Home > Repository

VERISIGN® NETSURE® PROTECTION PLAN
VERSION 5.0 September 1, 20011


INTRODUCTION

THIS NETSURE® PROTECTION PLAN ("Plan"), provided by VeriSign, Inc. ("VeriSign"), grants the "Covered Persons" identified in Section 1 limited warranty protection subject to certain exceptions, disclaimers of warranty, and exclusions and limitations of liability. For a brief description of the NetSure® Protection Plan, please see the linked NetSure® Protection Plan Summary, at: https://www.verisign.com/repository/netsure/summary. This Plan does not apply to Demo, Free, and Test Certificates. See Appendix A for definitions of the defined terms used in the Plan.

This Plan is made an integral part of, and is incorporated by reference in, the service agreements under which VeriSign issues certificates and Silver Seals ("Service Agreements", as further defined in Appendix A). The Service Agreements appear in Appendix B of the Plan. One example is the VeriSign Certification Practice Statement ("CPS").

FOR COVERED PERSONS THAT ARE SUBSCRIBERS OR NON-NETSURE RELYING PARTIES, THIS PLAN REPLACES THE LIMITED WARRANTIES, DISCLAIMERS OF WARRANTY, AND EXCLUSIONS AND LIMITATIONS OF LIABILITY IN SECTION 11 OF THE CPS AND IN THE OTHER SERVICE AGREEMENTS. IN THE EVENT OF ANY CONFLICT OR INCONSISTENCY BETWEEN A SERVICE AGREEMENT AND THIS PLAN, THE TERMS OF THIS PLAN SHALL CONTROL. THE TERMS OF THE SERVICE AGREEMENTS THAT ARE CONSISTENT WITH THIS PLAN SHALL REMAIN IN FULL FORCE AND EFFECT REGARDING THE SERVICE AGREEMENTS AND THIS PLAN.

THE PLAN'S TERMS AND CONDITIONS

1. Who is Covered. The Plan covers the following "Covered Persons":

(a) "NetSure Subscribers." A NetSure Subscriber is a person having a "NetSure Certificate" whose Certificate Application was approved by VeriSign, as opposed to a Managed PKI Customer. "NetSure Certificates" are VeriSign Certificates designated by a Service Agreement as being covered by the Plan. A listing of the classes and types of VeriSign Certificates that are included as, or excluded from being, "NetSure Certificates" appears at: https://www.verisign.com/repository/ns_list.

(b) "Managed PKI Customers." A Managed PKI Customer is an entity that has entered into an agreement with VeriSign, by which the entity (a) becomes a Local Registration Authority or authorized non-VeriSign Certification Authority within VeriSign's Public Certification Services or (b) becomes a Local Registration Authority or Certification Authority within an Approved Private Hierarchy. Managed PKI Customers use VeriSign's Managed PKI products and services to assist other persons or entities in applying for Certificates, approving Certificate Applications, and (if necessary) arrange for revocation of their Certificates. A MANAGED PKI CUSTOMER IS ENTITLED TO THE RIGHTS AND PROTECTIONS UNDER THE PLAN AND IS A COVERED PERSON UNDER THE PLAN IF AND ONLY IF THE MANAGED PKI CUSTOMER PURCHASES THE LIMITED WARRANTY COVERAGE UNDER THE PLAN IN A NETSURE WARRANTY AGREEMENT WITH VERISIGN.

(c) "Managed PKI Subscribers." A Managed PKI Subscriber is a person having a VeriSign Certificate whose Certificate Application was approved by a Managed PKI Customer, as opposed to VeriSign. A MANAGED PKI SUBSCRIBER IS ENTITLED TO THE RIGHTS AND PROTECTIONS UNDER THE PLAN AND IS A COVERED PERSON UNDER THE PLAN IF AND ONLY IF THE MANAGED PKI CUSTOMER WHO APPROVED THE MANAGED PKI SUBSCRIBER'S CERTIFICATE APPLICATION PURCHASES THE LIMITED WARRANTY COVERAGE UNDER THE PLAN IN A NETSURE WARRANTY AGREEMENT WITH VERISIGN. MANAGED PKI SUBSCRIBERS WHO ARE COVERED PERSONS IN THIS WAY ARE DEEMED TO HAVE BEEN ISSUED A NETSURE CERTIFICATE. To the extent a Managed PKI Subscriber is an employee of an entity other than the Managed PKI Customer and is using a NetSure Certificate on behalf of such employer, then such employer has the rights of such Managed PKI Subscriber to the extent the employer, rather than the Managed PKI Customer, sustains consequential or incidental damages resulting from a breach of one or more of the limited warranties in Section 4.

(d) "Silver Seal Subscribers." A Silver Seal Subscriber is an entity having a Silver Secure Site Seal ("Silver Seal") issued by VeriSign pursuant to a VeriSign Silver Secure Site Seal End User Subscriber Agreement ("Seal Agreement") accepted by the Silver Seal Subscriber either directly or through a web host authorized to act on its behalf. A "Silver Seal" is a seal provided by VeriSign under a Seal Agreement that enables a visitor to the Silver Seal Subscriber's web site to link to a web page at VeriSign's web site, which page displays certain authentication information related to the organization and domain listed in the Seal and the web host listed in the corresponding SSL Certificate.

(e) "Non-NetSure Relying Parties." Relying Parties are persons that receive a VeriSign Certificate and act in reliance on the VeriSign Certificate. "Non-NetSure Relying Parties" are Relying Parties that either (i) have no contractual relationship with VeriSign or with another Certification Authority within VeriSign's Public Certification Services, other than the one arising out of reliance on a VeriSign Certificate, or (ii) are Subscribers of VeriSign Certificates that are not NetSure Certificates. In addition, when a Managed PKI Customer or one of its Managed PKI Subscribers uses or relies upon a VeriSign Certificate beyond the purposes and applications approved by the Managed PKI Customer in connection with the Managed PKI Customer's business, e.g., personal use, then he/she/it is treated under the Plan as a Non-NetSure Relying Party for purposes of that use or reliance.

(f) "Silver Seal Relying Parties." Silver Seal Relying Parties are customers of Silver Seal Subscribers who conduct one or more transactions with a Silver Seal Subscriber, in reliance on a then valid Silver Seal, for the purposes and applications approved by such Silver Seal Subscriber in connection with its business and consistent with the Seal Agreement.

