Starfield Technologies, Inc.
SSL Certificate Service Relying Party Agreement
This Starfield Technologies, Inc. SSL Certificate Service Relying Party Agreement("Agreement") is by and between Starfield Technologies, Inc., an Arizona Corporation,
its resellers ("Starfield") and You, Your heirs, agents, successors and assigns ("You"),
and is made effective upon the earlier of 1) Your submission of a query to Starfield tosearch for a Certificate, 2) Your validation or attempted validation of a digital signatureusing a Starfield Certificate, or 3) Your use of any information in Starfield’s Certificate
Revocation List (“CRL”). This Agreement sets forth the terms and conditions of Youruse of Starfield's Certificate Services and represents the entire agreement between You
and Starfield. Starfield’s Certificate Services are governed by Starfield’s Certification
Practice Statement (“CPS"), which may be amended from time to time. The latest CPS
may be found at http://certs.starfieldtech.com/repository.
I. Definitions.
The following terms shall be defined in this Agreement as follows:“CAs” or “Certification Authorities” are entities such as Starfield that are authorized tocreate, sign, distribute, and revoke certificates. They are also responsible for distributing
certificate status information and providing a repository where certificates and certificate
status information is stored.
“Compromise” means a loss, theft, disclosure, modification, unauthorized use, or otherbreach of security related to a Private Key.
“Private Key” means a confidential encrypted electronic data file that interfaces with a
Public Key using the same encryption algorithm, in order to verify Digital Signatures andencrypt files or messages.
“Public Key” means an encrypted electronic data file that is publicly available forinterfacing with a Private Key.
“RAs” or “Registration Authorities” are the Subordinate Certification Authorities that areunder the control of Starfield.
“Relying Party” means an individual or entity that acts in reliance on a Certificate ordigital signature associated with a Certificate.
“Repository” means the section of Starfield’s website which contains information related
to PKI, including the CPS, any related agreements, and CRLs.
“Subscriber” means the individual or entity that has been issued a Certificate and isauthorized to use the Private Key that corresponds to the Public Key in the Certificate.
SSL Certificate Service Relying Party Agreement – Version 1.7
1

“Starfield CPS” means the Starfield Certificate Practice Statement, which defines anddescribes how the Starfield PKI and its Certificates work.
“Starfield PKI” means the Starfield Public Key Infrastructure that provides Certificates
for individuals and entities.
“Starfield PKI Site Seal” means a graphic image that a web site displays to show thattransactions on that web site are secured by the Certificate Service.
II. The Certificate Service and Your Obligations as a Relying Party.
You shall:(a) confirm the validity of Subscriber Public Key Certificates by using the applicableCRL;(b) verify that the Subscriber possesses the asymmetric Private Key corresponding to the
Public Key Certificate (e.g., through digital signature verification); and(c) use the Public Key in the Subscriber’s Certificate in compliance with this Agreement
and the CPS.
III. Use Restrictions.
You are prohibited from:(a) using the Certificate Service on behalf of any other entity;(b) copying or decompiling (except where such decompilation is permitted by Section
50B of the Copyright, Designs, and Patent Act of 1988), enhancing, adapting, or
modifying a Certificate(s), Private Key(s) or Public Key(s); or(c) interfering with the Starfield PKI and/or compromising its security.
IV. Starfield Representations and Warranties.
Starfield warrants and represents that, to the best of its knowledge:(a) there are no material misrepresentations of fact in the Certificate;(b) there are no informational errors in the Certificate introduced by the entities thatapproved the Certificate Application or issued the Certificate as a result of failing to
exercise reasonable care in managing the Certificate Application or creating theCertificate;(c) it is providing the Certificate Service with reasonable skill and care; and(d) the Certificate, revocation services, and Starfield’s use of a repository comply in allmaterial respects with the Starfield CPS.
V. Relying Party Warranties and Representations.
You warrant and represent that:(a) the Certificate is being used lawfully by You and with authorization;(b) You are using the Certificate in a Relying Party capacity;(c) You disclaim any fiduciary relationship between Starfield and any non-Starfield
Certification Authorities, and between You and any Subscriber; and(d) You understand that a Starfield Subscriber is solely responsible for the generation andsecurity of the Private Key corresponding to the Public Key contained in the Subscriber’s

