# This script cleans up Active Directory after LES is decommissioned, removes un-nesessary AD objects
# 
# Usage: CleanupActiveDirectoryEMT.ps1 (no parameters required)
#

begin {
    # This function removes permissions for Exchange Security Groups on $ADObject
    function RemoveAllExchangePermissions {
        param(
            $ADObject
        )
        Write-Host "Removing permissions for Exchange Security Groups on $ADObject"
        # It has been observed that permissions are not removed in one go of "Get-ADPermission $ADObject -User $SecurityGroup | Remove-ADPermission", hence including retry 
        $maxRetry = 10
        $sleepTime = 5
        $retry = 0
        do {
            $permissionsRemaining = $false
            foreach ($SecurityGroup in $ExchangeSecurityGroups) {
                #Write-Host "Retry: $retry, SG: $SecurityGroup"
                Get-ADPermission $ADObject -User $SecurityGroup | Remove-ADPermission -Confirm:$False -WarningAction SilentlyContinue
                if ((Get-ADPermission $ADObject -User $SecurityGroup) -ne $null) {
                    $permissionsRemaining = $true
                }
            }
            # Wait for permissions to propagate
            if ($permissionsRemaining) {
                Start-Sleep -Seconds $sleepTime
            }
            $retry++
        } while($retry -lt $maxRetry -and $permissionsRemaining)
    }

    # This function removes Exchange Security Groups, internally it calls the RemoveAllExchangePermissions function
    function RemoveExchangeSecurityGroups {
        param(
            $ExchangeSecurityGroupsObject,
            $SecurityGroupsDomain
        )
        try {
            $ExchangeSecurityGroups = (Get-ADObject -Filter * -SearchBase $ExchangeSecurityGroupsObject.DistinguishedName -SearchScope OneLevel -Server $SecurityGroupsDomain).Name
            foreach ($Domain in $DomainsList) {
                RemoveAllExchangePermissions $Domain.Item2
                RemoveAllExchangePermissions "CN=AdminSDHolder,CN=System,$($Domain.Item2)"
            }
            RemoveAllExchangePermissions $ConfigDN
            RemoveAllExchangePermissions $ExchangeConfigDN
            RemoveAllExchangePermissions $ExchangeOrgConfigDN
            RemoveAllExchangePermissions "CN=Recipient Policies,$ExchangeOrgConfigDN"
            RemoveAllExchangePermissions "CN=Microsoft Exchange Autodiscover,CN=Services,$ConfigDN"
            RemoveAllExchangePermissions "CN=Sites,$ConfigDN"
        }
        catch {
            Write-Host -ForegroundColor Red "Could not remove permissions for Exchange Security Groups. Error:$($Error[0])"
	        return
        }

        # Remove Exchange Security Groups
        Write-Host "Removing Exchange Security Groups container"
        $ExchangeSecurityGroupsObject | Remove-ADObject -Recursive -Confirm:$False
        # Clear corresponding pointers on ExchangeConfigDN
        Set-ADObject -Identity $ExchangeConfigDN -Clear otherWellKnownObjects
    }

    # This function removes all Exchange containers that are not needed for recipient management (after LES is decommissioned)
    function RemoveUnnecessaryExchangeConfigContainers {
        Write-Host "Removing un-nesessary Exchange containers in Configuration partition"
        $ExchangeConfigFilter = 'name -ne "Administrative Groups" -and name -ne "Addressing" -and name -ne "Recipient Policies" -and name -ne "Global Settings" -and name -ne "Transport Settings"'
        Get-ADObject -Filter $ExchangeConfigFilter -SearchBase $ExchangeOrgConfigDN -SearchScope OneLevel | Remove-ADObject -Recursive -Confirm:$False

        # Remove un-ncecessary containers in Administrative Groups
        Get-ADObject -Filter * -SearchBase "CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,$ExchangeOrgConfigDN" -SearchScope OneLevel | Remove-ADObject -Recursive -Confirm:$False

        # Remove un-nesessary containers in Global Settings
        $GlobalSettingsFilter = 'name -ne "CmdletExtensionAgent Settings" -and name -ne "Internet Message Formats"'
        Get-ADObject -Filter $GlobalSettingsFilter -SearchBase "CN=Global Settings,$ExchangeOrgConfigDN" -SearchScope OneLevel | Remove-ADObject -Recursive -Confirm:$False