2. Managed PKI Customers and Subscribers Use of Certificates. Managed PKI Customers and Subscribers are entitled to the rights and protections under the Plan only if an Managed PKI Customer's Managed PKI Subscribers are using their NetSure Certificates and relying on the VeriSign Certificates of others on behalf of the Managed PKI Customer or for purposes and applications in connection with the Managed PKI Customer's business that have been approved by the Managed PKI Customer. When they use or rely on Certificates beyond those purposes or applications (e.g., personal use), they are considered to have the rights and protections only of Non-NetSure Relying Parties, and not Managed PKI Customers or Managed PKI Subscribers.

3. When the Coverage Applies. Each type of Covered Person has a time period ("Applicable Time Period") in which the Covered Person's limited warranty coverage under the Plan is in effect.

(a) "NetSure Subscribers." For NetSure Subscribers, the Applicable Time Period is the Operational Period of their Certificates.

(b) "Managed PKI Customers." The warranties in Section 4 relate either to a Managed PKI Customer's Managed PKI Subscriber, its Managed PKI Subscriber's NetSure Certificate, or the reliance by its Managed PKI Subscriber on the VeriSign Certificate of another. For Managed PKI Customers, the Applicable Time Period is the Operational Period of that Managed PKI Subscriber's NetSure Certificate, for as long as the Managed PKI Customer's NetSure Warranty Agreement is in effect.

(c) "Managed PKI Subscribers." For a Managed PKI Subscriber, the Applicable Time Period is the Operational Period of his/her/its Certificate, for as long as the NetSure Warranty Agreement of the Managed PKI Customer that approved his/her/its Certificate Application is in effect.

(d) "Silver Seal Subscribers." For Silver Seal Subscribers, the Applicable Time Period is the period in which they are authorized to use their Silver Seal under their Seal Agreements.

(e) "Non-NetSure Relying Parties." For Non-NetSure Relying Parties, the Applicable Time Period is anytime, as long as the Non-NetSure Relying Party is relying on a VeriSign Certificate to verify a Digital Signature made by the Subscriber during the VeriSign Certificate's Operational Period or to make an encrypted communication during such Operational Period.

(f) "Silver Seal Relying Parties." For Silver Seal Relying Parties, the Applicable Time Period is anytime, as long as the Silver Seal Relying Party is relying on a valid Silver Seal with respect to one or more transactions with a Silver Seal Subscriber for the purposes and applications approved by such Silver Seal Subscriber in connection with its business and consistent with the Seal Agreement.

4. What is Covered.

4.1 Limited Warranty Regarding a NetSure or Managed PKI Subscriber's Certificate. VeriSign warrants to NetSure Subscribers and Managed PKI Subscribers that at the time of issuance of his/her/its own NetSure Certificate:

(a) there are no material misrepresentations of fact in such NetSure Certificate known to the Certification Authority or VeriSign originating from the Certification Authority or VeriSign,

(b) there are no errors in the information in such NetSure Certificate that were introduced by the Certification Authority or VeriSign as a result of its failure to exercise reasonable care in creating the NetSure Certificate, and

(c) such NetSure Certificate meets all material requirements of the Service Agreement under which he/she/it received such NetSure Certificate.

4.2 Limited Warranty Regarding the NetSure Certificates Issued to a Covered Managed PKI Customer's Managed PKI Subscribers. VeriSign warrants to Managed PKI Customers during their Applicable Time Period that at the time of issuance of each NetSure Certificate issued to their Managed PKI Subscribers:

(a) there are no material misrepresentations of fact in such NetSure Certificate known to VeriSign or originating from VeriSign,

(b) there are no errors in the information in such NetSure Certificate that were introduced by VeriSign as a result of its failure to exercise reasonable care in creating the NetSure Certificate, and

(c) such NetSure Certificate meets all material requirements of the Service Agreement between VeriSign and such Managed PKI Customer.

4.3 Limited Warranty Regarding a Silver Seal Subscriber's Silver Seal. VeriSign warrants to each Silver Seal Subscriber and Silver Seal Relying Party during the Applicable Time Period that at the time of issuance of the Silver Seal:

(a) all information located in the area of VeriSign's website linked to the Silver Seal concerning the identity of the Silver Seal Subscriber is accurate, and

(b) VeriSign has substantially complied with the applicable Seal Agreement with respect to the issuance of the Silver Seal.

4.4 Limited Warranty Regarding the Certificates of Others. VeriSign warrants to all Covered Persons that rely, during the Applicable Time Period, on a Public Key operation completed using the Public Key listed in a VeriSign Certificate, that at the time such VeriSign Certificate is issued:

(a) all information in or incorporated by reference in such VeriSign Certificate, except Nonverified Subscriber Information, is accurate, and

(b) VeriSign and the Certification Authority have substantially complied with the applicable Service Agreement when issuing such VeriSign Certificate.

THE WARRANTY IN SECTION 4.4 DOES NOT APPLY TO AN MANAGED PKI CUSTOMER TO THE EXTENT IT RELATES TO THE CONDUCT OF THE MANAGED PKI CUSTOMER ITSELF IN PLACING OR INCORPORATING INFORMATION IN SUCH VERISIGN CERTIFICATES OR OTHERWISE IN ISSUING THE VERISIGN CERTIFICATES.

4.5 Limited Warranty Against Unauthorized Use, Unauthorized Disclosure, and Compromise. VeriSign warrants that during the Applicable Time Period the Private Key corresponding to the Public Key in the Certificates listed in this Section below will not be subject to unauthorized use or disclosure prior to the revocation or expiration of such Certificates. VeriSign makes this warranty:

(a) to NetSure Subscribers and Managed PKI Subscribers, to the extent the warranty relates to their own Operational NetSure Certificates,

(b) to Managed PKI Customers, to the extent the warranty relates to the Operational NetSure Certificates issued to their Managed PKI Subscribers, and

(c) to all Covered Persons, to the extent the warranty relates to the Valid Operational VeriSign Certificates of others on which a Covered Person relies.

This warranty includes, without limitation, the unauthorized use or disclosure of the Private Key of a Certification Authority designated in https://www.verisign.com/repository/ns_list, and the unauthorized use or disclosure of a Private Key following a Compromise of such Private Key.

