BT Trust Services Relying Third Party Charter
Issue 4 (July 2004)

You should read this Relying Third Party Charter (the "Charter") before validating a VeriSign Trust Network (VTN) digital certificate issued by BT (a "Certificate"), using BT's Online Certificate Status Protocol ("OCSP") services or otherwise accessing or using the BT database of Certificate revocation or other information ("Repository") or any Certificate Revocation List issued by BT ("BT CRL").

You will be deemed to have accepted this Charter by validating or relying upon a Certificate or the information embedded in a Certificate, or by accessing or using the Repository, even if you have not read the Charter. You demonstrate your knowledge and acceptance of the Charter by submitting a query to search for, or to verify the revocation status of a Certificate or by otherwise relying on or using any information or services provided by BT's Repository or the BT Trust Services website. If you do not accept the Charter, do not submit a query and do not download, access or use any BT CRL. Customers of BT Trust Services are reminded that their reliance on or use of Certificates is governed by the Conditions for BT Trust Services.

The Charter sets out the actions BT will take to enable you to make an informed decision as to whether you wish to rely on a Certificate (including the information embedded in a Certificate), and contains guidelines and procedures you must follow before validating, relying on, or otherwise using a Certificate or information embedded in a Certificate.

The Charter applies when you submit a query in search of a Certificate or to verify a digital signature created with a Private Key corresponding to a Public Key contained in a Certificate, or when you otherwise rely on or use any information or services provided by BT at the Repository or the BT Trust Services website.

BT publishes a document titled the BT Certification Practice Statement (the "CPS"), which is a summary of the practices that BT will follow with respect to the provision of Certificates. BT will comply with the assurance level for information contained in a Certificate as specified in the description of each class of Certificate in section 1.1 of the CPS. In particular, BT represents that all information contained in a Certificate, except non-verified customer information, has been validated in accordance with the procedures in the CPS. The CPS is available in the Repository at http://www.trustwise.com/repository/CPS/cps.htm. If there are changes to the CPS, BT will post the changes in the Repository. To the extent permitted by the law of England and Wales, BT makes no representations and holds out no warranties in respect of Certificates or the Repository other than those expressly set out in the CPS and this Charter.

You acknowledge that your use of the Repository and your reliance on or use of any Certificate or the information embedded in it will be governed by the CPS (as amended from time to time) and this Charter.

Section 2.1.4 of the CPS sets out specific procedures you must use to validate a Certificate before relying on the Certificate or any information embedded in the Certificate. If you rely on or use a Certificate (including the information embedded in the Certificate) without first complying with the procedures set out in section 2.1.4 of the CPS, your reliance on or use of that Certificate or the information will be inconsistent with this Charter and will be considered unreasonable and in derogation of your duty of care under the Common Law of England and Wales.

You acknowledge that you have sufficient access to information to ensure that you can make an informed decision as to the extent to which you will choose to rely on or use a Certificate or the information embedded in it. You further acknowledge that you are responsible for deciding whether to rely on a Certificate or information embedded in it. You acknowledge that the information provided in the Repository, Certificates, and the BT Trust Services website is provided to you by BT only and that no other person shall be liable to you in respect of such information.

Customers of BT Trust Services are obliged to inform BT if their Private Keys are compromised, and on receipt of such a notice BT will revoke the compromised Certificate and post notice of the revocation in the Certificate Status List. However, you acknowledge the possibility of theft or other form of compromise of a Private Key corresponding to a Public Key contained in a Certificate which may not be detected, and of the possibility of use of a stolen or compromised key to forge a digital signature to a document
BT's liability to you is limited to £25,000 for any one incident or series of related incidents and to £100,000 for all incidents in any period of 12 months.

BT is not liable to you (including for negligence) for direct or indirect loss of profits, business or anticipated savings, nor for any indirect or consequential loss or damage or for any destruction of data.

BT accepts unlimited liability for death or personal injury resulting from its negligence and the limits set out above do not apply to such liability.

BT is not liable to you for the acts or omissions of other providers of telecommunications or Internet services (including domain name registration authorities) or for faults in or failures of their equipment.

Each point of this Charter is separate and the invalidity or unenforceability of any point for any reason will not affect the validity or enforceability of any other point.

This Charter is published by British Telecommunications plc a company registered In England No.1800000, any claims, complaints, disputes or proceedings in connection with the provision of Certificates, the Repository, BT Trust Services or with this Charter must be commenced under the jurisdiction of the courts of England and Wales.