certificate_subscriber_agreement

Document Sample
certificate_subscriber_agreement Powered By Docstoc
					VeriSign® SSL Certificate Subscriber Agreement



Thawte SSL Certificate Subscriber Agreement



RAPIDSSL SSL Certificate Subscriber Agreement
VeriSign® SSL Certificate Subscriber Agreement

YOU MUST READ THIS VERISIGN SSL CERTIFICATE SUBSCRIBER                             "VeriSign Secured™ Seal" means an electronic image featuring a
AGREEMENT ("AGREEMENT") BEFORE APPLYING FOR, ACCEPTING, OR                         VeriSign mark, which when displayed by you on your website
USING A VERISIGN SECURE SITE, SECURE SITE EXTENDED VALIDATION,                     indicates that you have purchased VeriSign service(s) and, when
SECURE SITE PRO, SECURE SITE PRO EXTENDED VALIDATION, OFX SSL,                     clicked on, indicates which VeriSign service(s) you have purchased
SHARED HOSTING SECURITY SERVICE, WLAN SERVER, OR ANY SSL                           and whether such services are active.
CERTIFICATE OBTAINED FROM VERISIGN’S MANAGED PKI FOR SSL
CERTIFICATE SERVICE (EACH, A "CERTIFICATE"). IF YOU DO NOT AGREE                   "VeriSign Trust Network" or "VTN" means the Certificate-based public
TO THE TERMS OF THIS AGREEMENT, DO NOT APPLY FOR, ACCEPT, OR                       key infrastructure governed by the VeriSign Trust Network certificate
USE THE CERTIFICATE. BY CLICKING "ACCEPT" BELOW OR BY                              policies, which enables the worldwide deployment and use of
ACCEPTING OR USING A CERTIFICATE, YOU AGREE TO BECOME A PARTY                      Certificates by VeriSign, its affiliates, their respective customers,
TO, AND BE BOUND BY, THESE TERMS. BY CLICKING "DECLINE", YOU                       Subscribers, and Relying Parties.
INDICATE THAT YOU DO NOT AGREE TO THESE TERMS AND WILL NOT BE
A VERISIGN SUBSCRIBER.                                                         2. Description of the Certificate.
                                                                                  The Certificate for which you have applied on behalf of your
ALL REFERENCES TO "VERISIGN" IN THIS AGREEMENT SHALL MEAN THE                     organization is a SSL Certificate, which is used to support SSL/TLS
SPECIFIC VERISIGN ENTITY SPECIFIED ON THE HOMEPAGE OF THE                         sessions between a web browser and web server using encryption.
WEBSITE ON WHICH YOU APPLIED FOR YOUR CERTIFICATE.                                All VeriSign SSL Certificates are considered Class 3 organizational
                                                                                  Certificates within the VTN. Class 3 Certificates are issued to devices
IF YOU ARE A CUSTOMER OF A RESELLER (AS DEFINED HEREIN), YOU                      to provide authentication; message, software, and content integrity;
REPRESENT AND WARRANT THAT YOUR RESELLER IS AUTHORIZED TO                         and confidentiality encryption. VeriSign Class 3 organizational SSL
APPLY FOR, ACCEPT, INSTALL, MAINTAIN, RENEW, AND, IF NECESSARY,                   Certificates provide assurances of the identity of the Subscriber
REVOKE THE CERTIFICATE ON YOUR BEHALF. BY AUTHORIZING YOUR                        based on a confirmation that the Subscriber organization does in
RESELLER TO USE YOUR CERTIFICATE, YOU AGREE TO BE BOUND BY                        fact exist, that the organization has authorized the Certificate
THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE                         Application, and that the person submitting the Certificate
TERMS, CONTACT VERISIGN IMMEDIATELY AT THE TELEPHONE NUMBER                       Application on behalf of the Subscriber was authorized to do so. The
SET FORTH IN SECTION 24 BELOW AND VERISIGN WILL REVOKE THE                        Certificate also provides assurances that the Subscriber is entitled to
CERTIFICATE.                                                                      use the domain name listed in the Certificate Application. If you
                                                                                  have applied for an Extended Validation Certificate, then VeriSign
IF YOU ARE A RESELLER AND ARE ACTING AS THE AUTHORIZED                            will authenticate your Certificate according to the Extended
REPRESENTATIVE OF A CUSTOMER IN APPLYING FOR A CERTIFICATE,                       Validation Certificate guidelines.
YOU REPRESENT AND WARRANT AS SET FORTH IN SECTIONS 8.2 AND
8.3. IF YOU ARE A RESELLER AND ARE APPLYING FOR YOUR OWN
CERTIFICATE OR ARE APPLYING FOR A SHARED HOSTING SECURITY                      3. Processing the Certificate Application.
SERVICE CERTIFICATE, THIS AGREEMENT APPLIES TO YOU IN ITS                         Upon VeriSign's receipt of the necessary payment and upon
ENTIRETY, EXCEPT FOR SECTION 8.3.                                                 completion of authentication procedures required for the Certificate
                                                                                  you have selected, VeriSign will process your Certificate Application.
                                                                                  If your Certificate Application is approved, VeriSign will issue you a
1.   Definitions.
                                                                                  Certificate for your use in accordance with this Agreement. After you
     "Certification Authority" or "CA" means an entity authorized to issue,       pick up or otherwise install your Certificate, you must review the
     suspend, or revoke Certificates. For purposes of this Agreement, CA          information in it and promptly notify VeriSign of any errors. Upon
     shall mean VeriSign.                                                         receipt of such notice, VeriSign may revoke your Certificate and issue
                                                                                  you a corrected Certificate.
     "Certificate Application" means a request to a CA for the issuance of
     a Certificate.
                                                                               4. Use Restrictions.
     “Certification Practice Statement” or “CPS” means a document, as             You are prohibited from using your Certificate
     revised from time to time, representing a statement of the practices         (i) for or on behalf of any other organization;
     a CA employs in issuing Certificates. VeriSign’s CPS is published at         (ii) to perform private or public key operations in connection with
     http://www.verisign.com/repository/cps.                                            any domain and/or organization name other than the one you
                                                                                        submitted on your Certificate Application, unless you have
     “Intellectual Property Rights” means any and all now known or                      purchased the VeriSign Shared Hosting Security Service;
     hereafter existing rights associated with intangible property,               (iii) on more than one physical server or device at a time, unless you
     including, but not limited to, registered and unregistered, United                 have purchased the Licensed Certificate Option;
     States and foreign copyrights, trade dress, trade names, corporate
     names, logos, inventions, patents, patent applications, software,            (iv) if a WLAN Server Certificate, on any device other than a RADIUS
     know-how and all other intellectual property and proprietary rights                server; and
     (of every kind and nature throughout the universe and however                (v) for use as control equipment in hazardous circumstances or for
     designated).                                                                       uses requiring fail-safe performance such as the operation of
                                                                                        nuclear facilities, aircraft navigation or communication systems,
     "Licensed Certificate Option" means the service option that grants a               air traffic control systems, or weapons control systems, where
     Subscriber the right to use a Certificate on one physical device and               failure could lead directly to death, personal injury, or severe
     obtain additional Certificate licenses for each physical server that               environmental damage. If you are using the Licensed Certificate
     each device manages, or where replicated Certificates may                          Option, you acknowledge and agree that this option can result in
     otherwise reside. This option may not be available to you.                         increased security risks to your network and that VeriSign
                                                                                        expressly disclaims any liability for breaches of security that
     "NetSure Protection Plan" means the extended warranty program                      result from the distribution of a single key across multiple
     offered by VeriSign, as detailed in the Repository.                                devices.
                                                                                  VERISIGN CONSIDERS THE UNLICENSED USE OF A CERTIFICATE ON
     "Relying Party" means an individual or organization that acts in             A DEVICE THAT RESIDES ABOVE A SERVER OR SERVER FARM PIRACY
     reliance on a Certificate and/or a digital signature.                        AND WILL PURSUE VIOLATORS TO THE FULLEST EXTENT OF THE LAW.
                                                                                  Certificates purchased under the Licensed Certificate Option limit the
     "Relying Party Agreement" means an agreement used by a CA                    amount of recovery under the NetSure Protection Plan to ten
     setting forth the terms and conditions under which an individual or          thousand US dollars (US$10,000) or the local currency equivalent
     organization acts as a Relying Party, such as the VeriSign Relying           thereof. If you choose to display the VeriSign Secured Seal, you must
     Party Agreement published in the Repository.                                 install and display such seal only in accordance with the VeriSign
                                                                                  Secured Seal License Agreement published in the Repository.
     "Repository" means the collection of documents located at the link
     for the repository which may be accessed from the homepage of the         5. Revocation.
     website from which you applied for your Certificate.                         If you discover or have reason to believe there has been a
                                                                                  compromise of your private key, or the information within your
     "Reseller" means an internet service provider, a systems integrator,         Certificate is incorrect or has changed, or if your organization name
     a web host, a technical consultant, an application service provider,         and/or domain name registration has changed, you must
     or other entity that obtains Certificates for re-sale.                       immediately notify VeriSign. VeriSign retains the right to revoke your
                                                                                  Certificate at any time without notice if
     "Subscriber" means a person, organization, or entity who is the
     owner of or has the right to the device that is the subject of, and has      (i) VeriSign discovers that the information within your Certificate is
     been issued a Certificate, and is capable of using, and is authorized             no longer valid;
     to use, the private key that corresponds to the public key listed in         (ii) you fail to perform your obligations under the terms of this
     the Certificate at issue.                                                         Agreement; or
VeriSign® SSL Certificate Subscriber Agreement