This limited warranty shall not apply if the unauthorized use or disclosure is wholly or partially caused by a Covered Person's intentional conduct or failure to exercise reasonable care to safeguard his/her/its Private Key from unauthorized use or disclosure. For information regarding Private Key protection, see https://www.verisign.com/repository/PrivateKey_FAQ/index.html.

Note: When a Covered Person relies on the VeriSign Certificate of a Subscriber by authenticating the Public Key in such VeriSign Certificate by Validating a Certificate Chain, the Covered Person is also relying upon the Certificates of the Certification Authorities in the Certificate Chain.

"Compromise" means a loss, theft, modification, or unauthorized access of a Private Key corresponding to the Public Key listed in a VeriSign Certificate, including without limitation by cryptographic analysis or key extraction.

4.6 Limited Warranty Against Unauthorized Revocation and Loss of Use. VeriSign warrants that during the Applicable Time Period the Certificates and Silver Seals listed in this Section below will be free from Unauthorized Revocation or Loss of Use caused by the Certification Authority or VeriSign. VeriSign makes this warranty:

(a) to NetSure Subscribers and Managed PKI Subscribers, to the extent the warranty relates to their own Operational NetSure Certificates,

(b) to Managed PKI Customers, to the extent the warranty relates to the Operational NetSure Certificates issued to their Managed PKI Subscribers (but only where the Unauthorized Revocation or Loss of Use is caused by VeriSign and not the Managed PKI Customer),

(c) to all Covered Persons, to the extent the warranty relates to the Valid Operational VeriSign Certificates of others on which a Covered Person relies,

(d) to Silver Seal Subscribers, to the extent the warranty relates to unauthorized revocation of their own Operational Silver Seals.

"Unauthorized Revocation" means revocation of a VeriSign Certificate or Silver Seal without authorization of the Subscriber by the Subscriber's authorized agent except where the Certification Authority properly revokes the Certificate or Silver Seal under the applicable Service Agreement with that Subscriber.

"Loss of Use" means the inability of a Covered Person to enter into a transaction due to the inability of the Covered Person or any user to securely access (loss of availability) a website or links from a website or databases within a website because of the inability of either the Covered Person (where the Covered Person is a NetSure or Managed PKI Subscriber), a Managed PKI Customer's Managed PKI Subscriber (where the Covered Person is a Managed PKI Customer), or the Subscriber of a VeriSign Certificate (where the Covered Person is relying on another's VeriSign Certificate) to use his/her/its Certificate, or a Covered Person's inability to utilize or rely on indispensable certificate status services (such as online revocation or CRL services) to use a Valid Operational VeriSign Certificate in a timely fashion, caused by the Certification Authority issuing such VeriSign Certificate.

The warranty in this Section 4.6 does not apply to a Managed PKI Customer to the extent it relates to the conduct of the Managed PKI Customer itself in causing an Unauthorized Revocation or Loss of Use.

4.7 Limited Warranties Against Erroneous Issuance and Impersonation. VeriSign warrants that during the Applicable Time Period, the Certificates and Silver Seals listed in this Section below were issued to the persons named as the Subjects of such Certificates or Silver Seals and were not issued as a result of Erroneous Issuance, including but not limited to Erroneous Issuance resulting from Impersonation. VeriSign makes this warranty:

(a) to NetSure Subscribers and Managed PKI Subscribers, to the extent the warranty relates to them and their own Operational NetSure Certificates,

(b) to Managed PKI Customers, to the extent the warranty relates to their Managed PKI Subscribers and the Operational NetSure Certificates issued to these Managed PKI Subscribers (but only where the Erroneous Issuance and/or Impersonation is caused by VeriSign and not the Managed PKI Customer),

(c) to all Covered Persons, to the extent the warranty relates to the Valid Operational VeriSign Certificates of others on which the Covered Person relies,

(d) to Silver Seal Relying Parties, to the extent the warranty relates to the Valid Operational Silver Seals of Silver Seal Subscribers on which the Silver Seal Relying Parties rely.

THE WARRANTY IN THIS SECTION 4.7 DOES NOT APPLY TO CLASS 1 VERISIGN CERTIFICATES.

THE WARRANTY IN THIS SECTION 4.7 DOES NOT APPLY TO AN MANAGED PKI CUSTOMER TO THE EXTENT IT RELATES TO THE CONDUCT OF THE MANAGED PKI CUSTOMER ITSELF IN CAUSING AN ERRONEOUS ISSUANCE, INCLUDING BUT NOT LIMITED TO ERRONEOUS ISSUANCE RESULTING FROM IMPERSONATION.

"Erroneous Issuance" means issuance of a VeriSign Certificate in a manner not materially in accordance with the procedures required by the Service Agreement, issuance of a VeriSign Certificate (other than a Class 1 VeriSign Certificate) to a Person other than the one named as the Subject of the VeriSign Certificate, or issuance of a VeriSign Certificate (other than a Class 1 VeriSign Certificate) without the authorization of the Person named as the Subject of such VeriSign Certificate.

"Impersonation" means requesting and being issued a VeriSign Certificate based on false or falsified information relating to naming or identity.

4.8 Limited Warranty Regarding Delay in Requesting Revocation. VeriSign warrants to each Covered Person that during the Applicable Time Period, the Covered Person will not be materially and adversely affected when relying on the Valid VeriSign Certificates or Silver Seals of Subscribers (other than his/her/its own VeriSign Certificate or Silver Seal) as a result of such Subscribers' reasonable delay in properly communicating a request for revocation of their VeriSign Certificates or Silver Seals ("Delay in Requesting Revocation").

4.9 Reliance by Covered Persons that are not Natural Persons. For purposes of this Plan, a Covered Person that is not a natural person is capable of relying on a VeriSign Certificate or Silver Seal of another. Examples include a business obtaining a server NetSure Certificate and a Managed PKI Customer. Such reliance can occur when an employee or agent of such Covered Person relies on a VeriSign Certificate while acting on behalf of the Covered Person, regardless of whether such employee or agent is a Covered Person. Such reliance does not occur when such Covered Person relies on a Certificate issued to itself.

5. Payments and Payment Requests Under the Plan.

5.1 NetSure Payments. Subject to the limitations in Sections 6, VeriSign shall pay a Covered Person for any incidental or consequential damages caused by a breach of one or more of the limited warranties in Section 4 made to the Covered Person.