SSL Certificate Service Relying Party Agreement – Version 1.7
2

Certificate, and that the Subscriber may have failed to keep the Certificate secure and if
so, the Private Key may have become compromised.
VI. Disclaimers of Warranties.
STARFIELD, ITS CAS, ITS RESELLERS, CO-MARKETERS, SUBCONTRACTORS,DISTRIBUTORS, AGENTS, SUPPLIERS, AND EMPLOYEES MAKE NO
REPRESENTATIONS AND EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY
KIND UNLESS STATED OTHERWISE WITHIN THE STARFIELD PKI
AGREEMENTS, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESSFOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, TITLE, SATISFACTORY
TITLE, AND ALSO INCLUDING WARRANTIES THAT ARE STATUTORY OR BY
USAGE OF TRADE. STARFIELD MAKES NO WARRANTY THAT ITSSERVICE(S) WILL MEET ANY EXPECTATIONS, OR THAT THE SERVICE(S)WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR FREE, OR THAT
DEFECTS WILL BE CORRECTED. STARFIELD MAKES NO WARRANTIESTHAT ANY WEB SITE CONTAINING THE STARFIELD PKI SITE SEAL IS INCOMPLIANCE WITH STARFIELD’S PKI STANDARDS. STARFIELD DOES NOTWARRANT, NOR MAKE ANY REPRESENTATIONS REGARDING THE USE, OR
RESULTS OF, ANY OF THE SERVICES WE PROVIDE, IN TERMS OF THEIR
CORRECTNESS, ACCURACY, RELIABILITY, OR OTHERWISE.
VII. Indemnity.
You shall indemnify and hold harmless Starfield, any non-Starfield Certificate
Authorities associated with Starfield PKI, and Starfield’s contractors, agents, employees,
officers, directors, shareholders, affiliates and assigns from and against any claims,
liabilities, damages, costs and expenses, including reasonable attorney’s fees, court costs,
and experts fees, of third parties relating to or arising out of use or reliance by You on
any Starfield Certificate or any service provided in respect to Starfield Certificates,
including (i) improper, illegal, or unauthorized use of a Certificate, (ii) using a Certificatethat is unreliable, expired, revoked, or unvalidated, (iii) failing to perform Your duties asa Relying Party (iv) relying on a Certificate that is not reasonable under thecircumstances, or (v) failing to check the status of a Certificate to determine if it isexpired or revoked. You agree to notify Starfield of any such claim promptly in writing
and to allow Starfield to control the proceedings. You agree to cooperate fully with
Starfield during such proceedings. You shall defend and settle at Your sole expense allproceedings arising out of the foregoing.
VIII. Limitation of Liability.
STARFIELD SHALL NOT BE LIABLE FOR ANY LOSS OF CERTIFICATESERVICES DUE TO (1) WAR, NATURAL DISASTERS OR OTHER
UNCONTROLLABLE FORCES; (2) AN INTERRUPTION THAT OCCURSBETWEEN THE TIME A CERTIFICATE IS REVOKED AND THE NEXTSCHEDULED ISSUANCE OF A CERTIFICATE, (3) ARISING FROM THE
NEGLIGENT OR FRAUDULENT USE OF CERTIFICATES ISSUED BY
STARFIELD, INCLUDING BUT NOT LIMITED TO A THIRD PARTY’S IMPROPERSSL Certificate Service Relying Party Agreement – Version 1.7
3