     (iii) in VeriSign's sole discretion, you have engaged in activities           services, use, and value-added taxes, but excluding taxes based on
           which VeriSign determines are harmful to the VTN.                       the net income of VeriSign) which are imposed by or under the
                                                                                   authority of any government on the service fees charged herein shall
6. Obligations Upon Revocation or Expiration.                                      be borne by you and shall not be considered a part of, a deduction
   Upon expiration or notice of revocation of your Certificate, you shall          from or an offset against such service fees. All payments due to
   permanently remove your Certificate from all devices on which it is             VeriSign shall be made without any deduction or withholding on
   installed and shall not use it for any purpose thereafter. If you have          account of any tax, duty, charge, penalty, or otherwise except as
   installed a VeriSign Secured Seal in conjunction with the revoked               required by law in which case the sum payable by you in respect of
   Certification, then you shall remove such seal from your website.               which such deduction or withholding is to be made shall be
                                                                                   increased to the extent necessary to ensure that, after making such
7.   Term of Service.                                                              deduction or withholding, VeriSign receives and retains (free from
     This Agreement shall remain in effect until your Certificate has              any liability in respect thereof) a net sum equal to the sum it would
     expired or is earlier revoked.                                                have received but for such deduction or withholding being required.
                                                                                   This section does not apply to you if you purchased your Certificate
8. Representations and Warranties.                                                 from a Reseller.
   8.1 VeriSign Representations and Warranties. VeriSign represents
        and warrants that                                                      10. Refund Policy.
                                                                                   If you are not completely satisfied with the Certificate issued to you
       (i) there are no errors introduced by VeriSign in the Certificate           for any reason, you must request, within thirty (30) days of Certificate
             information as a result of VeriSign's failure to use                  issuance, that VeriSign revoke the Certificate and provide you with a
             reasonable care in creating the Certificate;                          refund. Following the initial 30-day period, you are entitled to a
       (ii) its issuance of Certificates shall comply in all material              refund only if VeriSign has breached a warranty or other material
             respects with its CPS; and                                            obligation under this Agreement. This Section does not apply to you
       (iii) its revocation services and use of a Repository conform to            if you have purchased your Certificate from a Reseller.
             its CPS in all material aspects.
   8.2 Your Representations and Warranties. You represent and                  11. Proprietary Rights.
        warrant to VeriSign and Relying Parties that                               You acknowledge that VeriSign and its licensors retain all Intellectual
       (i) all information material to the issuance of a Certificate you           Property Rights and title in and to all of their confidential information
              provide to VeriSign in your Certificate Application is               or other proprietary information, products, services, and the ideas,
              accurate;                                                            concepts, techniques, inventions, processes, software or works of
       (ii) you will inform VeriSign if the representations you made to            authorship developed, embodied in, or practiced in connection with
              VeriSign in your Certificate Application changed or are no           the services provided by VeriSign hereunder, including without
              longer valid;                                                        limitation all modifications, enhancements, derivative works,
                                                                                   configurations, translations, upgrades, and interfaces thereto (all of
       (iii) the Certificate information you provided (including your e-           the foregoing, “VeriSign Works”). The VeriSign Works do not include
              mail address) does not infringe the Intellectual Property            your pre-existing hardware, software, or networks. Except as
              Rights of any third party;                                           otherwise expressly provided herein, nothing in this Agreement shall
       (iv) the Certificate information you provided (including your               create any right of ownership or license in and to the other party’s
              email address) has not been and will not be used for any             Intellectual Property Rights, and each party shall continue to
              unlawful purpose;                                                    independently own and maintain its Intellectual Property Rights.
       (v) you have been (since the time of its creation) and will
              remain the only person possessing your private key, or any       12. Modifications to Subscriber Agreement.
              challenge phrase, PIN, software, or hardware mechanism               VeriSign may
              protecting the private key, and no unauthorized person has           (i) revise the terms of this Agreement; and/or
              had or will have access to such materials or information;
                                                                                   (ii) change part of the services provided herein at any time. Any
       (vi) you will use your Certificate exclusively for authorized and                such change will be binding and effective thirty (30) days after
              legal purposes consistent with this Agreement;                            publication of the change on VeriSign's websites, or upon
       (vii) you will use your Certificate as an end user and not as a                  notification to you by e-mail. If you do not agree with the change,
              Certification Authority to issue Certificates, certification              you may terminate this Agreement at any time by notifying
              revocation lists, or otherwise;                                           VeriSign and requesting a partial refund of fees paid, prorated
       (viii) each digital signature created using your private key is the              from the date of termination to the end of the service period. By
              Subscriber’s digital signature, and the Certificate has been              continuing to use VeriSign services after such change, you agree
              accepted and is operational (not expired or revoked) at the               to abide by and be bound thereby.
              time the digital signature is created;
       (ix) you manifest assent to this Agreement as a condition of            13. Privacy.
              obtaining a Certificate; and                                         VeriSign will treat and process the data you provide in your
                                                                                   Certificate Application in accordance with the VeriSign Privacy
       (x) you will not monitor, interfere with, or reverse engineer               Statement, as amended from time to time and accessible from the
              (save to the extent that you can not be prohibited from so           home page of the website from which you enrolled for your
              doing under applicable law) the technical implementation             Certificate. VeriSign may place in your Certificate information that
              of the VTN, except with the prior written approval from              you provide in your Certificate Application. VeriSign may also
              VeriSign, and shall not otherwise intentionally compromise
              the security of the VTN. You further represent and warrant           (i) publish your Certificate and information about its status in the
              that you have sufficient information to make an informed                  Repository; and
              decision as to the extent to which you choose to rely on a           (ii) use such information for the purposes set out in this Agreement
              digital certificate issued within the VTN, that you are solely            and in the VeriSign Privacy Statement. If you are a Reseller acting
              responsible for deciding whether or not to rely on such                   on behalf of a customer, you warrant that you have all necessary
              information, and that you shall bear the legal                            rights (including consents) to provide your customer information
              consequences of your failure to perform any obligation you                to VeriSign. You are aware that VeriSign will process and/or
              might have as a Relying Party under the applicable Relying                transfer the information you provide in your Certificate
              Party Agreement.                                                          Application in the United States and in other jurisdictions where
   8.3 Reseller Representations and Warranties. Further to section                      VeriSign maintains a presence. For further information on
        8.2, Reseller represents and warrants to VeriSign and Relying                   processing of customer data, please see our Privacy Statement.
        Parties that
       (i) it has obtained the authority of its customer to enter into         14. Disclaimers of Warranties.
              this Agreement on behalf of its customer and/or to bind its          EXCEPT FOR THE EXPRESS LIMITED WARRANTIES CONTAINED IN
              customer to this Agreement; and                                      SECTION 8 OR THE NETSURE PROTECTION PLAN, VERISIGN
                                                                                   DISCLAIMS ALL OTHER WARRANTIES, EXPRESS, IMPLIED, OR
       (ii) it shall comply with and procure its customer's compliance             STATUTORY, INCLUDING WITHOUT LIMITATION, ANY IMPLIED
              with this Agreement.                                                 WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
                                                                                   PURPOSE, SATISFACTION OF CUSTOMER REQUIREMENTS, NON-
9. Fees and Payment Terms.                                                         INFRINGEMENT, AND ANY WARRANTY ARISING OUT OF A COURSE
   As consideration for the Certificate you have purchased, you shall              OF PERFORMANCE, DEALING OR TRADE USAGE. TO THE EXTENT
   pay VeriSign the applicable service fees set forth on our website at            JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN
   the time of your selection, or, if applicable, upon receipt of an               REPRESENTATIONS, WARRANTIES OR GUARANTEES, SOME OF THE
   invoice from VeriSign. All fees are due immediately and are non-                ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.
   refundable, except as otherwise stated below. All taxes, duties,
   fees and other governmental charges of any kind (including sales,
VeriSign® SSL Certificate Subscriber Agreement

