Terms & Conditions for CERTUM Qualified Trust Services

1) The Commercial SSL certificate (Domain Validate DV)

the Subscriber of his/her authority over the certified domain there is ONE out of THREE available verification methods:

• verification of domain access by e-mail address through clicking on the verification link sent by Certum to the e-mail in the domain (admin@yourdomain, administrator@yourdomain, webmaster@yourdomain, postmaster@yourdomain, hostmaster@yourdomain) or,

• verification of domain access by uploading to the server a “html” file, whose name will be given to you by Certum does not apply to Wildcard or,

• verification of domain access by creating an appropriate TXT record in DNS, the content of which you will receive from Certum.

2) Trusted SSL Certificate Subscribers (Organize Validate OV)

the Subscriber of his/her authority over the certified domain and positive verification of the Subscriber’s identity (verified in accordance with the Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates). There is ONE out of THREE available verification methods:

• verification of domain access by e-mail address through clicking on the verification link sent by Certum to the e-mail in the domain (admin@yourdomain, administrator@yourdomain, webmaster@yourdomain, postmaster@yourdomain, hostmaster@yourdomain) or,

• verification of domain access by uploading to the server a “html” file, whose name will be given to you by Certum does not apply to Wildcard or,

• verification of domain access by creating an appropriate TXT record in DNS, the content of which you will receive from Certum.

Please note that Visual Idea Network or Certum request to provide the Organize Documents for verify purpose:

We will confirm the ordering person’s identity based on a valid identity document (identity card, driving license, passport) – the document should be copied in whole (both sides)

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

and

• confirm the identity of the certified organization based on a registering document or on-line, using reliable sources of information
• confirm the relations of the person ordering the certificate with the certified organization based on an employment confirmation, authorization, or power of attorney – only when the ordering person doesn’t appear in the relevant registry as a person authorized to represent the company.

3) Premium EV SSL Certificate

Premium EV SSL certificate (or MultiDomain option), the Subscriber’s identity is verified in accordance with the Guidelines For The Issuance And Management Of Extended Validation Certificates. There is ONE out of THREE available verification methods:

• verification of domain access by e-mail address through clicking on the verification link sent by CERTUM to the e-mail in the domain (i.e.: admin@yourdomain.pl, administrator@yourdomain.pl, webmaster@yourdomain.pl, postmaster@yourdomain.pl, hostmaster@yourdomain.pl) or,

• verification of domain access by uploading to the server a “html” file, whose name will be given to you by Certum – does not apply to Wildcard or,

• verification of domain access by creating an appropriate TXT record in DNS, the content of which you will receive from Certum. For each of the above-mentioned methods the Subscriber will receive a message from Certum containing all data needed to perform verification and the special activation link that must be used after applying the required changes in the certified domain. The domain will be automatically verified, of which the Subscriber will be informed in a special message.

Please note:

We do not issue EV Code Signing certificates to natural persons.

EV Code Signing certificates must not contain a Domain Name or IP Address.

The applicant must be associated with the certified organization.

In appropriate cases, the Certum Team may ask for additional documents necessary for proper verification.

1) Open Source Code Signing Certificate

To verify the Subscriber’s identity, Certum requires the submission of the following documents:

• Identity document (ID card, passport, residency card, driver’s license) – in Latin characters -of the person placing the order. The copy should depict the entire document (both sides),

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator.
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

and

• utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government‐issued tax document belonging to the Subscriber

• internet address of the project.

The project has to be publicly accessible and unambiguously connected with the Subscriber. If CERTUM will not be able to identify the project on the basis of generally available information, the certification application will be rejected.

Please note:

• Open Source Code Signing certificates must not contain a Domain Name or IP Address
• The Applicant must at the same time be the Subscriber of the certificate
• Open Source Code Signing Certificates are issued only to natural persons
• In appropriate cases the CERTUM Team may ask for additional documents necessary for proper verification.

2) Standard Code Signing Certificate

2a) Verification of a private individual applying for the certificate on their own behalf.

