SANCTUM SECOPS · PKI / PQC CONSOLE

Sanctum SecOps LLC Subscriber Agreement

Status: DRAFT — v0.1 Version: 0.1 Effective date: DRAFT — not yet effective. Pending Brian Vicente review and approval. Document date: 2026-07-27 Applies to: the LAB/TEST demonstration certificate hierarchy (sanctum-root-ca-g1 → sanctum-issuing-ca-g1 / sanctum-pqc-ca-g1) published at pki.sanctumsecops.com and crl.sanctumsecops.com.

DRAFT NOTICE. This is a v0.1 draft template. It has not been reviewed by counsel or approved by Sanctum SecOps LLC. Do not rely on it as a binding legal agreement until it is finalized.

1. Purpose

This Subscriber Agreement governs the relationship between Sanctum SecOps LLC ("Sanctum," "we," "us") and any entity ("Subscriber," "you") to which a certificate is issued under the Sanctum SecOps public key infrastructure described in the Certificate Policy (docs/CP.md) and Certification Practice Statement (docs/CPS.md).

2. Current scope — LAB/TEST only

As of this v0.1 draft, the only certificate hierarchy in operation is a LAB/TEST demonstration hierarchy generated by scripts/gen-ca.sh. No production certificate issuance service exists yet. This agreement is a placeholder to be finalized before any production subscriber enrollment.

3. Subscriber obligations (draft)

3.1. Provide accurate information in any certificate request.

3.2. Protect the private key corresponding to any issued certificate from unauthorized use or disclosure.

3.3. Promptly request revocation if a private key is compromised or lost, or if certificate information becomes inaccurate.

3.4. Use certificates only for purposes consistent with the applicable Certificate Policy (see CP Section 1.4, "Certificate usage").

4. Revocation

Sanctum may revoke a certificate under the circumstances described in CP Section 4.9.1. As of v0.1, no revocation circumstances have been formally adopted; this section is a placeholder.

5. Warranty disclaimer (draft)

CERTIFICATES ISSUED UNDER THE CURRENT LAB/TEST HIERARCHY ARE PROVIDED "AS IS," WITHOUT ANY WARRANTY OF ANY KIND, AND MUST NOT BE RELIED UPON FOR ANY PRODUCTION PURPOSE.

6. Governing law (draft)

Anticipated: State of New York, United States. Not finalized in v0.1.

7. Amendments

This agreement will be versioned alongside docs/CP.md and docs/CPS.md. Future versions will be published at public/policy/subscriber-agreement.html and .pdf, rendered from this same Markdown source by scripts/render-docs.py.

DRAFT v0.1 — for Brian Vicente's review. Rendered from a single Markdown source so HTML and PDF outputs can never diverge.

Rendered 2026-07-27 11:56 UTC by scripts/render-docs.py from a single Markdown source. HTML and PDF outputs are generated from the same source and can never diverge.