Starfield Technologies, LLC
Extended Validation Certificate Service Subscriber Agreement
This Starfield Technologies, LLC Extended Validation Certificate Service Subscriber Agreement (this“http://www.starfieldtech.com/repository. Agreement”) is by and between Starfield Technologies, LLC, a Delaware limited
liability company, its resellers (“Starfield”) and the company or applicant named on the counterpart signature page of thisAgreement (“Company/Applicant” or “you”). This Agreement sets forth the terms and conditions of your use of Starfield’sCertificate Service (as defined below). You acknowledge and agree that (i) you have read, understand and agree to bebound by all the terms and conditions of this Agreement, Starfield’s Certification Practice Statement (the “CPS”), and anyother Starfield documents incorporated herein, and (ii) this Agreement, together with the CPS and such other Starfielddocuments, constitutes the entire agreement by and between Starfield and you regarding the Certificate Service
contemplated herein. The current version of the CPS may be found at Http://www.starfieldtech.com/repository.
I. Definitions.
The following terms shall be defined in this Agreement as follows:“Application Software Vendors” means a developer of software that displays or uses certificates and distributes root
certificates.
“CAs” or “Certification Authorities”, are entities such as Starfield that are authorized to create, sign, distribute, and revoke
certificates. They are also responsible for distributing certificate status information and providing a repository wherecertificates and certificate status information is stored.
“Certificate” means the Extended Validation Certificates issues by Starfield pursuant to this Agreement.
“Certificate Beneficiaries” means the Subscriber, the Relying Party and all Application Software Vendors with whom
Starfield has entered into a contract for inclusion of its root certificate in software distributed by such Application Software
Vendors.
“Compromise” means a loss, theft, disclosure, modification, unauthorized use, or other breach of security related to a
Private Key.
“Confidential Information” means all information obtained as a result of the parties’ entering into this Agreement, which
includes but is not limited to, information related to Private Keys, Public Keys, personally identifying information,
passwords, and information that is designated as or intended to be confidential.
“Private Key” means a confidential encrypted electronic data file that interfaces with a Public Key using the sameencryption algorithm, in order to verify digital signatures and encrypt files or messages.
“Public Key” means an encrypted electronic data file that is publicly available for interfacing with a Private Key.
“RAs” or “Registration Authorities” are the subordinate Certification Authorities that are under the control of Starfield.
“Relying Party” means an individual or entity that acts in reliance on a Certificate or digital signature associated with a
Certificate.
“Reseller” means an individual or entity which has been given permission by Starfield to sell products to Subscribers.
“Subscriber” means the individual or entity that has been issued a Certificate and is authorized to use the Private Key that
corresponds to the Public Key in the Certificate.

Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

“Starfield CPS” means the Starfield Certificate Practice Statement, which defines and describes how the Starfield PKI and its
Certificates work.
“Starfield PKI” means the Starfield Public Key Infrastructure that provides Certificates for individuals and entities.
“Starfield PKI Site Seal” means a graphic image that a web site displays to show that transactions on that web site are
secured by the Certificate Service.
II. The Certificate Service and Your Obligations as a Subscriber.
Upon receipt of your Certificate Application and payment, Starfield will initiate the necessary authentication procedures tovalidate your application. Once this has been completed, Starfield shall provide you with the Certificate Service describedin this Agreement (collectively, the “Certificate Service”) and in the Starfield CPS.
You shall:(a) generate one or more asymmetric key pairs;(b) submit public keys and credentials for registration;(c) take appropriate measures to protect your private key from compromise;(d) provide information to the RA that is accurate and complete to the best of your knowledge and belief regarding
information in your certificates and identification and authentication information;(e) use the Starfield PKI Site Seal only if you are in compliance with this Agreement and the Starfield CPS and are using a
Starfield certificate to secure the application or site on which the seal is displayed;(f) promptly report loss or compromise of your private key(s) and/or accuracy of your certificate information; (g) use yourkey pair(s) in compliance with the Starfield PKI CPS; and (h) promptly remove the Certificate from the server on which it isinstalled and remove the Starfield PKI Site Seal upon revocation or expiration.
III. Use Restrictions.
You are prohibited from:(a) using the Certificate Service on behalf of any other entity;(b) reselling or attempting to resell your Certificate without the prior written consent of Starfield;(c) performing public or private key operations in connection with any domain name and/or entity other than thosesubmitted by you when you signed up for the Certificate;(d) importing, exporting, or re-exporting directly or indirectly, any commodity, including your Certificate, to any country inviolation of the laws and regulations of any applicable jurisdiction;(e) using the Certificate Service to transmit, receive, view or use information which may be associated with spam or morally
objectionable activities. Morally objectionable activities include, but are not limited to: activities designed to defame,embarrass, harm, abuse, threaten, slander or harass third parties; activities prohibited by the laws of the United States
and/or foreign territories in which you conduct business; activities designed to encourage unlawful behavior by others, suchas hate crimes, terrorism and child pornography; activities that are tortuous, vulgar, obscene, invasive of the privacy of athird party, racially, ethnically, or otherwise objectionable; activities designed to impersonate the identity of a third party;
and activities designed to harm minors in any way; or(f) copying or decompiling (except where such decompilation is permitted by Section 50B of the Copyright, Designs, andPatent Act of 1988), enhancing, adapting, or modifying a Certificate(s), Private Key(s) or Public Key(s).
IV. Starfield Representations and Warranties.
Starfield warrants and represents that, to the best of its knowledge:(a) it is providing the Certificate Service with reasonable skill and care;(b) it has taken reasonable care not to introduce informational errors in your Certificate information when creating yourCertificate;(c) there are no material misrepresentations of fact in the Certificate known to or originating from the entities approving
the Certificate application or issuing the Certificate; and(d) the Certificate, revocation services, and Starfield’s use of a repository comply in all material respects with the Starfield
CPS.
V. Subscriber Warranties and Representations.
You warrant and represent, as related to and for the benefit of Starfield and the Certificate Beneficiaries, that:
Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

