Resources
PKI Disclosure
Licenses & Approvals
E-Sign
Publications
Home > Repository > Agreements

VeriSign Public Certification Services

GLOBAL SITE SERVICES AGREEMENT

YOU MUST READ THIS GLOBAL SITE SERVICES AGREEMENT ("SUBSCRIBER AGREEMENT") BEFORE APPLYING FOR, ACCEPTING, OR USING A VERISIGN PRO SERVICE INCLUDING A GLOBAL SERVER ID. IF YOU DO NOT AGREE TO THE TERMS OF THIS SUBSCRIBER AGREEMENT, DO NOT APPLY FOR, ACCEPT, OR USE THE GLOBAL SERVER ID.

THIS SUBSCRIBER AGREEMENT will become effective on the date you submit the Global Secure Site Services Application ("Application") to the designated issuing authority ("IA"). By submitting this Subscriber Agreement (and Application) you are requesting that the IA issue a Global Server ID to you and are expressing your agreement to the terms of this Subscriber Agreement. VeriSign's Public Certification Services are governed by VeriSign's Certification Practice Statement (the "CPS") as amended from time to time, which is incorporated by reference into this Subscriber Agreement. The CPS is published on the Internet in VeriSign's repository at https://www.verisign.com/repository and is available via E-mail from: CPS-requests@verisign.com.

YOU AGREE TO USE THE GLOBAL SERVER ID AND ANY RELATED IA SERVICES IN ACCORDANCE WITH THE CPS AND THIS AGREEMENT. YOU AGREE TO SPECIFICALLY ABIDE BY THE TERMS OF VERISIGN'S RELYING PARTY AGREEMENT ("RPA") AND CPS SECTION 8 WHEN RELYING UPON ANY GLOBAL SERVER ID, SERVER ID, OR OTHER CERTIFICATE ISSUED BY AN IA. The RPA is posted in VeriSign's repository at https://www.verisign.com/repository/RPA. In addition to the CPS and RPA, you agree to Sections 1 - 11 below.

Additional Information and Terms and Conditions.

1. VeriSign Export Licenses. VeriSign is licensed to issue Global Server IDs, subject to the terms of VeriSign's export license agreements with the U.S. Department of Commerce, Bureau of Export Administration ("License"). VeriSign has received a retail classification for Global Server IDs under a License. VeriSign shall retain the right, at its sole discretion, to approve your Application, subject to the terms of a License.

2. Global Server ID. The Export Commodity Control Number for your Global Server ID is 5D002. A Global Server ID enables you to negotiate SSL or TLS sessions using 128-bit RC4 or IDEA, 56 bit DES, two-key Triple-DES encryption, or such other encryption that the U.S. Department of Commerce may permit for export in the future.

3. Qualified Applicant. You represent that you are eligible to receive favorable treatment under current U.S. encryption export control policy for the export of Global Server IDs.

4. Geographical Restrictions. You shall not be located in nor use your Global Server ID in Afghanistan (Taliban-controlled areas), Cuba, Iran, Iraq, Libya, North Korea,, Sudan, Syria, and any other countries where such use is prohibited under U.S. export control regulations, under the terms of this Agreement.

5. Use Restrictions.

5.1 Software Platform Restrictions. You must use a Global Server ID software platform ("Software") listed on the enrollment form in order to enable an SSL or TLS session with your Global Server ID. If the Software is not specifically listed on the enrollment form and it is produced or sold by a United States entity ("Entity"), you are responsible for ensuring that the Entity has obtained an export license or classification that permits the Entity to export the Software from the United States before you install your Global Server ID on it.

5.2 Use Restrictions. You are prohibited from using your Global Server ID (i)for or on behalf of any other organization, (ii) to perform private or public key operations in connection with any domain name and/or organization name other than the submitted by you during enrollment (unless you have purchased the Shared Hosting Security Service). You are also prohibited from using your Global Server ID on more than one server at a time (unless you have purchased the SPECIFIC licensing option on the enrollment screen that permits the use of a Global Server ID on multiple servers). If you choose to display VeriSign's Secure Site Seal (the "Seal"), you must install and display such Seal only in accordance with the Secure Site Seal Licensing Agreement (https://www.verisign.com/repository/sslicense_agree.html) ("Secure Site Seal Licensing Agreement").

