Death Notices Online (DNO) Digital Certificate User Obligations

General

1.    Upon an Applicant being confirmed as a Subscriber then he or she must:

1.1   generate a Key Pair using a ML approved digital certificate installation application;

1.2   ensure that all information provided and any representations made to ML, and the Certification Authority beTRUSTed are complete and accurate;

1.3   not modify the contents of a Certificate or use his or her Certificate for the purposes of creating further Certificates;

1.4   and only use a Certificate for DNO Remote Access and then only for legal and authorised purposes.

Storage and Protection

2.   The Subscriber must protect his or her Private Key(s) from any Compromise and take all necessary precautions to prevent any loss, disclosure, modifications, or unauthorised use of his or her Private Key(s); and

3.   The Subscriber must not archive his or her Private Key(s) or place his or her Private Key(s) in Escrow;

4.   The Subscriber must not use his or her Private Key in relation to more than one Certificate or for any software or hardware authentication application other than DNO;

5.   No person shall download another person's digital certificate. This rule applies equally to Agents, who shall not download a digital certificate on behalf of another person.

6.   The Subscriber or person named in the digital certificate is the only person authorised to download that certificate.

Renewal, Revocation and Compromise

7. A Subscriber must immediately notify ML of:
 
7.1 any change to any information included in his or her Certificate or any change in circumstances which would make the information in his or her Certificate misleading or inaccurate; and

7.2 known or suspected loss, disclosure or other compromise of his or her Private Key(s).

8.      In the event of one of the matters in (7), a Subscriber must:

8.1    immediately request that the Certificate be revoked;

8.2    request that a new certificate be generated; and

8.3    help ML investigate the circumstances of any such known or suspected loss, disclosure or other compromise.

9.      If revocation of a Certificate is required for any reason other than Compromise, the Subscriber must ask ML for such revocation as soon as reasonably practicable.

10.    A Subscriber must stop using his or her Certificate if it has expired or been revoked.

Definitions

Terms used in these User Obligations have the same meaning as terms in the DNO General Terms and Conditions, unless otherwise defined below.

Certificate means a data record produced by the Certification Authority that:
a.    identifies the Certification Authority issuing it;
b.    names or otherwise identifies the relevant Subscriber;
c.    contains a Public Key that corresponds to a Private Key under the control of the relevant Subscriber;
d.    identifies the data record’s operational period;
e.    contains a serial number; and
f.     is digitally signed by the Certification Authority;

Certification Authority means the entity selected by ML to issue and manage the Certificates;

Escrow means any arrangement whereby the Subscriber delivers his or her Private Key into the hands of a third party to be held until the happening of some event or the performance of some condition;

Key means a Private Key or a Public Key, as the context requires;

Key Pair means two cryptographic keys that allow a message encrypted by one key to only be decrypted by the other and that do not allow one key to be discovered by calculations involving the other key;

Private Key means the unrevealed key of a Key Pair; Public Key means the revealed key of a Key Pair.