15. Indemnity.
    You agree to indemnify, defend and hold harmless VeriSign, its               17. Force Majeure.
    directors, shareholders, officers, agents, employees, successors                 Neither party shall be deemed in default hereunder, nor shall it hold
    and assigns from any and all third party claims, suits, proceedings,             the other party responsible for, any cessation, interruption or delay
    judgments, damages, and costs (including reasonable attorney's                   in the performance of its obligations hereunder (excluding payment
    fees and expenses) arising from                                                  obligations) due to earthquake, flood, fire, storm, natural disaster,
    (i) the breach of any of your warranties, representations and                    act of God, war, terrorism, armed conflict, labor strike, lockout,
          obligations under this Subscriber Agreement,                               boycott or other similar events beyond the reasonable control of
    (ii) any falsehoods or misrepresentations of fact you make on the                such party, provided that the party relying upon this Section 17
          Certificate Application,                                                   (i) gives prompt written notice thereof; and
    (iii) any infringement of an Intellectual Property Right of any person           (ii) takes all steps reasonably necessary to mitigate the effects of
          or entity in information or content provided by you,                            the force majeure event; provided further, that in the event a
    (iv) failure to disclose a material fact on the Certificate Application if            force majeure event extends for a period in excess of thirty (30)
          the misrepresentation or omission was made negligently or with                  days in the aggregate, either party may immediately terminate
                                                                                          this Agreement upon written notice.
          intent to deceive any party, or
    (v) failure to protect the private key, or use a trustworthy system, or      18. Compliance with Law, Export Requirements, and Foreign
          to take the precautions necessary to prevent the compromise,
          loss, disclosure, modification or unauthorized use of the private          Reshipment Liability.
          key under the terms of this Agreement. VeriSign shall promptly             Both parties shall comply with all applicable federal, state and local
          notify you of any such claim, and you shall bear full                      laws, regulations, and export requirements in connection with their
          responsibility for the defense of such claim (including any                obligations under this Agreement. Regardless of any disclosure you
          settlements); provided however, that                                       make to VeriSign of an ultimate destination of any service
                                                                                     component acquired from VeriSign and, notwithstanding anything
          (a) you keep VeriSign informed of, and consult with VeriSign in            contained in this Agreement to the contrary, you will not modify,
               connection with the progress of such litigation or                    export, or re-export, either directly or indirectly, any technical data
               settlement;                                                           provided by VeriSign without first obtaining any and all necessary
          (b) you shall not have any right, without VeriSign’s written               licenses from the United States government or agencies thereof or
               consent, which consent shall not be unreasonably                      any other country that requires an export license or other
               withhold, to settle any such claim if such settlement arises          governmental approval at the time of modification, export, or re-
               from or is part of any criminal action, suit or proceeding or         export. VeriSign shall have the right to suspend performance of any
               contains a stipulation to or admission or acknowledgement             of its obligations under this Agreement, without any prior notice
               of, any liability or wrongdoing (whether in contract, tort, or        being required and without any liability to you, if you fail to comply
               otherwise) on the part of VeriSign, or requires any specific          with this provision.
               performance or non-pecuniary remedy by VeriSign; and
          (c) VeriSign shall have the right to participate in the defense of     19. Severability.
               a claim with counsel of its choice at its own expense. The            If any provision of this Agreement should be found by a court of
               terms of this Section 15 will survive any termination of this         competent jurisdiction to be invalid, illegal or unenforceable in any
               Agreement.                                                            respect, the validity, legality and enforceability of the remaining
    As a Relying Party, you agree to indemnify, defend and hold                      provisions contained shall not, in any way, be affected or impaired
    harmless VeriSign, its directors, shareholders, officers, agents,                thereby.
    employees, successors and assigns from any and all third party
    claims, suits, proceedings, judgments, damages, and costs                    20. Governing Law.
    (including reasonable attorney's fees and expenses) arising from                 Any disputes related to the services provided under this Agreement
    (i) your failure to perform the obligations of a Relying Party as set            shall be governed in all respects by and construed in accordance
          forth in the applicable Relying Party Agreement;                           with the laws of the Commonwealth of Virginia, United States of
                                                                                     America, excluding its conflict of laws rules. The United Nations
    (ii) your reliance on a Certificate that is not reasonable under the             Convention on Contracts for the International Sale of Goods shall not
          circumstances; or                                                          apply to this Agreement.
    (iii) your failure to check the status of such Certificate to determine
          whether the certificate is expired or revoked.                         21. Dispute Resolution.
                                                                                     To the extent permitted by law, before you invoke any dispute
16. Limitations of Liability.                                                        resolution mechanism with respect to a dispute involving any aspect
    16.1 THE MOST THAT VERISIGN MUST PAY YOU UNDER THE                               of this Agreement, you shall notify VeriSign, and any other party to
          NETSURE PROTECTION PLAN IS THE AMOUNT DETERMINED                           the dispute for the purpose of seeking resolution. If the dispute is
          UNDER THE PLAN. THE LIMITATIONS ON DAMAGES AND                             not resolved within sixty (60) days after the initial notice, then a
          PAYMENTS IN THIS SECTION 16.1 DO NOT APPLY TO REFUND                       party may proceed in accordance with the following:
          PAYMENTS.                                                                  (i) When each party to the dispute is a Canadian or U.S. resident or
    16.2 THIS SECTION 16.2 APPLIES TO LIABILITY UNDER CONTRACT                            organization situated or doing business in Canada or the United
          (INCLUDING BREACH OF WARRANTY), TORT (INCLUDING                                 States. All suits arising in connection with this Agreement shall
          NEGLIGENCE AND/OR STRICT LIABILITY), AND ANY OTHER                              be brought in the United States District Court for the Eastern
          LEGAL OR EQUITABLE FORM OF CLAIM. IF YOU INITIATE ANY                           District of Virginia or the state courts of Fairfax County, Virginia,
          CLAIM, ACTION, SUIT, ARBITRATION, OR OTHER PROCEEDING                           U.S.A. The parties agree that such courts shall have exclusive in
          SEPARATE FROM A REQUEST FOR PAYMENT UNDER THE                                   personam jurisdiction and the parties submit to the exclusive in
          NETSURE PROTECTION PLAN RELATING TO SERVICES                                    personam jurisdiction and venue of such courts. The parties
          PROVIDED UNDER THIS AGREEMENT, TO THE EXTENT                                    further waive any right to a jury trial regarding any action brought
          PERMITTED BY APPLICABLE LAW, VERISIGN SHALL NOT BE                              in connection with this Agreement.
          LIABLE FOR (I) ANY LOSS OF PROFIT, BUSINESS, CONTRACTS,
          REVENUE OR ANTICIPATED SAVINGS, OR (II) ANY INDIRECT                       (ii) Where one or more parties to the dispute is not a Canadian or
          OR CONSEQUENTIAL LOSS. VERISIGN'S TOTAL LIABILITY FOR                           U.S. resident or organization situated or doing business in
          DAMAGES SUSTAINED BY YOU AND ANY THIRD PARTY FOR                                Canada or the United States. All disputes arising in connection
          ANY USE OR RELIANCE ON A CERTIFICATE SHALL BE LIMITED,                          with this Agreement shall be finally settled under the Rules of
          IN THE AGGREGATE, TO ONE HUNDRED THOUSAND U.S.                                  Conciliation and Arbitration of the International Chamber of
          DOLLARS (US$100,000) OR THE EQUIVALENT IN LOCAL                                 Commerce (ICC) as modified as necessary to reflect the
          CURRENCY. THE LIABILITY LIMITATIONS PROVIDED IN THIS                            provisions herein by one or more arbitrators. The place of
          SECTION 16.2 SHALL BE THE SAME REGARDLESS OF THE                                arbitration shall be in Geneva, Switzerland, and the proceedings
          NUMBER OF DIGITAL SIGNATURES, TRANSACTIONS, OR                                  shall be conducted in English. In cases involving a single arbiter,
          CLAIMS RELATED TO SUCH CERTIFICATE. THIS SECTION 16.2                           that single arbiter shall be appointed by mutual agreement of
          DOES NOT LIMIT REFUND PAYMENTS OR PAYMENTS UNDER                                the parties. If the parties fail to agree to an arbiter within fifteen
          THE NETSURE PROTECTION PLAN. NOTWITHSTANDING THE                                (15) days, the ICC shall choose an arbiter knowledgeable in
          FOREGOING, VERISIGN’S LIABIILTY SHALL NOT BE LIMITED                            computer software law, information security and cryptography or
          UNDER THIS SECTION 16 IN CASES OF PERSONAL INJURY OR                            otherwise having special qualifications in the field, such as a
          DEATH ARISING FROM VERISIGN’S NEGLIGENCE OR TO ANY                              lawyer, academician, or judge in common law jurisdiction.
          OTHER LIABILITY WHICH CANNOT BE EXCLUDED BY                                Nothing in this Agreement will be deemed as preventing either party
          APPLICABLE LAW (INCLUDING MANDATORY LAWS OF ANY                            from seeking injunctive relief (or any other provisional remedy) from
          APPLICABLE JURISDICTION). TO THE EXTENT JURISDICTIONS                      any court having jurisdiction over the parties and the subject matter
          DO NOT ALLOW THE EXCLUSION OF CERTAIN LIABILITY                            of this dispute as is necessary to protect either party's Intellectual
          LIMITATIONS, SOME OF THE ABOVE EXCLUSIONS MAY NOT                          Property Rights.
          APPLY TO YOU.
VeriSign® SSL Certificate Subscriber Agreement

22. NetSure Protection Plan.
    You are covered by the most current version of the NetSure
    Protection Plan, the details of which are published in the
    Repository. Under this Plan, VeriSign will pay you for certain
    damages arising from the breach by VeriSign of one or more of the
    limited warranties in the NetSure Protection Plan, up to the limits
    set forth therein.

23. Assignment.
    Except as stated otherwise, your rights under this Agreement are not
    assignable or transferable. Any attempt by your creditors to obtain
    an interest in your rights herein, whether by attachment, levy,
    garnishment or otherwise, renders this Agreement voidable at
    VeriSign's option. VeriSign may assign and subcontract its
    obligations under this Agreement to an entity which directly or
    indirectly controls, is controlled by, or is under common control with
    VeriSign, Inc.

24. Notices and Communications.
    You will make all notices, demands or requests to VeriSign with
    respect to this Agreement in writing to the "Contact" address listed
    on the website from where you purchased your Certificate, with a
    copy to: General Counsel, VeriSign, Inc., 487 E. Middlefield Road,
    Mountain View, California, USA 94043. References to telephone
    numbers above shall mean 1-650-426-3400.

25. Entire Agreement.
    This Agreement, the Seal License Agreement (if you choose to
    display a Secured Seal), and if you are a Reseller, your Reseller
    agreement with VeriSign, constitute the entire understanding and
    agreement between VeriSign and you with respect to the
    transactions contemplated, and supersedes any and all prior or
    contemporaneous oral or written representation, understanding,
    agreement or communication relating thereto. Terms and conditions
    in any purchase orders that are not included in or that conflict with
    this Agreement are null and void.

26. Third Party Beneficiary Rights.
    You agree that Microsoft, Inc. shall be an express third party
    beneficiary of the obligations contained in this Agreement.

27. For all Customers Who Are Not Customers of VeriSign, Inc.
    In accepting this Agreement you agree to the use of your data and
    information in accordance with Sections 13.

              VeriSign SSL Certificate Subscriber Agreement Version 4.0
Thawte SSL Certificate Subscriber Agreement

