SAFESCRYPT VTN PUBLIC CERTIFICATION SERVICES

GLOBAL SERVER ID ONSITE SUBSCRIBER AGREEMENT

YOU MUST READ THIS GLOBAL SERVER ID SUBSCRIBER ("SUBSCRIBER AGREEMENT") BEFORE APPLYING FOR, ACCEPTING, OR USING A GLOBAL SERVER ID. IF YOU DO NOT AGREE TO THE TERMS OF THIS SUBSCRIBER AGREEMENT, DO NOT APPLY FOR, ACCEPT, OR USE THE GLOBAL SERVER ID.

THIS SUBSCRIBER AGREEMENT will become effective on the date you submit the Global Server ID Application ("Application") to the designated issuing authority (IA). By submitting this Subscriber Agreement (and Application) you are requesting that the IA issue a Global Server ID to you and are expressing your agreement to the terms of this Subscriber Agreement. SafeScrypt's VeriSign Trust Network (VTN) Public Certification Services are governed by SafeScrypt's Certification Practice Statement (the "CPS") as amended from time to time, which is incorporated by reference into this Subscriber Agreement. The CPS is published on the Internet in SafeScrypt's repository at https://www.safescrypt.com/repository/CPS and is available via E-mail from: CPS-requests@ safescrypt.com. Amendments to the CPS are also posted in SafeScrypt's repository at https://www. safescrypt.com/repository/updates.

YOU AGREE TO USE THE GLOBAL SERVER ID AND ANY RELATED IA SERVICES ONLY IN ACCORDANCE WITH THE CPS AND APPLICABLE LAWS, RULES AND REGULATIONS .AND SUBJECT TO THE COMPLIANCE OF ALL APPLICABLE LAWS, RULES AND REGULATIONS INCLUDING BUT NOT LIMITED TO THE IT ACT, 2000, THE CERTIFYING AUTHORITIES RULES ISSUED THEREUNDER AND ANY REGULATION FRAMED BY THE CONTROLLER OR OTHER AUTHORITIES AUTHORISED UNDER THE SAID ACT. YOU AGREE TO SPECIFICALLY ABIDE BY THE TERMS OF SAFESCRYPT'S RELYING PARTY AGREEMENT ("RPA") AND CPS SECTION 8 WHEN RELYING UPON ANY GLOBAL SERVER ID, SERVER ID, OR OTHER CERTIFICATE ISSUED BY AN IA. The RPA is posted in SAFESCRYPT's repository at https://www. safescrypt.com/repository/RPA. In addition to the CPS and RPA, you agree to Sections 1 - 7 below.

Additional Information and Terms and Conditions.

1. VeriSign Export Licenses. If you qualify for a Global Server ID, VeriSign, Inc. ("VeriSign") shall issue your Global Server ID. VeriSign is licensed to issue Global Server IDs, subject to the terms of VeriSign's export license agreements with the U.S. Department of Commerce, Bureau of Export Administration ("License"). VeriSign has received a retail classification for Global Server IDs under a License. VeriSign shall retain the right, at its sole discretion, to reject your Application, subject to the terms of a License.

2. Global Server ID. The Export Commodity Control Number for your Global Server ID is 5D002. A Global Server ID enables you to negotiate SSL or TLS sessions using 128-bit RC4 or IDEA, 56 bit DES, two-key Triple-DES encryption, or such other encryption that the U.S. Department of Commerce may permit for export in the future.

3. Qualified Applicant. You represent that you are eligible to receive favorable treatment under current Indian and U.S. encryption export control policy for the export of a Global Server IDs.

4. Geographical Restrictions. You shall not be located in nor use your Global Server ID in Afghanistan (Taliban-controlled areas), Cuba, Iran, Iraq, Libya, North Korea, Serbia, Sudan, and Syria, or any other countries where such use is prohibited under U.S. export regulations, under the terms of this Agreement.

5. Use Restrictions.

5.1 Software Platform Restrictions . You must use a Global Server ID software platform ("Software") listed on the enrollment form in order to enable an SSL or TLS session with your Global Server ID. If the Software is not specifically listed on the enrollment form and it is produced or sold by a United States entity ("Entity"), you are responsible for ensuring that the Entity has obtained an export license or classification that permits the Entity to export the Software from the United States before you install your Global Server ID on it.

