Common use of Subscriber’s Obligations Clause in Contracts

Subscriber’s Obligations. The Subscriber’s obligations are: • The application details provided by the Subscriber shall be truthful, accurate, and not misleading. Failure by a subscriber to comply, or to promptly correct inaccurate in- formation will result in revocation of the certificate. • Review and verify the Certificate contents for accuracy • The key pair is only used in accordance with the above limitations. • Reasonable care is exercised to avoid unauthorized use of the Subscribers Private Key. • The Subscriber handles a User-ID, Password or PIN, which can be used to access the ATC’s Webservice and which give access to the Private Key. The Subscriber shall treat this information – including the Private Key itself - as confidential and keep it secret. • The Subscriber shall notify the ATC, without any unreasonable delay, if o any of the above described violations occur up to the end of the validity period indicated in the Certificate, or o the Subscribers Private Key – or the control over it - has been potentially or actually lost, stolen or compromised, or o certificate(s) issued to him by the ATC became compromised. o it is discovered that Code submitted to the Signing Service for Code Signature contained Suspect Code. • If the Subscriber Certificate is use for a high-traffic FQDN, the Subscriber has to “sta- ple” the OCSP response for the Certificate in its TLS handshake, see RFC4366 • The Subscriber shall promptly cease all use of the Private Key corresponding to the Public Key included in the Certificate upon expiration or revocation of the Certificate. • The Subscriber uses the Certificate and associated Private Key only for authorized and legal purposes, including not using the Certificate to sign Suspect Code and to use the Certificate and Private Key solely in compliance with all applicable laws and solely in accordance with the Subscriber Agreement or Terms of Use. If subscriber and certificate owner are different persons or subjects, the subscriber has to inform the certificates owner about his duties.

Subscriber’s Obligations. The Representations and Warranties A. Subscriber shall immediately notify SureID upon loss or suspicion of loss or compromise (including but not limited to suspected or known unauthorized use, theft or misplacement) of Subscriber’s obligations are: • The PIV-I Credential, Certificates, or Private Key(s). B. Subscriber shall protect his/her PIV-I Credential and Private Key(s) from access by any other party. C. Subscriber shall use the PIV-I Credential and the Private Key(s) solely for authorized and permissible legal business purposes. D. SureID retains the right to revoke Subscriber’s PIV-I Credential, Certificates, and/or Private Key(s) if SureID suspects or has knowledge that Subscriber has used them for an unauthorized purpose, that Subscriber has provided inaccurate information to SureID or the PKI authorities, or that the Subscriber’s PIV-I Credential, Certificates, or Private Key(s) were obtained through fraudulent means. E. Subscriber shall immediately discontinue use of Subscriber’s PIV-I Credential, Certificates, and Private Key(s), and shall immediately return the PIV-I Credential to Subscriber's affiliated organization, when Subscriber’s relationship with the affiliated organization is inactive or has ceased. F. Subscriber understands that the combination of Subscriber PIN and Private Key constitutes a Digital Signature and agrees to be legally bound by any document digitally executed via Subscriber’s Private Key and PIN. G. Subscriber shall accurately represent itself in all communications with SureID and H. All information Subscriber has provided and in the future will provide in connection with Subscriber’s application details provided by for and use of the PIV-I Credential is true, complete, and correct. I. Subscriber shall be truthful, accurate, the only individual able to use Subscriber’s PIV-I Credential and not misleading. Failure by a subscriber to comply, or to promptly correct inaccurate in- formation will result in revocation of the certificate. • Review access Subscriber’s PIN and verify the Certificate contents for accuracy • The key pair is only used Private Key(s). J. Subscriber shall protect his/her Private Key(s) at all times in accordance with the above limitations. • Reasonable care is exercised to avoid unauthorized relevant SureID PIV-I documents including, without limitation, such SureID Certificate Policy as may be posted online at xxx.xxxxxx.xxx. K. Subscriber shall abide by all the terms, conditions, and restrictions placed on the use of the Subscribers Subscriber’s Private Key. • The Key(s) and Certificates. L. Subscriber handles shall create a User-ID, Password or strong PIN, which can be used memorize the PIN and not write it down or reveal it to access anyone, and at all times protect the ATC’s Webservice and which give access to the Private Key. The PIN. M. Subscriber shall treat this information – including not leave the Private Key itself - as confidential and keep it secret. • The Subscriber shall notify the ATC, without any unreasonable delay, if o any of the above described violations occur up to the end of the validity period indicated in the Certificate, or o the Subscribers Private Key – or the control over it - has been potentially or actually lost, stolen or compromised, or o certificate(s) issued to him by the ATC became compromised. o it is discovered that Code submitted to the Signing Service for Code Signature contained Suspect Code. • If the Subscriber Certificate is use for a highPIV-traffic FQDN, the Subscriber has to “sta- ple” the OCSP response for the Certificate in its TLS handshake, see RFC4366 • The Subscriber shall promptly cease all use of the Private Key corresponding to the Public Key included in the Certificate upon expiration or revocation of the Certificate. • The Subscriber uses the Certificate and associated Private Key only for authorized and legal purposes, including not using the Certificate to sign Suspect Code and to use the Certificate and Private Key solely in compliance with all applicable laws and solely in accordance I Credential unattended while activated with the Subscriber Agreement or Terms of Use. If subscriber and certificate owner are different persons or subjects, the subscriber has to inform the certificates owner about his dutiesPIN.

