End User Licence Agreement

Agreement

This End User License Agreement (the “Agreement”) is between the organisation or person accepting it (“Licensee”) and the SSLNexus licensor identified on the applicable order, invoice or subscription record (“Licensor”). By installing, activating or using SSLNexus (the “Software”), Licensee accepts this Agreement.

1. Licence Grant

Subject to this Agreement and payment of applicable subscription fees, Licensor grants Licensee a limited, non-exclusive, non-transferable and revocable right to run the number of self-hosted production instances authorised by the active entitlement and manage certificates up to the capacity and use the platforms, integrations, plugins and portal features included in that entitlement. Additional instances, disaster-recovery rights, capacity and automation capabilities require the corresponding subscription entitlement.

2. Ownership And Restrictions

The Software is licensed, not sold. Licensor retains all intellectual-property rights in the Software. Except where applicable law expressly permits otherwise, Licensee must not reverse engineer, decompile, disassemble, derive source code from, circumvent licence validation, alter signed licence claims, sublicense, resell or provide the Software as a service to an unrelated third party without written permission.

Open-source components, Ansible content and customer-authored plugins remain subject to their own licences. SSLNexus invokes Ansible as a separately installed automation and deployment component; Ansible Core and the Ansible Windows collections used by SSLNexus are governed by their GNU GPL terms, while pywinrm is separately licensed under the MIT License. Those third-party terms remain controlling for those components. See the Third-party notices. Nothing in this Agreement transfers ownership of Licensee data, certificates, private keys, playbooks or plugins to Licensor.

3. Licence Validation And Minimal Service Data

The Software periodically contacts the SSLNexus licensing service to validate entitlement. Validation may transmit the licence identifier, installation identifier and limited host diagnostics used to identify and support the licensed installation, including hostname, operating-system/version, kernel, architecture, SSLNexus version/revision, aggregate service-health state and low-sensitivity feature-use booleans. It does not intentionally transmit certificate private keys, CA credentials or customer playbook contents.

The permanent Free tier does not expire and is limited to five active automated certificates and one standard target type selected on first use. Paid subscriptions are periodically validated against the licensing authority. If that authority cannot be reached, the connectivity grace period configured for the licence applies; older authority records without an explicit value use the legacy seven-day fallback. When a paid subscription expires, is revoked, or its grace period ends, the Software enters read-only mode: new issuance, renewal, deployment and configuration actions are disabled, while existing certificates, deployments, records and read access remain intact. Licence expiry does not revoke or disable certificates already issued by a certificate authority.

4. Vendor Portal Responsibility

Licensee controls vendor onboarding, approved email identities, source networks, master domains, certificate names, approval policies and access resets. Licensee is responsible for reviewing delegated requests and protecting vendor credentials. Licensor is not responsible for unauthorised issuance or disruption caused by Licensee configuration, compromised third-party access or approval decisions.

5. Deployment Adapters And Customer Plugins

Licensee is responsible for testing target connectivity, permissions, playbooks, custom adapters, service reloads and rollback procedures. Customer-authored or modified plugins are not warranted by Licensor unless separately agreed in writing.

6. Security And Data

Licensee must protect administrative credentials, CA secrets, vendor activation tokens, private keys and backups. Private keys displayed to vendors are intended to be retained by the vendor and are not recoverable from SSLNexus. Licensee must comply with applicable data-protection, employment, monitoring and computer-misuse laws.

7. Warranty Disclaimer

To the maximum extent permitted by law, the Software is provided “as is” and “as available”. Licensor disclaims implied warranties including merchantability, fitness for a particular purpose, non-infringement and uninterrupted operation. Licensee remains responsible for certificate monitoring, recovery testing, deployment validation and target-system configuration.

8. Limitation Of Liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special or consequential loss, including loss of profit, revenue or business interruption. Licensor’s aggregate liability arising from the Software will not exceed fees paid for the affected subscription during the twelve months preceding the event giving rise to the claim. Nothing excludes liability that applicable law does not permit to be excluded.

9. Third-Party Names

Third-party names and marks-including IIS, Nginx, Apache, PaperCut, IWMC, Sectigo and DigiCert-belong to their respective owners. Compatibility references do not imply affiliation, endorsement or sponsorship.

10. Term And Termination

This Agreement applies to the Free tier and continues for paid features while the relevant subscription remains valid. Licensor may terminate it for material breach after any notice or cure period required by applicable law or the applicable order. On termination, Licensee must stop initiating operations that are no longer licensed and uninstall the Software when legally required. Existing certificates remain governed by the issuing certificate authority and are not technically revoked merely because this Agreement ends.

11. General

The applicable order identifies governing law, payment terms, support entitlement and the contracting Licensor entity. If an order conflicts with this Agreement, the order controls for that conflict. If a provision is unenforceable, the remaining provisions continue. Changes to this Agreement apply prospectively unless required by law or accepted through renewal.

This document should be reviewed by Licensor’s qualified legal counsel before commercial release.