YOU MUST READ THIS THAWTE SSL CERTIFICATE SUBSCRIBER                               been issued a Certificate, and is capable of using, and is authorized
AGREEMENT ("AGREEMENT") BEFORE APPLYING FOR, ACCEPTING, OR                         to use, the private key that corresponds to the public key listed in the
USING A THAWTE SSL WEB SERVER, SSL WEB SERVER WITH EXTENDED                        Certificate at issue.
VALIDATION, SGC SUPERCERT, SGC SUPERCERT WITH EXTENDED
VALIDATION, SSL123 OR ANY SSL CERTIFICATE OBTAINED FROM                            "Thawte PKI" shall mean the Certificate-based public key
THAWTE’S STARTER PKI CERTIFICATE SERVICE (EACH, A "CERTIFICATE").                  infrastructure governed by the Thawte certificate policies, which
IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, DO NOT                         enables the worldwide deployment and use of Certificates by
APPLY FOR, ACCEPT, OR USE THE CERTIFICATE. BY CLICKING "ACCEPT"                    Thawte, its affiliates, their respective customers, Subscribers, and
BELOW OR BY ACCEPTING OR USING A CERTIFICATE, YOU AGREE TO                         Relying Parties.
BECOME A PARTY TO, AND BE BOUND BY, THESE TERMS. BY CLICKING
"DECLINE", YOU INDICATE THAT YOU DO NOT AGREE TO THESE TERMS                       "Thawte Seal" shall mean an electronic image featuring a Thawte
AND WILL NOT BE A THAWTE SUBSCRIBER.                                               mark, which when displayed by you on your website indicates that
                                                                                   you have purchased Thawte service(s) and, when clicked on,
ALL REFERENCES TO "THAWTE" IN THIS AGREEMENT SHALL MEAN                            indicates which Thawte service(s) you have purchased and whether
THAWTE, INC. UNLESS YOU (ON BEHALF OF YOUR ORGANIZATION) ARE                       such services are active.
LOCATED IN THE REPUBLIC OF SOUTH AFRICA, THE REPUBLIC OF
NAMIBIA, THE KINGDOM OF LESOTHO, OR THE KINGDOM OF                             2. Description of the Certificate.
SWAZILAND, IN WHICH CASE ALL REFERENCES TO “THAWTE” HEREIN                        The following applies to Thawte SSL Web Server, SSL Web Server With
SHALL MEAN THAWTE CONSULTING (PTY) LTD.                                           Extended Validation, SSL Web Server Wildcard, SGC SuperCert, SGC
IF YOU ARE A CUSTOMER OF A RESELLER (AS DEFINED HEREIN), YOU                      SuperCert With Extended Validation Certificates only:
REPRESENT AND WARRANT THAT YOUR RESELLER IS AUTHORIZED TO                         “The Certificate for which you have applied on behalf of your
APPLY FOR, ACCEPT, INSTALL, MAINTAIN, RENEW, AND, IF NECESSARY,                   organization is a High Assurance Certificate within the Thawte PKI.
REVOKE THE CERTIFICATE ON YOUR BEHALF. BY AUTHORIZING YOUR                        High Assurance Certificates are issued to Devices to provide
RESELLER TO USE YOUR CERTIFICATE, YOU AGREE TO BE BOUND BY                        authentication; message, software, and content integrity; and
THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE                         confidentiality encryption. High Assurance Certificates provide
TERMS, CONTACT THAWTE IMMEDIATELY AT THE TELEPHONE NUMBER                         assurances of the identity of the Subscriber based on a confirmation
SET FORTH IN SECTION 24 BELOW AND THAWTE WILL REVOKE THE                          that the Subscriber organization does in fact exist, that the
CERTIFICATE.                                                                      organization has authorized the Certificate Application, and that the
                                                                                  person submitting the Certificate Application on behalf of the
IF YOU ARE A RESELLER AND ARE ACTING AS THE AUTHORIZED                            Subscriber was authorized to do so.
REPRESENTATIVE OF A CUSTOMER IN APPLYING FOR A CERTIFICATE,                       The Certificate also provides assurances that the Subscriber is
YOU REPRESENT AND WARRANT AS SET FORTH IN SECTIONS 8.2 AND                        entitled to use the domain name listed in the Certificate Application,
8.3. IF YOU ARE A RESELLER AND ARE APPLYING FOR YOUR OWN                          if a domain name is listed in such Certificate Application.
CERTIFICATE OR ARE APPLYING FOR A SHARED HOSTING SECURITY                         If you have applied for an Extended Validation Certificate, then
SERVICE CERTIFICATE, THIS AGREEMENT APPLIES TO YOU IN ITS                         Thawte will authenticate your Certificate according to the Extended
ENTIRETY, EXCEPT FOR SECTION 8.3.                                                 Validation Certificate guidelines.”
                                                                                  The following applies to Thawte SSL123 Certificates only:
1.   Definitions.
     "Certification Authority" or "CA" means an entity authorized to issue,       “The Certificate for which you have applied on behalf of your
     suspend, or revoke Certificates. For purposes of this Agreement, CA          organization is a Medium Assurance Certificate within the Thawte
     shall mean Thawte.                                                           PKI. Medium Assurance Certificates are issued to Devices to provide
                                                                                  validation of the domain (unless issued to an intranet server);
     "Certificate Application" means a request to a CA for the issuance of        message, software, and content integrity; and confidentiality
     a Certificate.                                                               encryption. Furthermore, Medium Assurance Certificates provide
                                                                                  assurances of the validity of the domain (unless issued to an intranet
     “Certification Practice Statement” or “CPS” means a document, as             server) and that the domain administrator has authorized the
     revised from time to time, representing a statement of the practices         Certificate Application. No organization authentication is performed
     a CA employs in issuing Certificates. Thawte’s CPS is published at           on the owner of the domain.”
     http://www.Thawte.com/repository/cps.
                                                                               3. Processing the Certificate Application.
     “Devices” shall mean any hardware appliance or software                      Upon Thawte's receipt of the necessary payment and upon
     application, such as a server load balancer or SSL accelerator, that         completion of authentication procedures required for the Certificate
     routes electronic data from one point to other single or multiple            you have selected, Thawte will process your Certificate Application. If
     points on a network.                                                         your Certificate Application is approved, Thawte will issue you a
                                                                                  Certificate for your use in accordance with this Agreement. After you
     “Intellectual Property Rights” means any and all now known or                pick up or otherwise install your Certificate, you must review the
     hereafter existing rights associated with intangible property,               information in it and promptly notify Thawte of any errors. Upon
     including, but not limited to, registered and unregistered, United           receipt of such notice, Thawte may revoke your Certificate and issue
     States and foreign copyrights, trade dress, trade names, corporate           you a corrected Certificate. Further, Thawte recognizes that, from
     names, logos, inventions, patents, patent applications, software,            time to time, you may need to re-issue your Certificate. Thawte shall
     know-how and all other intellectual property and proprietary rights          re-issue your Certificate in accordance with its re-issue policy located
     (of every kind and nature throughout the universe and however                in the Thawte CPS and at www.thawte.com/reissue.
     designated).
                                                                               4. Use Restrictions.
     "Licensing Option" shall mean the service option that grants a               You are prohibited from using your Certificate
     Subscriber the right to use a Certificate on one physical device and
     obtain additional Certificate licenses for each physical server that         (vi) for or on behalf of any other organization;
     each device manages, or where replicated Certificates may                    (vii) to perform private or public key operations in connection with
     otherwise reside. This option may not be available to you.                         any domain and/or organization name other than the one you
                                                                                        submitted on your Certificate Application;
     "Relying Party" shall mean an individual or organization that acts in        (viii)     on more than one physical server or Device at a time, unless
     reliance on a Certificate and/or a digital signature.                              you have purchased additional licenses that permit the use of a
                                                                                        Certificate on multiple Devices (“Licensing Option”);
     "Relying Party Agreement" shall mean an agreement used by a CA               (ix) for use as control equipment in hazardous circumstances or for
     setting forth the terms and conditions under which an individual or                uses requiring fail-safe performance such as the operation of
     organization acts as a Relying Party, such as the Thawte Relying                   nuclear facilities, aircraft navigation or communication systems,
     Party Agreement published in the Repository.                                       air traffic control systems, or weapons control systems, where
                                                                                        failure could lead directly to death, personal injury, or severe
     "Repository" shall mean the collection of documents located at the                 environmental damage. If you have selected the Licensing
     link for the repository which may be accessed from the homepage of                 Option, you acknowledge and agree that this option can result in
     the website from which you applied for your Certificate.                           increased security risks to your network and that Thawte
                                                                                        expressly disclaims any liability for breaches of security that
     "Reseller" shall mean an internet service provider, a systems                      result from the distribution of a single key across multiple
     integrator, a web host, a technical consultant, an application service             devices.
     provider, or other entity that obtains Certificates for re-sale.
                                                                                  THAWTE CONSIDERS THE UNLICENSED USE OF A CERTIFICATE ON A
     "Subscriber" means a person, organization, or entity who is the              DEVICE THAT RESIDES ABOVE A SERVER OR SERVER FARM PIRACY
     owner of or has the right to the device that is the subject of, and has      AND WILL PURSUE VIOLATORS TO THE FULLEST EXTENT OF THE LAW.
Thawte SSL Certificate Subscriber Agreement