Subscriber’s Obligations. The Subscriber’s obligations are: • The application details provided by the Subscriber shall be truthful, accurate, and not misleading. Failure by a subscriber to comply, or to promptly correct inaccurate in- formation infor- mation will result in revocation of the certificate. • Review and verify the Certificate contents for accuracy accuracy. • The key pair is only used in accordance with the above limitations. • Reasonable care is exercised to avoid unauthorized use of the Subscribers Private Key. • The Subscriber handles a User-ID, Password or PIN, which can be used to access the ATC’s Webservice and which give access to the Private Key. The Subscriber shall treat this information – including the Private Key itself - as confidential and keep it secret. • The Subscriber shall notify the ATC, without any unreasonable delay, if o any of the above described violations occur up to the end of the validity period indicated in the Certificate, or o the Subscribers Private Key – or the control over it - has been potentially or actually lost, stolen or compromised, or o certificate(s) issued to him by the ATC became compromised. o it is discovered that Code submitted to the Signing Service for Code Signature contained Suspect Code. • If the Subscriber Certificate is use for a high-traffic FQDN, the Subscriber has to “sta- ple” the OCSP response for the Certificate in its TLS handshake, see RFC4366 RFC4366. • The Subscriber shall promptly cease all use of the Private Key corresponding to the Public Key included in the Certificate upon expiration or revocation of the Certificate. • The Subscriber uses the Certificate and associated Private Key only for authorized and legal purposes, including not using the Certificate to sign Suspect Code and to use the Certificate and Private Key solely in compliance with all applicable laws and solely in accordance with the Subscriber Agreement or Terms of Use. If subscriber and certificate owner are different persons or subjects, the subscriber has to inform in- form the certificates owner about his duties.

Subscriber’s Obligations. The 6.1 Subscriber will be responsible for installation, costs, operations and maintenance of a communications link and equipment, software and systems necessary to access online the Licensed Material at the GSW Web Site via Subscriber’s obligations are: • The application details Secure Site. This responsibility includes the Subscriber’s Administrator maintaining Subscriber’s list of valid IP Addresses for access control as maintained at the GSW Web Site. 6.2 Subscriber will be responsible for communication and any other costs incurred by any Authorized User connecting to the GSW Web Site through Subscriber’s IP Address as set forth in Schedule A, and as may be changed from time to time by Subscriber’s written notice to GSW. 6.3 Subscriber will use reasonable efforts to ensure that only Authorized Users are permitted access to the Licensed Material. Subscriber will be responsible for the issuance, confidentiality and security of the identification password(s) that may be issued by Subscriber to Authorized Users, and will give prompt notice to GSW of any known or suspected breach of confidentiality or security with respect thereto. Subscriber agrees that allowing access to the Licensed Material to persons who are not Authorized Users constitutes a material breach of this License Agreement if the Subscriber knew or reasonably should have known that such person was not an Authorized User. 6.4 Subscriber will use its best reasonable efforts to ensure that Authorized Users are notified of the importance of respecting the intellectual property rights in the Licensed Material and of the sanctions that may be imposed or claims that may be made for failing to do so, and that Authorized Users are notified of and comply with the terms and conditions of this License Agreement and any and all user guidelines or restrictions provided by GSW from time to time. Except as provided for in Sub-section 10.8, nothing in this License Agreement will make the Subscriber shall be truthfulliable for breach of the terms of the License Agreement by any Authorized User provided that the Subscriber did not cause, accurate, and not misleading. Failure by a subscriber to complyknowingly assist, or condone the continuation of such breach after becoming aware of an actual breach having occurred. The Subscriber will, immediately on becoming aware of any unauthorized use or other breach, inform GSW and take reasonable steps, including appropriate disciplinary action as consistent with local policies, both to promptly correct inaccurate in- formation ensure that such activity ceases and to prevent any recurrence. 6.5 Subscriber will result designate the following persons to be available to GSW on a routine and expedited basis during normal business hours when necessary: 6.5.1 a System Administrator, for the purpose of resolving technical questions and matters, and 6.5.2 a Subscription Administrator, for purposes of resolving questions and matters related to this License Agreement, including but not limited to Fees and payments. 6.6 Subscriber will, in revocation of consideration for the certificate. • Review and verify rights granted under this License Agreement, pay the Certificate contents Fee in US dollars for accuracy • The key pair is only used its subscription access to the Licensed Material in accordance with Section 1 within 30 days of receipt of GSW’s invoice for each Subscription Period including the above limitationsinitial term and, if applicable, each subsequent renewal term. • Reasonable care is exercised For multi-year Subscription Periods, invoicing may be annual or as otherwise agreed. In the event that Subscriber fails to avoid unauthorized use of make prompt payment, GSW reserves the Subscribers Private Key. • The Subscriber handles a User-ID, Password or PIN, which can be used right to access the ATC’s Webservice and which give deny access to the Private KeyLicensed Material until such time as Subscriber’s account is made current. The Subscriber shall treat this information – including will be responsible for the Private Key itself - as confidential and keep it secret. • The Subscriber shall notify the ATC, without any unreasonable delay, if o any payment of the above described violations occur up to the end of the validity period indicated in the Certificateall taxes, or o the Subscribers Private Key – or the control over it - has been potentially or actually lost, stolen or compromised, or o certificate(s) issued to him by the ATC became compromised. o it is discovered that Code submitted to the Signing Service for Code Signature contained Suspect Code. • If the Subscriber Certificate is use for a high-traffic FQDN, the Subscriber has to “sta- ple” the OCSP response for the Certificate other related fees incurred in its TLS handshake, see RFC4366 • The Subscriber shall promptly cease all use of the Private Key corresponding to the Public Key included in the Certificate upon expiration or revocation of the Certificate. • The Subscriber uses the Certificate and associated Private Key only for authorized and legal purposes, including not using the Certificate to sign Suspect Code and to use the Certificate and Private Key solely in compliance connection with all applicable laws and solely in accordance with the Subscriber Agreement or Terms of Use. If subscriber and certificate owner are different persons or subjects, the subscriber has to inform the certificates owner about his dutiesthis License Agreement.