5.2 Requirements for Making a Payment Request. As a condition to payment under Section 5.1, a Covered Person must

(a) make a payment request by completing and submitting the payment request form at https://www.verisign.com/repository/netsure_pay;

(b) provide other information reasonably requested by VeriSign, its agents, or its employees (including without limitation proof of the Covered Person's damages);

(c) provide reasonable cooperation with any investigation concerning damages to the Covered Person;

(d) subrogate and assign to VeriSign any and all claims and causes of action such Covered Person has against third parties for damages or other relief that may potentially reimburse VeriSign for payments made by VeriSign to such Covered Person hereunder, up to the amount paid by VeriSign under Section 5.1.

5.3 Notice. Covered Persons shall give VeriSign prompt notice of any breach(es) of the limited warranties in Section 4 in the manner set forth in the Service Agreement or Section 5.2.

5.4 Limitations Period. VeriSign shall have no obligation to make a payment under Section 5.1 for a breach of one of the Section 4 warranties unless the Covered Person submits a payment request as required by Section 5.2 for that payment within one (1) year after following:

(a) in the case of NetSure Subscribers, the end of the Operational Period of their Certificates;

(b) in the case of Managed PKI Customers, the earlier of: (i) termination or expiration of its NetSure Warranty Agreement, or (ii) the end of the Operational Period of the NetSure Certificate of the Managed PKI Customer's Managed PKI Subscriber where the breach of warranty related to that Managed PKI Subscriber, to that Managed PKI Subscriber's NetSure Certificate, or to his/her/its reliance on the VeriSign certificates of others;

(c) in the case of Managed PKI Subscribers, the earlier of: (i) termination or expiration of the NetSure Warranty Agreements of the Managed PKI Customers that approved their Certificate Applications, or (ii) the end of the Operational Period of their Certificates.

(d) in the case of Silver Seal Subscribers, the end of the Operational Period of their Silver Seals.

(e) in the case of Non-NetSure Relying Parties and Silver Seal Relying Parties, the breach of warranty.

6. Limitations on Payments Under the Plan.

6.1 $1,000 Limitation on Payments to Non-NetSure Relying Parties and Silver Seal Relying Parties. The most that VeriSign must pay a Non-NetSure Relying Party or Silver Seal Relying Party for a single incident resulting in a breach of one or more of the Section 4 limited warranties made to such Party is $1,000. Notwithstanding the foregoing, if a single incident resulting in such a breach results in losses to multiple Non-NetSure Relying Parties or Silver Seal Relying Parties that are Affiliated Individuals as to a common entity, then the most that VeriSign must pay for that incident is $1,000. For example, if such a breach arose out of a digitally signed e-mail sent to two Covered Persons who are employees of the same company, then the most VeriSign would pay one or both employees is $1,000. The limitations in Sections 6.2 - 6.4 do not apply to Non-NetSure Relying Parties or Silver Seal Relying Parties.

6.2 Limitation on Payments to NetSure Subscribers, Managed PKI Customers, Covered Managed PKI Subscribers, and Silver Seal Subscribers. The most that VeriSign must pay a NetSure, Managed PKI, or Silver Seal Subscriber under the Plan is the " Lifetime Limit" that applies under Section 6.3. The most that VeriSign must pay a Managed PKI Customer under the Plan for breaches of warranty relating to one of its Managed PKI Subscribers, to that Managed PKI Subscriber's NetSure Certificate, or to his/her/its reliance on the VeriSign Certificates of others is the "Lifetime Limit" of that Managed PKI Subscriber's NetSure Certificate under Section 6.3. If a breach of one of the Section 4 limited warranties results in the NetSure Subscriber, Managed PKI Customer, or Managed PKI Subscriber sustaining incidental or consequential damages caused by relying on the VeriSign Certificate of another, there is a second "Per Reliance Limit" under Section 6.4 that applies in addition to the Certificate Lifetime Limit.

6.3 Lifetime Limit. The Lifetime Limit for each type of NetSure Certificate appears in Table 1 of the current version of the VeriSign NetSure Protection Plan Matrix, which is incorporated by reference here. That table is entitled "Lifetime Limitations on Payments Under the Plan." The current version of the VeriSign NetSure Protection Plan Matrix is located at https://www.verisign.com/repository/netsure_limits.

(a) How the Lifetime Limit Works. The Lifetime Limit is the most that VeriSign must pay a NetSure, Managed PKI, or Silver Seal Subscriber for any and all breaches of Section 4 limited warranties during the Applicable Time Period. The Lifetime Limit is also the most that VeriSign must pay a Managed PKI Customer for any and all breaches of Section 4 limited warranties relating to one of its Managed PKI Subscribers, to that Managed PKI Subscriber's NetSure Certificate, or to his/her/its reliance on the VeriSign Certificates of others. All payments under Section 5.1 reduce the amount of the Lifetime Limit available for future payments. Once the Lifetime Limit of a NetSure or Managed PKI Subscriber is exhausted by payments under Section 5.1, VeriSign has no further obligation to make further payments under Section 5.1 for breaches relating to that Subscriber or his/her/its Certificate or Silver Seal. Nonetheless, when NetSure Certificates and Silver Seals are renewed at the end of their Operational Period, the new NetSure Certificate or Silver Seal issued upon renewal has its own new Lifetime Limit.

(b) Erroneous Issuance and/or Impersonation. One kind of breach of Section 4.6 is Erroneous Issuance and/or Impersonation resulting in the issuance of a VeriSign Certificate incorrectly naming a NetSure or Managed PKI Subscriber. Note: The VeriSign Certificate issued because of Erroneous Issuance is not the same as the NetSure or Managed PKI Subscriber's own Certificate.

When this kind of breach occurs, only one Certificate Lifetime Limit applies to the breach. In addition, the Certificate Lifetime Limit applicable to the breach is the one for the NetSure or Managed PKI Subscriber's own Certificate, not the Certificate Lifetime Limit of the VeriSign Certificate resulting from Erroneous Issuance. If the NetSure or Managed PKI Subscriber has more than one NetSure Certificate, then the Covered Person can choose which of these NetSure Certificates will provide the Certificate Lifetime Limit for the breach. A Covered Person cannot choose a NetSure Certificate to the extent that its Certificate Lifetime Limit has already been exhausted. Any payments made under Section 5.1 reduce the applicable Certificate Lifetime Limit.