(a) no unauthorized users have had access to your Private Key and you shall take all reasonable measures necessary tomaintain sole control of, keep confidential, and properly protect at all times your Private Key that corresponds to the Public
Key to the included in the requested Certificate (and any associated information or device – e.g., password or token). (b)the information you put in the Subscriber Certificate and as otherwise requested by the CA in connection with the issuanceof the Certificate is true, accurate and complete;(c) all digital signatures created using the private key corresponding to the public key listed in the Certificate belong to you
and the Certificate has been accepted and is functional – it has not expired or been revoked - at the time the digital
signature is created.
(d) You are the registrant, or the authorized representative of the registrant, for the domain name associated with theCertificate.
(e) the Certificate and PKI Site Seal are being used lawfully and with authorization.
(f) You are using the Certificate in a Subscriber capacity, not as a Certificate Authority.
(g) You disclaim any fiduciary relationship between Starfield and any non-Starfield Certification Authorities, and between
you and any Relying Party.
(h) You are not using the Certificate Service in any way that infringes upon the rights of third parties.
(i) You either (i) are the registered holder of the domain name(s) that are the subject of the Certificate application or (ii)have been granted the exclusive right to use the domain name(s) that are the subject of the Certificate application by theregistered holder of the domain name(s) that are the subject of the Certificate application.
(j) You will not install and use the Certificate(s) until you have reviewed and verified the accuracy of the data in each
Certificate.
(k) You shall install the Certificate only the service accessible at the domain name(s) listed on the Certificate and shall use
the Certificate solely in compliance with all applicable laws, solely for authorized company business, and solely inaccordance with this Agreement.
(l) You shall promptly cease using the Certificate and its associated Private Key, and promptly request the CA to revoke theCertificate, in the event that (1) any information in the Certificate is or becomes incorrect or inaccurate, or (2) there is any
actual or suspected or compromise of the Private Key associated with the Public Key listed in the Certificate.
(m) You shall promptly cease all use of the Private Key corresponding to the Public Key listed in the Certificate upon
expiration or revocation of that Certificate.
VI. Revocation.
Starfield reserves the right to revoke your Certificate if you do not immediately notify Starfield when (i) you or the entitythat you have signed up on the Subscriber Application changes its name or domain name; (ii) you discover or suspect that
there has been a breach of your Private Key or the security protecting the Private Key; (iii) you fail to pay any invoice from
Starfield within forty-five (45) days of receiving it; (iv) you fail to perform any of the material obligations under thisAgreement or the CPS, or compromise the security or integrity of the Starfield PKI, or (v) you improperly use or
misrepresent the Starfield PKI Site Seal. You must also immediately notify any person that may be affected by the breach. If
you wish to revoke your Certificate, revocation requests may be submitted via an online certificate revocation request
page.
VII. Private Key Compromise.
You agree that if there is a breach of your Private Key, you will be solely responsible for any loss or damages related to thebreach.
VIII. Fees.
In consideration for the Certificate Service purchased by you and provided to you by Starfield, you agree to pay Starfield or
its Reseller at the time service is provided. Payment is to be made by you by providing either a valid credit card, an online
check, or using a cash reserve for charge by Starfield or its Reseller (collectively, the “Payment Method”). If for any reason
Starfield or its Reseller is unable to charge your Payment Method for the full amount owed Starfield for the Certificate
Service, or if Starfield or its Reseller is charged a penalty for any fee it previously charged to your Payment Method, youagree that Starfield and its Resellers may pursue all available remedies in order to obtain payment. You agree that among
the remedies Starfield and its Resellers may pursue in order to effect payment, shall include but will not be limited to,
immediate revocation without notice to you of your Certificate Service. Starfield reserves the right to charge a reasonable
service fee for administrative tasks outside the scope of its regular services or necessary to continue providing a high quality
level of service. These include, but are not limited to, customer service issues that cannot be handled over email but require
Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