USAGE OF THE CERTIFICATES ON A DOMAIN NAME OR WEB SITE NOTREGISTERED TO THEM (4) DISCLOSURE OF PERSONAL INFORMATIONCONTAINED WITHIN CERTIFICATES, (5) FAILURE BY A SUBSCRIBER TO
GENERATE OR MAINTAIN A SECURE AND CRYPTOGRAPHICALLY SOUND
KEY PAIR, OR (6) IF SUCH PRIVATE KEY IS COMPROMISED. STARFIELDSHALL NOT BE LIABLE FOR THE ACTIONS OF ANY WEB SITE DISPLAYINGTHE STARFIELD PKI SITE SEAL.
THE TOTAL CUMULATIVE LIABILITY OF STARFIELD, ANY INDEPENDENTTHIRD-PARTY REGISTRATION AUTHORITY OPERATING UNDER A
STARFIELD CA, ANY RESELLERS, OR CO-MARKETERS, OR ANY
SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR
DIRECTORS OF ANY OF THE FOREGOING TO ANY APPLICANT, SUBSCRIBER,RELYING PARTY OR ANY OTHER PERSON, ENTITY, OR ORGANIZATIONARISING OUT OF OR RELATING TO ANY STARFIELD CERTIFICATE OR ANYSERVICES PROVIDED IN RESPECT TO STARFIELD CERTIFICATES,INCLUDING ANY USE OR RELIANCE ON ANY STARFIELD CERTIFICATE,
SHALL NOT EXCEED TWO THOUSAND UNITED STATES DOLLARS ($2000.00
U.S.) ("CUMULATIVE DAMAGE LIMIT"). THIS LIMITATION SHALL APPLY PERSTARFIELD CERTIFICATE REGARDLESS OF THE NUMBER OF
TRANSACTIONS OR CAUSES OF ACTION ARISING OUT OF OR RELATED TO
SUCH STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECTTO SUCH STARFIELD CERTIFICATE. THE FOREGOING LIMITATIONS SHALLAPPLY TO ANY LIABILITY WHETHER BASED IN CONTRACT (INCLUDINGFUNDAMENTAL BREACH), TORT (INCLUDING NEGLIGENCE), LEGISLATIONOR ANY OTHER THEORY OF LIABILITY, INCLUDING ANY DIRECT,INDIRECT, SPECIAL, STATUTORY, PUNITIVE, EXEMPLARY,CONSEQUENTIAL, RELIANCE, OR INCIDENTAL DAMAGES.
STARFIELD, ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER A
STARFIELD CA, OR DIRECTORS OF ANY OF THE FOREGOING SHALL NOT BE
LIABLE TO YOU, A RELYING PARTY, OR ANY OTHER PERSON, ENTITY, OR
ORGANIZATION FOR ANY LOSSES, COSTS, EXPENSES, LIABILITIES,DAMAGES, CLAIMS OR SETTLEMENT AMOUNTS ARISING OUT OF OR
RELATING TO ANY PROCEEDING OR ALLEGATION THAT A STARFIELDCERTIFICATE OR ANY INFORMATION CONTAINED IN A STARFIELDCERTIFICATE INFRINGES, MISAPPROPRIATES, DILUTES, UNFAIRLYCOMPETES WITH, OR OTHERWISE VIOLATES ANY PATENT, TRADEMARK,COPYRIGHT, TRADE SECRET, OR ANY INTELLECTUAL PROPERTY RIGHT OR
OTHER RIGHT OF ANY PERSON, ENTITY, OR ORGANIZATION IN ANYJURISDICTION.
SHOULD LIABILITY ARISING OUT OF OR RELATING TO A STARFIELDCERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO A STARFIELDCERTIFICATE EXCEED THE CUMULATIVE DAMAGE CAP SET FORTH IN THISSECTION ABOVE, THE AMOUNTS AVAILABLE UNDER THE CUMULATIVE