The issuance of one VeriSign Certificate as a result of Erroneous Issuance and/or Impersonation is a single breach of Section 4.6 regardless of: how many Relying Parties rely on that VeriSign Certificate, the amount or number of payments that a Covered Person may need to pay to satisfy claims asserted by these Relying Parties, or the number or amount of other losses sustained by the Covered Person as a result of the issuance of such VeriSign Certificate, or the number of other Certificates held by the Covered Person.

(c) Reliance on the VeriSign Certificate of Another Subscriber. Breaches of Section 4.3 and 4.7 and some breaches of Sections 4.4, 4.5, and 4.6 would occur when a Covered Person relies on the VeriSign Certificate of another. When this kind of breach occurs, the Certificate Lifetime Limit applicable to the breach is the one for the NetSure or Managed PKI Subscriber's own Certificate, not the Certificate Lifetime Limit of the VeriSign Certificate that the Covered Person relied upon. If the NetSure or Covered Managed PKI Subscriber has more than one NetSure Certificate, then the Covered Person can choose which of these NetSure Certificates will provide the Certificate Lifetime Limit for the breach. A Covered Person cannot choose a NetSure Certificate to the extent that its Certificate Lifetime Limit has already been exhausted. Any payments made under Section 5.1 reduce the applicable Certificate Lifetime Limit.

6.4 Per Reliance Limit. If a breach of one of the Section 4 warranties results in consequential or incidental damages to a Covered Person caused by reliance on the VeriSign Certificate or Silver Seal of another, the limitations of Section 6.3 apply. In addition, however, the Covered Person also has a "Per Reliance Limit" that further limits payments for any one such breach. The Per Reliance Limit applicable to a particular breach is based on Table 2 of the current version of the VeriSign NetSure Protection Plan Matrix, which is incorporated by reference here. That table is entitled "Per Reliance Limits." The current version of the VeriSign NetSure Protection Plan Matrix is located at https://www.verisign.com/repository/netsure_limits

(a) How the Per Reliance Limit Works. The "Per Reliance Limit" is the most VeriSign will pay a NetSure Subscriber, Managed PKI Customer, Covered Managed PKI Subscriber, or Silver Seal Relying Party under Section 5.1 for any one breach caused by reliance on the VeriSign Certificate or Silver Seal of another, no matter how many times that NetSure Subscriber, Managed PKI Customer, Covered Managed PKI Subscriber, or Silver Seal Relying Party relies on the VeriSign Certificate or Silver Seal. For example, if a single VeriSign Certificate is issued as a result of Impersonation and the imposter sends five digitally signed messages to a Covered Person, then a single breach has taken place. The Covered Person can only recover the Per Reliance Limit once for such breach (subject to the applicable Certificate Lifetime Limit), even if the Covered Person relies on all five digital signatures, and even if that reliance results in a total loss that exceeds the Per Reliance Limit.

(b) Relying on the Certificates of Certification Authorities. To determine a Covered Person's Per Reliance Limit when relying on the Certificate of a Certification Authority while Validating the Certificate Chain of a Subscriber's VeriSign Certificate, consult the row in Table 2 the www.verisign.com/repository/netsure_limits corresponding to the class of such Subscriber's VeriSign Certificate.

6.5 Other Remedies. The limitations on damages and payments in Sections 6.1 - 6.4 do not apply to refund payments or general contract damages.

7. Refund Policy.

7.1 Who is Covered by the Refund Policy. The refund policy in Section 7.2 applies to NetSure Subscribers, as well as Managed PKI Subscribers that have paid for their NetSure Certificates themselves. This refund policy does not apply to Managed PKI Subscribers whose NetSure Certificates were paid for by the Managed PKI Customer that approved their Certificate Applications.

7.2 What the Refund Policy Provides. If VeriSign or the Certification Authority breaches a limited warranty made to a NetSure Subscriber under Section 4 or another material obligation under the NetSure Subscriber's Service Agreement, the Certification Authority, at the NetSure Subscriber's request, shall revoke the NetSure Subscriber's Certificate, and VeriSign shall provide the NetSure Subscriber with a full refund of the amount (if any) paid by the NetSure Subscriber for the Certificate. After the applicable Certification Authority revokes the NetSure Subscriber's Certificate, VeriSign shall promptly credit the account of the credit card used to pay for the NetSure Certificate (if the NetSure Certificate was paid for via credit card), or otherwise make reimbursement via check, for the full amount of the applicable fees paid for the NetSure Certificate. To request a refund, NetSure Subscribers must complete the Refund Request Form at https://www.verisign.com/repository/refund. This refund policy is not an exclusive remedy and does not limit other remedies that may be available to NetSure Subscribers. This refund policy does not apply to Managed PKI Customers, Managed PKI Subscribers, or Non-NetSure Relying Parties.

8. PERSONS EXCLUDED FROM THE PLAN. VERISIGN PROVIDES THE LIMITED WARRANTIES IN SECTION 4 ONLY TO THE COVERED PERSONS IDENTIFIED IN SECTION 1. VERISIGN MAKES NO WARRANTY UNDER THIS PLAN TO ANY OTHER PERSONS. THIS PLAN AND THE OBLIGATIONS CONTAINED IN IT ARE NOT FOR THE BENEFIT OF ANY PERSONS OTHER THAN COVERED PERSONS. THIS PLAN IS NOT INTENDED TO CREATE ANY THIRD PARTY BENEFICIARY RIGHTS FOR ANY PERSON.

9. Liability Caused by Managed PKI Customers or Silver Seal Subscribers. The limited warranties in Section 4 do not apply to losses or damages of a Managed PKI Customer or Silver Seal Subscriber caused wholly or partially by its own breach of any warranty or obligation in its Service Agreement with VeriSign.

10. Restrictions on Rights of Employers and Other Principals. If a NetSure Subscriber uses a NetSure Certificate on behalf of an employer or other principal, the employer or principal has no rights or protections under this Plan as a NetSure Subscriber for breaches of warranty affecting that NetSure Certificate. In addition, if a NetSure Subscriber that is an employee or agent relies or attempts to rely on the VeriSign Certificate of another, the employer or principal does not have the rights or protections under this Plan as a NetSure Subscriber, unless at that time the employer or principal has its own Valid NetSure Certificate, such as a server Certificate. These restrictions apply even if the employer or principal has paid for the NetSure Certificate. These restrictions, however, do not apply to Managed PKI Customers.