5.2 Single Use Only. You are prohibited from using your Global Server ID (i) for or on behalf of any other organization, (ii) to perform private or public key operations in connection with any domain name and/or organization name other than the submitted by you during enrollment, or (iii) on more than one server at a time.

5.3 Revocation. If your organizational name and/or domain name registration change, you must immediately notify SafeScrypt, and SafeScrypt shall revoke your Global Server ID.. SafeScrypt also retains the right to revoke your Global Server ID if you fail to perform any of your material obligations under the terms and conditions for the use of the Secure Site Seal where the Secure Site Seal has been installed by you.

5.4 Obligations Upon Revocation or Expiration. Upon expiration or notice of revocation of your Global Server ID, you shall permanently remove your Global Server ID from the server on which it is installed and shall not use it for any purpose thereafter.

6. Additional Representations. By submitting this Subscriber Agreement (and Application) you represent that the following statements are true and warrant that such statements will be true during the term of this Subscriber Agreement.

6.1 This Subscriber Agreement and the Application has been submitted by a responsible official or representative empowered and authorized by the organization named in the Application (the "Organization") to certify that the conditions set forth in this Subscriber Agreement (and Application) have been, or will be, met in full by the Organization.

6.2 The Organization is eligible to obtain and utilize a Global Server ID in a manner consistent with all applicable export control laws and regulations of the United States.

6.3 You shall operate your computer systems on which you installed your Global Server ID ("Server") under your Effective Control.

6.3.1 "Effective Control" means you 1) have access to all transaction data that may be transmitted over the Server, and are prepared to disclose data to a government agency in the jurisdiction where the Server is operated pursuant to a duly authorized warrant or court order or other lawful authority and 2) have authority to modify or control the Server, including the ability to disable your Global Server ID in the event that the IA is entitled by contract, or required by law, to terminate this Subscriber Agreement, which governs use of your Global Server ID.

6.4 The subscriber shall duly comply with the duties of the subscriber specified under the Indian Information Technology Act, 2000 and the subscriber confirms that he possesses the skill and resources to carry out the same. The subscriber further assures that he will not use the facility for any abusive, libelous, indecent, obscene, defamatory communication or otherwise infringe any privacy right or violate any laws, rules or regulations by any such use of the facilities.

6.5 You shall revoke your Global Server ID if, at any time, you no longer meet the definition of a Qualified Applicant.

7. Non-Qualified Applicants. If you are not a Qualified Applicant as defined in Section 3, you may still be eligible for acquisition and use of a Global Server ID. Organizations may acquire and use a Global Server ID to the extent permitted under individually-approved export license arrangements.

AS STATED IN THE CPS, THE IA PROVIDES LIMITED WARRANTIES, DISCLAIMS ALL OTHER WARANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, LIMITS LIABILITY, AND EXCLUDES ALL LIABILITY FOR INCIDENTAL, CONSEQUENTIAL, AND PUNITIVE DAMAGES AS STATED IN THE CPS. SEE THE CPS FOR IMPORTANT DETAILS.

YOU DEMONSTRATE YOUR KNOWLEDGE AND ACCEPTANCE OF THE TERMS OF THIS SUBSCRIBER AGREEMENT AND THE CPS AND THE DOCUMENTS REFERRED TO IN THE CPS BY EITHER (I) SUBMITTING AN APPLICATION FOR A GLOBAL SERVER ID TO SAFESCRYPT, OR (II) USING YOUR GLOBAL SERVER ID, WHICHEVER OCCURS FIRST.

PLEASE NOTE THAT THE SCOPE OF THIS AGREEMENT IS LIMITED TO THE ISSUE OF DIGITAL ID CERTIFICATE AND WILL NOT APPLY IN ANY MANNER TO THE CONTRACTUAL TERMS AND CONDITIONS THAT MAYBE ENTERED INTO BETWEEN YOU AS SUBSCRIBER AND THE RELYING PARTY. ALL CLAIMS OF CONTRACTUAL OR OTHERWISE RESULTING FROM OR CONNECTED TO THE DEALINGS OR TRANSACTION SHALL BE ENTIRELY BETWEEN YOU AND THE RELYING PARTY.