--------------------------------------------------------------------------- Certification Form for CSPs Oracle's JCE implements encryption using Cryptographic Service Providers (CSPs). Only CSPs signed by a trusted entity can be plugged into the JCE framework. You have indicated that you will be providing a CSP for JCE. Prior to submitting this form, you must first obtain a JCE Code Signing Certificate Request Number. Full instructions for this process can be found in the Java Cryptography Architecture documentation, where this form was located. When you have obtained the CSR number, please read, complete, sign, and send this form with the following heading: Subject Line: CSR # ____ Attention: Encryption Export Oracle, Inc. Global Trade Compliance You can fax the form: Fax # 1-650-607-0920 Or send as a PDF file attachment via email to exporteccn_ww@oracle.com, with "CSR #___" in the subject line. ------------------------------------------------------------------------- Certificate Request Number : ______ Overview Export controls on commercial encryption products are administered by the Bureau of Industry and Security (BIS) in the U.S. Department of Commerce. Rules governing exports of encryption are found in the Export Administration Regulations (EAR), 15 CFR Parts 730-774 which implements the Export Administration Act ("EAA" 50 U.S.C. App. 2401 et seq.). BIS requires that each entity exporting products be familiar with and comply with their affirmative obligations set forth in the Export Administration Regulations. Please note that the regulations are subject to change. We recommend that you obtain your own legal advice when attempting to export. In addition some countries may restrict certain levels of encryption imported into their country. We recommend consulting legal counsel in the appropriate country or the applicable governmental agencies in the particular county. If you developed your CSP inside the United States, and you want to export your CSP, it must be reviewed and approved for export by the Bureau of Industry and Security. If you developed your CSP outside the Unites States, then you may not have to submit your product for a technical review, but it may be subject to the requirements of the Export Administration Regulations. Certification I certify that I have read the above "Overview" and will comply with the Export Administration Regulations. I understand that any CSP developed in the United States may not be exported from the United States without prior approval by the US Government and that such approval is my responsibility. I further understand any CSP developed outside the United States nevertheless may be subject to the Export Administration Regulations. Company Name: ___________________________________ Address: ___________________________________ ___________________________________ ___________________________________ Signature: ___________________________________ Date: ___________________________________ Printed Name: ___________________________________ Title: ___________________________________