        # Remove un-necessary containers in Transport Settings
        $TransportSettingsFilter = 'name -ne "Accepted Domains"'
        Get-ADObject -Filter $TransportSettingsFilter -SearchBase "CN=Transport Settings,$ExchangeOrgConfigDN" -SearchScope OneLevel | Remove-ADObject -Recursive -Confirm:$False
    }

    # Initialize code
    $Error.Clear()
    $ADRootDSE = Get-ADRootDSE
    $ConfigDN = $ADRootDSE.configurationNamingContext
    $ExchangeConfigDN = "CN=Microsoft Exchange,CN=Services,$ConfigDN"
    $ExchangeOrgConfigDN = (Get-ADObject -Filter 'ObjectClass -eq "msExchOrganizationContainer"' -SearchBase $ExchangeConfigDN -SearchScope OneLevel).DistinguishedName

    # DomainsList contains list of tuples, Example ("contoso.com", "DC=contoso,DC=com")
    $DomainsList = @()
    foreach ($d in (Get-ADForest).Domains) {
        $DomainObj = Get-ADDomain $d
        $DomainsList += [System.Tuple]::Create($d, $DomainObj.DistinguishedName)
    }
}

process {
    # Load Exchange Powershell snapin
    try {
        Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010
    }
    catch {
        Write-Host -ForegroundColor Red "Unable to load Exchange PSSnapin. Error:$($Error[0])"
        return
    }

    # Import Active Directory module
    try {
        Import-Module ActiveDirectory
    }
    catch {
        Write-Host -ForegroundColor Red "Unable to import ActiveDirectory module. Error:$($Error[0])"
        return
    }

    # Remove system mailboxes if any
    try {
        Write-Host "Removing system mailboxes"
        foreach ($Domain in $DomainsList) {
            Get-ADObject -filter 'name -like "DiscoverySearchMailbox*" -or name -like "SystemMailbox{*" -or name -like "Migration.8f3e7716*" -or name -like "FederatedEmail.4c1f4d8b*"' -SearchBase "CN=Users,$($Domain.Item2)" -Server $Domain.Item1 | Remove-ADObject -Confirm:$False
        }
    }
    catch {
        Write-Host -ForegroundColor Red "Could not remove system mailboxes. Error:$($Error[0])"
    }

    # Remove un-nesessary containers in Exchange Organization
    try {
        RemoveUnnecessaryExchangeConfigContainers
    }
    catch {
        Write-Host -ForegroundColor Red "Could not remove un-necessary Exchange config containers. Error:$($Error[0])"
    }

    # Remove Exchange Security Groups
    try {
        foreach ($Domain in $DomainsList) {
            $ExchangeSecurityGroupsObject = Get-ADobject -Filter 'name -eq "Microsoft Exchange Security Groups" -and objectClass -eq "organizationalUnit"' -Server $Domain.Item1
            if ($ExchangeSecurityGroupsObject -ne $null) {
                RemoveExchangeSecurityGroups $ExchangeSecurityGroupsObject $Domain.Item1
                break
            }

            # If split permissions is configured, Microsoft Exchange Protected Groups OU is created and some Exchange SGs are created inside it. This OU also has to be cleaned
            $ExchangeProtectedGroupsObject = Get-ADobject -Filter 'name -eq "Microsoft Exchange Protected Groups" -and objectClass -eq "organizationalUnit"' -Server $Domain.Item1
            if ($ExchangeProtectedGroupsObject -ne $null) {
                RemoveExchangeSecurityGroups $ExchangeProtectedGroupsObject $Domain.Item1
                break
            }
        }
    }
    catch {
        Write-Host -ForegroundColor Red "Could not remove Exchange Security Groups. Error:$($Error[0])"
    }

    # Remove Exchange System Objects containers
    try {
        Write-Host "Removing Exchange System Objects container"
        foreach ($Domain in $DomainsList) {
            Get-ADobject -Filter 'name -eq "Microsoft Exchange System Objects" -and objectClass -eq "msExchSystemObjectsContainer"' -Server $Domain.Item1 | Remove-ADObject -Recursive -Confirm:$False
        }
    }
    catch {
        Write-Host -ForegroundColor Red "Could not remove Exchange System Objects containers. Error:$($Error[0])"
    }
}

end {
    if ($Error.Count -eq 0) {
        Write-Host -ForegroundColor Green "Cleanup script completed successfully"
    }
}

