VeriSign™ Public Certification Services

YOUR ISP, INTERNET SERVICE PROVIDER, SYSTEMS INTEGRATOR, OR TECHNOLOGY CONSULTANT("ISP") HAS APPLIED FOR A VERISIGN GLOBAL SERVER ID/CERTIFICATE ("GLOBAL SERVER ID") ON YOUR BEHALF, WHICH YOUR ISP WILL USE TO PROVIDE CERTAIN SECURITY FOR YOUR WEBSITE. BY ALLOWING YOUR ISP TO USE THIS GLOBAL SERVER ID, YOU ARE AGREEING TO BE BOUND BY THE TERMS OF THIS GLOBAL SERVER ID END USER SUBSCRIBER ("SUBSCRIBER AGREEMENT"). IF YOU DO NOT AGREE TO THE TERMS OF THIS SUBSCRIBER AGREEMENT, PLEASE CONTACT VERISIGN IMMEDIATELY AT 1-650-426-3400 AND VERISIGN WILL REVOKE YOUR GLOBAL SERVER ID.

THIS SUBSCRIBER AGREEMENT will become effective on the date you have notice of its contents. By not notifying VeriSign to the contrary, you are expressing your agreement to the terms of this Subscriber Agreement. VeriSign's Public Certification Services are governed by VeriSign's Certification Practice Statement (the "CPS") as amended from time to time, which is incorporated by reference into this Subscriber Agreement. The CPS is published on the Internet in VeriSign's repository at https://www.verisign.com/repository and is available via E-mail from: CPS-requests@verisign.com. Amendments to the CPS are also posted in VeriSign's repository at https://www.verisign.com/repository/updates.

YOU AGREE TO USE THE SERVER ID AND ANY RELATED IA SERVICES ONLY IN ACCORDANCE WITH THE CPS. YOU AGREE TO SPECIFICALLY ABIDE BY THE TERMS OF VERISIGN'S RELYING PARTY AGREEMENT ("RPA") AND CPS SECTION 8 WHEN RELYING UPON ANY GLOBAL SERVER ID OR OTHER CERTIFICATE ISSUED BY AN IA. The RPA is posted in VeriSign's repository at https://www.verisign.com/repository/RPA. In addition to the CPS and RPA, you agree to Sections 1 - 10 below.

Additional Terms and Conditions

1. Authorization. You represent that your ISP is authorized, as your agent, to apply for, accept, install, maintain, and if necessary, initiate revocation of your Global Server ID, all on your behalf.

2. Fees and Issuance. Your ISP shall pay all applicable fees for your Global Server ID under this Subscriber Agreement within thirty (30) days from the date the IA issues you an invoice (the "Due Date").

3. VeriSign Export Licenses. VeriSign is licensed to issue Global Server IDs, subject to the terms of VeriSign's export license agreements with the U.S. Department of Commerce, Bureau of Export Administration ("License"). VeriSign has received a retail classification for Global Server IDs under a License. VeriSign shall retain the right, at its sole discretion, to approve your Application, subject to the terms of a License.

4. Global Server ID. The Export Commodity Control Number for your Global Server ID is 5D002. A Global Server ID enables you to negotiate SSL or TLS sessions using 128-bit RC4 or IDEA, 56 bit DES, two-key Triple-DES encryption, or such other encryption that the U.S. Department of Commerce may permit for export in the future.

5. Qualified Applicant. You represent that you are eligible to receive favorable treatment under current U.S. encryption export control policy for the export of Global Server IDs.

6. Geographical Restrictions. You shall not be located in nor use your Global Server ID in Afghanistan (Taliban-controlled areas), Cuba, Iran, Iraq, Libya, North Korea, Serbia, Sudan, and Syria, or any other countries where such use is prohibited under US export regulations, under the terms of this Agreement.

7. Use Restrictions.

7.1 Software Platform Restrictions. You and your ISP must use a Global Server ID software platform ("Software") listed on the enrollment form in order to enable an SSL or TLS session with your Global Server ID. If the Software is not specifically listed on the enrollment form and it is produced or sold by a United States entity ("Entity"), you and your ISP are responsible for ensuring that the Entity has obtained an export license or classification that permits the Entity to export the Software from the United States before you install your Global Server ID on it.

7.2 Single Use Only. You and your ISP are prohibited from using your Global Server ID (i) for or on behalf of any other organization, (ii) to perform private or public key operations in connection with any domain name and/or organization name other than the domain name and/or organization name submitted by your ISP during enrollment, or (iii) on more than one server at a time (unless you have purchased the Shared Hosting Security Service).

7.3 Revocation. If your organizational name and/or domain name registration change, you must immediately notify VeriSign, and VeriSign shall revoke your Global Server ID. VeriSign retains the right to revoke your Global Server ID if your ISP does not pay all applicable fees within fifteen (15) days after the Due Date. VeriSign also retains the right to revoke your Global Server ID if you fail to perform any of your material obligations under the terms and conditions of the Secure Site Program where the Secure Site Seal has been installed by you.

7.4. Obligations Upon Revocation or Expiration. Upon expiration or notice of revocation of your Global Server ID, you shall ensure that your ISP permanently removes your Global Server ID from the server on which it is installed and shall not use it for any purpose thereafter.

8. Additional Representations. By submitting this Subscriber Agreement (and Application) you represent that the following statements are true and warrant that such statements will be true during the term of this Subscriber Agreement.

8.1 This Subscriber Agreement and the Application has been reviewed by a responsible official or representative empowered and authorized by the organization named in the Application (the "Organization") to acknowledge that the conditions set forth in this Subscriber Agreement (and Application) have been, or will be, met in full by the Organization.

8.2 The Organization is eligible to obtain and utilize a Global Server ID in a manner consistent with all applicable export control laws and regulations of the United States.

8.3 You shall operate your computer systems on which you installed your Global Server ID ("Server") under your Effective Control.

8.3.1 "Effective Control" means your ISP 1) has access to all transaction data that may be transmitted over the Server, and you and your ISP prepared to disclose data to a government agency in the jurisdiction where the Server is operated pursuant to a duly authorized warrant or court order or other lawful authority and 2) has authority to modify or control the Server, including the ability to disable your Global Server ID in the event that the IA is entitled by contract, or required by law, to terminate this Subscriber Agreement, which governs use of your Global Server ID.

8.4 You shall request that your ISP revoke your Global Server if, at any time, you no longer meet the definition of a Qualified Applicant.

9. Non-Qualified Applicants. If you are not a Qualified Applicant as defined in Section 5, you may still be eligible for acquisition and use of a Global Server ID. Organizations may acquire and use a Global Server ID to the extent permitted under individually-approved export license arrangements.

10. NetSure^SM. THE NETSURE^SM PLAN ("PLAN") PROVIDES YOU WITH CERTAIN LIMITED WARRANTIES, DISCLAIMS ALL OTHER WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND LIMITS LIABILITY. THE CERTIFICATE LIFETIME LIMIT (AS DEFINED IN THE PLAN) FOR YOUR GLOBAL SERVER ID is $100,000 (US). FOR INFORMATION ON THE PLAN, SEE https://www.verisign.com/repository/netsure.