     If you choose to display the Thawte Seal, you must install and              8.3 Reseller Representations and Warranties. Further to section 8.2,
     display such seal only in accordance with the Conditions of Use of              Reseller represents and warrants to Thawte and Relying Parties
     the Thawte Seal published in the Repository.                                    that
                                                                                    (i) it has obtained the authority of its customer to enter into this
5. Revocation.                                                                            Agreement on behalf of its customer and/or to bind its
   If you discover or have reason to believe there has been a                             customer to this Agreement; and
   compromise of your private key, or the information within your                   (ii) it shall comply with and procure its customer's compliance
   Certificate is incorrect or has changed, or if your organization name                  with this Agreement.
   and/or domain name registration has changed, you must
   immediately notify Thawte. Thawte retains the right to revoke your
   Certificate at any time without notice if                                 9. Fees and Payment Terms.
   (iv) Thawte discovers that the information within your Certificate is        As consideration for the Certificate you have purchased, you shall
        no longer valid;                                                        pay Thawte the applicable service fees set forth on our website at the
                                                                                time of your selection, or, if applicable, upon receipt of an invoice
   (v) you fail to perform your obligations under the terms of this             from Thawte. All fees are due immediately and are non-refundable,
        Agreement; or                                                           except as otherwise stated below. All taxes, duties, fees and other
   (vi) in Thawte's sole discretion, you have engaged in activities             governmental charges of any kind (including sales, services, use,
        which Thawte determines are harmful to the Thawte PKI.                  and value-added taxes, but excluding taxes based on the net income
                                                                                of Thawte) which are imposed by or under the authority of any
6. Obligations Upon Revocation or Expiration.                                   government on the service fees charged herein shall be borne by you
   Upon expiration or notice of revocation of your Certificate, you shall       and shall not be considered a part of, a deduction from or an offset
   permanently remove your Certificate from all devices on which it is          against such service fees. All payments due to Thawte shall be made
   installed and shall not use it for any purpose thereafter. If you have       without any deduction or withholding on account of any tax, duty,
   installed a Thawte Seal in conjunction with the revoked                      charge, penalty, or otherwise except as required by law in which case
   Certification, then you shall remove such seal from your website.            the sum payable by you in respect of which such deduction or
                                                                                withholding is to be made shall be increased to the extent necessary
7.   Term of Service.                                                           to ensure that, after making such deduction or withholding, Thawte
     This Agreement shall remain in effect until your Certificate has           receives and retains (free from any liability in respect thereof) a net
     expired or is earlier revoked.                                             sum equal to the sum it would have received but for such deduction
                                                                                or withholding being required. This section does not apply to you if
8. Representations and Warranties.                                              you purchased your Certificate from a Reseller.
   8.1 Thawte Representations and Warranties. Thawte represents and
        warrants that                                                        10. Refund Policy.
       (i) there are no errors introduced by Thawte in the Certificate           If you cancel your purchase before the Certificate has been issued,
             information as a result of Thawte's failure to use reasonable       Thawte will refund you any amount paid, less an administrative fee
             care in creating the Certificate;                                   of ten percent (10%). If you cancel your purchase after your
                                                                                 Certificate has been issued, you are entitled to a refund only if
       (ii) its issuance of Certificates shall comply in all material
             respects with its CPS; and                                          (i) Thawte has breached a warranty or other material obligation
                                                                                      under this Agreement; or
       (iii) its revocation services and use of a Repository conform to
             its CPS in all material aspects.                                    (ii) your cancellation arises from an error on Thawte’s systems
                                                                                      where Thawte is not able to rectify the problem. Alternatively,
   8.2 Your Representations and Warranties. You represent and                         you may choose to receive a new Certificate at no additional
        warrant to Thawte and Relying Parties that                                    charge. This Section does not apply to you if you have
       (i) all information material to the issuance of a Certificate you              purchased your Certificate from a Reseller.
              provide to Thawte in your Certificate Application is
              accurate;                                                      11. Proprietary Rights.
       (ii) you will inform Thawte if the representations you made to            You acknowledge that Thawte and its licensors retain all Intellectual
              Thawte in your Certificate Application changed or are no           Property Rights and title in and to all of their confidential information
              longer valid;                                                      or other proprietary information, products, services, and the ideas,
       (iii) the Certificate information you provided (including your e-         concepts, techniques, inventions, processes, software or works of
              mail address) does not infringe the Intellectual Property          authorship developed, embodied in, or practiced in connection with
              Rights of any third party;                                         the services provided by Thawte hereunder, including without
       (iv) the Certificate information you provided (including your             limitation all modifications, enhancements, derivative works,
              email address) has not been and will not be used for any           configurations, translations, upgrades, and interfaces thereto (all of
              unlawful purpose;                                                  the foregoing, “Thawte Works”). The Thawte Works do not include
                                                                                 your pre-existing hardware, software, or networks. Except as
       (v) you have been (since the time of its creation) and will               otherwise expressly provided herein, nothing in this Agreement shall
              remain the only person possessing your private key, or any         create any right of ownership or license in and to the other party’s
              challenge phrase, PIN, software, or hardware mechanism             Intellectual Property Rights, and each party shall continue to
              protecting the private key, and no unauthorized person has         independently own and maintain its Intellectual Property Rights.
              had or will have access to such materials or information;
       (vi) you will use your Certificate exclusively for authorized and     12. Modifications to Subscriber Agreement.
              legal purposes consistent with this Agreement;                     Thawte may
       (vii) you will use your Certificate as an end user and not as a           (iii) revise the terms of this Agreement; and/or
              Certification Authority to issue Certificates, certification
              revocation lists, or otherwise;                                    (iv) change part of the services provided herein at any time. Any
                                                                                       such change will be binding and effective thirty (30) days after
       (viii) each digital signature created using your private key is the             publication of the change on Thawte's websites, or upon
              Subscriber’s digital signature, and the Certificate has been             notification to you by e-mail. If you do not agree with the change,
              accepted and is operational (not expired or revoked) at the              you may terminate this Agreement at any time by notifying
              time the digital signature is created;                                   Thawte and requesting a partial refund of fees paid, prorated
      (ix) you manifest assent to this Agreement as a condition of                     from the date of termination to the end of the service period. By
              obtaining a Certificate; and                                             continuing to use Thawte services after such change, you agree
       (x) you will not monitor, interfere with, or reverse engineer                   to abide by and be bound thereby.
              (save to the extent that you can not be prohibited from so
              doing under applicable law) the technical implementation       13. Privacy.
              of the Thawte PKI, except with the prior written approval          Thawte will treat and process the data you provide in your Certificate
              from Thawte, and shall not otherwise intentionally                 Application in accordance with the Thawte Privacy Statement, as
              compromise the security of the Thawte PKI. You further             amended from time to time and accessible from the home page of
              represent and warrant that you have sufficient information         the website from which you enrolled for your Certificate. Thawte may
              to make an informed decision as to the extent to which you         place in your Certificate information that you provide in your
              choose to rely on a digital certificate issued within the          Certificate Application. Thawte may also
              Thawte PKI, that you are solely responsible for deciding           (iii) publish your Certificate and information about its status in the
              whether or not to rely on such information, and that you                 Repository; and
              shall bear the legal consequences of your failure to perform       (iv) use such information for the purposes set out in this Agreement
              any obligation you might have as a Relying Party under the               and in the Thawte Privacy Statement. If you are a Reseller acting
              applicable Relying Party Agreement.                                      on behalf of a customer, you warrant that you have all necessary
                                                                                       rights (including consents) to provide your customer information
Thawte SSL Certificate Subscriber Agreement

        to Thawte. You are aware that Thawte will process and/or                     CANNOT BE EXCLUDED BY APPLICABLE LAW (INCLUDING
        transfer the information you provide in your Certificate                     MANDATORY LAWS OF ANY APPLICABLE JURISDICTION). TO THE
        Application in the United States and in other jurisdictions where            EXTENT JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN
        Thawte maintains a presence. For further information on                      LIABILITY LIMITATIONS, SOME OF THE ABOVE EXCLUSIONS MAY
        processing of customer data, please see our Privacy Statement.               NOT APPLY TO YOU.

14. Disclaimers of Warranties.                                                   17. Force Majeure.
    THAWTE DISCLAIMS ALL OTHER WARRANTIES, EXPRESS, IMPLIED,                         Neither party shall be deemed in default hereunder, nor shall it hold
    OR STATUTORY, INCLUDING WITHOUT LIMITATION, ANY IMPLIED                          the other party responsible for, any cessation, interruption or delay
    WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR                            in the performance of its obligations hereunder (excluding payment
    PURPOSE, SATISFACTION OF CUSTOMER REQUIREMENTS, NON-                             obligations) due to earthquake, flood, fire, storm, natural disaster,
    INFRINGEMENT, AND ANY WARRANTY ARISING OUT OF A COURSE                           act of God, war, terrorism, armed conflict, labor strike, lockout,
    OF PERFORMANCE, DEALING OR TRADE USAGE. TO THE EXTENT                            boycott or other similar events beyond the reasonable control of
    JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN                              such party, provided that the party relying upon this Section 17
    REPRESENTATIONS, WARRANTIES OR GUARANTEES, SOME OF THE                           (i) gives prompt written notice thereof; and
    ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.                                           (ii) takes all steps reasonably necessary to mitigate the effects of
                                                                                          the force majeure event; provided further, that in the event a
15. Indemnity.                                                                            force majeure event extends for a period in excess of thirty (30)
    You agree to indemnify, defend and hold harmless Thawte, its                          days in the aggregate, either party may immediately terminate
    directors, shareholders, officers, agents, employees, successors                      this Agreement upon written notice.
    and assigns from any and all third party claims, suits, proceedings,
    judgments, damages, and costs (including reasonable attorney's               18. Compliance with Law, Export Requirements, and Foreign
    fees and expenses) arising from
                                                                                     Reshipment Liability.
    (vi) the breach of any of your warranties, representations and                   Both parties shall comply with all applicable federal, state and local
          obligations under this Agreement,                                          laws, regulations, and export requirements in connection with their
    (vii) any falsehoods or misrepresentations of fact you make on the               obligations under this Agreement. Regardless of any disclosure you
          Certificate Application,                                                   make to Thawte of an ultimate destination of any service component
    (viii)     any infringement of an Intellectual Property Right of any             acquired from Thawte and, notwithstanding anything contained in
          person or entity in information or content provided by you,                this Agreement to the contrary, you will not modify, export, or re-
    (ix) failure to disclose a material fact on the Certificate Application if       export, either directly or indirectly, any technical data provided by
          the misrepresentation or omission was made negligently or with             Thawte without first obtaining any and all necessary licenses from
          intent to deceive any party, or                                            the United States government or agencies thereof or any other
                                                                                     country that requires an export license or other governmental
    (x) failure to protect the private key, or use a trustworthy system, or          approval at the time of modification, export, or re-export. Thawte
          to take the precautions necessary to prevent the compromise,               shall have the right to suspend performance of any of its obligations
          loss, disclosure, modification or unauthorized use of the private          under this Agreement, without any prior notice being required and
          key under the terms of this Agreement. Thawte shall promptly               without any liability to you, if you fail to comply with this provision.
          notify you of any such claim, and you shall bear full
          responsibility for the defense of such claim (including any
          settlements); provided however, that                                   19. Severability.
                                                                                     If any provision of this Agreement should be found by a court of
          (a) you keep Thawte informed of, and consult with Thawte in                competent jurisdiction to be invalid, illegal or unenforceable in any
               connection with the progress of such litigation or                    respect, the validity, legality and enforceability of the remaining
               settlement;                                                           provisions contained shall not, in any way, be affected or impaired
          (b) you shall not have any right, without Thawte’s written                 thereby.
               consent, which consent shall not be unreasonably
               withhold, to settle any such claim if such settlement arises      20. Governing Law.
               from or is part of any criminal action, suit or proceeding or         Any disputes related to the services provided under this Agreement
               contains a stipulation to or admission or acknowledgement             shall be governed in all respects by and construed in accordance
               of, any liability or wrongdoing (whether in contract, tort, or        with the laws of the Commonwealth of Virginia, United States of
               otherwise) on the part of Thawte, or requires any specific            America, excluding its conflict of laws rules. The United Nations
               performance or non-pecuniary remedy by Thawte; and                    Convention on Contracts for the International Sale of Goods shall not
          (c) Thawte shall have the right to participate in the defense of a         apply to this Agreement.
               claim with counsel of its choice at its own expense. The
               terms of this Section 15 will survive any termination of this     21. Dispute Resolution.
               Agreement.                                                            To the extent permitted by law, before you invoke any dispute
    As a Relying Party, you agree to indemnify, defend and hold                      resolution mechanism with respect to a dispute involving any aspect
    harmless Thawte, its directors, shareholders, officers, agents,                  of this Agreement, you shall notify Thawte, and any other party to the
    employees, successors and assigns from any and all third party                   dispute for the purpose of seeking resolution. If the dispute is not
    claims, suits, proceedings, judgments, damages, and costs                        resolved within sixty (60) days after the initial notice, then a party
    (including reasonable attorney's fees and expenses) arising from                 may proceed in accordance with the following:
    (iv) your failure to perform the obligations of a Relying Party as set           (iii) When each party to the dispute is a Canadian or U.S. resident or
          forth in the applicable Relying Party Agreement;                                 organization situated or doing business in Canada or the United
    (v) your reliance on a Certificate that is not reasonable under the                    States. All suits arising in connection with this Agreement shall
          circumstances; or                                                                be brought in the United States District Court for the Eastern
                                                                                           District of Virginia or the state courts of Fairfax County, Virginia,
    (vi) your failure to check the status of such Certificate to determine                 U.S.A. The parties agree that such courts shall have exclusive in
          whether the certificate is expired or revoked.                                   personam jurisdiction and the parties submit to the exclusive in
                                                                                           personam jurisdiction and venue of such courts. The parties
16. Limitations of Liability.                                                              further waive any right to a jury trial regarding any action brought
    THIS SECTION APPLIES TO LIABILITY UNDER CONTRACT (INCLUDING                            in connection with this Agreement.
    BREACH OF WARRANTY), TORT (INCLUDING NEGLIGENCE AND/OR
    STRICT LIABILITY), AND ANY OTHER LEGAL OR EQUITABLE FORM OF                      (iv) Where one or more parties to the dispute is not a Canadian or
    CLAIM. IF YOU INITIATE ANY CLAIM, ACTION, SUIT, ARBITRATION,                           U.S. resident or organization situated or doing business in
    OR OTHER PROCEEDING UNDER THIS AGREEMENT, TO THE EXTENT                                Canada or the United States. All disputes arising in connection
    PERMITTED BY APPLICABLE LAW, THAWTE SHALL NOT BE LIABLE                                with this Agreement shall be finally settled under the Rules of
    FOR (I) ANY LOSS OF PROFIT, BUSINESS, CONTRACTS, REVENUE OR                            Conciliation and Arbitration of the International Chamber of
    ANTICIPATED SAVINGS, OR (II) ANY INDIRECT OR CONSEQUENTIAL                             Commerce (ICC) as modified as necessary to reflect the
    LOSS. THAWTE'S TOTAL LIABILITY FOR DAMAGES SUSTAINED BY                                provisions herein by one or more arbitrators. The place of
    YOU AND ANY THIRD PARTY FOR ANY USE OR RELIANCE ON A                                   arbitration shall be in Geneva, Switzerland, and the proceedings
    CERTIFICATE SHALL BE LIMITED, IN THE AGGREGATE, TO THE                                 shall be conducted in English. In cases involving a single arbiter,
    LARGER OF: USD$2,000 OR TWO TIMES THE AMOUNT PAID FOR                                  that single arbiter shall be appointed by mutual agreement of
    THE CERTIFICATE. THE LIABILITY LIMITATIONS PROVIDED IN THIS                            the parties. If the parties fail to agree to an arbiter within fifteen
    SECTION SHALL BE THE SAME REGARDLESS OF THE NUMBER OF                                  (15) days, the ICC shall choose an arbiter knowledgeable in
    DIGITAL SIGNATURES, TRANSACTIONS, OR CLAIMS RELATED TO                                 computer software law, information security and cryptography or
    SUCH CERTIFICATE. NOTWITHSTANDING THE FOREGOING,                                       otherwise having special qualifications in the field, such as a
    THAWTE’S LIABIILTY SHALL NOT BE LIMITED UNDER THIS SECTION                             lawyer, academician, or judge in common law jurisdiction.
    IN CASES OF PERSONAL INJURY OR DEATH ARISING FROM                                Nothing in this Agreement will be deemed as preventing either party
    THAWTE’S NEGLIGENCE OR TO ANY OTHER LIABILITY WHICH                              from seeking injunctive relief (or any other provisional remedy) from
Thawte SSL Certificate Subscriber Agreement