Therefore, if the employer or principal is not a Managed PKI Customer, does not have its own Valid NetSure Certificate, and sustains damages by its employees or agents relying on the VeriSign Certificates of others, the employer or principal can recover damages under this Plan only as a Non-NetSure Relying Party. If, however, the employer or principal has been issued a Valid NetSure Certificate in its own name, such as a server Certificate, it is protected under the Plan for incidental or consequential damages that it sustains when its employees or agents rely on the VeriSign Certificates of others while acting on its behalf. If the employer or principal is a Managed PKI Customer, it is protected under the Plan for incidental and consequential damages that it sustains when its Managed PKI Subscribers rely on the VeriSign Certificates of others while acting on its behalf, subject to Section 2. In these events, the employer or principal has the protections provided by the limited warranties in Section 4 and is subject to the other terms and conditions in the Plan, including the disclaimers, exclusions, and limitations.

11. Exceptions to the Plan. The limited warranties in Section 4 do not apply to losses or damages of a Covered Person, caused wholly or partially by:

(a) Reliance upon information contained in or incorporated in a VeriSign Certificate or Silver Seal, whether or not published in the VeriSign repository, where such reliance is unreasonable or unjustified for any reason, in light of, among other things, facts that the Covered Person knows or should know, course of dealing between pertinent parties, or usage of trade.

(b) The failure or unreasonable delay of such Covered Person to properly communicate a request for revocation of a VeriSign Certificate or Silver Seal as required by the Service Agreement.

(c) The failure of such Covered Person to exercise reasonable care to prevent Compromise of the Subscriber's own Private Key, failure to use a Trustworthy System, or breach of any material obligation under the Issuing Agreement.

(d) The failure of such Covered Person relying upon a Subscriber's or a Certification Authority's VeriSign Certificate to apply reasonable security measures to verify the Digital Signature of such Subscriber or such Certification Authority. For a discussion of security measures used when verifying Digital Signatures or relying on Certificates, see https://www.verisign.com/repository/digidfaq.html.

(e) The failure of such Covered Person to apply reasonable security measures prior to and during the creation, storage, and transfer of encrypted messages prepared for a Subscriber of a VeriSign Certificate for purposes of sharing confidential or secret data with such Subscriber as an intended recipient, including without limitation (i) the failure to determine that such Subscriber's VeriSign Certificate is an Operational Certificate and (ii) the failure to Validate a Certificate Chain for such Subscriber's VeriSign Certificate.

(f) The failure of such Covered Person or of any Subscriber to use an RSA Public Key algorithm with at least the designated and available modulus size.

(g) The failure of such Covered Person or of any Subscriber to use any Public Key algorithm other than RSA.

(h) Any condition or incident of force majeure under the Service Agreement.

(i) Acts by any Person whose unauthorized conduct damages, alters, impedes, or otherwise misuses the facilities or services of Internet service providers or other providers of telecommunications or value-added services, including but not limited to the use or reproduction of malicious software such as computer viruses.

(j) The failure of communications infrastructure, processing, or storage media or mechanisms, including components thereof not under the exclusive ownership or control of VeriSign.

(k) Brown-outs, power failures, or other disturbances to electrical power.

(l) Illegal acts by the Covered Person, by a Subscriber, or by any Person relying on a NetSure or Managed PKI Subscriber's NetSure Certificate.

(m) Illegal acts by a person coercing the Covered Person to perform acts causing the Covered Person's loss or damages.

(n) Use or reliance upon Demo, Test, or Free Certificates.

(o) Such Covered Person's monitoring, interfering with, or reverse engineering, directly or indirectly, the technical implementation of the VeriSign Public Certification Services or other VeriSign certification services, unless expressly permitted by the Service Agreement or upon prior written approval of VeriSign.

12. Disclaimers of Warranty.

12.1 SPECIFIC DISCLAIMERS. EXCEPT AS EXPRESSLY STATED IN SECTION 4, CERTIFICATION AUTHORITIES:

(A) DO NOT WARRANT THAT NONVERIFIED SUBSCRIBER INFORMATION CONTAINED IN VERISIGN CERTIFICATES IS ACCURATE, AUTHENTIC, RELIABLE, COMPLETE, CURRENT, MERCHANTABLE, OR FIT FOR A PARTICULAR PURPOSE,

(B) SHALL NOT INCUR LIABILITY TO ANY PERSON FOR REPRESENTATIONS CONTAINED IN A VERISIGN CERTIFICATE OR SILVER SEAL, PROVIDED THE CERTIFICATE OR SILVER SEAL WAS PREPARED SUBSTANTIALLY IN COMPLIANCE WITH THE SERVICE AGREEMENT,

(C) DO NOT WARRANT "NONREPUDIATION" FOR ANY VERISIGN CERTIFICATE OR ANY MESSAGE (BECAUSE NONREPUDIATION IS DETERMINED EXCLUSIVELY BY LAW AND THE APPLICABLE FINAL DISPUTE RESOLUTION MECHANISM), AND

(D) DO NOT WARRANT THE STANDARDS OR PERFORMANCE OF ANY HARDWARE OR SOFTWARE NOT UNDER EXCLUSIVE OWNERSHIP OF, EXCLUSIVE CONTROL OF, OR LICENSED TO VERISIGN.

12.2 DISCLAIMER REGARDING MANAGED PKI CUSTOMERS AND SILVER SEAL SUBSCRIBERS. NOTWITHSTANDING ANY OTHER PROVISION OF THIS PLAN, VERISIGN MAKES NO WARRANTY THAT A MANAGED PKI CUSTOMER OR SILVER SEAL SUBSCRIBER WILL PERFORM ITS OBLIGATIONS UNDER ITS SERVICE AGREEMENT. A MANAGED PKI CUSTOMER OR SILVER SEAL SUBSCRIBER IS EXCLUSIVELY RESPONSIBLE FOR THE OBLIGATIONS, RESPONSIBILITIES, AND LIABILITIES IT UNDERTAKES IN ITS SERVICE AGREEMENT WITH VERISIGN. NOTHING IN THIS PLAN SHALL BE CONSTRUED TO RELIEVE A MANAGED PKI CUSTOMER SILVER SEAL SUBSCRIBER OF SUCH OBLIGATIONS, RESPONSIBILITIES, OR LIABILITIES, OR TO INDEMNIFY OR HOLD SUCH MANAGED PKI CUSTOMER SILVER SEAL SUBSCRIBER HARMLESS FROM SUCH OBLIGATIONS, RESPONSIBILITIES, OR LIABILITIES, IN WHOLE OR IN PART.