# SIG # Begin signature block
# MIIoQgYJKoZIhvcNAQcCoIIoMzCCKC8CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCB2aXMnQS93EOEt
# 5U5UHCZVfcFnnHIHl6VLS+rvevI7u6CCDXYwggX0MIID3KADAgECAhMzAAAEBGx0
# Bv9XKydyAAAAAAQEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjQwOTEyMjAxMTE0WhcNMjUwOTExMjAxMTE0WjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQC0KDfaY50MDqsEGdlIzDHBd6CqIMRQWW9Af1LHDDTuFjfDsvna0nEuDSYJmNyz
# NB10jpbg0lhvkT1AzfX2TLITSXwS8D+mBzGCWMM/wTpciWBV/pbjSazbzoKvRrNo
# DV/u9omOM2Eawyo5JJJdNkM2d8qzkQ0bRuRd4HarmGunSouyb9NY7egWN5E5lUc3
# a2AROzAdHdYpObpCOdeAY2P5XqtJkk79aROpzw16wCjdSn8qMzCBzR7rvH2WVkvF
# HLIxZQET1yhPb6lRmpgBQNnzidHV2Ocxjc8wNiIDzgbDkmlx54QPfw7RwQi8p1fy
# 4byhBrTjv568x8NGv3gwb0RbAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQU8huhNbETDU+ZWllL4DNMPCijEU4w
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMjkyMzAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAIjmD9IpQVvfB1QehvpC
# Ge7QeTQkKQ7j3bmDMjwSqFL4ri6ae9IFTdpywn5smmtSIyKYDn3/nHtaEn0X1NBj
# L5oP0BjAy1sqxD+uy35B+V8wv5GrxhMDJP8l2QjLtH/UglSTIhLqyt8bUAqVfyfp
# h4COMRvwwjTvChtCnUXXACuCXYHWalOoc0OU2oGN+mPJIJJxaNQc1sjBsMbGIWv3
# cmgSHkCEmrMv7yaidpePt6V+yPMik+eXw3IfZ5eNOiNgL1rZzgSJfTnvUqiaEQ0X
# dG1HbkDv9fv6CTq6m4Ty3IzLiwGSXYxRIXTxT4TYs5VxHy2uFjFXWVSL0J2ARTYL
# E4Oyl1wXDF1PX4bxg1yDMfKPHcE1Ijic5lx1KdK1SkaEJdto4hd++05J9Bf9TAmi
# u6EK6C9Oe5vRadroJCK26uCUI4zIjL/qG7mswW+qT0CW0gnR9JHkXCWNbo8ccMk1
# sJatmRoSAifbgzaYbUz8+lv+IXy5GFuAmLnNbGjacB3IMGpa+lbFgih57/fIhamq
# 5VhxgaEmn/UjWyr+cPiAFWuTVIpfsOjbEAww75wURNM1Imp9NJKye1O24EspEHmb
# DmqCUcq7NqkOKIG4PVm3hDDED/WQpzJDkvu4FrIbvyTGVU01vKsg4UfcdiZ0fQ+/
# V0hf8yrtq9CkB8iIuk5bBxuPMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGiIwghoeAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAAQEbHQG/1crJ3IAAAAABAQwDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEILWMTdqaC1jePysIkLu0+g3n
# nF6fzUXjC4qc3koYudiUMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAaalhccTuUVvdnXSxGCC0ZA1ZwjaFMUW9e7LpLUFP3UyYtpFdjMUwoUjS
# fFXa27S7l+vkSgAFyxl5fpUABZD1c59NhJRb5bTC5hbhr0outA6Jb6mxIVczsPpj
# 5/PTgiySgjPWkXMInyFl5qLiCKHPHahDzGnwGrDYIzS6lh14P3gSB1VNPtWDEt8w
# AAdBnowIJY6aAAtzqnnl39tTO2j3al1I2haKgZ1jNw5ejeb5mVB6b05L5PfaLSqe
# lHxnXPe/xl/D+Sh35yU1vu1gfV0YDWJKFwViaWw8bBKu0rVVfB/vTaZMQKXboGIk
# Wcs12SQcxIva8s20fi7aES+AHfn2RaGCF6wwgheoBgorBgEEAYI3AwMBMYIXmDCC
# F5QGCSqGSIb3DQEHAqCCF4UwgheBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsq
# hkiG9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCD7uhI2bZBlb0rO+L2lY6EwiscyyiLJQZZ85jziKjtD7gIGZ2K7wYau
# GBIyMDI1MDEwNjIwMDMxNy44M1owBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVs
# YW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNO
# OjMyMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBT
# ZXJ2aWNloIIR+zCCBygwggUQoAMCAQICEzMAAAH4o6EmDAxASP4AAQAAAfgwDQYJ
# KoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjQw
# NzI1MTgzMTA4WhcNMjUxMDIyMTgzMTA4WjCB0zELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3Bl
# cmF0aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzIxQS0w
# NUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2Uw
# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDFHbeldicPYG44N15ezYK7