    any court having jurisdiction over the parties and the subject matter
    of this dispute as is necessary to protect either party's Intellectual
    Property Rights.

22. Intentionally Left Blank

23. Assignment.
    Except as stated otherwise, your rights under this Agreement are not
    assignable or transferable. Any attempt by your creditors to obtain
    an interest in your rights herein, whether by attachment, levy,
    garnishment or otherwise, renders this Agreement voidable at
    Thawte's option. Thawte may assign and subcontract its obligations
    under this Agreement to an entity which directly or indirectly
    controls, is controlled by or is under common control with Thawte.

24. Notices and Communications.
    You will make all notices, demands or requests to Thawte with
    respect to this Agreement in writing to the "Contact" address listed
    on the website from where you purchased your Certificate, with a
    copy to: General Counsel, Thawte, Inc., 487 E. Middlefield Road,
    Mountain View, California, USA 94043. References to telephone
    numbers above shall mean 1-650-426-3400.

25. Entire Agreement.
    This Agreement, the Conditions of Use (if you choose to display a
    Seal), and if you are a Reseller, your Reseller agreement with
    Thawte, constitute the entire understanding and agreement
    between Thawte and you with respect to the transactions
    contemplated, and supersedes any and all prior or
    contemporaneous oral or written representation, understanding,
    agreement or communication relating thereto. Terms and conditions
    in any purchase orders that are not included in or that conflict with
    this Agreement are null and void.

26. Third Party Beneficiary Rights.
    You agree that Microsoft, Inc. shall be an express third party
    beneficiary of the obligations contained in this Agreement.

                Thawte SSL Certificate Subscriber Agreement Version 4.0
RAPIDSSL SSL Certificate Subscriber Agreement

YOU MUST READ THIS RAPIDSSL SSL CERTIFICATE SUBSCRIBER                              GeoTrust, its affiliates, their respective customers, Subscribers, and
AGREEMENT ("AGREEMENT") BEFORE APPLYING FOR, ACCEPTING, OR                          Relying Parties.
USING A RAPIDSSL, RAPIDSSL WILDCARD, OR FREESSL CERTIFICATE
(EACH, A "CERTIFICATE"). IF YOU DO NOT AGREE TO THE TERMS OF THIS              2. Description of the Certificate.
AGREEMENT, DO NOT APPLY FOR, ACCEPT, OR USE THE CERTIFICATE.                      The Certificate for which you have applied on behalf of your
BY CLICKING "ACCEPT" BELOW OR BY ACCEPTING OR USING A                             organization is not a fully-authenticated Certificate within the
CERTIFICATE, YOU AGREE TO BECOME A PARTY TO, AND BE BOUND BY,                     GeoTrust PKI. These Certificates are issued to devices to provide
THESE TERMS. BY CLICKING "DECLINE", YOU INDICATE THAT YOU DO                      validation of the domain (unless issued to an Intranet Server);
NOT AGREE TO THESE TERMS AND WILL NOT BE A GEOTRUST                               message, software, and content integrity; and confidentiality
SUBSCRIBER.                                                                       encryption. These Certificates provide assurances of the validity of
                                                                                  the domain (unless issued to an Intranet Server) and that the domain
ALL REFERENCES TO "GEOTRUST" IN THIS AGREEMENT SHALL MEAN                         administrator has authorized the Certificate Application.        No
THE SPECIFIC GEOTRUST ENTITY SPECIFIED ON THE HOMEPAGE OF THE                     organization authentication is performed on the owner of the
WEBSITE ON WHICH YOU APPLIED FOR YOUR CERTIFICATE.                                domain.
IF YOU ARE A CUSTOMER OF A RESELLER (AS DEFINED HEREIN), YOU
REPRESENT AND WARRANT THAT YOUR RESELLER IS AUTHORIZED TO                      3. Processing the Certificate Application.
APPLY FOR, ACCEPT, INSTALL, MAINTAIN, RENEW, AND, IF NECESSARY,                   Upon GeoTrust's receipt of the necessary payment and upon
REVOKE THE CERTIFICATE ON YOUR BEHALF. BY AUTHORIZING YOUR                        completion of authentication procedures required for the Certificate
RESELLER TO USE YOUR CERTIFICATE, YOU AGREE TO BE BOUND BY                        you have selected, GeoTrust will process your Certificate Application.
THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE                         If your Certificate Application is approved, GeoTrust will issue you a
TERMS, CONTACT GEOTRUST IMMEDIATELY AT THE TELEPHONE                              Certificate for your use in accordance with this Agreement. After you
NUMBER SET FORTH IN SECTION 24 BELOW AND GEOTRUST WILL                            pick up or otherwise install your Certificate, you must review the
REVOKE THE CERTIFICATE.                                                           information in it and promptly notify GeoTrust of any errors. Upon
                                                                                  receipt of such notice, GeoTrust may revoke your Certificate and
IF YOU ARE A RESELLER AND ARE ACTING AS THE AUTHORIZED                            issue you a corrected Certificate.
REPRESENTATIVE OF A CUSTOMER IN APPLYING FOR A CERTIFICATE,
YOU REPRESENT AND WARRANT AS SET FORTH IN SECTIONS 8.2 AND                     4. Use Restrictions.
8.3. IF YOU ARE A RESELLER AND ARE APPLYING FOR YOUR OWN                          You are prohibited from using your Certificate
CERTIFICATE, THIS AGREEMENT APPLIES TO YOU IN ITS ENTIRETY,                       (x) for or on behalf of any other organization;
EXCEPT FOR SECTION 8.3.                                                           (xi) to perform private or public key operations in connection with
                                                                                        any domain and/or organization name other than the one you
1.   Definitions.                                                                       submitted on your Certificate Application;
     "Certification Authority" or "CA" means an entity authorized to issue,
     suspend, or revoke Certificates. For purposes of this Agreement, CA          (xii) on more than one physical server or device at a time, unless you
     shall mean GeoTrust.                                                               have purchased the Licensed Certificate Option; and
                                                                                  (xiii)     for use as control equipment in hazardous circumstances or
     "Certificate Application" means a request to a CA for the issuance of              for uses requiring fail-safe performance such as the operation of
     a Certificate.                                                                     nuclear facilities, aircraft navigation or communication systems,
                                                                                        air traffic control systems, or weapons control systems, where
     "Certification Practice Statement" or "CPS" means a document, as                   failure could lead directly to death, personal injury, or severe
     revised from time to time, representing a statement of the practices               environmental damage. If you are using the Licensed Certificate
     a CA employs in issuing Certificates. GeoTrust’s CPS is published at               Option, you acknowledge and agree that this option can result in
     http://www.rapidssl.com/legal/index.htm.                                           increased security risks to your network and that GeoTrust
                                                                                        expressly disclaims any liability for breaches of security that
     "Intellectual Property Rights" means any and all now known or                      result from the distribution of a single key across multiple
     hereafter existing rights associated with intangible property,                     devices.
     including, but not limited to, registered and unregistered, United           GEOTRUST CONSIDERS THE UNLICENSED USE OF A CERTIFICATE ON
     States and foreign copyrights, trade dress, trade names, corporate           A DEVICE THAT RESIDES ABOVE A SERVER OR SERVER FARM PIRACY
     names, logos, inventions, patents, patent applications, software,            AND WILL PURSUE VIOLATORS TO THE FULLEST EXTENT OF THE LAW.
     know-how and all other intellectual property and proprietary rights          If you choose to display the GeoTrust Seal, you must install and
     (of every kind and nature throughout the universe and however                display such seal only in accordance with the applicable GeoTrust
     designated).                                                                 Seal License Agreement published in the Repository.
     "Licensed Certificate Option" shall mean the service option that          5. Revocation.
     grants a Subscriber the right to use a Certificate on one physical           If you discover or have reason to believe there has been a
     device and obtain additional Certificate licenses for each physical          compromise of your private key, or the information within your
     server that each device manages, or where replicated Certificates            Certificate is incorrect or has changed, or if your organization name
     may otherwise reside. This option may not be available to you.               and/or domain name registration has changed, you must
                                                                                  immediately notify GeoTrust. GeoTrust retains the right to revoke
     "Relying Party" shall mean an individual or organization that acts in        your Certificate at any time without notice if
     reliance on a Certificate and/or a digital signature.                        (vii) GeoTrust discovers that the information within your Certificate is
                                                                                        no longer valid;
     "Relying Party Agreement" shall mean an agreement used by a CA
     setting forth the terms and conditions under which an individual or          (viii)    you fail to perform your obligations under the terms of this
     organization acts as a Relying Party, such as the GeoTrust Relying                 Agreement; or
     Party Agreement published in the Repository.                                 (ix) in GeoTrust's sole discretion, you have engaged in activities
                                                                                        which GeoTrust determines are harmful to the PKI.
     "Repository" shall mean the collection of documents located at the
     link for the repository which may be accessed from the homepage of        6. Obligations Upon Revocation or Expiration.
     the website from which you applied for your Certificate.                     Upon expiration or notice of revocation of your Certificate, you shall
                                                                                  permanently remove your Certificate from all devices on which it is
     "Reseller" shall mean an internet service provider, a systems                installed and shall not use it for any purpose thereafter. If you have
     integrator, a web host, a technical consultant, an application service       installed a GeoTrust Seal in conjunction with the revoked
     provider, or other entity that obtains Certificates for re-sale.             Certification, then you shall remove such seal from your website.
     "Subscriber" means a person, organization, or entity who is the           7.   Term of Service.
     owner of or has the right to the device that is the subject of, and has        This Agreement shall remain in effect until your Certificate has
     been issued a Certificate, and is capable of using, and is authorized          expired or is earlier revoked.
     to use, the private key that corresponds to the public key listed in
     the Certificate at issue.                                                 8. Representations and Warranties.
                                                                                  8.1 GeoTrust Representations and Warranties. GeoTrust represents
     "GeoTrust Seal" shall mean an electronic image featuring a                        and warrants that
     GeoTrust mark, which when displayed by you on your website
     indicates that you have purchased GeoTrust service(s).                           (i) there are no errors introduced by GeoTrust in the Certificate
                                                                                           information as a result of GeoTrust's failure to use
     "GeoTrust PKI" or "PKI" shall mean the Certificate-based public key                   reasonable care in creating the Certificate;
     infrastructure governed by the GeoTrust PKI certificate policies,                (ii) its issuance of Certificates shall comply in all material
     which enables the worldwide deployment and use of Certificates by                     respects with its CPS; and
RAPIDSSL SSL Certificate Subscriber Agreement

