3Q3fMOr5kol5hNDj0L8giJ1h/D
// SIG // Mhji8MUtzluetEk5CsYKwsatruWy2dsViFFFWDgycSca
// SIG // f7H0J/jeLDogaZiyWYlobm+nt3TDQAUGpgEqKD6CPxNN
// SIG // ZgvAs0314Y9/HG8VfUWnduVAKmWjw11SYobDHWM2l4bf
// SIG // 2vP48hahmifhzaWX0O5dY0HjWwechz4GdwbRBrF1HxS+
// SIG // YWG18NzGGwS+30HHDiju3mUv7Jf2oVyW2ADWoUa9WfOX
// SIG // pQlLSBCZgB/QACnFsZulP0V3HjXG0qKin3p6IvpIlR+r
// SIG // +0cjgPWe+L9rt0uX4ut1eBrs6jeZeRhL/9azI2h15q/6
// SIG // /IvrC4DqaTuv/DDtBEyO3991bWORPdGdVk5Pv4BXIqF4
// SIG // ETIheu9BCrE/+6jMpF3BoYibV3FWTkhFwELJm3ZbCoBI
// SIG // a/15n8G9bW1qyVJzEw16UM0xghoKMIIaBgIBATCBlTB+
// SIG // MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv
// SIG // bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj
// SIG // cm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNy
// SIG // b3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExAhMzAAAE
// SIG // BGx0Bv9XKydyAAAAAAQEMA0GCWCGSAFlAwQCAQUAoIGu
// SIG // MBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisG
// SIG // AQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3
// SIG // DQEJBDEiBCDJcbeM6S5xEgMomsRym8hNa6lYhK6BLJQw
// SIG // 9prVcV3TvjBCBgorBgEEAYI3AgEMMTQwMqAUgBIATQBp
// SIG // AGMAcgBvAHMAbwBmAHShGoAYaHR0cDovL3d3dy5taWNy
// SIG // b3NvZnQuY29tMA0GCSqGSIb3DQEBAQUABIIBABNq/ATx
// SIG // qaxEeDQ7JyBEbjOlBrwfJUJQUkZ0MFrQj8bKFTZaVl8a
// SIG // e6wNMdzUpdN0xa40LUg32Tlz1JhXKoz5UX/2SE4VBV3X
// SIG // EE3flPvgWhLc8L4TcXTq0ex7N9gP8NO5Eul0XT7Mr/hL
// SIG // bhdHXu3WotFxj5eG0N4YpZm3u3JlpVKQtlbZRVm7kDHh
// SIG // LwBupTh5WwYzsLLDl1CsvH/Iz/AU4ucA7DyKaMUwfj46
// SIG // 6sGF1cAQImZ/WbXDsQQnt9S+9fkLqFcsxl8kAnVbqUQ6
// SIG // El0wrGpVJcXdCNGRTbBazaWrnFk7kjSgPIFJElNev/Ic
// SIG // 6Fe64Nckv1TrcZF2CZ0gvXjgOkahgheUMIIXkAYKKwYB
// SIG // BAGCNwMDATGCF4Awghd8BgkqhkiG9w0BBwKgghdtMIIX
// SIG // aQIBAzEPMA0GCWCGSAFlAwQCAQUAMIIBUgYLKoZIhvcN
// SIG // AQkQAQSgggFBBIIBPTCCATkCAQEGCisGAQQBhFkKAwEw
// SIG // MTANBglghkgBZQMEAgEFAAQgBqgbNHVuvB8nJbHDtdL7
// SIG // jsWz0Gf4ihtxKYypt7EfTZICBmeuHCKifRgTMjAyNTAy
// SIG // MjAxNTI4MzcuNDY2WjAEgAIB9KCB0aSBzjCByzELMAkG
// SIG // A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
// SIG // BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
// SIG // dCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0
// SIG // IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNo
// SIG // aWVsZCBUU1MgRVNOOjM3MDMtMDVFMC1EOTQ3MSUwIwYD
// SIG // VQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl
// SIG // oIIR6jCCByAwggUIoAMCAQICEzMAAAHqmiRy1Vk/YWMA
// SIG // AQAAAeowDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMC
// SIG // VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
// SIG // B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
// SIG // b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt
// SIG // U3RhbXAgUENBIDIwMTAwHhcNMjMxMjA2MTg0NTMwWhcN
// SIG // MjUwMzA1MTg0NTMwWjCByzELMAkGA1UEBhMCVVMxEzAR
// SIG // BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v
// SIG // bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
// SIG // bjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3Bl
// SIG // cmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNO
// SIG // OjM3MDMtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3Nv
// SIG // ZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG
// SIG // 9w0BAQEFAAOCAg8AMIICCgKCAgEAtQtf8Ug/IAfV+y7n
// SIG // aKNq1m9pLKmheuULSZG0KZrHOhuG4OTDr+lj/7ieFzib
// SIG // yl/3NbdHo+KFganRg+lW411+E9Cn8pU7pa8yrYMZ8WYe
// SIG // 6tbg9A8v8ORtAyQz2+qMUK8+rzFdmd8vWcY32agZw36h
// SIG // qJ/+FQx52YXWrNtrL0guRh8sLENifdDDOy+HnGPE5yyP
// SIG // OZF101REm9PbcS9rRzGKwfihwstPHbN+mp+yHDhn0ZoR
// SIG // 2xaD2uaJvWBqVSkvMXk+xAMFu1m1y/5aOafSkUSIwJbA
// SIG // QRw9U3RgbnKxgt00F0k6fbOw45L7zRblGtASrM+lIgi8
// SIG // SRkEmYXdojiUxHydX8WJNp2OkgirFflZrVeWoj82P7Fq
// SIG // BWOeNvs86wD6+Hpa76/bgenIvynIv/xDhEWRFEwT1zBP
// SIG // 4mvrfI609st7oNeTEglboTrDa5rmRcGkQq0RA9Ms+Ffc
// SIG // JTExhyCVueYjTNxz1SSdfbzkr6wj/ZbBHBMFmSENRQsj
// SIG // zp5DNX7O/PNHWoQGuVJj6jJOVhCscwz1adPNV+UUOhxl
// SIG // VM+mXYENI3E+fRBvgigz0Q+psfKL8yKUv6/8BBzyreZD
// SIG // oWK48kB13PShyk1n16QFY9UsqreV+J6/jKXrm7/jfz40
// SIG // BD69ImCQ40sya6iC4QbOacrW+r8kfB1FTKfpgAOK14zs
// SIG // ONr5B30CAwEAAaOCAUkwggFFMB0GA1UdDgQWBBQrgUUl
// SIG // olHm6RdAVNTEyHKLBW5ZXjAfBgNVHSMEGDAWgBSfpxVd
// SIG // AF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQ
// SIG // hk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
// SIG // L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB
// SIG // JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG
// SIG // CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
// SIG // b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUt
// SIG // U3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB
// SIG // Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4G
// SIG // A1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEA
// SIG // KIOtVl4/fv58VW19xt+yoL8qDQJ7rtsNx6FmY9x9GAnk
// SIG // N2/SkmU4VU4VuIhXB6yp4RTAW1yV+LkCOd5Dlkmlgmld
// SIG // 8Qs56Ubd3OP4Ep93bzv9Rj9zCZKSX4KOegoEvcyzoj99
// SIG // ZH5qVHT6npGW+IrzEei6D2+RzZatFmwacxW7bE4za08n
// SIG // 6qnKgMHOq/fQ39lEE6g2tL88KQPAsYgINipWz8jMATj3
// SIG // K/YSU/LBqV/2YSw4ddXWXG1AM1x6NUSaK0kn7VWvYS1p
// SIG // 88RsxBmnz1MC5qBE4oThi6iEJQqb6/eB4mpNBqtMGOpX
// SIG // blEI5P5cWeBMwMP3BjHpPCd0HYjUvLvbo2IdQezS6+rd
// SIG // yIJX0nA1d23VVnrdYrU1KClUSyIr0Q8AE+3UR9dwqt9o
// SIG // 9iRuQWLv14rURPHHc2iZg1Qc2IZT5fUF7wvuqkfCOjSD
// SIG // f/fdeG06v0uIOhReH9XYsVMROKpX1DzIsRq9BbeP0tD+
// SIG // H8JobPlh0Z+tjweI98wh4sSiQrEZ/SEdxMQUCkHTIuWr
// SIG // oqgesUAQA1H/he4UimX2wPLBUha3i0qob4/qlEBfODXM
// SIG // bmsaWyVlabDtfCC+EG7eOQs/0DGuxJjBjZ+2vDDN7k0D
// SIG // pUMtLunP46tddYtSajI2sk3HkGTTATDORDHOQ6+Zt0+G
// SIG // w4/VkzS4D/EhXtxKk2llTDkwggdxMIIFWaADAgECAhMz
// SIG // AAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUA
// SIG // MIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
// SIG // Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
// SIG // TWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylN
// SIG // aWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3Jp
// SIG // dHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAx
// SIG // ODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
// SIG // YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
// SIG // VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
// SIG // BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw
// SIG // MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
// SIG // 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1
// SIG // V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeF
// SIG // RiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc
// SIG // wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus
// SIG // 9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130
// SIG // /o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHI
// SIG // NSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTes
// SIG // y+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGp
// SIG // F1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+
// SIG // /NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fz
// SIG // pk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNO
// SIG // wTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLi
// SIG // Mxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5
// SIG // UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q
// SIG // BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H
// SIG // XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG
// SIG // CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE
// SIG // FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSf
// SIG // pxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG
// SIG // DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRw
// SIG // Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3Mv
// SIG // UmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUH
// SIG // AwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYD
// SIG // VR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j
// SIG // BBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0f
// SIG // BE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQu
// SIG // Y29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0
// SIG // XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBK
// SIG // BggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQu
// SIG // Y29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w
// SIG // Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq
// SIG // reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1
// SIG // OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT
// SIG // Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinL
// SIG // btg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l
// SIG // 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJ
// SIG // w7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2Fz
// SIG // Lixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7
// SIG // hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY
// SIG // 3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFX
// SIG // SVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFU
// SIG // a2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz
// SIG // /gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/
// SIG // AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1
// SIG // ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328
// SIG // y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG
// SIG // ahC0HVUzWLOhcGbyoYIDTTCCAjUCAQEwgfmhgdGkgc4w
// SIG // gcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
// SIG // dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
// SIG // aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1p
// SIG // Y3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNV
// SIG // BAsTHm5TaGllbGQgVFNTIEVTTjozNzAzLTA1RTAtRDk0
// SIG // NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
// SIG // U2VydmljZaIjCgEBMAcGBSsOAwIaAxUAidse3EH46UbJ
// SIG // CfFBiHLTgpJhJI+ggYMwgYCkfjB8MQswCQYDVQQGEwJV
// SIG // UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
// SIG // UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
// SIG // cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T
// SIG // dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAOth
// SIG // K9cwIhgPMjAyNTAyMjAwNDE5MzVaGA8yMDI1MDIyMTA0
// SIG // MTkzNVowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA62Er
// SIG // 1wIBADAHAgEAAgIe1zAHAgEAAgIUJDAKAgUA62J9VwIB
// SIG // ADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMC
// SIG // oAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3
// SIG // DQEBCwUAA4IBAQBwHC5Wp7wT3GmvVZTrBLC3U5Zooxnk
// SIG // 3zQ5Vz5Q4SQgejguxV9KLVSKlz2YShpbjFbBgOx5Llhe
// SIG // AYxp48wV5yJtN38z5nA+VxxmVwWhgUxagAWw+yoaEkeR
// SIG // d6OnxSlxYNhYKfbkAifB2LZpXrr5kYByjfBnkHNIv4VB
// SIG // JcwIg+oXNMIwi/HX4k0otB39l/ruYv7/4KeatcfgdiNc
// SIG // Bi8ycdf8RYgBJ7Keiy85HqBjfVF5QD/w28knib9sr3T0
// SIG // qhZyqVdqamwO4wfO388PBKHuaRSFE5vyoNH59RJHqP5C
// SIG // NLk9hcxhsNd+VzL9fVJnMympMqFQOM/xoh/rlrkPhK9o
// SIG // UdfCMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMx
// SIG // EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
// SIG // ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
// SIG // dGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh
// SIG // bXAgUENBIDIwMTACEzMAAAHqmiRy1Vk/YWMAAQAAAeow
// SIG // DQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzEN
// SIG // BgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgyIO9
// SIG // cNU2yCfHWyV1rAvdQjZQl3P92cZB8UMNFo3JdeEwgfoG
// SIG // CyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCApj6HV42Q0
// SIG // eIsINJbSwDVwYeRtbiqiiL6vLIynpLhmeDCBmDCBgKR+
// SIG // MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
// SIG // dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
// SIG // aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p
// SIG // Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB
// SIG // 6pokctVZP2FjAAEAAAHqMCIEIGyjaIeIa7Ei9ibtJl0b
// SIG // vz0NvJpIKDh1OAlHHM2qxjN9MA0GCSqGSIb3DQEBCwUA
// SIG // BIICAKf4fa3fQh5KNs7da3qEnQYvSakqcv/hiEj5WpD2
// SIG // QttgX54IPIrTuInOOi6tf+A/f5B6pDdgfnODXGPx9qlZ
// SIG // kVxp6g1ylusLY3klpQGFoRmyhYyTzNowrNFr0rx1FrfC
// SIG // qYXygaOAfD6mxTENyIDwNanIyChlU3N+M/Ka8TzrjBbe
// SIG // IvSYMCzrJ3E33/o7Rj6+r6AWbJdNiW91Cb8p/9Mr401v
// SIG // tR3x86pbFABaiXsvYVDauvB8+R6xNAHReBd0czH0KHCO
// SIG // 2gB4OfgBxeC9hyD+B1fga1GCm1R9nEYseqaLjLCITfra
// SIG // ksPGMLE8HTEQwpTUXhyng7ds6qQm6ypIRvoBtlxw8ZT/
// SIG // LT5CaqP4OhvdmZWATqSeBeO2IK7jUY5CfWr1DT02bBKP
// SIG // bZZGyFxQuBT0aElJbpEvCOqCUSDlICVLa0lAYziBhLih
// SIG // 6QShhfacAvrdR5zdxomLhRox4kWGrR+ADgbArE1Kk8oB
// SIG // zfJei6C3we9NOCn7EiG3kuukZPiOf/UndHHvcya9YDXa
// SIG // mnFc3HYugbsQDJCNkfpSJH4uuJB6UGLtHSVL0s05jhyn
// SIG // ycIzuqGZ0vbwdnZFER0gn7T4zzPtmWjpKlO/+qn9Wdqk
// SIG // +C4BtLECzAD0oQ2HYpCKnY9ASNUkMQlMcrP0gxAtadzQ
// SIG // k+FLPmGm1Z9MVNe6+NLrZN+r6rZi
// SIG // End signature block