personal service, and disputes that require legal services. These charges will be billed to the Payment Method we have on
file for you. You may change your Payment Method at any time by logging into your account. If you elect the automatic
renewal option, Starfield or its Reseller will automatically renew, for a period equivalent to the length of your original
Certificate Service, any Certificate that is up for renewal and will take payment from the Payment Method you have on filewith Starfield or its Reseller, at current rates.
Refunds. If for any reason you are not completely satisfied with the certificate that has been issued to you, you may ask
Starfield to revoke the certificate within 30 days of issuance for a refund, minus any fees. Following the initial 30 day period,
you may ask Starfield to revoke the certificate and provide a refund if Starfield has breached a warranty or other material
obligation under this CPS relating to the you or your certificate.
IX. Term and Termination.
This Agreement shall begin as of the date set forth on the counterpart signature page of this Agreement. Either party may
terminate this Agreement for convenience by providing ten (10) business days’ written notice to the other party. This
Agreement shall terminate upon revocation or expiration of the Certificate. If Starfield terminates this Agreement, it may
revoke your Certificate without further notice to you, and you shall pay any charges due but not yet paid under thisAgreement.
X. Intellectual Property Rights.
Starfield’s Certificates, Public Keys, and Private Keys are proprietary to Starfield, and title to them remains with Starfield.
All applicable common law and statutory rights in the product and updates of them, including, but not limited to, service
marks, patents, and copyrights, shall be and will remain the property of Starfield. You shall have no right, title, or interest insuch proprietary rights other than that provided for in this Agreement. Starfield grants you a revocable, non-exclusive, nontransferable license to use its Certificates associated with its Certificate Service, which includes the Public and Private Keys
and any generated Digital Signatures. Starfield retains all rights it has in any trademark, service mark, trade name, or otheridentifying trade symbols that it owns. You agree not to use the Starfield name or logo in any way without Starfield’s priorwritten approval. You are prohibited from using names in your Certificate Application(s) that infringe upon others’
intellectual property rights.
XI. Confidentiality.
Confidential Information shall only be used for the purposes necessary under this Agreement. You agree that any person towhom you disclose information must comply with the requirements of this section. Notwithstanding the previous
provisions of this clause, either party may disclose Confidential Information in accordance with applicable laws andregulations or a judicial or other governmental order. This section shall survive past the termination of this Agreement forfive (5) years.
XII. Disclaimers of Warranties.
STARFIELD, ITS CAS, ITS RESELLERS, CO-MARKETERS, SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, AND
EMPLOYEES MAKE NO REPRESENTATIONS AND EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY KIND UNLESS STATEDOTHERWISE WITHIN THE STARFIELD PKI AGREEMENTS, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, TITLE,
SATISFACTORY TITLE, AND ALSO INCLUDING WARRANTIES THAT ARE STATUTORY OR BY USAGE OF TRADE. STARFIELD
MAKES NO WARRANTY THAT ITS SERVICE(S) WILL MEET ANY EXPECTATIONS, OR THAT THE SERVICE(S) WILL BE
UNINTERRUPTED, TIMELY, SECURE, OR ERROR FREE, OR THAT DEFECTS WILL BE CORRECTED. STARFIELD DOES NOTWARRANT, NOR MAKE ANY REPRESENTATIONS REGARDING THE USE, OR RESULTS OF, ANY OF THE SERVICES WE PROVIDE,IN TERMS OF THEIR CORRECTNESS, ACCURACY, RELIABILITY, OR OTHERWISE.
XIII. Indemnity.
You shall indemnify and hold harmless Starfield, any non-Starfield Certificate Authorities associated with Starfield PKI, andStarfield’s contractors, agents, employees, officers, directors, shareholders, affiliates, successors and assigns from andagainst any claims, liabilities, damages, costs and expenses, including reasonable attorney’s fees, court costs, and experts
fees, of third parties relating to or arising out of or relating to any use or reliance by a Relying Party on any Starfield
Certificate or any service provided in respect to Starfield Certificates, including, but not limited to, (i) any
misrepresentations, omissions or false statements by you on the Certificate application, (ii) any unauthorized use or
Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