       (iii) its revocation services and use of a Repository conform to              the ideas, concepts, techniques, inventions, processes, software or
             its CPS in all material aspects.                                        works of authorship developed, embodied in, or practiced in
    8.2 Your Representations and Warranties. You represent and                       connection with the services provided by GeoTrust hereunder,
        warrant to GeoTrust and Relying Parties that                                 including without limitation all modifications, enhancements,
                                                                                     derivative works, configurations, translations, upgrades, and
       (i) all information material to the issuance of a Certificate you
                                                                                     interfaces thereto (all of the foregoing, "GeoTrust Works"). The
              provide to GeoTrust in your Certificate Application is
                                                                                     GeoTrust Works do not include your pre-existing hardware, software,
              accurate;
                                                                                     or networks. Except as otherwise expressly provided herein, nothing
       (ii) you will inform GeoTrust if the representations you made to              in this Agreement shall create any right of ownership or license in
              GeoTrust in your Certificate Application changed or are no             and to the other party’s Intellectual Property Rights, and each party
              longer valid;                                                          shall continue to independently own and maintain its Intellectual
       (iii) the Certificate information you provided (including your e-             Property Rights.
              mail address) does not infringe the Intellectual Property
              Rights of any third party;                                         12. Modifications to Subscriber Agreement.
       (iv) the Certificate information you provided (including your                 GeoTrust may
              email address) has not been and will not be used for any               (v) revise the terms of this Agreement; and/or
              unlawful purpose;                                                      (vi) change part of the services provided herein at any time. Any
       (v) you have been (since the time of its creation) and will                        such change will be binding and effective thirty (30) days after
              remain the only person possessing your private key, or any                  publication of the change on GeoTrust's websites, or upon
              challenge phrase, PIN, software, or hardware mechanism                      notification to you by e-mail. If you do not agree with the change,
              protecting the private key, and no unauthorized person has                  you may terminate this Agreement at any time by notifying
              had or will have access to such materials or information;                   GeoTrust and requesting a partial refund of fees paid, prorated
       (vi) you will use your Certificate exclusively for authorized and                  from the date of termination to the end of the service period. By
              legal purposes consistent with this Agreement;                              continuing to use GeoTrust services after such change, you agree
       (vii) you will use your Certificate as an end user and not as a                    to abide by and be bound thereby.
              Certification Authority to issue Certificates, certification
              revocation lists, or otherwise;                                    13. Privacy.
       (viii) each digital signature created using your private key is the           GeoTrust will treat and process the data you provide in your
              Subscriber’s digital signature, and the Certificate has been           Certificate Application in accordance with the GeoTrust Privacy
              accepted and is operational (not expired or revoked) at the            Policy, as amended from time to time and accessible from the home
              time the digital signature is created;                                 page of the website from which you enrolled for your Certificate.
                                                                                     GeoTrust may place in your Certificate information that you provide in
       (ix) you manifest assent to this Agreement as a condition of                  your Certificate Application. GeoTrust may also
              obtaining a Certificate; and
                                                                                     (v) publish your Certificate and information about its status in the
       (x) you will not monitor, interfere with, or reverse engineer                      Repository; and
              (save to the extent that you can not be prohibited from so
              doing under applicable law) the technical implementation               (vi) use such information for the purposes set out in this Agreement
              of the PKI, except with the prior written approval from                     and in the GeoTrust Privacy Policy. If you are a Reseller acting on
              GeoTrust, and shall not otherwise intentionally compromise                  behalf of a customer, you warrant that you have all necessary
              the security of the PKI. You further represent and warrant                  rights (including consents) to provide your customer information
              that you have sufficient information to make an informed                    to GeoTrust. You are aware that GeoTrust will process and/or
              decision as to the extent to which you choose to rely on a                  transfer the information you provide in your Certificate
              digital certificate issued within the PKI, that you are solely              Application in the United States and in other jurisdictions where
              responsible for deciding whether or not to rely on such                     GeoTrust maintains a presence. For further information on
              information, and that you shall bear the legal                              processing of customer data, please see our Privacy Policy.
              consequences of your failure to perform any obligation you
              might have as a Relying Party under the applicable Relying         14. Disclaimers of Warranties.
              Party Agreement.                                                       EXCEPT FOR THE EXPRESS LIMITED WARRANTIES CONTAINED IN
    8.3 Further to section 8.2, Reseller represents and warrants to                  SECTION 8, GEOTRUST DISCLAIMS ALL OTHER WARRANTIES,
        GeoTrust and Relying Parties that                                            EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT
                                                                                     LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY,
       (i) it has obtained the authority of its customer to enter into               FITNESS FOR A PARTICULAR PURPOSE, SATISFACTION OF
              this Agreement on behalf of its customer and/or to bind its            CUSTOMER REQUIREMENTS, NON-INFRINGEMENT, AND ANY
              customer to this Agreement; and                                        WARRANTY ARISING OUT OF A COURSE OF PERFORMANCE, DEALING
       (ii) it shall comply with and procure its customer's compliance               OR TRADE USAGE. TO THE EXTENT JURISDICTIONS DO NOT ALLOW
              with this Agreement.                                                   THE EXCLUSION OF CERTAIN REPRESENTATIONS, WARRANTIES OR
                                                                                     GUARANTEES, SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY
                                                                                     TO YOU.
9. Fees and Payment Terms.
   As consideration for the Certificate you have purchased, you shall
   pay GeoTrust the applicable service fees set forth on our website at          15. Indemnity.
   the time of your selection, or, if applicable, upon receipt of an                 You agree to indemnify, defend and hold harmless GeoTrust, its
   invoice from GeoTrust. All fees are due immediately and are non-                  directors, shareholders, officers, agents, employees, successors and
   refundable, except as otherwise stated below. All taxes, duties,                  assigns from any and all third party claims, suits, proceedings,
   fees and other governmental charges of any kind (including sales,                 judgments, damages, and costs (including reasonable attorney's
   services, use, and value-added taxes, but excluding taxes based on                fees and expenses) arising from
   the net income of GeoTrust) which are imposed by or under the                     (xi) the breach of any of your warranties, representations and
   authority of any government on the service fees charged herein shall                    obligations under this Subscriber Agreement,
   be borne by you and shall not be considered a part of, a deduction                (xii) any falsehoods or misrepresentations of fact you make on the
   from or an offset against such service fees. All payments due to                        Certificate Application,
   GeoTrust shall be made without any deduction or withholding on                    (xiii)     any infringement of an Intellectual Property Right of any
   account of any tax, duty, charge, penalty, or otherwise except as                       person or entity in information or content provided by you,
   required by law in which case the sum payable by you in respect of
   which such deduction or withholding is to be made shall be                        (xiv)      failure to disclose a material fact on the Certificate
   increased to the extent necessary to ensure that, after making such                     Application if the misrepresentation or omission was made
   deduction or withholding, GeoTrust receives and retains (free from                      negligently or with intent to deceive any party, or
   any liability in respect thereof) a net sum equal to the sum it would             (xv) failure to protect the private key, or use a trustworthy system, or
   have received but for such deduction or withholding being required.                     to take the precautions necessary to prevent the compromise,
   This section does not apply to you if you purchased your Certificate                    loss, disclosure, modification or unauthorized use of the private
   from a Reseller.                                                                        key under the terms of this Agreement. GeoTrust shall promptly
                                                                                           notify you of any such claim, and you shall bear full
10. Refund Policy.                                                                         responsibility for the defense of such claim (including any
    GeoTrust shall provide refunds pursuant to its Refund Policy                           settlements); provided however, that
    published on its web site.                                                             (a) you keep GeoTrust informed of, and consult with GeoTrust in
                                                                                                connection with the progress of such litigation or settlement;
11. Proprietary Rights.                                                                    (b) you shall not have any right, without GeoTrust‘s written
    You acknowledge that GeoTrust and its licensors retain all                                  consent, which consent shall not be unreasonably withhold,
    Intellectual Property Rights and title in and to all of their confidential                  to settle any such claim if such settlement arises from or is
    information or other proprietary information, products, services, and                       part of any criminal action, suit or proceeding or contains a
RAPIDSSL SSL Certificate Subscriber Agreement