# 9PmQoj5sDDxxu03nQKb8UCuNfIvhFOox7qVpD8Kp4xPGByS9mvUmtbQyLgXXmvH9
# W94aEoGahvjkOY5xXnHLHuH1OTn00CXk80wBYoAhZ/bvRJYABbFBulUiGE9YKdVX
# ei1W9qERp3ykyahJetPlns2TVGcHvQDZur0eTzAh4Le8G7ERfYTxfnQiAAezJpH2
# ugWrcSvNQQeVLxidKrfe6Lm4FysU5wU4Jkgu5UVVOASpKtfhSJfR62qLuNS0rKmA
# h+VplxXlwjlcj94LFjzAM2YGmuFgw2VjF2ZD1otENxMpa111amcm3KXl7eAe5iiP
# zG4NDRdk3LsRJHAkgrTf6tNmp9pjIzhdIrWzRpr6Y7r2+j82YnhH9/X4q5wE8njJ
# R1uolYzfEy8HAtjJy+KAj9YriSA+iDRQE1zNpDANVelxT5Mxw69Y/wcFaZYlAiZN
# kicAWK9epRoFujfAB881uxCm800a7/XamDQXw78J1F+A8d86EhZDQPwAsJj4uyLB
# vNx6NutWXg31+fbA6DawNrxF82gPrXgjSkWPL+WrU2wGj1XgZkGKTNftmNYJGB3U
# UIFcal+kOKQeNDTlg6QBqR1YNPZsZJpRkkZVi16kik9MCzWB3+9SiBx2IvnWjuyG
# 4ciUHpBJSJDbhdiFFttAIQIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFL3OxnPPntCV
# Pmeu3+iK0u/U5Du2MB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8G
# A1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBs
# BggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0
# LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUy
# MDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUH
# AwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQBh+TwbPOkRWcaX
# vLqhejK0JvjYfHpM4DT52RoEjfp+0MT20u5tRr/ExscHmtw2JGEUdn3dF590+lzj
# 4UXQMCXmU/zEoA77b3dFY8oMU4UjGC1ljTy3wP1xJCmAZTPLDeURNl5s0sQDXsD8
# JOkDYX26HyPzgrKB4RuP5uJ1YOIR9rKgfYDn/nLAknEi4vMVUdpy9bFIIqgX2GVK
# tlIbl9dZLedqZ/i23r3RRPoAbJYsVZ7z3lygU/Gb+bRQgyOOn1VEUfudvc2DZDiA
# 9L0TllMxnqcCWZSJwOPQ1cCzbBC5CudidtEAn8NBbfmoujsNrD0Cwi2qMWFsxwbr
# yANziPvgvYph7/aCgEcvDNKflQN+1LUdkjRlGyqY0cjRNm+9RZf1qObpJ8sFMS2h
# OjqAs5fRQP/2uuEaN2SILDhLBTmiwKWCqCI0wrmd2TaDEWUNccLIunmoHoGg+lzz
# ZGE7TILOg/2C/vO/YShwBYSyoTn7Raa7m5quZ+9zOIt9TVJjbjQ5lbyV3ixLx+fJ
# uf+MMyYUCFrNXXMfRARFYSx8tKnCQ5doiZY0UnmWZyd/VVObpyZ9qxJxi0SWmOpn
# 0aigKaTVcUCk5E+z887jchwWY9HBqC3TSJBLD6sF4gfTQpCr4UlP/rZIHvSD2D9H
# xNLqTpv/C3ZRaGqtb5DyXDpfOB7H9jCCB3EwggVZoAMCAQICEzMAAAAVxedrngKb
# SZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv
# ZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmlj
# YXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIy
# NVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT
# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE
# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEB
# AQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXI
# yjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjo
# YH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1y
# aa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v
# 3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pG
# ve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viS
# kR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYr
# bqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlM
# jgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSL
# W6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AF
# emzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIu
# rQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIE
# FgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWn
# G1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEW
# M2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5
# Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBi
# AEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV
# 9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3Js
# Lm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAx
# MC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2
# LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv
# 6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZn
# OlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1
# bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4
# rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU
# 6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDF
# NLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/
# HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdU
# CbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKi
# excdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTm
# dHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZq
# ELQdVTNYs6FwZvKhggNWMIICPgIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVs
# YW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNO
# OjMyMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBT
# ZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQC2RC395tZJDkOcb5opHM8QsIUT0aCBgzCB
# gKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUA
# AgUA6yZF8jAiGA8yMDI1MDEwNjEyMDcxNFoYDzIwMjUwMTA3MTIwNzE0WjB0MDoG
# CisGAQQBhFkKBAExLDAqMAoCBQDrJkXyAgEAMAcCAQACAgjOMAcCAQACAhJBMAoC
# BQDrJ5dyAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEA
# AgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAIB6mYy034uzKqA9
# y/TRqoXIswW88PWJSwOo75V4G6THG1yAE1Q9tQC4nyJiDxqX1yOlvrXWeaQw94rp
# idzLPw2ZQxhLhBmvxwVrEDSj49T3FTcmObL8rqLOyjM7+VWlWw3zKZZ3tCybcIpq
# HIe2LG0tmpYtxr+LrWgUxt7mSMHbSwOqOXTvGWeFVN720kszn5ydACDjlm27QANM
# JZ/6d/78xD1d/x7bZGfMVteFHzaU1DpS4ZhaXcVJb5rBRTWKVtJ1eq7Mp+zLi8kg
# v9B0ngxpfq95sjVg42wq+lDfNDN6wZqwyAhf0+Jjvs4rk69TEmYxEQRHDczXe5iv
# +fZNd4YxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx
# MAITMwAAAfijoSYMDEBI/gABAAAB+DANBglghkgBZQMEAgEFAKCCAUowGgYJKoZI
# hvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCBAJ1Lu3BUwsk2d
# szx+kiINd659vKLVgNXY72MFKjVWJjCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQw
# gb0EIO/MM/JfDVSQBQVi3xtHhR2Mz3RC/nGdVqIoPcjRnPdaMIGYMIGApH4wfDEL
# MAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v
# bmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWlj
# cm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAH4o6EmDAxASP4AAQAAAfgw
# IgQgiR+fY6i3/Z+FKvnqbpQcenXSg+N4WI5zr9rRiiALUOkwDQYJKoZIhvcNAQEL
# BQAEggIAiPZzUU2Ef4iyrSB/4kuNaoIMgvWvKZCn9dnGEoejmEIEalXixXxaEY7q
# +H1TMvAIrR3gDDQujg4KN/kXJze52jupX7BDsDJ9M8bISwox+7zUWiQb/FxJMiqH
# cwMzt5kEXVHvDJvKgZWS4OrDYHi6+A6KCUmBdnCNa5rjfZPBL3tjLdAXsrelUyxS
# h4KgOitgQqv25DYCsDDwi3DWcX+ZTAOfXn2R7BJjnLWD/pJJmhHqW2Eq5ZVddOA5
# RxIdeTMMQH/90reDvnLNYDyBkeyy8Vp/UkNsSUi/Gh/a/5PvKAch3HoUBr4ke17h
# 5J2Lu07lOBHgfAO08f8xmIDKrZnu+9PixMb2iNu5CfGN8ii4dkmt9wYpNFrvGYAe
# AC5+zVhZd9FyFCr4xAV3X6/eP+KJ4CkiDAWFtLr45njPhheh22wI/vLl210b+pCo
# SCn7OrCWUNUF6jm9rpFKUxFjvi42W9diXwnZ4cdNJhDzf+ivGQtIlCw9PzHhTjQ+
# 2szop1jascrWg1eu77D4C7wcwlwmAWZcNtGlQCMXm5V4NLxdjjyUjwrtW15YCed/
# 9QfeJOebhgWW60wpjZ6ArkNUS4ZaGeP0WH2Pm+QEcVUyzgVc1oP5lDYhClJ+IPIc
# uyVpSylMs1fvfojqG4JKr8cMdhrV9KdWQG0dcjRcNLoXlC9U0C4=
# SIG # End signature block