modification of a Starfield Certificate, (iii) failure to take proper measure to assure the security of a Starfield Certificate, and(iv) violations of intellectual property laws and rights of third parties. You agree to notify Starfield of any such claim
promptly in writing and to allow Starfield to control the proceedings. You agree to cooperate fully with Starfield during
such proceedings. You shall defend and settle at your sole expense all proceedings arising out of the foregoing.
XIV. Limitation of Liability.
STARFIELD SHALL NOT BE LIABLE FOR ANY LOSS OF CERTIFICATE SERVICE ARISING FROM OR DUE TO (1) WAR, NATURALDISASTERS OR OTHER UNCONTROLLABLE FORCES, (2) AN INTERRUPTION THAT OCCURS BETWEEN THE TIME A CERTIFICATEIS REVOKED OR EXPIRES AND THE NEXT SCHEDULED ISSUANCE OF A CERTIFICATE, (3) THE NEGLIGENT OR FRAUDULENT USE
OF CERTIFICATES ISSUED BY STARFIELD, OR (4) THE DISCLOSURE OF PERSONAL INFORMATION CONTAINED WITHINCERTIFICATES.
THE TOTAL CUMULATIVE LIABILITY OF STARFIELD, ANY INDEPENDENT THIRD-PARTY REGISTRATION AUTHORITY OPERATINGUNDER A STARFIELD CA, ANY RESELLERS, OR CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS,
SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING TO ANY APPLICANT, SUBSCRIBER, RELYING PARTY OR
ANY OTHER PERSON, ENTITY, OR ORGANIZATION ARISING OUT OF OR RELATING TO ANY STARFIELD CERTIFICATE OR ANYSERVICES PROVIDED IN RESPECT TO STARFIELD CERTIFICATES, INCLUDING ANY USE OR RELIANCE ON ANY STARFIELDCERTIFICATE, SHALL NOT EXCEED TWO HUNDRED FIFTY THOUSAND UNITED STATES DOLLARS ($250,000.00) FOR EACH
EXTENDED VALIDATION CERTIFICATE (“EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT”). THIS EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT SHALL APPLY PER STARFIELD CERTIFICATE REGARDLESS OF THE NUMBER OF
TRANSACTIONS OR CAUSES OF ACTION ARISING OUT OF OR RELATED TO SUCH STARFIELD CERTIFICATE OR ANY SERVICESPROVIDED IN RESPECT TO SUCH STARFIELD CERTIFICATE. THE FOREGOING LIMITATIONS SHALL APPLY TO ANY LIABILITYWHETHER BASED IN CONTRACT (INCLUDING FUNDAMENTAL BREACH), TORT (INCLUDING NEGLIGENCE), LEGISLATION ORANY OTHER THEORY OF LIABILITY, INCLUDING ANY DIRECT, INDIRECT, SPECIAL, STATUTORY, PUNITIVE, EXEMPLARY,CONSEQUENTIAL, RELIANCE, OR INCIDENTAL DAMAGES.
STARFIELD, ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER A STARFIELD CA, OR DIRECTORS OF ANY OF THE
FOREGOING SHALL NOT BE LIABLE TO YOU, A RELYING PARTY, OR ANY OTHER PERSON, ENTITY, OR ORGANIZATION FOR
ANY LOSSES, COSTS, EXPENSES, LIABILITIES, DAMAGES, CLAIMS OR SETTLEMENT AMOUNTS ARISING OUT OF OR RELATINGTO ANY PROCEEDING OR ALLEGATION THAT A STARFIELD CERTIFICATE OR ANY INFORMATION CONTAINED IN A STARFIELDCERTIFICATE INFRINGES, MISAPPROPRIATES, DILUTES, UNFAIRLY COMPETES WITH, OR OTHERWISE VIOLATES ANY PATENT,TRADEMARK, COPYRIGHT, TRADE SECRET, OR ANY INTELLECTUAL PROPERTY RIGHT OR OTHER RIGHT OF ANY PERSON,ENTITY, OR ORGANIZATION IN ANY JURISDICTION. SHOULD LIABILITY ARISING OUT OF OR RELATING TO A STARFIELDCERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATIONCUMULATIVE DAMAGE LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMITSHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE
ORDERED BY A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY
RA OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY
SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE
OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELDCERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF
APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATEEXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINALDISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALLSTARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR
ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR
DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVEDAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER
CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN
RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTSAVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE
EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENTJURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELD
Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

CERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS,
SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO
ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANYSERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE
LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BEAPPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY
A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY RA
OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY
SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE
OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELDCERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF
APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATEEXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINALDISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALLSTARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR
ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR
DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVEDAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER
CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN
RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTSAVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE
EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENTJURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELDCERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS,
SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO
ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANYSERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE
LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BEAPPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY
A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY RA
OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY
SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE
OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELDCERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF
APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATEEXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINALDISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALLSTARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR
ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR
DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVEDAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER
CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN
RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTSAVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE
EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENTJURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELDCERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS,
SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO
ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY
Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

SERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATE EXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE
LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BEAPPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINAL DISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY
A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALL STARFIELD OR ANY INDEPENDENT THIRD-PARTY RA
OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR ANY RESELLERS, CO-MARKETERS, OR ANY
SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR DIRECTORS OF ANY OF THE FOREGOING BE
OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT FOR ANY STARFIELDCERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER CERTIFICATE REGARDLESS OF
APPORTIONMENT AMONG CLAIMANTS. CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO A STARFIELD CERTIFICATEEXCEED THE EXTENDED VALIDATION CUMULATIVE DAMAGE LIMIT, THE AMOUNTS AVAILABLE UNDER THE EXTENDED
VALIDATION CUMULATIVE DAMAGE LIMIT SHALL BE APPORTIONED FIRST TO THE EARLIEST CLAIMS TO ACHIEVE FINALDISPUTE RESOLUTION UNLESS OTHERWISE ORDERED BY A COURT OF COMPETENT JURISDICTION. IN NO EVENT SHALLSTARFIELD OR ANY INDEPENDENT THIRD-PARTY RA OPERATING UNDER ANY STARFIELD CERTIFICATION AUTHORITY, OR
ANY RESELLERS, CO-MARKETERS, OR ANY SUBCONTRACTORS, DISTRIBUTORS, AGENTS, SUPPLIERS, EMPLOYEES, OR
DIRECTORS OF ANY OF THE FOREGOING BE OBLIGATED TO PAY MORE THAN THE EXTENDED VALIDATION CUMULATIVEDAMAGE LIMIT FOR ANY STARFIELD CERTIFICATE OR ANY SERVICES PROVIDED IN RESPECT TO ANY STARFIELD SERVER
CERTIFICATE REGARDLESS OF APPORTIONMENT AMONG CLAIMANTS.
XV. Modifications.
You agree that Starfield may modify this Agreement and the terms of the Certificate Service from time to time. Any such
revisions shall be binding and effective immediately upon posting the revised Agreement on the Starfield website. By
continuing to use Starfield’s Certificate Service after there has been a revision to this Agreement or the Service, you agree
to be bound by such revision.
XVI. Force Majeure.
Neither party shall be in default or otherwise liable for any delay in or failure of its performance under this Agreement if
such delay or failure arises by any reason beyond its reasonable control, including any act of God, any acts of the common
enemy, the elements, earthquakes, floods, fires, epidemics, riots, failures or delay in transportation or communications, or
any act or failure to act by the other party or such other party’s employees, agents or contractors; provided, however, thatlack of funds shall not be deemed to be a reason beyond a party’s reasonable control. The parties will promptly inform andconsult with each other as to any of the above causes which in their judgment may or could be the cause of a delay in theperformance of this Agreement.
XVII. Titles and Headings; Independent Covenants; Severability; Counterpart Signature Pages.
The titles and headings of this Agreement are for convenience and ease of reference only and shall not be utilized in any
way to construe or interpret the agreement of the parties as otherwise set forth herein. Each covenant and agreement inthis Agreement shall be construed for all purposes to be a separate and independent covenant or agreement. If a court ofcompetent jurisdiction holds any provision (or portion of a provision) of this Agreement to be illegal, invalid, or otherwise
unenforceable, the remaining provisions (or portions of provisions) of this Agreement shall not be affected thereby andshall be found to be valid and enforceable to the fullest extent permitted by law.
This Agreement may be executed in multiple counterparts, each of which shall be deemed an original, but all of which,taken together, shall constitute but one and the same instrument. Transmission of the counterpart signature page of thisAgreement by facsimile or email shall have the same force and effect as original ink signatures. Transmission of thecounterpart signature page of this Agreement shall constitute acceptance of the entire agreement.
XVIII. Venue; Waiver of Trial by Jury.
THIS AGREEMENT SHALL BE DEEMED ENTERED INTO IN THE STATE OF ARIZONA, REGARDLESS OF CONTRACT OR OTHER
CHOICE OF LAW PROVISIONS. THE LAWS AND JUDICIAL DECISIONS OF MARICOPA COUNTY, ARIZONA, SHALL BE USED TO
DETERMINE THE VALIDITY, CONSTRUCTION, INTERPRETATION AND LEGAL EFFECT OF THIS AGREEMENT. YOU AGREE THATANY ACTION RELATING TO OR ARISING OUT OF THIS AGREEMENT, SHALL BE BROUGHT IN THE COURTS OF MARICOPACOUNTY, ARIZONA. ANY APPLICABLE NATIONAL, STATE, LOCAL AND FOREIGN LAWS, RULES, REGULATIONS, ORDINANCES,
DECREES, AND ORDERS INCLUDING, BUT NOT LIMITED TO, RESTRICTIONS ON EXPORTING OR IMPORTING SOFTWARE,
HARDWARE, OR TECHNICAL INFORMATION SHALL APPLY TO THIS AGREEMENT.
Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