5.3 Revocation. If your organizational name and/or domain name registration change, you must immediately notify VeriSign, and VeriSign shall revoke your Global Server ID. VeriSign retains the right to revoke your Global Server ID if, within forty five (45) days of receiving an invoice from VeriSign, you do not pay the invoice. VeriSign also retains the right to revoke your Global Server ID if you have installed a Seal and fail to perform any of your obligations under the Secure Site Seal Licensing Agreement. In order to maintain the trust and integrity of the VeriSign Trust Network (VTN), VeriSign in its sole discretion, retains the right to revoke your Global Server ID for activities that VeriSign considers harmful to the VTN.

5.4 Obligations Upon Revocation or Expiration. Upon expiration or notice of revocation of your Global Server ID, you shall permanently remove your Global Server ID from the server on which it is installed and shall not use it for any purpose thereafter and, if you have installed a Seal, you shall remove such Seal in the manner set forth in the Secure Site Seal Licensing Agreement.

6. Additional Representations. By submitting this Subscriber Agreement (and Application) you represent that the following statements are true and warrant that such statements shall be true during the term of this Subscriber Agreement.

6.1 This Subscriber Agreement and the Application has been submitted by a responsible official or representative empowered and authorized by the organization named in the Application (the "Organization") to certify that the conditions set forth in this Subscriber Agreement (and Application) have been, or shall be, met in full by the Organization.

6.2 The Organization is eligible to obtain and utilize a Global Server ID in a manner consistent with all applicable export control laws and regulations of the United States.

6.3 You shall operate your computer systems on which you installed your Global Server ID ("Server") under your Effective Control.

6.3.1 "Effective Control" means you 1) have access to all transaction data that may be transmitted over the Server, and are prepared to disclose data to a government agency in the jurisdiction where the Server is operated pursuant to a duly authorized warrant or court order or other lawful authority and 2) have authority to modify or control the Server, including the ability to disable your Global Server ID in the event that the IA is entitled by contract, or required by law, to terminate this Subscriber Agreement, which governs use of your Global Server ID.

6.4 You shall revoke your Global Server ID or Second Global Server ID (as defined in Section 11) if, at any time, you no longer meet the definition of a Qualified Applicant.

7. Non-Qualified Applicants. IF YOU ARE NOT A QUALIFIED APPLICANT AS DEFINED IN SECTION 3, YOU STILL MAY BE ELIGIBLE FOR ACQUISITION AND USE OF A GLOBAL SERVER ID. ORGANIZATIONS MAY ACQUIRE AND USE A GLOBAL SERVER ID TO THE EXTENT PERMITTED UNDER INDIVIDUALLY-APPROVED EXPORT LICENSE ARRANGEMENTS.

8. Two Day Service Guarantee (This Section only applies to the following products: Secure Site Pro, Commerce Site, Commerce Site Pro, and Secure Site Plus (renewals only)). VeriSign shall issue your Global Server ID within two (2) business days (excluding weekends and VeriSign recognized holidays) after you submit your Application to VeriSign provided that you: 1) are an organization located in the United States, 2) select to pay by credit card and submit a valid credit card number, and 3) you submit a Dun and Bradstreet DUNS number and a domain name that VeriSign is able to validate through its normal validation procedures stated in the CPS ("Guarantee Period"). Business days begin and end according to Pacific Time. The first business day shall be the business day after the day you submit your Application to VeriSign. Your sole and exclusive remedy for VeriSign's failure to issue your Global Server ID within the Guarantee Period, shall be a refund of fifty ("50") % of the retail price that you paid for your Global Server ID.