               stipulation to or admission or acknowledgement of, any          19. Severability.
               liability or wrongdoing (whether in contract, tort, or              If any provision of this Agreement should be found by a court of
               otherwise) on the part of GeoTrust, or requires any specific        competent jurisdiction to be invalid, illegal or unenforceable in any
               performance or non-pecuniary remedy by GeoTrust; and                respect, the validity, legality and enforceability of the remaining
          (c) GeoTrust shall have the right to participate in the defense of       provisions contained shall not, in any way, be affected or impaired
               a claim with counsel of its choice at its own expense. The          thereby.
               terms of this Section 15 will survive any termination of this
               Agreement.                                                      20. Governing Law.
    As a Relying Party, you agree to indemnify, defend and hold                    Any disputes related to the services provided under this Agreement
    harmless GeoTrust, its directors, shareholders, officers, agents,              shall be governed in all respects by and construed in accordance
    employees, successors and assigns from any and all third party                 with the laws of the Commonwealth of Virginia, United States of
    claims, suits, proceedings, judgments, damages, and costs                      America, excluding its conflict of laws rules. The United Nations
    (including reasonable attorney's fees and expenses) arising from               Convention on Contracts for the International Sale of Goods shall not
    (vii) your failure to perform the obligations of a Relying Party as set        apply to this Agreement.
          forth in the applicable Relying Party Agreement;
                                                                               21. Dispute Resolution.
    (viii)     your reliance on a Certificate that is not reasonable under
          the circumstances; or                                                    To the extent permitted by law, before you invoke any dispute
                                                                                   resolution mechanism with respect to a dispute involving any aspect
    (ix) your failure to check the status of such Certificate to determine         of this Agreement, you shall notify GeoTrust, and any other party to
          whether the certificate is expired or revoked.                           the dispute for the purpose of seeking resolution. If the dispute is
                                                                                   not resolved within sixty (60) days after the initial notice, then a
16. Limitations of Liability.                                                      party may proceed in accordance with the following:
    16.1 THE LIMITATIONS ON DAMAGES AND PAYMENTS IN THIS                           (v) When each party to the dispute is a Canadian or U.S. resident or
          SECTION 16.1 DO NOT APPLY TO REFUND PAYMENTS.                                 organization situated or doing business in Canada or the United
    16.2 THIS SECTION 16.2 APPLIES TO LIABILITY UNDER CONTRACT                          States. All suits arising in connection with this Agreement shall
          (INCLUDING BREACH OF WARRANTY), TORT (INCLUDING                               be brought in the United States District Court for the Eastern
          NEGLIGENCE AND/OR STRICT LIABILITY), AND ANY OTHER                            District of Virginia or the state courts of Fairfax County, Virginia,
          LEGAL OR EQUITABLE FORM OF CLAIM. IF YOU INITIATE ANY                         U.S.A. The parties agree that such courts shall have exclusive in
          CLAIM, ACTION, SUIT, ARBITRATION, OR OTHER PROCEEDING                         personam jurisdiction and the parties submit to the exclusive in
          RELATING TO SERVICES PROVIDED UNDER THIS AGREEMENT,                           personam jurisdiction and venue of such courts. The parties
          TO THE EXTENT PERMITTED BY APPLICABLE LAW, GEOTRUST                           further waive any right to a jury trial regarding any action brought
          SHALL NOT BE LIABLE FOR (I) ANY LOSS OF PROFIT,                               in connection with this Agreement.
          BUSINESS, CONTRACTS, REVENUE OR ANTICIPATED                              (vi) Where one or more parties to the dispute is not a Canadian or
          SAVINGS, OR (II) ANY INDIRECT OR CONSEQUENTIAL LOSS.                          U.S. resident or organization situated or doing business in
          GEOTRUST'S TOTAL LIABILITY FOR DAMAGES SUSTAINED BY                           Canada or the United States. All disputes arising in connection
          YOU AND ANY THIRD PARTY FOR ANY USE OR RELIANCE ON A                          with this Agreement shall be finally settled under the Rules of
          CERTIFICATE SHALL BE LIMITED, IN THE AGGREGATE, TO ONE                        Conciliation and Arbitration of the International Chamber of
          HUNDRED THOUSAND U.S. DOLLARS (US$100,000) OR THE                             Commerce (ICC) as modified as necessary to reflect the
          EQUIVALENT IN LOCAL CURRENCY. THE LIABILITY                                   provisions herein by one or more arbitrators. The place of
          LIMITATIONS PROVIDED IN THIS SECTION 16.2 SHALL BE THE                        arbitration shall be in Geneva, Switzerland, and the proceedings
          SAME REGARDLESS OF THE NUMBER OF DIGITAL                                      shall be conducted in English. In cases involving a single arbiter,
          SIGNATURES, TRANSACTIONS, OR CLAIMS RELATED TO SUCH                           that single arbiter shall be appointed by mutual agreement of
          CERTIFICATE. THIS SECTION 16.2 DOES NOT LIMIT REFUND                          the parties. If the parties fail to agree to an arbiter within fifteen
          PAYMENTS.         NOTWITHSTANDING    THE   FOREGOING,                         (15) days, the ICC shall choose an arbiter knowledgeable in
          GEOTRUST’S LIABILITY SHALL NOT BE LIMITED UNDER THIS                          computer software law, information security and cryptography or
          SECTION 16 IN CASES OF PERSONAL INJURY OR DEATH                               otherwise having special qualifications in the field, such as a
          ARISING FROM GEOTRUST’S NEGLIGENCE OR TO ANY OTHER                            lawyer, academician, or judge in common law jurisdiction.
          LIABILITY WHICH CANNOT BE EXCLUDED BY APPLICABLE LAW                          Nothing in this Agreement will be deemed as preventing either
          (INCLUDING MANDATORY LAWS OF ANY APPLICABLE                                   party from seeking injunctive relief (or any other provisional
          JURISDICTION). TO THE EXTENT JURISDICTIONS DO NOT                             remedy) from any court having jurisdiction over the parties and
          ALLOW THE EXCLUSION OF CERTAIN LIABILITY LIMITATIONS,                         the subject matter of this dispute as is necessary to protect
          SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.                            either party's Intellectual Property Rights.
17. Force Majeure.
    Neither party shall be deemed in default hereunder, nor shall it hold      22. Intentionally Left Blank.
    the other party responsible for, any cessation, interruption or delay
    in the performance of its obligations hereunder (excluding payment         23. Assignment.
    obligations) due to earthquake, flood, fire, storm, natural disaster,          Except as stated otherwise, your rights under this Agreement are not
    act of God, war, terrorism, armed conflict, labor strike, lockout,             assignable or transferable. Any attempt by your creditors to obtain an
    boycott or other similar events beyond the reasonable control of               interest in your rights herein, whether by attachment, levy,
    such party, provided that the party relying upon this Section 17               garnishment or otherwise, renders this Agreement voidable at
    (iii) gives prompt written notice thereof; and                                 GeoTrust's option. GeoTrust may assign and subcontract its
                                                                                   obligations under this Agreement to an entity which directly or
    (iv) takes all steps reasonably necessary to mitigate the effects of           indirectly controls, is controlled by, or is under common control with
          the force majeure event; provided further, that in the event a           GeoTrust, Inc.
          force majeure event extends for a period in excess of thirty (30)
          days in the aggregate, either party may immediately terminate
          this Agreement upon written notice.                                  24. Notices and Communications.
                                                                                   You will make all notices, demands or requests to GeoTrust with
                                                                                   respect to this Agreement in writing to the "Contact" address listed
18. Compliance with Law, Export Requirements, and Foreign                          on the website from where you purchased your Certificate, with a
    Reshipment Liability.                                                          copy to: General Counsel, GeoTrust, Inc., 487 E. Middlefield Road,
    Both parties shall comply with all applicable federal, state and local         Mountain View, California, USA 94043. References to telephone
    laws, regulations, and export requirements in connection with their            numbers above shall mean 1-650-426-3400.
    obligations under this Agreement. Regardless of any disclosure you
    make to GeoTrust of an ultimate destination of any service                 25. Entire Agreement.
    component acquired from GeoTrust and, notwithstanding anything                 This Agreement, the Seal Agreement (if you choose to display a
    contained in this Agreement to the contrary, you will not modify,              Seal), and if you are a Reseller, your Reseller agreement with
    export, or re-export, either directly or indirectly, any technical data        GeoTrust, constitute the entire understanding and agreement
    provided by GeoTrust without first obtaining any and all necessary             between GeoTrust and you with respect to the transactions
    licenses from the United States government or agencies thereof or              contemplated, and supersedes any and all prior or contemporaneous
    any other country that requires an export license or other                     oral or written representation, understanding, agreement or
    governmental approval at the time of modification, export, or re-              communication relating thereto. Terms and conditions in any
    export. GeoTrust shall have the right to suspend performance of any            purchase orders that are not included in or that conflict with this
    of its obligations under this Agreement, without any prior notice              Agreement are null and void.
    being required and without any liability to you, if you fail to comply
    with this provision.
                                                                               26. Third Party Beneficiary Rights.
                                                                                   You agree that Microsoft, Inc. shall be an express third party
                                                                                   beneficiary of the obligations contained in this Agreement.
RAPIDSSL SSL Certificate Subscriber Agreement


27. For all Customers Who Are Not Customers of GeoTrust, Inc.
    In accepting this Agreement you agree to the use of your data and
    information in accordance with Sections 13.

             RAPIDSSL SSL Certificate Subscriber Agreement Version 2.0

				
DOCUMENT INFO