YOU AGREE TO WAIVE THE RIGHT TO TRIAL BY JURY IN ANY PROCEEDING THAT TAKES PLACE RELATING TO OR ARISING OUT
OF THIS AGREEMENT.
XIX. Successors and Assigns.
This Agreement shall be binding upon and inure to the benefit of the parties hereto and their respective heirs, successors
and assigns. Notwithstanding the foregoing, you shall not assign or otherwise transfer this Agreement (or your rights or
obligations hereunder) to anyone, including to any parent company, subsidiaries, affiliated entities or third parties, or inconnection with any sale, merger, consolidation or reorganization, without Starfield’s prior written consent.
XX. Waiver.
The waiver or failure of either party to exercise in any respect any right provided for in this Agreement shall not be deemeda waiver of any further right under this Agreement.
XXI. Survival.
Parts III, VII, VIII, IX, X, XI, XII, XIII, XIV, XVI, XVII, XVIII, XIX and XXI shall survive the termination of this Agreement.
XXII. Notices.
Any notice, demand, or request pertaining to this Agreement or related agreements, such as the CPS, shall be
communicated either using email or in writing. Electronic communications shall be effective when received by the intended
recipient, and written communications shall be effective five days after mailing or upon receipt, whichever is sooner.
Notices concerning breach will be sent either to the email address you have on file with Starfield or mailed first classpostage to the postal address you have on file with Starfield.
Notices from you to Starfield shall be made either by email, sent to the address we provide on our web site, or first classmail to our address at:
Starfield PKI
C/O Starfield Technologies, LLC
14455 North Hayden Road
Suite 219
Scottsdale, AZ 85260
practices@starfieldtech.com

Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5

IN WITNESS WHEREOF, the undersigned “Contract Signer” has duly executed this Agreement on behalf ofCompany/Applicant as of the date set forth below and certifies as follows:
Starfield and Company/Applicant are entering into a legally valid and enforceable subscriber agreement in connection with
the issuance of a Certificate by Starfield to Company/Applicant. A Certificate serves as a form of digital identity for
Company/Applicant. The loss or misuse of such digital identity can result in great harm to Company/Applicant. By signing
this Agreement on behalf of Company/Applicant, Contract Signer represents and warrants that (i) Contract Signer is acting
as an authorized representative of Company/Applicant, (ii) Contract Signer is expressly authorized by Company/Applicant tosign subscriber agreements (including this Agreement) and approve Certificate requests (including this Certificate request)
on Company/Applicant’s behalf, (iii) Contract Signer has confirmed Company/Applicant’s exclusive right to use the domainname(s) to be included in the Certificate(s), (iv) Contract Signer has the authority to obtain the digital equivalent of acompany stamp, seal, or (where applicable) officer’s signature to establish the authenticity of Company/Applicant’s
website, and (v) Company/Applicant is responsible for all uses of its Certificate.
CONTRACT SIGNER:
By: ________________________________________________________________________________(Signature)
Name: ______________________________________________________________________________(Printed name)Title: _______________________________________________________________________________

Company/Applicant: ___________________________________________________________________

Month: _____________________________ Day: ______________ Year: _________________________[COUNTERPART SIGNATURE PAGE]

Copyright © 2007-2011 Starfield Technologies, LLC All rights reserved.
SSL Extended Validation Certificate Service Subscriber Agreement – Version 1.5