     8.1. Expedite Option. (This Section 8.1 only applies to customers located in the United States purchasing, Secure Site Pro Certificates only. VeriSign shall issue your SSL Certificate within 24 hours from the next business day (excluding weekends and VeriSign recognized holidays) after you submit your complete certificate application to VeriSign provided that you: 1) agree to pay the fee specified in the enrollment, 2) are an organization located in the United States, 3) select to pay by credit card and submit a valid credit card number, and 4) submit a Dun and Bradstreet DUNS number and a domain name that VeriSign is able to validate through its normal validation procedures stated in the CPS ("Expedite Guarantee Period"). Business days begin and end according to Pacific Time. Your sole and exclusive remedy for VeriSign's failure to issue your Global Server ID within the Expedite Guarantee Period, shall be no charge for the Expedite fee. THIS EXPEDITE SERVICE GUARANTEE DOES NOT APPLY TO ANY OTHER VERISIGN PRODUCT OR SERVICE.

9. Third Party Service Providers. If you are purchasing a product from VeriSign that includes one or more services provided by a third party (such as website monitoring or security checking services by Keynote Systems, Inc., Qualys, Inc., or Netcraft, Inc.) or listing in a directory (such as listing in the Network Solutions' dotcom directorySM), you hereby consent to our disclosure of your certificate application and enrollment information to these third party service providers and agree that they may contact you directly regarding their services. Any terms and conditions for these products shall be provided to you directly by the third party service provider. VeriSign disclaims any and all warranties, refuses any and all liability, and shall not provide partial refunds for any service provided by a third party.

10. NetSure®. THE NETSURE® PLAN ("PLAN") PROVIDES YOU WITH CERTAIN LIMITED WARRANTIES, DISCLAIMS ALL OTHER WARANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND LIMITS LIABILITY. THE CERTIFICATE LIFETIME LIMIT (AS DEFINED IN THE PLAN) FOR YOUR GLOBAL SERVER ID CORRESPONDS TO THE AMOUNT LISTED WITH THE PRODUCT OPTION THAT YOU SELECTED DURING THE ENROLLMENT PROCESS. FOR INFORMATION ON THE PLAN, SEE HTTPS://WWW.VERISIGN.COM/REPOSITORY/NETSURE.

11. If you selected to pre-pay for a second Global Server ID ("Second Global Server ID") during enrollment, VeriSign shall issue you the Second Global Server ID prior to, or upon expiration of, the Global Server ID corresponding to this Subscriber Agreement (and Application). Notwithstanding the foregoing, VeriSign shall retain the right to not issue the Second Global Server ID if, in VeriSign's sole discretion, VeriSign determines that any of the information in the Application has changed or is otherwise inaccurate. Except for Sections 8 and 9, the terms of this Subscriber Agreement shall apply to your Second Global Server ID. Please note that the Keynote Service and coupons for training classes will not be supplied to you with your Second Global Server ID.

VeriSign shall send an e-mail containing the Second Global Server ID to the technical and organizational contacts listed in the Application (or as otherwise changed by you in accordance with VeriSign's standard procedures). If you desire to have different individuals assume the responsibility of the technical and/or organizational contacts for the Second Global Server ID, you must notify VeriSign at least 60 days prior to the expiration of the Global Server ID. Such notice must be in accordance with the instructions provided on the VeriSign web site.

12. If you are purchasing Commerce Site or Commerce Site Pro, you are also receiving a token that entitles you to either 12 months or 24 months, (depending on whether you select the one year or two year certificate), of VeriSign's Payflow Pro payment services. These 12-month or 24-month periods shall commence on the date the Global Server ID is issued to you.

YOU DEMONSTRATE YOUR KNOWLEDGE AND ACCEPTANCE OF THE TERMS OF THIS SUBSCRIBER AGREEMENT BY EITHER (I) SUBMITTING AN APPLICATION FOR A GLOBAL SERVER ID TO VERISIGN, OR (II) USING YOUR GLOBAL SERVER ID, WHICHEVER OCCURS FIRST.