12.3 GENERAL DISCLAIMER. EXCEPT AS EXPRESSLY PROVIDED IN SECTION 4 AND THE SERVICE AGREEMENT, AND TO THE EXTENT PERMITTED BY APPLICABLE LAW, CERTIFICATION AUTHORITIES DISCLAIM ANY AND ALL OTHER EXPRESS OR IMPLIED WARRANTIES AND OBLIGATIONS OF ANY TYPE TO ANY PERSON, INCLUDING ANY WARRANTY OF MERCHANTABILITY, ANY WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE, AND ANY WARRANTY OF THE ACCURACY OF INFORMATION PROVIDED BY CERTIFICATE OR SILVER SEAL APPLICANTS, SUBSCRIBERS, AND THIRD PARTIES, AND FURTHER DISCLAIM ANY AND ALL LIABILITY FOR ANY ACTS BY THE CERTIFICATION AUTHORITY THAT CONSTITUTE OR MAY BE HELD TO CONSTITUTE NEGLIGENCE, RECKLESSNESS, AND/OR STRICT LIABILITY, WHETHER SOLE OR JOINTLY WITH ANY OTHER PERSON, INCLUDING BUT NOT LIMITED TO ANY COVERED PERSON.

This disclaimer does not apply to Managed PKI Customers.

13. LIMITATION ON GENERAL CONTRACT DAMAGES. IN THE EVENT A NETSURE OR MANAGED PKI SUBSCRIBER, NON-NETSURE RELYING PARTY, OR SILVER SEAL RELYING PARTY INITIATES ANY CLAIM, ACTION, SUIT, ARBITRATION, OR OTHER PROCEEDING SEPARATE FROM A REQUEST FOR PAYMENT UNDER SECTION 5.2, AND TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE TOTAL LIABILITY OF ALL CERTIFICATION AUTHORITIES FOR GENERAL CONTRACT DAMAGES SUSTAINED BY ANY AND ALL NETSURE SUBSCRIBERS, MANAGED PKI SUBSCRIBERS, NON-NETSURE RELYING PARTIES, AND SILVER SEAL RELYING PARTIES, COMBINED WITH ANY AND ALL DAMAGES SUSTAINED BY ANY AND ALL OTHER PERSONS CAUSED BY THE USE OF OR RELIANCE ON A SPECIFIC CERTIFICATE OR SILVER SEAL ("NON-NETSURE DAMAGES") SHALL BE LIMITED TO AN AMOUNT NOT TO EXCEED THE LIABILITY CAP FOR EACH CLASS OF CERTIFICATE (OR SILVER SEAL) SET FORTH IN THE FOLLOWING TABLE 3, FOR THE TOTAL OF ALL DIGITAL SIGNATURES, TRANSACTIONS, AND CLAIMS RELATED TO SUCH CERTIFICATE OR SILVER SEAL:

Where the Certificate or Seal used or relied upon was a... Class 1 Certificate Class 2 Certificate Class 3 Certificate Class 3 - Authen- tication Bureau Certificate Server, Global Server, or EDI Certificate Silver Site Seal Healthcare Certificate
The Limitations on Damages is: $100.00
US
$5,000.00 US $100,000.00 US $100,000.00 US $100,000.00 US $500.00 US $10,000.00 US
TABLE 3 - LIABILITY CAPS

THE LIABILITY CAPS PROVIDED IN THIS SECTION SHALL BE THE SAME REGARDLESS OF THE NUMBER OF DIGITAL SIGNATURES, TRANSACTIONS, OR CLAIMS RELATED TO SUCH CERTIFICATE OR SILVER SEAL. IN THE EVENT THE NON-NETSURE DAMAGES SUSTAINED BY THE USE OR RELIANCE ON A SPECIFIC CERTIFICATE OR SILVER SEAL EXCEED THE LIABILITY CAP FOR SUCH CERTIFICATE OR SILVER SEAL, PAYMENT OF NON-NETSURE DAMAGES SHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINAL RESOLUTION (BY SETTLEMENT OR OTHERWISE), UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENT JURISDICTION. THIS SECTION DOES NOT LIMIT REFUND PAYMENTS UNDER SECTION 7 OR PAYMENTS UNDER SECTION 5.1. SUBJECT TO SECTIONS 5 AND 7, VERISIGN SHALL NOT BE OBLIGATED TO PAY MORE THAN THE TOTAL LIABILITY CAP FOR EACH CERTIFICATE OR SILVER SEAL, REGARDLESS OF THE METHOD OF APPORTIONMENT AMONG CLAIMANTS OF THE AMOUNT OF THE LIABILITY CAP. THIS SECTION APPLIES ONLY TO THE EXTENT PERMITTED BY APPLICABLE LAW. THIS SECTION APPLIES TO LIABILITY UNDER CONTRACT (INCLUDING BREACH OF WARRANTY), TORT (INCLUDING NEGLIGENCE AND/OR STRICT LIABILITY), AND ANY OTHER LEGAL OR EQUITABLE FORM OF CLAIM.

14. EXCLUSION OF CERTAIN ELEMENTS OF DAMAGES. EXCEPT AS EXPRESSLY PROVIDED IN SECTION 5, AND TO THE EXTENT PERMITTED BY APPLICABLE LAW, NO CERTIFICATION AUTHORITY SHALL BE LIABLE TO ANY PERSON FOR ANY INDIRECT, SPECIAL, RELIANCE, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING BUT NOT LIMITED TO ANY LOSS OF PROFITS OR LOSS OF DATA), ARISING FROM OR IN CONNECTION WITH THE USE, DELIVERY, LICENSE, PERFORMANCE, OR NONPERFORMANCE OF CERTIFICATES, SILVER SEALS, DIGITAL SIGNATURES, OR ANY OTHER TRANSACTIONS, PRODUCTS, OR SERVICES OFFERED OR CONTEMPLATED BY THE SERVICE AGREEMENTS OR THIS PLAN, EVEN IF SUCH CERTIFICATION AUTHORITY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

This exclusion does not apply to VeriSign's liability to a Managed PKI Customer.