SSL Certificate Service Relying Party Agreement – Version 1.7
4

DAMAGE CAP SHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMSTO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED
BY A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALLSTARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDERANY STARFIELD CERTIFICATION AUTHORITY, OR ANY RESELLERS, COMARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS,
SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE
OBLIGATED TO PAY MORE THAN THE CUMULATIVE DAMAGE CAP FOR
ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECTTO ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF
APPORTIONMENT AMONG CLAIMANTS.
STARFIELD, INDEPENDENT THIRD-PARTY RAs OPERATING UNDER A
STARFIELD CERTIFICATION AUTHORITY, RESELLERS, CO-MARKETERS, OR
ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS,EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING SHALL NOT BE
LIABLE FOR ANY INCIDENTAL, SPECIAL, STATUTORY, PUNITIVE,
EXEMPLARY, INDIRECT, RELIANCE, OR CONSEQUENTIAL DAMAGES(INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS,
LOSS OF BUSINESS OPPORTUNITIES, LOSS OF GOODWILL, LOSS OF
PROFITS, BUSINESS INTERRUPTION, LOSS OF DATA, LOST SAVINGS OR
OTHER SIMILAR PECUNIARY LOSS) WHETHER ARISING FROM CONTRACT(INCLUDING FUNDAMENTAL BREACH), TORT (INCLUDING NEGLIGENCE),
LEGISLATION OR ANY OTHER THEORY OF LIABILITY.
THESE LIMITATIONS SHALL APPLY NOTWITHSTANDING THE FAILURE OF
ESSENTIAL PURPOSE OF ANY LIMITED REMEDY STATED HEREIN AND
EVEN IF STARFIELD OR ANY INDEPENDENT THIRD-PARTY
OPERATING UNDER A STARFIELD CERTIFICATION AUTHORITY, OR ANYRESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS,AGENTS, SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE
FOREGOING HAVE BEEN ADVISED OF THE POSSIBILITY OF THOSEDAMAGES.
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF
LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, SO THESE
LIMITATIONS SET FORTH ABOVE MAY NOT APPLY TO CERTAINAPPLICANTS, SUBSCRIBERS, RELYING PARTIES, OR OTHER PERSONS,ENTITIES, OR ORGANIZATIONS. THE DISCLAIMERS OF REPRESENTATIONS,WARRANTIES, AND CONDITIONS AND THE LIMITATIONS OF LIABILITY IN
THIS STARFIELD CERTIFICATION PRACTICE STATEMENT CONSTITUTE AN
ESSENTIAL PART OF THE STARFIELD CPS, ANY SUBSCRIPTIONAGREEMENTS, AND ANY RELYING PARTY AGREEMENTS. ALL APPLICANTS,
SUBSCRIBERS, RELYING PARTIES, AND OTHER PERSONS, ENTITIES, AND
ORGANIZATIONS ACKNOWLEDGE THAT BUT FOR THESE DISCLAIMERS OF
REPRESENTATIONS, WARRANTIES, AND CONDITIONS AND LIMITATIONS OF

SSL Certificate Service Relying Party Agreement – Version 1.7
5

LIABILITY, STARFIELD WOULD NOT ISSUE STARFIELD CERTIFICATES TO
SUBSCRIBERS AND NEITHER STARFIELD NOR ANY INDEPENDENT THIRDPARTY REGISTRATION AUTHORITIES OPERATING UNDER A STARFIELDCERTIFICATION AUTHORITY, NOR ANY RESELLERS, CO-MARKETERS, OR
ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS,EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING WOULD PROVIDESERVICES IN RESPECT TO STARFIELD CERTIFICATES AND THAT THESE
PROVISIONS PROVIDE FOR A REASONABLE ALLOCATION OF RISK.
IX. Modifications.
You agree that Starfield may modify this Agreement and the terms of the Certificate
Service from time to time. Any such revisions shall be binding and effective
immediately upon posting the revised Agreement on the Starfield website. By continuing
to use Starfield’s Certificate Service after there has been a revision to this Agreement or
the Service, You agree to be bound by such revision.
X. Force Majeure.
Neither party shall be in default or otherwise liable for any delay in or failure of its
performance under this Agreement if such delay or failure arises by any reason beyond its
reasonable control, including any act of God, any acts of the common enemy, theelements, earthquakes, floods, fires, epidemics, riots, failures or delay in transportation orcommunications, or any act or failure to act by the other party or such other party's
employees, agents or contractors; provided, however, that lack of funds shall not be
deemed to be a reason beyond a party's reasonable control. The parties will promptly
inform and consult with each other as to any of the above causes which in their judgment
may or could be the cause of a delay in the performance of this Agreement.
XI. Severability and Entire Agreement.
You agree that the terms of this Agreement are severable. If any part of this Agreement isdetermined to be unenforceable or invalid, that part of the agreement will be interpretedin accordance with applicable law as closely as possible, in line with the original
intention of both parties of the Agreement. The remaining terms and conditions of theagreement will remain in full force and effect.
You agree that this Agreement including the policies it refers to (i.e. the CPS, etc.)
constitute the complete and only agreement between You and Starfield regarding theCertificate Service contemplated herein. If any of the provisions of the related polices areheld to be invalid or unenforceable by an arbitrator or court of competent jurisdiction, thevalidity of the other provisions of this Agreement and related policies shall not in any
way be affected or impaired thereby.
XII. Venue; Waiver of Trial by Jury.
THIS AGREEMENT SHALL BE DEEMED ENTERED INTO IN THE STATE OFARIZONA, REGARDLESS OF CONTRACT OR OTHER CHOICE OF LAWPROVISIONS. THE LAWS AND JUDICIAL DECISIONS OF MARICOPASSL Certificate Service Relying Party Agreement – Version 1.7
6