Visual Idea Network undertakes to conduct verification of the ordering person’s identity and the organization’s identity in the following manner:

• confirm the identity of the ordering person based on a valid identity document (identity card, driving license, passport) – the document should be copied in whole (both sides)

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator.
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

and

• utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government‐issued tax document belonging to the Subscriber

• Verification of access to an e-mail address – click the verification link sent to the address indicated by the customer

2b) Verification of a person applying for the certificate on behalf of the organization.

Visual Idea Network undertakes to conduct verification of the ordering person’s identity and the organization’s identity in the following manner:

• confirm the identity of the ordering person based on a valid identity document (identity card, driving license, passport) – the document should be copied in whole (both sides)

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator.
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

and

• confirm the identity of the certified organization based on a registering document or on-line, using reliable sources of information
• confirm the identity of the certified organization based on utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government-issued tax document – belonging to the organization
• confirm the relations of the person ordering the certificate with the certified organization based on an employment confirmation, authorization or power of attorney – only when the ordering person doesn’t appear in the relevant registry as a person authorized to represent the company
• Verification of access to an e-mail address – click the verification link sent to the address indicated by the customer

3) EV Code Signing Certificate

Visual Idea Network undertakes to conduct verification of the ordering person’s identity and the organization’s identity in the following manner:

• confirm the identity of the ordering person based on a valid identity document (identity card, driving license, passport) – the document should be copied in whole (both sides)

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator.
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

and

• confirm the identity of the certified organization based on a registering document or on-line, using reliable sources of information
• confirm the identity of the certified organization based on utility bill (e.g. water, electric power, natural gas, etc.), bank statement, credit card statement, government-issued tax document – belonging to the organization
• confirm the relations of the person ordering the certificate with the certified organization based on an employment confirmation, authorization or power of attorney – only when the ordering person doesn’t appear in the relevant registry as a person authorized to represent the company

Please note:

We do not issue EV Code Signing certificates to natural persons.

EV Code Signing certificates must not contain a Domain Name or IP Address.

The applicant must be associated with the certified organization.

1) Authentication and documents of the ID Individual Certificate Subscribers

The Basic ID certificate is issued automatically on the basis of the Subscriber’s confirmation of controlling the e-mail address. Certum does not require the Subscriber to submit any other documents.

• verification of access to an e-mail address – click the verification link sent to the address indicated by the customer

2) Authentication and documents of the ID Business Certificate Subscribers

verification of access to an e-mail address – click the verification link sent to the address indicated by the customer

To verify the Subscriber’s identity, Certum requires the submission of the following documents:

2a. Verification and documents required from a natural person applying for a certificate independently:

• verification of access to an e-mail address – click the verification link sent to the address indicated by the customer
• Identity document (ID card, passport, residency card, driver’s license) – in Latin characters -of the person placing the order. The copy should depict the entire document (both sides),

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator.
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

2b. Verification and documents required from a natural person representing an organization:

• verification of access to an e-mail address – click the verification link sent to the address indicated by the customer
• Identity document (ID card, passport, residency card, driver’s license) – in Latin characters -of the person placing the order. The copy should depict the entire document (both sides),

or one of the following:

• notarial identity confirmation – a document in English language or a document translated into English by the sworn translator.
• confirmation of identity in the AriadNext system,
• possession of the qualified certificate issued by CERTUM

and

• confirm the identity of the certified organization based on a registering document or on-line, using reliable sources of information
• confirm the relations of the person ordering the certificate with the certified organization based on an employment confirmation, authorization, or power of attorney – only when the ordering person doesn’t appear in the relevant registry as a person authorized to represent the company.

3) Authentication and documents of the Document Signing Subscribers

• verification of access to an e-mail address – click the verification link sent to the address indicated by the customer

3a. Verification and documents required from a natural person applying for a certificate independently:

• verification of access to an e-mail address – click the verification link sent to the address indicated by the customer
• confirmation of identity in the AriadNext system,

3b. Verification and documents required from a natural person representing an organization:

• verification of access to an e-mail address – click the verification link sent to the address indicated by the customer
• confirmation of identity in the AriadNext system,

and

• confirm the identity of the certified organization based on a registering document or on-line, using reliable sources of information
• confirm the relations of the person ordering the certificate with the certified organization based on an employment confirmation, authorization, or power of attorney – only when the ordering person doesn’t appear in the relevant registry as a person authorized to represent the company.