These SSL Certificate Terms govern every SSL/TLS certificate that BIGBANG ITS FZE (“we”, “us”) sells, renews, reissues or installs for you, bought alone or supplied free with another service. They add to, and do not replace, our Terms of Services, our Refund Policy and our Acceptable Use Policy.
1. Scope
- Certificates covered: domain-validated, organization-validated and extended-validation certificates, single or wildcard, and any multi-name certificate we offer, ordered through its.ae or our billing portal, and certificates included in another service such as hosting or our CDN. They bind you from the moment the order is placed.
2. Certificates Are Issued by a Third-Party Certificate Authority
- Our role: we are a reseller. Every certificate we supply is issued by an accredited third-party certificate authority. We do not operate a certificate authority, and the decision to issue is not ours.
- The subscriber agreement: issuance is governed by that authority’s subscriber agreement, practice statement and validation rules. We will provide the applicable agreement, or a link to it, on request and before issuance, and where that authority requires it you accept the agreement directly with it. Those documents govern your relationship with the authority on issuance, validation, reissue and revocation and prevail over these terms in that relationship; they do not reduce sections 8 and 10 of these terms as between you and us.
- Advertised warranties: any warranty or relying-party protection presented with a certificate is given by the certificate authority under its own conditions and claim procedure. It is not a warranty from us and we do not administer claims under it.
3. Validation and Your Obligations
- Accurate information: you must give complete and accurate details for the domain names, the organization and the contacts, and you must be entitled to request a certificate for every name it contains.
- Completing the steps: the authority sets, and may change, how it verifies an order — for example proof of control over the domain, a record or file it specifies, a reply to a message sent to the domain and, for organization-validated and extended-validation certificates, company documents or a verification call. Complete every step in the time allowed.
- Your verification data: the information and documents you supply for verification are shared with the certificate authority for the purpose of issuing the certificate. What an issued certificate contains — the domain names it covers and, at the organization and extended validation levels, the organization details — is visible to anyone who inspects the certificate on your site.
- Delay or refusal: validation is the authority’s decision alone; it may request more information, delay issuance or refuse without reason, and an order may lapse if validation is not completed in time. We cannot compel issuance and are not responsible for a delay or refusal.
- If a certificate is not issued: where issuance is refused, or an order lapses before issuance, we will work with you to submit the application again or to offer an alternative product from another authority. Any refund or account credit remains at our discretion and is governed by our Refund Policy.
- Timeframes: any issuance time we publish or quote is an estimate only and is not guaranteed.
4. Installation and Technical Scope
- On infrastructure we manage: where the certificate is for a service we operate for you — a hosting service we manage, or a server covered by our server management service — we can install and configure it there once you have given us the access and information needed. Whether installation is included in the price or quoted separately is as stated in your order or quotation.
- Everywhere else: installation on a server, appliance, load balancer, mail system or device we do not manage falls outside the purchase and can be quoted separately. Your own site configuration, and testing it, remain your responsibility.
- What a certificate does: it encrypts the connection and identifies the domain to the extent its validation level allows. It does not protect your website, application or data against attack; security services are sold separately.
5. Renewal, Reissue and Private Keys
- Renewal: a renewal is a fresh issuance, validated again to the extent the authority then requires. Automatic renewal is available only where your domain is hosted with us and the server uses cPanel, Plesk or DirectAdmin; otherwise renewal is manual and ordering in good time is your responsibility.
- Expiry: if a certificate expires, browsers will warn visitors or refuse the connection, and we are not liable for that.
- Reissue: a certificate can be reissued only where, and as, the authority allows, and reissue may require validation to be repeated. Any charge the authority makes is passed on to you.
- Private keys: the private key is generated and held on your server, or on the server we operate for you. We cannot recover a lost key, so the certificate must then be replaced. Tell us immediately if you suspect a key has been exposed.
6. Revocation, Browser and Industry Changes
- Revocation: the authority may revoke a certificate at any time under its own rules — key compromise, inaccurate information, misuse, a change in industry requirements or an order from a competent authority — and we will act on any revocation instruction it gives us. Revocation for a reason attributable to you gives rise to no refund.
- Trust is not ours to give: whether a certificate is trusted depends on root programmes run by browser, operating system and device vendors, outside our control. A vendor may shorten validity periods, change requirements, remove a root or distrust a group of certificates, and an authority may revoke certificates in bulk to comply.
- Our position: we are not liable for any loss arising from such a change, including a certificate ceasing to be trusted before its term ends. We will inform you and help you obtain a replacement on whatever terms, and at whatever cost, the authority sets.
7. Certificates Supplied at No Additional Charge
- These terms apply: a certificate provided at no additional charge with a hosting plan, a CDN service or any other service is covered by these terms, except the provisions on price.
- No separate value: it forms part of that service, is not sold separately and carries no refund, credit or set-off. It gives no entitlement to a particular issuing authority, product, validation level, quantity or validity period, and we may change any of those. If the service ends, the certificate ends with it.
8. Fees, Cancellation and Refunds
- Payment: fees are due in advance and are billed on a recurring basis according to the billing cycle you choose. Prices and invoices are denominated and payable in United States Dollars and exclude taxes unless stated otherwise, with any United Arab Emirates value added tax added.
- Our Refund Policy governs: all sales are final once a service has been purchased, activated or delivered, and the only exception is the one described in our Refund Policy. No refund is issued for unused time and no amount is pro-rated.
- No cancellation window is created by these terms: nothing here creates a cancellation or refund right beyond our Refund Policy. Where a certificate authority operates a cancellation period of its own, that authority sets it, we cannot extend it, and it gives you no right to a refund from us. Where a discretionary refund is considered under our Refund Policy, it cannot exceed what the authority actually grants for that certificate and still excludes setup fees, third-party costs and transaction charges.
- Before raising a dispute: if you believe a payment was taken in error, contact our billing department within 3 days of the transaction. A charge-back raised without contacting us first may result in immediate suspension or termination of all services.
9. Acceptable Use
- Permitted use: a certificate we supply may be used only as permitted by our Acceptable Use Policy and the authority’s rules, and never for phishing, fraud, malware or any attempt to misrepresent an identity. In breach we may suspend the affected services, request revocation and report the matter, with no refund.
10. Disclaimers and Limitation of Liability
- As is: our services are provided “as is” and “as available” without warranties of any kind, express or implied. We do not warrant that they will be uninterrupted, error-free or secure, that a certificate will be issued or issued within any period, or that it stays trusted for its whole term.
- Excluded losses: to the fullest extent permitted by law, BIGBANG ITS FZE will not be liable for any indirect, incidental, special, consequential or punitive damages, including loss of profits, data or use, arising in connection with a certificate, its issuance, refusal, installation, expiry or revocation.
- Cap on our liability: to the fullest extent permitted by law, our total liability in connection with any certificate, whatever the basis of the claim, does not exceed the amount you paid us for that certificate. We carry no financial liability for a certificate supplied at no additional charge.
- Indemnity and statutory rights: you will indemnify us against any claim arising from information you supplied, from your use of a certificate or from your breach of the authority’s subscriber agreement. Nothing here limits any right you have under mandatory consumer protection law in the United Arab Emirates.
11. General
- Governing law and disputes: these terms are governed by the laws of the United Arab Emirates, and disputes are resolved as set out in our Terms of Services. If any provision is unenforceable, the remainder stands.
12. Contact Information
If you have any questions about these SSL Certificate Terms, or about a certificate we supplied, please contact us at: info@its.ae