15. EXCLUSION OF PUNITIVE DAMAGES. TO THE EXTENT PERMITTED BY APPLICABLE LAW, NO CERTIFICATION AUTHORITY SHALL BE LIABLE TO ANY PERSON FOR ANY PUNITIVE DAMAGES ARISING FROM OR IN CONNECTION WITH THE USE, DELIVERY, LICENSE, PERFORMANCE, OR NONPERFORMANCE OF CERTIFICATES, SILVER SEALS, DIGITAL SIGNATURES, OR ANY OTHER TRANSACTIONS OR SERVICES OFFERED OR CONTEMPLATED BY THE SERVICE AGREEMENTS OR THIS PLAN.

This exclusion does not apply to VeriSign's liability to Managed PKI Customers.

16. Severability. The unenforceability of any provision or provisions of this Plan shall not render unenforceable, or impair, its remainder. If any provision of this Plan shall be deemed invalid or unenforceable, in whole or in part, this Plan shall be deemed amended to delete or modify, as necessary, the invalid or unenforceable provision to render it valid, enforceable, and, insofar as possible, consistent with the original intent of the parties. This Section does not apply to Service Agreements or NetSure Warranty Agreements with Managed PKI Customers.

17. Amendments. VeriSign shall be entitled to amend this Plan from time to time (prospectively and not retroactively). VeriSign shall be entitled to place amendments in the VeriSign repository either in the form of an amended version of the Plan or in the Practices Updates and Notices section of the VeriSign repository (see https://www.verisign.com/repository/updates). An amendment to the Plan shall become effective fifteen (15) days after VeriSign publishes the amendment in the VeriSign repository, unless VeriSign publishes a notice of withdrawal of the amendment in the repository prior to the end of such fifteen (15) day period. If a NetSure or Managed PKI Subscriber does not assent to an amendment, the NetSure or Managed PKI Subscriber shall, within fifteen (15) days following publication of the amendment, request revocation of his, her, or its NetSure Certificate. Upon such request, the Certification Authority shall revoke the NetSure or Managed PKI Subscriber's NetSure Certificate and provide the NetSure or Managed PKI Subscriber (assuming the Managed PKI Subscriber paid for his/her/its NetSure Certificate) with a refund in the amount prorated to reflect the remaining Operational Period of such NetSure Certificate. For example, if the NetSure Certificate has an Operational Period of one year and the NetSure or Managed PKI Subscriber requests a refund under this Section six (6) months after issuance, VeriSign shall refund half of the amount of the fees paid for the NetSure Certificate. A NetSure or Managed PKI Subscriber's failure to request revocation of his, her, or its NetSure Certificate within fifteen (15) days following the publication of an amendment shall constitute agreement to the amendment.

Appendix A

GLOSSARY OF DEFINED TERMS

1. General Definitions. Unless otherwise noted in the Plan, defined terms shall have the meanings given to them in the CPS. (See https://www.verisign.com/repository/CPS/CPSCH13.HTM)

2. Definitions Specific to the Plan.

(a) Applicable Time Period. See Section 3.

(b) Approved Private Hierarchy. "Approved Private Hierarchy" means a domain consisting of a chained Certificate hierarchy which is entirely self-contained within an organization or network and not designed to be interoperable with or intended to interact through public channels with any external organizations, networks and public hierarchies, that has been approved by VeriSign as being eligible to participate in the Plan.

(c) Certificate. As used in the Plan, a "Certificate" means either a Certificate as defined in the CPS or a certificate issued under an Approved Private Hierarchy.

(d) Certificate Lifetime Limit. See Section 6.2.

(e) Compromise. See Section 4.4.

(f) Covered Person. See Section 1.

(g) Delay in Requesting Revocation. See Section 4.7.

(h) Erroneous Issuance. See Section 4.6.

(i) Impersonation. See Section 4.6.

(j) Loss of Use. See Section 4.5.

(k) NetSure Certificate. See Section 1(a).

(l) NetSure Subscriber. See Section 1(a).

(m) NetSure Warranty Agreement. "NetSure Warranty Agreement" means an agreement or addendum to a Service Agreement by which a Managed PKI Customer obtains the rights and protections of an Managed PKI Customer that is a Covered Person under the Plan.

(n) Non-NetSure Damages. See Section 13.

(o) Non-NetSure Relying Party. See Section 1(d).

(p) Plan. "Plan" means the NetSure Protection Plan, that is, this document.

(q) Managed PKI Customer. See Section 1(b).

(r) Managed PKI Subscriber. See Section 1(c).

(s) Operational Certificate or Silver Seal. "Operational Certificate" or "Operational Silver Seal" means a Certificate or Silver Seal which is within its Operational Period at the present date and time or at a different specified date and time, depending on the context. For purposes of verifying a Digital Signature in the context of Sections 4.4(c), 4.5(c), or 4.6(c) of the Plan, reliance on the VeriSign Certificate of another shall be deemed to be reliance on an Operational VeriSign Certificate if and only if that Digital Signature was made during the VeriSign's Certificate's Operational Period.

(t) Per Reliance Limit. See Section 6.4.

(u) Primary Certification Authority. "Primary Certification authority" ("PCA") is a person or organization that establishes practices for all Certification Authorities and users within its domain.

(v) Service Agreement. "Service Agreement" means, at any given time, the current version of the agreement(s) under which a Covered Person obtained a NetSure Certificate (in the case of NetSure and Managed PKI Subscribers), arranged for the issuance of NetSure Certificates to its Managed PKI Subscribers (in the case of Managed PKI Customers), obtained a Silver Seal (in the case of Silver Seal Subscribers), or agreed to terms and conditions for the reliance upon VeriSign Certificates (in the case of Non-NetSure Relying Parties).

(w) Seal Agreement. See Section 1(d).

(x) Silver Seal. See Section 1(d).

(y) Silver Seal Relying Party. See Section 1(f).

(z) Silver Seal Subscriber. See Section 1(d).

Unauthorized Revocation. See Section 4.5.

(x) VeriSign Certificate. "VeriSign Certificate" means a Certificate issued by VeriSign or any Managed PKI Customer (whether a Covered Person or not), as Certification Authority and is of the class and type identified in https://www.verisign.com/repository/ns_list.

Appendix B

LIST OF SERVICE AGREEMENTS

This Plan is made an integral part of, and is incorporated by reference in, the following Service Agreements:
1 VeriSign® is a registered trademark of VeriSign, Inc. NetSure® and OnSite® are registered service marks of VeriSign, Inc.