CERTIFICATE SERVICES AGREEMENT

Last Revised: 1/7/2021

PLEASE READ THIS AGREEMENT CAREFULLY, AS IT CONTAINS IMPORTANT INFORMATION REGARDING YOUR LEGAL RIGHTS AND REMEDIES

1. OVERVIEW

This Certificate Services Agreement (this “Agreement”) is entered into by and between 123 Reg Limited ("123 Reg"). This Agreement sets forth the terms and conditions of your use of the various SSL and code signing certificate services (“Services”) that we offer. Your electronic acceptance of this Agreement signifies that you have read, understand, acknowledge and agree to be bound by this Agreement, which incorporates by reference all of (i) our General Terms of Service, (ii) all relevant agreements, statements, practices and forms set forth in our

2. DESCRIPTION OF SERVICES

We offer various "web security' services, including SSL and code signing certificates services. Each of these are further described below and are governed by individual agreements with a specific set of terms and conditions referenced and incorporated herein, as well as various practice and policy statements that govern the services generally. All Services are governed by our Certification Policy and Certification Practice Statement. To the extent applicable, Services may also be subject to terms and conditions of our SSL Certificate Service Relying Party Agreement.

SSL Certificates. Any SSL certificate you purchase from us or our affiliates is subject to and is intended for its specific use as described in the SSL Certificate Service Subscriber Agreement, or, if an extended validation certificate, by the terms the Extended Validation Certificate Service Subscriber Agreement. For Premium (EV) certificates, there is an extensive vetting process that starts with an in-depth application that will require you to provide details about your business, such as registration number, incorporation or registration agent and any relevant jurisdiction information.

SSL Certificates Term. A new regulation introduced by a Certification Authority (entities authorised to create, sign, distribute, and revoke certificates, as well as distributing certificate status information and providing a repository where certificates and certificate status information is stored) /Browser Forum requires that all SSL certificates issued on or after September 1, 2020 be valid for no more than 398 days. As such, we will automatically re-validate and re-issue certificates so that the certificate validity period is not greater than 398 days as long as the subscription is active.

Code Signing Certificates. Any Code Signing certificate you purchase from us or our affiliates is subject to and is intended for its specific use as described in the Code Signing Certificate Service Subscriber Agreement. After you purchase a Code Signing Certificate, you need to take all reasonable measures necessary to maintain sole control of, keep confidential, and properly protect at all times Your Private Key (as defined in the Code Signing Certificate Service Subscriber Agreement) that corresponds to the Public Key (as defined in the Code Signing Certificate Service Subscriber Agreement) to be included in the requested Certificate(s) (and any associated activation data or device – e.g. password or token) and ensure that, at a minimum, the Private Key is stored on a USB token that is physically separate from the device that hosts the code signing function until a signing session is begun and provide a certificate signing request (CSR) from the computer that is signing the code. Be sure to request the certificate using the computer and the account (typically Administrator) you will use to sign the code. Requesting the certificate creates a private key on the computer that you must associate with the code signing certificate when you install it. Depending on the use of the certificate, you can create the CSR automatically, or you can use a tool like OpenSSL to generate the CSR. After you submit your request, we verify the company information you supplied. The Registration Authority (RA) might contact you to provide additional information, if required. You can monitor the validation process through your account. Once the Code Signing Certificate is issued, we'll send you an email with a link to download and install the certificate file and any associated intermediate certificates.

3. APPLICANT REPRESENTATIVE

You are permitted to assign a representative the authority to (1) sign and submit, or approve a certificate request on your behalf, (2) sign and submit a Subscriber Agreements on your behalf and/or (3) to acknowledge the Terms of Use on your behalf, provided that you acknowledge and agree that you are, and will remain, subject to and bound by all terms and conditions of this agreement.

4. TITLES AND HEADINGS; INDEPENDENT COVENANTS; SEVERABILITY

The titles and headings of this Agreement are for convenience and ease of reference only and shall not be utilized in any way to construe or interpret the agreement of the parties as otherwise set forth herein. Each covenant and agreement in this Agreement shall be construed for all purposes to be a separate and independent covenant or agreement. If a court of competent jurisdiction holds any provision (or portion of a provision) of this Agreement to be illegal, invalid, or otherwise unenforceable, the remaining provisions (or portions of provisions) of this Agreement shall not be affected thereby and shall be found to be valid and enforceable to the fullest extent permitted by law.

5. DEFINITIONS; CONFLICTS

Capitalized terms used but not defined herein shall have the meanings ascribed to them in the General Terms of Service. In the event there is a conflict between the provisions of this Agreement and the provisions of the General Terms of Service, the provisions of this Agreement shall control.