COUNTY, ARIZONA, SHALL BE USED TO DETERMINE THE VALIDITY,CONSTRUCTION, INTERPRETATION AND LEGAL EFFECT OF THISAGREEMENT. YOU AGREE THAT ANY ACTION RELATING TO OR ARISINGOUT OF THIS AGREEMENT, SHALL BE BROUGHT IN THE COURTS OF
MARICOPA COUNTY, ARIZONA. ANY APPLICABLE NATIONAL, STATE,LOCAL AND FOREIGN LAWS, RULES, REGULATIONS, ORDINANCES,
DECREES, AND ORDERS INCLUDING, BUT NOT LIMITED TO, RESTRICTIONSON EXPORTING OR IMPORTING SOFTWARE, HARDWARE, OR TECHNICALINFORMATION SHALL APPLY TO THIS AGREEMENT. THE UNITED NATIONSCONVENTION ON CONTRACTS FOR THE INTERNATIONAL SALE OF GOODSSHALL NOT APPLY TO THIS AGREEMENT.
YOU AGREE TO WAIVE THE RIGHT TO TRIAL BY JURY IN ANY PROCEEDINGTHAT TAKES PLACE RELATING TO OR ARISING OUT OF THIS AGREEMENT.
XIII. Assignment.
You shall not assign or otherwise transfer the this Agreement to anyone, including any
parent, subsidiaries, affiliated entities or third parties, or as part of the sale of any portionof its business, or pursuant to any merger, consolidation or reorganization, without
Starfield's prior written consent.
XIV. Waiver.
The waiver or failure of either party to exercise in any respect any right provided for inthis Agreement shall not be deemed a waiver of any further right under this Agreement.
XV. Survival.
Parts III, VI, VII, VIII, X, XI, XII, XIII, and XV shall survive the termination of thisAgreement.
XVI. Notices.
Any notice, demand, or request pertaining to this Agreement or related agreements, (i.e.,
the CPS) shall be communicated either using email or in writing. Electronic
communications from You to Starfield shall be effective when received by the intended
recipient at Starfield, and written communications shall be effective five days after
mailing or upon receipt, whichever is sooner. Notice from Starfield to You shall bedeemed binding and effective thirty (30) days after posting the revised Agreement on theStarfield website, or when You receive the notice in writing from Starfield, whichevercomes first.
Notices from You to Starfield shall be made either by email, sent to the address weprovide on our web site, or first class mail to our address at:
Starfield PKI C/O Starfield Technologies, Inc.,
100 S Mill Ave, Suite 1600,
Tempe, AZ 85281
practices@starfieldtech.com

SSL Certificate Service Relying Party Agreement – Version 1.77